last executing test programs: 2.587058927s ago: executing program 2 (id=1944): socket$inet6(0xa, 0x1, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x18}, 0x0) 2.520616897s ago: executing program 2 (id=1945): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d20", 0x18}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40040, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a000300110800450000380000000000019078ac1e0078120002282500000000000000002f00007f006953d8401ef50001ac1e0001000022ebffff00100000000000000000"], 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1060e65334337a71b36678abc5ad1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000780)={r3, &(0x7f0000000640)='[[\x00', 0x129100, &(0x7f0000000680)={@align=0x101, {0x5, 0xffff, 0x1, 0xe}}, 0x2, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x8}) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000007c0)={r7}, 0xffffffffffffff77) close(r10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="840100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x408, 0x0, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random, @rand_addr, @rand_addr, 0x8}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffffff, 0xff000000, 0x3, 0x10, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x181, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0xc147, 0x8000, 0x8, 0x0, 0x7ff, 'veth1_macvtap\x00', 'caif0\x00', {0xff}, {}, 0x0, 0x348}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "00fc6318467e3c83c37e66cec1e44eb18a67f9ab80f453c14b046598b980"}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x652b910927df25be]}}, {@empty, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="0400", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x458) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x4}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xff78}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r12, &(0x7f0000000140)=[{&(0x7f0000000180)="a231", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0) 2.400067163s ago: executing program 4 (id=1946): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000640)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x4, 0x0, 0x1, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}}], 0x3, 0x48094) accept(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xc6, &(0x7f0000000000)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x90, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2, [{0x1, 0x1, "909f50c21562"}, {0xe, 0xc, "7dfaf563ef0bef1a65091e7fc4a20e4f228ac0606870c495dd24944a5cbd149336182fc40d48d3c28c24c73f58e6721b7f5d93e62d9cde76782e22a0894477ca4b036d23c7a9efe97ebc8ddd1b6901ab688da698067f11fdf3066b909d04"}]}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r2, 0x301, 0x0, 0x25dfdbf8, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40006) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001d80), 0x0, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, 0x0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000c00)=ANY=[@ANYBLOB='l\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"/358], 0x16c}, 0x1, 0x0, 0x0, 0x20880}, 0x4000001) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r5}, 0x10) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, 0x5, 0xfffffffe}}) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@deltaction={0x24, 0x31, 0x202, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}, 0x1, 0x2b1e}, 0x2000c000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r9, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r10, 0x65, 0x5, &(0x7f0000000080), 0x4) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8918, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)="798e4a825deb28ef9042694bc2e2990d770937fe465159ea24fd83d62f391f75c27446557df10dda2965bb9818eae10da75da876609ff55e8010467d606dc7d44bd6e3641134dca97c11da213e1d2a2ff43decbcfb526441fab63b5d2fe4a9ff45a89984062b24f7a4882d74d9ff312d482e65bcafa9579c0495da36d5bec8c811140b3eead8943370ed55e45e5eccdd9704cdf574259298188e03e6139442b3f2dec093634bc6033f3c7899db1d65f33721058e94034641bae5dea562baa2bc9399c0996efd0518b6281550296320bcb5fe16dcc8d822fa8abe54", 0xdb, 0x20000090, 0x0, 0x0) 2.384057637s ago: executing program 1 (id=1947): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000009c0)={0x3, 'vlan1\x00', {}, 0x2}) 2.003526901s ago: executing program 2 (id=1949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x30}}, 0x20000080) r2 = getgid() r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000140)) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000600)=@nat={'nat\x00', 0x19, 0x4, 0x408, [0x2000000001c0, 0x0, 0x0, 0x2000000001f0, 0x2000000003ac], 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x0, 0xf00a, 'virt_wifi0\x00', 'vlan0\x00', '\x00', 'veth0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}}, {0x5, 0x34, 0xdada, 'sit0\x00', 'wg1\x00', 'hsr0\x00', 'pimreg1\x00', @multicast, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, [0x0, 0xde8649bf0a4ce6cf, 0xff, 0x0, 0xff, 0xff], 0xae, 0xae, 0xe6, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x9, 0x10, 0x1}}}], [], @arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x2, 0x800, 'wlan1\x00', 'batadv0\x00', 'tunl0\x00', '\x00', @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffffffffffffffe}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffd}}}}, {0x3, 0x1, 0xf5, '\x00', 'bridge_slave_1\x00', 'vcan0\x00', 'batadv_slave_1\x00', @random="68aafa191474", [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0x0, 0xff, 0x101, 0xff], 0x9e, 0xd6, 0x10e, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x5, 0x1}}}], [@snat={'snat\x00', 0x10, {{@multicast, 0x2}}}], @arpreply={'arpreply\x00', 0x10, {{@remote, 0xffffffffffffffff}}}}]}]}, 0x480) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000880)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0}, &(0x7f0000000900)=0xc) r9 = getgid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000940)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0}, &(0x7f00000009c0)=0xc) r12 = getpid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000f80)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000fc0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@initdev}}, &(0x7f00000010c0)=0xe8) r15 = getgid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001900)=0x0) r17 = getpid() getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001940)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f0000001a40)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001a80)={0x0, 0x0, 0x0}, &(0x7f0000001ac0)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001b00)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001b40)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f0000001c40)=0xe8) r22 = getgid() r23 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001c80)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000001d80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0)={0x0}, &(0x7f0000001e00)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)=[{{&(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000700)="73abc31e1d385815c7375c9e08c7dd4d2d271e135ba9fa00bf0ac678b3f995d6fcf9a647040352dc9368b6c0f0c9", 0x2e}, {&(0x7f0000000740)="6ed6cde87be2ea7fd96f3dc7f9e7fc1d828d7231afd23b8faf823d80bb6c7133d5fdb9457262c0556004c96fcedcf95372939931b9e8e50ea0e702cd2bf759", 0x3f}, {&(0x7f0000000780)="43df6ff326b4c0e1f1f5dfcf84592002dc80c18b1e720e3326ed19d1b557c372628a05afb2dd0412be7af098d5db16379dcfff6b73d1f8176928574d17c3002de34ef3fac0579ccdf46ec75647d5a11db5", 0x51}], 0x3, &(0x7f0000000a00)=[@rights={{0x30, 0x1, 0x1, [r3, r4, r4, r4, r0, r5, r3, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r0, r3, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r3, r3, r4, r3, r6, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r2}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee01, r2}}}], 0xf8, 0x80}}, {{&(0x7f0000000b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000b80)="f976664df3f1be732d368345c8ffad2df94d67b17cc011e6c97f6dfb47f8c2a948450db839893f08b97e2348ec4114", 0x2f}, {&(0x7f0000000bc0)="ef271e8792108ae304d9f983fa4f58bd350f16c5cb52b167fe2975ce297eaad2dd138f832b11ac525972889051cbd941aa23f4251407d38e3cf17aea0939b36e256a8941670c69ac550c12623dee71346c6ead8a8d4c0ff9da14a1af6cca663fbdd3543d1870293f3a9a9d42bc528ddfa4ea1611918907600e3fbf0e17549546326408bd2729a5ce454628219088bc46eb2c01e382d37bd6095c08e3f9038b2898cdf5edc1b1f09e41eb1baf5e999ae0fbb3cf11dc8a0a95a9abc81617060f331955ebb05d75f66c44", 0xc9}, {&(0x7f0000000cc0)="52820ca03f026ea104dccb97ee3fb464fad4845a7b30bdc2ceb7c79fc91d7781e7933b9a356a7ea8b76b25b6d0b1dbb6ebe85e0926fead1859c362d980ffc9aecc329e4ffd1615375848684e556664", 0x4f}, {&(0x7f0000000d40)="2d5ccff38a065da02ec79f9cf874399c4fa2ea463be7d042d4ac7f3dc17b8b1122750e9f92bb7c5bdd75acf15808033c020edb7e06740a63bbe263a31517bee12a8a8fb4d80543ba41105c37620c23596332f31b044386e17bf4c899b3d0602898de74cf598b29fb60b3969807d228ddb580694de0f6668101b6c2ac2bf4a940264bdfe5b819c0530e296faac3a524e4285313fbda60446220b775997cdb1b10f3558cab19ce8875666cce0935", 0xad}, {&(0x7f0000000e00)="d341f918eee5e380f81e772e64d24462109a995ba7f3efb3c71443293db73017a6d99c6e5d98b673526bb7752934885fd82e787de8a073de3d03966be6f6464593762cde7526f2437b1d07207f0f2abdef643de3ae80cf1a39edbd47fe782d2c2394aac3e5487a8ad7b10c679ba6a233eab65366074dcd9ac142a8c7358425d4572f2d4829d1c435d901be99326c344406f235f90599859546c0bc5c260f66169f5f99a679a358f5213f39d1058c8acd2c4145839f30553233d567502a049b3969", 0xc1}], 0x5, &(0x7f0000001100)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r4, r0, r0, r0]}}], 0x60, 0x8000}}, {{&(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000001200)="2ac76b8ad1704c0c37babc3f3fa6915c1e4aa7129357d22488ce233fd3e1478ec42b7e73e7ae5f82fdfc5678accb178ed29ce9afbf4a6770d292375d2f67ab", 0x3f}], 0x1, &(0x7f0000001280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r15}}}], 0x20, 0x4000000}}, {{&(0x7f00000012c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001340)="2eda618295270e5a008747fe9fd39403084a315ee1ede39c26205b5abc94726e5224acd74486bcc0db32463f29da701688816a707329dfb31328cbb515beae78e2952371c87172378dfd18864d0fea2659f1679aabbfb290fad7eccd4b0da504489292b400a6dfa91fa01d7c89d3bd17022babbed34c626af404e33b61c6", 0x7e}, {&(0x7f00000013c0)="982fe7a6b7436c0db360402929d0715386f83d96113f11ea9095fa35824c88e180b4ff7ed594f97b33f1301be30f533b80f2a0816b5e882dd4ae4098c178cc7ffb16173a91ea42f0e37e3cbed09772c5bafd7253940727eeaf39b435a3d2f78b0e9f736625aff5", 0x67}, {&(0x7f0000001440)="dc10f38b230d22003c2752ade116f8b772e2120d469c0973829df6f6e7feda7ac46500fa0a5ca30154", 0x29}, {&(0x7f0000001480)="167b809772bb8e37d1e6b6ca00781bdaa0e425988886e0281d32376c27611b37c92877d8e8721490c37d8fcf370b346c877a48acf1896deddbc00b66e7a6a27230d0bf6a", 0x44}, {&(0x7f0000001500)="011f205e8bec2ff27f6eec21e753e4ea6c3faac135eaa921e6197a252da849b514039ba25b00f00622caba1e097f74ca098acc5d05c2e43053e87c90c46d1c7403bb64e3cefb0dc46802e6f9f97814a9150615", 0x53}, {&(0x7f0000001580)="cecbbed20ad56361bb3fc935bb7372c30f23c6b09a080ddbe889", 0x1a}, {&(0x7f00000015c0)="3ca56da7100797d0092ff18cc6d63c749bcf0cfba1d26cc73ea494b5de9f9993ca3966dff1f61f415da1e398503332b56a404ae33ae604b43b80859522e6ef8e2bcd9e0111dda44780d7771adeacc622eb769d3d76d08f7deb5329a919be9e7d6b69279b294307128f1fe53b0d7fed", 0x6f}, {&(0x7f0000001640)="6c698bbb074c12fa12c74033b1968c4e872b5cc7600bf869197667eb1cb6228efb0eb5fc73b818be09205f57096a51bd6dd9138ea68e477ba4e75759bf635798797065e2c14bc1645682b9cb9c850512ce2ad0b935f286d41e3d2242ec1ff0cece345768e1e69517127c079b5dadcb7d7ababf5463dad3c74486b9ae5e98a706c6c1ae75de722851ec357857cc6067324610728dbab57d436ea270edc1509e234b25eb7c154a3049581a5d372ac26cd8661d3ab2bdfc5d38d9160166811947c9b73c73ea7253338ebdc6a7a46eb2a70ac2b642c213d9627b19470eee65eaa4420830eb53ce88c5bd9648b2", 0xeb}, {&(0x7f0000001740)="205dc931459dbe3eb69f88cc7b1049ad1cdfd04c4a1f94723b6c30d8c6308d0f84f412bf166dd2ff0484dd24d486d0ba0a0fec7d2143c63b85bdcf19707147c0b776550c53cb77f44f8a799858313dbf35513588b4b373cb26d0028410748bf6cf7ffa95a82f0b3824aad76b137d492c543d1e039757347e9e785e8c2afe03f8", 0x80}, {&(0x7f00000017c0)="70a68838a050e3e2667e27bbbb38b8ac6c392d4184c126ab2ff3f8591fcd92afe7a7c7f003a0d19ba24a7cf26ebc68224c323c48d9befcb839abfbba1f5661087c79d3f9a60f9e66cd1e189b0e9167e52a863c98b6f6d64d832c077cd3df629783fa46f547b69549fc90dd60e2256b1ae57cf35d1c", 0x75}], 0xa, &(0x7f0000001e40)=[@rights={{0x1c, 0x1, 0x1, [r0, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r16, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, r2}}}, @rights={{0x18, 0x1, 0x1, [r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {r25, 0x0, r2}}}], 0xd8, 0x1}}, {{&(0x7f0000001f40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000001fc0)="16fcc5db38d4954ccd542110d2a79449b232e5b64a921dc1aec236bc6156cded2eebdc9ebe31acb5bd9380d1e5ab257aab8d0212861a0fbaf4838899d127ee70aeb83e90d9fc51294f5004a8458afe38b7b4900086f9689b21ff03cf45b0a4a0a3ca88", 0x63}, {&(0x7f0000002040)="7e612e026f1be4d240910d7d37f4fbfef323af80a1105b469d6f7f1ee667598abe9133e8eab6d15f37bf076c9cdc8e3af5e50e8fdbd8f35c", 0x38}, {&(0x7f0000002080)="c65eaf2e46736eabe25a03eb1e7613a82b30b3dcab45d6a1375b406167d2b71356369f8e2a4a3be6cd470c6965d97f8fa18262943ce71dfb0b729f8899942337ff1f38795cd2c1", 0x47}], 0x3, &(0x7f0000002280)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0x40, 0x4000}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000022c0)="6cd6dac1ec3c73ed4d113eca28", 0xd}, {&(0x7f0000002300)="740007084e056479c44507e1e86b8baacd98044a5736b1c548b38a4d46baeca3df534221739cf0cb26895e4d0f42a11a14302f0aba10660ab16c07c7f664b45149d745e5c2649796cbf23ec150a86a1d3e485508106c4a5221a470234b0efa023a7197ee6613ef1c6f578a6718392d5ac0f3d46ecd58002ce68e8e329f1959", 0x7f}, {&(0x7f0000002380)="cd8535d1e0ac8ea51722698d0256276e5a6676e14621262fb1a5b1f7743c8e4a6f3ea02cf3015c3b62b4b9a05734209a454f4489b3fb403f4c85c229bf16f88bbe4311f30923eaf57091f42c3d0c621eb0ff0df5456d8697e350bc7061bae622f6e0f48b7019fd6e", 0x68}, {&(0x7f0000002400)="ba1a9130bf9617f38c22d2c74d703c74a96c39b547362fa2c1cdd7044ad71a02fd3e5e4dc92217daf59aad2bf62bbe2c7b894c5990cfc0acae039ff33390290b7866a26072d414061ec16b77b38b71d32a525b0e98b8c9dce2ffd6b96aaa98a0f3b6dea099dbee2a4c63cf4d80823f4849", 0x71}], 0x4, &(0x7f0000002680)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r4, r3, r0, r0, 0xffffffffffffffff]}}], 0x48, 0x40810}}, {{&(0x7f0000002700)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002880)=[{&(0x7f0000002780)="74fafcc5d3caac76cc89b38c78d32631145b076e914f87a78a69a585b71bc918432228bfb4204b448bfbc36a25253f3cc7026e89afca5c08cb689dc27da7f5227228491c1f4ebc2d91185971a8a472b4a5cd512abba9f5cbb5ca056f90f79ffd4b40c4fe2852ff3b0b4d600081054ac5ef08a0d49b9ee27ca747c848aca86ad537bf32e95aa50550d04ce8f735d341b1732adfa7a12af48ec6271554626babd3f4de9e4288a35b0085589e81397324b9276caf735d544ec305790a893a9ec105314180394c4ff62f1fa8ddb3cc6b5a417b21c29a7b14e8ee2ad591f3bd929b1bc1c22fbac05b9ea32575e6d9", 0xec}], 0x1, &(0x7f0000002980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @rights={{0x24, 0x1, 0x1, [r0, r3, r0, r4, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r3]}}, @rights={{0x20, 0x1, 0x1, [r0, r4, r4, r4]}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, 0xffffffffffffffff]}}], 0xc0, 0x1}}], 0x7, 0x0) 2.002817127s ago: executing program 2 (id=1951): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r0, &(0x7f0000000080)=""/2, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8801, 0x0) r2 = socket(0x22, 0x800, 0x6) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xfffb, 0x2}, 0x6) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88fb4500002c0000000410119078640108000000142100004e200018907804000000ea450000c500000000000000"], 0x0) pselect6(0x40, &(0x7f0000000a80)={0x2, 0x5, 0x0, 0x100000000, 0x6, 0x1, 0x100000000000003, 0xfffffffffffffffd}, &(0x7f00000003c0)={0x8, 0xa, 0x4, 0x800, 0x1000000000e, 0x7fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0) shutdown(r4, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000b8ee00000114000400fe8000000000000000000000000000aa0c00028004000100"], 0x98}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400000000fddbdf2500000000", @ANYRES32=r9, @ANYRES64], 0x44}}, 0x4040) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="d4000021", @ANYRESHEX=r6, @ANYBLOB="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", @ANYRES8], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x40010) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r10, 0x6, 0x9, &(0x7f0000001080)={{0x2c, @multicast2, 0x2, 0x0, 'fo\x00', 0x1d, 0x0, 0x5d}, {@private=0xa010101, 0x2, 0x2000, 0x7ffffff, 0x0, 0x20104}}, 0x44) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000300)={0x8, 'syz_tun\x00', {'veth0_to_team\x00'}, 0x5}) getsockopt$inet_tcp_int(r10, 0x6, 0x9, 0x0, &(0x7f0000000040)) r11 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r11, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000140)='/dev/rfkill\x00', 0x20b840, &(0x7f0000000180)={@_ha_fsid={[0xb594, 0x8bf]}, {0x6, 0x401, 0x2d6, 0x6}}, 0x7fffffff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x6}) 1.931611784s ago: executing program 0 (id=1953): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$rds(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e89296", 0x61}], 0x2}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) r10 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r10, 0x6b, 0x3, 0x0, &(0x7f0000000180)) shutdown(r4, 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0xd3b, 0x40, 0x1, 0x5, 0x5, 0x0, [{0x0, 0x5, 0x7, '\x00', 0x1188}, {0x40, 0x9, 0x8001, '\x00', 0x2000}, {0x100000001, 0x47e, 0x7, '\x00', 0x1500}, {0x302, 0x7fff, 0x4, '\x00', 0x80}, {0x8000000000000000, 0x5e, 0x3, '\x00', 0x2002}]}) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) 1.916077479s ago: executing program 1 (id=1954): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db00300010010000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x94) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000900)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf15}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f00000002c0)="d9856eb9d41cc07e5b05ef9e7563", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xf4, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9fc5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8000000}, 0x24000004) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x8, 0x9e, 0x0]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4fa}, @NL80211_ATTR_FRAME={0x2f, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, {0x7c6}, @broadcast, @broadcast, @random="f46657ef5cd0", {0x1, 0x7}}, @sp_mp_open={0xf, 0x1, {0x8, {0x1, 0x5, [{0x1b, 0x1}, {0x30, 0x1}, {0x4}, {0x12}, {0x24}]}, @val={0x72, 0x6}, @void}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044810}, 0x80) 1.795726566s ago: executing program 0 (id=1956): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x4, 0x7, 0x9, 0x3}, {0x81, 0x5, 0xff, 0xfff}, {0x7fff, 0x86, 0x5, 0x3}, {0x4, 0x40, 0x7}, {0x9, 0x5, 0x5, 0x8}, {0x2, 0x1, 0xa7, 0x9}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x78}}, 0x4000010) 1.786916651s ago: executing program 1 (id=1957): r0 = socket(0x28, 0x2, 0x4000003) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c45035e060093400000", @ANYRES8=r1, @ANYBLOB="00020000000000000000040000001400050000000000000000000000000000000001080002000500000014000600ff020000000000000000000000000001"], 0x44}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ipvlan0\x00', 0x1}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x0) listen(r0, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4044010}, 0x20000015) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) accept(r4, 0x0, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000600)={r8, 0x0, "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", "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"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 1.754139838s ago: executing program 0 (id=1958): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008084) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0x20c}], 0x1, 0x20008000) 1.546230268s ago: executing program 4 (id=1960): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d20", 0x18}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40040, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a000300110800450000380000000000019078ac1e0078120002282500000000000000002f00007f006953d8401ef50001ac1e0001000022ebffff00100000000000000000"], 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1060e65334337a71b36678abc5ad1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000780)={r3, &(0x7f0000000640)='[[\x00', 0x129100, &(0x7f0000000680)={@align=0x101, {0x5, 0xffff, 0x1, 0xe}}, 0x2, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x8}) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000007c0)={r7}, 0xffffffffffffff77) close(r10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="840100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x408, 0x0, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random, @rand_addr, @rand_addr, 0x8}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffffff, 0xff000000, 0x3, 0x10, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x181, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0xc147, 0x8000, 0x8, 0x0, 0x7ff, 'veth1_macvtap\x00', 'caif0\x00', {0xff}, {}, 0x0, 0x348}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "00fc6318467e3c83c37e66cec1e44eb18a67f9ab80f453c14b046598b980"}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x652b910927df25be]}}, {@empty, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="0400", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x458) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x4}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xff78}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r12, &(0x7f0000000140)=[{&(0x7f0000000180)="a231", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0) 1.386023762s ago: executing program 3 (id=1963): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg$inet6(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="00a8685e10", 0x5}], 0x1, &(0x7f00000005c0)=ANY=[], 0x200}}], 0x1, 0x4000006) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a00000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00050000a8c102001c0012800b00010067726574617000000c00028005000a000100000008000a00", @ANYRES32, @ANYBLOB="060024003c002b8008000800", @ANYRES32, @ANYBLOB="0800030000000000080001"], 0xa0}, 0x1, 0x0, 0x0, 0x20040804}, 0x8000) 1.288874348s ago: executing program 2 (id=1964): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x19, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x68}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f00000001c0)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x1], &(0x7f0000000700), 