last executing test programs: 7.01144899s ago: executing program 1 (id=1404): socketpair(0x1, 0x4, 0x440, &(0x7f0000000100)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xfffff63d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x81}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x48}}, 0x24000800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000500"}) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0)=@default_ibss_ssid, 0x6, 0x1) 6.85682502s ago: executing program 1 (id=1406): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000016c0)={0x18, 0x3f, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@generic='*']}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0) recvmsg(r0, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000000ac0)=""/138, 0x8a}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000004100)=""/165, 0xa5}, {&(0x7f00000041c0)=""/44, 0x2c}, {&(0x7f0000004200)=""/168, 0xa8}, {&(0x7f00000042c0)=""/130, 0x82}], 0x6}, 0x20000020) 6.588125689s ago: executing program 1 (id=1410): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/178, 0xb2}, {0x0}], 0x2) 6.046392158s ago: executing program 1 (id=1415): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) unshare(0x6a040000) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r6, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB="eb4d9d5ff594e2687f4c1ca901eb72e286916bb898fe86217b528e51dca2aa6c4947e5beeff7b31fb7a767366cf68c73cbbf25e4195743d6f41bdca840d835599a1fd8031076d97fbbf3675cf385ba886bce"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000001000000000000000000000085100000f8ffffff9535ead33b90cb11ec4477b1a2b2d2000000ff0f0000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) (async) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x3}}, {{0xa, 0x0, 0x0, @empty, 0x8000}}}, 0x108) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) (async) sendto$inet6(r7, &(0x7f0000000340)="58a01b4f3fb2466fb5b737b8ea72476ba6b33421fc804096b8b0eb837f3844026c24328e287a370f7bd66e70a35d70697c51ebdf92d2e162bd75393e6b31855f74be0043af3baa58696b2ecd6aa43992c3f41d9a2d1cd3576d725d84f52f23bddae0d1a449d5747cf6578397973928e0d3dbcaeb5e4b5722446d5a", 0x7b, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x4, @mcast2}, 0x1c) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r5) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) (async) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x7f8fd8ce9467eae8) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) accept4(r4, 0x0, 0x0, 0x80000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00'}) 4.831409568s ago: executing program 3 (id=1426): r0 = socket$inet(0x2, 0x3, 0x2) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg(r1, &(0x7f0000002cc0)={&(0x7f0000000040)=@can, 0x80, &(0x7f0000000a80)=[{&(0x7f00000005c0)="efbca31cd42a7fdb7dc36282dd70bea831a7bc0ae0d0c9444215372f3a4e80e5909d5938f2910c1fcdac4d0f379b8e98e56715a853e4889a926503ed52545b964fe850cad8905b8d47635dced1790f9fcac59ea14dd256a225c32243a2508627d6b89def9afa872c838774a6e2838f8ffeae4fb16a2fde893ec9ba1221f67a248fd00735f6ffc0ed0b77b74ab6e1d5cfdd32bcc2f529a22d8fa4a1df2a", 0x9d}, {&(0x7f0000000680)="eb68dfe122da0389f8a615e51b85df07f25dc56e52eedf60b6ebb8f00d6405c26dad0da97b7b9331c93f3d34a30de03307e71eb6e03efb425ca0aed08127943468cc572558580d5d1de32fea614940c31cf5796fe766289af9a68cc93ca0bd78326598ee1c7ac3914b4f63fc7399f77ccd8e1b8e727fd9dcb6b0f321c6cfaf4bb08401d47688e81df227804fe7b32224cadfdcd4b6c1b4e4e98291d7177eb53e71c0f796057a7bf15edf87ea15e9b79aebfdc940f051f42601d984ea2b4f92160adac8ac2c9bae9e58d137d15fab326adb62572e6f2094a4b0996aa0f08a5bfdacb704ad612b3e0f820d1d", 0xeb}, {&(0x7f0000000780)="18eeee333873a238066dd11fb6d5999518b6210a3a7bf82408b2428dcf9703230fd0e3b8efb29ff6813b29101275b3c86f38fa84c7965fd62691bf11b08147100e8ac265f8406ed182fadfb124e74774dc6e453e64cd23b4b79bb1529870e4b1a6547009dc138a17f6999f91d09cbd2a4af177f01dd79f4772a1e0bb4d2a69862069a1f69c04d380ab15784755b44a6fada11934268ae50170ba2b8addf9f1f3b2f96693ecee53b5ef620f61b67695acb5811a1de8c95731305892782ad58c7a6178bb711f983844375d818a6c01266986a7568f199e6a6f2d71e9635c615ae9f8c3bdc7e5a97c", 0xe7}, {&(0x7f0000000880)="b49001721fdf91c208349b4abf7c3f6251fda9a13c7f234065c15f5891eac6d17486fa70aaf07d67d73efd1104fdc54dd12fee884fa935e37cbfac884e4ec62e7565d172e7894ae68881a88aac272205c39eb6f5f842576ee7493632c53e60655a7a23d277c2359d5ac99aef402fbf8e7296fcdbc91c44b9a101015af7c5e2473f5331c21e709c91bd50eafeee8da0ef40b577ec229d313c4f3c5f70c57fa7298c98ac5a8f6f498e16aea0177f66b17555b67cf8c22aa2b58837eb06c8e143cc5ada5a5f2186281bc5bdb8444761120c453f4c18c0d570d177938dcf3080cb2afe1f42677549f293de53603b13fbd682", 0xf0}, {&(0x7f0000000980)="df9b1de55335721d8c1d434ce322dc8522310a34a847bf9b5b326512d21834dfe92542035ca2e408520b746029e5e3d4c020f1bd94015c5864d20ddc25b0fc711059628b6965a07fee62f924c626551919d8e1bf3fbe446bd823fcec1f00ad36301e1af42649e0af17aa41ccd39f2d3ea77f53400325ebf7975d044de27277d0b9b98fb123d0", 0x86}, {&(0x7f0000000a40)="27469d90ae296b9670e2d365c4db7dfa7e007825d40eeb34e62e407f4aac0389f56fc8caff532a2ab491d52bc016d3be46ec10663a3d19f46a9df90bf3", 0x3d}], 0x6, &(0x7f0000000b00)=[{0xb0, 0x84, 0x1, "99e8f4ec050ebb807cf51ff34a3e10c7da9924a2d0435c3efab29d16dc0a420ac7e8c2946b2d16a321abe64c49aced96b3948a7a5834bcbf114fca0199d14e48beff885cfc038d8dfe776effd67616e4039a3b34adef1121c72234ceab7596dac41e798aae60833ccdf3a210b8613b8169790621f590a90a6a5daf1cfe9779df09e2f87f3ee95e8f6b0d2a82b77402d0a57d07a3eee8ce03eda1af021f56"}, {0x30, 0x101, 0x10, "d048cf7a26a394a6c58544898123d5c2696de77aaa37f78862cea4413b"}, {0x1010, 0x10c, 0x9, "4f257064cb48452eed8aa581d3be3115c900f236afb118758c68b548236d0b00bc75f64898fca6516be15e0f91b69f3a54d48efd303da990d327235467e0b1583ae9f546fdd49ec7bc4951b669afac5997e90fa1bed0fc2d3b681502fea773471724210431acbeccad4492a6d91b3624c9432a92d89a6d34660547fa5bfcf1fe47377362c4e4d15a5951c95ef7fc3e00c957f479f550242e0d6180e76b4b06ac3bb2075adfe04f67cc12e4772dab2e1448cc675c098b808d164236fc99b45f333f54150b5b2caa738deab0a5e97f3778ed3ca3fe204de1d505d58feb4499130b80e1633736e3f4138901a508ef6ce33796021dea16965e4986beda7d40dc35a05c29e1bd063b5fb3bac4dab5899cffe68494914987c735642f9bc1d69fedb2575ea9af0ae1f07deb14b9a75dc877ae0f25a86c8ea59c4a89c4e2b117c82168c30be712cb2576da3a3efc92b9c54ab4171c1666f0c5fd4cc39bcb34859c98ef2ca343ec98972e99c72c8e923fb6907d9f072df8e04b1dbd2506ea5e871176144218d832387cdafbfe5be0a30b68fa96d9f2333d821e4561c7794c9c086ebed7d8246b2838d5334bd6cc233d8a297613ee6fd01d34708202fb4d185c9064c45ec29fc2259b18c89ccf5718dc084be2735fbc9b511999e92b22e18dc026bccd83d1b421ea92104215030ad48004811f5d32850b90c4ba73b0e8b599b9064370d65c3eb7f8ad932101bcf9a3bc71f71fe61798db67cb1b95a66cde3d7b4eb759417ced288279178ab5d61331ba18e64ecbafb243d41e9dcc949bbc5c8822846b0c54d4abecf610c9720cf331c92cc2ff18f126da8b5406120b49fadbae4ef86c10033c8d7a31380a2c3a4e414c0743ceadb82c957a9c4aafa32530e2d6b6adc1903a15fe7590ddf26f280664f9f03eb1b16817a6d66276256bcf257f350beb1953d1c3e87a3a56bd0c1d10ca0306b71b186ec2340de609d160863ee1263c329dbd2a1391d54fe02e4faf3fe0bf35ab9be92805c955fd3686fd02d59f1338053ce0ba962ffe15fd6a438474aaebb823facd4c29a99adfe3347023648abcec5088cc98e58c656fa409da7cfa9a10e7b171851e29a514023814ae17ff309f56265753256caee6c3f7c60834578ee364ceeed22eb99127a3c7f860bbaca21dffb1fa5a4b90157a0b0291e01d9c6265788e67a2a257f195038d6e13f8cbcdaf0a09f8a0741a0797918f65c5c50dd49037ebf8529597cdd702f96e6f5cd51018ebf5f6260c62dc9f5b8dc79bb8dfd73f9e2d5bd1b6e3828d1b2d277c330ab77cc211a674bd4f2972fcd9505faacbb838fb569f316fe82ad84038a280a8e844509f9fa747bbb2afcca415a2988d14d121dcccb03dc5570b71206c9e53559a9e67d0acc0dd01013701d2d8328559e279aa7b329c16d3eed4b21c5b5e31bdd111b35a77fad3f2b851e16f132e0b3c47a215e56263773c6902c0d6f2a7042895572a75ac103424e14f402dcad5e30530db38eb389ab60fc0bdc780ac23e9eac117b59f3251c08750a32337e5dcfc6a902ca79f1f0f2cdf5620d9347fb27996b65669a8e864c4e05a4f9f28248e2b0c9b883fa72aef0f385081d2b32735d2a403882348912d7440bd1a47ee8caf45828d9028fe3ac0a5d85037fb3d272163571468fac30939b0a561d0789de59f346f65d4e33ec229979a97db7d780ee4995a857906316766a36dfd635c114b65ddcfea344b946e4d6074512c4b1753b8c8c86fea88ce9e5dea52c4cd9c4f12dcc659b9948ea5815d28f4a8d89a77f74301abd818859595856dd9bb690e08da677c4288d4186b768f699527c538eb4173b44a1d6dde4883208d8acd3e52a10441574409548dd610953839ed364c76b4c8d8b9a443133e2719544c3fbed3c5eaf0a75d95add0d89a009de930ea83066b55ff60f54c18f727eca8126cbc907e3e592f7430c73e1b1a6e83ee856e51d73cd2a62a3c3bde66fe7d147ce63645ca79306a2932e6edf137645b2ed1e4bd0ee7ec6af125ab90daf9950c35eeca43fdcf073fffba79e0882bacdc0797f6d3050cf897ff3c15deed36629eb1a22f6d0cded4aaa72e15b1f229bafc3b3bd465557fbac1b3df0220418a9459c251f187d8deef71a7a0ae89b52a6f13ced451e8c9768e10d11136569f4cf61a781d1ad474c857edcc641113db35c6f5560393a947ab5a106486d974b712bd4a1b44f36a4d8dd901c81b3e49abf8c0e5e5963f5ebe405897f1e370243996ee963971ef0824a83922ba334fbf46da3dec4320f1db2e231cad796f480747d36df3553b12599735769247030a317b5a9e2811152d9283264382c4cc5b3cea2b4e92643ec69b1cad20d8d60575261700b48cd439aeb6f1ee621a2b41e8851f42f7ebacd2f51ba2eae357fb1ecc4aafe926746356c8ffc2b0489df6562322c9edf08d3657361ff893370532877cbc08dc469bee3375e29442b078ad2f525d421f9efab95582c3f205c53c4f4308015b01306ca9fa4c2eaffa4146850f9a7293efda15749e4defce68aafd76a5f57419c9e491b2549b93e25962b172456b437a42d833f3b95fa4f4ac892afa99d26de20572319c488f0bbd0656a270b3a40de808e312aab2328e719b06b251857116a697bfe33f120c670068a9e4fbd3b9e554cc4817a7ac2ff9b596a05f354d87b37dd63c021a1b73fd9a0ae9c0afb4e253b59ce829f54f67ce96c57d878b1959314d7f6488809b8a3c4fe585da7d1a19b34d305401cb920c73a1e195c0afd811c01f20e0e11c9655fc87f8ea444c4736c3719c9238e11fe7473e1cdfbdcebd953e3c3770df13a4a80e5cca3961416d66e2ba85f0c3822478405cc5acdaab941d4495a77bcdcb9e1390abdf70b662fad4e3faf00d665b743d4afdb6394100fff0239d3fcbe1ac6a7152fbc700aa3a8b84e2ab7b679633e1c1a871b60309e088f65d6d343f146fc81fb524ae6e3c0afdba13f8765f35838dd068e9ad77fe431f3d5937571bb1e7fb9bfc0400abd7c487dc11639cb2380159e68030575576480de6941a1ac29e1a3b5676a510a605e50ec13fc63b2158460e85c08b740cb2dceefe8d4c7582cdbf35ae260fef5c6e6bfc3e93c83c169ef970a3afe58907400eccda608e8b1c9722bc6e3b97be8f0f2ff8e058948c13361c2ff0ec31fe8a31485779b21e0fc4a34d0eb16a6d819ea48929fa7f698bcad51dd940c5bb7ca31067b7947de26e12c5fc30db6a2ebedfd81b93193d878c92279fc1bab57b8f366bd42e4483cc216570bc2473fffb46542f982422b9118ecd0138e28a69e633cc3231b6478cbef21755c9a9c356ea222fb13933e6397c0c2ff869f18b11bae9ebbd8012ff151529e3092fd0bc7f622bf3fd0ede91d049116c904f34ea6a65affe227db9fcf5da472e648c9cedc8d99309c8bcb45061d7f34eb65779e04a232e3aa19fb87ca444386dbda1d51943c6e2177c6580fce6962f882c80f2c320c115a2adf4dc12e42a871f55b006d8a4188f6e0213c7b12e2dd6a2c44451b623d1371dc55cb7ab5e2fd18e2d51902d8bf71abf3ae62aaa2e4e0739baf3b4dd4830ea0929bee35a48ffcd144b70a81690aa4057202b816ae1ad376fde5809a47d4cc47f8fb02d54395d676eafbdf5bd41ae66d483b30bf2b5205e59468fa46bb21cda0422ed2d625ef0826de0a6e1f1e63420950ea098990112afb5997a42e91f1b97fcdb4556777be1f7d9fb977c8236f12ba04db754f5f905228f3f7d6d1aba369b6df4fcfe012f1014f319fbc186e631655939ad019ca87141dd61464d445e7fdd9de951b311be961707bd7e772f04f9916a449f59cb751aa36ef04a713e02f03ee15b9ba2da333eb1e170271befc8206ded6635d1ee7581ddbf20af968608fb6e05b70ff95ccc49f074bdff9ac85c33783c03d31ef67199502ad53cd751b80003cc9b28e4b8f7a4d0d4f9efa1daec378c597426fc762384166b0dbb1457fb19b18165ec05e2f86dcace919bc6453b3cdbd3af879185e8c6719e8adeaee2ee3f38981cda2cbe11c5e402a654410fd933ba7f8d4be7adcceabb578abae6a6ac63d731fcc534157b702575b2ca56ac17defb70176e5f94fe08741e79bc5132fdc62797757cfcd7c21b6b934c63f16d15018acb05191eb813bddd162cfc852a6d19fe988bf0f48e5a9a8896a60b0aa42f81af8fd61c37ec8dcbc50f71af0988eaeee54eea579e6fe19efeac9ec007f1a02ee43bef392c732345ab4230a4128654771f8f6a2031c6c8bcaf414bbd9c5f609b0536c16b605b34bf97a6cc37dfe4ec8a6d1adcbb50c23aaa070ecbab551b189b1780321c24ca4e262dfd55ecb3c19c01da3a4e5139e1a1aaa46b1c1494b8708a87b4942c9e340fcf108e13e351e9167359a02f6633efb5ba559ff01b0b39da09fe727e47855b0d18ff9ff55b31893fc43de43e70a630ad9afe06c733d07751edbaf75c7e3016c3b2e003cdbc6ed3f9dc5e8a2044c398f1667623dc6e7a92e0649aab4a816fb1f82174b123f0cea389f005adb8327b7da8952bbebc0ded6b5f8daf0c382389f6a00a502211e9f42abfc77d8ad42d93b2ce84a4c0a7ee314079158f33063f4c9875042d3d290bdbc1273c9bd937ee3a5c833838c43df22bf9b7b9d1583d6bbcd9380a9a11889901fbdf3e38ee87747c1ef14bc755244366e4de7df5b2b93587c6ddde18f8583de9580b567c721bd5f7580800079d2471db7be209ef416f1f3fae637e6ac51bb29b9cb4de903fc38e896a7dff43cd8dadacae1c8fb05d744d5da58905e42adbc76cc439ded69a9b62ff7cffdeedf88f97361ec1cc1db10a3ae7c9b5c3060cc2db8acc91036e20e4626029848d81719e9301aa10d4af0d11b2caac5e620501018a5068d219fcb685763f8077dd231b0565ffa7d7437093f8a0e0486863ecb678a3b499ce36beabd26d390466c67f03ec67960c08ba3795f834c192ba42a31d7df8212e07a1ac04b002170eb3e0977aa01b78f1c2b208a0f256a64d19614e64c0c21c9813b6515c4831f91774c1a1411d923d317c8ecd0f0abf610ae9b65b39042ecc50d2c4cce00957a46864db8ab6b8602e8a87ef916cab48481b9db342384137f730f302995961a1e6086b13c0b682b811fb38b91451aa24e9bd2a15a60f046c9298388aa98c18c410984f9113afd531e28460515e08b7bf2c4ea32cdb42e44259d2209b066c03431c8874592f22205694fa5719b7034c829670f8941b9455f07d181d6974df7444a28066b302f51c0dc42b72d08b7afe0bd14d98767c197737ee3f6c1428ae049fd18de3676ab4e9491b0587882e1b2a0384fcb746c94cbf5b3b8fe8674458dabccdb3f931657f8cf78b0292a14cf6851fb40f302791bb6a6fbf01e2c75fc1d36ed44fe344200b72ad2d7c26c2c28a80d1289a21c5e3b22a11bcfdf8fa18a23d9e712f8e8e770228366f456662f7d31f55ef1a6c9218b4c2942155c622c9c95be6a4cc53d678802a6d31afeac45ad6c51e7a1e130625484f84b4f03a71a79cc62642db08f26aca536b5070162e3c62c2a08aed7668896cecbe89eedadcc47adeae18354faac900b3c0be3cdc0fdc768b43f27f06df1e4bd5bbf248d9e7587b92d5ed13703c62a842019e9aa7cec7e82dd2ea2b864adeddbd88d1fe09486b26ddfe87d12b866f0cb0ad55af0b89c632e9eb698650ea732c907415ac09f6a9127d8a2d088939b868e0c1054b639874560aa5682b16fe32670add605d1b8f58d26dc59f2cec534397206a179645525a5861b3b73cb3cffa98af26"}, {0xa0, 0x116, 0x5, "61a1c9d01ac11ec5b72f8f11d6ff312c7132acf4fa496476e71367a7d63664a2fa040cb9cf3a85e308cfc3bb200134be2ea23b3842470644653b21a308bf35efdfb54742da8cb5307f0781b25b27312c91632c6ff91fbb2335e30f45b96709efc8011f42cc1b4810de6c4970c227cab5e992e30b38aaf0b13e75683e17714b5e92c695a103e7b72b02ed38029f7c93"}, {0x1010, 0x3a, 0x2, "505adfad3d6a39bd9afab30e9f0c3150675122e60a4d2bfd06c8544e097f754b12f5c9760574dedf800c9482246e6cc5c1faf59513fa259da4ce0d585ed923b4d877e99bac25cedf18f44e74ce08d22da60956dd3f1238a3686dbace0fa983ab6d015ff832419aa31d84e4e1ca2ccf85e00098997db58ed52aee892c5550072cfc8769cda3b22b5ed7b138ec854cf7173409ecc78a4695ca8bc076288e3c67ab6890972af45117024eaeade670c32c0628c6a174305a57b5c36771549789ae2b98aabe51cd57c0bb096554a5686522862cb62f9ba8817581e1b5e1d6ee710f33a735a45766f31d8c61120e78695ada76984c2e5d92905f64b80fe425b7d7f19daa8afe29e2579b0a93e19ed26645af0661b21c80382ae0a14607e772988ee70e14e22fd1fe3f9cd6c7077c140d465b842788810c68857abdfecbe150756d48531e3c8ccb83276b61ff4d100ef6f880f17bc0a4bb85d8ab19bef5b1d746cd111b98cde65465103ebe12741d6724beb40d71a0ea4a62b9928417491458f77635c52ef37e23c6853ec88e92cf4a32a0b49fa053910f35cfc92a903ebc154ce26786700677b267b632e90d23e0e13f2582ba06c0f24be13004e7fde75dd42e6c761175bdbf5a4bbfbbf97e948132725c41ddbaa980bd83fac8f267fe609e0adf4c35edd48c66004b7b7a8d9a851b5cd279def66355a68c2422c0c89a55557fadbf16973b54ed93827014abfaea71dbe857f91e5de5265a0fe8fe3603dabe8d8a7a9215a76c838927f3e1c188d302bba86c535785a4569bb4282fb9d33f2705be84d1ed66a0f258c7184152a0cec808a070358c20dc085e9b5081ad6663e4a8cd1dd04c5b6ee125bf954514710451e4781d796dbbb3f0a1900e458766c327e79a09c6033b16f0be40991291abcb39c6643cf6c02489921eeb23e3969ceb2d2355558c168aee3e3404afe11edfb28b1e1f100e90c6e4b6c59f599b56c8f2ef8ac2d0efbb65b9258c7bd4216ce1c92701fdf156120d563c0fd995e5e707c0d6837a883e6524772470ae58a0a4a0eae5ea02f7813fda9b17ac9515073a04c31458c47de16e8d8d49f7a327706e7581c519abb4e7dd38b08548ea37337c1d4e81fb8913efa3dcaeb37d1acaf2638ba94323b010a74945431405ffa8d597a25fc274cadb1389fcdc0b4ab9408a42c74ca981df341c1e1cc33283b72bd05136c686a0f93d1ac08b4abf5ffaa6e4624c38c92958d47e8368dca60c0661db4cfbe39cdfcb86325b9c8cb2303e66d54c037ad06d431f314f84477f7639fd98de73fc40a60eb75a334cef0cb9894d2331a7abe126a347d04dbb457416e01d6dd7cfb6f958303ba9db771a4ac7035e6c10743016ae3fcf4290a6b01bde1e00eb6a8039c09e36c31f4a90301cc24ea22478b651f277371a2991f733adf339d8e9de60b637c851896788b68c02cdde7e232b1be50239da7e84a260d86e7afb8b2557cb4aaf318fbd29a59c92fb4503e4b5c8fd4fc1dd3c67ce99249a31ad460d32f0c329b4226fe5fd7bd5ab435f817a36701cbebc94eda9d277dea268306c790925971dcb5640f6cb58730a56b5f3cbd7ca3ba8a16ff8f35b77a6b2a5cf48f8dce83d0ac654a4eae926efec66cd00e8226420fe9e454b1fdeb800f32866596e20a88c2a7f8ff1150d97ef77a0468e7b5038ac3c04e01644447b10554ea70a0afb89948c53af4374932cbb9c6b33ab2631dfdb209b7176a9a8658f68bcdbd548e6d2d39c17b0b705d37da7976f5c7731919736b90024da2d8343d3224f08e53238c063e47548ccc430b3803568b1a31bf7c891ecd457d95f1a2d6c6d52a22779d5eb1d0b70c50aca3aea5c8665ea4f1cf80720f34bac22e6cf37fbd8a2d5dbe9cbbd88d4d33b657accf310480be006e6b1d2daa913b719f124d717ed57d97589b43b3331168112cf18600428990c58dde87fa65d36760b27d30408f95241ec2747f419bca32b82e7973826592fc09a3a5c6792802d76644b342e6904f16576d57fc4c4e37269215fa8db950b3ee1a7e4b0e8f435ab5fc30e33295b22fa57725fcc87fe33ddfe1e3104d0c5d0b5484eef6d48c25eb5ab83c2f8fc0961a9719587732dc3780067f7a90545f14299fa42ab95ea4da4095bcfe95557c5260da95a0f0f049376600fdc3561d033e0dcd8560863e06b450a198f9c11ebf8f44b48cf10f2c77f8a440492823b9248b7345501938a491c33baaf954c5ae19b776483ea3b877841e191827042316068189af177ff62820f7b4b0a558e0cc327be3b44b9efc41289127264418079da641aba365898b4d021366bf1009772793873a395987d34b3c9558fc63435cd6f96043e5625a2ef4544da99df925180bbd3580775cdcc2b209046a29d5b61c70adaac6473dfad459c8281776013f3d6877dfe3cab5bb1094805c08cec568f67a733b2d7ed234929072fa0a2d5f17aa8aa826b9ffd412ad7aa5389b35a966de8e7e96f2fa95ab7ec932c62bd4b86d66106391aa9f26862532114cd33fb70dc8144cf656d9c24aa48bc409857775421b071258288e6e35292f86cbff54d8d23c9cc886428f76e01efcee81bfbbbae3be7cbfa0492099ee8655de533e472b468c901780ad3dcb57bd2bd3242056cb0f4850483b7218023b0c0c56684c418cf86428cf98f70df60b0b856fe5d694bc45baee547b6bde2b02d84d1dc91fb75bb3a81ceff9e5df3b1908555a71502b2ad046cc84839da1940f15f781a1716fe5a5f449104de390e5c7e9f06c9a4febc8e8039def73286d9fc94e879cd99028a302b54dbb0170a94894330afa63c37971429936fa086f3c3146b3d43c3d2cb25bc88b3cf04b22b39389d92692a80ff17a5ca9c51ebdbd4a57fda7bb1779fcbdeab2fb1f61178fc51d6194b4856c02cf70aa406dc66c9bddffbf13146f01d9676a859f17642dacbd6d6509a5557226a7810861fd22e31d6bd7fe12fb247e882f365b480d90e93ffd4b433d2b302ef8fb45b09c08e2886b32eebc57f66349351e2a211c4b9e45f8f788987902b0b709d54b5e0723b8145d840ef527738e04362fbce00eef69c7c0bbf753a76a004964090c2161c1c466322472e3909c636389873f4de65d4e1e22a5219a2736ef366216b8d66236b504023f2fd209128183c083f3d085a9df9b168de72b06509af398a0221a2a48d4e54aca311bef7f90535026bcce1992a74dedd196604b1811d5db15e763d4486280b27f80663bd23b0cd1e5b796cd476fe4f4eb452c577fe32ef00dfd281b72ff44d245802e0615008e3ad8287714b3a8e3eb7e02925f960e792f287f0510474e1e1d80c00adfbedde0a7c01e6f86d08425ddb30756b755c14043309cac6babaf4b78667370855e78036ebff91dc4e8ff49522d8d83481c0fe8c0aa6035283ea3b6c4673ca1c7ffdeb00be2b777eadfb9faa3c4742df215f53dcfe1137b6cce8fa2f85aaa7db985cd4e908f5f98b1894271a3fd7c201f73c083ca548677ae2e88c03634d03d968daf3b87ef1f2cff31cfbc11f83a2b6768f868188cd9bebeea253b794180cf681419aaaae463da370a42bab475e3497139e0f08e7b07039aae1644ff81d0ac57ccc98335c0cbebbcf486561198377a56987c7ae8aaddbb24bcca884294a493a3e45973579300a265d6746ffe2ad9c3290078d3f7ac1ac1be1ebc08202cc4c6768bc33b3b7af10a32008260d1b10aa9317266ede2221cc824a59e317025a0af11decfbe0e3df387bbdcc32f0095d818251aca8ad2ef5a397b9b559b1751ec90a7b71dd9502b2fff5c9c6c506421cc36571d71f5579ceb19751dc2d7568bc2871926847d5cf63c5b890da7cfa033add798e9a4b639d64ffb91a401adb482b9c42672bcf5a1e475a2c33c7471c7becd49405734a910c33d1640a7561d3010ed61aee57d2e87d56ce89e18a1e5f760952839786d8db3b705c59c0b6084df275973e5d4ad7a77bdb8ed50e8cc38ea112bf7e347032ba9fe973e1271f88885317a409cd81c4d0eec7b53650447d11639bfaaf44ed7e22389bd2afb3abbbf2a3f46b932c953d90ab47a3454656ca9d9b68d0fde9861ae4122eed552a48144e06217468b6c7f48d3a9b8ea0f948a831cb551f81ef50dcfcbfb661efabb21a56480b3de3d25a8f5530b667eed147f310919f43c26a6204d01df3030469aba79e1343cabf5350e29b575fc71f9f933908a5dd289ecda76d7bde992a8072849203623a4232610fd136632e404d480fd63db3205f1e0266b7d901229ade176f348e8f46085491f07309bc84b27f60a91f9e1a43edf77a4233d1fab40d9a72dcbaa4091de5eadf6c6fe1d035fc74eee8d04725b5768e7b66867cefe25671bd9a8f26dca5eb27582728b1ac92b967fe22e0a70cf6ce1b9853034c9e89b2a3d9a4fb122970927bf1df982c68753f4253de560251d88b7e323b9d24401b804d26aaa5c3bba62d4dc982ba76f1d0eabc9e8fa92ed27dc6deef7e767e3b164ed96ca2cdd27c15905ec78785552ccadcbe57f1b2fc03e43ecdeb609a0917dcd149da92caf6ddde06ac7f9d15bc7f2e96240d90b9c3afbdd6e1e5c22e04bd23e2117883aa3c63b0ce458bc987505b1715e84ca5759b60e3bd94de09bcff2c06c5fa03a1c04c5b7d2ada90e0fbba8c011764a4dd7677aa53ac7a2cb046ecd86e1b045b8d1f885b43b48060c1180235bf6c9d75efd6bddee79774852bd00c45cfee17b509c31873c1f8deba4ac1a5c4490f893904b60b13b139f09ba3b835e57df7c3dc60f6e2b6e210bd726b3c81a36c13942ef704721b7cf32902c9bbd49dc5cffff95c2c4978e816e9c90ae21900cef18ed9ea3847d57a2462bdfc3d5a6064b211dc2618fd4676869460b34e6445f04c9f1eeab3316d76c4d44b45a9bef1fe79906912e455f06f786a6328f04551ba21179fa430655eaedbef32998227eb6c83c16d21debfe423268da8d94f69a04bc4db5a21b576918332be9567c54706bc07c09a66fbbda79ec690ee6d5eecb593f59741f7b252eb9f3f953d94b119ad8f05810f4c7b89bb7412ffca0f4c9d4ca08eba979496c46583e28227cd3df79c6040df2207f238f82119f8835662333a861d37268b467739d3e0fb447224c2c75e2826f96d9246511b06cbe00fac75b997fd576dfcff1125a4da8affa63d3735b0078670e99c0d900167d39671aa8b099939bde8caa451ffee77914f4f87d1fc5640ae29691014ecc0a27c8ae6ade9ec19ccb034bdce24f315921fe86300eceef89426431afcdda1fff2b5b4e47111333041cd6fc015352d7beeaba5014d3061d20748c14567eb0c8cfba572ed1074f8d52921501750b03dab02150b1f588a7fef24317e28f3318c21e1f9451bbdf211e37a5eb24c63ffa2e56bb1f0897775c987ddcf290ced9030f24bbf335251304743b41212c80f2a479155f8c1f91309c02eb1063e42d1f97534c86e4cae1d980eb2488c8497a3531cb5b6f80140568e3a008021d9e6d8a2f464ae70db402cb0c3dfc3cc036fe53d99fd96327c26fc85e4d49b58e48c845a55da243a4c18a873f7a24e7c7547a67af42776ecfe667ef05bf8b1efc6abe31713f8cc32dc10f54b1b0be079b3e07424c626b13d1f421b9267e3dda8112b9f840604d2048b25e4a359018cc31d478c185a9529f47f6fb80fd603303b299b0a8d1e4465b7b5871a4dff5261e132fa8c3c6630eeb9a1af4770d9aae7054869149727c34062c959839d7bcc8e421b325961a851f62d3eefd9aef18b74e37196a2536f1b4fcfdae0cfc930eb9e7c74"}], 