last executing test programs: 2.125716256s ago: executing program 2 (id=3992): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000bc0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000900142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace801796ec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r3}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r9, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="33a661e13595144f3dbba2c64f39b95073e693bb30079c228855b6287fc98110a60c48042bc7926c00d662f185bb58bbca81a64fd9d6184f1ea8d2ee0e7440fa767a028e218a4f0baa256db5f9dcf97b7b98096f3ffa359f1e79efd433b258606482780c", 0x64}, {&(0x7f0000000140)="76074a9c9fddd59afbde7a1ad9d72749c1ecd90d0de7f65cd0d434693d96598e6b4eaba69c566dd85eb9cd4831aafd105a5c1cb946c33f59c59a86162ed81385aae98d5e187168e918acb3a11da4c4e73b7de4f4ef78d0c6a47d242362a29a340238e940844af236c49e4b5a51d12c4d8c66eb92e87ae2b12c16a33d21a41c9cbce665d5c8ed9dbd69cf99b2eb2a1d9739626af935fbc9fb6796fbc2435cb9a3e2abdffd3b0828ae9c798c31337abb7c3d9e5a482ea155c34e6982cb3559343a56c95fab5e3f80d8a0cd48bda0039a5cca24d6de6855", 0xd6}], 0x2, &(0x7f0000000280)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @dstopts={{0x50, 0x29, 0x37, {0x5e, 0x6, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0xf, 0x3ff, [0x40, 0x100000001, 0x48668256, 0x4, 0x2]}}]}}}, @hoplimit_2292={{0x14}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x5c, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x48, {0x2, 0x10, 0x9, 0x8, [0x800, 0x10001, 0x1, 0x1, 0xbe6, 0x100000000, 0x4, 0xce]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}]}}}], 0xf0}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf69}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000003c0)="4a9437c29c84cd9ac33e34fcc0c34de6f6874a58e90a401881ade9e2cdd0b61077df822af8a31d4962aa32129aa0bfea59d5014b2814f78982ef52cdb129ed98a6320da53264f2b8d33203", 0x4b}, {&(0x7f0000000440)="edb0855fd3c6ea91a022cc31bbf7b0dc1294576a0e9da544597ff4970955696b1ec052a9c7bd203e9bb52fa661044c765c238e6ff23287aeab7a4cd8dd30a3bf999f0e0919", 0x45}, {&(0x7f00000004c0)="39172e8173d5ebb3d2ef4696e126ea26eefb7c27b02d53c33d726f0c38fb6635935e79d526b9e2f02b33917ecdbeb75a87785e8dab469dfb1db8ae61290f31e911aa8c31d9cdd303dc84100c0e5f8b4d9c37574d248190a05daaace058b730de787085eb39928fc0a150d26196b1907cf9f8a2d684f5d4d77b765fd03f2050fa9c3e03ad57e0b062e1f2abddc2c73dddfab9e848526607f13258aaabe2ba143927683c986ed05df4f29016a6", 0xac}, {&(0x7f0000000580)="bbfd726c341b6971ee4b91b542eff30a072de056909cd33fa03117cd1d983531e3c69becc89852f273206e4efb4db97da38062a7a234", 0x36}, {&(0x7f00000005c0)="9f987bcee76518686d3c0af2f5cb8618acb558c8c6bc91320ceafa2578ab79605f9c3a6bd43df442158e32007014b306314cae7d9e8452e7e6bc9f9de9ba6add80d2eaef71d5d0cc2b806f0a3b0a5bd577fe033bafc540b1dddd45e92422db12429465cced7357c35d3a61979be750e9735916184e625f775582ec0e26e630e1851ad6fd212195957b551bc336204d8256ea7e729f0164d6282f", 0x9a}], 0x5, &(0x7f0000000880)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r6}}}, @dstopts={{0xd8, 0x29, 0x37, {0x3d, 0x17, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x7, 0x100, [0x10001, 0xc]}}, @generic={0xc9, 0x5a, "2b9306fe57d1434fbd3863dc0ab303d189ffb9738d7f71e5f0c294cb00fe88173690fec9a69eb09ba709bcb2f6cc701b14d30b0dc93fe457c45989d3b887a6a415669075fab37f788922709de304753ed80c16bb7ccb973f7271"}, @jumbo={0xc2, 0x4, 0xfff}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x3, 0x21, "d3fbe17730e388c2b04509d782dffe3d0bd61efd6a2d0dce33702a31835f32f3d2"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffff80}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r9}}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x89, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @generic={0x2, 0x24, "802b10465c6836dce70606ea13194cf4cadd4cb63684c37061c20278f6ccfa258512b182"}, @enc_lim={0x4, 0x1, 0x5}]}}}], 0x1a0}}], 0x2, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.003206267s ago: executing program 1 (id=3996): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 1.715387907s ago: executing program 2 (id=3999): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x468c0, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000080)) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}]}}]}, 0x45c}}, 0x0) 1.593073748s ago: executing program 1 (id=4001): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r9, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r8, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x8d, 0x6, 0xd07f, 0xfff, 0x7, 0x10000, 0x5, 0x8, 0x8, 0x7fffffff, 0x5, 0x0, 0x10001, 0xb85, 0xd, 0x6, 0xbac07f81, 0x9, 0x0, 0x4, 0x200, 0xffffffff, 0xffffffff, 0x7, 0x648, 0x80000001, 0x9, 0x81, 0x8000, 0x10000, 0x9, 0x9, 0x1, 0x3, 0x5, 0x6, 0x10000, 0x5, 0x101, 0xb67d, 0x8e, 0x8, 0x6, 0xfffff801, 0x5, 0xfff, 0x6, 0x1, 0x400, 0x7, 0x10001, 0x80, 0x4, 0x2, 0x0, 0x9, 0x40, 0x4, 0x8878, 0x0, 0x8ce, 0x7b, 0x6, 0x100, 0x0, 0x1, 0x400, 0x2, 0x8, 0x2b, 0x7f, 0x5, 0xfc7, 0x0, 0x6, 0x7, 0x1, 0x0, 0x2, 0x3ff, 0x1, 0x8, 0x5, 0x2, 0x1, 0x1, 0x2, 0x2, 0x4, 0x7, 0x10000000, 0x2, 0xc, 0x8, 0x64e, 0x1, 0x4, 0x3, 0x4, 0x7f, 0x3ff, 0x1, 0x4, 0x1, 0x400, 0x9, 0xc4c, 0x8000, 0x12d170f1, 0x8, 0x7f, 0x2, 0x1, 0xa27a, 0x764, 0x0, 0xc, 0x2, 0x2, 0x7, 0x5, 0x1000, 0x0, 0x0, 0x3, 0xcc4a, 0x4, 0x40, 0x6, 0x9, 0xc, 0x3, 0x3, 0x5, 0x5, 0x6, 0xbf, 0xf, 0x312, 0x4, 0x6, 0x800, 0x9, 0x8f7, 0x7, 0xfffffffe, 0x1ff, 0xfff, 0x9, 0x1, 0x4, 0xf, 0x6b5, 0x0, 0x40, 0x7, 0xb, 0x7, 0xc4, 0x3, 0x5, 0x3, 0x6, 0x5, 0x100, 0x1d6, 0x3, 0x7f, 0x6d5, 0xb9de, 0x0, 0x7fffffff, 0x7, 0x8, 0x9, 0xc54, 0x8001, 0x4, 0x7fffffff, 0x8, 0x81, 0x1, 0x8, 0x6, 0x8, 0x5, 0xf3, 0x9, 0x81, 0x5, 0x10000, 0xfff, 0x64, 0x5, 0xf1f8, 0x0, 0xe, 0xfffff001, 0x8, 0x8001, 0x2b0000, 0x7f, 0x5, 0x6, 0xffffffff, 0xc7, 0x7ff00000, 0x9, 0x200, 0xb9c, 0x2, 0x4, 0x800, 0x7, 0x7f, 0x8, 0x20000, 0x7, 0xac6, 0x9, 0x9, 0xfffffce9, 0x1, 0x2, 0x80, 0x38, 0x16e1d229, 0x8, 0x9, 0x4, 0x6, 0x80000000, 0x4, 0x5, 0x3, 0xb3e1, 0x0, 0x100, 0x4, 0x7, 0x1, 0x8, 0x7fffffff, 0x2, 0x7fffffff, 0xe3, 0x7, 0x5, 0x9, 0x3, 0x2, 0x7ff, 0x8, 0x3, 0x30000000]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@ll={0x11, 0x17, r13, 0x1, 0x4}, 0x80, 0x0}}], 0x1, 0x40000) 1.536113587s ago: executing program 3 (id=4003): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) recvmsg$can_raw(r1, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40012020) r2 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="000000000000000009000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5, @ANYBLOB="715994099e05f80709f5cba6252a31c289602a370f56"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x48}}, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r9, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) sendmmsg$alg(r7, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786", 0x25}, {&(0x7f0000000240)="eeb9ff4efd6c", 0x6}, {&(0x7f00000001c0)='z3', 0x2}], 0x3, 0x0, 0x0, 0x4012}], 0x1, 0x0) recvmmsg$unix(r7, &(0x7f0000000840), 0x0, 0x2021, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 1.500246032s ago: executing program 2 (id=4004): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x0, 0x5b}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="d6874d316f548f11b206bc000038390505"], 0x12) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={r3}, &(0x7f0000000100)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x20040000) 1.38414933s ago: executing program 1 (id=4007): listen(0xffffffffffffffff, 0x80000001) r0 = socket(0x28, 0x5, 0x0) getsockopt(r0, 0x28, 0x8, 0x0, &(0x7f0000000040)=0x47) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x1003, r1}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f00000000c0)=""/74}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r4) syz_genetlink_get_family_id$nl802154(&(0x7f0000001780), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x0, 0xb, 0x0, &(0x7f0000000200)="ff7f0e3f2617d1f42ab5a1", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x10000, 0xea, 0x1, 0x0, 0x6, 0x19b, 0x0, 0xfffffffffffffff7}, {0x1, 0x8, 0x2, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in6=@remote, 0x0, 0x5, 0x0, 0xb7, 0x0, 0x8}}, 0xe8) sendto$inet(r6, 0x0, 0x0, 0x400c810, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={@empty, 0x1, 0x0, 0x20, 0x0, [{@private}, {@empty}]}}) close(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.275654775s ago: executing program 0 (id=4009): syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xe9}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xad63, 0x9, 0x1, 0x4}, {0x0, 0x2, 0x8002, 0x1, 0xe, 0x80000000}, 0x1, 0x7fffffff, 0x15a5}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200802, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x18d}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c060}, 0x2880) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0x9c, 0x6, @random="48802e59d488"}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x8, 0x80, 0x2, 0x6, {{0x16, 0x4, 0x1, 0xc, 0x58, 0x65, 0x0, 0x2, 0x4, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x8, 0xf, 0x0, 0x0, [0x0]}, @end, @end, @timestamp={0x44, 0x20, 0xaa, 0x0, 0x7, [0x401, 0x8, 0x8, 0x5, 0xbb, 0x7, 0xb00]}, @ssrr={0x89, 0x17, 0x22, [@local, @broadcast, @private=0xa010102, @multicast1, @rand_addr=0x64010101]}]}}}}}) syz_emit_ethernet(0x35, &(0x7f0000000040)={@remote, @remote, @void, {@mpls_mc={0x8848, {[{0xc, 0x0, 0x1}, {0xaf}, {0x5, 0x0, 0x1}, {0x4}, {0x281}, {0x81}, {0x7, 0x0, 0x1}, {0x5, 0x0, 0x1}], @llc={@llc={0xf8, 0xc659f5b265991a66, '}^', "0c20d4"}}}}}}, &(0x7f0000000080)={0x1, 0x2, [0x3c5, 0x6f9, 0x5d2, 0x284]}) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000240)='freezer.parent_freezing\x00', 0x0, 0x0) preadv(r12, &(0x7f0000000180)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="185900000c0000000000000000000000185b00000200000000000000000000000a52000007000000182a0000aa92f3b778375c9918612553976ef00bc78203ac7969d389b2684c02583723d5c7e1cca6782c5531cc06d29a862bcb2f7684e5ec01637912337912b65257fd8b94", @ANYRES32=r0, @ANYBLOB="00000000060000001843000002000000000000000000000071b7bbbe08000000185700000d0000000000000000000000185100000e00000000000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0xea1b, 0x0, 0x0, 0x40f00, 0x3, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r12], 0x0, 0x10, 0x201}, 0x94) 1.233540697s ago: executing program 1 (id=4010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003b00)=@delchain={0x3c, 0x65, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0x9}, {0x6, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_POLICE={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x400c004) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.045758096s ago: executing program 4 (id=4011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x20, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0) 1.041390513s ago: executing program 3 (id=4012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, r5}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x28}, r5}, 0x14) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900a60d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e4}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.017546105s ago: executing program 0 (id=4013): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x48}}, 0x24000044) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000900)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x24044884) sendmsg$nl_generic(r1, 0x0, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$ethtool(0x0, r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8011) unshare(0x20400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') sendmsg$NFT_BATCH(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 969.794376ms ago: executing program 4 (id=4014): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000d40)='<', 0xffdc, 0x24040005, 0x0, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000bc0)='syzkaller\x00'}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}}, 0x0) pselect6(0x40, &(0x7f0000000040)={0x3, 0x2, 0x3b74, 0x8, 0x200, 0x1000001000, 0x401, 0x1}, &(0x7f0000000080)={0x6, 0x2, 0x3, 0x5, 0x800, 0x2, 0x7, 0x4}, &(0x7f0000000140)={0x10, 0x2, 0x3, 0x800, 0x7, 0x7, 0xd, 0x6}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x7]}, 0x8}) 918.934671ms ago: executing program 0 (id=4015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0x10000, 0x5, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007e, 0x8, 0x0, 0x7, 0x470, 0x7b, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0xffffffff, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x1, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x5, 0x5, 0x1, 0xdbec, {0x8, 0x2, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x1, 0xd, 0x5, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000c00)="4307ed2e", 0x4}], 0x1}, 0x4) 912.651619ms ago: executing program 4 (id=4016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x3}, [@NFACCT_PKTS={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0x2c}}, 0x4004000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001e21855e4f212b1d62ecdac376f311d4e8ab7d88e0c5e7c07d19dafbbbd46d5f676ca2062f0bb7fdf0d7c880dc6f03fb249ab7be1e7ba0748194f05a73f04b74feec5e342f6c1fb1ce204905db615ce71ffbf0679daa4561ffc5d51ee36132b264f9dd1cfdf10f45573057e00000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 815.431171ms ago: executing program 3 (id=4017): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r9, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r8, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x8d, 0x6, 0xd07f, 0xfff, 0x7, 0x10000, 0x5, 0x8, 0x8, 0x7fffffff, 0x5, 0x0, 0x10001, 0xb85, 0xd, 0x6, 0xbac07f81, 0x9, 0x0, 0x4, 0x200, 0xffffffff, 0xffffffff, 0x7, 0x648, 0x80000001, 0x9, 0x81, 0x8000, 0x10000, 0x9, 0x9, 0x1, 0x3, 0x5, 0x6, 0x10000, 0x5, 0x101, 0xb67d, 0x8e, 0x8, 0x6, 0xfffff801, 0x5, 0xfff, 0x6, 0x1, 0x400, 0x7, 0x10001, 0x80, 0x4, 0x2, 0x0, 0x9, 0x40, 0x4, 0x8878, 0x0, 0x8ce, 0x7b, 0x6, 0x100, 0x0, 0x1, 0x400, 0x2, 0x8, 0x2b, 0x7f, 0x5, 0xfc7, 0x0, 0x6, 0x7, 0x1, 0x0, 0x2, 0x3ff, 0x1, 0x8, 0x5, 0x2, 0x1, 0x1, 0x2, 0x2, 0x4, 0x7, 0x10000000, 0x2, 0xc, 0x8, 0x64e, 0x1, 0x4, 0x3, 0x4, 0x7f, 0x3ff, 0x1, 0x4, 0x1, 0x400, 0x9, 0xc4c, 0x8000, 0x12d170f1, 0x8, 0x7f, 0x2, 0x1, 0xa27a, 0x764, 0x0, 0xc, 0x2, 0x2, 0x7, 0x5, 0x1000, 0x0, 0x0, 0x3, 0xcc4a, 0x4, 0x40, 0x6, 0x9, 0xc, 0x3, 0x3, 0x5, 0x5, 0x6, 0xbf, 0xf, 0x312, 0x4, 0x6, 0x800, 0x9, 0x8f7, 0x7, 0xfffffffe, 0x1ff, 0xfff, 0x9, 0x1, 0x4, 0xf, 0x6b5, 0x0, 0x40, 0x7, 0xb, 0x7, 0xc4, 0x3, 0x5, 0x3, 0x6, 0x5, 0x100, 0x1d6, 0x3, 0x7f, 0x6d5, 0xb9de, 0x0, 0x7fffffff, 0x7, 0x8, 0x9, 0xc54, 0x8001, 0x4, 0x7fffffff, 0x8, 0x81, 0x1, 0x8, 0x6, 0x8, 0x5, 0xf3, 0x9, 0x81, 0x5, 0x10000, 0xfff, 0x64, 0x5, 0xf1f8, 0x0, 0xe, 0xfffff001, 0x8, 0x8001, 0x2b0000, 0x7f, 0x5, 0x6, 0xffffffff, 0xc7, 0x7ff00000, 0x9, 0x200, 0xb9c, 0x2, 0x4, 0x800, 0x7, 0x7f, 0x8, 0x20000, 0x7, 0xac6, 0x9, 0x9, 0xfffffce9, 0x1, 0x2, 0x80, 0x38, 0x16e1d229, 0x8, 0x9, 0x4, 0x6, 0x80000000, 0x4, 0x5, 0x3, 0xb3e1, 0x0, 0x100, 0x4, 0x7, 0x1, 0x8, 0x7fffffff, 0x2, 0x7fffffff, 0xe3, 0x7, 0x5, 0x9, 0x3, 0x2, 0x7ff, 0x8, 0x3, 0x30000000]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@ll={0x11, 0x17, r13, 0x1, 0x4}, 0x80, 0x0}}], 0x1, 0x40000) 815.266964ms ago: executing program 4 (id=4018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0xe1fd, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) 696.353844ms ago: executing program 0 (id=4019): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="450400000000000000000a00"], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000ffff25bd7000f7d9de2500000000", @ANYRES32=0x0, @ANYBLOB="13280000212c000008000500", @ANYRES32=r3, @ANYBLOB="08000a005f48e698271415e975ade746343554d8aa1aa9fc2868da65b92f94ff80a3e3e943b5e362f63a7be5043a6b48ca555494e2846a161728264f5d07fb5c30cf757d070300a9a46b54206f1e942979801a14312cbfdb7c7fe8000054ec600309ed", @ANYRES32=r3, @ANYBLOB="240012800c0001006d6163766c616e001400028008000100080000000600020001000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) socket(0x10, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="450400000000000000000a00"], 0x20}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000ffff25bd7000f7d9de2500000000", @ANYRES32=0x0, @ANYBLOB="13280000212c000008000500", @ANYRES32=r3, @ANYBLOB="08000a005f48e698271415e975ade746343554d8aa1aa9fc2868da65b92f94ff80a3e3e943b5e362f63a7be5043a6b48ca555494e2846a161728264f5d07fb5c30cf757d070300a9a46b54206f1e942979801a14312cbfdb7c7fe8000054ec600309ed", @ANYRES32=r3, @ANYBLOB="240012800c0001006d6163766c616e001400028008000100080000000600020001000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) (async) 642.817328ms ago: executing program 3 (id=4020): listen(0xffffffffffffffff, 0x80000001) r0 = socket(0x28, 0x5, 0x0) getsockopt(r0, 0x28, 0x8, 0x0, &(0x7f0000000040)=0x47) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x1003, r1}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000ac0), &(0x7f00000000c0)=""/74}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r4) syz_genetlink_get_family_id$nl802154(&(0x7f0000001780), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r5, 0x0, 0xb, 0x0, &(0x7f0000000200)="ff7f0e3f2617d1f42ab5a1", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x10000, 0xea, 0x1, 0x0, 0x6, 0x19b, 0x0, 0xfffffffffffffff7}, {0x1, 0x8, 0x2, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in6=@remote, 0x0, 0x5, 0x0, 0xb7, 0x0, 0x8}}, 0xe8) sendto$inet(r6, 0x0, 0x0, 0x400c810, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={@empty, 0x1, 0x0, 0x20, 0x0, [{@private}, {@empty}]}}) close(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 540.775174ms ago: executing program 4 (id=4021): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0xfffc, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0xc}, {0x0}, &(0x7f0000000180)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x44}}], 0x78, 0x20040040}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00020000000000000000490000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800730000000000080001007063690011000200303030303a30303a31302e30000000000800030002000000"], 0x60}}, 0x0) r4 = socket(0x23, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=0x0, @ANYBLOB="8a08e709", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x9, &(0x7f0000000240)=[{0x7, 0x0, 0xb, 0x9}, {0xfffb, 0x4, 0xff, 0xfff}, {0x1, 0xb, 0x4, 0x2}, {0x3, 0x9, 0x3, 0x4}, {0xe578, 0x9, 0xb4, 0x6}, {0x1, 0x9, 0x41, 0x10001}, {0x2, 0x8, 0x8}, {0x81, 0xd, 0x4, 0x3}, {0x1, 0x4, 0x9, 0x40000}]}, 0x10) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="3800000010001fff00000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="21080000007470000c00028008000200"/28, @ANYRES32=r7, @ANYBLOB], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000500)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002bc0)=@newtfilter={0x3674, 0x2c, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x4, 0x3}, {0xf, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x93}}, @filter_kind_options=@f_matchall={{0xd}, {0x35d8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0x35c4, 0x2, [@m_nat={0x1144, 0x3, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x5, 0x6, 0x5, 0x8}, @dev={0xac, 0x14, 0x14, 0x21}, @broadcast, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6fac, 0x1, 0x0, 0x4, 0x4}, @empty, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0xf2d4, 0x1, 0x0, 0x1}, @local, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x9, 0x6, 0x71, 0x5}, @empty, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x210000, 0x7, 0x1, 0x7, 0x1}, @broadcast, @private=0xa010100, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0xe, 0x1, 0xc39, 0xfffffff7}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x4, 0x0, 0x4, 0x8}, @multicast2, @remote, 0xff}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x140, 0x16, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xbac, 0xffffffff, 0x2, 0x5, 0x7f}}]}, {0xf3, 0x6, "6a5591d3e5797dfc3054a9c9449e39f2589b303eae9f47df8c466607017137ba2f826e160ad76c11eedca4def33f715e32158925c10c06a6a84c7c5474407e727ec7a53afa2eeac7d9834b4c9f6990da6ebc673e0a14be2b58ae8e1324f2fd54c30f89227f901b56995615522178351b85b01d1db4ef405f330fe286f69028b8bc676ddabf0dda070ce517c2e84eadcafc7ac26aa5d3210b1032cf3cd9bb8dff82131024fc2e62e68f0dc0a16d5797f3dd1228d007a2e29c780b766f88431864237b0ea7ccbe1f6fbd2c8831923ed4bcee44e4e22fb50d91f416439ab0188f9acc6c21dd48a71b7802c221648d3c25"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x124, 0x10, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xffc00000, 0x85e4, 0x8, 0x7, 0x3800000}}]}, {0xdd, 0x6, "19569306d6e3dcb1513cb87daaef14eb2b0bec6bb63aaaef269e00b6e7492b5c753256c26722b6141464d649e1bc5594d57dfdf7c41cea4d16990033878a27de1d9d0b4784569f0556b74ac8b233356ece375e135522dc967abfa072378571ea3d6c8eef7a801c39a68aa6538413a294f4e60aa83d4c2477312fbce8b332e288199ee64c9b9cdf3107b05c00ad63e31395d307bab64aa1983297d1d5fbe057cf00cd3db6bbff12e9ca05fd7ee115310f4327987ed852a9d89f259331cca8eca2d858c2b9d831463c7b91557cf1e2780612aced31da3209f11b"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x1040, 0xe, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x60}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x200}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x180, 