last executing test programs: 2m22.0525971s ago: executing program 2 (id=2928): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) read(r0, &(0x7f0000000240)=""/248, 0xf8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000b8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0019e229bd7000fddbdf250000000000000000080005009f1b12dd5d"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000003c0)={0x30, r6, 0x10, 0x70bd27, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0xd}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES32=r13, @ANYBLOB="04001d80c2bbe98ba6e566de01c28c6b064ae471910d8d267e0564a0396b3a35c40ee95b64145010369658de3551acc33f7e55085bb36b5e76d002963a69f02b0d353f9a8f8c1ed226b28cfb886eda9dcdc8ee4d055b7bb8b24ff7"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4050) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x2c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000804}, 0x20000002) 2m21.2013351s ago: executing program 3 (id=2933): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000000c0)=""/34, &(0x7f0000000140)=0x22) unshare(0x400) r4 = socket(0x1, 0x80802, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x7, 0x8, 0xc, 0x0, 0x1, 0xfffffffd}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc) shutdown(r4, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x3, 0x6, @remote}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x840) 2m21.148856883s ago: executing program 2 (id=2935): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0xd, 0x8001, 0x3, 0x0, 0x2, 0xb}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0xc000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r5) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000540)={r3, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x3, 0x6}, &(0x7f00000002c0)=0x90) 2m20.626008775s ago: executing program 2 (id=2943): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140)={0xb}, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'wg1\x00', 0x4000}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={r2, 0x0, 0x501a00, 0x0, 0xf6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r4, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r3}, 0x4) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbff"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 2m20.518569563s ago: executing program 1 (id=2944): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000580)="b9e20300600d0600fb9e34f086", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x30}, 0x1, 0x0, 0x0, 0x30000044}, 0x2400406c) 2m20.507333475s ago: executing program 4 (id=2945): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0xffffff62, &(0x7f00000001c0)}, 0x0) r2 = epoll_create(0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x208000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000480)={0x8000001f}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000140)="81a778d660d078bd2ef0e42d35fffe53c28a635c413698eb360c209aa9f2592a61311bf1cbe47b5f0915fc44d1c7be6a137b1dc753956a7443f599961f060abf143c93f57f37c4a1c4c7d1e4f8052715997e5a9915df54ec787f5d4b85c7e37ae5fdfe7f6b91345e0540369701edec17ac365a1c46fc4c4eb3aded11a0941e309bf52f1df1453940ecb556f3da829d728a2ad92f4ee486a87adc175a01c1b258b99391eb5e739abc3323df0094fe0da03536dc4728b9a511fcf3c5c354bb6c82f6a0406c112014b45f10fd068e92757afd8b25b27788a2c120d80c20cd0f139ad965f8b2533310f973036e07df282108606d5afaa18bb28c9b7005b12b65331f") getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000280)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000593", @ANYRES32=r9, @ANYBLOB], 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001000000acc47a5d88e7c354565731cc19a0540427846e16b4c00ad1f1c2492ddb5675008b2a302f43ffb013cdb11481553607a648c66dfe9cd15e39de98bd7a8eb4bcad28691c9823463afc17a2d582bbb5279b9496bb6c6f9c2a79152d9cca8fe5cfe76d"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="20000000100037041071ef53ea000000000000007e674c7beac9eb08260c638e575f25876ba016c0b4a063f82c302b31cbd7c6fa68b9b42837f1df1c4b0dbc8958d4ced91ad232fd1a5705a3c883b02ee162dd207fb27887842f97145e0b1a711310aa04f5fb2608c7e442f23a7e706f11f28fb1d29a70fe2cf67fb38d8d7a7d268970eced86828e61a675f7935d3c472eef501ce3737b33bc872443bc0dd667b49211f996000000804127b9", @ANYRES32=r9, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4045}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x3, @mcast1, 0x107}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e26, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}}}, 0x32) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(r10, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0xfffff001}], 0x18}], 0x1, 0x40800) 2m20.441103247s ago: executing program 3 (id=2946): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000000b06010200000000000000000000000005000100070000000900020073797a3100000000400007800c001a002a5b405b2b7d2d000c0019"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) vmsplice(r6, &(0x7f0000002300)=[{&(0x7f00000000c0)="d5f23a08142f69e76fc2bf0ee84f68345e5690597e2753dc4c5dac597b6f6a716d406f6a87f18f6284b9299ea6d2aaf5cbf3979fe4", 0x46}, {&(0x7f0000000140)="6bf77656799dd30ad7107cba", 0xa}, {&(0x7f0000000280)="5a8bac0d78a9c36ebd6ce97b5ef3b710c142d75c64f7a68860f275389339c6b077f07da4aad15f2381adbf31ebaa528ea6ad9b7825c3bafb1f74a6e9b4d8602c6305c25bfeaa5f56015fd7fc81774ce6f4fe933e6551bb6468ffbe2733ab79fb646e4fa41004f6dcebf78b8f046d7c5f3509366a63519225f904805b7e85c88443d7a7c3cb", 0x85}, {&(0x7f0000000340)="9bfc3f0cad0c962d02c2dce7630d0a6ac0b956766e16d716247b64a6ce5e377c861704cc16a7b2c31a9451", 0x2b}, {&(0x7f00000004c0)="70355a897fd2a67447c272c0d7420b9e91103710b7d4581e779bc516af825d7f44848176f090f7a82f0cc57c881e1a3c35c7f495fd4366cdb82775b1f6ea5cd3904935c231f36e47a00b5b34623ab66951a31437359833b899723e0911bf82c9b7fe2f5ee91ea895b2ba798cfbf6a205cd6fc76dfb772a6384420483531cea5af326b7dd6a99bd3980f6700d920e773a0c37c1a5d895c49f120ab397bb2bf045f15cf3642ec66efee9a120ac1abad8c991982a96fac3200d526fa2e275b8e42493d56d132b6296cc04da535ffb147424e72ddb29fbf018de21259a173436c67831fb6ad9f371d9dab8", 0xe9}, {&(0x7f00000006c0)="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"/374, 0x176}, {&(0x7f0000001300)="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", 0x1000}], 0x7, 0x1) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trmw'], 0xa) bind$bt_hci(r0, &(0x7f00000003c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 2m20.372748241s ago: executing program 4 (id=2947): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) r3 = socket$key(0xf, 0x3, 0x2) getsockname(r3, &(0x7f0000000180)=@alg, &(0x7f0000000200)=0x80) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) connect$netlink(r1, &(0x7f00000000c0)=@unspec, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) 2m20.278941535s ago: executing program 1 (id=2948): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x4, "1fe473a8"}, &(0x7f0000000700)=0xc) r1 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r1, &(0x7f0000000040)="d93937f5a4264335cdef726eb393eb56a2ec451dc4ecb1f447fac3129349ab1be7bb6772192b174c3443191a0c2a997d70b6cc8cbbb600796b48b39e808cd5f73f2c20ad2db514ded8a28b9cfcdfc11c1f7a8c44330a1db2c47a58a96f2b41f27ad6ed51f2e8dc8ae1f3116f11fc10710b926e7906be81a1749e9713a65f214e28fa14dca5d1ee203643176e4de37cd60b9f4d28ec3753ca01c9120519bf5b1b1a3be60c32b4453d9895eeb7a9a5d1ef0b7fc0aa8f4f3f50205bf5a16619a70224821ffd8348e85b7339c33738d64b6fc7", 0xd1, 0x4, &(0x7f0000000200)={0x23, 0x46, 0x6, 0xc5}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x4, &(0x7f0000000340)=@raw=[@exit, @jmp={0x5, 0x0, 0x9, 0x1, 0x3, 0x10, 0x10}, @map_idx={0x18, 0xa}], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280), &(0x7f0000000300)=0x4) listen(r3, 0x0) sendmmsg$inet6(r3, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004810) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6}) 2m20.16825123s ago: executing program 4 (id=2949): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2e}, 0x2, 0x1, 0x2, 0x3, 0xbc, 0xff}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x800}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x81}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x20}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x1}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000006c0)="8c3fe11ab9", 0x5, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b32, &(0x7f0000000040)) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004500005800000000002f9078000000e0e000c800b48065580000000010000800000086dd080088be000000001000000088f7ffff00000000080022eb00000000200000000200000000000000000000000800655800000000da398206a63a6b0af80dd70e0471aeeae6"], 0x0) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_generic(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r6], 0x24}, 0x1, 0x0, 0x0, 0x82004}, 0x8014) 2m20.093893038s ago: executing program 1 (id=2950): ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001440)={&(0x7f0000001240)=0x80000000, 0x6, &(0x7f0000001280)=[{}, {}], &(0x7f0000001400)}) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000003000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000730000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r2, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000540)=""/248, 0xf8}], 0x1}, 0xd}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xb, 0xfffff038}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) sendmmsg$inet6(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="33cd6fedb5797d427b03bbaf887dc7d36e20c5a46336453534e8a9bab283f97444a1a30198cddb2bdd198909b463778126a4bd57790ccc4500ea4a2c257fe1c55dab1015", 0x44}], 0x1}}, {{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000140)='o', 0x1}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@ipv6_newroute={0x2c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xff, 0x6}, [@RTA_PRIORITY={0x8, 0x6, 0xf7}, @RTA_OIF={0x8}]}, 0x2c}}, 0x24004010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0xe, 0x2e, &(0x7f00000000c0)="b9ffddc1559f78314d9cf313888eb193ded89603849b262853e60170d48d6fb87f45656e4d35f8eec0c178d1", 0x0, 0x600, 0x60000009, 0xffffff24, 0x0, 0x0, 0x0}, 0x18) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf}, @NL80211_ATTR_FRAME_MATCH={0x9e, 0x5b, "396138d5f720954489fb245cc17ca4b00bd3afce4190ba0e67231532ff438574e9fda3e037a4f0e4a4b35f134bef533ce1ccbad7a961266b3a9c106a56e56632e96ec9aa4c6441bec3870e7eb3b0f81c3b918411f16bc8216f4af0c9a925fc0cb3b1921077c659e105e82c2f2427daee28a3ecd2492302a76124c2697080400f138441a6a24b937fa45eec6afc28f0180708ddc79e250710971c"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x45) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001800dd8d00006e000000000002001000fe0400010024002008001e00020000000c0009"], 0x30}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000800000004000000000000050000000000000030612e20"], 0x0, 0x2c, 0x0, 0x1, 0x8}, 0x28) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000080)={0x81, @broadcast}) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000400)={0x60, r9, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:useradd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) 2m19.612534946s ago: executing program 0 (id=2952): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) listen(r0, 0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00074002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 2m19.208468686s ago: executing program 2 (id=2953): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback, 0xffffffffffffffff, 0x33, 0xc}, 0x20) (async, rerun: 64) r0 = socket(0x1d, 0x2, 0x6) (async) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@tcx}, 0x1c) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, 0x0) (async) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x3, 0x20040000, 0x4) (async, rerun: 32) recvfrom$packet(r0, &(0x7f0000000400)=""/21, 0x15, 0x2000, 0x0, 0x0) (async, rerun: 32) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in=@local, 0x4e24, 0xfffe, 0x4e24, 0x9, 0xa, 0x20, 0xa0, 0x87, 0x0, r2}, {0x7ff, 0x9dfe, 0xffffffffffffffff, 0x4, 0x95, 0x9, 0x2, 0xd6}, {0x2, 0x1, 0x0, 0x8}, 0xff, 0x6e6bbc, 0x0, 0x0, 0x2}, {{@in6=@local, 0x4d6, 0x2b}, 0x2, @in=@broadcast, 0x3500, 0x2, 0x2, 0x7, 0x6, 0x3, 0x1}}, 0xe8) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @hci={0x1f, 0x4, 0x4}, @qipcrtr={0x2a, 0x1}, @in={0x2, 0x4e24, @private=0xa010100}, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x6, 0x7}) (async) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e23, 0x6, @mcast1, 0x3}, 0x1c) 2m18.860552591s ago: executing program 3 (id=2954): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0801000016000100000000000000000064010100000000000002000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d63300"], 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 2m18.858066283s ago: executing program 4 (id=2955): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x43, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000140)={0x2, 0x7f, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x11, 0xffffffffffffffff, 0x8000) unshare(0x400) r3 = socket(0x2b, 0x1, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 2m18.843031314s ago: executing program 1 (id=2956): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0x2, 0xf7, 0xfffff03c}, {0x6, 0x6, 0x0, 0x57c}]}, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00'/14, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e6400dbb90000000c000200080001a24304cc4c9ad99308a17e7c2dcd920c1c19441fe70ee25bbf2e810f8e1c1636f7c743cf187ee3e7a3a19cab5b878b4906561a9907cbe7bc788c7170b688ea8f126ede488a3304a1f182712c6e1b3509a26fa0a22393f1b6f18eee07b7d4007b63a791495071df"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000340)=0x200, &(0x7f00000003c0)=0x2) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x4, 0x25dfdbfc, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xb}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3d, 0x0, 0x2}, {0x4, 0xff, 0x0, 0xe4ff}, {0x3, 0xfd}, {0x7000, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0xd8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000a7f9e89a0400000000000000000000daec", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x8884}, 0x8000) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70300000080ffff850000000c000000b709000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000290000009500000000000000b789ecbbc6ac0c3150a311fb6dd76016eb0638f9932eb1e277aa578083eb7bdb27641738cddca7ec43c92fe83b27c5e2"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcbf1b7dc05bab38b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r11, r10}, 0xc) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xf, 0x5, 0x1, 0x6, 0x0, r10, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=r1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000500000000004000"/28], 0x50) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x10}, 0x18) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1e000000a81300000a0000009c0e009a941c5a58ec82d4a56f04ffffdaba4b022b5a2656909f128909000000000000000000", @ANYRES32=0x1, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000040000000500"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x477e, 0x0, 0x0, 0x0, 0x75}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r14}}, @alu={0x7, 0x0, 0xd, 0x3, 0x8, 0xffffffffffffffe0, 0x4}, @map_fd={0x18, 0x4, 0x1, 0x0, r11}, @generic={0x6, 0x5, 0x8, 0xa, 0x9}]}, &(0x7f0000000640)='GPL\x00', 0x7, 0xd7, &(0x7f0000000b80)=""/215, 0x40f00, 0x3, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0xd, 0x800000d, 0x4}, 0x10, 0xc309, r9, 0x1, &(0x7f0000000d40)=[0xffffffffffffffff, r12, r12, r8, r13, r14, r14, r8, r13, r15], &(0x7f0000000d80)=[{0x0, 0x1, 0x2}], 0x10, 0x6}, 0x94) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket(0x10, 0x803, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f84843", 0x15}], 0x1}, 0x0) r18 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r18, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r16, 0x8982, &(0x7f0000000300)) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xe) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000000c0)='veth0_to_bond\x00') sendmsg$nl_route(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES64=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x10040000}, 0x84) 2m18.641048691s ago: executing program 0 (id=2957): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0xffffff62, &(0x7f00000001c0)}, 0x0) r2 = epoll_create(0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x208000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000480)={0x8000001f}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000140)="81a778d660d078bd2ef0e42d35fffe53c28a635c413698eb360c209aa9f2592a61311bf1cbe47b5f0915fc44d1c7be6a137b1dc753956a7443f599961f060abf143c93f57f37c4a1c4c7d1e4f8052715997e5a9915df54ec787f5d4b85c7e37ae5fdfe7f6b91345e0540369701edec17ac365a1c46fc4c4eb3aded11a0941e309bf52f1df1453940ecb556f3da829d728a2ad92f4ee486a87adc175a01c1b258b99391eb5e739abc3323df0094fe0da03536dc4728b9a511fcf3c5c354bb6c82f6a0406c112014b45f10fd068e92757afd8b25b27788a2c120d80c20cd0f139ad965f8b2533310f973036e07df282108606d5afaa18bb28c9b7005b12b65331f") getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000280)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000593", @ANYRES32=r9, @ANYBLOB], 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001000000acc47a5d88e7c354565731cc19a0540427846e16b4c00ad1f1c2492ddb5675008b2a302f43ffb013cdb11481553607a648c66dfe9cd15e39de98bd7a8eb4bcad28691c9823463afc17a2d582bbb5279b9496bb6c6f9c2a79152d9cca8fe5cfe76d"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="20000000100037041071ef53ea000000000000007e674c7beac9eb08260c638e575f25876ba016c0b4a063f82c302b31cbd7c6fa68b9b42837f1df1c4b0dbc8958d4ced91ad232fd1a5705a3c883b02ee162dd207fb27887842f97145e0b1a711310aa04f5fb2608c7e442f23a7e706f11f28fb1d29a70fe2cf67fb38d8d7a7d268970eced86828e61a675f7935d3c472eef501ce3737b33bc872443bc0dd667b49211f996000000804127b9", @ANYRES32=r9, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4045}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x3, @mcast1, 0x107}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e26, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}}}, 0x32) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(r10, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0xfffff001}], 0x18}], 0x1, 0x40800) 2m18.366086203s ago: executing program 2 (id=2958): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9e20300600d0600fb9e34f086f8", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2400406c) 2m18.361696438s ago: executing program 3 (id=2959): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) 2m18.271443066s ago: executing program 4 (id=2960): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1, 0x4, "1fe473a8"}, &(0x7f0000000700)=0xc) r2 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r2, &(0x7f0000000040)="d93937f5a4264335cdef726eb393eb56a2ec451dc4ecb1f447fac3129349ab1be7bb6772192b174c3443191a0c2a997d70b6cc8cbbb600796b48b39e808cd5f73f2c20ad2db514ded8a28b9cfcdfc11c1f7a8c44330a1db2c47a58a96f2b41f27ad6ed51f2e8dc8ae1f3116f11fc10710b926e7906be81a1749e9713a65f214e28fa14dca5d1ee203643176e4de37cd60b9f4d28ec3753ca01c9120519bf5b1b1a3be60c32b4453d9895eeb7a9a5d1ef0b7fc0aa8f4f3f50205bf5a16619a70224821ffd8348e85b7339c33738d64b6fc7", 