0x200000000000, 0x1}}, 0x40) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x2, 0xfffffffe, 0x0, 0x100, 0xffffff01}, 0x1c) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf250400000008000100", @ANYRES32=0x0, @ANYBLOB="05000a000100000008000100", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) 1.232930594s ago: executing program 4 (id=1965): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@empty]}, 0x14) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0x0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11, 0x0, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0xffffffff, 0x2, 0x0, 0xe}}, @common=@unspec=@connmark={{0x30}, {0x1, 0x2, 0xfe}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0x0, 0x0, 'dvmrp0\x00', 'dvmrp1\x00', {0xb25f05e6834eb86f}, {0xff}, 0x1d, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x60b, 0xe23, 0x1, 0x20000000}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x2, 0x0, 0x5], 0x0, 0x2}, {0x1, [0x3, 0x8, 0x5, 0x6, 0x2], 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) sendmmsg$inet6(r4, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000001c0)='O', 0x1}], 0x1}}], 0x1, 0x880) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x9, 0x6}, &(0x7f0000000100)=0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000080), 0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000180)="85e491409192fd08700c3d4b93f9bc84", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000002e00)="3db8632f6eea8c800c90a6438f0e4685", 0x10) setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f0000000200)={@rand_addr=0x64010101, @loopback, 0xffffffffffffffff, "a011db051fe68a58e3513f8ef3342e7e84a4e0256afdc7f611290882f521826d", 0x5, 0x6, 0x6ae2, 0x36b}, 0x3c) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r10 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040), 0x10) 1.230664979s ago: executing program 3 (id=1966): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x8000, 0xfffff000, 0x1, 0x800, r0, 0x0, '\x00', r1, r2, 0x0, 0x5, 0x0, 0x3}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', r1, 0x20, 0x8000, 0x3, 0xde2, {{0x35, 0x4, 0x3, 0x0, 0xd4, 0x65, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100, {[@cipso={0x86, 0x2b, 0x3, [{0x2, 0xa, "cf831d3e01375c7e"}, {0x2, 0x8, "926669c5b430"}, {0x6, 0x6, "fd935de0"}, {0x7, 0xd, "6ce4f8d28c9b9b35a6e85f"}]}, @timestamp_addr={0x44, 0xc, 0x4f, 0x1, 0x5, [{@local, 0xa}]}, @timestamp_addr={0x44, 0x1c, 0x5c, 0x1, 0x8, [{@local, 0xb52}, {@private=0xa010102, 0x80}, {@private=0xa010101, 0xd}]}, @timestamp={0x44, 0x18, 0x60, 0x0, 0xf, [0x12c, 0xc, 0xc, 0x3, 0x1]}, @end, @timestamp_prespec={0x44, 0x3c, 0x54, 0x3, 0x1, [{@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast1}, {@remote, 0x2}, {@broadcast, 0x4f}, {@broadcast, 0x4}]}, @cipso={0x86, 0x16, 0x3, [{0x7, 0x10, "16071514229d447f87a235531c63"}]}]}}}}}) r5 = socket(0x6, 0x6, 0xff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'tunl0\x00', r1, 0x8000, 0x7800, 0x9, 0xde, {{0x12, 0x4, 0x0, 0xd, 0x48, 0x68, 0x0, 0x3, 0x29, 0x0, @local, @empty, {[@ssrr={0x89, 0x23, 0x6a, [@remote, @rand_addr=0x64010100, @rand_addr=0x64010102, @empty, @multicast2, @local, @broadcast, @multicast1]}, @cipso={0x86, 0xf, 0x3, [{0x5, 0x9, "896b45a8cd12ae"}]}]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x4, 0x4, 0x4, 0x38, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x4, 0xb, 0x0, 0x40}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x2, 0xa6, &(0x7f0000000480)=""/166, 0x41100, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)=[{0x3, 0x3, 0x9, 0x8}, {0x4, 0x2, 0x8}, {0x1, 0x5, 0x3}, {0x0, 0x2, 0x3, 0x9}]}, 0x94) sendmsg$kcm(r5, &(0x7f0000001fc0)={&(0x7f0000000680)=@ethernet={0x1, @local}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000700)="a8eb9adc651430dc39a68c8c766f37e745c8534afa7e89966722a1b1079651f39df308e549f9a3c04309ea07832877f7af428e1b9bd97617c0cca11205d850c9acd7e8d2b5236f25fe", 0x49}, {&(0x7f0000000780)="f44e70fea65ce4ab9be7b8128714fd55a7b60016a4c8bd885809d18057144267922262bdf0c5c1bb9211d703001832dd277d67db90580751b26c6e0498756cba222a92d8351abf7535692b91edbdac5b4373a1c989de4074b64357b486a83b6c54d96f6543f0a43da4e408fb09ee69f25de56e2c1b1a7db33087883d468e393d0eb6e4f3f3c6f94a93d1c6f4569b21e1df369ea19e85c77eb3068354f403b29fcee2345fdf4c90e8c6f1496c5a4a8e54af99598be06900dcbde19b542b4f9df41c09bbded77bf0ef2f3a9e3a47864e85f88906c23e09c9233bff68409b", 0xdd}, {&(0x7f0000000880)="3e231ea86b89b73cab5e50e54aaf4e92d596d765cf0a47bf4dd45f7726f68f1a0d3da8e7070622e29d98ea535c888c4101e4099ca272b81bfbc14f7448c1306f4e30807543ce2f98f51084c7ead86e3ea657a9c338a71054cb39d35ae33b5400728f9f37b7e03dbd945a02a4897e048c1b887b020b84584d16757f824094a2231002f9b9f4251d5286b9b712a00e50da83a9a56e0a4156f2d5c1b2d51a79317e074dc2199dfa5f8fa4f81e98f097b1bac7f1b4cd886aeb9ff6cee35d27c1bcb9", 0xc0}, {&(0x7f0000000940)="67dbfe27e839220ea4ed2b046faa465e25f6eef15a7ea0325aaaf0a79232774dda7531ac0714d080a0410fc0e0345cc448e6e44c8aa26317ebf2f95f7e0ad081951f22676629d3ecb28f8322d11b7fc47db9f5b738f8f8613ea71b1411ca5cf452cd8d47efbf7bd06d48c8ba10b54e8651d2a1e288f6cd7424f9e91502b139cc4f65f5bcb29a8457b797e9733805a0231e684bb3789299d0c8d0d5e0f2661d4f5905c6c2ac2e41519426844d59d8", 0xae}, {&(0x7f0000000a00)="0f9fb3f2e00380011c6f5bf8da8c86215ff02ff334ce8707963dea49da10189e81b1ad765c58390e27e376e2fde5679634ccfce804acc5b3ed4c5758fb6e285372a44c12fc12fdb70d5c51", 0x4b}, {&(0x7f0000000a80)="c9e9e847e020092160d01ad31cff2c683337451b72de2b90d6944c2897594819aca1169a2c953e869b3b4814e20578a0a468f5f3e5dd8f9c0dc72e7a4ccf96194fb80fe02edf5c68586d8713db3fb5a972201ae6a11b6dac27", 0x59}], 0x6, &(0x7f0000000b80)=[{0x58, 0x1, 0x4, "65bb88366fc3ab23e8d5bcce6905d15bd0fcbce5bcd61a712c5ecdc39111c29508bcaa486e0d8cb7fc0b582f18f7b103c5f2e4b2aab25c24488fa720875ed6e27e1b"}, {0x88, 0x2b, 0x7, "8ab59e5b9681ab60513181508bcb57dc8aa9b05ddde4292893170c2bb48443d0c8c7ad38795a865c6cb04aa386e11f24e796211c3aa7a89f3d4521c822d806a8ee424ccae89aa6df33b061e06cfeb7863512e86d5c605cd56e4095f69689a3a165bdf62d022621275d636ef997e2a377a29d031b03ed88"}, {0x68, 0x10d, 0x331d9a5e, "3aba4163558289d6ae35fd5ee03514c04ae6d823fa8024ad3fc67f2f44cca2a963104d1e42cfda3e7b50150dbab2cc381276d592bba45c1e5c9c0fac2fc9a23bf8fd5d0669d57dd552fb120b7dc6f032dfb9"}, {0xc8, 0x101, 0x3, "09c779de0e4c1b2ec09542cb9eb554760783c53120a102855f588057382026378b3032127d9050acac3c458b51fb003f44c654a91dd37e0133b9781e00ef50c69fac6297aa338e1e50caa6af0c3bdaba3bffb3d89d78eea71f29dd3d57a9f0f9c888883a8900ae66fff14f09736c2d2d3b9b258d40e6b67fe6a242e4ec00d3f6900bc3fae382bcc59d34cac51e903ade5006d03e1ac4a3d90bd9cb51d0f1cb5b198000006b84bd83e05591ae1ca44a020cd28e597a"}, {0xc0, 0x84, 0x9c, "b41a6d8a34cf1f031b8a460e10e1534b44f90add9b56699120fb6b15109d3ea414fae6e4b48d6fbe50e3e3ba98e5238e344142e061f350eb46651ae21a298d584d5c0a8297c9f471f8aa9dce47080f90487c22502e6702cfdb03eef37f6b9798f8371510c46b4c63dd83c2bcf3a85da74fdc55fa524d1e15b10ea05c4db8e6fc1be1c5d67ba04293457c0e27bd9a9934ad381993b68bbd36477baa74ff1f8c64ed5cd7212d200f2f7e00bfbc73200f61"}, {0x1010, 0x10e, 0x7fe, "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"}, {0xe0, 0x102, 0x74, "78eb8d08b6b4fb4a16e66ab736032c6c91e60d96c6f4b2d865ded1e8fab579a0337abc1772179037a5c5d26d262a01545ce1eb7e42fe960894243bbab136c7ed76363819b2f8d99ae88679d0921c25482deb255b6eb7b48185d8ad4d75735af3945f6fc94196c6d8573a7c62a2f346bec5da2e234e52898dfc72b66c5f43ab121f09953a5f27c2999fbd02d7b00776a9141498611365955d54796e184456636aa328a943fed6b1ba7fba71c2f7a80a54c35b2f23978cfcb973612a17dd4b1473e1940dd94c13c193df6d4f59ae43d0a8"}, {0x80, 0x10b, 0x3, "41c0993f0a365aac0ee8f4b16b8f2c48512eb4f24f99cab3d197b1eebb15f2768c4cdda150527dbf0aeaaa36707020a31903c0a2260f2b65311b2ca03756b6b3e037a1761c6bff450add40614e4b2d3c57cca4e93b981ea4f1b1f7c703d12ef60b7295e86b28ce9c4ae0c2bbbbc2"}], 0x1440}, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000002000)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000002040), &(0x7f0000002080)=0x14) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000020c0)={0x0}, &(0x7f0000002100)=0xc) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000002140)=r7) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000002180)={r5}) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000021c0)=[{}, {}, {}, {}], &(0x7f0000002200)=0x20) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002240)={'veth0_to_team\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000002280)={0x0, 0x2, 0x6}, &(0x7f00000022c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000002300)={r10, 0xae, "966f8f90305314744fb52ba1d865429589cf57dbd34d9471946c62cde1d40a09ef14a619385d0bddc77ef193688f6f6bcce9aa52a24c9c1b13d4f9f4c89e38a6a0c3347b22e2816cc1bd38d416d1c324cabbdca86f0ae107071870fe404a80afe65d232ff97cf1a9d04ae5e9548fb096f617c98df51735e7b7f9716be11cf97e449b6d93edb2971f4554b519c9c116fe7d1d9517386417fd89933c5b0d4fb1b1e5350ad03f36f50ef066acc0a7bf"}, &(0x7f00000023c0)=0xb6) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x28, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4) connect$bt_sco(r5, &(0x7f0000002500), 0x8) setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000002540)={0x46, 0xff, 0x1, 0x5, 0x10, 0xf7, 0xc2, 0x2d, 0xf, 0x0, 0x14, 0x40, 0x8, 0x2}, 0xe) r11 = socket$inet(0x2, 0x800, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000002580)={'wlan0\x00'}) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f00000025c0)) bind$bt_sco(r5, &(0x7f0000002600), 0x8) setsockopt$netrom_NETROM_T1(r8, 0x103, 0x1, &(0x7f0000002640)=0x8, 0x4) 1.075650173s ago: executing program 1 (id=1967): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x800000, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001480)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000012c0)={'syztnl2\x00', &(0x7f0000001280)={'syztnl2\x00', 0x0, 0x20, 0x9c4b324292d9731b, 0x0, 0x4, {{0x8, 0x4, 0x1, 0xc, 0x20, 0x67, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x6}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x3, [{@rand_addr=0x64010102, 0x9}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001380)={0x8001}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x800000, 0x4}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001480)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000012c0)={'syztnl2\x00', &(0x7f0000001280)={'syztnl2\x00', 0x0, 0x20, 0x9c4b324292d9731b, 0x0, 0x4, {{0x8, 0x4, 0x1, 0xc, 0x20, 0x67, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x6}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x3, [{@rand_addr=0x64010102, 0x9}]}]}}}}}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001380)={0x8001}, 0x8) (async) 932.058496ms ago: executing program 2 (id=1968): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x14c, 0x16, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x10c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x296f75bf}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0xa4, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x40}, @NFTA_SET_USERDATA={0x72, 0xd, 0x1, 0x0, "7a07130a2dc609f960e7570471ad81b716a4e121a8b8b40c33a8c5eb83a17968789b1fc555b50ae4010396a09f9a944923c4f364c7c4e5bab8d862007cada69eed1d7646f290ac2ed4a23078760226173415c94aea1b4f9b2f547efc726fca30f5457c88d3a1029b0b52effa3b08"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x244}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x20000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x80, 0x2, 0x2, 0x5, r4}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003140)={r4, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000003180)=0x10) 848.30296ms ago: executing program 3 (id=1969): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f00000003c0)={&(0x7f0000000340)=[{&(0x7f0000000080)="23fae3ae6ac73bcbed4946ac2bea2f044af5aaa23d02c4d1a4547dedf88e8ce6d017a080159e97dccf2157d7e1c369006a4f674e5a542b4ddfbcdcd21b8987fa04581ea7a661686303fbe930833affc7c7ab4f8ccdb718a5b8796e6df211138950f17c4ab29c64d775143b4d90c6ad4e5633e87bef2a540e9f635212e099cfe6c9c942bf8893882448867c3ce6", 0x8d}, {&(0x7f0000000000)="7ee7114241", 0x5}, {&(0x7f0000000140)="3cf4ccc7013d289a7f4de236916e2cd7631fc285e4b4381aa23a8f6b3c4e0f75b8c320bb2363c21bfda282a20d9d0a9086bb93644e3c90e4153709f0c82e1f28eb8ad6ff7a00b944e02d390ef72a4d488acb3cebf2", 0x55}, {&(0x7f00000001c0)="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", 0xfc}, {&(0x7f00000002c0)="4faf48315394912dab5ea1b66ffa47a7ac471abfbe73e484a30b171c8653bf4b46c9f0a50855962382144f7bcc1d6978098b0372b0cfbbaf9e236aa32d67851e55380c146abf37f0907e21f03d08d98ccf2fc204dc451f68fadfa33a0ce35ab59c1131b657b6cf943da9b210f99c32", 0x6f}], 0x5, 0x2, 0x0, 0x8000000000000001, 0xffffffffffffff7e, 0x4, 0x7, 0xffffffff}) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (rerun: 32) close(r1) 838.173352ms ago: executing program 0 (id=1970): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000070}, 0x2000400c) 601.718167ms ago: executing program 1 (id=1971): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtaction={0x68, 0x30, 0x48b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10, 0x100000) socket$nl_audit(0x10, 0x3, 0x9) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x10, 0x453, 0x2, 0xa1, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000080)) 508.2091ms ago: executing program 0 (id=1972): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a40000000100000003157a452a25ac81d8ed595c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025cccade003c0db798262f3d40fad9", 0xa2}], 0x1}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/66, 0x42}, {&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f00000008c0)=""/162, 0xa2}, {&(0x7f0000000980)=""/250, 0xfa}, {&(0x7f0000000480)=""/48, 0x30}], 0x6, &(0x7f0000000540)=""/38, 0x26}, 0x12040) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) close(0x3) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10) r6 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x4e21, 0x9, 0x2, 0xa0}, {0xfffffffffffffffe, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000001, 0x4, 0x200000003, 0x9}, {}, 0x4, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@loopback, 0x4d3, 0x33}, 0x2, @in6=@empty, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x2c, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32=0x2892348f}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) sendmmsg$inet6(r5, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x40) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f00000004c0), &(0x7f0000000500)=0x10) r8 = socket(0x10, 0x803, 0x0) write(r8, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) setsockopt$RDS_RECVERR(r8, 0x114, 0x3f, &(0x7f0000000000)=0x3, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0300002e0009002fbd70000000000004000000480311802e7984"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 454.145661ms ago: executing program 3 (id=1973): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 435.274851ms ago: executing program 1 (id=1974): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r0, &(0x7f0000000080)=""/2, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8801, 0x0) r2 = socket(0x22, 0x800, 0x6) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xfffb, 0x2}, 0x6) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88fb4500002c0000000410119078640108000000142100004e200018907804000000ea450000c500000000000000"], 0x0) pselect6(0x40, &(0x7f0000000a80)={0x2, 0x5, 0x0, 0x100000000, 0x6, 0x1, 0x100000000000003, 0xfffffffffffffffd}, &(0x7f00000003c0)={0x8, 0xa, 0x4, 0x800, 0x1000000000e, 0x7fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0) shutdown(r4, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000b8ee00000114000400fe8000000000000000000000000000aa0c00028004000100"], 0x98}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400000000fddbdf2500000000", @ANYRES32=r9, @ANYRES64], 0x44}}, 0x4040) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000400)=ANY=[@ANYBLOB="d4000021", @ANYRESHEX=r6, @ANYBLOB="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", @ANYRES8], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x40010) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r10, 0x6, 0x9, &(0x7f0000001080)={{0x2c, @multicast2, 0x2, 0x0, 'fo\x00', 0x1d, 0x0, 0x5d}, {@private=0xa010101, 0x2, 0x2000, 0x7ffffff, 0x0, 0x20104}}, 0x44) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000300)={0x8, 'syz_tun\x00', {'veth0_to_team\x00'}, 0x5}) getsockopt$inet_tcp_int(r10, 0x6, 0x9, 0x0, &(0x7f0000000040)) r11 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r11, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000140)='/dev/rfkill\x00', 0x20b840, &(0x7f0000000180)={@_ha_fsid={[0xb594, 0x8bf]}, {0x6, 0x401, 0x2d6, 0x6}}, 0x7fffffff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x6}) 323.448266ms ago: executing program 3 (id=1975): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d20", 0x18}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40040, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a000300110800450000380000000000019078ac1e0078120002282500000000000000002f00007f006953d8401ef50001ac1e0001000022ebffff00100000000000000000"], 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1060e65334337a71b36678abc5ad1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000a8000000181100000c8c846ed577c4168b91a54871b18d21c4aefe6584ba9a536cc3a3ad4455a4a8da24b4b67b2493531dad80fa1b2e9e3b7c283f409487fbb387eec40f97c3e6f051a9b7e51dbdbbd24913449835a96d487cf82d6676ba46281271b0bb50d42bd4161576bf94095828ab7c8a4b1ddea0fe854116fbe7e7905643b9fd39d740192cf97d1daccd8a1c7ecfcb1dee93da1e4cae59a9f3bc43b750cfde37f4757fda98071b9dd95bdae10bb128c4a28ac16d2024fd1f789693323beb17548b9eda8b83b9156845cb0d74163d33fe121c95b9aa2319e970b983b8f84b5799b81d8ee49e03dbdb50434a2ade5e1920f75e2541bea527980f6607745bf43af06addfef17db5932eab0e5ce7e23b7691ebc27ae4e1aaac21436630dce3468b35fbf96d8dfd3111b33628747b1365ee15d1a4e8b163454412cfd34b189c86844a61d45cb9fc0ed4c809ab2a4fb36078dd398a6374eb4033d97a9b4a3297cc8cb9145828b635cc00e21bc2e63ed5f17840bc2cf0eb32e12dbef76379ca7f82ce6e875fdd134854c38ab730e1d26454639a69d0f12f106ac069572d2ddbefd56c407805ab6eead1c5373091b8f7b4afa2328e57fd6e84f0b19bf9d60cf96d5c9476eff27360611dc0f003ce78f93aab3bf7c802d615e5fd37020e29ed6f895ffaa338d521f64e936d9d3dda5fd15ea1cd88436930f8b8ad657dacdbeb8640868bc0c114343903d5b1abe4221d36ee4604c70831e78e268fa9daeb816dee928a5dd0b794b3a2577fe731e759e57366533f520c0eef7c6be7d1dbd5175107310cc1c32b9846024dbccb03fe2f100fdfdb85634503607c62e0904e8a6f65090561a860db3901ccc47fc20cfcc0b9903ab77adde3518939c486c807", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000780)={r3, &(0x7f0000000640)='[[\x00', 0x129100, &(0x7f0000000680)={@align=0x101, {0x5, 0xffff, 0x1, 0xe}}, 0x2, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x8}) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000007c0)={r7}, 0xffffffffffffff77) close(r10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="840100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x408, 0x0, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random, @rand_addr, @rand_addr, 0x8}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffffff, 0xff000000, 0x3, 0x10, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x181, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0xc147, 0x8000, 0x8, 0x0, 0x7ff, 'veth1_macvtap\x00', 'caif0\x00', {0xff}, {}, 0x0, 0x348}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "00fc6318467e3c83c37e66cec1e44eb18a67f9ab80f453c14b046598b980"}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x652b910927df25be]}}, {@empty, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="0400", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x458) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x4}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xff78}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r12, &(0x7f0000000140)=[{&(0x7f0000000180)="a231", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0) 322.383291ms ago: executing program 4 (id=1976): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x24}}, 0x40000010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000400)={r1, &(0x7f00000002c0)='GPL\x00', 0x200, &(0x7f0000000300)={@align=0x70, {0x8, 0x2000, 0x5c6, 0x100}}, 0x8, &(0x7f0000000340), &(0x7f00000003c0)=0x7}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4004) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfb, @broadcast}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000640)="08003b117c507fe0", 0x8}, {0x0}], 0x2}, 0x80) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) nanosleep(&(0x7f0000000180), 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000280)) r6 = socket(0x10, 0x80002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0x37, 0x0, &(0x7f0000000080)="d2ff03076003008cb89e08f086dd0b725b8f2944d82cb9ee4bf78db827617af9034107d819aa0951190303e83efda101e20f0acd263733", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a"], 0x4c}}, 0x0) 123.332065ms ago: executing program 4 (id=1977): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x23, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0xf, 0x12) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(r3, r2, &(0x7f0000000080)=0x1, 0x5) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) accept4$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @none}, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) recvfrom$packet(r2, &(0x7f00000000c0)=""/205, 0xcd, 0x100, &(0x7f0000000000)={0x11, 0x2, r5, 0x1, 0x5, 0x6, @random="0a486a7b3397"}, 0x14) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt(r0, 0x84, 0x23, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000200)=0xf, 0x12) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendfile(r3, r2, &(0x7f0000000080)=0x1, 0x5) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00'}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) (async) accept4(r6, 0x0, 0x0, 0x0) (async) accept4$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @none}, 0x0, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) recvfrom$packet(r2, &(0x7f00000000c0)=""/205, 0xcd, 0x100, &(0x7f0000000000)={0x11, 0x2, r5, 0x1, 0x5, 0x6, @random="0a486a7b3397"}, 0x14) (async) 72.428927ms ago: executing program 3 (id=1978): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0xe, 0x24000054, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x14) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) (async) sendmmsg(r3, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000f9000007008201", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4e}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400c004) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r8, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008800}, 0x40) 55.948145ms ago: executing program 0 (id=1979): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, 0x0, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="28f3f96a", @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf251a0000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0xd000}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[], 0x38}}, 0x2000a080) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x8080) 0s ago: executing program 4 (id=1980): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x114, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xf8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x201}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000a00)="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", 0xfffffffffffffe5a, 0x800, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)={0xa0, r2, 0x2, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x5c, 0xa8, @random="ee9638f8d251ec5750a5bbb2950a421bfad1fbedff1b3e72d68286dff2aa6fdde890d3fbbc27db8782cf984115aa43d55eb34d82271fae0d7398442a5069978922fea55814783f7ef9b392c94676ca82a8991549d7a3a532"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24040801}, 0x10) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, 0x0, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x6, 0x4, 0x0, 0x1, [@generic='6\n']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r5 = accept4(r1, 0x0, 0x0, 0x800) unshare(0xc020680) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$isdn(r8, &(0x7f00000006c0)={0x7, 0x7, "939e66ebe388933438036b7c35755626f217a6654f1cd1c3d5fad40e503558d15e9500b009b48bdbf4b468df0b92df43ff23a9eab6d0c29122ef6d991cac5c8375f4998aa85d0f87f10f75f85687c50be2050bc03bb3b4236c9ab4417958b18b5e452c33e54bc0bb99b9576c8046db052568245d2d0d7bbed8636dc420bcaa16b1a66dc20dd246ee055705ff0a253c8acf25b660de392133a9cd21bb7d80bca805773ccd6205e07d2dd7a8ea29c0424f680e353b836333af4de78ff3f1919d137a7e6dc01eaeaacf8f18f92c7d5226b5eca2f70d096b71d3d86d9f02e1f97031887342aa9df9072fffd9e2ee9ecd5f2b7d84a70da85a"}, 0xfe, 0x4000, &(0x7f0000000000)={0x22, 0xd1, 0x9, 0xfa, 0x1}, 0x6) write$tun(r8, &(0x7f00000002c0)={@val={0x0, 0x9200}, @val={0x1, 0x80, 0x10, 0x7, 0x8000, 0x4}, @x25={0x1, 0x3, 0xf1, "5b8b173f739e232ceacb4ff8d6f686bf9e97010266d12c15cc462c1c9df19845fb5501a2a2206f8fb9ee0b8c8bc2ca463853035da2b4cdd654027d5a7553d969b13d7eb5a10837d080b2ec00a1515524f864977ffcc11b89eec1dfa0bf925f2078540f0528dd6d445f66d7d08bfae101f24ee464175171368d2dbb0599bc55a0998d44d6b8e455aad36891fa4bc0226c62fe0b1c75e45d2ff9340679d7c756456d18186891e32f4f84fdce022fd1521cd2f9562df3302d25340c095c8f57bd54db64525b5088ec0515afc867a826215372"}}, 0xe2) splice(r7, &(0x7f0000000400)=0xa, r6, 0x0, 0x1, 0x6) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000011000000000000001701000003"], 0x1140, 0x4004084}], 0x1, 0x40800) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'. [ 192.825370][ T8321] netlink: 596 bytes leftover after parsing attributes in process `syz.0.654'. [ 192.871340][ T8325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.657'. [ 192.930279][ T8322] IPVS: Scheduler module ip_vs_sip not found [ 193.042743][ T8332] netlink: 'syz.2.658': attribute type 11 has an invalid length. [ 193.052830][ T8332] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.658'. [ 193.169642][ T8336] netlink: 'syz.4.660': attribute type 3 has an invalid length. [ 193.356532][ T8347] h: entered promiscuous mode [ 193.968548][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.113586][ T8382] netlink: 'syz.2.674': attribute type 4 has an invalid length. [ 194.134677][ T8382] netlink: 'syz.2.674': attribute type 1 has an invalid length. [ 194.316267][ T8395] lo: Caught tx_queue_len zero misconfig [ 194.413890][ T8404] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 194.613657][ T8414] __nla_validate_parse: 6 callbacks suppressed [ 194.613675][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 194.800454][ T8423] FAULT_INJECTION: forcing a failure. [ 194.800454][ T8423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.813925][ T8423] CPU: 0 UID: 0 PID: 8423 Comm: syz.4.685 Not tainted syzkaller #0 PREEMPT(full) [ 194.813965][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.813978][ T8423] Call Trace: [ 194.813986][ T8423] [ 194.813994][ T8423] dump_stack_lvl+0xe8/0x150 [ 194.814027][ T8423] should_fail_ex+0x412/0x560 [ 194.814058][ T8423] _copy_from_user+0x2d/0xb0 [ 194.814089][ T8423] bpf_test_init+0xd8/0x150 [ 194.814120][ T8423] bpf_prog_test_run_xdp+0x529/0x1160 [ 194.814163][ T8423] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 194.814196][ T8423] ? __fget_files+0x2a/0x420 [ 194.814229][ T8423] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 194.814258][ T8423] bpf_prog_test_run+0x2c7/0x340 [ 194.814289][ T8423] __sys_bpf+0x643/0x950 [ 194.814320][ T8423] ? __pfx___sys_bpf+0x10/0x10 [ 194.814364][ T8423] ? ksys_write+0x242/0x270 [ 194.814388][ T8423] ? __pfx_ksys_write+0x10/0x10 [ 194.814426][ T8423] __x64_sys_bpf+0x7c/0x90 [ 194.814455][ T8423] do_syscall_64+0x14d/0xf80 [ 194.814483][ T8423] ? trace_irq_disable+0x3b/0x150 [ 194.814511][ T8423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.814531][ T8423] ? clear_bhb_loop+0x40/0x90 [ 194.814555][ T8423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.814575][ T8423] RIP: 0033:0x7f0b16d9c799 [ 194.814592][ T8423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.814608][ T8423] RSP: 002b:00007f0b17c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.814628][ T8423] RAX: ffffffffffffffda RBX: 00007f0b17015fa0 RCX: 00007f0b16d9c799 [ 194.814642][ T8423] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 194.814655][ T8423] RBP: 00007f0b17c06090 R08: 0000000000000000 R09: 0000000000000000 [ 194.814667][ T8423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.814678][ T8423] R13: 00007f0b17016038 R14: 00007f0b17015fa0 R15: 00007fffbdf8e338 [ 194.814708][ T8423] [ 195.335020][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 195.351294][ T8436] only policy match revision 0 supported [ 195.351313][ T8436] unable to load match [ 195.685798][ T8452] netlink: 'syz.0.695': attribute type 13 has an invalid length. [ 195.788347][ T8462] netlink: 'syz.3.699': attribute type 1 has an invalid length. [ 195.859383][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.696'. [ 196.264195][ T8494] syzkaller0: entered promiscuous mode [ 196.279539][ T8494] syzkaller0: entered allmulticast mode [ 196.307758][ T8496] gre0 speed is unknown, defaulting to 1000 [ 197.041936][ T8516] macvlan2: entered promiscuous mode [ 197.047420][ T8516] macvlan2: entered allmulticast mode [ 197.476163][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'. [ 197.631009][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 197.955537][ T8555] bond0: entered promiscuous mode [ 197.972546][ T8555] bond_slave_0: entered promiscuous mode [ 197.987007][ T8555] bond_slave_1: entered promiscuous mode [ 198.004449][ T8555] syz_tun: entered promiscuous mode [ 198.021380][ T8561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.724'. [ 198.252602][ T8563] syzkaller1: entered promiscuous mode [ 198.260356][ T8563] syzkaller1: entered allmulticast mode [ 198.797485][ T8570] warning: `syz.4.727' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 198.841752][ T8557] gre0 speed is unknown, defaulting to 1000 [ 199.066161][ T8588] netlink: 'syz.1.729': attribute type 21 has an invalid length. [ 199.139341][ T8588] netlink: 128 bytes leftover after parsing attributes in process `syz.1.729'. [ 199.196582][ T8588] netlink: 'syz.1.729': attribute type 3 has an invalid length. [ 199.226676][ T8588] netlink: 3 bytes leftover after parsing attributes in process `syz.1.729'. [ 199.243686][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 199.710428][ T8601] netlink: 'syz.2.733': attribute type 10 has an invalid length. [ 199.816765][ T8601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.825465][ T8601] team0: Device bond0 failed to register rx_handler [ 199.891536][ T8609] x_tables: unsorted entry at hook 3 [ 200.184010][ T8614] FAULT_INJECTION: forcing a failure. [ 200.184010][ T8614] name failslab, interval 1, probability 0, space 0, times 0 [ 200.268813][ T8614] CPU: 1 UID: 0 PID: 8614 Comm: syz.4.736 Not tainted syzkaller #0 PREEMPT(full) [ 200.268841][ T8614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 200.268853][ T8614] Call Trace: [ 200.268860][ T8614] [ 200.268869][ T8614] dump_stack_lvl+0xe8/0x150 [ 200.268901][ T8614] should_fail_ex+0x412/0x560 [ 200.268931][ T8614] should_failslab+0xa8/0x100 [ 200.268958][ T8614] __kvmalloc_node_noprof+0x178/0x8a0 [ 200.268992][ T8614] ? page_pool_create_percpu+0x2dd/0xb80 [ 200.269013][ T8614] ? page_pool_create_percpu+0xaf/0xb80 [ 200.269037][ T8614] page_pool_create_percpu+0x2dd/0xb80 [ 200.269058][ T8614] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 200.269084][ T8614] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 200.269117][ T8614] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 200.269154][ T8614] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 200.269183][ T8614] ? __pfx_autoremove_wake_function+0x10/0x10 [ 200.269206][ T8614] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 200.269251][ T8614] ? 0xffffffffa02038d8 [ 200.269292][ T8614] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 200.269329][ T8614] ? _copy_from_user+0x94/0xb0 [ 200.269357][ T8614] ? bpf_test_init+0x113/0x150 [ 200.269379][ T8614] ? xdp_convert_md_to_buff+0x5b/0x330 [ 200.269406][ T8614] bpf_prog_test_run_xdp+0x81c/0x1160 [ 200.269446][ T8614] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 200.269476][ T8614] ? __fget_files+0x2a/0x420 [ 200.269507][ T8614] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 200.269534][ T8614] bpf_prog_test_run+0x2c7/0x340 [ 200.269556][ T8614] __sys_bpf+0x643/0x950 [ 200.269585][ T8614] ? __pfx___sys_bpf+0x10/0x10 [ 200.269626][ T8614] ? ksys_write+0x242/0x270 [ 200.269648][ T8614] ? __pfx_ksys_write+0x10/0x10 [ 200.269675][ T8614] __x64_sys_bpf+0x7c/0x90 [ 200.269700][ T8614] do_syscall_64+0x14d/0xf80 [ 200.269726][ T8614] ? trace_irq_disable+0x3b/0x150 [ 200.269751][ T8614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.269769][ T8614] ? clear_bhb_loop+0x40/0x90 [ 200.269792][ T8614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.269815][ T8614] RIP: 0033:0x7f0b16d9c799 [ 200.269831][ T8614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.269845][ T8614] RSP: 002b:00007f0b17c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 200.269864][ T8614] RAX: ffffffffffffffda RBX: 00007f0b17015fa0 RCX: 00007f0b16d9c799 [ 200.269877][ T8614] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 200.269889][ T8614] RBP: 00007f0b17c06090 R08: 0000000000000000 R09: 0000000000000000 [ 200.269899][ T8614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.269910][ T8614] R13: 00007f0b17016038 R14: 00007f0b17015fa0 R15: 00007fffbdf8e338 [ 200.269938][ T8614] [ 200.269945][ T8614] page_pool_create_percpu() gave up with errno -12 [ 201.002409][ T8640] IPVS: Scheduler module ip_vs_sip not found [ 201.879970][ T8676] FAULT_INJECTION: forcing a failure. [ 201.879970][ T8676] name failslab, interval 1, probability 0, space 0, times 0 [ 201.927952][ T8676] CPU: 0 UID: 0 PID: 8676 Comm: syz.4.755 Not tainted syzkaller #0 PREEMPT(full) [ 201.927978][ T8676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 201.927989][ T8676] Call Trace: [ 201.927996][ T8676] [ 201.928003][ T8676] dump_stack_lvl+0xe8/0x150 [ 201.928033][ T8676] should_fail_ex+0x412/0x560 [ 201.928061][ T8676] should_failslab+0xa8/0x100 [ 201.928086][ T8676] __kmalloc_cache_noprof+0x88/0x660 [ 201.928105][ T8676] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 201.928134][ T8676] ? __xdp_reg_mem_model+0x1e3/0x5d0 [ 201.928157][ T8676] __xdp_reg_mem_model+0x1e3/0x5d0 [ 201.928188][ T8676] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 201.928207][ T8676] ? page_pool_create_percpu+0x7f9/0xb80 [ 201.928232][ T8676] xdp_reg_mem_model+0x22/0x40 [ 201.928249][ T8676] bpf_test_run_xdp_live+0x295/0x1cf0 [ 201.928279][ T8676] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 201.928314][ T8676] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 201.928342][ T8676] ? __pfx_autoremove_wake_function+0x10/0x10 [ 201.928364][ T8676] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 201.928408][ T8676] ? 0xffffffffa0201a50 [ 201.928448][ T8676] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 201.928483][ T8676] ? _copy_from_user+0x94/0xb0 [ 201.928511][ T8676] ? bpf_test_init+0x113/0x150 [ 201.928533][ T8676] ? xdp_convert_md_to_buff+0x5b/0x330 [ 201.928561][ T8676] bpf_prog_test_run_xdp+0x81c/0x1160 [ 201.928600][ T8676] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 201.928630][ T8676] ? __fget_files+0x2a/0x420 [ 201.928662][ T8676] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 201.928688][ T8676] bpf_prog_test_run+0x2c7/0x340 [ 201.928710][ T8676] __sys_bpf+0x643/0x950 [ 201.928739][ T8676] ? __pfx___sys_bpf+0x10/0x10 [ 201.928780][ T8676] ? ksys_write+0x242/0x270 [ 201.928802][ T8676] ? __pfx_ksys_write+0x10/0x10 [ 201.928829][ T8676] __x64_sys_bpf+0x7c/0x90 [ 201.928855][ T8676] do_syscall_64+0x14d/0xf80 [ 201.928881][ T8676] ? trace_irq_disable+0x3b/0x150 [ 201.928906][ T8676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.928925][ T8676] ? clear_bhb_loop+0x40/0x90 [ 201.928948][ T8676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.928966][ T8676] RIP: 0033:0x7f0b16d9c799 [ 201.928987][ T8676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.929002][ T8676] RSP: 002b:00007f0b17c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.929022][ T8676] RAX: ffffffffffffffda RBX: 00007f0b17015fa0 RCX: 00007f0b16d9c799 [ 201.929036][ T8676] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 201.929047][ T8676] RBP: 00007f0b17c06090 R08: 0000000000000000 R09: 0000000000000000 [ 201.929058][ T8676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.929069][ T8676] R13: 00007f0b17016038 R14: 00007f0b17015fa0 R15: 00007fffbdf8e338 [ 201.929098][ T8676] [ 201.954583][ T8683] netlink: 32 bytes leftover after parsing attributes in process `syz.1.757'. [ 202.508401][ T8706] syzkaller1: entered promiscuous mode [ 202.519394][ T8706] syzkaller1: entered allmulticast mode [ 202.531829][ T8689] syzkaller1: entered promiscuous mode [ 202.546754][ T8689] syzkaller1: entered allmulticast mode [ 202.627007][ T8681] syzkaller0: entered promiscuous mode [ 202.632601][ T8681] syzkaller0: entered allmulticast mode [ 202.695736][ T8707] IPVS: Scheduler module ip_vs_sip not found [ 202.702139][ T8686] gre0 speed is unknown, defaulting to 1000 [ 202.809798][ T8677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.083344][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.764'. [ 204.126095][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.763'. [ 204.177734][ T5837] block nbd0: Receive control failed (result -1) [ 204.707905][ T8744] xt_cgroup: xt_cgroup: no path or classid specified [ 204.916168][ T8748] netlink: 244 bytes leftover after parsing attributes in process `syz.2.771'. [ 205.046959][ T8757] netlink: 'syz.0.769': attribute type 1 has an invalid length. [ 205.054872][ T8757] netlink: 224 bytes leftover after parsing attributes in process `syz.0.769'. [ 205.268128][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.773'. [ 205.279406][ T8773] xt_TPROXY: Can be used only with -p tcp or -p udp [ 205.321176][ T8777] netlink: 28 bytes leftover after parsing attributes in process `syz.3.773'. [ 205.352696][ T8772] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.773'. [ 205.532627][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.780'. [ 205.551693][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.780'. [ 205.909851][ T8802] bond0: (slave batadv_slave_0): Enslaving as an active interface with a down link [ 206.315903][ T8791] tipc: Enabled bearer , priority 0 [ 206.387800][ T8815] tipc: Resetting bearer [ 206.700189][ T8790] tipc: Disabling bearer [ 206.745267][ T8829] macvlan2: entered allmulticast mode [ 206.783168][ T8835] gre0 speed is unknown, defaulting to 1000 [ 207.098989][ T8846] tipc: Enabled bearer , priority 0 [ 207.115355][ T8846] syzkaller0: entered promiscuous mode [ 207.140990][ T8846] syzkaller0: entered allmulticast mode [ 207.186598][ T8846] tipc: Resetting bearer [ 207.255291][ T8846] tipc: Disabling bearer [ 207.297633][ T8858] __nla_validate_parse: 3 callbacks suppressed [ 207.297650][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 207.450918][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 207.467813][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 207.513702][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'. [ 207.523008][ T8866] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 207.783166][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 208.241493][ T8904] netlink: 244 bytes leftover after parsing attributes in process `syz.0.816'. [ 208.534974][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'. [ 208.709354][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.824'. [ 208.792422][ T8928] netlink: 'syz.1.824': attribute type 2 has an invalid length. [ 208.820869][ T8928] netlink: 'syz.1.824': attribute type 2 has an invalid length. [ 209.056147][ T8934] vti0: entered promiscuous mode [ 209.086483][ T8934] vti0: entered allmulticast mode [ 209.150095][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 209.329584][ T8943] netlink: 96 bytes leftover after parsing attributes in process `syz.3.832'. [ 209.413282][ T8946] block nbd2: not configured, cannot reconfigure [ 209.682981][ T8959] batadv_slave_1: entered promiscuous mode [ 209.694628][ T8957] batadv_slave_1: left promiscuous mode [ 209.707265][ T8958] dvmrp1: left allmulticast mode [ 209.760394][ T8962] x_tables: duplicate underflow at hook 2 [ 209.835240][ T9] gre0 speed is unknown, defaulting to 1000 [ 210.370258][ T8985] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 210.423413][ T8985] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 210.506418][ T8985] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 210.957721][ T9037] syzkaller0: entered promiscuous mode [ 210.963381][ T9037] syzkaller0: entered allmulticast mode [ 211.413233][ T9064] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 211.561396][ T9064] vlan2: entered allmulticast mode [ 211.567588][ T9064] bond3: entered allmulticast mode [ 211.821321][ T9077] netlink: 'syz.3.875': attribute type 10 has an invalid length. [ 211.834221][ T9077] .`: (slave bridge0): Enslaving as an active interface with an up link [ 211.848408][ T9077] bridge_slave_1: left allmulticast mode [ 211.854671][ T9077] bridge_slave_1: left promiscuous mode [ 211.863456][ T9086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.873011][ T9077] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.893104][ T9077] bridge_slave_0: left allmulticast mode [ 211.901047][ T9077] bridge_slave_0: left promiscuous mode [ 211.907256][ T9077] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.923383][ T9077] .`: (slave bridge0): Releasing backup interface [ 212.572582][ T9119] netlink: 'syz.0.885': attribute type 21 has an invalid length. [ 212.662988][ T9126] __nla_validate_parse: 17 callbacks suppressed [ 212.663008][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 212.956747][ T9139] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 213.018959][ T9143] gre0 speed is unknown, defaulting to 1000 [ 214.012611][ T9177] netlink: 'syz.4.901': attribute type 10 has an invalid length. [ 214.049329][ T9177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.086558][ T9177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.133068][ T9177] team0: Port device hsr0 added [ 214.139347][ T9184] netlink: 'syz.3.904': attribute type 2 has an invalid length. [ 214.307568][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 214.318388][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.908'. [ 214.325197][ T9186] lo: Caught tx_queue_len zero misconfig [ 214.362882][ T9188] gre0 speed is unknown, defaulting to 1000 [ 214.495404][ T9202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.911'. [ 214.504933][ T9202] openvswitch: netlink: Flow key attr not present in new flow. [ 214.520674][ T9202] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 214.529026][ T9202] netlink: 232 bytes leftover after parsing attributes in process `syz.4.911'. [ 214.820831][ T9208] ip6gre1: entered promiscuous mode [ 214.838176][ T9208] ip6gre1: entered allmulticast mode [ 214.915715][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.929015][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.937023][ T5914] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.158632][ T9217] syzkaller0: entered promiscuous mode [ 215.171010][ T9217] syzkaller0: entered allmulticast mode [ 215.177303][ T9221] netlink: 'syz.4.915': attribute type 21 has an invalid length. [ 215.185051][ T9221] netlink: 128 bytes leftover after parsing attributes in process `syz.4.915'. [ 215.197930][ T9216] syzkaller0: entered promiscuous mode [ 215.203437][ T9216] syzkaller0: entered allmulticast mode [ 215.277902][ T9221] netlink: 'syz.4.915': attribute type 4 has an invalid length. [ 215.285801][ T9221] netlink: 'syz.4.915': attribute type 5 has an invalid length. [ 215.293938][ T9221] netlink: 3 bytes leftover after parsing attributes in process `syz.4.915'. [ 215.727907][ T5924] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.967349][ T5924] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 216.695816][ T9237] gre0 speed is unknown, defaulting to 1000 [ 216.792073][ T9252] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 216.820068][ T9252] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 216.899175][ T9254] netlink: 'syz.3.926': attribute type 1 has an invalid length. [ 216.917966][ T9254] netlink: 224 bytes leftover after parsing attributes in process `syz.3.926'. [ 217.001526][ T9258] x_tables: duplicate underflow at hook 3 [ 217.164819][ T9265] netlink: 32 bytes leftover after parsing attributes in process `syz.1.928'. [ 217.239611][ T9269] netlink: 'syz.3.929': attribute type 3 has an invalid length. [ 217.297351][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.931'. [ 217.345779][ T9269] : entered promiscuous mode [ 217.498710][ T9277] FAULT_INJECTION: forcing a failure. [ 217.498710][ T9277] name failslab, interval 1, probability 0, space 0, times 0 [ 217.512439][ T9277] CPU: 0 UID: 0 PID: 9277 Comm: syz.1.932 Not tainted syzkaller #0 PREEMPT(full) [ 217.512475][ T9277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.512487][ T9277] Call Trace: [ 217.512496][ T9277] [ 217.512504][ T9277] dump_stack_lvl+0xe8/0x150 [ 217.512539][ T9277] should_fail_ex+0x412/0x560 [ 217.512572][ T9277] should_failslab+0xa8/0x100 [ 217.512601][ T9277] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 217.512627][ T9277] ? kobject_set_name_vargs+0x61/0x110 [ 217.512655][ T9277] kstrdup+0x42/0x100 [ 217.512694][ T9277] kobject_set_name_vargs+0x61/0x110 [ 217.512715][ T9277] dev_set_name+0xe2/0x140 [ 217.512748][ T9277] ? __pfx_dev_set_name+0x10/0x10 [ 217.512780][ T9277] ? device_initialize+0x24b/0x440 [ 217.512801][ T9277] netdev_register_kobject+0xb7/0x310 [ 217.512827][ T9277] register_netdevice+0x12c0/0x1cf0 [ 217.512860][ T9277] ? __pfx_register_netdevice+0x10/0x10 [ 217.512879][ T9277] ? validate_linkmsg+0x765/0x950 [ 217.512916][ T9277] rtnl_newlink_create+0x338/0xb70 [ 217.512945][ T9277] ? __pfx___nla_validate_parse+0x10/0x10 [ 217.512983][ T9277] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 217.513015][ T9277] ? __pfx___mutex_lock+0x10/0x10 [ 217.513052][ T9277] ? ns_capable+0x89/0xe0 [ 217.513080][ T9277] rtnl_newlink+0x1666/0x1be0 [ 217.513124][ T9277] ? __pfx_rtnl_newlink+0x10/0x10 [ 217.513148][ T9277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.513202][ T9277] ? kasan_quarantine_put+0xbb/0x1f0 [ 217.513222][ T9277] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.513255][ T9277] ? kmem_cache_free+0x187/0x630 [ 217.513275][ T9277] ? nlmon_xmit+0xb0/0x100 [ 217.513317][ T9277] ? __lock_acquire+0x6b5/0x2cf0 [ 217.513348][ T9277] ? __local_bh_enable_ip+0xd0/0x130 [ 217.513372][ T9277] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.513399][ T9277] ? __dev_queue_xmit+0x28b/0x3870 [ 217.513418][ T9277] ? __local_bh_enable_ip+0xd0/0x130 [ 217.513441][ T9277] ? __dev_queue_xmit+0x28b/0x3870 [ 217.513494][ T9277] ? __pfx_rtnl_newlink+0x10/0x10 [ 217.513521][ T9277] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 217.513551][ T9277] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 217.513578][ T9277] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 217.513603][ T9277] ? ref_tracker_free+0x693/0x840 [ 217.513628][ T9277] ? __copy_skb_header+0xa3/0x4a0 [ 217.513659][ T9277] ? __pfx_ref_tracker_free+0x10/0x10 [ 217.513694][ T9277] netlink_rcv_skb+0x232/0x4b0 [ 217.513722][ T9277] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 217.513749][ T9277] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 217.513784][ T9277] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.513817][ T9277] netlink_unicast+0x80f/0x9b0 [ 217.513845][ T9277] ? __pfx_netlink_unicast+0x10/0x10 [ 217.513870][ T9277] ? netlink_sendmsg+0x650/0xb40 [ 217.513894][ T9277] ? skb_put+0x11b/0x210 [ 217.513925][ T9277] netlink_sendmsg+0x813/0xb40 [ 217.513959][ T9277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.513989][ T9277] ? aa_sock_msg_perm+0xf1/0x1b0 [ 217.514014][ T9277] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.514038][ T9277] ____sys_sendmsg+0x972/0x9f0 [ 217.514065][ T9277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.514092][ T9277] ? import_iovec+0x73/0xa0 [ 217.514124][ T9277] ___sys_sendmsg+0x2a5/0x360 [ 217.514147][ T9277] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.514196][ T9277] ? __fget_files+0x2a/0x420 [ 217.514222][ T9277] ? __fget_files+0x3a0/0x420 [ 217.514263][ T9277] __x64_sys_sendmsg+0x1bd/0x2a0 [ 217.514285][ T9277] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.514312][ T9277] ? __pfx_ksys_write+0x10/0x10 [ 217.514343][ T9277] do_syscall_64+0x14d/0xf80 [ 217.514369][ T9277] ? trace_irq_disable+0x3b/0x150 [ 217.514395][ T9277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.514413][ T9277] ? clear_bhb_loop+0x40/0x90 [ 217.514435][ T9277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.514459][ T9277] RIP: 0033:0x7f4d5079c799 [ 217.514477][ T9277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.514492][ T9277] RSP: 002b:00007f4d516e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.514511][ T9277] RAX: ffffffffffffffda RBX: 00007f4d50a15fa0 RCX: 00007f4d5079c799 [ 217.514524][ T9277] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 217.514536][ T9277] RBP: 00007f4d516e4090 R08: 0000000000000000 R09: 0000000000000000 [ 217.514547][ T9277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.514557][ T9277] R13: 00007f4d50a16038 R14: 00007f4d50a15fa0 R15: 00007ffcc2d71108 [ 217.514586][ T9277] [ 218.252178][ T9293] __nla_validate_parse: 2 callbacks suppressed [ 218.252198][ T9293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.937'. [ 218.441970][ T9285] "syz.1.937" (9285) uses obsolete ecb(arc4) skcipher [ 218.454614][ T9308] netlink: 'syz.2.943': attribute type 14 has an invalid length. [ 218.472644][ T9307] netlink: 'syz.0.942': attribute type 11 has an invalid length. [ 218.499464][ T9307] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.942'. [ 218.783346][ T9322] netlink: 'syz.1.948': attribute type 3 has an invalid length. [ 218.803246][ T9321] vlan2: entered promiscuous mode [ 218.808237][ T9322] netlink: 'syz.1.948': attribute type 1 has an invalid length. [ 218.817589][ T9321] vlan2: entered allmulticast mode [ 218.822749][ T9321] hsr_slave_1: entered allmulticast mode [ 218.830092][ T9322] netlink: 212 bytes leftover after parsing attributes in process `syz.1.948'. [ 218.849369][ T9322] NCSI netlink: No device for ifindex 813332851 [ 219.026881][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.952'. [ 219.156702][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.183430][ T9344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.955'. [ 219.769970][ T9376] syzkaller0: entered promiscuous mode [ 219.775587][ T9376] syzkaller0: entered allmulticast mode [ 219.930633][ T9377] syzkaller0: left promiscuous mode [ 219.936061][ T9377] syzkaller0: left allmulticast mode [ 219.981326][ T9389] trusted_key: syz.0.967 sent an empty control message without MSG_MORE. [ 220.313369][ T9406] netlink: 'syz.3.973': attribute type 21 has an invalid length. [ 220.383492][ T9415] C: renamed from team_slave_0 [ 220.405215][ T9415] netlink: 152 bytes leftover after parsing attributes in process `syz.3.973'. [ 220.441325][ T9414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.975'. [ 220.474478][ T9409] gre0 speed is unknown, defaulting to 1000 [ 220.592647][ T9423] netlink: 'syz.4.976': attribute type 1 has an invalid length. [ 220.611477][ T9422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.977'. [ 220.625334][ T9422] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 221.040367][ T9414] siw: device registration error -23 [ 221.250782][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 221.580548][ T9468] FAULT_INJECTION: forcing a failure. [ 221.580548][ T9468] name failslab, interval 1, probability 0, space 0, times 0 [ 221.643480][ T9468] CPU: 1 UID: 0 PID: 9468 Comm: syz.0.988 Not tainted syzkaller #0 PREEMPT(full) [ 221.643505][ T9468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.643518][ T9468] Call Trace: [ 221.643526][ T9468] [ 221.643534][ T9468] dump_stack_lvl+0xe8/0x150 [ 221.643567][ T9468] should_fail_ex+0x412/0x560 [ 221.643608][ T9468] should_failslab+0xa8/0x100 [ 221.643633][ T9468] ? __kernfs_new_node+0xe9/0x8e0 [ 221.643662][ T9468] kmem_cache_alloc_noprof+0x87/0x650 [ 221.643690][ T9468] __kernfs_new_node+0xe9/0x8e0 [ 221.643726][ T9468] ? __pfx___kernfs_new_node+0x10/0x10 [ 221.643756][ T9468] ? kernfs_root+0x1c/0x230 [ 221.643789][ T9468] ? kernfs_root+0x1c/0x230 [ 221.643816][ T9468] ? kernfs_root+0x1c/0x230 [ 221.643840][ T9468] ? kernfs_root+0x1c/0x230 [ 221.643871][ T9468] kernfs_new_node+0x102/0x210 [ 221.643905][ T9468] kernfs_create_dir_ns+0x44/0x130 [ 221.643928][ T9468] sysfs_create_dir_ns+0x12f/0x2a0 [ 221.643958][ T9468] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 221.643987][ T9468] ? do_raw_spin_unlock+0xf5/0x210 [ 221.644030][ T9468] kobject_add_internal+0x62b/0xd00 [ 221.644062][ T9468] kobject_add+0x163/0x240 [ 221.644089][ T9468] ? __pfx_kobject_add+0x10/0x10 [ 221.644118][ T9468] ? get_device_parent+0x366/0x3a0 [ 221.644144][ T9468] device_add+0x408/0xb70 [ 221.644165][ T9468] ? device_initialize+0x24b/0x440 [ 221.644192][ T9468] netdev_register_kobject+0x178/0x310 [ 221.644222][ T9468] register_netdevice+0x12c0/0x1cf0 [ 221.644262][ T9468] ? __pfx_register_netdevice+0x10/0x10 [ 221.644282][ T9468] ? validate_linkmsg+0x765/0x950 [ 221.644322][ T9468] rtnl_newlink_create+0x338/0xb70 [ 221.644355][ T9468] ? __pfx___nla_validate_parse+0x10/0x10 [ 221.644397][ T9468] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 221.644433][ T9468] ? __pfx___mutex_lock+0x10/0x10 [ 221.644476][ T9468] ? ns_capable+0x89/0xe0 [ 221.644507][ T9468] rtnl_newlink+0x1666/0x1be0 [ 221.644554][ T9468] ? __pfx_rtnl_newlink+0x10/0x10 [ 221.644601][ T9468] ? __lock_acquire+0x6b5/0x2cf0 [ 221.644634][ T9468] ? __lock_acquire+0x6b5/0x2cf0 [ 221.644663][ T9468] ? __lock_acquire+0x6b5/0x2cf0 [ 221.644701][ T9468] ? unwind_next_frame+0xa5/0x23c0 [ 221.644755][ T9468] ? __lock_acquire+0x6b5/0x2cf0 [ 221.644785][ T9468] ? is_bpf_text_address+0x26/0x2b0 [ 221.644810][ T9468] ? kernel_text_address+0xa5/0xe0 [ 221.644861][ T9468] ? __pfx_rtnl_newlink+0x10/0x10 [ 221.644889][ T9468] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 221.644923][ T9468] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 221.644951][ T9468] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.644985][ T9468] ? __lock_acquire+0x6b5/0x2cf0 [ 221.645022][ T9468] netlink_rcv_skb+0x232/0x4b0 [ 221.645051][ T9468] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.645081][ T9468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.645121][ T9468] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.645158][ T9468] netlink_unicast+0x80f/0x9b0 [ 221.645194][ T9468] ? __pfx_netlink_unicast+0x10/0x10 [ 221.645222][ T9468] ? netlink_sendmsg+0x650/0xb40 [ 221.645249][ T9468] ? skb_put+0x11b/0x210 [ 221.645283][ T9468] netlink_sendmsg+0x813/0xb40 [ 221.645323][ T9468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.645356][ T9468] ? aa_sock_msg_perm+0xf1/0x1b0 [ 221.645384][ T9468] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.645411][ T9468] ____sys_sendmsg+0x972/0x9f0 [ 221.645442][ T9468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.645474][ T9468] ? import_iovec+0x73/0xa0 [ 221.645509][ T9468] ___sys_sendmsg+0x2a5/0x360 [ 221.645536][ T9468] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.645601][ T9468] ? __fget_files+0x2a/0x420 [ 221.645632][ T9468] ? __fget_files+0x3a0/0x420 [ 221.645674][ T9468] __x64_sys_sendmsg+0x1bd/0x2a0 [ 221.645699][ T9468] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.645730][ T9468] ? __pfx_ksys_write+0x10/0x10 [ 221.645765][ T9468] do_syscall_64+0x14d/0xf80 [ 221.645794][ T9468] ? trace_irq_disable+0x3b/0x150 [ 221.645823][ T9468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.645844][ T9468] ? clear_bhb_loop+0x40/0x90 [ 221.645869][ T9468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.645889][ T9468] RIP: 0033:0x7f74ba39c799 [ 221.645909][ T9468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.645926][ T9468] RSP: 002b:00007f74bb249028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.645948][ T9468] RAX: ffffffffffffffda RBX: 00007f74ba615fa0 RCX: 00007f74ba39c799 [ 221.645963][ T9468] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 221.645976][ T9468] RBP: 00007f74bb249090 R08: 0000000000000000 R09: 0000000000000000 [ 221.645988][ T9468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.646000][ T9468] R13: 00007f74ba616038 R14: 00007f74ba615fa0 R15: 00007ffedd9cdc48 [ 221.646052][ T9468] [ 221.786851][ T9468] kobject: kobject_add_internal failed for vcan7 (error: -12 parent: net) [ 222.253335][ T9478] netlink: 32 bytes leftover after parsing attributes in process `syz.4.991'. [ 222.674034][ T9478] dvmrp12: entered allmulticast mode [ 222.718015][ T9477] dvmrp12: left allmulticast mode [ 223.165549][ T9528] syzkaller1: entered promiscuous mode [ 223.191178][ T9528] syzkaller1: entered allmulticast mode [ 223.293902][ T9543] netlink: 'syz.2.1002': attribute type 13 has an invalid length. [ 223.311514][ T9543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.321082][ T9543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.355335][ T9548] __nla_validate_parse: 2 callbacks suppressed [ 223.355352][ T9548] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1003'. [ 223.484565][ T9556] netlink: 'syz.0.1004': attribute type 1 has an invalid length. [ 223.537504][ T9556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1004'. [ 223.746672][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 223.819772][ T9567] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1007'. [ 223.848360][ T9567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1007'. [ 223.870788][ T9567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1007'. [ 224.092428][ T9585] netlink: 'syz.3.1008': attribute type 39 has an invalid length. [ 224.803639][ T9611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1021'. [ 224.878236][ T9608] netlink: 'syz.4.1020': attribute type 13 has an invalid length. [ 224.897303][ T9608] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 224.921648][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1022'. [ 225.180284][ T9604] bpq0: entered promiscuous mode [ 225.302161][ T9628] wlan1 speed is unknown, defaulting to 1000 [ 225.316655][ T9628] wlan1 speed is unknown, defaulting to 1000 [ 225.328692][ T9628] wlan1 speed is unknown, defaulting to 1000 [ 225.349813][ T9628] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 225.399014][ T9628] infiniband yz2: RDMA CMA: cma_listen_on_dev, error -98 [ 225.465472][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 225.470828][ T9628] wlan1 speed is unknown, defaulting to 1000 [ 225.484249][ T9628] wlan1 speed is unknown, defaulting to 1000 [ 225.493185][ T9628] wlan1 speed is unknown, defaulting to 1000 [ 225.501424][ T9628] wlan1 speed is unknown, defaulting to 1000 [ 225.507815][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 225.519064][ T9628] wlan1 speed is unknown, defaulting to 1000 [ 226.118813][ T9662] tipc: Enabled bearer , priority 0 [ 226.128533][ T9662] syzkaller0: entered promiscuous mode [ 226.134051][ T9662] syzkaller0: entered allmulticast mode [ 226.198609][ T9661] vlan3: entered promiscuous mode [ 226.203975][ T9661] team0: entered promiscuous mode [ 226.225242][ T9666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.234549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.251430][ T9666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.259914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.269954][ T9659] tipc: Resetting bearer [ 226.269975][ T9666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.284561][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.293332][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.303357][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.319562][ T9659] tipc: Disabling bearer [ 226.625473][ T9681] bond3: option resend_igmp: invalid value (2878) [ 226.634744][ T9681] bond3: option resend_igmp: allowed values 0 - 255 [ 226.643760][ T9681] bond3 (unregistering): Released all slaves [ 227.216115][ T9722] bridge1: port 1(erspan0) entered blocking state [ 227.223668][ T9722] bridge1: port 1(erspan0) entered disabled state [ 227.231562][ T9722] erspan0: entered allmulticast mode [ 227.252101][ T9722] erspan0: entered promiscuous mode [ 227.876474][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.898185][ T9756] bridge0: entered promiscuous mode [ 227.903429][ T9756] bridge0: entered allmulticast mode [ 228.130100][ T9764] netlink: 'syz.3.1070': attribute type 13 has an invalid length. [ 228.256172][ T9778] tipc: Enabling of bearer rejected, failed to enable media [ 228.523374][ T9786] __nla_validate_parse: 12 callbacks suppressed [ 228.523394][ T9786] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1077'. [ 228.608865][ T9791] netlink: 'syz.2.1079': attribute type 4 has an invalid length. [ 229.310564][ T9836] netlink: 'syz.4.1088': attribute type 13 has an invalid length. [ 229.516457][ T9836] net_ratelimit: 14 callbacks suppressed [ 229.516469][ T9836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.750319][ T9865] FAULT_INJECTION: forcing a failure. [ 229.750319][ T9865] name failslab, interval 1, probability 0, space 0, times 0 [ 229.789471][ T9868] Cannot find del_set index 0 as target [ 229.806795][ T9865] CPU: 0 UID: 0 PID: 9865 Comm: syz.2.1100 Not tainted syzkaller #0 PREEMPT(full) [ 229.806820][ T9865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.806833][ T9865] Call Trace: [ 229.806841][ T9865] [ 229.806849][ T9865] dump_stack_lvl+0xe8/0x150 [ 229.806882][ T9865] should_fail_ex+0x412/0x560 [ 229.806912][ T9865] should_failslab+0xa8/0x100 [ 229.806940][ T9865] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 229.806963][ T9865] ? __alloc_skb+0x186/0x7d0 [ 229.806993][ T9865] ? __alloc_skb+0x1d0/0x7d0 [ 229.807020][ T9865] ? __local_bh_enable_ip+0xd0/0x130 [ 229.807047][ T9865] __alloc_skb+0x1d0/0x7d0 [ 229.807075][ T9865] netlink_sendmsg+0x5d4/0xb40 [ 229.807108][ T9865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.807135][ T9865] ? aa_sock_msg_perm+0xf1/0x1b0 [ 229.807159][ T9865] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 229.807180][ T9865] ____sys_sendmsg+0x972/0x9f0 [ 229.807204][ T9865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.807227][ T9865] ? import_iovec+0x73/0xa0 [ 229.807266][ T9865] ___sys_sendmsg+0x2a5/0x360 [ 229.807286][ T9865] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.807326][ T9865] ? __fget_files+0x2a/0x420 [ 229.807349][ T9865] ? __fget_files+0x3a0/0x420 [ 229.807380][ T9865] __x64_sys_sendmsg+0x1bd/0x2a0 [ 229.807397][ T9865] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.807420][ T9865] ? __pfx_ksys_write+0x10/0x10 [ 229.807452][ T9865] do_syscall_64+0x14d/0xf80 [ 229.807475][ T9865] ? trace_irq_disable+0x3b/0x150 [ 229.807498][ T9865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.807521][ T9865] ? clear_bhb_loop+0x40/0x90 [ 229.807540][ T9865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.807574][ T9865] RIP: 0033:0x7f1fad59c799 [ 229.807591][ T9865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.807605][ T9865] RSP: 002b:00007f1fae4fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.807624][ T9865] RAX: ffffffffffffffda RBX: 00007f1fad815fa0 RCX: 00007f1fad59c799 [ 229.807636][ T9865] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 229.807647][ T9865] RBP: 00007f1fae4fa090 R08: 0000000000000000 R09: 0000000000000000 [ 229.807657][ T9865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.807667][ T9865] R13: 00007f1fad816038 R14: 00007f1fad815fa0 R15: 00007ffc3972dd48 [ 229.807693][ T9865] [ 230.053159][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 230.061761][ T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 230.102929][ T5900] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 230.197763][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 230.387622][ T9883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1104'. [ 230.452522][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1107'. [ 230.469471][ T9883] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 230.486747][ T5900] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 230.715416][ T9898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.776502][ T9898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.784818][ T9898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.835484][ T9898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.857438][ T9898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.877765][ T9898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.892938][ T9898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.916509][ T9898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.929469][ T9898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.095686][ T9911] xt_CT: No such helper "pptp" [ 231.134503][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1115'. [ 231.382602][ T9936] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1121'. [ 231.438627][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1122'. [ 231.529728][ T9943] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 231.538991][ T9941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1123'. [ 231.540102][ T9943] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1124'. [ 231.725258][ T9941] xfrm1: left allmulticast mode [ 231.740848][ T9941] ip6gre1: left promiscuous mode [ 231.749066][ T9941] h: left promiscuous mode [ 231.787976][ T9953] gre0 speed is unknown, defaulting to 1000 [ 231.807048][ T9956] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 232.114634][ T9968] dvmrp0: entered allmulticast mode [ 232.133708][ T9953] wlan1 speed is unknown, defaulting to 1000 [ 232.148958][ T9968] tipc: Cannot configure node identity twice [ 232.422720][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1133'. [ 232.740825][ T9996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1135'. [ 232.800988][ T9991] nbd: must specify a device to reconfigure [ 232.824873][ T9999] batadv_slave_1: entered promiscuous mode [ 232.950294][ T9998] batadv_slave_1: left promiscuous mode [ 232.972937][T10006] bridge_slave_0: left allmulticast mode [ 232.997333][ T5914] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 233.000653][T10006] bridge_slave_0: left promiscuous mode [ 233.013648][T10006] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.063970][T10006] bridge_slave_1: left allmulticast mode [ 233.073111][T10006] bridge_slave_1: left promiscuous mode [ 233.090596][T10006] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.116200][T10006] bond0: (slave bond_slave_0): Releasing backup interface [ 233.153057][T10006] bond0: (slave bond_slave_1): Releasing backup interface [ 233.197696][T10006] team0: Port device team_slave_0 removed [ 233.216141][T10006] team0: Port device team_slave_1 removed [ 233.257561][T10006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.344922][T10006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.467055][ T5914] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 233.682251][T10033] FAULT_INJECTION: forcing a failure. [ 233.682251][T10033] name failslab, interval 1, probability 0, space 0, times 0 [ 233.710232][T10033] CPU: 1 UID: 0 PID: 10033 Comm: syz.1.1147 Not tainted syzkaller #0 PREEMPT(full) [ 233.710261][T10033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.710274][T10033] Call Trace: [ 233.710282][T10033] [ 233.710291][T10033] dump_stack_lvl+0xe8/0x150 [ 233.710327][T10033] should_fail_ex+0x412/0x560 [ 233.710360][T10033] should_failslab+0xa8/0x100 [ 233.710387][T10033] ? xfrm_state_alloc+0x24/0x2f0 [ 233.710415][T10033] kmem_cache_alloc_noprof+0x87/0x650 [ 