0x13, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x5, 0x6, 0x2, 0x6}, @rand_addr=0x64010102, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x4, 0x3, 0x2, 0x8}, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010100, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x344aa488, 0x80000000, 0x10000000, 0x2, 0x2871}, @empty, @rand_addr=0x64010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x1, 0xffffffffffffffff, 0x77, 0x6}, @local, @multicast1, 0xffffffff}}]}, {0xb6, 0x6, "0d6b06839eb6bff3fb6038b311a93397b41005c6846a2384914e949f7fed8c7c53ea6fc29c8bb8a557a514a20ce75e41de3c48de61708efc2033929981df5ed52a4100398da8b2f181db2dc381ffca1d4ae5d68dc4ac42c05e30dad5395457b2a7b35a20cc316eb742e482113198232450775fe1b198de20cd88a3e8d97e1e19ef7b31f99c5707dbe899d7d52bbb99c89bc95ccf748f05349f72b02a00bd039e81c72ce801929a38165a4bdfcc2556c00507"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x1058, 0xe, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1e0, 0x2, 0x20000000, 0x9, 0xa1}}]}, {0x1004, 0x6, "8b785a3e079568625e025dde7d59c118fdb4c7c39238eadf16765d4db8438386d1bc06598ebda4370f357dbf80dda8fa14ca3fc91c01ce090f62bcc2b99ea7d4aa50e0d1907fc1732076487a67a79181b5c3c16a22cfaae877a33e6ec936e29308fa66a0bb8276f8326ee649acb4185799ff6fda2965990fc0b4adfd03f74e3c77cc086a38932152959c53f69cdadb5784ffc8ef0d39a2dda44a89d5e67df973bff1d7f8d3294f945be52b760cd1c73223cdaa72a3f4d1e6ecf5889434513aee5c17b8b90763bd68d71db92aa1fc199629dea6abaa3fa1d9b7060f6a9134096aeb29752bb7d550ecb7ec3d5aeabea1dc3abf1c527547530c21b8311b8f9caef561114e835032d73746514b1200b1b610bd0dbe63e5a98381c0b2b1777601593c9d7fcecc79d5b34baaa7638ba9d4529b831d9e22d6522e8ada3e6b08728e48af7db381febc186106bc210cf05a6daeac9b2fbb035622ce56129f64d4f7bb920144524e7a0f7974bf8b848b9cafa7722a71696bf49ddcb60991b44d451ed6f5189026a722cbab41c7d241b3781b4edc24ca3b794a2a97c3fb27cff0aaa9438e3677513136a7501e24eed5e3adf936f559557189b618a0b1f27d35634a8ffb4df82bc025b24e8b8ea8bc17b1215ccf1a96bdd0a6bdeda6d66e93d7dabcc923c4457e2b7141e3c09aedb8842c652b963cc04a7a9757b73834e870372204728bc7f7ea25c33656f3aa63121e9697d9e8fcfb984869fbc49962ef40d99831fa90a6936d9dd143b4118e467ef1347143d9484729b432ccd2843fa903b3df9fc22b1f3caa02f2282aa68bdcce5d0150fa6e3bbd6477b97bf484345ae0e7dd6026f9db3924f56dc299bf842c586f7de22eb8d38fb50c15e1b2fa588b36e8d143e0332d44e778c3f9b24213c53e0f73ce22c7d00ae3d0efc32399b4502a8f046c16c2238774ab0d0acaeb0ae472704958523ac543f939bb5306513995c82d43ace4dccafd54bb1145388f99e461647e0ffea853e6f89b9a4f17e89a4e5c6a15b418aa0c9163c63adf510ef86c0ae6ce7797a47a4844471a7f7a869e3e37425912e2250afbb222736a8106cc90cd9cae2fd63abdebc59598672b27d996599ab2cae813d659135101705f8102390cfa043a2e1326cf7214497c8355ea454d8d5cc5a54c4434709fdfe9a12370f795400ec95e630759fbc75468707db2ad95ff7990eca9639dceb3fb09aeccbb7bab2bfadd11dd099946e358526b1c4044df0ae6f3e387f5700f84d88eb66645033399747a1833ceb061859b994ce0ccee04aa17e65d6b764dbe64cfacdb85a07072377f5ed9c46fbeb630af642c99421c84d6454113e43b099548b3cbcd7a11c41953caf35357073b67bfb0ae21ee982b98afa99de5f4c0e30d9fbd66fb58af6d9010e23002f5ced7cddc106476150a203bfb9177bb25dbf299767dc1cf98aa8d141bf05349d87e5f6c3cd88b0b32f94ac530e63d2b2332e9abeb47e6f2b9cf96ae0abc0f9a02a99429b90fef1635ef9511e7b7cd5ef259a5fae4552d3d1d43a3c979f2875be10d8fae07f69621d60be02fb8458155255bf27ebffdaa5b1be0c5cb2b965278e9a5fbe638aebfa310bbfc55445df46db770773718270c64f962bf36137b2acd2cce1f254151ab12f50f48b6123837a6376f79b353aec53fd8bd9b4b05fa12549929dbc577e0c33010e081584f97a657b5fd94b324f24823b1c69a8c02b873f9e774f115ab2966c5260647adeb96ab26819beeb42ab962f135b4d73b0c7ecc64b5fea4b3fc62e100afa9dafd947cf9f3257c4382dae6db5080f97c908553e4b18069d42c55c98413092e72ba58c7d53013d6d21b7e81111aa5165aae4440e4e67e0a2a84463a5fcf8d082c00c3bed4b9a7940d5a649960fe0fa1fa7cdf5f4e72d93b9eec1463d0b3db5c7ae6238cd5ad65ddbfb12172789dee66d87cdde81cbb12112087172629d234b239607ef67e654f42b84de7a80e41a549c8f6597f8c089486e38b8094aa614e3faf4d93d8207611603ebe042af3ce83eda589c5dc969bae916b4108bb1f43f185529ac595e7bbb836f88ec1818f8feb8b8bac522da983614f44770b775e6464f5a5a573f69cfaef588476ee3ae0cd0a2939e02266aedef532fc7450c40542be23b88152f2db37db03bd0983a83e67a1201b117cf356be62e43373313f1374939d7d53d5c666c9ed8aff1ddf2097ff24ce48c6854c1b2c374f3d92cc2da3ffb3d1af0a58e125d8a76217ca42ac35b77ffb983ce3f4c1ca887e61e96bc90f75082fddf50e561b744dcbd5146ad633695e687095d677d5ae2bc54afb8aad7eaa96382c09631b1340edfbbd0bcffd19e2a2cb60441c8d91810fe36c725cd7bf43313a5bafad26dd7e623a81c7e0add1c8a4f20929401b330283a00f46b59a4cc9da631c5ecf4631bcf6a0102a3fb3163a24b7517e31170dd161b41c303c81249f4be8e1d00a479b60f4d8865d9e17db58c7242cb8209dc3c9c80e7dc5c89a4dd6dc53e04b195a0ce64e6fe54f231503dd00596fbe7c65477461b6c934e946d84e4722796ba9234a0cbbf79757667a63c43a2d2a800c49c04e3edf9faa4646e5bd056b7c335d30729dc72604684b2e1ed8b48a0cbb882446dbd74b16142c23ade56059f82db9dce8e747cc003cd0461a906e85c06249f2089bdd22f82adeeee93c97d123c95daca7e984fee0c87d9bc824c1f1e770494701914a188003462ecda6eacecb2402f14738151c3ed00bbcd5cfe52bb73a0ffc99b6ba0027962ab161ad241fd82db516c899df435231b92d383a30b2e0f946eb0144ce1628275068854bec5d17cf75b07d5d13190104d84bc2c9e913de3a4f965030e7d76406f149792a977772bf904114d52a07cc81f0bb68d0c382dda528b0f5bb77b9b0ee0b4258f56352f434536421ffab59448ab578d6c4dad3cfcc9852a6ac5b006ea2cec4dfc7badfd39e76a943afa6c2568ee52713f0e73e4c9e9a0b0f68cfc49a542d5171dcfc6c0c5fae645c21de945599bc6b8b4e067c6b75210f9a4bcb7a40327ce4bbad2eecd89628b0bcf626dd3fd84a75ed0d0adf97a91579d8df38c291acf5219b7cf571fc3f516e20a8f362e2c2b07ce54ca2830bae19c4bcd0b77706a9991b31deffc221c5912a70e6828f14926c5d1abf1695b5afa48bc4f45e2a3fddde37d8cf735cbc4314592bef408b22f725694b27164ca2345d06328c417f8b5ddb988ff30444c38c602d15b26a689e44b4c3121e1ca1a0b2dac4439876394d811c3c844333e0e0aceb596dec5b88e4f0a1227c7cacb4d0254c613582b3c889810bda1821acbba4d91433b39a84e15d0dbaaa1da6ece698f33b3a720cbe23881e2832fef044c88a66f8a6f25dd7b514bd69312f71366c2a88c4f5d9bdd7a8c93ee095b9d27080e715986c1c564263d2a6addfa8f6db586ce5dfe9fefad6c687861e2f33f3798613f4da8816a0053c2bdcdb14f94f06022c8464974af8f409760fe65d6146a69ab1c48b01ac039db8b3d7f0b3aba063bf246bb89ac64e087bb9f3815599b1903a5f135b4c7449f33ef2bd78a75c99c15bcd058b15eb7608c08f6826f21035f5e271a525a53f48a97f509719b067741fbc7fd289f9e4cfb391fec9f61570363ef4ce56c8a25d23dbc96a07ae5477b4f514d92698ed9d3c0384af3458266e68dac48445d6c9be489bb4cc62cccda302358bf5f36f64639a72e9e74f5733d4b41e5ea52834500f9c148aa478d99102c172216db217ee626a1788a31fffc22692c42aa17eede6f484171c327fb7b65a94a63f4c80673f187757b106a16b8ca762d6aef6e38e2398a4bd2c546cad32201a31c625ad00e9f0e5649f91582e4cf1f6bc1261dae9c0b9298d49a2337a71ab68c31110d2d4264d787eddeb30bbac60da8d3c564d1b7491ec2b475303686f63a49128e3748c342bad0b84ebe8de1423510abd9a1f74acbeded9eb8340e40b3fb3b901908a69e176f6bfaf29e9b24b8e6737418111fcfae0665fc7246b2710d587ccf3a473e18d96bb4d1ba6493f8623eb11b257ee80c4dcddc7257bd59ea34d85b57df8e24c085600c82712a7fb5bc1a847f81856218517ce03112d9b126951f055be1180ec78e886d6620cc1b55dd436a253cd590b85dabdf2fb7844427b3fd3479450ede02268a84ca09d3e59d0d8064f4a1861b31bda9d58b5bfc04b893393496ea1321d013056c8454a7c9fab2264e3bb2d1e54f247c89b785cfa895dbe2762e69b26cfc27e90d1568883c934431ce8ab27a93ef07c8fdb5084980f63a23b32fa213636196f67b2b3cd71339c62dc2aa51cbdfda2d430e93761c6fcd8632a543742ffb6bea4b2e850fb699d4652e54e6bc51c8c15e513ae73861a9d5eecf2265cac3aacc249e9e118bba5c0c1c265c12b07ffbf55d689fa40d81ef19b20e546deb7e3046b3ae49e578da1c7afd9436726221e888b50ff7f18be2c5863d0e164c6cba1500555ca6002da23b183a08fe52414d9234a9cc34f4169bb152d12ca4a7b7a6547a9c1de42a230d16ab0e41a97ccda26b79e6b045d19036a0cfdd20e92453e88c517b64c86400416f41f3d51f2ef96d6822d9d44e16cbd240ea16d9585516d450cb65d5f503e975cbdb0f082510365880cc44695ac04d5403923c8ea5b342b8ee85768d441e1f1f025b6c678e929ddaf5acfbe2c9306207ba353b793a350521da7ed8838cf7a908f13eece1f3db5122bbf70e831fc8b8475da49ae16f75e3d9a42d98e63f099a341c6fe38792e7daac8af3daf7431341c24142365538ea5a09333ea02e20ee628b63315ed2ba2e1fd2c8fc24a14d0219771ad06629344f8b18b00fe8210afa9027078e7ca0722e6d8c79c306cb492846e0234860a6c838997f667ba05eadef58aa8423919237ca269fa2924878903be77ce74b835999790af272f0d9f332b6fc1fec5cda51906aa9b5f0edde5b95eb4dc177f460f9310036f834f6ab373a6ee2d7381e2d70fe853aa79cae7744f5ac983d9d8fc843817a1f145aa756d93364a422e10122a17347495deaac3f4c08900a23c79584a0fe78b5cfbb18a268672de83bf27c6b79a4fd06ea710efb523b02c7519ecd1153106d8dbe2ed3e00b988840e4daa1e6596c11e077c8bbf6969b37532b2a5693a6b7450b3e0e11ea46128ffa64fc0760090f9ab639d36081bec196fad258e963f4163e4e1b4eb34753265cb8b35b800ecb0fe0a143da1e512318436c3a0ce64daf164cf20848ae51a4ecd4d292ec3f6eccc988a88564b3e43002ab7147c43631e600234856e65640926e090603f7d4efb9cc0b9af37b3800d1e4ce99c196196ae0ae0d14ceb6463a745bc39d88d9b20d6f4b825dd92cdeb2e03b40fa943a094ac218b62b9f2238bc6b6f28a9aee8abc171c04f2c8a8e41679caac39b44e2ce320bc5d73fd5bf560107a008d16965cb7a93cfe7e61df294ecf08f32f029160945c3debbc167b5e6d4e0662488933cadd5366356c61e8a634d3adbd5dc548717208c1cbecadf0d3f393aa4ba56557696be2249552000eb0a04b3868487a4aa2770aa4e04cc80a8bbe40ea67aafec0135db67cf6750fa024d36672bee941657e6617e30e3ca456172f4903ca27778a9e07de086e0e97d0c2395a4b83e9713e52294a7b71381ebc414e2052e7536d4791308fc14200601430b079d94777020e45dfe140947145af363590bdc84f5a14012c9ed1f0b899e81cd1173ac92a3b0c14a58c597d4f1b444cd3d60df83fb8ec7dbab828c3f55ce316aa15c9746959"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x29, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x1ff}, @filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'wg2\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x3}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x5}}, @TCA_RATE={0x6, 0x5, {0x4b, 0x1}}]}, 0x3674}, 0x1, 0x0, 0x0, 0x44}, 0x4c094) recvmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x2b, &(0x7f0000001280)}, 0x562a}], 0x1, 0x20, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000002e50cda5508a72c400705b57a18f91b8d8949343d2383d09b3a743448d737d3d4901392b36b87f7bcc5e908a71e39aeaee2eb15eb3d7440490ae8e07d74bfbc41c46742004ad0658abe563fd59", @ANYRES16=r11, @ANYBLOB="010028bd7000fcdbdf25020000000800020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x505000, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'veth0_virt_wifi\x00', 0x2000}) 520.3904ms ago: executing program 2 (id=4022): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d700000010"], 0x10b8}, 0x106) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2) 497.936526ms ago: executing program 3 (id=4023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x4, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_CHAIN_ID={0x11}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x68}}, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a5058240c34f786574f25447e6392f58000082a7"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 421.628438ms ago: executing program 0 (id=4024): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x80000000, 0x6, 0x80000001, 0x3, 0x1, 0x9bc, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0x40000b, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0x4bf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, 0x0, 0x0, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 391.312209ms ago: executing program 2 (id=4025): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x5, 0xfff, 0x8}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)='M', 0x1}], 0x1}, 0x4) 348.828071ms ago: executing program 4 (id=4026): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0x51, [0x3, 0x1, 0x1, 0xc6, 0x7, 0xa60], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=""/81}, &(0x7f00000001c0)=0x78) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000200)={'nat\x00', 0x0, [0x40000000, 0x1, 0x426, 0x9, 0x6]}, &(0x7f0000000280)=0x54) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FITHAW(r3, 0xc0045878) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r5, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0xb}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x48) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000400)=0x400, 0x4) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000540)={0x0, 0xffffffff}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value={r7, 0x6}, 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000700)={r2, &(0x7f0000000600)='[]\x00', 0x480000, &(0x7f0000000640)={@_ha_fsid={[0x8, 0x6c9]}, {0x0, 0xb9, 0x6, 0x4}}, 0x2179, &(0x7f0000000680), &(0x7f00000006c0)=0x5}) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) sendmsg$nl_route(r2, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@ipv6_newaddr={0x20, 0x14, 0x400, 0x70bd27, 0x25dfdbfc, {0xa, 0xa806be5cdbd3b81b, 0x28, 0xfd, r9}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x20}}, 0x2004c040) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x9, 0x3, 0x1b8, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x3, &(0x7f00000008c0), {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x218) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000b40)=@sack_info={r7, 0xd6000, 0x9}, &(0x7f0000000b80)=0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)) socket$unix(0x1, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000c00), &(0x7f0000000c80)=0x68) ioctl$PPPIOCSMRRU(r6, 0x4004743b, &(0x7f0000000cc0)=0x8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) r10 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r10, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000d80)}, {&(0x7f0000000dc0)="ebdbe914ffc7317e6ba55f450210f1dad3a1ac97912adf6417b296e467a3425ee0d8be4b556a48b605144fcac33bca856a303f56de17de732c97779a5bccda25f600e2c940a9d13ae4e59e6976c06d6e0f1ee47ae1815a801410", 0x5a}, {&(0x7f0000000e40)="810c1e46146357024113d20a6ec6449f1f8447c2510dcdcf351c3eeb27ae49ef54fc1c590916dc7c2db90f6f5e9c0b4259e6c210fbb2fc8bc823af0dbc6853965b20502729dc5b584169f588f03a36762707127d4e0c3273d7047bb9113956691bb89d642afe7152db74667933532e944d268b1aee2cbf015ea19ca7feb681c001fc09ccd5f59628b4eeb0b718f2e499d7f8609de1b3f4e1930648788d6149c19d5d061494851051366bf4da87dffc491127b7c049274d4e31948f14a1f24cfd72d355", 0xc3}, {&(0x7f0000000f40)="b0e69b901df9cdbca676710f66b96cbbb4ade8fd5a4ddb377eac9c8b3d8d885a4beeedff92f3ca3416be6045835854cdd0d4b54edbf1c5dd6e6ac1f0ee68401cbb114de88885909d790ab72ee0101d7726968c657045e9038d6901e167a5a6d355e16883ee9d5d1f8b28eb421e7c4dc356d050c9acc04cfa113d20006e8b9899808baaa1251d4eec609d76aba7d0a648a319dfd2c623abaf37a058f35af93244ead0958545d5d7e7a11c80", 0xab}, {&(0x7f0000001000)="c76620551820471b33531dafe3a575ca00821ab31fae84b8f396c6e3b1c55b11cf32dea5ee7c1233eff7896504179ce4abfa41242128a6b1539b8da4c5c27209979bfb1a3da9587fe75b50b02bf81bc3", 0x50}, {&(0x7f0000001080)="f7e3b6bda3bc428486348e910820d98e051dfa190782dde5fd563ba6725eea519172449abf023823d7025f38b452cc94394685a326b2f6c9066eba315f4268cd970633ba81510be07e5c9cc48f14d7aee5f1b1ff3b1b75041d4d160eb8ce69cd91de426b8494b4c7c834874c98e4fdb16dbfdcaf8614f77b570311391f5f170400a18aae915eb571d2ab8f0f8c70", 0x8e}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="f2a99968401986b73a169708b46678b527c298e0f73e8e738549fa177a698604ceee86afc99e54e5fd9d40cb62144f54e0a1b7b8bbda2e7c5a58d4492d491facbfd0e9f922331893c122997f0457b23b9ef4d6627789ad911e41c2244f37ff2c7a25563918b75e6156ba4cfaa128c131ca8c683c8eb4b371d7712c52b7b9838cd31bd624d13b7141dcea5614de3ef097d9b60098dddf467de52b8d67a706bb45fb2c19aae3565bb899a96384e51602dd3dbfd2581ed2a16316e6426d3b0cbe3ff49edb7ed98ff8840ae7510b0185", 0xce}], 0x8, &(0x7f00000022c0)=[{0x98, 0x10e, 0x9, "6a6fbc2f2f200bded33c27ebdfe6eedd1903765e58ebb36b0b7ca1c7ff4cc16a42e234239324e5ff23a1e410626211c73acdd41936cdb34760af41f79fadd94c77b3b5229f99565361a09703bc1701af44747ffa46ba9371ff9864a7ffffc11558ebd05965be815009446f7ee138836e5674fd01131a0436b2674b4fcffd7b016b38f57722"}, {0x70, 0x1, 0x9, "249bdaa60d6aed0ff393d4788115413a22383dd4e050a6811902a7e78a1473aedbf03bbcba90827268cab22b046140cfbc17b64e532ae25c619f587ac8b18a0c0bdc08a72c49356f0e78ad003a7df1a64ff1282d7b81bab1467802701b"}, {0x60, 0x29, 0x5, "6cdc66fd52d86149af95fdb23b87231415587995ee86f1ead908b3a3cc5b1c27fd56eae5e78e62b449d637494d6bbee30badc0c9df4791317f2b345722a140aa13f82ccddd081b712fc3fffadde43710"}, {0x90, 0x10f, 0x0, "f9159fe8cd5ad5588bdf7c95c585a5ee3066aa15b5fb17c89f24ed0e17128e505d0a13a369db9524e9b9c5805d13f5c17e7acfcbf4bdb46d77cbed0289e69483b5d1b0ab9fe5fe286b76d74146f0fb759f0461aadc5873bfbd31285d7eb38206844d8c28c0f25d3ad4dcd664e56d48f8093a5a6979606b6b8afdcbbfc584da"}], 0x1f8}, 0x38) r11 = epoll_create(0x8cb) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000003, 0x86071, r11, 0xbdb28000) 265.054428ms ago: executing program 1 (id=4027): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x14, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x15, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x81}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 226.674254ms ago: executing program 3 (id=4028): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/150, 0x96}, {&(0x7f00000002c0)=""/219, 0xdb}, {&(0x7f00000003c0)=""/109, 0x6d}, {&(0x7f0000000440)=""/180, 0xb4}], 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008035"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8, 0x0, 0x8000, 0x67d3, {{0x17, 0x4, 0x0, 0x2a, 0x5c, 0x65, 0x0, 0xa, 0x29, 0x0, @remote, @broadcast, {[@generic={0x7, 0xc, "841539386f70b049f2b6"}, @cipso={0x86, 0xe, 0x3, [{0x2, 0x8, "4b1a38639859"}]}, @generic={0x88, 0xe, "ac9877bbf180aab5ee3e1780"}, @ssrr={0x89, 0x17, 0xa, [@broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, @remote, @dev={0xac, 0x14, 0x14, 0x6}]}, @timestamp={0x44, 0x8, 0x88, 0x0, 0x7, [0x2]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5bd, 0x2, 0x0, 0x800, r3, 0x9, '\x00', r5, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x4}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) 63.146451ms ago: executing program 0 (id=4029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='pimreg\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f0000000000)={'dvmrp1\x00', 0x1502}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f0000000000)={'dvmrp1\x00', 0x1502}) 1.577424ms ago: executing program 1 (id=4030): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r9, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r8, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r12, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x8d, 0x6, 0xd07f, 0xfff, 0x7, 0x10000, 0x5, 0x8, 0x8, 0x7fffffff, 0x5, 0x0, 0x10001, 0xb85, 0xd, 0x6, 0xbac07f81, 0x9, 0x0, 0x4, 0x200, 0xffffffff, 0xffffffff, 0x7, 0x648, 0x80000001, 0x9, 0x81, 0x8000, 0x10000, 0x9, 0x9, 0x1, 0x3, 0x5, 0x6, 0x10000, 0x5, 0x101, 0xb67d, 0x8e, 0x8, 0x6, 0xfffff801, 0x5, 0xfff, 0x6, 0x1, 0x400, 0x7, 0x10001, 0x80, 0x4, 0x2, 0x0, 0x9, 0x40, 0x4, 0x8878, 0x0, 0x8ce, 0x7b, 0x6, 0x100, 0x0, 0x1, 0x400, 0x2, 0x8, 0x2b, 0x7f, 0x5, 0xfc7, 0x0, 0x6, 0x7, 0x1, 0x0, 0x2, 0x3ff, 0x1, 0x8, 0x5, 0x2, 0x1, 0x1, 0x2, 0x2, 0x4, 0x7, 0x10000000, 0x2, 0xc, 0x8, 0x64e, 0x1, 0x4, 0x3, 0x4, 0x7f, 0x3ff, 0x1, 0x4, 0x1, 0x400, 0x9, 0xc4c, 0x8000, 0x12d170f1, 0x8, 0x7f, 0x2, 0x1, 0xa27a, 0x764, 0x0, 0xc, 0x2, 0x2, 0x7, 0x5, 0x1000, 0x0, 0x0, 0x3, 0xcc4a, 0x4, 0x40, 0x6, 0x9, 0xc, 0x3, 0x3, 0x5, 0x5, 0x6, 0xbf, 0xf, 0x312, 0x4, 0x6, 0x800, 0x9, 0x8f7, 0x7, 0xfffffffe, 0x1ff, 0xfff, 0x9, 0x1, 0x4, 0xf, 0x6b5, 0x0, 0x40, 0x7, 0xb, 0x7, 0xc4, 0x3, 0x5, 0x3, 0x6, 0x5, 0x100, 0x1d6, 0x3, 0x7f, 0x6d5, 0xb9de, 0x0, 0x7fffffff, 0x7, 0x8, 0x9, 0xc54, 0x8001, 0x4, 0x7fffffff, 0x8, 0x81, 0x1, 0x8, 0x6, 0x8, 0x5, 0xf3, 0x9, 0x81, 0x5, 0x10000, 0xfff, 0x64, 0x5, 0xf1f8, 0x0, 0xe, 0xfffff001, 0x8, 0x8001, 0x2b0000, 0x7f, 0x5, 0x6, 0xffffffff, 0xc7, 0x7ff00000, 0x9, 0x200, 0xb9c, 0x2, 0x4, 0x800, 0x7, 0x7f, 0x8, 0x20000, 0x7, 0xac6, 0x9, 0x9, 0xfffffce9, 0x1, 0x2, 0x80, 0x38, 0x16e1d229, 0x8, 0x9, 0x4, 0x6, 0x80000000, 0x4, 0x5, 0x3, 0xb3e1, 0x0, 0x100, 0x4, 0x7, 0x1, 0x8, 0x7fffffff, 0x2, 0x7fffffff, 0xe3, 0x7, 0x5, 0x9, 0x3, 0x2, 0x7ff, 0x8, 0x3, 0x30000000]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)=@ll={0x11, 0x17, r13, 0x1, 0x4}, 0x80, 0x0}}], 0x1, 0x40000) 0s ago: executing program 2 (id=4031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000180ac000280"], 0xc4}}, 0x0) kernel console output (not intermixed with test programs): ovec+0x73/0xa0 [ 367.350391][T14282] ___sys_sendmsg+0x2a5/0x360 [ 367.350419][T14282] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.350489][T14282] ? __fget_files+0x2a/0x420 [ 367.350517][T14282] ? __fget_files+0x3a0/0x420 [ 367.350558][T14282] __x64_sys_sendmsg+0x1bd/0x2a0 [ 367.350583][T14282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.350615][T14282] ? __pfx_ksys_write+0x10/0x10 [ 367.350652][T14282] do_syscall_64+0x14d/0xf80 [ 367.350671][T14282] ? trace_irq_disable+0x3b/0x150 [ 367.350699][T14282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.350720][T14282] ? clear_bhb_loop+0x40/0x90 [ 367.350746][T14282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.350768][T14282] RIP: 0033:0x7f1602f9c799 [ 367.350788][T14282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.350806][T14282] RSP: 002b:00007f1603d98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.350829][T14282] RAX: ffffffffffffffda RBX: 00007f1603215fa0 RCX: 00007f1602f9c799 [ 367.350844][T14282] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 367.350857][T14282] RBP: 00007f1603d98090 