0x21a0}, 0x4040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) (async) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x5}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$XFS_IOC_GETBMAP(r2, 0xc0205826, &(0x7f0000000000)={0x9, 0xa64, 0xfffffffffffffffc, 0x7, 0x3}) (async) socket$packet(0x11, 0x0, 0x300) (async) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1=0xac14142a}, 0x10) 4.687288302s ago: executing program 2 (id=1428): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607, 0xb75}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005c40)={0x1c, 0x16, 0xa01, 0x0, 0x0, {0x16}, [@typed={0x4}, @nested={0x4, 0x1c}]}, 0x1c}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/178, 0xb2}, {0x0}], 0x2) 4.532672355s ago: executing program 3 (id=1430): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002000010000000000000000000a000000000040010000000008000f0006000000"], 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x3, 0x4}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000280)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100), 0xffffffae}], 0x1}}], 0x1, 0x4000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000040)='NET_DM\x00', 0x80, &(0x7f00000000c0)={@_ha_fsid={[0x1, 0x4]}, {0x94f8, 0x4a, 0x9, 0x1}}, 0x7fffffff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4}, {[0x6, 0x9, 0x8, 0x96c00000]}, 0xd9, 0x27, &(0x7f0000000200)=""/39}) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x4, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd490eba}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x17, 0x0, 0x0, @u64}, @typed={0x4, 0x19}]}, 0x24}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) write(0xffffffffffffffff, &(0x7f0000000014)="050001", 0x3) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='='], 0x20) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) 4.460382149s ago: executing program 2 (id=1431): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r1, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0x3, 0xc}, {0x1b, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000845}, 0x2000c8c1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe3c, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000cf8d9ede6a88af0b515d100001005c50000000000001000000"], 0x28}}, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) unshare(0x8000400) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 4.173244401s ago: executing program 4 (id=1434): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff11c0000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.073501301s ago: executing program 4 (id=1435): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x612, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x13}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r12, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa3000038024000380060001000200000006000300a1aa0000060001000000e9ff0700020001000000080001"], 0x64}}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r13, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 4.045045595s ago: executing program 3 (id=1436): ioctl$NILFS_IOCTL_GET_CPSTAT(0xffffffffffffffff, 0x80186e83, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000100)={0x1, 0xd50, 0xcf9a}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000180)={0x7, 0x20, [0x1, 0x9, 0x1, 0x81], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000300)={{r1}, "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"}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x74, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x29}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x3, 0x1, 0x0, {0x8000, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1}, 0x8, 0x4, 0x6}}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004040) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001580)={'syztnl1\x00', &(0x7f0000001500)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x3, 0xb2, 0x44, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x80, 0x80, 0xfffffff8, 0x1}}) (async, rerun: 32) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000015c0)={@private2, 0x0}, &(0x7f0000001600)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001640)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001680)=0x0, &(0x7f00000016c0)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001700)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000001880)={&(0x7f0000001480), 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0xf4, r4, 0x108, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004080}, 0x40000) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b80)={0xffffffffffffffff, 0xe0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000001980)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000019c0), &(0x7f0000001a00), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000001a40)}}, 0x10) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@base={0x17, 0x0, 0x18c, 0x8, 0x10, 0xffffffffffffffff, 0x7, '\x00', r10, r3, 0x5, 0x2, 0x5}, 0x50) ioctl$XFS_IOC_DIOINFO(r1, 0x800c581e, &(0x7f0000001c40)) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001cc0), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x30, r12, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xa, 0xfff, 0x6, 0x80}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000001e00), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x44, r13, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async, rerun: 64) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000001f40)=0x5) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f80)) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001fc0)={'wlan0\x00'}) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002080)={{{@in=@broadcast, @in=@loopback}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000002180)=0xe8) 3.633831777s ago: executing program 0 (id=1438): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0xf, 0x0, 0x0, 0x12, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, 0x90}}, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x14, r1, 0x601, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400048c0}, 0x200000c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) poll(&(0x7f00000000c0)=[{r7, 0x1040, 0x700}, {r6, 0x91f7}], 0x2, 0x406) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x8003, 0x8000, 0x8, 0x0, 0xffffffffffffffff, 0x80000002}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r9 = socket$inet(0xa, 0x3, 0x84) connect$inet(r9, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$unix(r10, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r10, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000380)={0x3, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'vxcan1\x00'}}, 0x1e) 3.507122412s ago: executing program 2 (id=1439): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x20) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x32600) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @local, 0x9}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001740)='p', 0x1}], 0x1}}], 0x1, 0x5dc) r6 = socket$unix(0x1, 0x5, 0x0) unshare(0x28000600) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) accept4$unix(r6, 0x0, 0x0, 0x80800) setsockopt(r4, 0x9, 0x4, &(0x7f0000000400)="eadfc6a1d29f330052712e2932f8fffffff832eaee1cd0b1e27899151baf3a9f58be86d497ad720527c45fa7b9091094255a832e2218c1f91db0d10d74c0eb81c848890ef69cd418715b6b12856c46430a383a4f07d92f4902e36f6d64fc1d2d726e9e56cfe7a2b2ef98bb4d9c490444d7155500911d924edf6b08f597a5251d91a5eaae171679e0e3d98e2cf432855b813b01eed3e5cc0dbc9f228951cc23304cc7df13129926be3f38b94dd76f00f838c1545a7a56d9e7e35a085d789c798518f6235ba428d674e4356bd9b3a48f35f495f039fdaf2a3d7b30a538322d812edee8af361a74e1727f301629484557f01c52de62233d9c964db616c1c61202db0850ee6fcd939a9991bc2ee50b8122161212f6750d7c4986e0fed44f83b43c9c4f74f16e7265412db2bb42e16a2c96c08167d4edfdb05726cf16e26bb4ee0052dfcfd38f9584281c5dbb4f7dca0d0da1c2", 0x151) r7 = socket(0x21, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) bind$can_raw(r7, &(0x7f00000000c0), 0x10) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000abaff9), 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010"], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x20) 3.444925741s ago: executing program 4 (id=1440): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'wlan0\x00', 0xffffff7f}) r0 = socket$rxrpc(0x21, 0x2, 0x0) ioctl(r0, 0x8b21, &(0x7f0000000040)) 3.314014658s ago: executing program 4 (id=1441): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x24, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c80c}, 0xc010) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000480)=""/178, 0xb2}, {0x0}], 0x2) 3.283793123s ago: executing program 3 (id=1442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x1d, 0x21, 0x0, 0x0, {0x7}, [@generic="d81dc40d11"]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r9, r9, 0x19, 0x0, @val=@netfilter={0x20, 0x0, 0x6}}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="78000000070a010400000000000000000a00000a0900010073797a310000000058000480540001800b0001006e756d67656e00004400028008000340000000000800014000000010080003400000000108000340000000000800024000000009080003400000000008000340000000000800034000000000a4904714b0beb613c9"], 0x78}, 0x1, 0x0, 0x0, 0x40090}, 0x4000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r11) sendmsg$ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f000000408004002c0012800b00010062726964676500001c000280080001000300020000000500010000000600270005000000"], 0x4c}}, 0x0) 3.208646471s ago: executing program 1 (id=1443): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x1, 0x3ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="b40100001a000100fcffffff00010000e0000002000000000000000000000000000000000000000000000000000000014e20071c4e2100050200002002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b4}}, 0x844) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000a5b0500850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4890) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r8, 0x40106e8c, &(0x7f00000004c0)=[0x7fffffffffffffff, 0xe]) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0x9, 0x12) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r12, 0x8, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000008) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) 3.05525863s ago: executing program 4 (id=1444): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000001240)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fdd9df250005000600000008000600010400000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) r3 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000000f1401002bbd7000fedbdf250b00450075766572627300984413b73762ca4a494e465e3a4521000800010000000000080003000100000008e6020001000500"], 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x84) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000000000000000000000000000000000000000000000008000300687372302800128008000100687372001c00028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB='\b\x00\b\x00', @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r8, 0x0, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000001040)=[@in6={0xa, 0x4e20, 0xfffffffc, @local, 0x80}]}, &(0x7f0000000180)=0x10) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, r10, 0x0, 0xa002a0}, 0x38) read(r10, 0x0, 0x0) getsockopt$bt_hci(r9, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000001c0)={'bond0\x00', 0x41}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'dummy0\x00', 0x41}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000240)={'hsr0\x00', 0x41}) sendto$packet(r9, &(0x7f00000010c0)="010d77d23f39b931fcf7b62ceeae7cf081154e00e3c7b0cb97afbffaff935f2576f22b6947569a5e22e1eea1c35a26a11432f003cfb88f20d8c67f234eb9ded295c48619d85f4453addf138acdf2e45ff18a3991818368ac28058dc726989f4cc69c101db38d95e2008711f0f37267b8e63f6d789350cc08b3d5de814b941dd56342613a16c869a93ded2f6b226ee11537a2a594096b7b76fd1740b0b6f96ac70fc703c3d4408105d405073b0bf83f4f543b9d5888f87d55563d190724f0597660a34464408063587d967638dd890a58ca", 0xd1, 0x0, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000110001000000000000000000000000000000000000000000000000000800030068737230"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="50af"], 0x144}}, 0x0) 2.695524677s ago: executing program 0 (id=1445): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x7, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000160001000000180095000000000000000500feff"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x94) 2.527846389s ago: executing program 0 (id=1446): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff0000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0fe000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000206000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xfffffe9f, 0x0, &(0x7f0000000000)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x982}, 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff0000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0fe000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000206000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xfffffe9f, 0x0, &(0x7f0000000000)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x982}, 0x50) (async) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) (async) 2.470721009s ago: executing program 2 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f00000002c0)="390000001300034700000000c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff080004000000000000000042a47bf6275137277296214e21b4736557bc47929fb15f339599b6", 0x54}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r4) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="25eab6a9", @ANYRES16=r0, @ANYBLOB="04002bbd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 2.389338674s ago: executing program 0 (id=1448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) r5 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@local, 0x0, 0x100, 0x4e26, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x400000002000000, 0x1, 0xfffffffffffffffd}, {0xbad, 0x1, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x2, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x2b}, 0x8, @in=@remote, 0x3504, 0x4, 0x0, 0x0, 0x9, 0x6, 0x4}}, 0xe8) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffffe9, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010000d042dbd7000fcffff1f00000000", @ANYRES32=r2, @ANYBLOB="0000000000200000281112800a000100767863616e000000180002801400010000000000", @ANYRES32=r4, @ANYBLOB="1000020044a30000"], 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.344109431s ago: executing program 2 (id=1449): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r1, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0x3, 0xc}, {0x1b, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000845}, 0x2000c8c1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe3c, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000cf8d9ede6a88af0b515d100001005c50000000000001000000"], 0x28}}, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) unshare(0x8000400) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.289321179s ago: executing program 3 (id=1450): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xcc}}, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x68, 0x0, &(0x7f0000000340)) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x37, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r4, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 1.197941484s ago: executing program 3 (id=1451): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0xffff, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601080000000000000000030000001400078008001140000000000500150004000000050001ff06000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000040)=0x6) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000140), 0x10) 227.995899ms ago: executing program 2 (id=1452): socket$rxrpc(0x21, 0x2, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x390, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2fff, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x3c, 0xd3, 0x4, 0x8}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x8, r2, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', &(0x7f0000000e00)=@ethtool_per_queue_op={0x4b, 0x1, [0x6da, 0x949, 0x7fff, 0x5aa104ec, 0x5, 0x800, 0x0, 0x0, 0x2, 0x8, 0x400, 0x100007, 0xcce0, 0x7ff, 0x8, 0x4, 0x10, 0x9, 0x80000001, 0xc, 0x4, 0xe5f, 0xbbd, 0x3, 0xf, 0xfffffffb, 0x7, 0x4, 0x1, 0x401, 0xab05, 0x74f, 0x200, 0xa01f, 0x8, 0x2, 0x6, 0x6, 0x2, 0xc, 0x7fffffff, 0xffff0001, 0x10, 0x1ff, 0xa3eb, 0x0, 0x6, 0xffffffff, 0x186f, 0x2, 0xfffffff8, 0x9, 0x1075ed75, 0x5c, 0x1, 0x8, 0x3, 0x1, 0x3, 0x7d, 0x0, 0x6, 0x5, 0x1, 0x55, 0x10000, 0x4000004, 0xb09, 0x7, 0x1, 0x4, 0x7, 0x3d80, 0x4, 0x3, 0x9, 0x2, 0x800, 0x1, 0x3, 0x40, 0x1ff, 0xc147, 0x9, 0x8000, 0x80000001, 0x5, 0x9, 0x93, 0x1, 0x7, 0x80000001, 0x6, 0xf, 0x4, 0x1, 0x9, 0x6, 0x80000001, 0xfffffff8, 0x4, 0x7, 0x7, 0x40, 0x3, 0x6, 0x1200, 0x1, 0x1563, 0x9, 0x5, 0x5, 0x8, 0x301, 0x3, 0x4, 0x3, 0xbb3b, 0x90, 0x7, 0x9, 0x2, 0x4, 0x0, 0x0, 0x2, 0xfffffff1, 0xd]}}) sendmsg$NFT_BATCH(r4, &(0x7f0000001f40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f00)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}}, @NFT_MSG_NEWSET={0x11b8, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_EXPRESSIONS={0x1168, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfe}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}, {0x1140, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1134, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x1128, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x19, 0x1, "9c83fa3573c714b70f8835d82c9e776e8bd66881c6"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}}}]}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1220}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0105300007002800060000006000000000308440fe200000000000000000000000000001fe800000000000000000000000000002"], 0x64) 227.500892ms ago: executing program 4 (id=1453): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa0000000100e22b41e1a4f9fc460095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa029}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x94}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x399041, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000700000014000600ff01000a00f2f3f31f000a0000000201060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r4, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r5, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r6, r3, 0x4}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'pim6reg1\x00', @multicast}) 208.943729ms ago: executing program 0 (id=1454): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) readv(r0, &(0x7f0000000700), 0x0) 71.992795ms ago: executing program 1 (id=1455): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) r2 = getpid() sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="ff2d", 0x2}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x20, 0x10}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x80000001, 0x0}, 0x2002) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x6, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$nci(r0, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x1}, 0x4) 0s ago: executing program 0 (id=1456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x2, {0x2, 0x4e21, @multicast1}}, 0x24) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc8, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x13000000}, 0x50) recvmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/20, 0x14}, 0x8}], 0x1, 0x120, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x64000040}, 0x20000800) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10) r8 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000051"], 0x68}, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x4011) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa14001980080001"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): [ T8090] netlink: 