last executing test programs: 3m22.772787098s ago: executing program 4 (id=2823): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r0, 0xfd4, 0x1, 0x8}) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3d}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x40) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010038bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 3m22.39555045s ago: executing program 4 (id=2829): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x6) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x8}, 0x8) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2010}, {r1, 0x51}, {r1, 0x48}, {r1, 0x4040}], 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x1d]}, 0x8) 3m21.402191088s ago: executing program 4 (id=2850): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 3m21.264860832s ago: executing program 4 (id=2853): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000440)={&(0x7f0000000400)=[{0x6, 0x2, 0x0, 0x3, 0x5}], 0x1, 0x28, 0x6, 0x3a7}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x3c) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r0, 0xffffffffffffffff, 0x2f}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x24000052) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) 3m20.42498844s ago: executing program 4 (id=2856): r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000100), 0x20000000000000b5, 0x9) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x100e000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000340)=0xfffffff6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1804"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd93, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49811, 0x1d851}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}]}, 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000580)=0x7b, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f00000005c0), 0xa0d, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x32b601, 0x0) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f00000003c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000540)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xca, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) 3m20.232967113s ago: executing program 4 (id=2860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000800)={0x2ac, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6d, 0x4, "5725ee7f1b67de2676dbe95669fe6d59940a0680305e9bb029ace88edaee9fb3ad7ecc5ac363cb369e370096e6acd42bd972197114f2b56bbd1d0338a138507811a1a250486f0e474051d410a7dd9befff76cab205d145477938c0d2b28474a1126720782dffa01d77"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe0, 0x5, "65a1ae98ac0717afda4cb16c588ee28db566849b84f1bba767ec47be8bd457a52edf00cf3f4b0bd82029edcb3cc9204262cbab73a6d42cb6b085621caa9d7f3c9dab35303174743de4699f3100f2c6b7fd07490b790ad83fd1d19d963af9bda15b31e2ac6c767c545f42423caefb63bba9e599e1b26f44c5887d87671989f58d7abaf4c745e91f116be4a81fb8191d0a068026f03c613d0fb4193fc6a7479d01e522694d735ec31e177c1b7fd8dde0389ee54190c1812e4e68dad988a6966f65375e5adf785fe46458264307e3c6ef12a0a2e3948652066548a6674c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2c, 0x4, "f622e20150d54825bd3f7a772a4e120200f7dbe39a4598aae64865d8cccbd7643902b69b7f45b6e6"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x93\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&&/@{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!^*\'-.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES8], 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x4040850) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x700, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000680)={'nat\x00', 0x0, 0x0, 0x0, [0x100, 0xc42, 0x3, 0x7, 0x5, 0x2]}, &(0x7f0000000700)=0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r7, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "db8a0fd67422cc65c0cd77f4c96007af"}, @NL80211_ATTR_PMKID={0x14, 0x55, "743df2e80338be27c92c46e4e3909a8d"}, @NL80211_ATTR_PMKID={0x14, 0x55, "c548ac1bf7baa1ce591db7822384e2d9"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x81) 3m5.121472195s ago: executing program 32 (id=2860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000800)={0x2ac, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6d, 0x4, "5725ee7f1b67de2676dbe95669fe6d59940a0680305e9bb029ace88edaee9fb3ad7ecc5ac363cb369e370096e6acd42bd972197114f2b56bbd1d0338a138507811a1a250486f0e474051d410a7dd9befff76cab205d145477938c0d2b28474a1126720782dffa01d77"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe0, 0x5, "65a1ae98ac0717afda4cb16c588ee28db566849b84f1bba767ec47be8bd457a52edf00cf3f4b0bd82029edcb3cc9204262cbab73a6d42cb6b085621caa9d7f3c9dab35303174743de4699f3100f2c6b7fd07490b790ad83fd1d19d963af9bda15b31e2ac6c767c545f42423caefb63bba9e599e1b26f44c5887d87671989f58d7abaf4c745e91f116be4a81fb8191d0a068026f03c613d0fb4193fc6a7479d01e522694d735ec31e177c1b7fd8dde0389ee54190c1812e4e68dad988a6966f65375e5adf785fe46458264307e3c6ef12a0a2e3948652066548a6674c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2c, 0x4, "f622e20150d54825bd3f7a772a4e120200f7dbe39a4598aae64865d8cccbd7643902b69b7f45b6e6"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x93\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&&/@{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!^*\'-.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES8], 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x4040850) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x700, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000680)={'nat\x00', 0x0, 0x0, 0x0, [0x100, 0xc42, 0x3, 0x7, 0x5, 0x2]}, &(0x7f0000000700)=0x78) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r7, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "db8a0fd67422cc65c0cd77f4c96007af"}, @NL80211_ATTR_PMKID={0x14, 0x55, "743df2e80338be27c92c46e4e3909a8d"}, @NL80211_ATTR_PMKID={0x14, 0x55, "c548ac1bf7baa1ce591db7822384e2d9"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x81) 2m31.288783377s ago: executing program 5 (id=3224): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000190001002cbd700000c8c3532d"], 0x24}}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000240)={0x510, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6e}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x4cd, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_b, @broadcast, @initial, {0x3, 0x6}}, 0x5, @random=0x5, 0x280, @val={0x0, 0x1c, @random="c21db4701b7470da366ec3504bd2da669599699de10f68506b007e66"}, @val={0x1, 0x2, [{0xb}, {0x4, 0x1}]}, @void, @val={0x4, 0x6, {0x6, 0xfe, 0x200, 0x719d}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x53, 0x40}}, [{0xdd, 0x79, "b6137d0af3c939ace8b314ab4445eab74ddadc26c96e501fd13f0f22b86b78a87190082ce4320bfdc5becbaa0bb763a1fdcc0cb53061a38b7ec95e5b89207da8c2c6d2aeeea1443505cba827df32190ecc65db1fa8d9d69fc8f544e1217842bb9b9dd6e67913c2fc3ff4b8a3220c5e5e0856d99246461b14ca"}, {0xdd, 0xe3, "9efcb5702720e0b0627027c705750c9bb02e973d59933d1ff404dfbd5ef07a01330e19085577d5f7004a1a7b1cf6fe02ccb3572e553bf54f83770731d67fca9b6541dc5950dbf526de907b593e76e2325ee0a2ff53a1048c56cf0607f86dcb23a1223ea05af70111b5e229e7a50666c004f5004d3891c5c46807a9b36514a87b3639052fe64b35cf72e45f7251325719aab262872296023a01ef00310e77812360e7fbe93cb5d08755c5c61ff4f74ae2175bad02be3d8af0d75219eff2dfd6b6a23d8c93a5c03c37c5d037df9c685579ccef1be99d89dccb6aa0352f2ddc0475924041"}, {0xdd, 0xbd, "ba8d8d5d144dbf765142fc51ba238378d96456d74927dc77282fd4b703d4a22e816e872a99716a62278c9a0596e8ef156c05704735dda2da48ee049ce0f1fecf31009f872ccb589f40a851c2c48982551c0918635122e9f1f022a3e215c9701b3c142647eb405b167df7bd80aa9e76044b119b4f6bb1c701c72e0538473899bc3fe59cbf20710877d491c8a80a7b7425cdc9af11c70931a3b77c15727fbfbf90be6b0b8af22161c545d94445ef12211169fb8207cefe4f52006d56bcc2"}, {0xdd, 0x7a, "f6c4c8f6a369c5167caabbdd49c412aa2483a2544e7c6fe71f6d8444758dbb5c4b7051d0b6a30b142c12e2ec39bf5bfb6ea383329e0e820db44ef8a3f2d2fd1a94cf94a44c1de3428749ba7cf78e4dad4c83fcdd7ce58dcf980aad75fa2bb48ba4be9761d40fe6a72233e6385800a1afe4b2cf2bb6183bc8beb1"}, {0xdd, 0xfa, "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"}, {0xdd, 0xd1, "7173ccfdc1dee6aa82070b538190428ba0c8014be28b8c2efbdbe4aa16acc0946862907bd211667c37eec3e66b12df7db3dab800d801be926c67033c083fd16aca32d7e34ca1b735acf5b3c618b7fd81228a5bdfe72c5c26f5b7a0b94b6fc2a0143c8e7470fdd67cbb1546d41ea22acacb646c33b50f54353166ec76d6ef534965453611f137ca0689ce5317de1e221e2ac6bf15443a29d397f7af280d3b5f8a97943154d204dbed0cb4400612aa2202c5d775f2c989de6bea2dd56e963a52be96e345523edced2c3e6a1ce5e2fd8dd4a8"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x2, 0x8000, 0x1]}]}, 0x510}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (rerun: 64) 2m30.648759138s ago: executing program 5 (id=3227): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x40000000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x50) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000880), r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x20, r4, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002200000429bd7000fcdbdf2502141409090098a07732145d11b4513fb1111ffd000500800000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40080) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000800000000000000", @ANYBLOB="9feaa1cb8efaa8e862cc6254afbd211e56b6eea8c2ad537b7824150128856356b5421330baaa910cfec708d3d9cd5f0ef8f91a726b9cadc401383aa0c2898d23a8fe8d2ec6e8e54139f0b4de6c91b8dc7834b67727888395a8f8f98589d5f0768a26ec2c217cd74091eb6ba478931f07e43cd8f82d90e31f61d573e8191511ed52b5a36bf55aa35f0f50a246e9d95e9be90db4c37db30a78bd0b42231f6f85208500ca6e444042d6dd468a1d0ad3c22ad5c73ac132fe06fe1b27e2", @ANYBLOB="000000000500"/20, @ANYRES64=r6, @ANYRES32, @ANYRES16=r0], 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x0) socket(0x10, 0x3, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000600)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) socket$pppoe(0x18, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) write$nci(r9, &(0x7f0000000800)=ANY=[@ANYBLOB="7006050300000000667236619de345c288361bee65478644957d822aef166778ea93e7dc6feb30ee1814123ecbf9858ed736d58d8b2d33c6a5264863f53217bc7ac04b11adbc66307ab1f85a20e7632788d0acf0c115930b6231e46d8f7248d8"], 0x8) r13 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r13, &(0x7f0000000140)={0xa, 0x0, 0x6ea6, @local, 0x5}, 0x20) r14 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r14, &(0x7f0000000400), 0x10) sendmmsg$inet(r14, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000540)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m28.478621035s ago: executing program 5 (id=3233): r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x0, 0x398, 0x2c8, 0x0, 0x398, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [0xffffff00], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x700}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) 2m28.298083594s ago: executing program 5 (id=3236): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000480), 0x10) bind$can_raw(r0, &(0x7f00000004c0), 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a09000000000000000000020000000900010073797a30000000000900020073797a300000000074000000160a01040000000000000000020000020900020073797a30000000000900010073797a3000000000080007400000000240000380080002400000000108000140000000002c000380140001007767300000000000000000000000000014000100767863616e310000000000000000000014000000110001"], 0xc8}}, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000000100)=0x44) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) bind$can_raw(r0, &(0x7f0000000480), 0x10) (async) bind$can_raw(r0, &(0x7f00000004c0), 0x10) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a09000000000000000000020000000900010073797a30000000000900020073797a300000000074000000160a01040000000000000000020000020900020073797a30000000000900010073797a3000000000080007400000000240000380080002400000000108000140000000002c000380140001007767300000000000000000000000000014000100767863616e310000000000000000000014000000110001"], 0xc8}}, 0x0) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000000100)=0x44) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0) (async) 2m27.850424153s ago: executing program 5 (id=3242): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xa, 0x4, &(0x7f0000000380)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000400)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_addr=@broadcast, @private=0xa010100}, 0x10) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000440)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x1a, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0xffffff15}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x54, '\x00', r3, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 2m27.486574485s ago: executing program 5 (id=3246): accept(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000340)=0x80) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaadaaaaaaaa0180c200000e86dd61f6ff0100442f00fe800000000000000000000000bbfe8000000000000000000000000000aa0c2088be00000005010088a8000086dd86dd88be000000031c0885100100000000007b43080022eb00000002230223090200000000000005c5a002626ec09039e43f5300ebb41b0800655800000000"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(r1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x3c, r3, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xf}}}]}, 0x3c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) ioctl$NILFS_IOCTL_GET_VINFO(r5, 0xc0186e86, &(0x7f0000000500)={&(0x7f0000000540)=[{0x7fff, 0x401, 0x9, 0xfffffffffffffff6}], 0x1, 0x20, 0x8001, 0x14d2}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) bind$packet(r0, &(0x7f0000000240)={0x11, 0xf6, r2, 0x1, 0x8, 0x6, @multicast}, 0x14) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m12.395812609s ago: executing program 33 (id=3246): accept(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000340)=0x80) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaadaaaaaaaa0180c200000e86dd61f6ff0100442f00fe800000000000000000000000bbfe8000000000000000000000000000aa0c2088be00000005010088a8000086dd86dd88be000000031c0885100100000000007b43080022eb00000002230223090200000000000005c5a002626ec09039e43f5300ebb41b0800655800000000"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(r1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x3c, r3, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xf}}}]}, 0x3c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0xc201}) ioctl$NILFS_IOCTL_GET_VINFO(r5, 0xc0186e86, &(0x7f0000000500)={&(0x7f0000000540)=[{0x7fff, 0x401, 0x9, 0xfffffffffffffff6}], 0x1, 0x20, 0x8001, 0x14d2}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) bind$packet(r0, &(0x7f0000000240)={0x11, 0xf6, r2, 0x1, 0x8, 0x6, @multicast}, 0x14) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 4.215876085s ago: executing program 1 (id=4299): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc040) 3.951513444s ago: executing program 1 (id=4301): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x2000400c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x6230}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x4c}}, 0x0) 3.822846194s ago: executing program 1 (id=4302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1, 0x0, 0x500}, 0x4) 3.753359094s ago: executing program 3 (id=4303): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x40, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x2c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0xfffffffffffffd7a}]}]}, 0x40}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x0, 0x10, &(0x7f0000000800), 0x2ca}, 0x48) unshare(0x6020400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r3, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f00000008c0)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000900)="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", &(0x7f0000000a40)}, 0x28) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000080)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc3, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @broadcast, {[@cipso={0x86, 0x77, 0x1, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}, "91"}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000041000701fefeffff00000000017c0000040042802000018006000600800a00000c001500faffffffffffffff08000900549e8b0ab74f5418a47a8b83d59afcc68fb8f55bab10a9da06cb7a22d8e2947d3efaa4aeebc0a5caa16b7f6d4fda3a9377d622d698126e92070cca9094979e04f18eb87efea96e83dfdd4d908d947e1db44f0a3f6e0bd35817170a29164c864770ec707aec2b800d061c5c8431e3e3882d18833666e63fb3df7a293c", @ANYRES32=0x0, @ANYRESOCT=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0xc010) 3.179710298s ago: executing program 3 (id=4309): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="ad4c90c200"/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x4}, {0x7, 0xffff}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000580)="ecb483605c1307114c0a577548eeb8ee", 0x10) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0xc804) recvmmsg$unix(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/13, 0xd}], 0x1}}], 0x1, 0x40000100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d04d2a144c0000000000000085100000ec080000fb290000", @ANYRES32, @ANYBLOB="00000000000000208510000003000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffffeffe85000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 3.070168348s ago: executing program 1 (id=4310): r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52650007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 3.046901867s ago: executing program 6 (id=4312): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @random="d103ca15cb2b", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x1, @remote, @local, {[@routing={0x3b, 0x0, 0x0, 0x1}]}}}}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000001c0)={{0xffffffffffffffff, &(0x7f0000000040)='+\x00', 0x1, &(0x7f0000000080)={@align=0x10001, {0x40, 0x3, 0x8, 0x7ff}}, 0xb9e2, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x5}, {[0x1, 0xffff, 0x5, 0x80000000]}, 0x2, 0x78, &(0x7f0000000140)=""/120}) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSET={0x124, 0x9, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_EXPRESSIONS={0x100, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x54, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xf4}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}, @NFT_MSG_DELTABLE={0xc4, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x9b, 0x6, "4fc72f00f5bcc25f213c77ecea873c28bfd2a0daa04cb7ba087f8ec4333a37703eaee5deb7bc650a4333b8e856e4e88aa5d3b9fd8ba2e5425c05d2dd605c6edf3d611f4beb4997e9a8a63b9e0cc6ac84226a19ed191d0487f82719ce42aa24be58d446e2024ef4fae75029668056db3421b8c6be5ce78d5444031fc3ef264ced8d5fb68f5222c30ec97af6884f9e73780d70b8f067a753"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x68, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x3f, 0x6, "333507b07c8a2af0ad9cbe319ac39ab0861ec2c3bf109ae9927d27c7fd15112ff3afdb3f8f14339ba4ad93fde07494814f2eed3ce6f960b603ef52"}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2b4}, 0x1, 0x0, 0x0, 0x20}, 0x4010) 2.902372736s ago: executing program 3 (id=4313): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x1000, @empty}}, 0xfffd, 0x2000}, 0x90) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000001800)={0x2, 0x0, @local}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001880)="02", 0x1}], 0x1, 0x0, 0x0, 0x12c}}], 0x1, 0x20048041) 2.901981313s ago: executing program 1 (id=4314): socket(0xa, 0x2400000001, 0x0) (async) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f00000001c0)={0x0, 0xffffffffffffffff}, &(0x7f0000000440)=0xc) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001940)=ANY=[@ANYBLOB="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"/488], 0x190) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x40, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x24, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x10, 0x1c, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x8000000000000000}]}]}, @nested={0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0xa, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0xa, &(0x7f00000002c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0xe, 0x0, &(0x7f0000000400)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x35) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0xe, 0x0, &(0x7f0000000400)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x35) getsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000740)=""/4096, &(0x7f0000001740)=0x1000) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01020000010000ecffff060026"], 0x4c}, 0x8, 0x3000000000002}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000001800)={0x7fffffff}, 0x10) sendmsg$kcm(r5, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000018c0)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001900)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x81, 0x8, 0x4, 0x218dd6f49f41750f, @mcast2, @rand_addr=' \x01\x00', 0x7800, 0x10, 0x5, 0x503723b3}}) socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x5b, r6}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000600)={0x2, {{0xa, 0x4e24, 0xffffffff, @mcast2, 0x4}}, {{0xa, 0x4e21, 0x5, @mcast2, 0x5}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000600)={0x2, {{0xa, 0x4e24, 0xffffffff, @mcast2, 0x4}}, {{0xa, 0x4e21, 0x5, @mcast2, 0x5}}}, 0x108) 2.738628646s ago: executing program 6 (id=4317): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c000000240001050000000000000000000000000100000000000100ffffffff00000000090001007072696f000000001800020003000000000000001e"], 0x9c}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) syz_extract_tcp_res$synack(&(0x7f00000003c0)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r2, &(0x7f0000000480)={@val={0xa, 0x7}, @val={0x0, 0x3, 0xfff, 0xadd, 0x6, 0xfe00}, @eth={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @mcast1, {[], {{0x4e22, 0x4e64, r5, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x100, 0x0, 0x9}}}}}}}}, 0x58) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x42, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) write(r6, &(0x7f0000000400)="44000000410001000300000000010000030100002a0000002c0001001000040000030000000000000000000006000c000800000010000700010101010202020206eb4000", 0x44) 2.645179336s ago: executing program 3 (id=4318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r2}, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0xb, 0x1c, &(0x7f0000001f00)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000002000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, 0x0) sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000002f0009002abd70000000000004000000260011802ef9e05e"], 0x3c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x1620, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x15f4, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x15e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x15e0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x151c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1510, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x13b8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe6, 0x1, "217b440c51bfbc4e1eae1b2a584c03bd11f60fc0fcdb8ca0feb026cffeb4d25cfdfc372c2206eedf0ae78d2c785e93ee24e9b2717f6fa0f9a19a312877e3f19a0fb608fa6b4b38b979e63009bed31e35f8ca090f567f34036b0779e8f6e3d5116e7445bded6f176ff4e42db3012f0d8bba68e7d108e14fdfea785fb6dd64001364eac2cf3b8ad727c6d2c780c07bb9d6d57e5c4674e7da4898f8907ed210ce9ddda57902170efc08c60b87e9fc705f5ad719fb3a32f0ee4093e3ef420b20063722b6488852f4cf634643b762f7955f3d7af3f251a7295c3a494ccf51efec02f7e509"}, @NFTA_DATA_VALUE={0xe5, 0x1, "2f4d4fb4da9c0222364caca052b259f64da6884b918f37ef6edf5d66bd90b8367d342d02ac77fad04515d808d45ebe1f13696a3a05f103cc5b86a69d2379a00d606aed5b4f4d7a59f79890e363d64d3e4cf74713cdd82302d087e4f4ddb2f8592e1935674483eb4b0dbc81711622c8d2aa1efa7a661b2455ce2cc467899bd22789d9a5b2c6d491b041e45e81e69fee874137ef0af87317b6ecf1ac8cdeee9369f74f3ca420fc34df98a0c2c023fe319aa807ea614f8cf060ae7ad049b8de2937a532c731114312af0a61e67efd56a2f5aa60b40da0afcb55e6a73cce44934e8b54"}, @NFTA_DATA_VALUE={0xe9, 0x1, "f8030512c0a73842cb126ac9c685bd6e5a19f2075a4e85aa47092efd5e1a5ef0de0f9dcf65c28bce620832fe466dc37a114af89967edea10bf20481d5e842e68b0bd9d56ba8f542daaa35d7326109f3a6295631dbbfe4cabde089155be9c86d2c76683bec64f396d785dfdf099855f9c252a0a308e7346cf3e7524025c4305f210b13a99c8dc6f9da0f20f3f36e681660cc651c8d330d371e680c54952c669d9364cdeedc042153bd0d7afa8a36798318eac78108188d57ff86ecf6368698b613ba09e632bfc7ee735032877b48811974495a09a2d0b5cb8aa80d810a8356dc2e82ab88a27"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "adcf6ee9fcce83899fe674be94946d901bfab6cc1d512a4532cc58db2aa4a3108a297f8a658a660626a8ae5eb873ed5bc06abc6fddb55587b5c5e55b86f42ad8e245aa9e7eb7d1ac76bf35f61a9dc5adb1ca368781d272d6aa8240cc3d1ce5fe7093eb7af560ef0ea0575994a61bd41f11ecaee051ac229f5a9d31eef28550ea004e44c93534bcf37b103ae3239c3ac50bf7f1e1f128273d5c"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_DATA={0x118, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x50, 0x1, "06f0205e2a85de9a226061da5df0085602c28560fc6ceaefbd605f97916facb3f4023834bd3e50abd08213b25fa2f18d76219d1fd78a151e3ff2c3e364e7f11c2e2b0459a351a746ab25997e"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xa6}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xed}]}}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_OP={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1648}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 2.425026945s ago: executing program 0 (id=4319): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) socket(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 2.281753949s ago: executing program 1 (id=4321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1, 0x0, 0x700}, 0x4) 2.032433457s ago: executing program 3 (id=4323): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x1}}, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)={0x38, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x8, 0x18, 0x0, 0x1, [@nested={0x4, 0x6d}]}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.9513282s ago: executing program 6 (id=4324): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket(0x848000000015, 0x805, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc1300000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000044010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff000000000000000000000000000000000000000000000000030000000000000020010000000000000000000000000001000000002b00000002000000fe880000000000000000000000000001000000000400"/436], 0x1fc}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x2f, 0x0, "ea1405f7ed3afb477e97815317dd90b0a9f242cdedf08f407b4090210f80a0719e68fabccef0ed7facb62bf4b908fe0781eb04f51226b4e01641b245e500000000000000000000004600"}, 0xd8) sendmsg$key(r1, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRES64=r0, @ANYRESDEC=r3], 0xc0}}, 0x40c1) socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x7fff, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(r5, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 1.862440838s ago: executing program 0 (id=4325): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc040) 1.671180848s ago: executing program 3 (id=4327): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000001c0)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000300)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200, 0x20000000}, 0x3c) 1.569868795s ago: executing program 6 (id=4329): socket(0x10, 0x80002, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@remote, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@hopopts={{0x20, 0x29, 0x36, {0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xb}]}}}], 0x20}}], 0x1, 0x88d5) socket(0x10, 0x80002, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@remote, r2}, 0x14) (async) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@hopopts={{0x20, 0x29, 0x36, {0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xb}]}}}], 0x20}}], 0x1, 0x88d5) (async) 1.479513614s ago: executing program 0 (id=4330): r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x0, 0x398, 0x2c8, 0x0, 0x398, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [0xffffff00], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0xfd}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) 1.342309922s ago: executing program 0 (id=4332): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@security={'security\x00', 0x44, 0x4, 0x5d0, 0xffffffff, 0x328, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x500, 0x500, 0x500, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x328, 0x8502, {}, [@common=@inet=@hashlimit3={{0x158}, {'macvtap0\x00', {0x7, 0x9, 0x42, 0x5, 0x7, 0xfd6, 0x5, 0x5, 0x18, 0x68}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0xfe, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xffffffff, 0xff000000, 0xffffffff], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x630) 1.139755766s ago: executing program 0 (id=4333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x1620, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x15f4, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x15e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x15e0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x151c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1510, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x13b8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe6, 0x1, "217b440c51bfbc4e1eae1b2a584c03bd11f60fc0fcdb8ca0feb026cffeb4d25cfdfc372c2206eedf0ae78d2c785e93ee24e9b2717f6fa0f9a19a312877e3f19a0fb608fa6b4b38b979e63009bed31e35f8ca090f567f34036b0779e8f6e3d5116e7445bded6f176ff4e42db3012f0d8bba68e7d108e14fdfea785fb6dd64001364eac2cf3b8ad727c6d2c780c07bb9d6d57e5c4674e7da4898f8907ed210ce9ddda57902170efc08c60b87e9fc705f5ad719fb3a32f0ee4093e3ef420b20063722b6488852f4cf634643b762f7955f3d7af3f251a7295c3a494ccf51efec02f7e509"}, @NFTA_DATA_VALUE={0xe5, 0x1, "2f4d4fb4da9c0222364caca052b259f64da6884b918f37ef6edf5d66bd90b8367d342d02ac77fad04515d808d45ebe1f13696a3a05f103cc5b86a69d2379a00d606aed5b4f4d7a59f79890e363d64d3e4cf74713cdd82302d087e4f4ddb2f8592e1935674483eb4b0dbc81711622c8d2aa1efa7a661b2455ce2cc467899bd22789d9a5b2c6d491b041e45e81e69fee874137ef0af87317b6ecf1ac8cdeee9369f74f3ca420fc34df98a0c2c023fe319aa807ea614f8cf060ae7ad049b8de2937a532c731114312af0a61e67efd56a2f5aa60b40da0afcb55e6a73cce44934e8b54"}, @NFTA_DATA_VALUE={0xe9, 0x1, "f8030512c0a73842cb126ac9c685bd6e5a19f2075a4e85aa47092efd5e1a5ef0de0f9dcf65c28bce620832fe466dc37a114af89967edea10bf20481d5e842e68b0bd9d56ba8f542daaa35d7326109f3a6295631dbbfe4cabde089155be9c86d2c76683bec64f396d785dfdf099855f9c252a0a308e7346cf3e7524025c4305f210b13a99c8dc6f9da0f20f3f36e681660cc651c8d330d371e680c54952c669d9364cdeedc042153bd0d7afa8a36798318eac78108188d57ff86ecf6368698b613ba09e632bfc7ee735032877b48811974495a09a2d0b5cb8aa80d810a8356dc2e82ab88a27"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "adcf6ee9fcce83899fe674be94946d901bfab6cc1d512a4532cc58db2aa4a3108a297f8a658a660626a8ae5eb873ed5bc06abc6fddb55587b5c5e55b86f42ad8e245aa9e7eb7d1ac76bf35f61a9dc5adb1ca368781d272d6aa8240cc3d1ce5fe7093eb7af560ef0ea0575994a61bd41f11ecaee051ac229f5a9d31eef28550ea004e44c93534bcf37b103ae3239c3ac50bf7f1e1f128273d5c"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_DATA={0x118, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x50, 0x1, "06f0205e2a85de9a226061da5df0085602c28560fc6ceaefbd605f97916facb3f4023834bd3e50abd08213b25fa2f18d76219d1fd78a151e3ff2c3e364e7f11c2e2b0459a351a746ab25997e"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xa6}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xed}]}}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_OP={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1648}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 1.138310458s ago: executing program 6 (id=4334): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x8, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x8, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7e}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000400)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0x0, 0x32, &(0x7f0000000440), &(0x7f0000000480)=""/50, 0x8, 0x0, 0xc4, 0xb7, &(0x7f00000004c0)="ed3e317c1410085afe2c3e4deec2f27a0779c3db5490ff1a5d539d865c1ff86e4821e089641617e0d7026dd98462eb9b1ed09dd4c0fec762feb6192c89161f7a25e46403ba38439fb80971bbdefcc3a12d9eef56241e2f514de43d6fdee3451f6de3d889a2df2637532d6bf2219e400a0d93e7aa9600e5f393785ef0b4f4a601d2f20a7998384ed9b3b79d6d830c03a6fc729a9a4774ef5124f1cadde5fc693529fdc242bd8c69d96b3f3f7904c8a439269e3107c20a70eb1462111dc572d8c03b355ff9", &(0x7f00000005c0)="9433b260543ac4f2a52175a3fa1dc0ea8c90126a2c454cd26eeb9be2a2fd0f0c45a7b31a7b362a2be50b251e4cb250136e6d5d878d240201d3d51d8df5745e0edd1799b7d6661ee49ebc9a469cc4cd507f71b103db3c72a5672a02f7e00c55bd8e4a868a23e9ac4e1d404c9b48a9b162ddde192301fc1afb2da389fc7bc512d787d5e882f75271e93bfc065db2966e5f8890c59401f6b924ab2ccbd92d3bff93ccea1e25037549b165b72354f507c03e38c550478b5083", 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0x0, 0x32, &(0x7f0000000440), &(0x7f0000000480)=""/50, 0x8, 0x0, 0xc4, 0xb7, &(0x7f00000004c0)="ed3e317c1410085afe2c3e4deec2f27a0779c3db5490ff1a5d539d865c1ff86e4821e089641617e0d7026dd98462eb9b1ed09dd4c0fec762feb6192c89161f7a25e46403ba38439fb80971bbdefcc3a12d9eef56241e2f514de43d6fdee3451f6de3d889a2df2637532d6bf2219e400a0d93e7aa9600e5f393785ef0b4f4a601d2f20a7998384ed9b3b79d6d830c03a6fc729a9a4774ef5124f1cadde5fc693529fdc242bd8c69d96b3f3f7904c8a439269e3107c20a70eb1462111dc572d8c03b355ff9", &(0x7f00000005c0)="9433b260543ac4f2a52175a3fa1dc0ea8c90126a2c454cd26eeb9be2a2fd0f0c45a7b31a7b362a2be50b251e4cb250136e6d5d878d240201d3d51d8df5745e0edd1799b7d6661ee49ebc9a469cc4cd507f71b103db3c72a5672a02f7e00c55bd8e4a868a23e9ac4e1d404c9b48a9b162ddde192301fc1afb2da389fc7bc512d787d5e882f75271e93bfc065db2966e5f8890c59401f6b924ab2ccbd92d3bff93ccea1e25037549b165b72354f507c03e38c550478b5083", 0x0, 0x0, 0x4}, 0x50) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xdc, r2, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000000) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xdc, r2, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4044014}, 0x4000000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto(r5, &(0x7f00000008c0)="b4849fe354c6bf79e10222e1c1647d6082", 0x11, 0x20000801, &(0x7f0000000900)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x198, 0x17, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x130, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000c00)={0x2, 0x3}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r1) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000cc0)=0x0, &(0x7f0000000d00)=0x4) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000d40)=0x0, &(0x7f0000000d80)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e40)={r3, 0x58, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000e80)=0x0, &(0x7f0000000ec0)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000f80)={'syztnl0\x00', &(0x7f0000000f00)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x42, 0x9, 0x3d, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000, 0x10, 0x8, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000f80)={'syztnl0\x00', &(0x7f0000000f00)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x42, 0x9, 0x3d, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000, 0x10, 0x8, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'syztnl1\x00', &(0x7f0000000fc0)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x1, 0xb, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x40, 0x6, 0xeac}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000011c0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0xc8, r6, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000011c0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0xc8, r6, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x40) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000001200)={0x0, 0xae5ff5ab2eaff038, 0x3, 0x9, 0x2}, 0x10) socket$inet6(0xa, 0x800, 0x3) r13 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r13, 0x0, 0x0, 0x0) (async) accept4$alg(r13, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r3, 0x84, 0x7a, &(0x7f0000001240)={0x2}, &(0x7f0000001280)=0xc) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r3, 0x84, 0x7a, &(0x7f0000001240)={0x2}, &(0x7f0000001280)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001340)={r14, 0x74, &(0x7f00000012c0)=[@in6={0xa, 0x4e21, 0x2, @mcast2, 0x7}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x99, @private0, 0x6}, @in6={0xa, 0x4e20, 0x6, @mcast2, 0x3800000}]}, &(0x7f0000001380)=0x10) connect(r13, &(0x7f00000013c0)=@l2={0x1f, 0x200, @any, 0x9}, 0x80) (async) connect(r13, &(0x7f00000013c0)=@l2={0x1f, 0x200, @any, 0x9}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001440)={r3, r3, 0x0, r1}, 0x10) 1.085336791s ago: executing program 2 (id=4335): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000840)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/686], &(0x7f0000001bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000001c00), 0x3a, 0x10, &(0x7f0000001c40), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c80)={r1, 0x0, 0x10ff, 0x300, &(0x7f0000001d00)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x20, 0x0, 0x0, 0x38, 0x0, &(0x7f0000001d40)="b8"}, 0x3a) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x700, 0x80, 0xca, 0x1, {{0x1b, 0x4, 0x0, 0x3a, 0x6c, 0x67, 0x0, 0x7, 0x29, 0x0, @local, @private=0xa010100, {[@noop, @timestamp={0x44, 0x8, 0x6d, 0x0, 0x1, [0x7]}, @timestamp_prespec={0x44, 0x4c, 0x8c, 0x3, 0xd, [{@rand_addr=0x64010100, 0x8}, {@multicast1, 0x5}, {@multicast2, 0x10}, {@multicast2, 0x2}, {@multicast2, 0x6}, {@private=0xa010100, 0xb}, {@local, 0x5}, {@broadcast}, {@loopback, 0x9}]}]}}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"/3480], &(0x7f0000001a80)='GPL\x00', 0x4, 0xb7, &(0x7f0000001ac0)=""/183, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001b80), 0x8}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0x2d, &(0x7f0000000000), 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x35, 0x0, 0x1, [@generic="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"]}]}, 0x114}], 0x1}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000001c0)={r0, r3}) sendmmsg$inet(r5, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000002040)="03", 0x1}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000002080)={r0}) 1.060486584s ago: executing program 0 (id=4336): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, 0x0, 0x880) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000005c0)={0x6}, 0x10) write(r2, &(0x7f0000000600)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000640)=[{&(0x7f0000000680)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001800000300", 0x39}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 829.375938ms ago: executing program 2 (id=4337): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0xffffffff}]}, 0x9a}}, 0x0) sendfile(r1, r1, 0x0, 0x7ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0xffffffff}]}, 0x9a}}, 0x0) (async) sendfile(r1, r1, 0x0, 0x7ff) (async) 635.870214ms ago: executing program 6 (id=4338): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x7, 0x4, 0x8000, 0x9}, 0x48) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000001400030400000000000000542d"], 0x44}}, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r2, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r3 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x9) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r5, r6, 0x0, 0x3ffffffffffffa) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000700)={0x3, &(0x7f0000000540)=[{}, {@fixed}, {@fixed}]}) 544.769899ms ago: executing program 2 (id=4339): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 352.975383ms ago: executing program 2 (id=4340): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 292.737354ms ago: executing program 2 (id=4341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000080)="a0", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x21) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r4) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="258e0d5465999bafa30001000000080002000201ee0008000100"], 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004", @ANYRES16=r0], 0x4c}}, 0x0) 0s ago: executing program 2 (id=4342): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000000000000000000300000700"], 0x0, 0x51}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30"], 0xf0}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) socket(0x400000000010, 0x3, 0xf) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c00", @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000980)=0x1, 0x4) bind$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000a00)=[{{&(0x7f0000000a40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="000000001b", 0x5}], 0x1}}], 0x1, 0x20048000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000b00)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) kernel console output (not intermixed with test programs): 9 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.491422][T17480] RSP: 