R08: 0000000000000000 R09: 0000000000000000 [ 367.350870][T14282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.350882][T14282] R13: 00007f1603216038 R14: 00007f1603215fa0 R15: 00007ffe42313938 [ 367.350917][T14282] [ 367.358155][T14284] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2596'. [ 367.731030][T14290] netlink: 'syz.2.2598': attribute type 4 has an invalid length. [ 367.766214][T14292] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2599'. [ 367.781854][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2599'. [ 367.952017][T14299] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 368.018659][T11426] IPVS: starting estimator thread 0... [ 368.116561][T14305] IPVS: using max 28 ests per chain, 67200 per kthread [ 368.182598][T14310] syzkaller0: entered promiscuous mode [ 368.192752][T14310] syzkaller0: entered allmulticast mode [ 368.289615][T14318] netlink: 'syz.1.2610': attribute type 1 has an invalid length. [ 368.314187][T14318] netlink: 'syz.1.2610': attribute type 1 has an invalid length. [ 368.340836][T14316] bond4: option miimon: invalid value (18446744073709551585) [ 368.348636][T14316] bond4: option miimon: allowed values 0 - 2147483647 [ 368.364407][T14316] bond4 (unregistering): Released all slaves [ 368.735851][T14344] netlink: 'syz.4.2616': attribute type 25 has an invalid length. [ 368.907879][T14354] netlink: 'syz.0.2621': attribute type 11 has an invalid length. [ 368.955945][T14356] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2622'. [ 368.972416][T14356] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 369.025654][T14356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.185100][T14365] netlink: 'syz.2.2625': attribute type 2 has an invalid length. [ 369.368613][T14373] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2628'. [ 369.421762][T14376] syzkaller1: entered promiscuous mode [ 369.427745][T14376] syzkaller1: entered allmulticast mode [ 369.439952][T14376] ipt_REJECT: TCP_RESET invalid for non-tcp [ 369.521251][T14382] syzkaller0: entered promiscuous mode [ 369.549995][T14382] syzkaller0: entered allmulticast mode [ 369.826347][T14395] syzkaller1: entered promiscuous mode [ 369.859273][T14395] syzkaller1: entered allmulticast mode [ 370.263944][T14418] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2645'. [ 370.309134][T14418] syzkaller0: entered promiscuous mode [ 370.314765][T14418] syzkaller0: entered allmulticast mode [ 370.655108][T14439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2650'. [ 370.973151][T14455] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2659'. [ 371.149343][T14466] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2663'. [ 371.171648][T14466] syzkaller0: entered promiscuous mode [ 371.182775][T14466] syzkaller0: entered allmulticast mode [ 371.216483][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 371.224845][ C1] lec:lec_tx_timeout: lec0 [ 371.229823][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 371.376153][T14475] IPVS: Unknown mcast interface: vcan0 [ 371.383540][T14479] netlink: 'syz.4.2667': attribute type 3 has an invalid length. [ 371.387322][T14478] netlink: 'syz.3.2668': attribute type 1 has an invalid length. [ 371.406061][T14478] netlink: 'syz.3.2668': attribute type 1 has an invalid length. [ 371.417266][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2666'. [ 371.509040][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.522003][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.539186][T14481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.540143][T14486] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2670'. [ 371.561147][T14488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.980930][T14509] syzkaller0: entered promiscuous mode [ 371.987108][T14509] syzkaller0: entered allmulticast mode [ 372.228059][T14523] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2686'. [ 372.265472][T14525] FAULT_INJECTION: forcing a failure. [ 372.265472][T14525] name failslab, interval 1, probability 0, space 0, times 0 [ 372.287176][T14525] CPU: 0 UID: 0 PID: 14525 Comm: syz.2.2687 Not tainted syzkaller #0 PREEMPT(full) [ 372.287207][T14525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.287219][T14525] Call Trace: [ 372.287227][T14525] [ 372.287236][T14525] dump_stack_lvl+0xe8/0x150 [ 372.287271][T14525] should_fail_ex+0x412/0x560 [ 372.287302][T14525] should_failslab+0xa8/0x100 [ 372.287329][T14525] __kmalloc_noprof+0xe8/0x760 [ 372.287352][T14525] ? rcu_is_watching+0x15/0xb0 [ 372.287377][T14525] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 372.287408][T14525] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 372.287435][T14525] genl_family_rcv_msg_doit+0xd9/0x330 [ 372.287453][T14525] ? __asan_memcpy+0x40/0x70 [ 372.287471][T14525] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 372.287492][T14525] ? __pfx_genl_get_cmd+0x10/0x10 [ 372.287514][T14525] ? __lock_acquire+0x6b5/0x2cf0 [ 372.287540][T14525] genl_rcv_msg+0x61c/0x7a0 [ 372.287563][T14525] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.287579][T14525] ? __pfx_ctrl_getfamily+0x10/0x10 [ 372.287594][T14525] ? __lock_acquire+0x6b5/0x2cf0 [ 372.287624][T14525] netlink_rcv_skb+0x232/0x4b0 [ 372.287647][T14525] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.287672][T14525] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.287710][T14525] ? down_read+0x272/0x2e0 [ 372.287727][T14525] ? genl_rcv+0xd/0x40 [ 372.287744][T14525] genl_rcv+0x28/0x40 [ 372.287758][T14525] netlink_unicast+0x80f/0x9b0 [ 372.287786][T14525] ? __pfx_netlink_unicast+0x10/0x10 [ 372.287807][T14525] ? netlink_sendmsg+0x650/0xb40 [ 372.287827][T14525] ? skb_put+0x11b/0x210 [ 372.287854][T14525] netlink_sendmsg+0x813/0xb40 [ 372.287885][T14525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.287910][T14525] ? aa_sock_msg_perm+0xf1/0x1b0 [ 372.287933][T14525] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.287951][T14525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.287974][T14525] __sys_sendto+0x672/0x710 [ 372.288000][T14525] ? __pfx___sys_sendto+0x10/0x10 [ 372.288047][T14525] ? fd_install+0x94/0x3d0 [ 372.288071][T14525] ? fd_install+0x306/0x3d0 [ 372.288100][T14525] __x64_sys_sendto+0xde/0x100 [ 372.288126][T14525] do_syscall_64+0x14d/0xf80 [ 372.288141][T14525] ? trace_irq_disable+0x3b/0x150 [ 372.288163][T14525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.288180][T14525] ? clear_bhb_loop+0x40/0x90 [ 372.288200][T14525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.288216][T14525] RIP: 0033:0x7f1602f5cfce [ 372.288232][T14525] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 372.288247][T14525] RSP: 002b:00007f1603d75e58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 372.288265][T14525] RAX: ffffffffffffffda RBX: 00007f1603d776c0 RCX: 00007f1602f5cfce [ 372.288277][T14525] RDX: 0000000000000028 RSI: 00007f1603d75fe0 RDI: 0000000000000005 [ 372.288288][T14525] RBP: 0000000000000000 R08: 00007f1603d75ed4 R09: 000000000000000c [ 372.288297][T14525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 372.288307][T14525] R13: 00007f1603d75f28 R14: 00007f1603d75fe0 R15: 0000000000000000 [ 372.288334][T14525] [ 372.326991][T14527] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2686'. [ 373.469884][T14574] FAULT_INJECTION: forcing a failure. [ 373.469884][T14574] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 373.497502][T14574] CPU: 0 UID: 0 PID: 14574 Comm: syz.0.2707 Not tainted syzkaller #0 PREEMPT(full) [ 373.497534][T14574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.497546][T14574] Call Trace: [ 373.497555][T14574] [ 373.497563][T14574] dump_stack_lvl+0xe8/0x150 [ 373.497598][T14574] should_fail_ex+0x412/0x560 [ 373.497631][T14574] prepare_alloc_pages+0x22a/0x650 [ 373.497664][T14574] __alloc_frozen_pages_noprof+0x12f/0x380 [ 373.497695][T14574] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 373.497726][T14574] ? __pfx_policy_nodemask+0x10/0x10 [ 373.497755][T14574] ? percpu_counter_add_batch+0xea/0x1d0 [ 373.497777][T14574] ? vma_wants_writenotify+0xb3/0x2a0 [ 373.497809][T14574] alloc_pages_mpol+0x232/0x4a0 [ 373.497841][T14574] alloc_pages_noprof+0xa8/0x190 [ 373.497869][T14574] __pmd_alloc+0x3a/0x5c0 [ 373.497904][T14574] handle_mm_fault+0xe96/0x3310 [ 373.497950][T14574] ? handle_mm_fault+0xee/0x3310 [ 373.497989][T14574] ? __pfx_handle_mm_fault+0x10/0x10 [ 373.498016][T14574] ? lock_vma_under_rcu+0x45a/0x500 [ 373.498068][T14574] do_user_addr_fault+0xa73/0x1340 [ 373.498104][T14574] ? rcu_is_watching+0x15/0xb0 [ 373.498132][T14574] ? trace_page_fault_user+0x84/0x210 [ 373.498162][T14574] exc_page_fault+0x6a/0xc0 [ 373.498193][T14574] asm_exc_page_fault+0x26/0x30 [ 373.498213][T14574] RIP: 0033:0x7ff10435e6c2 [ 373.498233][T14574] Code: 8d 15 e5 08 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 f8 e6 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 373.498251][T14574] RSP: 002b:00007ff10526ed20 EFLAGS: 00010286 [ 373.498270][T14574] RAX: ffffffffffffffff RBX: 00007ff0fc000000 RCX: 00007ff10439c597 [ 373.498285][T14574] RDX: 00007ff10444ef83 RSI: 0000000000021000 RDI: 00007ff0fc000000 [ 373.498299][T14574] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 373.498312][T14574] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 373.498325][T14574] R13: 0000000000001000 R14: 00007ff100000000 R15: 0000000001c00000 [ 373.498359][T14574] [ 373.498573][T14574] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 373.639635][T14582] FAULT_INJECTION: forcing a failure. [ 373.639635][T14582] name failslab, interval 1, probability 0, space 0, times 0 [ 373.682758][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.818962][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.830999][T14582] CPU: 0 UID: 0 PID: 14582 Comm: syz.3.2709 Not tainted syzkaller #0 PREEMPT(full) [ 373.831028][T14582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.831041][T14582] Call Trace: [ 373.831049][T14582] [ 373.831057][T14582] dump_stack_lvl+0xe8/0x150 [ 373.831091][T14582] should_fail_ex+0x412/0x560 [ 373.831125][T14582] should_failslab+0xa8/0x100 [ 373.831153][T14582] __kmalloc_noprof+0xe8/0x760 [ 373.831176][T14582] ? rcu_is_watching+0x15/0xb0 [ 373.831201][T14582] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 373.831232][T14582] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 373.831263][T14582] genl_family_rcv_msg_doit+0xd9/0x330 [ 373.831284][T14582] ? __asan_memcpy+0x40/0x70 [ 373.831309][T14582] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 373.831336][T14582] ? __pfx_genl_get_cmd+0x10/0x10 [ 373.831365][T14582] ? __lock_acquire+0x6b5/0x2cf0 [ 373.831397][T14582] genl_rcv_msg+0x61c/0x7a0 [ 373.831436][T14582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 373.831457][T14582] ? __pfx_ctrl_getfamily+0x10/0x10 [ 373.831477][T14582] ? __lock_acquire+0x6b5/0x2cf0 [ 373.831512][T14582] netlink_rcv_skb+0x232/0x4b0 [ 373.831539][T14582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 373.831562][T14582] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.831610][T14582] ? down_read+0x272/0x2e0 [ 373.831630][T14582] ? genl_rcv+0xd/0x40 [ 373.831653][T14582] genl_rcv+0x28/0x40 [ 373.831670][T14582] netlink_unicast+0x80f/0x9b0 [ 373.831706][T14582] ? __pfx_netlink_unicast+0x10/0x10 [ 373.831734][T14582] ? netlink_sendmsg+0x650/0xb40 [ 373.831759][T14582] ? skb_put+0x11b/0x210 [ 373.831793][T14582] netlink_sendmsg+0x813/0xb40 [ 373.831837][T14582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.831867][T14582] ? aa_sock_msg_perm+0xf1/0x1b0 [ 373.831894][T14582] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.831915][T14582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.831944][T14582] __sys_sendto+0x672/0x710 [ 373.831977][T14582] ? __pfx___sys_sendto+0x10/0x10 [ 373.832040][T14582] ? fd_install+0x94/0x3d0 [ 373.832069][T14582] ? fd_install+0x306/0x3d0 [ 373.832107][T14582] __x64_sys_sendto+0xde/0x100 [ 373.832142][T14582] do_syscall_64+0x14d/0xf80 [ 373.832161][T14582] ? trace_irq_disable+0x3b/0x150 [ 373.832190][T14582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.832211][T14582] ? clear_bhb_loop+0x40/0x90 [ 373.832237][T14582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.832257][T14582] RIP: 0033:0x7fbb1ab5cfce [ 373.832278][T14582] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 373.832296][T14582] RSP: 002b:00007fbb1b9fae58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 373.832319][T14582] RAX: ffffffffffffffda RBX: 00007fbb1b9fc6c0 RCX: 00007fbb1ab5cfce [ 373.832334][T14582] RDX: 0000000000000028 RSI: 00007fbb1b9fafe0 RDI: 0000000000000004 [ 373.832347][T14582] RBP: 0000000000000000 R08: 00007fbb1b9faed4 R09: 000000000000000c [ 373.832359][T14582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 373.832371][T14582] R13: 00007fbb1b9faf28 R14: 00007fbb1b9fafe0 R15: 0000000000000000 [ 373.832417][T14582] [ 374.212774][T14598] netlink: 'syz.2.2716': attribute type 83 has an invalid length. [ 374.214613][ T49] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 374.237277][T14595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.433091][T14605] __nla_validate_parse: 3 callbacks suppressed [ 374.433113][T14605] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2720'. [ 374.450775][T14607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2721'. [ 374.619607][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2724'. [ 374.775228][T14626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2729'. [ 375.182952][T14644] macvtap0: left allmulticast mode [ 375.313619][T14653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2740'. [ 375.347664][T14653] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 375.535533][T14662] FAULT_INJECTION: forcing a failure. [ 375.535533][T14662] name failslab, interval 1, probability 0, space 0, times 0 [ 375.564566][T14662] CPU: 0 UID: 0 PID: 14662 Comm: syz.1.2744 Not tainted syzkaller #0 PREEMPT(full) [ 375.564598][T14662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.564610][T14662] Call Trace: [ 375.564619][T14662] [ 375.564629][T14662] dump_stack_lvl+0xe8/0x150 [ 375.564664][T14662] should_fail_ex+0x412/0x560 [ 375.564701][T14662] should_failslab+0xa8/0x100 [ 375.564728][T14662] ? __anon_vma_prepare+0xcb/0x4a0 [ 375.564751][T14662] kmem_cache_alloc_noprof+0x87/0x650 [ 375.564784][T14662] __anon_vma_prepare+0xcb/0x4a0 [ 375.564813][T14662] do_pte_missing+0x2dd1/0x3490 [ 375.564837][T14662] ? __lock_acquire+0x6b5/0x2cf0 [ 375.564885][T14662] handle_mm_fault+0x1bec/0x3310 [ 375.564935][T14662] ? handle_mm_fault+0xee/0x3310 [ 375.564976][T14662] ? __pfx_handle_mm_fault+0x10/0x10 [ 375.565004][T14662] ? lock_vma_under_rcu+0x45a/0x500 [ 375.565059][T14662] do_user_addr_fault+0xa73/0x1340 [ 375.565095][T14662] ? rcu_is_watching+0x15/0xb0 [ 375.565124][T14662] ? trace_page_fault_user+0x84/0x210 [ 375.565155][T14662] exc_page_fault+0x6a/0xc0 [ 375.565188][T14662] asm_exc_page_fault+0x26/0x30 [ 375.565209][T14662] RIP: 0033:0x7fe23195e6c2 [ 375.565229][T14662] Code: 8d 15 e5 08 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 f8 e6 28 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 375.565248][T14662] RSP: 002b:00007fe23283dd20 EFLAGS: 00010286 [ 375.565268][T14662] RAX: ffffffffffffffff RBX: 00007fe228000000 RCX: 00007fe23199c597 [ 375.565283][T14662] RDX: 00007fe231a4ef83 RSI: 0000000000021000 RDI: 00007fe228000000 [ 375.565297][T14662] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 375.565309][T14662] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 375.565322][T14662] R13: 0000000000001000 R14: 00007fe22c000000 R15: 0000000000600000 [ 375.565357][T14662] [ 375.565372][T14662] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 375.890150][T14678] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2750'. [ 375.925990][T14671] batman_adv: batadv0: Interface activated: dummy0 [ 375.935239][T14671] batadv0: mtu less than device minimum [ 375.946829][T14671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 375.959242][T14671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 375.971441][T14671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 375.983657][T14671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 375.995780][T14671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 376.008141][T14671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 376.020259][T14671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 376.032525][T14671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 376.045227][T14671] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 376.108982][T14690] bond0: Error: Cannot enslave bond to itself. [ 376.206693][T14694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2756'. [ 376.236463][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 376.244534][ C1] lec:lec_tx_timeout: lec0 [ 376.249607][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 376.362286][T14700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2759'. [ 376.494378][T14706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.863235][T14726] x_tables: duplicate underflow at hook 1 [ 376.943280][T14732] netlink: 'syz.4.2768': attribute type 27 has an invalid length. [ 377.019064][ T3553] wlan1: Trigger new scan to find an IBSS to join [ 377.066299][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2768'. [ 377.381388][T14753] netlink: 'syz.0.2773': attribute type 1 has an invalid length. [ 377.468579][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'. [ 377.480201][T14753] bond4: (slave gretap1): making interface the new active one [ 377.489565][T14753] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 377.653497][T14765] netlink: 'syz.2.2779': attribute type 3 has an invalid length. [ 377.827883][T14771] netlink: 'syz.0.2781': attribute type 1 has an invalid length. [ 378.014829][ T35] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 378.253989][T14798] ip6tnl0: Caught tx_queue_len zero misconfig [ 378.664515][T14820] bond0: Caught tx_queue_len zero misconfig [ 379.063465][ T1014] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 379.122204][T14837] can: request_module (can-proto-0) failed. [ 379.191710][T14836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.491977][T14858] nbd: couldn't find a device at index 0 [ 379.502259][T14858] __nla_validate_parse: 13 callbacks suppressed [ 379.502282][T14858] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2811'. [ 379.646950][T14866] syzkaller0: entered promiscuous mode [ 379.653089][T14866] syzkaller0: entered allmulticast mode [ 379.674470][T14865] FAULT_INJECTION: forcing a failure. [ 379.674470][T14865] name failslab, interval 1, probability 0, space 0, times 0 [ 379.697309][T14865] CPU: 0 UID: 0 PID: 14865 Comm: syz.0.2815 Not tainted syzkaller #0 PREEMPT(full) [ 379.697340][T14865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 379.697352][T14865] Call Trace: [ 379.697360][T14865] [ 379.697369][T14865] dump_stack_lvl+0xe8/0x150 [ 379.697414][T14865] should_fail_ex+0x412/0x560 [ 379.697447][T14865] should_failslab+0xa8/0x100 [ 379.697475][T14865] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 379.697501][T14865] ? __alloc_skb+0x1d0/0x7d0 [ 379.697527][T14865] ? __local_bh_enable_ip+0xd0/0x130 [ 379.697559][T14865] __alloc_skb+0x1d0/0x7d0 [ 379.697586][T14865] ? netlink_ack_tlv_len+0x6c/0x210 [ 379.697616][T14865] netlink_ack+0x146/0xa50 [ 379.697639][T14865] ? __pfx_genl_rcv_msg+0x10/0x10 [ 379.697663][T14865] ? __lock_acquire+0x6b5/0x2cf0 [ 379.697703][T14865] netlink_rcv_skb+0x2b6/0x4b0 [ 379.697730][T14865] ? __pfx_genl_rcv_msg+0x10/0x10 [ 379.697753][T14865] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 379.697801][T14865] ? down_read+0x272/0x2e0 [ 379.697821][T14865] ? genl_rcv+0xd/0x40 [ 379.697843][T14865] genl_rcv+0x28/0x40 [ 379.697861][T14865] netlink_unicast+0x80f/0x9b0 [ 379.697895][T14865] ? __pfx_netlink_unicast+0x10/0x10 [ 379.697922][T14865] ? netlink_sendmsg+0x650/0xb40 [ 379.697946][T14865] ? skb_put+0x11b/0x210 [ 379.697978][T14865] netlink_sendmsg+0x813/0xb40 [ 379.698009][T14865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.698034][T14865] ? aa_sock_msg_perm+0xf1/0x1b0 [ 379.698056][T14865] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 379.698074][T14865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.698097][T14865] __sys_sendto+0x672/0x710 [ 379.698123][T14865] ? __pfx___sys_sendto+0x10/0x10 [ 379.698170][T14865] ? fd_install+0x94/0x3d0 [ 379.698192][T14865] ? fd_install+0x306/0x3d0 [ 379.698221][T14865] __x64_sys_sendto+0xde/0x100 [ 379.698248][T14865] do_syscall_64+0x14d/0xf80 [ 379.698263][T14865] ? trace_irq_disable+0x3b/0x150 [ 379.698286][T14865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.698303][T14865] ? clear_bhb_loop+0x40/0x90 [ 379.698323][T14865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.698339][T14865] RIP: 0033:0x7ff10435cfce [ 379.698355][T14865] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 379.698370][T14865] RSP: 002b:00007ff10526ee58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 379.698396][T14865] RAX: ffffffffffffffda RBX: 00007ff1052706c0 RCX: 00007ff10435cfce [ 379.698408][T14865] RDX: 0000000000000028 