last executing test programs: 24m59.57066171s ago: executing program 1 (id=2825): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400020001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x40}}, 0x0) close(0x4) 24m59.405549715s ago: executing program 1 (id=2827): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="1e", 0xff80}], 0x2a0) (fail_nth: 7) 24m58.930228811s ago: executing program 1 (id=2831): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x22004801}, 0x20000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 24m58.817880543s ago: executing program 1 (id=2833): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2e}, 0x5f, r1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x5, 0x2, 0x0, 0x6, 0x4, [{0x4}, {0xffffffff, 0x4}]}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x71]}}, 0x0, 0x3b}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000006000000000000000000000003000000000000000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r5, 0xffffffffffffffff}, 0x4) r7 = socket$inet(0x2, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xf8, &(0x7f0000000100)=""/248, 0x0, 0x2c}, 0x24) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r11, @ANYBLOB="06001500070000000c00168008"], 0x38}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xa, &(0x7f00000005c0)=ANY=[@ANYRES16=r10, @ANYRES32=r6, @ANYRES32=r7, @ANYRESOCT=r9, @ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010029bd7000fcdbdf250100000000000000014100000008001700"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x44) unshare(0x22020400) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100210000002c00018014000300200100000000000000000000000000011400040000000000000000000000ffffac1e00013c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c000280c400d8b5d83bac196dea0c0002800500011b000000002c"], 0xc8}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) 24m58.526733211s ago: executing program 1 (id=2838): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r4, 0x25, 0x4, @void}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044fe0000a8001600050003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 24m58.30120881s ago: executing program 1 (id=2843): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000001bc9214cd23d712e9920a85c5b290000b70800000d0000007b8af8ff000000000007020000000008000000b704000000000000850000000100000095000000000000009471fb5e51c5ad977970692ed266f6c175c7e2f9104f5f6d4564fc99790b1a82ec64bb766ac8bbfdd8d72e106f296f8a01c41d52e95bbe11917c9d9eb1d610138cb887c583f434ca8d478c4ad1cf6007f4a7d296d29153817c464d6f9768f47d7fdda27d691a11789a76712220e234d1c67c8cbaf9b94422301ea8c2da91587c2643440b51a694e21f96"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800003}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x1, 0x200000, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x845}, 0x24008094) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a3200000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 24m43.169732647s ago: executing program 32 (id=2843): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000001bc9214cd23d712e9920a85c5b290000b70800000d0000007b8af8ff000000000007020000000008000000b704000000000000850000000100000095000000000000009471fb5e51c5ad977970692ed266f6c175c7e2f9104f5f6d4564fc99790b1a82ec64bb766ac8bbfdd8d72e106f296f8a01c41d52e95bbe11917c9d9eb1d610138cb887c583f434ca8d478c4ad1cf6007f4a7d296d29153817c464d6f9768f47d7fdda27d691a11789a76712220e234d1c67c8cbaf9b94422301ea8c2da91587c2643440b51a694e21f96"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800003}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x1, 0x200000, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x845}, 0x24008094) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a3200000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 10m32.642474064s ago: executing program 2 (id=9976): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000680)={0xa, 0x4e22, 0x2, @mcast2}, 0x1c, 0x0}}], 0x1, 0xff00) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x20, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e000000140002800800040000000020060002003000000008001f000500000008000400c2"], 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) 10m32.438320505s ago: executing program 2 (id=9978): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) socket(0x28, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCGSKNS(r1, 0x894c, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) close(0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xffb8}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r10, @ANYBLOB="060006000300000006000400feff"], 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20010000", @ANYRES16=r0, @ANYBLOB="6d0425bd7000fbdbdf251500000048002b801c0003800c0004000201aaaaaaaaaaaa0c000400000000000000000008000400fbffffff0c000500000000800000000014000380080002000300000006000300a3aa000008000300", @ANYRES32, @ANYBLOB="94002b802400038006000100ffff00000600010001000000060001000200000006000100030000000c000500010000000000000050000380060003000000000006000100ffff00000800020003000000060001000100000008000200020000000c00040000000000000000000600010002000000060003000000000006000100030000000500020001000000080004000b00000008000300", @ANYRES32=r4, @ANYBLOB="08002c0007000000050029"], 0x120}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) 10m32.159508037s ago: executing program 2 (id=9982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0xffffffffffffff33) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r2, 0xef, 0x6}, 0xc) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00004b59ff88880200000011000000ffff0000594c973a09465d95f4b9404631a6b2cd8c"], 0x1f) 10m31.769164151s ago: executing program 2 (id=9986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000980)=ANY=[@ANYBLOB="68020000000501040000000000000000030000065402010003000000080000005afcfaff0800190073797a31000000000000000000000000000000000000000000000000000000007b6452ea8bff65b56314a91d43a4edab2962119324e3385625ab9a002045f14aca8d62f4648edb0c1c75054fcb21694e17c949d4222360623f4d79659086a22c020009"], 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x0) epoll_create(0x3) socketpair(0x22, 0x3, 0x78d5, &(0x7f0000000000)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x0) 10m31.500306078s ago: executing program 2 (id=9991): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xb, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8800) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10m30.361596626s ago: executing program 2 (id=10001): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0xfea8, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000feffff3f000000000000000085100000060000008510000004000000c40800000020000018000000000000000000000000000000185a000002000000000000000012000095000000000000009500000000000000b57b9072a91046f613101a69758afbd105c5ddfcd6ca12fa8530abbd770a373d056355ea921dba7c5b6b3d20f7eadfad4ecf22a232816f7aba7d7fadd5ed6bf042d36c7e1626663358f18d07141a5db3a32955fd9422e3e09b8c41541cf9aae2f12c0d92c03b64ffd5f655c17f6d6b137187cb00e651fe38c20cae44190123b2b371e317571a2d9d3cbe07667b"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10}, 0x94) 10m15.305604107s ago: executing program 33 (id=10001): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0xfea8, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18080000feffff3f000000000000000085100000060000008510000004000000c40800000020000018000000000000000000000000000000185a000002000000000000000012000095000000000000009500000000000000b57b9072a91046f613101a69758afbd105c5ddfcd6ca12fa8530abbd770a373d056355ea921dba7c5b6b3d20f7eadfad4ecf22a232816f7aba7d7fadd5ed6bf042d36c7e1626663358f18d07141a5db3a32955fd9422e3e09b8c41541cf9aae2f12c0d92c03b64ffd5f655c17f6d6b137187cb00e651fe38c20cae44190123b2b371e317571a2d9d3cbe07667b"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10}, 0x94) 3.987103335s ago: executing program 4 (id=15733): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002300)={0x2c, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}]}, @CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) getsockopt$inet_int(r0, 0x0, 0x1, 0x0, &(0x7f0000001300)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001000)=@filter={'filter\x00', 0xe, 0x2, 0xbdc, [0x0, 0x200000000400, 0x200000000430, 0x200000000460], 0x0, &(0x7f0000000000), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x0, 0xc, 'syz_tun\x00', 'netpci0\x00', 'dvmrp1\x00', 'lo\x00', @random="c821ca2b65c7", [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @multicast, [0x0, 0x0, 0x0, 0x0, 0xff], 0xe6, 0x15e, 0x18e, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, [0xffffffff, 0xff000000, 0xff000000, 0x1ff000001], [0xff, 0xff], 0x4, 0x5c, 0x9, 0x8, 0x4e22, 0x4e22, 0x4e22, 0x4e24}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0xf, 0x45ac, 0x7, 0x1, 0x0, "038215b4a2becb7016f934057eef72d233c2b7c189bc1d76feda178ef9170da24bf132b2d25f58c2bc0df9520e6c3450f414ce0a4b61a7d62f700e488eb7a4f1"}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x1ff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{0x5, 0x44, 0xf6, 'dvmrp0\x00', 'veth1\x00', 'vlan1\x00', 'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0x0, 0x7f, 0xff], 0x8e6, 0x95e, 0x98e, [@among={{'among\x00', 0x0, 0x850}, {{@zero, @offset=0x42c, 0x1, {[0x9, 0x1, 0x68, 0x203e, 0x3, 0xffff, 0x5, 0x8, 0x200, 0x4, 0x3, 0x6, 0x1000, 0x7, 0x10001, 0xe9, 0x0, 0x5, 0x9, 0x2c79, 0x7fffffff, 0x200, 0x5, 0x8, 0x3, 0xffff, 0x3ff, 0xfffffefb, 0x8bbd, 0x3, 0x1, 0xfa74, 0xcd6dcf2, 0x9, 0xeb789e2, 0xf, 0x1000, 0x667, 0x8e, 0x1c0, 0xfffffd7d, 0x6, 0xd, 0xe000, 0x6, 0x100, 0xada4, 0x3, 0x0, 0x2, 0x2, 0x40, 0x9cb, 0xfffffffe, 0x5, 0x0, 0xe, 0x55, 0x6, 0x6, 0x8, 0x2, 0x3, 0x2, 0x6, 0x8001, 0xe0bd, 0x6, 0x6, 0x8, 0x3, 0x1, 0xac9, 0x90, 0x9, 0x1, 0x8, 0x100, 0x9, 0xf, 0x4, 0x2, 0x8001, 0x3, 0x8, 0x1ff, 0x10000, 0x0, 0x1, 0x1f39, 0x4, 0x394, 0x3, 0x6, 0x5, 0x6, 0x2, 0x5, 0xf, 0xe, 0x4, 0x2, 0x7ff, 0x0, 0x9, 0x4, 0x5, 0x8000, 0x34, 0x5, 0x3, 0x9, 0x8, 0x922c, 0x4, 0x5, 0x7, 0x6, 0xffff8ba9, 0x8, 0x400, 0x85, 0x3, 0x6, 0x10e, 0x6, 0xfffffff7, 0x0, 0x2c8, 0x200, 0xa6, 0x4, 0x6, 0x8, 0xf, 0x400, 0x10, 0x7, 0x4, 0x582eba95, 0x0, 0x7, 0xffffffff, 0x4, 0x3fa, 0x38c, 0x9, 0x0, 0x7, 0x9, 0x100, 0x3, 0x8, 0x8, 0x1, 0x8, 0x0, 0x2, 0x3, 0xa9a, 0x88247e6e, 0x2, 0xaee3, 0x80000000, 0x4, 0x7, 0xfffffffe, 0x99, 0x2, 0x1, 0x5, 0xd, 0x8b94, 0x9, 0x9, 0xfffffb85, 0x7, 0x3, 0x100, 0x2, 0x1, 0x4, 0xfeaf, 0x0, 0x3, 0x4, 0x0, 0x7, 0x10000, 0xfffffff9, 0x2, 0x8001, 0x789a105c, 0x1, 0x3, 0x10000, 0x5, 0x1ff, 0x8, 0xffffffff, 0x0, 0x80000000, 0xffffffcf, 0xfffffffd, 0x8, 0x5, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0xd, 0x9, 0xb1, 0x7fff, 0xe, 0x6, 0x6, 0x200, 0x4, 0x65f00000, 0xfffffff7, 0x1, 0x840c, 0x10001, 0x1c, 0x40000000, 0xba, 0x3, 0xc0000000, 0x8, 0x101, 0x3, 0x5, 0x266, 0x6, 0x7ff, 0x5, 0x10000, 0x3042, 0x1ff, 0x9, 0xff, 0x0, 0x2, 0x0, 0xfff, 0x3, 0x5, 0x6, 0x5, 0x2, 0x38c4, 0x3, 0x3, 0x6, 0x2248], 0x2, [{[0x80000001, 0x1000], @multicast2}, {[0x0, 0x4], @remote}]}, {[0x4, 0x3, 0x8, 0x4, 0xffffffff, 0x8, 0x3, 0x6, 0xffff0000, 0x2, 0x8, 0x1a782ba9, 0x5, 0x5, 0x5, 0x401, 0x7, 0x401, 0x7ad4, 0x4, 0xd, 0x3, 0x0, 0x1, 0x2, 0x8001, 0x10000, 0x6, 0x81, 0x8, 0x2, 0x37, 0xff, 0x800, 0x5, 0x2c, 0x1c1, 0x5, 0x1, 0x0, 0x4, 0x3, 0x153ea5bf, 0x9, 0xfffffffe, 0x52, 0x4, 0x1, 0x7, 0x4, 0x4b3, 0x10001, 0x7, 0x0, 0xfffffff8, 0x7, 0x40, 0x798f, 0x7, 0x80000000, 0x40, 0x2000000, 0xc, 0x4f44, 0x4, 0x100, 0x3, 0xfff, 0x2, 0xfff, 0x10000, 0x40, 0xf, 0x8000, 0x8, 0x4d, 0x80, 0x1000, 0x9, 0x1, 0x7f, 0x2, 0x6, 0xc42, 0x7, 0x7, 0x1, 0x3, 0xc2a, 0x2, 0xc3a, 0x3, 0x9, 0x6, 0x7fff, 0x1, 0xf, 0x0, 0x10001, 0x4, 0x1, 0xfffffff2, 0x2, 0x3ff, 0x4, 0x7, 0x6e284a70, 0x0, 0x3, 0x7f, 0x0, 0x101, 0x1, 0x1ff, 0x5, 0x5, 0x3, 0x4, 0xd85, 0x1, 0x0, 0xb99, 0x0, 0xe, 0x3ff, 0x4, 0x0, 0x0, 0x4, 0x8, 0x9, 0x7, 0x1000, 0x1, 0x2, 0xfff, 0x4, 0xfffffffd, 0x3, 0xf3ca, 0x6, 0x9, 0x6c4, 0x3, 0x7, 0x80000001, 0x100, 0x443, 0x58d5, 0x9, 0x58, 0x3, 0xb2ec, 0x8, 0x1, 0x6, 0xfffffffa, 0xc, 0xc9, 0x4, 0x100, 0x6, 0x10000, 0xff, 0x4, 0x3, 0x5, 0x49ac, 0x0, 0x8, 0x2, 0x5, 0x8, 0x2, 0x4, 0xe, 0x10, 0x7, 0x8, 0x8001, 0x8001, 0x0, 0x1, 0xf, 0x2, 0x1, 0x0, 0x4a4, 0x2, 0xb0e5, 0x4, 0x488, 0x0, 0x5, 0xaa48, 0x10001, 0x3, 0x1, 0x8, 0x101, 0x2, 0x0, 0xd0, 0x4, 0x3, 0xfff, 0xda, 0x1, 0x7, 0x5, 0x7, 0x1797, 0x7, 0x0, 0x8f, 0xff, 0x7, 0x5, 0x1, 0x7ff, 0x4, 0x8, 0x535, 0x0, 0x0, 0xf, 0x5, 0x3ff, 0x1, 0x3, 0x79d, 0x1, 0x1000, 0x7, 0x6, 0x401, 0xacdf, 0x1, 0x5a, 0x8, 0x100, 0x9, 0x1, 0x6, 0x765c, 0x5, 0x7fffffff, 0x9, 0x7, 0x800000, 0x1, 0x2, 0x2, 0x3ff, 0x4, 0x3ff, 0xa9f3], 0x2, [{[0x4], @private=0xa010101}, {[0x5, 0x80000000], @private=0xa010100}]}}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x6, 0x3, 0x2, 0x0, 0x0, "0a30a19363ba8b6229d9afb4b00887989f6924d033717c8109b1be8c9f13659a183b3d2b9312c4b184336de7c6ddc3a8cf3cb58cdd1097bf2dcb60f52472a0f7"}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0xc54) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) close(0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8017000100", @ANYRES32, @ANYBLOB="080003000300000008003b00"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 3.678093265s ago: executing program 4 (id=15737): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) socket(0xa, 0x3, 0x3a) (async) r3 = socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x5, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040040) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000001700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x2c, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x22000000) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000001740)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000017c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xfffffffffffffff7, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x5f, 0x30]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x10000, @value=r7}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000017c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xfffffffffffffff7, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x5f, 0x30]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x10000, @value=r7}, 0x28) getsockname$packet(r0, &(0x7f0000001800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001840)=0x14) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100210126bd7000000000000a000000000000000000000008000a00040000"], 0x24}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100210126bd7000000000000a000000000000000000000008000a00040000"], 0x24}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1_to_batadv\x00', &(0x7f0000000080)=@ethtool_channels={0x3d, 0x0, 0x5, 0xfffffffc, 0xfffffffe, 0x2}}) recvmsg(r0, &(0x7f0000001640)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000001580)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/155, 0x9b}, {&(0x7f0000001240)=""/185, 0xb9}, {&(0x7f0000001300)=""/47, 0x2f}, {&(0x7f0000001340)=""/44, 0x2c}, {&(0x7f0000001380)=""/193, 0xc1}, {&(0x7f0000001480)=""/108, 0x6c}, {&(0x7f0000001500)=""/85, 0x55}], 0x8, &(0x7f0000001600)=""/20, 0x14}, 0x10003) 3.430198019s ago: executing program 4 (id=15739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x10, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x7}, {{0x0, 0x0, 0x1, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 3.137004909s ago: executing program 4 (id=15743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xff6c, 0x0, &(0x7f0000000280)="4d6e2c45a2035a5c298ee68876d60934e3b7aaf7c62c98312586dd87", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) vmsplice(r3, &(0x7f0000000440)=[{&(0x7f0000000240)="f9", 0x1}], 0x1, 0xf) splice(r2, 0x0, r3, 0x0, 0xc, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000700)={r0, &(0x7f0000000180)='*&+-{::^\\{\x00', 0x0, &(0x7f0000000200)={@_ha_fsid={[0x8, 0x3ff]}, {0x9, 0x3, 0x3, 0x7}}, 0xfeb2, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000006c0)=0x30}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x1a, &(0x7f0000000580)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @exit, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x80001}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], &(0x7f0000000680)='GPL\x00', 0x657, 0xa0, &(0x7f0000000800)=""/160, 0x100, 0x2, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000008c0)={0x80009, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x3, 0x8, 0xd12, 0xffffd396}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000940)=[0x1, 0x1], &(0x7f00000002c0)=[{0x5, 0x5, 0xb, 0x8}, {0x2, 0x2, 0x9, 0x6}, {0x5, 0x1, 0x0, 0x5}, {0x5, 0x1, 0x1, 0x2}, {0x1, 0x2, 0xa, 0x8}, {0x3, 0x1, 0x3}, {0x1, 0x2, 0x10, 0xc}], 0x10, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), 0x0}, 0x20) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="24005a8020000180140003000000040000000000000000000100000004000200040001"], 0x40}}, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r11, 0xffffffffffffffff}, 0x4) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff0000", @ANYRES32=r12, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r13, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000b40)={r5, r6}, 0xc) 2.164329942s ago: executing program 6 (id=15763): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpu.max\x00', 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r2, 0x4030582b, &(0x7f0000000080)={0x1, 0x2, 0x5, 0x5, 0x6, 0x695}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f00000000c0)=0x3) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000100)={{r2}, r1, 0x14, @unused=[0xc, 0x6, 0x3, 0xffffffff], @subvolid=0x7f}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001100)={0x50000011}) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001180), 0xffffffffffffffff) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000011c0)='ns/pid\x00') sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x60, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x800) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000001300)=0x1, 0x4) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001340)=0xa38) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000001380)={0x79, 0x5, 0xffff0001, 0x8}) close(r0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f00000014c0)={r4, &(0x7f00000013c0)='$\'{$@[*(\x00', 0x4000, &(0x7f0000001400)={@_ha_fsid={[0x5, 0x4]}, {0x800, 0x3, 0x8, 0x1}}, 0x4, &(0x7f0000001440), &(0x7f0000001480)}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001540), r7) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f00000017c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001780)={&(0x7f0000001580)={0x1c8, r8, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcc49}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfe1}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff3e}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b26}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x8000}, 0x40000000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001840)=@generic={&(0x7f0000001800)='./file0\x00', r7}, 0x18) sendmsg$802154_raw(r7, &(0x7f0000001a00)={&(0x7f0000001880)={0x24, @short={0x2, 0xfff8, 0xaaa1}}, 0x14, &(0x7f00000019c0)={&(0x7f00000018c0)="c0adf163dfb252e0b42b752ed44e55886131f3ea00159150bf011cc77632d42ddf51a3c6bcb421da78fd08d0935f1e8b37e3070516d57cf086d936b51fb601c6dbef94649382b82d9c036550316975b2fe4dec2ab6fd7d65f02b846f554b7ab60155335198746787e60d15b51df9dd954de486565a8da6b8773aa20266e9d50a538db7d3730283f42be47d9e2d922e7bff23df9aa51d5bfef4d2d35a60293eacc97a7a7c6863f703b2ec64c0a50ac3f2a9588a1aaa36f25a89e8c10838e55cb7a90fedd9801170ef09b70291aa6e9d2c93", 0xd1}, 0x1, 0x0, 0x0, 0x40010}, 0x810) r9 = accept4(r2, &(0x7f0000001a40)=@tipc=@name, &(0x7f0000001ac0)=0x80, 0x80800) r10 = syz_genetlink_get_family_id$team(&(0x7f0000001b40), r7) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001b80)={'team0\x00', 0x0}) getsockname$packet(r7, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001c00)=0x14) getsockname$packet(r7, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001c80)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000001d40)={'syztnl2\x00', &(0x7f0000001cc0)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x6, 0x7, {{0xd, 0x4, 0x3, 0x3, 0x34, 0x68, 0x8, 0xf1, 0x2f, 0x0, @local, @multicast2, {[@lsrr={0x83, 0x7, 0xf8, [@private=0xa010101]}, @timestamp={0x44, 0x18, 0xdd, 0x0, 0x1, [0x6, 0x6, 0x8, 0xf, 0x3]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001e00)={r7, 0x58, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000001ec0)={'sit0\x00', &(0x7f0000001e40)={'gretap0\x00', 0x0, 0x0, 0x10, 0x3, 0x7, {{0x17, 0x4, 0x0, 0x9, 0x5c, 0x64, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@rr={0x7, 0x23, 0x5d, [@loopback, @multicast1, @loopback, @broadcast, @multicast2, @multicast2, @multicast1, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x24, 0x4b, 0x3, 0x6, [{@broadcast, 0xac}, {@private=0xa010101, 0x3}, {@multicast1, 0x3ff}, {@multicast2, 0x8}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000021c0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002180)={&(0x7f0000001f00)={0x264, r10, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x23c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5196ed97}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x39c}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x232}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r16}, {0x4}}]}, 0x264}, 0x1, 0x0, 0x0, 0x10}, 0x840) 2.103780336s ago: executing program 5 (id=15764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.021241021s ago: executing program 5 (id=15766): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) 1.949786969s ago: executing program 6 (id=15767): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r0) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x0, 0x1, 0x2009, 0xb}, 0x20) 1.614455802s ago: executing program 5 (id=15768): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd23, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xfe, r4}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0xffffffff, 0x100, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) 1.566811058s ago: executing program 6 (id=15769): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) writev(r0, &(0x7f0000001280)=[{&(0x7f0000000240)="1d75d17c44b29f65", 