233.710436][T10033] ? __pfx___nla_validate_parse+0x10/0x10 [ 233.710474][T10033] xfrm_state_alloc+0x24/0x2f0 [ 233.710504][T10033] xfrm_add_sa+0x17ed/0x4230 [ 233.710535][T10033] ? __pfx_xfrm_add_sa+0x10/0x10 [ 233.710553][T10033] ? apparmor_capable+0x126/0x170 [ 233.710591][T10033] ? __nla_parse+0x40/0x60 [ 233.710625][T10033] xfrm_user_rcv_msg+0x746/0xb20 [ 233.710653][T10033] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 233.710672][T10033] ? is_bpf_text_address+0x26/0x2b0 [ 233.710729][T10033] ? __pfx___mutex_trylock_common+0x10/0x10 [ 233.710765][T10033] ? rcu_is_watching+0x15/0xb0 [ 233.710793][T10033] ? trace_contention_end+0x3d/0x150 [ 233.710827][T10033] ? __mutex_lock+0x319/0x1300 [ 233.710865][T10033] netlink_rcv_skb+0x232/0x4b0 [ 233.710896][T10033] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 233.710919][T10033] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 233.710963][T10033] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.710991][T10033] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.711023][T10033] xfrm_netlink_rcv+0x79/0x90 [ 233.711044][T10033] netlink_unicast+0x80f/0x9b0 [ 233.711080][T10033] ? __pfx_netlink_unicast+0x10/0x10 [ 233.711117][T10033] ? netlink_sendmsg+0x650/0xb40 [ 233.711145][T10033] ? skb_put+0x11b/0x210 [ 233.711189][T10033] netlink_sendmsg+0x813/0xb40 [ 233.711226][T10033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.711257][T10033] ? aa_sock_msg_perm+0xf1/0x1b0 [ 233.711284][T10033] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.711310][T10033] ____sys_sendmsg+0x972/0x9f0 [ 233.711340][T10033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.711369][T10033] ? import_iovec+0x73/0xa0 [ 233.711403][T10033] ___sys_sendmsg+0x2a5/0x360 [ 233.711428][T10033] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.711484][T10033] ? __fget_files+0x2a/0x420 [ 233.711512][T10033] ? __fget_files+0x3a0/0x420 [ 233.711550][T10033] __x64_sys_sendmsg+0x1bd/0x2a0 [ 233.711573][T10033] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.711603][T10033] ? __pfx_ksys_write+0x10/0x10 [ 233.711637][T10033] do_syscall_64+0x14d/0xf80 [ 233.711665][T10033] ? trace_irq_disable+0x3b/0x150 [ 233.711692][T10033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.711730][T10033] ? clear_bhb_loop+0x40/0x90 [ 233.711757][T10033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.711777][T10033] RIP: 0033:0x7f4d5079c799 [ 233.711797][T10033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.711814][T10033] RSP: 002b:00007f4d516e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.711836][T10033] RAX: ffffffffffffffda RBX: 00007f4d50a15fa0 RCX: 00007f4d5079c799 [ 233.711851][T10033] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 233.711864][T10033] RBP: 00007f4d516e4090 R08: 0000000000000000 R09: 0000000000000000 [ 233.711876][T10033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.711888][T10033] R13: 00007f4d50a16038 R14: 00007f4d50a15fa0 R15: 00007ffcc2d71108 [ 233.711921][T10033] [ 233.876968][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 234.148719][T10043] __nla_validate_parse: 1 callbacks suppressed [ 234.148740][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1149'. [ 234.221448][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1145'. [ 234.724763][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'. [ 234.899768][T10083] xt_hashlimit: invalid rate [ 234.951555][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1161'. [ 235.166871][T10107] net_ratelimit: 2 callbacks suppressed [ 235.166890][T10107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.182233][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1165'. [ 235.188356][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'. [ 235.288720][T10113] FAULT_INJECTION: forcing a failure. [ 235.288720][T10113] name failslab, interval 1, probability 0, space 0, times 0 [ 235.304363][T10115] netlink: 352 bytes leftover after parsing attributes in process `syz.4.1165'. [ 235.327583][T10113] CPU: 0 UID: 0 PID: 10113 Comm: syz.3.1169 Not tainted syzkaller #0 PREEMPT(full) [ 235.327610][T10113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.327622][T10113] Call Trace: [ 235.327630][T10113] [ 235.327638][T10113] dump_stack_lvl+0xe8/0x150 [ 235.327671][T10113] should_fail_ex+0x412/0x560 [ 235.327701][T10113] should_failslab+0xa8/0x100 [ 235.327728][T10113] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 235.327753][T10113] ? xfrm_add_sa+0x2325/0x4230 [ 235.327779][T10113] kmemdup_noprof+0x2b/0x70 [ 235.327807][T10113] xfrm_add_sa+0x2325/0x4230 [ 235.327836][T10113] ? __pfx_xfrm_add_sa+0x10/0x10 [ 235.327854][T10113] ? apparmor_capable+0x126/0x170 [ 235.327889][T10113] ? __nla_parse+0x40/0x60 [ 235.327921][T10113] xfrm_user_rcv_msg+0x746/0xb20 [ 235.327947][T10113] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 235.327966][T10113] ? is_bpf_text_address+0x26/0x2b0 [ 235.328020][T10113] ? __pfx___mutex_trylock_common+0x10/0x10 [ 235.328054][T10113] ? rcu_is_watching+0x15/0xb0 [ 235.328100][T10113] ? trace_contention_end+0x3d/0x150 [ 235.328133][T10113] ? __mutex_lock+0x319/0x1300 [ 235.328172][T10113] netlink_rcv_skb+0x232/0x4b0 [ 235.328202][T10113] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 235.328226][T10113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 235.328271][T10113] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.328299][T10113] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.328330][T10113] xfrm_netlink_rcv+0x79/0x90 [ 235.328352][T10113] netlink_unicast+0x80f/0x9b0 [ 235.328388][T10113] ? __pfx_netlink_unicast+0x10/0x10 [ 235.328415][T10113] ? netlink_sendmsg+0x650/0xb40 [ 235.328428][T10114] netlink: 'syz.1.1170': attribute type 7 has an invalid length. [ 235.328442][T10113] ? skb_put+0x11b/0x210 [ 235.328511][T10113] netlink_sendmsg+0x813/0xb40 [ 235.328659][T10113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.328764][T10113] ? aa_sock_msg_perm+0xf1/0x1b0 [ 235.328833][T10113] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.328897][T10113] ____sys_sendmsg+0x972/0x9f0 [ 235.328971][T10113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.329070][T10113] ? import_iovec+0x73/0xa0 [ 235.329152][T10113] ___sys_sendmsg+0x2a5/0x360 [ 235.329217][T10113] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.329383][T10113] ? __fget_files+0x2a/0x420 [ 235.329455][T10113] ? __fget_files+0x3a0/0x420 [ 235.329573][T10113] __x64_sys_sendmsg+0x1bd/0x2a0 [ 235.329634][T10113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.329729][T10113] ? __pfx_ksys_write+0x10/0x10 [ 235.329806][T10113] do_syscall_64+0x14d/0xf80 [ 235.329877][T10113] ? trace_irq_disable+0x3b/0x150 [ 235.329963][T10113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.330031][T10113] ? clear_bhb_loop+0x40/0x90 [ 235.330093][T10113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.330147][T10113] RIP: 0033:0x7f27eb99c799 [ 235.330193][T10113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.330231][T10113] RSP: 002b:00007f27ec7e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.330285][T10113] RAX: ffffffffffffffda RBX: 00007f27ebc15fa0 RCX: 00007f27eb99c799 [ 235.330321][T10113] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 235.330350][T10113] RBP: 00007f27ec7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 235.330383][T10113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.330411][T10113] R13: 00007f27ebc16038 R14: 00007f27ebc15fa0 R15: 00007ffc444c1748 [ 235.330494][T10113] [ 235.688108][ T132] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.696515][ T132] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.704857][ T132] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.713177][ T132] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.722067][T10114] netlink: 'syz.1.1170': attribute type 7 has an invalid length. [ 235.897586][T10119] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 235.905574][T10119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.068801][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'. [ 236.098106][T10130] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 236.109491][T10130] tipc: Enabled bearer , priority 0 [ 236.158690][T10130] tipc: Resetting bearer [ 236.180272][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1172'. [ 236.288045][T10129] tipc: Disabling bearer [ 236.372133][T10141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1178'. [ 236.534779][T10152] bond4: Removing last ns target with arp_interval on [ 236.569074][T10156] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 236.796591][T10164] syzkaller0: entered promiscuous mode [ 236.803455][T10164] syzkaller0: entered allmulticast mode [ 236.812944][T10173] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 237.285023][T10192] x_tables: duplicate underflow at hook 4 [ 238.348392][T10204] netlink: 'syz.3.1198': attribute type 2 has an invalid length. [ 238.375170][T10206] pimreg3: entered allmulticast mode [ 238.729249][T10224] ip6gretap3: entered promiscuous mode [ 238.757364][T10224] ip6gretap3: entered allmulticast mode [ 239.075894][T10243] IPVS: Scheduler module ip_vs_sip not found [ 239.097617][T10246] gre0 speed is unknown, defaulting to 1000 [ 239.228546][T10257] __nla_validate_parse: 51 callbacks suppressed [ 239.228569][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'. [ 239.301664][T10261] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1212'. [ 239.438743][T10246] wlan1 speed is unknown, defaulting to 1000 [ 239.996475][T10285] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1219'. [ 240.045066][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 240.212644][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1222'. [ 240.240308][T10295] tc_dump_action: action bad kind [ 240.403200][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'. [ 240.530481][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'. [ 240.541105][T10314] netlink: 'syz.1.1226': attribute type 1 has an invalid length. [ 240.890994][T10328] IPVS: Scheduler module ip_vs_sip not found [ 241.189794][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1234'. [ 241.387002][T10355] netlink: 'syz.1.1235': attribute type 3 has an invalid length. [ 241.403537][T10355] netlink: 'syz.1.1235': attribute type 3 has an invalid length. [ 241.438079][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1235'. [ 241.506790][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'. [ 241.804500][T10376] netlink: 'syz.4.1241': attribute type 4 has an invalid length. [ 241.842719][T10376] netlink: 'syz.4.1241': attribute type 1 has an invalid length. [ 242.051731][T10390] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 242.162474][ T142] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.198007][ T142] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.248738][ T142] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.272129][ T142] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.637174][T10416] IPVS: Scheduler module ip_vs_sip not found [ 242.685598][T10429] delete_channel: no stack [ 243.510375][T10494] bridge2: entered promiscuous mode [ 243.528986][T10494] bridge2: entered allmulticast mode [ 244.033057][T10530] tunl0: Caught tx_queue_len zero misconfig [ 244.186512][T10547] batadv_slave_0: Caught tx_queue_len zero misconfig [ 244.228746][T10553] netlink: 'syz.2.1283': attribute type 1 has an invalid length. [ 244.248354][T10553] __nla_validate_parse: 10 callbacks suppressed [ 244.248372][T10553] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1283'. [ 244.302211][T10542] IPVS: Scheduler module ip_vs_sip not found [ 244.352766][T10547] bond3: option ad_actor_sys_prio: invalid value (0) [ 244.365602][T10547] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 244.375001][T10547] bond3 (unregistering): Released all slaves [ 244.476946][T10550] gre0 speed is unknown, defaulting to 1000 [ 244.710622][T10571] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1286'. [ 244.735830][T10571] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1286'. [ 244.746771][T10571] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1286'. [ 244.768212][T10571] geneve1: Caught tx_queue_len zero misconfig [ 244.942226][T10550] wlan1 speed is unknown, defaulting to 1000 [ 244.973366][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1289'. [ 245.048848][T10584] sock: sock_timestamping_bind_phc: sock not bind to device [ 245.087460][T10588] netlink: ct family unspecified [ 245.092473][T10588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.156771][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 245.504379][T10616] lo speed is unknown, defaulting to 1000 [ 245.531529][T10616] lo speed is unknown, defaulting to 1000 [ 245.569149][T10616] lo speed is unknown, defaulting to 1000 [ 245.598560][T10611] netlink: 'syz.3.1295': attribute type 13 has an invalid length. [ 245.649380][T10611] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 245.883575][T10629] tipc: Enabling of bearer rejected, failed to enable media [ 246.209039][T10636] IPVS: Scheduler module ip_vs_sip not found [ 246.249354][T10616] infiniband syz0: set down [ 246.253968][T10315] lo speed is unknown, defaulting to 1000 [ 246.270372][T10616] infiniband syz0: added lo [ 246.400556][T10616] RDS/IB: syz0: added [ 246.405118][T10616] smc: adding ib device syz0 with port count 1 [ 246.411775][T10616] smc: ib device syz0 port 1 has no pnetid [ 246.439494][ T5914] lo speed is unknown, defaulting to 1000 [ 246.445922][T10616] lo speed is unknown, defaulting to 1000 [ 246.602823][T10653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1301'. [ 247.025237][T10616] lo speed is unknown, defaulting to 1000 [ 247.149229][T10679] FAULT_INJECTION: forcing a failure. [ 247.149229][T10679] name failslab, interval 1, probability 0, space 0, times 0 [ 247.162340][T10679] CPU: 1 UID: 0 PID: 10679 Comm: syz.0.1309 Not tainted syzkaller #0 PREEMPT(full) [ 247.162365][T10679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 247.162381][T10679] Call Trace: [ 247.162389][T10679] [ 247.162397][T10679] dump_stack_lvl+0xe8/0x150 [ 247.162429][T10679] should_fail_ex+0x412/0x560 [ 247.162459][T10679] should_failslab+0xa8/0x100 [ 247.162483][T10679] ? __inet_hash_connect+0x1612/0x25c0 [ 247.162510][T10679] kmem_cache_alloc_noprof+0x87/0x650 [ 247.162529][T10679] ? __inet_hash_connect+0xe97/0x25c0 [ 247.162562][T10679] __inet_hash_connect+0x1612/0x25c0 [ 247.162601][T10679] ? __inet_hash_connect+0x5cf/0x25c0 [ 247.162633][T10679] ? __pfx___inet_hash_connect+0x10/0x10 [ 247.162664][T10679] ? inet_hash_connect+0xf1/0x380 [ 247.162694][T10679] tcp_v4_connect+0xd5f/0x19b0 [ 247.162738][T10679] ? __pfx_tcp_v4_connect+0x10/0x10 [ 247.162769][T10679] mptcp_connect+0x56b/0x830 [ 247.162802][T10679] __inet_stream_connect+0x25a/0xdd0 [ 247.162843][T10679] ? __pfx___inet_stream_connect+0x10/0x10 [ 247.162873][T10679] ? __kasan_kmalloc+0x93/0xb0 [ 247.162898][T10679] ? __kmalloc_cache_noprof+0x31c/0x660 [ 247.162921][T10679] ? __kmalloc_cache_noprof+0x15b/0x660 [ 247.162947][T10679] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 247.162974][T10679] mptcp_sendmsg_fastopen+0x17d/0x580 [ 247.163013][T10679] mptcp_sendmsg+0x17af/0x19d0 [ 247.163057][T10679] ? aa_sk_perm+0x6d5/0x900 [ 247.163089][T10679] ? __pfx_aa_sk_perm+0x10/0x10 [ 247.163112][T10679] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 247.163141][T10679] ? sock_rps_record_flow+0x19/0x350 [ 247.163172][T10679] ? inet_sendmsg+0x2f4/0x370 [ 247.163206][T10679] ____sys_sendmsg+0x80a/0x9f0 [ 247.163252][T10679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.163280][T10679] ? import_iovec+0x73/0xa0 [ 247.163311][T10679] ___sys_sendmsg+0x2a5/0x360 [ 247.163335][T10679] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.163359][T10679] ? kstrtouint+0x6e/0xe0 [ 247.163406][T10679] ? __fget_files+0x2a/0x420 [ 247.163433][T10679] ? __fget_files+0x3a0/0x420 [ 247.163468][T10679] __sys_sendmmsg+0x27c/0x4e0 [ 247.163492][T10679] ? __pfx___sys_sendmmsg+0x10/0x10 [ 247.163507][T10679] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 247.163556][T10679] ? ksys_write+0x242/0x270 [ 247.163578][T10679] ? __pfx_ksys_write+0x10/0x10 [ 247.163603][T10679] __x64_sys_sendmmsg+0xa0/0xc0 [ 247.163623][T10679] do_syscall_64+0x14d/0xf80 [ 247.163648][T10679] ? trace_irq_disable+0x3b/0x150 [ 247.163674][T10679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.163692][T10679] ? clear_bhb_loop+0x40/0x90 [ 247.163714][T10679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.163737][T10679] RIP: 0033:0x7f74ba39c799 [ 247.163755][T10679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.163769][T10679] RSP: 002b:00007f74bb249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 247.163787][T10679] RAX: ffffffffffffffda RBX: 00007f74ba615fa0 RCX: 00007f74ba39c799 [ 247.163800][T10679] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 247.163811][T10679] RBP: 00007f74bb249090 R08: 0000000000000000 R09: 0000000000000000 [ 247.163822][T10679] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 247.163833][T10679] R13: 00007f74ba616038 R14: 00007f74ba615fa0 R15: 00007ffedd9cdc48 [ 247.163863][T10679] [ 247.541721][T10686] dvmrp0: left allmulticast mode [ 247.733720][T10616] lo speed is unknown, defaulting to 1000 [ 248.027394][T10616] lo speed is unknown, defaulting to 1000 [ 248.350012][T10616] lo speed is unknown, defaulting to 1000 [ 248.459392][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1321'. [ 248.474583][T10717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1322'. [ 248.538557][T10721] FAULT_INJECTION: forcing a failure. [ 248.538557][T10721] name failslab, interval 1, probability 0, space 0, times 0 [ 248.553732][T10721] CPU: 1 UID: 0 PID: 10721 Comm: syz.2.1323 Not tainted syzkaller #0 PREEMPT(full) [ 248.553758][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.553771][T10721] Call Trace: [ 248.553780][T10721] [ 248.553788][T10721] dump_stack_lvl+0xe8/0x150 [ 248.553820][T10721] should_fail_ex+0x412/0x560 [ 248.553851][T10721] should_failslab+0xa8/0x100 [ 248.553878][T10721] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 248.553901][T10721] ? __alloc_skb+0x1d0/0x7d0 [ 248.553929][T10721] ? ipv4_default_advmss+0x20/0x340 [ 248.553964][T10721] __alloc_skb+0x1d0/0x7d0 [ 248.553996][T10721] tcp_stream_alloc_skb+0x3f/0x580 [ 248.554016][T10721] ? __asan_memset+0x22/0x50 [ 248.554038][T10721] tcp_connect+0x1567/0x5410 [ 248.554108][T10721] ? __pfx_tcp_connect+0x10/0x10 [ 248.554150][T10721] ? __asan_memset+0x22/0x50 [ 248.554172][T10721] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 248.554194][T10721] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 248.554229][T10721] ? sk_setup_caps+0x9ef/0xc40 [ 248.554248][T10721] ? sk_setup_caps+0x29/0xc40 [ 248.554269][T10721] tcp_v4_connect+0x10f7/0x19b0 [ 248.554309][T10721] ? __pfx_tcp_v4_connect+0x10/0x10 [ 248.554338][T10721] mptcp_connect+0x56b/0x830 [ 248.554370][T10721] __inet_stream_connect+0x25a/0xdd0 [ 248.554409][T10721] ? __pfx___inet_stream_connect+0x10/0x10 [ 248.554438][T10721] ? __kasan_kmalloc+0x93/0xb0 [ 248.554468][T10721] ? __kmalloc_cache_noprof+0x31c/0x660 [ 248.554489][T10721] ? __kmalloc_cache_noprof+0x15b/0x660 [ 248.554514][T10721] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 248.554541][T10721] mptcp_sendmsg_fastopen+0x17d/0x580 [ 248.554577][T10721] mptcp_sendmsg+0x17af/0x19d0 [ 248.554619][T10721] ? aa_sk_perm+0x6d5/0x900 [ 248.554649][T10721] ? __pfx_aa_sk_perm+0x10/0x10 [ 248.554671][T10721] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 248.554703][T10721] ? sock_rps_record_flow+0x19/0x350 [ 248.554733][T10721] ? inet_sendmsg+0x2f4/0x370 [ 248.554763][T10721] ____sys_sendmsg+0x80a/0x9f0 [ 248.554790][T10721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.554818][T10721] ? import_iovec+0x73/0xa0 [ 248.554849][T10721] ___sys_sendmsg+0x2a5/0x360 [ 248.554874][T10721] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.554898][T10721] ? kstrtouint+0x6e/0xe0 [ 248.554945][T10721] ? __fget_files+0x2a/0x420 [ 248.554972][T10721] ? __fget_files+0x3a0/0x420 [ 248.555008][T10721] __sys_sendmmsg+0x27c/0x4e0 [ 248.555033][T10721] ? __pfx___sys_sendmmsg+0x10/0x10 [ 248.555049][T10721] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 248.555102][T10721] ? ksys_write+0x242/0x270 [ 248.555124][T10721] ? __pfx_ksys_write+0x10/0x10 [ 248.555150][T10721] __x64_sys_sendmmsg+0xa0/0xc0 [ 248.555171][T10721] do_syscall_64+0x14d/0xf80 [ 248.555216][T10721] ? trace_irq_disable+0x3b/0x150 [ 248.555244][T10721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.555264][T10721] ? clear_bhb_loop+0x40/0x90 [ 248.555288][T10721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.555308][T10721] RIP: 0033:0x7f1fad59c799 [ 248.555326][T10721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.555343][T10721] RSP: 002b:00007f1fae4fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 248.555363][T10721] RAX: ffffffffffffffda RBX: 00007f1fad815fa0 RCX: 00007f1fad59c799 [ 248.555377][T10721] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 248.555390][T10721] RBP: 00007f1fae4fa090 R08: 0000000000000000 R09: 0000000000000000 [ 248.555402][T10721] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 248.555414][T10721] R13: 00007f1fad816038 R14: 00007f1fad815fa0 R15: 00007ffc3972dd48 [ 248.555446][T10721] [ 248.568510][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1322'. [ 248.954594][T10717] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.120317][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1327'. [ 249.174970][T10734] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 249.211097][T10738] unsupported nlmsg_type 40 [ 249.278835][T10744] __nla_validate_parse: 4 callbacks suppressed [ 249.278863][T10744] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1328'. [ 249.316822][T10733] team3 (uninitialized): Failed to send options change via netlink (err -105) [ 249.337961][T10736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1328'. [ 249.341599][T10747] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1331'. [ 249.379105][T10736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1328'. [ 249.501764][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1332'. [ 249.616159][T10761] sit1: entered allmulticast mode [ 249.647565][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'. [ 249.763359][T10778] ip6tnl0: Caught tx_queue_len zero misconfig [ 249.891655][T10788] netlink: 'syz.1.1342': attribute type 10 has an invalid length. [ 249.924140][T10788] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1342'. [ 250.314488][T10798] gre0 speed is unknown, defaulting to 1000 [ 250.685830][T10826] FAULT_INJECTION: forcing a failure. [ 250.685830][T10826] name failslab, interval 