60 bytes leftover after parsing attributes in process `syz.4.565'. [ 183.003040][ T8090] unsupported nlmsg_type 40 [ 183.083282][ T8080] syzkaller1: entered promiscuous mode [ 183.083305][ T8080] syzkaller1: entered allmulticast mode [ 183.128501][ T5627] lo speed is unknown, defaulting to 1000 [ 183.136759][ T8021] infiniband sz1: set active [ 183.137031][ T8021] infiniband sz1: added lo [ 183.178268][ T8021] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 183.182978][ T8021] infiniband sz1: Couldn't open port 1 [ 183.183246][ T8021] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 183.183282][ T8021] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 183.183325][ T8021] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 183.349506][ T8021] RDS/IB: sz1: added [ 183.368000][ T8021] smc: adding ib device sz1 with port count 1 [ 183.368275][ T8021] smc: ib device sz1 port 1 has no pnetid [ 183.371653][ T1558] lo speed is unknown, defaulting to 1000 [ 183.405559][ T8021] lo speed is unknown, defaulting to 1000 [ 183.587780][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 183.587808][ T8109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.587829][ T8109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.593360][ T8109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.593387][ T8109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.645442][ T8109] batman_adv: batadv0: Interface deactivated: macvlan2 [ 183.645469][ T8109] batman_adv: batadv0: Removing interface: macvlan2 [ 184.150524][ T8123] netlink: 36 bytes leftover after parsing attributes in process `syz.4.572'. [ 184.247497][ T8126] netlink: 260 bytes leftover after parsing attributes in process `syz.0.573'. [ 184.271516][ T8127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.574'. [ 184.742264][ T8147] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20003 [ 184.776723][ T8141] tipc: Enabled bearer , priority 10 [ 184.973288][ T8021] lo speed is unknown, defaulting to 1000 [ 185.427615][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.582'. [ 185.427649][ T8165] block nbd4: Unsupported socket: should be TCP or UNIX. [ 185.935697][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 185.935733][ T8188] netlink: 'syz.4.584': attribute type 18 has an invalid length. [ 186.046178][ T1096] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 186.046226][ T1096] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 186.046255][ T1096] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 186.046287][ T1096] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 186.223963][ T8021] lo speed is unknown, defaulting to 1000 [ 186.270628][ T8200] syzkaller1: entered promiscuous mode [ 186.270653][ T8200] syzkaller1: entered allmulticast mode [ 186.740232][ T8205] A link change request failed with some changes committed already. Interface ip6gretap1 may have been left with an inconsistent configuration, please check. [ 186.790682][ T8208] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 186.866818][ T8021] lo speed is unknown, defaulting to 1000 [ 187.147685][ T8225] sctp: [Deprecated]: syz.0.596 (pid 8225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.147685][ T8225] Use struct sctp_sack_info instead [ 187.226451][ T8227] __nla_validate_parse: 1 callbacks suppressed [ 187.226476][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 187.492561][ T8241] syzkaller0: entered promiscuous mode [ 187.492586][ T8241] syzkaller0: entered allmulticast mode [ 187.625104][ T8021] lo speed is unknown, defaulting to 1000 [ 188.127951][ T8249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.172099][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.173794][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.177345][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.179049][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.183186][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.190942][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.197541][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.202448][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.209011][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.215154][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.220271][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.239712][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.245934][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.251275][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.275913][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.280985][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.286116][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.292712][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.363552][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.380210][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.381911][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.397125][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.399178][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.426207][ T8247] batman_adv: batadv0: Adding interface: wlan0 [ 188.426262][ T8247] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.426357][ T8247] batman_adv: batadv0: Interface activated: wlan0 [ 188.472387][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.487660][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.492561][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.516060][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.517789][ T8248] batman_adv: batadv0: Adding interface: virt_wifi0 [ 188.517807][ T8248] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.517841][ T8248] batman_adv: batadv0: Interface activated: virt_wifi0 [ 188.520903][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.588858][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.590685][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.592358][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.593861][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.642372][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.654236][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.656002][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.657682][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.659320][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.660981][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.662367][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.663683][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.737452][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.742191][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.743853][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.779688][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.782931][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.801246][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.828314][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.846301][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.869604][ T8254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.602'. [ 188.886534][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.888254][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.889837][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.891457][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.892998][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.949108][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.949237][ T3169] IPVS: starting estimator thread 0... [ 188.951048][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.952715][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.965986][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.010009][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.029453][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.031152][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.032891][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.054594][ T8256] IPVS: using max 31 ests per chain, 74400 per kthread [ 189.071206][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.072982][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.098256][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.155698][ T8259] netlink: 52 bytes leftover after parsing attributes in process `syz.2.602'. [ 189.245031][ T8265] nbd: socks must be embedded in a SOCK_ITEM attr [ 189.252215][ T8265] block nbd4: shutting down sockets [ 189.312427][ T8264] syzkaller1: entered promiscuous mode [ 189.312452][ T8264] syzkaller1: entered allmulticast mode [ 189.478521][ T8278] netlink: 52 bytes leftover after parsing attributes in process `syz.1.606'. [ 189.939027][ T8290] netlink: 260 bytes leftover after parsing attributes in process `syz.1.609'. [ 190.452740][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 190.535587][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.809337][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 190.809361][ T8337] netlink: 14 bytes leftover after parsing attributes in process `syz.4.619'. [ 190.884491][ T8343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.622'. [ 191.767042][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 191.767080][ T8375] netlink: 'syz.4.632': attribute type 10 has an invalid length. [ 191.767097][ T8375] netlink: 'syz.4.632': attribute type 5 has an invalid length. [ 191.845900][ T8375] geneve2: entered promiscuous mode [ 191.845925][ T8375] geneve2: entered allmulticast mode [ 191.854353][ T3169] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 60793 - 0 [ 191.865184][ T3169] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 60793 - 0 [ 191.868075][ T1103] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 60793 - 0 [ 191.868271][ T1103] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 60793 - 0 [ 193.486099][ T8455] openvswitch: netlink: Unexpected mask (mask=200240, allowed=210048) [ 193.487041][ T8456] openvswitch: netlink: Unexpected mask (mask=200240, allowed=210048) [ 193.579237][ T8459] netlink: 'syz.1.648': attribute type 54 has an invalid length. [ 193.579261][ T8459] __nla_validate_parse: 4 callbacks suppressed [ 193.579272][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.648'. [ 193.748744][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 193.769657][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 194.067915][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 194.615377][ T8485] ieee802154 phy0 wpan0: encryption failed: -90 [ 195.013271][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.013368][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.111272][ T8501] netlink: 48 bytes leftover after parsing attributes in process `syz.4.658'. [ 195.247339][ T8507] netlink: 16 bytes leftover after parsing attributes in process `syz.4.663'. [ 195.247969][ T8507] IPVS: set_ctl: invalid protocol: 5678 172.20.20.187:0 [ 195.554363][ T8519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.665'. [ 197.020309][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.674'. [ 197.020337][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.674'. [ 197.020355][ T8566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.674'. [ 197.305466][ T8561] netlink: Failed to add helper -22 [ 197.305528][ T8561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.488699][ T8569] batadv_slave_1: entered promiscuous mode [ 198.689222][ T8606] __nla_validate_parse: 3 callbacks suppressed [ 198.689341][ T8606] netlink: 164 bytes leftover after parsing attributes in process `syz.2.678'. [ 198.821474][ T8568] batadv_slave_1: left promiscuous mode [ 198.877532][ T8619] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 199.148715][ T8633] netlink: 'syz.2.683': attribute type 10 has an invalid length. [ 199.289005][ T8637] netlink: 'syz.1.686': attribute type 1 has an invalid length. [ 199.546765][ T8637] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.670695][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.686'. [ 199.749678][ T8638] bond5: (slave veth5): Enslaving as an active interface with a down link [ 200.018386][ T8673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.693'. [ 200.123097][ T8641] macvlan3: left promiscuous mode [ 200.123126][ T8641] bond4: left promiscuous mode [ 200.123334][ T8641] macvlan3: left allmulticast mode [ 200.123350][ T8641] bond4: left allmulticast mode [ 200.164395][ T8647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.167402][ T8647] bond5: (slave batadv0): making interface the new active one [ 200.168992][ T8647] batadv0: entered promiscuous mode [ 200.169489][ T8647] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 200.298132][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 200.412013][ T8693] netlink: 'syz.1.696': attribute type 21 has an invalid length. [ 200.412041][ T8693] netlink: 128 bytes leftover after parsing attributes in process `syz.1.696'. [ 200.413391][ T8691] IPv6: addrconf: prefix option has invalid lifetime [ 200.506420][ T8693] netlink: 'syz.1.696': attribute type 4 has an invalid length. [ 200.506459][ T8693] netlink: 'syz.1.696': attribute type 3 has an invalid length. [ 200.506476][ T8693] netlink: 3 bytes leftover after parsing attributes in process `syz.1.696'. [ 200.681227][ T1096] bond5: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 200.913324][ T8709] netlink: 52 bytes leftover after parsing attributes in process `syz.4.699'. [ 200.975199][ T8713] netlink: 52 bytes leftover after parsing attributes in process `syz.4.699'. [ 201.279671][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 202.532223][ T8790] Cannot find set identified by id 0 to match [ 202.542675][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 202.818077][ T8797] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 202.877640][ T8798] bond3: entered promiscuous mode [ 202.877871][ T8798] bond3: entered allmulticast mode [ 202.878377][ T8798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.162092][ T8783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.368960][ T8815] FAULT_INJECTION: forcing a failure. [ 203.368960][ T8815] name failslab, interval 1, probability 0, space 0, times 0 [ 203.368997][ T8815] CPU: 0 UID: 0 PID: 8815 Comm: syz.3.719 Not tainted syzkaller #0 PREEMPT(full) [ 203.369021][ T8815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 203.369035][ T8815] Call Trace: [ 203.369043][ T8815] [ 203.369053][ T8815] dump_stack_lvl+0xe8/0x150 [ 203.369090][ T8815] should_fail_ex+0x410/0x560 [ 203.369120][ T8815] should_failslab+0xa8/0x100 [ 203.369148][ T8815] ? skb_clone+0x212/0x3a0 [ 203.369182][ T8815] kmem_cache_alloc_noprof+0xa1/0x600 [ 203.369218][ T8815] ? skb_clone+0x212/0x3a0 [ 203.369257][ T8815] skb_clone+0x212/0x3a0 [ 203.369284][ T8815] __netlink_deliver_tap+0x355/0x6e0 [ 203.369311][ T8815] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.369331][ T8815] netlink_deliver_tap+0x19c/0x1b0 [ 203.369355][ T8815] netlink_unicast+0x781/0x940 [ 203.369403][ T8815] netlink_sendmsg+0x813/0xb40 [ 203.369437][ T8815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.369469][ T8815] ? apparmor_socket_sendmsg+0x98/0x360 [ 203.369497][ T8815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.369519][ T8815] sock_sendmsg_nosec+0x13a/0x180 [ 203.369546][ T8815] ____sys_sendmsg+0x54e/0x850 [ 203.369581][ T8815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.369622][ T8815] ? import_iovec+0x73/0xa0 [ 203.369654][ T8815] ___sys_sendmsg+0x2a5/0x360 [ 203.369684][ T8815] ? __lock_acquire+0x747/0x2de0 [ 203.369713][ T8815] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.369782][ T8815] ? __fget_files+0x2a/0x420 [ 203.369825][ T8815] ? __fget_files+0x3a2/0x420 [ 203.369866][ T8815] __x64_sys_sendmsg+0x1b1/0x290 [ 203.369901][ T8815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.369956][ T8815] do_syscall_64+0x166/0x520 [ 203.369987][ T8815] ? trace_irq_disable+0x3b/0x140 [ 203.370009][ T8815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.370031][ T8815] ? clear_bhb_loop+0x70/0xc0 [ 203.370058][ T8815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.370080][ T8815] RIP: 0033:0x7fceb159e159 [ 203.370101][ T8815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.370119][ T8815] RSP: 002b:00007fceb241e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.370142][ T8815] RAX: ffffffffffffffda RBX: 00007fceb1825fa0 RCX: 00007fceb159e159 [ 203.370159][ T8815] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 203.370172][ T8815] RBP: 00007fceb241e090 R08: 0000000000000000 R09: 0000000000000000 [ 203.370186][ T8815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.370196][ T8815] R13: 00007fceb1826038 R14: 00007fceb1825fa0 R15: 00007fff8a130228 [ 203.370231][ T8815] [ 203.372326][ T8814] netlink: 'syz.0.718': attribute type 7 has an invalid length. [ 204.113556][ T8833] ip_tables: iptables: counters copy to user failed while replacing table [ 204.177798][ T8828] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 204.183674][ T32] audit: type=1800 audit(1790339142.459:5): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.723" name="blkio.bfq.time_recursive" dev="tmpfs" ino=719 res=0 errno=0 [ 204.221302][ T8838] x_tables: duplicate underflow at hook 1 [ 204.519425][ T8847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.730'. [ 204.593618][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 204.594572][ T8847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.663827][ T8854] FAULT_INJECTION: forcing a failure. [ 204.663827][ T8854] name failslab, interval 1, probability 0, space 0, times 0 [ 204.663864][ T8854] CPU: 1 UID: 0 PID: 8854 Comm: syz.4.732 Not tainted syzkaller #0 PREEMPT(full) [ 204.663889][ T8854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.663902][ T8854] Call Trace: [ 204.663911][ T8854] [ 204.663920][ T8854] dump_stack_lvl+0xe8/0x150 [ 204.663960][ T8854] should_fail_ex+0x410/0x560 [ 204.663997][ T8854] should_failslab+0xa8/0x100 [ 204.664027][ T8854] __kmalloc_noprof+0xfe/0x720 [ 204.664052][ T8854] ? netif_set_alias+0x68/0x1e0 [ 204.664076][ T8854] ? netif_set_alias+0x68/0x1e0 [ 204.664107][ T8854] netif_set_alias+0x68/0x1e0 [ 204.664140][ T8854] do_setlink+0xc08/0x47a0 [ 204.664170][ T8854] ? unwind_get_return_address+0x4d/0x90 [ 204.664365][ T8854] ? __pfx_do_setlink+0x10/0x10 [ 204.664422][ T8854] ? __lock_acquire+0x747/0x2de0 [ 204.664460][ T8854] ? kasan_save_track+0x4f/0x80 [ 204.664484][ T8854] ? kasan_save_track+0x3e/0x80 [ 204.664506][ T8854] ? __kasan_kmalloc+0x93/0xb0 [ 204.664529][ T8854] ? __kmalloc_cache_noprof+0x321/0x600 [ 204.664562][ T8854] ? __mutex_trylock_common+0x15f/0x270 [ 204.664594][ T8854] ? __pfx___mutex_trylock_common+0x10/0x10 [ 204.664626][ T8854] ? rcu_is_watching+0x16/0xb0 [ 204.664653][ T8854] ? trace_contention_end+0x3d/0x140 [ 204.664681][ T8854] ? __mutex_lock+0x30b/0x1550 [ 204.664724][ T8854] ? rtnl_newlink+0xc1d/0x1c30 [ 204.664757][ T8854] ? __pfx___mutex_lock+0x10/0x10 [ 204.664799][ T8854] ? full_name_hash+0x92/0xe0 [ 204.664868][ T8854] rtnl_newlink+0x15b0/0x1c30 [ 204.664913][ T8854] ? __pfx_rtnl_newlink+0x10/0x10 [ 204.664941][ T8854] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 204.665014][ T8854] ? kasan_quarantine_put+0xbb/0x1f0 [ 204.665041][ T8854] ? lockdep_hardirqs_on+0x7b/0x110 [ 204.665077][ T8854] ? nlmon_xmit+0xb0/0x100 [ 204.665105][ T8854] ? kmem_cache_free+0x182/0x650 [ 204.665150][ T8854] ? __lock_acquire+0x747/0x2de0 [ 204.665183][ T8854] ? __dev_queue_xmit+0x29b/0x3820 [ 204.665223][ T8854] ? __local_bh_enable_ip+0xd6/0x140 [ 204.665256][ T8854] ? lockdep_hardirqs_on+0x7b/0x110 [ 204.665296][ T8854] ? lock_acquire+0x115/0x350 [ 204.665321][ T8854] ? __pfx_rtnl_newlink+0x10/0x10 [ 204.665366][ T8854] ? __pfx_rtnl_newlink+0x10/0x10 [ 204.665396][ T8854] rtnetlink_rcv_msg+0x802/0xc00 [ 204.665434][ T8854] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 204.665463][ T8854] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 204.665496][ T8854] ? __copy_skb_header+0xa3/0x4a0 [ 204.665533][ T8854] ? __asan_memcpy+0x40/0x70 [ 204.665564][ T8854] netlink_rcv_skb+0x226/0x4a0 [ 204.665603][ T8854] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 204.665636][ T8854] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 204.665691][ T8854] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.665715][ T8854] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.665745][ T8854] netlink_unicast+0x7bd/0x940 [ 204.665793][ T8854] netlink_sendmsg+0x813/0xb40 [ 204.665829][ T8854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.665862][ T8854] ? apparmor_socket_sendmsg+0x98/0x360 [ 204.665892][ T8854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.665914][ T8854] sock_sendmsg_nosec+0x13a/0x180 [ 204.665960][ T8854] ____sys_sendmsg+0x54e/0x850 [ 204.666000][ T8854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.666044][ T8854] ? import_iovec+0x73/0xa0 [ 204.666080][ T8854] ___sys_sendmsg+0x2a5/0x360 [ 204.666112][ T8854] ? __lock_acquire+0x747/0x2de0 [ 204.666159][ T8854] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.666233][ T8854] ? __fget_files+0x2a/0x420 [ 204.666266][ T8854] ? __fget_files+0x3a2/0x420 [ 204.666312][ T8854] __x64_sys_sendmsg+0x1b1/0x290 [ 204.666349][ T8854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.666408][ T8854] do_syscall_64+0x166/0x520 [ 204.666438][ T8854] ? trace_irq_disable+0x3b/0x140 [ 204.666460][ T8854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.666483][ T8854] ? clear_bhb_loop+0x70/0xc0 [ 204.666510][ T8854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.666531][ T8854] RIP: 0033:0x7f1ea4d9e159 [ 204.666553][ T8854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.666571][ T8854] RSP: 002b:00007f1ea5d2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.666596][ T8854] RAX: ffffffffffffffda RBX: 00007f1ea5025fa0 RCX: 00007f1ea4d9e159 [ 204.666613][ T8854] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 204.666626][ T8854] RBP: 00007f1ea5d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 204.666639][ T8854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.666653][ T8854] R13: 00007f1ea5026038 R14: 00007f1ea5025fa0 R15: 00007ffd2ea86648 [ 204.666691][ T8854] [ 204.868960][ T8851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.731'. [ 205.639027][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 205.717722][ T8881] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 205.826516][ T8891] xt_cgroup: invalid path, errno=-2 [ 205.885316][ T8881] batman_adv: batadv0: Removing interface: virt_wifi0 [ 206.245635][ T8903] ip6erspan0: entered allmulticast mode [ 206.283267][ T8893] netlink: 164 bytes leftover after parsing attributes in process `syz.0.739'. [ 206.424674][ T8909] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 206.782903][ T8921] syzkaller0: entered promiscuous mode [ 206.782928][ T8921] syzkaller0: entered allmulticast mode [ 206.852943][ T8919] Driver unsupported XDP return value 0 on prog (id 306) dev N/A, expect packet loss! [ 207.130665][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 207.130690][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.751'. [ 207.168716][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 207.168741][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.751'. [ 207.257956][ T8939] IPv6: sit1: Disabled Multicast RS [ 207.410811][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 207.499627][ T8948] lo speed is unknown, defaulting to 1000 [ 207.528409][ T8953] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 207.544421][ T8948] lo speed is unknown, defaulting to 1000 [ 207.583893][ T8956] netlink: 'syz.0.757': attribute type 1 has an invalid length. [ 207.697456][ T8956] bond1: entered promiscuous mode [ 207.699679][ T8956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.094653][ T8970] tc_dump_action: action bad kind [ 208.864190][ T8976] batadv0: entered promiscuous mode [ 208.875805][ T8976] macsec2: entered promiscuous mode [ 208.881595][ T8976] macsec2: entered allmulticast mode [ 208.881622][ T8976] batadv0: entered allmulticast mode [ 208.904194][ T8976] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 208.912986][ T8976] batadv0: left allmulticast mode [ 208.913228][ T8976] batadv0: left promiscuous mode [ 209.872376][ T9025] __nla_validate_parse: 5 callbacks suppressed [ 209.872398][ T9025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.771'. [ 210.139509][ T9034] tipc: Can't bind to reserved service type 2 [ 210.260043][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.773'. [ 210.296754][ T9022] syzkaller1: entered promiscuous mode [ 210.296795][ T9022] syzkaller1: entered allmulticast mode [ 210.373380][ T9039] bond0: (slave bond_slave_1): Releasing backup interface [ 210.660849][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.774'. [ 210.702393][ T9042] team0: Port device team_slave_0 removed [ 210.717915][ T9043] syzkaller1: entered promiscuous mode [ 210.717940][ T9043] syzkaller1: entered allmulticast mode [ 211.364585][ T3169] batadv0: left promiscuous mode [ 211.708123][ T9001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 212.035552][ T9071] Cannot find set identified by id 0 to match [ 212.345580][ T9083] netlink: 'syz.3.785': attribute type 23 has an invalid length. [ 214.005075][ T9136] netlink: 'syz.3.799': attribute type 2 has an invalid length. [ 214.005101][ T9136] netlink: 232 bytes leftover after parsing attributes in process `syz.3.799'. [ 214.189909][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 215.119789][ T9169] FAULT_INJECTION: forcing a failure. [ 215.119789][ T9169] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 215.119826][ T9169] CPU: 1 UID: 0 PID: 9169 Comm: syz.4.809 Not tainted syzkaller #0 PREEMPT(full) [ 215.119850][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.119864][ T9169] Call Trace: [ 215.119872][ T9169] [ 215.119881][ T9169] dump_stack_lvl+0xe8/0x150 [ 215.119921][ T9169] should_fail_ex+0x410/0x560 [ 215.119951][ T9169] _copy_from_user+0x2d/0xb0 [ 215.120051][ T9169] ___sys_sendmsg+0x1c6/0x360 [ 215.120083][ T9169] ? __lock_acquire+0x747/0x2de0 [ 215.120110][ T9169] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.120185][ T9169] ? __fget_files+0x2a/0x420 [ 215.120217][ T9169] ? __fget_files+0x3a2/0x420 [ 215.120260][ T9169] __x64_sys_sendmsg+0x1b1/0x290 [ 215.120298][ T9169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.120351][ T9169] do_syscall_64+0x166/0x520 [ 215.120379][ T9169] ? trace_irq_disable+0x3b/0x140 [ 215.120401][ T9169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.120422][ T9169] ? clear_bhb_loop+0x70/0xc0 [ 215.120449][ T9169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.120471][ T9169] RIP: 0033:0x7f1ea4d9e159 [ 215.120491][ T9169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.120509][ T9169] RSP: 002b:00007f1ea5d2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.120532][ T9169] RAX: ffffffffffffffda RBX: 00007f1ea5025fa0 RCX: 00007f1ea4d9e159 [ 215.120548][ T9169] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 215.120562][ T9169] RBP: 00007f1ea5d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 215.120575][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.120587][ T9169] R13: 00007f1ea5026038 R14: 00007f1ea5025fa0 R15: 00007ffd2ea86648 [ 215.120622][ T9169] [ 215.343678][ T9171] netlink: 64 bytes leftover after parsing attributes in process `syz.2.806'. [ 215.399919][ T9170] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 215.433769][ T9168] syzkaller1: entered promiscuous mode [ 215.433794][ T9168] syzkaller1: entered allmulticast mode [ 215.501733][ T9171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.806'. [ 215.853845][ T9184] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 215.853883][ T9184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.971097][ T9180] netlink: 'syz.3.814': attribute type 20 has an invalid length. [ 215.971126][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 215.996315][ T9190] netlink: 60 bytes leftover after parsing attributes in process `syz.0.815'. [ 216.089835][ T9180] netlink: 'syz.3.814': attribute type 20 has an invalid length. [ 216.089861][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 216.106133][ T7146] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.106279][ T7146] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.111412][ T7146] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.111529][ T7146] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.195067][ T9182] smc: removing ib device sz1 [ 216.307493][ T9182] smbdirect: ib_dev[sz1] removed [ 216.393356][ T9195] netlink: 5 bytes leftover after parsing attributes in process `syz.0.818'. [ 216.393379][ T9195] netlink: 5 bytes leftover after parsing attributes in process `syz.0.818'. [ 216.393427][ T9195] netlink: 32 bytes leftover after parsing attributes in process `syz.0.818'. [ 216.425051][ T9197] netlink: 'syz.4.817': attribute type 1 has an invalid length. [ 216.429479][ T9197] bond_slave_0: left promiscuous mode [ 216.429517][ T9197] bond_slave_0: left allmulticast mode [ 216.429755][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 216.642209][ T9205] tipc: Started in network mode [ 216.642243][ T9205] tipc: Node identity 66ce4b340b91, cluster identity 4711 [ 216.642411][ T9205] tipc: Enabled bearer , priority 0 [ 216.642982][ T9205] syzkaller0: entered promiscuous mode [ 216.643001][ T9205] syzkaller0: entered allmulticast mode [ 216.679575][ T9209] netlink: 'syz.4.823': attribute type 8 has an invalid length. [ 216.810330][ T9212] syzkaller0: mtu less than device minimum [ 217.550717][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.830'. [ 217.742082][ T8192] tipc: Node number set to 1834961716 [ 217.884647][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.887458][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.200090][ T5641] Bluetooth: hci3: SCO packet too small [ 218.327422][ T9259] bond6: entered promiscuous mode [ 218.327450][ T9259] bond6: entered allmulticast mode [ 218.608148][ T7153] wlan0: Trigger new scan to find an IBSS to join [ 219.242895][ T9287] macvlan3: entered promiscuous mode [ 219.242922][ T9287] macvlan3: entered allmulticast mode [ 219.243188][ T9287] geneve1: entered promiscuous mode [ 219.243204][ T9287] geneve1: entered allmulticast mode [ 219.302273][ T9287] team0: Port device macvlan3 added [ 219.455151][ T9289] bond5: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 219.458686][ T9289] bond5 (unregistering): Released all slaves [ 219.710466][ T9292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.392880][ T9314] bond1: option lp_interval: invalid value (0) [ 220.392908][ T9314] bond1: option lp_interval: allowed values 1 - 2147483647 [ 220.409861][ T9314] bond1 (unregistering): Released all slaves [ 220.487007][ T9319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.490180][ T9319] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 220.882670][ T9292] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.221777][ T9335] FAULT_INJECTION: forcing a failure. [ 221.221777][ T9335] name failslab, interval 1, probability 0, space 0, times 0 [ 221.221814][ T9335] CPU: 1 UID: 0 PID: 9335 Comm: syz.1.861 Not tainted syzkaller #0 PREEMPT(full) [ 221.221843][ T9335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.221857][ T9335] Call Trace: [ 221.221865][ T9335] [ 221.221875][ T9335] dump_stack_lvl+0xe8/0x150 [ 221.221914][ T9335] should_fail_ex+0x410/0x560 [ 221.221946][ T9335] should_failslab+0xa8/0x100 [ 221.221983][ T9335] ? skb_clone+0x212/0x3a0 [ 221.222016][ T9335] kmem_cache_alloc_noprof+0xa1/0x600 [ 221.222055][ T9335] ? skb_clone+0x212/0x3a0 [ 221.222095][ T9335] skb_clone+0x212/0x3a0 [ 221.222131][ T9335] __netlink_deliver_tap+0x355/0x6e0 [ 221.222167][ T9335] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.222191][ T9335] netlink_deliver_tap+0x19c/0x1b0 [ 221.222222][ T9335] netlink_unicast+0x781/0x940 [ 221.222268][ T9335] netlink_sendmsg+0x813/0xb40 [ 221.222302][ T9335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.222334][ T9335] ? apparmor_socket_sendmsg+0x98/0x360 [ 221.222363][ T9335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.222384][ T9335] sock_sendmsg_nosec+0x13a/0x180 [ 221.222411][ T9335] ____sys_sendmsg+0x54e/0x850 [ 221.222449][ T9335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.222492][ T9335] ? import_iovec+0x73/0xa0 [ 221.222525][ T9335] ___sys_sendmsg+0x2a5/0x360 [ 221.222556][ T9335] ? __lock_acquire+0x747/0x2de0 [ 221.222584][ T9335] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.222655][ T9335] ? __fget_files+0x2a/0x420 [ 221.222690][ T9335] ? __fget_files+0x3a2/0x420 [ 221.222731][ T9335] __x64_sys_sendmsg+0x1b1/0x290 [ 221.222767][ T9335] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.222823][ T9335] do_syscall_64+0x166/0x520 [ 221.222853][ T9335] ? trace_irq_disable+0x3b/0x140 [ 221.222875][ T9335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.222898][ T9335] ? clear_bhb_loop+0x70/0xc0 [ 221.222926][ T9335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.222948][ T9335] RIP: 0033:0x7f792959e159 [ 221.222974][ T9335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.222992][ T9335] RSP: 002b:00007f792a52f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.223017][ T9335] RAX: ffffffffffffffda RBX: 00007f7929825fa0 RCX: 00007f792959e159 [ 221.223033][ T9335] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 221.223048][ T9335] RBP: 00007f792a52f090 R08: 0000000000000000 R09: 0000000000000000 [ 221.223061][ T9335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.223074][ T9335] R13: 00007f7929826038 R14: 00007f7929825fa0 R15: 00007ffcd5b334a8 [ 221.223110][ T9335] [ 221.375735][ T9335] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 221.565738][ T7146] wlan0: Trigger new scan to find an IBSS to join [ 221.781701][ T9344] sctp: [Deprecated]: syz.2.862 (pid 9344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.781701][ T9344] Use struct sctp_sack_info instead [ 221.830343][ T9352] __nla_validate_parse: 4 callbacks suppressed [ 221.830366][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 221.830394][ T9352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.867'. [ 221.831162][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 221.831191][ T9352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.867'. [ 221.932547][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 222.095286][ T9367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.871'. [ 222.347234][ T9386] xt_MASQUERADE: bad MAP_IPS. [ 222.410227][ T9376] syzkaller0: left promiscuous mode [ 222.410256][ T9376] syzkaller0: left allmulticast mode [ 222.619852][ T9379] syzkaller1: entered promiscuous mode [ 222.619881][ T9379] syzkaller1: entered allmulticast mode [ 222.661455][ T9397] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 222.696061][ T4935] Bluetooth: hci2: command 0x0406 tx timeout [ 222.696098][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 222.696140][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 222.919254][ T9394] syzkaller0: entered promiscuous mode [ 222.919296][ T9394] syzkaller0: entered allmulticast mode [ 223.207224][ T9413] veth0: entered promiscuous mode [ 223.319469][ T9421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.886'. [ 224.084672][ T9410] veth0: left promiscuous mode [ 224.582806][ T9438] syzkaller1: entered promiscuous mode [ 224.582831][ T9438] syzkaller1: entered allmulticast mode [ 224.607488][ T7146] wlan0: Trigger new scan to find an IBSS to join [ 225.153173][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.903'. [ 225.253761][ T9490] syzkaller1: entered promiscuous mode [ 225.253788][ T9490] syzkaller1: entered allmulticast mode [ 225.327033][ T9483] af_packet: tpacket_rcv: packet too big, clamped from 64862 to 3952. macoff=96 [ 225.400875][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.905'. [ 225.495082][ T9499] netlink: 'syz.2.909': attribute type 26 has an invalid length. [ 225.497543][ T9500] xt_REDIRECT: bad MAP_IPS. [ 225.520609][ T9498] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 225.565515][ T7147] wlan0: Creating new IBSS network, BSSID 4a:6f:f3:9b:55:ee [ 226.032555][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 226.185396][ T9529] netlink: 'syz.4.917': attribute type 32 has an invalid length. [ 226.191973][ T9529] netlink: 'syz.4.917': attribute type 16 has an invalid length. [ 226.191996][ T9529] netlink: 'syz.4.917': attribute type 17 has an invalid length. [ 226.436308][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.438664][ T9529] bridge0: port 1(1¾x9ÿ) entered disabled state [ 226.729810][ T9549] IPv6: addrconf: prefix option has invalid lifetime [ 226.764194][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 226.963780][ T9529] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 227.139191][ T9529] bond1: left promiscuous mode [ 227.139219][ T9529] veth0_to_bond: left promiscuous mode [ 227.139456][ T9529] bond1: left allmulticast mode [ 227.139470][ T9529] veth0_to_bond: left allmulticast mode [ 227.139899][ T9529] ipvlan2: left promiscuous mode [ 227.143021][ T9529] geneve2: left promiscuous mode [ 227.143046][ T9529] geneve2: left allmulticast mode [ 227.189585][ T9529] ip6erspan0: left allmulticast mode [ 227.223028][ T9552] wg2 speed is unknown, defaulting to 1000 [ 227.229504][ T7146] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 4352 - 0 [ 227.229616][ T7146] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.229687][ T7146] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 60793 - 0 [ 227.234515][ T50] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 4352 - 0 [ 227.234610][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.234685][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 60793 - 0 [ 227.236165][ T7153] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 4352 - 0 [ 227.236243][ T7153] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.236311][ T7153] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 60793 - 0 [ 227.236400][ T7153] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 4352 - 0 [ 227.236464][ T7153] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.236550][ T7153] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 60793 - 0 [ 227.349163][ T9552] wg2 speed is unknown, defaulting to 1000 [ 227.350088][ T9552] wg2 speed is unknown, defaulting to 1000 [ 227.751127][ T9569] netlink: 164 bytes leftover after parsing attributes in process `syz.2.926'. [ 227.964591][ T9552] infiniband syz1: set active [ 227.965832][ T9552] infiniband syz1: added wg2 [ 227.971693][ T9552] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 227.985361][ T9552] infiniband syz1: Couldn't open port 1 [ 227.985705][ T9552] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 227.985738][ T9552] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 227.985779][ T9552] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 228.100812][ T9552] RDS/IB: syz1: added [ 228.101305][ T9552] smc: adding ib device syz1 with port count 1 [ 228.101324][ T9552] smc: ib device syz1 port 1 has no pnetid [ 228.125127][ T5720] wg2 speed is unknown, defaulting to 1000 [ 228.128117][ T31] wg2 speed is unknown, defaulting to 1000 [ 228.130587][ T9552] wg2 speed is unknown, defaulting to 1000 [ 228.547856][ T9552] wg2 speed is unknown, defaulting to 1000 [ 228.740476][ T9552] wg2 speed is unknown, defaulting to 1000 [ 228.906676][ T9552] wg2 speed is unknown, defaulting to 1000 [ 229.074921][ T9552] wg2 speed is unknown, defaulting to 1000 [ 229.312083][ T9581] netlink: 24 bytes leftover after parsing attributes in process `syz.3.930'. [ 230.455468][ T9560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.823890][ T9598] bond2: (slave bond_slave_1): Device is not bonding slave [ 230.823914][ T9598] bond2: option active_slave: invalid value (bond_slave_1) [ 230.844987][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'. [ 230.922483][ T9598] bond2 (unregistering): Released all slaves [ 230.933197][ T9613] netlink: 32 bytes leftover after parsing attributes in process `syz.2.940'. [ 231.176020][ T9625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.945'. [ 231.282348][ T9633] netlink: 'syz.4.945': attribute type 23 has an invalid length. [ 231.282374][ T9633] netlink: 'syz.4.945': attribute type 21 has an invalid length. [ 231.282392][ T9633] IPv6: NLM_F_CREATE should be specified when creating new route [ 231.493513][ T9630] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 231.507249][ T9627] netlink: 112 bytes leftover after parsing attributes in process `syz.1.944'. [ 231.537511][ T9627] netlink: 112 bytes leftover after parsing attributes in process `syz.1.944'. [ 231.664883][ T9645] syzkaller0: left promiscuous mode [ 231.664908][ T9645] syzkaller0: left allmulticast mode [ 233.827220][ T9613] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.082702][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 234.105473][ T9666] xt_TCPMSS: Only works on TCP SYN packets [ 234.194430][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 234.676171][ T9682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.958'. [ 234.762744][ T9682] hsr_slave_0: left promiscuous mode [ 234.772593][ T9682] hsr_slave_1: left promiscuous mode [ 235.222869][ T9694] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 235.291545][ T9701] syzkaller0: entered promiscuous mode [ 235.291570][ T9701] syzkaller0: entered allmulticast mode [ 236.582182][ T9732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.607788][ T9731] pimreg9: entered allmulticast mode [ 236.910936][ T9741] tipc: Started in network mode [ 236.910969][ T9741] tipc: Node identity a63842985e99, cluster identity 4711 [ 236.911138][ T9741] tipc: Enabled bearer , priority 0 [ 236.912604][ T9741] syzkaller0: entered promiscuous mode [ 236.912626][ T9741] syzkaller0: entered allmulticast mode [ 237.074151][ T9741] netlink: 164 bytes leftover after parsing attributes in process `syz.1.973'. [ 237.178694][ T9751] SET target dimension over the limit! [ 237.187686][ T9745] tipc: Resetting bearer [ 237.325676][ T9736] tipc: Resetting bearer [ 237.412246][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.981'. [ 237.412279][ T9757] block nbd4: Unsupported socket: should be TCP or UNIX. [ 237.430178][ T9736] tipc: Disabling bearer [ 237.612976][ T9754] netlink: 164 bytes leftover after parsing attributes in process `syz.3.980'. [ 238.018457][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 238.591567][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 238.827113][ T9799] netlink: 'syz.2.990': attribute type 1 has an invalid length. [ 238.961023][ T9799] bond5: entered promiscuous mode [ 238.961909][ T9799] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.001890][ T9811] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.002380][ T9811] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 239.002404][ T9811] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 239.033529][ T9799] netlink: 48 bytes leftover after parsing attributes in process `syz.2.990'. [ 239.047061][ T9811] bond5: (slave ip6gre1): making interface the new active one [ 239.047086][ T9811] ip6gre1: entered promiscuous mode [ 239.071939][ T9811] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 239.257046][ T9820] netlink: 56 bytes leftover after parsing attributes in process `syz.2.995'. [ 239.532031][ T9826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.998'. [ 239.548442][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.998'. [ 239.548683][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.998'. [ 239.548919][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.998'. [ 239.549162][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.998'. [ 239.549401][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.998'. [ 239.549617][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.998'. [ 239.611917][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.998'. [ 239.727346][ T9836] Bluetooth: MGMT ver 1.23 [ 239.829272][ T9831] dvmrp8: entered allmulticast mode [ 239.845644][ T9826] netlink: 48 bytes leftover after parsing attributes in process `syz.1.998'. [ 239.868601][ T9831] syzkaller0: left promiscuous mode [ 239.868631][ T9831] syzkaller0: left allmulticast mode [ 240.060125][ T9847] netlink: 'syz.3.1002': attribute type 2 has an invalid length. [ 240.160560][ T9847] : entered promiscuous mode [ 240.193029][ T9847] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:21 [ 240.237214][ T9854] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 240.632815][ T9863] netlink: 'syz.0.1005': attribute type 5 has an invalid length. [ 241.352426][ T9883] netlink: 'syz.0.1008': attribute type 1 has an invalid length. [ 241.696552][ T9892] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 241.983530][ T9900] bridge1: entered promiscuous mode [ 241.983612][ T9900] bridge1: entered allmulticast mode [ 242.127208][ T9908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.219721][ T9904] batman_adv: batadv0: Interface deactivated: wlan0 [ 244.793705][ T9973] __nla_validate_parse: 44 callbacks suppressed [ 244.793731][ T9973] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1032'. [ 244.793748][ T9973] openvswitch: netlink: Flow key attr not present in new flow. [ 244.823367][ T9973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1032'. [ 245.089679][ T9992] veth7: entered allmulticast mode [ 245.864402][T10036] netlink: 'syz.3.1042': attribute type 11 has an invalid length. [ 246.133207][T10052] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1045'. [ 246.133243][T10052] netlink: 239 bytes leftover after parsing attributes in process `syz.0.1045'. [ 246.171684][T10052] netlink: zone id is out of range [ 246.171703][T10052] netlink: zone id is out of range [ 246.171712][T10052] netlink: zone id is out of range [ 246.171721][T10052] netlink: zone id is out of range [ 246.171731][T10052] netlink: zone id is out of range [ 246.171739][T10052] netlink: zone id is out of range [ 246.171748][T10052] netlink: zone id is out of range [ 246.316643][T10057] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1048'. [ 246.815144][T10079] FAULT_INJECTION: forcing a failure. [ 246.815144][T10079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.816430][T10079] CPU: 1 UID: 0 PID: 10079 Comm: syz.1.1052 Not tainted syzkaller #0 PREEMPT(full) [ 246.816473][T10079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.816506][T10079] Call Trace: [ 246.816515][T10079] [ 246.816525][T10079] dump_stack_lvl+0xe8/0x150 [ 246.816564][T10079] should_fail_ex+0x410/0x560 [ 246.816596][T10079] _copy_from_user+0x2d/0xb0 [ 246.816630][T10079] ___sys_sendmsg+0x1c6/0x360 [ 246.816771][T10079] ? __lock_acquire+0x747/0x2de0 [ 246.816804][T10079] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.816870][T10079] ? __fget_files+0x2a/0x420 [ 246.816900][T10079] ? __fget_files+0x3a2/0x420 [ 246.816977][T10079] __x64_sys_sendmsg+0x1b1/0x290 [ 246.817173][T10079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.817236][T10079] do_syscall_64+0x166/0x520 [ 246.817270][T10079] ? trace_irq_disable+0x3b/0x140 [ 246.817297][T10079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.817340][T10079] ? clear_bhb_loop+0x70/0xc0 [ 246.817383][T10079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.817433][T10079] RIP: 0033:0x7f792959e159 [ 246.817498][T10079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.817521][T10079] RSP: 002b:00007f792a52f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.817549][T10079] RAX: ffffffffffffffda RBX: 00007f7929825fa0 RCX: 00007f792959e159 [ 246.817567][T10079] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 000000000000000c [ 246.817585][T10079] RBP: 00007f792a52f090 R08: 0000000000000000 R09: 0000000000000000 [ 246.817665][T10079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.817682][T10079] R13: 00007f7929826038 R14: 00007f7929825fa0 R15: 00007ffcd5b334a8 [ 246.817754][T10079] [ 247.313229][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1059'. [ 247.379959][T10093] syzkaller0: left promiscuous mode [ 247.379986][T10093] syzkaller0: left allmulticast mode [ 247.635421][T10112] FAULT_INJECTION: forcing a failure. [ 247.635421][T10112] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 247.635459][T10112] CPU: 0 UID: 0 PID: 10112 Comm: syz.1.1063 Not tainted syzkaller #0 PREEMPT(full) [ 247.635485][T10112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.635499][T10112] Call Trace: [ 247.635507][T10112] [ 247.635517][T10112] dump_stack_lvl+0xe8/0x150 [ 247.635566][T10112] should_fail_ex+0x410/0x560 [ 247.635599][T10112] prepare_alloc_pages+0x223/0x600 [ 247.635633][T10112] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 247.635663][T10112] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 247.635693][T10112] ? __pfx_policy_nodemask+0x10/0x10 [ 247.635722][T10112] ? __lock_acquire+0x747/0x2de0 [ 247.635755][T10112] alloc_pages_mpol+0x21e/0x390 [ 247.635790][T10112] alloc_pages_noprof+0xb1/0x2b0 [ 247.635821][T10112] pte_alloc_one+0x22/0x370 [ 247.635851][T10112] __pte_alloc+0x25/0x1a0 [ 247.635923][T10112] do_pte_missing+0x2db7/0x34b0 [ 247.635951][T10112] ? do_raw_spin_unlock+0xf5/0x200 [ 247.635988][T10112] ? __pmd_alloc+0x40a/0x5c0 [ 247.636024][T10112] handle_mm_fault+0x1a53/0x3750 [ 247.636069][T10112] ? handle_mm_fault+0xf1/0x3750 [ 247.636112][T10112] ? __pfx_handle_mm_fault+0x10/0x10 [ 247.636160][T10112] ? __lock_acquire+0x747/0x2de0 [ 247.636187][T10112] ? lock_mm_and_find_vma+0xa7/0x340 [ 247.636227][T10112] do_user_addr_fault+0x746/0x1340 [ 247.636268][T10112] exc_page_fault+0x6a/0xc0 [ 247.636306][T10112] asm_exc_page_fault+0x26/0x30 [ 247.636327][T10112] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 247.636351][T10112] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 247.636371][T10112] RSP: 0018:ffffc90007c678d8 EFLAGS: 00050206 [ 247.636392][T10112] RAX: 0000000200000038 RBX: ffff8880258989c0 RCX: 0000000000000038 [ 247.636408][T10112] RDX: 0000000000000000 RSI: ffff8880258989c0 RDI: 0000000000000000 [ 247.636423][T10112] RBP: ffffc90007c67a50 R08: ffff8880258989f7 R09: 1ffff11004b1313e [ 247.636439][T10112] R10: dffffc0000000000 R11: ffffed1004b1313f R12: 1ffff92000f8cfbb [ 247.636457][T10112] R13: 0000000000000000 R14: ffffc90007c67de8 R15: 0000000000000038 [ 247.636491][T10112] _copy_to_iter+0x255/0x1810 [ 247.636525][T10112] ? do_raw_spin_lock+0x12b/0x2f0 [ 247.636572][T10112] ? __pfx__copy_to_iter+0x10/0x10 [ 247.636600][T10112] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 247.636631][T10112] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 247.636659][T10112] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 247.636700][T10112] __skb_datagram_iter+0xf8/0x980 [ 247.636737][T10112] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 247.636781][T10112] skb_copy_datagram_iter+0xb5/0x240 [ 247.636819][T10112] netlink_recvmsg+0x2b9/0xa50 [ 247.636853][T10112] ? __pfx_netlink_recvmsg+0x10/0x10 [ 247.636880][T10112] ? aa_sock_msg_perm+0x144/0x210 [ 247.636992][T10112] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 247.637032][T10112] ? security_socket_recvmsg+0x7e/0x2c0 [ 247.637123][T10112] ? __pfx_netlink_recvmsg+0x10/0x10 [ 247.637147][T10112] sock_recvmsg+0x196/0x1e0 [ 247.637175][T10112] __sys_recvfrom+0x231/0x3a0 [ 247.637209][T10112] ? __pfx___sys_recvfrom+0x10/0x10 [ 247.637266][T10112] ? __pfx_ksys_write+0x10/0x10 [ 247.637307][T10112] __x64_sys_recvfrom+0xde/0x100 [ 247.637340][T10112] do_syscall_64+0x166/0x520 [ 247.637369][T10112] ? trace_irq_disable+0x3b/0x140 [ 247.637390][T10112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.637411][T10112] ? clear_bhb_loop+0x70/0xc0 [ 247.637437][T10112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.637458][T10112] RIP: 0033:0x7f792959e159 [ 247.637479][T10112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.637495][T10112] RSP: 002b:00007f792a52f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 247.637517][T10112] RAX: ffffffffffffffda RBX: 00007f7929825fa0 RCX: 00007f792959e159 [ 247.637542][T10112] RDX: ffffffffffffff70 RSI: 0000000000000000 RDI: 0000000000000003 [ 247.637557][T10112] RBP: 00007f792a52f090 R08: 0000200000000700 R09: 0000000000000010 [ 247.637572][T10112] R10: 0000000040000142 R11: 0000000000000246 R12: 0000000000000001 [ 247.637585][T10112] R13: 00007f7929826038 R14: 00007f7929825fa0 R15: 00007ffcd5b334a8 [ 247.637621][T10112] [ 248.492265][T10128] netlink: 'syz.2.1068': attribute type 1 has an invalid length. [ 248.992642][T10146] FAULT_INJECTION: forcing a failure. [ 248.992642][T10146] name failslab, interval 1, probability 0, space 0, times 0 [ 248.992680][T10146] CPU: 0 UID: 0 PID: 10146 Comm: syz.2.1075 Not tainted syzkaller #0 PREEMPT(full) [ 248.992704][T10146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.992719][T10146] Call Trace: [ 248.992727][T10146] [ 248.992737][T10146] dump_stack_lvl+0xe8/0x150 [ 248.992776][T10146] should_fail_ex+0x410/0x560 [ 248.992809][T10146] should_failslab+0xa8/0x100 [ 248.992838][T10146] ? ptlock_alloc+0x20/0x70 [ 248.992870][T10146] kmem_cache_alloc_noprof+0xa1/0x600 [ 248.992910][T10146] ? ptlock_alloc+0x20/0x70 [ 248.992958][T10146] ptlock_alloc+0x20/0x70 [ 248.992988][T10146] pte_alloc_one+0x7a/0x370 [ 248.993019][T10146] __pte_alloc+0x25/0x1a0 [ 248.993045][T10146] do_pte_missing+0x2db7/0x34b0 [ 248.993071][T10146] ? do_raw_spin_unlock+0xf5/0x200 [ 248.993107][T10146] ? __pmd_alloc+0x40a/0x5c0 [ 248.993142][T10146] handle_mm_fault+0x1a53/0x3750 [ 248.993186][T10146] ? handle_mm_fault+0xf1/0x3750 [ 248.993228][T10146] ? __pfx_handle_mm_fault+0x10/0x10 [ 248.993277][T10146] ? __lock_acquire+0x747/0x2de0 [ 248.993305][T10146] ? lock_mm_and_find_vma+0xa7/0x340 [ 248.993343][T10146] do_user_addr_fault+0x746/0x1340 [ 248.993383][T10146] exc_page_fault+0x6a/0xc0 [ 248.993414][T10146] asm_exc_page_fault+0x26/0x30 [ 248.993435][T10146] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 248.993455][T10146] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 248.993471][T10146] RSP: 0018:ffffc90005e778d8 EFLAGS: 00050206 [ 248.993488][T10146] RAX: 0000000200000038 RBX: ffff888029122d80 RCX: 0000000000000038 [ 248.993501][T10146] RDX: 0000000000000000 RSI: ffff888029122d80 RDI: 0000000000000000 [ 248.993512][T10146] RBP: ffffc90005e77a50 R08: ffff888029122db7 R09: 1ffff110052245b6 [ 248.993525][T10146] R10: dffffc0000000000 R11: ffffed10052245b7 R12: 1ffff92000bcefbb [ 248.993538][T10146] R13: 0000000000000000 R14: ffffc90005e77de8 R15: 0000000000000038 [ 248.993564][T10146] _copy_to_iter+0x255/0x1810 [ 248.993592][T10146] ? do_raw_spin_lock+0x12b/0x2f0 [ 248.993621][T10146] ? __pfx__copy_to_iter+0x10/0x10 [ 248.993642][T10146] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 248.993666][T10146] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 248.993687][T10146] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 248.993719][T10146] __skb_datagram_iter+0xf8/0x980 [ 248.993748][T10146] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 248.993782][T10146] skb_copy_datagram_iter+0xb5/0x240 [ 248.993813][T10146] netlink_recvmsg+0x2b9/0xa50 [ 248.993840][T10146] ? __pfx_netlink_recvmsg+0x10/0x10 [ 248.993862][T10146] ? aa_sock_msg_perm+0x144/0x210 [ 248.993890][T10146] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 248.993912][T10146] ? security_socket_recvmsg+0x7e/0x2c0 [ 248.993949][T10146] ? __pfx_netlink_recvmsg+0x10/0x10 [ 248.993968][T10146] sock_recvmsg+0x196/0x1e0 [ 248.993990][T10146] __sys_recvfrom+0x231/0x3a0 [ 248.994018][T10146] ? __pfx___sys_recvfrom+0x10/0x10 [ 248.994067][T10146] ? __pfx_ksys_write+0x10/0x10 [ 248.994099][T10146] __x64_sys_recvfrom+0xde/0x100 [ 248.994126][T10146] do_syscall_64+0x166/0x520 [ 248.994151][T10146] ? trace_irq_disable+0x3b/0x140 [ 248.994170][T10146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.994189][T10146] ? clear_bhb_loop+0x70/0xc0 [ 248.994212][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.994231][T10146] RIP: 0033:0x7faf50b9e159 [ 248.994249][T10146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.994265][T10146] RSP: 002b:00007faf51a2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 248.994287][T10146] RAX: ffffffffffffffda RBX: 00007faf50e25fa0 RCX: 00007faf50b9e159 [ 248.994300][T10146] RDX: ffffffffffffff70 RSI: 0000000000000000 RDI: 0000000000000003 [ 248.994312][T10146] RBP: 00007faf51a2c090 R08: 0000200000000700 R09: 0000000000000010 [ 248.994324][T10146] R10: 0000000040000142 R11: 0000000000000246 R12: 0000000000000001 [ 248.994336][T10146] R13: 00007faf50e26038 R14: 00007faf50e25fa0 R15: 00007ffea39d87c8 [ 248.994366][T10146] [ 249.610936][T10161] FAULT_INJECTION: forcing a failure. [ 249.610936][T10161] name failslab, interval 1, probability 0, space 0, times 0 [ 249.610974][T10161] CPU: 0 UID: 0 PID: 10161 Comm: syz.4.1081 Not tainted syzkaller #0 PREEMPT(full) [ 249.611000][T10161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.611014][T10161] Call Trace: [ 249.611023][T10161] [ 249.611033][T10161] dump_stack_lvl+0xe8/0x150 [ 249.611072][T10161] should_fail_ex+0x410/0x560 [ 249.611104][T10161] should_failslab+0xa8/0x100 [ 249.611136][T10161] __kvmalloc_node_noprof+0x176/0x820 [ 249.611164][T10161] ? __kvmalloc_node_noprof+0x345/0x820 [ 249.611188][T10161] ? analyze_subprog+0x8ac/0x9e00 [ 249.611243][T10161] ? analyze_subprog+0x8ac/0x9e00 [ 249.611277][T10161] analyze_subprog+0x8ac/0x9e00 [ 249.611302][T10161] ? is_bpf_text_address+0x292/0x2b0 [ 249.611343][T10161] ? kernel_text_address+0xa5/0xe0 [ 249.611395][T10161] ? __pfx_stack_trace_save+0x10/0x10 [ 249.611434][T10161] ? call_instance+0x263/0x560 [ 249.611458][T10161] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 249.611484][T10161] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 249.611511][T10161] ? __pfx_analyze_subprog+0x10/0x10 [ 249.611535][T10161] ? __x64_sys_bpf+0xba/0xd0 [ 249.611554][T10161] ? do_syscall_64+0x166/0x520 [ 249.611584][T10161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.611649][T10161] ? call_instance+0x263/0x560 [ 249.611673][T10161] ? rcu_is_watching+0x16/0xb0 [ 249.611706][T10161] ? call_instance+0x263/0x560 [ 249.611729][T10161] ? trace_kmalloc+0x2a/0xf0 [ 249.611752][T10161] ? call_instance+0x263/0x560 [ 249.611774][T10161] ? __kvmalloc_node_noprof+0x52f/0x820 [ 249.611800][T10161] ? __kvmalloc_node_noprof+0x345/0x820 [ 249.611823][T10161] ? call_instance+0x263/0x560 [ 249.611849][T10161] ? call_instance+0x263/0x560 [ 249.611881][T10161] ? call_instance+0x42e/0x560 [ 249.611914][T10161] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 249.611942][T10161] ? lwt_out_func_proto+0x1d4/0x2a0 [ 249.612092][T10161] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 249.612126][T10161] ? __kvmalloc_node_noprof+0x345/0x820 [ 249.612151][T10161] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 249.612176][T10161] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 249.612211][T10161] bpf_compute_live_registers+0x8d3/0x1ff0 [ 249.612260][T10161] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 249.612300][T10161] bpf_check+0x2746/0x2ef0 [ 249.612344][T10161] ? __pfx_bpf_check+0x10/0x10 [ 249.612372][T10161] ? bpf_obj_name_cpy+0x194/0x1e0 [ 249.612410][T10161] bpf_prog_load+0x14d6/0x1c20 [ 249.612450][T10161] ? __pfx_bpf_prog_load+0x10/0x10 [ 249.612505][T10161] __sys_bpf+0xd0d/0xd90 [ 249.612539][T10161] ? __pfx___sys_bpf+0x10/0x10 [ 249.612578][T10161] ? __fget_files+0x2a/0x420 [ 249.612629][T10161] ? ksys_write+0x242/0x270 [ 249.612666][T10161] ? __pfx_ksys_write+0x10/0x10 [ 249.612714][T10161] __x64_sys_bpf+0xba/0xd0 [ 249.612740][T10161] do_syscall_64+0x166/0x520 [ 249.612770][T10161] ? trace_irq_disable+0x3b/0x140 [ 249.612792][T10161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.612815][T10161] ? clear_bhb_loop+0x70/0xc0 [ 249.612843][T10161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.612865][T10161] RIP: 0033:0x7f1ea4d9e159 [ 249.612887][T10161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.612906][T10161] RSP: 002b:00007f1ea5d2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.612930][T10161] RAX: ffffffffffffffda RBX: 00007f1ea5025fa0 RCX: 00007f1ea4d9e159 [ 249.612948][T10161] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 249.612963][T10161] RBP: 00007f1ea5d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 249.612977][T10161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.612991][T10161] R13: 00007f1ea5026038 R14: 00007f1ea5025fa0 R15: 00007ffd2ea86648 [ 249.613027][T10161] [ 250.510966][T10181] block nbd0: reconnected socket [ 250.817355][T10210] FAULT_INJECTION: forcing a failure. [ 250.817355][T10210] name failslab, interval 1, probability 0, space 0, times 0 [ 250.817395][T10210] CPU: 1 UID: 0 PID: 10210 Comm: syz.4.1093 Not tainted syzkaller #0 PREEMPT(full) [ 250.817421][T10210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.817435][T10210] Call Trace: [ 250.817445][T10210] [ 250.817454][T10210] dump_stack_lvl+0xe8/0x150 [ 250.817494][T10210] should_fail_ex+0x410/0x560 [ 250.817528][T10210] should_failslab+0xa8/0x100 [ 250.817574][T10210] __kvmalloc_node_noprof+0x176/0x820 [ 250.817600][T10210] ? __kvmalloc_node_noprof+0x345/0x820 [ 250.817623][T10210] ? analyze_subprog+0x8ac/0x9e00 [ 250.817648][T10210] ? analyze_subprog+0x8ac/0x9e00 [ 250.817681][T10210] analyze_subprog+0x8ac/0x9e00 [ 250.817706][T10210] ? is_bpf_text_address+0x292/0x2b0 [ 250.817740][T10210] ? kernel_text_address+0xa5/0xe0 [ 250.817789][T10210] ? __pfx_stack_trace_save+0x10/0x10 [ 250.817829][T10210] ? call_instance+0x263/0x560 [ 250.817853][T10210] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 250.817880][T10210] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 250.817908][T10210] ? __pfx_analyze_subprog+0x10/0x10 [ 250.817932][T10210] ? __x64_sys_bpf+0xba/0xd0 [ 250.817951][T10210] ? do_syscall_64+0x166/0x520 [ 250.817981][T10210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.818040][T10210] ? call_instance+0x263/0x560 [ 250.818063][T10210] ? rcu_is_watching+0x16/0xb0 [ 250.818088][T10210] ? call_instance+0x263/0x560 [ 250.818110][T10210] ? trace_kmalloc+0x2a/0xf0 [ 250.818131][T10210] ? call_instance+0x263/0x560 [ 250.818153][T10210] ? __kvmalloc_node_noprof+0x52f/0x820 [ 250.818179][T10210] ? __kvmalloc_node_noprof+0x345/0x820 [ 250.818203][T10210] ? call_instance+0x263/0x560 [ 250.818225][T10210] ? call_instance+0x263/0x560 [ 250.818257][T10210] ? call_instance+0x42e/0x560 [ 250.818289][T10210] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 250.818316][T10210] ? lwt_out_func_proto+0x1d4/0x2a0 [ 250.818372][T10210] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 250.818403][T10210] ? __kvmalloc_node_noprof+0x345/0x820 [ 250.818426][T10210] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 250.818455][T10210] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 250.818487][T10210] bpf_compute_live_registers+0x8d3/0x1ff0 [ 250.818531][T10210] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 250.818580][T10210] bpf_check+0x2746/0x2ef0 [ 250.818623][T10210] ? __pfx_bpf_check+0x10/0x10 [ 250.818651][T10210] ? bpf_obj_name_cpy+0x194/0x1e0 [ 250.818688][T10210] bpf_prog_load+0x14d6/0x1c20 [ 250.818728][T10210] ? __pfx_bpf_prog_load+0x10/0x10 [ 250.818783][T10210] __sys_bpf+0xd0d/0xd90 [ 250.818817][T10210] ? __pfx___sys_bpf+0x10/0x10 [ 250.818855][T10210] ? __fget_files+0x2a/0x420 [ 250.818905][T10210] ? ksys_write+0x242/0x270 [ 250.818944][T10210] ? __pfx_ksys_write+0x10/0x10 [ 250.818985][T10210] __x64_sys_bpf+0xba/0xd0 [ 250.819012][T10210] do_syscall_64+0x166/0x520 [ 250.819042][T10210] ? trace_irq_disable+0x3b/0x140 [ 250.819065][T10210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.819089][T10210] ? clear_bhb_loop+0x70/0xc0 [ 250.819117][T10210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.819141][T10210] RIP: 0033:0x7f1ea4d9e159 [ 250.819164][T10210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.819184][T10210] RSP: 002b:00007f1ea5d2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.819210][T10210] RAX: ffffffffffffffda RBX: 00007f1ea5025fa0 RCX: 00007f1ea4d9e159 [ 250.819227][T10210] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 250.819242][T10210] RBP: 00007f1ea5d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 250.819257][T10210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.819270][T10210] R13: 00007f1ea5026038 R14: 00007f1ea5025fa0 R15: 00007ffd2ea86648 [ 250.819307][T10210] [ 251.324492][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.696862][T10231] net_ratelimit: 8 callbacks suppressed [ 251.696888][T10231] netlink: Failed to add helper -22 [ 251.696937][T10231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.007588][T10247] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1103'. [ 252.132279][T10251] FAULT_INJECTION: forcing a failure. [ 252.132279][T10251] name failslab, interval 1, probability 0, space 0, times 0 [ 252.132307][T10251] CPU: 0 UID: 0 PID: 10251 Comm: syz.0.1104 Not tainted syzkaller #0 PREEMPT(full) [ 252.132325][T10251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.132335][T10251] Call Trace: [ 252.132342][T10251] [ 252.132349][T10251] dump_stack_lvl+0xe8/0x150 [ 252.132377][T10251] should_fail_ex+0x410/0x560 [ 252.132401][T10251] should_failslab+0xa8/0x100 [ 252.132423][T10251] __kvmalloc_node_noprof+0x176/0x820 [ 252.132444][T10251] ? record_stack_access+0xc71/0x1110 [ 252.132463][T10251] ? record_stack_access+0xc71/0x1110 [ 252.132486][T10251] record_stack_access+0xc71/0x1110 [ 252.132511][T10251] ? __pfx_arg_track_join+0x10/0x10 [ 252.132532][T10251] ? __pfx_record_stack_access+0x10/0x10 [ 252.132552][T10251] ? analyze_subprog+0x8ac/0x9e00 [ 252.132568][T10251] ? analyze_subprog+0x8ac/0x9e00 [ 252.132591][T10251] analyze_subprog+0x4544/0x9e00 [ 252.132608][T10251] ? __uprobe_perf_func+0xfdf/0x1380 [ 252.132693][T10251] ? __pfx_analyze_subprog+0x10/0x10 [ 252.132719][T10251] ? __x64_sys_bpf+0xba/0xd0 [ 252.132739][T10251] ? do_syscall_64+0x166/0x520 [ 252.132768][T10251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.132813][T10251] ? call_instance+0x263/0x560 [ 252.132830][T10251] ? rcu_is_watching+0x16/0xb0 [ 252.132850][T10251] ? call_instance+0x263/0x560 [ 252.132866][T10251] ? trace_kmalloc+0x2a/0xf0 [ 252.132883][T10251] ? call_instance+0x263/0x560 [ 252.132899][T10251] ? __kvmalloc_node_noprof+0x52f/0x820 [ 252.132918][T10251] ? __kvmalloc_node_noprof+0x345/0x820 [ 252.132936][T10251] ? call_instance+0x263/0x560 [ 252.132952][T10251] ? call_instance+0x263/0x560 [ 252.132982][T10251] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 252.133001][T10251] ? lwt_out_func_proto+0x1d4/0x2a0 [ 252.133043][T10251] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 252.133067][T10251] ? __kvmalloc_node_noprof+0x345/0x820 [ 252.133084][T10251] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 252.133103][T10251] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 252.133127][T10251] bpf_compute_live_registers+0x8d3/0x1ff0 [ 252.133162][T10251] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 252.133190][T10251] bpf_check+0x2746/0x2ef0 [ 252.133221][T10251] ? __pfx_bpf_check+0x10/0x10 [ 252.133241][T10251] ? bpf_obj_name_cpy+0x194/0x1e0 [ 252.133267][T10251] bpf_prog_load+0x14d6/0x1c20 [ 252.133295][T10251] ? __pfx_bpf_prog_load+0x10/0x10 [ 252.133332][T10251] __sys_bpf+0xd0d/0xd90 [ 252.133356][T10251] ? __pfx___sys_bpf+0x10/0x10 [ 252.133382][T10251] ? __fget_files+0x2a/0x420 [ 252.133417][T10251] ? ksys_write+0x242/0x270 [ 252.133444][T10251] ? __pfx_ksys_write+0x10/0x10 [ 252.133472][T10251] __x64_sys_bpf+0xba/0xd0 [ 252.133489][T10251] do_syscall_64+0x166/0x520 [ 252.133510][T10251] ? trace_irq_disable+0x3b/0x140 [ 252.133526][T10251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.133541][T10251] ? clear_bhb_loop+0x70/0xc0 [ 252.133561][T10251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.133576][T10251] RIP: 0033:0x7ffa1a79e159 [ 252.133591][T10251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.133604][T10251] RSP: 002b:00007ffa1b654028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.133621][T10251] RAX: ffffffffffffffda RBX: 00007ffa1aa25fa0 RCX: 00007ffa1a79e159 [ 252.133633][T10251] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 252.133643][T10251] RBP: 00007ffa1b654090 R08: 0000000000000000 R09: 0000000000000000 [ 252.133658][T10251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.133667][T10251] R13: 00007ffa1aa26038 R14: 00007ffa1aa25fa0 R15: 00007ffd48bf4178 [ 252.133692][T10251] [ 253.113009][T10181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.169374][ T5626] block nbd0: Receive control failed (result -32) [ 253.520708][ T32] audit: type=1804 audit(1790339191.799:6): pid=10281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1113" name="/newroot/210/cgroup.controllers" dev="tmpfs" ino=1092 res=1 errno=0 [ 253.521052][ T32] audit: type=1800 audit(1790339191.799:7): pid=10281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1113" name="cgroup.controllers" dev="tmpfs" ino=1092 res=0 errno=0 [ 253.578598][T10279] block nbd0: Unsupported socket: should be TCP or UNIX. [ 253.670527][T10284] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1114'. [ 253.670584][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1114'. [ 253.941610][T10297] netlink: 'syz.2.1118': attribute type 12 has an invalid length. [ 253.941634][T10297] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1118'. [ 253.964798][T10297] netlink: 'syz.2.1118': attribute type 12 has an invalid length. [ 253.964826][T10297] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1118'. [ 253.965983][T10297] netlink: 1052 bytes leftover after parsing attributes in process `syz.2.1118'. [ 253.969928][T10294] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1115'. [ 254.218953][T10305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1122'. [ 254.246520][T10300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.292261][T10312] ip_tables: iptables: counters copy to user failed while replacing table [ 254.293770][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'. [ 254.293809][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 254.976287][T10342] FAULT_INJECTION: forcing a failure. [ 254.976287][T10342] name failslab, interval 1, probability 0, space 0, times 0 [ 254.976316][T10342] CPU: 0 UID: 0 PID: 10342 Comm: syz.3.1130 Not tainted syzkaller #0 PREEMPT(full) [ 254.976334][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.976345][T10342] Call Trace: [ 254.976351][T10342] [ 254.976358][T10342] dump_stack_lvl+0xe8/0x150 [ 254.976388][T10342] should_fail_ex+0x410/0x560 [ 254.976411][T10342] should_failslab+0xa8/0x100 [ 254.976434][T10342] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 254.976453][T10342] ? realloc_array+0x76/0x130 [ 254.976497][T10342] ? realloc_array+0x76/0x130 [ 254.976527][T10342] ? realloc_array+0x76/0x130 [ 254.976558][T10342] krealloc_node_align_noprof+0x19a/0x390 [ 254.976581][T10342] realloc_array+0x76/0x130 [ 254.976605][T10342] check_stack_access_within_bounds+0x6ef/0xb80 [ 254.976629][T10342] ? __pfx_check_stack_access_within_bounds+0x10/0x10 [ 254.976649][T10342] ? lock_acquire+0x115/0x350 [ 254.976676][T10342] check_mem_access+0xa24/0x2700 [ 254.976704][T10342] ? __pfx_check_mem_access+0x10/0x10 [ 254.976728][T10342] ? is_bpf_text_address+0x292/0x2b0 [ 254.976747][T10342] ? is_bpf_text_address+0x26/0x2b0 [ 254.976769][T10342] ? kernel_text_address+0xa5/0xe0 [ 254.976787][T10342] ? __kernel_text_address+0xd/0x30 [ 254.976808][T10342] check_store_reg+0x664/0xe20 [ 254.976839][T10342] do_check_insn+0x919/0x17d00 [ 254.976862][T10342] ? stack_depot_save_flags+0x33/0x7f0 [ 254.976966][T10342] ? kasan_save_track+0x3e/0x80 [ 254.976989][T10342] ? __kasan_kmalloc+0x93/0xb0 [ 254.977012][T10342] ? __kmalloc_cache_noprof+0x321/0x600 [ 254.977045][T10342] ? do_check_common+0x348/0x55c0 [ 254.977066][T10342] ? do_check_main+0xa2/0x1f0 [ 254.977082][T10342] ? bpf_check+0x2777/0x2ef0 [ 254.977098][T10342] ? bpf_prog_load+0x14d6/0x1c20 [ 254.977116][T10342] ? __sys_bpf+0xd0d/0xd90 [ 254.977131][T10342] ? __x64_sys_bpf+0xba/0xd0 [ 254.977149][T10342] ? do_syscall_64+0x166/0x520 [ 254.977176][T10342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.977198][T10342] ? __pfx_do_check_insn+0x10/0x10 [ 254.977242][T10342] ? rcu_is_watching+0x16/0xb0 [ 254.977266][T10342] ? __asan_memset+0x22/0x50 [ 254.977278][T10342] ? cnum32_from_urange+0xf/0x30 [ 254.977305][T10342] ? cnum32_from_urange+0xf/0x30 [ 254.977327][T10342] ? __mark_reg_known+0x125/0x1a0 [ 254.977348][T10342] do_check_common+0x35fa/0x55c0 [ 254.977397][T10342] ? __pfx_do_check_common+0x10/0x10 [ 254.977429][T10342] do_check_main+0xa2/0x1f0 [ 254.977449][T10342] bpf_check+0x2777/0x2ef0 [ 254.977480][T10342] ? __pfx_bpf_check+0x10/0x10 [ 254.977499][T10342] ? bpf_obj_name_cpy+0x194/0x1e0 [ 254.977526][T10342] bpf_prog_load+0x14d6/0x1c20 [ 254.977554][T10342] ? __pfx_bpf_prog_load+0x10/0x10 [ 254.977614][T10342] __sys_bpf+0xd0d/0xd90 [ 254.977650][T10342] ? __pfx___sys_bpf+0x10/0x10 [ 254.977684][T10342] ? __fget_files+0x2a/0x420 [ 254.977720][T10342] ? ksys_write+0x242/0x270 [ 254.977747][T10342] ? __pfx_ksys_write+0x10/0x10 [ 254.977776][T10342] __x64_sys_bpf+0xba/0xd0 [ 254.977794][T10342] do_syscall_64+0x166/0x520 [ 254.977816][T10342] ? trace_irq_disable+0x3b/0x140 [ 254.977832][T10342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.977848][T10342] ? clear_bhb_loop+0x70/0xc0 [ 254.977868][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.977884][T10342] RIP: 0033:0x7fceb159e159 [ 254.977900][T10342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.977914][T10342] RSP: 002b:00007fceb241e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.977933][T10342] RAX: ffffffffffffffda RBX: 00007fceb1825fa0 RCX: 00007fceb159e159 [ 254.977945][T10342] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 254.977955][T10342] RBP: 00007fceb241e090 R08: 0000000000000000 R09: 0000000000000000 [ 254.977965][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.977975][T10342] R13: 00007fceb1826038 R14: 00007fceb1825fa0 R15: 00007fff8a130228 [ 254.978000][T10342] [ 255.462674][T10300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.479464][T10344] batman_adv: batadv0: Interface activated: wlan0 [ 255.497682][ T7147] wlan0: Selected IBSS BSSID 4a:6f:f3:9b:55:ee based on configured SSID [ 255.540930][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.540956][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.746378][T10361] openvswitch: netlink: Multiple metadata blocks provided [ 256.356761][T10395] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 256.449721][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.449784][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.968452][T10405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.117936][T10419] netlink: 'syz.4.1144': attribute type 10 has an invalid length. [ 257.118890][T10419] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.162128][T10419] team0: Port device netdevsim1 added [ 257.286416][T10424] netlink: 'syz.2.1148': attribute type 6 has an invalid length. [ 257.426390][T10435] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 258.117685][T10405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 258.119474][T10421] __nla_validate_parse: 2 callbacks suppressed [ 258.119496][T10421] netlink: 495 bytes leftover after parsing attributes in process `syz.0.1147'. [ 258.743179][T10462] sctp: [Deprecated]: syz.0.1157 (pid 10462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.743179][T10462] Use struct sctp_sack_info instead [ 258.826622][T10453] syzkaller0: entered promiscuous mode [ 258.826651][T10453] syzkaller0: entered allmulticast mode [ 258.920437][T10475] openvswitch: netlink: Missing key (keys=50, expected=80) [ 259.309222][T10491] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1159'. [ 259.390239][T10496] netlink: 'syz.2.1162': attribute type 15 has an invalid length. [ 259.445875][T10497] netlink: 'syz.0.1163': attribute type 4 has an invalid length. [ 262.250331][T10505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.327306][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 262.487731][T10525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'. [ 263.210112][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807fa8fc00: rx timeout, send abort [ 263.483187][T10505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.710668][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807afa8400: rx timeout, send abort [ 263.711728][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807fa8fc00: abort rx timeout. Force session deactivation [ 263.728502][T10555] openvswitch: netlink: Key type 12548 is out of range max 32 [ 263.977889][T10565] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 263.977917][T10565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.108840][ T3169] IPVS: starting estimator thread 0... [ 264.109118][T10570] IPVS: nq: TCP 127.0.0.1:21 - no destination available [ 264.194247][T10571] IPVS: using max 37 ests per chain, 88800 per kthread [ 264.210790][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807afa8400: abort rx timeout. Force session deactivation [ 265.149504][T10584] netlink: 'syz.0.1186': attribute type 5 has an invalid length. [ 265.247669][T10584] netlink: 'syz.0.1186': attribute type 1 has an invalid length. [ 265.247782][T10584] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1186'. [ 265.658251][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 265.706914][T10595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.708296][T10600] netlink: zone id is out of range [ 265.708313][T10600] netlink: zone id is out of range [ 265.708322][T10600] netlink: zone id is out of range [ 265.708330][T10600] netlink: zone id is out of range [ 265.708340][T10600] netlink: zone id is out of range [ 265.708349][T10600] netlink: zone id is out of range [ 265.917074][T10609] FAULT_INJECTION: forcing a failure. [ 265.917074][T10609] name failslab, interval 1, probability 0, space 0, times 0 [ 265.917112][T10609] CPU: 0 UID: 0 PID: 10609 Comm: syz.2.1193 Not tainted syzkaller #0 PREEMPT(full) [ 265.917146][T10609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.917160][T10609] Call Trace: [ 265.917170][T10609] [ 265.917179][T10609] dump_stack_lvl+0xe8/0x150 [ 265.917218][T10609] should_fail_ex+0x410/0x560 [ 265.917252][T10609] should_failslab+0xa8/0x100 [ 265.917285][T10609] __kmalloc_cache_noprof+0xa3/0x600 [ 265.917310][T10609] ? rtnl_newlink+0x147/0x1c30 [ 265.917338][T10609] ? rtnl_newlink+0x147/0x1c30 [ 265.917367][T10609] ? stack_trace_save+0xa9/0x100 [ 265.917394][T10609] rtnl_newlink+0x147/0x1c30 [ 265.917422][T10609] ? stack_depot_save_flags+0x33/0x7f0 [ 265.917448][T10609] ? __lock_acquire+0x670/0x2de0 [ 265.917477][T10609] ? kasan_save_track+0x4f/0x80 [ 265.917500][T10609] ? kasan_save_track+0x3e/0x80 [ 265.917522][T10609] ? kasan_save_free_info+0x40/0x50 [ 265.917554][T10609] ? __kasan_slab_free+0x5c/0x80 [ 265.917582][T10609] ? __pfx_rtnl_newlink+0x10/0x10 [ 265.917609][T10609] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 265.917630][T10609] ? netlink_deliver_tap+0x19c/0x1b0 [ 265.917652][T10609] ? netlink_unicast+0x781/0x940 [ 265.917683][T10609] ? netlink_sendmsg+0x813/0xb40 [ 265.917703][T10609] ? sock_sendmsg_nosec+0x13a/0x180 [ 265.917726][T10609] ? ____sys_sendmsg+0x54e/0x850 [ 265.917755][T10609] ? ___sys_sendmsg+0x2a5/0x360 [ 265.917784][T10609] ? __x64_sys_sendmsg+0x1b1/0x290 [ 265.917814][T10609] ? do_syscall_64+0x166/0x520 [ 265.917844][T10609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.917911][T10609] ? kasan_quarantine_put+0xbb/0x1f0 [ 265.917935][T10609] ? lockdep_hardirqs_on+0x7b/0x110 [ 265.917970][T10609] ? nlmon_xmit+0xb0/0x100 [ 265.917996][T10609] ? kmem_cache_free+0x182/0x650 [ 265.918029][T10609] ? __lock_acquire+0x747/0x2de0 [ 265.918061][T10609] ? __dev_queue_xmit+0x29b/0x3820 [ 265.918100][T10609] ? __local_bh_enable_ip+0xd6/0x140 [ 265.918131][T10609] ? lockdep_hardirqs_on+0x7b/0x110 [ 265.918177][T10609] ? lock_acquire+0x115/0x350 [ 265.918200][T10609] ? __pfx_rtnl_newlink+0x10/0x10 [ 265.918243][T10609] ? __pfx_rtnl_newlink+0x10/0x10 [ 265.918271][T10609] rtnetlink_rcv_msg+0x802/0xc00 [ 265.918305][T10609] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 265.918333][T10609] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.918366][T10609] ? __copy_skb_header+0xa3/0x4a0 [ 265.918400][T10609] ? __asan_memcpy+0x40/0x70 [ 265.918429][T10609] netlink_rcv_skb+0x226/0x4a0 [ 265.918467][T10609] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.918498][T10609] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.918549][T10609] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.918571][T10609] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.918600][T10609] netlink_unicast+0x7bd/0x940 [ 265.918646][T10609] netlink_sendmsg+0x813/0xb40 [ 265.918679][T10609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.918712][T10609] ? apparmor_socket_sendmsg+0x98/0x360 [ 265.918741][T10609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.918763][T10609] sock_sendmsg_nosec+0x13a/0x180 [ 265.918791][T10609] ____sys_sendmsg+0x54e/0x850 [ 265.918829][T10609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.918872][T10609] ? import_iovec+0x73/0xa0 [ 265.918906][T10609] ___sys_sendmsg+0x2a5/0x360 [ 265.918937][T10609] ? __lock_acquire+0x747/0x2de0 [ 265.918966][T10609] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.919038][T10609] ? __fget_files+0x2a/0x420 [ 265.919069][T10609] ? __fget_files+0x3a2/0x420 [ 265.919112][T10609] __x64_sys_sendmsg+0x1b1/0x290 [ 265.919156][T10609] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.919211][T10609] do_syscall_64+0x166/0x520 [ 265.919241][T10609] ? trace_irq_disable+0x3b/0x140 [ 265.919264][T10609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.919287][T10609] ? clear_bhb_loop+0x70/0xc0 [ 265.919315][T10609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.919339][T10609] RIP: 0033:0x7faf50b9e159 [ 265.919361][T10609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.919381][T10609] RSP: 002b:00007faf51a2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.919406][T10609] RAX: ffffffffffffffda RBX: 00007faf50e25fa0 RCX: 00007faf50b9e159 [ 265.919423][T10609] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 265.919438][T10609] RBP: 00007faf51a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 265.919452][T10609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.919466][T10609] R13: 00007faf50e26038 R14: 00007faf50e25fa0 R15: 00007ffea39d87c8 [ 265.919502][T10609] [ 266.463401][T10611] xt_TCPMSS: Only works on TCP SYN packets [ 266.535825][T10618] Bluetooth: MGMT ver 1.23 [ 266.552846][T10614] syzkaller0: entered promiscuous mode [ 266.552874][T10614] syzkaller0: entered allmulticast mode [ 266.937333][T10595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.199515][T10636] xt_CT: No such helper "snmp" [ 267.761112][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'. [ 268.082711][T10677] veth0: entered promiscuous mode [ 268.208132][T10679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.245789][T10674] veth0: left promiscuous mode [ 268.571627][T10699] veth0_to_bridge: entered allmulticast mode [ 268.957538][T10717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.959642][T10717] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.036341][T10717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.036369][T10717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.042028][T10717] veth1_vlan: left promiscuous mode [ 269.043264][T10717] veth0_vlan: left promiscuous mode [ 269.046962][T10717] veth0_vlan: entered promiscuous mode [ 269.053534][T10717] veth1_vlan: entered promiscuous mode [ 269.072469][T10717] veth1_macvtap: left promiscuous mode [ 269.077033][T10717] veth0_macvtap: left promiscuous mode [ 269.080124][T10717] veth0_macvtap: entered promiscuous mode [ 269.082464][T10717] veth1_macvtap: entered promiscuous mode [ 269.109915][T10717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 269.116371][T10717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 269.137996][T10717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.175133][T10717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.176724][T10717] net_ratelimit: 502 callbacks suppressed [ 269.176744][T10717] A link change request failed with