last executing test programs: 5.485984105s ago: executing program 4 (id=9899): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000020900020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000242c00128014110180090001006c6173740000000004000280140001800c000100636f756e74657200040002"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x203, 0x7fffffff, 0x635d, 0x80, 0xffffffff, 0x407}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) 5.252637253s ago: executing program 4 (id=9903): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001880)={0x14, r0, 0x7, 0x2, 0xffffffff}, 0x14}, 0x1, 0x3000000, 0x0, 0x4060850}, 0x400d4) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="89a25031b0f94f0cd90348a0d21ee413fa55c26836ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9890c9dcac5cf843794592a5d408bd312d70e14da62181e3aaa9c243d775a318fc99b73e54d27ac3f01a78de2df421629d0c172f41ca731248a0717e47bf7a4295f9f76b94c660e7d40b2edfaa8fb394752ba13a", 0xffc9}, {&(0x7f0000000140)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd67bf988204009c7c4e4727f8d8979ce90000000013faf51834517bed4d0bfc521236429a9e127fdb471c239215fcfc4dd80b3e53f4cb004d8328aaa6b41d217e66", 0x63}, {&(0x7f0000001380)="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", 0x1135}], 0x3, 0x0) syz_emit_ethernet(0x15d, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x127, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x21000000, 0x0, [{0x3}, {0x18, 0x11, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f429"}, {0x5}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212"}, {0x5, 0x9, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9"}, {}]}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@delchain={0x48, 0x65, 0x400, 0x2070bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x4}, {0x10, 0x6}, {0xd, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @rand_addr=' \x01\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40005}, 0x4805) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@deltfilter={0x34, 0x2d, 0x10, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0x1}, {0x0, 0xffff}, {0xfff1, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x200040c0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="07000000000000000000020000000c000180060005004e220000"], 0x20}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000a00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x411}, 0xc, &(0x7f00000009c0)={&(0x7f0000000dc0)={0x14, r7, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x800) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x14, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRESDEC=r8], &(0x7f0000000100)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000500)=r9, 0x4) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r14], 0x1c}}, 0x4008054) writev(r10, &(0x7f0000006280)=[{&(0x7f00000041c0)="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", 0x17f}], 0x1) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000440)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4000000004c94215d121cd0c53e27eec317", 0xd8}], 0x1}, 0x40880) syz_emit_ethernet(0x116, &(0x7f0000000800)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x3a, 0x4, 0x0, 0x0, 0x108, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@generic={0x89, 0xf, "b1beb8065b200b3fff47d2b867"}, @noop, @timestamp={0x44, 0x18, 0xd3, 0x0, 0xd, [0x400, 0x7fffffff, 0x6, 0x3, 0x6]}, @generic={0x7, 0x6, "d1d54aad"}, @timestamp_prespec={0x44, 0x24, 0x30, 0x3, 0x6, [{@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff33b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2, 0x8001}]}, @ssrr={0x89, 0x23, 0xcf, [@rand_addr=0x64010102, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010102, @local, @rand_addr=0x64010102, @local]}, @ssrr={0x89, 0x23, 0xbe, [@empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, @multicast2, @rand_addr=0x64010100, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x1c, 0x9, 0x3, 0x2, [{@multicast1, 0x6}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x16}}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x9a, 0x1, 0x4, [{@private=0xa010100, 0x2}, {@rand_addr=0x64010100}, {@private=0xa010101, 0xfffffff9}]}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x6, 0x4, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0xc, 0x0, @private=0xa010101, @local, {[@end]}}}}}}}, 0x0) 5.14435804s ago: executing program 1 (id=9906): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x2037, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) accept$nfc_llcp(r2, &(0x7f0000000080), &(0x7f00000001c0)=0x60) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x184}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.974827896s ago: executing program 1 (id=9910): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500", @ANYRES64=r1], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000"], 0xd4}}, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="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", 0x1fa}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74d86be94ef6b9191e0fa86d2a9330af3f592e24bc30b84632e5121bf04abc0e12f4073f6678ad97b786cc73b8175e35eda542e3631d283a3ca6fef91607ec7dee1b4a62bae169cc8fb64e8bdef95474f0b3c526f69ce55281e18016a4785875ba99e313fd63f66cfd36234bcc6048f25bce8cce39cf709eb10e1ea88497ff7401aae0d4a7e07f14691b6c4b75dc16e2586744317ffbb9966d8bfb16efcdf6ab308426e5c1aec6a6636122ffaca89af3b03834612b93989d0bbb251a42c1b48b86ac7162ad8d5cbf3d6cfccdc590724ff6caa853", 0x1c0}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1", 0x1}], 0x1}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000004c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x15, 0x1, 0x0, 0x1, [@generic="3fb3ebf5f9cbd1185eeba9c895d0e5001a"]}]}, 0x3c}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x14, 0x1c, 0x68, 0x0, 0x8, 0x1, 0x0, @remote, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x5}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095a1300000000000950000000000000002959088a6eb4944b301000000f5300919b4c0536235e6a01a4d14a22d0a2e9142cd5dc3a83e377237020ed3da4794a0b389744845f924848f9cdc4641d0461cc68c82f7db0b96770be833fa4196707585d08fdfe0c805e8344b554b4d397f92ba8286673cf9252d4e0d69789cf2785f57da3cd20b5b9a8dda85b62576cee0ff9f417aeb3bdda392e624a770a1bee96341d500d1bf75e68697238978ea5fcf7599a70b3b7c1eca259f239646cac7c58edb3ad9885c215eb6f3e9"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @broadcast}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x440, 0x3, @dev={0xac, 0x14, 0x14, 0x1b}}, 'dummy0\x00'}) 4.861074218s ago: executing program 1 (id=9912): openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x20100, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=0xffffffff) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a010400000000000000000a0000010900010073797a310000000024000400200001800700010063740000140002800800"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0xf5, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) poll(0x0, 0x0, 0x9) 2.118294176s ago: executing program 3 (id=9920): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000270000000a0001007770616e30000000050031000200000014003000"/54], 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/19, 0x13}, {&(0x7f0000001540)=""/109, 0x6d}], 0x6}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6, 0x5, {0x5c, 0x6}}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0xd, 0x0, 0x2, 0x24, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x8000, 0x7, 0xfffffff8}}) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x0, 0x4, 0x20, @rand_addr=' \x01\x00', @loopback, 0x20, 0x20, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x1, 0x2, 0x1, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7, 0x8, 0xd1d, 0x6}}) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r13, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'gretap0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x80, 0x0, 0xed99, 0x7, {{0x33, 0x4, 0x2, 0x5, 0xcc, 0x66, 0x0, 0x9, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x8, 0xf7, 0x0, 0x8, [0xffe]}, @ssrr={0x89, 0x7, 0x2b, [@dev={0xac, 0x14, 0x14, 0x2a}]}, @cipso={0x86, 0x1e, 0x3, [{0x6, 0x4, 'Rm'}, {0x0, 0x12, "f75299b22082abeb21024a0af761d085"}, {0x5, 0x2}]}, @ssrr={0x89, 0x27, 0x77, [@multicast2, @rand_addr=0x64010100, @private=0xa010100, @broadcast, @loopback, @multicast1, @remote, @multicast2, @loopback]}, @timestamp_addr={0x44, 0x34, 0xb, 0x1, 0x3, [{@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x1}, {@empty, 0x7}, {@multicast2, 0x8}, {@empty, 0xc132}, {@remote, 0x9}]}, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0x7, 0x8, "a8d9f0a8b07e"}]}, @timestamp_prespec={0x44, 0x1c, 0xe2, 0x3, 0x6, [{@local, 0x8000}, {@multicast2, 0x8}, {@broadcast, 0x7}]}, @generic={0xc6, 0x4, "2817"}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000005c0)={@mcast2, 0x0}, &(0x7f0000000600)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x1e0, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x4}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x804}, 0x8000) 2.117259853s ago: executing program 1 (id=9921): r0 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000440)={0x1d, r3}, 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0xffffffff, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x74, 0x1, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x2, 0x3, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x8044) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000140)={0x1d, 0xa, 0x1, 0x3, 0x0, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @remote, @mcast1]}, 0x58) (async) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) (async) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = socket(0x1d, 0x4, 0xca8) listen(r6, 0xfffffff8) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r1, &(0x7f0000000c00)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0xfac, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "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"}}}}, 0xfce) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x10200}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1.898071592s ago: executing program 4 (id=9925): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x3, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000001c0)="239676ef7d0676", 0x7}, {&(0x7f0000000940)="b135f24efff681a5d618b11d1bcee6174b49f5196688468c465abcf211516d9d2923d5d246f808a5be9b5a16b43569bea5fe634e74b7e44095e0a9c5af01d1978ba6f31ce622c95025a53a0985ff31d6fee48ede79b83d90f8525cd37c1bcedc021d63d89351a18a029b27fb0389844ae71301a704cec3edc80d58860cf4233649f20e4f1c88655ecd2507db07223378b63eb636c1db88e3dbf067bf9bd4680c3f0c0bc2d9b634f1474870001dab2a41b4031f1d54adc6ed235896056d6e4ef14ce3cc4c5905f77c28dcbcccdd55e97240f92c9c70d3", 0xd6}], 0x2, &(0x7f0000000a80)=[@assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x30, 0x10}, {0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000ac0)="d4648436103e4b03d2fd561d19bd9791125b6a6810c198043caad01a8c6a4d832bb5b75ca838186cd0fc1f0686525a5681c029b9b9c4fe2cc482253dd63672a2eb08f32c424586ea38e234cd8f88a59ca6a7f6b07e608ac5a19d473cafcc3cc82cd6b4de5b8fc114410762dab781e8c591196558e96274583f4d790b7ef9e8d8076c90f9088a7edbbfb15ac1b788450dc20badb77f10b49bcc73bf6b7782f3884f7fa21353d654bc53712bd7f14ce5aff8eaf547acadd66e9612560e86e3460296ae35b31fb099bf261203f161c1a4578584a71fae9d734be289007448a0af974f36a9be40be6c0c7d2cff36", 0xec}, {&(0x7f0000000bc0)="faa479eba058edab36d9a4c3e19faf8e8f0973dd03cad97f95760056049baa1f01b5f1cf64295768156cf65847fcf1691c44d8d8f17018f5aa19fafd6ac791ca40ccd85ce1aaf4464de73654b5145bc62751269d68d4005cf3c273b4a55b69c465c7f2bb4f5ff806f20aa5a88097792eb5a3ca3e6c9ffc6601bc8e74f871a21a3cbead7c8bf60daddde3281ead24ac9a4e4dd7a5abb3a65586a9aceba32e53cc2fd01011", 0xa4}], 0x2, &(0x7f0000000cc0)=[@iv={0x28, 0x117, 0x2, 0x11, "296f00c01bd6b9c4a64b429729d6649d9e"}], 0x28, 0x10}, {0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="8edfd9bb85482abb7f2b5e67357aed9a0881538964ee592ceabcd9533838374e47ac9c49aa5cea046369a82549716f2d06247f3f05bf496757f0cc20b49576e44899732eb1a5b574742065d62d5cc690c0ad470a42b003eeab7168463d65254c3ad99d40a1410b08bac873af7bdff2bcc05cd584bae7a52bc93ec2213b5401cd2de4d300036d3d64f32e3a13a89fda136dca9517f2e96172830a9e6e56bbbdb599a76852f1f71214415698c94c29cc8eaafbd8ef61c3c13d2f", 0xb9}], 0x1, &(0x7f0000000e00)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x4004}, {0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000e40)="c40e797dda022ea5007e031c0e77915f6fb1d21a08cfeac1daa0f5b837c33c53931b4ed9", 0x24}, {&(0x7f0000000e80)="ff8866b87d61bb56caa221ee7801e4dabb164e32cbb15ff62b577aa221e01e60ffaba345bc77cc8e64500f61c1a003706c5315c2c445e33141c1cd236c4da36c14734a712bb4d300f17fe2a2f1f3ff7136cc5adf3f4bc2c8e94d3805ede55988970159241850cb750974662f4359615136e734ad08177bf185d6e5faffaf4393a2cdac124df8569b8d902f0b3f5f842f3046db608ef8cbfa95bf39396200ff392b2709eed2b4fe49f8c8bfa3a339dbd38910011213114c5a8696352e1e68a9f692bd33430b8a99b05224f6c067ce48a8bfb3a64c4f18eaffa36724e21a9ea9f770922d00f11f4e57b4190a5c61b42fb74300c7a65443ac", 0xf7}, {&(0x7f0000000f80)="cba5958ebd74462b9e06bdabf3139c4c990d597fbec68e78b61c5c47a027f6c60923ab0675dd4c5d318bf1782deaed3804588549ffcb85ac46f293941d78410aa5950a6e8ca69fc01f4493d45731c6a562003495bda42d2f4a0436d2ff15971a", 0x60}, {&(0x7f0000001000)="8ffe4983a16b358a571b8a81772c12c0732d8444172db88b4dcbb80f12f5b9b8a847ba7d20a30e004150b23fcc838244aa0b2e9806365538966ac6c994b4af4b", 0x40}, {&(0x7f0000002b00)="968736a780428d41dede59ad6713a6b5aea0476fc40011c5d9b97506aee5eadec134826959517772a6c06fd26fbfa9b4fe4d85a6f2876a8b6d1281cc4422b6eed488f2696e8a6debccd04cf7e31e0be65c64c068149abe286b21e3a073539d902ac60b6515abff6a96ff0734f88785cf88888237d00ad4c0a1464872fdba428004be82f72d6a7aef562ec7adcf38af76410c82787d678352aefbb281328878a5cc04af63010b257ce7f3ddbf9ed9594e803fb5d87b5711aac5e2f33c167b8cbc2c94e8c866f129c9b8b909ce4824", 0xce}], 0x5, 0x0, 0x0, 0x4000}], 0x4, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) accept$alg(r0, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x10, 0x0, 0x3, 0x0, 0x0, 0x8, 0x8}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x539, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1010, 0x5010}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x1, @random="02266295a4a9", 'batadv_slave_1\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000500)=0x2) sendmmsg$alg(r2, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="b177be6a5af5851587498222a0a0a1e4c6e8421e608a1c8ad20e78ce850fc7615c0a64", 0x23}, {&(0x7f0000000180)="9f7d8ecbf4d100d2c822ddf5bbd830abf83b4eef4d74646d30aa15ffd838e115c717cae593e9eab5a0a2f31ce53c8eec33dc117c6da5ad9edf6f918d3f", 0x3d}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="56603c8f67e7f550dbe9dafe72b3fd4ed34ac0d2fd8e6369e15367874c20c96673cfb92abb5aa799d64225cd0b77e74405bbdb41bb21503ffdc828cb51fc925a6cac6815f2c6f3551fbcb97aad9b9cd0ff13341b38cef546e61cdfdf820cf780c278dff4d377aa0b", 0x68}], 0x1, &(0x7f0000001080)=[@iv={0xe8, 0x117, 0x2, 0xcd, "0ab77f283615f8b69be94c7dc71d356752b13436e7967180601aa6b633750cbdb350c3588c48c6c79df0c60ed53e3024a93148ec3fbca9f0d8f99183b2da24f813ff6ea6c39dcfb96201fc2b229e240db45389ba9676feccb891f616a2b5a1cfa7b12cc18cbb11b348084769db45a0f9ccadfea317e96562980900585de4aa456c3e303f1ba62afaf5ee33768040480b130180c02d72f0f93bd6cb84e38c07d90b6ee579de324e554fa6b09d268943a72795bdffe5f251530411db81a03d04e60725e1edb951647e2c949641a0"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1100, 0xc7ffff79d5688d6c}, {0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002180)="438b2f67b5f1836daa29c5f4507f2bd54db72c15a2cac456a40598a0e703d88ef5deeedebafa2a30c95d685ef8e941ccb109732ad0f2a7a78d4ccb811f7461df90074367fdf4f89331cadad5a86980b87be0700103f67cdb582709cd5e1f98f06247878ee6c3024977e68d67de5e809b30f0be3258f593814a1341c48c45c2eb86eece667c39b8629ef5bcf52840b9882fe659c9f4260b8eeb861dff8da19d342d14bafd278042219b4413787018d68d6b51c1c4", 0xb4}], 0x1, &(0x7f0000002280)=[@op={0x18}, @op={0x18}], 0x30, 0x40000}, {0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f00000022c0)="536c7a5154334ba45f9b61c79244a437fbd5806ef046d14226291d361ac7c94b0b93b8223949311eb92b1dc7ce7d149c536412df88849def7a095e95d780", 0x3e}, {&(0x7f0000002300)}, {&(0x7f0000002340)="3431b047919faac2bf95fcdde077e40c8724996c20109e6ea0e1025d40289479872f66b7fc066d0d4d5a08266df5e1893987ae45a6ffde68d217605ed2c53595", 0x40}, {&(0x7f0000002380)="e83290e0a01c4769e21c75e25458a73005de67b01ee075737f968552dc34d163161595baa7b92476fb66601ded917f5f563450e6816f21fb295b7abba92da1a9c1ebf7ff9f14d8a1c10e79d94c41d1f844052720e2a7f9f1e9a86f214a31233a69232b55662816fc118c914891bf954beea636cab28452c237f061085aa66e660dd456266a", 0x85}, {&(0x7f0000000600)="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", 0x1bd}], 0x5, 0x0, 0x0, 0x821}, {0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000007c0)="139b07f1255cdae2b6a9936a9b7a7821daf53adab6fe8acae13cb962474b300b84bcd2d0a2be552379155a836e1348ba23b01e1040c5840522826ee4a72ccff604a92f49dbf874cd3aa31b9ebc5a4bb17009a7b5e38b314feeae4a2b8e32542cb1d2fb3a82027909b1c74f09415f8491b9b2212d2675cc4cb67ddb700d2d79817ec8a3e43ab814c5c6174e7cb34d8f4875d535b932cfd0f3f7e2468cb9c460845b8c02fea4cc0afb8e38ad", 0xab}, {&(0x7f0000002600)="7f8b4e4d4e698c4dc8da36ec1b91412d7ded3b3abdafabeac04631dadbb538d0a657b7828b1f70a42039260fd6b204e5e9f48b300045ab59b88b54da5f776bd0b0a0079f302a1fac9f70fb60ec9692809ff56328f8dc4c9bbb128908c573153ee0de9a5b8149946d554103161150bb345b8d61b0e5c6dcafaad12187da8478be20c6bf1c314754d254a5f1dde36f115e3725d7558218e89a7821daac257d4d13df0d48ef64c5316557a5494f2e2743ca8b2e9976e1d35205da36593c389684a779d3d1cac00ee28afc5db7b163eba0e3ee7d315dd55b1d9455f5cfc8b6e8cd2ff0c2b1e33b8dfabe", 0xe8}], 0x2, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x250, 0x3a7241f6cce8939b}], 0x5, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r9 = accept$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000440)=0x6e) recvfrom$unix(r9, &(0x7f0000000200)=""/139, 0x8b, 0x0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 1.892464743s ago: executing program 0 (id=9926): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9f000000000c0000000cfa0000080000000000bc7471a2000000000000006161612e5f7e0094e781e0cc773bfb1a1a6d2adc498d1358a84d8fcc7929ce95357671cf4e38ef5ebb40c9fee22bd16f875733405f7ef20977e5c38747acc87145aade2cb0dbbf2bfa892b0c32430b7d3689b594e471b951138164caa65b3991211f58abbe414225ad8943cadc961bc379fdd8683c95d234c4991ddc119c2b173339501adfa9c9e785b8e02acefd83757872b28dcf59ebdf2700001980dacb68c3ce09a22a609520fabf28f2dea34a1303789db7ea9c854c929cfb"], 0x0, 0x2c, 0x0, 0x1, 0x9}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8a}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x24048011}, 0x20004040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) unshare(0x22020400) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180001000800010004000000090002007465737400000000", 0x50) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c40)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1a020000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000940)={0x1b0, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x59, 0x3, "d6d8268f7fa8f18ece3c23ea159d20cc990136f6c272145c1ca0b95a47abdd59de0acba37c0c6a39a7eb0681e1e8d9636c1cc634212051b3bc4a639dcf0e8cb1fc64dd793e1ca00c6cf19c1d183773557b71b71016"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "5ff0add012dfa0657fc8f4aeeaa191e17fb3d57975"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "8785a68fe1383f18f6ed86f1ea61470d41b1d4dc865d3cffa6104221290feffecd63d2"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x14db9404}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r7, &(0x7f00000007c0)}, 0x20) 1.653019309s ago: executing program 3 (id=9927): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r2) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSGROWFSLOG(r3, 0x4008586f, &(0x7f00000001c0)={0x5, 0x1}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffff800, 0x861, 0x4, 0x8100}}]}]}]}, @IFLA_MASTER={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8041}, 0x48880) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="080077aa", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x4c000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r7, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044080}, 0x240000c0) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 1.579372773s ago: executing program 2 (id=9928): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) (async) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001bc0)=""/4101, 0x1005}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000002c80)=""/174, 0xae}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000000040)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/189, 0xbd}, {&(0x7f00000008c0)=""/4092, 0xffc}, {&(0x7f0000000180)=""/62, 0x3e}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}], 0x3, 0x40, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r1) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0xfffffcf9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) (async) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@private2, 0x6f, r4}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r3], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20018094) socket$nl_route(0x10, 0x3, 0x0) 1.432763936s ago: executing program 4 (id=9929): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000003, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40009}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x1ffffffffffffed3, &(0x7f0000000580)=ANY=[@ANYBLOB="c322525a71", @ANYRESDEC, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESHEX=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x6, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0xecdf, 0xfffc, 