1, probability 0, space 0, times 0 [ 250.786360][T10826] CPU: 0 UID: 0 PID: 10826 Comm: syz.4.1349 Not tainted syzkaller #0 PREEMPT(full) [ 250.786390][T10826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 250.786404][T10826] Call Trace: [ 250.786412][T10826] [ 250.786420][T10826] dump_stack_lvl+0xe8/0x150 [ 250.786456][T10826] should_fail_ex+0x412/0x560 [ 250.786490][T10826] should_failslab+0xa8/0x100 [ 250.786517][T10826] ? __nf_conntrack_alloc+0x81/0x3e0 [ 250.786541][T10826] kmem_cache_alloc_noprof+0x87/0x650 [ 250.786563][T10826] ? nf_ct_pernet+0x45/0x270 [ 250.786593][T10826] __nf_conntrack_alloc+0x81/0x3e0 [ 250.786622][T10826] init_conntrack+0x16f/0xf70 [ 250.786655][T10826] ? __pfx_init_conntrack+0x10/0x10 [ 250.786685][T10826] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 250.786710][T10826] ? __siphash_unaligned+0x22e/0x3b0 [ 250.786749][T10826] nf_conntrack_in+0xbd8/0x15e0 [ 250.786797][T10826] ? __pfx_nf_conntrack_in+0x10/0x10 [ 250.786831][T10826] ? ipt_do_table+0x2b2/0x1630 [ 250.786867][T10826] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 250.786898][T10826] ? ipv4_conntrack_local+0x126/0x210 [ 250.786917][T10826] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 250.786940][T10826] nf_hook_slow+0xc5/0x220 [ 250.786974][T10826] ? __pfx_dst_output+0x10/0x10 [ 250.787004][T10826] nf_hook+0x22a/0x3a0 [ 250.787039][T10826] ? nf_hook+0xa1/0x3a0 [ 250.787067][T10826] ? __pfx_nf_hook+0x10/0x10 [ 250.787099][T10826] ? __pfx_dst_output+0x10/0x10 [ 250.787142][T10826] __ip_local_out+0x558/0x6a0 [ 250.787171][T10826] ? __pfx_dst_output+0x10/0x10 [ 250.787204][T10826] ip_local_out+0x2a/0x190 [ 250.787254][T10826] ? __ip_queue_xmit+0x5c/0x1bb0 [ 250.787283][T10826] __ip_queue_xmit+0x116a/0x1bb0 [ 250.787316][T10826] ? csum_tcpudp_nofold+0x1f/0x60 [ 250.787337][T10826] ? __ip_queue_xmit+0x5c/0x1bb0 [ 250.787369][T10826] ? __pfx_ip_queue_xmit+0x10/0x10 [ 250.787398][T10826] __tcp_transmit_skb+0x2d64/0x4810 [ 250.787447][T10826] ? tcp_fastopen_cache_get+0x2f/0x4c0 [ 250.787476][T10826] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 250.787520][T10826] ? tcp_fastopen_cookie_check+0x2b6/0x470 [ 250.787548][T10826] tcp_connect+0x3433/0x5410 [ 250.787609][T10826] ? __pfx_tcp_connect+0x10/0x10 [ 250.787655][T10826] ? __asan_memset+0x22/0x50 [ 250.787680][T10826] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 250.787703][T10826] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 250.787740][T10826] ? sk_setup_caps+0x9ef/0xc40 [ 250.787762][T10826] ? sk_setup_caps+0x29/0xc40 [ 250.787784][T10826] tcp_v4_connect+0x10f7/0x19b0 [ 250.787828][T10826] ? __pfx_tcp_v4_connect+0x10/0x10 [ 250.787860][T10826] mptcp_connect+0x56b/0x830 [ 250.787894][T10826] __inet_stream_connect+0x25a/0xdd0 [ 250.787936][T10826] ? __pfx___inet_stream_connect+0x10/0x10 [ 250.787967][T10826] ? __kasan_kmalloc+0x93/0xb0 [ 250.787990][T10826] ? __kmalloc_cache_noprof+0x31c/0x660 [ 250.788014][T10826] ? __kmalloc_cache_noprof+0x15b/0x660 [ 250.788040][T10826] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 250.788068][T10826] mptcp_sendmsg_fastopen+0x17d/0x580 [ 250.788107][T10826] mptcp_sendmsg+0x17af/0x19d0 [ 250.788153][T10826] ? aa_sk_perm+0x6d5/0x900 [ 250.788185][T10826] ? __pfx_aa_sk_perm+0x10/0x10 [ 250.788209][T10826] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 250.788247][T10826] ? sock_rps_record_flow+0x19/0x350 [ 250.788280][T10826] ? inet_sendmsg+0x2f4/0x370 [ 250.788314][T10826] ____sys_sendmsg+0x80a/0x9f0 [ 250.788344][T10826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.788374][T10826] ? import_iovec+0x73/0xa0 [ 250.788408][T10826] ___sys_sendmsg+0x2a5/0x360 [ 250.788434][T10826] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.788460][T10826] ? kstrtouint+0x6e/0xe0 [ 250.788512][T10826] ? __fget_files+0x2a/0x420 [ 250.788540][T10826] ? __fget_files+0x3a0/0x420 [ 250.788579][T10826] __sys_sendmmsg+0x27c/0x4e0 [ 250.788606][T10826] ? __pfx___sys_sendmmsg+0x10/0x10 [ 250.788625][T10826] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 250.788682][T10826] ? ksys_write+0x242/0x270 [ 250.788706][T10826] ? __pfx_ksys_write+0x10/0x10 [ 250.788734][T10826] __x64_sys_sendmmsg+0xa0/0xc0 [ 250.788757][T10826] do_syscall_64+0x14d/0xf80 [ 250.788785][T10826] ? trace_irq_disable+0x3b/0x150 [ 250.788813][T10826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.788834][T10826] ? clear_bhb_loop+0x40/0x90 [ 250.788858][T10826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.788878][T10826] RIP: 0033:0x7f0b16d9c799 [ 250.788897][T10826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.788915][T10826] RSP: 002b:00007f0b17c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 250.788937][T10826] RAX: ffffffffffffffda RBX: 00007f0b17015fa0 RCX: 00007f0b16d9c799 [ 250.788951][T10826] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 250.788964][T10826] RBP: 00007f0b17c06090 R08: 0000000000000000 R09: 0000000000000000 [ 250.788976][T10826] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000002 [ 250.788989][T10826] R13: 00007f0b17016038 R14: 00007f0b17015fa0 R15: 00007fffbdf8e338 [ 250.789021][T10826] [ 251.401463][T10798] wlan1 speed is unknown, defaulting to 1000 [ 251.597616][T10798] lo speed is unknown, defaulting to 1000 [ 251.816637][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'. [ 251.848617][T10856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1357'. [ 252.297579][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1362'. [ 252.492036][T10885] ip6tnl4: entered promiscuous mode [ 252.530893][T10885] ip6tnl4: entered allmulticast mode [ 253.087286][T10923] netlink: 'syz.3.1371': attribute type 1 has an invalid length. [ 253.189499][T10923] bond7: entered promiscuous mode [ 253.195469][T10923] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.259194][T10930] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 253.275635][T10928] vlan2: entered allmulticast mode [ 253.318555][T10928] bond7: entered allmulticast mode [ 253.468785][T10934] bond7: (slave bridge3): making interface the new active one [ 253.495445][T10934] bridge3: entered promiscuous mode [ 253.502909][T10934] bridge3: entered allmulticast mode [ 253.511626][T10934] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 253.927246][T10972] ip6gre1: entered promiscuous mode [ 254.132243][T10984] netlink: 'syz.4.1388': attribute type 9 has an invalid length. [ 254.269450][T10987] gre0 speed is unknown, defaulting to 1000 [ 254.349155][T10983] __nla_validate_parse: 9 callbacks suppressed [ 254.349173][T10983] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1389'. [ 254.582958][T11004] tipc: Enabling of bearer rejected, failed to enable media [ 254.670431][T10987] wlan1 speed is unknown, defaulting to 1000 [ 254.686111][T10987] lo speed is unknown, defaulting to 1000 [ 254.925779][T11016] syzkaller0: entered promiscuous mode [ 254.946073][T11016] syzkaller0: entered allmulticast mode [ 255.547332][T11033] lo: Caught tx_queue_len zero misconfig [ 255.838913][T11051] netlink: 'syz.3.1406': attribute type 1 has an invalid length. [ 255.892594][T11051] bond8: entered promiscuous mode [ 255.898599][T11051] 8021q: adding VLAN 0 to HW filter on device bond8 [ 255.951222][T11059] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1409'. [ 256.100548][T11073] xt_bpf: check failed: parse error [ 256.112152][T11073] lo speed is unknown, defaulting to 1000 [ 256.119117][T11073] lo speed is unknown, defaulting to 1000 [ 256.125605][T11073] lo speed is unknown, defaulting to 1000 [ 256.144499][T11073] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 256.203569][T11073] lo speed is unknown, defaulting to 1000 [ 256.261120][T11073] lo speed is unknown, defaulting to 1000 [ 256.282608][T11073] lo speed is unknown, defaulting to 1000 [ 256.322275][T11073] lo speed is unknown, defaulting to 1000 [ 256.355682][T11073] lo speed is unknown, defaulting to 1000 [ 256.369624][T11073] lo speed is unknown, defaulting to 1000 [ 256.394292][T11069] wlan1 speed is unknown, defaulting to 1000 [ 256.398940][T11072] smc: removing ib device syz1 [ 256.439660][T11069] lo speed is unknown, defaulting to 1000 [ 256.536110][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'. [ 257.028248][T11096] wlan1 speed is unknown, defaulting to 1000 [ 257.621129][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1420'. [ 257.984579][T11096] lo speed is unknown, defaulting to 1000 [ 258.170014][T11121] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1423'. [ 258.474745][T11131] openvswitch: netlink: EtherType 50a is less than min 600 [ 258.498003][T11131] netlink: 'syz.2.1428': attribute type 3 has an invalid length. [ 258.710813][T11096] lo speed is unknown, defaulting to 1000 [ 258.919225][T11143] syzkaller0: entered promiscuous mode [ 258.942668][T11151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'. [ 258.956699][T11143] syzkaller0: entered allmulticast mode [ 259.017458][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'. [ 259.213060][T11151] 8021q: adding VLAN 0 to HW filter on device bond3 [ 259.293901][T11153] macsec1: entered promiscuous mode [ 259.321357][T11153] bond3: entered promiscuous mode [ 259.331041][T11153] macsec1: entered allmulticast mode [ 259.337399][T11153] bond3: entered allmulticast mode [ 259.344223][T11153] bond3: left allmulticast mode [ 259.349903][T11153] bond3: left promiscuous mode [ 259.367276][T11172] netlink: 'syz.3.1436': attribute type 2 has an invalid length. [ 259.375904][T11172] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1436'. [ 259.664573][T11180] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1439'. [ 259.867814][T11191] netlink: 'syz.1.1443': attribute type 1 has an invalid length. [ 259.940795][T11191] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.286102][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1447'. [ 260.687490][T11189] delete_channel: no stack [ 260.790784][T11194] bond4: (slave veth4): Enslaving as an active interface with a down link [ 260.851996][T11203] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 260.861589][T11203] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 260.949184][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 261.113210][T11227] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1451'. [ 261.139896][T11227] ..0{X: renamed from gretap0 [ 261.154752][T11227] ..0{X: entered allmulticast mode [ 261.170051][T11227] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check. [ 261.348035][T11246] netlink: 'syz.4.1460': attribute type 11 has an invalid length. [ 261.362688][T11246] netlink: 'syz.4.1460': attribute type 11 has an invalid length. [ 261.371508][T11246] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1460'. [ 261.430235][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1461'. [ 261.481585][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 261.582556][T11261] FAULT_INJECTION: forcing a failure. [ 261.582556][T11261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.595868][T11261] CPU: 1 UID: 0 PID: 11261 Comm: syz.0.1464 Not tainted syzkaller #0 PREEMPT(full) [ 261.595892][T11261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.595905][T11261] Call Trace: [ 261.595916][T11261] [ 261.595922][T11261] dump_stack_lvl+0xe8/0x150 [ 261.595944][T11261] should_fail_ex+0x412/0x560 [ 261.595965][T11261] _copy_from_user+0x2d/0xb0 [ 261.595988][T11261] ___sys_sendmsg+0x1c6/0x360 [ 261.596006][T11261] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.596041][T11261] ? kstrtouint+0x6e/0xe0 [ 261.596077][T11261] ? __fget_files+0x2a/0x420 [ 261.596098][T11261] ? __fget_files+0x3a0/0x420 [ 261.596127][T11261] __sys_sendmmsg+0x27c/0x4e0 [ 261.596146][T11261] ? __pfx___sys_sendmmsg+0x10/0x10 [ 261.596160][T11261] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 261.596201][T11261] ? ksys_write+0x242/0x270 [ 261.596218][T11261] ? __pfx_ksys_write+0x10/0x10 [ 261.596239][T11261] __x64_sys_sendmmsg+0xa0/0xc0 [ 261.596256][T11261] do_syscall_64+0x14d/0xf80 [ 261.596304][T11261] ? trace_irq_disable+0x3b/0x150 [ 261.596334][T11261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.596355][T11261] ? clear_bhb_loop+0x40/0x90 [ 261.596380][T11261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.596409][T11261] RIP: 0033:0x7f74ba39c799 [ 261.596429][T11261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.596447][T11261] RSP: 002b:00007f74bb249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 261.596469][T11261] RAX: ffffffffffffffda RBX: 00007f74ba615fa0 RCX: 00007f74ba39c799 [ 261.596484][T11261] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 261.596497][T11261] RBP: 00007f74bb249090 R08: 0000000000000000 R09: 0000000000000000 [ 261.596510][T11261] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 261.596523][T11261] R13: 00007f74ba616038 R14: 00007f74ba615fa0 R15: 00007ffedd9cdc48 [ 261.596555][T11261] [ 261.927567][T11276] netlink: 'syz.0.1467': attribute type 6 has an invalid length. [ 261.972702][T11276] tipc: Disabling bearer [ 262.231167][T11289] block nbd0: reconnected socket [ 262.269172][T11291] C: renamed from team_slave_0 [ 262.278887][T11291] netlink: 'syz.2.1471': attribute type 8 has an invalid length. [ 262.286803][T11291] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 262.394965][ T5837] block nbd0: Receive control failed (result -32) [ 262.423355][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1472'. [ 262.489958][T11295] netlink: 'syz.3.1472': attribute type 1 has an invalid length. [ 262.578012][T11307] FAULT_INJECTION: forcing a failure. [ 262.578012][T11307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.612961][T11307] CPU: 1 UID: 0 PID: 11307 Comm: syz.1.1475 Not tainted syzkaller #0 PREEMPT(full) [ 262.612989][T11307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.613002][T11307] Call Trace: [ 262.613009][T11307] [ 262.613018][T11307] dump_stack_lvl+0xe8/0x150 [ 262.613061][T11307] should_fail_ex+0x412/0x560 [ 262.613091][T11307] _copy_from_user+0x2d/0xb0 [ 262.613120][T11307] __copy_msghdr+0x3c5/0x5b0 [ 262.613143][T11307] ___sys_sendmsg+0x213/0x360 [ 262.613166][T11307] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.613190][T11307] ? kstrtouint+0x6e/0xe0 [ 262.613236][T11307] ? __fget_files+0x2a/0x420 [ 262.613262][T11307] ? __fget_files+0x3a0/0x420 [ 262.613298][T11307] __sys_sendmmsg+0x27c/0x4e0 [ 262.613322][T11307] ? __pfx___sys_sendmmsg+0x10/0x10 [ 262.613339][T11307] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 262.613390][T11307] ? ksys_write+0x242/0x270 [ 262.613412][T11307] ? __pfx_ksys_write+0x10/0x10 [ 262.613438][T11307] __x64_sys_sendmmsg+0xa0/0xc0 [ 262.613459][T11307] do_syscall_64+0x14d/0xf80 [ 262.613484][T11307] ? trace_irq_disable+0x3b/0x150 [ 262.613510][T11307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.613529][T11307] ? clear_bhb_loop+0x40/0x90 [ 262.613551][T11307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.613569][T11307] RIP: 0033:0x7f4d5079c799 [ 262.613587][T11307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.613603][T11307] RSP: 002b:00007f4d516e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 262.613623][T11307] RAX: ffffffffffffffda RBX: 00007f4d50a15fa0 RCX: 00007f4d5079c799 [ 262.613636][T11307] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 262.613648][T11307] RBP: 00007f4d516e4090 R08: 0000000000000000 R09: 0000000000000000 [ 262.613660][T11307] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 262.613672][T11307] R13: 00007f4d50a16038 R14: 00007f4d50a15fa0 R15: 00007ffcc2d71108 [ 262.613701][T11307] [ 262.848171][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'. [ 263.065943][T11323] xt_hashlimit: size too large, truncated to 1048576 [ 263.110035][T11325] pim6reg1: entered promiscuous mode [ 263.122171][T11325] pim6reg1: entered allmulticast mode [ 263.136074][T11327] x9: renamed from bridge_slave_0 [ 263.579402][T11346] pimreg: entered allmulticast mode [ 263.644583][T11349] FAULT_INJECTION: forcing a failure. [ 263.644583][T11349] name failslab, interval 1, probability 0, space 0, times 0 [ 263.689592][T11349] CPU: 0 UID: 0 PID: 11349 Comm: syz.0.1489 Not tainted syzkaller #0 PREEMPT(full) [ 263.689620][T11349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.689632][T11349] Call Trace: [ 263.689639][T11349] [ 263.689663][T11349] dump_stack_lvl+0xe8/0x150 [ 263.689696][T11349] should_fail_ex+0x412/0x560 [ 263.689728][T11349] should_failslab+0xa8/0x100 [ 263.689756][T11349] __kmalloc_cache_noprof+0x88/0x660 [ 263.689779][T11349] ? sctp_association_new+0x89/0x25e0 [ 263.689812][T11349] sctp_association_new+0x89/0x25e0 [ 263.689843][T11349] ? sctp_has_association+0x1cd/0x1f0 [ 263.689871][T11349] ? sctp_has_association+0x2f/0x1f0 [ 263.689909][T11349] sctp_connect_new_asoc+0x2e4/0x6b0 [ 263.689940][T11349] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 263.689969][T11349] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 263.690007][T11349] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 263.690030][T11349] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 263.690056][T11349] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 263.690078][T11349] ? security_sctp_bind_connect+0x7e/0x2c0 [ 263.690102][T11349] sctp_sendmsg+0x1528/0x2c10 [ 263.690140][T11349] ? __pfx_sctp_sendmsg+0x10/0x10 [ 263.690168][T11349] ? aa_sk_perm+0x6d5/0x900 [ 263.690198][T11349] ? __pfx_aa_sk_perm+0x10/0x10 [ 263.690223][T11349] ? sock_rps_record_flow+0x19/0x350 [ 263.690260][T11349] ? inet_sendmsg+0x2f4/0x370 [ 263.690287][T11349] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.690310][T11349] ____sys_sendmsg+0x80a/0x9f0 [ 263.690338][T11349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.690366][T11349] ? import_iovec+0x73/0xa0 [ 263.690396][T11349] ___sys_sendmsg+0x2a5/0x360 [ 263.690420][T11349] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.690445][T11349] ? kstrtouint+0x6e/0xe0 [ 263.690490][T11349] ? __fget_files+0x2a/0x420 [ 263.690517][T11349] ? __fget_files+0x3a0/0x420 [ 263.690553][T11349] __sys_sendmmsg+0x27c/0x4e0 [ 263.690577][T11349] ? __pfx___sys_sendmmsg+0x10/0x10 [ 263.690598][T11349] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 263.690649][T11349] ? ksys_write+0x242/0x270 [ 263.690672][T11349] ? __pfx_ksys_write+0x10/0x10 [ 263.690698][T11349] __x64_sys_sendmmsg+0xa0/0xc0 [ 263.690738][T11349] do_syscall_64+0x14d/0xf80 [ 263.690765][T11349] ? trace_irq_disable+0x3b/0x150 [ 263.690793][T11349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.690813][T11349] ? clear_bhb_loop+0x40/0x90 [ 263.690848][T11349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.690867][T11349] RIP: 0033:0x7f74ba39c799 [ 263.690885][T11349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.690902][T11349] RSP: 002b:00007f74bb249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 263.690923][T11349] RAX: ffffffffffffffda RBX: 00007f74ba615fa0 RCX: 00007f74ba39c799 [ 263.690936][T11349] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 263.690948][T11349] RBP: 00007f74bb249090 R08: 0000000000000000 R09: 0000000000000000 [ 263.690959][T11349] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 263.690971][T11349] R13: 00007f74ba616038 R14: 00007f74ba615fa0 R15: 00007ffedd9cdc48 [ 263.691000][T11349] [ 264.198073][T11366] netlink: 'syz.0.1495': attribute type 13 has an invalid length. [ 264.450935][T11390] __nla_validate_parse: 4 callbacks suppressed [ 264.450952][T11390] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1501'. [ 264.474873][T11390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1501'. [ 264.718001][T11404] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1506'. [ 264.727841][T11404] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1506'. [ 264.794127][T11409] netlink: 444 bytes leftover after parsing attributes in process `syz.2.1506'. [ 265.203945][T11426] dvmrp1: entered allmulticast mode [ 265.310898][T11435] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .&!