002b:00007fd675c11028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 403.491441][T17480] RAX: ffffffffffffffda RBX: 00007fd675025fa0 RCX: 00007fd674d9e559 [ 403.491454][T17480] RDX: 0000000000000007 RSI: 00002000000006c0 RDI: 0000000000000003 [ 403.491463][T17480] RBP: 00007fd675c11090 R08: 0000000000000000 R09: 0000000000000000 [ 403.491474][T17480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.491485][T17480] R13: 00007fd675026038 R14: 00007fd675025fa0 R15: 00007ffe7a5568d8 [ 403.491517][T17480] [ 403.655698][T17486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.829020][T17490] syz.1.3537: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 403.829092][T17490] CPU: 0 UID: 0 PID: 17490 Comm: syz.1.3537 Not tainted syzkaller #0 PREEMPT(full) [ 403.829112][T17490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 403.829123][T17490] Call Trace: [ 403.829139][T17490] [ 403.829147][T17490] dump_stack_lvl+0xe8/0x150 [ 403.829181][T17490] warn_alloc+0x24d/0x270 [ 403.829205][T17490] ? kasan_save_track+0x4f/0x80 [ 403.829226][T17490] ? kasan_save_track+0x3e/0x80 [ 403.829252][T17490] ? __pfx_warn_alloc+0x10/0x10 [ 403.829271][T17490] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 403.829291][T17490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.829332][T17490] __vmalloc_node_range_noprof+0x127/0x1540 [ 403.829382][T17490] ? rcu_is_watching+0x16/0xb0 [ 403.829414][T17490] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 403.829433][T17490] ? __kmalloc_cache_noprof+0x321/0x600 [ 403.829457][T17490] ? __kmalloc_cache_noprof+0x14d/0x600 [ 403.829480][T17490] ? xskq_create+0x56/0x220 [ 403.829505][T17490] xskq_create+0x148/0x220 [ 403.829524][T17490] ? xsk_init_queue+0x8a/0xe0 [ 403.829549][T17490] xsk_init_queue+0x8a/0xe0 [ 403.829572][T17490] xsk_setsockopt+0x52a/0x960 [ 403.829605][T17490] ? __pfx_xsk_setsockopt+0x10/0x10 [ 403.829633][T17490] ? __pfx_aa_sk_perm+0x10/0x10 [ 403.829673][T17490] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 403.829700][T17490] ? __pfx_xsk_setsockopt+0x10/0x10 [ 403.829732][T17490] do_sock_setsockopt+0x17c/0x1b0 [ 403.829758][T17490] __x64_sys_setsockopt+0x13d/0x1b0 [ 403.829785][T17490] do_syscall_64+0x166/0x520 [ 403.829806][T17490] ? trace_irq_disable+0x3b/0x140 [ 403.829828][T17490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.829847][T17490] ? clear_bhb_loop+0x70/0xc0 [ 403.829872][T17490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.829891][T17490] RIP: 0033:0x7fd674d9e559 [ 403.829910][T17490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.829927][T17490] RSP: 002b:00007fd675c11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 403.829947][T17490] RAX: ffffffffffffffda RBX: 00007fd675025fa0 RCX: 00007fd674d9e559 [ 403.829961][T17490] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 403.829979][T17490] RBP: 00007fd674e35ab8 R08: 0000000000000004 R09: 0000000000000000 [ 403.829990][T17490] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.830002][T17490] R13: 00007fd675026038 R14: 00007fd675025fa0 R15: 00007ffe7a5568d8 [ 403.830034][T17490] [ 403.830432][T17490] Mem-Info: [ 403.830443][T17490] active_anon:5945 inactive_anon:0 isolated_anon:0 [ 403.830443][T17490] active_file:0 inactive_file:43736 isolated_file:0 [ 403.830443][T17490] unevictable:0 dirty:95 writeback:0 [ 403.830443][T17490] slab_reclaimable:11966 slab_unreclaimable:121385 [ 403.830443][T17490] mapped:40022 shmem:524 pagetables:3577 [ 403.830443][T17490] sec_pagetables:0 bounce:0 [ 403.830443][T17490] kernel_misc_reclaimable:0 [ 403.830443][T17490] free:1216074 free_pcp:31319 free_cma:0 [ 403.831391][T17490] Node 0 active_anon:23780kB inactive_anon:0kB active_file:0kB inactive_file:174744kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160088kB dirty:380kB writeback:0kB shmem:2096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15612kB pagetables:14164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 403.831460][T17490] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 403.831506][T17490] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 403.831572][T17490] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 403.831606][T17490] Node 0 DMA32 free:919352kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23780kB inactive_anon:0kB active_file:0kB inactive_file:174744kB unevictable:0kB writepending:380kB zspages:0kB present:3129332kB managed:2527500kB mlocked:0kB bounce:0kB free_pcp:125368kB local_pcp:111248kB free_cma:0kB [ 403.835906][T17490] lowmem_reserve[]: 0 0 0 0 0 [ 403.835949][T17490] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 403.836001][T17490] lowmem_reserve[]: 0 0 0 0 0 [ 403.836080][T17490] Node 1 Normal free:3929584kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 403.836217][T17490] lowmem_reserve[]: 0 0 0 0 0 [ 403.836257][T17490] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 403.836371][T17490] Node 0 DMA32: 1521*4kB (UME) 479*8kB (UM) 351*16kB (UE) 424*32kB (UM) 352*64kB (UE) 319*128kB (UME) 242*256kB (UME) 176*512kB (UE) 101*1024kB (UM) 5*2048kB (UME) 137*4096kB (M) = 919340kB [ 403.836517][T17490] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 403.836610][T17490] Node 1 Normal: 2*4kB (M) 3*8kB (UM) 5*16kB (UM) 6*32kB (UM) 7*64kB (UM) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 958*4096kB (M) = 3929584kB [ 403.836755][T17490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 403.836770][T17490] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 403.836786][T17490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 403.836802][T17490] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 403.836819][T17490] 44256 total pagecache pages [ 403.836827][T17490] 0 pages in swap cache [ 403.836833][T17490] Free swap = 124996kB [ 403.836848][T17490] Total swap = 124996kB [ 403.836857][T17490] 2097051 pages RAM [ 403.836863][T17490] 0 pages HighMem/MovableOnly [ 403.836872][T17490] 433560 pages reserved [ 403.836879][T17490] 0 pages cma reserved [ 403.848713][T17487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.987980][T17495] No such timeout policy "s" [ 403.987999][T17495] netlink: Failed to associated timeout policy 's' [ 404.113920][T17497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.484154][T17504] __nla_validate_parse: 4 callbacks suppressed [ 404.484176][T17504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3540'. [ 405.126876][T17522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3547'. [ 405.222156][T17525] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 405.265237][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3543'. [ 405.314923][T17506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3543'. [ 405.320187][T11323] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 405.320227][T11323] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 405.320254][T11323] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 405.320285][T11323] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 405.508399][T17537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3552'. [ 405.693306][T17547] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3556'. [ 405.696148][T17547] syzkaller1: entered promiscuous mode [ 405.696169][T17547] syzkaller1: entered allmulticast mode [ 405.888300][T17563] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3556'. [ 406.045050][T17573] sit0: entered promiscuous mode [ 406.049009][T17573] netlink: 'syz.3.3560': attribute type 1 has an invalid length. [ 406.049026][T17573] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3560'. [ 408.576948][T17542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.927857][T17588] FAULT_INJECTION: forcing a failure. [ 408.927857][T17588] name failslab, interval 1, probability 0, space 0, times 0 [ 408.927895][T17588] CPU: 1 UID: 0 PID: 17588 Comm: syz.3.3565 Not tainted syzkaller #0 PREEMPT(full) [ 408.927916][T17588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 408.927927][T17588] Call Trace: [ 408.927934][T17588] [ 408.927943][T17588] dump_stack_lvl+0xe8/0x150 [ 408.927976][T17588] should_fail_ex+0x410/0x560 [ 408.928017][T17588] should_failslab+0xa8/0x100 [ 408.928043][T17588] ? skb_clone+0x212/0x3a0 [ 408.928064][T17588] kmem_cache_alloc_noprof+0xa1/0x600 [ 408.928087][T17588] ? skb_clone+0x212/0x3a0 [ 408.928114][T17588] skb_clone+0x212/0x3a0 [ 408.928143][T17588] __netlink_deliver_tap+0x413/0x860 [ 408.928179][T17588] ? netlink_deliver_tap+0x2e/0x1b0 [ 408.928204][T17588] netlink_deliver_tap+0x19c/0x1b0 [ 408.928228][T17588] netlink_dump+0x95b/0xee0 [ 408.928262][T17588] ? __pfx_netlink_dump+0x10/0x10 [ 408.928297][T17588] ? netlink_recvmsg+0x5bf/0xa50 [ 408.928322][T17588] ? kmem_cache_free+0x182/0x650 [ 408.928350][T17588] netlink_recvmsg+0x683/0xa50 [ 408.928383][T17588] ? __pfx_netlink_recvmsg+0x10/0x10 [ 408.928403][T17588] ? lock_acquire+0x115/0x350 [ 408.928428][T17588] ? __lock_acquire+0x747/0x2de0 [ 408.928455][T17588] ? __pfx_netlink_recvmsg+0x10/0x10 [ 408.928479][T17588] sock_recvmsg_nosec+0x130/0x170 [ 408.928508][T17588] ____sys_recvmsg+0x3e3/0x4a0 [ 408.928537][T17588] ? __pfx_____sys_recvmsg+0x10/0x10 [ 408.928570][T17588] ? import_iovec+0x73/0xa0 [ 408.928601][T17588] ___sys_recvmsg+0x213/0x5a0 [ 408.928628][T17588] ? __pfx____sys_recvmsg+0x10/0x10 [ 408.928658][T17588] ? lock_acquire+0x115/0x350 [ 408.928710][T17588] do_recvmmsg+0x31a/0x7f0 [ 408.928748][T17588] ? __pfx_do_recvmmsg+0x10/0x10 [ 408.928782][T17588] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 408.928806][T17588] ? __fget_files+0x3a2/0x420 [ 408.928835][T17588] __x64_sys_recvmmsg+0x198/0x250 [ 408.928859][T17588] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 408.928898][T17588] do_syscall_64+0x166/0x520 [ 408.928923][T17588] ? trace_irq_disable+0x3b/0x140 [ 408.928943][T17588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.928962][T17588] ? clear_bhb_loop+0x70/0xc0 [ 408.928992][T17588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.929011][T17588] RIP: 0033:0x7f9646b9e559 [ 408.929029][T17588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.929044][T17588] RSP: 002b:00007f9647ab2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 408.929064][T17588] RAX: ffffffffffffffda RBX: 00007f9646e25fa0 RCX: 00007f9646b9e559 [ 408.929078][T17588] RDX: 0000000000000007 RSI: 00002000000006c0 RDI: 0000000000000003 [ 408.929090][T17588] RBP: 00007f9647ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 408.929102][T17588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.929113][T17588] R13: 00007f9646e26038 R14: 00007f9646e25fa0 R15: 00007fffac371208 [ 408.929145][T17588] [ 409.246132][T17599] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3567'. [ 409.269709][T17598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3568'. [ 409.455809][T17609] sit0: entered promiscuous mode [ 409.480502][T17609] netlink: 'syz.1.3572': attribute type 1 has an invalid length. [ 409.539566][T17617] __nla_validate_parse: 1 callbacks suppressed [ 409.539585][T17617] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3574'. [ 409.716253][T17628] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 409.765703][T17631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3580'. [ 409.800315][T17633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3581'. [ 409.966524][T17635] No such timeout policy "s" [ 409.966542][T17635] netlink: Failed to associated timeout policy 's' [ 410.093384][T17644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3583'. [ 410.496531][T17647] ip6t_srh: unknown srh match flags 5F28 [ 410.496679][T17646] ip6t_srh: unknown srh match flags 5F28 [ 410.497569][T17646] netlink: 'syz.1.3584': attribute type 3 has an invalid length. [ 410.497581][T17646] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3584'. [ 410.497756][T17647] netlink: 'syz.1.3584': attribute type 3 has an invalid length. [ 410.497768][T17647] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3584'. [ 410.760048][T17641] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 412.427837][T17610] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.648116][T17655] netlink: 'syz.3.3588': attribute type 1 has an invalid length. [ 412.687251][T17655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3588'. [ 412.744216][T17658] netlink: 'syz.1.3587': attribute type 1 has an invalid length. [ 412.744239][T17658] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3587'. [ 413.019883][T17673] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3594'. [ 413.054556][T17677] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 413.407368][T17699] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3602'. [ 413.450015][T17700] netlink: 'syz.1.3603': attribute type 1 has an invalid length. [ 413.669078][T17713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.749105][T17717] syzkaller1: entered promiscuous mode [ 413.749129][T17717] syzkaller1: entered allmulticast mode [ 414.342962][T17752] ip_tables: iptables: counters copy to user failed while replacing table [ 414.715562][T17780] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 414.801954][T17768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.858550][T17759] syzkaller0: entered promiscuous mode [ 414.858574][T17759] syzkaller0: entered allmulticast mode [ 414.917912][T17790] __nla_validate_parse: 5 callbacks suppressed [ 414.917933][T17790] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3628'. [ 414.948030][ T12] IPVS: starting estimator thread 0... [ 414.960408][T17787] pim6reg527: entered allmulticast mode [ 415.031846][T17793] IPVS: using max 31 ests per chain, 74400 per kthread [ 415.111987][T17799] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 415.119294][T17800] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3632'. [ 