0xd1, 0x4, &(0x7f0000000200)={0x23, 0x46, 0x6, 0xc5}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x4, &(0x7f0000000340)=@raw=[@exit, @jmp={0x5, 0x0, 0x9, 0x1, 0x3, 0x10, 0x10}, @map_idx={0x18, 0xa}], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280), &(0x7f0000000300)=0x4) listen(r4, 0x0) sendmmsg$inet6(r4, &(0x7f0000008c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004810) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) 2m18.172996501s ago: executing program 0 (id=2961): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000130001010000000000009e5a07000000", @ANYRES32=r1, @ANYBLOB="18040100000000000c001a8008000580040001"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (fail_nth: 7) 2m18.026696204s ago: executing program 1 (id=2962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffd}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000380)={0x520, 0xd, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4fc, 0x3, 0x0, 0x1, [{0x194, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x158, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc1, 0x1, "d503dc0b9f32166f28df13515d7aca114827fb48329cfb061acbabda4735999c5601fe004c139656ea7e782aedfe1a1ab336d2c2799aa6652e63acfb1eca8797afc2002ca0795a2bb9fdcfcfd40503c2212da05bed8bc14afaa55d8bd5aafc3d0aee6a2faf6ea4ef5216f42736271c44f511b101f1d5ad63e4ee004b4bb115c7664a4992f0acf03a1e3f918878a98077514a10a6f68fb431457257344127b6eca775d514f6bd2c212b7fc5bb77e98d7bba02c14da08548bdd23b47f341"}, @NFTA_DATA_VALUE={0x60, 0x1, "532f3394a8a2e05214cb7d11c64b99e1e7c78537456f5aaf0f7411e41749dd3cdf60c768420ef3577dccb8cc5c1b1ce25bcc099d9bfbfff5ebea71db714d042801b70d1a9cbfbb12607ecf9b81fe0c25a23141e0b4cd5e7561a4cada"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY={0x38, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x110, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x65, 0x1, "8453b9f1583539e1ba72d8568dbdf1defa7616c60701fe3dbb2d0db408ed46c0845f35ee341394e0dc6c814ddaed1d7592b2416f740f6af9c03e4d88b635734e9791ce1c0e2953791e247f86f4173038ea19180e16b56f3e04b4851d110f540e40"}, @NFTA_DATA_VALUE={0xa1, 0x1, "06ee2c72f80fb27d179c3df2dadcf5c2a752d65fb19017dae53d91ab79a5e7bcc217b7fd794d92c3fa19d0ecf03cb4768fa754fb610529fed9b8364b0cff8688884deee48fa6371bf524775bd080db0de68d0e073866e84e1360c9786aa9f16a42f474a062c5c5e957839bf3a6b4d8d0630aeabda276beae53ac51d69ad5fdf2ce958543af4eeeb3a20748f5c8ee0acb7ead6cd4e8f02b866c0483f781"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @nat={{0x8}, @void}}]}, {0x238, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x54, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2079a22d}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x10000000}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x4a66}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x174, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x101, 0x1, "db8da641cc0d32e0b0996fd88090181ffcbd5c2b35e791aa0465992e9cfacef18181f6ac7359b0935cb2b19b600d895566dbfc64af634685bbcce095c670edc77e6c6db5927a06c4a90127c87b8cce99643da3bfc1e36e63c6d89423784f4e7b288af22e93875b8fc0d56eae46f3f4ae4484423ec8adb60a8dee2b47faf687fd92f27980e9e8531243145639f1ea989b17a68d368dfc700bb322828296b2d48b9d415da3a2e915dbd28d0d9471a376bd41111562dff1d9c872f4e4fd493c7d9a09559343c720cb583f7c7f9480c0a53ba4a33e7ae7d55702bf6e11d24d09c10e5a84208f65086f345daf2439441bb301d39943f86cea9761275c2a2364"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x33}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x520}, 0x1, 0x0, 0x0, 0x20040800}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in6=@mcast1, 0x0, 0xecdf, 0x0, 0x200}, {@in=@broadcast, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x8, 0x4007ff, 0x0, 0x400}, {}, 0x0, 0x3507, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0xc0}}]}, 0x194}}, 0x4050) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000340)={0x4, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0x8b, 0x7, 0x8, 0x8, 0xfe, 0x8}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x7d, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f00000001c0)=0x8) 2m18.003572174s ago: executing program 2 (id=2963): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140)={0xb}, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'wg1\x00', 0x4000}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={r2, 0x0, 0x501a00, 0x0, 0xf6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r5, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r3}, 0x4) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbff"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 2m17.948892096s ago: executing program 3 (id=2964): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64841}, 0x40000) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffdcf, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x19, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, 0x0}, 0x40408c0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a36"], 0x1c}}, 0x80) sendto$inet(r4, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000100)=""/24, 0x419e6b756b15f75, 0xc9100120, 0x0, 0xfffffffffffffd25) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000140)={r0}) write(r0, &(0x7f0000000000)="3f000000010000", 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) 2m17.392508859s ago: executing program 0 (id=2965): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="00fe0f0000000000000000000a000000000000000000001420000100", @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m17.110380384s ago: executing program 4 (id=2966): socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) (async) socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x4, 0x1}, 0x6) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @mcast2, 0x80000001}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @mcast2, 0x80000001}, 0x1c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @loopback}, 0x1c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000001c0)='nfc\x00', 0x404700, 0x0, 0x3, &(0x7f0000000240), 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x46, 0x0, 0x0) (async) syz_emit_ethernet(0x46, 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x4, 0x0, &(0x7f0000000000)=0xffffffffffffff5b) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}}, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20048880) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20048880) syz_genetlink_get_family_id$nbd(0x0, r4) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r4) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r4) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x36, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket(0x5, 0x5, 0x4000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) 2m16.981854182s ago: executing program 0 (id=2967): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e30"], 0x58}}, 0x20008000) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) (async) read$nci(r0, &(0x7f0000000040)=""/1, 0x1) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0), 0x8) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000ffffffff00000000", @ANYRES32=0x1, @ANYBLOB="07fb5ab1df83caeb0502040000e36d9411b823d4f093902fb9e63d0c00000000002300", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000200"/28], 0x50) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) (async, rerun: 64) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x3}}, @struct={0xb, 0x6, 0x0, 0x4, 0x1, 0x3, [{0x8, 0x5, 0x5}, {0xc, 0x0, 0x200}, {0xe, 0x0, 0x8}, {0x10, 0x1, 0xfffffffe}, {0xc, 0x4, 0x4}, {0xc, 0x2, 0x1ff}]}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x6}}]}, {0x0, [0x61]}}, &(0x7f0000000480)=""/104, 0xab, 0x68, 0x0, 0x6, 0x10000}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000009"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r9, &(0x7f0000000380)=[{&(0x7f0000000300)=""/13}, {&(0x7f0000000640)=""/262}, {&(0x7f0000000340)=""/43}], 0x20000000000003e5) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e000000f8ffffff020000000000000018c00600", @ANYRES32=r6, @ANYBLOB='\t\x00'/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="aca8cc060fea1bb3010000000f00000000000000", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0xfffffffffffffe69, 0x2e, 0x20, 0x70bd27, 0x25dfdbff, {0x4}, [@nested={0x8, 0x16, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20046850}, 0x8004) 2m16.966456526s ago: executing program 3 (id=2968): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 2m16.858397673s ago: executing program 1 (id=2969): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000f7230001fee36a7d8257e8e4f27d7a7bfd0026bd7000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="000000040000bf40af8beb42a300"/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="640000001000000200000000fddbdf2500000000", @ANYRES32=r6, @ANYBLOB="11980400419804001c001280090001007866726d000000000c000280080002000400002008000a00", @ANYRES32=0x0, @ANYBLOB="0800fdfffffffffeffff25080025000100"/32], 0x64}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x17}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="f618", 0x2}], 0x1}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xd0, &(0x7f0000003e40)=""/208, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000020009000200817245d70000000005000400000005001400078008001240080100000800114000000000050001000600000005000500000000000d000300686173683a6d6163"], 0x5c}}, 0x4004804) 2m16.448633822s ago: executing program 0 (id=2970): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x43, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000140)={0x2, 0x7f, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x11, 0xffffffffffffffff, 0x8000) unshare(0x400) r3 = socket(0x2b, 0x1, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 0s ago: executing program 32 (id=2970): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x43, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000140)={0x2, 0x7f, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x11, 0xffffffffffffffff, 0x8000) unshare(0x400) r3 = socket(0x2b, 0x1, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) kernel console output (not intermixed with test programs): queues (3633) out of range (got 69161) [ 248.358805][T11247] netlink: 'syz.0.1714': attribute type 25 has an invalid length. [ 248.380145][T11247] netlink: 'syz.0.1714': attribute type 3 has an invalid length. [ 248.389068][T11247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1714'. [ 248.408294][T11244] 8021q: adding VLAN 0 to HW filter on device bond7 [ 248.495095][T11251] macvlan8: entered promiscuous mode [ 248.500876][T11251] macvlan8: entered allmulticast mode [ 248.506712][T11251] bond7: entered allmulticast mode [ 248.512352][T11251] bond7: entered promiscuous mode [ 248.518358][T11251] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 248.527904][T11251] team0: Port device macvlan8 added [ 248.564570][T11256] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1715'. [ 248.667876][T11261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1718'. [ 248.793893][T11266] ip6gre2: entered promiscuous mode [ 248.815810][T11268] netlink: 'syz.4.1717': attribute type 1 has an invalid length. [ 248.852863][T11266] ip6gre2: entered allmulticast mode [ 248.925697][ T7876] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 248.951276][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 248.963643][ T7876] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 248.995529][ T9] bridge0: entered promiscuous mode [ 249.680763][ T5745] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 249.710463][ T5745] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 249.860355][T11286] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.870623][T11286] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.310721][T11286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.348741][T11286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.632159][T11286] veth1_vlan: left allmulticast mode [ 250.674117][T11286] bond1: left allmulticast mode [ 250.679779][T11286] bond1: left promiscuous mode [ 250.702037][T11286] bond3: left allmulticast mode [ 250.707179][T11286] bond3: left promiscuous mode [ 250.719233][T11286] gretap0: left allmulticast mode [ 250.779371][T11286] bond6: left allmulticast mode [ 250.784500][T11286] bond6: left promiscuous mode [ 250.807447][T11286] bond7: left allmulticast mode [ 250.814873][T11286] bond7: left promiscuous mode [ 250.823345][T11291] veth0: entered promiscuous mode [ 250.914454][T11291] veth0: left promiscuous mode [ 251.443897][ T7877] net_ratelimit: 12 callbacks suppressed [ 251.443920][ T7877] IPVS: rr: FWM 3 0x00000003 - no destination available [ 251.581300][T11345] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 251.595555][T11345] bridge4: entered allmulticast mode [ 251.622775][T11345] netlink: 'syz.4.1736': attribute type 1 has an invalid length. [ 251.698609][T11348] syzkaller0: entered promiscuous mode [ 251.706046][T11348] syzkaller0: entered allmulticast mode [ 251.948886][T11365] syzkaller0: entered promiscuous mode [ 251.955086][T11365] syzkaller0: entered allmulticast mode [ 252.719932][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.035821][T11324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.878429][T11378] tipc: Enabled bearer , priority 0 [ 254.902481][T11379] syzkaller0: entered promiscuous mode [ 254.912108][T11379] syzkaller0: entered allmulticast mode [ 254.926402][T11376] tipc: Resetting bearer [ 254.942992][T11375] tipc: Resetting bearer [ 255.012465][T11390] FAULT_INJECTION: forcing a failure. [ 255.012465][T11390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.038224][T11375] tipc: Disabling bearer [ 255.057272][T11390] CPU: 0 UID: 0 PID: 11390 Comm: syz.0.1749 Not tainted syzkaller #0 PREEMPT(full) [ 255.057303][T11390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.057316][T11390] Call Trace: [ 255.057325][T11390] [ 255.057334][T11390] dump_stack_lvl+0xe8/0x150 [ 255.057366][T11390] should_fail_ex+0x412/0x560 [ 255.057401][T11390] _copy_from_user+0x2d/0xb0 [ 255.057431][T11390] kstrtouint_from_user+0xd6/0x180 [ 255.057461][T11390] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 255.057507][T11390] proc_fail_nth_write+0x8e/0x210 [ 255.057533][T11390] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 255.057567][T11390] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 255.057595][T11390] vfs_write+0x29a/0xb90 [ 255.057635][T11390] ? __pfx_vfs_write+0x10/0x10 [ 255.057668][T11390] ? __fget_files+0x2a/0x420 [ 255.057698][T11390] ? __fget_files+0x3a0/0x420 [ 255.057728][T11390] ? __fget_files+0x2a/0x420 [ 255.057764][T11390] ksys_write+0x150/0x270 [ 255.057797][T11390] ? __pfx_ksys_write+0x10/0x10 [ 255.057837][T11390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.057859][T11390] do_syscall_64+0x15f/0xf80 [ 255.057879][T11390] ? trace_irq_disable+0x3b/0x140 [ 255.057908][T11390] ? clear_bhb_loop+0x40/0x90 [ 255.057933][T11390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.057953][T11390] RIP: 0033:0x7f780a15d68e [ 255.057972][T11390] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 255.057988][T11390] RSP: 002b:00007f780b0d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.058011][T11390] RAX: ffffffffffffffda RBX: 00007f780b0d96c0 RCX: 00007f780a15d68e [ 255.058025][T11390] RDX: 0000000000000001 RSI: 00007f780b0d90a0 RDI: 0000000000000004 [ 255.058037][T11390] RBP: 00007f780b0d9090 R08: 0000000000000000 R09: 0000000000000000 [ 255.058049][T11390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.058060][T11390] R13: 00007f780a416038 R14: 00007f780a415fa0 R15: 00007ffdc3cc4cf8 [ 255.058095][T11390] [ 255.290786][T11394] netlink: 'syz.3.1750': attribute type 9 has an invalid length. [ 255.344073][T11398] FAULT_INJECTION: forcing a failure. [ 255.344073][T11398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.368802][T11399] tipc: Enabling of bearer rejected, failed to enable media [ 255.375879][T11398] CPU: 0 UID: 0 PID: 11398 Comm: syz.1.1751 Not tainted syzkaller #0 PREEMPT(full) [ 255.375908][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.375920][T11398] Call Trace: [ 255.375927][T11398] [ 255.375935][T11398] dump_stack_lvl+0xe8/0x150 [ 255.375963][T11398] should_fail_ex+0x412/0x560 [ 255.375993][T11398] _copy_from_user+0x2d/0xb0 [ 255.376022][T11398] ___sys_sendmsg+0x1c6/0x360 [ 255.376044][T11398] ? __lock_acquire+0x6b5/0x2cf0 [ 255.376070][T11398] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.376126][T11398] ? __fget_files+0x2a/0x420 [ 255.376147][T11398] ? __fget_files+0x3a0/0x420 [ 255.376187][T11398] __x64_sys_sendmsg+0x1bd/0x2a0 [ 255.376211][T11398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.376242][T11398] ? __pfx_ksys_write+0x10/0x10 [ 255.376278][T11398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.376298][T11398] do_syscall_64+0x15f/0xf80 [ 255.376316][T11398] ? trace_irq_disable+0x3b/0x140 [ 255.376344][T11398] ? clear_bhb_loop+0x40/0x90 [ 255.376366][T11398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.376384][T11398] RIP: 0033:0x7efd9e79ce59 [ 255.376402][T11398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.376419][T11398] RSP: 002b:00007efd9f588028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.376441][T11398] RAX: ffffffffffffffda RBX: 00007efd9ea15fa0 RCX: 00007efd9e79ce59 [ 255.376454][T11398] RDX: 0000000000000000 RSI: 0000200000001c00 RDI: 0000000000000005 [ 255.376466][T11398] RBP: 00007efd9f588090 R08: 0000000000000000 R09: 0000000000000000 [ 255.376477][T11398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.376488][T11398] R13: 00007efd9ea16038 R14: 00007efd9ea15fa0 R15: 00007fff4c656678 [ 255.376520][T11398] [ 255.896200][T11401] syzkaller0: entered promiscuous mode [ 255.903690][T11401] syzkaller0: entered allmulticast mode [ 256.058429][T11423] xt_cgroup: invalid path, errno=-2 [ 256.170533][T11424] __nla_validate_parse: 75 callbacks suppressed [ 256.170557][T11424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1757'. [ 256.257936][T11431] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1760'. [ 256.452015][T11439] tipc: Enabled bearer , priority 0 [ 256.459854][T11439] syzkaller0: entered promiscuous mode [ 256.466108][T11439] syzkaller0: entered allmulticast mode [ 256.477624][T11438] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1763'. [ 256.485781][T11443] FAULT_INJECTION: forcing a failure. [ 256.485781][T11443] name failslab, interval 1, probability 0, space 0, times 0 [ 256.494853][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'. [ 256.509087][T11443] CPU: 1 UID: 0 PID: 11443 Comm: syz.3.1766 Not tainted syzkaller #0 PREEMPT(full) [ 256.509114][T11443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.509125][T11443] Call Trace: [ 256.509133][T11443] [ 256.509141][T11443] dump_stack_lvl+0xe8/0x150 [ 256.509171][T11443] should_fail_ex+0x412/0x560 [ 256.509202][T11443] should_failslab+0xa8/0x100 [ 256.509233][T11443] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 256.509259][T11443] ? __alloc_skb+0x186/0x7d0 [ 256.509276][T11443] ? __alloc_skb+0x1d0/0x7d0 [ 256.509291][T11443] ? __local_bh_enable_ip+0xd0/0x130 [ 256.509316][T11443] __alloc_skb+0x1d0/0x7d0 [ 256.509341][T11443] netlink_sendmsg+0x5d4/0xb40 [ 256.509373][T11443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.509409][T11443] ? aa_sock_msg_perm+0xf1/0x1b0 [ 256.509437][T11443] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 256.509466][T11443] ____sys_sendmsg+0x972/0x9f0 [ 256.509487][T11443] ? __might_fault+0xaf/0x130 [ 256.509518][T11443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.509549][T11443] ? import_iovec+0x73/0xa0 [ 256.509581][T11443] ___sys_sendmsg+0x2a5/0x360 [ 256.509605][T11443] ? __lock_acquire+0x6b5/0x2cf0 [ 256.509632][T11443] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.509693][T11443] ? __fget_files+0x2a/0x420 [ 256.509715][T11443] ? __fget_files+0x3a0/0x420 [ 256.509749][T11443] __x64_sys_sendmsg+0x1bd/0x2a0 [ 256.509774][T11443] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.509805][T11443] ? __pfx_ksys_write+0x10/0x10 [ 256.509843][T11443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.509864][T11443] do_syscall_64+0x15f/0xf80 [ 256.509883][T11443] ? trace_irq_disable+0x3b/0x140 [ 256.509911][T11443] ? clear_bhb_loop+0x40/0x90 [ 256.509934][T11443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.509952][T11443] RIP: 0033:0x7f6106b9ce59 [ 256.509972][T11443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.509988][T11443] RSP: 002b:00007f61079f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.510010][T11443] RAX: ffffffffffffffda RBX: 00007f6106e15fa0 RCX: 00007f6106b9ce59 [ 256.510024][T11443] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 256.510035][T11443] RBP: 00007f61079f0090 R08: 0000000000000000 R09: 0000000000000000 [ 256.510047][T11443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.510058][T11443] R13: 00007f6106e16038 R14: 00007f6106e15fa0 R15: 00007ffe1d02eab8 [ 256.510092][T11443] [ 256.757876][ T3315] IPVS: rr: FWM 3 0x00000003 - no destination available [ 256.788723][T11447] tipc: Resetting bearer [ 256.818154][T11437] tipc: Resetting bearer [ 256.828629][T11449] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1762'. [ 256.862361][T11437] tipc: Disabling bearer [ 257.091677][T11457] FAULT_INJECTION: forcing a failure. [ 257.091677][T11457] name failslab, interval 1, probability 0, space 0, times 0 [ 257.106339][T11457] CPU: 0 UID: 0 PID: 11457 Comm: syz.4.1770 Not tainted syzkaller #0 PREEMPT(full) [ 257.106368][T11457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.106390][T11457] Call Trace: [ 257.106399][T11457] [ 257.106408][T11457] dump_stack_lvl+0xe8/0x150 [ 257.106440][T11457] should_fail_ex+0x412/0x560 [ 257.106474][T11457] should_failslab+0xa8/0x100 [ 257.106509][T11457] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 257.106539][T11457] ? __alloc_skb+0x186/0x7d0 [ 257.106557][T11457] ? __alloc_skb+0x1d0/0x7d0 [ 257.106573][T11457] ? __local_bh_enable_ip+0xd0/0x130 [ 257.106599][T11457] __alloc_skb+0x1d0/0x7d0 [ 257.106627][T11457] netlink_sendmsg+0x5d4/0xb40 [ 257.106670][T11457] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.106699][T11457] ? aa_sock_msg_perm+0xf1/0x1b0 [ 257.106730][T11457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.106764][T11457] ____sys_sendmsg+0x972/0x9f0 [ 257.106787][T11457] ? __might_fault+0xaf/0x130 [ 257.106823][T11457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.106857][T11457] ? import_iovec+0x73/0xa0 [ 257.106893][T11457] ___sys_sendmsg+0x2a5/0x360 [ 257.106915][T11457] ? __lock_acquire+0x6b5/0x2cf0 [ 257.106945][T11457] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.107010][T11457] ? __fget_files+0x2a/0x420 [ 257.107036][T11457] ? __fget_files+0x3a0/0x420 [ 257.107074][T11457] __x64_sys_sendmsg+0x1bd/0x2a0 [ 257.107101][T11457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.107134][T11457] ? __pfx_ksys_write+0x10/0x10 [ 257.107175][T11457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.107199][T11457] do_syscall_64+0x15f/0xf80 [ 257.107219][T11457] ? trace_irq_disable+0x3b/0x140 [ 257.107250][T11457] ? clear_bhb_loop+0x40/0x90 [ 257.107277][T11457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.107297][T11457] RIP: 0033:0x7ff7ee39ce59 [ 257.107318][T11457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.107336][T11457] RSP: 002b:00007ff7ef22b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.107361][T11457] RAX: ffffffffffffffda RBX: 00007ff7ee615fa0 RCX: 00007ff7ee39ce59 [ 257.107376][T11457] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 257.107397][T11457] RBP: 00007ff7ef22b090 R08: 0000000000000000 R09: 0000000000000000 [ 257.107409][T11457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.107421][T11457] R13: 00007ff7ee616038 R14: 00007ff7ee615fa0 R15: 00007ffff4d0c788 [ 257.107454][T11457] [ 257.537046][T11468] sctp: [Deprecated]: syz.2.1771 (pid 11468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.537046][T11468] Use struct sctp_sack_info instead [ 257.569194][T11470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1775'. [ 257.631537][T11467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1773'. [ 257.740220][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1776'. [ 257.852094][T11478] gretap0: entered promiscuous mode [ 257.868627][T11482] FAULT_INJECTION: forcing a failure. [ 257.868627][T11482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.878926][T11478] macvlan2: entered allmulticast mode [ 257.882951][T11482] CPU: 1 UID: 0 PID: 11482 Comm: syz.4.1777 Not tainted syzkaller #0 PREEMPT(full) [ 257.882978][T11482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.882990][T11482] Call Trace: [ 257.882997][T11482] [ 257.883005][T11482] dump_stack_lvl+0xe8/0x150 [ 257.883034][T11482] should_fail_ex+0x412/0x560 [ 257.883064][T11482] _copy_from_iter+0x1d3/0x1670 [ 257.883093][T11482] ? rcu_is_watching+0x15/0xb0 [ 257.883122][T11482] ? __pfx__copy_from_iter+0x10/0x10 [ 257.883155][T11482] ? netlink_sendmsg+0x650/0xb40 [ 257.883175][T11482] ? skb_put+0x11b/0x210 [ 257.883197][T11482] netlink_sendmsg+0x6c0/0xb40 [ 257.883234][T11482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.883259][T11482] ? aa_sock_msg_perm+0xf1/0x1b0 [ 257.883285][T11482] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.883314][T11482] ____sys_sendmsg+0x972/0x9f0 [ 257.883334][T11482] ? __might_fault+0xaf/0x130 [ 257.883364][T11482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.883394][T11482] ? import_iovec+0x73/0xa0 [ 257.883432][T11482] ___sys_sendmsg+0x2a5/0x360 [ 257.883451][T11482] ? __lock_acquire+0x6b5/0x2cf0 [ 257.883476][T11482] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.883532][T11482] ? __fget_files+0x2a/0x420 [ 257.883553][T11482] ? __fget_files+0x3a0/0x420 [ 257.883585][T11482] __x64_sys_sendmsg+0x1bd/0x2a0 [ 257.883609][T11482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.883638][T11482] ? __pfx_ksys_write+0x10/0x10 [ 257.883674][T11482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.883694][T11482] do_syscall_64+0x15f/0xf80 [ 257.883712][T11482] ? trace_irq_disable+0x3b/0x140 [ 257.883740][T11482] ? clear_bhb_loop+0x40/0x90 [ 257.883763][T11482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.883782][T11482] RIP: 0033:0x7ff7ee39ce59 [ 257.883800][T11482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.883816][T11482] RSP: 002b:00007ff7ef22b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.883837][T11482] RAX: ffffffffffffffda RBX: 00007ff7ee615fa0 RCX: 00007ff7ee39ce59 [ 257.883851][T11482] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 257.883862][T11482] RBP: 00007ff7ef22b090 R08: 0000000000000000 R09: 0000000000000000 [ 257.883874][T11482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.883885][T11482] R13: 00007ff7ee616038 R14: 00007ff7ee615fa0 R15: 00007ffff4d0c788 [ 257.883915][T11482] [ 258.162969][T11478] gretap0: entered allmulticast mode [ 258.298353][T11489] netlink: 'syz.4.1780': attribute type 1 has an invalid length. [ 259.014011][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'. [ 259.027342][T11509] veth0: entered promiscuous mode [ 259.038713][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1787'. [ 259.589408][T11523] openvswitch: netlink: Actions may not be safe on all matching packets [ 259.720917][T11529] FAULT_INJECTION: forcing a failure. [ 259.720917][T11529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.731252][T11526] 8021q: adding VLAN 0 to HW filter on device bond5 [ 259.750205][T11529] CPU: 0 UID: 0 PID: 11529 Comm: syz.4.1794 Not tainted syzkaller #0 PREEMPT(full) [ 259.750232][T11529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.750244][T11529] Call Trace: [ 259.750251][T11529] [ 259.750260][T11529] dump_stack_lvl+0xe8/0x150 [ 259.750291][T11529] should_fail_ex+0x412/0x560 [ 259.750325][T11529] _copy_from_user+0x2d/0xb0 [ 259.750356][T11529] __copy_msghdr+0x3c5/0x5b0 [ 259.750384][T11529] ___sys_sendmsg+0x213/0x360 [ 259.750405][T11529] ? __lock_acquire+0x6b5/0x2cf0 [ 259.750433][T11529] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.750496][T11529] ? __fget_files+0x2a/0x420 [ 259.750521][T11529] ? __fget_files+0x3a0/0x420 [ 259.750556][T11529] __x64_sys_sendmsg+0x1bd/0x2a0 [ 259.750583][T11529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.750617][T11529] ? __pfx_ksys_write+0x10/0x10 [ 259.750654][T11529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.750681][T11529] do_syscall_64+0x15f/0xf80 [ 259.750699][T11529] ? trace_irq_disable+0x3b/0x140 [ 259.750728][T11529] ? clear_bhb_loop+0x40/0x90 [ 259.750755][T11529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.750775][T11529] RIP: 0033:0x7ff7ee39ce59 [ 259.750793][T11529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.750808][T11529] RSP: 002b:00007ff7ef22b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.750830][T11529] RAX: ffffffffffffffda RBX: 00007ff7ee615fa0 RCX: 00007ff7ee39ce59 [ 259.750844][T11529] RDX: 0000000000000000 RSI: 0000200000001c00 RDI: 0000000000000005 [ 259.750855][T11529] RBP: 00007ff7ef22b090 R08: 0000000000000000 R09: 0000000000000000 [ 259.750867][T11529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.750879][T11529] R13: 00007ff7ee616038 R14: 00007ff7ee615fa0 R15: 00007ffff4d0c788 [ 259.750912][T11529] [ 260.039293][T11526] macvlan3: entered promiscuous mode [ 260.044830][T11526] macvlan3: entered allmulticast mode [ 260.051611][T11526] bond5: entered allmulticast mode [ 260.056956][T11526] bond5: entered promiscuous mode [ 260.087954][T11526] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 260.109295][T11526] team0: Port device macvlan3 added [ 260.218429][T11541] netlink: 'syz.0.1798': attribute type 1 has an invalid length. [ 260.399841][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 260.479438][T11551] netlink: 'syz.3.1800': attribute type 83 has an invalid length. [ 260.648096][T11560] only policy match revision 0 supported [ 260.648119][T11560] unable to load match [ 261.152711][T11579] IPv6: NLM_F_REPLACE set, but no existing node found! [ 261.321679][T11318] IPVS: starting estimator thread 0... [ 261.429752][T11585] IPVS: using max 26 ests per chain, 62400 per kthread [ 261.439887][T11587] __nla_validate_parse: 8 callbacks suppressed [ 261.439910][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1814'. [ 261.621570][T11591] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1816'. [ 261.731172][T11593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1817'. [ 261.803488][T11593] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.127442][T11609] xt_hashlimit: size too large, truncated to 1048576 [ 262.142971][T11611] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 262.166740][T11611] netlink: 'syz.3.1824': attribute type 1 has an invalid length. [ 262.293680][T11613] netlink: 'syz.4.1823': attribute type 1 has an invalid length. [ 262.319848][T11613] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1823'. [ 262.320585][ T7880] IPVS: rr: FWM 3 0x00000003 - no destination available [ 262.351191][T11621] xt_hashlimit: invalid rate [ 262.372015][T11621] xt_hashlimit: invalid rate [ 262.797944][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1836'. [ 262.808131][T11646] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 262.960928][T11654] FAULT_INJECTION: forcing a failure. [ 262.960928][T11654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.996636][T11645] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.047818][T11654] CPU: 0 UID: 0 PID: 11654 Comm: syz.1.1838 Not tainted syzkaller #0 PREEMPT(full) [ 263.047847][T11654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.047859][T11654] Call Trace: [ 263.047867][T11654] [ 263.047875][T11654] dump_stack_lvl+0xe8/0x150 [ 263.047905][T11654] should_fail_ex+0x412/0x560 [ 263.047937][T11654] _copy_to_user+0x31/0xb0 [ 263.047970][T11654] simple_read_from_buffer+0xe1/0x170 [ 263.048001][T11654] proc_fail_nth_read+0x1bb/0x230 [ 263.048029][T11654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.048058][T11654] ? rw_verify_area+0x2a6/0x4d0 [ 263.048082][T11654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.048107][T11654] vfs_read+0x20c/0xa70 [ 263.048138][T11654] ? __pfx___mutex_lock+0x10/0x10 [ 263.048159][T11654] ? __pfx_vfs_read+0x10/0x10 [ 263.048187][T11654] ? __fget_files+0x2a/0x420 [ 263.048216][T11654] ? __fget_files+0x3a0/0x420 [ 263.048236][T11654] ? __fget_files+0x2a/0x420 [ 263.048269][T11654] ksys_read+0x150/0x270 [ 263.048300][T11654] ? __pfx_ksys_read+0x10/0x10 [ 263.048335][T11654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.048358][T11654] do_syscall_64+0x15f/0xf80 [ 263.048386][T11654] ? trace_irq_disable+0x3b/0x140 [ 263.048422][T11654] ? clear_bhb_loop+0x40/0x90 [ 263.048447][T11654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.048465][T11654] RIP: 0033:0x7efd9e75d68e [ 263.048486][T11654] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 263.048503][T11654] RSP: 002b:00007efd9f587fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.048526][T11654] RAX: ffffffffffffffda RBX: 00007efd9f5886c0 RCX: 00007efd9e75d68e [ 263.048541][T11654] RDX: 000000000000000f RSI: 00007efd9f5880a0 RDI: 0000000000000004 [ 263.048554][T11654] RBP: 00007efd9f588090 R08: 0000000000000000 R09: 0000000000000000 [ 263.048566][T11654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.048578][T11654] R13: 00007efd9ea16038 R14: 00007efd9ea15fa0 R15: 00007fff4c656678 [ 263.048614][T11654] [ 263.538517][T11633] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 263.541215][T11659] syzkaller1: entered promiscuous mode [ 263.570728][T11659] syzkaller1: entered allmulticast mode [ 263.625116][T11671] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1844'. [ 263.981280][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1846'. [ 264.181492][T11688] SET target dimension over the limit! [ 264.222044][T11690] netlink: 'syz.0.1852': attribute type 1 has an invalid length. [ 264.240138][T11690] netlink: 'syz.0.1852': attribute type 2 has an invalid length. [ 264.257129][T11690] netlink: 'syz.0.1852': attribute type 3 has an invalid length. [ 264.474139][T11698] FAULT_INJECTION: forcing a failure. [ 264.474139][T11698] name failslab, interval 1, probability 0, space 0, times 0 [ 264.522788][T11698] CPU: 1 UID: 0 PID: 11698 Comm: syz.3.1854 Not tainted syzkaller #0 PREEMPT(full) [ 264.522815][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 264.522825][T11698] Call Trace: [ 264.522832][T11698] [ 264.522839][T11698] dump_stack_lvl+0xe8/0x150 [ 264.522865][T11698] should_fail_ex+0x412/0x560 [ 264.522892][T11698] should_failslab+0xa8/0x100 [ 264.522916][T11698] ? vm_area_dup+0x2b/0x680 [ 264.522939][T11698] kmem_cache_alloc_noprof+0x87/0x650 [ 264.522968][T11698] vm_area_dup+0x2b/0x680 [ 264.522994][T11698] __split_vma+0x1dc/0xa40 [ 264.523024][T11698] ? __pfx___split_vma+0x10/0x10 [ 264.523041][T11698] ? mas_find+0xb0e/0xd30 [ 264.523063][T11698] ? validate_mm+0x403/0x4c0 [ 264.523090][T11698] ? can_vma_merge_left+0x11a/0x3e0 [ 264.523108][T11698] vma_modify+0x97e/0x1e10 [ 264.523146][T11698] vma_modify_flags+0x24b/0x330 [ 264.523171][T11698] ? __pfx_vma_modify_flags+0x10/0x10 [ 264.523200][T11698] ? rcu_is_watching+0x15/0xb0 [ 264.523220][T11698] ? percpu_counter_add_batch+0xea/0x1d0 [ 264.523244][T11698] ? __vm_enough_memory+0x11b/0x380 [ 264.523266][T11698] mprotect_fixup+0x62a/0xb60 [ 264.523295][T11698] ? __pfx_mprotect_fixup+0x10/0x10 [ 264.523337][T11698] ? apparmor_file_mprotect+0x1d0/0x400 [ 264.523354][T11698] ? security_file_mprotect+0x1a/0x290 [ 264.523379][T11698] do_mprotect_pkey+0x8d5/0xd20 [ 264.523407][T11698] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 264.523421][T11698] ? do_vmi_munmap+0x252/0x2d0 [ 264.523448][T11698] ? __pfx___vm_munmap+0x10/0x10 [ 264.523464][T11698] ? vm_mmap_pgoff+0x3b1/0x4f0 [ 264.523499][T11698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.523517][T11698] __x64_sys_mprotect+0x80/0x90 [ 264.523543][T11698] do_syscall_64+0x15f/0xf80 [ 264.523558][T11698] ? trace_irq_disable+0x3b/0x140 [ 264.523582][T11698] ? clear_bhb_loop+0x40/0x90 [ 264.523601][T11698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.523617][T11698] RIP: 0033:0x7f6106b9cc57 [ 264.523632][T11698] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.523646][T11698] RSP: 002b:00007f61079eed18 EFLAGS: 00000217 ORIG_RAX: 000000000000000a [ 264.523665][T11698] RAX: ffffffffffffffda RBX: 00007f6100000000 RCX: 00007f6106b9cc57 [ 264.523677][T11698] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 00007f6100000000 [ 264.523687][T11698] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 264.523697][T11698] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 264.523707][T11698] R13: 0000000000001000 R14: 00007f6104000000 R15: 0000000003400000 [ 264.523735][T11698] [ 264.860265][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 265.254653][T11716] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1859'. [ 265.443610][T11716] syzkaller0: entered promiscuous mode [ 265.449442][T11716] syzkaller0: entered allmulticast mode [ 265.469036][T11723] syzkaller0: entered promiscuous mode [ 265.475062][T11723] syzkaller0: entered allmulticast mode [ 265.638395][T11716] xt_CT: No such helper "snmp_trap" [ 265.965476][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1866'. [ 266.000878][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1866'. [ 267.388930][T11750] netlink: 'syz.2.1870': attribute type 3 has an invalid length. [ 268.082632][ T111] IPVS: rr: FWM 3 0x00000003 - no destination available [ 268.620457][T11735] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 268.848516][T11765] __nla_validate_parse: 1 callbacks suppressed [ 268.848541][T11765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1875'. [ 269.028012][T11772] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1878'. [ 