last executing test programs: 16.969006949s ago: executing program 3 (id=628): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r0, 0x0, 0x0, 0x800) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac000000040801020000000000000000070000090900010073797a3000e62d33cd2587ab62ac8200000005000300060000003400048008000140000000020800014000008001080001400000038b080001400000023108000240000000020800024000000080050003000600000006000240b89389bd0900010073797a3000000000050003008400000005000300880000002400048008000240000001ff0800014000000e0f08000140000000050800024000000003"], 0xac}, 0x1, 0x0, 0x0, 0x2000000d}, 0x0) 16.801689805s ago: executing program 2 (id=629): socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0) 16.700846532s ago: executing program 0 (id=630): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$nl_generic(r0, 0x0, 0x41) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x124, 0x2, 0xa, 0xd82, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x8c, 0x6, "932084432ec29b22df42438fa5913bec8b7951d6fc4da142142e6df0b186113f80830a6b94c01d187cadf28abdbd28a11620202b93da1ba5f04690e9e608733f8e2d8795b22326ba04367b2edfdf76eb958d58fa19656a24f6251eeea1dd4de1eb498389f448a54b5f1341c635c73a896a3ee67d20b0618f14413292ecfa486b5bce94c76831385c"}, @NFTA_TABLE_USERDATA={0x47, 0x6, "059521b41a0fa4a62bc5ace114b304bd326858cbfb5ec43a8f124329ec76afaedccbb1cbd2450a19817f202b7178c5e64c9bb5c31d9516d8fea1bf79b03fb29f31620a"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x19be39a7b564a5a9}, 0x24000010) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c000f"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r9) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000ffdbdf250700000005001300810000001400080000"], 0x38}}, 0x2) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) r11 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001900010000000000020000001c"], 0x24}, 0x1, 0x0, 0x0, 0x10001}, 0x44) 15.262084654s ago: executing program 2 (id=633): r0 = socket(0x2, 0x3, 0xff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x15, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x0, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x0, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x0, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x0, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x0, 0x1, r6}]}, 0x6}, 0x1, 0x0, 0x0, 0x2004088d}, 0x8805) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000cc0)={'ip6tnl0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x29, 0x8b, 0x25, 0x8, 0x23, @private0, @mcast1, 0x1, 0x7, 0xff, 0xec}}) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300010100000000000000006401010200000000000000000000000000000000000000000000ffff7f0000010000000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000ffffffffffffffff00000000008a3c6a06cddf34710000000300000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000001000000000000feffffff00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x404404c}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = socket$inet6(0xa, 0x3, 0x2f) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x0, r12}, {0x0, 0x0, 0x101}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) readv(r10, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/188, 0xbc}, {&(0x7f0000000ac0)=""/194, 0xc2}, {&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000880)=""/209, 0xd1}, {&(0x7f00000006c0)=""/193, 0xc1}], 0x5) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}, {0x0}], 0x2, 0x0, 0x0, 0x4c880}, 0x48800) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000005c0)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @empty}, 0x30, 0x0, 0x0, 0x0, 0x3ff, &(0x7f00000003c0)='batadv_slave_0\x00', 0x7, 0x101}) 14.219839551s ago: executing program 4 (id=635): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x18, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x0, 0x0, 0x3, 0x0, 0x7, 0x20001}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x7}]}, 0x24}, 0x1, 0x0, 0x40030000000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet_opts(r4, 0x0, 0x480, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r5) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f72"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe4", 0xc) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r8, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000640)=""/82, 0x52}], 0x2}, 0x40}], 0x1, 0x102, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x50) 12.708430613s ago: executing program 4 (id=636): socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) recvmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/177, 0xb1}, {&(0x7f0000000300)=""/118, 0x76}, {&(0x7f0000000380)=""/44, 0x2c}, {&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f0000000440)=""/158, 0x9e}, {&(0x7f0000000600)=""/246, 0xf6}, {&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/27, 0x1b}], 0x8, &(0x7f0000000900)=""/157, 0x9d}, 0x6}, {{&(0x7f0000000a00)=@caif=@dbg, 0x80, &(0x7f0000000c00)=[{&(0x7f0000001340)=""/131, 0x83}, {&(0x7f0000000b40)=""/131, 0x83}], 0x2}, 0x2}, {{&(0x7f0000000c40)=@can, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000cc0)=""/101, 0x65}, {&(0x7f0000000d40)=""/252, 0xfc}, {&(0x7f0000000e40)=""/120, 0x78}, {&(0x7f0000000ec0)=""/227, 0xe3}], 0x4, &(0x7f0000001000)=""/6, 0x6}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001040)=""/103, 0x67}, {&(0x7f0000001180)=""/37, 0x25}, {&(0x7f00000010c0)=""/157, 0x9d}, {&(0x7f00000011c0)=""/43, 0x2b}], 0x4}, 0xffff}], 0x4, 0x40000020, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x90, 0x2c, 0xd2f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x5, 0x7, 0xffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1634, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r8, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x3, 0x0, 0x3}}}}}}}, 0x0) 11.738209113s ago: executing program 2 (id=638): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x321000, 0x1000, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x4e21, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001000000ffffffffffffff800000000000000000000a0060"], 0xb8}}, 0x20040014) 11.580593932s ago: executing program 3 (id=639): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfe}, 0x94) 11.003698868s ago: executing program 1 (id=640): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000340)={0xfffc, 0x0, 0x800, 0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000080)="705aad", 0x3, 0x20080, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x1c) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x60) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bind$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x20000, 0x3}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4(r1, &(0x7f0000000240)=@rc, &(0x7f0000000300)=0x80, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000180), r4) syz_extract_tcp_res$synack(&(0x7f0000000480)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000004c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x1302, &(0x7f0000000c80)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x3, 0x6, "f2a419", 0x12cc, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x1d}, @loopback, {[@srh={0x0, 0xa, 0x4, 0x5, 0x4, 0x18, 0x5, [@dev={0xfe, 0x80, '\x00', 0x11}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @srh={0x3a, 0x6, 0x4, 0x3, 0x9d, 0x10, 0x5, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @ipv4={'\x00', '\xff\xff', @remote}]}, @dstopts={0x88, 0x20a, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0x8}, @generic={0x1, 0x1000, "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"}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x54b}, @calipso={0x7, 0x28, {0x1, 0x8, 0xa, 0x9, [0x100, 0x8, 0xffffffffffffff00, 0x3]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}}]}], {{0x4e21, 0x4e20, r5, r6, 0x0, 0x0, 0x4d, 0x2, 0x6, 0x0, 0xfff6, {[@mptcp=@remove_addr={0x1e, 0xeb, 0x2, 0x0, "ab7b8b8fe6ba9cce2d8a68c947556647af5c0168714abfbf2f6489ed7e2bcff10b16069b09158fdf5abad98cea4b0b60509acb4b2fed40eeb98795e91f68386b4a0ef4b4db4460381b493d5d97ee7a8289554c112b2bd67ca00fe15177fb813a094afbdd7b787254c4ccf757489c06e81296567025096b9f2ff2f255fcb5c61a04421a9c3de32707711269176afb7a16d23eed39a5fd556a53549bc2fc6cdd9845957520a0bb4843164f02bcb9b5d718d0e31d5eee14b394110ec0d9a4fafc49d732522fceb1cfd09afbc40e84db55c4f620a63102a3adb570fa3e4f27af8f81435c4f9188ba18b8"}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "595efaa4d0b307e55e506b9cbdadf869"}, @window={0x3, 0x3, 0x2}, @eol, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "57022b2bfdf10e08ed8ef8a619346833"}]}}, {"89458c4bfcef23d48d826bebd40b0c5be1995b839ba20813200c810ed4d488b7dc11dd6b2c20279fbb0aca0c5ef7baa5eaaa17f5fb9263ceb705d86ff878c455568a8a90af9627b5f10ed7dd7fde34c640443b7767cb274075bbff7d6c935c952e4c8731be0b5434057e79be42a6dadf214406f5971370fca047a00f2b6b25c35725264e7242702aa6b7d724be63195e51d6b728bf8c0148db482fb95882a5178bbdf4e0c666aa56e2bbcf47c7a63c00"}}}}}}}, 0x0) r7 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)=""/17, 0x11}, 0x2}], 0x1, 0x10102, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80a4}, 0x40) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002100090002000000ffdbdf25020000000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.memory_migrate\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001400000018000180140002006e08001000000100000800130000000000080012"], 0x44}}, 0x0) 10.939642798s ago: executing program 3 (id=641): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bind$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, &(0x7f0000000040)=0x61) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) socketpair(0x2c, 0x5, 0x2, &(0x7f0000000100)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0xfff9, 0x20000000, 0x5, 0x50, 0x1000, 0x1}, 0x9c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, 0x0, &(0x7f0000001140)) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000003c0)="7e7aa53eeee72274aa7328aec565ebe74fd65422fcac9c9069815d22d272ca6e51ddd9fd1dfe13e5a9e4bb1c3b66ddd0331396556f67824cd757b8d760ae6a6f595bb5e94d4ffda9083ba610abd5d3009c7ad2bc6eceacaeb149a5122a76f8", 0x5f) sendto$inet6(r7, &(0x7f0000000080)="5f0037bbfa9bb1ce", 0x8, 0x48000, &(0x7f00000014c0)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @remote, 0x73af}}, 0x0, 0x0, 0x8, 0x5b2, 0xf1, 0xffffffff}, 0x9c) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x28}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0xfd}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000004fca85900000000000000000693e4a3585ff00003f070000000000000000000008001c00c9000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c) 9.935538976s ago: executing program 4 (id=642): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000008c0)={0x84, @multicast2, 0x4e22, 0x1, 'lc\x00', 0x0, 0x10005, 0x204e}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x483, &(0x7f0000000000)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'fo\x00', 0x15, 0x821, 0x1}, 0x2c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000300)=[{0x4d, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r3 = socket(0x2d, 0x2, 0x0) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3e}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) close(0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e22, 0x6e00, @local, 0x1}}, 0x3, 0x1000}, &(0x7f0000000340)=0x90) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x100, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r8, {0xfff1, 0x1}, {0x3, 0xffff}, {0xc, 0x3}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 9.522842024s ago: executing program 0 (id=643): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4240}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000240)={r1, 0x0, 0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x94341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r8, r7, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r9) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000100035", 0x7}], 0x1}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) r11 = socket(0x1d, 0x80802, 0x6) writev(r11, &(0x7f0000000580)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1) ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000300)={0x0, 0x1, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r10, @ANYBLOB="000125bd7000fddbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70c80000000005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830000000000"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) socket(0x2d, 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0xb026e000) write(r3, &(0x7f0000000380)="f4c249c7b4dffee66a56cb0a2dfcaec3a0c7c243b335fe77b4d7837a251dc34bde3f73cbc378259ffd5431ffa43cf376fa2d18c5f8", 0x35) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f0000000000)=0x81) 7.293883527s ago: executing program 1 (id=644): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3715], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 6.663988592s ago: executing program 2 (id=645): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xb}, 0x10}, 0x94) socket(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket$kcm(0x29, 0xd, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket(0x400000000010, 0x6, 0x10003) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x2000a, 0x9}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x4a0, 0x4a0, 0x3b0, 0x3b0, 0x2e0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff, 0xffffffff, 0x0, 0x1fe000000], [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], 'ip6erspan0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x11, 0x2, 0x4}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x4, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x8, @ipv6=@private1, 0x1d, 0x35}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x50, 0x24, 0x300, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x7ff}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x5}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x2400c851) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x1, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x8498}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x9c940000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@private1, 0x9c940000, 0x0, 0x3, 0x8, 0x1, 0xfffe}, 0x20) 6.466218599s ago: executing program 1 (id=646): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000080), 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) unshare(0x8000400) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20a800, 0x0) sendfile(r1, r1, 0x0, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.998459442s ago: executing program 0 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x2, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x2, 0x8000}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8d, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2c04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0xf, 0x0, 0x5, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x100000, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1fffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}]}}]}, 0x45c}}, 0x20004000) 5.383655169s ago: executing program 4 (id=648): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000009000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 3.713837701s ago: executing program 3 (id=649): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000004}, {0x2, 0x0, 0xffffffff}, 0x70bd2d, 0x800000, 0x2, 0x4, 0x0, 0x4c}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x184}, 0x1, 0x0, 0x700000000000000}, 0x0) 3.112178715s ago: executing program 0 (id=650): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000200000a7b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.112025003s ago: executing program 4 (id=651): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x4e9b, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000003c0)="b9ed02d814a1fbf4e8f747cc8c30bd0840608b590101080a97b960ace1cd8816", 0xffeb}], 0x1}, 0x6000) 2.538540317s ago: executing program 3 (id=652): socket$inet6(0xa, 0x5, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140000002600010000001e5c0000000006"], 0x14}], 0x1}, 0x0) 2.432962678s ago: executing program 2 (id=653): socket$inet6(0xa, 0x5, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="14000000260001000000ff810000000006"], 0x14}], 0x1}, 0x0) 2.344635127s ago: executing program 1 (id=654): r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x3e0, 0x1d8, 0x310, 0x310, 0x3e0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [0x0, 0xffffff00, 0xffffff00, 0xff], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_virt_wifi\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x33, 0x7, 0x4, 0x4e}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {}, {}, 0x222}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x4, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff2b, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 1.990097116s ago: executing program 4 (id=655): socket$inet(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESOCT=r0], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000f3ffffffff830000000000000006000900f8ffd9001800000000000000840000000500000020000000d8050000"], 0x30, 0x4855}, 0x24000052) bind$inet(r1, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r3, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.793376916s ago: executing program 0 (id=656): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 1.23213253s ago: executing program 1 (id=657): socket$inet(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20040600) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x32, 0x0, 0x0) 1.191504206s ago: executing program 3 (id=658): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000008c0)={0x84, @multicast2, 0x4e22, 0x1, 'lc\x00', 0x0, 0x10005, 0x204e}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x483, &(0x7f0000000000)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'fo\x00', 0x15, 0x821, 0x1}, 0x2c) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000300)=[{0x4d, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r3 = socket(0x2d, 0x2, 0x0) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3e}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) close(0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e22, 0x6e00, @local, 0x1}}, 0x3, 0x1000}, &(0x7f0000000340)=0x90) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x100, 0x70bd28, 0x2, {0x0, 0x0, 0x0, r8, {0xfff1, 0x1}, {0x3, 0xffff}, {0xc, 0x3}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 446.805357ms ago: executing program 2 (id=659): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$netlink(0x10, 0x3, 0x6720f15ce8555866) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={r2, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x20, 0x0, 0x800, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x125) 524.685µs ago: executing program 0 (id=660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6c000000060a09040000000000000000022400000900010073797a30000000000900020073797a3200000000400004803c0001800c0001007061796c6f6164002c000280080004400000000008000540000000000800034000000048080002"], 0x94}, 0x1, 0x0, 0x0, 0x48046}, 0x0) 0s ago: executing program 1 (id=661): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x0, 0x130, 0x130, 0x1f0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x29}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x25}}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0x0, 0x0, 'pimreg1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x270, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x4, 0x4}, {0x2, 0x4, 0x6}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'lo\x00', 'dvmrp1\x00', {}, {}, 0x73}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 56.980970][ T5292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.005696][ T5292] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. syzkaller login: [ 83.314259][ T5618] cgroup: Unknown subsys name 'net' [ 83.432693][ T5618] cgroup: Unknown subsys name 'cpuset' [ 83.442385][ T5618] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.051811][ T5618] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.477485][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.485467][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.493339][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.504561][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.513617][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.521715][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.530475][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.539307][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.550306][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.562727][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.582060][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.596025][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.605110][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.618146][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.628110][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.636275][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.650990][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.676033][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.684222][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.695652][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.703995][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.713491][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.722582][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.729884][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.742414][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.441158][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.449220][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.456499][ T5631] bridge_slave_0: entered allmulticast mode [ 89.468676][ T5631] bridge_slave_0: entered promiscuous mode [ 89.525162][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.532385][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.539944][ T5631] bridge_slave_1: entered allmulticast mode [ 89.547283][ T5631] bridge_slave_1: entered promiscuous mode [ 89.589273][ T5639] Bluetooth: hci0: command tx timeout [ 89.595448][ T5633] Bluetooth: hci1: command tx timeout [ 89.672686][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.680114][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.687289][ T5632] bridge_slave_0: entered allmulticast mode [ 89.694702][ T5632] bridge_slave_0: entered promiscuous mode [ 89.722003][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.747837][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.756429][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.762111][ T5633] Bluetooth: hci2: command tx timeout [ 89.765653][ T5632] bridge_slave_1: entered allmulticast mode [ 89.776269][ T5632] bridge_slave_1: entered promiscuous mode [ 89.796251][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.828843][ T5633] Bluetooth: hci3: command tx timeout [ 89.828880][ T5639] Bluetooth: hci4: command tx timeout [ 89.877685][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.885090][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.892511][ T5640] bridge_slave_0: entered allmulticast mode [ 89.899861][ T5640] bridge_slave_0: entered promiscuous mode [ 89.935197][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.944813][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.952714][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.960042][ T5640] bridge_slave_1: entered allmulticast mode [ 89.967578][ T5640] bridge_slave_1: entered promiscuous mode [ 89.977069][ T5631] team0: Port device team_slave_0 added [ 90.007787][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.041932][ T5631] team0: Port device team_slave_1 added [ 90.105254][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.112561][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.120173][ T5638] bridge_slave_0: entered allmulticast mode [ 90.127395][ T5638] bridge_slave_0: entered promiscuous mode [ 90.141251][ T5632] team0: Port device team_slave_0 added [ 90.149653][ T5632] team0: Port device team_slave_1 added [ 90.157834][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.185599][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.192943][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.200288][ T5638] bridge_slave_1: entered allmulticast mode [ 90.207811][ T5638] bridge_slave_1: entered promiscuous mode [ 90.228751][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.238910][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.245885][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.271940][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.329851][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.336904][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.363360][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.396428][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.403640][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.429658][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.460742][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.467999][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.475540][ T5641] bridge_slave_0: entered allmulticast mode [ 90.482978][ T5641] bridge_slave_0: entered promiscuous mode [ 90.493074][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.502935][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.510010][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.535970][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.549708][ T5640] team0: Port device team_slave_0 added [ 90.558087][ T5640] team0: Port device team_slave_1 added [ 90.564117][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.571349][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.578865][ T5641] bridge_slave_1: entered allmulticast mode [ 90.586111][ T5641] bridge_slave_1: entered promiscuous mode [ 90.595429][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.713641][ T5638] team0: Port device team_slave_0 added [ 90.725077][ T5631] hsr_slave_0: entered promiscuous mode [ 90.731930][ T5631] hsr_slave_1: entered promiscuous mode [ 90.740212][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.747251][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.773638][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.787868][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.810053][ T5638] team0: Port device team_slave_1 added [ 90.834237][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.841385][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.867506][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.880967][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.897607][ T5632] hsr_slave_0: entered promiscuous mode [ 90.904424][ T5632] hsr_slave_1: entered promiscuous mode [ 90.911169][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 90.916967][ T5632] Cannot create hsr debugfs directory [ 91.013740][ T5641] team0: Port device team_slave_0 added [ 91.020420][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.027420][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.053709][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.066406][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.073440][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.099456][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.129250][ T5641] team0: Port device team_slave_1 added [ 91.221331][ T5640] hsr_slave_0: entered promiscuous mode [ 91.227706][ T5640] hsr_slave_1: entered promiscuous mode [ 91.234112][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 91.240043][ T5640] Cannot create hsr debugfs directory [ 91.270872][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.277842][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.303801][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.316286][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.323326][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.351594][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.454007][ T5638] hsr_slave_0: entered promiscuous mode [ 91.461044][ T5638] hsr_slave_1: entered promiscuous mode [ 91.467412][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 91.474081][ T5638] Cannot create hsr debugfs directory [ 91.612851][ T5641] hsr_slave_0: entered promiscuous mode [ 91.619421][ T5641] hsr_slave_1: entered promiscuous mode [ 91.625520][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 91.631432][ T5641] Cannot create hsr debugfs directory [ 91.668563][ T5639] Bluetooth: hci1: command tx timeout [ 91.668586][ T5633] Bluetooth: hci0: command tx timeout [ 91.828440][ T5633] Bluetooth: hci2: command tx timeout [ 91.879116][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.892530][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.900547][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.909228][ T5633] Bluetooth: hci4: command tx timeout [ 91.919530][ T5633] Bluetooth: hci3: command tx timeout [ 91.926051][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.933865][ T9] cfg80211: failed to load regulatory.db [ 91.955966][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.966274][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.974882][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.984925][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.127057][ T5640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.139809][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.154288][ T5640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.166356][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.185797][ T5640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.196572][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.204968][ T5640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.215215][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.312642][ T5632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.324199][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.334037][ T5632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.346711][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.371902][ T5632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.382238][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.412828][ T5632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.422946][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.486747][ T5638] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.500946][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.512550][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.526362][ T5638] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.538837][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.546936][ T5638] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.557508][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.577154][ T5638] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.587043][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.673368][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.697420][ T5641] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.709279][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.719691][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.734444][ T5641] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.745278][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.754093][ T5641] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.764796][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.791291][ T5641] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.802272][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.815460][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.823056][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.855048][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.862255][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.876275][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.922633][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.929822][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.952269][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.959484][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.082396][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.163857][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.175068][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.224201][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.231514][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.257530][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.284386][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.291663][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.308116][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.374225][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.381474][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.410468][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.468026][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.475320][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.491965][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.499225][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.511077][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.518386][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.748642][ T5633] Bluetooth: hci0: command tx timeout [ 93.753480][ T5639] Bluetooth: hci1: command tx timeout [ 93.909572][ T5639] Bluetooth: hci2: command tx timeout [ 93.989367][ T5639] Bluetooth: hci3: command tx timeout [ 93.990828][ T5633] Bluetooth: hci4: command tx timeout [ 94.147754][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.345084][ T5631] veth0_vlan: entered promiscuous mode [ 94.405504][ T5631] veth1_vlan: entered promiscuous mode [ 94.507223][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.563669][ T5631] veth0_macvtap: entered promiscuous mode [ 94.611675][ T5631] veth1_macvtap: entered promiscuous mode [ 94.671765][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.723141][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.795670][ T5640] veth0_vlan: entered promiscuous mode [ 94.821118][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.849419][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.877849][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.898754][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.947660][ T5640] veth1_vlan: entered promiscuous mode [ 95.015481][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.041994][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.121424][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.207076][ T5640] veth0_macvtap: entered promiscuous mode [ 95.218872][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.235671][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.285949][ T5640] veth1_macvtap: entered promiscuous mode [ 95.365982][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.378947][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.387151][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.441501][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.475244][ T5641] veth0_vlan: entered promiscuous mode [ 95.514827][ T5638] veth0_vlan: entered promiscuous mode [ 95.540364][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.564020][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.566449][ T5631] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.592350][ T5641] veth1_vlan: entered promiscuous mode [ 95.604716][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.613804][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.625270][ T5638] veth1_vlan: entered promiscuous mode [ 95.828156][ T5632] veth0_vlan: entered promiscuous mode [ 95.835275][ T5633] Bluetooth: hci1: command tx timeout [ 95.835290][ T5639] Bluetooth: hci0: command tx timeout [ 95.860293][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.878859][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.929595][ T5641] veth0_macvtap: entered promiscuous mode [ 95.938999][ T5638] veth0_macvtap: entered promiscuous mode [ 95.954204][ T5632] veth1_vlan: entered promiscuous mode [ 95.979061][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.984199][ T5641] veth1_macvtap: entered promiscuous mode [ 95.996617][ T5633] Bluetooth: hci2: command tx timeout [ 95.997456][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.016301][ T5638] veth1_macvtap: entered promiscuous mode [ 96.069570][ T5633] Bluetooth: hci3: command tx timeout [ 96.070223][ T5639] Bluetooth: hci4: command tx timeout [ 96.116297][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.159713][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.171619][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.194113][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.241547][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.258398][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.284441][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.307267][ T5632] veth0_macvtap: entered promiscuous mode [ 96.328979][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.355043][ T5632] veth1_macvtap: entered promiscuous mode [ 96.364910][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.385800][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.397373][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.440448][ T5829] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 96.484338][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.497318][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.530338][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.587618][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.599912][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.623175][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.635715][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.675152][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.695018][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.742372][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.750986][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.840809][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.853848][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.922365][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.950947][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.096834][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.142956][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.303764][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.354957][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.459920][ T5844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.566996][ T5849] veth1_macvtap: left promiscuous mode [ 97.583920][ T5850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 97.821292][ T5853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.899801][ T5853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.966585][ T5857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.085980][ T5853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.219601][ T5863] netlink: 'syz.0.10': attribute type 1 has an invalid length. [ 98.273157][ T5866] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10'. [ 98.311167][ T5864] warning: `syz.2.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.384427][ T5863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 98.534108][ T5866] veth3: entered promiscuous mode [ 98.984121][ T5886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.064107][ T5890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 99.455736][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 100.007167][ T5916] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 100.070605][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 100.102269][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 100.173607][ T5292] veth1_macvtap: entered promiscuous mode [ 100.194673][ T5911] syz_tun: entered allmulticast mode [ 100.210866][ T5918] 8021q: VLANs not supported on nlmon0 [ 100.225276][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'. [ 100.282712][ T5921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'. [ 100.373851][ T5908] syz_tun: left allmulticast mode [ 100.399497][ T5922] veth0: entered promiscuous mode [ 100.416711][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 100.426862][ T5925] syz_tun: entered allmulticast mode [ 101.442675][ T5940] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 101.496496][ T5958] netlink: 'syz.1.31': attribute type 9 has an invalid length. [ 102.007495][ T5973] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 102.340381][ T5987] syz_tun: entered allmulticast mode [ 103.630336][ T6023] netlink: 'syz.0.45': attribute type 9 has an invalid length. [ 103.921820][ T6029] Zero length message leads to an empty skb [ 103.941577][ T6032] __nla_validate_parse: 5 callbacks suppressed [ 103.941597][ T6032] netlink: 68 bytes leftover after parsing attributes in process `syz.2.51'. [ 104.042499][ T6039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 104.161854][ T6032] dvmrp0: entered allmulticast mode [ 104.168932][ T6041] netlink: 108 bytes leftover after parsing attributes in process `syz.0.52'. [ 104.182447][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 104.611412][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.58'. [ 104.631898][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.58'. [ 104.661652][ T6060] veth0: entered promiscuous mode [ 104.676659][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 105.122609][ T6069] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 105.149818][ T6069] Cannot find add_set index 0 as target [ 105.738222][ T6085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.746743][ T6085] IPv6: NLM_F_CREATE should be set when creating new route [ 105.754068][ T6085] IPv6: NLM_F_CREATE should be set when creating new route [ 105.941457][ T6093] FAULT_INJECTION: forcing a failure. [ 105.941457][ T6093] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.968380][ T6093] CPU: 0 UID: 0 PID: 6093 Comm: syz.1.69 Not tainted syzkaller #0 PREEMPT(full) [ 105.968409][ T6093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.968430][ T6093] Call Trace: [ 105.968443][ T6093] [ 105.968452][ T6093] dump_stack_lvl+0xe8/0x150 [ 105.968490][ T6093] should_fail_ex+0x412/0x560 [ 105.968518][ T6093] _copy_from_user+0x2d/0xb0 [ 105.968545][ T6093] ___sys_sendmsg+0x1c6/0x360 [ 105.968569][ T6093] ? __lock_acquire+0x6b5/0x2cf0 [ 105.968597][ T6093] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.968661][ T6093] ? __fget_files+0x2a/0x420 [ 105.968687][ T6093] ? __fget_files+0x3a0/0x420 [ 105.968724][ T6093] __x64_sys_sendmsg+0x1bd/0x2a0 [ 105.968752][ T6093] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 105.968787][ T6093] ? __pfx_ksys_write+0x10/0x10 [ 105.968828][ T6093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.968851][ T6093] do_syscall_64+0x174/0x580 [ 105.968883][ T6093] ? trace_irq_disable+0x3b/0x140 [ 105.968915][ T6093] ? clear_bhb_loop+0x40/0x90 [ 105.968942][ T6093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.968963][ T6093] RIP: 0033:0x7fb197d9ce59 [ 105.968991][ T6093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.969008][ T6093] RSP: 002b:00007fb198bed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.969031][ T6093] RAX: ffffffffffffffda RBX: 00007fb198015fa0 RCX: 00007fb197d9ce59 [ 105.969046][ T6093] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 105.969059][ T6093] RBP: 00007fb198bed090 R08: 0000000000000000 R09: 0000000000000000 [ 105.969072][ T6093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.969084][ T6093] R13: 00007fb198016038 R14: 00007fb198015fa0 R15: 00007ffd0b483a18 [ 105.969118][ T6093] [ 106.241827][ T6100] netlink: 68 bytes leftover after parsing attributes in process `syz.2.67'. [ 106.424554][ T6106] netlink: 68 bytes leftover after parsing attributes in process `syz.3.72'. [ 106.494067][ T6106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.72'. [ 106.527448][ T6107] syzkaller0: entered promiscuous mode [ 106.533707][ T6107] syzkaller0: entered allmulticast mode [ 106.576594][ T6106] dvmrp0: entered allmulticast mode [ 106.902874][ T6116] syzkaller0: entered promiscuous mode [ 106.918515][ T6116] syzkaller0: entered allmulticast mode [ 107.106677][ T6119] FAULT_INJECTION: forcing a failure. [ 107.106677][ T6119] name failslab, interval 1, probability 0, space 0, times 1 [ 107.173328][ T6119] CPU: 0 UID: 0 PID: 6119 Comm: syz.1.78 Not tainted syzkaller #0 PREEMPT(full) [ 107.173358][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 107.173371][ T6119] Call Trace: [ 107.173380][ T6119] [ 107.173389][ T6119] dump_stack_lvl+0xe8/0x150 [ 107.173420][ T6119] should_fail_ex+0x412/0x560 [ 107.173448][ T6119] should_failslab+0xa8/0x100 [ 107.173473][ T6119] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 107.173505][ T6119] ? __alloc_skb+0x186/0x7d0 [ 107.173526][ T6119] ? __alloc_skb+0x1d0/0x7d0 [ 107.173544][ T6119] ? __local_bh_enable_ip+0xd0/0x130 [ 107.173572][ T6119] __alloc_skb+0x1d0/0x7d0 [ 107.173593][ T6119] ? netlink_ack_tlv_len+0x6c/0x210 [ 107.173621][ T6119] netlink_ack+0x146/0xa50 [ 107.173643][ T6119] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.173663][ T6119] ? ref_tracker_free+0x693/0x840 [ 107.173689][ T6119] ? __pfx_ref_tracker_free+0x10/0x10 [ 107.173711][ T6119] ? __asan_memcpy+0x40/0x70 [ 107.173738][ T6119] ? __skb_clone+0x63/0x7a0 [ 107.173771][ T6119] netlink_rcv_skb+0x2b6/0x4b0 [ 107.173797][ T6119] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.173830][ T6119] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.173870][ T6119] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.173895][ T6119] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.173926][ T6119] netlink_unicast+0x75c/0x8e0 [ 107.173960][ T6119] netlink_sendmsg+0x813/0xb40 [ 107.173996][ T6119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.174026][ T6119] ? aa_sock_msg_perm+0xf1/0x1b0 [ 107.174061][ T6119] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 107.174095][ T6119] ____sys_sendmsg+0x972/0x9f0 [ 107.174119][ T6119] ? __might_fault+0xaf/0x130 [ 107.174160][ T6119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.174195][ T6119] ? import_iovec+0x73/0xa0 [ 107.174225][ T6119] ___sys_sendmsg+0x2a5/0x360 [ 107.174248][ T6119] ? __lock_acquire+0x6b5/0x2cf0 [ 107.174276][ T6119] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.174339][ T6119] ? __fget_files+0x2a/0x420 [ 107.174371][ T6119] ? __fget_files+0x3a0/0x420 [ 107.174409][ T6119] __x64_sys_sendmsg+0x1bd/0x2a0 [ 107.174438][ T6119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 107.174473][ T6119] ? __pfx_ksys_write+0x10/0x10 [ 107.174515][ T6119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.174540][ T6119] do_syscall_64+0x174/0x580 [ 107.174566][ T6119] ? clear_bhb_loop+0x40/0x90 [ 107.174593][ T6119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.174615][ T6119] RIP: 0033:0x7fb197d9ce59 [ 107.174635][ T6119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.174653][ T6119] RSP: 002b:00007fb198bed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.174675][ T6119] RAX: ffffffffffffffda RBX: 00007fb198015fa0 RCX: 00007fb197d9ce59 [ 107.174691][ T6119] RDX: 0000000000000802 RSI: 00002000000003c0 RDI: 0000000000000041 [ 107.174705][ T6119] RBP: 00007fb198bed090 R08: 0000000000000000 R09: 0000000000000000 [ 107.174718][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.174730][ T6119] R13: 00007fb198016038 R14: 00007fb198015fa0 R15: 00007ffd0b483a18 [ 107.174765][ T6119] [ 107.994091][ T6137] xt_hashlimit: overflow, try lower: 9/9223372036854775808 [ 108.145832][ T6144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.539564][ T6147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.763426][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.939970][ T6165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 109.059517][ T6155] syzkaller0: entered promiscuous mode [ 109.077330][ T6155] syzkaller0: entered allmulticast mode [ 109.168377][ T6170] x_tables: duplicate entry at hook 3 [ 109.423812][ T6185] __nla_validate_parse: 4 callbacks suppressed [ 109.423831][ T6185] netlink: 68 bytes leftover after parsing attributes in process `syz.1.98'. [ 109.500927][ T6188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.98'. [ 109.594129][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 110.908758][ T6188] dvmrp0: entered allmulticast mode [ 110.984143][ T6201] netlink: 128 bytes leftover after parsing attributes in process `syz.0.99'. [ 111.081208][ T6203] netlink: 36 bytes leftover after parsing attributes in process `syz.4.100'. [ 111.179332][ T6208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.105'. [ 111.277881][ T6214] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.105'. [ 111.605433][ T6226] netlink: 'syz.0.109': attribute type 9 has an invalid length. [ 111.625124][ T6220] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.634489][ T46] bond_slave_0: entered promiscuous mode [ 111.641043][ T46] bond_slave_1: entered promiscuous mode [ 111.866169][ T6231] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 112.194987][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.115'. [ 112.228153][ T6247] trusted_key: syz.2.117 sent an empty control message without MSG_MORE. [ 112.604615][ T6259] veth1_macvtap: left promiscuous mode [ 112.623664][ T6259] macsec0: entered promiscuous mode [ 112.640268][ T6259] macsec0: entered allmulticast mode [ 112.811782][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'. [ 112.886616][ T6269] Cannot find add_set index 0 as target [ 113.453128][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 113.534760][ T6284] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 113.747537][ T6298] FAULT_INJECTION: forcing a failure. [ 113.747537][ T6298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.785814][ T6298] CPU: 1 UID: 0 PID: 6298 Comm: syz.2.134 Not tainted syzkaller #0 PREEMPT(full) [ 113.785844][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 113.785858][ T6298] Call Trace: [ 113.785866][ T6298] [ 113.785875][ T6298] dump_stack_lvl+0xe8/0x150 [ 113.785921][ T6298] should_fail_ex+0x412/0x560 [ 113.785949][ T6298] _copy_from_user+0x2d/0xb0 [ 113.785976][ T6298] __copy_msghdr+0x3c5/0x5b0 [ 113.786006][ T6298] ___sys_sendmsg+0x213/0x360 [ 113.786029][ T6298] ? __lock_acquire+0x6b5/0x2cf0 [ 113.786057][ T6298] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.786121][ T6298] ? __fget_files+0x2a/0x420 [ 113.786147][ T6298] ? __fget_files+0x3a0/0x420 [ 113.786185][ T6298] __x64_sys_sendmsg+0x1bd/0x2a0 [ 113.786213][ T6298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 113.786265][ T6298] ? __pfx_ksys_write+0x10/0x10 [ 113.786308][ T6298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.786334][ T6298] do_syscall_64+0x174/0x580 [ 113.786359][ T6298] ? trace_irq_disable+0x3b/0x140 [ 113.786392][ T6298] ? clear_bhb_loop+0x40/0x90 [ 113.786421][ T6298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.786443][ T6298] RIP: 0033:0x7ff3fcb9ce59 [ 113.786473][ T6298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.786491][ T6298] RSP: 002b:00007ff3fd9f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.786517][ T6298] RAX: ffffffffffffffda RBX: 00007ff3fce15fa0 RCX: 00007ff3fcb9ce59 [ 113.786533][ T6298] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 113.786547][ T6298] RBP: 00007ff3fd9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 113.786560][ T6298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.786572][ T6298] R13: 00007ff3fce16038 R14: 00007ff3fce15fa0 R15: 00007ffede8975a8 [ 113.786613][ T6298] [ 114.096979][ T6302] syzkaller0: entered promiscuous mode [ 114.102604][ T6302] syzkaller0: entered allmulticast mode [ 114.433948][ T6312] syzkaller0: entered promiscuous mode [ 114.468773][ T6312] syzkaller0: entered allmulticast mode [ 114.584481][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 114.934642][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 115.038557][ T6343] syz_tun: entered allmulticast mode [ 115.264551][ T6354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.414618][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 115.502017][ T6361] syz.2.154 uses obsolete (PF_INET,SOCK_PACKET) [ 115.702474][ T6372] netlink: 388 bytes leftover after parsing attributes in process `syz.0.158'. [ 115.895728][ T6379] xt_NFQUEUE: number of total queues is 0 [ 116.212461][ T6397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.219858][ T6397] IPv6: NLM_F_CREATE should be set when creating new route [ 116.227150][ T6397] IPv6: NLM_F_CREATE should be set when creating new route [ 116.234507][ T6397] FAULT_INJECTION: forcing a failure. [ 116.234507][ T6397] name failslab, interval 1, probability 0, space 0, times 0 [ 116.248535][ T6397] CPU: 1 UID: 0 PID: 6397 Comm: syz.4.163 Not tainted syzkaller #0 PREEMPT(full) [ 116.248562][ T6397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 116.248574][ T6397] Call Trace: [ 116.248584][ T6397] [ 116.248593][ T6397] dump_stack_lvl+0xe8/0x150 [ 116.248623][ T6397] should_fail_ex+0x412/0x560 [ 116.248651][ T6397] should_failslab+0xa8/0x100 [ 116.248675][ T6397] __kmalloc_noprof+0xe8/0x760 [ 116.248707][ T6397] ? nsim_fib_event_nb+0x28e/0x1210 [ 116.248737][ T6397] ? __kmalloc_cache_noprof+0x15b/0x660 [ 116.248773][ T6397] nsim_fib_event_nb+0x28e/0x1210 [ 116.248807][ T6397] ? atomic_notifier_call_chain+0x26/0x180 [ 116.248833][ T6397] ? lock_acquire+0x106/0x350 [ 116.248862][ T6397] notifier_call_chain+0x1ad/0x3d0 [ 116.248893][ T6397] ? atomic_notifier_call_chain+0x26/0x180 [ 116.248923][ T6397] atomic_notifier_call_chain+0xda/0x180 [ 116.248954][ T6397] call_fib_notifiers+0x31/0x60 [ 116.248979][ T6397] fib6_add_rt2node+0x15ff/0x3940 [ 116.249021][ T6397] ? rcu_is_watching+0x15/0xb0 [ 116.249047][ T6397] ? trace_kmem_cache_alloc+0x29/0xe0 [ 116.249088][ T6397] ? kmem_cache_alloc_noprof+0x307/0x650 [ 116.249115][ T6397] ? fib6_add_1+0x714/0x1460 [ 116.249141][ T6397] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 116.249172][ T6397] ? fib6_add_1+0xe7f/0x1460 [ 116.249215][ T6397] fib6_add+0x8e7/0x18c0 [ 116.249260][ T6397] ? __pfx_fib6_add+0x10/0x10 [ 116.249295][ T6397] ? ip6_route_add+0xc9/0x1b0 [ 116.249326][ T6397] ip6_route_add+0xde/0x1b0 [ 116.249356][ T6397] inet6_rtm_newroute+0x268/0x19e0 [ 116.249390][ T6397] ? __lock_acquire+0x6b5/0x2cf0 [ 116.249418][ T6397] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 116.249440][ T6397] ? nlmon_xmit+0xb0/0x100 [ 116.249523][ T6397] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 116.249548][ T6397] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 116.249574][ T6397] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 116.249595][ T6397] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.249615][ T6397] ? ref_tracker_free+0x693/0x840 [ 116.249642][ T6397] ? __pfx_ref_tracker_free+0x10/0x10 [ 116.249664][ T6397] ? __asan_memcpy+0x40/0x70 [ 116.249690][ T6397] ? __skb_clone+0x63/0x7a0 [ 116.249724][ T6397] netlink_rcv_skb+0x232/0x4b0 [ 116.249751][ T6397] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.249775][ T6397] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.249814][ T6397] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.249839][ T6397] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.249870][ T6397] netlink_unicast+0x75c/0x8e0 [ 116.249904][ T6397] netlink_sendmsg+0x813/0xb40 [ 116.249940][ T6397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.249970][ T6397] ? aa_sock_msg_perm+0xf1/0x1b0 [ 116.250005][ T6397] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.250038][ T6397] ____sys_sendmsg+0x972/0x9f0 [ 116.250101][ T6397] ? __might_fault+0xaf/0x130 [ 116.250137][ T6397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.250172][ T6397] ? import_iovec+0x73/0xa0 [ 116.250202][ T6397] ___sys_sendmsg+0x2a5/0x360 [ 116.250225][ T6397] ? __lock_acquire+0x6b5/0x2cf0 [ 116.250254][ T6397] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.250318][ T6397] ? __fget_files+0x2a/0x420 [ 116.250344][ T6397] ? __fget_files+0x3a0/0x420 [ 116.250383][ T6397] __x64_sys_sendmsg+0x1bd/0x2a0 [ 116.250411][ T6397] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.250447][ T6397] ? __pfx_ksys_write+0x10/0x10 [ 116.250488][ T6397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.250511][ T6397] do_syscall_64+0x174/0x580 [ 116.250534][ T6397] ? trace_irq_disable+0x3b/0x140 [ 116.250567][ T6397] ? clear_bhb_loop+0x40/0x90 [ 116.250595][ T6397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.250616][ T6397] RIP: 0033:0x7fd7caf9ce59 [ 116.250636][ T6397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.250654][ T6397] RSP: 002b:00007fd7cbe35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.250677][ T6397] RAX: ffffffffffffffda RBX: 00007fd7cb215fa0 RCX: 00007fd7caf9ce59 [ 116.250692][ T6397] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 116.250706][ T6397] RBP: 00007fd7cbe35090 R08: 0000000000000000 R09: 0000000000000000 [ 116.250718][ T6397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.250730][ T6397] R13: 00007fd7cb216038 R14: 00007fd7cb215fa0 R15: 00007fff2ea22248 [ 116.250765][ T6397] [ 116.793449][ T6391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.162'. [ 116.900921][ T6413] netlink: 100 bytes leftover after parsing attributes in process `syz.1.167'. [ 117.069386][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 117.150295][ T6426] syz_tun: entered allmulticast mode [ 117.206909][ T6414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.411852][ T6435] netlink: 128 bytes leftover after parsing attributes in process `syz.4.174'. [ 117.861211][ T6453] netlink: 'syz.2.181': attribute type 9 has an invalid length. [ 118.004582][ T6456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.182'. [ 118.062474][ T6456] ip6gre1: entered promiscuous mode [ 118.067761][ T6456] ip6gre1: entered allmulticast mode [ 118.152123][ T6468] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 118.546377][ T6483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.557238][ T6474] openvswitch: netlink: Flow key attr not present in new flow. [ 118.585494][ T6483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.632308][ T6483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.662018][ T6486] pim6reg: entered allmulticast mode [ 118.672572][ T6483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.335631][ T6508] Cannot find add_set index 0 as target [ 119.783403][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 119.892880][ T6522] team0: Port device team_slave_0 removed [ 120.008737][ T6535] xt_policy: output policy not valid in PREROUTING and INPUT [ 120.021724][ T6536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.083004][ T6536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.235062][ T6540] bridge_slave_0: left allmulticast mode [ 120.261141][ T6536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.305314][ T6540] bridge_slave_0: left promiscuous mode [ 120.333547][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.403992][ T6540] bridge_slave_1: left allmulticast mode [ 120.416068][ T6540] bridge_slave_1: left promiscuous mode [ 120.436144][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.485941][ T6540] bond0: (slave bond_slave_0): Releasing backup interface [ 120.508038][ T6540] bond_slave_0: left promiscuous mode [ 120.540435][ T6540] bond0: (slave bond_slave_1): Releasing backup interface [ 120.624466][ T6540] bond_slave_1: left promiscuous mode [ 120.710750][ T6540] team0: Port device team_slave_1 removed [ 120.741360][ T6540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.764496][ T6540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.797068][ T6540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.812927][ T6540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.842958][ T6540] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.306737][ T6552] Cannot find add_set index 1 as target [ 121.492922][ T6557] FAULT_INJECTION: forcing a failure. [ 121.492922][ T6557] name failslab, interval 1, probability 0, space 0, times 0 [ 121.613860][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: syz.3.221 Not tainted syzkaller #0 PREEMPT(full) [ 121.613890][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.613903][ T6557] Call Trace: [ 121.613912][ T6557] [ 121.613920][ T6557] dump_stack_lvl+0xe8/0x150 [ 121.613950][ T6557] should_fail_ex+0x412/0x560 [ 121.613979][ T6557] should_failslab+0xa8/0x100 [ 121.614000][ T6557] ? dst_alloc+0x105/0x170 [ 121.614029][ T6557] kmem_cache_alloc_noprof+0x87/0x650 [ 121.614068][ T6557] dst_alloc+0x105/0x170 [ 121.614101][ T6557] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 121.614138][ T6557] ? ip_route_output_key_hash_rcu+0x1ce1/0x25d0 [ 121.614193][ T6557] ? ip_route_output_key_hash+0xd8/0x2a0 [ 121.614228][ T6557] ip_route_output_key_hash+0x18d/0x2a0 [ 121.614283][ T6557] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 121.614336][ T6557] ip_route_output_flow+0x2a/0x150 [ 121.614365][ T6557] ? security_sk_classify_flow+0x6d/0x150 [ 121.614398][ T6557] raw_sendmsg+0x1199/0x1a50 [ 121.614447][ T6557] ? __pfx_raw_sendmsg+0x10/0x10 [ 121.614496][ T6557] ? aa_sk_perm+0x6d5/0x900 [ 121.614536][ T6557] ? __pfx_aa_sk_perm+0x10/0x10 [ 121.614564][ T6557] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 121.614603][ T6557] ? sock_rps_record_flow+0x19/0x350 [ 121.614640][ T6557] ? inet_sendmsg+0x2f4/0x370 [ 121.614671][ T6557] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 121.614706][ T6557] ____sys_sendmsg+0x80a/0x9f0 [ 121.614742][ T6557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.614777][ T6557] ? import_iovec+0x73/0xa0 [ 121.614808][ T6557] ___sys_sendmsg+0x2a5/0x360 [ 121.614831][ T6557] ? __lock_acquire+0x6b5/0x2cf0 [ 121.614860][ T6557] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.614925][ T6557] ? __fget_files+0x2a/0x420 [ 121.614954][ T6557] ? __fget_files+0x3a0/0x420 [ 121.614994][ T6557] __x64_sys_sendmsg+0x1bd/0x2a0 [ 121.615024][ T6557] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.615062][ T6557] ? __pfx_ksys_write+0x10/0x10 [ 121.615104][ T6557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.615129][ T6557] do_syscall_64+0x174/0x580 [ 121.615153][ T6557] ? trace_irq_disable+0x3b/0x140 [ 121.615193][ T6557] ? clear_bhb_loop+0x40/0x90 [ 121.615221][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.615243][ T6557] RIP: 0033:0x7fabe1d9ce59 [ 121.615263][ T6557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.615281][ T6557] RSP: 002b:00007fabe2c3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.615304][ T6557] RAX: ffffffffffffffda RBX: 00007fabe2015fa0 RCX: 00007fabe1d9ce59 [ 121.615320][ T6557] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 121.615333][ T6557] RBP: 00007fabe2c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 121.615346][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.615358][ T6557] R13: 00007fabe2016038 R14: 00007fabe2015fa0 R15: 00007ffc85d1eba8 [ 121.615393][ T6557] [ 121.993902][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 122.125092][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.224'. [ 122.366315][ T6572] xt_bpf: check failed: parse error [ 122.870382][ T6582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.558914][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 124.128185][ T6614] netlink: 24 bytes leftover after parsing attributes in process `syz.4.239'. [ 124.297697][ T6625] netlink: 67 bytes leftover after parsing attributes in process `syz.0.242'. [ 124.422023][ T6627] netlink: 272 bytes leftover after parsing attributes in process `syz.0.242'. [ 125.313397][ T6629] netlink: 388 bytes leftover after parsing attributes in process `syz.1.244'. [ 125.440895][ T6623] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 125.463502][ T6636] FAULT_INJECTION: forcing a failure. [ 125.463502][ T6636] name failslab, interval 1, probability 0, space 0, times 0 [ 125.490833][ T6623] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 125.500918][ T6636] CPU: 0 UID: 0 PID: 6636 Comm: syz.2.245 Not tainted syzkaller #0 PREEMPT(full) [ 125.500946][ T6636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.500959][ T6636] Call Trace: [ 125.500966][ T6636] [ 125.500975][ T6636] dump_stack_lvl+0xe8/0x150 [ 125.501005][ T6636] should_fail_ex+0x412/0x560 [ 125.501034][ T6636] should_failslab+0xa8/0x100 [ 125.501055][ T6636] ? skb_clone+0x212/0x3a0 [ 125.501081][ T6636] kmem_cache_alloc_noprof+0x87/0x650 [ 125.501112][ T6636] ? __netlink_lookup+0xc6/0x8b0 [ 125.501148][ T6636] skb_clone+0x212/0x3a0 [ 125.501177][ T6636] __netlink_deliver_tap+0x404/0x850 [ 125.501216][ T6636] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.501243][ T6636] netlink_deliver_tap+0x19c/0x1b0 [ 125.501270][ T6636] netlink_unicast+0x730/0x8e0 [ 125.501305][ T6636] netlink_sendmsg+0x813/0xb40 [ 125.501341][ T6636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.501371][ T6636] ? aa_sock_msg_perm+0xf1/0x1b0 [ 125.501405][ T6636] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 125.501439][ T6636] ____sys_sendmsg+0x972/0x9f0 [ 125.501463][ T6636] ? __might_fault+0xaf/0x130 [ 125.501500][ T6636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.501536][ T6636] ? import_iovec+0x73/0xa0 [ 125.501565][ T6636] ___sys_sendmsg+0x2a5/0x360 [ 125.501588][ T6636] ? __lock_acquire+0x6b5/0x2cf0 [ 125.501617][ T6636] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.501677][ T6636] ? __fget_files+0x2a/0x420 [ 125.501701][ T6636] ? __fget_files+0x3a0/0x420 [ 125.501739][ T6636] __x64_sys_sendmsg+0x1bd/0x2a0 [ 125.501767][ T6636] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.501810][ T6636] ? __pfx_ksys_write+0x10/0x10 [ 125.501852][ T6636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.501873][ T6636] do_syscall_64+0x174/0x580 [ 125.501896][ T6636] ? trace_irq_disable+0x3b/0x140 [ 125.501928][ T6636] ? clear_bhb_loop+0x40/0x90 [ 125.501954][ T6636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.501976][ T6636] RIP: 0033:0x7ff3fcb9ce59 [ 125.501996][ T6636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.502013][ T6636] RSP: 002b:00007ff3fd9f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.502035][ T6636] RAX: ffffffffffffffda RBX: 00007ff3fce15fa0 RCX: 00007ff3fcb9ce59 [ 125.502051][ T6636] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 125.502064][ T6636] RBP: 00007ff3fd9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 125.502077][ T6636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.502089][ T6636] R13: 00007ff3fce16038 R14: 00007ff3fce15fa0 R15: 00007ffede8975a8 [ 125.502122][ T6636] [ 125.873712][ T6625] bond_slave_0: entered promiscuous mode [ 125.880581][ T6625] bond_slave_1: entered promiscuous mode [ 125.933439][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.940699][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.955818][ T6631] pimreg: entered allmulticast mode [ 126.326822][ T6645] FAULT_INJECTION: forcing a failure. [ 126.326822][ T6645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.444491][ T6645] CPU: 0 UID: 0 PID: 6645 Comm: syz.1.248 Not tainted syzkaller #0 PREEMPT(full) [ 126.444521][ T6645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.444534][ T6645] Call Trace: [ 126.444543][ T6645] [ 126.444552][ T6645] dump_stack_lvl+0xe8/0x150 [ 126.444583][ T6645] should_fail_ex+0x412/0x560 [ 126.444612][ T6645] _copy_from_user+0x2d/0xb0 [ 126.444639][ T6645] kstrtouint_from_user+0xd6/0x180 [ 126.444677][ T6645] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 126.444730][ T6645] proc_fail_nth_write+0x8e/0x210 [ 126.444760][ T6645] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 126.444796][ T6645] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 126.444827][ T6645] vfs_write+0x29a/0xb90 [ 126.444870][ T6645] ? __pfx_vfs_write+0x10/0x10 [ 126.444903][ T6645] ? __fget_files+0x2a/0x420 [ 126.444935][ T6645] ? __fget_files+0x3a0/0x420 [ 126.444961][ T6645] ? __fget_files+0x2a/0x420 [ 126.444998][ T6645] ksys_write+0x150/0x270 [ 126.445032][ T6645] ? __pfx_ksys_write+0x10/0x10 [ 126.445074][ T6645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.445098][ T6645] do_syscall_64+0x174/0x580 [ 126.445122][ T6645] ? trace_irq_disable+0x3b/0x140 [ 126.445154][ T6645] ? clear_bhb_loop+0x40/0x90 [ 126.445181][ T6645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.445208][ T6645] RIP: 0033:0x7fb197d5d68e [ 126.445228][ T6645] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 126.445245][ T6645] RSP: 002b:00007fb198becfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.445267][ T6645] RAX: ffffffffffffffda RBX: 00007fb198bed6c0 RCX: 00007fb197d5d68e [ 126.445283][ T6645] RDX: 0000000000000001 RSI: 00007fb198bed0a0 RDI: 0000000000000042 [ 126.445296][ T6645] RBP: 00007fb198bed090 R08: 0000000000000000 R09: 0000000000000000 [ 126.445309][ T6645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.445329][ T6645] R13: 00007fb198016038 R14: 00007fb198015fa0 R15: 00007ffd0b483a18 [ 126.445365][ T6645] [ 126.719132][ T6654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.733808][ T6654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.745575][ T6654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.760039][ T6654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.849125][ T6657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.856443][ T6657] IPv6: NLM_F_CREATE should be set when creating new route [ 126.863758][ T6657] IPv6: NLM_F_CREATE should be set when creating new route [ 126.871113][ T6657] FAULT_INJECTION: forcing a failure. [ 126.871113][ T6657] name failslab, interval 1, probability 0, space 0, times 0 [ 126.883841][ T6657] CPU: 0 UID: 0 PID: 6657 Comm: syz.3.254 Not tainted syzkaller #0 PREEMPT(full) [ 126.883868][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 126.883881][ T6657] Call Trace: [ 126.883889][ T6657] [ 126.883899][ T6657] dump_stack_lvl+0xe8/0x150 [ 126.883929][ T6657] should_fail_ex+0x412/0x560 [ 126.883959][ T6657] should_failslab+0xa8/0x100 [ 126.883983][ T6657] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 126.884016][ T6657] ? __alloc_skb+0x1d0/0x7d0 [ 126.884035][ T6657] ? __local_bh_enable_ip+0xd0/0x130 [ 126.884063][ T6657] __alloc_skb+0x1d0/0x7d0 [ 126.884088][ T6657] ? inet6_rt_notify+0xaf/0x470 [ 126.884117][ T6657] inet6_rt_notify+0x170/0x470 [ 126.884150][ T6657] ? atomic_notifier_call_chain+0x16e/0x180 [ 126.884190][ T6657] fib6_add_rt2node+0x1889/0x3940 [ 126.884245][ T6657] ? rcu_is_watching+0x15/0xb0 [ 126.884272][ T6657] ? trace_kmem_cache_alloc+0x29/0xe0 [ 126.884304][ T6657] ? kmem_cache_alloc_noprof+0x307/0x650 [ 126.884332][ T6657] ? fib6_add_1+0x714/0x1460 [ 126.884358][ T6657] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 126.884389][ T6657] ? fib6_add_1+0xe7f/0x1460 [ 126.884432][ T6657] fib6_add+0x8e7/0x18c0 [ 126.884471][ T6657] ? __pfx_fib6_add+0x10/0x10 [ 126.884507][ T6657] ? ip6_route_add+0xc9/0x1b0 [ 126.884537][ T6657] ip6_route_add+0xde/0x1b0 [ 126.884568][ T6657] inet6_rtm_newroute+0x268/0x19e0 [ 126.884601][ T6657] ? kasan_quarantine_put+0xbb/0x1f0 [ 126.884631][ T6657] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.884659][ T6657] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 126.884681][ T6657] ? nlmon_xmit+0xb0/0x100 [ 126.884700][ T6657] ? kmem_cache_free+0x182/0x650 [ 126.884745][ T6657] ? __lock_acquire+0x6b5/0x2cf0 [ 126.884773][ T6657] ? __dev_queue_xmit+0x2b6/0x3950 [ 126.884804][ T6657] ? __local_bh_enable_ip+0xd0/0x130 [ 126.884826][ T6657] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.884881][ T6657] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 126.884905][ T6657] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 126.884932][ T6657] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 126.884952][ T6657] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 126.884972][ T6657] ? ref_tracker_free+0x693/0x840 [ 126.884999][ T6657] ? __pfx_ref_tracker_free+0x10/0x10 [ 126.885020][ T6657] ? __asan_memcpy+0x40/0x70 [ 126.885046][ T6657] ? __skb_clone+0x63/0x7a0 [ 126.885079][ T6657] netlink_rcv_skb+0x232/0x4b0 [ 126.885106][ T6657] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 126.885131][ T6657] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 126.885170][ T6657] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.885194][ T6657] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.885232][ T6657] netlink_unicast+0x75c/0x8e0 [ 126.885284][ T6657] netlink_sendmsg+0x813/0xb40 [ 126.885330][ T6657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.885368][ T6657] ? aa_sock_msg_perm+0xf1/0x1b0 [ 126.885420][ T6657] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.885462][ T6657] ____sys_sendmsg+0x972/0x9f0 [ 126.885487][ T6657] ? __might_fault+0xaf/0x130 [ 126.885523][ T6657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.885558][ T6657] ? import_iovec+0x73/0xa0 [ 126.885588][ T6657] ___sys_sendmsg+0x2a5/0x360 [ 126.885611][ T6657] ? __lock_acquire+0x6b5/0x2cf0 [ 126.885639][ T6657] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.885705][ T6657] ? __fget_files+0x2a/0x420 [ 126.885730][ T6657] ? __fget_files+0x3a0/0x420 [ 126.885777][ T6657] __x64_sys_sendmsg+0x1bd/0x2a0 [ 126.885811][ T6657] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.885848][ T6657] ? __pfx_ksys_write+0x10/0x10 [ 126.885890][ T6657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.885915][ T6657] do_syscall_64+0x174/0x580 [ 126.885938][ T6657] ? trace_irq_disable+0x3b/0x140 [ 126.885970][ T6657] ? clear_bhb_loop+0x40/0x90 [ 126.885998][ T6657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.886020][ T6657] RIP: 0033:0x7fabe1d9ce59 [ 126.886053][ T6657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.886071][ T6657] RSP: 002b:00007fabe2c3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.886094][ T6657] RAX: ffffffffffffffda RBX: 00007fabe2015fa0 RCX: 00007fabe1d9ce59 [ 126.886109][ T6657] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 126.886122][ T6657] RBP: 00007fabe2c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 126.886151][ T6657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.886164][ T6657] R13: 00007fabe2016038 R14: 00007fabe2015fa0 R15: 00007ffc85d1eba8 [ 126.886199][ T6657] [ 127.352867][ T6653] Bluetooth: MGMT ver 1.23 [ 127.968887][ T2175] IPVS: starting estimator thread 0... [ 128.072749][ T6663] IPVS: using max 24 ests per chain, 57600 per kthread [ 128.252559][ T6668] syz.1.253: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 128.447144][ T2175] hid (null): unknown global tag 0xb4 [ 128.494416][ T2175] hid (null): unknown global tag 0xd [ 128.528834][ T6668] CPU: 0 UID: 0 PID: 6668 Comm: syz.1.253 Not tainted syzkaller #0 PREEMPT(full) [ 128.528865][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.528879][ T6668] Call Trace: [ 128.528893][ T6668] [ 128.528903][ T6668] dump_stack_lvl+0xe8/0x150 [ 128.528934][ T6668] warn_alloc+0x249/0x340 [ 128.528970][ T6668] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 128.528998][ T6668] ? __pfx_warn_alloc+0x10/0x10 [ 128.529039][ T6668] ? kasan_save_track+0x4f/0x80 [ 128.529069][ T6668] ? kasan_save_track+0x3e/0x80 [ 128.529098][ T6668] ? __kasan_kmalloc+0x93/0xb0 [ 128.529130][ T6668] ? __kmalloc_cache_noprof+0x31c/0x660 [ 128.529161][ T6668] ? xskq_create+0x56/0x170 [ 128.529194][ T6668] ? xsk_setsockopt+0x54c/0x990 [ 128.529224][ T6668] ? do_sock_setsockopt+0x17c/0x1b0 [ 128.529245][ T6668] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 128.529267][ T6668] ? do_syscall_64+0x174/0x580 [ 128.529296][ T6668] __vmalloc_node_range_noprof+0x132/0x1750 [ 128.529366][ T6668] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 128.529406][ T6668] ? __kasan_kmalloc+0x93/0xb0 [ 128.529446][ T6668] vmalloc_user_noprof+0xad/0xe0 [ 128.529478][ T6668] ? xskq_create+0xbf/0x170 [ 128.529521][ T6668] xskq_create+0xbf/0x170 [ 128.529560][ T6668] xsk_init_queue+0x8a/0xe0 [ 128.529597][ T6668] xsk_setsockopt+0x54c/0x990 [ 128.529633][ T6668] ? __pfx_xsk_setsockopt+0x10/0x10 [ 128.529666][ T6668] ? __pfx_aa_sk_perm+0x10/0x10 [ 128.529703][ T6668] ? aa_sock_opt_perm+0xff/0x1a0 [ 128.529740][ T6668] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 128.529770][ T6668] ? __pfx_xsk_setsockopt+0x10/0x10 [ 128.529805][ T6668] do_sock_setsockopt+0x17c/0x1b0 [ 128.529834][ T6668] __x64_sys_setsockopt+0x13d/0x1b0 [ 128.529862][ T6668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.529886][ T6668] do_syscall_64+0x174/0x580 [ 128.529910][ T6668] ? trace_irq_disable+0x3b/0x140 [ 128.529944][ T6668] ? clear_bhb_loop+0x40/0x90 [ 128.529972][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.529994][ T6668] RIP: 0033:0x7fb197d9ce59 [ 128.530015][ T6668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.530034][ T6668] RSP: 002b:00007fb198bab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 128.530057][ T6668] RAX: ffffffffffffffda RBX: 00007fb198016180 RCX: 00007fb197d9ce59 [ 128.530073][ T6668] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 128.530087][ T6668] RBP: 00007fb197e32d6f R08: 0000000000000004 R09: 0000000000000000 [ 128.530100][ T6668] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.530114][ T6668] R13: 00007fb198016218 R14: 00007fb198016180 R15: 00007ffd0b483a18 [ 128.530151][ T6668] [ 128.862087][ T6668] Mem-Info: [ 128.865871][ T6668] active_anon:5679 inactive_anon:0 isolated_anon:0 [ 128.865871][ T6668] active_file:3533 inactive_file:39964 isolated_file:0 [ 128.865871][ T6668] unevictable:768 dirty:92 writeback:0 [ 128.865871][ T6668] slab_reclaimable:9950 slab_unreclaimable:97251 [ 128.865871][ T6668] mapped:30514 shmem:1290 pagetables:1209 [ 128.865871][ T6668] sec_pagetables:0 bounce:0 [ 128.865871][ T6668] kernel_misc_reclaimable:0 [ 128.865871][ T6668] free:1332483 free_pcp:9328 free_cma:0 [ 128.912158][ T6668] Node 0 active_anon:22716kB inactive_anon:0kB active_file:14132kB inactive_file:159656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122056kB dirty:368kB writeback:0kB shmem:3624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11936kB pagetables:4692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 128.947264][ T6668] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 128.980775][ T6668] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.011225][ T6668] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 129.017055][ T6668] Node 0 DMA32 free:1366580kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22716kB inactive_anon:0kB active_file:14132kB inactive_file:159656kB unevictable:1536kB writepending:368kB zspages:0kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:37132kB local_pcp:22576kB free_cma:0kB [ 129.055829][ T6668] lowmem_reserve[]: 0 0 0 0 0 [ 129.065775][ T6668] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.097243][ T6668] lowmem_reserve[]: 0 0 0 0 0 [ 129.102082][ T6668] Node 1 Normal free:3947460kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.134012][ T6668] lowmem_reserve[]: 0 0 0 0 0 [ 129.138843][ T6668] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.233405][ T6668] Node 0 DMA32: 639*4kB (UME) 332*8kB (UME) 236*16kB (ME) 201*32kB (UME) 100*64kB (UME) 46*128kB (UME) 28*256kB (UM) 12*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 322*4096kB (UM) = 1368124kB [ 129.399936][ T6668] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 129.422431][ T2175] hid-generic 0005:05C2:0040.0001: unexpected long global item [ 129.497287][ T2175] hid-generic 0005:05C2:0040.0001: probe with driver hid-generic failed with error -22 [ 129.570473][ T6668] Node 1 Normal: 7*4kB (UM) 11*8kB (UM) 7*16kB (UM) 7*32kB (UM) 8*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3947460kB [ 129.592416][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 129.701297][ T6668] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.791668][ T6668] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 129.872636][ T6668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.956850][ T6668] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.024321][ T6668] 44785 total pagecache pages [ 130.058392][ T6668] 0 pages in swap cache [ 130.074267][ T6695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.265'. [ 130.084898][ T6668] Free swap = 124996kB [ 130.098891][ T6668] Total swap = 124996kB [ 130.169894][ T6668] 2097051 pages RAM [ 130.202716][ T6668] 0 pages HighMem/MovableOnly [ 130.217387][ T6668] 427144 pages reserved [ 130.256785][ T6668] 0 pages cma reserved [ 130.347933][ T6695] syzkaller0: entered promiscuous mode [ 130.404302][ T6695] syzkaller0: entered allmulticast mode [ 130.505983][ T6702] tipc: Started in network mode [ 130.534644][ T6702] tipc: Node identity 124a5a731df5, cluster identity 4711 [ 130.676527][ T6702] tipc: Enabled bearer , priority 0 [ 130.717554][ T6711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.775649][ T6707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.811359][ T6707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.835702][ T6707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.857179][ T6694] tipc: Resetting bearer [ 130.956161][ T6694] tipc: Disabling bearer [ 132.168856][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 132.285432][ T6744] Cannot find add_set index 1 as target [ 132.363407][ T6743] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 132.364634][ T5768] IPVS: starting estimator thread 0... [ 132.560036][ T6747] IPVS: using max 24 ests per chain, 57600 per kthread [ 132.612040][ T6753] netlink: 'syz.3.285': attribute type 1 has an invalid length. [ 132.833135][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 132.918859][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.934609][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.015816][ T6765] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 133.227078][ T6759] syzkaller0: refused to change device tx_queue_len [ 133.376882][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 133.620032][ T6776] xt_bpf: check failed: parse error [ 134.838102][ T6799] FAULT_INJECTION: forcing a failure. [ 134.838102][ T6799] name failslab, interval 1, probability 0, space 0, times 0 [ 134.924258][ T6799] CPU: 0 UID: 0 PID: 6799 Comm: syz.2.300 Not tainted syzkaller #0 PREEMPT(full) [ 134.924288][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.924300][ T6799] Call Trace: [ 134.924309][ T6799] [ 134.924318][ T6799] dump_stack_lvl+0xe8/0x150 [ 134.924349][ T6799] should_fail_ex+0x412/0x560 [ 134.924378][ T6799] should_failslab+0xa8/0x100 [ 134.924399][ T6799] ? skb_clone+0x212/0x3a0 [ 134.924425][ T6799] kmem_cache_alloc_noprof+0x87/0x650 [ 134.924465][ T6799] skb_clone+0x212/0x3a0 [ 134.924495][ T6799] __netlink_deliver_tap+0x404/0x850 [ 134.924535][ T6799] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.924562][ T6799] netlink_deliver_tap+0x19c/0x1b0 [ 134.924590][ T6799] netlink_sendskb+0x68/0x140 [ 134.924615][ T6799] netlink_rcv_skb+0x2b6/0x4b0 [ 134.924640][ T6799] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 134.924666][ T6799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.924704][ T6799] ? bpf_lsm_capable+0x9/0x20 [ 134.924725][ T6799] ? security_capable+0x7e/0x2c0 [ 134.924764][ T6799] nfnetlink_rcv+0x2c0/0x27b0 [ 134.924789][ T6799] ? preempt_schedule_common+0x82/0xd0 [ 134.924813][ T6799] ? preempt_schedule_thunk+0x16/0x30 [ 134.924851][ T6799] ? __local_bh_enable_ip+0xe1/0x130 [ 134.924872][ T6799] ? __dev_queue_xmit+0x2b6/0x3950 [ 134.924898][ T6799] ? __dev_queue_xmit+0x1fe5/0x3950 [ 134.924921][ T6799] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 134.924954][ T6799] ? __dev_queue_xmit+0x2b6/0x3950 [ 134.924986][ T6799] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 134.925009][ T6799] ? __lock_acquire+0x6b5/0x2cf0 [ 134.925037][ T6799] ? __pfx___dev_queue_xmit+0x10/0x10 [ 134.925072][ T6799] ? ref_tracker_free+0x693/0x840 [ 134.925108][ T6799] ? __pfx_ref_tracker_free+0x10/0x10 [ 134.925136][ T6799] ? do_raw_spin_lock+0x12b/0x2f0 [ 134.925179][ T6799] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 134.925202][ T6799] ? lockdep_hardirqs_on+0x7a/0x110 [ 134.925225][ T6799] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 134.925250][ T6799] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 134.925307][ T6799] netlink_unicast+0x75c/0x8e0 [ 134.925342][ T6799] netlink_sendmsg+0x813/0xb40 [ 134.925379][ T6799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.925408][ T6799] ? aa_sock_msg_perm+0xf1/0x1b0 [ 134.925443][ T6799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.925506][ T6799] ____sys_sendmsg+0x972/0x9f0 [ 134.925530][ T6799] ? __might_fault+0xaf/0x130 [ 134.925565][ T6799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.925598][ T6799] ? import_iovec+0x73/0xa0 [ 134.925628][ T6799] ___sys_sendmsg+0x2a5/0x360 [ 134.925649][ T6799] ? __lock_acquire+0x6b5/0x2cf0 [ 134.925676][ T6799] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.925759][ T6799] ? __fget_files+0x2a/0x420 [ 134.925785][ T6799] ? __fget_files+0x3a0/0x420 [ 134.925824][ T6799] __x64_sys_sendmsg+0x1bd/0x2a0 [ 134.925852][ T6799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.925888][ T6799] ? __pfx_ksys_write+0x10/0x10 [ 134.925931][ T6799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.925955][ T6799] do_syscall_64+0x174/0x580 [ 134.925978][ T6799] ? trace_irq_disable+0x3b/0x140 [ 134.926010][ T6799] ? clear_bhb_loop+0x40/0x90 [ 134.926037][ T6799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.926059][ T6799] RIP: 0033:0x7ff3fcb9ce59 [ 134.926080][ T6799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.926104][ T6799] RSP: 002b:00007ff3fd9f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.926126][ T6799] RAX: ffffffffffffffda RBX: 00007ff3fce15fa0 RCX: 00007ff3fcb9ce59 [ 134.926142][ T6799] RDX: 0000000020004000 RSI: 0000200000000540 RDI: 0000000000000009 [ 134.926156][ T6799] RBP: 00007ff3fd9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 134.926168][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.926180][ T6799] R13: 00007ff3fce16038 R14: 00007ff3fce15fa0 R15: 00007ffede8975a8 [ 134.926215][ T6799] [ 135.533345][ T6807] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.302'. [ 135.543753][ T6807] netlink: 40 bytes leftover after parsing attributes in process `syz.3.302'. [ 135.602916][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 135.620286][ T6810] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 135.628292][ T6810] netlink: 'syz.3.302': attribute type 2 has an invalid length. [ 135.825895][ T6795] syzkaller0: entered promiscuous mode [ 135.845442][ T6795] syzkaller0: entered allmulticast mode [ 135.976003][ T6792] syz.1.299 (6792) used greatest stack depth: 16224 bytes left [ 136.832446][ T6825] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 136.872256][ T2175] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 137.229520][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 137.240274][ T6836] netlink: 380 bytes leftover after parsing attributes in process `syz.0.315'. [ 138.309028][ T6863] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 139.847249][ T6894] xt_bpf: check failed: parse error [ 140.881081][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 140.952446][ T6910] batadv_slave_1: entered promiscuous mode [ 141.022705][ T6908] batadv_slave_1: left promiscuous mode [ 141.403582][ T6923] Cannot find add_set index 1 as target [ 141.793424][ T6930] Cannot find add_set index 0 as target [ 142.202346][ T6936] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 142.245262][ T2175] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 142.254291][ T6942] netlink: 388 bytes leftover after parsing attributes in process `syz.1.354'. [ 142.470255][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 143.014921][ T6943] gretap1: entered allmulticast mode [ 143.312953][ T6954] netlink: 'syz.0.358': attribute type 9 has an invalid length. [ 143.369480][ T6957] FAULT_INJECTION: forcing a failure. [ 143.369480][ T6957] name failslab, interval 1, probability 0, space 0, times 0 [ 143.417067][ T6957] CPU: 0 UID: 0 PID: 6957 Comm: syz.2.356 Not tainted syzkaller #0 PREEMPT(full) [ 143.417096][ T6957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 143.417109][ T6957] Call Trace: [ 143.417117][ T6957] [ 143.417127][ T6957] dump_stack_lvl+0xe8/0x150 [ 143.417157][ T6957] should_fail_ex+0x412/0x560 [ 143.417186][ T6957] should_failslab+0xa8/0x100 [ 143.417210][ T6957] __kmalloc_noprof+0xe8/0x760 [ 143.417242][ T6957] ? ethnl_default_set_doit+0x168/0xd70 [ 143.417278][ T6957] ethnl_default_set_doit+0x168/0xd70 [ 143.417309][ T6957] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 143.417350][ T6957] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 143.417393][ T6957] genl_family_rcv_msg_doit+0x22a/0x330 [ 143.417426][ T6957] ? __asan_memcpy+0x40/0x70 [ 143.417458][ T6957] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 143.417505][ T6957] ? bpf_lsm_capable+0x9/0x20 [ 143.417527][ T6957] ? security_capable+0x7e/0x2c0 [ 143.417565][ T6957] genl_rcv_msg+0x61c/0x7a0 [ 143.417603][ T6957] ? __pfx_genl_rcv_msg+0x10/0x10 [ 143.417634][ T6957] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 143.417665][ T6957] ? __pfx_ref_tracker_free+0x10/0x10 [ 143.417687][ T6957] ? __asan_memcpy+0x40/0x70 [ 143.417714][ T6957] ? __skb_clone+0x63/0x7a0 [ 143.417747][ T6957] netlink_rcv_skb+0x232/0x4b0 [ 143.417774][ T6957] ? __pfx_genl_rcv_msg+0x10/0x10 [ 143.417810][ T6957] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.417854][ T6957] ? down_read+0x270/0x2e0 [ 143.417879][ T6957] ? genl_rcv+0xd/0x40 [ 143.417911][ T6957] genl_rcv+0x28/0x40 [ 143.417940][ T6957] netlink_unicast+0x75c/0x8e0 [ 143.417975][ T6957] netlink_sendmsg+0x813/0xb40 [ 143.418011][ T6957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.418042][ T6957] ? aa_sock_msg_perm+0xf1/0x1b0 [ 143.418077][ T6957] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.418110][ T6957] ____sys_sendmsg+0x972/0x9f0 [ 143.418134][ T6957] ? __might_fault+0xaf/0x130 [ 143.418170][ T6957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.418204][ T6957] ? import_iovec+0x73/0xa0 [ 143.418233][ T6957] ___sys_sendmsg+0x2a5/0x360 [ 143.418256][ T6957] ? __lock_acquire+0x6b5/0x2cf0 [ 143.418284][ T6957] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.418356][ T6957] ? __fget_files+0x2a/0x420 [ 143.418384][ T6957] ? __fget_files+0x3a0/0x420 [ 143.418422][ T6957] __x64_sys_sendmsg+0x1bd/0x2a0 [ 143.418451][ T6957] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.418487][ T6957] ? __pfx_ksys_write+0x10/0x10 [ 143.418529][ T6957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.418553][ T6957] do_syscall_64+0x174/0x580 [ 143.418576][ T6957] ? trace_irq_disable+0x3b/0x140 [ 143.418609][ T6957] ? clear_bhb_loop+0x40/0x90 [ 143.418636][ T6957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.418657][ T6957] RIP: 0033:0x7ff3fcb9ce59 [ 143.418678][ T6957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.418695][ T6957] RSP: 002b:00007ff3fd9f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.418718][ T6957] RAX: ffffffffffffffda RBX: 00007ff3fce15fa0 RCX: 00007ff3fcb9ce59 [ 143.418734][ T6957] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 143.418747][ T6957] RBP: 