=@㿚 ΁ *] [ 265.984891][T11451] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1520'. [ 266.007423][T11451] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1520'. [ 266.070738][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1520'. [ 266.098723][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'. [ 266.118023][T11451] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 266.130444][T11451] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 266.142801][T11453] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 266.549353][T11482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1531'. [ 266.579416][T11482] vlan2: entered promiscuous mode [ 266.588502][T11482] geneve1: entered promiscuous mode [ 266.593893][T11482] vlan2: entered allmulticast mode [ 266.628400][T11482] geneve1: entered allmulticast mode [ 267.212516][T11522] wlan1 speed is unknown, defaulting to 1000 [ 267.226910][T11522] lo speed is unknown, defaulting to 1000 [ 267.538467][T11522] lo speed is unknown, defaulting to 1000 [ 268.030530][T11554] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 268.360838][T11575] tipc: Enabling of bearer rejected, failed to enable media [ 268.638692][T11590] netlink: 'syz.4.1560': attribute type 9 has an invalid length. [ 268.641782][T11583] net veth1_virt_wifi : renamed from virt_wifi0 [ 268.954508][T11607] lo: entered allmulticast mode [ 268.967782][T11607] lo: left allmulticast mode [ 269.068938][T11619] FAULT_INJECTION: forcing a failure. [ 269.068938][T11619] name failslab, interval 1, probability 0, space 0, times 0 [ 269.091563][T11619] CPU: 1 UID: 0 PID: 11619 Comm: syz.1.1569 Not tainted syzkaller #0 PREEMPT(full) [ 269.091589][T11619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.091602][T11619] Call Trace: [ 269.091610][T11619] [ 269.091618][T11619] dump_stack_lvl+0xe8/0x150 [ 269.091650][T11619] should_fail_ex+0x412/0x560 [ 269.091681][T11619] should_failslab+0xa8/0x100 [ 269.091706][T11619] ? dst_alloc+0x105/0x170 [ 269.091728][T11619] kmem_cache_alloc_noprof+0x87/0x650 [ 269.091757][T11619] dst_alloc+0x105/0x170 [ 269.091790][T11619] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 269.091822][T11619] ? ip_route_output_key_hash_rcu+0x1d01/0x25d0 [ 269.091858][T11619] ? ip_route_output_key_hash+0xd8/0x2a0 [ 269.091890][T11619] ip_route_output_key_hash+0x18d/0x2a0 [ 269.091922][T11619] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 269.091956][T11619] ? crng_fast_key_erasure+0x196/0x270 [ 269.091981][T11619] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 269.092007][T11619] ip_route_output_flow+0x2a/0x150 [ 269.092038][T11619] sctp_v4_get_dst+0x3f8/0x12b0 [ 269.092061][T11619] ? crng_make_state+0x2c5/0x600 [ 269.092082][T11619] ? lockdep_hardirqs_on+0x7a/0x110 [ 269.092111][T11619] ? crng_make_state+0x36a/0x600 [ 269.092137][T11619] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 269.092158][T11619] ? _get_random_bytes+0x1e7/0x260 [ 269.092196][T11619] ? dst_release+0x72/0x1b0 [ 269.092220][T11619] sctp_transport_route+0x118/0x2f0 [ 269.092246][T11619] sctp_assoc_add_peer+0x650/0x13b0 [ 269.092286][T11619] sctp_connect_new_asoc+0x329/0x6b0 [ 269.092315][T11619] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 269.092344][T11619] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 269.092370][T11619] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 269.092395][T11619] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 269.092423][T11619] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 269.092448][T11619] ? security_sctp_bind_connect+0x7e/0x2c0 [ 269.092472][T11619] sctp_sendmsg+0x1528/0x2c10 [ 269.092512][T11619] ? __pfx_sctp_sendmsg+0x10/0x10 [ 269.092541][T11619] ? aa_sk_perm+0x6d5/0x900 [ 269.092574][T11619] ? __pfx_aa_sk_perm+0x10/0x10 [ 269.092601][T11619] ? sock_rps_record_flow+0x19/0x350 [ 269.092633][T11619] ? inet_sendmsg+0x2f4/0x370 [ 269.092659][T11619] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.092685][T11619] ____sys_sendmsg+0x80a/0x9f0 [ 269.092714][T11619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.092743][T11619] ? import_iovec+0x73/0xa0 [ 269.092782][T11619] ___sys_sendmsg+0x2a5/0x360 [ 269.092807][T11619] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.092832][T11619] ? kstrtouint+0x6e/0xe0 [ 269.092882][T11619] ? __fget_files+0x2a/0x420 [ 269.092909][T11619] ? __fget_files+0x3a0/0x420 [ 269.092948][T11619] __sys_sendmmsg+0x27c/0x4e0 [ 269.092974][T11619] ? __pfx___sys_sendmmsg+0x10/0x10 [ 269.092991][T11619] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 269.093059][T11619] ? ksys_write+0x242/0x270 [ 269.093081][T11619] ? __pfx_ksys_write+0x10/0x10 [ 269.093107][T11619] __x64_sys_sendmmsg+0xa0/0xc0 [ 269.093128][T11619] do_syscall_64+0x14d/0xf80 [ 269.093154][T11619] ? trace_irq_disable+0x3b/0x150 [ 269.093180][T11619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.093199][T11619] ? clear_bhb_loop+0x40/0x90 [ 269.093221][T11619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.093240][T11619] RIP: 0033:0x7f4d5079c799 [ 269.093256][T11619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.093273][T11619] RSP: 002b:00007f4d516e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 269.093292][T11619] RAX: ffffffffffffffda RBX: 00007f4d50a15fa0 RCX: 00007f4d5079c799 [ 269.093305][T11619] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 269.093341][T11619] RBP: 00007f4d516e4090 R08: 0000000000000000 R09: 0000000000000000 [ 269.093353][T11619] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 269.093374][T11619] R13: 00007f4d50a16038 R14: 00007f4d50a15fa0 R15: 00007ffcc2d71108 [ 269.093410][T11619] [ 269.494579][T11623] __nla_validate_parse: 8 callbacks suppressed [ 269.494598][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1570'. [ 269.715296][T11634] netlink: 'syz.2.1575': attribute type 2 has an invalid length. [ 269.770614][T11638] netlink: 'syz.1.1576': attribute type 13 has an invalid length. [ 269.810049][T11638] netlink: 'syz.1.1576': attribute type 27 has an invalid length. [ 269.837852][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 269.876854][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 270.236626][T11668] netlink: 'syz.0.1580': attribute type 11 has an invalid length. [ 270.329099][ T5914] af_packet: tpacket_rcv: packet too big, clamped from 90 to 4294967286. macoff=82 [ 270.349098][T11675] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1581'. [ 270.399013][T11678] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 270.874658][T11713] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 271.009388][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1588'. [ 271.392403][T11739] FAULT_INJECTION: forcing a failure. [ 271.392403][T11739] name failslab, interval 1, probability 0, space 0, times 0 [ 271.406006][T11739] CPU: 1 UID: 0 PID: 11739 Comm: syz.1.1594 Not tainted syzkaller #0 PREEMPT(full) [ 271.406049][T11739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.406062][T11739] Call Trace: [ 271.406072][T11739] [ 271.406081][T11739] dump_stack_lvl+0xe8/0x150 [ 271.406115][T11739] should_fail_ex+0x412/0x560 [ 271.406147][T11739] should_failslab+0xa8/0x100 [ 271.406176][T11739] __kmalloc_cache_noprof+0x88/0x660 [ 271.406201][T11739] ? sctp_stream_init_ext+0x57/0x180 [ 271.406228][T11739] sctp_stream_init_ext+0x57/0x180 [ 271.406252][T11739] sctp_sendmsg_to_asoc+0x8e4/0x1900 [ 271.406282][T11739] ? __asan_memcpy+0x40/0x70 [ 271.406309][T11739] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 271.406351][T11739] ? sctp_connect_new_asoc+0x40a/0x6b0 [ 271.406380][T11739] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 271.406407][T11739] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 271.406437][T11739] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 271.406465][T11739] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 271.406492][T11739] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 271.406522][T11739] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 271.406547][T11739] ? security_sctp_bind_connect+0x7e/0x2c0 [ 271.406580][T11739] sctp_sendmsg+0x1b3d/0x2c10 [ 271.406624][T11739] ? __pfx_sctp_sendmsg+0x10/0x10 [ 271.406655][T11739] ? aa_sk_perm+0x6d5/0x900 [ 271.406688][T11739] ? __pfx_aa_sk_perm+0x10/0x10 [ 271.406717][T11739] ? sock_rps_record_flow+0x19/0x350 [ 271.406751][T11739] ? inet_sendmsg+0x2f4/0x370 [ 271.406780][T11739] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.406806][T11739] ____sys_sendmsg+0x80a/0x9f0 [ 271.406835][T11739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.406866][T11739] ? import_iovec+0x73/0xa0 [ 271.406902][T11739] ___sys_sendmsg+0x2a5/0x360 [ 271.406929][T11739] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.406956][T11739] ? kstrtouint+0x6e/0xe0 [ 271.407009][T11739] ? __fget_files+0x2a/0x420 [ 271.407038][T11739] ? __fget_files+0x3a0/0x420 [ 271.407079][T11739] __sys_sendmmsg+0x27c/0x4e0 [ 271.407107][T11739] ? __pfx___sys_sendmmsg+0x10/0x10 [ 271.407126][T11739] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 271.407194][T11739] ? ksys_write+0x242/0x270 [ 271.407228][T11739] ? __pfx_ksys_write+0x10/0x10 [ 271.407254][T11739] __x64_sys_sendmmsg+0xa0/0xc0 [ 271.407273][T11739] do_syscall_64+0x14d/0xf80 [ 271.407299][T11739] ? trace_irq_disable+0x3b/0x150 [ 271.407324][T11739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.407343][T11739] ? clear_bhb_loop+0x40/0x90 [ 271.407366][T11739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.407383][T11739] RIP: 0033:0x7f4d5079c799 [ 271.407400][T11739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.407417][T11739] RSP: 002b:00007f4d516e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.407436][T11739] RAX: ffffffffffffffda RBX: 00007f4d50a15fa0 RCX: 00007f4d5079c799 [ 271.407449][T11739] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 271.407461][T11739] RBP: 00007f4d516e4090 R08: 0000000000000000 R09: 0000000000000000 [ 271.407472][T11739] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000002 [ 271.407483][T11739] R13: 00007f4d50a16038 R14: 00007f4d50a15fa0 R15: 00007ffcc2d71108 [ 271.407512][T11739] [ 271.417178][T11737] wlan1 speed is unknown, defaulting to 1000 [ 271.745821][T11737] lo speed is unknown, defaulting to 1000 [ 271.823432][T11741] Cannot find add_set index 0 as target [ 271.885658][T11743] veth10: entered allmulticast mode [ 271.967527][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1598'. [ 271.984250][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 272.095869][T11737] lo speed is unknown, defaulting to 1000 [ 272.115088][T11754] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 272.260829][T11760] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1602'. [ 272.517227][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1605'. [ 272.769080][T11782] netlink: 'syz.0.1608': attribute type 1 has an invalid length. [ 273.119003][T11796] FAULT_INJECTION: forcing a failure. [ 273.119003][T11796] name failslab, interval 1, probability 0, space 0, times 0 [ 273.132169][T11796] CPU: 0 UID: 0 PID: 11796 Comm: syz.2.1611 Not tainted syzkaller #0 PREEMPT(full) [ 273.132195][T11796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.132207][T11796] Call Trace: [ 273.132214][T11796] [ 273.132222][T11796] dump_stack_lvl+0xe8/0x150 [ 273.132251][T11796] should_fail_ex+0x412/0x560 [ 273.132280][T11796] should_failslab+0xa8/0x100 [ 273.132302][T11796] ? sctp_chunkify+0x5a/0x260 [ 273.132324][T11796] kmem_cache_alloc_noprof+0x87/0x650 [ 273.132351][T11796] sctp_chunkify+0x5a/0x260 [ 273.132375][T11796] _sctp_make_chunk+0x122/0x290 [ 273.132401][T11796] sctp_make_init+0x5e3/0xe00 [ 273.132419][T11796] ? is_bpf_text_address+0x292/0x2b0 [ 273.132449][T11796] ? __pfx_sctp_make_init+0x10/0x10 [ 273.132481][T11796] ? stack_trace_save+0xa9/0x100 [ 273.132500][T11796] ? __pfx_stack_trace_save+0x10/0x10 [ 273.132521][T11796] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 273.132560][T11796] sctp_do_sm+0x238/0x5cf0 [ 273.132575][T11796] ? __pfx_sctp_pname+0x10/0x10 [ 273.132601][T11796] ? kasan_save_track+0x4f/0x80 [ 273.132619][T11796] ? kasan_save_track+0x3e/0x80 [ 273.132637][T11796] ? __kmalloc_cache_noprof+0x31c/0x660 [ 273.132657][T11796] ? sctp_sendmsg+0x1b3d/0x2c10 [ 273.132679][T11796] ? ___sys_sendmsg+0x2a5/0x360 [ 273.132696][T11796] ? __sys_sendmmsg+0x27c/0x4e0 [ 273.132712][T11796] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 273.132729][T11796] ? do_syscall_64+0x14d/0xf80 [ 273.132754][T11796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.132779][T11796] ? __pfx_sctp_do_sm+0x10/0x10 [ 273.132831][T11796] ? __sk_mem_raise_allocated+0x290/0x12c0 [ 273.132853][T11796] ? __genradix_ptr+0x1e1/0x220 [ 273.132878][T11796] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 273.132908][T11796] sctp_sendmsg_to_asoc+0x143d/0x1900 [ 273.132931][T11796] ? __asan_memcpy+0x40/0x70 [ 273.132956][T11796] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 273.132995][T11796] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 273.133020][T11796] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 273.133046][T11796] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 273.133071][T11796] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 273.133095][T11796] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 273.133120][T11796] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 273.133147][T11796] ? security_sctp_bind_connect+0x7e/0x2c0 [ 273.133170][T11796] sctp_sendmsg+0x1b3d/0x2c10 [ 273.133209][T11796] ? __pfx_sctp_sendmsg+0x10/0x10 [ 273.133236][T11796] ? aa_sk_perm+0x6d5/0x900 [ 273.133266][T11796] ? __pfx_aa_sk_perm+0x10/0x10 [ 273.133291][T11796] ? sock_rps_record_flow+0x19/0x350 [ 273.133322][T11796] ? inet_sendmsg+0x2f4/0x370 [ 273.133348][T11796] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.133371][T11796] ____sys_sendmsg+0x80a/0x9f0 [ 273.133398][T11796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.133426][T11796] ? import_iovec+0x73/0xa0 [ 273.133457][T11796] ___sys_sendmsg+0x2a5/0x360 [ 273.133481][T11796] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.133505][T11796] ? kstrtouint+0x6e/0xe0 [ 273.133559][T11796] ? __fget_files+0x2a/0x420 [ 273.133586][T11796] ? __fget_files+0x3a0/0x420 [ 273.133622][T11796] __sys_sendmmsg+0x27c/0x4e0 [ 273.133646][T11796] ? __pfx___sys_sendmmsg+0x10/0x10 [ 273.133663][T11796] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 273.133714][T11796] ? ksys_write+0x242/0x270 [ 273.133736][T11796] ? __pfx_ksys_write+0x10/0x10 [ 273.133762][T11796] __x64_sys_sendmmsg+0xa0/0xc0 [ 273.133783][T11796] do_syscall_64+0x14d/0xf80 [ 273.133808][T11796] ? trace_irq_disable+0x3b/0x150 [ 273.133834][T11796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.133853][T11796] ? clear_bhb_loop+0x40/0x90 [ 273.133875][T11796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.133894][T11796] RIP: 0033:0x7f1fad59c799 [ 273.133911][T11796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.133927][T11796] RSP: 002b:00007f1fae4fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 273.133946][T11796] RAX: ffffffffffffffda RBX: 00007f1fad815fa0 RCX: 00007f1fad59c799 [ 273.133960][T11796] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 273.133971][T11796] RBP: 00007f1fae4fa090 R08: 0000000000000000 R09: 0000000000000000 [ 273.133983][T11796] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000002 [ 273.133994][T11796] R13: 00007f1fad816038 R14: 00007f1fad815fa0 R15: 00007ffc3972dd48 [ 273.134025][T11796] [ 273.718016][T11812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1616'. [ 273.799613][T11820] netlink: 'syz.3.1618': attribute type 3 has an invalid length. [ 274.072504][T11839] 8021q: VLANs not supported on pimreg [ 274.882068][T11845] __nla_validate_parse: 4 callbacks suppressed [ 274.882087][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'. [ 274.952074][T11845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.996511][T11852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1630'. [ 275.039503][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 275.120278][T11858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1632'. [ 275.280853][T11871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1637'. [ 275.302591][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'. [ 275.337962][T11867] block nbd3: not configured, cannot reconfigure [ 275.483264][T11891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1638'. [ 275.495128][T11891] netlink: 'syz.1.1638': attribute type 1 has an invalid length. [ 275.577277][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1643'. [ 275.617927][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'. [ 275.715783][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 277.102989][T11976] netlink: 'syz.1.1660': attribute type 1 has an invalid length. [ 277.116374][T11974] netlink: 'syz.2.1661': attribute type 1 has an invalid length. [ 277.124375][T11974] netlink: 'syz.2.1661': attribute type 3 has an invalid length. [ 277.137873][T11974] netlink: 'syz.2.1661': attribute type 1 has an invalid length. [ 277.208270][T11982] blkio.reset_stats is deprecated [ 277.259575][T11984] netlink: 'syz.4.1664': attribute type 3 has an invalid length. [ 277.298360][T11986] netlink: 'syz.3.1665': attribute type 27 has an invalid length. [ 277.318835][T11986] gre0: left promiscuous mode [ 277.323788][T11986] gre0: left allmulticast mode [ 277.334126][T11986] ..0{X: left allmulticast mode [ 277.354386][T11986] ip6tnl1: left allmulticast mode [ 277.368057][T11986] ip6tnl2: left promiscuous mode [ 277.420527][T11986] ip6gre1: left promiscuous mode [ 277.425614][T11986] ip6gre1: left allmulticast mode [ 277.436037][T11986] bridge0: left promiscuous mode [ 277.441548][T11986] bridge0: left allmulticast mode [ 277.452993][T11986] ip6tnl4: left promiscuous mode [ 277.458710][T11986] ip6tnl4: left allmulticast mode [ 277.467643][T11986] bond7: left promiscuous mode [ 277.472584][T11986] bridge3: left promiscuous mode [ 277.481260][T11986] vlan2: left allmulticast mode [ 277.487393][T11986] bond7: left allmulticast mode [ 277.492346][T11986] bridge3: left allmulticast mode [ 277.499640][T11986] bond8: left promiscuous mode [ 277.579022][T11999] 8021q: adding VLAN 0 to HW filter on device .` [ 277.590409][T11999] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.601400][T11999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.641614][T12004] netlink: 'syz.4.1671': attribute type 5 has an invalid length. [ 277.973093][T12033] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 278.371459][T12059] bridge2: entered allmulticast mode [ 278.432380][T12064] netlink: 'syz.1.1690': attribute type 1 has an invalid length. [ 278.530534][T12067] wlan1 speed is unknown, defaulting to 1000 [ 278.538147][T12067] lo speed is unknown, defaulting to 1000 [ 278.737432][T12070] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 278.854283][T12067] lo speed is unknown, defaulting to 1000 [ 279.380062][T12090] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 279.643722][T12099] openvswitch: netlink: Message has 4 unknown bytes. [ 280.010746][T12122] tipc: Enabled bearer , priority 0 [ 280.052154][T12124] __nla_validate_parse: 14 callbacks suppressed [ 280.052173][T12124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1711'. [ 280.068455][T12124] netlink: 'syz.4.1711': attribute type 1 has an invalid length. [ 280.095458][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'. [ 280.151827][T12122] syzkaller0: entered promiscuous mode [ 280.157475][T12122] syzkaller0: entered allmulticast mode [ 280.163677][T12122] tipc: Resetting bearer [ 280.185524][T12121] tipc: Resetting bearer [ 281.519959][T12121] tipc: Disabling bearer [ 281.544402][T12181] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 281.561793][T12181] team0: Device macvlan2 is already an upper device of the team interface [ 281.585150][T12189] tunl0: Caught tx_queue_len zero misconfig [ 281.684478][T12193] netlink: zone id is out of range [ 281.700200][T12193] netlink: zone id is out of range [ 281.708375][T12193] netlink: zone id is out of range [ 281.714329][T12193] netlink: zone id is out of range [ 281.720247][T12193] netlink: zone id is out of range [ 281.725458][T12193] netlink: zone id is out of range [ 281.731212][T12193] netlink: zone id is out of range [ 281.828804][T12203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1731'. [ 281.848595][T12203] validate_nla: 1 callbacks suppressed [ 281.848612][T12203] netlink: 'syz.1.1731': attribute type 1 has an invalid length. [ 281.903248][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'. [ 282.000137][T12210] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 282.003000][T12221] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 282.016145][T12225] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 282.281886][T12253] netlink: 'syz.0.1740': attribute type 1 has an invalid length. [ 282.305790][T12255] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1742'. [ 282.387920][T12259] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 282.399125][T12259] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 282.433509][T12253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1740'. [ 282.473927][T12253] bond3: (slave bridge3): Enslaving as an active interface with a down link [ 282.484092][T12260] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1743'. [ 282.529143][T12253] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 282.562720][T12253] macvlan0: entered promiscuous mode [ 282.574713][T12253] macvlan0: entered allmulticast mode [ 282.581445][T12253] bond3: entered promiscuous mode [ 282.587342][T12253] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 282.598645][T12253] bond3: left promiscuous mode [ 282.711421][T12266] syzkaller0: entered promiscuous mode [ 282.720843][T12266] syzkaller0: entered allmulticast mode [ 282.749487][T12266] net_ratelimit: 10 callbacks suppressed [ 282.749506][T12266] 0: reclassify loop, rule prio 0, protocol 800 [ 282.847449][T12280] netlink: 'syz.2.1749': attribute type 10 has an invalid length. [ 282.855420][T12280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1749'. [ 282.872096][T12280] team0: entered promiscuous mode [ 282.880144][T12280] C: entered promiscuous mode [ 282.889426][T12280] team_slave_1: entered promiscuous mode [ 282.895377][T12280] team0: entered allmulticast mode [ 282.927107][T12280] C: entered allmulticast mode [ 282.931941][T12280] team_slave_1: entered allmulticast mode [ 282.939673][T12277] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1748'. [ 282.959874][T12280] bridge0: port 3(team0) entered blocking state [ 282.969356][T12280] bridge0: port 3(team0) entered disabled state [ 282.995909][T12283] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1748'. [ 283.410476][T12316] netlink: 'syz.4.1758': attribute type 1 has an invalid length. [ 283.424688][T12320] tipc: Can't bind to reserved service type 1 [ 284.458862][T12362] netlink: 'syz.1.1775': attribute type 11 has an invalid length. [ 284.466851][T12358] hsr_slave_1 (unregistering): left promiscuous mode [ 284.475338][T12362] netlink: 'syz.1.1775': attribute type 11 has an invalid length. [ 284.490846][T12362] netlink: 'syz.1.1775': attribute type 11 has an invalid length. [ 284.500118][T12362] netlink: 'syz.1.1775': attribute type 11 has an invalid length. [ 284.508933][T12362] netlink: 'syz.1.1775': attribute type 11 has an invalid length. [ 284.518298][T12362] netlink: 'syz.1.1775': attribute type 11 has an invalid length. [ 284.833208][T12388] netlink: 'syz.2.1780': attribute type 1 has an invalid length. [ 285.260879][T12415] __nla_validate_parse: 4 callbacks suppressed [ 285.260897][T12415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1793'. [ 285.302337][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1793'. [ 285.333102][T12417] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1793'. [ 285.663354][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'. [ 285.854151][T12443] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 285.922122][T12445] vlan3: entered promiscuous mode [ 285.994824][T12451] netlink: 'syz.3.1807': attribute type 2 has an invalid length. [ 286.267603][T12462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1810'. [ 286.277703][T12462] netlink: 'syz.2.1810': attribute type 1 has an invalid length. [ 286.486788][T12472] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1813'. [ 286.507019][T12472] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1813'. [ 286.527107][T12472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1813'. [ 286.648446][T12476] wg2: Caught tx_queue_len zero misconfig [ 287.060271][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1824'. [ 287.082500][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1824'. [ 287.093993][T12505] netlink: 'syz.4.1824': attribute type 18 has an invalid length. [ 287.150228][T12508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.180377][T12517] syzkaller1: entered allmulticast mode [ 287.269116][T12522] netlink: 'syz.4.1829': attribute type 7 has an invalid length. [ 287.296391][T12522] netlink: 'syz.4.1829': attribute type 8 has an invalid length. [ 287.304178][T12522] netlink: 'syz.4.1829': attribute type 8 has an invalid length. [ 287.375449][T12522] netlink: 'syz.4.1829': attribute type 4 has an invalid length. [ 287.375656][T12516] netlink: 'syz.4.1829': attribute type 3 has an invalid length. [ 287.404385][T12522] netlink: 'syz.4.1829': attribute type 7 has an invalid length. [ 