0x200}, {@in=@broadcast, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, {0xfffffffffffffffe, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffc}, {0x8, 0x4007ff, 0x0, 0x400}, {}, 0x0, 0x3508, 0xa, 0x4, 0x0, 0x2c}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}, 0x0, 0x200}}]}, 0x13c}}, 0x4050) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)={0x40002001}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x10, 0x0, &(0x7f0000001500)=""/16, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4e2288bca9cf3ba, 0x0, 0xfffffffe}, 0x50) 1.414653723s ago: executing program 0 (id=9930): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x10001}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x24}}, 0x20040084) 1.367635269s ago: executing program 1 (id=9931): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x101, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x120, 0x0, 0x148, 0x120, 0x148, 0x3a0, 0x240, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e1d, 0x4e20, 0x8, 0x2, 0x5f4a, 0x100, 0xa22}}}, {{@ip={@multicast1, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x2, 0x0, 0x60}, 0x0, 0x260, 0x280, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x7, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x0, 'syz1\x00', 0x5}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) 1.23110132s ago: executing program 2 (id=9932): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) 1.230129261s ago: executing program 3 (id=9933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000004140007800800080000000089080006400000012505000100060000000500020000000500040002000000050004000000000012000300686173683a6e65742c706f7274000000"], 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x1, 0x16d9cefe, 0xffff9c58, 0x6}, &(0x7f00000002c0)=0x98) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c200000000000000000088a8130081004200000d0100002022030000bc9dae8b53f248493b71d7e02d11b63f40052ff437a3fd7590d36cfa57617d681bdcf00757b9165785f17df043ed992e34e9cfacf57f547a4d41f52ddfd87fec"], &(0x7f0000000540)={0x0, 0x4002, [0x1c8, 0x4dd, 0x716, 0x149]}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r4, r3, 0x25, 0x8, @void}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x38, r7, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3fe2900"}]]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r9}, 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000340)=[{{0x2, 0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7400000002060500000000000000000000000000120003006269746d61703a69702c6d000016000200737900002800078018000280140002400000000000000000caa3948916db0bbb0c0001800800014000001c020500050002000000050001000600"/113], 0x74}}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r11, 0x84, 0x1b, &(0x7f00000000c0)={r12, 0x26, "3118939a241c6027cf01ecbe0210470b853958eacaaa486becefbff6d16b01a42ba6e599af4d"}, &(0x7f0000000100)=0x2e) socket(0x10, 0x6, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000380)={&(0x7f00000004c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x200000c4) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x110, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$can_raw(r10, &(0x7f0000000200)={0x1d, r14}, 0x10) 1.217693695s ago: executing program 0 (id=9934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x100000000000000}, 0x20000000) 1.151913761s ago: executing program 1 (id=9935): socket$inet6_udp(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000000)=0x100002, 0x4) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r2, 0x0) (async, rerun: 32) r3 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) unshare(0x28000600) (async, rerun: 32) r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r4, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) close(r8) (async, rerun: 64) r9 = socket$unix(0x1, 0x3, 0x0) (rerun: 64) close(r9) socket$xdp(0x2c, 0x3, 0x0) 1.15056625s ago: executing program 3 (id=9936): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0xc7bc, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24048004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000440)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 990.728502ms ago: executing program 2 (id=9937): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000024c0)={&(0x7f0000000080)="fff9f98b85e5b74ce66155f1fce69efbcd16f32e7cd90a0a0ea3c0b336125791", &(0x7f0000000400)=""/4096, &(0x7f0000001400)="472d6cf85766969188570a3d35062e11d84dce4f255facf97c1036be2c3e4079b697e0c8b66153225025c3015076d1875c97b06f63c252e36329c3f6da734774a91ebeb2a16e5167c73995beb22785062157edeb788af04ca44e80449c0da92df6ea05612dcf8ecb89445ab50f6dc89e327ac7bac88f1e6d7dd9cb8bef1f6d3748f9d53090da79ee9ba7accf11734616e14081f5cb8470c0fb66967551ab67df29d78679b6fb0f2ad2056525d581343be34fb334", &(0x7f00000014c0)="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", 0x1}, 0x38) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0xe, 0x200, 0x6}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002500)=@security={'security\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@ipv6={@private2, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff, 0xff000000], 'veth1_to_team\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x4, 0xc, 0x3, 0x24}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@mh={{0x28}, {"8f20"}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x5, 0x3}, {0x1, 0x0, 0x2}, 0x40, 0x92}}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x19}, [0xffffff00, 0x0, 0x0, 0xffffffff], [0xff, 0xff000000, 0xffffff00, 0xff], 'vxcan1\x00', 'sit0\x00', {}, {0xff}, 0x2f, 0x3b, 0x2, 0x40}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x5, 0x2}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x2, 0x1, 0x0, [0x64, 0xf, 0x9, 0x40, 0x0, 0x40, 0x9, 0x6, 0x40, 0x7, 0x3, 0x1, 0x2, 0xfe00, 0x5, 0xe6], 0xd}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x179, 0x2, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) (fail_nth: 13) r5 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_int(r6, 0x1, 0x3c, 0x0, &(0x7f00000003c0)) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000) 990.066316ms ago: executing program 0 (id=9938): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x58}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000027000100000000ddfcdbdf250c0000001c00018017000200636c69214bcc51b1"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) socket$packet(0x11, 0x2, 0x300) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4001"], 0x14) write$nci(r0, 0x0, 0x14) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl802154(0x0, r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40805}, 0x84) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x400, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x2}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3b000000200000000022a723bfb70bb2addaaaacaea4891a01fe1624930e9a6a0dfda2f3e70d", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 867.188141ms ago: executing program 2 (id=9939): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10001}, {}, {}, [@call={0x85, 0x0, 0x0, 0xc2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x5, 0x1000, &(0x7f0000000240)=""/4096, 0x40f00, 0x55, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001240)={0x2, 0x4, 0xfffffffb, 0x7ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f00000012c0)=[{0x2, 0x3, 0xa, 0x6}], 0x10, 0xc}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000013c0)=r1, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = accept4$vsock_stream(r2, &(0x7f00000014c0)={0x28, 0x0, 0x80000000, @host}, 0x10, 0x80800) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000001500)={@multicast2, @multicast1, 0xffffffffffffffff, "0c101bcad4fc007ac7ed6be460c34c3438cd02e9494185b9550338f2328c965b", 0x6, 0x4, 0x4, 0x3}, 0x3c) r5 = accept4$inet6(r0, &(0x7f0000001540)={0xa, 0x0, 0x0, @private2}, &(0x7f0000001580)=0x1c, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c80)={0x1, 0x58, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000002740)={@private, @multicast1, 0x0}, &(0x7f0000002780)=0xc) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000027c0)={0x0, @rand_addr, @private}, &(0x7f0000002800)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000002840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002880)=0x14) sendmmsg$inet6(r5, &(0x7f0000002a40)=[{{&(0x7f00000015c0)={0xa, 0x4e23, 0x5, @remote, 0x6}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000001600)="dede4d9cb9cf6aec95dce69cc71d82fe042d71944d415ed662ad9411baf19f905e1945a3429b7f79dded37334baa161c3d037c757ec0cb7e269ac9cb8f41f46464d4f1404d72a83992746aa648ecfdc6e131cb2462a9675ccb45712a86fc7a7ec2e163a19a0b86523db2f652846f7d5bc5bdba497f73db6935630a8c971d576a827c22c2a986972a424b95bbfb9eca10f4244c8593f203b48a96b95b9efdab45ed904fb443fa4c3f6121cd7ce6bf5197bc35a8e12226070ef129f5a742065fc8c52465c8333e4be046cdba352d77f0c57b580ccc24cd3b30a414e12a20aff5c5554d84ec3b0902c4e1ba5fff596854", 0xef}, {&(0x7f0000001700)="5c5ba1933d28e9961e77bf94ef72358839d627647fc4e38c1e32924f290f415f5eb05fd2303d16e09c977aa3078ae1050bfc6e3cb18bf99e867cc0f2449ff4be6878a80dd4d8dcb561c08e65355c54a10dbce98fe8ada4aed7399c9aca4adcd7444d306317c71188582ab189", 0x6c}, {&(0x7f0000001780)="07c3de18dd00f625559b4c4ccdd6fa34da9ddddcbb4f7dc9c5f3c16ce6760614d551818af3fd42a694fe01a59a98ffa1f503aec7dfea7e9c2c14ba6c4072f840c3226545ef29d49bd5c16acf4b5abd48580726ad08c8da60a4525dc500384ebe6fa2fc818c8f1b169bd519d23a192267918d72438b950d9891116ccacd82d8a506c7db159b71e7c85977d882ec9caf2f665392f8fb282fb0344ed8b4096b62756f7d782576903da2b184895c1f573ca76e553bc070a6057d388f5624c4dcc06a28234f16286bfc3a217430853a7bf163dfbe7156e63a2a7229c72a00c46f13f2de885cda40f31d89f27339262992014bc28b722f13ff88e5", 0xf8}, {&(0x7f0000001880)="11d089a9292a74fe1d9b50aca3f8242047348778e46a9c102076b363a3b967553dec5d34147a7ddf785c342d6a01f83f6b8303b30a914acf41567123dc6f5f8e429afffdd3923650216f197df207d25da7690653290be8840eac4cf41a0dff486649c91c9fabfaa232345a068c57f6d6cc435cfe0b79b822705df5c57e21286c362aa59c9f895436f8dab5d8582e4d0d0a94dd76fcf2", 0x96}, {&(0x7f0000001940)="194ffc7d81b416d52d31893f7f1a968d443b8a507eb0349706a027981d519f9f2c8481679759c68fbbe81c600c36897a0c51ecd2386ebdcd1489571876f4471c52580f111c4b94df7a00d13ee7cbf97a59aa1ce4d22920935436d3804f3929ef1768ddb3a76a33cd169cc7898599b2d6afd7e3140328c4e53adfcb0887dad4d04dd8668c408f9fc34fbe697eef670b4dd102ac0229362748818b52f37df226ed4d3411e2cbc187a4a1df5755184d345e290315d2b3a8fc280de4dbd418e067b438372b054b3184e71b20ff5bece9", 0xce}, {&(0x7f0000001a40)="a3714ab55a4c153d44fef73c89d65d", 0xf}, {&(0x7f0000001a80)="cb7f1963bd424a71d35cfa43156d9f9b597d22ce06cf2a4692a2381c16e35852046de9b9", 0x24}, {&(0x7f0000001ac0)="1d3a1e57d04af8edebd13feb846130ea7ae247a5c89e551e9c2ea3db7635cf545f973b1ad32b2e479b1d3cb02b01a9de4faded7f79150f19e97de4a4388a50ed2f5de05209e38e39206988f4cd817c293038917ac3f5a3895b5033aadd29ffb7ab42fdc85e9f7f550b8e3731c65325524336dfc15a227db4551ba4594d89c1fa4af32cd7f1fc3b4a1387017014", 0x8d}], 0x8, &(0x7f0000001cc0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x5e, 0x2, 0x1, 0x40, 0x0, [@loopback]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @rthdr={{0xb8, 0x29, 0x39, {0x0, 0x14, 0x1, 0xf, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @remote, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r6}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x32, 0x0, 0x2, 0x7}}}], 0x190}}, {{&(0x7f0000001e80)={0xa, 0x4e22, 0x200, @local, 0x8}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000001ec0)="c6bd45a9e756a6457dd902247854cae87218caf1afcd68c6e921e93b2123328ab7a21e9fcafab30569af53280707312edad9016841e4ca274fc9949d678b2401bda2e8fec1813b41b3506c693b667369878d89612762131913c0e874f443554b5b30d395508fda117f091336dc169ca4e046ffeae78b218a16ce69a5c8e5cfbf1d656e8ad3fe4cfe2db0b492612c1f41c6ec35c930f4ab7cbf95e01de74adb6c721bb3c92fc777d712f4d0034adb79c1757062d85319c4c565d56b9a0a4e67a391e7e64b6326c6184b6d4f538b669d9c6230b2b533724de1a116b930a892c35b67978b5bb2ab44532ba312230475200937bc531e", 0xf4}, {&(0x7f0000001fc0)="2943c6afb34759af1d272a0d8838ea0303a1bc", 0x13}, {&(0x7f0000002000)="f7d0bb4d44df13afb680ecd820111e3b5cad1dece001843f2b5a85000878ba8619101e5cf68ea300fae52de7b1551bc75d26cd5c7db4779d11392abe8be367c896d3bf1efa5313ff6a5f8befa0d0e67e4b805de66b31c2eb774f4277f413f257827d76b4e425a117ccb80a491083d62b7f9ff7", 0x73}, {&(0x7f0000002080)="dd14e742cdcd1496c844483bda4e559634def85190340c720eb5dee1745d6a458253f2eff670ec6dd11a2295eff4738cc8a36f0899204f568df5d2d7ee983fc598c40baf43f6e1ae3901ebb824a7e8edcffc9ac9f1332bf7cc9be91886a9677a6c81e4295be7eb2cb633ad779e7f91030313213f49bc23a01c9a19e86734e9c8eb560f026ba1b8e2b1e5d908cb43ebe9926ff9e05805bfe80f2dfb884cc6064f457cb6827ec5a0146aaa6bbdf877c3ab91a793fc11ae22abde371d0617182e7de0712b476f53c49b2d19c1b9d1c282f85c3130df99020fe96e98e98a997c64a33a6aa6b0dd64f1c5483a4933f275b15de0", 0xf1}], 0x4}}, {{&(0x7f00000021c0)={0xa, 0x4e23, 0x40000000, @private1, 0x2}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000002200)="b1fe536949f87d365357b6193904e1a176ad7529476802e7cc6de4670b02b7586061156f6ef01fc709dc577e8087a2338632a49276b835982aad23e595c5115f86771ed1aad6891572c0cd4999f7a2e7bd58f9ba2bdf72de31aa602d61e9f1c70914", 0x62}, {&(0x7f0000002280)="e9b9325b33cb8bf9523d8c27ebf714db5ed897c21b041bd568", 0x19}, {&(0x7f00000022c0)="ecff4d7d9ab32a374db935112bc555127375ca97eb7d79bb83b8c99724947ed0bcfc6dc62590021e5d3dece628b4c146b05358263ed46b4c197084548b350277e387c8dee1fccf0a304734348055d5a25d6668", 0x53}, {&(0x7f0000002340)="5c7853f1ea9288fd760f00a5e7671fd377369c0ceada3f41dc1ab64e25a96a2aa77683ea81f7b9d310b800e8042a0af7866d1944fa09cc1d7ac97a95262967f2d04a53c215a528a5b188f4f9f5872ed333a9b8e533aa82f7ca4ab8e492e623d4456820a91088ca98260ab2b1448a6bcb26753f9466b263d9a827cbbf59abf92c204950b81ed9ce0314f57337da2f8849b860859c4f23d1d55e99233796fe0d5c46faffa2d32419a2931a1dbecf03749e9d308626b45ecb49f04555d8b8712582a0f933e883274457bc21ad5d8e504053f7e53d68e1257f0fc134046974", 0xdd}, {&(0x7f0000002440)="9306327f7d35a34c55dde1ca3cbf5b279c56a32972f0f64417b35dbc909322cce5627a29288d3a403ee4cf58eeb56bde2da2f4097468572911e1b96b62e0dee37e09de3009fb8861ecbb52d4543dc198a787e7af32f04b7e6f3ed1c1a1d5ec8cefe39e4a23930bdb06e8626320bfa5cb950bb4f972f30a1a6af9c33e2ce8fde03114390c236c0ee327ff5f43f2c6fff6583404ea7c324367d1b1e80f5fbe5b614759371ea2f848c58aa67a340951292f80", 0xb1}, {&(0x7f0000002500)="c26b9c7f433270152644eca852da2a35bfae93a5871ed56522527d235bc74c28c6bfaf3587380cc94a546bbc796f2bcf676426838efb3af561c77c817ac92c14151b68896dc31f84a2466ac9ca164718d53613835dc57912c7d1bd78d0732f7341d5f5a69b97f3e9b85bbefedb31039704b3aa3a2a474c04331b", 0x7a}, {&(0x7f0000002580)="528f52b1599af0d932e49ab05abea098fdd6facede26328870e002dc46ca1631af4aa89d0faafb92122ce5c1f86c03bd254ef552c59aa082d1bc97202bd37ea4e9e07e644fca09f89d0243e8fd9e8cfbf180296b", 0x54}, {&(0x7f0000002600)="4cbc7416cd2123e662adeafedd4d85ec5cf1a66cdc1f85e236065320d299ed396ab6e2ce609e32276f15c38f043ca15d7044fa79d33915101bc86bf86fbb6023ae176519ce0b78962b4aa574eea3417ac95b633d86cc6206eef3ed56db77033aa0535f8108dfba1e205217529b27bed27cbb1b84451ae5564f7ede21884df59812b77b7f093f968e9ba074e03c0ccc1191ba0b74116aa5e19172074a91ffa4f91a39352370", 0xa5}], 0x8, &(0x7f00000028c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1, r7}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r8}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @rthdr={{0x98, 0x29, 0x39, {0x73, 0x10, 0x0, 0x53, 0x0, [@local, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2c}, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, @local]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r9}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x6c}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0x170}}], 0x3, 0x40) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000002b00)) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000002b80)=0x0) sendmsg$nl_generic(r10, &(0x7f0000003180)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003140)={&(0x7f0000002bc0)={0x558, 0x2e, 0x300, 0x70bd29, 0x25dfdbfe, {0x1}, [@nested={0x1a5, 0x109, 0x0, 0x1, [@generic="a1c4f5e7e969c5d5348fd0b2542f66202ec68e8e01a8de9bcd0940342b3126037f77db9b898cf4f489ad135ffb1799a2490cb59d19a1acc025cc689855ad50b1cc1042e107f967c0944111bbaff8f251cbb8f1d49472e9f046fc7f0de70149a468df46e8468efd9941b5fc4980750f54eb3ac184a7b34737d91fe8ac17b258717bfff6920a04b91ed13f0a0989fc653217c4be155bceb96c38b5fbac35d6dada5a26c18f0f9c7ba9c7578c34be95e38ec6f1412966af14ca80fbbc7154fe0680c203cb59a7fa9a5f9d04675335", @nested={0x4, 0x152}, @typed={0x94, 0x95, 0x0, 0x0, @binary="b7c8527e9b9c7698382c24417978d0fb56eb4ef1c82a75e2fa6e2da154f5240fcd9ac028d07cb8675ded497a50309b9bad3d8b12330e39c4d8d04a7baf92a4a6fb28957cf5963476450d7bd57f90a80b5f31f9bbdca3478fb06be6dbb6331ee863f20bed9780ce4872c101aa0c29d0bb0ba7d07da76e48fda10e224d6a046662355ed3650779348245a1782721376d14"}, @typed={0x8, 0xae, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="48933bd9b2b3c3c41d09913c82c9014c667388becfd8d3e0f69f016503ef855e634591", @generic="d97dfbd6adbbf70d4d02a01044a1e14ad7"]}, @nested={0x33a, 0x24, 0x0, 0x1, [@generic="7406f3d86540129a14c6952f562d355d00941dcbe8924d801b093e8032112d682c73ef4a391f3e3da618b1813ce4d6674b56cf31de2efb51dc79a3da5e03e2741545", @typed={0x7, 0x9a, 0x0, 0x0, @str='[[\x00'}, @generic="ded2ba3473611ccf11d619496131e0e460a1ba62155fe17ce286f1c7a29870fb1cad8f215b6d3efacb2cd9cb94b0f39039427da3d7cd536252b48a322cf1c35f7c43a3463dc27acda94e24b7e4f0e279eea65f39f49a7d1c3042d0a66142a4f23ab112e8c5a0815c812ef5a8338a7542d31a7458062ec54135751acd0558481d30b8c919dd75ade8664d94ed3ea92ed7ad86aa1b33f71f2e300662383d6295eb552981b0f801e950ee3f9c44aaae4680d7f7eace3a4c7e90f03d9758d658", @typed={0x8, 0xb4, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="6131852dc7e62f7ecf7e60950664d224bcabce375ef0ff1d36219d74bda1e6dc697a3cffaeae4665366db5bf2ef3a4681360d2e367f3e2af6ac3597a49526ca0855e4889a7159f4c7fd1ac8b179c5c848c83d0d8ab00943c5998cc9965f77e49b6b94afbc87478d23c05c3477c417ba718ce12e458312e558640541278198b4b3e4f4c3af62f1616e99e5592eeefea608158d36360b809544d918aba7f5a5a87a12c68abfeb0b4db5bf2e9416271f9145113ab39db7d02632cad24aaed4b5f7eedd5099ebaa8352d0ce0435dcd31395510c85b8d5bee3f16fb9a3e1822b999ffd4c794ca62e5d8e688f9339bbc08d8cc890159f189", @nested={0x4, 0xec}, @generic="3205603429b478d7af31b0583fd23068f67420b1c8386e1fa10b60a2d697e217a474f073ed9a", @nested={0x4, 0xfd}, @generic="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", @typed={0x8, 0x1d, 0x0, 0x0, @pid=r11}]}, @typed={0x6, 0x124, 0x0, 0x0, @str=',\x00'}, @nested={0x1b, 0x74, 0x0, 0x1, [@nested={0x4, 0x8b}, @generic="2f7da9b57162b7763ebd1f7191ed1d20c1a92c"]}, @nested={0x39, 0x10c, 0x0, 0x1, [@generic="6ddf5c62b48c000663d9cd7b23a4e1c8a6d558ac5187dc4fac3b8ac5c040ab121d03a4115a247f52cc6821b7ee659ead2fdcb1a760"]}]}, 0x558}, 0x1, 0x0, 0x0, 0x240048d1}, 0x80091) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000031c0)=0x6, 0x8) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000003740)={0x0, @multicast2}, &(0x7f0000003780)=0xc) setsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f00000037c0)={r12, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000003800)={0x0, 0x4, 0x2, 0x0, 0x0, [{{r2}, 0x9}, {{r4}, 0x1}]}) 390.351109ms ago: executing program 3 (id=9940): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0x0, 0xd}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x250}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x200}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x70, 0x8001, 0x20000000, 0xb9d9, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x80) 381.182345ms ago: executing program 2 (id=9941): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x62080, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1000000}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8", 0x2}], 0x1}}], 0x1, 0x2881) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r2, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeef", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf9", 0x35}, {&(0x7f0000002240)="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", 0x51d}], 0x2}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f01400ffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ffffff1f850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x4004880}, 0x4004000) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x471ee77f159b3efc}, 0x4044010) 350.024482ms ago: executing program 0 (id=9942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x80002005}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000052d1b38cd717f20ac0d012afc3d87f7342bb3ed076d45a3a500be341dec1cbc45445223a33496c80c4ad682fe21d0f062b4e9a71f88e29deedd61c474ed0fbc6f02d46dab4bd25e474934351d6e36218da04d06f69e596b016a961bb32f35a6df0401f2d49280bf70700930e680138a4e7ebe4539364faab58c5a2d041af72275dc58da3a0be3480fe3d274de1426608e58aaedaf96ab46e5878d0", @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdbdf2501000000040001800800028004003480"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 346.375481ms ago: executing program 4 (id=9943): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001002bbd7000ffdbdf25e0000002000000000000000000000000fc0100000000000000000000000000010000ffff000200000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000fe0f00000000000073b4fffbffffffff040000000000000000000000000000000000000010000000000000000000200200000000000000fffffffffffffffffeffffffc06b6e000000000300000000"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500", @ANYRES64=r1], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0xef, "1b082a8e34392279fb9dc8bb4e71b22f761577a73bb337605f0786868cf9b6823c0711cc1822e07138e633ae76631731c223873ac03324b9d42855abaff335c3397bb7b0efd16e1d9f4be60ca16c30aae0505a12c7dc8f29ed2dd299c88e5057d29b87570a68f297d1130021ec6651fa5188ebc97c2293ed0899000c4cb2d9b05c1bdafc3492abc37ff4a73107e6c3a0c21edf21bdeae944ddb854e32cc33556811b0f17d308fdcb4c25bf441c0cd2c7dc9bd560d8dcb1053fc70531485b2099140f52c49b0a3fafcba72fb33c075e9e8ad3ae8d17a54ac423957aaccd7f595f4b51bd887f4e5108ac66363e87198c"}, &(0x7f0000000440)=0xf7) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r6 