269.090472][T11772] ksmbd: Unknown IPC event: 1, ignore. [ 269.116406][T11778] netlink: 'syz.1.1879': attribute type 25 has an invalid length. [ 269.134238][T11778] netlink: 'syz.1.1879': attribute type 3 has an invalid length. [ 269.152174][T11778] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1879'. [ 269.213076][T11783] netlink: 'syz.2.1881': attribute type 49 has an invalid length. [ 269.341667][T11781] netlink: 'syz.2.1881': attribute type 21 has an invalid length. [ 269.526391][T11783] ip6gretap0: entered promiscuous mode [ 269.540583][T11783] ip6gretap0: entered allmulticast mode [ 270.696376][T11840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1897'. [ 270.762086][T11844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1897'. [ 270.777746][T11833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1896'. [ 271.014873][T11844] ip6gre1: entered promiscuous mode [ 271.038842][T11844] ip6gre1: entered allmulticast mode [ 271.125301][T11850] netlink: 'syz.1.1897': attribute type 6 has an invalid length. [ 271.177823][T11850] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1897'. [ 271.269748][T11842] syzkaller1: entered promiscuous mode [ 271.285831][T11842] syzkaller1: entered allmulticast mode [ 271.944793][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 272.011458][T11877] macvlan5: entered allmulticast mode [ 272.292475][T11885] netlink: 'syz.2.1908': attribute type 11 has an invalid length. [ 272.983395][T11916] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1916'. [ 272.992660][T11916] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1916'. [ 273.463019][T11936] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí [ 273.463019][T11936] 3ìUH†5rºBnœæ [ 273.511626][T11934] netlink: 'syz.0.1922': attribute type 10 has an invalid length. [ 273.543977][T11934] team0 (unregistering): Port device team_slave_0 removed [ 273.567767][T11934] team0 (unregistering): Port device team_slave_1 removed [ 273.582489][T11934] bond5: left allmulticast mode [ 273.588527][T11934] bond5: left promiscuous mode [ 273.597721][T11934] team0 (unregistering): Port device macvlan3 removed [ 273.840547][ T36] IPVS: rr: FWM 3 0x00000003 - no destination available [ 274.140610][T11958] __nla_validate_parse: 2 callbacks suppressed [ 274.140631][T11958] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1930'. [ 274.233023][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1932'. [ 274.249472][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1932'. [ 274.274965][T11962] netlink: 'syz.2.1932': attribute type 14 has an invalid length. [ 274.785852][T11979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1939'. [ 275.119890][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 275.529400][T12016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1948'. [ 275.551612][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'. [ 275.575603][T12016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1948'. [ 275.775160][T12023] FAULT_INJECTION: forcing a failure. [ 275.775160][T12023] name failslab, interval 1, probability 0, space 0, times 0 [ 275.876120][T12023] CPU: 1 UID: 0 PID: 12023 Comm: syz.0.1950 Not tainted syzkaller #0 PREEMPT(full) [ 275.876150][T12023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.876162][T12023] Call Trace: [ 275.876171][T12023] [ 275.876180][T12023] dump_stack_lvl+0xe8/0x150 [ 275.876211][T12023] should_fail_ex+0x412/0x560 [ 275.876246][T12023] should_failslab+0xa8/0x100 [ 275.876278][T12023] ? vm_area_alloc+0x24/0x140 [ 275.876306][T12023] kmem_cache_alloc_noprof+0x87/0x650 [ 275.876334][T12023] ? __pfx_vma_merge_new_range+0x10/0x10 [ 275.876364][T12023] vm_area_alloc+0x24/0x140 [ 275.876394][T12023] mmap_region+0x11c6/0x22a0 [ 275.876417][T12023] ? __lock_acquire+0x6b5/0x2cf0 [ 275.876461][T12023] ? __pfx_mmap_region+0x10/0x10 [ 275.876495][T12023] ? mas_next_slot+0xc3b/0xd10 [ 275.876606][T12023] ? rcu_is_watching+0x15/0xb0 [ 275.876632][T12023] ? vm_unmapped_area+0xde/0x230 [ 275.876676][T12023] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 275.876724][T12023] ? cap_mmap_addr+0xaf/0x100 [ 275.876749][T12023] ? bpf_lsm_mmap_addr+0x9/0x50 [ 275.876790][T12023] do_mmap+0xc39/0x10c0 [ 275.876829][T12023] ? __pfx_do_mmap+0x10/0x10 [ 275.876849][T12023] ? down_write_killable+0x180/0x240 [ 275.876875][T12023] ? __pfx_down_write_killable+0x10/0x10 [ 275.876895][T12023] ? lock_vma_under_rcu+0x45a/0x500 [ 275.876921][T12023] ? apparmor_mmap_file+0x197/0x3e0 [ 275.876943][T12023] ? security_mmap_file+0x4df/0xa20 [ 275.876971][T12023] vm_mmap_pgoff+0x2c9/0x4f0 [ 275.877004][T12023] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 275.877023][T12023] ? exc_page_fault+0x6a/0xc0 [ 275.877080][T12023] ? ksys_mmap_pgoff+0xf3/0x760 [ 275.877112][T12023] ? __x64_sys_mmap+0x7f/0x140 [ 275.877135][T12023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.877158][T12023] do_syscall_64+0x15f/0xf80 [ 275.877184][T12023] ? trace_irq_disable+0x3b/0x140 [ 275.877220][T12023] ? clear_bhb_loop+0x40/0x90 [ 275.877252][T12023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.877280][T12023] RIP: 0033:0x7f780a19cbc2 [ 275.877386][T12023] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 275.877407][T12023] RSP: 002b:00007f780b0d7d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 275.877430][T12023] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f780a19cbc2 [ 275.877444][T12023] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 275.877456][T12023] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 275.877469][T12023] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 275.877481][T12023] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f780a24febf [ 275.877516][T12023] [ 276.501566][T12049] syz.2.1954: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 276.540970][T12049] CPU: 0 UID: 0 PID: 12049 Comm: syz.2.1954 Not tainted syzkaller #0 PREEMPT(full) [ 276.541018][T12049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.541031][T12049] Call Trace: [ 276.541040][T12049] [ 276.541049][T12049] dump_stack_lvl+0xe8/0x150 [ 276.541082][T12049] warn_alloc+0x249/0x340 [ 276.541114][T12049] ? stack_trace_save+0xa9/0x100 [ 276.541149][T12049] ? __pfx_warn_alloc+0x10/0x10 [ 276.541187][T12049] ? kasan_save_track+0x4f/0x80 [ 276.541214][T12049] ? kasan_save_track+0x3e/0x80 [ 276.541239][T12049] ? __kasan_kmalloc+0x93/0xb0 [ 276.541265][T12049] ? __kmalloc_cache_noprof+0x31c/0x660 [ 276.541292][T12049] ? xskq_create+0x56/0x170 [ 276.541320][T12049] ? xsk_setsockopt+0x54c/0x990 [ 276.541344][T12049] ? do_sock_setsockopt+0x17c/0x1b0 [ 276.541365][T12049] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 276.541385][T12049] ? do_syscall_64+0x15f/0xf80 [ 276.541409][T12049] __vmalloc_node_range_noprof+0x132/0x1750 [ 276.541478][T12049] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 276.541516][T12049] ? __kasan_kmalloc+0x93/0xb0 [ 276.541553][T12049] vmalloc_user_noprof+0xad/0xe0 [ 276.541581][T12049] ? xskq_create+0xbf/0x170 [ 276.541612][T12049] xskq_create+0xbf/0x170 [ 276.541645][T12049] xsk_init_queue+0x8a/0xe0 [ 276.541675][T12049] xsk_setsockopt+0x54c/0x990 [ 276.541705][T12049] ? __pfx_xsk_setsockopt+0x10/0x10 [ 276.541733][T12049] ? __pfx_aa_sk_perm+0x10/0x10 [ 276.541765][T12049] ? aa_sock_opt_perm+0xff/0x1a0 [ 276.541798][T12049] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 276.541825][T12049] ? __pfx_xsk_setsockopt+0x10/0x10 [ 276.541854][T12049] do_sock_setsockopt+0x17c/0x1b0 [ 276.541882][T12049] __x64_sys_setsockopt+0x13d/0x1b0 [ 276.541908][T12049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.541931][T12049] do_syscall_64+0x15f/0xf80 [ 276.541951][T12049] ? trace_irq_disable+0x3b/0x140 [ 276.542008][T12049] ? clear_bhb_loop+0x40/0x90 [ 276.542036][T12049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.542056][T12049] RIP: 0033:0x7f565cd9ce59 [ 276.542077][T12049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.542094][T12049] RSP: 002b:00007f565aff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 276.542119][T12049] RAX: ffffffffffffffda RBX: 00007f565d015fa0 RCX: 00007f565cd9ce59 [ 276.542134][T12049] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 276.542147][T12049] RBP: 00007f565ce32d6f R08: 0000000000000004 R09: 0000000000000000 [ 276.542160][T12049] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.542174][T12049] R13: 00007f565d016038 R14: 00007f565d015fa0 R15: 00007fff73a103e8 [ 276.542211][T12049] [ 276.542246][T12049] Mem-Info: [ 276.846319][T12049] active_anon:5953 inactive_anon:0 isolated_anon:0 [ 276.846319][T12049] active_file:3406 inactive_file:40029 isolated_file:0 [ 276.846319][T12049] unevictable:768 dirty:241 writeback:0 [ 276.846319][T12049] slab_reclaimable:10704 slab_unreclaimable:105168 [ 276.846319][T12049] mapped:29698 shmem:1289 pagetables:1331 [ 276.846319][T12049] sec_pagetables:0 bounce:0 [ 276.846319][T12049] kernel_misc_reclaimable:0 [ 276.846319][T12049] free:1317130 free_pcp:9381 free_cma:0 [ 276.920774][T12049] Node 0 active_anon:23912kB inactive_anon:0kB active_file:13624kB inactive_file:159912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118792kB dirty:960kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13344kB pagetables:4708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 276.989804][T12049] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 277.059951][T12049] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 277.150385][T12049] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 277.160942][T12049] Node 0 DMA32 free:1316460kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27104kB inactive_anon:0kB active_file:13624kB inactive_file:159912kB unevictable:1536kB writepending:988kB zspages:0kB present:3129332kB managed:2552360kB mlocked:0kB bounce:0kB free_pcp:33492kB local_pcp:18444kB free_cma:0kB [ 277.201716][T12049] lowmem_reserve[]: 0 0 0 0 0 [ 277.207353][T12049] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:660kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 277.250324][T12049] lowmem_reserve[]: 0 0 0 0 0 [ 277.280862][T12049] Node 1 Normal free:3933600kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 277.350969][T12070] syzkaller1: entered promiscuous mode [ 277.369068][T12070] syzkaller1: entered allmulticast mode [ 277.373648][T12049] lowmem_reserve[]: 0 0 0 0 0 [ 277.386607][T12074] netlink: 'syz.1.1963': attribute type 11 has an invalid length. [ 277.404733][T12049] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 277.438312][T12049] Node 0 DMA32: 2659*4kB (UME) 2548*8kB (UM) 1075*16kB (UME) 862*32kB (UME) 366*64kB (UME) 212*128kB (UM) 107*256kB (UM) 21*512kB (UM) 20*1024kB (UME) 11*2048kB (UM) 269*4096kB (UM) = 1309340kB [ 277.483770][T12049] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 277.507956][T12049] Node 1 Normal: 0*4kB 2*8kB (UM) 1*16kB (M) 6*32kB (UM) 9*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 959*4096kB (M) = 3933600kB [ 277.527402][T12049] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.539530][T12049] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 277.584891][T12049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.596796][T12049] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 277.606993][T12049] 47572 total pagecache pages [ 277.611923][T12049] 0 pages in swap cache [ 277.616269][T12078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1959'. [ 277.625945][T12049] Free swap = 124996kB [ 277.632479][T12049] Total swap = 124996kB [ 277.646740][T12049] 2097051 pages RAM [ 277.651076][T12049] 0 pages HighMem/MovableOnly [ 277.655865][T12049] 427181 pages reserved [ 277.661458][T12049] 0 pages cma reserved [ 278.123698][T12100] FAULT_INJECTION: forcing a failure. [ 278.123698][T12100] name failslab, interval 1, probability 0, space 0, times 0 [ 278.144891][T12101] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1969'. [ 278.161393][T12100] CPU: 0 UID: 0 PID: 12100 Comm: syz.0.1971 Not tainted syzkaller #0 PREEMPT(full) [ 278.161424][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.161435][T12100] Call Trace: [ 278.161443][T12100] [ 278.161450][T12100] dump_stack_lvl+0xe8/0x150 [ 278.161478][T12100] should_fail_ex+0x412/0x560 [ 278.161513][T12100] should_failslab+0xa8/0x100 [ 278.161547][T12100] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 278.161575][T12100] ? __alloc_skb+0x186/0x7d0 [ 278.161593][T12100] ? __alloc_skb+0x1d0/0x7d0 [ 278.161610][T12100] ? __local_bh_enable_ip+0xd0/0x130 [ 278.161636][T12100] __alloc_skb+0x1d0/0x7d0 [ 278.161655][T12100] ? netlink_ack_tlv_len+0x6c/0x210 [ 278.161681][T12100] netlink_ack+0x146/0xa50 [ 278.161700][T12100] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.161729][T12100] ? ref_tracker_free+0x693/0x840 [ 278.161760][T12100] ? __pfx_ref_tracker_free+0x10/0x10 [ 278.161797][T12100] netlink_rcv_skb+0x2b6/0x4b0 [ 278.161821][T12100] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.161852][T12100] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.161890][T12100] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.161911][T12100] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.161939][T12100] netlink_unicast+0x75c/0x8e0 [ 278.162005][T12100] netlink_sendmsg+0x813/0xb40 [ 278.162041][T12100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.162069][T12100] ? aa_sock_msg_perm+0xf1/0x1b0 [ 278.162099][T12100] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.162131][T12100] ____sys_sendmsg+0x972/0x9f0 [ 278.162154][T12100] ? __might_fault+0xaf/0x130 [ 278.162187][T12100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.162221][T12100] ? import_iovec+0x73/0xa0 [ 278.162255][T12100] ___sys_sendmsg+0x2a5/0x360 [ 278.162276][T12100] ? __lock_acquire+0x6b5/0x2cf0 [ 278.162304][T12100] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.162369][T12100] ? __fget_files+0x2a/0x420 [ 278.162393][T12100] ? __fget_files+0x3a0/0x420 [ 278.162430][T12100] __x64_sys_sendmsg+0x1bd/0x2a0 [ 278.162457][T12100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.162492][T12100] ? __pfx_ksys_write+0x10/0x10 [ 278.162532][T12100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.162556][T12100] do_syscall_64+0x15f/0xf80 [ 278.162576][T12100] ? trace_irq_disable+0x3b/0x140 [ 278.162608][T12100] ? clear_bhb_loop+0x40/0x90 [ 278.162634][T12100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.162655][T12100] RIP: 0033:0x7f780a19ce59 [ 278.162676][T12100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.162694][T12100] RSP: 002b:00007f780b0d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.162718][T12100] RAX: ffffffffffffffda RBX: 00007f780a415fa0 RCX: 00007f780a19ce59 [ 278.162734][T12100] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 278.162747][T12100] RBP: 00007f780b0d9090 R08: 0000000000000000 R09: 0000000000000000 [ 278.162760][T12100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.162778][T12100] R13: 00007f780a416038 R14: 00007f780a415fa0 R15: 00007ffdc3cc4cf8 [ 278.162813][T12100] [ 278.502302][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1973'. [ 278.557652][T12106] veth0: entered promiscuous mode [ 278.962504][ T3315] IPVS: rr: FWM 3 0x00000003 - no destination available [ 279.067545][T12128] syzkaller0: entered promiscuous mode [ 279.096985][T12128] syzkaller0: entered allmulticast mode [ 279.188130][T12130] xt_hashlimit: size too large, truncated to 1048576 [ 279.395702][T12137] tipc: Enabled bearer , priority 0 [ 279.420385][T12144] __nla_validate_parse: 3 callbacks suppressed [ 279.420406][T12144] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1988'. [ 279.451163][T12137] syzkaller0: entered promiscuous mode [ 279.457143][T12137] syzkaller0: entered allmulticast mode [ 279.600350][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 279.756597][T12129] tipc: Resetting bearer [ 279.803836][T12129] tipc: Disabling bearer [ 279.821930][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'. [ 280.132178][T12171] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1994'. [ 280.315328][T12175] veth0: entered promiscuous mode [ 280.344157][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1997'. [ 280.435744][T12180] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1999'. [ 280.441592][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2000'. [ 280.570858][T12188] FAULT_INJECTION: forcing a failure. [ 280.570858][T12188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.584331][T12184] 8021q: adding VLAN 0 to HW filter on device bond8 [ 280.625354][T12188] CPU: 0 UID: 0 PID: 12188 Comm: syz.4.2001 Not tainted syzkaller #0 PREEMPT(full) [ 280.625385][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.625398][T12188] Call Trace: [ 280.625405][T12188] [ 280.625414][T12188] dump_stack_lvl+0xe8/0x150 [ 280.625445][T12188] should_fail_ex+0x412/0x560 [ 280.625478][T12188] _copy_from_user+0x2d/0xb0 [ 280.625510][T12188] do_ipt_set_ctl+0x6a5/0xe00 [ 280.625536][T12188] ? rcu_is_watching+0x15/0xb0 [ 280.625561][T12188] ? trace_contention_end+0x3d/0x140 [ 280.625590][T12188] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 280.625630][T12188] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 280.625651][T12188] ? __pfx___mutex_lock+0x10/0x10 [ 280.625673][T12188] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 280.625701][T12188] ? __pfx_aa_sk_perm+0x10/0x10 [ 280.625734][T12188] nf_setsockopt+0x26f/0x290 [ 280.625766][T12188] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 280.625805][T12188] do_sock_setsockopt+0x17c/0x1b0 [ 280.625834][T12188] __x64_sys_setsockopt+0x13d/0x1b0 [ 280.625859][T12188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.625882][T12188] do_syscall_64+0x15f/0xf80 [ 280.625902][T12188] ? trace_irq_disable+0x3b/0x140 [ 280.625932][T12188] ? clear_bhb_loop+0x40/0x90 [ 280.625958][T12188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.625976][T12188] RIP: 0033:0x7ff7ee39ce59 [ 280.625992][T12188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.626006][T12188] RSP: 002b:00007ff7ef22b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 280.626026][T12188] RAX: ffffffffffffffda RBX: 00007ff7ee615fa0 RCX: 00007ff7ee39ce59 [ 280.626039][T12188] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 280.626051][T12188] RBP: 00007ff7ef22b090 R08: 0000000000000310 R09: 0000000000000000 [ 280.626063][T12188] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 280.626076][T12188] R13: 00007ff7ee616038 R14: 00007ff7ee615fa0 R15: 00007ffff4d0c788 [ 280.626108][T12188] [ 280.627249][T12186] macvlan9: entered promiscuous mode [ 280.756881][T12193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2002'. [ 280.808594][T12186] macvlan9: entered allmulticast mode [ 280.861732][T12186] bond8: entered allmulticast mode [ 280.867520][T12196] netlink: 'syz.2.2004': attribute type 1 has an invalid length. [ 280.885712][T12196] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2004'. [ 280.891825][T12186] bond8: entered promiscuous mode [ 280.921051][T12186] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 