0x8}, {&(0x7f00000000c0)="20e066e19774295c57c4e1dd744eb6c67af3bb505a71816d2631ecb323aa5510d2ab82d10b2c6cfbd2663d9a68a93d396bc2051a18ed57949f3d45b52d913cda88d6eb767cde78e3077ea8e25711fbf7b43946723ec496f0409c11cf8a30a2e91bfbbb873e2172bb90fe0f29c44d5b4b30fe31e603a1589868778fffe7fa84224c81aab5224dabfd910dbea76f0de0f36c970611", 0x94}, {&(0x7f0000000280)="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", 0x35c}], 0x3) 1.566162895s ago: executing program 5 (id=15771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x776}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63ec33c9e9b986c0f4f24abba1a4", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x6f) 1.478295591s ago: executing program 6 (id=15772): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d8130fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}, @IFLA_CARRIER={0x5, 0x21, 0x24}]}, 0x44}}, 0x4040) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x6d23, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x2, 0x9, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x20, 0x8089, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x42, 0x9, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xd}, 0x80, 0x7, 0x3d6e, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xee8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}}, 0x4004801) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x20, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x2c, r12, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc33}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008880}, 0x44080) 1.470416874s ago: executing program 5 (id=15773): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x6}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000003ac0)=""/222, 0xde}], 0x3}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/148, 0x94}, {&(0x7f0000000980)=""/225, 0xe1}, {&(0x7f0000000a80)=""/16, 0x10}, {&(0x7f0000004880)=""/141, 0x8d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c80)=""/166, 0xa6}, {&(0x7f0000000d40)=""/81, 0x51}], 0x2}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000002f40)=""/115, 0x73}, {&(0x7f0000002fc0)=""/241, 0xf1}, {&(0x7f00000030c0)=""/94, 0x5e}, {&(0x7f0000003140)=""/207, 0xcf}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/181, 0xb5}], 0x7}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000003600)=""/72, 0x48}, {&(0x7f0000003680)=""/235, 0xeb}, {&(0x7f0000003780)=""/28, 0x1c}, {&(0x7f00000037c0)=""/222, 0xde}], 0x4}}], 0x5, 0x41, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff00e}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) accept4(r1, &(0x7f0000000540)=@caif=@rfm, 0x0, 0x81000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r5, 0x0, 0x0, 0x4}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0x84}}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd30, 0xfffffffe, {0x1c, 0x14, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1, 0x2000}}, 0x1c}}, 0x4800) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000500)="05804ab38284c7d5a5b66406d704", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.374081654s ago: executing program 0 (id=15775): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 1.323150024s ago: executing program 6 (id=15776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.321181151s ago: executing program 5 (id=15777): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r5, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x16}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4008804) write$nci(r0, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x419) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.302896854s ago: executing program 6 (id=15778): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x89013, r3, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000380)=0xffffffff, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x20044000) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r7, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000501e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000240)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r10}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r11, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x11e0, 0xc8, 0x8, 0x4000000, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420) 1.079290515s ago: executing program 3 (id=15782): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @empty}}) close(0x3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 1.039216843s ago: executing program 3 (id=15783): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) writev(r0, &(0x7f0000001280)=[{&(0x7f0000000240)="1d75d17c44b29f65", 0x8}, {&(0x7f00000000c0)="20e066e19774295c57c4e1dd744eb6c67af3bb505a71816d2631ecb323aa5510d2ab82d10b2c6cfbd2663d9a68a93d396bc2051a18ed57949f3d45b52d913cda88d6eb767cde78e3077ea8e25711fbf7b43946723ec496f0409c11cf8a30a2e91bfbbb873e2172bb90fe0f29c44d5b4b30fe31e603a1589868778fffe7fa84224c81aab5224dabfd910dbea76f0de0f36c970611", 0x94}, {&(0x7f0000000280)="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", 0x35c}], 0x3) 966.706336ms ago: executing program 3 (id=15784): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x8}, {0xfffffffd, 0x80003}]}}) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001300050027bd7000fedbdf25000000007edaa0e097d57d5b48c6faecc3ca396de42182fa4745037ccecce820aa0a3f984db0e1c7472b39657647eecf7c18d3560b1449ca775adfd9558b36ca3297092673", @ANYRES32=0x0, @ANYBLOB="0000000001060400140003007665746830000000000000", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x48000) 503.679852ms ago: executing program 0 (id=15785): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x108}}], 0x1, 0xc040) 471.844853ms ago: executing program 0 (id=15786): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000030000000000000001010000", @ANYRES16=r0], 0x48}}, 0x0) 394.627046ms ago: executing program 0 (id=15787): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x339, 0x0, 0x0, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x64010102, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2, 0x8000000000000000}, {0x0, 0x0, 0xc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xc}, 0x3, 0x8}, [@tfcpad={0x8}]}, 0x100}}, 0x200000d4) socket$nl_xfrm(0x10, 0x3, 0x6) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x339, 0x0, 0x0, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x64010102, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2, 0x8000000000000000}, {0x0, 0x0, 0xc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xc}, 0x3, 0x8}, [@tfcpad={0x8}]}, 0x100}}, 0x200000d4) (async) 394.226574ms ago: executing program 0 (id=15788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 377.982625ms ago: executing program 0 (id=15789): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000000a80000", @ANYRES32=0x0, @ANYBLOB="4060000002400000140012800800010067726500080002800400120008001f00ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24044848) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x400000, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x4, 0x33}, 0xa, @in6=@private1, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x200000}, 0x1c) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) unshare(0x8040480) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x8, &(0x7f0000000200), 0x4) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0xfff, 0x4}, &(0x7f0000000640)=0x90) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f00000026c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002680)={&(0x7f00000016c0)={0xefc, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x800, 0x47}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "854f83"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "77b902f9e7c3"}, @NL80211_ATTR_FILS_ERP_RRK={0x59, 0xfc, "668d778f722c999958450739a2f4f17cda0373e2a840582861884c4f7531e12c07160ed8937a21e9acb3328ef648316c5a9d1db9d1020e19d2e897c87cc889616ba4a4f0015e70816c7b92d67aa2a338c3ba311904"}, @NL80211_ATTR_FILS_ERP_REALM={0xc1, 0xfa, "72ec55edb8e501f7d9e43d01830554deb7aa388ca4fad3ddc790de4ac5b8f494149a9038f07ac5e4801e837db06f5592303d22b21da069402d2e7008410aa0e534e2565af10d4367fe43e48c8510140e40ebb400cee35ed12d881a3e50c3f27667ddcbb4e47bab3a5b41b6f892b2484a1b5f230c9c85f8607432cb390196fbc51b02f7828cfc060469fa80325073979dc293fe6f18790cb09ae6f0b34d19b83e1ec2cf9487c5011551ed8b3634c32457f9eac85627346b0a21ee875c3a"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xcd, 0xfa, "a31ac43fc0e212a665c36fa134036488452e911d254e0a3739f2c6ea73dd560dd32788201921dda7c305fccb89eef505285dca27cf7e57ef04521a563e156260098dfcb0f36985a99253033e835cf033d91bc077f55aecc3ba11305b69c8c8940d8643c36ddcf4f0a2789055423f92c390fb66f95f1617b2e756b37984db21ffa168cb12a5059032f5dda7b57ff646e034b6086dcf8b0d487eb862e559a3dabb49f41ed450f62aab3bbe7e326b92228cc03c860b79da572f2a34b4c45969106c63709d4c4a438061b4"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x101}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "579e2689e938846bd04e"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x4a, 0xfc, "218af3113d37000a0ce55c40295e51b3875c06ae85bb019ee52f3d8dd49ad2caba485bc03bcf6432098630e5303ddebf414a13432b0371235400d91b1ac46b778a2fbea9445c"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "b0340c8bbc4b2f913c637d6fa5f0"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_REALM={0xf8, 0xfa, "54f117449977ec9f26a49a3522322a4015c57cf6c6d93a410c1dcba0fd6835eb6758cf98832d792c2d1c2713e4b9d381d027dd31ed3eb34f930b6caf2ce12b90ecabd00f139d5c6f0d1de548d58f26bcafb29bbbe3a0cfd218c3a3829c52a4bda48ff78bc784bc65f1e60b87b1d5a49eccbd53858b019a865aaac0958a9e3478a327062891d5e22f00e389d3a0e37198dfb964daad2bfbd2ae1a575752cd7d925a89d140157be86280aeffadc22f607e3eb09542c05a17ce8953893a82c10507e0b070de48316f8d4e47cad9b5db15cdef77e4334af51dde0419a8caf0048774418b104fdee9c27074f715d078c79dc0dcc4b0a3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "f8355728bc308803f1f7"}], @NL80211_ATTR_IE={0x204, 0x2a, [@supported_rates={0x1, 0x8, [{0x6, 0x1}, {0x36}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xc}, {0x16, 0x1}, {0x9, 0x1}]}, @ht={0x2d, 0x1a, {0x300, 0x0, 0x1, 0x0, {0x2, 0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1}, 0x1}}, @mic={0x8c, 0x10, {0x493, "6ba92e3d403c", @short="890b35e1006a4a2f"}}, @ibss={0x6, 0x2, 0x1}, @tim={0x5, 0xe7, {0x2e, 0x4b, 0x4, "81823131b137479e1652044f781f32b4f379601db8b5c56b8177efca0e271d594defef43ee250b4d6385354cd183d3821c1dee0ff5ae75867f64473afad33c58fabd5d9dc4c265eadb98b8a451022f6135ffd3392d3dcd87eb5630fe192c9eba247551688e305605c4743f6f6367486fb023fd60f3a960041b9ad4bbeb9ae15c74bfcb94b9a2e3bc623779f2e8703cf6949c8b310bb6c4f45b730a08ab7f9ce9b0a5826c65999c3d42e0f853cf488320f6ec5329d7ec4a655211e0edc5fb9a71dd21033bc42db83c5b72001d83f5d1934d183d48ec02ba44e56eed93d44351b2f78491c7"}}, @mesh_chsw={0x76, 0x6, {0x0, 0x8, 0x1, 0x6}}, @cf={0x4, 0x6, {0x5, 0x1, 0x4, 0x5}}, @dsss={0x3, 0x1, 0x74}, @perr={0x84, 0xaf, {0x0, 0xb, [{{}, @device_b, 0x8, @void, 0x27}, {{}, @broadcast, 0x4, @void, 0x33}, {{}, @device_b, 0x9, @void, 0x3a}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x4}, {{0x0, 0x1}, @broadcast, 0x8, @value=@device_b, 0x2d}, {{0x0, 0x1}, @device_a, 0x52, @value=@device_b, 0x27}, {{}, @broadcast, 0x40, @void, 0x19}, {{}, @device_a, 0x10001, @void, 0x16}, {{0x0, 0x1}, @broadcast, 0x9c0, @value=@device_b, 0x38}, {{}, @device_b, 0x3, @void, 0x14}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x1e}]}}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0xa, 0x7, @device_b, 0x3, 0x1, 0x2}}]}, @NL80211_ATTR_IE={0x14d, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x1b, 0xad}}, @perr={0x84, 0x12e, {0x4, 0x12, [{{}, @device_b, 0x8001, @void, 0x3a}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x31}, {{0x0, 0x1}, @broadcast, 0x2, @value, 0x1f}, {{}, @device_b, 0x122, @void, 0x26}, {{0x0, 0x1}, @broadcast, 0x2, @value=@device_b, 0x25}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x32}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x4}, {{}, @broadcast, 0x4, @void, 0x9}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x29}, {{0x0, 0x1}, @broadcast, 0x2, @value, 0x1c}, {{}, @device_a, 0xdd, @void, 0x38}, {{0x0, 0x1}, @device_a, 0x56, @value, 0xe}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x1b}, {{}, @broadcast, 0x5, @void, 0x17}, {{}, @device_a, 0x2, @void, 0x1d}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x19}, {{0x0, 0x1}, @device_a, 0xc, @value=@broadcast, 0x1b}, {{}, @broadcast, 0x7fffffff, @void, 0x35}]}}, @cf={0x4, 0x6, {0x1, 0x9, 0xfffc, 0xc0}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x2, 0x29}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_IE={0x172, 0x2a, [@mesh_chsw={0x76, 0x6, {0x2, 0x19, 0x3a, 0x8000}}, @tim={0x5, 0x19, {0x40, 0x80, 0x1, "3726fa8c83b133eafc44b1282757a1e5d24b19c43215"}}, @measure_req={0x26, 0x6a, {0x2, 0xb, 0xff, "0b9223078b4118c4971282365b7e0d5b9e0a461cc562b40625c5366a3cf9560acc1dee4e0ae3fd8898ee76a232601c97feb5de82b5f2650f4f018b204444cafae795407aa098c2f9d25ebc9a0be33b364c96eb6e155c03e5acda8253c07082201dfd33fea5e2d0"}}, @peer_mgmt={0x75, 0x8, {0x1, 0x1, @val=0x2, @val=0x2c, @void}}, @random={0x9, 0xd3, "c5fd7b3a5ead99afed0ef9dcfe37fd745eed1afda502697d9477d1cfa29c9be4f96b4912ab6f65366c069a955ec625e5a318615ef3f8496f64ed063f22fd83f4bf04018a6ef1945e3aa7e41b4d2387f9b55ed1c337d2c15776181a7bee24ef4368d3f28d03d066fafa438a199518fc9f9249c6b613470cc9642aec090075f53fa0ce34522ab2db1e012d5e45b8fd283af38d2d2362c2dedade52f39328e5d0acf3fd17a23edeb9066dfef34ddea0d7fbc34282cb42cc3e7617d946af45c0f4f3d02123070c65bb5bfb0e55eecf024b80eed367"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "0b26f49aa0782457c6949828"}, @NL80211_ATTR_FILS_ERP_RRK={0xb8, 0xfc, "0fd1588834272d488247c24fce70f2503a43e2ee7fcf7fdc2e07a4dccd8efb54acfb980b5dd0408a89c08332d382f6e97e7c14b9565673bdd55f38960fb0dca0d6d26ed854e47a3099087ea923528d009700aec7dae0080ed01afc1e597bfa8de56a9d935c782e3452f03c540de2e1d6ae815d17ba43cf861d182e57ea819f1fc7fdee752e2fcb230161114b602fcebe14515b4ec1af2af6ceaa62537da8767faf54fb2ce9320c12a13bdd70261402986cfc3c3e"}, @NL80211_ATTR_FILS_ERP_REALM={0x9, 0xfa, "d46bd5a4c6"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x800}], @NL80211_ATTR_IE={0x1b4, 0x2a, [@perr={0x84, 0x10f, {0x67, 0x11, [{{}, @device_b, 0xff7, @void, 0x23}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0xe}, {{}, @device_a, 0xfff, @void, 0xf}, {{}, @device_b, 0x7, @void, 0x28}, {{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0x32}, {{}, @broadcast, 0x8, @void, 0x40}, {{}, @broadcast, 0x1ff, @void, 0x35}, {{}, @device_a, 0x8, @void, 0x4}, {{0x0, 0x1}, @device_a, 0x401, @value=@broadcast, 0x16}, {{0x0, 0x1}, @device_b, 0x7ff, @value=@broadcast, 0x23}, {{0x0, 0x1}, @device_a, 0x9, @value=@broadcast, 0x14}, {{}, @broadcast, 0x2, @void, 0x1d}, {{}, @device_b, 0x4, @void, 0x6}, {{0x0, 0x1}, @broadcast, 0x5, @value=@device_b, 0x19}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x33}, {{0x0, 0x1}, @device_a, 0x100, @value=@broadcast, 0x32}, {{}, @device_a, 0xfffffffb, @void, 0xf}]}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @erp={0x2a, 0x1}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x3, @broadcast, 0x40, @value=@device_b, 0x3, 0x852, @device_a, 0x5}}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x6b, 0x7, @device_a, 0x2, 0x6, 0x93}}, @mic={0x8c, 0x18, {0x104, "886772d1b728", @long="c6c5ce881d1a993c489eb0032df40e72"}}, @tim={0x5, 0x3f, {0xf, 0xec, 0x2, "8d6251f2e48c2e8b641002b674e58c7691ac31f1a36d4ae70bee391550d156c66a0bc8087087e390b244c01680754b420b2ff6a8da1a853493da7aca"}}]}, @NL80211_ATTR_IE={0x3e7, 0x2a, [@random_vendor={0xdd, 0xdb, "ad8c6bce5dc41bca00c583b02bdf9b0f5b225626c96bcc03b017c26a8c8d579f02e330d44da0521bdde58033dc82d207310a9a84a1bc8b028ce899430c0f1dc65cc6d6c8d4e229db4d243a67b765b0e155f8dbdf38daba4bd5b41201d897e8c89f653581a7d43b026254ec8fdcfd8a6af7f961a50d06075f8133c6f532e39ce187239627fa8902fc24ddfa0846da23744de8a98f2bb1f86e4f3b404da5ed8b5114a032d748f59f392230d995db46a8f3030d665406ef937058b303272c7fca616b9cb9b80b421d0ba75592e9943485570fde7336cc29d1719aad70"}, @challenge={0x10, 0x1, 0x61}, @mic={0x8c, 0x18, {0x3c9, "f90bee948ec2", @long="48f01fa6a5b073dcd767d00f29ecfc97"}}, @random={0x8, 0xf8, "c5a8ffda27597b74eea1355f94ec6b0f47e6b47881d66d9cad02f433887b741b68b7397abc9e4a7a5c87042b7b87cd98287388c58e0614a696e438989683462a81d5286ffa6bd6dcbcc272a8dcb2be3bcb7f85071465fb4c133a6b3483d2d3b8175f54b9b0526efdd190103d30dbeab56bbcfd7c29c246695f9db6a807b2bb40c0ec94d7c7a63cf7c845f94ce63c2fc9178521871a7100d03e210c2e8d059eaef665b40f8f5ae33f420e0037d3e54f99fd66e8f73c3394bb6c15abbf65ef956f88130f95d2a1023bb0e0fc05366995b510e62b51ed9113e0b84935d72960998af255a6f5bb4034d793b0a397c198bcf1c283d159ead7994a"}, @random_vendor={0xdd, 0x55, "c8feda45265e047c6b4035dc413483d8e88e00719e510d10ddddce61006532e2908590d9592ff2a2b296273ef2746cfffb90ecfbfff96a7e3ad21ebfc59e9333212462e71d5d066340581997b7fae7eaea66a2f4b6"}, @perr={0x84, 0xbc, {0x7b, 0xc, [{{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x27}, {{}, @device_a, 0x5, @void, 0x3c}, {{}, @broadcast, 0x6, @void, 0x5}, {{}, @device_b, 0x6f, @void, 0x36}, {{}, @device_b, 0x3, @void, 0x42}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x14}, {{0x0, 0x1}, @device_a, 0x3, @value, 0xa}, {{}, @broadcast, 0x400, @void, 0x2e}, {{0x0, 0x1}, @broadcast, 0x6, @value, 0x2e}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x14}, {{}, @device_a, 0x8a0, @void, 0x3a}, {{}, @broadcast, 0x8, @void, 0x6}]}}, @measure_req={0x26, 0xd8, {0x7, 0xd, 0x3, "8c2d908306cfd7689db6c7cbe0af8a2478d7a0078af4860900129a2625e07d16af58092c7336f6db8ed5c1f03fa47dcad3e77d3e758d9b0c8f48cbcfa44d5b5bb88a927646fe4ffaed3006b0d591cd3e4d8fab8a6370d2e90447f979be5e22d010ef85a6b7992ee59d68e697ae53c72ed5a46cceb81f13ba0390da35b844aef2b3a5db12915e42910927f602b05bcb666d12f7cf7f0f23f567bf4290c804b53f84282624e06363a813df34bb49ce99bd6508a419642d038826e720140add38b307aabde5fc9303e759f075e9b0c2c4fcbc2ed95382"}}]}]}, 0xefc}, 0x1, 0x0, 0x0, 0x8040}, 0x4000004) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000240), &(0x7f00000002c0)=0x4) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}, 0x22) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000300)={r0, 0x400, 0x0, 0x7}) setsockopt$sock_int(r3, 0x1, 0xb, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r7) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xa1, &(0x7f0000000000)={@random="59b39dd1953e", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x7f, 0x0, @gue={{0x1, 0x0, 0x0, 0xb1, 0x100, @void}, "501f3685b027e340ed7cb6d2539f2e0dbc8106c7f2e56dd18678e028a4736104c1de704622a2fd932c3696bfd3aa187d3807842efe7427f178ea808960034d156b215e5c1422965f5b026ed3c951c2e30c48ddf805b1aa25ce3279138c1157c4467fbf97db339dc093cf8c5c747ac583757a6f"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) 149.571391ms ago: executing program 3 (id=15790): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) (fail_nth: 20) 113.825394ms ago: executing program 3 (id=15791): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000110b11032abd7000fbdbdf250a01010100000004d30a006c002b39a727f47873eab6168f40d73770fb79b7fbb7410d6fe049377d2775c989435c00"/73], 0x28}, 0x1, 0x0, 0x0, 0x4044004}, 0x4000004) 43.321775ms ago: executing program 3 (id=15792): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="330e2bbd7000fbdbdf2515000000110014004e4c424c5f434950534f76340000000008000100bc"], 0x30}}, 0x8010) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000100)=0xc, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x100, @void}}}}}}}, 0x0) 35.444661ms ago: executing program 4 (id=15793): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @empty}}) close(0x3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 4 (id=15794): pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r3) r6 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf2514000000080001000200000008001c00", @ANYRES32=r6, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB="0c00060001000000010000001bc400d5b8c5abbb93cff25069788254c84481387731e31668e2a53e8ebcef15a36ba149aa3305cd8b2e68c91d"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) r7 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={r6, 0xee00, r7}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000002400)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x3, 0x1, 0x9, 0x7, 0x4, 0x9, 0x400009, 0xf9, 0xfffffffe, 0x7fffffff, 0x7, 0x10001, 0x2, 0x7ffffffd, 0x8, 0x80000001, 0x8, 0x800, 0x5}}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x3, 0xfff3}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x1, 0x7, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r10, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000126bd7000ffdbdf255700000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000009000000060095004309000006009500010000000600950000000000060009000020060095000200000006009500000804d2211d1077009fb96493fc238c553d0000"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0xe8d38f7b6701e69f) r14 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r14) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000002280)={'ipvlan1\x00', @random="8a288fa3fc2e"}) r15 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r15, 0x107, 0xf, &(0x7f0000000600), 0x56) kernel console output (not intermixed with test programs): 1782.354052][T26548] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 1782.354064][T26548] RBP: 00007f7539cba090 R08: 0000000000000000 R09: 0000000000000000 [ 1782.354075][T26548] R10: 0000000020008050 R11: 0000000000000246 R12: 0000000000000002 [ 1782.354087][T26548] R13: 00007f7539016038 R14: 00007f7539015fa0 R15: 00007ffd1014d348 [ 1782.354120][T26548] [ 1782.725825][T26129] veth0_vlan: entered promiscuous mode [ 1782.737229][T26129] veth1_vlan: entered promiscuous mode [ 1782.771384][T26129] veth0_macvtap: entered promiscuous mode [ 1782.782449][T26550] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.15027'. [ 1782.817654][T26129] veth1_macvtap: entered promiscuous mode [ 1782.837883][T26129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1782.857577][T26129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1782.877070][T14069] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.890724][T14069] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.905375][T14069] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.915800][T14069] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.055605][T26554] syzkaller0: entered promiscuous mode [ 1783.061831][T26554] syzkaller0: entered allmulticast mode [ 1783.104394][T14068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1783.112398][T14068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1783.165340][T14068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1783.173409][T14068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1783.492240][T26576] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15035'. [ 1783.506412][T26577] netlink: 'syz.6.15037': attribute type 1 has an invalid length. [ 1783.524361][T26577] netlink: 'syz.6.15037': attribute type 2 has an invalid length. [ 1783.785319][T26586] netlink: 'syz.5.15039': attribute type 1 has an invalid length. [ 1783.856606][T26588] syzkaller0: entered promiscuous mode [ 1783.862236][T26588] syzkaller0: entered allmulticast mode [ 1784.054715][T26592] FAULT_INJECTION: forcing a failure. [ 1784.054715][T26592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1784.085368][T26592] CPU: 1 UID: 0 PID: 26592 Comm: syz.3.15042 Not tainted syzkaller #0 PREEMPT(full) [ 1784.085394][T26592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1784.085405][T26592] Call Trace: [ 1784.085413][T26592] [ 1784.085422][T26592] dump_stack_lvl+0xe8/0x150 [ 1784.085449][T26592] should_fail_ex+0x412/0x560 [ 1784.085476][T26592] _copy_from_user+0x2d/0xb0 [ 1784.085503][T26592] ___sys_recvmsg+0x175/0x590 [ 1784.085533][T26592] ? __pfx____sys_recvmsg+0x10/0x10 [ 1784.085561][T26592] ? __fget_files+0x2a/0x420 [ 1784.085611][T26592] do_recvmmsg+0x334/0x800 [ 1784.085642][T26592] ? __pfx_do_recvmmsg+0x10/0x10 [ 1784.085676][T26592] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1784.085716][T26592] __x64_sys_recvmmsg+0x198/0x250 [ 1784.085743][T26592] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1784.085774][T26592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.085794][T26592] do_syscall_64+0x15f/0xf80 [ 1784.085813][T26592] ? trace_irq_disable+0x3b/0x140 [ 1784.085840][T26592] ? clear_bhb_loop+0x40/0x90 [ 1784.085862][T26592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.085882][T26592] RIP: 0033:0x7fb30279cdd9 [ 1784.085899][T26592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1784.085915][T26592] RSP: 002b:00007fb303740028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1784.085935][T26592] RAX: ffffffffffffffda RBX: 00007fb302a15fa0 RCX: 00007fb30279cdd9 [ 1784.085948][T26592] RDX: 000000000400023e RSI: 0000200000002740 RDI: 0000000000000004 [ 1784.085961][T26592] RBP: 00007fb303740090 R08: 0000000000000000 R09: 0000000000000000 [ 1784.085973][T26592] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1784.085983][T26592] R13: 00007fb302a16038 R14: 00007fb302a15fa0 R15: 00007ffc3d1f0d58 [ 1784.086013][T26592] [ 1784.946871][T26630] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15055'. [ 1785.021449][T26631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15055'. [ 1785.040674][T26631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15055'. [ 1785.076256][T26635] netlink: 'syz.3.15058': attribute type 2 has an invalid length. [ 1785.156476][T26639] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15060'. [ 1785.542007][T26656] FAULT_INJECTION: forcing a failure. [ 1785.542007][T26656] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.556507][T26656] CPU: 0 UID: 0 PID: 26656 Comm: syz.5.15064 Not tainted syzkaller #0 PREEMPT(full) [ 1785.556532][T26656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1785.556543][T26656] Call Trace: [ 1785.556551][T26656] [ 1785.556559][T26656] dump_stack_lvl+0xe8/0x150 [ 1785.556586][T26656] should_fail_ex+0x412/0x560 [ 1785.556610][T26656] ? __pfx_set_connectable_sync+0x10/0x10 [ 1785.556634][T26656] should_failslab+0xa8/0x100 [ 1785.556667][T26656] __kmalloc_cache_noprof+0x88/0x660 [ 1785.556693][T26656] ? hci_cmd_sync_submit+0xcb/0x2b0 [ 1785.556719][T26656] ? __pfx_set_connectable_sync+0x10/0x10 [ 1785.556741][T26656] hci_cmd_sync_submit+0xcb/0x2b0 [ 1785.556763][T26656] ? __pfx_mgmt_set_connectable_complete+0x10/0x10 [ 1785.556791][T26656] set_connectable+0x64b/0x800 [ 1785.556821][T26656] ? __pfx_set_connectable+0x10/0x10 [ 1785.556857][T26656] hci_mgmt_cmd+0xa14/0xfa0 [ 1785.556892][T26656] hci_sock_sendmsg+0x6dd/0xf40 [ 1785.556911][T26656] ? __pfx_aa_sk_perm+0x10/0x10 [ 1785.556935][T26656] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1785.556956][T26656] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1785.556981][T26656] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1785.557006][T26656] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1785.557026][T26656] sock_write_iter+0x49b/0x4f0 [ 1785.557055][T26656] ? __pfx_sock_write_iter+0x10/0x10 [ 1785.557093][T26656] ? bpf_lsm_file_permission+0x9/0x20 [ 1785.557117][T26656] ? security_file_permission+0x75/0x260 [ 1785.557146][T26656] vfs_write+0x61d/0xb90 [ 1785.557186][T26656] ? __pfx_vfs_write+0x10/0x10 [ 1785.557222][T26656] ? __fget_files+0x2a/0x420 [ 1785.557253][T26656] ksys_write+0x150/0x270 [ 1785.557280][T26656] ? __pfx_ksys_write+0x10/0x10 [ 1785.557315][T26656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.557335][T26656] do_syscall_64+0x15f/0xf80 [ 1785.557356][T26656] ? trace_irq_disable+0x3b/0x140 [ 1785.557382][T26656] ? clear_bhb_loop+0x40/0x90 [ 1785.557405][T26656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.557424][T26656] RIP: 0033:0x7fbcae59cdd9 [ 1785.557442][T26656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1785.557456][T26656] RSP: 002b:00007fbcaf435028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1785.557476][T26656] RAX: ffffffffffffffda RBX: 00007fbcae815fa0 RCX: 00007fbcae59cdd9 [ 1785.557490][T26656] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000006 [ 1785.557501][T26656] RBP: 00007fbcaf435090 R08: 0000000000000000 R09: 0000000000000000 [ 1785.557512][T26656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1785.557523][T26656] R13: 00007fbcae816038 R14: 00007fbcae815fa0 R15: 00007ffd7d6b7408 [ 1785.557555][T26656] [ 1788.139029][T26639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1788.160277][T26653] netlink: 224 bytes leftover after parsing attributes in process `syz.6.15063'. [ 1788.753444][T26682] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15073'. [ 1788.816350][T26685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15074'. [ 1788.852950][T26685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15074'. [ 1789.414584][T26704] syzkaller0: entered promiscuous mode [ 1789.427383][T26704] syzkaller0: entered allmulticast mode [ 1789.790266][T26721] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15086'. [ 1789.975087][T14067] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.148110][T26732] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15091'. [ 1790.393808][T23004] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1790.695802][T26741] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15095'. [ 1790.793280][T26743] syzkaller0: entered promiscuous mode [ 1790.808220][T26743] syzkaller0: entered allmulticast mode [ 1790.983465][ T7708] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1791.000064][T26748] tipc: Started in network mode [ 1791.024169][T26748] tipc: Node identity 8a35b1e4fca6, cluster identity 4711 [ 1791.041908][T26748] tipc: Enabled bearer , priority 0 [ 1791.062627][T14067] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1791.098272][T26748] syzkaller0: entered promiscuous mode [ 1791.107948][T26758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15101'. [ 1791.127631][T26748] syzkaller0: entered allmulticast mode [ 1791.223269][T26748] tipc: Resetting bearer [ 1791.324816][T26764] syzkaller0: entered promiscuous mode [ 1791.334814][T26764] syzkaller0: entered allmulticast mode [ 1791.345824][T26767] 8021q: VLANs not supported on sit0 [ 1791.398135][T26745] tipc: Resetting bearer [ 1791.425475][T26745] tipc: Disabling bearer [ 1791.482995][T26772] netlink: 'syz.6.15104': attribute type 4 has an invalid length. [ 1791.648735][T26782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15108'. [ 1791.887663][T26791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1792.063882][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1792.077055][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1792.086578][T23002] IPVS: starting estimator thread 0... [ 1792.182950][T26800] IPVS: using max 30 ests per chain, 72000 per kthread [ 1792.327128][T26813] FAULT_INJECTION: forcing a failure. [ 1792.327128][T26813] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.340001][T26813] CPU: 1 UID: 0 PID: 26813 Comm: syz.5.15116 Not tainted syzkaller #0 PREEMPT(full) [ 1792.340025][T26813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1792.340036][T26813] Call Trace: [ 1792.340045][T26813] [ 1792.340053][T26813] dump_stack_lvl+0xe8/0x150 [ 1792.340080][T26813] should_fail_ex+0x412/0x560 [ 1792.340108][T26813] should_failslab+0xa8/0x100 [ 1792.340136][T26813] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1792.340163][T26813] ? kasprintf+0xe2/0x140 [ 1792.340194][T26813] kvasprintf+0xeb/0x1a0 [ 1792.340217][T26813] ? nf_tables_newset+0x1393/0x2580 [ 1792.340244][T26813] ? nfnetlink_rcv+0x123e/0x27b0 [ 1792.340263][T26813] ? netlink_unicast+0x75c/0x8e0 [ 1792.340284][T26813] ? __pfx_kvasprintf+0x10/0x10 [ 1792.340307][T26813] ? do_syscall_64+0x15f/0xf80 [ 1792.340342][T26813] kasprintf+0xe2/0x140 [ 1792.340372][T26813] ? __pfx_kasprintf+0x10/0x10 [ 1792.340412][T26813] nf_tables_set_alloc_name+0x109/0x710 [ 1792.340435][T26813] ? trace_kmalloc+0x2a/0xf0 [ 1792.340460][T26813] ? __kmalloc_noprof+0x37d/0x760 [ 1792.340484][T26813] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 1792.340503][T26813] ? nla_strdup+0xb8/0x140 [ 1792.340538][T26813] nf_tables_newset+0x13b4/0x2580 [ 1792.340578][T26813] ? __pfx_nf_tables_newset+0x10/0x10 [ 1792.340628][T26813] ? __nla_parse+0x40/0x60 [ 1792.340658][T26813] nfnetlink_rcv+0x123e/0x27b0 [ 1792.340719][T26813] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1792.340754][T26813] ? ref_tracker_free+0x693/0x840 [ 1792.340807][T26813] ? __netlink_deliver_tap+0x807/0x850 [ 1792.340838][T26813] ? netlink_deliver_tap+0x2e/0x1b0 [ 1792.340859][T26813] ? netlink_deliver_tap+0x2e/0x1b0 [ 1792.340887][T26813] netlink_unicast+0x75c/0x8e0 [ 1792.340917][T26813] netlink_sendmsg+0x813/0xb40 [ 1792.340949][T26813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1792.340974][T26813] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1792.340997][T26813] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1792.341024][T26813] ____sys_sendmsg+0x972/0x9f0 [ 1792.341046][T26813] ? __might_fault+0xaf/0x130 [ 1792.341075][T26813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1792.341105][T26813] ? import_iovec+0x73/0xa0 [ 1792.341134][T26813] ___sys_sendmsg+0x2a5/0x360 [ 1792.341156][T26813] ? __lock_acquire+0x6b5/0x2cf0 [ 1792.341180][T26813] ? __pfx____sys_sendmsg+0x10/0x10 [ 1792.341241][T26813] ? __fget_files+0x2a/0x420 [ 1792.341265][T26813] ? __fget_files+0x3a0/0x420 [ 1792.341296][T26813] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1792.341322][T26813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1792.341354][T26813] ? __pfx_ksys_write+0x10/0x10 [ 1792.341387][T26813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.341407][T26813] do_syscall_64+0x15f/0xf80 [ 1792.341427][T26813] ? trace_irq_disable+0x3b/0x140 [ 1792.341453][T26813] ? clear_bhb_loop+0x40/0x90 [ 1792.341475][T26813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.341492][T26813] RIP: 0033:0x7fbcae59cdd9 [ 1792.341510][T26813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1792.341525][T26813] RSP: 002b:00007fbcaf435028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1792.341546][T26813] RAX: ffffffffffffffda RBX: 00007fbcae815fa0 RCX: 00007fbcae59cdd9 [ 1792.341559][T26813] RDX: 0000000020050890 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1792.341571][T26813] RBP: 00007fbcaf435090 R08: 0000000000000000 R09: 0000000000000000 [ 1792.341580][T26813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1792.341589][T26813] R13: 00007fbcae816038 R14: 00007fbcae815fa0 R15: 00007ffd7d6b7408 [ 1792.341617][T26813] [ 1793.033943][T23002] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1793.230752][T26828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15122'. [ 1793.271452][T26828] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15122'. [ 1793.366663][T26841] FAULT_INJECTION: forcing a failure. [ 1793.366663][T26841] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.396175][T26841] CPU: 0 UID: 0 PID: 26841 Comm: syz.6.15126 Not tainted syzkaller #0 PREEMPT(full) [ 1793.396201][T26841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1793.396213][T26841] Call Trace: [ 1793.396220][T26841] [ 1793.396229][T26841] dump_stack_lvl+0xe8/0x150 [ 1793.396256][T26841] should_fail_ex+0x412/0x560 [ 1793.396284][T26841] should_failslab+0xa8/0x100 [ 1793.396314][T26841] __kmalloc_cache_noprof+0x88/0x660 [ 1793.396338][T26841] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1793.396359][T26841] ? sctp_add_bind_addr+0x8c/0x370 [ 1793.396393][T26841] sctp_add_bind_addr+0x8c/0x370 [ 1793.396420][T26841] sctp_copy_local_addr_list+0x314/0x4f0 [ 1793.396446][T26841] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1793.396469][T26841] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1793.396494][T26841] ? sctp_v6_is_any+0x64/0x80 [ 1793.396519][T26841] ? sctp_copy_one_addr+0x93/0x360 [ 1793.396545][T26841] sctp_bind_addr_copy+0xb3/0x3c0 [ 1793.396568][T26841] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1793.396593][T26841] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1793.396622][T26841] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1793.396654][T26841] ? __local_bh_enable_ip+0xd0/0x130 [ 1793.396672][T26841] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1793.396696][T26841] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1793.396719][T26841] sctp_sendmsg+0x1528/0x2c10 [ 1793.396760][T26841] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1793.396789][T26841] ? aa_sk_perm+0x6d5/0x900 [ 1793.396810][T26841] ? __might_fault+0xaf/0x130 [ 1793.396839][T26841] ? __pfx_aa_sk_perm+0x10/0x10 [ 1793.396868][T26841] ? sock_rps_record_flow+0x19/0x350 [ 1793.396893][T26841] ? __pfx_inet_sendmsg+0x10/0x10 [ 1793.396918][T26841] ? inet_sendmsg+0x2f4/0x370 [ 1793.396943][T26841] ? __pfx_inet_sendmsg+0x10/0x10 [ 1793.396969][T26841] __sys_sendto+0x5de/0x710 [ 1793.396994][T26841] ? __pfx___sys_sendto+0x10/0x10 [ 1793.397013][T26841] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1793.397057][T26841] ? __fget_files+0x3a0/0x420 [ 1793.397090][T26841] ? ksys_write+0x242/0x270 [ 1793.397117][T26841] ? __pfx_ksys_write+0x10/0x10 [ 1793.397146][T26841] __x64_sys_sendto+0xde/0x100 [ 1793.397167][T26841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.397188][T26841] do_syscall_64+0x15f/0xf80 [ 1793.397207][T26841] ? trace_irq_disable+0x3b/0x140 [ 1793.397233][T26841] ? clear_bhb_loop+0x40/0x90 [ 1793.397256][T26841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.397274][T26841] RIP: 0033:0x7f7538d9cdd9 [ 1793.397292][T26841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.397307][T26841] RSP: 002b:00007f7539cba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1793.397327][T26841] RAX: ffffffffffffffda RBX: 00007f7539015fa0 RCX: 00007f7538d9cdd9 [ 1793.397341][T26841] RDX: 000000000000005b RSI: 0000200000000040 RDI: 0000000000000003 [ 1793.397353][T26841] RBP: 00007f7539cba090 R08: 0000200000000100 R09: 000000000000001c [ 1793.397365][T26841] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000002 [ 1793.397380][T26841] R13: 00007f7539016038 R14: 00007f7539015fa0 R15: 00007ffd1014d348 [ 1793.397411][T26841] [ 1793.432986][T26845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.15128'. [ 1793.532648][T26847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15127'. [ 1793.970642][T26870] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15134'. [ 1794.307684][T26894] netlink: 'syz.5.15145': attribute type 3 has an invalid length. [ 1794.333001][T26894] netlink: 'syz.5.15145': attribute type 3 has an invalid length. [ 1794.406940][T26900] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1794.448083][T26900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15147'. [ 1794.807721][T26923] netlink: 'syz.4.15152': attribute type 1 has an invalid length. [ 1795.276965][T26947] __nla_validate_parse: 1 callbacks suppressed [ 1795.276985][T26947] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15157'. [ 1795.294789][T26948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15158'. [ 1795.384226][T26950] syzkaller0: entered promiscuous mode [ 1795.397975][T26950] syzkaller0: entered allmulticast mode [ 1795.829256][T26965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15164'. [ 1796.142956][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1796.296799][T26980] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15171'. [ 1796.324499][T26981] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15171'. [ 1796.337920][T26984] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15170'. [ 1796.345232][T26983] syzkaller0: entered promiscuous mode [ 1796.361643][T26983] syzkaller0: entered allmulticast mode [ 1796.455132][T26991] netlink: 36 bytes leftover after parsing attributes in process `syz.6.15175'. [ 1796.486753][T26986] FAULT_INJECTION: forcing a failure. [ 1796.486753][T26986] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.506446][T26986] CPU: 0 UID: 0 PID: 26986 Comm: syz.4.15173 Not tainted syzkaller #0 PREEMPT(full) [ 1796.506471][T26986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1796.506482][T26986] Call Trace: [ 1796.506489][T26986] [ 1796.506497][T26986] dump_stack_lvl+0xe8/0x150 [ 1796.506523][T26986] should_fail_ex+0x412/0x560 [ 1796.506550][T26986] should_failslab+0xa8/0x100 [ 1796.506579][T26986] __kvmalloc_node_noprof+0x178/0x8a0 [ 1796.506605][T26986] ? __raw_spin_lock_init+0x45/0x100 [ 1796.506624][T26986] ? alloc_netdev_mqs+0xaa6/0x1210 [ 1796.506658][T26986] alloc_netdev_mqs+0xaa6/0x1210 [ 1796.506688][T26986] rtnl_create_link+0x31f/0xd70 [ 1796.506719][T26986] rtnl_newlink_create+0x277/0xb70 [ 1796.506742][T26986] ? __pfx___nla_validate_parse+0x10/0x10 [ 1796.506777][T26986] ? __mutex_lock+0x608/0x1550 [ 1796.506800][T26986] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1796.506827][T26986] ? __pfx___mutex_lock+0x10/0x10 [ 1796.506858][T26986] ? full_name_hash+0x89/0xe0 [ 1796.506877][T26986] ? __dev_get_by_name+0x36/0x140 [ 1796.506906][T26986] rtnl_newlink+0x166a/0x1bb0 [ 1796.506941][T26986] ? __pfx_rtnl_newlink+0x10/0x10 [ 1796.506974][T26986] ? __lock_acquire+0x6b5/0x2cf0 [ 1796.507004][T26986] ? unwind_next_frame+0xa6/0x2550 [ 1796.507033][T26986] ? unwind_next_frame+0xa6/0x2550 [ 1796.507055][T26986] ? is_bpf_text_address+0x26/0x2b0 [ 1796.507085][T26986] ? is_bpf_text_address+0x26/0x2b0 [ 1796.507109][T26986] ? __lock_acquire+0x6b5/0x2cf0 [ 1796.507140][T26986] ? kernel_text_address+0xa5/0xe0 [ 1796.507166][T26986] ? __kernel_text_address+0xd/0x30 [ 1796.507190][T26986] ? unwind_get_return_address+0x4d/0x90 [ 1796.507208][T26986] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1796.507233][T26986] ? arch_stack_walk+0xfb/0x150 [ 1796.507264][T26986] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1796.507301][T26986] ? __pfx_rtnl_newlink+0x10/0x10 [ 1796.507327][T26986] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1796.507346][T26986] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1796.507370][T26986] ? netlink_sendmsg+0x5d4/0xb40 [ 1796.507394][T26986] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1796.507420][T26986] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1796.507443][T26986] ? __lock_acquire+0x6b5/0x2cf0 [ 1796.507476][T26986] netlink_rcv_skb+0x232/0x4b0 [ 1796.507500][T26986] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1796.507523][T26986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1796.507559][T26986] ? netlink_deliver_tap+0x2e/0x1b0 [ 1796.507581][T26986] ? netlink_deliver_tap+0x2e/0x1b0 [ 1796.507607][T26986] netlink_unicast+0x75c/0x8e0 [ 1796.507636][T26986] netlink_sendmsg+0x813/0xb40 [ 1796.507668][T26986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1796.507694][T26986] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1796.507717][T26986] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1796.507743][T26986] ____sys_sendmsg+0x972/0x9f0 [ 1796.507765][T26986] ? __might_fault+0xaf/0x130 [ 1796.507791][T26986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1796.507824][T26986] ? import_iovec+0x73/0xa0 [ 1796.507852][T26986] ___sys_sendmsg+0x2a5/0x360 [ 1796.507874][T26986] ? __lock_acquire+0x6b5/0x2cf0 [ 1796.507897][T26986] ? __pfx____sys_sendmsg+0x10/0x10 [ 1796.507958][T26986] ? __fget_files+0x2a/0x420 [ 1796.507979][T26986] ? __fget_files+0x3a0/0x420 [ 1796.508011][T26986] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1796.508037][T26986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1796.508071][T26986] ? __pfx_ksys_write+0x10/0x10 [ 1796.508106][T26986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.508125][T26986] do_syscall_64+0x15f/0xf80 [ 1796.508145][T26986] ? trace_irq_disable+0x3b/0x140 [ 1796.508171][T26986] ? clear_bhb_loop+0x40/0x90 [ 1796.508194][T26986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.508212][T26986] RIP: 0033:0x7f07fc39cdd9 [ 1796.508230][T26986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1796.508245][T26986] RSP: 002b:00007f07fa5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1796.508265][T26986] RAX: ffffffffffffffda RBX: 00007f07fc615fa0 RCX: 00007f07fc39cdd9 [ 1796.508279][T26986] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1796.508290][T26986] RBP: 00007f07fa5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1796.508302][T26986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1796.508313][T26986] R13: 00007f07fc616038 R14: 