some changes committed already. Interface syzk may have been left with an inconsistent configuration, please check. [ 269.226351][T10710] vxcan6: entered allmulticast mode [ 269.257105][T10693] veth0_to_bridge: left allmulticast mode [ 269.276058][ T7147] bridge0: port 1(1¾x9ÿ) entered blocking state [ 269.276168][ T7147] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 269.278608][ T7147] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.278723][ T7147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.384312][ T3169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.399763][ T3169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.399889][ T3169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.399986][ T3169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.490015][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1227'. [ 269.498395][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'. [ 269.716348][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1226'. [ 269.801065][T10744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1230'. [ 270.218164][T10771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.290816][T10773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1235'. [ 270.312132][T10776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1235'. [ 270.460437][T10778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1236'. [ 270.460488][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'. [ 270.598105][T10781] syzkaller1: entered promiscuous mode [ 270.598144][T10781] syzkaller1: entered allmulticast mode [ 270.745353][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'. [ 271.293664][T10801] netlink: 'syz.4.1244': attribute type 1 has an invalid length. [ 271.312986][T10799] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1243'. [ 271.515148][T10808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.517858][T10807] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1246'. [ 271.539104][T10801] bond2: entered promiscuous mode [ 271.539575][T10801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.651328][T10812] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1249'. [ 271.708145][T10801] veth5: entered allmulticast mode [ 271.722800][T10801] bond2: (slave veth5): making interface the new active one [ 271.722828][T10801] veth5: entered promiscuous mode [ 271.740366][T10801] bond2: (slave veth5): Enslaving as an active interface with an up link [ 271.755250][T10813] FAULT_INJECTION: forcing a failure. [ 271.755250][T10813] name failslab, interval 1, probability 0, space 0, times 0 [ 271.755282][T10813] CPU: 0 UID: 0 PID: 10813 Comm: syz.0.1248 Not tainted syzkaller #0 PREEMPT(full) [ 271.755307][T10813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.755320][T10813] Call Trace: [ 271.755328][T10813] [ 271.755337][T10813] dump_stack_lvl+0xe8/0x150 [ 271.755372][T10813] should_fail_ex+0x410/0x560 [ 271.755399][T10813] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 271.755515][T10813] should_failslab+0xa8/0x100 [ 271.755542][T10813] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 271.755560][T10813] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 271.755593][T10813] ? alloc_inode+0x6a/0x1b0 [ 271.755618][T10813] ? alloc_inode+0x6a/0x1b0 [ 271.755647][T10813] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 271.755665][T10813] alloc_inode+0x6a/0x1b0 [ 271.755699][T10813] new_inode+0x1f/0x170 [ 271.755729][T10813] __debugfs_create_file+0xb8/0x400 [ 271.755787][T10813] debugfs_create_file_full+0x3f/0x60 [ 271.755820][T10813] ref_tracker_dir_debugfs+0x197/0x360 [ 271.755846][T10813] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 271.755895][T10813] ? __kvmalloc_node_noprof+0x52f/0x820 [ 271.755924][T10813] ? __raw_spin_lock_init+0x45/0x100 [ 271.755955][T10813] alloc_netdev_mqs+0x275/0x12a0 [ 271.756003][T10813] ? __pfx_snprintf+0x10/0x10 [ 271.756025][T10813] ? __pfx_vxcan_setup+0x10/0x10 [ 271.756091][T10813] rtnl_create_link+0x321/0xd70 [ 271.756122][T10813] rtnl_newlink_create+0x258/0x7b0 [ 271.756179][T10813] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 271.756212][T10813] ? __pfx___mutex_lock+0x10/0x10 [ 271.756253][T10813] ? ns_capable+0x89/0xe0 [ 271.756287][T10813] rtnl_newlink+0x167a/0x1c30 [ 271.756333][T10813] ? __pfx_rtnl_newlink+0x10/0x10 [ 271.756358][T10813] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 271.756377][T10813] ? netlink_deliver_tap+0x19c/0x1b0 [ 271.756397][T10813] ? netlink_unicast+0x781/0x940 [ 271.756427][T10813] ? netlink_sendmsg+0x813/0xb40 [ 271.756446][T10813] ? sock_sendmsg_nosec+0x13a/0x180 [ 271.756468][T10813] ? ____sys_sendmsg+0x54e/0x850 [ 271.756497][T10813] ? ___sys_sendmsg+0x2a5/0x360 [ 271.756524][T10813] ? __x64_sys_sendmsg+0x1b1/0x290 [ 271.756553][T10813] ? do_syscall_64+0x166/0x520 [ 271.756583][T10813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.756692][T10813] ? __dev_queue_xmit+0x29b/0x3820 [ 271.756731][T10813] ? __local_bh_enable_ip+0xd6/0x140 [ 271.756760][T10813] ? lockdep_hardirqs_on+0x7b/0x110 [ 271.756817][T10813] ? __pfx_rtnl_newlink+0x10/0x10 [ 271.756844][T10813] rtnetlink_rcv_msg+0x802/0xc00 [ 271.756876][T10813] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 271.756903][T10813] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 271.756934][T10813] ? __copy_skb_header+0xa3/0x4a0 [ 271.756977][T10813] netlink_rcv_skb+0x226/0x4a0 [ 271.757015][T10813] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 271.757046][T10813] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.757096][T10813] ? netlink_deliver_tap+0x2e/0x1b0 [ 271.757119][T10813] ? netlink_deliver_tap+0x2e/0x1b0 [ 271.757148][T10813] netlink_unicast+0x7bd/0x940 [ 271.757194][T10813] netlink_sendmsg+0x813/0xb40 [ 271.757228][T10813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.757261][T10813] ? apparmor_socket_sendmsg+0x98/0x360 [ 271.757290][T10813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.757310][T10813] sock_sendmsg_nosec+0x13a/0x180 [ 271.757339][T10813] ____sys_sendmsg+0x54e/0x850 [ 271.757376][T10813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.757417][T10813] ? import_iovec+0x73/0xa0 [ 271.757449][T10813] ___sys_sendmsg+0x2a5/0x360 [ 271.757478][T10813] ? __lock_acquire+0x747/0x2de0 [ 271.757507][T10813] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.757580][T10813] ? __fget_files+0x2a/0x420 [ 271.757613][T10813] ? __fget_files+0x3a2/0x420 [ 271.757657][T10813] __x64_sys_sendmsg+0x1b1/0x290 [ 271.757702][T10813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.757761][T10813] do_syscall_64+0x166/0x520 [ 271.757791][T10813] ? trace_irq_disable+0x3b/0x140 [ 271.757814][T10813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.757837][T10813] ? clear_bhb_loop+0x70/0xc0 [ 271.757864][T10813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.757886][T10813] RIP: 0033:0x7ffa1a79e159 [ 271.757909][T10813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.757928][T10813] RSP: 002b:00007ffa1b654028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.757953][T10813] RAX: ffffffffffffffda RBX: 00007ffa1aa25fa0 RCX: 00007ffa1a79e159 [ 271.757971][T10813] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 271.757985][T10813] RBP: 00007ffa1b654090 R08: 0000000000000000 R09: 0000000000000000 [ 271.758000][T10813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.758013][T10813] R13: 00007ffa1aa26038 R14: 00007ffa1aa25fa0 R15: 00007ffd48bf4178 [ 271.758051][T10813] [ 271.760124][T10813] debugfs: out of free dentries, can not create file 'netdev@ffff888054f48700' [ 271.832954][T10815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1250'. [ 272.135191][T10824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.651438][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1254'. [ 272.826595][T10840] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 273.434656][T10860] FAULT_INJECTION: forcing a failure. [ 273.434656][T10860] name failslab, interval 1, probability 0, space 0, times 0 [ 273.434693][T10860] CPU: 1 UID: 0 PID: 10860 Comm: syz.0.1262 Not tainted syzkaller #0 PREEMPT(full) [ 273.434719][T10860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.434733][T10860] Call Trace: [ 273.434742][T10860] [ 273.434751][T10860] dump_stack_lvl+0xe8/0x150 [ 273.434790][T10860] should_fail_ex+0x410/0x560 [ 273.434821][T10860] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 273.434845][T10860] should_failslab+0xa8/0x100 [ 273.434876][T10860] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 273.434897][T10860] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 273.434936][T10860] ? alloc_inode+0x6a/0x1b0 [ 273.434962][T10860] ? alloc_inode+0x6a/0x1b0 [ 273.435000][T10860] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 273.435022][T10860] alloc_inode+0x6a/0x1b0 [ 273.435053][T10860] new_inode+0x1f/0x170 [ 273.435088][T10860] __debugfs_create_file+0xb8/0x400 [ 273.435129][T10860] debugfs_create_file_full+0x3f/0x60 [ 273.435169][T10860] ref_tracker_dir_debugfs+0x197/0x360 [ 273.435199][T10860] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 273.435258][T10860] ? __kvmalloc_node_noprof+0x52f/0x820 [ 273.435293][T10860] ? __raw_spin_lock_init+0x45/0x100 [ 273.435329][T10860] alloc_netdev_mqs+0x275/0x12a0 [ 273.435352][T10860] ? __pfx_snprintf+0x10/0x10 [ 273.435376][T10860] ? __pfx_vxcan_setup+0x10/0x10 [ 273.435423][T10860] rtnl_create_link+0x321/0xd70 [ 273.435454][T10860] rtnl_newlink_create+0x258/0x7b0 [ 273.435494][T10860] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 273.435531][T10860] ? __pfx___mutex_lock+0x10/0x10 [ 273.435575][T10860] ? ns_capable+0x89/0xe0 [ 273.435611][T10860] rtnl_newlink+0x167a/0x1c30 [ 273.435658][T10860] ? __pfx_rtnl_newlink+0x10/0x10 [ 273.435685][T10860] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 273.435707][T10860] ? netlink_deliver_tap+0x19c/0x1b0 [ 273.435727][T10860] ? netlink_unicast+0x781/0x940 [ 273.435757][T10860] ? netlink_sendmsg+0x813/0xb40 [ 273.435778][T10860] ? sock_sendmsg_nosec+0x13a/0x180 [ 273.435800][T10860] ? ____sys_sendmsg+0x54e/0x850 [ 273.435829][T10860] ? ___sys_sendmsg+0x2a5/0x360 [ 273.435858][T10860] ? __x64_sys_sendmsg+0x1b1/0x290 [ 273.435886][T10860] ? do_syscall_64+0x166/0x520 [ 273.435914][T10860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.436016][T10860] ? __dev_queue_xmit+0x29b/0x3820 [ 273.436054][T10860] ? __local_bh_enable_ip+0xd6/0x140 [ 273.436086][T10860] ? lockdep_hardirqs_on+0x7b/0x110 [ 273.436148][T10860] ? __pfx_rtnl_newlink+0x10/0x10 [ 273.436176][T10860] rtnetlink_rcv_msg+0x802/0xc00 [ 273.436209][T10860] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 273.436236][T10860] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 273.436269][T10860] ? __copy_skb_header+0xa3/0x4a0 [ 273.436317][T10860] netlink_rcv_skb+0x226/0x4a0 [ 273.436354][T10860] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 273.436387][T10860] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.436446][T10860] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.436469][T10860] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.436499][T10860] netlink_unicast+0x7bd/0x940 [ 273.436546][T10860] netlink_sendmsg+0x813/0xb40 [ 273.436580][T10860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.436613][T10860] ? apparmor_socket_sendmsg+0x98/0x360 [ 273.436644][T10860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.436666][T10860] sock_sendmsg_nosec+0x13a/0x180 [ 273.436694][T10860] ____sys_sendmsg+0x54e/0x850 [ 273.436733][T10860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.436777][T10860] ? import_iovec+0x73/0xa0 [ 273.436812][T10860] ___sys_sendmsg+0x2a5/0x360 [ 273.436843][T10860] ? __lock_acquire+0x747/0x2de0 [ 273.436872][T10860] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.436947][T10860] ? __fget_files+0x2a/0x420 [ 273.436978][T10860] ? __fget_files+0x3a2/0x420 [ 273.437023][T10860] __x64_sys_sendmsg+0x1b1/0x290 [ 273.437059][T10860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.437119][T10860] do_syscall_64+0x166/0x520 [ 273.437149][T10860] ? trace_irq_disable+0x3b/0x140 [ 273.437172][T10860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.437196][T10860] ? clear_bhb_loop+0x70/0xc0 [ 273.437225][T10860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.437247][T10860] RIP: 0033:0x7ffa1a79e159 [ 273.437269][T10860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.437294][T10860] RSP: 002b:00007ffa1b654028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.437318][T10860] RAX: ffffffffffffffda RBX: 00007ffa1aa25fa0 RCX: 00007ffa1a79e159 [ 273.437336][T10860] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 273.437350][T10860] RBP: 00007ffa1b654090 R08: 0000000000000000 R09: 0000000000000000 [ 273.437364][T10860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.437377][T10860] R13: 00007ffa1aa26038 R14: 00007ffa1aa25fa0 R15: 00007ffd48bf4178 [ 273.437421][T10860] [ 273.437592][T10860] debugfs: out of free dentries, can not create file 'netdev@ffff888055a20700' [ 274.093062][T10863] siw: device registration error -23 [ 274.233145][T10876] netlink: 'syz.4.1267': attribute type 30 has an invalid length. [ 274.250861][T10876] vxlan1: entered promiscuous mode [ 274.250890][T10876] vxlan1: entered allmulticast mode [ 274.266372][T10876] netlink: 'syz.4.1267': attribute type 30 has an invalid length. [ 274.275331][ T3169] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.280228][ T7147] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.280408][ T7147] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.280507][ T7147] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.578340][T10890] IPVS: sync thread started: state = BACKUP, mcast_ifn = xfrm0, syncid = 1, id = 0 [ 274.676209][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.824607][ T8190] bridge0: entered promiscuous mode [ 275.536857][T10931] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 275.536897][T10931] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 275.536937][T10931] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 275.542340][T10931] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 275.611210][T10931] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 275.742813][T10937] __nla_validate_parse: 70 callbacks suppressed [ 275.742835][T10937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1279'. [ 275.770235][T10922] smbdirect: ib_dev[syz_device_name_32_chars_1234567] renamed to [sy] [ 275.910738][T10939] lo speed is unknown, defaulting to 1000 [ 275.912050][T10939] wg2 speed is unknown, defaulting to 1000 [ 277.445101][T10884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.780435][T10958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.866365][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1288'. [ 277.948811][T10965] syzkaller0: entered promiscuous mode [ 277.948838][T10965] syzkaller0: entered allmulticast mode [ 277.950579][T10964] FAULT_INJECTION: forcing a failure. [ 277.950579][T10964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.950622][T10964] CPU: 0 UID: 0 PID: 10964 Comm: syz.1.1287 Not tainted syzkaller #0 PREEMPT(full) [ 277.950648][T10964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.950662][T10964] Call Trace: [ 277.950671][T10964] [ 277.950682][T10964] dump_stack_lvl+0xe8/0x150 [ 277.950722][T10964] should_fail_ex+0x410/0x560 [ 277.950755][T10964] _copy_from_user+0x2d/0xb0 [ 277.950786][T10964] kstrtouint_from_user+0xd6/0x180 [ 277.950814][T10964] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 277.950852][T10964] ? lock_acquire+0x115/0x350 [ 277.950882][T10964] proc_fail_nth_write+0x8e/0x210 [ 277.950959][T10964] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 277.950992][T10964] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 277.951014][T10964] vfs_write+0x296/0xba0 [ 277.951059][T10964] ? __pfx_vfs_write+0x10/0x10 [ 277.951096][T10964] ? __fget_files+0x2a/0x420 [ 277.951132][T10964] ? __fget_files+0x3a2/0x420 [ 277.951161][T10964] ? __fget_files+0x2a/0x420 [ 277.951200][T10964] ksys_write+0x150/0x270 [ 277.951238][T10964] ? __pfx_ksys_write+0x10/0x10 [ 277.951286][T10964] do_syscall_64+0x166/0x520 [ 277.951316][T10964] ? trace_irq_disable+0x3b/0x140 [ 277.951339][T10964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.951362][T10964] ? clear_bhb_loop+0x70/0xc0 [ 277.951391][T10964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.951413][T10964] RIP: 0033:0x7f792955e98e [ 277.951434][T10964] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 277.951453][T10964] RSP: 002b:00007f792a52efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 277.951489][T10964] RAX: ffffffffffffffda RBX: 00007f792a52f6c0 RCX: 00007f792955e98e [ 277.951507][T10964] RDX: 0000000000000001 RSI: 00007f792a52f0a0 RDI: 0000000000000006 [ 277.951521][T10964] RBP: 00007f792a52f090 R08: 0000000000000000 R09: 0000000000000000 [ 277.951536][T10964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.951550][T10964] R13: 00007f7929826038 R14: 00007f7929825fa0 R15: 00007ffcd5b334a8 [ 277.951587][T10964] [ 277.953672][T10972] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1289'. [ 278.000547][T10966] netlink: 'syz.2.1286': attribute type 1 has an invalid length. [ 278.037381][T10962] netlink: 'syz.2.1286': attribute type 1 has an invalid length. [ 278.141474][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1288'. [ 278.359624][T10977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1290'. [ 278.359850][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 278.540798][T10980] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1295'. [ 278.540841][T10980] netlink: 336 bytes leftover after parsing attributes in process `syz.1.1295'. [ 278.540857][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1295'. [ 278.580586][T10981] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1295'. [ 278.641367][T10987] netlink: 'syz.0.1294': attribute type 1 has an invalid length. [ 278.641405][T10987] netlink: 'syz.0.1294': attribute type 1 has an invalid length. [ 278.787414][T10994] netlink: Unknown NAT attribute (type=16135, max=9) [ 278.787455][T10994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.828026][T10992] sctp: [Deprecated]: syz.3.1292 (pid 10992) Use of int in maxseg socket option. [ 278.828026][T10992] Use struct sctp_assoc_value instead [ 279.153569][T11002] lo speed is unknown, defaulting to 1000 [ 279.160650][T11002] wg2 speed is unknown, defaulting to 1000 [ 281.040318][T11058] __nla_validate_parse: 10 callbacks suppressed [ 281.040343][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1316'. [ 281.040378][T11058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.077029][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1316'. [ 281.315224][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 281.368409][T11074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1323'. [ 281.412348][T11074] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1323'. [ 281.456536][T11074] syzkaller1: entered promiscuous mode [ 281.456561][T11074] syzkaller1: entered allmulticast mode [ 281.461473][T11072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1322'. [ 281.503207][T11074] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1323'. [ 281.842690][T11086] xt_CONNSECMARK: invalid mode: 254 [ 282.168475][T11101] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 282.191793][T11107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1332'. [ 282.519140][T11117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1334'. [ 282.586368][T11121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1334'. [ 282.951433][ T5626] block nbd4: Receive control failed (result -32) [ 282.952206][ T52] block nbd4: Receive control failed (result -32) [ 285.305890][T11125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.387493][T11192] tipc: Enabled bearer , priority 10 [ 286.447316][T11191] tipc: Resetting bearer [ 286.555859][T11191] tipc: Disabling bearer [ 286.786649][T11211] __nla_validate_parse: 2 callbacks suppressed [ 286.786673][T11211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1353'. [ 286.988838][T11223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.747237][T11234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.990660][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1360'. [ 290.680773][T11256] veth0: entered promiscuous mode [ 290.681004][T11256] veth0: left promiscuous mode [ 290.681990][T11265] veth0: entered promiscuous mode [ 290.682045][T11265] veth0: left promiscuous mode [ 290.682084][T11262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1361'. [ 290.793220][T11267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1361'. [ 291.202499][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1364'. [ 291.334879][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 292.156216][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1373'. [ 292.304862][ T52] block nbd5: Receive control failed (result -32) [ 292.400353][T11328] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 292.409928][T11317] veth10: entered allmulticast mode [ 292.512269][T11317] bond6: (slave veth10): Enslaving as