415.195076][T17811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3631'. [ 418.548059][T17820] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 418.883999][T17848] netlink: 'syz.6.3640': attribute type 12 has an invalid length. [ 419.033498][T17858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3640'. [ 419.148077][T17866] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3640'. [ 419.213939][T17869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.458605][T17889] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3651'. [ 419.468847][T17888] ip_tables: iptables: counters copy to user failed while replacing table [ 419.493673][T17891] lo: entered allmulticast mode [ 419.504317][T17892] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3651'. [ 419.511877][T17890] lo: left allmulticast mode [ 419.679941][T17900] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 419.808367][T17908] openvswitch: netlink: Key 6 has unexpected len 18 expected 2 [ 420.155325][T17926] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 420.379908][T17939] sit0: entered promiscuous mode [ 420.403537][T17939] netlink: 'syz.2.3669': attribute type 1 has an invalid length. [ 420.403562][T17939] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3669'. [ 420.559955][T17948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3671'. [ 420.560093][T17948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.622233][T17948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.948788][T17963] x_tables: duplicate underflow at hook 1 [ 421.185087][T17971] netlink: 288 bytes leftover after parsing attributes in process `syz.6.3680'. [ 421.344118][T17977] netlink: 'syz.2.3684': attribute type 1 has an invalid length. [ 421.344145][T17977] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3684'. [ 421.423367][T17979] batman_adv: batadv0: Adding interface: syzkaller0 [ 421.423386][T17979] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.423432][T17979] batman_adv: batadv0: Interface activated: syzkaller0 [ 422.121284][T17978] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 422.247691][T17978] batman_adv: batadv0: Removing interface: syzkaller0 [ 422.921695][T18028] FAULT_INJECTION: forcing a failure. [ 422.921695][T18028] name failslab, interval 1, probability 0, space 0, times 0 [ 422.921745][T18028] CPU: 1 UID: 0 PID: 18028 Comm: syz.3.3698 Not tainted syzkaller #0 PREEMPT(full) [ 422.921766][T18028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 422.921785][T18028] Call Trace: [ 422.921796][T18028] [ 422.921806][T18028] dump_stack_lvl+0xe8/0x150 [ 422.921839][T18028] should_fail_ex+0x410/0x560 [ 422.921870][T18028] should_failslab+0xa8/0x100 [ 422.921896][T18028] ? sctp_get_port_local+0x6bd/0x1700 [ 422.921917][T18028] kmem_cache_alloc_noprof+0xa1/0x600 [ 422.921936][T18028] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 422.921964][T18028] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 422.921983][T18028] ? sctp_get_port_local+0x6bd/0x1700 [ 422.922018][T18028] sctp_get_port_local+0x6bd/0x1700 [ 422.922036][T18028] ? lock_acquire+0x115/0x350 [ 422.922067][T18028] ? __pfx_sctp_get_port_local+0x10/0x10 [ 422.922088][T18028] ? sctp_bind_addr_match+0x30/0x2b0 [ 422.922109][T18028] ? sctp_bind_addr_match+0x28b/0x2b0 [ 422.922140][T18028] sctp_do_bind+0x4d9/0x9a0 [ 422.922166][T18028] sctp_connect_new_asoc+0x270/0x6b0 [ 422.922190][T18028] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 422.922217][T18028] ? __local_bh_enable_ip+0xd6/0x140 [ 422.922240][T18028] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 422.922257][T18028] ? security_sctp_bind_connect+0x7e/0x2c0 [ 422.922285][T18028] sctp_sendmsg+0x159b/0x2d00 [ 422.922320][T18028] ? __pfx_sctp_sendmsg+0x10/0x10 [ 422.922344][T18028] ? __lock_acquire+0x747/0x2de0 [ 422.922379][T18028] ? aa_sock_msg_perm+0xf5/0x210 [ 422.922405][T18028] ? sock_rps_record_flow+0x19/0x350 [ 422.922433][T18028] ? inet_sendmsg+0x298/0x320 [ 422.922460][T18028] ? __pfx_inet_sendmsg+0x10/0x10 [ 422.922484][T18028] sock_sendmsg_nosec+0x10e/0x180 [ 422.922515][T18028] ____sys_sendmsg+0x54e/0x850 [ 422.922542][T18028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.922573][T18028] ? import_iovec+0x73/0xa0 [ 422.922604][T18028] ___sys_sendmsg+0x2a5/0x360 [ 422.922622][T18028] ? __lock_acquire+0x747/0x2de0 [ 422.922647][T18028] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.922678][T18028] ? kstrtouint+0x6e/0xe0 [ 422.922729][T18028] ? __fget_files+0x2a/0x420 [ 422.922746][T18028] ? __fget_files+0x3a2/0x420 [ 422.922774][T18028] __sys_sendmmsg+0x273/0x4d0 [ 422.922801][T18028] ? __pfx___sys_sendmmsg+0x10/0x10 [ 422.922831][T18028] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 422.922873][T18028] ? ksys_write+0x242/0x270 [ 422.922895][T18028] ? __pfx_ksys_write+0x10/0x10 [ 422.922921][T18028] __x64_sys_sendmmsg+0xa0/0xc0 [ 422.922943][T18028] do_syscall_64+0x166/0x520 [ 422.922964][T18028] ? trace_irq_disable+0x3b/0x140 [ 422.922984][T18028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.923010][T18028] ? clear_bhb_loop+0x70/0xc0 [ 422.923030][T18028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.923045][T18028] RIP: 0033:0x7f9646b9e559 [ 422.923063][T18028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.923078][T18028] RSP: 002b:00007f9647ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 422.923098][T18028] RAX: ffffffffffffffda RBX: 00007f9646e25fa0 RCX: 00007f9646b9e559 [ 422.923112][T18028] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 422.923122][T18028] RBP: 00007f9647ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 422.923132][T18028] R10: 0000000020048041 R11: 0000000000000246 R12: 0000000000000001 [ 422.923142][T18028] R13: 00007f9646e26038 R14: 00007f9646e25fa0 R15: 00007fffac371208 [ 422.923168][T18028] [ 423.801634][T18056] netlink: 'syz.2.3706': attribute type 49 has an invalid length. [ 424.056584][T18065] can: request_module (can-proto-0) failed. [ 425.661704][T18027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 426.093618][T18085] FAULT_INJECTION: forcing a failure. [ 426.093618][T18085] name failslab, interval 1, probability 0, space 0, times 0 [ 426.093650][T18085] CPU: 0 UID: 0 PID: 18085 Comm: syz.2.3716 Not tainted syzkaller #0 PREEMPT(full) [ 426.093668][T18085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 426.093678][T18085] Call Trace: [ 426.093685][T18085] [ 426.093692][T18085] dump_stack_lvl+0xe8/0x150 [ 426.093721][T18085] should_fail_ex+0x410/0x560 [ 426.093749][T18085] should_failslab+0xa8/0x100 [ 426.093776][T18085] __kmalloc_cache_noprof+0xa3/0x600 [ 426.093797][T18085] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 426.093852][T18085] ? sctp_association_new+0x89/0x25d0 [ 426.093871][T18085] ? sctp_association_new+0x89/0x25d0 [ 426.093898][T18085] sctp_association_new+0x89/0x25d0 [ 426.093930][T18085] sctp_connect_new_asoc+0x2e4/0x6b0 [ 426.093954][T18085] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 426.093983][T18085] ? __local_bh_enable_ip+0xd6/0x140 [ 426.094007][T18085] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 426.094024][T18085] ? security_sctp_bind_connect+0x7e/0x2c0 [ 426.094053][T18085] sctp_sendmsg+0x159b/0x2d00 [ 426.094089][T18085] ? __pfx_sctp_sendmsg+0x10/0x10 [ 426.094115][T18085] ? __lock_acquire+0x747/0x2de0 [ 426.094157][T18085] ? aa_sock_msg_perm+0xf5/0x210 [ 426.094184][T18085] ? sock_rps_record_flow+0x19/0x350 [ 426.094215][T18085] ? inet_sendmsg+0x298/0x320 [ 426.094251][T18085] ? __pfx_inet_sendmsg+0x10/0x10 [ 426.094276][T18085] sock_sendmsg_nosec+0x10e/0x180 [ 426.094305][T18085] ____sys_sendmsg+0x54e/0x850 [ 426.094332][T18085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.094360][T18085] ? import_iovec+0x73/0xa0 [ 426.094390][T18085] ___sys_sendmsg+0x2a5/0x360 [ 426.094408][T18085] ? __lock_acquire+0x747/0x2de0 [ 426.094434][T18085] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.094461][T18085] ? kstrtouint+0x6e/0xe0 [ 426.094515][T18085] ? __fget_files+0x2a/0x420 [ 426.094533][T18085] ? __fget_files+0x3a2/0x420 [ 426.094562][T18085] __sys_sendmmsg+0x273/0x4d0 [ 426.094590][T18085] ? __pfx___sys_sendmmsg+0x10/0x10 [ 426.094622][T18085] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 426.094663][T18085] ? ksys_write+0x242/0x270 [ 426.094686][T18085] ? __pfx_ksys_write+0x10/0x10 [ 426.094713][T18085] __x64_sys_sendmmsg+0xa0/0xc0 [ 426.094733][T18085] do_syscall_64+0x166/0x520 [ 426.095531][T18085] ? trace_irq_disable+0x3b/0x140 [ 426.095552][T18085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.095571][T18085] ? clear_bhb_loop+0x70/0xc0 [ 426.095597][T18085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.095614][T18085] RIP: 0033:0x7fc7dcb9e559 [ 426.095631][T18085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.095646][T18085] RSP: 002b:00007fc7dda3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 426.095666][T18085] RAX: ffffffffffffffda RBX: 00007fc7dce25fa0 RCX: 00007fc7dcb9e559 [ 426.095679][T18085] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 426.095690][T18085] RBP: 00007fc7dda3b090 R08: 0000000000000000 R09: 0000000000000000 [ 426.095701][T18085] R10: 0000000020048041 R11: 0000000000000246 R12: 0000000000000001 [ 426.095712][T18085] R13: 00007fc7dce26038 R14: 00007fc7dce25fa0 R15: 00007ffcf07ba258 [ 426.095752][T18085] [ 426.417079][T18088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3715'. [ 426.417113][T18088] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 426.664502][T18092] veth1_macvtap: left promiscuous mode [ 426.734069][T18099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3719'. [ 426.734109][T18099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3719'. [ 426.870921][T18102] openvswitch: netlink: Message has 12 unknown bytes. [ 427.025595][T18094] bond2: entered promiscuous mode [ 427.025759][T18094] bond2: entered allmulticast mode [ 427.026250][T18094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.348134][T18115] ip_tables: iptables: counters copy to user failed while replacing table [ 427.962270][ T548] nci: nci_rsp_packet: unknown rsp opcode 0x6 [ 427.994471][T18141] syzkaller0: entered promiscuous mode [ 427.994497][T18141] syzkaller0: entered allmulticast mode [ 428.162852][T18148] syzkaller0: entered promiscuous mode [ 428.162881][T18148] syzkaller0: entered allmulticast mode [ 428.182677][T18148] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3731'. [ 428.261385][T18148] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3731'. [ 428.424214][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3733'. [ 428.424253][T18156] netlink: 'syz.2.3733': attribute type 10 has an invalid length. [ 428.424268][T18156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3733'. [ 428.424576][T18155] openvswitch: netlink: Message has 12 unknown bytes. [ 428.466659][T18156] geneve3: entered promiscuous mode [ 428.466685][T18156] geneve3: entered allmulticast mode [ 428.618398][ T5275] veth1_macvtap: entered promiscuous mode [ 428.701535][T18159] syzkaller0: entered promiscuous mode [ 428.701559][T18159] syzkaller0: entered allmulticast mode [ 428.784875][T18163] openvswitch: netlink: Key type 189 is out of range max 32 [ 428.868556][T18165] netlink: 'syz.3.3736': attribute type 1 has an invalid length. [ 428.868582][T18165] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3736'. [ 428.880644][T18165] netlink: 'syz.3.3736': attribute type 5 has an invalid length. [ 428.943173][T18169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3738'. [ 429.628315][T18188] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 430.742960][T18131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.142104][T18195] openvswitch: netlink: Message has 12 unknown bytes. [ 431.144835][T18199] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 431.145176][T18199] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 431.145488][T18199] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 431.343504][T18201] syzkaller0: entered promiscuous mode [ 431.343529][T18201] syzkaller0: entered allmulticast mode [ 432.336856][T18214] syzkaller0: entered promiscuous mode [ 432.336890][T18214] syzkaller0: entered allmulticast mode [ 432.703671][T18243] net_ratelimit: 30 callbacks suppressed [ 432.703693][T18243] netlink: zone id is out of range [ 432.703703][T18243] netlink: del zone limit has 4 unknown bytes [ 432.705383][T18246] netlink: zone id is out of range [ 432.705403][T18246] netlink: del zone limit has 4 unknown bytes [ 438.906475][T18252] team_slave_1: entered promiscuous mode [ 438.906498][T18252] team_slave_1: entered allmulticast mode [ 439.189168][T18268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3753'. [ 439.596950][T18292] openvswitch: netlink: Key type 2324 is out of range max 32 [ 439.815870][T18304] xt_socket: unknown flags 0x8 [ 439.991764][T18313] tipc: Started in network mode [ 439.991810][T18313] tipc: Node identity ac14140f, cluster identity 4711 [ 439.992179][T18313] tipc: New replicast peer: 255.255.255.255 [ 439.995232][T18313] tipc: Enabled bearer , priority 10 [ 440.007191][T18317] netlink: 'syz.6.3766': attribute type 49 has an invalid length. [ 440.276434][T18326] netlink: 'syz.3.3767': attribute type 30 has an invalid length. [ 440.282273][T18325] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3768'. [ 440.465299][T18333] sit0: entered promiscuous mode [ 440.482825][T18333] netlink: 'syz.6.3770': attribute type 1 has an invalid length. [ 440.482847][T18333] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3770'. [ 440.642487][T18342] openvswitch: netlink: Key type 2324 is out of range max 32 [ 440.742933][T18348] syzkaller0: entered promiscuous mode [ 440.742956][T18348] syzkaller0: entered allmulticast mode [ 440.958948][ T5275] veth1_vlan: left promiscuous mode [ 441.014959][T15789] tipc: Node number set to 2886997007 [ 441.078810][T18362] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 441.488569][T18368] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3781'. [ 441.667895][T18390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3785'. [ 442.005317][T18400] syzkaller0: entered promiscuous mode [ 442.005342][T18400] syzkaller0: entered allmulticast mode [ 442.029140][T18397] syzkaller0: entered promiscuous mode [ 442.029163][T18397] syzkaller0: entered allmulticast mode [ 442.056891][T18402] netlink: 'syz.2.3789': attribute type 1 has an invalid length. [ 442.080499][T18407] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 442.109293][T18408] x_tables: duplicate underflow at hook 1 [ 442.119755][T18408] netlink: 'syz.2.3789': attribute type 10 has an invalid length. [ 442.119780][T18408] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3789'. [ 442.209813][T18402] 8021q: adding VLAN 0 to HW filter on device bond6 [ 442.369055][T18408] dummy0: entered promiscuous mode [ 442.536420][T18426] openvswitch: netlink: Message has 8 unknown bytes. [ 442.612439][T18432] FAULT_INJECTION: forcing a failure. [ 442.612439][T18432] name failslab, interval 1, probability 0, space 0, times 0 [ 442.612481][T18432] CPU: 1 UID: 0 PID: 18432 Comm: syz.2.3799 Not tainted syzkaller #0 PREEMPT(full) [ 442.612501][T18432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 442.612513][T18432] Call Trace: [ 442.612682][T18432] [ 442.612696][T18432] dump_stack_lvl+0xe8/0x150 [ 442.612729][T18432] should_fail_ex+0x410/0x560 [ 442.612763][T18432] should_failslab+0xa8/0x100 [ 442.612792][T18432] __kmalloc_cache_noprof+0xa3/0x600 [ 442.612815][T18432] ? __kmalloc_cache_noprof+0x14d/0x600 [ 442.612836][T18432] ? sctp_add_bind_addr+0x8c/0x370 [ 442.612861][T18432] ? sctp_add_bind_addr+0x8c/0x370 [ 442.612894][T18432] sctp_add_bind_addr+0x8c/0x370 [ 442.612925][T18432] sctp_copy_local_addr_list+0x31a/0x4e0 [ 442.612955][T18432] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 442.612982][T18432] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 442.613005][T18432] ? sctp_v6_is_any+0x64/0x80 [ 442.613028][T18432] ? sctp_copy_one_addr+0x93/0x360 [ 442.613053][T18432] sctp_bind_addr_copy+0xb3/0x3c0 [ 442.613077][T18432] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 442.613102][T18432] sctp_connect_new_asoc+0x2ff/0x6b0 [ 442.613130][T18432] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 442.613159][T18432] ? __local_bh_enable_ip+0xd6/0x140 [ 442.613183][T18432] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 442.613206][T18432] ? security_sctp_bind_connect+0x7e/0x2c0 [ 442.613239][T18432] sctp_sendmsg+0x159b/0x2d00 [ 442.613277][T18432] ? __pfx_sctp_sendmsg+0x10/0x10 [ 442.613304][T18432] ? __lock_acquire+0x747/0x2de0 [ 442.613343][T18432] ? aa_sock_msg_perm+0xf5/0x210 [ 442.613371][T18432] ? sock_rps_record_flow+0x19/0x350 [ 442.613402][T18432] ? inet_sendmsg+0x298/0x320 [ 442.613432][T18432] ? __pfx_inet_sendmsg+0x10/0x10 [ 442.613456][T18432] sock_sendmsg_nosec+0x10e/0x180 [ 442.613486][T18432] ____sys_sendmsg+0x54e/0x850 [ 442.613579][T18432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.613611][T18432] ? import_iovec+0x73/0xa0 [ 442.613645][T18432] ___sys_sendmsg+0x2a5/0x360 [ 442.613666][T18432] ? __lock_acquire+0x747/0x2de0 [ 442.613692][T18432] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.613720][T18432] ? kstrtouint+0x6e/0xe0 [ 442.613774][T18432] ? __fget_files+0x2a/0x420 [ 442.613791][T18432] ? __fget_files+0x3a2/0x420 [ 442.613821][T18432] __sys_sendmmsg+0x273/0x4d0 [ 442.613845][T18432] ? __pfx___sys_sendmmsg+0x10/0x10 [ 442.613871][T18432] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 442.613906][T18432] ? ksys_write+0x242/0x270 [ 442.613928][T18432] ? __pfx_ksys_write+0x10/0x10 [ 442.613954][T18432] __x64_sys_sendmmsg+0xa0/0xc0 [ 442.613976][T18432] do_syscall_64+0x166/0x520 [ 442.613994][T18432] ? trace_irq_disable+0x3b/0x140 [ 442.614152][T18432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.614170][T18432] ? clear_bhb_loop+0x70/0xc0 [ 442.614190][T18432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.614207][T18432] RIP: 0033:0x7fc7dcb9e559 [ 442.614224][T18432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.614237][T18432] RSP: 002b:00007fc7dda3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 442.614254][T18432] RAX: ffffffffffffffda RBX: 00007fc7dce25fa0 RCX: 00007fc7dcb9e559 [ 442.614266][T18432] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 442.614275][T18432] RBP: 00007fc7dda3b090 R08: 0000000000000000 R09: 0000000000000000 [ 442.614285][T18432] R10: 0000000020048041 R11: 0000000000000246 R12: 0000000000000002 [ 442.614296][T18432] R13: 00007fc7dce26038 R14: 00007fc7dce25fa0 R15: 00007ffcf07ba258 [ 442.614327][T18432] [ 443.121300][T18442] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 443.160761][T18440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3801'. [ 443.216288][T11319] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.216656][T11319] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.260602][T15789] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.356310][T18450] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3803'. [ 443.381849][T18451] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 443.495913][T18456] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3804'. [ 443.807596][T18472] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3808'. [ 443.828074][T18476] openvswitch: netlink: Message has 8 unknown bytes. [ 443.901667][T15787] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 444.093551][T18491] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 444.111823][T18489] netlink: 'syz.2.3813': attribute type 1 has an invalid length. [ 444.190803][T15787] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 444.471461][T18499] openvswitch: netlink: Key 22 has unexpected len 12 expected 4 [ 444.792336][T18502] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 444.934190][T18507] netlink: 'syz.0.3818': attribute type 49 has an invalid length. [ 444.937496][T18511] FAULT_INJECTION: forcing a failure. [ 444.937496][T18511] name failslab, interval 1, probability 0, space 0, times 0 [ 444.937532][T18511] CPU: 1 UID: 0 PID: 18511 Comm: syz.6.3821 Not tainted syzkaller #0 PREEMPT(full) [ 444.937555][T18511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 444.937566][T18511] Call Trace: [ 444.937574][T18511] [ 444.937583][T18511] dump_stack_lvl+0xe8/0x150 [ 444.937618][T18511] should_fail_ex+0x410/0x560 [ 444.937651][T18511] should_failslab+0xa8/0x100 [ 444.937681][T18511] __kmalloc_cache_noprof+0xa3/0x600 [ 444.937715][T18511] ? __kmalloc_cache_noprof+0x14d/0x600 [ 444.937737][T18511] ? sctp_add_bind_addr+0x8c/0x370 [ 444.937762][T18511] ? sctp_add_bind_addr+0x8c/0x370 [ 444.937792][T18511] sctp_add_bind_addr+0x8c/0x370 [ 444.937818][T18511] sctp_copy_local_addr_list+0x31a/0x4e0 [ 444.937846][T18511] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 444.937871][T18511] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 444.937898][T18511] ? sctp_v6_is_any+0x64/0x80 [ 444.937925][T18511] ? sctp_copy_one_addr+0x93/0x360 [ 444.937952][T18511] sctp_bind_addr_copy+0xb3/0x3c0 [ 444.937979][T18511] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 444.938003][T18511] sctp_connect_new_asoc+0x2ff/0x6b0 [ 444.938027][T18511] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 444.938052][T18511] ? __local_bh_enable_ip+0xd6/0x140 [ 444.938077][T18511] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 444.938096][T18511] ? security_sctp_bind_connect+0x7e/0x2c0 [ 444.938124][T18511] sctp_sendmsg+0x159b/0x2d00 [ 444.938160][T18511] ? __pfx_sctp_sendmsg+0x10/0x10 [ 444.938186][T18511] ? __lock_acquire+0x747/0x2de0 [ 444.938221][T18511] ? aa_sock_msg_perm+0xf5/0x210 [ 444.938248][T18511] ? sock_rps_record_flow+0x19/0x350 [ 444.938280][T18511] ? inet_sendmsg+0x298/0x320 [ 444.938308][T18511] ? __pfx_inet_sendmsg+0x10/0x10 [ 444.938332][T18511] sock_sendmsg_nosec+0x10e/0x180 [ 444.938363][T18511] ____sys_sendmsg+0x54e/0x850 [ 444.938389][T18511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.938423][T18511] ? import_iovec+0x73/0xa0 [ 444.938454][T18511] ___sys_sendmsg+0x2a5/0x360 [ 444.938494][T18511] ? __lock_acquire+0x747/0x2de0 [ 444.938519][T18511] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.938547][T18511] ? kstrtouint+0x6e/0xe0 [ 444.938597][T18511] ? __fget_files+0x2a/0x420 [ 444.938616][T18511] ? __fget_files+0x3a2/0x420 [ 444.938645][T18511] __sys_sendmmsg+0x273/0x4d0 [ 444.938671][T18511] ? __pfx___sys_sendmmsg+0x10/0x10 [ 444.938699][T18511] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 444.939271][T18511] ? ksys_write+0x242/0x270 [ 444.939292][T18511] ? __pfx_ksys_write+0x10/0x10 [ 444.939314][T18511] __x64_sys_sendmmsg+0xa0/0xc0 [ 444.939337][T18511] do_syscall_64+0x166/0x520 [ 444.939357][T18511] ? trace_irq_disable+0x3b/0x140 [ 444.939376][T18511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.939394][T18511] ? clear_bhb_loop+0x70/0xc0 [ 444.939420][T18511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.939440][T18511] RIP: 0033:0x7f930959e559 [ 444.939459][T18511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.939473][T18511] RSP: 002b:00007f930a52b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 444.939491][T18511] RAX: ffffffffffffffda RBX: 00007f9309825fa0 RCX: 00007f930959e559 [ 444.939503][T18511] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 444.939521][T18511] RBP: 00007f930a52b090 R08: 0000000000000000 R09: 0000000000000000 [ 444.939533][T18511] R10: 0000000020048041 R11: 0000000000000246 R12: 0000000000000002 [ 444.939544][T18511] R13: 00007f9309826038 R14: 00007f9309825fa0 R15: 00007ffc000707b8 [ 444.939574][T18511] [ 445.050437][T18509] __nla_validate_parse: 1 callbacks suppressed [ 445.050462][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3817'. [ 445.168284][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3817'. [ 445.192166][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3817'. [ 445.203831][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3817'. [ 445.208532][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3817'. [ 445.214410][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3817'. [ 445.247126][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3817'. [ 445.250983][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3817'. [ 445.325761][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3817'. [ 445.350969][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3817'. [ 445.639354][T18522] netlink: 'syz.6.3824': attribute type 1 has an invalid length. [ 445.663035][T18525] netlink: 'syz.3.3820': attribute type 1 has an invalid length. [ 445.733024][T18525] 8021q: adding VLAN 0 to HW filter on device bond7 [ 445.735902][T18525] bond6: (slave bond7): making interface the new active one [ 445.736391][T18525] bond6: (slave bond7): Enslaving as an active interface with an up link [ 445.823050][T18531] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 445.827324][T18529] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 446.107224][T18547] netlink: 'syz.3.3832': attribute type 49 has an invalid length. [ 446.205511][T18556] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 446.248578][T18550] sit1: entered promiscuous mode [ 446.248600][T18550] sit1: entered allmulticast mode [ 446.257115][T18557] Bluetooth: hci0: unsupported parameter 5135 [ 446.257137][T18557] Bluetooth: hci0: unsupported parameter 8192 [ 446.257148][T18557] Bluetooth: hci0: unsupported parameter 5135 [ 446.257158][T18557] Bluetooth: hci0: unsupported parameter 8192 [ 446.427743][T18565] syzkaller0: entered promiscuous mode [ 446.427769][T18565] syzkaller0: entered allmulticast mode [ 446.473135][T18569] netlink: 'syz.6.3842': attribute type 12 has an invalid length. [ 446.497625][T18570] ip_tables: iptables: counters copy to user failed while replacing table [ 446.660130][T18570] syzkaller1: entered promiscuous mode [ 446.660155][T18570] syzkaller1: entered allmulticast mode [ 446.903439][T18591] FAULT_INJECTION: forcing a failure. [ 446.903439][T18591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.903470][T18591] CPU: 1 UID: 0 PID: 18591 Comm: syz.6.3847 Not tainted syzkaller #0 PREEMPT(full) [ 446.903490][T18591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 446.903502][T18591] Call Trace: [ 446.903508][T18591] [ 446.903515][T18591] dump_stack_lvl+0xe8/0x150 [ 446.903547][T18591] should_fail_ex+0x410/0x560 [ 446.903578][T18591] _copy_from_user+0x2d/0xb0 [ 446.903609][T18591] ___sys_sendmsg+0x1c6/0x360 [ 446.903629][T18591] ? __lock_acquire+0x747/0x2de0 [ 446.903655][T18591] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.903709][T18591] ? __fget_files+0x2a/0x420 [ 446.903727][T18591] ? __fget_files+0x3a2/0x420 [ 446.903757][T18591] __x64_sys_sendmsg+0x1b1/0x290 [ 446.903781][T18591] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.903823][T18591] do_syscall_64+0x166/0x520 [ 446.903844][T18591] ? trace_irq_disable+0x3b/0x140 [ 446.903862][T18591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.903880][T18591] ? clear_bhb_loop+0x70/0xc0 [ 446.903903][T18591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.903921][T18591] RIP: 0033:0x7f930959e559 [ 446.903938][T18591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.903952][T18591] RSP: 002b:00007f930a52b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.903971][T18591] RAX: ffffffffffffffda RBX: 00007f9309825fa0 RCX: 00007f930959e559 [ 446.903984][T18591] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000008 [ 446.903995][T18591] RBP: 00007f930a52b090 R08: 0000000000000000 R09: 0000000000000000 [ 446.904006][T18591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.904017][T18591] R13: 00007f9309826038 R14: 00007f9309825fa0 R15: 00007ffc000707b8 [ 446.904047][T18591] [ 446.910437][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 447.371685][T18612] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 447.666009][T18629] netlink: 'syz.2.3860': attribute type 11 has an invalid length. [ 447.765686][T18636] netlink: 'syz.6.3865': attribute type 49 has an invalid length. [ 447.924770][T18641] netlink: 'syz.3.3864': attribute type 13 has an invalid length. [ 448.077622][T18659] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 448.088949][T18656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.228170][T18665] syzkaller0: entered promiscuous mode [ 448.228195][T18665] syzkaller0: entered allmulticast mode [ 448.694040][T18696] xt_hashlimit: size too large, truncated to 1048576 [ 448.694055][T18696] xt_hashlimit: max too large, truncated to 1048576 [ 448.694411][T18696] xt_hashlimit: overflow, rate too high: 0 [ 448.896992][T18703] bond2: Invalid ad_actor_system MAC address. [ 448.897014][T18703] bond2: option ad_actor_system: invalid value (1) [ 448.916153][T18703] bond2 (unregistering): Released all slaves [ 449.215980][T18722] No such timeout policy "s" [ 449.216000][T18722] netlink: Failed to associated timeout policy 's' [ 449.235847][T18721] trusted_key: syz.6.3884 sent an empty control message without MSG_MORE. [ 449.735804][T18744] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 450.010852][T18751] netlink: ct family unspecified [ 450.065417][T18756] __nla_validate_parse: 34 callbacks suppressed [ 450.065442][T18756] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3890'. [ 450.067764][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3890'. [ 450.067801][T18756] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3890'. [ 450.117065][T18757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3888'. [ 450.152040][T18756] geneve2: entered promiscuous mode [ 450.152064][T18756] geneve2: entered allmulticast mode [ 450.308634][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3889'. [ 450.479406][T18753] team0: Port device team_slave_0 removed [ 450.504424][T18764] netlink: 'syz.6.3891': attribute type 1 has an invalid length. [ 450.504454][T18764] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3891'. [ 450.777082][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3893'. [ 450.817002][T18774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3893'. [ 451.254422][T18784] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3898'. [ 451.320326][T18789] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 451.482813][T18798] netlink: 'syz.1.3902': attribute type 8 has an invalid length. [ 451.501921][T18791] FAULT_INJECTION: forcing a failure. [ 451.501921][T18791] name failslab, interval 1, probability 0, space 0, times 0 [ 451.501954][T18791] CPU: 1 UID: 0 PID: 18791 Comm: syz.6.3900 Not tainted syzkaller #0 PREEMPT(full) [ 451.501975][T18791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 451.501987][T18791] Call Trace: [ 451.501994][T18791] [ 451.502003][T18791] dump_stack_lvl+0xe8/0x150 [ 451.502054][T18791] should_fail_ex+0x410/0x560 [ 451.502084][T18791] ? __alloc_skb+0x1db/0x7a0 [ 451.502111][T18791] should_failslab+0xa8/0x100 [ 451.502139][T18791] ? __alloc_skb+0x1db/0x7a0 [ 451.502164][T18791] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 451.502187][T18791] ? __alloc_skb+0x18d/0x7a0 [ 451.502215][T18791] ? __alloc_skb+0x1db/0x7a0 [ 451.502249][T18791] __alloc_skb+0x1db/0x7a0 [ 451.502281][T18791] alloc_skb_with_frags+0xc6/0x760 [ 451.502301][T18791] ? __lock_acquire+0x747/0x2de0 [ 451.502329][T18791] sock_alloc_send_pskb+0x878/0x990 [ 451.502359][T18791] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 451.502396][T18791] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 451.502425][T18791] ? dev_get_by_index+0x22/0x2d0 [ 451.502446][T18791] ? dev_get_by_index+0x22/0x2d0 [ 451.502472][T18791] packet_sendmsg+0x338b/0x51a0 [ 451.502506][T18791] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 451.502685][T18791] ? __lock_acquire+0x747/0x2de0 [ 451.502729][T18791] ? lock_acquire+0x115/0x350 [ 451.502752][T18791] ? __lock_acquire+0x747/0x2de0 [ 451.502784][T18791] ? __pfx_packet_sendmsg+0x10/0x10 [ 451.502811][T18791] ? aa_sk_perm+0x713/0x900 [ 451.502836][T18791] ? __lock_acquire+0x747/0x2de0 [ 451.502862][T18791] ? downgrade_write+0x3f0/0x430 [ 451.502890][T18791] ? __pfx_aa_sk_perm+0x10/0x10 [ 451.502920][T18791] ? aa_sock_msg_perm+0x144/0x210 [ 451.502953][T18791] ? apparmor_socket_sendmsg+0x98/0x360 [ 451.502982][T18791] ? __pfx_packet_sendmsg+0x10/0x10 [ 451.503009][T18791] sock_sendmsg_nosec+0x13a/0x180 [ 451.503085][T18791] ____sys_sendmsg+0x54e/0x850 [ 451.503113][T18791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.503144][T18791] ? import_iovec+0x73/0xa0 [ 451.503177][T18791] ___sys_sendmsg+0x2a5/0x360 [ 451.503197][T18791] ? __lock_acquire+0x747/0x2de0 [ 451.503223][T18791] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.503282][T18791] ? __fget_files+0x2a/0x420 [ 451.503300][T18791] ? __fget_files+0x3a2/0x420 [ 451.503329][T18791] __x64_sys_sendmsg+0x1b1/0x290 [ 451.503353][T18791] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.503397][T18791] do_syscall_64+0x166/0x520 [ 451.503419][T18791] ? trace_irq_disable+0x3b/0x140 [ 451.503436][T18791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.503454][T18791] ? clear_bhb_loop+0x70/0xc0 [ 451.503481][T18791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.503499][T18791] RIP: 0033:0x7f930959e559 [ 451.503516][T18791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.506262][T18791] RSP: 002b:00007f930a50a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.506289][T18791] RAX: ffffffffffffffda RBX: 00007f9309826090 RCX: 00007f930959e559 [ 451.506301][T18791] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 451.506312][T18791] RBP: 00007f930a50a090 R08: 0000000000000000 R09: 0000000000000000 [ 451.506321][T18791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.506330][T18791] R13: 00007f9309826128 R14: 00007f9309826090 R15: 00007ffc000707b8 [ 451.506360][T18791] [ 452.355755][T18801] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3903'. [ 452.514909][ T5623] Bluetooth: hci5: command 0x0406 tx timeout [ 452.745412][T18826] netlink: 'syz.6.3905': attribute type 1 has an invalid length. [ 452.767029][T18818] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 452.833653][T18831] No such timeout policy "s" [ 452.833675][T18831] netlink: Failed to associated timeout policy 's' [ 453.268444][T18852] netlink: 'syz.2.3912': attribute type 49 has an invalid length. [ 453.368539][T18859] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 453.387371][T18862] netlink: 'syz.2.3918': attribute type 1 has an invalid length. [ 453.397166][T18861] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 453.633228][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.634868][T18870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.754894][T18877] netlink: 'syz.2.3927': attribute type 1 has an invalid length. [ 453.820635][T18877] 8021q: adding VLAN 0 to HW filter on device bond7 [ 453.948080][T18894] syzkaller0: entered promiscuous mode [ 453.948101][T18894] syzkaller0: entered allmulticast mode [ 453.952360][T18894] FAULT_INJECTION: forcing a failure. [ 453.952360][T18894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.952389][T18894] CPU: 0 UID: 0 PID: 18894 Comm: syz.1.3929 Not tainted syzkaller #0 PREEMPT(full) [ 453.952410][T18894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 453.952421][T18894] Call Trace: [ 453.952428][T18894] [ 453.952436][T18894] dump_stack_lvl+0xe8/0x150 [ 453.952466][T18894] should_fail_ex+0x410/0x560 [ 453.952496][T18894] _copy_to_user+0x31/0xb0 [ 453.952517][T18894] simple_read_from_buffer+0xe1/0x170 [ 453.952551][T18894] proc_fail_nth_read+0x1bb/0x230 [ 453.952571][T18894] ? common_file_perm+0x20e/0x2b0 [ 453.952600][T18894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.952624][T18894] ? rw_verify_area+0x24a/0x4c0 [ 453.952645][T18894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.952665][T18894] vfs_read+0x213/0xa80 [ 453.952689][T18894] ? __pfx___mutex_lock+0x10/0x10 [ 453.952711][T18894] ? __pfx_vfs_read+0x10/0x10 [ 453.952731][T18894] ? __fget_files+0x2a/0x420 [ 453.952753][T18894] ? __fget_files+0x3a2/0x420 [ 453.952769][T18894] ? __fget_files+0x2a/0x420 [ 453.952794][T18894] ksys_read+0x150/0x270 [ 453.952815][T18894] ? __pfx_ksys_read+0x10/0x10 [ 453.952846][T18894] do_syscall_64+0x166/0x520 [ 453.952870][T18894] ? trace_irq_disable+0x3b/0x140 [ 453.952889][T18894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.952907][T18894] ? clear_bhb_loop+0x70/0xc0 [ 453.952928][T18894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.952947][T18894] RIP: 0033:0x7fd674d5ed8e [ 453.952973][T18894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 453.952987][T18894] RSP: 002b:00007fd675c10fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 453.953006][T18894] RAX: ffffffffffffffda RBX: 00007fd675c116c0 RCX: 00007fd674d5ed8e [ 453.953019][T18894] RDX: 000000000000000f RSI: 00007fd675c110a0 RDI: 000000000000000a [ 453.953030][T18894] RBP: 00007fd675c11090 R08: 0000000000000000 R09: 0000000000000000 [ 453.953041][T18894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.953051][T18894] R13: 00007fd675026038 R14: 00007fd675025fa0 R15: 00007ffe7a5568d8 [ 453.953081][T18894] [ 454.222677][T18903] netlink: 'syz.3.3930': attribute type 1 has an invalid length. [ 454.428869][T18912] syzkaller0: entered promiscuous mode [ 454.428903][T18912] syzkaller0: entered allmulticast mode [ 454.919671][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 455.020793][T18946] netlink: 'syz.1.3946': attribute type 1 has an invalid length. [ 455.174382][T18961] __nla_validate_parse: 9 callbacks suppressed [ 455.174404][T18961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3949'. [ 455.469399][T18983] netlink: 'syz.2.3953': attribute type 49 has an invalid length. [ 455.555941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.556035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.573944][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.574010][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.637187][T18992] bond8: (slave bond_slave_0): Device is not our slave [ 455.637210][T18992] bond8: option active_slave: invalid value (bond_slave_0) [ 455.651823][T18980] can: request_module (can-proto-0) failed. [ 455.672860][T18992] bond8 (unregistering): Released all slaves [ 455.736753][T18995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3957'. [ 456.259983][T19020] netlink: 'syz.6.3967': attribute type 49 has an invalid length. [ 456.354339][T19025] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.464215][T19025] netlink: 'syz.1.3969': attribute type 1 has an invalid length. [ 456.548563][T19025] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.586168][T19043] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 456.643034][T19025] netlink: 'syz.1.3969': attribute type 4 has an invalid length. [ 456.709756][T19025] netlink: 'syz.1.3969': attribute type 4 has an invalid length. [ 456.920765][T19056] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3974'. [ 457.028482][T19056] netlink: 'syz.2.3974': attribute type 42 has an invalid length. [ 457.028508][T19056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3974'. [ 457.064940][T19056] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3974'. [ 457.065000][T19056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3974'. [ 457.257543][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3979'. [ 457.296838][T19070] netlink: 'syz.1.3978': attribute type 11 has an invalid length. [ 457.430018][T19070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3978'. [ 457.470154][T19070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3978'. [ 457.634707][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 457.741007][T19089] FAULT_INJECTION: forcing a failure. [ 457.741007][T19089] name failslab, interval 1, probability 0, space 0, times 0 [ 457.741043][T19089] CPU: 0 UID: 0 PID: 19089 Comm: syz.3.3983 Not tainted syzkaller #0 PREEMPT(full) [ 457.741064][T19089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 457.741076][T19089] Call Trace: [ 457.741084][T19089] [ 457.741092][T19089] dump_stack_lvl+0xe8/0x150 [ 457.741125][T19089] should_fail_ex+0x410/0x560 [ 457.741158][T19089] should_failslab+0xa8/0x100 [ 457.741186][T19089] __kmalloc_cache_noprof+0xa3/0x600 [ 457.741209][T19089] ? __kmalloc_cache_noprof+0x14d/0x600 [ 457.741229][T19089] ? sctp_add_bind_addr+0x8c/0x370 [ 457.741253][T19089] ? sctp_add_bind_addr+0x8c/0x370 [ 457.741284][T19089] sctp_add_bind_addr+0x8c/0x370 [ 457.741314][T19089] sctp_copy_local_addr_list+0x31a/0x4e0 [ 457.741341][T19089] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 457.741366][T19089] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 457.741392][T19089] ? sctp_v6_is_any+0x64/0x80 [ 457.741418][T19089] ? sctp_copy_one_addr+0x93/0x360 [ 457.741443][T19089] sctp_bind_addr_copy+0xb3/0x3c0 [ 457.741467][T19089] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 457.741493][T19089] sctp_connect_new_asoc+0x2ff/0x6b0 [ 457.741516][T19089] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 457.741542][T19089] ? __local_bh_enable_ip+0xd6/0x140 [ 457.741564][T19089] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 457.741581][T19089] ? security_sctp_bind_connect+0x7e/0x2c0 [ 