00007f07fc615fa0 R15: 00007ffc0e34ee28 [ 1796.508345][T26986] [ 1796.978924][T26995] žÿ: renamed from team_slave_1 (while UP) [ 1797.061706][T27003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15179'. [ 1797.365518][T27022] netlink: 'syz.6.15187': attribute type 3 has an invalid length. [ 1797.388552][T27025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15186'. [ 1797.417911][T27024] syzkaller0: entered promiscuous mode [ 1797.434314][T27024] syzkaller0: entered allmulticast mode [ 1797.434910][T27029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15190'. [ 1797.524062][T27022] siw: device registration error -23 [ 1797.645096][T27036] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1798.026137][T27058] syzkaller1: entered promiscuous mode [ 1798.031746][T27058] syzkaller1: entered allmulticast mode [ 1798.052522][T27058] netlink: 'syz.5.15200': attribute type 1 has an invalid length. [ 1798.311699][T27062] 8021q: adding VLAN 0 to HW filter on device team0 [ 1798.343090][T27062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1798.404557][T27062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1798.416510][T27062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1798.438763][T27062] veth1_vlan: left promiscuous mode [ 1798.447246][T27062] veth0_vlan: left promiscuous mode [ 1798.453670][T27062] veth0_vlan: entered promiscuous mode [ 1798.462698][T27062] veth1_vlan: entered promiscuous mode [ 1798.477407][T27062] veth1_macvtap: left promiscuous mode [ 1798.485773][T27062] veth0_macvtap: left promiscuous mode [ 1798.503724][T27062] veth0_macvtap: entered promiscuous mode [ 1798.516230][T14050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.523426][T14050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1798.534698][T14050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.541830][T14050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1798.896270][T27107] netlink: 'syz.6.15217': attribute type 4 has an invalid length. [ 1799.024581][T27112] FAULT_INJECTION: forcing a failure. [ 1799.024581][T27112] name failslab, interval 1, probability 0, space 0, times 0 [ 1799.061860][T27112] CPU: 1 UID: 0 PID: 27112 Comm: syz.5.15219 Not tainted syzkaller #0 PREEMPT(full) [ 1799.061887][T27112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1799.061899][T27112] Call Trace: [ 1799.061907][T27112] [ 1799.061916][T27112] dump_stack_lvl+0xe8/0x150 [ 1799.061942][T27112] should_fail_ex+0x412/0x560 [ 1799.061970][T27112] should_failslab+0xa8/0x100 [ 1799.061998][T27112] __kmalloc_noprof+0xe8/0x760 [ 1799.062020][T27112] ? __pfx___mutex_lock+0x10/0x10 [ 1799.062043][T27112] ? fib_trie_table+0x33/0x1d0 [ 1799.062068][T27112] fib_trie_table+0x33/0x1d0 [ 1799.062091][T27112] fib_new_table+0x135/0x2d0 [ 1799.062118][T27112] inet_rtm_newroute+0x137/0x250 [ 1799.062141][T27112] ? __local_bh_enable_ip+0xd0/0x130 [ 1799.062160][T27112] ? __dev_queue_xmit+0x2b6/0x3950 [ 1799.062186][T27112] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1799.062231][T27112] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 1799.062263][T27112] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1799.062287][T27112] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1799.062307][T27112] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1799.062326][T27112] ? ref_tracker_free+0x693/0x840 [ 1799.062354][T27112] ? __pfx_ref_tracker_free+0x10/0x10 [ 1799.062388][T27112] netlink_rcv_skb+0x232/0x4b0 [ 1799.062412][T27112] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1799.062435][T27112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1799.062470][T27112] ? netlink_deliver_tap+0x2e/0x1b0 [ 1799.062492][T27112] ? netlink_deliver_tap+0x2e/0x1b0 [ 1799.062518][T27112] netlink_unicast+0x75c/0x8e0 [ 1799.062547][T27112] netlink_sendmsg+0x813/0xb40 [ 1799.062582][T27112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1799.062607][T27112] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1799.062632][T27112] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1799.062660][T27112] ____sys_sendmsg+0x972/0x9f0 [ 1799.062683][T27112] ? __might_fault+0xaf/0x130 [ 1799.062712][T27112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1799.062746][T27112] ? import_iovec+0x73/0xa0 [ 1799.062772][T27112] ___sys_sendmsg+0x2a5/0x360 [ 1799.062792][T27112] ? __lock_acquire+0x6b5/0x2cf0 [ 1799.062816][T27112] ? __pfx____sys_sendmsg+0x10/0x10 [ 1799.062874][T27112] ? __fget_files+0x2a/0x420 [ 1799.062895][T27112] ? __fget_files+0x3a0/0x420 [ 1799.062926][T27112] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1799.062951][T27112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1799.062985][T27112] ? __pfx_ksys_write+0x10/0x10 [ 1799.063014][T27112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.063030][T27112] do_syscall_64+0x15f/0xf80 [ 1799.063050][T27112] ? trace_irq_disable+0x3b/0x140 [ 1799.063076][T27112] ? clear_bhb_loop+0x40/0x90 [ 1799.063099][T27112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.063117][T27112] RIP: 0033:0x7fbcae59cdd9 [ 1799.063135][T27112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1799.063152][T27112] RSP: 002b:00007fbcaf435028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1799.063172][T27112] RAX: ffffffffffffffda RBX: 00007fbcae815fa0 RCX: 00007fbcae59cdd9 [ 1799.063186][T27112] RDX: 0000000020004090 RSI: 0000200000000040 RDI: 0000000000000003 [ 1799.063198][T27112] RBP: 00007fbcaf435090 R08: 0000000000000000 R09: 0000000000000000 [ 1799.063209][T27112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1799.063220][T27112] R13: 00007fbcae816038 R14: 00007fbcae815fa0 R15: 00007ffd7d6b7408 [ 1799.063269][T27112] [ 1799.626643][T27119] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1799.671803][T27129] syzkaller1: entered promiscuous mode [ 1799.695969][T27129] syzkaller1: entered allmulticast mode [ 1799.986571][T27143] bond4: entered promiscuous mode [ 1800.003856][T27143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1800.339639][T27175] __nla_validate_parse: 7 callbacks suppressed [ 1800.339659][T27175] netlink: 240 bytes leftover after parsing attributes in process `syz.6.15237'. [ 1800.356171][T27175] netlink: 56 bytes leftover after parsing attributes in process `syz.6.15237'. [ 1800.430785][T27181] xt_nfacct: accounting object `syz0' does not exist [ 1801.153665][T27211] syzkaller1: entered promiscuous mode [ 1801.161604][T27211] syzkaller1: entered allmulticast mode [ 1801.201226][T27211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15251'. [ 1801.233113][T27211] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1801.471208][T27233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1801.557093][T27233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15258'. [ 1801.865893][T27259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15270'. [ 1801.879156][T27258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15271'. [ 1801.924446][T27258] netlink: 256 bytes leftover after parsing attributes in process `syz.0.15271'. [ 1801.958154][T27263] FAULT_INJECTION: forcing a failure. [ 1801.958154][T27263] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.978354][T27263] CPU: 0 UID: 0 PID: 27263 Comm: syz.4.15273 Not tainted syzkaller #0 PREEMPT(full) [ 1801.978378][T27263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1801.978389][T27263] Call Trace: [ 1801.978396][T27263] [ 1801.978404][T27263] dump_stack_lvl+0xe8/0x150 [ 1801.978431][T27263] should_fail_ex+0x412/0x560 [ 1801.978460][T27263] should_failslab+0xa8/0x100 [ 1801.978488][T27263] __kmalloc_cache_noprof+0x88/0x660 [ 1801.978512][T27263] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1801.978535][T27263] ? sctp_add_bind_addr+0x8c/0x370 [ 1801.978560][T27263] sctp_add_bind_addr+0x8c/0x370 [ 1801.978585][T27263] sctp_copy_local_addr_list+0x314/0x4f0 [ 1801.978613][T27263] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1801.978632][T27263] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1801.978654][T27263] ? sctp_v6_is_any+0x64/0x80 [ 1801.978678][T27263] ? sctp_copy_one_addr+0x93/0x360 [ 1801.978702][T27263] sctp_bind_addr_copy+0xb3/0x3c0 [ 1801.978724][T27263] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1801.978748][T27263] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1801.978784][T27263] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1801.978815][T27263] ? __local_bh_enable_ip+0xd0/0x130 [ 1801.978833][T27263] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1801.978856][T27263] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1801.978879][T27263] sctp_sendmsg+0x1528/0x2c10 [ 1801.978901][T27263] ? unwind_next_frame+0xa6/0x2550 [ 1801.978934][T27263] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1801.978962][T27263] ? aa_sk_perm+0x6d5/0x900 [ 1801.978992][T27263] ? __pfx_aa_sk_perm+0x10/0x10 [ 1801.979015][T27263] ? sock_rps_record_flow+0x19/0x350 [ 1801.979042][T27263] ? inet_sendmsg+0x2f4/0x370 [ 1801.979070][T27263] ____sys_sendmsg+0x80a/0x9f0 [ 1801.979102][T27263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1801.979133][T27263] ? import_iovec+0x73/0xa0 [ 1801.979161][T27263] ___sys_sendmsg+0x2a5/0x360 [ 1801.979183][T27263] ? __lock_acquire+0x6b5/0x2cf0 [ 1801.979206][T27263] ? __pfx____sys_sendmsg+0x10/0x10 [ 1801.979264][T27263] ? __fget_files+0x2a/0x420 [ 1801.979285][T27263] ? __fget_files+0x3a0/0x420 [ 1801.979316][T27263] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1801.979341][T27263] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1801.979382][T27263] ? __pfx_ksys_write+0x10/0x10 [ 1801.979416][T27263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.979435][T27263] do_syscall_64+0x15f/0xf80 [ 1801.979456][T27263] ? trace_irq_disable+0x3b/0x140 [ 1801.979481][T27263] ? clear_bhb_loop+0x40/0x90 [ 1801.979505][T27263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.979523][T27263] RIP: 0033:0x7f07fc39cdd9 [ 1801.979541][T27263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.979556][T27263] RSP: 002b:00007f07fa5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1801.979576][T27263] RAX: ffffffffffffffda RBX: 00007f07fc615fa0 RCX: 00007f07fc39cdd9 [ 1801.979589][T27263] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 1801.979601][T27263] RBP: 00007f07fa5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1801.979613][T27263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1801.979624][T27263] R13: 00007f07fc616038 R14: 00007f07fc615fa0 R15: 00007ffc0e34ee28 [ 1801.979655][T27263] [ 1802.448929][T27274] FAULT_INJECTION: forcing a failure. [ 1802.448929][T27274] name failslab, interval 1, probability 0, space 0, times 0 [ 1802.451702][T27271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1802.461937][T27274] CPU: 0 UID: 0 PID: 27274 Comm: syz.4.15276 Not tainted syzkaller #0 PREEMPT(full) [ 1802.461963][T27274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1802.461975][T27274] Call Trace: [ 1802.461982][T27274] [ 1802.461990][T27274] dump_stack_lvl+0xe8/0x150 [ 1802.462018][T27274] should_fail_ex+0x412/0x560 [ 1802.462045][T27274] should_failslab+0xa8/0x100 [ 1802.462072][T27274] __kvmalloc_node_noprof+0x178/0x8a0 [ 1802.462095][T27274] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 1802.462120][T27274] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1802.462149][T27274] bpf_test_run_xdp_live+0x223/0x1cf0 [ 1802.462176][T27274] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 1802.462211][T27274] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1802.462239][T27274] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1802.462281][T27274] ? 0xffffffffa02019d0 [ 1802.462296][T27274] ? 0xffffffffa0203db0 [ 1802.462335][T27274] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1802.462367][T27274] ? _copy_from_user+0x94/0xb0 [ 1802.462392][T27274] ? bpf_test_init+0x113/0x150 [ 1802.462411][T27274] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1802.462435][T27274] bpf_prog_test_run_xdp+0x81c/0x1160 [ 1802.462471][T27274] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1802.462497][T27274] ? __fget_files+0x2a/0x420 [ 1802.462522][T27274] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1802.462545][T27274] bpf_prog_test_run+0x2c7/0x340 [ 1802.462567][T27274] __sys_bpf+0x643/0x950 [ 1802.462592][T27274] ? __pfx___sys_bpf+0x10/0x10 [ 1802.462631][T27274] ? ksys_write+0x242/0x270 [ 1802.462657][T27274] ? __pfx_ksys_write+0x10/0x10 [ 1802.462684][T27274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.462704][T27274] __x64_sys_bpf+0x7c/0x90 [ 1802.462728][T27274] do_syscall_64+0x15f/0xf80 [ 1802.462752][T27274] ? trace_irq_disable+0x3b/0x140 [ 1802.462776][T27274] ? clear_bhb_loop+0x40/0x90 [ 1802.462797][T27274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.462821][T27274] RIP: 0033:0x7f07fc39cdd9 [ 1802.462837][T27274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1802.462853][T27274] RSP: 002b:00007f07fa5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1802.462873][T27274] RAX: ffffffffffffffda RBX: 00007f07fc615fa0 RCX: 00007f07fc39cdd9 [ 1802.462886][T27274] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 1802.462897][T27274] RBP: 00007f07fa5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1802.462908][T27274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1802.462918][T27274] R13: 00007f07fc616038 R14: 00007f07fc615fa0 R15: 00007ffc0e34ee28 [ 1802.462947][T27274] [ 1802.753566][T27282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15275'. [ 1802.994483][T27300] FAULT_INJECTION: forcing a failure. [ 1802.994483][T27300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1803.035719][T27300] CPU: 0 UID: 0 PID: 27300 Comm: syz.5.15286 Not tainted syzkaller #0 PREEMPT(full) [ 1803.035744][T27300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1803.035756][T27300] Call Trace: [ 1803.035764][T27300] [ 1803.035772][T27300] dump_stack_lvl+0xe8/0x150 [ 1803.035800][T27300] should_fail_ex+0x412/0x560 [ 1803.035828][T27300] _copy_to_user+0x31/0xb0 [ 1803.035855][T27300] __htab_map_lookup_and_delete_batch+0x159e/0x1a20 [ 1803.035918][T27300] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 1803.035950][T27300] ? __pfx_htab_map_lookup_and_delete_batch+0x10/0x10 [ 1803.035971][T27300] bpf_map_do_batch+0x44f/0x630 [ 1803.035995][T27300] __sys_bpf+0x594/0x950 [ 1803.036024][T27300] ? __pfx___sys_bpf+0x10/0x10 [ 1803.036065][T27300] ? ksys_write+0x242/0x270 [ 1803.036092][T27300] ? __pfx_ksys_write+0x10/0x10 [ 1803.036119][T27300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.036139][T27300] __x64_sys_bpf+0x7c/0x90 [ 1803.036163][T27300] do_syscall_64+0x15f/0xf80 [ 1803.036183][T27300] ? trace_irq_disable+0x3b/0x140 [ 1803.036207][T27300] ? clear_bhb_loop+0x40/0x90 [ 1803.036228][T27300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.036245][T27300] RIP: 0033:0x7fbcae59cdd9 [ 1803.036263][T27300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1803.036278][T27300] RSP: 002b:00007fbcaf435028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1803.036298][T27300] RAX: ffffffffffffffda RBX: 00007fbcae815fa0 RCX: 00007fbcae59cdd9 [ 1803.036310][T27300] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 1803.036322][T27300] RBP: 00007fbcaf435090 R08: 0000000000000000 R09: 0000000000000000 [ 1803.036334][T27300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1803.036344][T27300] R13: 00007fbcae816038 R14: 00007fbcae815fa0 R15: 00007ffd7d6b7408 [ 1803.036374][T27300] [ 1803.374956][T27314] syzkaller0: entered promiscuous mode [ 1803.383218][T27314] syzkaller0: entered allmulticast mode [ 1803.396474][T27314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1803.669798][T27332] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15299'. [ 1803.685207][T27332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.694653][T27332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.119610][T27359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1804.146234][T27359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15308'. [ 1804.227871][T27363] netlink: 'syz.5.15309': attribute type 11 has an invalid length. [ 1804.935185][T13177] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1804.955781][T13177] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1804.963934][T13177] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1804.975545][T13177] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1804.983537][T13177] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1805.023189][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1805.350348][T27409] __nla_validate_parse: 5 callbacks suppressed [ 1805.350367][T27409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15330'. [ 1805.392251][T27409] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15330'. [ 1805.515843][T27409] bond5: entered promiscuous mode [ 1805.526478][T27424] netlink: 'syz.0.15332': attribute type 1 has an invalid length. [ 1805.534730][T27409] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1805.817914][T27441] FAULT_INJECTION: forcing a failure. [ 1805.817914][T27441] name failslab, interval 1, probability 0, space 0, times 0 [ 1805.853675][T27441] CPU: 1 UID: 0 PID: 27441 Comm: syz.0.15335 Not tainted syzkaller #0 PREEMPT(full) [ 1805.853701][T27441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1805.853712][T27441] Call Trace: [ 1805.853720][T27441] [ 1805.853729][T27441] dump_stack_lvl+0xe8/0x150 [ 1805.853755][T27441] should_fail_ex+0x412/0x560 [ 1805.853782][T27441] should_failslab+0xa8/0x100 [ 1805.853811][T27441] __kmalloc_cache_noprof+0x88/0x660 [ 1805.853838][T27441] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1805.853860][T27441] ? sctp_add_bind_addr+0x8c/0x370 [ 1805.853887][T27441] sctp_add_bind_addr+0x8c/0x370 [ 1805.853913][T27441] sctp_copy_local_addr_list+0x314/0x4f0 [ 1805.853939][T27441] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1805.853961][T27441] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1805.853982][T27441] ? sctp_v6_is_any+0x64/0x80 [ 1805.854006][T27441] ? sctp_copy_one_addr+0x93/0x360 [ 1805.854032][T27441] sctp_bind_addr_copy+0xb3/0x3c0 [ 1805.854054][T27441] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1805.854077][T27441] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1805.854106][T27441] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1805.854137][T27441] ? __local_bh_enable_ip+0xd0/0x130 [ 1805.854153][T27441] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1805.854175][T27441] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1805.854196][T27441] sctp_sendmsg+0x1528/0x2c10 [ 1805.854232][T27441] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1805.854259][T27441] ? aa_sk_perm+0x6d5/0x900 [ 1805.854280][T27441] ? __might_fault+0xaf/0x130 [ 1805.854308][T27441] ? __pfx_aa_sk_perm+0x10/0x10 [ 1805.854330][T27441] ? sock_rps_record_flow+0x19/0x350 [ 1805.854353][T27441] ? __pfx_inet_sendmsg+0x10/0x10 [ 1805.854378][T27441] ? inet_sendmsg+0x2f4/0x370 [ 1805.854402][T27441] ? __pfx_inet_sendmsg+0x10/0x10 [ 1805.854425][T27441] __sys_sendto+0x5de/0x710 [ 1805.854450][T27441] ? __pfx___sys_sendto+0x10/0x10 [ 1805.854468][T27441] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1805.854512][T27441] ? __fget_files+0x3a0/0x420 [ 1805.854543][T27441] ? ksys_write+0x242/0x270 [ 1805.854569][T27441] ? __pfx_ksys_write+0x10/0x10 [ 1805.854599][T27441] __x64_sys_sendto+0xde/0x100 [ 1805.854621][T27441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1805.854641][T27441] do_syscall_64+0x15f/0xf80 [ 1805.854662][T27441] ? trace_irq_disable+0x3b/0x140 [ 1805.854688][T27441] ? clear_bhb_loop+0x40/0x90 [ 1805.854711][T27441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1805.854730][T27441] RIP: 0033:0x7fc0fc39cdd9 [ 1805.854748][T27441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1805.854762][T27441] RSP: 002b:00007fc0fd1d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1805.854782][T27441] RAX: ffffffffffffffda RBX: 00007fc0fc615fa0 RCX: 00007fc0fc39cdd9 [ 1805.854795][T27441] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 1805.854807][T27441] RBP: 00007fc0fd1d6090 R08: 000020000005ffe4 R09: 000000000000001c [ 1805.854819][T27441] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 1805.854830][T27441] R13: 00007fc0fc616038 R14: 00007fc0fc615fa0 R15: 00007ffdd7a59d38 [ 1805.854860][T27441] [ 1806.271160][T27445] netlink: 'syz.6.15337': attribute type 4 has an invalid length. [ 1806.283081][T27445] netlink: 156 bytes leftover after parsing attributes in process `syz.6.15337'. [ 1806.307747][T27445] bond_slave_1: mtu greater than device maximum [ 1806.436922][T27458] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15340'. [ 1806.618168][T27465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15343'. [ 1806.634499][T27465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15343'. [ 1806.695917][T27465] bond1: entered promiscuous mode [ 1806.704114][T27465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1806.747468][T27399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1806.764136][T27399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.778708][T27399] bridge_slave_0: entered allmulticast mode [ 1806.779325][T27480] FAULT_INJECTION: forcing a failure. [ 1806.779325][T27480] name failslab, interval 1, probability 0, space 0, times 0 [ 1806.791747][T27399] bridge_slave_0: entered promiscuous mode [ 1806.800850][T27480] CPU: 1 UID: 0 PID: 27480 Comm: syz.3.15346 Not tainted syzkaller #0 PREEMPT(full) [ 1806.800874][T27480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1806.800886][T27480] Call Trace: [ 1806.800893][T27480] [ 1806.800900][T27480] dump_stack_lvl+0xe8/0x150 [ 1806.800927][T27480] should_fail_ex+0x412/0x560 [ 1806.800955][T27480] should_failslab+0xa8/0x100 [ 1806.800982][T27480] __kmalloc_cache_noprof+0x88/0x660 [ 1806.801005][T27480] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1806.801025][T27480] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1806.801046][T27480] ? sctp_add_bind_addr+0x8c/0x370 [ 1806.801072][T27480] sctp_add_bind_addr+0x8c/0x370 [ 1806.801097][T27480] sctp_copy_local_addr_list+0x314/0x4f0 [ 