280.955564][T12186] team0: Port device macvlan9 added [ 281.082630][T12204] FAULT_INJECTION: forcing a failure. [ 281.082630][T12204] name failslab, interval 1, probability 0, space 0, times 0 [ 281.187518][T12204] CPU: 1 UID: 0 PID: 12204 Comm: syz.2.2008 Not tainted syzkaller #0 PREEMPT(full) [ 281.187547][T12204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.187559][T12204] Call Trace: [ 281.187567][T12204] [ 281.187577][T12204] dump_stack_lvl+0xe8/0x150 [ 281.187606][T12204] should_fail_ex+0x412/0x560 [ 281.187640][T12204] should_failslab+0xa8/0x100 [ 281.187671][T12204] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 281.187699][T12204] ? __alloc_skb+0x186/0x7d0 [ 281.187717][T12204] ? __alloc_skb+0x1d0/0x7d0 [ 281.187732][T12204] ? __local_bh_enable_ip+0xd0/0x130 [ 281.187757][T12204] __alloc_skb+0x1d0/0x7d0 [ 281.187782][T12204] sock_omalloc+0xd8/0x1e0 [ 281.187807][T12204] msg_zerocopy_realloc+0x9c/0x850 [ 281.187834][T12204] ? ipv6_addr_label+0x2f/0x240 [ 281.187876][T12204] __ip6_append_data+0xc29/0x3f60 [ 281.187903][T12204] ? __lock_acquire+0x6b5/0x2cf0 [ 281.187941][T12204] ? ipv6_dev_get_saddr+0x934/0xbb0 [ 281.187972][T12204] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 281.188003][T12204] ? ip6_mtu+0x7d/0x490 [ 281.188035][T12204] ? ip6_mtu+0x7d/0x490 [ 281.188063][T12204] ? __pfx___ip6_append_data+0x10/0x10 [ 281.188087][T12204] ? __pfx_ip6_mtu+0x10/0x10 [ 281.188121][T12204] ip6_make_skb+0x2af/0x320 [ 281.188149][T12204] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 281.188183][T12204] ? __pfx_ip6_make_skb+0x10/0x10 [ 281.188208][T12204] ? sk_dst_check+0x25/0x480 [ 281.188251][T12204] ? udpv6_sendmsg+0x1864/0x25c0 [ 281.188286][T12204] udpv6_sendmsg+0x1db8/0x25c0 [ 281.188330][T12204] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 281.188352][T12204] ? udp_lib_get_port+0x177a/0x1c60 [ 281.188393][T12204] ? ip6_datagram_release_cb+0x7c/0x550 [ 281.188437][T12204] ? inet_send_prepare+0x1b9/0x270 [ 281.188465][T12204] ? inet_send_prepare+0x1b9/0x270 [ 281.188496][T12204] ? inet_send_prepare+0x1b9/0x270 [ 281.188521][T12204] ? __local_bh_enable_ip+0xd0/0x130 [ 281.188542][T12204] ? inet_send_prepare+0x1b9/0x270 [ 281.188575][T12204] ? inet6_sendmsg+0xe4/0x120 [ 281.188598][T12204] ____sys_sendmsg+0x5c7/0x9f0 [ 281.188631][T12204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.188664][T12204] ? import_iovec+0x73/0xa0 [ 281.188699][T12204] ___sys_sendmsg+0x2a5/0x360 [ 281.188720][T12204] ? __lock_acquire+0x6b5/0x2cf0 [ 281.188748][T12204] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.188775][T12204] ? kstrtouint+0x6e/0xe0 [ 281.188828][T12204] ? __fget_files+0x2a/0x420 [ 281.188852][T12204] ? __fget_files+0x3a0/0x420 [ 281.188889][T12204] __sys_sendmmsg+0x27c/0x4e0 [ 281.188919][T12204] ? __pfx___sys_sendmmsg+0x10/0x10 [ 281.188938][T12204] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 281.188988][T12204] ? ksys_write+0x242/0x270 [ 281.189019][T12204] ? __pfx_ksys_write+0x10/0x10 [ 281.189057][T12204] __x64_sys_sendmmsg+0xa0/0xc0 [ 281.189080][T12204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.189102][T12204] do_syscall_64+0x15f/0xf80 [ 281.189121][T12204] ? trace_irq_disable+0x3b/0x140 [ 281.189153][T12204] ? clear_bhb_loop+0x40/0x90 [ 281.189177][T12204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.189197][T12204] RIP: 0033:0x7f565cd9ce59 [ 281.189217][T12204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.189235][T12204] RSP: 002b:00007f565aff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 281.189256][T12204] RAX: ffffffffffffffda RBX: 00007f565d015fa0 RCX: 00007f565cd9ce59 [ 281.189278][T12204] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000004 [ 281.189291][T12204] RBP: 00007f565aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 281.189303][T12204] R10: 0000000004004800 R11: 0000000000000246 R12: 0000000000000001 [ 281.189315][T12204] R13: 00007f565d016038 R14: 00007f565d015fa0 R15: 00007fff73a103e8 [ 281.189347][T12204] [ 281.571894][T12205] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2006'. [ 281.675210][T12215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2013'. [ 281.853456][T12220] syzkaller0: entered promiscuous mode [ 281.858999][T12220] syzkaller0: entered allmulticast mode [ 281.871347][T12220] tipc: Enabled bearer , priority 0 [ 281.884674][T12219] tipc: Resetting bearer [ 281.909322][T12223] netlink: 'syz.4.2016': attribute type 25 has an invalid length. [ 281.917563][T12223] netlink: 'syz.4.2016': attribute type 3 has an invalid length. [ 281.952194][T12219] tipc: Disabling bearer [ 284.254581][T12307] veth15: entered allmulticast mode [ 284.339463][T12322] netlink: 'syz.4.2042': attribute type 1 has an invalid length. [ 284.444524][T12309] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.452899][T12309] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.473923][T12309] bridge0: left promiscuous mode [ 284.479736][T12309] bridge0: left allmulticast mode [ 284.553214][T12309] team0: left promiscuous mode [ 284.567014][T12309] team_slave_0: left promiscuous mode [ 284.582811][T12309] team_slave_1: left promiscuous mode [ 284.597317][T12309] team0: left allmulticast mode [ 284.612187][T12309] team_slave_0: left allmulticast mode [ 284.625309][T12309] team_slave_1: left allmulticast mode [ 284.727504][ T7876] IPVS: rr: FWM 3 0x00000003 - no destination available [ 284.777358][T12309] veth0_to_bond: left promiscuous mode [ 284.788001][T12309] veth0_to_bond: left allmulticast mode [ 285.083862][T12309] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 285.123509][T12309] bond4: left allmulticast mode [ 285.128484][T12309] bond4: left promiscuous mode [ 285.135421][T12309] macvlan2: left promiscuous mode [ 285.140592][T12309] macvlan2: left allmulticast mode [ 285.152453][T12309] ip6gre1: left promiscuous mode [ 285.157426][T12309] ip6gre1: left allmulticast mode [ 285.165195][T12316] __nla_validate_parse: 11 callbacks suppressed [ 285.165218][T12316] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2038'. [ 285.244366][T12295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2035'. [ 285.271704][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.325848][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.360312][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.377357][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.778757][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'. [ 285.962762][T12385] netlink: 'syz.1.2054': attribute type 25 has an invalid length. [ 285.972892][T12385] netlink: 'syz.1.2054': attribute type 3 has an invalid length. [ 285.983503][T12385] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2054'. [ 286.094330][T12386] tipc: Enabled bearer , priority 0 [ 286.115715][T12386] syzkaller0: entered promiscuous mode [ 286.139758][T12386] syzkaller0: entered allmulticast mode [ 286.231219][T12386] tipc: Resetting bearer [ 286.276291][T12382] tipc: Resetting bearer [ 286.357208][T12382] tipc: Disabling bearer [ 286.781899][T12416] netlink: 'syz.3.2068': attribute type 1 has an invalid length. [ 286.798680][T12416] netlink: 'syz.3.2068': attribute type 2 has an invalid length. [ 286.817311][T12416] netlink: 'syz.3.2068': attribute type 1 has an invalid length. [ 286.825799][T12416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2068'. [ 286.872957][T12420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2070'. [ 287.566313][T12453] smc: net device lo applied user defined pnetid SYZ2 [ 287.578615][T12453] smc: net device lo erased user defined pnetid SYZ2 [ 287.588845][T12453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.623422][T12453] bond0: entered promiscuous mode [ 287.641566][T12453] bond_slave_0: entered promiscuous mode [ 287.652644][T12453] bond_slave_1: entered promiscuous mode [ 287.668530][T12453] batadv0: entered promiscuous mode [ 287.690941][T12453] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 287.702893][T12453] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 287.716573][T12453] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 288.059012][T12470] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2087'. [ 288.506164][T12486] FAULT_INJECTION: forcing a failure. [ 288.506164][T12486] name failslab, interval 1, probability 0, space 0, times 0 [ 288.529920][T12486] CPU: 1 UID: 0 PID: 12486 Comm: syz.3.2093 Not tainted syzkaller #0 PREEMPT(full) [ 288.529952][T12486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 288.529965][T12486] Call Trace: [ 288.529982][T12486] [ 288.529991][T12486] dump_stack_lvl+0xe8/0x150 [ 288.530021][T12486] should_fail_ex+0x412/0x560 [ 288.530057][T12486] should_failslab+0xa8/0x100 [ 288.530090][T12486] __kmalloc_node_noprof+0xf0/0x7c0 [ 288.530114][T12486] ? lock_acquire+0x106/0x350 [ 288.530137][T12486] ? qdisc_alloc+0x92/0x9e0 [ 288.530163][T12486] qdisc_alloc+0x92/0x9e0 [ 288.530191][T12486] qdisc_create+0x12c/0xf20 [ 288.530223][T12486] ? lockdep_rtnl_is_held+0x26/0x40 [ 288.530247][T12486] ? qdisc_lookup+0x36d/0x6d0 [ 288.530274][T12486] tc_modify_qdisc+0x16f0/0x2290 [ 288.530304][T12486] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 288.530351][T12486] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 288.530415][T12486] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 288.530443][T12486] rtnetlink_rcv_msg+0x77e/0xbe0 [ 288.530473][T12486] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 288.530500][T12486] ? netlink_sendmsg+0x5d4/0xb40 [ 288.530526][T12486] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 288.530558][T12486] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.530590][T12486] ? __lock_acquire+0x6b5/0x2cf0 [ 288.530627][T12486] netlink_rcv_skb+0x232/0x4b0 [ 288.530653][T12486] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.530686][T12486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.530723][T12486] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.530746][T12486] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.530774][T12486] netlink_unicast+0x75c/0x8e0 [ 288.530810][T12486] netlink_sendmsg+0x813/0xb40 [ 288.530845][T12486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.530874][T12486] ? aa_sock_msg_perm+0xf1/0x1b0 [ 288.530911][T12486] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.530944][T12486] ____sys_sendmsg+0x972/0x9f0 [ 288.530968][T12486] ? __might_fault+0xaf/0x130 [ 288.531015][T12486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.531050][T12486] ? import_iovec+0x73/0xa0 [ 288.531086][T12486] ___sys_sendmsg+0x2a5/0x360 [ 288.531106][T12486] ? __lock_acquire+0x6b5/0x2cf0 [ 288.531133][T12486] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.531199][T12486] ? __fget_files+0x2a/0x420 [ 288.531223][T12486] ? __fget_files+0x3a0/0x420 [ 288.531260][T12486] __x64_sys_sendmsg+0x1bd/0x2a0 [ 288.531288][T12486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.531322][T12486] ? __pfx_ksys_write+0x10/0x10 [ 288.531363][T12486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.531386][T12486] do_syscall_64+0x15f/0xf80 [ 288.531405][T12486] ? trace_irq_disable+0x3b/0x140 [ 288.531436][T12486] ? clear_bhb_loop+0x40/0x90 [ 288.531462][T12486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.531483][T12486] RIP: 0033:0x7f6106b9ce59 [ 288.531503][T12486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.531519][T12486] RSP: 002b:00007f61079f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.531543][T12486] RAX: ffffffffffffffda RBX: 00007f6106e15fa0 RCX: 00007f6106b9ce59 [ 288.531558][T12486] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 288.531571][T12486] RBP: 00007f61079f0090 R08: 0000000000000000 R09: 0000000000000000 [ 288.531583][T12486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.531595][T12486] R13: 00007f6106e16038 R14: 00007f6106e15fa0 R15: 00007ffe1d02eab8 [ 288.531632][T12486] [ 288.911188][T12491] syzkaller1: entered promiscuous mode [ 288.916837][T12491] syzkaller1: entered allmulticast mode [ 289.439678][T12512] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2101'. [ 289.904357][T12533] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2109'. [ 289.916916][T12534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2110'. [ 290.233451][T12542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2114'. [ 290.571319][T12569] netlink: 'syz.3.2120': attribute type 11 has an invalid length. [ 290.611379][T12564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2119'. [ 290.751453][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2122'. [ 290.805055][T12578] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2124'. [ 290.865071][T12576] 8021q: adding VLAN 0 to HW filter on device bond9 [ 290.897528][T12581] macvlan10: entered promiscuous mode [ 290.903479][T12581] macvlan10: entered allmulticast mode [ 290.909489][T12581] bond9: entered allmulticast mode [ 290.914930][T12581] bond9: entered promiscuous mode [ 290.921120][T12581] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 290.935024][T12581] team0: Port device macvlan10 added [ 291.355142][T12597] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2129'. [ 291.620587][T12604] FAULT_INJECTION: forcing a failure. [ 291.620587][T12604] name failslab, interval 1, probability 0, space 0, times 0 [ 291.654609][T12604] CPU: 0 UID: 0 PID: 12604 Comm: syz.3.2132 Not tainted syzkaller #0 PREEMPT(full) [ 291.654640][T12604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 291.654653][T12604] Call Trace: [ 291.654661][T12604] [ 291.654671][T12604] dump_stack_lvl+0xe8/0x150 [ 291.654702][T12604] should_fail_ex+0x412/0x560 [ 291.654738][T12604] should_failslab+0xa8/0x100 [ 291.654771][T12604] ? ptlock_alloc+0x20/0x70 [ 291.654798][T12604] kmem_cache_alloc_noprof+0x87/0x650 [ 291.654825][T12604] ? alloc_pages_mpol+0x3c0/0x490 [ 291.654867][T12604] ptlock_alloc+0x20/0x70 [ 291.654894][T12604] pte_alloc_one+0x7a/0x370 [ 291.654923][T12604] __pte_alloc+0x25/0x1a0 [ 291.654959][T12604] do_pte_missing+0x2cd2/0x33f0 [ 291.655013][T12604] handle_mm_fault+0x1bd9/0x3170 [ 291.655057][T12604] ? handle_mm_fault+0xee/0x3170 [ 291.655093][T12604] ? __pfx_handle_mm_fault+0x10/0x10 [ 291.655116][T12604] ? lock_vma_under_rcu+0x45a/0x500 [ 291.655186][T12604] do_user_addr_fault+0xa73/0x1340 [ 291.655218][T12604] ? rcu_is_watching+0x15/0xb0 [ 291.655246][T12604] ? trace_page_fault_user+0x84/0x1e0 [ 291.655272][T12604] exc_page_fault+0x6a/0xc0 [ 291.655306][T12604] asm_exc_page_fault+0x26/0x30 [ 291.655327][T12604] RIP: 0033:0x7f6106b5ed82 [ 291.655347][T12604] Code: 8d 15 1f 05 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 f0 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 291.655365][T12604] RSP: 002b:00007f61079eed20 EFLAGS: 00010286 [ 291.655385][T12604] RAX: ffffffffffffffff RBX: 00007f6100000000 RCX: 00007f6106b9cc57 [ 291.655400][T12604] RDX: 00007f6106c4f27d RSI: 0000000000021000 RDI: 00007f6100000000 [ 291.655414][T12604] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 291.655427][T12604] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 291.655440][T12604] R13: 0000000000001000 R14: 00007f6104000000 R15: 0000000003400000 [ 291.655477][T12604] [ 291.655680][T12604] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 291.910176][T12609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2133'. [ 292.156091][T12621] debugfs: '1ùà^!‚Y‡°”õËí [ 292.156091][T12621] 3ìUH†5rºBnœæ\' already exists in 'ieee80211' [ 292.656523][T12633] syzkaller0: entered promiscuous mode [ 292.681842][T12633] syzkaller0: entered allmulticast mode [ 292.702734][T12627] tipc: Enabled bearer , priority 0 [ 292.727383][T12625] tipc: Resetting bearer [ 292.757613][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2144'. [ 292.855774][T12625] tipc: Disabling bearer [ 293.154209][T12645] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2145'. [ 293.255081][T12647] FAULT_INJECTION: forcing a failure. [ 293.255081][T12647] name failslab, interval 1, probability 0, space 0, times 0 [ 293.284001][T12647] CPU: 1 UID: 0 PID: 12647 Comm: syz.3.2146 Not tainted syzkaller #0 PREEMPT(full) [ 293.284033][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.284046][T12647] Call Trace: [ 293.284054][T12647] [ 293.284063][T12647] dump_stack_lvl+0xe8/0x150 [ 293.284095][T12647] should_fail_ex+0x412/0x560 [ 293.284128][T12647] should_failslab+0xa8/0x100 [ 293.284162][T12647] __kmalloc_cache_noprof+0x88/0x660 [ 293.284191][T12647] ? nft_trans_flowtable_add+0x59/0x460 [ 293.284219][T12647] nft_trans_flowtable_add+0x59/0x460 [ 293.284237][T12647] ? nf_flow_table_init+0x280/0x2a0 [ 293.284258][T12647] nf_tables_newflowtable+0x1c33/0x2590 [ 293.284301][T12647] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 293.284330][T12647] ? nfnl_pernet+0x23/0x240 [ 293.284364][T12647] ? __nla_parse+0x40/0x60 [ 293.284395][T12647] nfnetlink_rcv+0x123e/0x27b0 [ 293.284452][T12647] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 293.284522][T12647] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.284552][T12647] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.284572][T12647] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.284598][T12647] netlink_unicast+0x75c/0x8e0 [ 293.284628][T12647] netlink_sendmsg+0x813/0xb40 [ 293.284658][T12647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.284682][T12647] ? aa_sock_msg_perm+0xf1/0x1b0 [ 293.284708][T12647] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 293.284736][T12647] ____sys_sendmsg+0x972/0x9f0 [ 293.284756][T12647] ? __might_fault+0xaf/0x130 [ 293.284785][T12647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.284814][T12647] ? import_iovec+0x73/0xa0 [ 293.284844][T12647] ___sys_sendmsg+0x2a5/0x360 [ 293.284862][T12647] ? __lock_acquire+0x6b5/0x2cf0 [ 293.284886][T12647] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.284942][T12647] ? __fget_files+0x2a/0x420 [ 293.284963][T12647] ? __fget_files+0x3a0/0x420 [ 293.285006][T12647] __x64_sys_sendmsg+0x1bd/0x2a0 [ 293.285030][T12647] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 293.285060][T12647] ? __pfx_ksys_write+0x10/0x10 [ 293.285095][T12647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.285115][T12647] do_syscall_64+0x15f/0xf80 [ 293.285133][T12647] ? trace_irq_disable+0x3b/0x140 [ 293.285160][T12647] ? clear_bhb_loop+0x40/0x90 [ 293.285183][T12647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.285199][T12647] RIP: 0033:0x7f6106b9ce59 [ 293.285219][T12647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.285235][T12647] RSP: 002b:00007f61079f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.285256][T12647] RAX: ffffffffffffffda RBX: 00007f6106e15fa0 RCX: 00007f6106b9ce59 [ 293.285269][T12647] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 293.285280][T12647] RBP: 00007f61079f0090 R08: 0000000000000000 R09: 0000000000000000 [ 293.285291][T12647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.285302][T12647] R13: 00007f6106e16038 R14: 00007f6106e15fa0 R15: 00007ffe1d02eab8 [ 293.285334][T12647] [ 294.079246][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2150'. [ 