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) recvfrom$x25(r6, &(0x7f0000000500)=""/80, 0x50, 0x100, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x1, 0xf00) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000004c0)={r4, 0xc}, 0x8) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 177.788878ms ago: executing program 3 (id=9944): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r2) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSGROWFSLOG(r3, 0x4008586f, &(0x7f00000001c0)={0x5, 0x1}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x11a21}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffff800, 0x861, 0x4, 0x8100}}]}]}]}, @IFLA_MASTER={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8041}, 0x48880) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="080077aa", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x4c000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r7, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044080}, 0x240000c0) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 32.984232ms ago: executing program 4 (id=9945): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0xffff, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0x4}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x6e6bc0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500", @ANYRES64=r1], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) (fail_nth: 2) 31.977045ms ago: executing program 0 (id=9946): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x14, 0x31, 0x8101, 0xe501, 0x1000, {}, [{0xa0, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x0, 0xffff}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb4}}, 0x0) 0s ago: executing program 2 (id=9947): syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbabbbb86dd60000000002406ff010000db598a2fa8000000000000000000000000aaff"], 0x0) close(0xffffffffffffffff) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000000)) socket(0x1d, 0x2, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r4, 0xf5f) accept(r4, 0x0, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8922, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r1, @ANYRESHEX=r4, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r6], 0x0, 0x40, 0x0, 0x0, 0x41000, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000006000000003030002e20"], 0x0, 0x1e, 0x0, 0x1, 0x3}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r11, 0x2c}, 0x10) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): omm: syz.1.8933 Not tainted syzkaller #0 PREEMPT(full) [ 1121.811961][ T3581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1121.811972][ T3581] Call Trace: [ 1121.811979][ T3581] [ 1121.811988][ T3581] dump_stack_lvl+0xe8/0x150 [ 1121.812019][ T3581] should_fail_ex+0x410/0x560 [ 1121.812044][ T3581] should_failslab+0xa8/0x100 [ 1121.812067][ T3581] ? alloc_vfsmnt+0x23/0x410 [ 1121.812091][ T3581] kmem_cache_alloc_noprof+0xa1/0x600 [ 1121.812129][ T3581] ? alloc_vfsmnt+0x23/0x410 [ 1121.812146][ T3581] ? lock_acquire+0x115/0x350 [ 1121.812169][ T3581] alloc_vfsmnt+0x23/0x410 [ 1121.812191][ T3581] clone_mnt+0x4b/0x9b0 [ 1121.812217][ T3581] copy_tree+0x3d8/0x940 [ 1121.812245][ T3581] copy_mnt_ns+0x3de/0xcc0 [ 1121.812271][ T3581] ? rcu_is_watching+0x16/0xb0 [ 1121.812295][ T3581] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1121.812319][ T3581] ? kmem_cache_alloc_noprof+0x31f/0x600 [ 1121.812364][ T3581] create_new_namespaces+0xcf/0x6b0 [ 1121.812395][ T3581] ? bpf_lsm_capable+0x9/0x20 [ 1121.812411][ T3581] ? security_capable+0x7e/0x2c0 [ 1121.812441][ T3581] unshare_nsproxy_namespaces+0x149/0x190 [ 1121.812468][ T3581] ksys_unshare+0x5a7/0x950 [ 1121.812499][ T3581] ? __pfx_ksys_unshare+0x10/0x10 [ 1121.812525][ T3581] ? __pfx_ksys_write+0x10/0x10 [ 1121.812561][ T3581] __x64_sys_unshare+0x38/0x50 [ 1121.812586][ T3581] do_syscall_64+0x166/0x520 [ 1121.812609][ T3581] ? trace_irq_disable+0x3b/0x140 [ 1121.812627][ T3581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.812646][ T3581] ? clear_bhb_loop+0x70/0xc0 [ 1121.812669][ T3581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.812687][ T3581] RIP: 0033:0x7f9e4b19e159 [ 1121.812705][ T3581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.812720][ T3581] RSP: 002b:00007f9e4c0bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1121.812741][ T3581] RAX: ffffffffffffffda RBX: 00007f9e4b425fa0 RCX: 00007f9e4b19e159 [ 1121.812755][ T3581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060020400 [ 1121.812767][ T3581] RBP: 00007f9e4c0bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.812779][ T3581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1121.812790][ T3581] R13: 00007f9e4b426038 R14: 00007f9e4b425fa0 R15: 00007ffec79d3998 [ 1121.812822][ T3581] [ 1121.816466][ T3578] netlink: 284 bytes leftover after parsing attributes in process `syz.0.8932'. [ 1122.312057][ T3590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8937'. [ 1122.312082][ T3590] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8937'. [ 1122.402829][ T3597] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 1122.495267][ T3604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8940'. [ 1122.495315][ T3604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8940'. [ 1122.659217][ T3612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8944'. [ 1122.659241][ T3612] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8944'. [ 1122.997408][ T3631] batadv_slave_1: entered promiscuous mode [ 1123.000929][ T3631] batadv_slave_1: left promiscuous mode [ 1123.188871][ T3636] FAULT_INJECTION: forcing a failure. [ 1123.188871][ T3636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.188902][ T3636] CPU: 1 UID: 0 PID: 3636 Comm: syz.3.8951 Not tainted syzkaller #0 PREEMPT(full) [ 1123.188923][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1123.188933][ T3636] Call Trace: [ 1123.188941][ T3636] [ 1123.188950][ T3636] dump_stack_lvl+0xe8/0x150 [ 1123.188980][ T3636] should_fail_ex+0x410/0x560 [ 1123.189006][ T3636] _copy_from_user+0x2d/0xb0 [ 1123.189032][ T3636] ___sys_recvmsg+0x173/0x5a0 [ 1123.189064][ T3636] ? __pfx____sys_recvmsg+0x10/0x10 [ 1123.189095][ T3636] ? lock_acquire+0x115/0x350 [ 1123.189127][ T3636] ? __fget_files+0x3a2/0x420 [ 1123.189160][ T3636] do_recvmmsg+0x31a/0x7f0 [ 1123.189193][ T3636] ? __pfx_do_recvmmsg+0x10/0x10 [ 1123.189229][ T3636] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1123.189255][ T3636] ? __fget_files+0x3a2/0x420 [ 1123.189288][ T3636] __x64_sys_recvmmsg+0x198/0x250 [ 1123.189316][ T3636] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1123.189352][ T3636] do_syscall_64+0x166/0x520 [ 1123.189375][ T3636] ? trace_irq_disable+0x3b/0x140 [ 1123.189392][ T3636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.189410][ T3636] ? clear_bhb_loop+0x70/0xc0 [ 1123.189431][ T3636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.189456][ T3636] RIP: 0033:0x7f5963d9e159 [ 1123.189472][ T3636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.189486][ T3636] RSP: 002b:00007f5964cdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1123.189505][ T3636] RAX: ffffffffffffffda RBX: 00007f5964025fa0 RCX: 00007f5963d9e159 [ 1123.189518][ T3636] RDX: 0000000000000004 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1123.189530][ T3636] RBP: 00007f5964cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.189542][ T3636] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 1123.189554][ T3636] R13: 00007f5964026038 R14: 00007f5964025fa0 R15: 00007fff813e87f8 [ 1123.189584][ T3636] [ 1123.517238][ T3641] netlink: 'syz.3.8953': attribute type 1 has an invalid length. [ 1123.517260][ T3641] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8953'. [ 1123.923252][ T3639] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 1123.973016][ T3657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8960'. [ 1124.373729][ T3672] Set syz1 is full, maxelem 2076 reached [ 1124.425123][ T3680] netlink: 'syz.3.8967': attribute type 4 has an invalid length. [ 1124.448464][ T3680] netlink: 'syz.3.8967': attribute type 4 has an invalid length. [ 1124.507247][ T3683] ip6t_srh: unknown srh invflags BA61 [ 1124.948370][ T3706] bond19: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1124.950443][ T3706] bond19 (unregistering): Released all slaves [ 1125.720872][ T3743] ip6t_srh: unknown srh invflags BA61 [ 1126.665433][ T3785] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1126.665519][ T3785] syzkaller0: linktype set to 8 [ 1126.963052][ T3793] __nla_validate_parse: 17 callbacks suppressed [ 1126.963072][ T3793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8990'. [ 1127.004178][ T3793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8990'. [ 1127.005088][ T3793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8990'. [ 1127.169789][ T3797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8991'. [ 1127.381912][ T3803] ip6t_srh: unknown srh invflags BA61 [ 1127.465210][ T3813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8996'. [ 1127.465242][ T3813] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8996'. [ 1127.593101][ T3819] xt_IDLETIMER: timeout value is zero [ 1128.004994][ T3845] FAULT_INJECTION: forcing a failure. [ 1128.004994][ T3845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1128.005026][ T3845] CPU: 1 UID: 0 PID: 3845 Comm: syz.2.9003 Not tainted syzkaller #0 PREEMPT(full) [ 1128.005046][ T3845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1128.005058][ T3845] Call Trace: [ 1128.005065][ T3845] [ 1128.005074][ T3845] dump_stack_lvl+0xe8/0x150 [ 1128.005105][ T3845] should_fail_ex+0x410/0x560 [ 1128.005134][ T3845] _copy_from_iter+0x1d3/0x1660 [ 1128.005157][ T3845] ? __alloc_skb+0x27a/0x7a0 [ 1128.005188][ T3845] ? __alloc_skb+0x27a/0x7a0 [ 1128.005210][ T3845] ? __alloc_skb+0x27a/0x7a0 [ 1128.005231][ T3845] ? __pfx__copy_from_iter+0x10/0x10 [ 1128.005251][ T3845] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1128.005279][ T3845] ? __alloc_skb+0x27a/0x7a0 [ 1128.005299][ T3845] ? __alloc_skb+0x27a/0x7a0 [ 1128.005327][ T3845] ? netlink_sendmsg+0x650/0xb40 [ 1128.005346][ T3845] ? skb_put+0x112/0x210 [ 1128.005372][ T3845] netlink_sendmsg+0x6c0/0xb40 [ 1128.005400][ T3845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1128.005428][ T3845] ? apparmor_socket_sendmsg+0x98/0x360 [ 1128.005452][ T3845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1128.005470][ T3845] sock_sendmsg_nosec+0x13a/0x180 [ 1128.005493][ T3845] ____sys_sendmsg+0x54e/0x850 [ 1128.005524][ T3845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1128.005559][ T3845] ? import_iovec+0x73/0xa0 [ 1128.005585][ T3845] ___sys_sendmsg+0x2a5/0x360 [ 1128.005610][ T3845] ? __lock_acquire+0x747/0x2de0 [ 1128.005634][ T3845] ? __pfx____sys_sendmsg+0x10/0x10 [ 1128.005693][ T3845] ? __fget_files+0x2a/0x420 [ 1128.005714][ T3845] ? __fget_files+0x3a2/0x420 [ 1128.005745][ T3845] __x64_sys_sendmsg+0x1b1/0x290 [ 1128.005771][ T3845] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1128.005817][ T3845] do_syscall_64+0x166/0x520 [ 1128.005841][ T3845] ? trace_irq_disable+0x3b/0x140 [ 1128.005860][ T3845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.005879][ T3845] ? clear_bhb_loop+0x70/0xc0 [ 1128.005901][ T3845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.005919][ T3845] RIP: 0033:0x7ff775d9e159 [ 1128.005936][ T3845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.005951][ T3845] RSP: 002b:00007ff776bce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1128.005971][ T3845] RAX: ffffffffffffffda RBX: 00007ff776025fa0 RCX: 00007ff775d9e159 [ 1128.005985][ T3845] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000003 [ 1128.005997][ T3845] RBP: 00007ff776bce090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.006009][ T3845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.006021][ T3845] R13: 00007ff776026038 R14: 00007ff776025fa0 R15: 00007ffd849dabd8 [ 1128.006051][ T3845] [ 1128.321771][ T3848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9004'. [ 1128.321795][ T3848] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9004'. [ 1128.615317][ T3857] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1128.660214][ T3857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9005'. [ 1128.781511][ T3863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9006'. [ 1129.044048][ T3867] ip6t_srh: unknown srh invflags BA61 [ 1130.070893][ T3923] ip6t_srh: unknown srh invflags BA61 [ 1130.666981][ T3949] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1130.878953][ T3959] tipc: Enabled bearer , priority 1 [ 1130.911659][ T3959] openvswitch: netlink: Flow actions attr not present in new flow. [ 1130.915568][ T3958] tipc: Resetting bearer [ 1130.943379][ T3958] tipc: Disabling bearer [ 1130.969640][ T3961] ip6t_srh: unknown srh invflags BA61 [ 1131.090501][ T3963] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1131.091199][ T3963] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1131.210563][ T3973] FAULT_INJECTION: forcing a failure. [ 1131.210563][ T3973] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.210594][ T3973] CPU: 1 UID: 0 PID: 3973 Comm: syz.4.9036 Not tainted syzkaller #0 PREEMPT(full) [ 1131.210616][ T3973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1131.210628][ T3973] Call Trace: [ 1131.210635][ T3973] [ 1131.210644][ T3973] dump_stack_lvl+0xe8/0x150 [ 1131.210675][ T3973] should_fail_ex+0x410/0x560 [ 1131.210702][ T3973] should_failslab+0xa8/0x100 [ 1131.210726][ T3973] __kmalloc_noprof+0xfe/0x720 [ 1131.210747][ T3973] ? bpf_test_init+0x9f/0x150 [ 1131.210763][ T3973] ? bpf_test_init+0x9f/0x150 [ 1131.210786][ T3973] bpf_test_init+0x9f/0x150 [ 1131.210807][ T3973] bpf_prog_test_run_skb+0x31e/0x2230 [ 1131.210837][ T3973] ? lock_acquire+0x115/0x350 [ 1131.210872][ T3973] ? __fget_files+0x3a2/0x420 [ 1131.210895][ T3973] ? __fget_files+0x2a/0x420 [ 1131.210924][ T3973] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1131.210952][ T3973] bpf_prog_test_run+0x2c5/0x340 [ 1131.210978][ T3973] __sys_bpf+0xa22/0xd90 [ 1131.211007][ T3973] ? __pfx___sys_bpf+0x10/0x10 [ 1131.211038][ T3973] ? __fget_files+0x2a/0x420 [ 1131.211078][ T3973] ? ksys_write+0x242/0x270 [ 1131.211106][ T3973] ? __pfx_ksys_write+0x10/0x10 [ 1131.211137][ T3973] __x64_sys_bpf+0xba/0xd0 [ 1131.211160][ T3973] do_syscall_64+0x166/0x520 [ 1131.211182][ T3973] ? trace_irq_disable+0x3b/0x140 [ 1131.211201][ T3973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.211219][ T3973] ? clear_bhb_loop+0x70/0xc0 [ 1131.211240][ T3973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.211258][ T3973] RIP: 0033:0x7f2e5ed9e159 [ 1131.211276][ T3973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.211291][ T3973] RSP: 002b:00007f2e5fc51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1131.211310][ T3973] RAX: ffffffffffffffda RBX: 00007f2e5f025fa0 RCX: 00007f2e5ed9e159 [ 1131.211323][ T3973] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1131.211333][ T3973] RBP: 00007f2e5fc51090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.211344][ T3973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.211358][ T3973] R13: 00007f2e5f026038 R14: 00007f2e5f025fa0 R15: 00007ffeb13b6948 [ 1131.211387][ T3973] [ 1131.621117][ T3983] netlink: 'syz.1.9038': attribute type 11 has an invalid length. [ 1131.782660][ T3993] FAULT_INJECTION: forcing a failure. [ 1131.782660][ T3993] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.782689][ T3993] CPU: 1 UID: 0 PID: 3993 Comm: syz.1.9041 Not tainted syzkaller #0 PREEMPT(full) [ 1131.782709][ T3993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1131.782719][ T3993] Call Trace: [ 1131.782727][ T3993] [ 1131.782735][ T3993] dump_stack_lvl+0xe8/0x150 [ 1131.782766][ T3993] should_fail_ex+0x410/0x560 [ 1131.782793][ T3993] should_failslab+0xa8/0x100 [ 1131.782816][ T3993] ? dst_alloc+0x105/0x170 [ 1131.782835][ T3993] kmem_cache_alloc_noprof+0xa1/0x600 [ 1131.782863][ T3993] ? is_bpf_text_address+0x26/0x2b0 [ 1131.782885][ T3993] ? dst_alloc+0x105/0x170 [ 1131.782908][ T3993] dst_alloc+0x105/0x170 [ 1131.782930][ T3993] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1131.783035][ T3993] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1131.783066][ T3993] ip_route_output_key_hash+0x18d/0x2a0 [ 1131.783091][ T3993] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1131.783128][ T3993] tcp_v4_connect+0x6fd/0x1950 [ 1131.783180][ T3993] ? __x64_sys_sendto+0xde/0x100 [ 1131.783219][ T3993] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1131.783252][ T3993] __inet_stream_connect+0x258/0xe00 [ 1131.783285][ T3993] ? __pfx___inet_stream_connect+0x10/0x10 [ 1131.783305][ T3993] ? __kasan_kmalloc+0x93/0xb0 [ 1131.783328][ T3993] ? __kmalloc_cache_noprof+0x321/0x600 [ 1131.783347][ T3993] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1131.783364][ T3993] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 1131.783393][ T3993] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 1131.783421][ T3993] tcp_sendmsg_locked+0x4b02/0x5400 [ 1131.783468][ T3993] ? __lock_acquire+0x747/0x2de0 [ 1131.783493][ T3993] ? kstrtouint+0x6e/0xe0 [ 1131.783514][ T3993] ? lock_acquire+0x115/0x350 [ 1131.783540][ T3993] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1131.783569][ T3993] ? tcp_sendmsg+0x21/0x50 [ 1131.783594][ T3993] ? __local_bh_enable_ip+0xd6/0x140 [ 1131.783623][ T3993] tcp_sendmsg+0x2f/0x50 [ 1131.783645][ T3993] ? __pfx_inet_sendmsg+0x10/0x10 [ 1131.783662][ T3993] sock_sendmsg_nosec+0x10e/0x180 [ 1131.783685][ T3993] __sys_sendto+0x408/0x5a0 [ 1131.783707][ T3993] ? ksys_write+0x1e6/0x270 [ 1131.783737][ T3993] ? __pfx___sys_sendto+0x10/0x10 [ 1131.783757][ T3993] ? __mutex_unlock_slowpath+0x731/0x900 [ 1131.783811][ T3993] ? __pfx_ksys_write+0x10/0x10 [ 1131.783851][ T3993] __x64_sys_sendto+0xde/0x100 [ 1131.783878][ T3993] do_syscall_64+0x166/0x520 [ 1131.783901][ T3993] ? trace_irq_disable+0x3b/0x140 [ 1131.783918][ T3993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.783937][ T3993] ? clear_bhb_loop+0x70/0xc0 [ 1131.783960][ T3993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.783978][ T3993] RIP: 0033:0x7f9e4b19e159 [ 1131.783995][ T3993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.784010][ T3993] RSP: 002b:00007f9e4c0bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1131.784030][ T3993] RAX: ffffffffffffffda RBX: 00007f9e4b425fa0 RCX: 00007f9e4b19e159 [ 1131.784050][ T3993] RDX: ffffffffffffff58 RSI: 0000200000000140 RDI: 0000000000000003 [ 1131.784063][ T3993] RBP: 00007f9e4c0bf090 R08: 0000200000000100 R09: 0000000000000010 [ 1131.784081][ T3993] R10: 0000000020008005 R11: 0000000000000246 R12: 0000000000000001 [ 1131.784092][ T3993] R13: 00007f9e4b426038 R14: 00007f9e4b425fa0 R15: 00007ffec79d3998 [ 1131.784122][ T3993] [ 1131.982375][ T4002] __nla_validate_parse: 17 callbacks suppressed [ 1131.982395][ T4002] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9044'. [ 1131.982410][ T4002] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9044'. [ 1132.652250][ T4022] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9049'. [ 1132.652385][ T4022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9049'. [ 1132.727273][T18913] Bluetooth: hci4: command 0x0405 tx timeout [ 1132.891320][ T4030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9051'. [ 1133.249190][ T4043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9056'. [ 1133.249215][ T4043] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9056'. [ 1133.629471][ T4057] netlink: 'syz.3.9061': attribute type 1 has an invalid length. [ 1133.649802][ T4060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9062'. [ 1133.654381][ T4057] bond8: entered promiscuous mode [ 1133.654665][ T4057] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1133.699915][ T4057] bond8: (slave bridge0): making interface the new active one [ 1133.699939][ T4057] bridge0: entered promiscuous mode [ 1133.700957][ T4057] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 1133.789529][ T4062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9063'. [ 1133.874685][ T4072] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1134.361819][ T4083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.362019][ T4083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.362179][ T4083] bridge_slave_0: entered allmulticast mode [ 1134.363969][ T4087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9070'. [ 1134.369755][ T4083] bridge_slave_0: entered promiscuous mode [ 1134.370664][ T4083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.370766][ T4083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.439799][ T4083] bridge_slave_0: left allmulticast mode [ 1134.439826][ T4083] bridge_slave_0: left promiscuous mode [ 1134.440041][ T4083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.103356][ T4118] FAULT_INJECTION: forcing a failure. [ 1135.103356][ T4118] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.103386][ T4118] CPU: 1 UID: 0 PID: 4118 Comm: syz.4.9079 Not tainted syzkaller #0 PREEMPT(full) [ 1135.103407][ T4118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1135.103419][ T4118] Call Trace: [ 1135.103427][ T4118] [ 1135.103435][ T4118] dump_stack_lvl+0xe8/0x150 [ 1135.103466][ T4118] should_fail_ex+0x410/0x560 [ 1135.103494][ T4118] should_failslab+0xa8/0x100 [ 1135.103516][ T4118] ? inet_frag_find+0x8c6/0x1e50 [ 1135.103537][ T4118] kmem_cache_alloc_noprof+0xa1/0x600 [ 1135.103569][ T4118] ? inet_frag_find+0x8c6/0x1e50 [ 1135.103598][ T4118] inet_frag_find+0x8c6/0x1e50 [ 1135.103617][ T4118] ? __pfx_ip6frag_obj_cmpfn+0x10/0x10 [ 1135.103757][ T4118] ? __pfx_inet_frag_find+0x10/0x10 [ 1135.103781][ T4118] ? nf_frag_pernet+0x23/0x240 [ 1135.103813][ T4118] nf_ct_frag6_gather+0x8b2/0x24c0 [ 1135.103851][ T4118] ? nf_ct_frag6_gather+0x5c9/0x24c0 [ 1135.103876][ T4118] ? __pfx_nf_ct_frag6_gather+0x10/0x10 [ 1135.103907][ T4118] ? __netif_receive_skb_core+0x2a10/0x30c0 [ 1135.103940][ T4118] ipv6_defrag+0x2a9/0x3b0 [ 1135.103963][ T4118] ? __pfx_ipv6_defrag+0x10/0x10 [ 1135.103988][ T4118] nf_hook_slow+0xc5/0x220 [ 1135.104016][ T4118] NF_HOOK+0x21f/0x3c0 [ 1135.104070][ T4118] ? __pfx_sock_wfree+0x10/0x10 [ 1135.104096][ T4118] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1135.104127][ T4118] ? NF_HOOK+0x9e/0x3c0 [ 1135.104150][ T4118] ? __pfx_NF_HOOK+0x10/0x10 [ 1135.104172][ T4118] ? ip6_rcv_core+0xa1/0x1870 [ 1135.104198][ T4118] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1135.104229][ T4118] ? netif_receive_skb+0x102/0xbf0 [ 1135.104250][ T4118] netif_receive_skb+0x278/0xbf0 [ 1135.104276][ T4118] ? __pfx_netif_receive_skb+0x10/0x10 [ 1135.104301][ T4118] ? rcu_is_watching+0x16/0xb0 [ 1135.104323][ T4118] ? tun_rx_batched+0x185/0x790 [ 1135.104346][ T4118] tun_rx_batched+0x1de/0x790 [ 1135.104374][ T4118] ? __pfx_tun_rx_batched+0x10/0x10 [ 1135.104395][ T4118] ? lock_acquire+0x115/0x350 [ 1135.104423][ T4118] ? tun_get_user+0x23ba/0x44d0 [ 1135.104442][ T4118] ? __local_bh_enable_ip+0xd6/0x140 [ 1135.104466][ T4118] ? tun_get_user+0x27b0/0x44d0 [ 1135.104489][ T4118] tun_get_user+0x2be0/0x44d0 [ 1135.104524][ T4118] ? tun_get_user+0x27b0/0x44d0 [ 1135.104550][ T4118] ? aa_file_perm+0x4ed/0x15f0 [ 1135.104575][ T4118] ? __pfx_tun_get_user+0x10/0x10 [ 1135.104597][ T4118] ? __lock_acquire+0x747/0x2de0 [ 1135.104631][ T4118] ? ref_tracker_alloc+0x341/0x4b0 [ 1135.104653][ T4118] ? lock_acquire+0x115/0x350 [ 1135.104673][ T4118] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1135.104699][ T4118] ? lock_acquire+0x115/0x350 [ 1135.104717][ T4118] ? tun_get+0x1c/0x2f0 [ 1135.104744][ T4118] ? tun_get+0x1c/0x2f0 [ 1135.104763][ T4118] ? tun_get+0x1c/0x2f0 [ 1135.104788][ T4118] tun_chr_write_iter+0x113/0x200 [ 1135.104812][ T4118] vfs_write+0x612/0xba0 [ 1135.104849][ T4118] ? __pfx_vfs_write+0x10/0x10 [ 1135.104886][ T4118] ? __fget_files+0x2a/0x420 [ 1135.104920][ T4118] ksys_write+0x150/0x270 [ 1135.104949][ T4118] ? __pfx_ksys_write+0x10/0x10 [ 1135.104987][ T4118] do_syscall_64+0x166/0x520 [ 1135.105012][ T4118] ? trace_irq_disable+0x3b/0x140 [ 1135.105031][ T4118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.105051][ T4118] ? clear_bhb_loop+0x70/0xc0 [ 1135.105074][ T4118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.105093][ T4118] RIP: 0033:0x7f2e5ed5e98e [ 1135.105118][ T4118] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1135.105133][ T4118] RSP: 002b:00007f2e5fc50fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1135.105153][ T4118] RAX: ffffffffffffffda RBX: 00007f2e5fc516c0 RCX: 00007f2e5ed5e98e [ 1135.105167][ T4118] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8 [ 1135.105180][ T4118] RBP: 00007f2e5fc51090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.105192][ T4118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.105203][ T4118] R13: 00007f2e5f026038 R14: 00007f2e5f025fa0 R15: 00007ffeb13b6948 [ 1135.105235][ T4118] [ 1135.714238][ T4130] netlink: 'syz.2.9084': attribute type 1 has an invalid length. [ 1135.757987][ T4130] bond5: entered promiscuous mode [ 1135.758471][ T4130] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1135.804467][ T4130] bond5: (slave bridge0): making interface the new active one [ 1135.804492][ T4130] bridge0: entered promiscuous mode [ 1135.805537][ T4130] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 1136.385428][ T4150] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1136.490232][ T4150] 0ªX¹¦Dö»: left promiscuous mode [ 1136.862189][ T4167] netlink: 'syz.2.9094': attribute type 10 has an invalid length. [ 1136.876854][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.880117][ T4167] bond0: (slave team0): Enslaving as an active interface with an up link [ 1137.106058][ T4173] netlink: 'syz.0.9098': attribute type 1 has an invalid length. [ 1137.147211][ T4173] bond4: entered promiscuous mode [ 1137.147672][ T4173] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1137.201963][ T4173] bond4: (slave bridge0): making interface the new active one [ 1137.201986][ T4173] bridge0: entered promiscuous mode [ 1137.205066][ T4173] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 1137.526129][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1137.583561][ T4188] __nla_validate_parse: 15 callbacks suppressed [ 1137.583582][ T4188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9103'. [ 1137.683522][ T4191] Set syz1 is full, maxelem 2076 reached [ 1137.717074][ T4196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9105'. [ 1137.788037][ T4200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9107'. [ 1137.823909][ T4200] bond9: option lacp_active: invalid value (5) [ 1137.833747][ T4200] bond9 (unregistering): Released all slaves [ 1137.878308][ T4205] FAULT_INJECTION: forcing a failure. [ 1137.878308][ T4205] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.878337][ T4205] CPU: 0 UID: 0 PID: 4205 Comm: syz.3.9109 Not tainted syzkaller #0 PREEMPT(full) [ 1137.878357][ T4205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1137.878368][ T4205] Call Trace: [ 1137.878375][ T4205] [ 1137.878383][ T4205] dump_stack_lvl+0xe8/0x150 [ 1137.878415][ T4205] should_fail_ex+0x410/0x560 [ 1137.878440][ T4205] ? __alloc_skb+0x1db/0x7a0 [ 1137.878460][ T4205] should_failslab+0xa8/0x100 [ 1137.878483][ T4205] ? __alloc_skb+0x1db/0x7a0 [ 1137.878503][ T4205] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1137.878531][ T4205] ? __alloc_skb+0x18d/0x7a0 [ 1137.878553][ T4205] ? __alloc_skb+0x1db/0x7a0 [ 1137.878580][ T4205] __alloc_skb+0x1db/0x7a0 [ 1137.878606][ T4205] netlink_dump+0x1e7/0xee0 [ 1137.878642][ T4205] ? __pfx_netlink_dump+0x10/0x10 [ 1137.878672][ T4205] ? netlink_recvmsg+0x5bf/0xa50 [ 1137.878689][ T4205] ? kmem_cache_free+0x182/0x650 [ 1137.878709][ T4205] netlink_recvmsg+0x683/0xa50 [ 1137.878730][ T4205] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1137.878743][ T4205] ? lock_acquire+0x115/0x350 [ 1137.878760][ T4205] ? aa_sock_msg_perm+0x144/0x210 [ 1137.878782][ T4205] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1137.878799][ T4205] ? security_socket_recvmsg+0x7e/0x2c0 [ 1137.878821][ T4205] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1137.878835][ T4205] sock_recvmsg+0x196/0x1e0 [ 1137.878853][ T4205] ____sys_recvmsg+0x1e6/0x4a0 [ 1137.878880][ T4205] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1137.878913][ T4205] ? import_iovec+0x73/0xa0 [ 1137.878935][ T4205] ___sys_recvmsg+0x213/0x5a0 [ 1137.878966][ T4205] ? __pfx____sys_recvmsg+0x10/0x10 [ 1137.878990][ T4205] ? lock_acquire+0x115/0x350 [ 1137.879016][ T4205] ? __fget_files+0x3a2/0x420 [ 1137.879043][ T4205] do_recvmmsg+0x31a/0x7f0 [ 1137.879069][ T4205] ? __pfx_do_recvmmsg+0x10/0x10 [ 1137.879098][ T4205] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1137.879119][ T4205] ? __fget_files+0x3a2/0x420 [ 1137.879146][ T4205] __x64_sys_recvmmsg+0x198/0x250 [ 1137.879169][ T4205] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1137.879198][ T4205] do_syscall_64+0x166/0x520 [ 1137.879216][ T4205] ? trace_irq_disable+0x3b/0x140 [ 1137.879231][ T4205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.879246][ T4205] ? clear_bhb_loop+0x70/0xc0 [ 1137.879264][ T4205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.879278][ T4205] RIP: 0033:0x7f5963d9e159 [ 1137.879292][ T4205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.879304][ T4205] RSP: 002b:00007f5964cdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1137.879320][ T4205] RAX: ffffffffffffffda RBX: 00007f5964025fa0 RCX: 00007f5963d9e159 [ 1137.879330][ T4205] RDX: 0000000000000004 RSI: 0000200000002c80 RDI: 0000000000000003 [ 1137.879339][ T4205] RBP: 00007f5964cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.879348][ T4205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.879357][ T4205] R13: 00007f5964026038 R14: 00007f5964025fa0 R15: 00007fff813e87f8 [ 1137.879380][ T4205] [ 1138.268500][ T4215] netlink: 'syz.2.9113': attribute type 1 has an invalid length. [ 1138.365335][ T4215] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1138.421954][ T4227] FAULT_INJECTION: forcing a failure. [ 1138.421954][ T4227] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.421984][ T4227] CPU: 0 UID: 0 PID: 4227 Comm: syz.3.9116 Not tainted syzkaller #0 PREEMPT(full) [ 1138.422004][ T4227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1138.422016][ T4227] Call Trace: [ 1138.422024][ T4227] [ 1138.422032][ T4227] dump_stack_lvl+0xe8/0x150 [ 1138.422064][ T4227] should_fail_ex+0x410/0x560 [ 1138.422089][ T4227] should_failslab+0xa8/0x100 [ 1138.422115][ T4227] __kvmalloc_node_noprof+0x176/0x820 [ 1138.422139][ T4227] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 1138.422157][ T4227] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 1138.422183][ T4227] bpf_test_run_xdp_live+0x1ef/0x1c20 [ 1138.422206][ T4227] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 1138.422231][ T4227] ? __mutex_unlock_slowpath+0x731/0x900 [ 1138.422262][ T4227] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1138.422288][ T4227] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1138.422305][ T4227] ? 0xffffffffa04047c0 [ 1138.422359][ T4227] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1138.422385][ T4227] ? _copy_from_user+0x94/0xb0 [ 1138.422408][ T4227] ? bpf_test_init+0x113/0x150 [ 1138.422425][ T4227] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1138.422446][ T4227] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1138.422480][ T4227] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1138.422502][ T4227] ? __fget_files+0x2a/0x420 [ 1138.422529][ T4227] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1138.422548][ T4227] bpf_prog_test_run+0x2c5/0x340 [ 1138.422572][ T4227] __sys_bpf+0xa22/0xd90 [ 1138.422599][ T4227] ? __pfx___sys_bpf+0x10/0x10 [ 1138.422630][ T4227] ? __fget_files+0x2a/0x420 [ 1138.422671][ T4227] ? ksys_write+0x242/0x270 [ 1138.422701][ T4227] ? __pfx_ksys_write+0x10/0x10 [ 1138.422732][ T4227] __x64_sys_bpf+0xba/0xd0 [ 1138.422753][ T4227] do_syscall_64+0x166/0x520 [ 1138.422775][ T4227] ? trace_irq_disable+0x3b/0x140 [ 1138.422794][ T4227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.422812][ T4227] ? clear_bhb_loop+0x70/0xc0 [ 1138.422835][ T4227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.422854][ T4227] RIP: 0033:0x7f5963d9e159 [ 1138.422871][ T4227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.422887][ T4227] RSP: 002b:00007f5964cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1138.422915][ T4227] RAX: ffffffffffffffda RBX: 00007f5964025fa0 RCX: 00007f5963d9e159 [ 1138.422927][ T4227] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1138.422939][ T4227] RBP: 00007f5964cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.422950][ T4227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.422960][ T4227] R13: 00007f5964026038 R14: 00007f5964025fa0 R15: 00007fff813e87f8 [ 1138.422989][ T4227] [ 1138.443031][ T4220] bond6: (slave gretap1): making interface the new active one [ 1138.443782][ T4220] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1138.445197][ T4229] xt_TCPMSS: Only works on TCP SYN packets [ 1138.570136][ T4228] netlink: 'syz.4.9115': attribute type 8 has an invalid length. [ 1138.960123][ T4240] netlink: 'syz.1.9119': attribute type 3 has an invalid length. [ 1138.960146][ T4240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9119'. [ 1139.020897][ T4244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9120'. [ 1139.033438][ T4233] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9114'. [ 1139.306619][ T4247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9122'. [ 1139.402202][ T4263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9124'. [ 1139.402262][ T4263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9124'. [ 1139.402275][ T4263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9124'. [ 1139.499657][ T4247] bond19: option lacp_active: invalid value (5) [ 1139.521385][ T4247] bond19 (unregistering): Released all slaves [ 1139.625662][ T4270] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1139.639509][ T4270] bond9 (unregistering): Released all slaves [ 1139.714301][ T4274] x_tables: unsorted entry at hook 2 [ 1139.714412][ T4275] x_tables: unsorted entry at hook 2 [ 1139.824690][ T4278] netlink: 'syz.4.9130': attribute type 1 has an invalid length. [ 1139.881705][ T4278] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1139.932860][ T4282] bond13: (slave dummy0): Removing an active aggregator [ 1139.935068][ T4282] bond13: (slave dummy0): Releasing backup interface [ 1139.973074][ T4282] bond19: (slave dummy0): making interface the new active one [ 1139.988141][ T4278] netlink: 'syz.4.9130': attribute type 10 has an invalid length. [ 1139.989535][ T4282] bond19: (slave dummy0): Enslaving as an active interface with an up link [ 1139.991032][ T4278] dummy0: entered promiscuous mode [ 1139.992772][ T4278] bond19: (slave dummy0): Releasing active interface [ 1140.057783][ T4288] netlink: 'syz.2.9133': attribute type 1 has an invalid length. [ 1140.119483][ T4288] bond7: entered promiscuous mode [ 1140.119890][ T4288] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1140.270108][ T4288] bond7: (slave bridge8): making interface the new active one [ 1140.270133][ T4288] bridge8: entered promiscuous mode [ 1140.271209][ T4288] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 1140.280648][ T4299] vlan3: entered allmulticast mode [ 1140.280666][ T4299] bond0: entered allmulticast mode [ 1140.280678][ T4299] bridge9: entered allmulticast mode [ 1140.440388][ T4311] syz_tun: entered allmulticast mode [ 1140.614064][ T4317] bond5: option lacp_active: invalid value (5) [ 1140.620357][ T4317] bond5 (unregistering): Released all slaves [ 1140.802547][ T4327] batman_adv: batadv0: Adding interface: veth0 [ 1140.802564][ T4327] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.802588][ T4327] batman_adv: batadv0: Interface activated: veth0 [ 1140.810143][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1140.810167][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.844711][ T4331] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1140.844731][ T4331] batman_adv: batadv0: Removing interface: syzkaller0 [ 1140.861397][ T4331] batman_adv: batadv0: Removing interface: macvtap1 [ 1140.871397][ T4331] batman_adv: batadv0: Interface deactivated: veth0 [ 1140.871417][ T4331] batman_adv: batadv0: Removing interface: veth0 [ 1141.641921][ T4364] bond9: option mode: invalid value (56) [ 1141.660892][ T4364] bond9 (unregistering): Released all slaves [ 1141.798891][T31983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1142.061258][ T4385] ip6t_srh: unknown srh invflags BA61 [ 1142.448222][ T4412] FAULT_INJECTION: forcing a failure. [ 1142.448222][ T4412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1142.448254][ T4412] CPU: 0 UID: 0 PID: 4412 Comm: syz.1.9164 Not tainted syzkaller #0 PREEMPT(full) [ 1142.448274][ T4412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1142.448285][ T4412] Call Trace: [ 1142.448302][ T4412] [ 1142.448311][ T4412] dump_stack_lvl+0xe8/0x150 [ 1142.448340][ T4412] should_fail_ex+0x410/0x560 [ 1142.448365][ T4412] _copy_to_user+0x31/0xb0 [ 1142.448392][ T4412] simple_read_from_buffer+0xe1/0x170 [ 1142.448423][ T4412] proc_fail_nth_read+0x1bb/0x230 [ 1142.448440][ T4412] ? common_file_perm+0x20e/0x2b0 [ 1142.448466][ T4412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1142.448487][ T4412] ? rw_verify_area+0x24a/0x4c0 [ 1142.448514][ T4412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1142.448532][ T4412] vfs_read+0x213/0xa80 [ 1142.448561][ T4412] ? do_sock_getsockopt+0x4aa/0x640 [ 1142.448588][ T4412] ? __pfx_vfs_read+0x10/0x10 [ 1142.448614][ T4412] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1142.448639][ T4412] ? do_sys_openat2+0x14e/0x200 [ 1142.448659][ T4412] ? kmem_cache_free+0x182/0x650 [ 1142.448694][ T4412] ksys_read+0x150/0x270 [ 1142.448722][ T4412] ? __pfx_ksys_read+0x10/0x10 [ 1142.448747][ T4412] ? __x64_sys_getsockopt+0x1a4/0x240 [ 1142.448780][ T4412] do_syscall_64+0x166/0x520 [ 1142.448803][ T4412] ? trace_irq_disable+0x3b/0x140 [ 1142.448821][ T4412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.448840][ T4412] ? clear_bhb_loop+0x70/0xc0 [ 1142.448863][ T4412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.448880][ T4412] RIP: 0033:0x7f9e4b15e98e [ 1142.448898][ T4412] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1142.448913][ T4412] RSP: 002b:00007f9e4c0befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1142.448933][ T4412] RAX: ffffffffffffffda RBX: 00007f9e4c0bf6c0 RCX: 00007f9e4b15e98e [ 1142.448947][ T4412] RDX: 000000000000000f RSI: 00007f9e4c0bf0a0 RDI: 0000000000000004 [ 1142.448958][ T4412] RBP: 00007f9e4c0bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1142.448969][ T4412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1142.448980][ T4412] R13: 00007f9e4b426038 R14: 00007f9e4b425fa0 R15: 00007ffec79d3998 [ 1142.449011][ T4412] [ 1142.816466][T31983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1143.157862][ T4439] __nla_validate_parse: 14 callbacks suppressed [ 1143.157881][ T4439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9169'. [ 1143.274479][ T4439] bond20: option mode: invalid value (56) [ 1143.285076][ T4439] bond20 (unregistering): Released all slaves [ 1143.356824][ T4445] ip6t_srh: unknown srh invflags BA61 [ 1143.503886][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9173'. [ 1144.334861][ T4476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9180'. [ 1144.334884][ T4476] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9180'. [ 1144.479747][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9179'. [ 1144.658205][ T4495] ip_tables: iptables: counters copy to user failed while replacing table [ 1144.731464][ T4498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9184'. [ 1144.831519][ T4495] syzkaller0: entered promiscuous mode [ 1144.831541][ T4495] syzkaller0: entered allmulticast mode [ 1145.164145][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9191'. [ 1145.177061][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9191'. [ 1145.190774][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9191'. [ 1145.297283][ T4519] netlink: 'syz.1.9189': attribute type 1 has an invalid length. [ 1145.472497][ T4522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9189'. [ 1146.210938][ T4516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1146.234573][ T4516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1146.337305][ T4516] vlan0: left promiscuous mode [ 1146.421982][ T4516] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1146.630429][ T4516] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 1146.630445][ T4516] mac80211_hwsim hwsim16 wlan0: left allmulticast mode [ 1146.893705][ T4516] vlan7: left promiscuous mode [ 1146.893726][ T4516] macvlan0: left promiscuous mode [ 1146.910619][ T4516] bond5: left promiscuous mode [ 1146.910642][ T4516] bridge0: left promiscuous mode [ 1146.947531][ T4516] bond7: left promiscuous mode [ 1146.947554][ T4516] bridge8: left promiscuous mode [ 1146.980371][ T4510] pim6reg: entered allmulticast mode [ 1146.980781][ T4514] pim6reg: left allmulticast mode [ 1147.049490][T32655] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.050825][T32655] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.050883][T32655] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.050914][T32655] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.128404][T31788] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1147.285663][ T4538] bond9: option lacp_active: invalid value (5) [ 1147.292908][ T4538] bond9 (unregistering): Released all slaves [ 1147.303225][T31788] Bluetooth: hci3: command 0x0406 tx timeout [ 1148.052226][ T4570] bond9: option lacp_active: invalid value (5) [ 1148.058551][ T4570] bond9 (unregistering): Released all slaves [ 1148.173832][ T4582] __nla_validate_parse: 213 callbacks suppressed [ 1148.173852][ T4582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9211'. [ 1148.236931][ T4588] xt_esp: unknown flags DD [ 1148.253040][ T4580] ip6t_srh: unknown srh invflags BA61 [ 1148.271744][ T4585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9212'. [ 1148.320072][ T4585] bond20: option lacp_active: invalid value (5) [ 1148.360481][ T4585] bond20 (unregistering): Released all slaves [ 1148.818695][ T4604] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9217'. [ 1148.914383][ T4605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9216'. [ 1149.284241][ T4622] IPv6: NLM_F_CREATE should be specified when creating new route [ 1149.325781][ T4628] FAULT_INJECTION: forcing a failure. [ 1149.325781][ T4628] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.325813][ T4628] CPU: 0 UID: 0 PID: 4628 Comm: syz.4.9223 Not tainted syzkaller #0 PREEMPT(full) [ 1149.325834][ T4628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1149.325845][ T4628] Call Trace: [ 1149.325853][ T4628] [ 1149.325862][ T4628] dump_stack_lvl+0xe8/0x150 [ 1149.325894][ T4628] should_fail_ex+0x410/0x560 [ 1149.325922][ T4628] should_failslab+0xa8/0x100 [ 1149.325945][ T4628] ? dst_alloc+0x105/0x170 [ 1149.325963][ T4628] kmem_cache_alloc_noprof+0xa1/0x600 [ 1149.325990][ T4628] ? lock_acquire+0x115/0x350 [ 1149.326011][ T4628] ? dst_alloc+0x105/0x170 [ 1149.326035][ T4628] dst_alloc+0x105/0x170 [ 1149.326058][ T4628] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1149.326080][ T4628] ? ip_route_output_key_hash_rcu+0x1cd1/0x2720 [ 1149.326107][ T4628] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1149.326129][ T4628] ip_route_output_key_hash+0x18d/0x2a0 [ 1149.326153][ T4628] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1149.326178][ T4628] ? make_kuid+0x1e5/0x670 [ 1149.326207][ T4628] ? __pfx_make_kuid+0x10/0x10 [ 1149.326238][ T4628] ip_route_output_flow+0x2a/0x150 [ 1149.326260][ T4628] rxrpc_assess_MTU_size+0x42b/0xc10 [ 1149.326391][ T4628] ? __pfx_rxrpc_assess_MTU_size+0x10/0x10 [ 1149.326426][ T4628] ? trace_rxrpc_peer+0x82/0x200 [ 1149.326451][ T4628] ? rxrpc_lookup_peer+0x416/0xa50 [ 1149.326482][ T4628] rxrpc_lookup_peer+0x56b/0xa50 [ 1149.326509][ T4628] ? _raw_read_unlock+0x28/0x50 [ 1149.326537][ T4628] rxrpc_do_sendmsg+0xb31/0x1280 [ 1149.326569][ T4628] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 1149.326596][ T4628] ? rxrpc_sendmsg+0x11e/0x6b0 [ 1149.326654][ T4628] ? rxrpc_sendmsg+0x4ee/0x6b0 [ 1149.326681][ T4628] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 1149.326699][ T4628] sock_sendmsg_nosec+0x13a/0x180 [ 1149.326723][ T4628] ____sys_sendmsg+0x54e/0x850 [ 1149.326755][ T4628] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1149.326790][ T4628] ? import_iovec+0x73/0xa0 [ 1149.326818][ T4628] ___sys_sendmsg+0x2a5/0x360 [ 1149.326842][ T4628] ? __lock_acquire+0x747/0x2de0 [ 1149.326865][ T4628] ? __pfx____sys_sendmsg+0x10/0x10 [ 1149.326929][ T4628] ? __fget_files+0x2a/0x420 [ 1149.326953][ T4628] ? __fget_files+0x3a2/0x420 [ 1149.326988][ T4628] __x64_sys_sendmsg+0x1b1/0x290 [ 1149.327017][ T4628] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1149.327065][ T4628] do_syscall_64+0x166/0x520 [ 1149.327088][ T4628] ? trace_irq_disable+0x3b/0x140 [ 1149.327107][ T4628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.327126][ T4628] ? clear_bhb_loop+0x70/0xc0 [ 1149.327150][ T4628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.327169][ T4628] RIP: 0033:0x7f2e5ed9e159 [ 1149.327187][ T4628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.327202][ T4628] RSP: 002b:00007f2e5fc51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1149.327225][ T4628] RAX: ffffffffffffffda RBX: 00007f2e5f025fa0 RCX: 00007f2e5ed9e159 [ 1149.327239][ T4628] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1149.327251][ T4628] RBP: 00007f2e5fc51090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.327263][ T4628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1149.327274][ T4628] R13: 00007f2e5f026038 R14: 00007f2e5f025fa0 R15: 00007ffeb13b6948 [ 1149.327305][ T4628] [ 1149.363438][ T4629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9224'. [ 1149.593833][ T4636] netlink: 'syz.0.9227': attribute type 1 has an invalid length. [ 1149.714397][ T4636] bond5: entered promiscuous mode [ 1149.714829][ T4636] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1149.760184][ T4636] bond5: (slave bridge12): making interface the new active one [ 1149.760207][ T4636] bridge12: entered promiscuous mode [ 1149.761451][ T4636] bond5: (slave bridge12): Enslaving as an active interface with an up link [ 1149.768693][ T4644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9229'. [ 1149.827956][ T4651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9229'. [ 1149.835554][ T4651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9229'. [ 1149.836268][ T4643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9230'. [ 1150.068056][ T4662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9233'. [ 1150.327270][ T2000] block nbd0: Possible stuck request ffff888026d9e000: control (read@0,4096B). Runtime 990 seconds [ 1151.915184][ T4698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.923522][ T4698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1152.463896][ T4717] vlan0: entered promiscuous mode [ 1152.613112][ T4722] can: request_module (can-proto-0) failed. [ 1152.769405][ T4729] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1153.182508][ T4751] __nla_validate_parse: 8 callbacks suppressed [ 1153.182528][ T4751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9262'. [ 1153.277903][ T4753] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9263'. [ 1153.581454][ T4765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9267'. [ 1153.581477][ T4765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9267'. [ 1154.503382][ T4793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9276'. [ 1154.552671][ T4793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9276'. [ 1154.558268][ T4796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9275'. [ 1154.559942][ T4793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9276'. [ 1154.777392][ T4800] tc_dump_action: action bad kind [ 1155.043113][ T4817] IPVS: length: 77 != 24 [ 1155.068254][ T4820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9285'. [ 1155.381594][ T4836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9289'. [ 1155.938319][ T4847] FAULT_INJECTION: forcing a failure. [ 1155.938319][ T4847] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.938349][ T4847] CPU: 0 UID: 0 PID: 4847 Comm: syz.2.9295 Not tainted syzkaller #0 PREEMPT(full) [ 1155.938369][ T4847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1155.938380][ T4847] Call Trace: [ 1155.938388][ T4847] [ 1155.938397][ T4847] dump_stack_lvl+0xe8/0x150 [ 1155.938427][ T4847] should_fail_ex+0x410/0x560 [ 1155.938454][ T4847] ? __alloc_skb+0x1db/0x7a0 [ 1155.938476][ T4847] should_failslab+0xa8/0x100 [ 1155.938500][ T4847] ? __alloc_skb+0x1db/0x7a0 [ 1155.938520][ T4847] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1155.938548][ T4847] ? __alloc_skb+0x18d/0x7a0 [ 1155.938571][ T4847] ? __alloc_skb+0x1db/0x7a0 [ 1155.938599][ T4847] __alloc_skb+0x1db/0x7a0 [ 1155.938625][ T4847] netlink_sendmsg+0x5d4/0xb40 [ 1155.938654][ T4847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1155.938681][ T4847] ? apparmor_socket_sendmsg+0x98/0x360 [ 1155.938711][ T4847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1155.938728][ T4847] sock_sendmsg_nosec+0x13a/0x180 [ 1155.938750][ T4847] ____sys_sendmsg+0x54e/0x850 [ 1155.938781][ T4847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1155.938815][ T4847] ? import_iovec+0x73/0xa0 [ 1155.938842][ T4847] ___sys_sendmsg+0x2a5/0x360 [ 1155.938866][ T4847] ? __lock_acquire+0x747/0x2de0 [ 1155.938890][ T4847] ? __pfx____sys_sendmsg+0x10/0x10 [ 1155.938949][ T4847] ? __fget_files+0x2a/0x420 [ 1155.938973][ T4847] ? __fget_files+0x3a2/0x420 [ 1155.939017][ T4847] __x64_sys_sendmsg+0x1b1/0x290 [ 1155.939045][ T4847] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1155.939091][ T4847] do_syscall_64+0x166/0x520 [ 1155.939115][ T4847] ? trace_irq_disable+0x3b/0x140 [ 1155.939133][ T4847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.939152][ T4847] ? clear_bhb_loop+0x70/0xc0 [ 1155.939175][ T4847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.939193][ T4847] RIP: 0033:0x7ff775d9e159 [ 1155.939210][ T4847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.939224][ T4847] RSP: 002b:00007ff776bce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1155.939244][ T4847] RAX: ffffffffffffffda RBX: 00007ff776025fa0 RCX: 00007ff775d9e159 [ 1155.939258][ T4847] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 1155.939271][ T4847] RBP: 00007ff776bce090 R08: 0000000000000000 R09: 0000000000000000 [ 1155.939282][ T4847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1155.939292][ T4847] R13: 00007ff776026038 R14: 00007ff776025fa0 R15: 00007ffd849dabd8 [ 1155.939323][ T4847] [ 1155.975436][ T31] audit: type=1800 audit(1790463136.930:6): pid=4849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9296" name=B702 dev="tmpfs" ino=9254 res=0 errno=0 [ 1156.274373][ T4854] Bluetooth: hci0: unsupported parameter 1280 [ 1156.274395][ T4854] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 1156.577589][ T4845] netlink: 'syz.0.9294': attribute type 8 has an invalid length. [ 1156.577823][ T4845] sch_fq: defrate 0 ignored. [ 1156.607053][ T4845] openvswitch: netlink: Flow actions attr not present in new flow. [ 1157.071464][ T4894] openvswitch: netlink: Message has 12848 unknown bytes. [ 1157.071507][ T4894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1158.565244][ T4939] __nla_validate_parse: 11 callbacks suppressed [ 1158.565258][ T4939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9319'. [ 1159.144090][ T4972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9328'. [ 1159.144114][ T4972] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9328'. [ 1159.542847][ T4987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9332'. [ 1159.542863][ T4987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9332'. [ 1159.595252][ T4989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9333'. [ 1159.595276][ T4989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9333'. [ 1159.815507][ T5001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9337'. [ 1160.260216][ T5029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9342'. [ 1160.260276][ T5029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9342'. [ 1161.742422][ T5083] FAULT_INJECTION: forcing a failure. [ 1161.742422][ T5083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1161.742452][ T5083] CPU: 1 UID: 0 PID: 5083 Comm: syz.0.9363 Not tainted syzkaller #0 PREEMPT(full) [ 1161.742471][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1161.742482][ T5083] Call Trace: [ 1161.742489][ T5083] [ 1161.742496][ T5083] dump_stack_lvl+0xe8/0x150 [ 1161.742525][ T5083] should_fail_ex+0x410/0x560 [ 1161.742551][ T5083] _copy_from_user+0x2d/0xb0 [ 1161.742576][ T5083] bpf_test_init+0xd8/0x150 [ 1161.742597][ T5083] bpf_prog_test_run_skb+0x31e/0x2230 [ 1161.742624][ T5083] ? lock_acquire+0x115/0x350 [ 1161.742657][ T5083] ? __fget_files+0x3a2/0x420 [ 1161.742678][ T5083] ? __fget_files+0x2a/0x420 [ 1161.742703][ T5083] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1161.742730][ T5083] bpf_prog_test_run+0x2c5/0x340 [ 1161.742755][ T5083] __sys_bpf+0xa22/0xd90 [ 1161.742781][ T5083] ? __pfx___sys_bpf+0x10/0x10 [ 1161.742809][ T5083] ? __fget_files+0x2a/0x420 [ 1161.742848][ T5083] ? ksys_write+0x242/0x270 [ 1161.742875][ T5083] ? __pfx_ksys_write+0x10/0x10 [ 1161.742905][ T5083] __x64_sys_bpf+0xba/0xd0 [ 1161.742926][ T5083] do_syscall_64+0x166/0x520 [ 1161.742949][ T5083] ? trace_irq_disable+0x3b/0x140 [ 1161.742968][ T5083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.742986][ T5083] ? clear_bhb_loop+0x70/0xc0 [ 1161.743009][ T5083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.743026][ T5083] RIP: 0033:0x7f117219e159 [ 1161.743042][ T5083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.743056][ T5083] RSP: 002b:00007f1173007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1161.743077][ T5083] RAX: ffffffffffffffda RBX: 00007f1172425fa0 RCX: 00007f117219e159 [ 1161.743091][ T5083] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1161.743103][ T5083] RBP: 00007f1173007090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.743112][ T5083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.743122][ T5083] R13: 00007f1172426038 R14: 00007f1172425fa0 R15: 00007ffdec002d78 [ 1161.743152][ T5083] [ 1161.900648][ T5091] netlink: 'syz.0.9366': attribute type 23 has an invalid length. [ 1162.001533][ T5085] FAULT_INJECTION: forcing a failure. [ 1162.001533][ T5085] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.001563][ T5085] CPU: 0 UID: 0 PID: 5085 Comm: syz.4.9364 Not tainted syzkaller #0 PREEMPT(full) [ 1162.001580][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1162.001590][ T5085] Call Trace: [ 1162.001597][ T5085] [ 1162.001604][ T5085] dump_stack_lvl+0xe8/0x150 [ 1162.001633][ T5085] should_fail_ex+0x410/0x560 [ 1162.001658][ T5085] should_failslab+0xa8/0x100 [ 1162.001690][ T5085] __kmalloc_cache_noprof+0xa3/0x600 [ 1162.001709][ T5085] ? tcf_idr_create+0x4b7/0x6b0 [ 1162.001729][ T5085] ? tcf_police_init+0x9fa/0x15d0 [ 1162.001749][ T5085] ? tcf_police_init+0x9fa/0x15d0 [ 1162.001778][ T5085] tcf_police_init+0x9fa/0x15d0 [ 1162.001813][ T5085] ? __pfx_tcf_police_init+0x10/0x10 [ 1162.001856][ T5085] ? __kasan_kmalloc+0x93/0xb0 [ 1162.001877][ T5085] ? nla_memcpy+0x5b/0xc0 [ 1162.001909][ T5085] tcf_action_init_1+0x4ba/0x740 [ 1162.001938][ T5085] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1162.001959][ T5085] ? _raw_read_unlock+0x28/0x50 [ 1162.001980][ T5085] ? tc_action_load_ops+0x247/0x540 [ 1162.002015][ T5085] ? radix_tree_delete_item+0x2e9/0x400 [ 1162.002053][ T5085] ? __nla_parse+0x40/0x60 [ 1162.002076][ T5085] tcf_action_init+0x31b/0xa60 [ 1162.002107][ T5085] ? __pfx_tcf_action_init+0x10/0x10 [ 1162.002162][ T5085] ? __pfx___nla_validate_parse+0x10/0x10 [ 1162.002215][ T5085] tc_ctl_action+0x485/0xc70 [ 1162.002248][ T5085] ? __pfx_tc_ctl_action+0x10/0x10 [ 1162.002277][ T5085] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1162.002339][ T5085] ? __pfx_tc_ctl_action+0x10/0x10 [ 1162.002360][ T5085] rtnetlink_rcv_msg+0x7b9/0xc00 [ 1162.002388][ T5085] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1162.002409][ T5085] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1162.002435][ T5085] ? __copy_skb_header+0xa3/0x4a0 [ 1162.002472][ T5085] netlink_rcv_skb+0x226/0x4a0 [ 1162.002492][ T5085] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1162.002517][ T5085] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1162.002549][ T5085] ? netlink_deliver_tap+0x2e/0x1b0 [ 1162.002567][ T5085] ? netlink_deliver_tap+0x2e/0x1b0 [ 1162.002591][ T5085] netlink_unicast+0x7bd/0x940 [ 1162.002627][ T5085] netlink_sendmsg+0x813/0xb40 [ 1162.002654][ T5085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1162.002681][ T5085] ? apparmor_socket_sendmsg+0x98/0x360 [ 1162.002706][ T5085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1162.002723][ T5085] sock_sendmsg_nosec+0x13a/0x180 [ 1162.002746][ T5085] ____sys_sendmsg+0x54e/0x850 [ 1162.002774][ T5085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1162.002805][ T5085] ? import_iovec+0x73/0xa0 [ 1162.002831][ T5085] ___sys_sendmsg+0x2a5/0x360 [ 1162.002854][ T5085] ? __lock_acquire+0x747/0x2de0 [ 1162.002877][ T5085] ? __pfx____sys_sendmsg+0x10/0x10 [ 1162.002936][ T5085] ? __fget_files+0x2a/0x420 [ 1162.002960][ T5085] ? __fget_files+0x3a2/0x420 [ 1162.002994][ T5085] __x64_sys_sendmsg+0x1b1/0x290 [ 1162.003023][ T5085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1162.003070][ T5085] do_syscall_64+0x166/0x520 [ 1162.003093][ T5085] ? trace_irq_disable+0x3b/0x140 [ 1162.003112][ T5085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.003130][ T5085] ? clear_bhb_loop+0x70/0xc0 [ 1162.003153][ T5085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.003172][ T5085] RIP: 0033:0x7f2e5ed9e159 [ 1162.003189][ T5085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.003204][ T5085] RSP: 002b:00007f2e5fc51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1162.003224][ T5085] RAX: ffffffffffffffda RBX: 00007f2e5f025fa0 RCX: 00007f2e5ed9e159 [ 1162.003238][ T5085] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1162.003250][ T5085] RBP: 00007f2e5fc51090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.003261][ T5085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1162.003272][ T5085] R13: 00007f2e5f026038 R14: 00007f2e5f025fa0 R15: 00007ffeb13b6948 [ 1162.003303][ T5085] [ 1163.734536][ T5140] netlink: 'syz.2.9383': attribute type 1 has an invalid length. [ 1163.734557][ T5140] netlink: 'syz.2.9383': attribute type 2 has an invalid length. [ 1163.753489][ T5140] netlink: 'syz.2.9383': attribute type 1 has an invalid length. [ 1163.753507][ T5140] netlink: 'syz.2.9383': attribute type 2 has an invalid length. [ 1163.790603][ T5144] __nla_validate_parse: 12 callbacks suppressed [ 1163.790622][ T5144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9384'. [ 1163.790636][ T5144] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9384'. [ 1163.893650][ T5148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9385'. [ 1164.072919][ T5158] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1164.073346][ T5158] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1164.554602][ T5176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9390'. [ 1164.554637][ T5176] netlink: 'syz.0.9390': attribute type 7 has an invalid length. [ 1164.554649][ T5176] netlink: 'syz.0.9390': attribute type 8 has an invalid length. [ 1164.554660][ T5176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9390'. [ 1164.618297][ T5177] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9390'. [ 1164.654932][ T5172] sctp: [Deprecated]: syz.0.9390 (pid 5172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1164.654932][ T5172] Use struct sctp_sack_info instead [ 1164.775224][ T5182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9392'. [ 1164.899545][ T5188] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9395'. [ 1164.912943][ T5188] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1165.015312][ T5190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9394'. [ 1165.060249][ T5194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9396'. [ 1165.491932][ T5221] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1165.492429][ T5221] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1166.510320][ T5269] FAULT_INJECTION: forcing a failure. [ 1166.510320][ T5269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.510351][ T5269] CPU: 0 UID: 0 PID: 5269 Comm: syz.2.9414 Not tainted syzkaller #0 PREEMPT(full) [ 1166.510371][ T5269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1166.510383][ T5269] Call Trace: [ 1166.510391][ T5269] [ 1166.510399][ T5269] dump_stack_lvl+0xe8/0x150 [ 1166.510429][ T5269] should_fail_ex+0x410/0x560 [ 1166.510456][ T5269] _copy_from_iter+0x1d3/0x1660 [ 1166.510478][ T5269] ? __alloc_skb+0x27a/0x7a0 [ 1166.510502][ T5269] ? __alloc_skb+0x27a/0x7a0 [ 1166.510527][ T5269] ? __alloc_skb+0x27a/0x7a0 [ 1166.510548][ T5269] ? __pfx__copy_from_iter+0x10/0x10 [ 1166.510567][ T5269] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1166.510593][ T5269] ? __alloc_skb+0x27a/0x7a0 [ 1166.510612][ T5269] ? __alloc_skb+0x27a/0x7a0 [ 1166.510637][ T5269] ? netlink_sendmsg+0x650/0xb40 [ 1166.510656][ T5269] ? skb_put+0x112/0x210 [ 1166.510681][ T5269] netlink_sendmsg+0x6c0/0xb40 [ 1166.510709][ T5269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1166.510737][ T5269] ? apparmor_socket_sendmsg+0x98/0x360 [ 1166.510761][ T5269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1166.510779][ T5269] sock_sendmsg_nosec+0x13a/0x180 [ 1166.510802][ T5269] ____sys_sendmsg+0x54e/0x850 [ 1166.510841][ T5269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1166.510876][ T5269] ? import_iovec+0x73/0xa0 [ 1166.510902][ T5269] ___sys_sendmsg+0x2a5/0x360 [ 1166.510929][ T5269] ? __lock_acquire+0x747/0x2de0 [ 1166.510953][ T5269] ? __pfx____sys_sendmsg+0x10/0x10 [ 1166.510976][ T5269] ? __lock_acquire+0x747/0x2de0 [ 1166.511000][ T5269] ? kstrtouint+0x6e/0xe0 [ 1166.511059][ T5269] __sys_sendmmsg+0x273/0x4d0 [ 1166.511090][ T5269] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1166.511125][ T5269] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1166.511165][ T5269] ? ksys_write+0x242/0x270 [ 1166.511194][ T5269] ? __pfx_ksys_write+0x10/0x10 [ 1166.511227][ T5269] __x64_sys_sendmmsg+0xa0/0xc0 [ 1166.511254][ T5269] do_syscall_64+0x166/0x520 [ 1166.511278][ T5269] ? trace_irq_disable+0x3b/0x140 [ 1166.511296][ T5269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.511315][ T5269] ? clear_bhb_loop+0x70/0xc0 [ 1166.511338][ T5269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.511356][ T5269] RIP: 0033:0x7ff775d9e159 [ 1166.511374][ T5269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.511389][ T5269] RSP: 002b:00007ff776bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1166.511409][ T5269] RAX: ffffffffffffffda RBX: 00007ff776025fa0 RCX: 00007ff775d9e159 [ 1166.511423][ T5269] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1166.511436][ T5269] RBP: 00007ff776bce090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.511448][ T5269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.511459][ T5269] R13: 00007ff776026038 R14: 00007ff776025fa0 R15: 00007ffd849dabd8 [ 1166.511489][ T5269] [ 1167.745367][ T5314] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 1169.169696][ T5250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1169.502135][ T5326] __nla_validate_parse: 10 callbacks suppressed [ 1169.502154][ T5326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9424'. [ 1169.706408][ T5337] syzkaller0: entered promiscuous mode [ 1169.706429][ T5337] syzkaller0: entered allmulticast mode [ 1169.772335][ T5333] tipc: Enabled bearer , priority 0 [ 1169.825139][ T5331] tipc: Resetting bearer [ 1170.002783][ T5356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9428'. [ 1170.002807][ T5356] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9428'. [ 1170.121291][ T5331] tipc: Disabling bearer [ 1170.205365][ T5359] xt_IDLETIMER: timeout value is zero [ 1170.400339][ T5361] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1171.102868][ T5390] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1171.403815][ T5392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9435'. [ 1172.358066][ T5321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1172.553437][ T5422] netlink: 'syz.1.9441': attribute type 1 has an invalid length. [ 