RSI: 00007ff10526efe0 RDI: 0000000000000004 [ 379.698418][T14865] RBP: 0000000000000000 R08: 00007ff10526eed4 R09: 000000000000000c [ 379.698428][T14865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 379.698438][T14865] R13: 00007ff10526ef28 R14: 00007ff10526efe0 R15: 0000000000000000 [ 379.698465][T14865] [ 380.073068][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2816'. [ 380.083090][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2816'. [ 380.122558][T14873] netlink: 'syz.1.2817': attribute type 21 has an invalid length. [ 380.133063][T14873] netlink: 'syz.1.2817': attribute type 22 has an invalid length. [ 380.141446][T14873] netlink: 'syz.1.2817': attribute type 23 has an invalid length. [ 380.149706][T14873] netlink: 'syz.1.2817': attribute type 25 has an invalid length. [ 380.159127][T14873] netlink: 'syz.1.2817': attribute type 26 has an invalid length. [ 380.168312][T14873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2817'. [ 380.447401][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2821'. [ 380.507569][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2823'. [ 380.537192][T14885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2823'. [ 380.615766][T14893] FAULT_INJECTION: forcing a failure. [ 380.615766][T14893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.632840][T14893] CPU: 1 UID: 0 PID: 14893 Comm: syz.1.2825 Not tainted syzkaller #0 PREEMPT(full) [ 380.632870][T14893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.632883][T14893] Call Trace: [ 380.632890][T14893] [ 380.632899][T14893] dump_stack_lvl+0xe8/0x150 [ 380.632934][T14893] should_fail_ex+0x412/0x560 [ 380.632965][T14893] _copy_to_user+0x31/0xb0 [ 380.632988][T14893] simple_read_from_buffer+0xe1/0x170 [ 380.633021][T14893] proc_fail_nth_read+0x1bb/0x230 [ 380.633052][T14893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.633083][T14893] ? rw_verify_area+0x2a6/0x4d0 [ 380.633104][T14893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.633133][T14893] vfs_read+0x20c/0xa70 [ 380.633153][T14893] ? fdget_pos+0x246/0x320 [ 380.633187][T14893] ? __pfx___mutex_lock+0x10/0x10 [ 380.633209][T14893] ? __pfx_vfs_read+0x10/0x10 [ 380.633232][T14893] ? __fget_files+0x2a/0x420 [ 380.633263][T14893] ? __fget_files+0x3a0/0x420 [ 380.633289][T14893] ? __fget_files+0x2a/0x420 [ 380.633326][T14893] ksys_read+0x150/0x270 [ 380.633350][T14893] ? __pfx_ksys_read+0x10/0x10 [ 380.633455][T14893] do_syscall_64+0x14d/0xf80 [ 380.633489][T14893] ? trace_irq_disable+0x3b/0x150 [ 380.633562][T14893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.633585][T14893] ? clear_bhb_loop+0x40/0x90 [ 380.633609][T14893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.633629][T14893] RIP: 0033:0x7fe23195cfce [ 380.633659][T14893] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 380.633677][T14893] RSP: 002b:00007fe23283efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.633707][T14893] RAX: ffffffffffffffda RBX: 00007fe23283f6c0 RCX: 00007fe23195cfce [ 380.633722][T14893] RDX: 000000000000000f RSI: 00007fe23283f0a0 RDI: 0000000000000005 [ 380.633734][T14893] RBP: 00007fe23283f090 R08: 0000000000000000 R09: 0000000000000000 [ 380.633745][T14893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.633758][T14893] R13: 00007fe231c16038 R14: 00007fe231c15fa0 R15: 00007fffcfc7a328 [ 380.633790][T14893] [ 380.653002][T14889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2826'. [ 380.675746][T14895] syzkaller0: entered promiscuous mode [ 380.870867][T14895] syzkaller0: entered allmulticast mode [ 381.288631][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2837'. [ 381.353987][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2838'. [ 381.596670][T14942] syzkaller0: entered promiscuous mode [ 381.602425][T14942] syzkaller0: entered allmulticast mode [ 381.822053][T14950] syzkaller0: entered promiscuous mode [ 381.831567][T14950] syzkaller0: entered allmulticast mode [ 381.895321][T14954] syzkaller0: entered promiscuous mode [ 381.901581][T14954] syzkaller0: entered allmulticast mode [ 382.279540][T14963] syzkaller0: entered promiscuous mode [ 382.285113][T14963] syzkaller0: entered allmulticast mode [ 382.626416][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6380 ms [ 382.634841][ C1] lec:lec_tx_timeout: lec0 [ 382.646559][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 384.260339][T14985] syzkaller0: entered promiscuous mode [ 384.265971][T14985] syzkaller0: entered allmulticast mode [ 384.325935][T15005] syzkaller0: entered promiscuous mode [ 384.333560][T15005] syzkaller0: entered allmulticast mode [ 384.514349][T15030] __nla_validate_parse: 5 callbacks suppressed [ 384.514382][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'. [ 384.545565][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2863'. [ 384.608926][T15034] netlink: 'syz.3.2864': attribute type 2 has an invalid length. [ 384.733880][T15040] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2868'. [ 384.815856][T15042] netlink: 'syz.0.2869': attribute type 1 has an invalid length. [ 386.144555][T15042] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 386.327015][T15052] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2871'. [ 386.438990][T15052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2871'. [ 386.458273][T15052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2871'. [ 386.490357][T15052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2871'. [ 386.520308][T15052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2871'. [ 386.592103][T15071] FAULT_INJECTION: forcing a failure. [ 386.592103][T15071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.634433][T15071] CPU: 0 UID: 0 PID: 15071 Comm: syz.1.2876 Not tainted syzkaller #0 PREEMPT(full) [ 386.634463][T15071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.634476][T15071] Call Trace: [ 386.634484][T15071] [ 386.634492][T15071] dump_stack_lvl+0xe8/0x150 [ 386.634525][T15071] should_fail_ex+0x412/0x560 [ 386.634555][T15071] _copy_to_iter+0x1e4/0x17d0 [ 386.634595][T15071] ? do_raw_spin_lock+0x12b/0x2f0 [ 386.634625][T15071] ? __pfx__copy_to_iter+0x10/0x10 [ 386.634649][T15071] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 386.634676][T15071] ? lockdep_hardirqs_on+0x7a/0x110 [ 386.634703][T15071] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 386.634729][T15071] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 386.634757][T15071] __skb_datagram_iter+0xf8/0x980 [ 386.634779][T15071] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 386.634809][T15071] skb_copy_datagram_iter+0xb5/0x270 [ 386.634834][T15071] netlink_recvmsg+0x2c3/0xa50 [ 386.634870][T15071] ? __pfx_netlink_recvmsg+0x10/0x10 [ 386.634901][T15071] ? aa_sock_msg_perm+0xf1/0x1b0 [ 386.634927][T15071] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 386.634946][T15071] ? security_socket_recvmsg+0x7e/0x2c0 [ 386.634974][T15071] ? __pfx_netlink_recvmsg+0x10/0x10 [ 386.635000][T15071] sock_recvmsg+0x172/0x1b0 [ 386.635026][T15071] __sys_recvfrom+0x240/0x3c0 [ 386.635060][T15071] ? __pfx___sys_recvfrom+0x10/0x10 [ 386.635119][T15071] ? rcu_is_watching+0x15/0xb0 [ 386.635153][T15071] __x64_sys_recvfrom+0xde/0x100 [ 386.635184][T15071] do_syscall_64+0x14d/0xf80 [ 386.635201][T15071] ? trace_irq_disable+0x3b/0x150 [ 386.635226][T15071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.635245][T15071] ? clear_bhb_loop+0x40/0x90 [ 386.635269][T15071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.635287][T15071] RIP: 0033:0x7fe23195cfce [ 386.635307][T15071] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 386.635322][T15071] RSP: 002b:00007fe23281ceb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 386.635344][T15071] RAX: ffffffffffffffda RBX: 00007fe23281e6c0 RCX: 00007fe23195cfce [ 386.635358][T15071] RDX: 0000000000001000 RSI: 00007fe23281cfe0 RDI: 0000000000000005 [ 386.635370][T15071] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 386.635381][T15071] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe231a3301c [ 386.635393][T15071] R13: 00007fe23281cf90 R14: 0000000000000013 R15: 0000000000000000 [ 386.635425][T15071] [ 386.895724][T15080] netlink: 'syz.3.2879': attribute type 2 has an invalid length. [ 386.896230][T15071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.928093][T15080] 9: entered promiscuous mode [ 387.050930][T15088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2882'. [ 387.119695][T15089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.171662][T15091] syzkaller0: entered promiscuous mode [ 387.179413][T15091] syzkaller0: entered allmulticast mode [ 387.521893][T15109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.539495][T15111] netlink: 212044 bytes leftover after parsing attributes in process `syz.2.2889'. [ 387.766525][T15113] netlink: 'syz.4.2892': attribute type 25 has an invalid length. [ 387.818072][T15115] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 387.834516][T15115] lo: Caught tx_queue_len zero misconfig [ 387.842941][T15115] netlink: 'syz.4.2893': attribute type 4 has an invalid length. [ 388.058254][T15126] syzkaller0: entered promiscuous mode [ 388.065345][T15126] syzkaller0: entered allmulticast mode [ 388.380876][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 388.388989][ C1] lec:lec_tx_timeout: lec0 [ 388.393770][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 388.427036][T15141] netlink: 'syz.0.2903': attribute type 25 has an invalid length. [ 390.008291][T15157] syzkaller0: entered promiscuous mode [ 390.014696][T15157] syzkaller0: entered allmulticast mode [ 390.068975][T15160] __nla_validate_parse: 2 callbacks suppressed [ 390.068997][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2910'. [ 390.346905][T15179] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2915'. [ 390.379497][T15184] nbd: couldn't find a device at index 0 [ 390.397782][T15181] netlink: 'syz.4.2916': attribute type 25 has an invalid length. [ 390.606900][T15195] syzkaller0: entered promiscuous mode [ 390.613238][T15195] syzkaller0: entered allmulticast mode [ 390.622890][T15197] syzkaller0: entered promiscuous mode [ 390.629809][T15197] syzkaller0: entered allmulticast mode [ 391.263342][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2926'. [ 391.284366][T15213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.298777][T15213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.577706][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 392.367638][T15218] netlink: 'syz.0.2927': attribute type 1 has an invalid length. [ 392.386757][T15218] netlink: 'syz.0.2927': attribute type 1 has an invalid length. [ 392.462855][T15220] syzkaller0: entered promiscuous mode [ 392.482388][T15220] syzkaller0: entered allmulticast mode [ 392.503076][T15224] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2930'. [ 392.521440][T15224] netlink: 'syz.4.2930': attribute type 4 has an invalid length. [ 392.530534][T15224] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2930'. [ 392.599216][T15228] netlink: 'syz.0.2931': attribute type 25 has an invalid length. [ 392.692390][T15236] ip6tnl0: Caught tx_queue_len zero misconfig [ 392.922919][T15246] syzkaller0: entered promiscuous mode [ 392.928687][T15246] syzkaller0: entered allmulticast mode [ 393.075992][T15253] netlink: 'syz.4.2941': attribute type 33 has an invalid length. [ 393.151811][T15256] netlink: 'syz.4.2941': attribute type 1 has an invalid length. [ 393.161371][T15256] netlink: 'syz.4.2941': attribute type 1 has an invalid length. [ 394.141096][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 394.149307][ C1] lec:lec_tx_timeout: lec0 [ 394.613944][T15253] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 394.803877][T15269] netlink: 'syz.1.2947': attribute type 24 has an invalid length. [ 394.839171][T15265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2945'. [ 394.853242][T15273] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2949'. [ 394.978983][T15281] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2949'. [ 394.989513][T15281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2949'. [ 395.006611][T15281] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2949'. [ 395.084018][T15282] __nla_validate_parse: 2 callbacks suppressed [ 395.084040][T15282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2951'. [ 395.104103][T15282] veth0: Caught tx_queue_len zero misconfig [ 395.126615][T15278] syzkaller0: entered promiscuous mode [ 395.134528][T15278] syzkaller0: entered allmulticast mode [ 395.687193][T15311] syzkaller0: entered promiscuous mode [ 395.698221][T15311] syzkaller0: entered allmulticast mode [ 395.882934][T15327] netlink: 'syz.0.2960': attribute type 24 has an invalid length. [ 396.114837][T15338] FAULT_INJECTION: forcing a failure. [ 396.114837][T15338] name failslab, interval 1, probability 0, space 0, times 0 [ 396.128125][T15338] CPU: 0 UID: 0 PID: 15338 Comm: syz.2.2964 Not tainted syzkaller #0 PREEMPT(full) [ 396.128153][T15338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.128164][T15338] Call Trace: [ 396.128172][T15338] [ 396.128180][T15338] dump_stack_lvl+0xe8/0x150 [ 396.128213][T15338] should_fail_ex+0x412/0x560 [ 396.128242][T15338] should_failslab+0xa8/0x100 [ 396.128267][T15338] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 396.128289][T15338] ? __alloc_skb+0x186/0x7d0 [ 396.128315][T15338] ? __alloc_skb+0x1d0/0x7d0 [ 396.128339][T15338] ? __local_bh_enable_ip+0xd0/0x130 [ 396.128369][T15338] __alloc_skb+0x1d0/0x7d0 [ 396.128401][T15338] netlink_sendmsg+0x5d4/0xb40 [ 396.128438][T15338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.128477][T15338] ? aa_sock_msg_perm+0xf1/0x1b0 [ 396.128504][T15338] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 396.128530][T15338] ____sys_sendmsg+0x972/0x9f0 [ 396.128556][T15338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.128582][T15338] ? import_iovec+0x73/0xa0 [ 396.128612][T15338] ___sys_sendmsg+0x2a5/0x360 [ 396.128634][T15338] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.128686][T15338] ? __fget_files+0x2a/0x420 [ 396.128710][T15338] ? __fget_files+0x3a0/0x420 [ 396.128744][T15338] __x64_sys_sendmsg+0x1bd/0x2a0 [ 396.128765][T15338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 396.128792][T15338] ? __pfx_ksys_write+0x10/0x10 [ 396.128822][T15338] do_syscall_64+0x14d/0xf80 [ 396.128839][T15338] ? trace_irq_disable+0x3b/0x150 [ 396.128863][T15338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.128881][T15338] ? clear_bhb_loop+0x40/0x90 [ 396.128903][T15338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.128920][T15338] RIP: 0033:0x7f1602f9c799 [ 396.128938][T15338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.128953][T15338] RSP: 002b:00007f1603d98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.128973][T15338] RAX: ffffffffffffffda RBX: 00007f1603215fa0 RCX: 00007f1602f9c799 [ 396.128986][T15338] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 396.129003][T15338] RBP: 00007f1603d98090 R08: 0000000000000000 R09: 0000000000000000 [ 396.129014][T15338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.129024][T15338] R13: 00007f1603216038 R14: 00007f1603215fa0 R15: 00007ffe42313938 [ 396.129055][T15338] [ 396.945770][T15356] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2967'. [ 398.060078][T15328] syzkaller0: entered promiscuous mode [ 398.065674][T15328] syzkaller0: entered allmulticast mode [ 398.263829][T15356] 0·: renamed from hsr_slave_1 [ 398.279516][T15356] 0·: entered allmulticast mode [ 398.291404][T15356] net_ratelimit: 14 callbacks suppressed [ 398.291426][T15356] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 398.382502][T15374] netlink: 'syz.3.2973': attribute type 1 has an invalid length. [ 398.382939][T15371] netlink: 'syz.2.2972': attribute type 24 has an invalid length. [ 398.402152][T15374] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2973'. [ 399.059629][T15399] syzkaller0: entered promiscuous mode [ 399.065598][T15399] syzkaller0: entered allmulticast mode [ 400.893954][T15434] Bluetooth: MGMT ver 1.23 [ 401.108389][T15436] syzkaller0: entered promiscuous mode [ 401.128177][T15436] syzkaller0: entered allmulticast mode [ 402.981008][T15476] netlink: 'syz.3.2999': attribute type 1 has an invalid length. [ 402.997656][T15476] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2999'. [ 403.008829][T15478] FAULT_INJECTION: forcing a failure. [ 403.008829][T15478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.049187][T15478] CPU: 0 UID: 0 PID: 15478 Comm: syz.4.3002 Not tainted syzkaller #0 PREEMPT(full) [ 403.049218][T15478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.049230][T15478] Call Trace: [ 403.049238][T15478] [ 403.049246][T15478] dump_stack_lvl+0xe8/0x150 [ 403.049280][T15478] should_fail_ex+0x412/0x560 [ 403.049311][T15478] _copy_from_user+0x2d/0xb0 [ 403.049342][T15478] copy_from_sockptr_offset+0x66/0xa0 [ 403.049372][T15478] do_ipt_set_ctl+0x934/0xe00 [ 403.049399][T15478] ? rcu_is_watching+0x15/0xb0 [ 403.049429][T15478] ? trace_contention_end+0x3d/0x150 [ 403.049459][T15478] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 403.049505][T15478] ? __pfx___mutex_lock+0x10/0x10 [ 403.049537][T15478] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 403.049565][T15478] ? __pfx_aa_sk_perm+0x10/0x10 [ 403.049598][T15478] nf_setsockopt+0x26f/0x290 [ 403.049621][T15478] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 403.049650][T15478] do_sock_setsockopt+0x17c/0x1b0 [ 403.049687][T15478] __x64_sys_setsockopt+0x13d/0x1b0 [ 403.049725][T15478] do_syscall_64+0x14d/0xf80 [ 403.049745][T15478] ? trace_irq_disable+0x3b/0x150 [ 403.049772][T15478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.049793][T15478] ? clear_bhb_loop+0x40/0x90 [ 403.049818][T15478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.049838][T15478] RIP: 0033:0x7fc16d59c799 [ 403.049859][T15478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.049877][T15478] RSP: 002b:00007fc16e4a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 403.049899][T15478] RAX: ffffffffffffffda RBX: 00007fc16d815fa0 RCX: 00007fc16d59c799 [ 403.049914][T15478] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 403.049928][T15478] RBP: 00007fc16e4a8090 R08: 00000000000002e0 R09: 0000000000000000 [ 403.049941][T15478] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.049953][T15478] R13: 00007fc16d816038 R14: 00007fc16d815fa0 R15: 00007fff030d5dc8 [ 403.049986][T15478] [ 403.320355][T15482] syzkaller0: entered promiscuous mode [ 403.333949][T15482] syzkaller0: entered allmulticast mode [ 403.525747][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3008'. [ 403.815847][T15510] syzkaller0: entered promiscuous mode [ 403.827116][T15510] syzkaller0: entered allmulticast mode [ 404.207486][T15531] ksmbd: Unknown IPC event: 3, ignore. [ 404.364624][ T7746] lec:lec_start_xmit: lec0:No lecd attached [ 405.727297][T15542] syzkaller0: entered promiscuous mode [ 405.742976][T15542] syzkaller0: entered allmulticast mode [ 405.953184][T15558] syzkaller0: entered promiscuous mode [ 405.971786][T15558] syzkaller0: entered allmulticast mode [ 406.066771][T15564] netlink: 'syz.3.3029': attribute type 29 has an invalid length. [ 406.092867][T15568] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 406.111336][T15569] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 406.134838][T15571] netlink: 'syz.2.3031': attribute type 3 has an invalid length. [ 406.382533][T15579] syzkaller0: entered promiscuous mode [ 406.398860][T15579] syzkaller0: entered allmulticast mode [ 408.235456][T15612] 0·: left allmulticast mode [ 408.310611][T15615] pimreg3: entered allmulticast mode [ 408.446604][T15621] syzkaller0: entered promiscuous mode [ 408.452819][T15621] syzkaller0: entered allmulticast mode [ 408.511267][T15620] syzkaller0: entered promiscuous mode [ 408.517645][T15620] syzkaller0: entered allmulticast mode [ 408.788624][T15638] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3051'. [ 410.061275][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5690 ms [ 410.071085][ C1] lec:lec_tx_timeout: lec0 [ 410.784986][T15672] syzkaller0: entered promiscuous mode [ 410.810947][T15672] syzkaller0: entered allmulticast mode [ 410.848962][T15684] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3062'. [ 412.510873][T15688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3064'. [ 412.617749][T15710] syzkaller0: entered promiscuous mode [ 412.623381][T15710] syzkaller0: entered allmulticast mode [ 412.735148][T15716] netlink: 'syz.3.3069': attribute type 1 has an invalid length. [ 412.753068][T15716] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3069'. [ 412.814156][T15724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3072'. [ 413.075250][T15739] tls_set_device_offload: netdev not found [ 413.129479][T15741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3079'. [ 413.223215][T15746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.248413][T15746] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3081'. [ 413.343598][T15752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3083'. [ 