294.131941][T12657] syzkaller0: entered promiscuous mode [ 294.139557][T12657] syzkaller0: entered allmulticast mode [ 294.156735][T12665] block nbd0: not configured, cannot reconfigure [ 296.768933][T12690] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2162'. [ 296.938051][T12703] netlink: 'syz.1.2164': attribute type 25 has an invalid length. [ 296.948126][T12704] batadv_slave_1: entered promiscuous mode [ 296.965245][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2165'. [ 296.975511][T12703] netlink: 'syz.1.2164': attribute type 3 has an invalid length. [ 296.986178][T12704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.995596][T12703] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2164'. [ 297.005009][T12704] batadv0: mtu less than device minimum [ 297.015935][T12704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.029335][T12704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.041405][T12704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.053374][T12704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.065342][T12704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.077259][T12704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.089221][T12704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.101188][T12704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.113052][T12704] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.207834][T12704] batadv_slave_1 (unregistering): left promiscuous mode [ 297.246161][T12704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.940780][T12742] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2176'. [ 298.101979][T12745] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2177'. [ 298.111952][T12740] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2175'. [ 298.126133][T12740] batman_adv: batadv0: Interface deactivated: dummy0 [ 298.126839][T12747] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2178'. [ 298.157729][T12740] batman_adv: batadv0: Removing interface: dummy0 [ 298.437682][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2180'. [ 298.768519][T12768] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 299.532847][T12794] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2192'. [ 300.108471][ T30] audit: type=1107 audit(1779792914.947:5): pid=12818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 300.258955][T12826] netlink: 'syz.4.2206': attribute type 9 has an invalid length. [ 300.394847][T12836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2209'. [ 300.496721][T12837] tipc: Enabling of bearer rejected, failed to enable media [ 301.813884][T12885] __nla_validate_parse: 1 callbacks suppressed [ 301.813904][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2222'. [ 302.094679][T12900] bridge0: entered allmulticast mode [ 302.449408][T12905] tipc: Enabled bearer , priority 0 [ 302.519022][T12905] syzkaller0: entered promiscuous mode [ 302.540274][T12905] syzkaller0: entered allmulticast mode [ 302.622076][T12916] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2236'. [ 302.643277][T12905] tipc: Resetting bearer [ 302.689780][T12904] tipc: Resetting bearer [ 302.765539][T12904] tipc: Disabling bearer [ 302.798139][T12916] syzkaller1: entered promiscuous mode [ 302.804607][T12916] syzkaller1: entered allmulticast mode [ 302.998542][T12930] net_ratelimit: 10 callbacks suppressed [ 302.998578][T12930] A link change request failed with some changes committed already. Interface ip6erspan0 may have been left with an inconsistent configuration, please check. [ 303.221221][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 303.869880][T12959] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2252'. [ 304.223199][T12982] syzkaller0: entered promiscuous mode [ 304.236078][T12982] syzkaller0: entered allmulticast mode [ 304.250882][T12985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'. [ 304.269385][T12974] tipc: Enabled bearer , priority 0 [ 304.361300][T12985] macvlan4: entered allmulticast mode [ 304.395528][T12972] tipc: Resetting bearer [ 304.467527][T12972] tipc: Disabling bearer [ 304.798073][T13006] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2266'. [ 304.868889][T13011] netlink: 'syz.1.2269': attribute type 1 has an invalid length. [ 305.071929][T13010] bond6 (unregistering): Released all slaves [ 305.132996][T13011] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 305.199839][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 305.935652][T13059] syzkaller0: entered promiscuous mode [ 305.953731][T13066] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2283'. [ 305.964729][T13059] syzkaller0: entered allmulticast mode [ 306.042838][T13071] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2284'. [ 306.100026][T13069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2281'. [ 306.140241][T13074] netlink: 'syz.0.2285': attribute type 1 has an invalid length. [ 306.544596][T13088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2288'. [ 306.724081][T13097] netlink: 'syz.2.2291': attribute type 2 has an invalid length. [ 307.544806][T13122] __nla_validate_parse: 4 callbacks suppressed [ 307.544829][T13122] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2302'. [ 307.588232][T13129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2303'. [ 307.617952][T13129] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 307.732199][T13135] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2303'. [ 307.952232][T13143] netlink: 'syz.0.2307': attribute type 6 has an invalid length. [ 308.615081][T13153] veth1: entered allmulticast mode [ 308.980581][T13173] FAULT_INJECTION: forcing a failure. [ 308.980581][T13173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.038658][T13173] CPU: 0 UID: 0 PID: 13173 Comm: syz.1.2317 Not tainted syzkaller #0 PREEMPT(full) [ 309.038690][T13173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 309.038704][T13173] Call Trace: [ 309.038713][T13173] [ 309.038722][T13173] dump_stack_lvl+0xe8/0x150 [ 309.038753][T13173] should_fail_ex+0x412/0x560 [ 309.038787][T13173] _copy_to_user+0x31/0xb0 [ 309.038821][T13173] simple_read_from_buffer+0xe1/0x170 [ 309.038863][T13173] proc_fail_nth_read+0x1bb/0x230 [ 309.038895][T13173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.038926][T13173] ? rw_verify_area+0x2a6/0x4d0 [ 309.038952][T13173] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.038979][T13173] vfs_read+0x20c/0xa70 [ 309.039014][T13173] ? __pfx___mutex_lock+0x10/0x10 [ 309.039037][T13173] ? __pfx_vfs_read+0x10/0x10 [ 309.039068][T13173] ? __fget_files+0x2a/0x420 [ 309.039098][T13173] ? __fget_files+0x3a0/0x420 [ 309.039120][T13173] ? __fget_files+0x2a/0x420 [ 309.039154][T13173] ksys_read+0x150/0x270 [ 309.039185][T13173] ? __pfx_ksys_read+0x10/0x10 [ 309.039224][T13173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.039248][T13173] do_syscall_64+0x15f/0xf80 [ 309.039267][T13173] ? trace_irq_disable+0x3b/0x140 [ 309.039298][T13173] ? clear_bhb_loop+0x40/0x90 [ 309.039324][T13173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.039344][T13173] RIP: 0033:0x7efd9e75d68e [ 309.039364][T13173] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 309.039381][T13173] RSP: 002b:00007efd9f587fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 309.039405][T13173] RAX: ffffffffffffffda RBX: 00007efd9f5886c0 RCX: 00007efd9e75d68e [ 309.039420][T13173] RDX: 000000000000000f RSI: 00007efd9f5880a0 RDI: 0000000000000004 [ 309.039432][T13173] RBP: 00007efd9f588090 R08: 0000000000000000 R09: 0000000000000000 [ 309.039445][T13173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.039457][T13173] R13: 00007efd9ea16038 R14: 00007efd9ea15fa0 R15: 00007fff4c656678 [ 309.039493][T13173] [ 309.322240][T13170] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2316'. [ 309.375770][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2312'. [ 309.919488][T13209] netlink: 'syz.0.2328': attribute type 6 has an invalid length. [ 309.961030][T13209] netlink: 'syz.0.2328': attribute type 7 has an invalid length. [ 309.994221][T13209] netlink: 'syz.0.2328': attribute type 8 has an invalid length. [ 310.057901][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 310.118256][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 310.151950][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 310.188607][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 310.228492][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 311.418940][T13258] netlink: 'syz.0.2345': attribute type 84 has an invalid length. [ 311.520680][T13258] bond6 (unregistering): Released all slaves [ 311.939788][T13270] tipc: Enabled bearer , priority 0 [ 311.959558][T13270] syzkaller0: entered promiscuous mode [ 311.976545][T13270] syzkaller0: entered allmulticast mode [ 312.137805][T13270] tipc: Resetting bearer [ 312.200036][T13268] tipc: Resetting bearer [ 312.275396][T13268] tipc: Disabling bearer [ 312.570144][T13288] __nla_validate_parse: 46 callbacks suppressed [ 312.570165][T13288] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2355'. [ 312.748908][T13298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2357'. [ 313.087696][T13304] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 313.174248][T13306] netlink: 181256 bytes leftover after parsing attributes in process `syz.4.2363'. [ 313.238266][T13308] debugfs: '1ùà^!‚Y‡°”õËí [ 313.238266][T13308] 3' already exists in 'ieee80211' [ 313.288526][T13311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.374085][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 313.505321][T13321] Unsupported ieee802154 address type: 0 [ 313.746860][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2369'. [ 313.753788][T13320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2367'. [ 313.837359][T13331] netlink: 'syz.3.2370': attribute type 4 has an invalid length. [ 313.876131][T13331] netlink: 3581 bytes leftover after parsing attributes in process `syz.3.2370'. [ 313.969040][T13338] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2373'. [ 314.150189][T13331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2370'. [ 314.201682][T13342] tipc: Enabled bearer , priority 0 [ 314.204274][T13344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2374'. [ 314.275523][T13337] tipc: Resetting bearer [ 314.346269][T13345] syzkaller0: entered promiscuous mode [ 314.386423][T13345] syzkaller0: entered allmulticast mode [ 314.437240][T13334] tipc: Resetting bearer [ 314.514265][T13334] tipc: Disabling bearer [ 314.681836][T13366] macvlan11: entered allmulticast mode [ 314.703908][T13366] gretap0: entered allmulticast mode [ 314.878546][T13371] syzkaller0: entered promiscuous mode [ 314.895675][T13371] syzkaller0: entered allmulticast mode [ 315.061649][T13379] netlink: 'syz.3.2384': attribute type 14 has an invalid length. [ 315.120285][T13379] bond8: left allmulticast mode [ 315.135490][T13379] bond8: left promiscuous mode [ 315.187087][T13379] bond9: left allmulticast mode [ 315.203566][T13379] bond9: left promiscuous mode [ 315.332663][T13379] gretap0: left allmulticast mode [ 315.706958][T13391] netlink: 'syz.0.2386': attribute type 11 has an invalid length. [ 316.114866][T13398] geneve1: entered promiscuous mode [ 317.773061][T13441] __nla_validate_parse: 7 callbacks suppressed [ 317.773092][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'. [ 317.793390][T13441] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2405'. [ 317.828056][T13441] netlink: 'syz.1.2405': attribute type 1 has an invalid length. [ 317.844891][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2405'. [ 318.033122][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2408'. [ 318.061018][T13447] netlink: 'syz.1.2408': attribute type 61 has an invalid length. [ 318.088409][T13451] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2410'. [ 318.308727][T13459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2413'. [ 318.775168][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2414'. [ 318.843727][T13472] xt_NFQUEUE: number of total queues is 0 [ 319.119545][T13482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.128363][T13482] IPv6: NLM_F_CREATE should be set when creating new route [ 319.135770][T13482] IPv6: NLM_F_CREATE should be set when creating new route [ 319.654341][T13498] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2427'. [ 319.692825][T13504] netlink: 'syz.2.2428': attribute type 11 has an invalid length. [ 319.708786][T13507] FAULT_INJECTION: forcing a failure. [ 319.708786][T13507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.736490][T13507] CPU: 1 UID: 0 PID: 13507 Comm: syz.1.2429 Not tainted syzkaller #0 PREEMPT(full) [ 319.736521][T13507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.736533][T13507] Call Trace: [ 319.736541][T13507] [ 319.736550][T13507] dump_stack_lvl+0xe8/0x150 [ 319.736579][T13507] should_fail_ex+0x412/0x560 [ 319.736619][T13507] _copy_from_user+0x2d/0xb0 [ 319.736653][T13507] __copy_msghdr+0x3c5/0x5b0 [ 319.736682][T13507] ___sys_sendmsg+0x213/0x360 [ 319.736704][T13507] ? __lock_acquire+0x6b5/0x2cf0 [ 319.736730][T13507] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.736788][T13507] ? __fget_files+0x2a/0x420 [ 319.736812][T13507] ? __fget_files+0x3a0/0x420 [ 319.736847][T13507] __x64_sys_sendmsg+0x1bd/0x2a0 [ 319.736872][T13507] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.736905][T13507] ? __pfx_ksys_write+0x10/0x10 [ 319.736944][T13507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.736966][T13507] do_syscall_64+0x15f/0xf80 [ 319.736985][T13507] ? trace_irq_disable+0x3b/0x140 [ 319.737023][T13507] ? clear_bhb_loop+0x40/0x90 [ 319.737050][T13507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.737067][T13507] RIP: 0033:0x7efd9e79ce59 [ 319.737088][T13507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.737104][T13507] RSP: 002b:00007efd9f588028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.737127][T13507] RAX: ffffffffffffffda RBX: 00007efd9ea15fa0 RCX: 00007efd9e79ce59 [ 319.737142][T13507] RDX: 0000000000000000 RSI: 0000200000001c00 RDI: 0000000000000004 [ 319.737154][T13507] RBP: 00007efd9f588090 R08: 0000000000000000 R09: 0000000000000000 [ 319.737166][T13507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.737177][T13507] R13: 00007efd9ea16038 R14: 00007efd9ea15fa0 R15: 00007fff4c656678 [ 319.737212][T13507] [ 320.316205][T13525] syzkaller0: entered promiscuous mode [ 320.348917][T13525] syzkaller0: entered allmulticast mode [ 320.722001][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 321.161779][T13565] netlink: 'syz.3.2448': attribute type 9 has an invalid length. [ 321.176105][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2447'. [ 321.258680][T13563] sctp: [Deprecated]: syz.4.2447 (pid 13563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.258680][T13563] Use struct sctp_sack_info instead [ 321.289427][T13567] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2449'. [ 322.063802][T13594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.244550][T13615] IPv6: NLM_F_REPLACE set, but no existing node found! [ 322.277846][T13617] netlink: 'syz.0.2467': attribute type 5 has an invalid length. [ 322.441154][T13621] FAULT_INJECTION: forcing a failure. [ 322.441154][T13621] name failslab, interval 1, probability 0, space 0, times 0 [ 322.473115][T13621] CPU: 1 UID: 0 PID: 13621 Comm: syz.1.2469 Not tainted syzkaller #0 PREEMPT(full) [ 322.473156][T13621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.473168][T13621] Call Trace: [ 322.473177][T13621] [ 322.473186][T13621] dump_stack_lvl+0xe8/0x150 [ 322.473217][T13621] should_fail_ex+0x412/0x560 [ 322.473250][T13621] should_failslab+0xa8/0x100 [ 322.473283][T13621] __kvmalloc_node_noprof+0x178/0x8a0 [ 322.473315][T13621] ? nf_hook_entries_grow+0x288/0x720 [ 322.473352][T13621] nf_hook_entries_grow+0x288/0x720 [ 322.473393][T13621] __nf_register_net_hook+0x2c9/0x930 [ 322.473431][T13621] nf_register_net_hook+0xb2/0x190 [ 322.473460][T13621] nf_register_net_hooks+0x44/0x1b0 [ 322.473490][T13621] nf_ct_netns_do_get+0x3bf/0x5c0 [ 322.473518][T13621] ? rcu_is_watching+0x15/0xb0 [ 322.473546][T13621] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 322.473585][T13621] ? nf_ct_netns_get+0xe9/0x320 [ 322.473615][T13621] helper_mt_check+0x74/0x150 [ 322.473640][T13621] xt_check_match+0x64c/0xce0 [ 322.473675][T13621] ? __pfx_xt_check_match+0x10/0x10 [ 322.473719][T13621] ? xt_find_match+0x20c/0x260 [ 322.473765][T13621] translate_table+0x1567/0x2110 [ 322.473815][T13621] ? __pfx_translate_table+0x10/0x10 [ 322.473837][T13621] ? __might_fault+0xaf/0x130 [ 322.473864][T13621] ? __might_fault+0xaf/0x130 [ 322.473914][T13621] ? _copy_from_user+0x94/0xb0 [ 322.473951][T13621] do_ipt_set_ctl+0x9f5/0xe00 [ 322.473977][T13621] ? rcu_is_watching+0x15/0xb0 [ 322.474001][T13621] ? trace_contention_end+0x3d/0x140 [ 322.474031][T13621] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 322.474072][T13621] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 322.474095][T13621] ? __pfx___mutex_lock+0x10/0x10 [ 322.474116][T13621] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 322.474148][T13621] ? __pfx_aa_sk_perm+0x10/0x10 [ 322.474184][T13621] nf_setsockopt+0x26f/0x290 [ 322.474214][T13621] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 322.474246][T13621] do_sock_setsockopt+0x17c/0x1b0 [ 322.474276][T13621] __x64_sys_setsockopt+0x13d/0x1b0 [ 322.474302][T13621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.474325][T13621] do_syscall_64+0x15f/0xf80 [ 322.474344][T13621] ? trace_irq_disable+0x3b/0x140 [ 322.474373][T13621] ? clear_bhb_loop+0x40/0x90 [ 322.474399][T13621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.474420][T13621] RIP: 0033:0x7efd9e79ce59 [ 322.474440][T13621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.474458][T13621] RSP: 002b:00007efd9f588028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 322.474481][T13621] RAX: ffffffffffffffda RBX: 00007efd9ea15fa0 RCX: 00007efd9e79ce59 [ 322.474496][T13621] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 322.474509][T13621] RBP: 00007efd9f588090 R08: 0000000000000310 R09: 0000000000000000 [ 322.474522][T13621] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 322.474534][T13621] R13: 00007efd9ea16038 R14: 00007efd9ea15fa0 R15: 00007fff4c656678 [ 322.474570][T13621] [ 322.775091][T13621] xt_helper: cannot load conntrack support for proto=2 [ 323.043925][T13630] __nla_validate_parse: 2 callbacks suppressed [ 323.043947][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2472'. [ 323.186133][T13630] 8021q: adding VLAN 0 to HW filter on device bond10 [ 323.221196][T13636] macvlan12: entered promiscuous mode [ 323.229032][T13642] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2475'. [ 323.241434][T13636] macvlan12: entered allmulticast mode [ 323.247279][T13636] bond10: entered allmulticast mode [ 323.253125][T13636] bond10: entered promiscuous mode [ 323.258809][T13636] 8021q: adding VLAN 0 to HW filter on device macvlan12 [ 