1172.724963][ T5426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9443'. [ 1172.724987][ T5426] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9443'. [ 1173.222178][ T5444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9446'. [ 1173.268929][ T5447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9447'. [ 1173.434921][ T5444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9446'. [ 1173.773208][ T5467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9450'. [ 1174.049301][ T5485] ip_tables: iptables: counters copy to user failed while replacing table [ 1174.089410][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1174.090893][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1174.166930][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1174.172223][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1174.172638][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1174.173241][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1174.173704][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1174.173912][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1174.177286][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1174.683751][ T5501] __nla_validate_parse: 5 callbacks suppressed [ 1174.683770][ T5501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9462'. [ 1174.683793][ T5501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9462'. [ 1174.970322][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9464'. [ 1175.183125][ T5520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9466'. [ 1175.292985][ T5531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9467'. [ 1175.293047][ T5531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9467'. [ 1175.293060][ T5531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9467'. [ 1175.293125][ T5531] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9467'. [ 1175.293139][ T5531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9467'. [ 1175.897423][ T5540] netlink: 'syz.4.9472': attribute type 1 has an invalid length. [ 1175.951494][ T5543] ip_tables: iptables: counters copy to user failed while replacing table [ 1176.033893][ T5540] bond21: entered promiscuous mode [ 1176.049706][ T5540] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1176.187757][ T5540] bond21: (slave bridge11): making interface the new active one [ 1176.187780][ T5540] bridge11: entered promiscuous mode [ 1176.192712][ T5540] bond21: (slave bridge11): Enslaving as an active interface with an up link [ 1176.667691][ T5569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9478'. [ 1177.216339][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.376576][ T5622] ip_tables: iptables: counters copy to user failed while replacing table [ 1177.840697][ T5622] syzkaller0: entered promiscuous mode [ 1177.840724][ T5622] syzkaller0: entered allmulticast mode [ 1180.414082][ T2000] block nbd0: Possible stuck request ffff888026d9e000: control (read@0,4096B). Runtime 1020 seconds [ 1180.759436][ T5672] __nla_validate_parse: 5 callbacks suppressed [ 1180.759457][ T5672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9498'. [ 1180.842782][ T5686] vxcan0: entered allmulticast mode [ 1180.860606][ T5687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9499'. [ 1180.860627][ T5687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9499'. [ 1181.000697][ T5716] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1181.002498][ T5716] batman_adv: batadv0: Adding interface: macvlan2 [ 1181.002512][ T5716] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.002539][ T5716] batman_adv: batadv0: Interface activated: macvlan2 [ 1181.109227][ T5746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9506'. [ 1181.109250][ T5746] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9506'. [ 1181.441953][ T5756] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9508'. [ 1181.493300][ T5762] ip_tables: iptables: counters copy to user failed while replacing table [ 1181.588632][ T5762] syzkaller0: entered promiscuous mode [ 1181.588651][ T5762] syzkaller0: entered allmulticast mode [ 1181.984619][ T5789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9515'. [ 1182.325257][ T5808] ip_tables: iptables: counters copy to user failed while replacing table [ 1182.622940][ T5808] syzkaller0: entered promiscuous mode [ 1182.622962][ T5808] syzkaller0: entered allmulticast mode [ 1182.893848][ T5829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9527'. [ 1182.893871][ T5829] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9527'. [ 1182.924740][ T5831] netlink: 'syz.0.9528': attribute type 1 has an invalid length. [ 1183.180867][ T5840] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9531'. [ 1183.231067][ T5837] syzkaller0: Caught tx_queue_len zero misconfig [ 1183.552921][ T5858] ip_tables: iptables: counters copy to user failed while replacing table [ 1184.981857][ T5910] netlink: 'syz.3.9555': attribute type 1 has an invalid length. [ 1185.003267][ T5910] bond9: entered promiscuous mode [ 1185.003736][ T5910] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1185.025523][ T5910] vlan5: entered allmulticast mode [ 1185.025536][ T5910] bond9: entered allmulticast mode [ 1185.050147][ T5910] bond9: (slave bridge6): making interface the new active one [ 1185.050169][ T5910] bridge6: entered promiscuous mode [ 1185.050320][ T5910] bridge6: entered allmulticast mode [ 1185.052047][ T5910] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 1185.077203][ T5912] sctp: [Deprecated]: syz.1.9551 (pid 5912) Use of int in max_burst socket option deprecated. [ 1185.077203][ T5912] Use struct sctp_assoc_value instead [ 1185.302896][ T5923] syzkaller0: left promiscuous mode [ 1185.302986][ T5923] syzkaller0: left allmulticast mode [ 1185.780557][ T5937] __nla_validate_parse: 12 callbacks suppressed [ 1185.780576][ T5937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9563'. [ 1185.925176][T32650] tipc: Subscription rejected, illegal request [ 1185.956109][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9563'. [ 1186.533187][ T5966] bond9: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1186.535361][ T5966] bond9 (unregistering): Released all slaves [ 1186.620779][ T5964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1186.806509][T18913] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1186.850169][ T5980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9576'. [ 1186.850194][ T5980] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9576'. [ 1187.007416][ T5987] netlink: 'syz.3.9578': attribute type 1 has an invalid length. [ 1187.043392][ T5987] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1187.106484][ T5987] bond10: (slave veth87): Enslaving as an active interface with a down link [ 1187.329232][ T6004] netlink: 'syz.0.9584': attribute type 1 has an invalid length. [ 1187.433981][ T6015] mac80211_hwsim hwsim17 syzkaller0: left promiscuous mode [ 1187.434005][ T6015] mac80211_hwsim hwsim17 syzkaller0: left allmulticast mode [ 1188.138174][T32644] tipc: Subscription rejected, illegal request [ 1188.241787][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9598'. [ 1188.289437][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9595'. [ 1188.289465][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9595'. [ 1188.289530][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9595'. [ 1188.298359][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9595'. [ 1188.464972][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9600'. [ 1188.620586][ T6059] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1189.051332][ T6083] FAULT_INJECTION: forcing a failure. [ 1189.051332][ T6083] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.051364][ T6083] CPU: 0 UID: 0 PID: 6083 Comm: syz.1.9610 Not tainted syzkaller #0 PREEMPT(full) [ 1189.051398][ T6083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1189.051409][ T6083] Call Trace: [ 1189.051417][ T6083] [ 1189.051425][ T6083] dump_stack_lvl+0xe8/0x150 [ 1189.051456][ T6083] should_fail_ex+0x410/0x560 [ 1189.051484][ T6083] should_failslab+0xa8/0x100 [ 1189.051507][ T6083] ? skb_clone+0x212/0x3a0 [ 1189.051532][ T6083] kmem_cache_alloc_noprof+0xa1/0x600 [ 1189.051562][ T6083] ? skb_clone+0x212/0x3a0 [ 1189.051593][ T6083] skb_clone+0x212/0x3a0 [ 1189.051623][ T6083] __netlink_deliver_tap+0x355/0x6e0 [ 1189.051651][ T6083] ? netlink_deliver_tap+0x2e/0x1b0 [ 1189.051670][ T6083] netlink_deliver_tap+0x19c/0x1b0 [ 1189.051689][ T6083] netlink_unicast+0x781/0x940 [ 1189.051727][ T6083] netlink_sendmsg+0x813/0xb40 [ 1189.051752][ T6083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1189.051778][ T6083] ? apparmor_socket_sendmsg+0x98/0x360 [ 1189.051799][ T6083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1189.051816][ T6083] sock_sendmsg_nosec+0x13a/0x180 [ 1189.051844][ T6083] ____sys_sendmsg+0x54e/0x850 [ 1189.051873][ T6083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1189.051906][ T6083] ? import_iovec+0x73/0xa0 [ 1189.051932][ T6083] ___sys_sendmsg+0x2a5/0x360 [ 1189.051956][ T6083] ? __lock_acquire+0x747/0x2de0 [ 1189.051977][ T6083] ? __pfx____sys_sendmsg+0x10/0x10 [ 1189.052032][ T6083] ? __fget_files+0x2a/0x420 [ 1189.052056][ T6083] ? __fget_files+0x3a2/0x420 [ 1189.052090][ T6083] __x64_sys_sendmsg+0x1b1/0x290 [ 1189.052116][ T6083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1189.052162][ T6083] do_syscall_64+0x166/0x520 [ 1189.052185][ T6083] ? trace_irq_disable+0x3b/0x140 [ 1189.052204][ T6083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.052224][ T6083] ? clear_bhb_loop+0x70/0xc0 [ 1189.052246][ T6083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.052265][ T6083] RIP: 0033:0x7f9e4b19e159 [ 1189.052282][ T6083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.052298][ T6083] RSP: 002b:00007f9e4c0bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1189.052318][ T6083] RAX: ffffffffffffffda RBX: 00007f9e4b425fa0 RCX: 00007f9e4b19e159 [ 1189.052332][ T6083] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1189.052343][ T6083] RBP: 00007f9e4c0bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.052354][ T6083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.052365][ T6083] R13: 00007f9e4b426038 R14: 00007f9e4b425fa0 R15: 00007ffec79d3998 [ 1189.052396][ T6083] [ 1189.654393][ T6088] FAULT_INJECTION: forcing a failure. [ 1189.654393][ T6088] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.654423][ T6088] CPU: 1 UID: 0 PID: 6088 Comm: syz.2.9612 Not tainted syzkaller #0 PREEMPT(full) [ 1189.654440][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1189.654449][ T6088] Call Trace: [ 1189.654455][ T6088] [ 1189.654462][ T6088] dump_stack_lvl+0xe8/0x150 [ 1189.654490][ T6088] should_fail_ex+0x410/0x560 [ 1189.654516][ T6088] should_failslab+0xa8/0x100 [ 1189.654542][ T6088] __kmalloc_cache_noprof+0xa3/0x600 [ 1189.654559][ T6088] ? _raw_spin_unlock+0x28/0x50 [ 1189.654578][ T6088] ? alloc_lookup_fw_priv+0x50f/0x680 [ 1189.654705][ T6088] ? _request_firmware+0x5ed/0x1780 [ 1189.654728][ T6088] ? _request_firmware+0x5ed/0x1780 [ 1189.654762][ T6088] _request_firmware+0x5ed/0x1780 [ 1189.654805][ T6088] ? __pfx__request_firmware+0x10/0x10 [ 1189.654830][ T6088] ? netdev_run_todo+0xfda/0x1060 [ 1189.654862][ T6088] ? __pfx___mutex_lock+0x10/0x10 [ 1189.654887][ T6088] ? __pfx_netdev_run_todo+0x10/0x10 [ 1189.654916][ T6088] request_firmware+0x36/0x50 [ 1189.654941][ T6088] reg_reload_regdb+0x95/0x490 [ 1189.654960][ T6088] ? __nla_parse+0x40/0x60 [ 1189.654984][ T6088] ? __pfx_reg_reload_regdb+0x10/0x10 [ 1189.655007][ T6088] ? nl80211_pre_doit+0x53d/0x890 [ 1189.655040][ T6088] genl_family_rcv_msg_doit+0x233/0x340 [ 1189.655072][ T6088] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1189.655108][ T6088] ? bpf_lsm_capable+0x9/0x20 [ 1189.655125][ T6088] ? security_capable+0x7e/0x2c0 [ 1189.655154][ T6088] genl_rcv_msg+0x614/0x7a0 [ 1189.655183][ T6088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1189.655204][ T6088] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1189.655231][ T6088] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 1189.655253][ T6088] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1189.655300][ T6088] netlink_rcv_skb+0x226/0x4a0 [ 1189.655319][ T6088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1189.655343][ T6088] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1189.655376][ T6088] ? down_read+0x2be/0x330 [ 1189.655406][ T6088] genl_rcv+0x28/0x40 [ 1189.655426][ T6088] netlink_unicast+0x7bd/0x940 [ 1189.655463][ T6088] netlink_sendmsg+0x813/0xb40 [ 1189.655491][ T6088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1189.655517][ T6088] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1189.655542][ T6088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1189.655560][ T6088] sock_sendmsg_nosec+0x13a/0x180 [ 1189.655583][ T6088] ____sys_sendmsg+0x54e/0x850 [ 1189.655615][ T6088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1189.655650][ T6088] ? import_iovec+0x73/0xa0 [ 1189.655676][ T6088] ___sys_sendmsg+0x2a5/0x360 [ 1189.655697][ T6088] ? __lock_acquire+0x747/0x2de0 [ 1189.655718][ T6088] ? __pfx____sys_sendmsg+0x10/0x10 [ 1189.655775][ T6088] ? __fget_files+0x2a/0x420 [ 1189.655798][ T6088] ? __fget_files+0x3a2/0x420 [ 1189.655833][ T6088] __x64_sys_sendmsg+0x1b1/0x290 [ 1189.655862][ T6088] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1189.655909][ T6088] do_syscall_64+0x166/0x520 [ 1189.655933][ T6088] ? trace_irq_disable+0x3b/0x140 [ 1189.655951][ T6088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.655970][ T6088] ? clear_bhb_loop+0x70/0xc0 [ 1189.655991][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.656009][ T6088] RIP: 0033:0x7ff775d9e159 [ 1189.656026][ T6088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.656041][ T6088] RSP: 002b:00007ff776bce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1189.656061][ T6088] RAX: ffffffffffffffda RBX: 00007ff776025fa0 RCX: 00007ff775d9e159 [ 1189.656074][ T6088] RDX: 0000000020008004 RSI: 00002000000006c0 RDI: 0000000000000006 [ 1189.656087][ T6088] RBP: 00007ff776bce090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.656098][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.656109][ T6088] R13: 00007ff776026038 R14: 00007ff776025fa0 R15: 00007ffd849dabd8 [ 1189.656140][ T6088] [ 1189.817253][ T6088] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1189.817278][ T6088] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1190.111773][ T6096] ip_tables: iptables: counters copy to user failed while replacing table [ 1190.272346][ T6103] pim6reg: entered allmulticast mode [ 1190.272592][ T6096] syzkaller0: entered promiscuous mode [ 1190.272619][ T6096] syzkaller0: entered allmulticast mode [ 1190.371187][ T6103] IPv6: NLM_F_CREATE should be specified when creating new route [ 1190.403415][ T6106] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1190.547629][ T6113] netlink: 'syz.4.9619': attribute type 21 has an invalid length. [ 1190.547779][ T6113] FAULT_INJECTION: forcing a failure. [ 1190.547779][ T6113] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.547804][ T6113] CPU: 1 UID: 0 PID: 6113 Comm: syz.4.9619 Not tainted syzkaller #0 PREEMPT(full) [ 1190.547824][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1190.547836][ T6113] Call Trace: [ 1190.547843][ T6113] [ 1190.547851][ T6113] dump_stack_lvl+0xe8/0x150 [ 1190.547881][ T6113] should_fail_ex+0x410/0x560 [ 1190.547908][ T6113] should_failslab+0xa8/0x100 [ 1190.547930][ T6113] ? skb_clone+0x212/0x3a0 [ 1190.547956][ T6113] kmem_cache_alloc_noprof+0xa1/0x600 [ 1190.547986][ T6113] ? skb_clone+0x212/0x3a0 [ 1190.548017][ T6113] skb_clone+0x212/0x3a0 [ 1190.548046][ T6113] __netlink_deliver_tap+0x355/0x6e0 [ 1190.548076][ T6113] ? netlink_deliver_tap+0x2e/0x1b0 [ 1190.548105][ T6113] netlink_deliver_tap+0x19c/0x1b0 [ 1190.548124][ T6113] netlink_sendskb+0x68/0x140 [ 1190.548153][ T6113] netlink_rcv_skb+0x2a4/0x4a0 [ 1190.548172][ T6113] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1190.548197][ T6113] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1190.548228][ T6113] ? netlink_deliver_tap+0x2e/0x1b0 [ 1190.548247][ T6113] ? netlink_deliver_tap+0x2e/0x1b0 [ 1190.548271][ T6113] netlink_unicast+0x7bd/0x940 [ 1190.548307][ T6113] netlink_sendmsg+0x813/0xb40 [ 1190.548336][ T6113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1190.548363][ T6113] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1190.548386][ T6113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1190.548404][ T6113] sock_sendmsg_nosec+0x13a/0x180 [ 1190.548426][ T6113] ____sys_sendmsg+0x54e/0x850 [ 1190.548455][ T6113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1190.548488][ T6113] ? import_iovec+0x73/0xa0 [ 1190.548515][ T6113] ___sys_sendmsg+0x2a5/0x360 [ 1190.548538][ T6113] ? __lock_acquire+0x747/0x2de0 [ 1190.548561][ T6113] ? __pfx____sys_sendmsg+0x10/0x10 [ 1190.548622][ T6113] ? __fget_files+0x2a/0x420 [ 1190.548646][ T6113] ? __fget_files+0x3a2/0x420 [ 1190.548678][ T6113] __x64_sys_sendmsg+0x1b1/0x290 [ 1190.548706][ T6113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1190.548751][ T6113] do_syscall_64+0x166/0x520 [ 1190.548774][ T6113] ? trace_irq_disable+0x3b/0x140 [ 1190.548794][ T6113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.548813][ T6113] ? clear_bhb_loop+0x70/0xc0 [ 1190.548836][ T6113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.548854][ T6113] RIP: 0033:0x7f2e5ed9e159 [ 1190.548872][ T6113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.548887][ T6113] RSP: 002b:00007f2e5fc51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1190.548907][ T6113] RAX: ffffffffffffffda RBX: 00007f2e5f025fa0 RCX: 00007f2e5ed9e159 [ 1190.548919][ T6113] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000003 [ 1190.548930][ T6113] RBP: 00007f2e5fc51090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.548942][ T6113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.548952][ T6113] R13: 00007f2e5f026038 R14: 00007f2e5f025fa0 R15: 00007ffeb13b6948 [ 1190.548984][ T6113] [ 1191.108819][ T6102] pim6reg: left allmulticast mode [ 1191.113803][ T6125] FAULT_INJECTION: forcing a failure. [ 1191.113803][ T6125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1191.113828][ T6125] CPU: 0 UID: 0 PID: 6125 Comm: syz.2.9624 Not tainted syzkaller #0 PREEMPT(full) [ 1191.113845][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1191.113854][ T6125] Call Trace: [ 1191.113860][ T6125] [ 1191.113867][ T6125] dump_stack_lvl+0xe8/0x150 [ 1191.113896][ T6125] should_fail_ex+0x410/0x560 [ 1191.113920][ T6125] _copy_from_iter+0x1d3/0x1660 [ 1191.113948][ T6125] ? __pfx__copy_from_iter+0x10/0x10 [ 1191.113970][ T6125] ? aa_file_perm+0x18b/0x15f0 [ 1191.113994][ T6125] ? skb_put+0x112/0x210 [ 1191.114018][ T6125] hci_sock_sendmsg+0x426/0xfb0 [ 1191.114136][ T6125] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1191.114158][ T6125] ? apparmor_socket_sendmsg+0x98/0x360 [ 1191.114176][ T6125] ? lock_acquire+0x115/0x350 [ 1191.114195][ T6125] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1191.114210][ T6125] sock_sendmsg_nosec+0x13a/0x180 [ 1191.114227][ T6125] sock_write_iter+0x2de/0x3e0 [ 1191.114243][ T6125] ? __pfx_sock_write_iter+0x10/0x10 [ 1191.114263][ T6125] ? bpf_lsm_file_permission+0x9/0x20 [ 1191.114285][ T6125] ? security_file_permission+0x75/0x260 [ 1191.114307][ T6125] vfs_write+0x612/0xba0 [ 1191.114338][ T6125] ? __pfx_vfs_write+0x10/0x10 [ 1191.114362][ T6125] ? do_sys_openat2+0x14e/0x200 [ 1191.114380][ T6125] ? kmem_cache_free+0x182/0x650 [ 1191.114412][ T6125] ksys_write+0x150/0x270 [ 1191.114437][ T6125] ? __pfx_ksys_write+0x10/0x10 [ 1191.114471][ T6125] do_syscall_64+0x166/0x520 [ 1191.114493][ T6125] ? trace_irq_disable+0x3b/0x140 [ 1191.114506][ T6125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.114520][ T6125] ? clear_bhb_loop+0x70/0xc0 [ 1191.114548][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.114564][ T6125] RIP: 0033:0x7ff775d9e159 [ 1191.114581][ T6125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1191.114593][ T6125] RSP: 002b:00007ff776bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1191.114608][ T6125] RAX: ffffffffffffffda RBX: 00007ff776025fa0 RCX: 00007ff775d9e159 [ 1191.114618][ T6125] RDX: 0000000000000009 RSI: 0000200000000300 RDI: 0000000000000005 [ 1191.114627][ T6125] RBP: 00007ff776bce090 R08: 0000000000000000 R09: 0000000000000000 [ 1191.114636][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1191.114646][ T6125] R13: 00007ff776026038 R14: 00007ff776025fa0 R15: 00007ffd849dabd8 [ 1191.114671][ T6125] [ 1191.115371][ T6125] __nla_validate_parse: 4 callbacks suppressed [ 1191.115384][ T6125] netlink: 136 bytes leftover after parsing attributes in process `syz.2.9624'. [ 1191.702993][ T6147] netlink: 'syz.0.9630': attribute type 1 has an invalid length. [ 1191.703023][ T6147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9630'. [ 1191.773997][ T6129] tunl0: Caught tx_queue_len zero misconfig [ 1191.843662][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9631'. [ 1191.940509][ T6153] ip6t_srh: unknown srh invflags BA61 [ 1191.941773][ T6157] tipc: New replicast peer: 255.255.255.255 [ 1191.942437][ T6157] tipc: Enabled bearer , priority 10 [ 1191.943162][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9634'. [ 1191.944383][ T6157] netlink: 'syz.0.9634': attribute type 1 has an invalid length. [ 1192.037063][ T6159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9635'. [ 1192.166596][ T6163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9638'. [ 1192.166619][ T6163] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9638'. [ 1192.516248][ T6182] netlink: 'syz.3.9643': attribute