413.373175][T15754] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 413.505040][T15761] netlink: 'syz.1.3086': attribute type 1 has an invalid length. [ 413.525568][T15761] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3086'. [ 413.727104][T15777] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3091'. [ 413.751157][T15777] Unsupported ieee802154 address type: 0 [ 413.950484][T15788] __nla_validate_parse: 1 callbacks suppressed [ 413.950508][T15788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3096'. [ 413.995469][T15788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3096'. [ 414.309675][T15813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3106'. [ 414.486704][T15819] FAULT_INJECTION: forcing a failure. [ 414.486704][T15819] name failslab, interval 1, probability 0, space 0, times 0 [ 414.500558][T15819] CPU: 1 UID: 0 PID: 15819 Comm: syz.1.3107 Not tainted syzkaller #0 PREEMPT(full) [ 414.500578][T15819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.500586][T15819] Call Trace: [ 414.500591][T15819] [ 414.500597][T15819] dump_stack_lvl+0xe8/0x150 [ 414.500620][T15819] should_fail_ex+0x412/0x560 [ 414.500639][T15819] should_failslab+0xa8/0x100 [ 414.500656][T15819] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 414.500670][T15819] ? __alloc_skb+0x1d0/0x7d0 [ 414.500687][T15819] ? __local_bh_enable_ip+0xd0/0x130 [ 414.500706][T15819] __alloc_skb+0x1d0/0x7d0 [ 414.500725][T15819] create_monitor_ctrl_open+0x15c/0x8b0 [ 414.500747][T15819] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 414.500765][T15819] ? bpf_lsm_capable+0x9/0x20 [ 414.500788][T15819] hci_sock_ioctl+0x2f2/0x940 [ 414.500807][T15819] sock_do_ioctl+0x101/0x320 [ 414.500824][T15819] ? __pfx_sock_do_ioctl+0x10/0x10 [ 414.500837][T15819] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 414.500860][T15819] sock_ioctl+0x5c6/0x7f0 [ 414.500876][T15819] ? __pfx_sock_ioctl+0x10/0x10 [ 414.500890][T15819] ? __fget_files+0x2a/0x420 [ 414.500907][T15819] ? __fget_files+0x3a0/0x420 [ 414.500928][T15819] ? __fget_files+0x2a/0x420 [ 414.500950][T15819] ? bpf_lsm_file_ioctl+0x9/0x20 [ 414.500966][T15819] ? __pfx_sock_ioctl+0x10/0x10 [ 414.500979][T15819] __se_sys_ioctl+0xfc/0x170 [ 414.500995][T15819] do_syscall_64+0x14d/0xf80 [ 414.501006][T15819] ? trace_irq_disable+0x3b/0x150 [ 414.501024][T15819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.501037][T15819] ? clear_bhb_loop+0x40/0x90 [ 414.501052][T15819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.501064][T15819] RIP: 0033:0x7fe23199c799 [ 414.501077][T15819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.501088][T15819] RSP: 002b:00007fe23283f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.501113][T15819] RAX: ffffffffffffffda RBX: 00007fe231c15fa0 RCX: 00007fe23199c799 [ 414.501122][T15819] RDX: 0000200000000080 RSI: 00000000800448f0 RDI: 0000000000000004 [ 414.501130][T15819] RBP: 00007fe23283f090 R08: 0000000000000000 R09: 0000000000000000 [ 414.501137][T15819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.501145][T15819] R13: 00007fe231c16038 R14: 00007fe231c15fa0 R15: 00007fffcfc7a328 [ 414.501164][T15819] [ 414.501456][T15819] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 414.867714][T15830] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3110'. [ 414.982443][T15835] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 415.003161][T15836] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3112'. [ 415.014788][T15835] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3112'. [ 415.105217][T15835] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 415.269184][T15850] xt_TPROXY: Can be used only with -p tcp or -p udp [ 415.282628][T15851] IPVS: set_ctl: invalid protocol: 46 10.1.1.1:20001 [ 415.444952][T15861] IPVS: Error joining to the multicast group [ 415.465690][T15861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3120'. [ 415.560441][T15868] netlink: 'syz.1.3125': attribute type 1 has an invalid length. [ 415.624312][T15868] 8021q: adding VLAN 0 to HW filter on device bond9 [ 415.647366][T15875] bond9: (slave geneve2): making interface the new active one [ 415.666501][T15875] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 415.689000][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.704966][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.722593][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.760371][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.856129][T15885] mac80211_hwsim hwsim9 wlan1: Caught tx_queue_len zero misconfig [ 416.211222][T15889] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3133'. [ 416.336501][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3134'. [ 416.383850][T15893] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3134'. [ 416.579040][T15906] syzkaller0: entered promiscuous mode [ 416.590937][T15906] syzkaller0: entered allmulticast mode [ 416.621449][T15908] netlink: 'syz.0.3140': attribute type 11 has an invalid length. [ 416.651266][T15908] netlink: 'syz.0.3140': attribute type 11 has an invalid length. [ 416.659775][ T6733] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.672097][ T6733] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.708670][ T6733] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.718488][ T6733] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.963454][T15940] netlink: 'syz.1.3150': attribute type 5 has an invalid length. [ 417.075985][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.084266][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.119278][T15946] FAULT_INJECTION: forcing a failure. [ 417.119278][T15946] name failslab, interval 1, probability 0, space 0, times 0 [ 417.120692][T15944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.134273][T15946] CPU: 0 UID: 0 PID: 15946 Comm: syz.2.3152 Not tainted syzkaller #0 PREEMPT(full) [ 417.134302][T15946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 417.134313][T15946] Call Trace: [ 417.134321][T15946] [ 417.134329][T15946] dump_stack_lvl+0xe8/0x150 [ 417.134362][T15946] should_fail_ex+0x412/0x560 [ 417.134391][T15946] should_failslab+0xa8/0x100 [ 417.134416][T15946] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 417.134439][T15946] ? __alloc_skb+0x1d0/0x7d0 [ 417.134462][T15946] ? __local_bh_enable_ip+0xd0/0x130 [ 417.134491][T15946] __alloc_skb+0x1d0/0x7d0 [ 417.134516][T15946] ? netlink_ack_tlv_len+0x6c/0x210 [ 417.134543][T15946] netlink_ack+0x146/0xa50 [ 417.134565][T15946] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.134586][T15946] ? __lock_acquire+0x6b5/0x2cf0 [ 417.134622][T15946] netlink_rcv_skb+0x2b6/0x4b0 [ 417.134647][T15946] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.134668][T15946] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 417.134718][T15946] ? down_read+0x272/0x2e0 [ 417.134741][T15946] ? genl_rcv+0xd/0x40 [ 417.134761][T15946] genl_rcv+0x28/0x40 [ 417.134778][T15946] netlink_unicast+0x80f/0x9b0 [ 417.134809][T15946] ? __pfx_netlink_unicast+0x10/0x10 [ 417.134833][T15946] ? netlink_sendmsg+0x650/0xb40 [ 417.134855][T15946] ? skb_put+0x11b/0x210 [ 417.134884][T15946] netlink_sendmsg+0x813/0xb40 [ 417.134918][T15946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.134946][T15946] ? aa_sock_msg_perm+0xf1/0x1b0 [ 417.134972][T15946] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 417.134992][T15946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.135018][T15946] __sys_sendto+0x672/0x710 [ 417.135047][T15946] ? __pfx___sys_sendto+0x10/0x10 [ 417.135112][T15946] ? rcu_is_watching+0x15/0xb0 [ 417.135143][T15946] __x64_sys_sendto+0xde/0x100 [ 417.135183][T15946] do_syscall_64+0x14d/0xf80 [ 417.135200][T15946] ? trace_irq_disable+0x3b/0x150 [ 417.135225][T15946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.135244][T15946] ? clear_bhb_loop+0x40/0x90 [ 417.135268][T15946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.135286][T15946] RIP: 0033:0x7f1602f5cfce [ 417.135305][T15946] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 417.135320][T15946] RSP: 002b:00007f1603d75ea8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 417.135342][T15946] RAX: ffffffffffffffda RBX: 00007f1603d776c0 RCX: 00007f1602f5cfce [ 417.135356][T15946] RDX: 000000000000006c RSI: 00007f1603d75fe0 RDI: 0000000000000004 [ 417.135367][T15946] RBP: 0000000000000000 R08: 00007f1603d75f24 R09: 000000000000000c [ 417.135378][T15946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 417.135389][T15946] R13: 0000000000000000 R14: 00007f1603d75fe0 R15: 0000000000000000 [ 417.135420][T15946] [ 417.145354][T15946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.153460][T15941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.325822][T15949] SET target dimension over the limit! [ 417.523706][T15952] tipc: MTU too low for tipc bearer [ 417.564243][T15954] syzkaller0: entered promiscuous mode [ 417.571376][T15954] syzkaller0: entered allmulticast mode [ 417.647367][T15956] bond9: Unable to set up delay as MII monitoring is disabled [ 417.657477][T15956] bond9 (unregistering): Released all slaves [ 418.044622][T15971] syzkaller0: entered promiscuous mode [ 418.057032][T15971] syzkaller0: entered allmulticast mode [ 418.208894][T15994] SET target dimension over the limit! [ 420.013513][T16010] __nla_validate_parse: 9 callbacks suppressed [ 420.013534][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3171'. [ 420.071490][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3174'. [ 420.237458][T16019] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3175'. [ 420.305498][T16025] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 420.319770][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'. [ 420.356684][T16031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3178'. [ 420.368166][T16025] bond4 (unregistering): Released all slaves [ 420.410756][T16038] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3182'. [ 420.429482][T16035] 8021q: VLANs not supported on sit0 [ 420.474661][T16036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.492895][T16040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3182'. [ 420.506918][T16040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3182'. [ 420.526518][T16040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3182'. [ 420.553526][T16040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3182'. [ 420.902077][ T1014] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.914780][ T1014] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.933616][ T1014] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.947250][ T1014] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.983491][T16060] pim6reg: entered allmulticast mode [ 421.143170][T16080] netlink: 'syz.3.3193': attribute type 10 has an invalid length. [ 421.205918][T16085] netlink: 'syz.3.3195': attribute type 3 has an invalid length. [ 423.576606][ T1014] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 424.035980][T16063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 424.209316][T16099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.385511][T16114] netlink: 'syz.2.3205': attribute type 10 has an invalid length. [ 425.205015][T16155] __nla_validate_parse: 5 callbacks suppressed [ 425.205039][T16155] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3216'. [ 426.076082][T16163] netlink: 'syz.1.3218': attribute type 10 has an invalid length. [ 426.084293][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3218'. [ 427.723559][T16135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.736709][T16155] netlink: 'syz.4.3216': attribute type 1 has an invalid length. [ 427.924714][T16175] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3223'. [ 427.954120][T16175] netlink: 'syz.4.3223': attribute type 1 has an invalid length. [ 427.966947][T16175] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3223'. [ 428.019886][T16182] netlink: 'syz.0.3225': attribute type 25 has an invalid length. [ 428.113918][T16186] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.127369][T16188] netlink: 'syz.4.3227': attribute type 4 has an invalid length. [ 428.250543][T16186] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.268691][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3230'. [ 428.299060][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3232'. [ 428.369064][T16186] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.439912][T16186] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.515050][ T6733] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.541426][ T6733] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.558847][ T6733] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.576877][ T6733] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.220323][T16200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.414756][T16239] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3241'. [ 431.437278][T16232] netlink: 'syz.1.3240': attribute type 25 has an invalid length. [ 431.572254][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3247'. [ 431.599255][T16250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3248'. [ 431.626667][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3248'. [ 431.690045][T16257] syzkaller0: entered promiscuous mode [ 431.695943][T16257] syzkaller0: entered allmulticast mode [ 431.826823][T16268] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3251'. [ 431.934393][T16279] netlink: 'syz.0.3253': attribute type 1 has an invalid length. [ 433.342643][T16300] syzkaller1: entered promiscuous mode [ 433.348620][T16300] syzkaller1: entered allmulticast mode [ 434.824407][T16271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.033979][T16312] syzkaller0: entered promiscuous mode [ 435.049307][T16312] syzkaller0: entered allmulticast mode [ 435.124787][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'. [ 435.156224][T16319] netlink: 'syz.3.3267': attribute type 3 has an invalid length. [ 435.158040][T16324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3269'. [ 435.169781][T16319] netlink: 'syz.3.3267': attribute type 58 has an invalid length. [ 435.208491][T16319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3267'. [ 435.346677][T16332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3271'. [ 435.527683][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.535748][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.579442][T16343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.725949][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'. [ 435.822657][T16362] netlink: 'syz.2.3281': attribute type 1 has an invalid length. [ 436.091693][T16372] netlink: 'syz.4.3286': attribute type 1 has an invalid length. [ 436.105798][T16373] netlink: 'syz.1.3285': attribute type 8 has an invalid length. [ 436.129753][T16373] bond0: entered promiscuous mode [ 436.135339][T16373] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 436.179377][T16373] gretap0: entered promiscuous mode [ 436.200611][T16373] bond0: left promiscuous mode [ 436.229038][T16373] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 436.243731][T16373] gretap0: left promiscuous mode [ 436.588944][ T1014] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.617534][ T1014] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.658345][T16386] syzkaller0: entered promiscuous mode [ 436.678497][T16386] syzkaller0: entered allmulticast mode [ 436.714527][ T1014] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.756761][ T1014] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.827285][T16392] __nla_validate_parse: 4 callbacks suppressed [ 436.827309][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 437.562443][T16427] syzkaller0: entered promiscuous mode [ 437.568571][T16427] syzkaller0: entered allmulticast mode [ 438.733089][T16438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3303'. [ 438.745155][T16433] netlink: 'syz.0.3303': attribute type 8 has an invalid length. [ 440.007328][T16404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 440.240380][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 440.260767][T16455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3307'. [ 440.620914][T16477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3315'. [ 440.724790][T16488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.823645][T16491] IPVS: lc: FWM 3 0x00000003 - no destination available [ 440.840047][T16495] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3319'. [ 440.953438][T16498] netlink: 'syz.3.3320': attribute type 64 has an invalid length. [ 441.058518][T16503] netlink: 'syz.2.3323': attribute type 1 has an invalid length. [ 441.070720][T16503] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3323'. [ 441.172510][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3324'. [ 441.186111][T16509] netlink: 'syz.2.3325': attribute type 1 has an invalid length. [ 441.233457][T16509] 8021q: adding VLAN 0 to HW filter on device bond4 [ 441.255978][T16512] syzkaller0: entered promiscuous mode [ 441.262174][T16512] syzkaller0: entered allmulticast mode [ 441.463168][T16524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3328'. [ 441.543594][T16531] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3331'. [ 441.813263][T16544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3333'. [ 442.017001][T16548] netlink: 'syz.2.3335': attribute type 1 has an invalid length. [ 442.024932][T16548] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3335'. [ 442.212391][T16561] netlink: 'syz.4.3340': attribute type 3 has an invalid length. [ 442.371367][T16566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'. [ 442.408275][T16570] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3343'. [ 442.676135][T16587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3348'. [ 442.708543][T16587] netlink: 'syz.3.3348': attribute type 3 has an invalid length. [ 442.822648][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3349'. [ 442.960728][T16607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3353'. [ 443.013378][T16600] bond6 (unregistering): Released all slaves [ 443.050768][T16607] IPVS: Unknown mcast interface: vcan0 [ 443.066809][T16607] FAULT_INJECTION: forcing a failure. [ 443.066809][T16607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.106596][T16607] CPU: 0 UID: 0 PID: 16607 Comm: syz.2.3353 Not tainted syzkaller #0 PREEMPT(full) [ 443.106626][T16607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 443.106637][T16607] Call Trace: [ 443.106646][T16607] [ 443.106655][T16607] dump_stack_lvl+0xe8/0x150 [ 443.106690][T16607] should_fail_ex+0x412/0x560 [ 443.106723][T16607] _copy_from_user+0x2d/0xb0 [ 443.106755][T16607] kstrtouint_from_user+0xd6/0x180 [ 443.106783][T16607] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 443.106827][T16607] proc_fail_nth_write+0x8e/0x210 [ 443.106855][T16607] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 443.106889][T16607] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 443.106918][T16607] vfs_write+0x29a/0xb90 [ 443.106950][T16607] ? __pfx_vfs_write+0x10/0x10 [ 443.106972][T16607] ? __fget_files+0x2a/0x420 [ 443.107005][T16607] ? __fget_files+0x3a0/0x420 [ 443.107041][T16607] ? __fget_files+0x2a/0x420 [ 443.107078][T16607] ksys_write+0x150/0x270 [ 443.107101][T16607] ? __pfx_ksys_write+0x10/0x10 [ 443.107135][T16607] do_syscall_64+0x14d/0xf80 [ 443.107152][T16607] ? trace_irq_disable+0x3b/0x150 [ 443.107179][T16607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.107198][T16607] ? clear_bhb_loop+0x40/0x90 [ 443.107222][T16607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.107241][T16607] RIP: 0033:0x7f1602f5cfce [ 443.107260][T16607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 443.107277][T16607] RSP: 002b:00007f1603d97fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 443.107299][T16607] RAX: ffffffffffffffda RBX: 00007f1603d986c0 RCX: 00007f1602f5cfce [ 443.107313][T16607] RDX: 0000000000000001 RSI: 00007f1603d980a0 RDI: 0000000000000004 [ 443.107325][T16607] RBP: 00007f1603d98090 R08: 0000000000000000 R09: 0000000000000000 [ 443.107336][T16607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.107347][T16607] R13: 00007f1603216038 R14: 00007f1603215fa0 R15: 00007ffe42313938 [ 443.107381][T16607] [ 443.366638][T16617] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3358'. [ 443.397891][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3357'. [ 443.573784][T16633] netlink: 'syz.1.3363': attribute type 3 has an invalid length. [ 443.582564][T16630] syzkaller0: entered promiscuous mode [ 443.588526][T16630] syzkaller0: entered allmulticast mode [ 443.617292][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3364'. [ 443.930645][T16648] FAULT_INJECTION: forcing a failure. [ 443.930645][T16648] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.944298][T16648] CPU: 1 UID: 0 PID: 16648 Comm: syz.0.3369 Not tainted syzkaller #0 PREEMPT(full) [ 443.944328][T16648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 443.944341][T16648] Call Trace: [ 443.944350][T16648] [ 443.944359][T16648] dump_stack_lvl+0xe8/0x150 [ 443.944394][T16648] should_fail_ex+0x412/0x560 [ 443.944428][T16648] prepare_alloc_pages+0x22a/0x650 [ 443.944461][T16648] __alloc_frozen_pages_noprof+0x12f/0x380 [ 443.944492][T16648] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 443.944522][T16648] ? __pfx_policy_nodemask+0x10/0x10 [ 443.944562][T16648] alloc_pages_mpol+0x232/0x4a0 [ 443.944594][T16648] ___kmalloc_large_node+0x4e/0x150 [ 443.944620][T16648] __kmalloc_large_node_noprof+0x18/0x90 [ 443.944646][T16648] __kmalloc_noprof+0x3e8/0x760 [ 443.944667][T16648] ? start_sync_thread+0xb64/0x2930 [ 443.944692][T16648] ? __kmalloc_noprof+0x1b8/0x760 [ 443.944717][T16648] start_sync_thread+0xb64/0x2930 [ 443.944758][T16648] ? __pfx_sync_thread_backup+0x10/0x10 [ 443.944793][T16648] ? __pfx_start_sync_thread+0x10/0x10 [ 443.944819][T16648] ? __lock_acquire+0x6b5/0x2cf0 [ 443.944877][T16648] do_ip_vs_set_ctl+0x49d/0xaf0 [ 443.944913][T16648] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 443.944963][T16648] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 443.944993][T16648] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 443.945031][T16648] ? __pfx_aa_sk_perm+0x10/0x10 [ 443.945064][T16648] nf_setsockopt+0x26f/0x290 [ 443.945086][T16648] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 443.945114][T16648] do_sock_setsockopt+0x17c/0x1b0 [ 443.945149][T16648] __x64_sys_setsockopt+0x13d/0x1b0 [ 443.945183][T16648] do_syscall_64+0x14d/0xf80 [ 443.945205][T16648] ? trace_irq_disable+0x3b/0x150 [ 443.945231][T16648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.945251][T16648] ? clear_bhb_loop+0x40/0x90 [ 443.945274][T16648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.945293][T16648] RIP: 0033:0x7ff10439c799 [ 443.945312][T16648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.945328][T16648] RSP: 002b:00007ff105270028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 443.945351][T16648] RAX: ffffffffffffffda RBX: 00007ff104615fa0 RCX: 00007ff10439c799 [ 443.945365][T16648] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 443.945376][T16648] RBP: 00007ff105270090 R08: 0000000000000018 R09: 0000000000000000 [ 443.945388][T16648] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 443.945399][T16648] R13: 00007ff104616038 R14: 00007ff104615fa0 R15: 00007fffe8e31ac8 [ 443.945431][T16648] [ 444.029636][T16660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3373'. [ 444.232106][T16665] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 444.399530][T16673] netlink: 'syz.0.3379': attribute type 3 has an invalid length. [ 444.407984][T16673] netlink: 'syz.0.3379': attribute type 3 has an invalid length. [ 444.418299][T16667] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 444.571752][T16686] netlink: 'syz.0.3383': attribute type 21 has an invalid length. [ 444.690191][T16682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 444.821979][T16699] syzkaller0: entered promiscuous mode [ 444.833471][T16699] syzkaller0: entered allmulticast mode [ 445.622854][T16743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.776437][T16764] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 445.927355][T16769] syzkaller0: entered promiscuous mode [ 445.933157][T16769] syzkaller0: entered allmulticast mode [ 446.056394][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 446.064694][ C1] lec:lec_tx_timeout: lec0 [ 446.298283][T16787] syzkaller0: entered promiscuous mode [ 446.321351][T16787] syzkaller0: entered allmulticast mode [ 446.525086][T16790] sctp: [Deprecated]: syz.3.3412 (pid 16790) Use of int in max_burst socket option deprecated. [ 446.525086][T16790] Use struct sctp_assoc_value instead [ 446.600099][T16811] validate_nla: 1 callbacks suppressed [ 446.600120][T16811] netlink: 'syz.1.3419': attribute type 1 has an invalid length. [ 446.619707][T16808] bond5: (slave bond_slave_1): Device is not our slave [ 446.627192][T16808] bond5: option active_slave: invalid value (bond_slave_1) [ 446.636063][T16808] bond5 (unregistering): Released all slaves [ 449.325535][T16795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.629615][T16841] syzkaller0: entered promiscuous mode [ 449.635341][T16841] syzkaller0: entered allmulticast mode [ 449.822190][T16852] __nla_validate_parse: 14 callbacks suppressed [ 449.822212][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3430'. [ 450.005275][T16858] sock: sock_set_timeout: `syz.1.3433' (pid 16858) tries to set negative timeout [ 450.086041][T16852] vlan3: entered allmulticast mode [ 450.091447][T16852] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 450.366430][T16875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3437'. [ 450.540491][T16885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3440'. [ 450.704672][T16889] syzkaller0: entered promiscuous mode [ 450.710495][T16889] syzkaller0: entered allmulticast mode [ 451.164839][T16896] sctp: [Deprecated]: syz.1.3446 (pid 16896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.164839][T16896] Use struct sctp_sack_info instead [ 451.245389][T16898] netlink: 'syz.1.3447': attribute type 64 has an invalid length. [ 451.258231][T16898] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3447'. [ 451.492384][T16906] openvswitch: netlink: EtherType 50a is less than min 600 [ 451.666321][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3452'. [ 453.223540][T16864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.234011][T16907] netlink: 'syz.1.3451': attribute type 1 has an invalid length. [ 453.552751][T16929] netlink: 'syz.4.3460': attribute type 1 has an invalid length. [ 453.554921][T16928] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3459'. [ 453.576650][T16929] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3460'. [ 453.680003][T16933] syzkaller1: entered promiscuous mode [ 453.685715][T16933] syzkaller1: entered allmulticast mode [ 453.789971][T16942] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3466'. [ 454.001154][T16945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.022566][T16959] syzkaller1: entered promiscuous mode [ 454.038971][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3465'. [ 454.051344][T16959] syzkaller1: entered allmulticast mode [ 454.145167][T16964] syzkaller0: entered promiscuous mode [ 454.159093][T16964] syzkaller0: entered allmulticast mode [ 454.353651][T16976] IPVS: Error joining to the multicast group [ 454.685426][T16996] syzkaller0: entered promiscuous mode [ 454.728879][T16996] syzkaller0: entered allmulticast mode [ 454.893461][T17008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3486'. [ 454.926575][T17008] IPVS: Unknown mcast interface: vcan0 [ 455.034389][T17013] sctp: [Deprecated]: syz.4.3488 (pid 17013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 455.034389][T17013] Use struct sctp_sack_info instead [ 455.052727][T17014] sctp: [Deprecated]: syz.4.3488 (pid 17014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 455.052727][T17014] Use struct sctp_sack_info instead [ 455.074308][T17012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3488'. [ 455.093471][T17012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3488'. [ 455.112753][T17016] netlink: 'syz.3.3489': attribute type 1 has an invalid length. [ 455.127897][T17016] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3489'. [ 455.369781][T17027] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3493'. [ 455.491204][T17033] netlink: 'syz.2.3498': attribute type 3 has an invalid length. [ 455.523660][T17035] tipc: Enabled bearer , priority 0 [ 455.532170][T17035] syzkaller0: entered promiscuous mode [ 455.538375][T17035] syzkaller0: entered allmulticast mode [ 455.570495][T17038] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3497'. [ 455.580488][ T6736] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 455.591780][T17035] tipc: Resetting bearer [ 455.646641][T17034] tipc: Resetting bearer [ 455.702678][T17034] tipc: Disabling bearer [ 455.757899][T17049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3501'. [ 455.969364][T17049] bond5: entered promiscuous mode [ 455.999690][T17049] 8021q: adding VLAN 0 to HW filter on device bond5 [ 456.067533][T17050] bridge10: entered promiscuous mode [ 456.085434][T17050] bond5: (slave bridge10): Enslaving as an active interface with an up link [ 456.098626][T17065] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 456.172783][T17068] syzkaller0: entered promiscuous mode [ 456.189475][T17068] syzkaller0: entered allmulticast mode [ 456.233767][T17065] vlan2: entered promiscuous mode [ 456.252356][T17072] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3506'. [ 456.256643][T17065] bridge0: entered promiscuous mode [ 456.330898][T17066] syzkaller0: entered promiscuous mode [ 456.340935][T17066] syzkaller0: entered allmulticast mode [ 456.533788][T17083] netlink: 'syz.4.3509': attribute type 1 has an invalid length. [ 456.556569][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3509'. [ 456.566240][T17083] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3509'. [ 456.711044][T13187] IPVS: starting estimator thread 0... [ 456.722426][T17091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.826636][T17092] IPVS: using max 28 ests per chain, 67200 per kthread [ 458.067037][T17081] FAULT_INJECTION: forcing a failure. [ 458.067037][T17081] name failslab, interval 1, probability 0, space 0, times 0 [ 458.080409][T17081] CPU: 1 UID: 0 PID: 17081 Comm: syz.0.3508 Not tainted syzkaller #0 PREEMPT(full) [ 458.080429][T17081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.080437][T17081] Call Trace: [ 458.080442][T17081] [ 458.080447][T17081] dump_stack_lvl+0xe8/0x150 [ 458.080471][T17081] should_fail_ex+0x412/0x560 [ 458.080488][T17081] ? sock_alloc_inode+0x28/0xc0 [ 458.080504][T17081] should_failslab+0xa8/0x100 [ 458.080522][T17081] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 458.080540][T17081] ? __pfx_sock_alloc_inode+0x10/0x10 [ 458.080554][T17081] sock_alloc_inode+0x28/0xc0 [ 458.080568][T17081] alloc_inode+0x6a/0x1b0 [ 458.080586][T17081] __sock_create+0x12d/0x9d0 [ 458.080608][T17081] udp_sock_create4+0xca/0x480 [ 458.080623][T17081] ? __pfx_udp_sock_create4+0x10/0x10 [ 458.080639][T17081] ? wg_socket_init+0x1ae/0xef0 [ 458.080658][T17081] wg_socket_init+0x67c/0xef0 [ 458.080674][T17081] ? __pfx_wg_socket_init+0x10/0x10 [ 458.080688][T17081] ? __mutex_lock+0x319/0x1300 [ 458.080701][T17081] ? __pfx_wg_receive+0x10/0x10 [ 458.080720][T17081] ? ib_device_get_by_netdev+0x480/0x4f0 [ 458.080738][T17081] ? wg_open+0x227/0x420 [ 458.080749][T17081] ? hsr_netdev_notify+0x296/0xce0 [ 458.080761][T17081] ? ib_device_get_by_netdev+0x81/0x4f0 [ 458.080781][T17081] ? __pfx_hsr_netdev_notify+0x10/0x10 [ 458.080793][T17081] ? udp_tunnel_nic_netdevice_event+0x1ac/0x17d0 [ 458.080817][T17081] wg_open+0x24f/0x420 [ 458.080831][T17081] __dev_open+0x44d/0x830 [ 458.080850][T17081] ? __pfx___dev_open+0x10/0x10 [ 458.080864][T17081] ? __dev_change_flags+0x1b0/0x690 [ 458.080884][T17081] ? __local_bh_enable_ip+0xd0/0x130 [ 458.080902][T17081] __dev_change_flags+0x1f7/0x690 [ 458.080924][T17081] ? __pfx___dev_change_flags+0x10/0x10 [ 458.080944][T17081] ? validate_linkmsg+0x69c/0x950 [ 458.080964][T17081] netif_change_flags+0x88/0x1a0 [ 458.080987][T17081] do_setlink+0xf82/0x4590 [ 458.081006][T17081] ? trace_sched_exit_tp+0x3a/0x150 [ 458.081027][T17081] ? __pfx_do_setlink+0x10/0x10 [ 458.081043][T17081] ? __lock_acquire+0x6b5/0x2cf0 [ 458.081067][T17081] ? do_raw_spin_lock+0x12b/0x2f0 [ 458.081082][T17081] ? do_raw_spin_lock+0x12b/0x2f0 [ 458.081102][T17081] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 458.081120][T17081] ? lockdep_hardirqs_on+0x7a/0x110 [ 458.081139][T17081] ? __mutex_lock+0xd09/0x1300 [ 458.081154][T17081] ? __mutex_lock+0x5ac/0x1300 [ 458.081168][T17081] ? rtnl_newlink+0x8a1/0x1be0 [ 458.081187][T17081] ? __pfx___mutex_lock+0x10/0x10 [ 458.081211][T17081] ? full_name_hash+0x92/0xe0 [ 458.081234][T17081] rtnl_newlink+0x15a9/0x1be0 [ 458.081257][T17081] ? __pfx_rtnl_newlink+0x10/0x10 [ 458.081285][T17081] ? __lock_acquire+0x6b5/0x2cf0 [ 458.081302][T17081] ? __lock_acquire+0x6b5/0x2cf0 [ 458.081324][T17081] ? unwind_next_frame+0xa5/0x23c0 [ 458.081356][T17081] ? __lock_acquire+0x6b5/0x2cf0 [ 458.081372][T17081] ? is_bpf_text_address+0x26/0x2b0 [ 458.081387][T17081] ? kernel_text_address+0xa5/0xe0 [ 458.081417][T17081] ? __pfx_rtnl_newlink+0x10/0x10 [ 458.081433][T17081] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 458.081451][T17081] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 458.081467][T17081] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 458.081486][T17081] ? __lock_acquire+0x6b5/0x2cf0 [ 458.081507][T17081] netlink_rcv_skb+0x232/0x4b0 [ 458.081524][T17081] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 458.081541][T17081] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 458.081565][T17081] ? netlink_deliver_tap+0x2e/0x1b0 [ 458.081586][T17081] netlink_unicast+0x80f/0x9b0 [ 458.081606][T17081] ? __pfx_netlink_unicast+0x10/0x10 [ 458.081621][T17081] ? netlink_sendmsg+0x650/0xb40 [ 458.081636][T17081] ? skb_put+0x11b/0x210 [ 458.081656][T17081] netlink_sendmsg+0x813/0xb40 [ 458.081678][T17081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.081696][T17081] ? aa_sock_msg_perm+0xf1/0x1b0 [ 458.081713][T17081] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 458.081729][T17081] ____sys_sendmsg+0x972/0x9f0 [ 458.081747][T17081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.081765][T17081] ? import_iovec+0x73/0xa0 [ 458.081785][T17081] ___sys_sendmsg+0x2a5/0x360 [ 458.081801][T17081] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.081835][T17081] ? __fget_files+0x2a/0x420 [ 458.081852][T17081] ? __fget_files+0x3a0/0x420 [ 458.081875][T17081] __x64_sys_sendmsg+0x1bd/0x2a0 [ 458.081889][T17081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 458.081912][T17081] ? __pfx_ksys_write+0x10/0x10 [ 458.081933][T17081] do_syscall_64+0x14d/0xf80 [ 458.081945][T17081] ? trace_irq_disable+0x3b/0x150 [ 458.081962][T17081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.081974][T17081] ? clear_bhb_loop+0x40/0x90 [ 458.081989][T17081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.082001][T17081] RIP: 0033:0x7ff10439c799 [ 458.082015][T17081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.082026][T17081] RSP: 002b:00007ff105270028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.082040][T17081] RAX: ffffffffffffffda RBX: 00007ff104615fa0 RCX: 00007ff10439c799 [ 458.082049][T17081] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 458.082057][T17081] RBP: 00007ff105270090 R08: 0000000000000000 R09: 0000000000000000 [ 458.082064][T17081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.082072][T17081] R13: 00007ff104616038 R14: 00007ff104615fa0 R15: 00007fffe8e31ac8 [ 458.082091][T17081] [ 458.082098][T17081] socket: no more sockets [ 458.627538][T17081] wireguard: wg1: Could not create IPv4 socket [ 458.676157][T17084] hsr_slave_0: left promiscuous mode [ 458.711575][T17084] hsr_slave_1: left promiscuous mode [ 458.926873][T17087] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 458.933195][T17087] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 458.954451][T17100] tipc: Enabled bearer , priority 0 [ 458.976143][T17100] syzkaller0: entered promiscuous mode [ 458.990289][T17100] syzkaller0: entered allmulticast mode [ 459.014234][T17087] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 459.021663][T17110] netlink: 'syz.4.3516': attribute type 1 has an invalid length. [ 459.036571][T17087] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 459.057100][T17087] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 459.075326][T17087] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 459.111924][T17087] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 459.123631][T17087] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 459.212347][T17110] bond4: entered promiscuous mode [ 459.231860][T17110] 8021q: adding VLAN 0 to HW filter on device bond4 [ 459.275064][T17104] tipc: Resetting bearer [ 459.334525][T17119] bond4: (slave bridge12): making interface the new active one [ 459.343125][T17119] bridge12: entered promiscuous mode [ 459.355432][T17119] bond4: (slave bridge12): Enslaving as an active interface with an up link [ 459.499972][T17099] tipc: Resetting bearer [ 459.539888][T17099] tipc: Disabling bearer [ 459.862324][T17149] syzkaller0: entered promiscuous mode [ 459.866869][T17148] netlink: 'syz.1.3524': attribute type 13 has an invalid length. [ 459.874391][T17149] syzkaller0: entered allmulticast mode [ 459.901164][ T3553] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.922713][ T3553] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.931637][T17156] netlink: 'syz.1.3524': attribute type 1 has an invalid length. [ 459.954243][ T3553] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.975103][T17156] __nla_validate_parse: 13 callbacks suppressed [ 459.975125][T17156] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3524'. [ 460.030105][T17156] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3524'. [ 460.165127][ T3553] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.201587][T17167] netlink: 'syz.2.3526': attribute type 3 has an invalid length. [ 460.366015][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3527'. [ 462.194890][T17180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3528'. [ 462.204158][T17180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3528'. [ 462.213789][T17180] netlink: 'syz.2.3528': attribute type 3 has an invalid length. [ 462.292827][T17211] gre0: entered promiscuous mode [ 462.308410][T17211] gre0: entered allmulticast mode [ 462.570935][T17228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3532'. [ 462.607059][T17231] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3533'. [ 462.634940][T17231] netlink: 508 bytes leftover after parsing attributes in process `syz.2.3533'. [ 462.696888][T17231] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3533'. [ 462.716697][T17231] netlink: 1532 bytes leftover after parsing attributes in process `syz.2.3533'. [ 462.906456][T17245] netlink: 'syz.3.3537': attribute type 3 has an invalid length. [ 463.271067][T17267] netlink: 'syz.4.3544': attribute type 8 has an invalid length. [ 463.714941][T17291] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.845059][T17291] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.978591][T17291] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.110725][T17291] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.332523][T17323] FAULT_INJECTION: forcing a failure. [ 464.332523][T17323] name failslab, interval 1, probability 0, space 0, times 0 [ 464.347494][T17323] CPU: 0 UID: 0 PID: 17323 Comm: syz.1.3559 Not tainted syzkaller #0 PREEMPT(full) [ 464.347527][T17323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 464.347540][T17323] Call Trace: [ 464.347548][T17323] [ 464.347556][T17323] dump_stack_lvl+0xe8/0x150 [ 464.347591][T17323] should_fail_ex+0x412/0x560 [ 464.347623][T17323] should_failslab+0xa8/0x100 [ 464.347664][T17323] __kmalloc_cache_noprof+0x88/0x660 [ 464.347686][T17323] ? lockdep_hardirqs_on+0x7a/0x110 [ 464.347722][T17323] ? __request_module+0x2d0/0x660 [ 464.347756][T17323] __request_module+0x2d0/0x660 [ 464.347787][T17323] ? __pfx___request_module+0x10/0x10 [ 464.347830][T17323] ? security_capable+0x7e/0x2c0 [ 464.347859][T17323] ? dev_load+0x21/0x1f0 [ 464.347886][T17323] dev_load+0x190/0x1f0 [ 464.347913][T17323] dev_ioctl+0x837/0x1150 [ 464.347953][T17323] sock_ioctl+0x75f/0x7f0 [ 464.347980][T17323] ? __pfx_sock_ioctl+0x10/0x10 [ 464.348006][T17323] ? __fget_files+0x3a0/0x420 [ 464.348033][T17323] ? __fget_files+0x2a/0x420 [ 464.348063][T17323] ? bpf_lsm_file_ioctl+0x9/0x20 [ 464.348088][T17323] ? __pfx_sock_ioctl+0x10/0x10 [ 464.348110][T17323] __se_sys_ioctl+0xfc/0x170 [ 464.348137][T17323] do_syscall_64+0x14d/0xf80 [ 464.348155][T17323] ? trace_irq_disable+0x3b/0x150 [ 464.348181][T17323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.348202][T17323] ? clear_bhb_loop+0x40/0x90 [ 464.348227][T17323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.348246][T17323] RIP: 0033:0x7fe23199c799 [ 464.348267][T17323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.348284][T17323] RSP: 002b:00007fe23283f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.348308][T17323] RAX: ffffffffffffffda RBX: 00007fe231c15fa0 RCX: 00007fe23199c799 [ 464.348323][T17323] RDX: 0000200000001440 RSI: 00000000000089ff RDI: 0000000000000003 [ 464.348337][T17323] RBP: 00007fe23283f090 R08: 0000000000000000 R09: 0000000000000000 [ 464.348348][T17323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.348359][T17323] R13: 00007fe231c16038 R14: 00007fe231c15fa0 R15: 00007fffcfc7a328 [ 464.348392][T17323] [ 464.710706][ T35] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.758876][ T35] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.814392][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.853277][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.031415][T17333] syzkaller0: entered promiscuous mode [ 465.037673][T17333] syzkaller0: entered allmulticast mode [ 465.088158][T17344] openvswitch: netlink: Unknown key attributes 2 [ 465.228937][T17355] __nla_validate_parse: 11 callbacks suppressed [ 465.228958][T17355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3564'. [ 465.427884][T17369] raw_sendmsg: syz.2.3568 forgot to set AF_INET. Fix it! [ 465.449643][T17367] netlink: 'syz.0.3566': attribute type 1 has an invalid length. [ 465.466762][T17367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3566'. [ 465.496662][T17367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3566'. [ 466.994283][T17351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3564'. [ 467.022593][T17377] vlan2: entered promiscuous mode [ 467.267627][T17396] syzkaller0: entered promiscuous mode [ 467.273250][T17396] syzkaller0: entered allmulticast mode [ 467.343593][T17403] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3579'. [ 467.378471][T17401] bond6: option resend_igmp: invalid value (32767) [ 467.385228][T17401] bond6: option resend_igmp: allowed values 0 - 255 [ 467.396743][T17401] bond6 (unregistering): Released all slaves [ 467.427327][T17400] tipc: Enabled bearer , priority 0 [ 467.441556][T17413] tipc: Disabling bearer [ 467.644882][T17425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3583'. [ 467.759527][T17435] openvswitch: netlink: Unknown key attributes 2 [ 467.773615][T17436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3583'. [ 467.798396][T17438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3587'. [ 467.861577][T17436] bridge_slave_1: left allmulticast mode [ 467.868058][T17436] bridge_slave_1: left promiscuous mode [ 467.874322][T17436] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.885686][T17436] bridge_slave_0: left allmulticast mode [ 467.892511][T17436] bridge_slave_0: left promiscuous mode [ 467.898676][T17436] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.908190][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3586'. [ 467.924078][T17436] bridge0 (unregistering): left allmulticast mode [ 467.987460][T17438] 8021q: adding VLAN 0 to HW filter on device bond9 [ 467.994831][ T7746] lec:lec_start_xmit: lec0:No lecd attached [ 467.999787][T17445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3586'. [ 468.017964][T17447] macvlan2: entered promiscuous mode [ 468.026785][T17447] macvlan2: entered allmulticast mode [ 468.432728][T17471] syzkaller0: entered promiscuous mode [ 468.438752][T17471] syzkaller0: entered allmulticast mode [ 468.796235][T17493] syzkaller0: entered promiscuous mode [ 468.805305][T17493] syzkaller0: entered allmulticast mode [ 468.857105][T17492] syzkaller1: entered promiscuous mode [ 468.862907][T17492] syzkaller1: entered allmulticast mode [ 468.980660][T17503] syzkaller0: entered promiscuous mode [ 468.988249][T17503] syzkaller0: entered allmulticast mode [ 469.064438][T17505] vlan4: entered promiscuous mode [ 469.088908][T17505] bridge0: entered promiscuous mode [ 469.131289][T17519] openvswitch: netlink: Unknown key attributes 2 [ 469.815352][T17547] netlink: 'syz.0.3621': attribute type 1 has an invalid length. [ 469.911718][T17560] IPVS: Unknown mcast interface: vcan0 [ 469.953325][T17563] tipc: Enabling of bearer rejected, failed to enable media [ 470.046030][T17568] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 470.227555][T17576] vlan3: left allmulticast mode [ 470.256704][T17576] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 470.815706][T17616] openvswitch: netlink: Unknown key attributes 2 [ 470.846563][T17619] __nla_validate_parse: 6 callbacks suppressed [ 470.846587][T17619] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3644'. [ 470.878240][T17622] netlink: 'syz.1.3643': attribute type 21 has an invalid length. [ 470.887302][T17622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3643'. [ 470.904190][T17619] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3644'. [ 470.915353][T17626] netlink: 'syz.4.3645': attribute type 1 has an invalid length. [ 470.917654][T17619] netlink: 'syz.3.3644': attribute type 6 has an invalid length. [ 470.933875][T17626] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3645'. [ 470.937406][T17619] netlink: 'syz.3.3644': attribute type 5 has an invalid length. [ 470.956518][T17627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3640'. [ 470.966971][T17627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3640'. [ 470.974937][T17619] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3644'. [ 471.037631][T17629] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3646'. [ 471.064248][T17629] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3646'. [ 471.087626][T17632] xt_l2tp: invalid flags combination: 0 [ 471.275559][T17638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3650'. [ 471.582171][T17661] netlink: 'syz.1.3657': attribute type 1 has an invalid length. [ 472.123733][T17699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.280217][T17707] openvswitch: netlink: Unknown key attributes 2 [ 472.816226][T17737] netlink: 'syz.1.3680': attribute type 1 has an invalid length. [ 472.859872][T17737] bond10: entered promiscuous mode [ 472.865588][T17737] 8021q: adding VLAN 0 to HW filter on device bond10 [ 472.888106][T17740] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.985518][T17734] bond10: (slave bridge0): making interface the new active one [ 472.996282][T17734] bridge0: entered promiscuous mode [ 473.006300][T17734] bridge0: left promiscuous mode [ 473.016420][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 473.024878][ C1] lec:lec_tx_timeout: lec0 [ 473.071277][T17740] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.073747][T17749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.185142][T17740] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.250723][T17756] syzkaller1: entered promiscuous mode [ 473.262459][T17756] syzkaller1: entered allmulticast mode [ 473.278529][T17740] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.328610][T17758] ip6gre1: entered promiscuous mode [ 473.342363][T17758] netlink: 'syz.3.3689': attribute type 83 has an invalid length. [ 473.431640][ T35] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.471127][ T35] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.495400][T17765] veth16: entered promiscuous mode [ 473.538593][T17771] netlink: 'syz.1.3694': attribute type 23 has an invalid length. [ 473.558232][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.608620][ T35] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.770254][T17782] openvswitch: netlink: Unknown key attributes 2 [ 474.038613][T17801] netlink: 'syz.0.3704': attribute type 1 has an invalid length. [ 474.117177][T17803] tipc: Enabling of bearer rejected, failed to enable media [ 474.178686][T17806] syzkaller0: entered promiscuous mode [ 474.184910][T17806] syzkaller0: entered allmulticast mode [ 474.268460][ T6733] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 474.511843][T17832] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 474.523725][T17832] bond10 (unregistering): Released all slaves [ 474.773392][T17842] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 475.007595][T17807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.156185][T17853] tipc: Enabling of bearer rejected, failed to enable media [ 475.174816][T17857] netlink: 'syz.0.3720': attribute type 4 has an invalid length. [ 475.189004][T17856] syzkaller0: entered promiscuous mode [ 475.195343][T17856] syzkaller0: entered allmulticast mode [ 475.281315][T17859] syzkaller0: entered promiscuous mode [ 475.289533][T17859] syzkaller0: entered allmulticast mode [ 475.390952][T17865] openvswitch: netlink: Unknown key attributes 2 [ 475.690252][T17889] tipc: Enabling of bearer rejected, failed to enable media [ 475.867864][T17900] syzkaller0: entered promiscuous mode [ 475.883666][T17900] syzkaller0: entered allmulticast mode [ 475.913039][T17903] netlink: 'syz.1.3739': attribute type 11 has an invalid length. [ 475.925160][T17903] __nla_validate_parse: 20 callbacks suppressed [ 475.925181][T17903] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3739'. [ 476.013789][T17911] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3741'. [ 476.022067][T17912] netlink: 'syz.1.3742': attribute type 10 has an invalid length. [ 476.052126][T17912] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 476.130578][T17920] openvswitch: netlink: IP tunnel dst address not specified [ 476.143288][T17920] netlink: 'syz.0.3743': attribute type 11 has an invalid length. [ 476.165994][T17920] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3743'. [ 476.449459][T17926] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3745'. [ 476.493048][T17930] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3746'. [ 476.552142][T17934] ip6t_REJECT: ECHOREPLY is not supported [ 476.967621][T17956] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3756'. [ 477.003478][T17959] openvswitch: netlink: Unknown key attributes 2 [ 477.077876][T17962] lo: Caught tx_queue_len zero misconfig [ 477.111255][T17962] netlink: 'syz.1.3758': attribute type 2 has an invalid length. [ 477.111304][T17968] netlink: 'syz.2.3759': attribute type 11 has an invalid length. [ 477.122425][T17966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3755'. [ 477.128175][T17968] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3759'. [ 477.147716][T17962] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3758'. [ 477.193694][T17966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3755'. [ 477.284596][T17973] netlink: 'syz.4.3763': attribute type 1 has an invalid length. [ 477.350658][T17966] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.433780][T17978] ip6gre1: left promiscuous mode [ 477.448862][T17978] veth16: left promiscuous mode [ 477.467776][T17966] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.551992][T17966] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.639818][T17966] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.717261][T17986] xt_CT: No such helper "pptp" [ 477.841073][ T35] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.849700][ T35] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.898581][ T35] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.912345][ T35] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.018670][T18003] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 478.076123][T18003] bond6: (slave lo): Enslaving as an active interface with an up link [ 478.085257][T18003] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 478.414349][T18024] x_tables: duplicate underflow at hook 1 [ 478.434601][T18024] x_tables: ip_tables: osf match: only valid for protocol 6 [ 478.623244][T18035] openvswitch: netlink: Unknown key attributes 2 [ 478.771463][T18049] netlink: 'syz.3.3785': attribute type 9 has an invalid length. [ 478.832963][T18051] netlink: 'syz.0.3787': attribute type 4 has an invalid length. [ 478.910172][T18057] netlink: 'syz.1.3788': attribute type 2 has an invalid length. [ 480.024922][T18123] netlink: 'syz.1.3802': attribute type 1 has an invalid length. [ 480.387471][T18149] openvswitch: netlink: Unknown key attributes 2 [ 480.705388][T18164] netlink: 'syz.0.3811': attribute type 8 has an invalid length. [ 481.194563][T18184] FAULT_INJECTION: forcing a failure. [ 481.194563][T18184] name failslab, interval 1, probability 0, space 0, times 0 [ 481.226782][T18184] CPU: 0 UID: 0 PID: 18184 Comm: syz.0.3817 Not tainted syzkaller #0 PREEMPT(full) [ 481.226914][T18184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 481.226926][T18184] Call Trace: [ 481.226935][T18184] [ 481.226943][T18184] dump_stack_lvl+0xe8/0x150 [ 481.226978][T18184] should_fail_ex+0x412/0x560 [ 481.227011][T18184] should_failslab+0xa8/0x100 [ 481.227040][T18184] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 481.227064][T18184] ? __alloc_skb+0x1d0/0x7d0 [ 481.227091][T18184] ? __local_bh_enable_ip+0xd0/0x130 [ 481.227123][T18184] __alloc_skb+0x1d0/0x7d0 [ 481.227158][T18184] netlink_dump+0x1ef/0xe80 [ 481.227200][T18184] ? __pfx_netlink_dump+0x10/0x10 [ 481.227245][T18184] ? kmem_cache_free+0x187/0x630 [ 481.227268][T18184] ? netlink_recvmsg+0x5d6/0xa50 [ 481.227302][T18184] netlink_recvmsg+0x690/0xa50 [ 481.227340][T18184] ? __pfx_netlink_recvmsg+0x10/0x10 [ 481.227385][T18184] ? __pfx_netlink_recvmsg+0x10/0x10 [ 481.227415][T18184] sock_recvmsg_nosec+0x10c/0x140 [ 481.227445][T18184] ____sys_recvmsg+0x3e3/0x4a0 [ 481.227478][T18184] ? __pfx_____sys_recvmsg+0x10/0x10 [ 481.227519][T18184] ? import_iovec+0x73/0xa0 [ 481.227554][T18184] ___sys_recvmsg+0x215/0x590 [ 481.227573][T18184] ? __lock_acquire+0x6b5/0x2cf0 [ 481.227606][T18184] ? __pfx____sys_recvmsg+0x10/0x10 [ 481.227679][T18184] do_recvmmsg+0x334/0x800 [ 481.227712][T18184] ? __pfx_do_recvmmsg+0x10/0x10 [ 481.227749][T18184] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 481.227770][T18184] ? __rcu_read_unlock+0x83/0xe0 [ 481.227825][T18184] __x64_sys_recvmmsg+0x198/0x250 [ 481.227851][T18184] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 481.227887][T18184] do_syscall_64+0x14d/0xf80 [ 481.227906][T18184] ? trace_irq_disable+0x3b/0x150 [ 481.227933][T18184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.227953][T18184] ? clear_bhb_loop+0x40/0x90 [ 481.227982][T18184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.228008][T18184] RIP: 0033:0x7ff10439c799 [ 481.228028][T18184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.228046][T18184] RSP: 002b:00007ff105270028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 481.228068][T18184] RAX: ffffffffffffffda RBX: 00007ff104615fa0 RCX: 00007ff10439c799 [ 481.228083][T18184] RDX: 03ffffffffffff27 RSI: 0000200000002b80 RDI: 0000000000000003 [ 481.228097][T18184] RBP: 00007ff105270090 R08: 0000000000000000 R09: 0000000000000000 [ 481.228108][T18184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.228120][T18184] R13: 00007ff104616038 R14: 00007ff104615fa0 R15: 00007fffe8e31ac8 [ 481.228155][T18184] [ 481.638244][T18194] __nla_validate_parse: 17 callbacks suppressed [ 481.638268][T18194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3820'. [ 481.793642][T18205] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3823'. [ 482.012017][T18219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3827'. [ 482.060986][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3829'. [ 482.095077][T18225] openvswitch: netlink: Unknown key attributes 2 [ 482.182199][T18231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3830'. [ 482.215299][T18233] netlink: 'syz.0.3831': attribute type 4 has an invalid length. [ 482.228638][T18231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3830'. [ 482.733036][T18261] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3838'. [ 482.739384][T18258] syzkaller1: entered promiscuous mode [ 482.749091][T18258] syzkaller1: entered allmulticast mode [ 482.766815][T18261] IPVS: Unknown mcast interface: vcan0 [ 483.209100][T18282] tipc: Enabled bearer , priority 0 [ 483.218743][T18282] syzkaller0: entered promiscuous mode [ 483.225575][T18282] syzkaller0: entered allmulticast mode [ 483.308548][T18282] tipc: Resetting bearer [ 483.375394][T18281] tipc: Resetting bearer [ 483.464864][T18281] tipc: Disabling bearer [ 483.631175][T18315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3852'. [ 483.645198][T18316] openvswitch: netlink: Unknown key attributes 2 [ 483.678830][T18315] IPVS: Unknown mcast interface: vcan0 [ 483.730017][T18319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3853'. [ 483.755385][T18319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3853'. [ 483.804156][ T29] audit: type=1800 audit(1773928086.423:3): pid=18320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3854" name="memory.events" dev="tmpfs" ino=3855 res=0 errno=0 [ 484.363109][ T6736] netdevsim netdevsim3 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.402071][ T6736] netdevsim netdevsim3 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.461055][ T3553] netdevsim netdevsim3 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.545528][ T3553] netdevsim netdevsim3 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.000049][T18381] sctp: [Deprecated]: syz.4.3872 (pid 18381) Use of int in max_burst socket option. [ 485.000049][T18381] Use struct sctp_assoc_value instead [ 485.232818][T18381] syzkaller0: entered promiscuous mode [ 485.238572][T18381] syzkaller0: entered allmulticast mode [ 485.329139][T18403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.398069][T18406] openvswitch: netlink: Unknown key attributes 2 [ 485.498114][T18410] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.574326][T18410] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.655149][T18410] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.733465][T18410] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.906604][ T49] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.931165][ T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.012221][ T6736] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.057866][ T6736] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.089568][T18434] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 486.096893][T18434] IPv6: NLM_F_CREATE should be set when creating new route [ 486.449211][T18450] netlink: 'syz.4.3890': attribute type 1 has an invalid length. [ 487.231534][T18508] openvswitch: netlink: Unknown key attributes 2 [ 488.602902][T18509] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.798019][T18509] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.808976][T18520] __nla_validate_parse: 5 callbacks suppressed [ 488.808998][T18520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3906'. [ 488.843366][T18520] netlink: 'syz.3.3906': attribute type 1 has an invalid length. [ 488.851063][T18525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3907'. [ 488.898448][T18531] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3906'. [ 488.912698][T18531] erspan0: left promiscuous mode [ 488.959062][T18509] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.980916][T18520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3906'. [ 489.105446][T18509] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.360055][T18557] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3913'. [ 489.395904][ T6736] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.419339][T18557] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3913'. [ 489.443364][T18557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3913'. [ 489.457070][ T6736] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.464572][T18557] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3913'. [ 489.519360][T18557] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3913'. [ 489.561572][ T6733] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.579826][T18562] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 489.592008][T18562] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 489.620905][ T35] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.776311][T18571] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3916'. [ 489.993619][T18586] netlink: 'syz.0.3921': attribute type 1 has an invalid length. [ 490.392136][T18608] openvswitch: netlink: Unknown key attributes 2 [ 490.902927][T18638] syzkaller0: entered promiscuous mode [ 490.921333][T18638] syzkaller0: entered allmulticast mode [ 491.161558][T18660] FAULT_INJECTION: forcing a failure. [ 491.161558][T18660] name failslab, interval 1, probability 0, space 0, times 0 [ 491.196624][T18660] CPU: 0 UID: 0 PID: 18660 Comm: syz.4.3942 Not tainted syzkaller #0 PREEMPT(full) [ 491.196661][T18660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.196673][T18660] Call Trace: [ 491.196682][T18660] [ 491.196691][T18660] dump_stack_lvl+0xe8/0x150 [ 491.196728][T18660] should_fail_ex+0x412/0x560 [ 491.196762][T18660] should_failslab+0xa8/0x100 [ 491.196789][T18660] __kmalloc_noprof+0xe8/0x760 [ 491.196812][T18660] ? kernfs_fop_write_iter+0x158/0x540 [ 491.196842][T18660] kernfs_fop_write_iter+0x158/0x540 [ 491.196874][T18660] vfs_write+0x61d/0xb90 [ 491.196909][T18660] ? __pfx_vfs_write+0x10/0x10 [ 491.196944][T18660] ? __fget_files+0x2a/0x420 [ 491.196985][T18660] ksys_write+0x150/0x270 [ 491.197011][T18660] ? __pfx_ksys_write+0x10/0x10 [ 491.197058][T18660] do_syscall_64+0x14d/0xf80 [ 491.197078][T18660] ? trace_irq_disable+0x3b/0x150 [ 491.197107][T18660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.197126][T18660] ? clear_bhb_loop+0x40/0x90 [ 491.197151][T18660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.197171][T18660] RIP: 0033:0x7fc16d59c799 [ 491.197191][T18660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.197209][T18660] RSP: 002b:00007fc16e4a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 491.197231][T18660] RAX: ffffffffffffffda RBX: 00007fc16d815fa0 RCX: 00007fc16d59c799 [ 491.197246][T18660] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000000004 [ 491.197257][T18660] RBP: 00007fc16e4a8090 R08: 0000000000000000 R09: 0000000000000000 [ 491.197270][T18660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.197281][T18660] R13: 00007fc16d816038 R14: 