1806.801122][T27480] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1806.801144][T27480] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1806.801168][T27480] ? sctp_v6_is_any+0x64/0x80 [ 1806.801191][T27480] ? sctp_copy_one_addr+0x93/0x360 [ 1806.801216][T27480] sctp_bind_addr_copy+0xb3/0x3c0 [ 1806.801238][T27480] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1806.801261][T27480] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1806.801289][T27480] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1806.801321][T27480] ? __local_bh_enable_ip+0xd0/0x130 [ 1806.801338][T27480] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1806.801361][T27480] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1806.801383][T27480] sctp_sendmsg+0x1528/0x2c10 [ 1806.801423][T27480] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1806.801457][T27480] ? aa_sk_perm+0x6d5/0x900 [ 1806.801477][T27480] ? __might_fault+0xaf/0x130 [ 1806.801505][T27480] ? __pfx_aa_sk_perm+0x10/0x10 [ 1806.801528][T27480] ? sock_rps_record_flow+0x19/0x350 [ 1806.801551][T27480] ? __pfx_inet_sendmsg+0x10/0x10 [ 1806.801575][T27480] ? inet_sendmsg+0x2f4/0x370 [ 1806.801598][T27480] ? __pfx_inet_sendmsg+0x10/0x10 [ 1806.801622][T27480] __sys_sendto+0x5de/0x710 [ 1806.801646][T27480] ? __pfx___sys_sendto+0x10/0x10 [ 1806.801663][T27480] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1806.801697][T27480] ? __fget_files+0x3a0/0x420 [ 1806.801728][T27480] ? ksys_write+0x242/0x270 [ 1806.801753][T27480] ? __pfx_ksys_write+0x10/0x10 [ 1806.801782][T27480] __x64_sys_sendto+0xde/0x100 [ 1806.801803][T27480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1806.801823][T27480] do_syscall_64+0x15f/0xf80 [ 1806.801842][T27480] ? trace_irq_disable+0x3b/0x140 [ 1806.801866][T27480] ? clear_bhb_loop+0x40/0x90 [ 1806.801888][T27480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1806.801905][T27480] RIP: 0033:0x7fb30279cdd9 [ 1806.801925][T27480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1806.801940][T27480] RSP: 002b:00007fb303740028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1806.801958][T27480] RAX: ffffffffffffffda RBX: 00007fb302a15fa0 RCX: 00007fb30279cdd9 [ 1806.801971][T27480] RDX: 0000000000000001 RSI: 0000200000847fff RDI: 0000000000000007 [ 1806.801982][T27480] RBP: 00007fb303740090 R08: 000020000005ffe4 R09: 000000000000001c [ 1806.801994][T27480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1806.802005][T27480] R13: 00007fb302a16038 R14: 00007fb302a15fa0 R15: 00007ffc3d1f0d58 [ 1806.802036][T27480] [ 1807.033118][T19440] Bluetooth: hci2: command tx timeout [ 1807.057927][T27399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1807.185621][T27399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.201213][T27399] bridge_slave_1: entered allmulticast mode [ 1807.220687][T27399] bridge_slave_1: entered promiscuous mode [ 1807.390123][T27399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1807.440547][T27399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1807.557724][T27399] team0: Port device team_slave_0 added [ 1807.573841][T27511] netlink: 'syz.0.15355': attribute type 2 has an invalid length. [ 1807.583485][T27511] netlink: 'syz.0.15355': attribute type 2 has an invalid length. [ 1807.607493][T27511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15355'. [ 1807.633366][T27399] team0: Port device team_slave_1 added [ 1807.740032][T27399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1807.760298][T27399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1807.799186][T27520] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.15356'. [ 1807.815624][T27399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1807.826868][T27520] netlink: ct family unspecified [ 1807.836568][T27513] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1807.846044][T27513] CPU: 1 UID: 0 PID: 27513 Comm: syz.5.15354 Not tainted syzkaller #0 PREEMPT(full) [ 1807.846073][T27513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1807.846087][T27513] Call Trace: [ 1807.846097][T27513] [ 1807.846106][T27513] dump_stack_lvl+0xe8/0x150 [ 1807.846137][T27513] sysfs_warn_dup+0x8e/0xa0 [ 1807.846165][T27513] sysfs_do_create_link_sd+0xc0/0x110 [ 1807.846196][T27513] device_add_class_symlinks+0x1cf/0x240 [ 1807.846225][T27513] device_add+0x475/0xbb0 [ 1807.846253][T27513] wiphy_register+0x21e8/0x32e0 [ 1807.846298][T27513] ? __pfx_wiphy_register+0x10/0x10 [ 1807.846326][T27513] ? __pfx_netdev_run_todo+0x10/0x10 [ 1807.846355][T27513] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1807.846395][T27513] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1807.846427][T27513] ieee80211_register_hw+0x3d82/0x4a70 [ 1807.846473][T27513] ? ieee80211_register_hw+0x1931/0x4a70 [ 1807.846530][T27513] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1807.846563][T27513] ? __asan_memset+0x22/0x50 [ 1807.846590][T27513] ? __hrtimer_setup+0x1b7/0x260 [ 1807.846623][T27513] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1807.846655][T27513] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 1807.846710][T27513] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1807.846730][T27513] ? kstrndup+0xbf/0x160 [ 1807.846762][T27513] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1807.846815][T27513] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1807.846847][T27513] ? rcu_is_watching+0x15/0xb0 [ 1807.846874][T27513] ? trace_kmalloc+0x2a/0xf0 [ 1807.846910][T27513] ? __nla_parse+0x40/0x60 [ 1807.846946][T27513] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1807.846979][T27513] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1807.847021][T27513] genl_family_rcv_msg_doit+0x22a/0x330 [ 1807.847062][T27513] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1807.847109][T27513] ? bpf_lsm_capable+0x9/0x20 [ 1807.847129][T27513] ? security_capable+0x7e/0x2c0 [ 1807.847161][T27513] genl_rcv_msg+0x61c/0x7a0 [ 1807.847200][T27513] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1807.847231][T27513] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1807.847272][T27513] netlink_rcv_skb+0x232/0x4b0 [ 1807.847299][T27513] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1807.847333][T27513] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1807.847377][T27513] ? down_read+0x270/0x2e0 [ 1807.847402][T27513] ? genl_rcv+0xd/0x40 [ 1807.847435][T27513] genl_rcv+0x28/0x40 [ 1807.847465][T27513] netlink_unicast+0x75c/0x8e0 [ 1807.847501][T27513] netlink_sendmsg+0x813/0xb40 [ 1807.847539][T27513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1807.847570][T27513] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1807.847604][T27513] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1807.847637][T27513] ____sys_sendmsg+0x972/0x9f0 [ 1807.847666][T27513] ? __might_fault+0xaf/0x130 [ 1807.847700][T27513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1807.847737][T27513] ? import_iovec+0x73/0xa0 [ 1807.847771][T27513] ___sys_sendmsg+0x2a5/0x360 [ 1807.847805][T27513] ? __pfx____sys_sendmsg+0x10/0x10 [ 1807.847841][T27513] ? futex_wait+0x2a2/0x390 [ 1807.847918][T27513] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1807.847949][T27513] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1807.847987][T27513] ? rcu_is_watching+0x15/0xb0 [ 1807.848023][T27513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.848047][T27513] do_syscall_64+0x15f/0xf80 [ 1807.848071][T27513] ? trace_irq_disable+0x3b/0x140 [ 1807.848102][T27513] ? clear_bhb_loop+0x40/0x90 [ 1807.848128][T27513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.848150][T27513] RIP: 0033:0x7fbcae59cdd9 [ 1807.848170][T27513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1807.848188][T27513] RSP: 002b:00007fbcaf435028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1807.848211][T27513] RAX: ffffffffffffffda RBX: 00007fbcae815fa0 RCX: 00007fbcae59cdd9 [ 1807.848228][T27513] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 1807.848241][T27513] RBP: 00007fbcae632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1807.848255][T27513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1807.848268][T27513] R13: 00007fbcae816038 R14: 00007fbcae815fa0 R15: 00007ffd7d6b7408 [ 1807.848305][T27513] [ 1807.859071][T27516] syzkaller1: entered promiscuous mode [ 1807.946711][T27528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15360'. [ 1807.967612][T27516] syzkaller1: entered allmulticast mode [ 1807.969913][T27529] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1807.982185][T27520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15356'. [ 1808.314524][T27399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1808.325504][T27399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1808.351980][T27399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1808.498408][T27399] hsr_slave_0: entered promiscuous mode [ 1808.505859][T27399] hsr_slave_1: entered promiscuous mode [ 1808.512278][T27399] debugfs: 'hsr0' already exists in 'hsr' [ 1808.518543][T27399] Cannot create hsr debugfs directory [ 1808.979845][T27399] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1809.103442][T19440] Bluetooth: hci2: command tx timeout [ 1809.270308][T27399] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1809.395476][T27589] xt_nfacct: accounting object `syz0' does not exist [ 1809.566980][T27399] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1809.689981][T27399] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1809.861799][T27611] syzkaller0: entered promiscuous mode [ 1809.867677][T27611] syzkaller0: entered allmulticast mode [ 1810.194342][T27613] syzkaller0: entered promiscuous mode [ 1810.204907][T27613] syzkaller0: entered allmulticast mode [ 1810.238733][T27620] FAULT_INJECTION: forcing a failure. [ 1810.238733][T27620] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.268335][T27620] CPU: 1 UID: 0 PID: 27620 Comm: syz.3.15390 Not tainted syzkaller #0 PREEMPT(full) [ 1810.268361][T27620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1810.268373][T27620] Call Trace: [ 1810.268382][T27620] [ 1810.268390][T27620] dump_stack_lvl+0xe8/0x150 [ 1810.268416][T27620] should_fail_ex+0x412/0x560 [ 1810.268446][T27620] should_failslab+0xa8/0x100 [ 1810.268475][T27620] __kmalloc_cache_noprof+0x88/0x660 [ 1810.268508][T27620] ? sctp_add_bind_addr+0x8c/0x370 [ 1810.268536][T27620] sctp_add_bind_addr+0x8c/0x370 [ 1810.268562][T27620] sctp_copy_local_addr_list+0x314/0x4f0 [ 1810.268587][T27620] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1810.268609][T27620] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1810.268632][T27620] ? sctp_v6_is_any+0x64/0x80 [ 1810.268657][T27620] ? sctp_copy_one_addr+0x93/0x360 [ 1810.268682][T27620] sctp_bind_addr_copy+0xb3/0x3c0 [ 1810.268704][T27620] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1810.268727][T27620] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1810.268756][T27620] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1810.268788][T27620] ? __local_bh_enable_ip+0xd0/0x130 [ 1810.268806][T27620] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1810.268832][T27620] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1810.268855][T27620] sctp_sendmsg+0x1528/0x2c10 [ 1810.268897][T27620] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1810.268926][T27620] ? aa_sk_perm+0x6d5/0x900 [ 1810.268947][T27620] ? __might_fault+0xaf/0x130 [ 1810.268976][T27620] ? __pfx_aa_sk_perm+0x10/0x10 [ 1810.269005][T27620] ? sock_rps_record_flow+0x19/0x350 [ 1810.269027][T27620] ? __pfx_inet_sendmsg+0x10/0x10 [ 1810.269051][T27620] ? inet_sendmsg+0x2f4/0x370 [ 1810.269073][T27620] ? __pfx_inet_sendmsg+0x10/0x10 [ 1810.269097][T27620] __sys_sendto+0x5de/0x710 [ 1810.269120][T27620] ? __pfx___sys_sendto+0x10/0x10 [ 1810.269138][T27620] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1810.269172][T27620] ? __fget_files+0x3a0/0x420 [ 1810.269201][T27620] ? ksys_write+0x242/0x270 [ 1810.269226][T27620] ? __pfx_ksys_write+0x10/0x10 [ 1810.269253][T27620] __x64_sys_sendto+0xde/0x100 [ 1810.269273][T27620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.269291][T27620] do_syscall_64+0x15f/0xf80 [ 1810.269309][T27620] ? trace_irq_disable+0x3b/0x140 [ 1810.269332][T27620] ? clear_bhb_loop+0x40/0x90 [ 1810.269353][T27620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.269371][T27620] RIP: 0033:0x7fb30279cdd9 [ 1810.269387][T27620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1810.269401][T27620] RSP: 002b:00007fb303740028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1810.269419][T27620] RAX: ffffffffffffffda RBX: 00007fb302a15fa0 RCX: 00007fb30279cdd9 [ 1810.269432][T27620] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 1810.269444][T27620] RBP: 00007fb303740090 R08: 0000200000000140 R09: 000000000000001c [ 1810.269457][T27620] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 1810.269468][T27620] R13: 00007fb302a16038 R14: 00007fb302a15fa0 R15: 00007ffc3d1f0d58 [ 1810.269505][T27620] [ 1810.734268][T27631] __nla_validate_parse: 6 callbacks suppressed [ 1810.734287][T27631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15392'. [ 1811.191320][T19440] Bluetooth: hci2: command tx timeout [ 1813.273000][T19440] Bluetooth: hci2: command tx timeout [ 1813.539295][T27399] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1813.548879][T27399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1813.557522][T27399] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1813.568909][T27399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1813.674631][T27399] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1813.699972][T27399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1813.722605][T27399] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1813.781879][T27399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1814.051128][T27666] xt_nfacct: accounting object `syz0' does not exist [ 1814.112276][T27399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1814.210589][T27399] 8021q: adding VLAN 0 to HW filter on device team0 [ 1814.270836][T14070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.278072][T14070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1814.348654][T14070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.355889][T14070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1814.987544][T27707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15413'. [ 1815.010806][T27695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15409'. [ 1815.057179][T27695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15409'. [ 1815.210898][T27695] bond2: entered promiscuous mode [ 1815.216572][T27695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1815.500669][T27399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1815.535130][T27735] netlink: 'syz.0.15417': attribute type 9 has an invalid length. [ 1815.578031][T27746] xt_nfacct: accounting object `syz0' does not exist [ 1815.702577][T27735] bridge1: entered allmulticast mode [ 1815.926355][T27763] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15424'. [ 1816.142311][T27781] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15425'. [ 1816.209185][T27768] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15425'. [ 1816.243969][T27399] veth0_vlan: entered promiscuous mode [ 1816.363013][T27768] bond1: entered promiscuous mode [ 1816.376013][T27768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1816.396003][T27399] veth1_vlan: entered promiscuous mode [ 1816.454303][T27399] veth0_macvtap: entered promiscuous mode [ 1816.478179][T27399] veth1_macvtap: entered promiscuous mode [ 1816.536910][T27801] netlink: 'syz.0.15433': attribute type 9 has an invalid length. [ 1816.549694][T27399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1816.599192][T27801] bridge2: entered allmulticast mode [ 1816.631346][T27399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1816.671191][T14070] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.693737][T14070] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.712209][T14070] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.747284][T14070] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.946470][T27814] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 1817.051622][T14070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1817.078666][T14070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1817.194608][T14068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1817.233428][T14068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1817.276333][T27826] FAULT_INJECTION: forcing a failure. [ 1817.276333][T27826] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.315786][T27826] CPU: 1 UID: 0 PID: 27826 Comm: syz.0.15442 Not tainted syzkaller #0 PREEMPT(full) [ 1817.315811][T27826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1817.315823][T27826] Call Trace: [ 1817.315831][T27826] [ 1817.315840][T27826] dump_stack_lvl+0xe8/0x150 [ 1817.315867][T27826] should_fail_ex+0x412/0x560 [ 1817.315895][T27826] should_failslab+0xa8/0x100 [ 1817.315924][T27826] __kmalloc_node_noprof+0xf0/0x7c0 [ 1817.315948][T27826] ? __pfx___up_read+0x10/0x10 [ 1817.315976][T27826] ? crypto_create_tfm_node+0x83/0x3f0 [ 1817.316002][T27826] crypto_create_tfm_node+0x83/0x3f0 [ 1817.316025][T27826] crypto_spawn_tfm2+0x5c/0x90 [ 1817.316051][T27826] aead_init_geniv+0xa6/0x170 [ 1817.316074][T27826] crypto_create_tfm_node+0x18c/0x3f0 [ 1817.316100][T27826] crypto_alloc_tfm_node+0x172/0x3f0 [ 1817.316130][T27826] esp_init_state+0x3c3/0x1240 [ 1817.316150][T27826] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1817.316172][T27826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.316202][T27826] ? __pfx_esp_init_state+0x10/0x10 [ 1817.316255][T27826] ? __xfrm_init_state+0x842/0x1460 [ 1817.316278][T27826] __xfrm_init_state+0xac9/0x1460 [ 1817.316294][T27826] ? __xfrm_init_state+0x842/0x1460 [ 1817.316316][T27826] xfrm_add_sa+0x3073/0x4230 [ 1817.316351][T27826] ? __pfx_xfrm_add_sa+0x10/0x10 [ 1817.316375][T27826] ? apparmor_capable+0x126/0x170 [ 1817.316407][T27826] ? __nla_parse+0x40/0x60 [ 1817.316435][T27826] xfrm_user_rcv_msg+0x7ae/0xc40 [ 1817.316467][T27826] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1817.316527][T27826] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1817.316552][T27826] ? rcu_is_watching+0x15/0xb0 [ 1817.316573][T27826] ? trace_contention_end+0x3d/0x140 [ 1817.316595][T27826] ? __mutex_lock+0x319/0x1550 [ 1817.316623][T27826] netlink_rcv_skb+0x232/0x4b0 [ 1817.316647][T27826] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1817.316673][T27826] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1817.316710][T27826] ? netlink_deliver_tap+0x2e/0x1b0 [ 1817.316730][T27826] ? netlink_deliver_tap+0x2e/0x1b0 [ 1817.316754][T27826] xfrm_netlink_rcv+0x79/0x90 [ 1817.316784][T27826] netlink_unicast+0x75c/0x8e0 [ 1817.316812][T27826] netlink_sendmsg+0x813/0xb40 [ 1817.316843][T27826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1817.316867][T27826] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1817.316891][T27826] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1817.316917][T27826] ____sys_sendmsg+0x972/0x9f0 [ 1817.316940][T27826] ? __might_fault+0xaf/0x130 [ 1817.316970][T27826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1817.317002][T27826] ? import_iovec+0x73/0xa0 [ 1817.317030][T27826] ___sys_sendmsg+0x2a5/0x360 [ 1817.317051][T27826] ? __lock_acquire+0x6b5/0x2cf0 [ 1817.317075][T27826] ? __pfx____sys_sendmsg+0x10/0x10 [ 1817.317133][T27826] ? __fget_files+0x2a/0x420 [ 1817.317153][T27826] ? __fget_files+0x3a0/0x420 [ 1817.317183][T27826] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1817.317208][T27826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1817.317241][T27826] ? __pfx_ksys_write+0x10/0x10 [ 1817.317274][T27826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.317295][T27826] do_syscall_64+0x15f/0xf80 [ 1817.317315][T27826] ? trace_irq_disable+0x3b/0x140 [ 1817.317341][T27826] ? clear_bhb_loop+0x40/0x90 [ 1817.317364][T27826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.317382][T27826] RIP: 0033:0x7fc0fc39cdd9 [ 1817.317399][T27826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1817.317415][T27826] RSP: 002b:00007fc0fd1d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1817.317435][T27826] RAX: ffffffffffffffda RBX: 00007fc0fc615fa0 RCX: 00007fc0fc39cdd9 [ 1817.317449][T27826] RDX: 0000000000002014 RSI: 0000200000000000 RDI: 0000000000000004 [ 1817.317461][T27826] RBP: 00007fc0fd1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1817.317472][T27826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1817.317482][T27826] R13: 00007fc0fc616038 R14: 00007fc0fc615fa0 R15: 00007ffdd7a59d38 [ 1817.317510][T27826] [ 1818.368064][T27857] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15451'. [ 1818.530851][T27865] netlink: 48 bytes leftover after parsing attributes in process `syz.5.15454'. [ 1818.568187][T27867] netlink: 120 bytes leftover after parsing attributes in process `syz.0.15455'. [ 1818.709273][T27873] FAULT_INJECTION: forcing a failure. [ 1818.709273][T27873] name failslab, interval 1, probability 0, space 0, times 0 [ 1818.724682][T27874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15457'. [ 1818.739763][T27873] CPU: 0 UID: 0 PID: 27873 Comm: syz.0.15458 Not tainted syzkaller #0 PREEMPT(full) [ 1818.739789][T27873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1818.739801][T27873] Call Trace: [ 1818.739808][T27873] [ 1818.739816][T27873] dump_stack_lvl+0xe8/0x150 [ 1818.739843][T27873] should_fail_ex+0x412/0x560 [ 1818.739878][T27873] should_failslab+0xa8/0x100 [ 1818.739907][T27873] __kmalloc_node_noprof+0xf0/0x7c0 [ 1818.739931][T27873] ? __pfx___up_read+0x10/0x10 [ 1818.739954][T27873] ? crypto_create_tfm_node+0x83/0x3f0 [ 1818.739981][T27873] crypto_create_tfm_node+0x83/0x3f0 [ 1818.740007][T27873] crypto_spawn_tfm2+0x5c/0x90 [ 1818.740032][T27873] crypto_authenc_init_tfm+0x69/0x1c0 [ 1818.740058][T27873] crypto_create_tfm_node+0x18c/0x3f0 [ 1818.740084][T27873] crypto_spawn_tfm2+0x5c/0x90 [ 1818.740109][T27873] aead_init_geniv+0xa6/0x170 [ 1818.740130][T27873] crypto_create_tfm_node+0x18c/0x3f0 [ 1818.740154][T27873] crypto_alloc_tfm_node+0x172/0x3f0 [ 1818.740183][T27873] esp_init_state+0x63c/0x1240 [ 