287.591476][T12543] wlan1 speed is unknown, defaulting to 1000 [ 287.604556][T12543] lo speed is unknown, defaulting to 1000 [ 287.816962][T12561] netlink: 'syz.3.1838': attribute type 1 has an invalid length. [ 287.855348][T12543] lo speed is unknown, defaulting to 1000 [ 288.030640][T12566] ip6tnl0: Caught tx_queue_len zero misconfig [ 288.726942][T12593] syzkaller0: entered promiscuous mode [ 288.743231][T12593] syzkaller0: entered allmulticast mode [ 289.054423][T12616] lo: Caught tx_queue_len zero misconfig [ 289.385885][T12632] netlink: 'syz.2.1860': attribute type 1 has an invalid length. [ 289.532192][T12637] wg1: entered allmulticast mode [ 289.542242][T12635] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 290.002757][T12661] wlan1 speed is unknown, defaulting to 1000 [ 290.042651][T12661] lo speed is unknown, defaulting to 1000 [ 290.049968][T12662] wlan1 speed is unknown, defaulting to 1000 [ 290.254385][T12669] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 290.835376][T12687] __nla_validate_parse: 12 callbacks suppressed [ 290.835395][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'. [ 290.985533][T12693] syzkaller0: entered promiscuous mode [ 290.991236][T12693] syzkaller0: entered allmulticast mode [ 291.025470][T12661] lo speed is unknown, defaulting to 1000 [ 291.048028][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1874'. [ 291.065773][T12662] lo speed is unknown, defaulting to 1000 [ 291.271462][T12701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1877'. [ 291.336521][T12701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1877'. [ 291.422252][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 291.550432][T12662] lo speed is unknown, defaulting to 1000 [ 291.757713][T12721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1882'. [ 291.968181][T12733] ip6tnl0: Caught tx_queue_len zero misconfig [ 291.990182][T12733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1885'. [ 292.399789][T12749] 8021q: VLANs not supported on gre0 [ 292.405415][T12747] 8021q: VLANs not supported on gre0 [ 292.416701][T12746] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1889'. [ 292.583178][T12755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1891'. [ 292.654219][T12762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.678327][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1892'. [ 292.699954][T12755] tipc: Enabled bearer , priority 0 [ 292.766254][T12755] syzkaller0: entered promiscuous mode [ 292.772024][T12755] syzkaller0: entered allmulticast mode [ 292.787131][T12755] tipc: Resetting bearer [ 292.861569][T12751] tipc: Resetting bearer [ 294.076202][T12751] tipc: Disabling bearer [ 294.109882][ T5924] tipc: Node number set to 272264168 [ 294.115560][T12785] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 294.328197][T12797] validate_nla: 4 callbacks suppressed [ 294.328215][T12797] netlink: 'syz.4.1903': attribute type 1 has an invalid length. [ 294.430032][T12791] delete_channel: no stack [ 294.961843][T12826] bridge0: entered allmulticast mode [ 294.980510][T12826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.199460][T12840] netlink: 'syz.4.1918': attribute type 2 has an invalid length. [ 295.364381][T12843] IPVS: nq: FWM 3 0x00000003 - no destination available [ 295.446381][T12843] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 295.613460][T12857] wlan1 speed is unknown, defaulting to 1000 [ 295.621997][T12857] lo speed is unknown, defaulting to 1000 [ 295.808068][T12872] netlink: 'syz.2.1926': attribute type 4 has an invalid length. [ 295.929389][T12876] netlink: 'syz.4.1927': attribute type 29 has an invalid length. [ 295.947230][T12857] lo speed is unknown, defaulting to 1000 [ 295.978028][T12879] __nla_validate_parse: 9 callbacks suppressed [ 295.978044][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1928'. [ 295.993941][T12879] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 295.997306][T12880] netlink: 'syz.4.1927': attribute type 29 has an invalid length. [ 296.056559][T12868] nbd1: detected capacity change from 0 to 63 [ 296.073782][ T5837] block nbd1: Receive control failed (result -104) [ 296.073819][ T5839] block nbd1: Receive control failed (result -32) [ 296.088609][ T5830] block nbd1: Receive control failed (result -32) [ 296.363033][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1930'. [ 296.400397][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1931'. [ 296.524673][T12899] siw: device registration error -23 [ 296.530723][T12900] team0 (unregistering): Port device team_slave_0 removed [ 296.540091][T12900] team0 (unregistering): Port device team_slave_1 removed [ 296.579241][T12904] syzkaller0: entered promiscuous mode [ 296.584761][T12904] syzkaller0: entered allmulticast mode [ 296.709619][T12911] bond5: entered allmulticast mode [ 296.715260][T12911] 8021q: adding VLAN 0 to HW filter on device bond5 [ 296.723111][T12904] wlan1 speed is unknown, defaulting to 1000 [ 296.740239][T12904] lo speed is unknown, defaulting to 1000 [ 296.896404][T12924] netlink: 'syz.3.1942': attribute type 9 has an invalid length. [ 296.914848][T12924] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1942'. [ 296.957765][T12924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1942'. [ 297.091292][T12941] netlink: 'syz.3.1942': attribute type 11 has an invalid length. [ 297.109253][T12928] syzkaller1: entered promiscuous mode [ 297.115487][T12928] syzkaller1: entered allmulticast mode [ 297.122486][T12904] lo speed is unknown, defaulting to 1000 [ 297.381147][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1945'. [ 297.668689][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1951'. [ 297.686398][T12968] netlink: 'syz.2.1951': attribute type 1 has an invalid length. [ 297.937254][T12977] tunl0: Caught tx_queue_len zero misconfig [ 298.074334][T12981] wlan1 speed is unknown, defaulting to 1000 [ 298.082496][T12981] lo speed is unknown, defaulting to 1000 [ 298.224941][T12990] netlink: 'syz.3.1961': attribute type 83 has an invalid length. [ 298.379573][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1960'. [ 298.403784][T12981] lo speed is unknown, defaulting to 1000 [ 298.414181][T13002] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1963'. [ 298.496062][T13005] netlink: 'syz.4.1965': attribute type 4 has an invalid length. [ 298.622186][T13012] xt_l2tp: v2 sid > 0xffff: 4294967295 [ 298.971317][T13022] wlan1 speed is unknown, defaulting to 1000 [ 299.009019][T13022] lo speed is unknown, defaulting to 1000 [ 299.264798][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1972'. [ 299.311731][T13033] openvswitch: netlink: Flow actions attr not present in new flow. [ 299.431302][T13040] validate_nla: 1 callbacks suppressed [ 299.431322][T13040] netlink: 'syz.1.1974': attribute type 1 has an invalid length. [ 299.745758][T13063] netlink: 'syz.0.1979': attribute type 1 has an invalid length. [ 299.752220][T13059] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 299.769569][T13059] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 299.779916][T13059] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 299.791924][T13059] [ 299.794273][T13059] ====================================================== [ 299.801300][T13059] WARNING: possible circular locking dependency detected [ 299.803048][T13063] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.808345][T13059] syzkaller #0 Not tainted [ 299.808357][T13059] ------------------------------------------------------ [ 299.808366][T13059] syz.3.1978/13059 is trying to acquire lock: [ 299.808377][T13059] ffffffff8e882e40 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 299.816817][T13022] lo speed is unknown, defaulting to 1000 [ 299.819390][T13059] [ 299.819390][T13059] but task is already holding lock: [ 299.819399][T13059] ffffffff8f17a408 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 299.863652][T13059] [ 299.863652][T13059] which lock already depends on the new lock. [ 299.863652][T13059] [ 299.874046][T13059] [ 299.874046][T13059] the existing dependency chain (in reverse order) is: [ 299.883096][T13059] [ 299.883096][T13059] -> #8 (gdp_mutex){+.+.}-{4:4}: [ 299.890329][T13059] __mutex_lock+0x19f/0x1300 [ 299.895455][T13059] get_device_parent+0x16f/0x3a0 [ 299.900918][T13059] device_add+0x2e1/0xb70 [ 299.905782][T13059] device_create+0x269/0x300 [ 299.910895][T13059] msr_device_create+0x33/0x50 [ 299.916190][T13059] cpuhp_invoke_callback+0x445/0x860 [ 299.922015][T13059] cpuhp_thread_fun+0x36b/0x780 [ 299.927396][T13059] smpboot_thread_fn+0x541/0xa50 [ 299.932872][T13059] kthread+0x388/0x470 [ 299.937457][T13059] ret_from_fork+0x51e/0xb90 [ 299.942572][T13059] ret_from_fork_asm+0x1a/0x30 [ 299.947863][T13059] [ 299.947863][T13059] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 299.955421][T13059] cpuhp_thread_fun+0x127/0x780 [ 299.960807][T13059] smpboot_thread_fn+0x541/0xa50 [ 299.966284][T13059] kthread+0x388/0x470 [ 299.970882][T13059] ret_from_fork+0x51e/0xb90 [ 299.975993][T13059] ret_from_fork_asm+0x1a/0x30 [ 299.981283][T13059] [ 299.981283][T13059] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 299.989016][T13059] cpus_read_lock+0x42/0x160 [ 299.994124][T13059] static_key_slow_inc+0x12/0x30 [ 299.999598][T13059] nbd_genl_reconfigure+0x132f/0x1ea0 [ 300.005512][T13059] genl_family_rcv_msg_doit+0x22a/0x330 [ 300.011579][T13059] genl_rcv_msg+0x61c/0x7a0 [ 300.016608][T13059] netlink_rcv_skb+0x232/0x4b0 [ 300.021991][T13059] genl_rcv+0x28/0x40 [ 300.026492][T13059] netlink_unicast+0x80f/0x9b0 [ 300.031820][T13059] netlink_sendmsg+0x813/0xb40 [ 300.037110][T13059] ____sys_sendmsg+0x972/0x9f0 [ 300.042397][T13059] ___sys_sendmsg+0x2a5/0x360 [ 300.047592][T13059] __x64_sys_sendmsg+0x1bd/0x2a0 [ 300.053051][T13059] do_syscall_64+0x14d/0xf80 [ 300.058165][T13059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.064580][T13059] [ 300.064580][T13059] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 300.072240][T13059] __mutex_lock+0x19f/0x1300 [ 300.077364][T13059] nbd_queue_rq+0x37b/0x1100 [ 300.082511][T13059] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 300.088584][T13059] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 300.095437][T13059] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 300.101937][T13059] blk_mq_run_hw_queue+0x348/0x4f0 [ 300.107603][T13059] blk_mq_dispatch_list+0xd16/0xe10 [ 300.113322][T13059] blk_mq_flush_plug_list+0x48d/0x570 [ 300.119210][T13059] __blk_flush_plug+0x3ed/0x4d0 [ 300.124582][T13059] __submit_bio+0x28d/0x580 [ 300.129604][T13059] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 300.135783][T13059] block_read_full_folio+0x599/0x830 [ 300.141593][T13059] filemap_read_folio+0x137/0x3b0 [ 300.147141][T13059] do_read_cache_folio+0x358/0x590 [ 300.152793][T13059] read_part_sector+0xb6/0x2b0 [ 300.158083][T13059] adfspart_check_ICS+0xa5/0xa40 [ 300.163542][T13059] bdev_disk_changed+0x7ba/0x1550 [ 300.169106][T13059] blkdev_get_whole+0x380/0x510 [ 300.174478][T13059] bdev_open+0x31e/0xd30 [ 300.179275][T13059] blkdev_open+0x470/0x610 [ 300.184217][T13059] do_dentry_open+0x785/0x14e0 [ 300.189520][T13059] vfs_open+0x3b/0x340 [ 300.194112][T13059] path_openat+0x2e08/0x3860 [ 300.199313][T13059] do_file_open+0x23e/0x4a0 [ 300.204349][T13059] do_sys_openat2+0x113/0x200 [ 300.209556][T13059] __x64_sys_openat+0x138/0x170 [ 300.214944][T13059] do_syscall_64+0x14d/0xf80 [ 300.220065][T13059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.226482][T13059] [ 300.226482][T13059] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 300.233699][T13059] __mutex_lock+0x19f/0x1300 [ 300.238818][T13059] nbd_queue_rq+0xc6/0x1100 [ 300.243941][T13059] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 300.250005][T13059] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 300.256860][T13059] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 300.263367][T13059] blk_mq_run_hw_queue+0x348/0x4f0 [ 300.269010][T13059] blk_mq_dispatch_list+0xd16/0xe10 [ 300.274729][T13059] blk_mq_flush_plug_list+0x48d/0x570 [ 300.280623][T13059] __blk_flush_plug+0x3ed/0x4d0 [ 300.285998][T13059] __submit_bio+0x28d/0x580 [ 300.291028][T13059] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 300.297185][T13059] block_read_full_folio+0x599/0x830 [ 300.303010][T13059] filemap_read_folio+0x137/0x3b0 [ 300.308560][T13059] do_read_cache_folio+0x358/0x590 [ 300.314197][T13059] read_part_sector+0xb6/0x2b0 [ 300.319477][T13059] adfspart_check_ICS+0xa5/0xa40 [ 300.324940][T13059] bdev_disk_changed+0x7ba/0x1550 [ 300.330478][T13059] blkdev_get_whole+0x380/0x510 [ 300.335848][T13059] bdev_open+0x31e/0xd30 [ 300.340609][T13059] blkdev_open+0x470/0x610 [ 300.345549][T13059] do_dentry_open+0x785/0x14e0 [ 300.350838][T13059] vfs_open+0x3b/0x340 [ 300.355451][T13059] path_openat+0x2e08/0x3860 [ 300.360566][T13059] do_file_open+0x23e/0x4a0 [ 300.365603][T13059] do_sys_openat2+0x113/0x200 [ 300.370805][T13059] __x64_sys_openat+0x138/0x170 [ 300.376183][T13059] do_syscall_64+0x14d/0xf80 [ 300.381307][T13059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.387725][T13059] [ 300.387725][T13059] -> #3 (set->srcu){.+.+}-{0:0}: [ 300.394848][T13059] __synchronize_srcu+0xca/0x3e0 [ 300.400312][T13059] elevator_switch+0x1e8/0x7a0 [ 300.405605][T13059] elevator_change+0x2cc/0x450 [ 300.410901][T13059] elevator_set_default+0x36c/0x430 [ 300.416639][T13059] blk_register_queue+0x366/0x430 [ 300.422221][T13059] __add_disk+0x677/0xd50 [ 300.427083][T13059] add_disk_fwnode+0xfb/0x480 [ 300.432292][T13059] nbd_dev_add+0x72c/0xb50 [ 300.437237][T13059] nbd_init+0x168/0x1f0 [ 300.441939][T13059] do_one_initcall+0x250/0x8d0 [ 300.447241][T13059] do_initcall_level+0x104/0x190 [ 300.452708][T13059] do_initcalls+0x59/0xa0 [ 300.457566][T13059] kernel_init_freeable+0x2a6/0x3e0 [ 300.463295][T13059] kernel_init+0x1d/0x1d0 [ 300.468152][T13059] ret_from_fork+0x51e/0xb90 [ 300.473268][T13059] ret_from_fork_asm+0x1a/0x30 [ 300.478561][T13059] [ 300.478561][T13059] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 300.486384][T13059] __mutex_lock+0x19f/0x1300 [ 300.491514][T13059] elevator_change+0x1b3/0x450 [ 300.496800][T13059] elevator_set_none+0xb5/0x140 [ 300.502177][T13059] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 300.508512][T13059] nbd_start_device+0x17f/0xb10 [ 300.513897][T13059] nbd_genl_connect+0x165b/0x1cf0 [ 300.519452][T13059] genl_family_rcv_msg_doit+0x22a/0x330 [ 300.525534][T13059] genl_rcv_msg+0x61c/0x7a0 [ 300.530566][T13059] netlink_rcv_skb+0x232/0x4b0 [ 300.535883][T13059] genl_rcv+0x28/0x40 [ 300.540390][T13059] netlink_unicast+0x80f/0x9b0 [ 300.545685][T13059] netlink_sendmsg+0x813/0xb40 [ 300.551083][T13059] ____sys_sendmsg+0x972/0x9f0 [ 300.556371][T13059] ___sys_sendmsg+0x2a5/0x360 [ 300.561577][T13059] __x64_sys_sendmsg+0x1bd/0x2a0 [ 300.567043][T13059] do_syscall_64+0x14d/0xf80 [ 300.572170][T13059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.578584][T13059] [ 300.578584][T13059] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 300.587196][T13059] blk_alloc_queue+0x546/0x680 [ 300.592530][T13059] __blk_mq_alloc_disk+0x197/0x390 [ 300.598165][T13059] nbd_dev_add+0x499/0xb50 [ 300.603111][T13059] nbd_init+0x168/0x1f0 [ 300.607793][T13059] do_one_initcall+0x250/0x8d0 [ 300.613088][T13059] do_initcall_level+0x104/0x190 [ 300.618551][T13059] do_initcalls+0x59/0xa0 [ 300.623401][T13059] kernel_init_freeable+0x2a6/0x3e0 [ 300.629118][T13059] kernel_init+0x1d/0x1d0 [ 300.633982][T13059] ret_from_fork+0x51e/0xb90 [ 300.639096][T13059] ret_from_fork_asm+0x1a/0x30 [ 300.644400][T13059] [ 300.644400][T13059] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 300.651613][T13059] __lock_acquire+0x15a5/0x2cf0 [ 300.656995][T13059] lock_acquire+0xf0/0x2e0 [ 300.661946][T13059] fs_reclaim_acquire+0x71/0x100 [ 300.667402][T13059] __kmalloc_cache_noprof+0x40/0x660 [ 300.673205][T13059] get_device_parent+0x255/0x3a0 [ 300.678663][T13059] device_add+0x2e1/0xb70 [ 300.683530][T13059] firmware_fallback_sysfs+0x2e4/0xa30 [ 300.689521][T13059] _request_firmware+0x1052/0x1780 [ 300.695161][T13059] request_firmware+0x36/0x50 [ 300.700370][T13059] valid_regdb+0x117/0x5f0 [ 300.705322][T13059] reg_reload_regdb+0xee/0x490 [ 300.710605][T13059] genl_family_rcv_msg_doit+0x22a/0x330 [ 300.716767][T13059] genl_rcv_msg+0x61c/0x7a0 [ 300.721801][T13059] netlink_rcv_skb+0x232/0x4b0 [ 300.727099][T13059] genl_rcv+0x28/0x40 [ 300.731603][T13059] netlink_unicast+0x80f/0x9b0 [ 300.736895][T13059] netlink_sendmsg+0x813/0xb40 [ 300.742209][T13059] ____sys_sendmsg+0x972/0x9f0 [ 300.747504][T13059] ___sys_sendmsg+0x2a5/0x360 [ 300.752714][T13059] __x64_sys_sendmsg+0x1bd/0x2a0 [ 300.758170][T13059] do_syscall_64+0x14d/0xf80 [ 300.763301][T13059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.769800][T13059] [ 300.769800][T13059] other info that might help us debug this: [ 300.769800][T13059] [ 300.780023][T13059] Chain exists of: [ 300.780023][T13059] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 300.780023][T13059] [ 300.792017][T13059] Possible unsafe locking scenario: [ 300.792017][T13059] [ 300.799480][T13059] CPU0 CPU1 [ 300.804849][T13059] ---- ---- [ 300.810213][T13059] lock(gdp_mutex); [ 300.814137][T13059] lock(cpuhp_state-up); [ 300.820998][T13059] lock(gdp_mutex); [ 300.827417][T13059] lock(fs_reclaim); [ 300.831405][T13059] [ 300.831405][T13059] *** DEADLOCK *** [ 300.831405][T13059] [ 300.839548][T13059] 3 locks held by syz.3.1978/13059: [ 300.844747][T13059] #0: ffffffff8fc35450 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 300.852934][T13059] #1: ffffffff8e5fb8b0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 300.863297][T13059] #2: ffffffff8f17a408 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 300.872608][T13059] [ 300.872608][T13059] stack backtrace: [ 300.878497][T13059] CPU: 0 UID: 0 PID: 13059 Comm: syz.3.1978 Not tainted syzkaller #0 PREEMPT(full) [ 300.878515][T13059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.878524][T13059] Call Trace: [ 300.878531][T13059] [ 300.878538][T13059] dump_stack_lvl+0xe8/0x150 [ 300.878559][T13059] print_circular_bug+0x2e1/0x300 [ 300.878584][T13059] check_noncircular+0x12e/0x150 [ 300.878609][T13059] __lock_acquire+0x15a5/0x2cf0 [ 300.878630][T13059] ? lockdep_unlock+0x5d/0xd0 [ 300.878646][T13059] ? __lock_acquire+0x146e/0x2cf0 [ 300.878668][T13059] lock_acquire+0xf0/0x2e0 [ 300.878685][T13059] ? __kmalloc_cache_noprof+0x40/0x660 [ 300.878706][T13059] fs_reclaim_acquire+0x71/0x100 [ 300.878722][T13059] ? __kmalloc_cache_noprof+0x40/0x660 [ 300.878738][T13059] __kmalloc_cache_noprof+0x40/0x660 [ 300.878754][T13059] ? get_device_parent+0x255/0x3a0 [ 300.878768][T13059] ? do_raw_spin_unlock+0xf5/0x210 [ 300.878784][T13059] get_device_parent+0x255/0x3a0 [ 300.878800][T13059] device_add+0x2e1/0xb70 [ 300.878815][T13059] firmware_fallback_sysfs+0x2e4/0xa30 [ 300.878839][T13059] ? kfree+0x1c1/0x630 [ 300.878854][T13059] _request_firmware+0x1052/0x1780 [ 300.878881][T13059] ? __pfx__request_firmware+0x10/0x10 [ 300.878900][T13059] ? _request_firmware+0x10ab/0x1780 [ 300.878924][T13059] request_firmware+0x36/0x50 [ 300.878943][T13059] valid_regdb+0x117/0x5f0 [ 300.878958][T13059] ? __pfx__request_firmware+0x10/0x10 [ 300.878977][T13059] ? netdev_run_todo+0xd5c/0xde0 [ 300.878994][T13059] ? __pfx_valid_regdb+0x10/0x10 [ 300.879009][T13059] ? __pfx_netdev_run_todo+0x10/0x10 [ 300.879027][T13059] reg_reload_regdb+0xee/0x490 [ 300.879041][T13059] ? __nla_parse+0x40/0x60 [ 300.879062][T13059] ? __pfx_reg_reload_regdb+0x10/0x10 [ 300.879077][T13059] ? nl80211_pre_doit+0x4f1/0x930 [ 300.879101][T13059] genl_family_rcv_msg_doit+0x22a/0x330 [ 300.879120][T13059] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 300.879140][T13059] ? bpf_lsm_capable+0x9/0x20 [ 300.879161][T13059] ? security_capable+0x7e/0x2c0 [ 300.879181][T13059] genl_rcv_msg+0x61c/0x7a0 [ 300.879198][T13059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.879212][T13059] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 300.879233][T13059] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 300.879253][T13059] ? __pfx_nl80211_post_doit+0x10/0x10 [ 300.879275][T13059] ? __lock_acquire+0x6b5/0x2cf0 [ 300.879297][T13059] netlink_rcv_skb+0x232/0x4b0 [ 300.879317][T13059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.879332][T13059] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.879358][T13059] ? down_read+0x272/0x2e0 [ 300.879371][T13059] ? genl_rcv+0xd/0x40 [ 300.879385][T13059] genl_rcv+0x28/0x40 [ 300.879398][T13059] netlink_unicast+0x80f/0x9b0 [ 300.879419][T13059] ? __pfx_netlink_unicast+0x10/0x10 [ 300.879438][T13059] ? netlink_sendmsg+0x650/0xb40 [ 300.879457][T13059] ? skb_put+0x11b/0x210 [ 300.879480][T13059] netlink_sendmsg+0x813/0xb40 [ 300.879504][T13059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.879525][T13059] ? aa_sock_msg_perm+0xf1/0x1b0 [ 300.879544][T13059] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.879561][T13059] ____sys_sendmsg+0x972/0x9f0 [ 300.879575][T13059] ? futex_unqueue+0x211/0x240 [ 300.879595][T13059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.879612][T13059] ? import_iovec+0x73/0xa0 [ 300.879635][T13059] ___sys_sendmsg+0x2a5/0x360 [ 300.879651][T13059] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.879668][T13059] ? futex_wait+0x29a/0x380 [ 300.879698][T13059] ? __fget_files+0x2a/0x420 [ 300.879720][T13059] ? __fget_files+0x3a0/0x420 [ 300.879746][T13059] __x64_sys_sendmsg+0x1bd/0x2a0 [ 300.879761][T13059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.879779][T13059] ? rcu_is_watching+0x15/0xb0 [ 300.879803][T13059] do_syscall_64+0x14d/0xf80 [ 300.879826][T13059] ? trace_irq_disable+0x3b/0x150 [ 300.879848][T13059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.879862][T13059] ? clear_bhb_loop+0x40/0x90 [ 300.879878][T13059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.879893][T13059] RIP: 0033:0x7f27eb99c799 [ 300.879907][T13059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.879920][T13059] RSP: 002b:00007f27ec7e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.879936][T13059] RAX: ffffffffffffffda RBX: 00007f27ebc15fa0 RCX: 00007f27eb99c799 [ 300.879946][T13059] RDX: 0000000020008004 RSI: 00002000000006c0 RDI: 0000000000000004 [ 300.879956][T13059] RBP: 00007f27eba32c99 R08: 0000000000000000 R09: 0000000000000000 [ 300.879965][T13059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.879974][T13059] R13: 00007f27ebc16038 R14: 00007f27ebc15fa0 R15: 00007ffc444c1748 [ 300.879991][T13059] [ 301.399326][T13068] bond4: (slave veth7): Enslaving as an active interface with a down link [ 301.422264][T13063] bond4: (slave veth9): Enslaving as an active interface with a down link [ 301.437030][T13070] bond4: entered allmulticast mode