323.267426][T13636] team0: Port device macvlan12 added [ 323.425052][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 323.561871][T13649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2480'. [ 323.721533][T13658] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2481'. [ 324.487063][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 324.497219][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 324.507795][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 324.519236][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 324.534194][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 324.864347][T13692] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20001 [ 326.513324][T13755] gretap2: entered promiscuous mode [ 326.518761][T13755] gretap2: entered allmulticast mode [ 327.480479][T13790] veth0: entered promiscuous mode [ 327.517763][T13790] veth0 (unregistering): left promiscuous mode [ 328.094936][T13815] __nla_validate_parse: 97 callbacks suppressed [ 328.094958][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2530'. [ 328.130340][T13818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2531'. [ 328.175609][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2523'. [ 328.200531][T13825] netlink: 'syz.4.2533': attribute type 25 has an invalid length. [ 328.208753][T13825] netlink: 'syz.4.2533': attribute type 3 has an invalid length. [ 328.231092][T13825] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2533'. [ 329.112419][T13851] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2539'. [ 329.200631][T13856] tipc: Enabled bearer , priority 0 [ 329.217960][T13856] syzkaller0: entered promiscuous mode [ 329.223582][T13856] syzkaller0: entered allmulticast mode [ 329.450688][T13859] tipc: Resetting bearer [ 329.499952][T13855] tipc: Resetting bearer [ 329.611479][T13855] tipc: Disabling bearer [ 329.665678][T13867] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2545'. [ 329.778036][T13874] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2547'. [ 329.789165][T13874] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2547'. [ 329.955942][T13882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2550'. [ 330.036250][T13884] xt_cgroup: invalid path, errno=-2 [ 330.260164][T13894] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2552'. [ 332.925968][T13984] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 332.991750][T13984] batman_adv: batadv0: Adding interface: gretap1 [ 333.012026][T13988] netlink: 'syz.0.2587': attribute type 9 has an invalid length. [ 333.038354][T13984] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.073989][T13984] batman_adv: batadv0: Interface activated: gretap1 [ 334.283322][T14019] tipc: Enabled bearer , priority 0 [ 334.300355][T14019] syzkaller0: entered promiscuous mode [ 334.312204][T14019] syzkaller0: entered allmulticast mode [ 334.341422][T14025] FAULT_INJECTION: forcing a failure. [ 334.341422][T14025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.348696][T14019] tipc: Resetting bearer [ 334.375595][T14025] CPU: 1 UID: 0 PID: 14025 Comm: syz.3.2599 Not tainted syzkaller #0 PREEMPT(full) [ 334.375624][T14025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 334.375636][T14025] Call Trace: [ 334.375644][T14025] [ 334.375652][T14025] dump_stack_lvl+0xe8/0x150 [ 334.375682][T14025] should_fail_ex+0x412/0x560 [ 334.375716][T14025] _copy_from_user+0x2d/0xb0 [ 334.375748][T14025] __sys_bpf+0x229/0x950 [ 334.375781][T14025] ? __pfx___sys_bpf+0x10/0x10 [ 334.375829][T14025] ? ksys_write+0x242/0x270 [ 334.375861][T14025] ? __pfx_ksys_write+0x10/0x10 [ 334.375905][T14025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.375927][T14025] __x64_sys_bpf+0x7c/0x90 [ 334.375956][T14025] do_syscall_64+0x15f/0xf80 [ 334.375977][T14025] ? trace_irq_disable+0x3b/0x140 [ 334.376008][T14025] ? clear_bhb_loop+0x40/0x90 [ 334.376032][T14025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.376053][T14025] RIP: 0033:0x7f6106b9ce59 [ 334.376072][T14025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.376091][T14025] RSP: 002b:00007f61079f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.376114][T14025] RAX: ffffffffffffffda RBX: 00007f6106e15fa0 RCX: 00007f6106b9ce59 [ 334.376129][T14025] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000008 [ 334.376142][T14025] RBP: 00007f61079f0090 R08: 0000000000000000 R09: 0000000000000000 [ 334.376153][T14025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.376165][T14025] R13: 00007f6106e16038 R14: 00007f6106e15fa0 R15: 00007ffe1d02eab8 [ 334.376199][T14025] [ 334.582345][T14018] tipc: Resetting bearer [ 334.633596][T14018] tipc: Disabling bearer [ 335.122407][T14022] __nla_validate_parse: 11 callbacks suppressed [ 335.122430][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2598'. [ 335.453206][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2613'. [ 335.507782][T14069] tipc: Enabled bearer , priority 10 [ 335.599187][T14079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2615'. [ 336.018767][T14079] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 336.065011][T14079] ip6_vti0: entered allmulticast mode [ 336.168353][T14104] tipc: Enabled bearer , priority 0 [ 336.199472][T14104] syzkaller0: entered promiscuous mode [ 336.219139][T14104] syzkaller0: entered allmulticast mode [ 336.273798][T14103] tipc: Resetting bearer [ 336.296859][T14103] tipc: Disabling bearer [ 336.313275][T14106] syzkaller1: entered allmulticast mode [ 336.422904][T14116] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2625'. [ 336.620464][T11315] tipc: Node number set to 779214359 [ 336.784993][T14128] netlink: 'syz.0.2631': attribute type 1 has an invalid length. [ 336.926735][T14136] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 336.996944][T14143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2636'. [ 337.064214][T14145] netlink: 'syz.1.2635': attribute type 11 has an invalid length. [ 337.074037][T14145] netlink: 'syz.1.2635': attribute type 5 has an invalid length. [ 337.088212][T14145] netlink: 6548 bytes leftover after parsing attributes in process `syz.1.2635'. [ 337.458197][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2642'. [ 337.519699][ T5633] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 337.519767][ T5636] Bluetooth: hci0: command 0x080f tx timeout [ 337.827027][T14178] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2648'. [ 338.065913][T14190] debugfs: '1ùà^!‚Y‡' already exists in 'ieee80211' [ 338.146421][T14195] netlink: 'syz.0.2655': attribute type 3 has an invalid length. [ 338.168181][T14195] netlink: 'syz.0.2655': attribute type 3 has an invalid length. [ 338.383479][T14209] FAULT_INJECTION: forcing a failure. [ 338.383479][T14209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.433830][T14209] CPU: 1 UID: 0 PID: 14209 Comm: syz.2.2661 Not tainted syzkaller #0 PREEMPT(full) [ 338.433862][T14209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 338.433873][T14209] Call Trace: [ 338.433881][T14209] [ 338.433896][T14209] dump_stack_lvl+0xe8/0x150 [ 338.433927][T14209] should_fail_ex+0x412/0x560 [ 338.433962][T14209] _copy_to_user+0x31/0xb0 [ 338.433996][T14209] simple_read_from_buffer+0xe1/0x170 [ 338.434029][T14209] proc_fail_nth_read+0x1bb/0x230 [ 338.434060][T14209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.434088][T14209] ? rw_verify_area+0x2a6/0x4d0 [ 338.434116][T14209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.434143][T14209] vfs_read+0x20c/0xa70 [ 338.434177][T14209] ? __pfx___mutex_lock+0x10/0x10 [ 338.434200][T14209] ? __pfx_vfs_read+0x10/0x10 [ 338.434231][T14209] ? __fget_files+0x2a/0x420 [ 338.434262][T14209] ? __fget_files+0x3a0/0x420 [ 338.434285][T14209] ? __fget_files+0x2a/0x420 [ 338.434320][T14209] ksys_read+0x150/0x270 [ 338.434352][T14209] ? __pfx_ksys_read+0x10/0x10 [ 338.434391][T14209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.434415][T14209] do_syscall_64+0x15f/0xf80 [ 338.434434][T14209] ? trace_irq_disable+0x3b/0x140 [ 338.434463][T14209] ? clear_bhb_loop+0x40/0x90 [ 338.434489][T14209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.434509][T14209] RIP: 0033:0x7f565cd5d68e [ 338.434528][T14209] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 338.434545][T14209] RSP: 002b:00007f565aff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 338.434569][T14209] RAX: ffffffffffffffda RBX: 00007f565aff66c0 RCX: 00007f565cd5d68e [ 338.434584][T14209] RDX: 000000000000000f RSI: 00007f565aff60a0 RDI: 0000000000000005 [ 338.434605][T14209] RBP: 00007f565aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 338.434617][T14209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.434628][T14209] R13: 00007f565d016038 R14: 00007f565d015fa0 R15: 00007fff73a103e8 [ 338.434666][T14209] [ 338.810743][T14224] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 338.810743][T14224] Please contact the netfilter-devel mailing list or update your nftables rules. [ 339.007549][T14235] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2670'. [ 339.045080][T14231] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2668'. [ 339.073321][T14238] netlink: 'syz.2.2671': attribute type 32 has an invalid length. [ 339.161636][T14242] xt_NFQUEUE: number of total queues is 0 [ 339.805248][T14265] netlink: 'syz.1.2679': attribute type 32 has an invalid length. [ 340.015148][T14265] bond6: Setting coupled_control to off (0) [ 341.384236][T14314] netlink: 'syz.3.2697': attribute type 1 has an invalid length. [ 341.488380][T14322] __nla_validate_parse: 4 callbacks suppressed [ 341.488401][T14322] netlink: 840 bytes leftover after parsing attributes in process `syz.1.2699'. [ 341.554492][T14322] block nbd1: not configured, cannot reconfigure [ 341.676486][T14329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2700'. [ 341.698508][T14322] netlink: 840 bytes leftover after parsing attributes in process `syz.1.2699'. [ 341.822409][T14315] bond11: (slave bridge4): making interface the new active one [ 341.834276][T14315] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 342.150524][T14335] FAULT_INJECTION: forcing a failure. [ 342.150524][T14335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.174256][T14335] CPU: 0 UID: 0 PID: 14335 Comm: syz.3.2702 Not tainted syzkaller #0 PREEMPT(full) [ 342.174288][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.174299][T14335] Call Trace: [ 342.174314][T14335] [ 342.174323][T14335] dump_stack_lvl+0xe8/0x150 [ 342.174353][T14335] should_fail_ex+0x412/0x560 [ 342.174387][T14335] _copy_from_user+0x2d/0xb0 [ 342.174418][T14335] __sys_bpf+0x229/0x950 [ 342.174458][T14335] ? __pfx___sys_bpf+0x10/0x10 [ 342.174505][T14335] ? ksys_write+0x242/0x270 [ 342.174536][T14335] ? __pfx_ksys_write+0x10/0x10 [ 342.174571][T14335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.174593][T14335] __x64_sys_bpf+0x7c/0x90 [ 342.174621][T14335] do_syscall_64+0x15f/0xf80 [ 342.174648][T14335] ? trace_irq_disable+0x3b/0x140 [ 342.174678][T14335] ? clear_bhb_loop+0x40/0x90 [ 342.174704][T14335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.174722][T14335] RIP: 0033:0x7f6106b9ce59 [ 342.174743][T14335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.174759][T14335] RSP: 002b:00007f61079f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.174782][T14335] RAX: ffffffffffffffda RBX: 00007f6106e15fa0 RCX: 00007f6106b9ce59 [ 342.174796][T14335] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000f [ 342.174810][T14335] RBP: 00007f61079f0090 R08: 0000000000000000 R09: 0000000000000000 [ 342.174822][T14335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.174834][T14335] R13: 00007f6106e16038 R14: 00007f6106e15fa0 R15: 00007ffe1d02eab8 [ 342.174878][T14335] [ 342.636861][T14342] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2705'. [ 342.782961][T14346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2708'. [ 343.582583][T14363] netlink: 'syz.3.2711': attribute type 11 has an invalid length. [ 343.635582][T14360] tipc: Enabled bearer , priority 0 [ 343.993090][T14360] syzkaller0: entered promiscuous mode [ 344.014617][T14360] syzkaller0: entered allmulticast mode [ 344.028476][T14360] tipc: Resetting bearer [ 344.082746][T14372] netlink: 'syz.1.2712': attribute type 25 has an invalid length. [ 344.094676][T14372] netlink: 'syz.1.2712': attribute type 3 has an invalid length. [ 344.103955][T14372] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2712'. [ 344.137200][ T7877] tipc: Resetting bearer [ 344.171523][T14359] tipc: Resetting bearer [ 344.596214][T14385] xt_cgroup: invalid path, errno=-2 [ 347.086831][T14359] tipc: Disabling bearer [ 347.099266][T11315] tipc: Node number set to 454634642 [ 348.442958][T14423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.450332][T14423] IPv6: NLM_F_CREATE should be set when creating new route [ 348.457731][T14423] IPv6: NLM_F_CREATE should be set when creating new route [ 349.903271][T14468] netlink: 'syz.0.2741': attribute type 25 has an invalid length. [ 349.928794][T14468] netlink: 'syz.0.2741': attribute type 3 has an invalid length. [ 349.964488][T14468] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2741'. [ 350.426007][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2747'. [ 351.001260][T14506] netlink: 'syz.2.2752': attribute type 1 has an invalid length. [ 351.296535][T14506] 8021q: adding VLAN 0 to HW filter on device bond5 [ 351.482447][T14516] bond5: (slave veth9): Enslaving as an active interface with a down link [ 351.578531][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2758'. [ 351.650461][T14522] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 351.682496][T14522] bond5: (slave batadv1): making interface the new active one [ 351.710970][T14522] batadv1: entered promiscuous mode [ 351.725383][T14522] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 351.750783][T14526] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 351.775984][T14526] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 351.824248][T14526] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 351.854957][T14506] bond5 (unregistering): (slave veth9): Releasing active interface [ 351.957927][T14506] bond5 (unregistering): (slave batadv1): Releasing active interface [ 352.019904][T14506] bond5 (unregistering): Released all slaves [ 352.070798][T14543] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2760'. [ 352.096709][T14543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2760'. [ 352.124364][T14543] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2760'. [ 352.426281][T14550] netlink: 'syz.4.2764': attribute type 25 has an invalid length. [ 352.469295][T14550] netlink: 'syz.4.2764': attribute type 3 has an invalid length. [ 352.504111][T14550] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2764'. [ 352.663041][T14551] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2762'. [ 353.436191][T14584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 353.508916][T14589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.556685][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'. [ 354.643614][T14620] netlink: 'syz.2.2786': attribute type 25 has an invalid length. [ 354.660148][T14620] netlink: 'syz.2.2786': attribute type 3 has an invalid length. [ 355.859001][T14649] SET target dimension over the limit! [ 356.238039][T14658] netlink: 'syz.4.2799': attribute type 25 has an invalid length. [ 356.274972][T14658] netlink: 'syz.4.2799': attribute type 3 has an invalid length. [ 356.296152][T14658] __nla_validate_parse: 5 callbacks suppressed [ 356.296197][T14658] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2799'. [ 356.458944][T14664] veth0: entered promiscuous mode [ 356.475408][T14664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2803'. [ 356.495491][T14668] netlink: 'syz.0.2804': attribute type 1 has an invalid length. [ 356.507960][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2802'. [ 356.517495][T14668] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2804'. [ 356.531267][T14664] veth0 (unregistering): left promiscuous mode [ 358.253718][T14711] netlink: 'syz.0.2819': attribute type 25 has an invalid length. [ 358.266168][T14711] netlink: 'syz.0.2819': attribute type 3 has an invalid length. [ 358.280484][T14708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.291077][T14711] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2819'. [ 358.747843][T14723] bond0: Device is already in use. [ 358.807329][T14724] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2822'. [ 359.157346][T14731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2825'. [ 359.166307][T14730] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2824'. [ 359.616634][T14745] netlink: 'syz.0.2828': attribute type 11 has an invalid length. [ 360.040949][T14752] syzkaller0: entered promiscuous mode [ 360.056640][T14752] syzkaller0: entered allmulticast mode [ 360.746647][T14766] tipc: Enabled bearer , priority 0 [ 360.771487][T14771] IPVS: Unknown mcast interface: ip6gretap0 [ 360.866833][T14766] tipc: Disabling bearer [ 361.250971][T14778] netlink: 4104 bytes leftover after parsing attributes in process `syz.0.2840'. [ 361.271278][T14778] tipc: Can't bind to reserved service type 0 [ 362.549272][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2852'. [ 363.206165][T14821] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2858'. [ 363.211742][T14819] debugfs: '1ùà^!