an active interface with an up link [ 292.558574][T11334] xt_ipcomp: unknown flags 1D [ 292.597668][T11334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1378'. [ 292.615259][T11332] syzkaller0: entered promiscuous mode [ 292.615283][T11332] syzkaller0: entered allmulticast mode [ 292.955490][T11343] FAULT_INJECTION: forcing a failure. [ 292.955490][T11343] name failslab, interval 1, probability 0, space 0, times 0 [ 292.955530][T11343] CPU: 1 UID: 0 PID: 11343 Comm: syz.2.1382 Not tainted syzkaller #0 PREEMPT(full) [ 292.955559][T11343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 292.955572][T11343] Call Trace: [ 292.955592][T11343] [ 292.955602][T11343] dump_stack_lvl+0xe8/0x150 [ 292.955645][T11343] should_fail_ex+0x410/0x560 [ 292.955681][T11343] should_failslab+0xa8/0x100 [ 292.955712][T11343] ? radix_tree_node_alloc+0x82/0x3a0 [ 292.955820][T11343] kmem_cache_alloc_noprof+0xa1/0x600 [ 292.955855][T11343] ? __add_to_free_list+0x1ea/0x400 [ 292.955886][T11343] ? radix_tree_node_alloc+0x82/0x3a0 [ 292.955923][T11343] radix_tree_node_alloc+0x82/0x3a0 [ 292.955958][T11343] idr_get_free+0x28f/0xa10 [ 292.956000][T11343] idr_alloc_u32+0x18a/0x330 [ 292.956090][T11343] ? __pfx_idr_alloc_u32+0x10/0x10 [ 292.956126][T11343] ? do_raw_spin_lock+0x12b/0x2f0 [ 292.956167][T11343] idr_alloc_cyclic+0x9c/0x1b0 [ 292.956206][T11343] bpf_prog_alloc_id+0x42/0x100 [ 292.956238][T11343] bpf_prog_load+0x150e/0x1c20 [ 292.956279][T11343] ? __pfx_bpf_prog_load+0x10/0x10 [ 292.956336][T11343] __sys_bpf+0xd0d/0xd90 [ 292.956397][T11343] ? __pfx___sys_bpf+0x10/0x10 [ 292.956438][T11343] ? __fget_files+0x2a/0x420 [ 292.956489][T11343] ? ksys_write+0x242/0x270 [ 292.956525][T11343] ? __pfx_ksys_write+0x10/0x10 [ 292.956563][T11343] __x64_sys_bpf+0xba/0xd0 [ 292.956598][T11343] do_syscall_64+0x166/0x520 [ 292.956628][T11343] ? trace_irq_disable+0x3b/0x140 [ 292.956651][T11343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.956675][T11343] ? clear_bhb_loop+0x70/0xc0 [ 292.956703][T11343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.956725][T11343] RIP: 0033:0x7faf50b9e159 [ 292.956748][T11343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.956768][T11343] RSP: 002b:00007faf51a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.956793][T11343] RAX: ffffffffffffffda RBX: 00007faf50e25fa0 RCX: 00007faf50b9e159 [ 292.956810][T11343] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 292.956824][T11343] RBP: 00007faf51a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 292.956837][T11343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.956850][T11343] R13: 00007faf50e26038 R14: 00007faf50e25fa0 R15: 00007ffea39d87c8 [ 292.956886][T11343] [ 293.666071][T11365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1386'. [ 293.722266][T11369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1390'. [ 293.971304][T11380] syzkaller0: entered promiscuous mode [ 293.971330][T11380] syzkaller0: entered allmulticast mode [ 294.049106][T11380] macsec2: entered promiscuous mode [ 294.389251][T11392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1397'. [ 294.405077][T11390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1395'. [ 294.652747][T11392] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1397'. [ 295.618401][T11442] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1407'. [ 295.901358][T11449] FAULT_INJECTION: forcing a failure. [ 295.901358][T11449] name failslab, interval 1, probability 0, space 0, times 0 [ 295.901398][T11449] CPU: 0 UID: 0 PID: 11449 Comm: syz.3.1411 Not tainted syzkaller #0 PREEMPT(full) [ 295.901422][T11449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.901437][T11449] Call Trace: [ 295.901445][T11449] [ 295.901455][T11449] dump_stack_lvl+0xe8/0x150 [ 295.901495][T11449] should_fail_ex+0x410/0x560 [ 295.901526][T11449] should_failslab+0xa8/0x100 [ 295.901556][T11449] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 295.901591][T11449] ? __lock_acquire+0x747/0x2de0 [ 295.901614][T11449] ? __d_alloc+0x37/0x6f0 [ 295.901646][T11449] ? __d_alloc+0x37/0x6f0 [ 295.901686][T11449] __d_alloc+0x37/0x6f0 [ 295.901717][T11449] ? __lock_acquire+0x747/0x2de0 [ 295.901746][T11449] d_alloc_pseudo+0x21/0xc0 [ 295.901788][T11449] alloc_path_pseudo+0x107/0x220 [ 295.901820][T11449] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 295.901867][T11449] alloc_file_pseudo+0xa8/0x1e0 [ 295.901913][T11449] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 295.901954][T11449] anon_inode_getfd+0xc8/0x1f0 [ 295.902015][T11449] bpf_prog_load+0x1612/0x1c20 [ 295.902056][T11449] ? __pfx_bpf_prog_load+0x10/0x10 [ 295.902109][T11449] __sys_bpf+0xd0d/0xd90 [ 295.902144][T11449] ? __pfx___sys_bpf+0x10/0x10 [ 295.902180][T11449] ? __fget_files+0x2a/0x420 [ 295.902231][T11449] ? ksys_write+0x242/0x270 [ 295.902268][T11449] ? __pfx_ksys_write+0x10/0x10 [ 295.902307][T11449] __x64_sys_bpf+0xba/0xd0 [ 295.902334][T11449] do_syscall_64+0x166/0x520 [ 295.902365][T11449] ? trace_irq_disable+0x3b/0x140 [ 295.902387][T11449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.902411][T11449] ? clear_bhb_loop+0x70/0xc0 [ 295.902439][T11449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.902463][T11449] RIP: 0033:0x7fceb159e159 [ 295.902485][T11449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.902504][T11449] RSP: 002b:00007fceb241e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.902530][T11449] RAX: ffffffffffffffda RBX: 00007fceb1825fa0 RCX: 00007fceb159e159 [ 295.902546][T11449] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 295.902561][T11449] RBP: 00007fceb241e090 R08: 0000000000000000 R09: 0000000000000000 [ 295.902575][T11449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 295.902589][T11449] R13: 00007fceb1826038 R14: 00007fceb1825fa0 R15: 00007fff8a130228 [ 295.902626][T11449] [ 296.730313][T11472] lo speed is unknown, defaulting to 1000 [ 296.743363][T11472] wg2 speed is unknown, defaulting to 1000 [ 296.785664][T11486] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1418'. [ 297.110433][T11503] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 297.122203][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 297.300278][T11508] nbd6: detected capacity change from 0 to 63 [ 297.492615][T11518] raw_sendmsg: syz.0.1425 forgot to set AF_INET. Fix it! [ 297.582046][T11521] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 297.632426][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1427'. [ 297.644870][ T7153] wlan1: Trigger new scan to find an IBSS to join [ 297.688105][T11527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1427'. [ 297.689293][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'. [ 297.827859][T11532] openvswitch: netlink: Flow actions attr not present in new flow. [ 297.878207][T11534] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 297.937455][ T52] block nbd6: Receive control failed (result -104) [ 297.984517][T11533] netlink: 'syz.0.1429': attribute type 5 has an invalid length. [ 298.062405][T11540] netlink: 'syz.3.1430': attribute type 23 has an invalid length. [ 298.391708][T11563] netlink: 'syz.4.1435': attribute type 1 has an invalid length. [ 298.571293][T11575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1435'. [ 298.572871][T11563] bond3: entered promiscuous mode [ 298.573434][T11563] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.600336][T11575] bond3: entered allmulticast mode [ 298.769652][T11538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.123632][T11586] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1439'. [ 299.215682][T11590] netlink: 'syz.4.1441': attribute type 2 has an invalid length. [ 299.283853][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1442'. [ 299.291884][T11588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1442'. [ 299.411774][T11596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1444'. [ 299.484112][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 300.066361][T11614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1448'. [ 300.068083][T11594] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1443'. [ 300.605312][ T1119] wlan1: Trigger new scan to find an IBSS to join [ 300.614967][T11601] hsr_slave_0: left promiscuous mode [ 301.042395][T11601] hsr_slave_1: left promiscuous mode [ 302.380805][T11636] [ 302.383305][T11636] ====================================================== [ 302.390362][T11636] WARNING: possible circular locking dependency detected [ 302.397515][T11636] syzkaller #0 Not tainted [ 302.402041][T11636] ------------------------------------------------------ [ 302.409234][T11636] syz.2.1452/11636 is trying to acquire lock: [ 302.415338][T11636] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 302.425846][T11636] [ 302.425846][T11636] but task is already holding lock: [ 302.433247][T11636] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 302.442761][T11636] [ 302.442761][T11636] which lock already depends on the new lock. [ 302.442761][T11636] [ 302.453201][T11636] [ 302.453201][T11636] the existing dependency chain (in reverse order) is: [ 302.462254][T11636] [ 302.462254][T11636] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 302.470292][T11636] down_write+0x96/0x200 [ 302.475107][T11636] kernfs_add_one+0x41/0x6f0 [ 302.480263][T11636] kernfs_create_dir_ns+0x1a1/0x230 [ 302.486056][T11636] internal_create_group+0x440/0x1180 [ 302.492007][T11636] cpuhp_invoke_callback+0x434/0x810 [ 302.497883][T11636] cpuhp_issue_call+0x3f0/0x750 [ 302.503363][T11636] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 302.510028][T11636] __cpuhp_setup_state+0x3f/0x60 [ 302.515610][T11636] do_one_initcall+0x250/0x870 [ 302.520969][T11636] do_initcall_level+0x10a/0x1a0 [ 302.526557][T11636] do_initcalls+0x59/0xa0 [ 302.531478][T11636] kernel_init_freeable+0x29d/0x3e0 [ 302.537267][T11636] kernel_init+0x22/0x1d0 [ 302.542212][T11636] ret_from_fork+0x514/0xb70 [ 302.547406][T11636] ret_from_fork_asm+0x1a/0x30 [ 302.552748][T11636] [ 302.552748][T11636] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 302.560623][T11636] [ 302.560623][T11636] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 302.568410][T11636] cpus_read_lock+0x42/0x160 [ 302.573755][T11636] static_key_slow_inc+0x12/0x30 [ 302.579289][T11636] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 302.585687][T11636] nbd_genl_foreach_sock+0x265/0x450 [ 302.591543][T11636] nbd_genl_reconfigure+0xbbb/0x1040 [ 302.597879][T11636] genl_family_rcv_msg_doit+0x233/0x340 [ 302.604001][T11636] genl_rcv_msg+0x614/0x7a0 [ 302.609083][T11636] netlink_rcv_skb+0x226/0x4a0 [ 302.614426][T11636] genl_rcv+0x28/0x40 [ 302.618971][T11636] netlink_unicast+0x7bd/0x940 [ 302.624300][T11636] netlink_sendmsg+0x813/0xb40 [ 302.629636][T11636] sock_sendmsg_nosec+0x13a/0x180 [ 302.635230][T11636] ____sys_sendmsg+0x54e/0x850 [ 302.640568][T11636] ___sys_sendmsg+0x2a5/0x360 [ 302.645813][T11636] __x64_sys_sendmsg+0x1b1/0x290 [ 302.651318][T11636] do_syscall_64+0x166/0x520 [ 302.656477][T11636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.662938][T11636] [ 302.662938][T11636] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 302.670622][T11636] __mutex_lock+0x19d/0x1550 [ 302.675804][T11636] nbd_queue_rq+0x373/0xff0 [ 302.680872][T11636] blk_mq_dispatch_rq_list+0x499/0x1990 [ 302.687071][T11636] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 302.694032][T11636] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 302.700604][T11636] blk_mq_run_work_fn+0x16c/0x300 [ 302.706237][T11636] process_scheduled_works+0xc3d/0x1630 [ 302.712380][T11636] worker_thread+0xa47/0xfb0 [ 302.717552][T11636] kthread+0x38b/0x480 [ 302.722197][T11636] ret_from_fork+0x514/0xb70 [ 302.727347][T11636] ret_from_fork_asm+0x1a/0x30 [ 302.732676][T11636] [ 302.732676][T11636] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 302.740103][T11636] __mutex_lock+0x19d/0x1550 [ 302.745295][T11636] nbd_queue_rq+0xc1/0xff0 [ 302.750290][T11636] blk_mq_dispatch_rq_list+0x499/0x1990 [ 302.756404][T11636] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 302.763386][T11636] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 302.769937][T11636] blk_mq_run_work_fn+0x16c/0x300 [ 302.775541][T11636] process_scheduled_works+0xc3d/0x1630 [ 302.781652][T11636] worker_thread+0xa47/0xfb0 [ 302.786853][T11636] kthread+0x38b/0x480 [ 302.791483][T11636] ret_from_fork+0x514/0xb70 [ 302.796633][T11636] ret_from_fork_asm+0x1a/0x30 [ 302.801987][T11636] [ 302.801987][T11636] -> #4 (set->srcu){.+.+}-{0:0}: [ 302.809156][T11636] __synchronize_srcu+0xc9/0x2f0 [ 302.814702][T11636] elevator_switch+0x1e8/0x7b0 [ 302.820131][T11636] elevator_change+0x2fa/0x480 [ 302.825470][T11636] elevator_set_default+0x375/0x440 [ 302.831235][T11636] blk_register_queue+0x3f3/0x4e0 [ 302.836914][T11636] __add_disk+0x6b8/0xdb0 [ 302.841879][T11636] add_disk_fwnode+0x100/0x3a0 [ 302.847223][T11636] nbd_dev_add+0x733/0xb60 [ 302.852219][T11636] nbd_init+0x168/0x1f0 [ 302.857070][T11636] do_one_initcall+0x250/0x870 [ 302.862407][T11636] do_initcall_level+0x10a/0x1a0 [ 302.867908][T11636] do_initcalls+0x59/0xa0 [ 302.872803][T11636] kernel_init_freeable+0x29d/0x3e0 [ 302.878569][T11636] kernel_init+0x22/0x1d0 [ 302.883475][T11636] ret_from_fork+0x514/0xb70 [ 302.888620][T11636] ret_from_fork_asm+0x1a/0x30 [ 302.893954][T11636] [ 302.893954][T11636] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 302.901826][T11636] __mutex_lock+0x19d/0x1550 [ 302.906989][T11636] elevator_change+0x1af/0x480 [ 302.912318][T11636] elevator_set_none+0xb5/0x140 [ 302.917724][T11636] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 302.924095][T11636] nbd_start_device+0x189/0xb30 [ 302.929655][T11636] nbd_genl_connect+0x167d/0x1cd0 [ 302.935248][T11636] genl_family_rcv_msg_doit+0x233/0x340 [ 302.941355][T11636] genl_rcv_msg+0x614/0x7a0 [ 302.946416][T11636] netlink_rcv_skb+0x226/0x4a0 [ 302.951745][T11636] genl_rcv+0x28/0x40 [ 302.956292][T11636] netlink_unicast+0x7bd/0x940 [ 302.961633][T11636] netlink_sendmsg+0x813/0xb40 [ 302.966963][T11636] sock_sendmsg_nosec+0x13a/0x180 [ 302.972560][T11636] ____sys_sendmsg+0x54e/0x850 [ 302.977936][T11636] ___sys_sendmsg+0x2a5/0x360 [ 302.983186][T11636] __x64_sys_sendmsg+0x1b1/0x290 [ 302.988695][T11636] do_syscall_64+0x166/0x520 [ 302.993866][T11636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.000322][T11636] [ 303.000322][T11636] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 303.008985][T11636] blk_alloc_queue+0x544/0x690 [ 303.014320][T11636] __blk_mq_alloc_disk+0x194/0x390 [ 303.020016][T11636] nbd_dev_add+0x494/0xb60 [ 303.025002][T11636] nbd_init+0x168/0x1f0 [ 303.029742][T11636] do_one_initcall+0x250/0x870 [ 303.035108][T11636] do_initcall_level+0x10a/0x1a0 [ 303.040631][T11636] do_initcalls+0x59/0xa0 [ 303.045620][T11636] kernel_init_freeable+0x29d/0x3e0 [ 303.051390][T11636] kernel_init+0x22/0x1d0 [ 303.056295][T11636] ret_from_fork+0x514/0xb70 [ 303.061454][T11636] ret_from_fork_asm+0x1a/0x30 [ 303.066795][T11636] [ 303.066795][T11636] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 303.074064][T11636] fs_reclaim_acquire+0x71/0x100 [ 303.079663][T11636] kmem_cache_alloc_noprof+0x5f/0x600 [ 303.085613][T11636] __kernfs_iattrs+0xdd/0x380 [ 303.090864][T11636] kernfs_iop_setattr+0xe6/0x3f0 [ 303.096384][T11636] notify_change+0xbba/0xea0 [ 303.101550][T11636] do_truncate+0x1c2/0x250 [ 303.106607][T11636] path_openat+0x15b5/0x1d60 [ 303.111773][T11636] do_file_open+0x23e/0x4a0 [ 303.116852][T11636] do_sys_openat2+0x115/0x200 [ 303.122139][T11636] __x64_sys_openat+0x138/0x170 [ 303.127584][T11636] do_syscall_64+0x166/0x520 [ 303.132842][T11636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.139301][T11636] [ 303.139301][T11636] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 303.147853][T11636] __lock_acquire+0x164c/0x2de0 [ 303.153270][T11636] lock_acquire+0x115/0x350 [ 303.158328][T11636] down_write+0x96/0x200 [ 303.163137][T11636] kernfs_link_sibling+0x4c7/0x5a0 [ 303.168814][T11636] kernfs_add_one+0x2db/0x6f0 [ 303.174062][T11636] __kernfs_create_file+0x22b/0x2e0 [ 303.179827][T11636] sysfs_add_file_mode_ns+0x237/0x300 [ 303.185771][T11636] sysfs_create_file_ns+0x12b/0x1b0 [ 303.191536][T11636] idletimer_tg_checkentry+0x3f7/0x810 [ 303.197656][T11636] xt_check_target+0x619/0xca0 [ 303.203061][T11636] translate_table+0x1917/0x2110 [ 303.208676][T11636] do_ip6t_set_ctl+0xa5c/0xe30 [ 303.214053][T11636] nf_setsockopt+0x26f/0x290 [ 303.219266][T11636] do_sock_setsockopt+0x17c/0x1b0 [ 303.224860][T11636] __x64_sys_setsockopt+0x13d/0x1b0 [ 303.230656][T11636] do_syscall_64+0x166/0x520 [ 303.235812][T11636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.242267][T11636] [ 303.242267][T11636] other info that might help us debug this: [ 303.242267][T11636] [ 303.252613][T11636] Chain exists of: [ 303.252613][T11636] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 303.252613][T11636] [ 303.267087][T11636] Possible unsafe locking scenario: [ 303.267087][T11636] [ 303.274575][T11636] CPU0 CPU1 [ 303.279969][T11636] ---- ---- [ 303.285369][T11636] lock(&root->kernfs_rwsem); [ 303.290204][T11636] lock(cpuhp_state_mutex); [ 303.297402][T11636] lock(&root->kernfs_rwsem); [ 303.304721][T11636] lock(&root->kernfs_iattr_rwsem); [ 303.310039][T11636] [ 303.310039][T11636] *** DEADLOCK *** [ 303.310039][T11636] [ 303.318208][T11636] locks held by syz.2.1452/11636: 2, last CPU#1: [ 303.324574][T11636] #0: ffffffff903027e0 (list_mutex){+.+.}-{4:4}, at: idletimer_tg_checkentry+0x63/0x810 [ 303.334475][T11636] #1: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 303.344359][T11636] [ 303.344359][T11636] stack backtrace: [ 303.350289][T11636] CPU: 1 UID: 0 PID: 11636 Comm: syz.2.1452 Not tainted syzkaller #0 PREEMPT(full) [ 303.359719][T11636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.369810][T11636] Call Trace: [ 303.373137][T11636] [ 303.376103][T11636] dump_stack_lvl+0xe8/0x150 [ 303.380783][T11636] print_circular_bug+0x2e2/0x300 [ 303.385891][T11636] check_noncircular+0x12f/0x150 [ 303.390874][T11636] __lock_acquire+0x164c/0x2de0 [ 303.395769][T11636] ? __lock_acquire+0x747/0x2de0 [ 303.400765][T11636] lock_acquire+0x115/0x350 [ 303.405311][T11636] ? kernfs_link_sibling+0x4c7/0x5a0 [ 303.410649][T11636] down_write+0x96/0x200 [ 303.414941][T11636] ? kernfs_link_sibling+0x4c7/0x5a0 [ 303.420269][T11636] ? __pfx_down_write+0x10/0x10 [ 303.425160][T11636] ? kernfs_root+0x1c/0x230 [ 303.429699][T11636] ? kernfs_root+0x1c/0x230 [ 303.434254][T11636] ? kernfs_root+0x1c/0x230 [ 303.438801][T11636] ? kernfs_root+0x1ea/0x230 [ 303.443427][T11636] kernfs_link_sibling+0x4c7/0x5a0 [ 303.448588][T11636] kernfs_add_one+0x2db/0x6f0 [ 303.453315][T11636] __kernfs_create_file+0x22b/0x2e0 [ 303.458563][T11636] sysfs_add_file_mode_ns+0x237/0x300 [ 303.463985][T11636] sysfs_create_file_ns+0x12b/0x1b0 [ 303.469238][T11636] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 303.475871][T11636] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 303.481655][T11636] ? kstrdup+0x81/0x100 [ 303.485860][T11636] idletimer_tg_checkentry+0x3f7/0x810 [ 303.491390][T11636] xt_check_target+0x619/0xca0 [ 303.496213][T11636] ? __pfx_xt_check_target+0x10/0x10 [ 303.501548][T11636] ? pcpu_alloc_noprof+0x1036/0x1900 [ 303.506900][T11636] ? xt_find_target+0x20f/0x260 [ 303.511812][T11636] translate_table+0x1917/0x2110 [ 303.516801][T11636] ? __lock_acquire+0x747/0x2de0 [ 303.521782][T11636] ? __pfx_translate_table+0x10/0x10 [ 303.527106][T11636] ? lock_acquire+0x115/0x350 [ 303.531835][T11636] ? _copy_from_user+0x94/0xb0 [ 303.536687][T11636] do_ip6t_set_ctl+0xa5c/0xe30 [ 303.541498][T11636] ? rcu_is_watching+0x16/0xb0 [ 303.546308][T11636] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 303.551651][T11636] ? __mutex_unlock_slowpath+0x731/0x900 [ 303.557336][T11636] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 303.563370][T11636] nf_setsockopt+0x26f/0x290 [ 303.568005][T11636] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 303.573939][T11636] do_sock_setsockopt+0x17c/0x1b0 [ 303.579017][T11636] __x64_sys_setsockopt+0x13d/0x1b0 [ 303.584274][T11636] do_syscall_64+0x166/0x520 [ 303.588917][T11636] ? trace_irq_disable+0x3b/0x140 [ 303.593992][T11636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.600105][T11636] ? clear_bhb_loop+0x70/0xc0 [ 303.604827][T11636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.610763][T11636] RIP: 0033:0x7faf50b9e159 [ 303.615220][T11636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.634908][T11636] RSP: 002b:00007faf51a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 303.643372][T11636] RAX: ffffffffffffffda RBX: 00007faf50e25fa0 RCX: 00007faf50b9e159 [ 303.651474][T11636] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 303.659496][T11636] RBP: 00007faf50c3506b R08: 00000000000005d8 R09: 0000000000000000 [ 303.667511][T11636] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 303.675520][T11636] R13: 00007faf50e26038 R14: 00007faf50e25fa0 R15: 00007ffea39d87c8 [ 303.683539][T11636] [ 304.614714][ T59] wlan1: Trigger new scan to find an IBSS to join [ 305.525346][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50