00007fc16d815fa0 R15: 00007fff030d5dc8 [ 491.197314][T18660] [ 492.049567][T18707] syzkaller0: entered promiscuous mode [ 492.055198][T18707] syzkaller0: entered allmulticast mode [ 492.128813][T18714] FAULT_INJECTION: forcing a failure. [ 492.128813][T18714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.149780][T18714] CPU: 1 UID: 0 PID: 18714 Comm: syz.0.3954 Not tainted syzkaller #0 PREEMPT(full) [ 492.149810][T18714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.149822][T18714] Call Trace: [ 492.149830][T18714] [ 492.149839][T18714] dump_stack_lvl+0xe8/0x150 [ 492.149874][T18714] should_fail_ex+0x412/0x560 [ 492.149906][T18714] _copy_from_user+0x2d/0xb0 [ 492.149937][T18714] ___sys_sendmsg+0x1c6/0x360 [ 492.149965][T18714] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.150022][T18714] ? __fget_files+0x2a/0x420 [ 492.150051][T18714] ? __fget_files+0x3a0/0x420 [ 492.150100][T18714] __x64_sys_sendmsg+0x1bd/0x2a0 [ 492.150123][T18714] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.150153][T18714] ? __pfx_ksys_write+0x10/0x10 [ 492.150189][T18714] do_syscall_64+0x14d/0xf80 [ 492.150209][T18714] ? trace_irq_disable+0x3b/0x150 [ 492.150239][T18714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.150259][T18714] ? clear_bhb_loop+0x40/0x90 [ 492.150285][T18714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.150306][T18714] RIP: 0033:0x7ff10439c799 [ 492.150325][T18714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.150342][T18714] RSP: 002b:00007ff105270028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.150364][T18714] RAX: ffffffffffffffda RBX: 00007ff104615fa0 RCX: 00007ff10439c799 [ 492.150378][T18714] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 492.150391][T18714] RBP: 00007ff105270090 R08: 0000000000000000 R09: 0000000000000000 [ 492.150403][T18714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.150415][T18714] R13: 00007ff104616038 R14: 00007ff104615fa0 R15: 00007fffe8e31ac8 [ 492.150447][T18714] [ 492.353277][T18716] openvswitch: netlink: Unknown key attributes 2 [ 492.704021][T18731] syzkaller0: entered promiscuous mode [ 492.717140][T18718] nbd2: detected capacity change from 0 to 63 [ 492.723754][T18731] syzkaller0: entered allmulticast mode [ 492.745557][ T5839] block nbd2: Receive control failed (result -32) [ 492.746293][ T5838] block nbd2: Receive control failed (result -32) [ 492.765850][T18730] tipc: Enabled bearer , priority 0 [ 492.791248][T18737] block nbd2: Dead connection, failed to find a fallback [ 492.800666][T18737] block nbd2: shutting down sockets [ 492.808163][T18737] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 492.820436][T18731] tipc: Enabling of bearer rejected, already enabled [ 492.820512][T18737] Buffer I/O error on dev nbd2, logical block 0, async page read [ 492.838127][T18737] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 492.849005][T18737] Buffer I/O error on dev nbd2, logical block 1, async page read [ 492.857629][T18737] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 492.860204][T18728] tipc: Resetting bearer [ 492.867575][T18737] Buffer I/O error on dev nbd2, logical block 2, async page read [ 492.882442][T18737] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 492.918342][T18737] Buffer I/O error on dev nbd2, logical block 3, async page read [ 492.927569][T18728] tipc: Disabling bearer [ 492.934289][T18737] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 492.949665][T18737] Buffer I/O error on dev nbd2, logical block 0, async page read [ 492.960044][T18737] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 492.973603][T18737] Buffer I/O error on dev nbd2, logical block 1, async page read [ 492.984882][T18737] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.001879][T18737] Buffer I/O error on dev nbd2, logical block 2, async page read [ 493.011251][T18737] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.023441][T18737] Buffer I/O error on dev nbd2, logical block 3, async page read [ 493.062263][T18737] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.083338][T18737] Buffer I/O error on dev nbd2, logical block 0, async page read [ 493.120541][T18737] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.145600][T18737] Buffer I/O error on dev nbd2, logical block 1, async page read [ 493.165807][T18737] ldm_validate_partition_table(): Disk read failed. [ 493.180788][T18737] Dev nbd2: unable to read RDB block 0 [ 493.197850][T18737] nbd2: unable to read partition table [ 493.232605][T18737] ldm_validate_partition_table(): Disk read failed. [ 493.251784][T18737] Dev nbd2: unable to read RDB block 0 [ 493.269411][T18737] nbd2: unable to read partition table [ 493.396929][T18757] bond0: Caught tx_queue_len zero misconfig [ 493.554158][T18765] syzkaller0: entered promiscuous mode [ 493.561933][T18765] syzkaller0: entered allmulticast mode [ 493.804293][T18780] openvswitch: netlink: Unknown key attributes 2 [ 493.825807][T18782] __nla_validate_parse: 75 callbacks suppressed [ 493.825829][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3974'. [ 493.856545][T18782] hsr_slave_0 (unregistering): left promiscuous mode [ 493.917937][T18786] syzkaller0: entered promiscuous mode [ 493.923579][T18786] syzkaller0: entered allmulticast mode [ 494.334176][T18814] syzkaller0: entered promiscuous mode [ 494.340131][T18814] syzkaller0: entered allmulticast mode [ 494.564556][T18820] openvswitch: netlink: Duplicate key (type 32). [ 494.595090][T18828] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3993'. [ 494.689314][T18829] netlink: 'syz.2.3992': attribute type 21 has an invalid length. [ 494.787429][T18832] syzkaller0: entered promiscuous mode [ 494.803312][T18832] syzkaller0: entered allmulticast mode [ 495.104775][T18848] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 495.153759][T18855] netlink: 'syz.1.4001': attribute type 1 has an invalid length. [ 495.177512][T18855] netlink: 'syz.1.4001': attribute type 2 has an invalid length. [ 495.269757][T18859] netlink: 'syz.3.4003': attribute type 1 has an invalid length. [ 495.296495][T18859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4003'. [ 495.301628][T18864] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4005'. [ 495.314851][T18859] netlink: 'syz.3.4003': attribute type 1 has an invalid length. [ 495.374373][T18859] 8021q: adding VLAN 0 to HW filter on device bond11 [ 495.425275][T18869] bond11: (slave veth19): Enslaving as an active interface with a down link [ 495.452316][T18859] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 495.491850][T18859] bond11: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 495.547336][T18878] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 495.557786][T18878] syzkaller0: entered promiscuous mode [ 495.563584][T18878] syzkaller0: entered allmulticast mode [ 495.727842][T18884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4012'. [ 495.879835][T18892] syzkaller0: entered promiscuous mode [ 495.886512][T18892] syzkaller0: entered allmulticast mode [ 495.943593][T18896] syzkaller1: entered promiscuous mode [ 495.949730][T18896] syzkaller1: entered allmulticast mode [ 496.044948][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4019'. [ 496.060405][T18901] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4019'. [ 496.093124][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4019'. [ 496.134686][T18903] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4019'. [ 496.215165][T18909] netlink: 13998 bytes leftover after parsing attributes in process `syz.4.4021'. [ 496.269628][T18915] netlink: 'syz.3.4023': attribute type 11 has an invalid length. [ 496.355041][T18918] syzkaller0: entered promiscuous mode [ 496.374599][T18918] syzkaller0: entered allmulticast mode [ 496.564528][T18931] x_tables: duplicate underflow at hook 3 [ 496.570026][T18928] netlink: 'syz.1.4027': attribute type 5 has an invalid length. [ 496.632276][T18930] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 496.779928][T18936] [ 496.782324][T18936] ====================================================== [ 496.789460][T18936] WARNING: possible circular locking dependency detected [ 496.796766][T18936] syzkaller #0 Not tainted [ 496.801188][T18936] ------------------------------------------------------ [ 496.808213][T18936] syz.0.4029/18936 is trying to acquire lock: [ 496.814280][T18936] ffffffff8e882e40 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 496.823822][T18936] [ 496.823822][T18936] but task is already holding lock: [ 496.831203][T18936] ffff88804f206538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 496.840458][T18936] [ 496.840458][T18936] which lock already depends on the new lock. [ 496.840458][T18936] [ 496.850928][T18936] [ 496.850928][T18936] the existing dependency chain (in reverse order) is: [ 496.860054][T18936] [ 496.860054][T18936] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 496.867812][T18936] __mutex_lock+0x19f/0x1300 [ 496.872939][T18936] __ipv6_dev_mc_inc+0x4e/0xa50 [ 496.878347][T18936] __ipv6_sock_mc_join+0x503/0x750 [ 496.884007][T18936] ipv6_mcast_join_leave+0x1a2/0x240 [ 496.889848][T18936] do_ipv6_setsockopt+0x18f7/0x31c0 [ 496.895600][T18936] ipv6_setsockopt+0x59/0x170 [ 496.900890][T18936] do_sock_setsockopt+0x17c/0x1b0 [ 496.906444][T18936] __x64_sys_setsockopt+0x13d/0x1b0 [ 496.912172][T18936] do_syscall_64+0x14d/0xf80 [ 496.918065][T18936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.924485][T18936] [ 496.924485][T18936] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 496.932246][T18936] lock_sock_nested+0x48/0x100 [ 496.937559][T18936] inet_shutdown+0x6a/0x390 [ 496.942851][T18936] nbd_mark_nsock_dead+0x2e9/0x560 [ 496.948484][T18936] recv_work+0x1c7f/0x1d90 [ 496.953624][T18936] process_scheduled_works+0xb02/0x1830 [ 496.959720][T18936] worker_thread+0xa50/0xfc0 [ 496.964846][T18936] kthread+0x388/0x470 [ 496.969528][T18936] ret_from_fork+0x51e/0xb90 [ 496.974746][T18936] ret_from_fork_asm+0x1a/0x30 [ 496.980320][T18936] [ 496.980320][T18936] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 496.988256][T18936] __mutex_lock+0x19f/0x1300 [ 496.993482][T18936] nbd_queue_rq+0x37b/0x1100 [ 496.998605][T18936] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 497.004775][T18936] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 497.011917][T18936] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 497.018437][T18936] blk_mq_run_hw_queue+0x348/0x4f0 [ 497.024316][T18936] blk_mq_dispatch_list+0xd16/0xe10 [ 497.030670][T18936] blk_mq_flush_plug_list+0x48d/0x570 [ 497.037286][T18936] __blk_flush_plug+0x3ed/0x4d0 [ 497.042826][T18936] __submit_bio+0x28d/0x580 [ 497.047990][T18936] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 497.054238][T18936] block_read_full_folio+0x599/0x830 [ 497.060342][T18936] filemap_read_folio+0x137/0x3b0 [ 497.066112][T18936] do_read_cache_folio+0x358/0x590 [ 497.071776][T18936] read_part_sector+0xb6/0x2b0 [ 497.077152][T18936] adfspart_check_ICS+0xa5/0xa40 [ 497.082793][T18936] bdev_disk_changed+0x7ba/0x1550 [ 497.088524][T18936] blkdev_get_whole+0x380/0x510 [ 497.093994][T18936] bdev_open+0x31e/0xd30 [ 497.098766][T18936] blkdev_open+0x470/0x610 [ 497.103717][T18936] do_dentry_open+0x785/0x14e0 [ 497.109108][T18936] vfs_open+0x3b/0x340 [ 497.113712][T18936] path_openat+0x2e08/0x3860 [ 497.118845][T18936] do_file_open+0x23e/0x4a0 [ 497.123955][T18936] do_sys_openat2+0x113/0x200 [ 497.129204][T18936] __x64_sys_openat+0x138/0x170 [ 497.135129][T18936] do_syscall_64+0x14d/0xf80 [ 497.140369][T18936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.146822][T18936] [ 497.146822][T18936] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 497.154158][T18936] __mutex_lock+0x19f/0x1300 [ 497.159366][T18936] nbd_queue_rq+0xc6/0x1100 [ 497.164673][T18936] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 497.171653][T18936] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 497.178623][T18936] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 497.185724][T18936] blk_mq_run_hw_queue+0x348/0x4f0 [ 497.191366][T18936] blk_mq_dispatch_list+0xd16/0xe10 [ 497.197469][T18936] blk_mq_flush_plug_list+0x48d/0x570 [ 497.203428][T18936] __blk_flush_plug+0x3ed/0x4d0 [ 497.208829][T18936] __submit_bio+0x28d/0x580 [ 497.213963][T18936] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 497.220224][T18936] block_read_full_folio+0x599/0x830 [ 497.226212][T18936] filemap_read_folio+0x137/0x3b0 [ 497.231938][T18936] do_read_cache_folio+0x358/0x590 [ 497.237679][T18936] read_part_sector+0xb6/0x2b0 [ 497.243074][T18936] adfspart_check_ICS+0xa5/0xa40 [ 497.248633][T18936] bdev_disk_changed+0x7ba/0x1550 [ 497.254542][T18936] blkdev_get_whole+0x380/0x510 [ 497.259955][T18936] bdev_open+0x31e/0xd30 [ 497.264748][T18936] blkdev_open+0x470/0x610 [ 497.270050][T18936] do_dentry_open+0x785/0x14e0 [ 497.275374][T18936] vfs_open+0x3b/0x340 [ 497.280585][T18936] path_openat+0x2e08/0x3860 [ 497.285790][T18936] do_file_open+0x23e/0x4a0 [ 497.290947][T18936] do_sys_openat2+0x113/0x200 [ 497.296305][T18936] __x64_sys_openat+0x138/0x170 [ 497.301778][T18936] do_syscall_64+0x14d/0xf80 [ 497.307157][T18936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.313797][T18936] [ 497.313797][T18936] -> #3 (set->srcu){.+.+}-{0:0}: [ 497.321035][T18936] __synchronize_srcu+0xca/0x3e0 [ 497.326608][T18936] elevator_switch+0x1e8/0x7a0 [ 497.332093][T18936] elevator_change+0x2cc/0x450 [ 497.337583][T18936] elevator_set_default+0x36c/0x430 [ 497.343340][T18936] blk_register_queue+0x366/0x430 [ 497.348912][T18936] __add_disk+0x677/0xd50 [ 497.353797][T18936] add_disk_fwnode+0xfb/0x480 [ 497.359132][T18936] nbd_dev_add+0x72c/0xb50 [ 497.364132][T18936] nbd_init+0x168/0x1f0 [ 497.369024][T18936] do_one_initcall+0x250/0x8d0 [ 497.374488][T18936] do_initcall_level+0x104/0x190 [ 497.380107][T18936] do_initcalls+0x59/0xa0 [ 497.385071][T18936] kernel_init_freeable+0x2a6/0x3e0 [ 497.391245][T18936] kernel_init+0x1d/0x1d0 [ 497.396121][T18936] ret_from_fork+0x51e/0xb90 [ 497.401419][T18936] ret_from_fork_asm+0x1a/0x30 [ 497.407223][T18936] [ 497.407223][T18936] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 497.415065][T18936] __mutex_lock+0x19f/0x1300 [ 497.420187][T18936] elevator_change+0x1b3/0x450 [ 497.425481][T18936] elevator_set_none+0xb5/0x140 [ 497.430925][T18936] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 497.437466][T18936] nbd_start_device+0x17f/0xb10 [ 497.442965][T18936] nbd_genl_connect+0x165b/0x1cf0 [ 497.448545][T18936] genl_family_rcv_msg_doit+0x22a/0x330 [ 497.454654][T18936] genl_rcv_msg+0x61c/0x7a0 [ 497.459809][T18936] netlink_rcv_skb+0x232/0x4b0 [ 497.465196][T18936] genl_rcv+0x28/0x40 [ 497.469729][T18936] netlink_unicast+0x80f/0x9b0 [ 497.475180][T18936] netlink_sendmsg+0x813/0xb40 [ 497.480570][T18936] ____sys_sendmsg+0x972/0x9f0 [ 497.485936][T18936] ___sys_sendmsg+0x2a5/0x360 [ 497.491140][T18936] __x64_sys_sendmsg+0x1bd/0x2a0 [ 497.496615][T18936] do_syscall_64+0x14d/0xf80 [ 497.501994][T18936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.508583][T18936] [ 497.508583][T18936] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 497.517221][T18936] blk_alloc_queue+0x546/0x680 [ 497.522607][T18936] __blk_mq_alloc_disk+0x197/0x390 [ 497.528239][T18936] nbd_dev_add+0x499/0xb50 [ 497.533183][T18936] nbd_init+0x168/0x1f0 [ 497.537932][T18936] do_one_initcall+0x250/0x8d0 [ 497.543337][T18936] do_initcall_level+0x104/0x190 [ 497.548817][T18936] do_initcalls+0x59/0xa0 [ 497.553786][T18936] kernel_init_freeable+0x2a6/0x3e0 [ 497.560442][T18936] kernel_init+0x1d/0x1d0 [ 497.565773][T18936] ret_from_fork+0x51e/0xb90 [ 497.571884][T18936] ret_from_fork_asm+0x1a/0x30 [ 497.577563][T18936] [ 497.577563][T18936] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 497.585012][T18936] __lock_acquire+0x15a5/0x2cf0 [ 497.590520][T18936] lock_acquire+0xf0/0x2e0 [ 497.595481][T18936] fs_reclaim_acquire+0x71/0x100 [ 497.601049][T18936] __kmalloc_cache_noprof+0x40/0x660 [ 497.606947][T18936] __ipv6_dev_mc_inc+0x44f/0xa50 [ 497.612519][T18936] ipv6_add_dev+0xe34/0x13a0 [ 497.617679][T18936] addrconf_notify+0x771/0x1050 [ 497.623453][T18936] notifier_call_chain+0x1be/0x400 [ 497.629112][T18936] register_netdevice+0x173a/0x1cf0 [ 497.635025][T18936] br_add_bridge+0xa3/0xf0 [ 497.640149][T18936] br_ioctl_stub+0x588/0xd60 [ 497.645470][T18936] sock_ioctl+0x523/0x7f0 [ 497.650336][T18936] __se_sys_ioctl+0xfc/0x170 [ 497.655556][T18936] do_syscall_64+0x14d/0xf80 [ 497.660694][T18936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.667154][T18936] [ 497.667154][T18936] other info that might help us debug this: [ 497.667154][T18936] [ 497.678285][T18936] Chain exists of: [ 497.678285][T18936] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 497.678285][T18936] [ 497.691182][T18936] Possible unsafe locking scenario: [ 497.691182][T18936] [ 497.699015][T18936] CPU0 CPU1 [ 497.704506][T18936] ---- ---- [ 497.710057][T18936] lock(&idev->mc_lock); [ 497.714392][T18936] lock(sk_lock-AF_INET6); [ 497.721539][T18936] lock(&idev->mc_lock); [ 497.728726][T18936] lock(fs_reclaim); [ 497.733011][T18936] [ 497.733011][T18936] *** DEADLOCK *** [ 497.733011][T18936] [ 497.741524][T18936] 3 locks held by syz.0.4029/18936: [ 497.746898][T18936] #0: ffffffff8fbae448 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4fa/0x7f0 [ 497.756238][T18936] #1: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60 [ 497.765412][T18936] #2: ffff88804f206538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 497.775468][T18936] [ 497.775468][T18936] stack backtrace: [ 497.781481][T18936] CPU: 0 UID: 0 PID: 18936 Comm: syz.0.4029 Not tainted syzkaller #0 PREEMPT(full) [ 497.781502][T18936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.781512][T18936] Call Trace: [ 497.781520][T18936] [ 497.781527][T18936] dump_stack_lvl+0xe8/0x150 [ 497.781552][T18936] print_circular_bug+0x2e1/0x300 [ 497.781577][T18936] check_noncircular+0x12e/0x150 [ 497.781602][T18936] __lock_acquire+0x15a5/0x2cf0 [ 497.781623][T18936] ? rcu_is_watching+0x15/0xb0 [ 497.781645][T18936] ? trace_contention_end+0x3d/0x150 [ 497.781669][T18936] ? __mutex_lock+0x319/0x1300 [ 497.781684][T18936] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 497.781711][T18936] ? __alloc_skb+0x4e5/0x7d0 [ 497.781734][T18936] lock_acquire+0xf0/0x2e0 [ 497.781752][T18936] ? __kmalloc_cache_noprof+0x40/0x660 [ 497.781770][T18936] ? __pfx___mutex_lock+0x10/0x10 [ 497.781787][T18936] fs_reclaim_acquire+0x71/0x100 [ 497.781804][T18936] ? __kmalloc_cache_noprof+0x40/0x660 [ 497.781820][T18936] __kmalloc_cache_noprof+0x40/0x660 [ 497.781837][T18936] ? __ipv6_dev_mc_inc+0x44f/0xa50 [ 497.781858][T18936] __ipv6_dev_mc_inc+0x44f/0xa50 [ 497.781880][T18936] ? addrconf_sysctl_register+0x1a9/0x1c0 [ 497.781905][T18936] ipv6_add_dev+0xe34/0x13a0 [ 497.781927][T18936] addrconf_notify+0x771/0x1050 [ 497.781952][T18936] notifier_call_chain+0x1be/0x400 [ 497.781979][T18936] register_netdevice+0x173a/0x1cf0 [ 497.782001][T18936] ? __pfx_register_netdevice+0x10/0x10 [ 497.782016][T18936] ? alloc_netdev_mqs+0xc89/0x11b0 [ 497.782033][T18936] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 497.782052][T18936] ? alloc_netdev_mqs+0xd9b/0x11b0 [ 497.782071][T18936] br_add_bridge+0xa3/0xf0 [ 497.782088][T18936] br_ioctl_stub+0x588/0xd60 [ 497.782109][T18936] ? do_vfs_ioctl+0x1166/0x1530 [ 497.782126][T18936] ? __pfx_br_ioctl_stub+0x10/0x10 [ 497.782145][T18936] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 497.782163][T18936] ? sock_ioctl+0x4fa/0x7f0 [ 497.782182][T18936] ? do_futex+0x395/0x420 [ 497.782206][T18936] ? __pfx_br_ioctl_stub+0x10/0x10 [ 497.782224][T18936] sock_ioctl+0x523/0x7f0 [ 497.782241][T18936] ? __pfx_sock_ioctl+0x10/0x10 [ 497.782258][T18936] ? __fget_files+0x2a/0x420 [ 497.782279][T18936] ? __fget_files+0x3a0/0x420 [ 497.782300][T18936] ? __fget_files+0x2a/0x420 [ 497.782322][T18936] ? bpf_lsm_file_ioctl+0x9/0x20 [ 497.782342][T18936] ? __pfx_sock_ioctl+0x10/0x10 [ 497.782359][T18936] __se_sys_ioctl+0xfc/0x170 [ 497.782376][T18936] do_syscall_64+0x14d/0xf80 [ 497.782390][T18936] ? trace_irq_disable+0x3b/0x150 [ 497.782413][T18936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.782428][T18936] ? clear_bhb_loop+0x40/0x90 [ 497.782445][T18936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.782461][T18936] RIP: 0033:0x7ff10439c799 [ 497.782476][T18936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.782491][T18936] RSP: 002b:00007ff105270028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.782508][T18936] RAX: ffffffffffffffda RBX: 00007ff104615fa0 RCX: 00007ff10439c799 [ 497.782520][T18936] RDX: 0000200000000040 RSI: 00000000000089a0 RDI: 0000000000000003 [ 497.782530][T18936] RBP: 00007ff104432c99 R08: 0000000000000000 R09: 0000000000000000 [ 497.782540][T18936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.782550][T18936] R13: 00007ff104616038 R14: 00007ff104615fa0 R15: 00007fffe8e31ac8 [ 497.782567][T18936] [ 498.157887][T18940] netlink: 'syz.1.4030': attribute type 1 has an invalid length. [ 498.168135][T18940] netlink: 'syz.1.4030': attribute type 2 has an invalid length. [ 501.659294][ T1301] lec:lec_start_xmit: lec0:No lecd attached