‚Y‡' already exists in 'ieee80211' [ 363.441614][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 363.912964][T14831] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 363.993382][T14838] veth0: entered promiscuous mode [ 364.024963][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2862'. [ 365.592112][T14833] veth0 (unregistering): left promiscuous mode [ 365.743608][T14848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2867'. [ 366.695935][T14864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2871'. [ 366.963383][T14867] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2872'. [ 367.280367][ T5633] Bluetooth: hci4: command 0x0406 tx timeout [ 368.549196][T14897] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2882'. [ 368.827568][T14900] Cannot find del_set index 1 as target [ 369.219090][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2887'. [ 369.766888][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2883'. [ 369.858380][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2894'. [ 369.883523][T14917] FAULT_INJECTION: forcing a failure. [ 369.883523][T14917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.927264][T14917] CPU: 0 UID: 0 PID: 14917 Comm: syz.1.2893 Not tainted syzkaller #0 PREEMPT(full) [ 369.927295][T14917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 369.927309][T14917] Call Trace: [ 369.927317][T14917] [ 369.927327][T14917] dump_stack_lvl+0xe8/0x150 [ 369.927358][T14917] should_fail_ex+0x412/0x560 [ 369.927391][T14917] _copy_to_user+0x31/0xb0 [ 369.927435][T14917] simple_read_from_buffer+0xe1/0x170 [ 369.927469][T14917] proc_fail_nth_read+0x1bb/0x230 [ 369.927501][T14917] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 369.927531][T14917] ? rw_verify_area+0x2a6/0x4d0 [ 369.927557][T14917] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 369.927581][T14917] vfs_read+0x20c/0xa70 [ 369.927611][T14917] ? __pfx___mutex_lock+0x10/0x10 [ 369.927634][T14917] ? __pfx_vfs_read+0x10/0x10 [ 369.927660][T14917] ? __fget_files+0x2a/0x420 [ 369.927687][T14917] ? __fget_files+0x3a0/0x420 [ 369.927710][T14917] ? __fget_files+0x2a/0x420 [ 369.927742][T14917] ksys_read+0x150/0x270 [ 369.927769][T14917] ? __pfx_ksys_read+0x10/0x10 [ 369.927801][T14917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.927819][T14917] do_syscall_64+0x15f/0xf80 [ 369.927838][T14917] ? clear_bhb_loop+0x40/0x90 [ 369.927860][T14917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.927877][T14917] RIP: 0033:0x7efd9e75d68e [ 369.927896][T14917] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 369.927911][T14917] RSP: 002b:00007efd9f587fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 369.927931][T14917] RAX: ffffffffffffffda RBX: 00007efd9f5886c0 RCX: 00007efd9e75d68e [ 369.927946][T14917] RDX: 000000000000000f RSI: 00007efd9f5880a0 RDI: 0000000000000009 [ 369.927957][T14917] RBP: 00007efd9f588090 R08: 0000000000000000 R09: 0000000000000000 [ 369.927967][T14917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.927978][T14917] R13: 00007efd9ea16038 R14: 00007efd9ea15fa0 R15: 00007fff4c656678 [ 369.928010][T14917] [ 370.200614][T14919] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2894'. [ 370.316578][T14925] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 371.101201][T14944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2898'. [ 371.132264][T14944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2898'. [ 371.396016][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2900'. [ 371.486185][T14948] tipc: Enabled bearer , priority 0 [ 371.553730][T14948] syzkaller0: entered promiscuous mode [ 371.588857][T14948] syzkaller0: entered allmulticast mode [ 371.922162][T14948] tipc: Resetting bearer [ 372.065489][T14947] tipc: Resetting bearer [ 372.129928][T14970] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2902'. [ 372.258802][T14947] tipc: Disabling bearer [ 372.456684][T14976] FAULT_INJECTION: forcing a failure. [ 372.456684][T14976] name failslab, interval 1, probability 0, space 0, times 0 [ 372.500351][T14976] CPU: 1 UID: 0 PID: 14976 Comm: syz.2.2906 Not tainted syzkaller #0 PREEMPT(full) [ 372.500383][T14976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.500396][T14976] Call Trace: [ 372.500405][T14976] [ 372.500413][T14976] dump_stack_lvl+0xe8/0x150 [ 372.500445][T14976] should_fail_ex+0x412/0x560 [ 372.500477][T14976] should_failslab+0xa8/0x100 [ 372.500512][T14976] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 372.500540][T14976] ? __alloc_skb+0x186/0x7d0 [ 372.500558][T14976] ? __alloc_skb+0x1d0/0x7d0 [ 372.500573][T14976] ? __local_bh_enable_ip+0xd0/0x130 [ 372.500602][T14976] __alloc_skb+0x1d0/0x7d0 [ 372.500620][T14976] ? netlink_ack_tlv_len+0x6c/0x210 [ 372.500647][T14976] netlink_ack+0x146/0xa50 [ 372.500666][T14976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 372.500694][T14976] ? ref_tracker_free+0x693/0x840 [ 372.500733][T14976] ? __pfx_ref_tracker_free+0x10/0x10 [ 372.500770][T14976] netlink_rcv_skb+0x2b6/0x4b0 [ 372.500793][T14976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 372.500822][T14976] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.500855][T14976] ? netlink_deliver_tap+0x2e/0x1b0 [ 372.500876][T14976] ? netlink_deliver_tap+0x2e/0x1b0 [ 372.500905][T14976] netlink_unicast+0x75c/0x8e0 [ 372.500938][T14976] netlink_sendmsg+0x813/0xb40 [ 372.500970][T14976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.500997][T14976] ? aa_sock_msg_perm+0xf1/0x1b0 [ 372.501027][T14976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.501059][T14976] ____sys_sendmsg+0x972/0x9f0 [ 372.501082][T14976] ? __might_fault+0xaf/0x130 [ 372.501116][T14976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.501147][T14976] ? import_iovec+0x73/0xa0 [ 372.501183][T14976] ___sys_sendmsg+0x2a5/0x360 [ 372.501205][T14976] ? __lock_acquire+0x6b5/0x2cf0 [ 372.501233][T14976] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.501295][T14976] ? __fget_files+0x2a/0x420 [ 372.501319][T14976] ? __fget_files+0x3a0/0x420 [ 372.501381][T14976] __x64_sys_sendmsg+0x1bd/0x2a0 [ 372.501407][T14976] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.501439][T14976] ? __pfx_ksys_write+0x10/0x10 [ 372.501477][T14976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.501500][T14976] do_syscall_64+0x15f/0xf80 [ 372.501537][T14976] ? trace_irq_disable+0x3b/0x140 [ 372.501569][T14976] ? clear_bhb_loop+0x40/0x90 [ 372.501596][T14976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.501623][T14976] RIP: 0033:0x7f565cd9ce59 [ 372.501643][T14976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.501661][T14976] RSP: 002b:00007f565aff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.501684][T14976] RAX: ffffffffffffffda RBX: 00007f565d015fa0 RCX: 00007f565cd9ce59 [ 372.501699][T14976] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 372.501731][T14976] RBP: 00007f565aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 372.501744][T14976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.501757][T14976] R13: 00007f565d016038 R14: 00007f565d015fa0 R15: 00007fff73a103e8 [ 372.501792][T14976] [ 373.154654][T14987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2908'. [ 373.352328][T14994] bridge0: entered promiscuous mode [ 374.049794][T15010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2917'. [ 374.162087][T14986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2910'. [ 374.345858][T15017] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2920'. [ 374.783074][T15029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2924'. [ 374.920956][T15038] netlink: 'syz.1.2926': attribute type 13 has an invalid length. [ 374.949330][T15038] netlink: 'syz.1.2926': attribute type 17 has an invalid length. [ 375.445354][T15038] bridge0: left allmulticast mode [ 375.495950][T15038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.547663][T15038] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.670930][ T36] IPVS: rr: FWM 3 0x00000003 - no destination available [ 375.814684][T15038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 375.825737][T15038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.842853][T15038] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 375.859057][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2914'. [ 375.926570][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.933901][ T7877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.976146][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.983377][ T7877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.302600][T15075] veth0: entered promiscuous mode [ 376.308286][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2933'. [ 376.420134][T15075] veth0 (unregistering): left promiscuous mode [ 376.443328][T15075] veth1 (unregistering): left allmulticast mode [ 377.041314][T15105] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2946'. [ 377.585484][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2943'. [ 377.609773][T15124] IPv6: NLM_F_REPLACE set, but no existing node found! [ 377.905663][T15116] syz_tun: entered allmulticast mode [ 378.284251][T15110] syz_tun: left allmulticast mode [ 378.782825][T15142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2954'. [ 378.925898][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2956'. [ 379.420942][T15156] FAULT_INJECTION: forcing a failure. [ 379.420942][T15156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.526884][T15156] CPU: 1 UID: 0 PID: 15156 Comm: syz.0.2961 Not tainted syzkaller #0 PREEMPT(full) [ 379.526913][T15156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 379.526923][T15156] Call Trace: [ 379.526931][T15156] [ 379.526938][T15156] dump_stack_lvl+0xe8/0x150 [ 379.526965][T15156] should_fail_ex+0x412/0x560 [ 379.526996][T15156] _copy_to_user+0x31/0xb0 [ 379.527024][T15156] simple_read_from_buffer+0xe1/0x170 [ 379.527051][T15156] proc_fail_nth_read+0x1bb/0x230 [ 379.527077][T15156] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.527103][T15156] ? rw_verify_area+0x2a6/0x4d0 [ 379.527127][T15156] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.527150][T15156] vfs_read+0x20c/0xa70 [ 379.527179][T15156] ? __pfx___mutex_lock+0x10/0x10 [ 379.527198][T15156] ? __pfx_vfs_read+0x10/0x10 [ 379.527224][T15156] ? __fget_files+0x2a/0x420 [ 379.527248][T15156] ? __fget_files+0x3a0/0x420 [ 379.527268][T15156] ? __fget_files+0x2a/0x420 [ 379.527296][T15156] ksys_read+0x150/0x270 [ 379.527322][T15156] ? __pfx_ksys_read+0x10/0x10 [ 379.527355][T15156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.527375][T15156] do_syscall_64+0x15f/0xf80 [ 379.527402][T15156] ? trace_irq_disable+0x3b/0x140 [ 379.527428][T15156] ? clear_bhb_loop+0x40/0x90 [ 379.527460][T15156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.527477][T15156] RIP: 0033:0x7f780a15d68e [ 379.527493][T15156] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 379.527508][T15156] RSP: 002b:00007f780b0d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 379.527527][T15156] RAX: ffffffffffffffda RBX: 00007f780b0d96c0 RCX: 00007f780a15d68e [ 379.527540][T15156] RDX: 000000000000000f RSI: 00007f780b0d90a0 RDI: 0000000000000004 [ 379.527551][T15156] RBP: 00007f780b0d9090 R08: 0000000000000000 R09: 0000000000000000 [ 379.527561][T15156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.527571][T15156] R13: 00007f780a416038 R14: 00007f780a415fa0 R15: 00007ffdc3cc4cf8 [ 379.527607][T15156] [ 380.445406][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2963'. [ 380.777819][T15175] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 381.015416][T15188] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2968'. [ 386.283154][ C1] sched: DL replenish lagged too much [ 388.954298][ T7877] IPVS: rr: FWM 3 0x00000003 - no destination available [ 403.167182][ T3352] IPVS: rr: FWM 3 0x00000003 - no destination available [ 429.830052][ T3335] IPVS: rr: FWM 3 0x00000003 - no destination available [ 453.672736][ T3335] IPVS: rr: FWM 3 0x00000003 - no destination available [ 482.173703][ T3352] IPVS: rr: FWM 3 0x00000003 - no destination available [ 486.324393][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 518.260074][ T3352] IPVS: rr: FWM 3 0x00000003 - no destination available [ 529.840618][ T7876] IPVS: rr: FWM 3 0x00000003 - no destination available [ 564.193412][ T7878] IPVS: rr: FWM 3 0x00000003 - no destination available [ 612.573257][ T7878] IPVS: rr: FWM 3 0x00000003 - no destination available [ 619.336344][ T7878] IPVS: rr: FWM 3 0x00000003 - no destination available [ 621.909462][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 621.916478][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9/1:b..l P5291/1:b..l [ 621.925708][ C0] rcu: (detected by 0, t=10502 jiffies, g=76673, q=483928 ncpus=2) [ 621.933715][ C0] task:dhcpcd state:R running task stack:21368 pid:5291 tgid:5291 ppid:5290 task_flags:0x400140 flags:0x00080800 [ 621.948252][ C0] Call Trace: [ 621.951574][ C0] [ 621.954536][ C0] __schedule+0x1821/0x5740 [ 621.959088][ C0] ? finish_task_switch+0x4da/0xbe0 [ 621.964336][ C0] ? __pfx_mas_wr_store_entry+0x10/0x10 [ 621.969924][ C0] ? __schedule+0x1837/0x5740 [ 621.974662][ C0] ? __pfx___schedule+0x10/0x10 [ 621.979548][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 621.984536][ C0] preempt_schedule_irq+0x4d/0xa0 [ 621.989604][ C0] irqentry_exit+0x14f/0x760 [ 621.994219][ C0] ? trace_irq_disable+0x3b/0x140 [ 621.999284][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 622.005302][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 622.010616][ C0] Code: ff ff ff e8 f1 3d 09 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db e8 98 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 40 31 0c 0a cc 48 8d 3d c8 dc 92 [ 622.030249][ C0] RSP: 0018:ffffc900033570b8 EFLAGS: 00000286 [ 622.036352][ C0] RAX: fb19e465f3745500 RBX: 0000000000000000 RCX: 0000000000000046 [ 622.044350][ C0] RDX: 0000000072a91396 RSI: ffffffff8e22b58a RDI: ffffffff8c28b760 [ 622.052349][ C0] RBP: ffffffff8176f256 R08: ffffffff8176f256 R09: ffffffff8e95cca0 [ 622.060353][ C0] R10: ffffc90003357228 R11: fffff5200066ae51 R12: 0000000000000002 [ 622.068360][ C0] R13: ffffffff8e95cca0 R14: 0000000000000000 R15: 0000000000000246 [ 622.076370][ C0] ? unwind_next_frame+0xa6/0x2550 [ 622.081524][ C0] ? unwind_next_frame+0xa6/0x2550 [ 622.086683][ C0] ? __unwind_start+0xf7/0x760 [ 622.091486][ C0] ? unwind_next_frame+0xa6/0x2550 [ 622.096634][ C0] unwind_next_frame+0xc3/0x2550 [ 622.101617][ C0] ? unwind_next_frame+0xa6/0x2550 [ 622.106768][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 622.112003][ C0] ? get_stack_info_noinstr+0x1b/0x130 [ 622.117508][ C0] __unwind_start+0x5b8/0x760 [ 622.122223][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 622.128415][ C0] arch_stack_walk+0xe3/0x150 [ 622.133142][ C0] ? __unwind_start+0xf7/0x760 [ 622.137964][ C0] stack_trace_save+0xa9/0x100 [ 622.142762][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 622.148186][ C0] save_stack+0x122/0x230 [ 622.152551][ C0] ? __pfx_save_stack+0x10/0x10 [ 622.157458][ C0] __reset_page_owner+0x71/0x1f0 [ 622.162449][ C0] __free_frozen_pages+0xbc7/0xd30 [ 622.167616][ C0] __slab_free+0x274/0x2c0 [ 622.172077][ C0] ? qlist_free_all+0x8e/0x100 [ 622.176884][ C0] qlist_free_all+0x99/0x100 [ 622.181512][ C0] ? anon_vma_fork+0x83/0x570 [ 622.186224][ C0] kasan_quarantine_reduce+0x148/0x160 [ 622.191808][ C0] __kasan_slab_alloc+0x22/0x80 [ 622.196699][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 622.202186][ C0] ? anon_vma_fork+0x83/0x570 [ 622.206896][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 622.212566][ C0] anon_vma_fork+0x83/0x570 [ 622.217105][ C0] ? dup_userfaultfd+0xab/0x640 [ 622.221994][ C0] ? __vm_enough_memory+0x11b/0x380 [ 622.227232][ C0] dup_mmap+0x991/0x1d90 [ 622.231533][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 622.236256][ C0] ? copy_mm+0x130/0x4a0 [ 622.240532][ C0] ? copy_mm+0x130/0x4a0 [ 622.244823][ C0] copy_mm+0x13b/0x4a0 [ 622.248920][ C0] copy_process+0x1f1c/0x4440 [ 622.253682][ C0] ? copy_process+0xd87/0x4440 [ 622.258485][ C0] ? __pfx_copy_process+0x10/0x10 [ 622.263557][ C0] kernel_clone+0x284/0x8f0 [ 622.268092][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 622.273327][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 622.278408][ C0] __x64_sys_clone+0x1b6/0x230 [ 622.283211][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 622.288553][ C0] ? rcu_is_watching+0x15/0xb0 [ 622.293362][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.299466][ C0] do_syscall_64+0x15f/0xf80 [ 622.304082][ C0] ? trace_irq_disable+0x3b/0x140 [ 622.309152][ C0] ? clear_bhb_loop+0x40/0x90 [ 622.313866][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.319805][ C0] RIP: 0033:0x7fa835661636 [ 622.324253][ C0] RSP: 002b:00007ffe73ef2660 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 622.332697][ C0] RAX: ffffffffffffffda RBX: 00007ffe73ef2668 RCX: 00007fa835661636 [ 622.340698][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 622.348699][ C0] RBP: 00007ffe73f12bb0 R08: 0000000000000000 R09: 0000000000000001 [ 622.356706][ C0] R10: 00007fa83558da50 R11: 0000000000000246 R12: 00007ffe73ef27a0 [ 622.364705][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000561494ed4ac0 [ 622.372726][ C0] [ 622.375765][ C0] task:kworker/0:0 state:R running task stack:23968 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 622.389385][ C0] Workqueue: events rht_deferred_worker [ 622.394991][ C0] Call Trace: [ 622.398295][ C0] [ 622.401251][ C0] __schedule+0x1821/0x5740 [ 622.405789][ C0] ? finish_task_switch+0x427/0xbe0 [ 622.411149][ C0] ? __pfx___schedule+0x10/0x10 [ 622.416059][ C0] preempt_schedule_irq+0x4d/0xa0 [ 622.421123][ C0] irqentry_exit+0x14f/0x760 [ 622.425748][ C0] ? trace_irq_disable+0x3b/0x140 [ 622.430818][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 622.436827][ C0] RIP: 0010:memset_orig+0x25/0xb0 [ 622.441882][ C0] Code: 90 90 90 90 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 <74> 39 66 0f 1f 84 00 00 00 00 00 48 ff c9 48 89 07 48 89 47 08 48 [ 622.461522][ C0] RSP: 0018:ffffc900000e73b0 EFLAGS: 00000246 [ 622.467631][ C0] RAX: 0000000000000000 RBX: ffffc900000e74d8 RCX: 0000000000000000 [ 622.475639][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900000e74d8 [ 622.483633][ C0] RBP: dffffc0000000000 R08: ffffc900000e74e7 R09: 0000000000000000 [ 622.491632][ C0] R10: ffffc900000e74d8 R11: fffff5200001ce9d R12: ffffc900000e77a0 [ 622.499636][ C0] R13: 1ffff9200001ce93 R14: ffffc900000e7488 R15: ffffc900000e74d0 [ 622.507664][ C0] unwind_next_frame+0xf33/0x2550 [ 622.512739][ C0] ? unwind_next_frame+0xa6/0x2550 [ 622.517887][ C0] ? __free_frozen_pages+0xbc7/0xd30 [ 622.523232][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 622.529521][ C0] arch_stack_walk+0x11b/0x150 [ 622.534332][ C0] ? __slab_free+0x274/0x2c0 [ 622.538996][ C0] stack_trace_save+0xa9/0x100 [ 622.543799][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 622.549232][ C0] save_stack+0x122/0x230 [ 622.553601][ C0] ? __pfx_save_stack+0x10/0x10 [ 622.558485][ C0] ? __free_frozen_pages+0xbc7/0xd30 [ 622.563831][ C0] __reset_page_owner+0x71/0x1f0 [ 622.568810][ C0] __free_frozen_pages+0xbc7/0xd30 [ 622.573966][ C0] __slab_free+0x274/0x2c0 [ 622.578437][ C0] qlist_free_all+0x99/0x100 [ 622.583070][ C0] kasan_quarantine_reduce+0x148/0x160 [ 622.588583][ C0] __kasan_kmalloc+0x22/0xb0 [ 622.593203][ C0] __kvmalloc_node_noprof+0x528/0x8a0 [ 622.598697][ C0] ? bucket_table_alloc+0x63/0x370 [ 622.603844][ C0] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 622.609518][ C0] bucket_table_alloc+0x63/0x370 [ 622.614504][ C0] rhashtable_rehash_alloc+0x8e/0x170 [ 622.619921][ C0] rht_deferred_worker+0x511/0x2180 [ 622.625164][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 622.630588][ C0] ? process_scheduled_works+0xa70/0x1860 [ 622.636376][ C0] ? process_scheduled_works+0xa70/0x1860 [ 622.642143][ C0] ? process_scheduled_works+0xa70/0x1860 [ 622.647903][ C0] process_scheduled_works+0xb5d/0x1860 [ 622.653524][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 622.659550][ C0] ? assign_work+0x3d5/0x5e0 [ 622.664185][ C0] worker_thread+0xa53/0xfc0 [ 622.668839][ C0] kthread+0x389/0x470 [ 622.672944][ C0] ? __pfx_worker_thread+0x10/0x10 [ 622.678078][ C0] ? __pfx_kthread+0x10/0x10 [ 622.682711][ C0] ret_from_fork+0x514/0xb70 [ 622.687334][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 622.692474][ C0] ? __switch_to+0xc79/0x1410 [ 622.697193][ C0] ? __pfx_kthread+0x10/0x10 [ 622.701813][ C0] ret_from_fork_asm+0x1a/0x30 [ 622.706620][ C0] [ 630.504463][ T57] IPVS: rr: FWM 3 0x00000003 - no destination available