00007ff3fd9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 143.418760][ T6957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.418772][ T6957] R13: 00007ff3fce16038 R14: 00007ff3fce15fa0 R15: 00007ffede8975a8 [ 143.418808][ T6957] [ 144.186851][ T6965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.194215][ T6965] IPv6: NLM_F_CREATE should be set when creating new route [ 144.201512][ T6965] IPv6: NLM_F_CREATE should be set when creating new route [ 144.281414][ T6970] netlink: 'syz.1.363': attribute type 84 has an invalid length. [ 144.302668][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 144.330821][ T6969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.362'. [ 144.350913][ T6969] veth1_to_team: entered promiscuous mode [ 144.362503][ T6969] veth1_to_team: left promiscuous mode [ 144.695112][ T6977] netlink: 196 bytes leftover after parsing attributes in process `syz.0.366'. [ 145.397723][ T7001] xt_bpf: check failed: parse error [ 146.383209][ T7006] macvtap1: entered promiscuous mode [ 146.423055][ T7006] bridge0: entered promiscuous mode [ 147.017840][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 147.045291][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 147.453500][ T7035] netlink: 24 bytes leftover after parsing attributes in process `syz.4.381'. [ 147.464268][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.380'. [ 147.603461][ T7042] netlink: 140 bytes leftover after parsing attributes in process `syz.3.382'. [ 147.631742][ T7035] ip6gre1: entered promiscuous mode [ 147.659168][ T7035] ip6gre1: entered allmulticast mode [ 148.514713][ T7056] netlink: 'syz.4.386': attribute type 21 has an invalid length. [ 149.039708][ T7069] netlink: 'syz.0.390': attribute type 9 has an invalid length. [ 149.354948][ T7072] FAULT_INJECTION: forcing a failure. [ 149.354948][ T7072] name failslab, interval 1, probability 0, space 0, times 0 [ 149.416655][ T7072] CPU: 0 UID: 0 PID: 7072 Comm: syz.4.391 Not tainted syzkaller #0 PREEMPT(full) [ 149.416684][ T7072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.416697][ T7072] Call Trace: [ 149.416706][ T7072] [ 149.416715][ T7072] dump_stack_lvl+0xe8/0x150 [ 149.416746][ T7072] should_fail_ex+0x412/0x560 [ 149.416791][ T7072] should_failslab+0xa8/0x100 [ 149.416823][ T7072] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 149.416857][ T7072] ? ethnl_default_set_doit+0x7d7/0xd70 [ 149.416884][ T7072] ? __kmalloc_noprof+0x37d/0x760 [ 149.416918][ T7072] kmemdup_noprof+0x2b/0x70 [ 149.416942][ T7072] ethnl_default_set_doit+0x7d7/0xd70 [ 149.416983][ T7072] genl_family_rcv_msg_doit+0x22a/0x330 [ 149.417033][ T7072] ? __asan_memcpy+0x40/0x70 [ 149.417065][ T7072] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 149.417111][ T7072] ? bpf_lsm_capable+0x9/0x20 [ 149.417132][ T7072] ? security_capable+0x7e/0x2c0 [ 149.417170][ T7072] genl_rcv_msg+0x61c/0x7a0 [ 149.417209][ T7072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 149.417251][ T7072] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 149.417281][ T7072] ? __pfx_ref_tracker_free+0x10/0x10 [ 149.417301][ T7072] ? __asan_memcpy+0x40/0x70 [ 149.417327][ T7072] ? __skb_clone+0x63/0x7a0 [ 149.417359][ T7072] netlink_rcv_skb+0x232/0x4b0 [ 149.417385][ T7072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 149.417416][ T7072] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.417458][ T7072] ? down_read+0x270/0x2e0 [ 149.417483][ T7072] ? genl_rcv+0xd/0x40 [ 149.417513][ T7072] genl_rcv+0x28/0x40 [ 149.417540][ T7072] netlink_unicast+0x75c/0x8e0 [ 149.417574][ T7072] netlink_sendmsg+0x813/0xb40 [ 149.417609][ T7072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.417638][ T7072] ? aa_sock_msg_perm+0xf1/0x1b0 [ 149.417671][ T7072] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.417703][ T7072] ____sys_sendmsg+0x972/0x9f0 [ 149.417727][ T7072] ? __might_fault+0xaf/0x130 [ 149.417762][ T7072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.417796][ T7072] ? import_iovec+0x73/0xa0 [ 149.417831][ T7072] ___sys_sendmsg+0x2a5/0x360 [ 149.417853][ T7072] ? __lock_acquire+0x6b5/0x2cf0 [ 149.417880][ T7072] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.417944][ T7072] ? __fget_files+0x2a/0x420 [ 149.417968][ T7072] ? __fget_files+0x3a0/0x420 [ 149.418006][ T7072] __x64_sys_sendmsg+0x1bd/0x2a0 [ 149.418033][ T7072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.418068][ T7072] ? __pfx_ksys_write+0x10/0x10 [ 149.418108][ T7072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.418131][ T7072] do_syscall_64+0x174/0x580 [ 149.418153][ T7072] ? trace_irq_disable+0x3b/0x140 [ 149.418184][ T7072] ? clear_bhb_loop+0x40/0x90 [ 149.418210][ T7072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.418230][ T7072] RIP: 0033:0x7fd7caf9ce59 [ 149.418248][ T7072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.418266][ T7072] RSP: 002b:00007fd7cbe35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.418287][ T7072] RAX: ffffffffffffffda RBX: 00007fd7cb215fa0 RCX: 00007fd7caf9ce59 [ 149.418301][ T7072] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 149.418313][ T7072] RBP: 00007fd7cbe35090 R08: 0000000000000000 R09: 0000000000000000 [ 149.418325][ T7072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.418336][ T7072] R13: 00007fd7cb216038 R14: 00007fd7cb215fa0 R15: 00007fff2ea22248 [ 149.418369][ T7072] [ 150.159113][ T7085] netlink: 128 bytes leftover after parsing attributes in process `syz.3.396'. [ 150.238897][ T7088] netlink: 140 bytes leftover after parsing attributes in process `syz.2.394'. [ 150.362087][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 150.667334][ T7093] Cannot find add_set index 1 as target [ 150.817169][ T7097] netlink: 100 bytes leftover after parsing attributes in process `syz.2.400'. [ 152.907261][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 154.573992][ T7152] FAULT_INJECTION: forcing a failure. [ 154.573992][ T7152] name failslab, interval 1, probability 0, space 0, times 0 [ 154.654371][ T7159] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 154.688075][ T7152] CPU: 0 UID: 0 PID: 7152 Comm: syz.3.416 Not tainted syzkaller #0 PREEMPT(full) [ 154.688105][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.688118][ T7152] Call Trace: [ 154.688127][ T7152] [ 154.688136][ T7152] dump_stack_lvl+0xe8/0x150 [ 154.688167][ T7152] should_fail_ex+0x412/0x560 [ 154.688195][ T7152] should_failslab+0xa8/0x100 [ 154.688222][ T7152] __kmalloc_noprof+0xe8/0x760 [ 154.688250][ T7152] ? __pfx_nsim_set_coalesce+0x10/0x10 [ 154.688281][ T7152] ? ethnl_default_notify+0x1b0/0xb10 [ 154.688317][ T7152] ethnl_default_notify+0x1b0/0xb10 [ 154.688347][ T7152] ? __pfx___ethnl_set_coalesce+0x10/0x10 [ 154.688381][ T7152] ? __pfx_ethnl_default_notify+0x10/0x10 [ 154.688429][ T7152] ? ethnl_notify+0x1a3/0x300 [ 154.688461][ T7152] ethnl_default_set_doit+0x90c/0xd70 [ 154.688503][ T7152] genl_family_rcv_msg_doit+0x22a/0x330 [ 154.688537][ T7152] ? __asan_memcpy+0x40/0x70 [ 154.688569][ T7152] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 154.688616][ T7152] ? bpf_lsm_capable+0x9/0x20 [ 154.688638][ T7152] ? security_capable+0x7e/0x2c0 [ 154.688676][ T7152] genl_rcv_msg+0x61c/0x7a0 [ 154.688716][ T7152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 154.688746][ T7152] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 154.688777][ T7152] ? __pfx_ref_tracker_free+0x10/0x10 [ 154.688800][ T7152] ? __asan_memcpy+0x40/0x70 [ 154.688825][ T7152] ? __skb_clone+0x63/0x7a0 [ 154.688860][ T7152] netlink_rcv_skb+0x232/0x4b0 [ 154.688895][ T7152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 154.688930][ T7152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 154.688973][ T7152] ? down_read+0x270/0x2e0 [ 154.688999][ T7152] ? genl_rcv+0xd/0x40 [ 154.689031][ T7152] genl_rcv+0x28/0x40 [ 154.689059][ T7152] netlink_unicast+0x75c/0x8e0 [ 154.689095][ T7152] netlink_sendmsg+0x813/0xb40 [ 154.689133][ T7152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.689163][ T7152] ? aa_sock_msg_perm+0xf1/0x1b0 [ 154.689198][ T7152] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.689231][ T7152] ____sys_sendmsg+0x972/0x9f0 [ 154.689257][ T7152] ? __might_fault+0xaf/0x130 [ 154.689293][ T7152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.689329][ T7152] ? import_iovec+0x73/0xa0 [ 154.689359][ T7152] ___sys_sendmsg+0x2a5/0x360 [ 154.689382][ T7152] ? __lock_acquire+0x6b5/0x2cf0 [ 154.689411][ T7152] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.689477][ T7152] ? __fget_files+0x2a/0x420 [ 154.689504][ T7152] ? __fget_files+0x3a0/0x420 [ 154.689543][ T7152] __x64_sys_sendmsg+0x1bd/0x2a0 [ 154.689572][ T7152] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.689608][ T7152] ? __pfx_ksys_write+0x10/0x10 [ 154.689651][ T7152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.689674][ T7152] do_syscall_64+0x174/0x580 [ 154.689698][ T7152] ? trace_irq_disable+0x3b/0x140 [ 154.689730][ T7152] ? clear_bhb_loop+0x40/0x90 [ 154.689758][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.689779][ T7152] RIP: 0033:0x7fabe1d9ce59 [ 154.689799][ T7152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.689817][ T7152] RSP: 002b:00007fabe2c3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.689840][ T7152] RAX: ffffffffffffffda RBX: 00007fabe2015fa0 RCX: 00007fabe1d9ce59 [ 154.689856][ T7152] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 154.689869][ T7152] RBP: 00007fabe2c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 154.689888][ T7152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.689901][ T7152] R13: 00007fabe2016038 R14: 00007fabe2015fa0 R15: 00007ffc85d1eba8 [ 154.689937][ T7152] [ 156.357766][ T7186] veth1_to_bond: entered allmulticast mode [ 156.386510][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 156.718420][ T7191] SET target dimension over the limit! [ 156.775707][ T7189] veth1_to_bond (unregistering): left allmulticast mode [ 156.919142][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 156.981631][ T7189] bond0: (slave bond_slave_1): Releasing backup interface [ 157.880459][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 158.737731][ T7223] Cannot find add_set index 1 as target [ 161.805257][ T7243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.191414][ T7243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.251967][ T7253] netlink: 380 bytes leftover after parsing attributes in process `syz.2.447'. [ 162.291626][ T7247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.348777][ T7248] netlink: 72 bytes leftover after parsing attributes in process `syz.3.446'. [ 162.699496][ T7243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.552544][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.449'. [ 163.849793][ T7278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.451'. [ 164.885901][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.896536][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.366364][ T7258] bond_slave_0: left promiscuous mode [ 165.451730][ T7258] bond_slave_1: left promiscuous mode [ 167.177222][ T7258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.433601][ T7258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.626227][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.637017][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.708066][ T7260] bridge0: entered allmulticast mode [ 170.379897][ T7298] syzkaller1: entered allmulticast mode [ 170.487179][ T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.575549][ T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.735792][ T35] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.873366][ T35] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.429199][ T7337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.463'. [ 172.632502][ T7339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.463'. [ 174.094579][ T7353] Cannot find add_set index 0 as target [ 174.575503][ T7352] syzkaller0: entered promiscuous mode [ 174.641924][ T7363] netlink: 'syz.3.469': attribute type 21 has an invalid length. [ 174.721978][ T7352] syzkaller0: entered allmulticast mode [ 174.745111][ T7363] netlink: 'syz.3.469': attribute type 21 has an invalid length. [ 174.908864][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 174.970733][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 175.033119][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 175.101016][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 176.184323][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 176.308814][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 176.335458][ T1010] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.365182][ T7372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.434227][ T1010] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.535973][ T1010] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.613378][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 176.643324][ T1010] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.713029][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 177.136831][ T7378] netlink: 'syz.1.472': attribute type 58 has an invalid length. [ 177.726825][ T7383] netlink: 'syz.4.474': attribute type 1 has an invalid length. [ 178.292688][ T7391] __nla_validate_parse: 1 callbacks suppressed [ 178.292745][ T7391] netlink: 104 bytes leftover after parsing attributes in process `syz.4.474'. [ 178.982112][ T7386] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 180.219725][ T7405] netlink: 116 bytes leftover after parsing attributes in process `syz.3.478'. [ 180.775821][ T7407] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 181.195960][ T7405] tipc: Started in network mode [ 181.419857][ T7405] tipc: Node identity 00000000000003000000000000000001, cluster identity 4711 [ 181.628610][ T7405] tipc: Enabling of bearer rejected, failed to enable media [ 181.691329][ T9] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 182.872352][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 183.297885][ T7426] gretap1: entered allmulticast mode [ 185.076647][ T7446] netlink: 176 bytes leftover after parsing attributes in process `syz.1.492'. [ 185.430946][ T7453] netlink: 380 bytes leftover after parsing attributes in process `syz.2.494'. [ 185.477902][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.562424][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.234180][ T7459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.597455][ T7464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.776604][ T7464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.297500][ T7467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.952267][ T7488] netlink: 128 bytes leftover after parsing attributes in process `syz.0.505'. [ 188.972425][ T48] wlan1: Trigger new scan to find an IBSS to join [ 192.373327][ T7513] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 192.640647][ T7515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.832125][ T7515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.963101][ T12] wlan1: Trigger new scan to find an IBSS to join [ 193.219609][ T7515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.116244][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.317703][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338541][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.506652][ T7529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.516672][ T7529] IPv6: NLM_F_CREATE should be set when creating new route [ 194.524917][ T7529] IPv6: NLM_F_CREATE should be set when creating new route [ 195.525365][ T7544] xt_bpf: check failed: parse error [ 196.301235][ T7548] syz_tun: entered allmulticast mode [ 200.127715][ T7571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.410935][ T7571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.680756][ T7590] netlink: 144 bytes leftover after parsing attributes in process `syz.1.537'. [ 201.834971][ T7589] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 201.944717][ T7589] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 202.557400][ T7606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.707744][ T7595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.296402][ T7608] netlink: 76 bytes leftover after parsing attributes in process `syz.0.541'. [ 205.056072][ T7626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.293022][ T7626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.515095][ T7630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.534472][ T7638] netlink: 'syz.1.554': attribute type 1 has an invalid length. [ 206.762445][ T7641] netlink: 'syz.0.552': attribute type 1 has an invalid length. [ 207.130569][ T7638] bond1: entered promiscuous mode [ 207.166899][ T7638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.650880][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 208.615361][ T7641] bond1: entered promiscuous mode [ 208.717551][ T7641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.344515][ T7648] bond1: (slave bridge1): making interface the new active one [ 209.363779][ T7648] bridge1: entered promiscuous mode [ 209.475975][ T7648] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 210.175012][ T7675] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 211.493757][ T7685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.686413][ T7687] netlink: 'syz.2.567': attribute type 9 has an invalid length. [ 211.776695][ T5648] Bluetooth: hci0: command 0x0406 tx timeout [ 211.783866][ T5648] Bluetooth: hci2: command 0x0406 tx timeout [ 211.794250][ T5648] Bluetooth: hci1: command 0x0406 tx timeout [ 211.801489][ T5648] Bluetooth: hci3: command 0x0406 tx timeout [ 211.832334][ T7685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.081773][ T7688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.555093][ T7696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.666043][ T7700] nbd: must specify a device to reconfigure [ 213.195487][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 215.013205][ T7715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.094818][ T7724] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 216.783206][ T7738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.007442][ T7738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.348070][ T7738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.735233][ T7750] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 217.803003][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'. [ 217.821422][ T7751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.899276][ T7746] nbd: must specify a size in bytes for the device [ 218.304406][ T7750] bond1: entered promiscuous mode [ 218.423418][ T7750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.494819][ T7761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.985413][ T7766] syzkaller0: entered promiscuous mode [ 220.078675][ T7766] syzkaller0: entered allmulticast mode [ 222.752267][ T7804] netlink: 'syz.0.600': attribute type 15 has an invalid length. [ 222.834634][ T7804] netlink: 666 bytes leftover after parsing attributes in process `syz.0.600'. [ 223.105784][ T7808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.243546][ T7808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.347588][ T7811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.590729][ T7808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.834183][ T7824] netlink: 'syz.3.605': attribute type 12 has an invalid length. [ 224.873120][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 225.383945][ T5639] block nbd0: Receive control failed (result -32) [ 225.436440][ T7828] netlink: 'syz.2.606': attribute type 1 has an invalid length. [ 225.538945][ T7828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.502221][ T7839] netlink: 380 bytes leftover after parsing attributes in process `syz.1.608'. [ 227.086071][ T7828] bond2: (slave veth3): Enslaving as an active interface with a down link [ 230.334825][ T7866] netlink: 136 bytes leftover after parsing attributes in process `syz.4.616'. [ 232.540928][ T7885] netlink: 136 bytes leftover after parsing attributes in process `syz.2.624'. [ 232.632348][ T7891] Cannot find add_set index 0 as target [ 235.130822][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 235.396469][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 235.631066][ T7913] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 235.767192][ T7913] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 235.936641][ T7913] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 236.151250][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 236.280261][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 236.326225][ T7913] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 236.936974][ T7913] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 238.873165][ T1010] smbdirect: ib_dev[syz2] removed [ 239.157117][ T7937] syzkaller0: entered promiscuous mode [ 239.228156][ T7937] syzkaller0: entered allmulticast mode [ 239.436112][ T7939] sctp: [Deprecated]: syz.1.637 (pid 7939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.436112][ T7939] Use struct sctp_sack_info instead [ 239.565967][ T7938] Dead loop on virtual device ip6_vti0 (net 36), fix it urgently! [ 241.261507][ T7952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.640'. [ 241.562348][ T9] IPVS: starting estimator thread 0... [ 241.797935][ T7958] IPVS: using max 23 ests per chain, 55200 per kthread [ 242.870400][ T7957] syzkaller0: entered promiscuous mode [ 242.975907][ T7957] syzkaller0: entered allmulticast mode [ 245.303786][ T7978] SET target dimension over the limit! [ 245.547719][ T7984] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 249.227475][ T8009] Cannot find add_set index 0 as target [ 249.958617][ T8014] netlink: 'syz.0.656': attribute type 1 has an invalid length. [ 250.278942][ T8014] bond2: entered promiscuous mode [ 250.286176][ T8014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.466043][ T7306] IPVS: starting estimator thread 0... [ 255.698249][ C1] sched: DL replenish lagged too much [ 256.843776][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.858489][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.264857][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.455161][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 355.518168][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 355.525349][ C1] rcu: (detected by 1, t=10502 jiffies, g=29537, q=1987 ncpus=2) [ 355.533196][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 9676 (4294972665-4294962989), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 355.546617][ C1] rcu: rcu_preempt kthread starved for 9676 jiffies! g29537 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 355.557779][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 355.567832][ C1] rcu: RCU grace-period kthread stack dump: [ 355.573764][ C1] task:rcu_preempt state:R running task stack:27968 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 355.587335][ C1] Call Trace: [ 355.590650][ C1] [ 355.593630][ C1] __schedule+0x1821/0x5740 [ 355.598229][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 355.603267][ C1] ? __pfx___schedule+0x10/0x10 [ 355.608179][ C1] ? schedule+0x90/0x360 [ 355.612511][ C1] schedule+0x164/0x360 [ 355.616718][ C1] schedule_timeout+0x158/0x2c0 [ 355.621620][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 355.627086][ C1] ? __pfx_process_timeout+0x10/0x10 [ 355.632433][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 355.638314][ C1] ? prepare_to_swait_event+0x340/0x370 [ 355.644008][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 355.648926][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 355.655394][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 355.660727][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 355.665988][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 355.671847][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 355.676485][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 355.681757][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 355.687611][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 355.692625][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 355.697699][ C1] kthread+0x389/0x470 [ 355.701821][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 355.707096][ C1] ? __pfx_kthread+0x10/0x10 [ 355.711736][ C1] ret_from_fork+0x514/0xb70 [ 355.716373][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 355.721527][ C1] ? __switch_to+0xc79/0x1410 [ 355.726279][ C1] ? __pfx_kthread+0x10/0x10 [ 355.730924][ C1] ret_from_fork_asm+0x1a/0x30 [ 355.735744][ C1] [ 355.738793][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 355.745184][ C1] Sending NMI from CPU 1 to CPUs 0: [ 355.750440][ C0] NMI backtrace for cpu 0 [ 355.750460][ C0] CPU: 0 UID: 0 PID: 58 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 355.750480][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.750492][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 355.750531][ C0] RIP: 0010:__this_cpu_preempt_check+0x0/0x20 [ 355.750556][ C0] Code: a5 28 8c e8 42 5a 7d f5 e8 fd 84 88 f5 eb aa 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 89 fe 48 c7 c7 60 a5 28 8c e9 fd fe ff ff cc cc cc [ 355.750570][ C0] RSP: 0018:ffffc900000077b0 EFLAGS: 00000086 [ 355.750585][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 71113af02341a880 [ 355.750596][ C0] RDX: 000000003937af00 RSI: 000000009e88a7e5 RDI: ffffffff8e224255 [ 355.750609][ C0] RBP: ffffffff89b71224 R08: ffffffff89b71224 R09: ffff88807a29d2c0 [ 355.750622][ C0] R10: dffffc0000000000 R11: ffffffff89b71170 R12: 0000000000000000 [ 355.750634][ C0] R13: ffff88807a29d2c0 R14: 0000000000000001 R15: 0000000000000046 [ 355.750645][ C0] FS: 0000000000000000(0000) GS:ffff888125286000(0000) knlGS:0000000000000000 [ 355.750660][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.750671][ C0] CR2: 00007ff3fd9b1ff8 CR3: 0000000061586000 CR4: 00000000003526f0 [ 355.750686][ C0] Call Trace: [ 355.750693][ C0] [ 355.750699][ C0] lock_acquire+0x116/0x350 [ 355.750721][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 355.750749][ C0] _raw_spin_lock+0x2e/0x40 [ 355.750776][ C0] ? advance_sched+0xb4/0xc20 [ 355.750798][ C0] advance_sched+0xb4/0xc20 [ 355.750820][ C0] ? __pfx_advance_sched+0x10/0x10 [ 355.750844][ C0] ? __pfx_advance_sched+0x10/0x10 [ 355.750865][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 355.750892][ C0] ? __pfx_advance_sched+0x10/0x10 [ 355.750913][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 355.750945][ C0] hrtimer_interrupt+0x44b/0x950 [ 355.750981][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 355.751005][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 355.751024][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 355.751044][ C0] RIP: 0010:process_backlog+0x9d6/0x1950 [ 355.751071][ C0] Code: e8 3f 7e 46 f8 4c 8b 24 24 eb 2e 4d 8d 65 28 4c 89 e0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 df d6 b1 f8 49 83 3c 24 00 <4c> 8b 24 24 0f 85 0e 01 00 00 e8 0b 7e 46 f8 49 83 c5 28 4c 89 e8 [ 355.751085][ C0] RSP: 0018:ffffc90000007c10 EFLAGS: 00000246 [ 355.751099][ C0] RAX: 1ffff110170c798a RBX: 000000000000003b RCX: 0000000000000100 [ 355.751111][ C0] RDX: ffff88801d3c3e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.751122][ C0] RBP: 0000000000000000 R08: ffffffff897f32ab R09: ffff8880b863cc28 [ 355.751134][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: ffff8880b863cc50 [ 355.751145][ C0] R13: ffff8880b863cc28 R14: ffffffff897f32ab R15: dffffc0000000000 [ 355.751158][ C0] ? process_backlog+0x3eb/0x1950 [ 355.751187][ C0] ? process_backlog+0x3eb/0x1950 [ 355.751228][ C0] __napi_poll+0xae/0x340 [ 355.751251][ C0] ? skb_defer_free_flush+0x233/0x260 [ 355.751278][ C0] net_rx_action+0x627/0xf70 [ 355.751312][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 355.751339][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 355.751370][ C0] ? net_tx_action+0x5b6/0xc30 [ 355.751398][ C0] ? net_tx_action+0xbfb/0xc30 [ 355.751428][ C0] handle_softirqs+0x22a/0x840 [ 355.751447][ C0] ? do_softirq+0x76/0xd0 [ 355.751466][ C0] ? cfg80211_inform_single_bss_data+0x13b9/0x1af0 [ 355.751492][ C0] do_softirq+0x76/0xd0 [ 355.751508][ C0] [ 355.751520][ C0] [ 355.751527][ C0] __local_bh_enable_ip+0xf8/0x130 [ 355.751544][ C0] cfg80211_inform_single_bss_data+0x13b9/0x1af0 [ 355.751574][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 355.751611][ C0] ? _ieee802_11_parse_elems_full+0x2c0/0x4a70 [ 355.751638][ C0] ? cfg80211_inform_bss_data+0x24a/0x3c40 [ 355.751664][ C0] cfg80211_inform_bss_data+0x25d/0x3c40 [ 355.751702][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 355.751744][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 355.751764][ C0] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 355.751789][ C0] ? trace_kmalloc+0x2a/0xf0 [ 355.751820][ C0] ? ieee80211_bss_info_update+0x316/0xa40 [ 355.751843][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x730 [ 355.751870][ C0] ? ieee80211_bss_info_update+0x316/0xa40 [ 355.751893][ C0] ieee80211_bss_info_update+0x794/0xa40 [ 355.751916][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 355.751936][ C0] ? sta_info_get+0x4f/0x300 [ 355.751962][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2c90 [ 355.751985][ C0] ieee80211_ibss_rx_queued_mgmt+0x1d2b/0x2c90 [ 355.752015][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2c90 [ 355.752037][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 355.752058][ C0] ? __pfx___schedule+0x10/0x10 [ 355.752084][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 355.752116][ C0] ? kcov_remote_start+0x17f/0x7a0 [ 355.752152][ C0] ieee80211_iface_work+0x78b/0x1020 [ 355.752179][ C0] cfg80211_wiphy_work+0x2cf/0x460 [ 355.752206][ C0] ? process_scheduled_works+0xa70/0x1860 [ 355.752225][ C0] process_scheduled_works+0xb5d/0x1860 [ 355.752257][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 355.752278][ C0] ? assign_work+0x3d5/0x5e0 [ 355.752296][ C0] worker_thread+0xa53/0xfc0 [ 355.752328][ C0] kthread+0x389/0x470 [ 355.752350][ C0] ? __pfx_worker_thread+0x10/0x10 [ 355.752367][ C0] ? __pfx_kthread+0x10/0x10 [ 355.752390][ C0] ret_from_fork+0x514/0xb70 [ 355.752410][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 355.752427][ C0] ? __switch_to+0xc79/0x1410 [ 355.752453][ C0] ? __pfx_kthread+0x10/0x10 [ 355.752476][ C0] ret_from_fork_asm+0x1a/0x30 [ 355.752504][ C0]