1818.740215][T27873] ? __pfx_esp_init_state+0x10/0x10 [ 1818.740250][T27873] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1818.740273][T27873] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 1818.740303][T27873] ? __xfrm_init_state+0x842/0x1460 [ 1818.740325][T27873] __xfrm_init_state+0xac9/0x1460 [ 1818.740341][T27873] ? __xfrm_init_state+0x842/0x1460 [ 1818.740363][T27873] xfrm_init_state+0x18/0xa0 [ 1818.740387][T27873] pfkey_add+0x1d34/0x2df0 [ 1818.740430][T27873] ? __pfx_pfkey_add+0x10/0x10 [ 1818.740466][T27873] pfkey_sendmsg+0xc56/0x1120 [ 1818.740487][T27873] ? unwind_next_frame+0xa6/0x2550 [ 1818.740523][T27873] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1818.740566][T27873] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1818.740589][T27873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1818.740615][T27873] ____sys_sendmsg+0x972/0x9f0 [ 1818.740636][T27873] ? __might_fault+0xaf/0x130 [ 1818.740664][T27873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1818.740695][T27873] ? import_iovec+0x73/0xa0 [ 1818.740723][T27873] ___sys_sendmsg+0x2a5/0x360 [ 1818.740739][T27874] netlink: 'syz.4.15457': attribute type 13 has an invalid length. [ 1818.740745][T27873] ? __lock_acquire+0x6b5/0x2cf0 [ 1818.740769][T27873] ? __pfx____sys_sendmsg+0x10/0x10 [ 1818.740819][T27873] ? __fget_files+0x2a/0x420 [ 1818.740839][T27873] ? __fget_files+0x3a0/0x420 [ 1818.740876][T27873] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1818.740902][T27873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1818.740934][T27873] ? __pfx_ksys_write+0x10/0x10 [ 1818.740966][T27873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.740985][T27873] do_syscall_64+0x15f/0xf80 [ 1818.741006][T27873] ? trace_irq_disable+0x3b/0x140 [ 1818.741031][T27873] ? clear_bhb_loop+0x40/0x90 [ 1818.741053][T27873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.741070][T27873] RIP: 0033:0x7fc0fc39cdd9 [ 1818.741089][T27873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1818.741102][T27873] RSP: 002b:00007fc0fd1d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1818.741121][T27873] RAX: ffffffffffffffda RBX: 00007fc0fc615fa0 RCX: 00007fc0fc39cdd9 [ 1818.741134][T27873] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1818.741146][T27873] RBP: 00007fc0fd1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1818.741160][T27873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1818.741171][T27873] R13: 00007fc0fc616038 R14: 00007fc0fc615fa0 R15: 00007ffdd7a59d38 [ 1818.741200][T27873] [ 1818.780043][T27873] netlink: 488 bytes leftover after parsing attributes in process `syz.0.15458'. [ 1818.804821][T27874] netlink: 'syz.4.15457': attribute type 17 has an invalid length. [ 1818.828270][T27873] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.15458'. [ 1818.862460][T27876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15457'. [ 1818.945266][T27877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1819.127194][T27877] IPv6: NLM_F_CREATE should be set when creating new route [ 1819.134452][T27877] IPv6: NLM_F_CREATE should be set when creating new route [ 1819.477509][T27881] syzkaller1: entered promiscuous mode [ 1819.487875][T27881] syzkaller1: entered allmulticast mode [ 1819.895152][T27900] Cannot find set identified by id 0 to match [ 1820.104084][T27915] FAULT_INJECTION: forcing a failure. [ 1820.104084][T27915] name failslab, interval 1, probability 0, space 0, times 0 [ 1820.132982][T27915] CPU: 0 UID: 0 PID: 27915 Comm: syz.6.15471 Not tainted syzkaller #0 PREEMPT(full) [ 1820.133007][T27915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1820.133018][T27915] Call Trace: [ 1820.133025][T27915] [ 1820.133033][T27915] dump_stack_lvl+0xe8/0x150 [ 1820.133059][T27915] should_fail_ex+0x412/0x560 [ 1820.133085][T27915] should_failslab+0xa8/0x100 [ 1820.133113][T27915] __kmalloc_cache_noprof+0x88/0x660 [ 1820.133137][T27915] ? sctp_add_bind_addr+0x8c/0x370 [ 1820.133163][T27915] sctp_add_bind_addr+0x8c/0x370 [ 1820.133188][T27915] sctp_copy_local_addr_list+0x314/0x4f0 [ 1820.133213][T27915] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1820.133234][T27915] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1820.133256][T27915] ? sctp_v6_is_any+0x64/0x80 [ 1820.133281][T27915] ? sctp_copy_one_addr+0x93/0x360 [ 1820.133304][T27915] sctp_bind_addr_copy+0xb3/0x3c0 [ 1820.133326][T27915] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1820.133346][T27915] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1820.133371][T27915] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1820.133397][T27915] ? __local_bh_enable_ip+0xd0/0x130 [ 1820.133411][T27915] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1820.133432][T27915] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1820.133450][T27915] sctp_sendmsg+0x1528/0x2c10 [ 1820.133483][T27915] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1820.133514][T27915] ? aa_sk_perm+0x6d5/0x900 [ 1820.133531][T27915] ? __might_fault+0xaf/0x130 [ 1820.133554][T27915] ? __pfx_aa_sk_perm+0x10/0x10 [ 1820.133574][T27915] ? sock_rps_record_flow+0x19/0x350 [ 1820.133594][T27915] ? __pfx_inet_sendmsg+0x10/0x10 [ 1820.133615][T27915] ? inet_sendmsg+0x2f4/0x370 [ 1820.133635][T27915] ? __pfx_inet_sendmsg+0x10/0x10 [ 1820.133656][T27915] __sys_sendto+0x5de/0x710 [ 1820.133676][T27915] ? __pfx___sys_sendto+0x10/0x10 [ 1820.133691][T27915] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1820.133719][T27915] ? __fget_files+0x3a0/0x420 [ 1820.133745][T27915] ? ksys_write+0x242/0x270 [ 1820.133768][T27915] ? __pfx_ksys_write+0x10/0x10 [ 1820.133792][T27915] __x64_sys_sendto+0xde/0x100 [ 1820.133809][T27915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.133826][T27915] do_syscall_64+0x15f/0xf80 [ 1820.133842][T27915] ? trace_irq_disable+0x3b/0x140 [ 1820.133863][T27915] ? clear_bhb_loop+0x40/0x90 [ 1820.133881][T27915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.133895][T27915] RIP: 0033:0x7f7538d9cdd9 [ 1820.133910][T27915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1820.133923][T27915] RSP: 002b:00007f7539cba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1820.133939][T27915] RAX: ffffffffffffffda RBX: 00007f7539015fa0 RCX: 00007f7538d9cdd9 [ 1820.133950][T27915] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 1820.133960][T27915] RBP: 00007f7539cba090 R08: 000020000005ffe4 R09: 000000000000001c [ 1820.133970][T27915] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 1820.133979][T27915] R13: 00007f7539016038 R14: 00007f7539015fa0 R15: 00007ffd1014d348 [ 1820.134003][T27915] [ 1820.600054][T27916] xt_hashlimit: size too large, truncated to 1048576 [ 1820.682549][T27924] netlink: 'syz.6.15473': attribute type 4 has an invalid length. [ 1821.094560][T27941] __nla_validate_parse: 4 callbacks suppressed [ 1821.094580][T27941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15479'. [ 1821.154044][T27941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15479'. [ 1821.361570][T27946] netlink: 276 bytes leftover after parsing attributes in process `syz.5.15480'. [ 1821.386888][T27941] bond2: entered promiscuous mode [ 1821.393964][T27941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1821.414906][T27949] netlink: 120 bytes leftover after parsing attributes in process `syz.0.15481'. [ 1821.568056][T27955] bridge0: port 3(syz_tun) entered blocking state [ 1821.580278][T27955] bridge0: port 3(syz_tun) entered disabled state [ 1821.587525][T27955] syz_tun: entered allmulticast mode [ 1821.600505][T27955] syz_tun: entered promiscuous mode [ 1821.610244][T27955] bridge0: port 3(syz_tun) entered blocking state [ 1821.616816][T27955] bridge0: port 3(syz_tun) entered forwarding state [ 1821.641093][T27958] netlink: 'syz.3.15485': attribute type 1 has an invalid length. [ 1821.732291][T27953] bond1: left promiscuous mode [ 1821.748860][T27964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15485'. [ 1821.760927][T27955] veth1_to_bridge: entered allmulticast mode [ 1821.773732][T27955] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 1821.803433][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1821.869720][T27958] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1821.916708][T27960] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1821.967260][T27964] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1821.979135][T27964] bond3: (slave batadv1): making interface the new active one [ 1822.006893][T27964] batadv1: entered promiscuous mode [ 1822.016996][T27964] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 1822.065494][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1822.177111][T27977] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15490'. [ 1822.236742][T27981] netlink: 72 bytes leftover after parsing attributes in process `syz.5.15492'. [ 1822.278342][T27983] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1822.303035][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1822.335343][T27984] bond2: option arp_interval: invalid value (18446744073709551615) [ 1822.344264][T27984] bond2: option arp_interval: allowed values 0 - 2147483647 [ 1822.358434][T27984] bond2 (unregistering): Released all slaves [ 1822.559176][T27991] netlink: 120 bytes leftover after parsing attributes in process `syz.0.15494'. [ 1822.597550][T27996] vlan2: entered allmulticast mode [ 1822.603749][T27996] bridge0: port 3(vlan2) entered blocking state [ 1822.611838][T27996] bridge0: port 3(vlan2) entered disabled state [ 1822.622515][T27996] vlan2: entered promiscuous mode [ 1822.669341][T27993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15495'. [ 1822.682065][T27993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15495'. [ 1822.724078][T27993] bond4: entered promiscuous mode [ 1822.754454][T27993] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1822.777375][T28004] FAULT_INJECTION: forcing a failure. [ 1822.777375][T28004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1822.795726][T28004] CPU: 1 UID: 0 PID: 28004 Comm: syz.5.15498 Not tainted syzkaller #0 PREEMPT(full) [ 1822.795749][T28004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1822.795760][T28004] Call Trace: [ 1822.795768][T28004] [ 1822.795776][T28004] dump_stack_lvl+0xe8/0x150 [ 1822.795800][T28004] should_fail_ex+0x412/0x560 [ 1822.795827][T28004] _copy_from_user+0x2d/0xb0 [ 1822.795852][T28004] ____sys_sendmsg+0x308/0x9f0 [ 1822.795884][T28004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1822.795915][T28004] ? import_iovec+0x73/0xa0 [ 1822.795943][T28004] ___sys_sendmsg+0x2a5/0x360 [ 1822.795964][T28004] ? __lock_acquire+0x6b5/0x2cf0 [ 1822.795988][T28004] ? __pfx____sys_sendmsg+0x10/0x10 [ 1822.796016][T28004] ? kstrtouint+0x6e/0xe0 [ 1822.796060][T28004] ? __fget_files+0x2a/0x420 [ 1822.796081][T28004] ? __fget_files+0x3a0/0x420 [ 1822.796112][T28004] __sys_sendmmsg+0x27c/0x4e0 [ 1822.796141][T28004] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1822.796162][T28004] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1822.796208][T28004] ? ksys_write+0x242/0x270 [ 1822.796235][T28004] ? __pfx_ksys_write+0x10/0x10 [ 1822.796263][T28004] __x64_sys_sendmmsg+0xa0/0xc0 [ 1822.796281][T28004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.796294][T28004] do_syscall_64+0x15f/0xf80 [ 1822.796309][T28004] ? trace_irq_disable+0x3b/0x140 [ 1822.796340][T28004] ? clear_bhb_loop+0x40/0x90 [ 1822.796363][T28004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.796380][T28004] RIP: 0033:0x7fbcae59cdd9 [ 1822.796397][T28004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1822.796414][T28004] RSP: 002b:00007fbcaf435028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1822.796434][T28004] RAX: ffffffffffffffda RBX: 00007fbcae815fa0 RCX: 00007fbcae59cdd9 [ 1822.796448][T28004] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 1822.796460][T28004] RBP: 00007fbcaf435090 R08: 0000000000000000 R09: 0000000000000000 [ 1822.796475][T28004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1822.796485][T28004] R13: 00007fbcae816038 R14: 00007fbcae815fa0 R15: 00007ffd7d6b7408 [ 1822.796513][T28004] [ 1823.139368][T28011] syzkaller1: entered promiscuous mode [ 1823.144988][T28011] syzkaller1: entered allmulticast mode [ 1823.228360][T28006] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1823.505931][T28023] syzkaller0: entered promiscuous mode [ 1823.515388][T28023] syzkaller0: entered allmulticast mode [ 1823.776789][T28032] syzkaller0: entered promiscuous mode [ 1823.791574][T28032] syzkaller0: entered allmulticast mode [ 1824.003827][T28040] bond3: entered promiscuous mode [ 1824.009475][T28040] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1824.127858][T28056] FAULT_INJECTION: forcing a failure. [ 1824.127858][T28056] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.144346][T28056] CPU: 0 UID: 0 PID: 28056 Comm: syz.6.15517 Not tainted syzkaller #0 PREEMPT(full) [ 1824.144371][T28056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1824.144382][T28056] Call Trace: [ 1824.144389][T28056] [ 1824.144398][T28056] dump_stack_lvl+0xe8/0x150 [ 1824.144424][T28056] should_fail_ex+0x412/0x560 [ 1824.144452][T28056] should_failslab+0xa8/0x100 [ 1824.144487][T28056] __kmalloc_node_noprof+0xf0/0x7c0 [ 1824.144513][T28056] ? alloc_slab_obj_exts+0xbf/0x250 [ 1824.144540][T28056] alloc_slab_obj_exts+0xbf/0x250 [ 1824.144565][T28056] __memcg_slab_post_alloc_hook+0x5c4/0xe80 [ 1824.144609][T28056] kmem_cache_alloc_node_noprof+0x40e/0x690 [ 1824.144634][T28056] ? __alloc_skb+0x1d0/0x7d0 [ 1824.144654][T28056] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 1824.144681][T28056] __alloc_skb+0x1d0/0x7d0 [ 1824.144707][T28056] alloc_skb_with_frags+0xc8/0x760 [ 1824.144732][T28056] ? up_write+0x1ab/0x410 [ 1824.144761][T28056] sock_alloc_send_pskb+0x878/0x990 [ 1824.144804][T28056] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1824.144827][T28056] ? tomoyo_check_open_permission+0x38e/0x470 [ 1824.144855][T28056] ? __lock_acquire+0x6b5/0x2cf0 [ 1824.144877][T28056] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1824.144905][T28056] unix_dgram_sendmsg+0x460/0x18d0 [ 1824.144949][T28056] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1824.144975][T28056] ? aa_sock_msg_perm+0xda/0x1b0 [ 1824.144998][T28056] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 1824.145022][T28056] ____sys_sendmsg+0x972/0x9f0 [ 1824.145044][T28056] ? __might_fault+0xaf/0x130 [ 1824.145071][T28056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1824.145101][T28056] ? import_iovec+0x73/0xa0 [ 1824.145128][T28056] ___sys_sendmsg+0x2a5/0x360 [ 1824.145149][T28056] ? __lock_acquire+0x6b5/0x2cf0 [ 1824.145172][T28056] ? __pfx____sys_sendmsg+0x10/0x10 [ 1824.145200][T28056] ? kstrtouint+0x6e/0xe0 [ 1824.145246][T28056] ? __fget_files+0x2a/0x420 [ 1824.145266][T28056] ? __fget_files+0x3a0/0x420 [ 1824.145297][T28056] __sys_sendmmsg+0x27c/0x4e0 [ 1824.145326][T28056] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1824.145347][T28056] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1824.145395][T28056] ? ksys_write+0x242/0x270 [ 1824.145422][T28056] ? __pfx_ksys_write+0x10/0x10 [ 1824.145452][T28056] __x64_sys_sendmmsg+0xa0/0xc0 [ 1824.145478][T28056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.145496][T28056] do_syscall_64+0x15f/0xf80 [ 1824.145514][T28056] ? trace_irq_disable+0x3b/0x140 [ 1824.145539][T28056] ? clear_bhb_loop+0x40/0x90 [ 1824.145560][T28056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.145577][T28056] RIP: 0033:0x7f7538d9cdd9 [ 1824.145594][T28056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1824.145609][T28056] RSP: 002b:00007f7539cba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1824.145627][T28056] RAX: ffffffffffffffda RBX: 00007f7539015fa0 RCX: 00007f7538d9cdd9 [ 1824.145638][T28056] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 1824.145650][T28056] RBP: 00007f7539cba090 R08: 0000000000000000 R09: 0000000000000000 [ 1824.145660][T28056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1824.145670][T28056] R13: 00007f7539016038 R14: 00007f7539015fa0 R15: 00007ffd1014d348 [ 1824.145695][T28056] [ 1824.634217][T28070] syzkaller1: entered promiscuous mode [ 1824.649946][T28070] syzkaller1: entered allmulticast mode [ 1824.685677][T28064] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1824.919081][T28080] bond7: entered promiscuous mode [ 1824.924803][T28080] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1825.279587][T28113] xt_nfacct: accounting object `syz0' does not exist [ 1825.362671][T28115] netlink: 'syz.0.15535': attribute type 1 has an invalid length. [ 1825.420428][T28115] bond4: entered promiscuous mode [ 1825.434312][T28115] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1825.512927][T28117] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1825.537112][T28117] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1825.596527][T28117] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1825.638746][T28117] bond4: (slave wireguard0): making interface the new active one [ 1825.655238][T28117] wireguard0: entered promiscuous mode [ 1825.673487][T28117] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 1825.761594][T28135] tun0: tun_chr_ioctl cmd 1074025675 [ 1825.774448][T28135] tun0: persist enabled [ 1825.786606][T28135] tun0: tun_chr_ioctl cmd 1074025675 [ 1825.798027][T28135] tun0: persist disabled [ 1825.826548][T28135] tun0: tun_chr_ioctl cmd 2147774992 [ 1825.845229][T28140] syzkaller0: entered promiscuous mode [ 1825.850830][T28140] syzkaller0: entered allmulticast mode [ 1826.138306][T28158] netlink: 'syz.5.15551': attribute type 13 has an invalid length. [ 1826.159651][T28158] netlink: 'syz.5.15551': attribute type 17 has an invalid length. [ 1826.267229][T28165] __nla_validate_parse: 11 callbacks suppressed [ 1826.267252][T28165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15551'. [ 1826.430767][T28179] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1826.897665][T28158] bridge0: port 3(vlan2) entered blocking state [ 1826.904172][T28158] bridge0: port 3(vlan2) entered forwarding state [ 1826.921010][T28173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15552'. [ 1826.933845][T28168] syzkaller1: entered promiscuous mode [ 1826.940196][T28168] syzkaller1: entered allmulticast mode [ 1827.146949][T28194] netlink: 288 bytes leftover after parsing attributes in process `syz.5.15560'. [ 1827.158377][T28196] netlink: 'syz.4.15563': attribute type 8 has an invalid length. [ 1827.293523][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1827.340846][T28204] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15566'. [ 1827.426339][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1827.624944][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1827.743789][T28224] xt_nfacct: accounting object `syz0' does not exist [ 1828.072345][T28229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15574'. [ 1828.350212][T28236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15576'. [ 1828.402629][T28244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15576'. [ 1828.499253][T28244] bond1: entered promiscuous mode [ 1828.511222][T28244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1828.585622][T28256] netlink: 'syz.5.15584': attribute type 58 has an invalid length. [ 1829.132280][T28287] FAULT_INJECTION: forcing a failure. [ 1829.132280][T28287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1829.152730][T28287] CPU: 1 UID: 0 PID: 28287 Comm: syz.3.15596 Not tainted syzkaller #0 PREEMPT(full) [ 1829.152759][T28287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1829.152770][T28287] Call Trace: [ 1829.152777][T28287] [ 1829.152784][T28287] dump_stack_lvl+0xe8/0x150 [ 1829.152808][T28287] should_fail_ex+0x412/0x560 [ 1829.152835][T28287] _copy_from_user+0x2d/0xb0 [ 1829.152860][T28287] ___sys_sendmsg+0x1c6/0x360 [ 1829.152882][T28287] ? __lock_acquire+0x6b5/0x2cf0 [ 1829.152914][T28287] ? __pfx____sys_sendmsg+0x10/0x10 [ 1829.152970][T28287] ? __fget_files+0x2a/0x420 [ 1829.152990][T28287] ? __fget_files+0x3a0/0x420 [ 1829.153020][T28287] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1829.153046][T28287] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1829.153077][T28287] ? __pfx_ksys_write+0x10/0x10 [ 1829.153109][T28287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.153129][T28287] do_syscall_64+0x15f/0xf80 [ 1829.153149][T28287] ? trace_irq_disable+0x3b/0x140 [ 1829.153175][T28287] ? clear_bhb_loop+0x40/0x90 [ 1829.153196][T28287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.153214][T28287] RIP: 0033:0x7fb30279cdd9 [ 1829.153231][T28287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1829.153246][T28287] RSP: 002b:00007fb303740028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1829.153266][T28287] RAX: ffffffffffffffda RBX: 00007fb302a15fa0 RCX: 00007fb30279cdd9 [ 1829.153279][T28287] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 1829.153290][T28287] RBP: 00007fb303740090 R08: 0000000000000000 R09: 0000000000000000 [ 1829.153302][T28287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1829.153313][T28287] R13: 00007fb302a16038 R14: 00007fb302a15fa0 R15: 00007ffc3d1f0d58 [ 1829.153343][T28287] [ 1829.640932][T28310] vlan0: entered promiscuous mode [ 1829.979742][T28323] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15609'. [ 1830.290179][T28338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15615'. [ 1830.498697][T28349] netlink: 48 bytes leftover after parsing attributes in process `syz.5.15618'. [ 1830.668043][T28357] FAULT_INJECTION: forcing a failure. [ 1830.668043][T28357] name failslab, interval 1, probability 0, space 0, times 0 [ 1830.687068][T28360] netlink: 'syz.4.15625': attribute type 5 has an invalid length. [ 1830.704342][T28357] CPU: 0 UID: 0 PID: 28357 Comm: syz.0.15623 Not tainted syzkaller #0 PREEMPT(full) [ 1830.704365][T28357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1830.704376][T28357] Call Trace: [ 1830.704384][T28357] [ 1830.704391][T28357] dump_stack_lvl+0xe8/0x150 [ 1830.704418][T28357] should_fail_ex+0x412/0x560 [ 1830.704446][T28357] should_failslab+0xa8/0x100 [ 1830.704472][T28357] ? skb_clone+0x212/0x3a0 [ 1830.704495][T28357] kmem_cache_alloc_noprof+0x87/0x650 [ 1830.704519][T28357] ? __netlink_lookup+0xc6/0x8b0 [ 1830.704548][T28357] skb_clone+0x212/0x3a0 [ 1830.704573][T28357] __netlink_deliver_tap+0x404/0x850 [ 1830.704606][T28357] ? netlink_deliver_tap+0x2e/0x1b0 [ 1830.704630][T28357] netlink_deliver_tap+0x19c/0x1b0 [ 1830.704652][T28357] netlink_unicast+0x730/0x8e0 [ 1830.704682][T28357] netlink_sendmsg+0x813/0xb40 [ 1830.704714][T28357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1830.704740][T28357] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1830.704763][T28357] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1830.704791][T28357] ____sys_sendmsg+0x972/0x9f0 [ 1830.704814][T28357] ? __might_fault+0xaf/0x130 [ 1830.704844][T28357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1830.704875][T28357] ? import_iovec+0x73/0xa0 [ 1830.704897][T28357] ___sys_sendmsg+0x2a5/0x360 [ 1830.704913][T28357] ? __lock_acquire+0x6b5/0x2cf0 [ 1830.704930][T28357] ? __pfx____sys_sendmsg+0x10/0x10 [ 1830.704974][T28357] ? __fget_files+0x2a/0x420 [ 1830.704993][T28357] ? __fget_files+0x3a0/0x420 [ 1830.705031][T28357] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1830.705057][T28357] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1830.705092][T28357] ? __pfx_ksys_write+0x10/0x10 [ 1830.705125][T28357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1830.705146][T28357] do_syscall_64+0x15f/0xf80 [ 1830.705166][T28357] ? trace_irq_disable+0x3b/0x140 [ 1830.705189][T28357] ? clear_bhb_loop+0x40/0x90 [ 1830.705210][T28357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1830.705226][T28357] RIP: 0033:0x7fc0fc39cdd9 [ 1830.705242][T28357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1830.705254][T28357] RSP: 002b:00007fc0fd1d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1830.705271][T28357] RAX: ffffffffffffffda RBX: 00007fc0fc615fa0 RCX: 00007fc0fc39cdd9 [ 1830.705284][T28357] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1830.705294][T28357] RBP: 00007fc0fd1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1830.705305][T28357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1830.705317][T28357] R13: 00007fc0fc616038 R14: 00007fc0fc615fa0 R15: 00007ffdd7a59d38 [ 1830.705346][T28357] [ 1830.994061][T28357] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1831.325294][T28382] __nla_validate_parse: 2 callbacks suppressed [ 1831.325312][T28382] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15634'. [ 1831.339071][T28384] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15633'. [ 1831.350747][T28384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15633'. [ 1831.539095][T28395] netlink: get zone limit has 4 unknown bytes [ 1831.558879][T28395] netlink: 68 bytes leftover after parsing attributes in process `syz.5.15639'. [ 1831.696480][T28399] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15641'. [ 1831.706730][T28399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15641'. [ 1832.201097][T28432] FAULT_INJECTION: forcing a failure. [ 1832.201097][T28432] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.223340][T28432] CPU: 1 UID: 0 PID: 28432 Comm: syz.3.15656 Not tainted syzkaller #0 PREEMPT(full) [ 1832.223365][T28432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1832.223376][T28432] Call Trace: [ 1832.223383][T28432] [ 1832.223391][T28432] dump_stack_lvl+0xe8/0x150 [ 1832.223417][T28432] should_fail_ex+0x412/0x560 [ 1832.223443][T28432] should_failslab+0xa8/0x100 [ 1832.223469][T28432] __kmalloc_noprof+0xe8/0x760 [ 1832.223492][T28432] ? fib_create_info+0x1723/0x31f0 [ 1832.223524][T28432] fib_create_info+0x1723/0x31f0 [ 1832.223577][T28432] fib_table_insert+0xc8/0x1b50 [ 1832.223603][T28432] ? fib_magic+0x146/0x510 [ 1832.223627][T28432] ? fib_magic+0x146/0x510 [ 1832.223652][T28432] ? fib_new_table+0x10a/0x2d0 [ 1832.223677][T28432] fib_magic+0x434/0x510 [ 1832.223697][T28432] ? igmpv3_del_delrec+0x1e9/0x6b0 [ 1832.223717][T28432] ? __pfx_fib_magic+0x10/0x10 [ 1832.223751][T28432] ? ip_mc_up+0x273/0x2e0 [ 1832.223771][T28432] ? inetdev_event+0x110a/0x1610 [ 1832.223798][T28432] fib_add_ifaddr+0x38d/0x5f0 [ 1832.223830][T28432] fib_netdev_event+0x382/0x490 [ 1832.223858][T28432] notifier_call_chain+0x1ad/0x3d0 [ 1832.223890][T28432] __dev_notify_flags+0x1a9/0x310 [ 1832.223917][T28432] ? __pfx___dev_notify_flags+0x10/0x10 [ 1832.223945][T28432] ? __dev_change_flags+0x5a0/0x7e0 [ 1832.223973][T28432] ? __pfx___dev_change_flags+0x10/0x10 [ 1832.223996][T28432] ? __kernel_text_address+0xd/0x30 [ 1832.224022][T28432] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1832.224049][T28432] ? arch_stack_walk+0xfb/0x150 [ 1832.224076][T28432] netif_change_flags+0xe8/0x1a0 [ 1832.224103][T28432] do_setlink+0xfa5/0x45a0 [ 1832.224131][T28432] ? stack_depot_save_flags+0x33/0x810 [ 1832.224160][T28432] ? kasan_save_stack+0x4d/0x60 [ 1832.224184][T28432] ? __pfx_do_setlink+0x10/0x10 [ 1832.224203][T28432] ? nf_unregister_net_hooks+0xcb/0x140 [ 1832.224227][T28432] ? ipvlan_set_port_mode+0x2f3/0x3d0 [ 1832.224251][T28432] ? ipvlan_nl_changelink+0x1a0/0x2e0 [ 1832.224274][T28432] ? rtnl_newlink+0x1607/0x1bb0 [ 1832.224291][T28432] ? rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1832.224309][T28432] ? netlink_rcv_skb+0x232/0x4b0 [ 1832.224330][T28432] ? netlink_unicast+0x75c/0x8e0 [ 1832.224347][T28432] ? netlink_sendmsg+0x813/0xb40 [ 1832.224368][T28432] ? ____sys_sendmsg+0x972/0x9f0 [ 1832.224392][T28432] ? ___sys_sendmsg+0x2a5/0x360 [ 1832.224412][T28432] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1832.224433][T28432] ? do_syscall_64+0x15f/0xf80 [ 1832.224455][T28432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.224514][T28432] ? call_rcu+0x644/0x890 [ 1832.224534][T28432] ? lockdep_hardirqs_on+0x7a/0x110 [ 1832.224564][T28432] ? nf_unregister_net_hooks+0x11d/0x140 [ 1832.224590][T28432] ? ipvlan_set_port_mode+0x2f3/0x3d0 [ 1832.224622][T28432] ? ipvlan_nl_changelink+0x258/0x2e0 [ 1832.224649][T28432] rtnl_newlink+0x15ad/0x1bb0 [ 1832.224681][T28432] ? __pfx_rtnl_newlink+0x10/0x10 [ 1832.224696][T28432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.224746][T28432] ? kasan_quarantine_put+0xbb/0x1f0 [ 1832.224769][T28432] ? lockdep_hardirqs_on+0x7a/0x110 [ 1832.224794][T28432] ? nlmon_xmit+0xb0/0x100 [ 1832.224813][T28432] ? kmem_cache_free+0x182/0x650 [ 1832.224848][T28432] ? __lock_acquire+0x6b5/0x2cf0 [ 1832.224873][T28432] ? __dev_queue_xmit+0x2b6/0x3950 [ 1832.224901][T28432] ? __local_bh_enable_ip+0xd0/0x130 [ 1832.224921][T28432] ? lockdep_hardirqs_on+0x7a/0x110 [ 1832.224947][T28432] ? __dev_queue_xmit+0x2b6/0x3950 [ 1832.224969][T28432] ? __local_bh_enable_ip+0xd0/0x130 [ 1832.224986][T28432] ? __dev_queue_xmit+0x2b6/0x3950 [ 1832.225017][T28432] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1832.225054][T28432] ? __pfx_rtnl_newlink+0x10/0x10 [ 1832.225073][T28432] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1832.225098][T28432] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1832.225118][T28432] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1832.225137][T28432] ? ref_tracker_free+0x693/0x840 [ 1832.225164][T28432] ? __pfx_ref_tracker_free+0x10/0x10 [ 1832.225196][T28432] netlink_rcv_skb+0x232/0x4b0 [ 1832.225220][T28432] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1832.225242][T28432] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1832.225278][T28432] ? netlink_deliver_tap+0x2e/0x1b0 [ 1832.225299][T28432] ? netlink_deliver_tap+0x2e/0x1b0 [ 1832.225324][T28432] netlink_unicast+0x75c/0x8e0 [ 1832.225353][T28432] netlink_sendmsg+0x813/0xb40 [ 1832.225381][T28432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1832.225403][T28432] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1832.225424][T28432] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1832.225448][T28432] ____sys_sendmsg+0x972/0x9f0 [ 1832.225468][T28432] ? __might_fault+0xaf/0x130 [ 1832.225492][T28432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1832.225519][T28432] ? import_iovec+0x73/0xa0 [ 1832.225545][T28432] ___sys_sendmsg+0x2a5/0x360 [ 1832.225563][T28432] ? __lock_acquire+0x6b5/0x2cf0 [ 1832.225585][T28432] ? __pfx____sys_sendmsg+0x10/0x10 [ 1832.225635][T28432] ? __fget_files+0x2a/0x420 [ 1832.225654][T28432] ? __fget_files+0x3a0/0x420 [ 1832.225683][T28432] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1832.225708][T28432] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1832.225740][T28432] ? __pfx_ksys_write+0x10/0x10 [ 1832.225771][T28432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.225788][T28432] do_syscall_64+0x15f/0xf80 [ 1832.225806][T28432] ? trace_irq_disable+0x3b/0x140 [ 1832.225828][T28432] ? clear_bhb_loop+0x40/0x90 [ 1832.225848][T28432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.225864][T28432] RIP: 0033:0x7fb30279cdd9 [ 1832.225881][T28432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1832.225896][T28432] RSP: 002b:00007fb303740028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1832.225915][T28432] RAX: ffffffffffffffda RBX: 00007fb302a15fa0 RCX: 00007fb30279cdd9 [ 1832.225928][T28432] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1832.225946][T28432] RBP: 00007fb303740090 R08: 0000000000000000 R09: 0000000000000000 [ 1832.225958][T28432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1832.225967][T28432] R13: 00007fb302a16038 R14: 00007fb302a15fa0 R15: 00007ffc3d1f0d58 [ 1832.225995][T28432] [ 1833.007813][T28441] netlink: 120 bytes leftover after parsing attributes in process `syz.3.15658'. [ 1833.088170][T28443] netlink: 'syz.6.15660': attribute type 1 has an invalid length. [ 1833.291590][T28451] netlink: 120 bytes leftover after parsing attributes in process `syz.3.15662'. [ 1833.456239][T28464] netlink: 'syz.3.15668': attribute type 5 has an invalid length. [ 1833.489367][T28464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15668'. [ 1833.566030][T28469] syzkaller0: entered promiscuous mode [ 1833.623963][T28469] syzkaller0: entered allmulticast mode [ 1833.794244][T28477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15673'. [ 1833.871403][T28481] netlink: 'syz.6.15674': attribute type 6 has an invalid length. [ 1834.457941][T28504] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1834.954664][T28498] bridge0: port 3(vlan3) entered disabled state [ 1834.961186][T28498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1834.968569][T28498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.230926][T28498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1835.255722][T28498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1835.576610][T28498] batman_adv: batadv0: Interface deactivated: veth3 [ 1835.675049][T28494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.699640][T28494] vlan3 (unregistering): left allmulticast mode [ 1835.707866][T28494] bridge_slave_0 (unregistering): left allmulticast mode [ 1835.715632][T28494] vlan3 (unregistering): left promiscuous mode [ 1835.722051][T28494] bridge_slave_0 (unregistering): left promiscuous mode [ 1835.729669][T28494] bridge0: port 3(vlan3) entered disabled state [ 1835.818093][T14069] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1835.848178][T14069] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.870573][T14069] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1835.881017][T14069] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.006265][T14069] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1836.017451][T14069] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.027053][T14069] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1836.064873][T14069] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.127817][T28526] syzkaller0: entered promiscuous mode [ 1836.134900][T28526] syzkaller0: entered allmulticast mode [ 1836.194573][T28529] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1836.394074][T14070] batadv1: left promiscuous mode [ 1836.588739][T28556] FAULT_INJECTION: forcing a failure. [ 1836.588739][T28556] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.605821][T28556] CPU: 0 UID: 0 PID: 28556 Comm: syz.0.15696 Not tainted syzkaller #0 PREEMPT(full) [ 1836.605845][T28556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1836.605856][T28556] Call Trace: [ 1836.605863][T28556] [ 1836.605870][T28556] dump_stack_lvl+0xe8/0x150 [ 1836.605894][T28556] should_fail_ex+0x412/0x560 [ 1836.605921][T28556] should_failslab+0xa8/0x100 [ 1836.605948][T28556] __kmalloc_noprof+0xe8/0x760 [ 1836.605970][T28556] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1836.606001][T28556] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1836.606035][T28556] genl_family_rcv_msg_doit+0xd9/0x330 [ 1836.606067][T28556] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1836.606101][T28556] ? apparmor_capable+0x126/0x170 [ 1836.606128][T28556] ? bpf_lsm_capable+0x9/0x20 [ 1836.606146][T28556] ? security_capable+0x7e/0x2c0 [ 1836.606172][T28556] genl_rcv_msg+0x61c/0x7a0 [ 1836.606204][T28556] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1836.606227][T28556] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1836.606262][T28556] netlink_rcv_skb+0x232/0x4b0 [ 1836.606286][T28556] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1836.606313][T28556] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1836.606349][T28556] ? down_read+0x270/0x2e0 [ 1836.606372][T28556] ? genl_rcv+0xd/0x40 [ 1836.606398][T28556] genl_rcv+0x28/0x40 [ 1836.606425][T28556] netlink_unicast+0x75c/0x8e0 [ 1836.606457][T28556] netlink_sendmsg+0x813/0xb40 [ 1836.606490][T28556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1836.606515][T28556] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1836.606539][T28556] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1836.606565][T28556] ____sys_sendmsg+0x972/0x9f0 [ 1836.606588][T28556] ? __might_fault+0xaf/0x130 [ 1836.606623][T28556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1836.606657][T28556] ? import_iovec+0x73/0xa0 [ 1836.606684][T28556] ___sys_sendmsg+0x2a5/0x360 [ 1836.606707][T28556] ? __lock_acquire+0x6b5/0x2cf0 [ 1836.606731][T28556] ? __pfx____sys_sendmsg+0x10/0x10 [ 1836.606790][T28556] ? __fget_files+0x2a/0x420 [ 1836.606809][T28556] ? __fget_files+0x3a0/0x420 [ 1836.606846][T28556] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1836.606872][T28556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1836.606905][T28556] ? __pfx_ksys_write+0x10/0x10 [ 1836.606937][T28556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.606957][T28556] do_syscall_64+0x15f/0xf80 [ 1836.606975][T28556] ? trace_irq_disable+0x3b/0x140 [ 1836.607000][T28556] ? clear_bhb_loop+0x40/0x90 [ 1836.607020][T28556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.607034][T28556] RIP: 0033:0x7fc0fc39cdd9 [ 1836.607049][T28556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1836.607064][T28556] RSP: 002b:00007fc0fd1d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1836.607081][T28556] RAX: ffffffffffffffda RBX: 00007fc0fc615fa0 RCX: 00007fc0fc39cdd9 [ 1836.607093][T28556] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1836.607104][T28556] RBP: 00007fc0fd1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1836.607116][T28556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1836.607126][T28556] R13: 00007fc0fc616038 R14: 00007fc0fc615fa0 R15: 00007ffdd7a59d38 [ 1836.607156][T28556] [ 1836.612061][T28548] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1836.747307][T28561] __nla_validate_parse: 6 callbacks suppressed [ 1836.747325][T28561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15698'. [ 1836.848585][T28564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15699'. [ 1837.157132][T28572] netlink: 'syz.5.15703': attribute type 13 has an invalid length. [ 1837.166767][T28572] netlink: 'syz.5.15703': attribute type 17 has an invalid length. [ 1837.175458][T28572] netlink: 'syz.5.15703': attribute type 27 has an invalid length. [ 1837.189468][T28574] sctp: [Deprecated]: syz.0.15704 (pid 28574) Use of int in max_burst socket option deprecated. [ 1837.189468][T28574] Use struct sctp_assoc_value instead [ 1837.387801][T28582] xt_hashlimit: size too large, truncated to 1048576 [ 1837.425387][T28586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15710'. [ 1837.528627][T28589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15711'. [ 1837.796993][T28601] netlink: 228 bytes leftover after parsing attributes in process `syz.4.15715'. [ 1837.826571][T28601] netlink: 228 bytes leftover after parsing attributes in process `syz.4.15715'. [ 1837.850497][T28601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15715'. [ 1838.079598][T28613] FAULT_INJECTION: forcing a failure. [ 1838.079598][T28613] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.131766][T28613] CPU: 0 UID: 0 PID: 28613 Comm: syz.4.15718 Not tainted syzkaller #0 PREEMPT(full) [ 1838.131793][T28613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1838.131805][T28613] Call Trace: [ 1838.131812][T28613] [ 1838.131820][T28613] dump_stack_lvl+0xe8/0x150 [ 1838.131845][T28613] should_fail_ex+0x412/0x560 [ 1838.131872][T28613] should_failslab+0xa8/0x100 [ 1838.131901][T28613] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1838.131930][T28613] ? __kernfs_new_node+0xaa/0x970 [ 1838.131959][T28613] kstrdup+0x42/0x100 [ 1838.131980][T28613] __kernfs_new_node+0xaa/0x970 [ 1838.132008][T28613] ? kernfs_root+0x1c/0x230 [ 1838.132029][T28613] ? __pfx___kernfs_new_node+0x10/0x10 [ 1838.132050][T28613] ? kernfs_root+0x1c/0x230 [ 1838.132078][T28613] ? kernfs_root+0x1c/0x230 [ 1838.132099][T28613] ? kernfs_root+0x1c/0x230 [ 1838.132127][T28613] kernfs_new_node+0x102/0x210 [ 1838.132155][T28613] kernfs_create_link+0xa7/0x200 [ 1838.132178][T28613] sysfs_do_create_link_sd+0x83/0x110 [ 1838.132203][T28613] device_add_class_symlinks+0x1cf/0x240 [ 1838.132227][T28613] device_add+0x475/0xbb0 [ 1838.132244][T28613] ? device_initialize+0x26a/0x460 [ 1838.132266][T28613] netdev_register_kobject+0x178/0x310 [ 1838.132297][T28613] register_netdevice+0x1456/0x1ec0 [ 1838.132336][T28613] ? __pfx_register_netdevice+0x10/0x10 [ 1838.132379][T28613] macvlan_common_newlink+0x127c/0x19e0 [ 1838.132400][T28613] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1838.132434][T28613] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 1838.132460][T28613] ? __pfx_macvlan_newlink+0x10/0x10 [ 1838.132492][T28613] rtnl_newlink_create+0x329/0xb70 [ 1838.132516][T28613] ? __pfx___nla_validate_parse+0x10/0x10 [ 1838.132555][T28613] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1838.132582][T28613] ? __pfx___mutex_lock+0x10/0x10 [ 1838.132617][T28613] ? ns_capable+0x89/0xe0 [ 1838.132639][T28613] rtnl_newlink+0x166a/0x1bb0 [ 1838.132677][T28613] ? __pfx_rtnl_newlink+0x10/0x10 [ 1838.132696][T28613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.132752][T28613] ? kasan_quarantine_put+0xbb/0x1f0 [ 1838.132773][T28613] ? lockdep_hardirqs_on+0x7a/0x110 [ 1838.132796][T28613] ? nlmon_xmit+0xb0/0x100 [ 1838.132814][T28613] ? kmem_cache_free+0x182/0x650 [ 1838.132849][T28613] ? __lock_acquire+0x6b5/0x2cf0 [ 1838.132873][T28613] ? __dev_queue_xmit+0x2b6/0x3950 [ 1838.132901][T28613] ? __local_bh_enable_ip+0xd0/0x130 [ 1838.132921][T28613] ? lockdep_hardirqs_on+0x7a/0x110 [ 1838.132940][T28613] ? __dev_queue_xmit+0x2b6/0x3950 [ 1838.132962][T28613] ? __local_bh_enable_ip+0xd0/0x130 [ 1838.132979][T28613] ? __dev_queue_xmit+0x2b6/0x3950 [ 1838.133011][T28613] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1838.133047][T28613] ? __pfx_rtnl_newlink+0x10/0x10 [ 1838.133067][T28613] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1838.133091][T28613] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1838.133110][T28613] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1838.133129][T28613] ? ref_tracker_free+0x693/0x840 [ 1838.133155][T28613] ? __pfx_ref_tracker_free+0x10/0x10 [ 1838.133190][T28613] netlink_rcv_skb+0x232/0x4b0 [ 1838.133214][T28613] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1838.133236][T28613] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1838.133271][T28613] ? netlink_deliver_tap+0x2e/0x1b0 [ 1838.133293][T28613] ? netlink_deliver_tap+0x2e/0x1b0 [ 1838.133321][T28613] netlink_unicast+0x75c/0x8e0 [ 1838.133350][T28613] netlink_sendmsg+0x813/0xb40 [ 1838.133383][T28613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1838.133408][T28613] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1838.133434][T28613] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1838.133462][T28613] ____sys_sendmsg+0x972/0x9f0 [ 1838.133493][T28613] ? __might_fault+0xaf/0x130 [ 1838.133522][T28613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1838.133556][T28613] ? import_iovec+0x73/0xa0 [ 1838.133584][T28613] ___sys_sendmsg+0x2a5/0x360 [ 1838.133606][T28613] ? __lock_acquire+0x6b5/0x2cf0 [ 1838.133631][T28613] ? __pfx____sys_sendmsg+0x10/0x10 [ 1838.133691][T28613] ? __fget_files+0x2a/0x420 [ 1838.133711][T28613] ? __fget_files+0x3a0/0x420 [ 1838.133744][T28613] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1838.133770][T28613] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1838.133804][T28613] ? __pfx_ksys_write+0x10/0x10 [ 1838.133838][T28613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.133858][T28613] do_syscall_64+0x15f/0xf80 [ 1838.133878][T28613] ? trace_irq_disable+0x3b/0x140 [ 1838.133903][T28613] ? clear_bhb_loop+0x40/0x90 [ 1838.133925][T28613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.133944][T28613] RIP: 0033:0x7f7430b9cdd9 [ 1838.133961][T28613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1838.133976][T28613] RSP: 002b:00007f7431a2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1838.133996][T28613] RAX: ffffffffffffffda RBX: 00007f7430e15fa0 RCX: 00007f7430b9cdd9 [ 1838.134009][T28613] RDX: 0000000000040040 RSI: 0000200000000200 RDI: 0000000000000004 [ 1838.134021][T28613] RBP: 00007f7431a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1838.134033][T28613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1838.134044][T28613] R13: 00007f7430e16038 R14: 00007f7430e15fa0 R15: 00007fff34a340c8 [ 1838.134075][T28613] [ 1838.151019][T28617] netlink: 'syz.5.15719': attribute type 1 has an invalid length. [ 