type 1 has an invalid length. [ 1192.516269][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9643'. [ 1192.622246][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9646'. [ 1192.731228][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9647'. [ 1192.759923][ T6191] ip6t_srh: unknown srh invflags BA61 [ 1192.899789][ T6196] dvmrp0: left allmulticast mode [ 1193.071111][ T6207] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 1193.071137][ T6207] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 1193.071541][T31967] tipc: Node number set to 242786590 [ 1193.217982][ T6217] ip_tables: iptables: counters copy to user failed while replacing table [ 1193.309848][ T6222] syzkaller0: entered promiscuous mode [ 1193.309862][ T6222] syzkaller0: entered allmulticast mode [ 1193.520166][ T6232] bridge0: port 1(veth0) entered blocking state [ 1193.521917][ T6232] bridge0: port 1(veth0) entered disabled state [ 1193.522096][ T6232] veth0: entered allmulticast mode [ 1193.530746][ T6232] veth0: entered promiscuous mode [ 1194.012409][ T6261] ip_tables: iptables: counters copy to user failed while replacing table [ 1194.352271][ T6276] netlink: 'syz.1.9671': attribute type 21 has an invalid length. [ 1194.811612][ T6307] FAULT_INJECTION: forcing a failure. [ 1194.811612][ T6307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1194.815369][ T6307] CPU: 1 UID: 0 PID: 6307 Comm: syz.1.9681 Not tainted syzkaller #0 PREEMPT(full) [ 1194.815393][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1194.815405][ T6307] Call Trace: [ 1194.815412][ T6307] [ 1194.815421][ T6307] dump_stack_lvl+0xe8/0x150 [ 1194.815452][ T6307] should_fail_ex+0x410/0x560 [ 1194.815479][ T6307] _copy_from_user+0x2d/0xb0 [ 1194.815505][ T6307] bpf_test_init+0xd8/0x150 [ 1194.815528][ T6307] bpf_prog_test_run_skb+0x31e/0x2230 [ 1194.815557][ T6307] ? lock_acquire+0x115/0x350 [ 1194.815593][ T6307] ? __fget_files+0x3a2/0x420 [ 1194.815618][ T6307] ? __fget_files+0x2a/0x420 [ 1194.815648][ T6307] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1194.815679][ T6307] bpf_prog_test_run+0x2c5/0x340 [ 1194.815703][ T6307] __sys_bpf+0xa22/0xd90 [ 1194.815729][ T6307] ? __pfx___sys_bpf+0x10/0x10 [ 1194.815768][ T6307] ? __fget_files+0x2a/0x420 [ 1194.815806][ T6307] ? ksys_write+0x242/0x270 [ 1194.815835][ T6307] ? __pfx_ksys_write+0x10/0x10 [ 1194.815866][ T6307] __x64_sys_bpf+0xba/0xd0 [ 1194.815888][ T6307] do_syscall_64+0x166/0x520 [ 1194.815910][ T6307] ? trace_irq_disable+0x3b/0x140 [ 1194.815928][ T6307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.815947][ T6307] ? clear_bhb_loop+0x70/0xc0 [ 1194.815969][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.815987][ T6307] RIP: 0033:0x7f9e4b19e159 [ 1194.816005][ T6307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.816019][ T6307] RSP: 002b:00007f9e4c0bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1194.816040][ T6307] RAX: ffffffffffffffda RBX: 00007f9e4b425fa0 RCX: 00007f9e4b19e159 [ 1194.816054][ T6307] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1194.816066][ T6307] RBP: 00007f9e4c0bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.816078][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.816089][ T6307] R13: 00007f9e4b426038 R14: 00007f9e4b425fa0 R15: 00007ffec79d3998 [ 1194.816119][ T6307] [ 1195.264541][ T6321] mac80211_hwsim hwsim17 syzkaller0: left promiscuous mode [ 1195.264568][ T6321] mac80211_hwsim hwsim17 syzkaller0: left allmulticast mode [ 1196.298636][ T6338] af_packet: packet size is too long (4096 > 2016) [ 1196.324038][ T6342] ip_tables: iptables: counters copy to user failed while replacing table [ 1196.334721][ T6344] netlink: 'syz.2.9696': attribute type 1 has an invalid length. [ 1196.377456][ T6344] bond8: entered promiscuous mode [ 1196.377849][ T6344] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1196.410303][ T6344] bond8: (slave bridge10): making interface the new active one [ 1196.410326][ T6344] bridge10: entered promiscuous mode [ 1196.413840][ T6344] bond8: (slave bridge10): Enslaving as an active interface with an up link [ 1196.473552][ T6342] syzkaller0: entered promiscuous mode [ 1196.473574][ T6342] syzkaller0: entered allmulticast mode [ 1196.489704][ T6350] __nla_validate_parse: 23 callbacks suppressed [ 1196.489722][ T6350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9698'. [ 1196.560545][ T6352] netlink: 'syz.2.9699': attribute type 1 has an invalid length. [ 1196.560565][ T6352] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9699'. [ 1196.685358][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9699'. [ 1196.792043][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9702'. [ 1196.823595][ T6350] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1197.071432][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9703'. [ 1197.143577][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9703'. [ 1197.168829][ T6375] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9703'. [ 1197.220644][ T6388] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1197.327556][ T6393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9707'. [ 1197.327581][ T6393] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9707'. [ 1197.614095][ T6406] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1197.679689][ T6406] bond9 (unregistering): Released all slaves [ 1197.913606][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9700'. [ 1197.948492][ T5280] veth1_vlan: left promiscuous mode [ 1198.537760][ T6437] netlink: 'syz.2.9712': attribute type 1 has an invalid length. [ 1198.594191][ T6437] bond9: entered promiscuous mode [ 1198.594578][ T6437] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1198.687296][ T6437] bond9: (slave bridge11): making interface the new active one [ 1198.687320][ T6437] bridge11: entered promiscuous mode [ 1198.688366][ T6437] bond9: (slave bridge11): Enslaving as an active interface with an up link [ 1198.847879][ T6449] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1199.003207][ T6468] netlink: 'syz.3.9720': attribute type 1 has an invalid length. [ 1199.092085][ T6468] bond11: entered promiscuous mode [ 1199.092578][ T6468] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1199.138285][ T6468] bond11: (slave bridge8): making interface the new active one [ 1199.138307][ T6468] bridge8: entered promiscuous mode [ 1199.139486][ T6468] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 1199.441024][ T6476] ip_tables: iptables: counters copy to user failed while replacing table [ 1199.739648][ T6481] syzkaller0: entered promiscuous mode [ 1199.739670][ T6481] syzkaller0: entered allmulticast mode [ 1201.464223][ T6538] netlink: 'syz.2.9737': attribute type 30 has an invalid length. [ 1201.586382][ T6547] ip_tables: iptables: counters copy to user failed while replacing table [ 1201.587585][ T6538] netlink: 'syz.2.9737': attribute type 30 has an invalid length. [ 1201.724892][ T6547] syzkaller0: entered promiscuous mode [ 1201.724915][ T6547] syzkaller0: entered allmulticast mode [ 1201.795396][ T6551] __nla_validate_parse: 2 callbacks suppressed [ 1201.795416][ T6551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9740'. [ 1201.795430][ T6551] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9740'. [ 1202.351470][ T6573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9746'. [ 1202.351492][ T6573] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9746'. [ 1202.605300][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9748'. [ 1202.605325][ T6584] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9748'. [ 1202.929847][ T6596] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9753'. [ 1203.373665][ T6612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9760'. [ 1203.373689][ T6612] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9760'. [ 1203.909292][ T6626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9764'. [ 1204.081082][ T6633] netlink: 'syz.0.9766': attribute type 1 has an invalid length. [ 1204.110174][ T6633] bond6: entered promiscuous mode [ 1204.110637][ T6633] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1204.141376][ T6633] vlan4: entered allmulticast mode [ 1204.141395][ T6633] bond6: entered allmulticast mode [ 1204.163351][ T6633] bond6: (slave bridge13): making interface the new active one [ 1204.163371][ T6633] bridge13: entered promiscuous mode [ 1204.168013][ T6633] bridge13: entered allmulticast mode [ 1204.179218][ T6633] bond6: (slave bridge13): Enslaving as an active interface with an up link [ 1204.820849][ T6664] netlink: 'syz.2.9776': attribute type 1 has an invalid length. [ 1204.891764][ T6664] bond10: entered promiscuous mode [ 1204.892344][ T6664] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1204.907826][ T6671] vlan8: entered allmulticast mode [ 1204.907844][ T6671] bond10: entered allmulticast mode [ 1205.032536][ T6681] trusted_key: syz.2.9780 sent an empty control message without MSG_MORE. [ 1205.077604][ T6685] FAULT_INJECTION: forcing a failure. [ 1205.077604][ T6685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1205.077634][ T6685] CPU: 1 UID: 0 PID: 6685 Comm: syz.1.9782 Not tainted syzkaller #0 PREEMPT(full) [ 1205.077654][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1205.077666][ T6685] Call Trace: [ 1205.077673][ T6685] [ 1205.077681][ T6685] dump_stack_lvl+0xe8/0x150 [ 1205.077712][ T6685] should_fail_ex+0x410/0x560 [ 1205.077739][ T6685] _copy_to_user+0x31/0xb0 [ 1205.077766][ T6685] simple_read_from_buffer+0xe1/0x170 [ 1205.077797][ T6685] proc_fail_nth_read+0x1bb/0x230 [ 1205.077815][ T6685] ? common_file_perm+0x20e/0x2b0 [ 1205.077840][ T6685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1205.077862][ T6685] ? rw_verify_area+0x24a/0x4c0 [ 1205.077890][ T6685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1205.077908][ T6685] vfs_read+0x213/0xa80 [ 1205.077939][ T6685] ? __pfx___mutex_lock+0x10/0x10 [ 1205.077965][ T6685] ? __pfx_vfs_read+0x10/0x10 [ 1205.077992][ T6685] ? __fget_files+0x2a/0x420 [ 1205.078021][ T6685] ? __fget_files+0x3a2/0x420 [ 1205.078044][ T6685] ? __fget_files+0x2a/0x420 [ 1205.078077][ T6685] ksys_read+0x150/0x270 [ 1205.078106][ T6685] ? __pfx_ksys_read+0x10/0x10 [ 1205.078143][ T6685] do_syscall_64+0x166/0x520 [ 1205.078166][ T6685] ? trace_irq_disable+0x3b/0x140 [ 1205.078192][ T6685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.078212][ T6685] ? clear_bhb_loop+0x70/0xc0 [ 1205.078234][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.078253][ T6685] RIP: 0033:0x7f9e4b15e98e [ 1205.078271][ T6685] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1205.078286][ T6685] RSP: 002b:00007f9e4c0befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1205.078305][ T6685] RAX: ffffffffffffffda RBX: 00007f9e4c0bf6c0 RCX: 00007f9e4b15e98e [ 1205.078319][ T6685] RDX: 000000000000000f RSI: 00007f9e4c0bf0a0 RDI: 0000000000000003 [ 1205.078331][ T6685] RBP: 00007f9e4c0bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.078343][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.078354][ T6685] R13: 00007f9e4b426038 R14: 00007f9e4b425fa0 R15: 00007ffec79d3998 [ 1205.078385][ T6685] [ 1205.410789][ T6692] vlan0: entered allmulticast mode [ 1205.410810][ T6692] veth0_vlan: entered allmulticast mode [ 1205.437093][ T6694] nbd: must specify at least one socket [ 1206.317035][ T6755] FAULT_INJECTION: forcing a failure. [ 1206.317035][ T6755] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.317068][ T6755] CPU: 0 UID: 0 PID: 6755 Comm: syz.3.9804 Not tainted syzkaller #0 PREEMPT(full) [ 1206.317088][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1206.317100][ T6755] Call Trace: [ 1206.317108][ T6755] [ 1206.317117][ T6755] dump_stack_lvl+0xe8/0x150 [ 1206.317148][ T6755] should_fail_ex+0x410/0x560 [ 1206.317177][ T6755] should_failslab+0xa8/0x100 [ 1206.317200][ T6755] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1206.317224][ T6755] ? unwind_get_return_address+0x4d/0x90 [ 1206.317247][ T6755] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1206.317266][ T6755] ? __get_vm_area_node+0x155/0x2f0 [ 1206.317289][ T6755] ? __get_vm_area_node+0x155/0x2f0 [ 1206.317320][ T6755] __get_vm_area_node+0x155/0x2f0 [ 1206.317350][ T6755] __vmalloc_node_range_noprof+0x343/0x1540 [ 1206.317387][ T6755] ? bpf_prog_calc_tag+0x51/0x370 [ 1206.317410][ T6755] ? __x64_sys_bpf+0xba/0xd0 [ 1206.317427][ T6755] ? do_syscall_64+0x166/0x520 [ 1206.317457][ T6755] ? __kasan_kmalloc+0x93/0xb0 [ 1206.317478][ T6755] ? bpf_prog_load+0x14d6/0x1c20 [ 1206.317497][ T6755] ? __sys_bpf+0xd0d/0xd90 [ 1206.317514][ T6755] ? __x64_sys_bpf+0xba/0xd0 [ 1206.317544][ T6755] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1206.317582][ T6755] ? bpf_prog_calc_tag+0x51/0x370 [ 1206.317601][ T6755] __vmalloc_noprof+0xd2/0x120 [ 1206.317627][ T6755] ? bpf_prog_calc_tag+0x51/0x370 [ 1206.317652][ T6755] bpf_prog_calc_tag+0x51/0x370 [ 1206.317672][ T6755] ? __pfx_cmp_subprogs+0x10/0x10 [ 1206.317704][ T6755] check_and_resolve_insns+0xbb/0x21d0 [ 1206.317730][ T6755] ? add_subprog+0x2e2/0x3f0 [ 1206.317753][ T6755] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1206.317783][ T6755] bpf_check+0x18f9/0x2ef0 [ 1206.317818][ T6755] ? __pfx_bpf_check+0x10/0x10 [ 1206.317840][ T6755] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1206.317869][ T6755] bpf_prog_load+0x14d6/0x1c20 [ 1206.317899][ T6755] ? __pfx_bpf_prog_load+0x10/0x10 [ 1206.317944][ T6755] __sys_bpf+0xd0d/0xd90 [ 1206.317971][ T6755] ? __pfx___sys_bpf+0x10/0x10 [ 1206.318001][ T6755] ? __fget_files+0x2a/0x420 [ 1206.318040][ T6755] ? ksys_write+0x242/0x270 [ 1206.318069][ T6755] ? __pfx_ksys_write+0x10/0x10 [ 1206.318099][ T6755] __x64_sys_bpf+0xba/0xd0 [ 1206.318120][ T6755] do_syscall_64+0x166/0x520 [ 1206.318142][ T6755] ? trace_irq_disable+0x3b/0x140 [ 1206.318161][ T6755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.318180][ T6755] ? clear_bhb_loop+0x70/0xc0 [ 1206.318201][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.318220][ T6755] RIP: 0033:0x7f5963d9e159 [ 1206.318236][ T6755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.318250][ T6755] RSP: 002b:00007f5964cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1206.318270][ T6755] RAX: ffffffffffffffda RBX: 00007f5964025fa0 RCX: 00007f5963d9e159 [ 1206.318283][ T6755] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1206.318293][ T6755] RBP: 00007f5964cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.318305][ T6755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1206.318315][ T6755] R13: 00007f5964026038 R14: 00007f5964025fa0 R15: 00007fff813e87f8 [ 1206.318343][ T6755] [ 1206.324623][ T6755] syz.3.9804: vmalloc error: size 96, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1206.324683][ T6755] CPU: 0 UID: 0 PID: 6755 Comm: syz.3.9804 Not tainted syzkaller #0 PREEMPT(full) [ 1206.324702][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1206.324713][ T6755] Call Trace: [ 1206.324721][ T6755] [ 1206.324728][ T6755] dump_stack_lvl+0xe8/0x150 [ 1206.324757][ T6755] warn_alloc+0x24d/0x270 [ 1206.324776][ T6755] ? __kasan_kmalloc+0x22/0xb0 [ 1206.324798][ T6755] ? __pfx_warn_alloc+0x10/0x10 [ 1206.324814][ T6755] ? __get_vm_area_node+0x155/0x2f0 [ 1206.324843][ T6755] ? __get_vm_area_node+0x2a9/0x2f0 [ 1206.324872][ T6755] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1206.324899][ T6755] ? __x64_sys_bpf+0xba/0xd0 [ 1206.324915][ T6755] ? do_syscall_64+0x166/0x520 [ 1206.324943][ T6755] ? __kasan_kmalloc+0x93/0xb0 [ 1206.324962][ T6755] ? bpf_prog_load+0x14d6/0x1c20 [ 1206.324980][ T6755] ? __sys_bpf+0xd0d/0xd90 [ 1206.324997][ T6755] ? __x64_sys_bpf+0xba/0xd0 [ 1206.325027][ T6755] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1206.325063][ T6755] ? bpf_prog_calc_tag+0x51/0x370 [ 1206.325083][ T6755] __vmalloc_noprof+0xd2/0x120 [ 1206.325108][ T6755] ? bpf_prog_calc_tag+0x51/0x370 [ 1206.325132][ T6755] bpf_prog_calc_tag+0x51/0x370 [ 1206.325153][ T6755] ? __pfx_cmp_subprogs+0x10/0x10 [ 1206.325179][ T6755] check_and_resolve_insns+0xbb/0x21d0 [ 1206.325204][ T6755] ? add_subprog+0x2e2/0x3f0 [ 1206.325229][ T6755] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1206.325260][ T6755] bpf_check+0x18f9/0x2ef0 [ 1206.325295][ T6755] ? __pfx_bpf_check+0x10/0x10 [ 1206.325319][ T6755] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1206.325348][ T6755] bpf_prog_load+0x14d6/0x1c20 [ 1206.325390][ T6755] ? __pfx_bpf_prog_load+0x10/0x10 [ 1206.325436][ T6755] __sys_bpf+0xd0d/0xd90 [ 1206.325464][ T6755] ? __pfx___sys_bpf+0x10/0x10 [ 1206.325495][ T6755] ? __fget_files+0x2a/0x420 [ 1206.325536][ T6755] ? ksys_write+0x242/0x270 [ 1206.325564][ T6755] ? __pfx_ksys_write+0x10/0x10 [ 1206.325595][ T6755] __x64_sys_bpf+0xba/0xd0 [ 1206.325618][ T6755] do_syscall_64+0x166/0x520 [ 1206.325641][ T6755] ? trace_irq_disable+0x3b/0x140 [ 1206.325662][ T6755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.325679][ T6755] ? clear_bhb_loop+0x70/0xc0 [ 1206.325699][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.325716][ T6755] RIP: 0033:0x7f5963d9e159 [ 1206.325733][ T6755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.325749][ T6755] RSP: 002b:00007f5964cdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1206.325768][ T6755] RAX: ffffffffffffffda RBX: 00007f5964025fa0 RCX: 00007f5963d9e159 [ 1206.325782][ T6755] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1206.325793][ T6755] RBP: 00007f5964cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.325804][ T6755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1206.325815][ T6755] R13: 00007f5964026038 R14: 00007f5964025fa0 R15: 00007fff813e87f8 [ 1206.325846][ T6755] [ 1206.344267][ T6755] Mem-Info: [ 1206.344281][ T6755] active_anon:7842 inactive_anon:0 isolated_anon:0 [ 1206.344281][ T6755] active_file:17 inactive_file:44619 isolated_file:0 [ 1206.344281][ T6755] unevictable:0 dirty:309 writeback:0 [ 1206.344281][ T6755] slab_reclaimable:13591 slab_unreclaimable:135326 [ 1206.344281][ T6755] mapped:30565 shmem:513 pagetables:1330 [ 1206.344281][ T6755] sec_pagetables:0 bounce:0 [ 1206.344281][ T6755] kernel_misc_reclaimable:0 [ 1206.344281][ T6755] free:1242024 free_pcp:11501 free_cma:0 [ 1206.344327][ T6755] Node 0 active_anon:31368kB inactive_anon:0kB active_file:68kB inactive_file:178272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122260kB dirty:1236kB writeback:0kB shmem:2052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15264kB pagetables:5156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1206.344382][ T6755] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1206.344426][ T6755] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1206.344475][ T6755] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1206.344508][ T6755] Node 0 DMA32 free:1013368kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31368kB inactive_anon:0kB active_file:68kB inactive_file:178272kB unevictable:0kB writepending:1236kB zspages:0kB present:3129332kB managed:2546840kB mlocked:0kB bounce:0kB free_pcp:46004kB local_pcp:19924kB free_cma:0kB [ 1206.344558][ T6755] lowmem_reserve[]: 0 0 0 0 0 [ 1206.344588][ T6755] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1206.344635][ T6755] lowmem_reserve[]: 0 0 0 0 0 [ 1206.344664][ T6755] Node 1 Normal free:3939368kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1206.344712][ T6755] lowmem_reserve[]: 0 0 0 0 0 [ 1206.344741][ T6755] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1206.344840][ T6755] Node 0 DMA32: 568*4kB (UME) 126*8kB (UME) 292*16kB (UME) 571*32kB (UME) 136*64kB (UME) 56*128kB (UME) 20*256kB (UM) 9*512kB (ME) 7*1024kB (UME) 2*2048kB (U) 232*4096kB (UM) = 1013360kB [ 1206.344975][ T6755] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1206.345058][ T6755] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 10*16kB (UM) 9*32kB (UM) 11*64kB (UM) 3*128kB (UM) 6*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3939368kB [ 1206.345188][ T6755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1206.345202][ T6755] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1206.345216][ T6755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1206.345230][ T6755] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1206.345243][ T6755] 45145 total pagecache pages [ 1206.345251][ T6755] 0 pages in swap cache [ 1206.345257][ T6755] Free swap = 124996kB [ 1206.345264][ T6755] Total swap = 124996kB [ 1206.345271][ T6755] 2097051 pages RAM [ 1206.345277][ T6755] 0 pages HighMem/MovableOnly [ 1206.345284][ T6755] 428725 pages reserved [ 1206.345291][ T6755] 0 pages cma reserved [ 1206.675014][ T6761] netlink: 'syz.1.9805': attribute type 1 has an invalid length. [ 1207.191938][ T6769] block nbd0: reconnected socket [ 1207.207084][ T6769] netlink: 'syz.4.9808': attribute type 9 has an invalid length. [ 1207.539950][ T6785] FAULT_INJECTION: forcing a failure. [ 1207.539950][ T6785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1207.539981][ T6785] CPU: 1 UID: 0 PID: 6785 Comm: syz.2.9813 Not tainted syzkaller #0 PREEMPT(full) [ 1207.540001][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1207.540013][ T6785] Call Trace: [ 1207.540020][ T6785] [ 1207.540028][ T6785] dump_stack_lvl+0xe8/0x150 [ 1207.540059][ T6785] should_fail_ex+0x410/0x560 [ 1207.540085][ T6785] _copy_to_iter+0x59c/0x1810 [ 1207.540121][ T6785] ? __pfx__copy_to_iter+0x10/0x10 [ 1207.540143][ T6785] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1207.540168][ T6785] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1207.540190][ T6785] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 1207.540222][ T6785] __skb_datagram_iter+0xf8/0x980 [ 1207.540246][ T6785] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 1207.540268][ T6785] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1207.540304][ T6785] skb_copy_datagram_iter+0xb5/0x240 [ 1207.540335][ T6785] netlink_recvmsg+0x2b9/0xa50 [ 1207.540371][ T6785] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1207.540388][ T6785] ? lock_acquire+0x115/0x350 [ 1207.540410][ T6785] ? aa_sock_msg_perm+0x144/0x210 [ 1207.540438][ T6785] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1207.540460][ T6785] ? security_socket_recvmsg+0x7e/0x2c0 [ 1207.540488][ T6785] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1207.540508][ T6785] sock_recvmsg+0x196/0x1e0 [ 1207.540532][ T6785] ____sys_recvmsg+0x1e6/0x4a0 [ 1207.540567][ T6785] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1207.540608][ T6785] ? import_iovec+0x73/0xa0 [ 1207.540635][ T6785] ___sys_recvmsg+0x213/0x5a0 [ 1207.540666][ T6785] ? __pfx____sys_recvmsg+0x10/0x10 [ 1207.540696][ T6785] ? lock_acquire+0x115/0x350 [ 1207.540731][ T6785] ? __fget_files+0x3a2/0x420 [ 1207.540766][ T6785] do_recvmmsg+0x31a/0x7f0 [ 1207.540803][ T6785] ? __pfx_do_recvmmsg+0x10/0x10 [ 1207.540838][ T6785] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1207.540862][ T6785] ? __fget_files+0x3a2/0x420 [ 1207.540897][ T6785] __x64_sys_recvmmsg+0x198/0x250 [ 1207.540926][ T6785] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1207.540962][ T6785] do_syscall_64+0x166/0x520 [ 1207.540985][ T6785] ? trace_irq_disable+0x3b/0x140 [ 1207.541003][ T6785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.541021][ T6785] ? clear_bhb_loop+0x70/0xc0 [ 1207.541042][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.541059][ T6785] RIP: 0033:0x7ff775d9e159 [ 1207.541075][ T6785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.541088][ T6785] RSP: 002b:00007ff776bce028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1207.541106][ T6785] RAX: ffffffffffffffda RBX: 00007ff776025fa0 RCX: 00007ff775d9e159 [ 1207.541119][ T6785] RDX: 0000000000000004 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1207.541131][ T6785] RBP: 00007ff776bce090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.541142][ T6785] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 1207.541152][ T6785] R13: 00007ff776026038 R14: 00007ff776025fa0 R15: 00007ffd849dabd8 [ 1207.541179][ T6785] [ 1207.736571][ T6787] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1207.740709][T18913] block nbd0: Receive control failed (result -32) [ 1207.776386][ T6791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1207.804603][ T6790] __nla_validate_parse: 34 callbacks suppressed [ 1207.804623][ T6790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9815'. [ 1207.862124][ T6787] team0: Mode changed to "loadbalance" [ 1207.887724][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9815'. [ 1207.890746][ T6787] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9812'. [ 1207.913590][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9815'. [ 1208.090278][ T6810] ip_tables: iptables: counters copy to user failed while replacing table [ 1208.304591][ T6813] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 1208.304618][ T6813] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 1208.422541][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9822'. [ 1208.422579][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9822'. [ 1208.510717][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9820'. [ 1208.518915][ T6818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1208.564628][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9820'. [ 1208.564806][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9820'. [ 1208.564989][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9820'. [ 1208.633090][ T6822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1208.824056][ T6839] erspan0: entered promiscuous mode [ 1208.893460][ T6838] erspan0: left promiscuous mode [ 1208.999376][ T6847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1209.344287][T18913] Bluetooth: hci4: connection err: -111 [ 1209.601680][ T6875] netlink: 'syz.2.9839': attribute type 1 has an invalid length. [ 1209.644085][ T6875] bond11: entered promiscuous mode [ 1209.644356][ T6875] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1209.704428][ T6875] vlan9: entered allmulticast mode [ 1209.704448][ T6875] bond11: entered allmulticast mode [ 1209.724218][ T6880] veth1_to_team: entered promiscuous mode [ 1209.746396][ T6880] veth1_to_team: left promiscuous mode [ 1210.032429][ T6897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1210.491710][ T2000] block nbd0: Possible stuck request ffff888026d9e000: control (read@0,4096B). Runtime 1050 seconds [ 1210.494709][ T2000] block nbd0: Dead connection, failed to find a fallback [ 1210.494729][ T2000] block nbd0: shutting down sockets [ 1210.494911][ T2000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1210.495056][ T2000] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1210.495192][ T2000] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1210.495207][ T2000] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1210.495221][ T2000] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1210.499452][ T2000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1210.499479][ T2000] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1210.499494][ T2000] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1210.499507][ T2000] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1210.499520][ T2000] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1210.502050][ T2000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1210.502075][ T2000] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1210.502202][ T2000] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1210.503279][ T2000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1210.503471][ T2000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1210.503642][ T2000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1210.503785][ T2000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1210.503914][ T5620] ldm_validate_partition_table(): Disk read failed. [ 1210.503954][ T2000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1210.504099][ T2000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1210.504241][ T2000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1210.504478][ T5620] Dev nbd0: unable to read RDB block 0 [ 1210.507427][ T5620] nbd0: unable to read partition table [ 1210.563675][ T4985] udevd[4985]: worker [5620] terminated by signal 9 (Killed) [ 1210.563720][ T4985] udevd[4985]: worker [5620] failed while handling '/devices/virtual/block/nbd0' [ 1210.784631][ T6928] netlink: 'syz.0.9851': attribute type 10 has an invalid length. [ 1210.861107][ T6928] geneve3: entered promiscuous mode [ 1210.861132][ T6928] geneve3: entered allmulticast mode [ 1211.420376][ T6964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1211.872222][ T6991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1211.876374][ T6986] bond12: option lacp_active: invalid value (5) [ 1212.047571][ T6986] bond12 (unregistering): Released all slaves [ 1212.884493][ T7042] __nla_validate_parse: 64 callbacks suppressed [ 1212.884513][ T7042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9886'. [ 1212.943760][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9887'. [ 1213.215386][ T7058] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1213.374238][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9893'. [ 1213.494070][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9896'. [ 1213.679537][ T7076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9898'. [ 1213.795385][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9899'. [ 1213.968160][ T7090] sch_tbf: burst 21986 is lower than device erspan0 mtu (32783) ! [ 1214.097898][T32644] nci: nci_rx_work: unknown MT 0x6 [ 1214.105516][ T7105] netlink: 'syz.4.9903': attribute type 4 has an invalid length. [ 1214.105538][ T7105] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9903'. [ 1214.111824][ T7105] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1214.172587][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9909'. [ 1214.172610][ T7107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9909'. [ 1214.172919][ T7107] vlan0: left allmulticast mode [ 1214.172934][ T7107] veth0_vlan: left allmulticast mode [ 1214.200100][ T7110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9910'. [ 1214.208062][ T7111] xt_hl: Unknown Hop Limit match mode: 4 [ 1215.148105][ T7138] netlink: 'syz.3.9918': attribute type 1 has an invalid length. [ 1215.184126][ T7138] bond12: entered promiscuous mode [ 1215.184582][ T7138] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1215.309139][ T7144] vlan0: entered allmulticast mode [ 1215.309155][ T7144] team0: entered allmulticast mode [ 1215.309163][ T7144] team_slave_1: entered allmulticast mode [ 1215.309177][ T7144] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 1216.973082][ T7096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1217.287188][ T7152] syzkaller1: entered promiscuous mode [ 1217.287208][ T7152] syzkaller1: entered allmulticast mode [ 1217.591628][ T7179] netlink: 'syz.2.9928': attribute type 1 has an invalid length. [ 1217.784925][ T7179] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1217.805494][ T7186] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1217.883425][ T7197] netlink: 'syz.1.9931': attribute type 1 has an invalid length. [ 1217.951344][ T7200] __nla_validate_parse: 5 callbacks suppressed [ 1217.951364][ T7200] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9933'. [ 1218.053609][ T7208] syzkaller0: Caught tx_queue_len zero misconfig [ 1218.851238][ T7235] netlink: 260 bytes leftover after parsing attributes in process `syz.3.9940'. [ 1218.958708][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9941'. [ 1218.958769][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9941'. [ 1218.958783][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9941'. [ 1218.958856][ T7236] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9941'. [ 1218.958869][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9941'. [ 1219.009275][ T7240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9943'. [ 1219.196711][ T7247] [ 1219.199074][ T7247] ====================================================== [ 1219.206123][ T7247] WARNING: possible circular locking dependency detected [ 1219.213187][ T7247] syzkaller #0 Not tainted [ 1219.217593][ T7247] ------------------------------------------------------ [ 1219.224670][ T7247] syz.2.9947/7247 is trying to acquire lock: [ 1219.230641][ T7247] ffff88801c2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 1219.241286][ T7247] [ 1219.241286][ T7247] but task is already holding lock: [ 1219.248634][ T7247] ffffffff8ebe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 1219.258714][ T7247] [ 1219.258714][ T7247] which lock already depends on the new lock. [ 1219.258714][ T7247] [ 1219.269098][ T7247] [ 1219.269098][ T7247] the existing dependency chain (in reverse order) is: [ 1219.278099][ T7247] [ 1219.278099][ T7247] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1219.285916][ T7247] cpus_read_lock+0x42/0x160 [ 1219.291029][ T7247] static_key_slow_inc+0x12/0x30 [ 1219.296476][ T7247] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1219.302784][ T7247] nbd_genl_foreach_sock+0x265/0x450 [ 1219.308579][ T7247] nbd_genl_reconfigure+0xbbb/0x1040 [ 1219.314374][ T7247] genl_family_rcv_msg_doit+0x233/0x340 [ 1219.320431][ T7247] genl_rcv_msg+0x614/0x7a0 [ 1219.325443][ T7247] netlink_rcv_skb+0x226/0x4a0 [ 1219.330717][ T7247] genl_rcv+0x28/0x40 [ 1219.335212][ T7247] netlink_unicast+0x7bd/0x940 [ 1219.340483][ T7247] netlink_sendmsg+0x813/0xb40 [ 1219.345754][ T7247] sock_sendmsg_nosec+0x13a/0x180 [ 1219.351298][ T7247] ____sys_sendmsg+0x54e/0x850 [ 1219.356585][ T7247] ___sys_sendmsg+0x2a5/0x360 [ 1219.361783][ T7247] __x64_sys_sendmsg+0x1b1/0x290 [ 1219.367232][ T7247] do_syscall_64+0x166/0x520 [ 1219.372334][ T7247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.378731][ T7247] [ 1219.378731][ T7247] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1219.386366][ T7247] __mutex_lock+0x19d/0x1550 [ 1219.391477][ T7247] nbd_queue_rq+0x373/0xff0 [ 1219.396488][ T7247] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1219.402601][ T7247] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1219.409487][ T7247] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1219.415980][ T7247] blk_mq_run_work_fn+0x16c/0x300 [ 1219.421522][ T7247] process_scheduled_works+0xc3d/0x1630 [ 1219.427579][ T7247] worker_thread+0xa47/0xfb0 [ 1219.432681][ T7247] kthread+0x38b/0x480 [ 1219.437255][ T7247] ret_from_fork+0x514/0xb70 [ 1219.442349][ T7247] ret_from_fork_asm+0x1a/0x30 [ 1219.447626][ T7247] [ 1219.447626][ T7247] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1219.454825][ T7247] __mutex_lock+0x19d/0x1550 [ 1219.459924][ T7247] nbd_queue_rq+0xc1/0xff0 [ 1219.464847][ T7247] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1219.470898][ T7247] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1219.477735][ T7247] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1219.484224][ T7247] blk_mq_run_work_fn+0x16c/0x300 [ 1219.489762][ T7247] process_scheduled_works+0xc3d/0x1630 [ 1219.495819][ T7247] worker_thread+0xa47/0xfb0 [ 1219.500930][ T7247] kthread+0x38b/0x480 [ 1219.505503][ T7247] ret_from_fork+0x514/0xb70 [ 1219.510598][ T7247] ret_from_fork_asm+0x1a/0x30 [ 1219.515882][ T7247] [ 1219.515882][ T7247] -> #4 (set->srcu){.+.+}-{0:0}: [ 1219.523004][ T7247] __synchronize_srcu+0xc9/0x2f0 [ 1219.528452][ T7247] elevator_switch+0x1e8/0x7b0 [ 1219.533800][ T7247] elevator_change+0x2fa/0x480 [ 1219.539073][ T7247] elevator_set_default+0x375/0x440 [ 1219.544778][ T7247] blk_register_queue+0x3f3/0x4e0 [ 1219.550378][ T7247] __add_disk+0x6b8/0xdb0 [ 1219.555219][ T7247] add_disk_fwnode+0x100/0x3a0 [ 1219.560492][ T7247] nbd_dev_add+0x733/0xb60 [ 1219.565414][ T7247] nbd_init+0x168/0x1f0 [ 1219.570189][ T7247] do_one_initcall+0x250/0x870 [ 1219.575463][ T7247] do_initcall_level+0x10a/0x1a0 [ 1219.580975][ T7247] do_initcalls+0x59/0xa0 [ 1219.585814][ T7247] kernel_init_freeable+0x29d/0x3e0 [ 1219.591526][ T7247] kernel_init+0x22/0x1d0 [ 1219.596366][ T7247] ret_from_fork+0x514/0xb70 [ 1219.601473][ T7247] ret_from_fork_asm+0x1a/0x30 [ 1219.606748][ T7247] [ 1219.606748][ T7247] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1219.614552][ T7247] __mutex_lock+0x19d/0x1550 [ 1219.619656][ T7247] elevator_change+0x1af/0x480 [ 1219.624930][ T7247] elevator_set_none+0xb5/0x140 [ 1219.630290][ T7247] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1219.636611][ T7247] nbd_start_device+0x189/0xb30 [ 1219.641973][ T7247] nbd_genl_connect+0x167d/0x1cd0 [ 1219.647500][ T7247] genl_family_rcv_msg_doit+0x233/0x340 [ 1219.653558][ T7247] genl_rcv_msg+0x614/0x7a0 [ 1219.658567][ T7247] netlink_rcv_skb+0x226/0x4a0 [ 1219.663835][ T7247] genl_rcv+0x28/0x40 [ 1219.668325][ T7247] netlink_unicast+0x7bd/0x940 [ 1219.673597][ T7247] netlink_sendmsg+0x813/0xb40 [ 1219.678868][ T7247] sock_sendmsg_nosec+0x13a/0x180 [ 1219.684421][ T7247] ____sys_sendmsg+0x54e/0x850 [ 1219.689694][ T7247] ___sys_sendmsg+0x2a5/0x360 [ 1219.694881][ T7247] __x64_sys_sendmsg+0x1b1/0x290 [ 1219.700330][ T7247] do_syscall_64+0x166/0x520 [ 1219.705431][ T7247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.711830][ T7247] [ 1219.711830][ T7247] -> #2 (&q->q_usage_counter(io)#64){++++}-{0:0}: [ 1219.720449][ T7247] blk_alloc_queue+0x544/0x690 [ 1219.725725][ T7247] __blk_mq_alloc_disk+0x194/0x390 [ 1219.731352][ T7247] nbd_dev_add+0x494/0xb60 [ 1219.736273][ T7247] nbd_init+0x168/0x1f0 [ 1219.740949][ T7247] do_one_initcall+0x250/0x870 [ 1219.746241][ T7247] do_initcall_level+0x10a/0x1a0 [ 1219.751700][ T7247] do_initcalls+0x59/0xa0 [ 1219.756544][ T7247] kernel_init_freeable+0x29d/0x3e0 [ 1219.762254][ T7247] kernel_init+0x22/0x1d0 [ 1219.767092][ T7247] ret_from_fork+0x514/0xb70 [ 1219.772189][ T7247] ret_from_fork_asm+0x1a/0x30 [ 1219.777469][ T7247] [ 1219.777469][ T7247] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1219.784672][ T7247] fs_reclaim_acquire+0x71/0x100 [ 1219.790119][ T7247] kmem_cache_alloc_noprof+0x5f/0x600 [ 1219.796005][ T7247] __kernfs_iattrs+0xdd/0x380 [ 1219.801194][ T7247] kernfs_iop_setattr+0xe6/0x3f0 [ 1219.806655][ T7247] notify_change+0xbba/0xea0 [ 1219.811772][ T7247] do_truncate+0x1c2/0x250 [ 1219.816700][ T7247] path_openat+0x15b5/0x1d60 [ 1219.821798][ T7247] do_file_open+0x23e/0x4a0 [ 1219.826809][ T7247] do_sys_openat2+0x115/0x200 [ 1219.831998][ T7247] __x64_sys_openat+0x138/0x170 [ 1219.837360][ T7247] do_syscall_64+0x166/0x520 [ 1219.842468][ T7247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.848867][ T7247] [ 1219.848867][ T7247] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1219.857369][ T7247] __lock_acquire+0x164c/0x2de0 [ 1219.862729][ T7247] lock_acquire+0x115/0x350 [ 1219.867745][ T7247] down_read+0x4a/0x330 [ 1219.872426][ T7247] kernfs_iop_permission+0x7f/0x430 [ 1219.878147][ T7247] inode_permission+0x3de/0x5f0 [ 1219.883512][ T7247] cgroup_attach_permissions+0x28e/0x9f0 [ 1219.889657][ T7247] __cgroup_procs_write+0x24b/0x320 [ 1219.895372][ T7247] cgroup_threads_write+0x24/0x50 [ 1219.900912][ T7247] cgroup_file_write+0x331/0x8f0 [ 1219.906369][ T7247] kernfs_fop_write_iter+0x3a4/0x540 [ 1219.912170][ T7247] vfs_write+0x612/0xba0 [ 1219.916927][ T7247] ksys_write+0x150/0x270 [ 1219.921779][ T7247] do_syscall_64+0x166/0x520 [ 1219.926886][ T7247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.933298][ T7247] [ 1219.933298][ T7247] other info that might help us debug this: [ 1219.933298][ T7247] [ 1219.943508][ T7247] Chain exists of: [ 1219.943508][ T7247] &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock [ 1219.943508][ T7247] [ 1219.957483][ T7247] Possible unsafe locking scenario: [ 1219.957483][ T7247] [ 1219.964994][ T7247] CPU0 CPU1 [ 1219.970354][ T7247] ---- ---- [ 1219.975711][ T7247] rlock(cpu_hotplug_lock); [ 1219.980291][ T7247] lock(&nsock->tx_lock); [ 1219.987210][ T7247] lock(cpu_hotplug_lock); [ 1219.994218][ T7247] rlock(&root->kernfs_iattr_rwsem); [ 1219.999574][ T7247] [ 1219.999574][ T7247] *** DEADLOCK *** [ 1219.999574][ T7247] [ 1220.007762][ T7247] locks held by syz.2.9947/7247: 5, last CPU#0: [ 1220.014042][ T7247] #0: ffff888074266d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1220.023122][ T7247] #1: ffff888035412460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1220.032001][ T7247] #2: ffff888079264080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1220.041733][ T7247] #3: ffffffff8ed9c820 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 1220.051475][ T7247] #4: ffffffff8ebe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 1220.061990][ T7247] [ 1220.061990][ T7247] stack backtrace: [ 1220.067862][ T7247] CPU: 0 UID: 0 PID: 7247 Comm: syz.2.9947 Not tainted syzkaller #0 PREEMPT(full) [ 1220.077127][ T7247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1220.087168][ T7247] Call Trace: [ 1220.090434][ T7247] [ 1220.093358][ T7247] dump_stack_lvl+0xe8/0x150 [ 1220.097949][ T7247] print_circular_bug+0x2e2/0x300 [ 1220.102973][ T7247] check_noncircular+0x12f/0x150 [ 1220.107904][ T7247] __lock_acquire+0x164c/0x2de0 [ 1220.112747][ T7247] ? __lock_acquire+0x747/0x2de0 [ 1220.117676][ T7247] lock_acquire+0x115/0x350 [ 1220.122167][ T7247] ? kernfs_iop_permission+0x7f/0x430 [ 1220.127532][ T7247] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 1220.133336][ T7247] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 1220.139137][ T7247] down_read+0x4a/0x330 [ 1220.143287][ T7247] ? kernfs_iop_permission+0x7f/0x430 [ 1220.148651][ T7247] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 1220.154456][ T7247] kernfs_iop_permission+0x7f/0x430 [ 1220.159647][ T7247] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 1220.165448][ T7247] inode_permission+0x3de/0x5f0 [ 1220.170289][ T7247] cgroup_attach_permissions+0x28e/0x9f0 [ 1220.175917][ T7247] __cgroup_procs_write+0x24b/0x320 [ 1220.181121][ T7247] cgroup_threads_write+0x24/0x50 [ 1220.186139][ T7247] ? __pfx_cgroup_threads_write+0x10/0x10 [ 1220.191862][ T7247] cgroup_file_write+0x331/0x8f0 [ 1220.196796][ T7247] ? __pfx_cgroup_file_write+0x10/0x10 [ 1220.202248][ T7247] ? __kmalloc_noprof+0x38c/0x720 [ 1220.207262][ T7247] ? __pfx_cgroup_file_write+0x10/0x10 [ 1220.212712][ T7247] kernfs_fop_write_iter+0x3a4/0x540 [ 1220.217991][ T7247] vfs_write+0x612/0xba0 [ 1220.222230][ T7247] ? __pfx_vfs_write+0x10/0x10 [ 1220.226995][ T7247] ? __fget_files+0x2a/0x420 [ 1220.231589][ T7247] ksys_write+0x150/0x270 [ 1220.235912][ T7247] ? __pfx_ksys_write+0x10/0x10 [ 1220.240774][ T7247] do_syscall_64+0x166/0x520 [ 1220.245356][ T7247] ? trace_irq_disable+0x3b/0x140 [ 1220.250369][ T7247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.256434][ T7247] ? clear_bhb_loop+0x70/0xc0 [ 1220.261113][ T7247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.266997][ T7247] RIP: 0033:0x7ff775d9e159 [ 1220.271402][ T7247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.291000][ T7247] RSP: 002b:00007ff776bce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1220.299407][ T7247] RAX: ffffffffffffffda RBX: 00007ff776025fa0 RCX: 00007ff775d9e159 [ 1220.307368][ T7247] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000005 [ 1220.315328][ T7247] RBP: 00007ff775e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1220.323290][ T7247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1220.331255][ T7247] R13: 00007ff776026038 R14: 00007ff776025fa0 R15: 00007ffd849dabd8 [ 1220.339224][ T7247] [ 1220.415538][ T7258] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.