1838.667227][T28621] netlink: 'syz.0.15720': attribute type 6 has an invalid length. [ 1838.986638][T28652] FAULT_INJECTION: forcing a failure. [ 1838.986638][T28652] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.999341][T28652] CPU: 1 UID: 0 PID: 28652 Comm: syz.3.15725 Not tainted syzkaller #0 PREEMPT(full) [ 1838.999367][T28652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1838.999379][T28652] Call Trace: [ 1838.999389][T28652] [ 1838.999397][T28652] dump_stack_lvl+0xe8/0x150 [ 1838.999431][T28652] should_fail_ex+0x412/0x560 [ 1838.999460][T28652] should_failslab+0xa8/0x100 [ 1838.999487][T28652] ? skb_clone+0x212/0x3a0 [ 1838.999511][T28652] kmem_cache_alloc_noprof+0x87/0x650 [ 1838.999535][T28652] ? __bpf_redirect+0xcb4/0x12a0 [ 1838.999560][T28652] skb_clone+0x212/0x3a0 [ 1838.999587][T28652] bpf_clone_redirect+0x16a/0x4b0 [ 1838.999608][T28652] ? bpf_test_run+0x1d1/0x830 [ 1838.999635][T28652] ? bpf_test_run+0x1d1/0x830 [ 1838.999657][T28652] bpf_prog_8dc8bbec83c669e7+0x22/0x2a [ 1838.999676][T28652] bpf_test_run+0x354/0x830 [ 1838.999718][T28652] ? __pfx_bpf_test_run+0x10/0x10 [ 1838.999752][T28652] ? csum_partial+0x239/0x2c0 [ 1838.999783][T28652] ? skb_checksum+0x7c0/0x8c0 [ 1838.999814][T28652] ? skb_dst_set+0x72/0x140 [ 1838.999838][T28652] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1838.999880][T28652] ? __fget_files+0x3a0/0x420 [ 1838.999901][T28652] ? __fget_files+0x2a/0x420 [ 1838.999927][T28652] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1838.999951][T28652] bpf_prog_test_run+0x2c7/0x340 [ 1838.999973][T28652] __sys_bpf+0x643/0x950 [ 1839.000002][T28652] ? __pfx___sys_bpf+0x10/0x10 [ 1839.000044][T28652] ? ksys_write+0x242/0x270 [ 1839.000072][T28652] ? __pfx_ksys_write+0x10/0x10 [ 1839.000102][T28652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.000122][T28652] __x64_sys_bpf+0x7c/0x90 [ 1839.000147][T28652] do_syscall_64+0x15f/0xf80 [ 1839.000168][T28652] ? trace_irq_disable+0x3b/0x140 [ 1839.000193][T28652] ? clear_bhb_loop+0x40/0x90 [ 1839.000216][T28652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.000234][T28652] RIP: 0033:0x7fb30279cdd9 [ 1839.000251][T28652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1839.000265][T28652] RSP: 002b:00007fb303740028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1839.000284][T28652] RAX: ffffffffffffffda RBX: 00007fb302a15fa0 RCX: 00007fb30279cdd9 [ 1839.000298][T28652] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1839.000310][T28652] RBP: 00007fb303740090 R08: 0000000000000000 R09: 0000000000000000 [ 1839.000321][T28652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1839.000332][T28652] R13: 00007fb302a16038 R14: 00007fb302a15fa0 R15: 00007ffc3d1f0d58 [ 1839.000362][T28652] [ 1839.387428][T28659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15723'. [ 1839.448652][T28656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15727'. [ 1839.458550][T28656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15727'. [ 1839.526198][T28649] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.642153][T28656] bond5: entered promiscuous mode [ 1839.659206][T28656] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1839.668127][T28667] netlink: 'syz.6.15728': attribute type 2 has an invalid length. [ 1840.010798][T28649] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.100169][T28683] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1840.121027][T28687] pim6reg: entered allmulticast mode [ 1840.246925][T28649] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.475096][T13177] Bluetooth: hci2: command 0x0405 tx timeout [ 1840.749976][T14068] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.816323][T28721] bridge1: entered allmulticast mode [ 1840.823827][T14068] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.851826][T14050] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.907005][T14050] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.960690][T28729] FAULT_INJECTION: forcing a failure. [ 1840.960690][T28729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1840.999830][T28729] CPU: 0 UID: 0 PID: 28729 Comm: syz.6.15749 Not tainted syzkaller #0 PREEMPT(full) [ 1840.999857][T28729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1840.999868][T28729] Call Trace: [ 1840.999877][T28729] [ 1840.999885][T28729] dump_stack_lvl+0xe8/0x150 [ 1840.999911][T28729] should_fail_ex+0x412/0x560 [ 1840.999940][T28729] _copy_to_user+0x31/0xb0 [ 1840.999967][T28729] simple_read_from_buffer+0xe1/0x170 [ 1840.999993][T28729] proc_fail_nth_read+0x1bb/0x230 [ 1841.000020][T28729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1841.000049][T28729] ? rw_verify_area+0x2a6/0x4d0 [ 1841.000072][T28729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1841.000096][T28729] vfs_read+0x20c/0xa70 [ 1841.000128][T28729] ? __pfx_vfs_read+0x10/0x10 [ 1841.000152][T28729] ? do_sys_openat2+0x14c/0x200 [ 1841.000170][T28729] ? kmem_cache_free+0x182/0x650 [ 1841.000209][T28729] ksys_read+0x150/0x270 [ 1841.000235][T28729] ? __pfx_ksys_read+0x10/0x10 [ 1841.000268][T28729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.000287][T28729] do_syscall_64+0x15f/0xf80 [ 1841.000308][T28729] ? trace_irq_disable+0x3b/0x140 [ 1841.000333][T28729] ? clear_bhb_loop+0x40/0x90 [ 1841.000354][T28729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.000372][T28729] RIP: 0033:0x7f7538d5d60e [ 1841.000396][T28729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1841.000411][T28729] RSP: 002b:00007f7539cb9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1841.000430][T28729] RAX: ffffffffffffffda RBX: 00007f7539cba6c0 RCX: 00007f7538d5d60e [ 1841.000444][T28729] RDX: 000000000000000f RSI: 00007f7539cba0a0 RDI: 0000000000000004 [ 1841.000455][T28729] RBP: 00007f7539cba090 R08: 0000000000000000 R09: 0000000000000000 [ 1841.000466][T28729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1841.000477][T28729] R13: 00007f7539016038 R14: 00007f7539015fa0 R15: 00007ffd1014d348 [ 1841.000506][T28729] [ 1841.206791][T28732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1841.771461][T28770] FAULT_INJECTION: forcing a failure. [ 1841.771461][T28770] name failslab, interval 1, probability 0, space 0, times 0 [ 1841.824958][T28770] CPU: 1 UID: 0 PID: 28770 Comm: syz.0.15765 Not tainted syzkaller #0 PREEMPT(full) [ 1841.824984][T28770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1841.824995][T28770] Call Trace: [ 1841.825003][T28770] [ 1841.825011][T28770] dump_stack_lvl+0xe8/0x150 [ 1841.825038][T28770] should_fail_ex+0x412/0x560 [ 1841.825066][T28770] should_failslab+0xa8/0x100 [ 1841.825093][T28770] ? security_inode_alloc+0x39/0x310 [ 1841.825117][T28770] kmem_cache_alloc_noprof+0x87/0x650 [ 1841.825152][T28770] security_inode_alloc+0x39/0x310 [ 1841.825178][T28770] inode_init_always_gfp+0x9c8/0xda0 [ 1841.825206][T28770] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 1841.825233][T28770] alloc_inode+0x82/0x1b0 [ 1841.825251][T28770] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1841.825271][T28770] new_inode+0x22/0x170 [ 1841.825292][T28770] ? sget_fc+0x962/0xa40 [ 1841.825313][T28770] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1841.825334][T28770] mqueue_fill_super+0xdc/0x380 [ 1841.825355][T28770] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1841.825375][T28770] get_tree_nodev+0xbb/0x150 [ 1841.825402][T28770] vfs_get_tree+0x92/0x2a0 [ 1841.825430][T28770] fc_mount_longterm+0x1c/0x100 [ 1841.825460][T28770] mq_init_ns+0x513/0x760 [ 1841.825482][T28770] copy_ipcs+0x460/0x6c0 [ 1841.825507][T28770] create_new_namespaces+0x210/0x6a0 [ 1841.825530][T28770] ? bpf_lsm_capable+0x9/0x20 [ 1841.825548][T28770] ? security_capable+0x7e/0x2c0 [ 1841.825575][T28770] unshare_nsproxy_namespaces+0x149/0x190 [ 1841.825598][T28770] ksys_unshare+0x57d/0x9f0 [ 1841.825630][T28770] ? __pfx_ksys_unshare+0x10/0x10 [ 1841.825652][T28770] ? __pfx_ksys_write+0x10/0x10 [ 1841.825684][T28770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.825704][T28770] __x64_sys_unshare+0x38/0x50 [ 1841.825725][T28770] do_syscall_64+0x15f/0xf80 [ 1841.825746][T28770] ? trace_irq_disable+0x3b/0x140 [ 1841.825772][T28770] ? clear_bhb_loop+0x40/0x90 [ 1841.825794][T28770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.825813][T28770] RIP: 0033:0x7fc0fc39cdd9 [ 1841.825838][T28770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1841.825853][T28770] RSP: 002b:00007fc0fd1d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1841.825873][T28770] RAX: ffffffffffffffda RBX: 00007fc0fc615fa0 RCX: 00007fc0fc39cdd9 [ 1841.825887][T28770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 1841.825898][T28770] RBP: 00007fc0fd1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1841.825910][T28770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1841.825921][T28770] R13: 00007fc0fc616038 R14: 00007fc0fc615fa0 R15: 00007ffdd7a59d38 [ 1841.825960][T28770] [ 1842.590069][T28810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1842.622293][T28813] __nla_validate_parse: 3 callbacks suppressed [ 1842.622306][T28813] netlink: 68 bytes leftover after parsing attributes in process `syz.3.15781'. [ 1842.784104][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1842.867931][T28821] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15784'. [ 1844.706311][ T30] INFO: task udevd:24094 blocked for more than 143 seconds. [ 1844.713877][ T30] Not tainted syzkaller #0 [ 1844.718913][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1844.728150][ T30] task:udevd state:D stack:23368 pid:24094 tgid:24094 ppid:4994 task_flags:0x400040 flags:0x00080000 [ 1844.740638][ T30] Call Trace: [ 1844.744268][ T30] [ 1844.747229][ T30] __schedule+0x17b4/0x5680 [ 1844.751830][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1844.758569][ T30] ? __blk_flush_plug+0x416/0x4d0 [ 1844.764172][ T30] ? __pfx___schedule+0x10/0x10 [ 1844.769079][ T30] ? schedule+0x90/0x360 [ 1844.773587][ T30] schedule+0x164/0x360 [ 1844.777786][ T30] schedule_timeout+0x158/0x2c0 [ 1844.782652][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1844.788818][ T30] ? __pfx_process_timeout+0x10/0x10 [ 1844.794470][ T30] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 1844.800292][ T30] ? prepare_to_wait_event+0x436/0x480 [ 1844.806022][ T30] nbd_queue_rq+0x857/0x1100 [ 1844.811164][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1844.816448][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1844.821396][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1844.827567][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1844.833645][ T30] ? sbitmap_get+0x229/0x390 [ 1844.838267][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1844.844351][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1844.850288][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1844.856775][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1844.863840][T13177] Bluetooth: hci0: command 0x0406 tx timeout [ 1844.869931][ T30] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 1844.876014][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1844.881355][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1844.887463][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1844.892923][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 1844.898071][ T30] blk_mq_dispatch_list+0xd16/0xe10 [ 1844.903381][ T30] ? bdev_count_inflight+0x1cf/0x210 [ 1844.908689][ T30] ? blk_mq_dispatch_list+0x240/0xe10 [ 1844.914980][ T30] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 1844.920745][ T30] ? rcu_is_watching+0x15/0xb0 [ 1844.925624][ T30] blk_mq_flush_plug_list+0x48d/0x570 [ 1844.931024][ T30] ? blk_add_rq_to_plug+0x300/0x450 [ 1844.936386][ T30] ? blk_mq_submit_bio+0x1acf/0x28e0 [ 1844.941716][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 1844.947755][ T30] __blk_flush_plug+0x3ed/0x4d0 [ 1844.952657][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 1844.958382][ T30] __submit_bio+0x28d/0x580 [ 1844.963029][ T30] ? __pfx___submit_bio+0x10/0x10 [ 1844.968085][ T30] ? bio_associate_blkg+0x6d/0x230 [ 1844.973376][ T30] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1844.979054][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1844.985372][ T30] block_read_full_folio+0x7b7/0x830 [ 1844.990684][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 1844.996340][ T30] filemap_read_folio+0x137/0x3b0 [ 1845.001412][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1845.006993][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 1845.013549][ T30] ? filemap_add_folio+0x356/0x530 [ 1845.018712][ T30] do_read_cache_folio+0x358/0x590 [ 1845.024532][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1845.030026][ T30] read_part_sector+0xb6/0x2b0 [ 1845.035369][ T30] adfspart_check_ICS+0xb1/0x960 [ 1845.040327][ T30] ? seq_buf_printf+0x212/0x2d0 [ 1845.045385][ T30] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1845.051766][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1845.057393][ T30] bdev_disk_changed+0x817/0x1770 [ 1845.062451][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1845.068300][ T30] blkdev_get_whole+0x380/0x510 [ 1845.073424][ T30] bdev_open+0x31e/0xd30 [ 1845.077705][ T30] blkdev_open+0x470/0x610 [ 1845.082133][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 1845.087288][ T30] do_dentry_open+0x785/0x14e0 [ 1845.092104][ T30] vfs_open+0x3b/0x340 [ 1845.096272][ T30] ? path_openat+0x2df0/0x3860 [ 1845.101055][ T30] path_openat+0x2e08/0x3860 [ 1845.105869][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1845.111278][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1845.117554][ T30] ? __pfx_path_openat+0x10/0x10 [ 1845.122537][ T30] ? __x64_sys_openat+0x138/0x170 [ 1845.127762][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1845.132734][ T30] do_file_open+0x23e/0x4a0 [ 1845.137437][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1845.142495][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1845.147590][ T30] ? alloc_fd+0x64b/0x6c0 [ 1845.151969][ T30] do_sys_openat2+0x113/0x200 [ 1845.156934][ T30] ? __pfx___up_read+0x10/0x10 [ 1845.161759][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1845.167178][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 1845.172495][ T30] __x64_sys_openat+0x138/0x170 [ 1845.177424][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.183642][ T30] do_syscall_64+0x15f/0xf80 [ 1845.188243][ T30] ? trace_irq_disable+0x3b/0x140 [ 1845.193507][ T30] ? clear_bhb_loop+0x40/0x90 [ 1845.198213][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.204283][ T30] RIP: 0033:0x7f5f80ca7407 [ 1845.208733][ T30] RSP: 002b:00007fff4c364690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1845.217218][ T30] RAX: ffffffffffffffda RBX: 00007f5f8133d880 RCX: 00007f5f80ca7407 [ 1845.225974][ T30] RDX: 00000000000a0800 RSI: 000055ed9e83b2e0 RDI: ffffffffffffff9c [ 1845.234226][ T30] RBP: 000055ed9e82c910 R08: 0000000000000000 R09: 0000000000000000 [ 1845.242239][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ed9e856360 [ 1845.250368][ T30] R13: 000055ed9e83a190 R14: 00007fff4c364758 R15: 000055ed9e856360 [ 1845.258407][ T30] [ 1845.261497][ T30] [ 1845.261497][ T30] Showing all locks held in the system: [ 1845.269303][ T30] 1 lock held by khungtaskd/30: [ 1845.275181][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1845.286876][ T30] 2 locks held by getty/5381: [ 1845.291633][ T30] #0: ffff8880373d10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1845.301557][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1845.313938][ T30] 4 locks held by kworker/u8:34/14069: [ 1845.319428][ T30] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1845.329490][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1845.338443][ T30] #2: ffff8880b1830780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 1845.348576][ T30] #3: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xc3/0x330 [ 1845.359240][ T30] 3 locks held by udevd/24094: [ 1845.364185][ T30] #0: ffff888093ad4350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1845.373630][ T30] #1: ffff88802228bf18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 1845.383287][ T30] #2: ffff888027e20178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 1845.392284][ T30] 1 lock held by syz.5.15777/28798: [ 1845.397680][ T30] #0: ffff8880377bb140 (&dev->mutex){....}-{4:4}, at: nfc_unregister_rfkill+0x63/0x280 [ 1845.407523][ T30] 4 locks held by syz.5.15777/28799: [ 1845.412868][ T30] #0: ffffffff8fe3e608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1845.421086][ T30] #1: ffffffff8fe3e440 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1845.430623][ T30] #2: ffff8880377bb140 (&dev->mutex){....}-{4:4}, at: nfc_dev_up+0x3f/0x350 [ 1845.439566][ T30] #3: ffff8880363e6348 (&ndev->req_lock){+.+.}-{4:4}, at: nci_dev_up+0xa3/0xdd0 [ 1845.448784][ T30] 2 locks held by syz.5.15777/28807: [ 1845.454111][ T30] #0: ffffffff8fe3e608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1845.462314][ T30] #1: ffffffff8fe3e440 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1845.471373][ T30] 2 locks held by syz.6.15778/28804: [ 1845.476796][ T30] #0: ffffffff8fe3e608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1845.481875][T28799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1845.485123][ T30] #1: ffffffff8fe3e440 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1845.485191][ T30] 2 locks held by syz.0.15789/28834: [ 1845.485203][ T30] #0: ffffffff8fe3e608 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1845.485255][ T30] #1: ffffffff8fe3e440 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1845.485312][ T30] 2 locks held by syz.0.15789/28835: [ 1845.485323][ T30] #0: ffffffff8fe3e608 (cb_lock){++++}-{4:4} [ 1845.531373][T28804] netlink: 224 bytes leftover after parsing attributes in process `syz.6.15778'. [ 1845.532828][ T30] , at: genl_rcv+0x19/0x40 [ 1845.571973][ T30] #1: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1845.595633][ T30] 1 lock held by syz.3.15792/28843: [ 1845.600898][ T30] 2 locks held by syz.4.15794/28848: [ 1845.606617][ T30] 2 locks held by dhcpcd/28850: [ 1845.611505][ T30] #0: ffff88808dad6260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 1845.621611][ T30] #1: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1845.649312][ T30] [ 1845.655102][ T30] ============================================= [ 1845.655102][ T30] [ 1845.683947][ T30] NMI backtrace for cpu 0 [ 1845.683965][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1845.683984][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1845.683994][ T30] Call Trace: [ 1845.684001][ T30] [ 1845.684008][ T30] dump_stack_lvl+0xe8/0x150 [ 1845.684032][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1845.684056][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1845.684075][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1845.684101][ T30] sys_info+0x135/0x170 [ 1845.684120][ T30] watchdog+0xfd3/0x1030 [ 1845.684150][ T30] ? watchdog+0x1c9/0x1030 [ 1845.684177][ T30] kthread+0x388/0x470 [ 1845.684202][ T30] ? __pfx_watchdog+0x10/0x10 [ 1845.684222][ T30] ? __pfx_kthread+0x10/0x10 [ 1845.684243][ T30] ret_from_fork+0x514/0xb70 [ 1845.684263][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1845.684279][ T30] ? __switch_to+0xc79/0x1410 [ 1845.684304][ T30] ? __pfx_kthread+0x10/0x10 [ 1845.684324][ T30] ret_from_fork_asm+0x1a/0x30 [ 1845.684357][ T30] [ 1845.684382][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1845.796016][ C1] NMI backtrace for cpu 1 [ 1845.796033][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1845.796051][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1845.796061][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1845.796085][ C1] Code: 3b 7e 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 51 21 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1845.796100][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 1845.796114][ C1] RAX: 0000000000789075 RBX: ffffffff819a815a RCX: 0000000080000001 [ 1845.796125][ C1] RDX: 0000000000000001 RSI: ffffffff8dfa5734 RDI: ffffffff8c28abe0 [ 1845.796136][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 1845.796147][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 1845.796158][ C1] R13: 1ffff11003b5a000 R14: 0000000000000001 R15: 1ffff11003b5a000 [ 1845.796169][ C1] FS: 0000000000000000(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 1845.796182][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1845.796193][ C1] CR2: 00007fb3029ea2f8 CR3: 0000000079cd0000 CR4: 00000000003526f0 [ 1845.796207][ C1] Call Trace: [ 1845.796215][ C1] [ 1845.796221][ C1] default_idle+0x9/0x20 [ 1845.796240][ C1] default_idle_call+0x72/0xb0 [ 1845.796260][ C1] do_idle+0x36a/0x5f0 [ 1845.796281][ C1] ? __pfx_do_idle+0x10/0x10 [ 1845.796304][ C1] cpu_startup_entry+0x43/0x60 [ 1845.796322][ C1] start_secondary+0x101/0x110 [ 1845.796340][ C1] common_startup_64+0x13e/0x147 [ 1845.796369][ C1] [ 1845.958249][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1845.965109][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1845.974211][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1845.984261][ T30] Call Trace: [ 1845.987534][ T30] [ 1845.990456][ T30] vpanic+0x56c/0xa60 [ 1845.994434][ T30] ? __pfx___schedule+0x10/0x10 [ 1845.999277][ T30] ? __pfx_vpanic+0x10/0x10 [ 1846.003774][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1846.009933][ T30] panic+0xc5/0xd0 [ 1846.013644][ T30] ? __pfx_panic+0x10/0x10 [ 1846.018056][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1846.023427][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1846.029583][ T30] watchdog+0x102c/0x1030 [ 1846.033915][ T30] ? watchdog+0x1c9/0x1030 [ 1846.038330][ T30] kthread+0x388/0x470 [ 1846.042388][ T30] ? __pfx_watchdog+0x10/0x10 [ 1846.047053][ T30] ? __pfx_kthread+0x10/0x10 [ 1846.051647][ T30] ret_from_fork+0x514/0xb70 [ 1846.056248][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1846.061363][ T30] ? __switch_to+0xc79/0x1410 [ 1846.066046][ T30] ? __pfx_kthread+0x10/0x10 [ 1846.070634][ T30] ret_from_fork_asm+0x1a/0x30 [ 1846.075409][ T30] [ 1846.079031][ T30] Kernel Offset: disabled [ 1846.083348][ T30] Rebooting in 86400 seconds..