457.741607][T19089] sctp_sendmsg+0x159b/0x2d00 [ 457.741640][T19089] ? __pfx_sctp_sendmsg+0x10/0x10 [ 457.741668][T19089] ? __lock_acquire+0x747/0x2de0 [ 457.741702][T19089] ? aa_sock_msg_perm+0xf5/0x210 [ 457.741726][T19089] ? sock_rps_record_flow+0x19/0x350 [ 457.741753][T19089] ? inet_sendmsg+0x298/0x320 [ 457.741780][T19089] ? __pfx_inet_sendmsg+0x10/0x10 [ 457.741803][T19089] sock_sendmsg_nosec+0x10e/0x180 [ 457.741831][T19089] ____sys_sendmsg+0x54e/0x850 [ 457.741858][T19089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.741932][T19089] ? import_iovec+0x73/0xa0 [ 457.741964][T19089] ___sys_sendmsg+0x2a5/0x360 [ 457.741983][T19089] ? __lock_acquire+0x747/0x2de0 [ 457.742008][T19089] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.742034][T19089] ? kstrtouint+0x6e/0xe0 [ 457.742085][T19089] ? __fget_files+0x2a/0x420 [ 457.742102][T19089] ? __fget_files+0x3a2/0x420 [ 457.742129][T19089] __sys_sendmmsg+0x273/0x4d0 [ 457.742156][T19089] ? __pfx___sys_sendmmsg+0x10/0x10 [ 457.742186][T19089] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 457.742225][T19089] ? ksys_write+0x242/0x270 [ 457.742248][T19089] ? __pfx_ksys_write+0x10/0x10 [ 457.742275][T19089] __x64_sys_sendmmsg+0xa0/0xc0 [ 457.742298][T19089] do_syscall_64+0x166/0x520 [ 457.742325][T19089] ? trace_irq_disable+0x3b/0x140 [ 457.742347][T19089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.742365][T19089] ? clear_bhb_loop+0x70/0xc0 [ 457.742694][T19089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.742714][T19089] RIP: 0033:0x7f9646b9e559 [ 457.742732][T19089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.742749][T19089] RSP: 002b:00007f9647ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 457.742769][T19089] RAX: ffffffffffffffda RBX: 00007f9646e25fa0 RCX: 00007f9646b9e559 [ 457.742783][T19089] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 457.742795][T19089] RBP: 00007f9647ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 457.742807][T19089] R10: 0000000020048041 R11: 0000000000000246 R12: 0000000000000002 [ 457.742818][T19089] R13: 00007f9646e26038 R14: 00007f9646e25fa0 R15: 00007fffac371208 [ 457.742851][T19089] [ 458.198481][T19100] netlink: 'syz.2.3987': attribute type 1 has an invalid length. [ 458.256442][T19104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3987'. [ 458.313898][T19105] net_ratelimit: 4 callbacks suppressed [ 458.313917][T19105] ip_tables: iptables: counters copy to user failed while replacing table [ 458.334668][T19105] netlink: 'syz.0.3988': attribute type 4 has an invalid length. [ 458.579889][T19100] bond8: (slave bridge1): making interface the new active one [ 458.583742][T19100] bond8: (slave bridge1): Enslaving as an active interface with an up link [ 458.734067][T19128] bond8: (slave bridge2): Enslaving as a backup interface with an up link [ 458.756395][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.756473][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.866944][T19133] xt_IDLETIMER: timeout value is too big [ 459.085576][T19145] syzkaller0: entered promiscuous mode [ 459.085601][T19145] syzkaller0: entered allmulticast mode [ 459.183999][T19152] syz.2.3995: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 459.184105][T19152] CPU: 0 UID: 0 PID: 19152 Comm: syz.2.3995 Not tainted syzkaller #0 PREEMPT(full) [ 459.184128][T19152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 459.184139][T19152] Call Trace: [ 459.184148][T19152] [ 459.184157][T19152] dump_stack_lvl+0xe8/0x150 [ 459.184192][T19152] warn_alloc+0x24d/0x270 [ 459.184217][T19152] ? kasan_save_track+0x4f/0x80 [ 459.184238][T19152] ? kasan_save_track+0x3e/0x80 [ 459.184693][T19152] ? __pfx_warn_alloc+0x10/0x10 [ 459.184814][T19152] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 459.184836][T19152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.184878][T19152] __vmalloc_node_range_noprof+0x127/0x1540 [ 459.184952][T19152] ? rcu_is_watching+0x16/0xb0 [ 459.184981][T19152] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 459.185000][T19152] ? __kmalloc_cache_noprof+0x321/0x600 [ 459.185022][T19152] ? __kmalloc_cache_noprof+0x14d/0x600 [ 459.185042][T19152] ? xskq_create+0x56/0x220 [ 459.185066][T19152] xskq_create+0x148/0x220 [ 459.185087][T19152] ? xsk_init_queue+0x8a/0xe0 [ 459.185110][T19152] xsk_init_queue+0x8a/0xe0 [ 459.185133][T19152] xsk_setsockopt+0x52a/0x960 [ 459.185167][T19152] ? __pfx_xsk_setsockopt+0x10/0x10 [ 459.185197][T19152] ? __pfx_aa_sk_perm+0x10/0x10 [ 459.185230][T19152] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 459.185258][T19152] ? __pfx_xsk_setsockopt+0x10/0x10 [ 459.185288][T19152] do_sock_setsockopt+0x17c/0x1b0 [ 459.185312][T19152] __x64_sys_setsockopt+0x13d/0x1b0 [ 459.185339][T19152] do_syscall_64+0x166/0x520 [ 459.185362][T19152] ? trace_irq_disable+0x3b/0x140 [ 459.185384][T19152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.185400][T19152] ? clear_bhb_loop+0x70/0xc0 [ 459.185423][T19152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.185442][T19152] RIP: 0033:0x7fc7dcb9e559 [ 459.185460][T19152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.185476][T19152] RSP: 002b:00007fc7dda3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 459.185496][T19152] RAX: ffffffffffffffda RBX: 00007fc7dce25fa0 RCX: 00007fc7dcb9e559 [ 459.185511][T19152] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 459.185523][T19152] RBP: 00007fc7dcc35ab8 R08: 0000000000000004 R09: 0000000000000000 [ 459.185535][T19152] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.185548][T19152] R13: 00007fc7dce26038 R14: 00007fc7dce25fa0 R15: 00007ffcf07ba258 [ 459.185580][T19152] [ 459.193710][T19152] Mem-Info: [ 459.193727][T19152] active_anon:6287 inactive_anon:0 isolated_anon:0 [ 459.193727][T19152] active_file:0 inactive_file:43758 isolated_file:0 [ 459.193727][T19152] unevictable:0 dirty:45 writeback:0 [ 459.193727][T19152] slab_reclaimable:12244 slab_unreclaimable:125075 [ 459.193727][T19152] mapped:40073 shmem:529 pagetables:3656 [ 459.193727][T19152] sec_pagetables:0 bounce:0 [ 459.193727][T19152] kernel_misc_reclaimable:0 [ 459.193727][T19152] free:1266051 free_pcp:9792 free_cma:0 [ 459.193779][T19152] Node 0 active_anon:25148kB inactive_anon:0kB active_file:0kB inactive_file:174832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160292kB dirty:180kB writeback:0kB shmem:2116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16752kB pagetables:14480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 459.193829][T19152] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 459.193885][T19152] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 459.194045][T19152] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 459.194081][T19152] Node 0 DMA32 free:1119260kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25148kB inactive_anon:0kB active_file:0kB inactive_file:174832kB unevictable:0kB writepending:180kB zspages:0kB present:3129332kB managed:2527500kB mlocked:0kB bounce:0kB free_pcp:39168kB local_pcp:18924kB free_cma:0kB [ 459.194137][T19152] lowmem_reserve[]: 0 0 0 0 0 [ 459.194184][T19152] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 459.194234][T19152] lowmem_reserve[]: 0 0 0 0 0 [ 459.194265][T19152] Node 1 Normal free:3929584kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 459.194317][T19152] lowmem_reserve[]: 0 0 0 0 0 [ 459.194349][T19152] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 459.194462][T19152] Node 0 DMA32: 125*4kB (UME) 1063*8kB (UME) 943*16kB (UME) 560*32kB (UME) 674*64kB (UM) 557*128kB (UME) 407*256kB (UM) 267*512kB (UME) 143*1024kB (UM) 11*2048kB (UME) 135*4096kB (M) = 1119260kB [ 459.194608][T19152] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 459.194700][T19152] Node 1 Normal: 2*4kB (M) 3*8kB (UM) 5*16kB (UM) 6*32kB (UM) 7*64kB (UM) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 958*4096kB (M) = 3929584kB [ 459.196065][T19152] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.196081][T19152] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 459.196096][T19152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.196111][T19152] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 459.196125][T19152] 44283 total pagecache pages [ 459.196143][T19152] 0 pages in swap cache [ 459.196150][T19152] Free swap = 124996kB [ 459.196157][T19152] Total swap = 124996kB [ 459.196165][T19152] 2097051 pages RAM [ 459.196172][T19152] 0 pages HighMem/MovableOnly [ 459.196179][T19152] 433560 pages reserved [ 459.196185][T19152] 0 pages cma reserved [ 459.637081][T19155] FAULT_INJECTION: forcing a failure. [ 459.637081][T19155] name failslab, interval 1, probability 0, space 0, times 0 [ 459.637156][T19155] CPU: 0 UID: 0 PID: 19155 Comm: syz.3.3996 Not tainted syzkaller #0 PREEMPT(full) [ 459.637176][T19155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 459.637187][T19155] Call Trace: [ 459.637195][T19155] [ 459.637203][T19155] dump_stack_lvl+0xe8/0x150 [ 459.637234][T19155] should_fail_ex+0x410/0x560 [ 459.637265][T19155] should_failslab+0xa8/0x100 [ 459.637293][T19155] __kmalloc_cache_noprof+0xa3/0x600 [ 459.637315][T19155] ? __kmalloc_cache_noprof+0x14d/0x600 [ 459.637334][T19155] ? sctp_add_bind_addr+0x8c/0x370 [ 459.637358][T19155] ? sctp_add_bind_addr+0x8c/0x370 [ 459.637388][T19155] sctp_add_bind_addr+0x8c/0x370 [ 459.637417][T19155] sctp_copy_local_addr_list+0x31a/0x4e0 [ 459.637444][T19155] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 459.637469][T19155] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 459.637495][T19155] ? sctp_v6_is_any+0x64/0x80 [ 459.637523][T19155] ? sctp_copy_one_addr+0x93/0x360 [ 459.637551][T19155] sctp_bind_addr_copy+0xb3/0x3c0 [ 459.637575][T19155] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 459.637601][T19155] sctp_connect_new_asoc+0x2ff/0x6b0 [ 459.637623][T19155] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 459.637652][T19155] ? __local_bh_enable_ip+0xd6/0x140 [ 459.637684][T19155] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 459.637701][T19155] ? security_sctp_bind_connect+0x7e/0x2c0 [ 459.637730][T19155] sctp_sendmsg+0x159b/0x2d00 [ 459.637766][T19155] ? __pfx_sctp_sendmsg+0x10/0x10 [ 459.637790][T19155] ? __lock_acquire+0x747/0x2de0 [ 459.637830][T19155] ? aa_sock_msg_perm+0xf5/0x210 [ 459.637856][T19155] ? sock_rps_record_flow+0x19/0x350 [ 459.637886][T19155] ? inet_sendmsg+0x298/0x320 [ 459.637913][T19155] ? __pfx_inet_sendmsg+0x10/0x10 [ 459.637937][T19155] sock_sendmsg_nosec+0x10e/0x180 [ 459.637965][T19155] ____sys_sendmsg+0x54e/0x850 [ 459.637991][T19155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.638021][T19155] ? import_iovec+0x73/0xa0 [ 459.638052][T19155] ___sys_sendmsg+0x2a5/0x360 [ 459.638071][T19155] ? __lock_acquire+0x747/0x2de0 [ 459.638095][T19155] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.638121][T19155] ? kstrtouint+0x6e/0xe0 [ 459.638168][T19155] ? __fget_files+0x2a/0x420 [ 459.638185][T19155] ? __fget_files+0x3a2/0x420 [ 459.638213][T19155] __sys_sendmmsg+0x273/0x4d0 [ 459.638239][T19155] ? __pfx___sys_sendmmsg+0x10/0x10 [ 459.638268][T19155] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 459.638306][T19155] ? ksys_write+0x242/0x270 [ 459.638328][T19155] ? __pfx_ksys_write+0x10/0x10 [ 459.638358][T19155] __x64_sys_sendmmsg+0xa0/0xc0 [ 459.638381][T19155] do_syscall_64+0x166/0x520 [ 459.638411][T19155] ? trace_irq_disable+0x3b/0x140 [ 459.638431][T19155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.638451][T19155] ? clear_bhb_loop+0x70/0xc0 [ 459.638474][T19155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.638493][T19155] RIP: 0033:0x7f9646b9e559 [ 459.638512][T19155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.638528][T19155] RSP: 002b:00007f9647ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 459.638548][T19155] RAX: ffffffffffffffda RBX: 00007f9646e25fa0 RCX: 00007f9646b9e559 [ 459.638562][T19155] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 459.638573][T19155] RBP: 00007f9647ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 459.638585][T19155] R10: 0000000020048041 R11: 0000000000000246 R12: 0000000000000002 [ 459.638597][T19155] R13: 00007f9646e26038 R14: 00007f9646e25fa0 R15: 00007fffac371208 [ 459.638628][T19155] [ 459.952218][ T5625] Bluetooth: hci3: command 0x0405 tx timeout [ 460.010125][T19160] netlink: 'syz.6.3997': attribute type 2 has an invalid length. [ 460.058576][T19160] netlink: 'syz.6.3997': attribute type 2 has an invalid length. [ 460.229851][T19162] __nla_validate_parse: 4 callbacks suppressed [ 460.229873][T19162] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3997'. [ 460.293883][T19167] netlink: 'syz.6.3997': attribute type 2 has an invalid length. [ 460.293908][T19167] netlink: 'syz.6.3997': attribute type 2 has an invalid length. [ 460.332153][T19165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.343684][T19162] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3997'. [ 460.998925][T19185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4005'. [ 461.583869][T19211] xt_hashlimit: size too large, truncated to 1048576 [ 461.658828][T19210] validate_nla: 2 callbacks suppressed [ 461.658850][T19210] netlink: 'syz.0.4008': attribute type 2 has an invalid length. [ 461.760640][T19217] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4011'. [ 461.801297][T19220] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4012'. [ 461.919800][T19220] netlink: 'syz.6.4012': attribute type 2 has an invalid length. [ 462.067321][T19230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4013'. [ 462.067544][T19229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4013'. [ 462.403917][T19236] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4015'. [ 462.407738][T19220] : entered promiscuous mode [ 462.412205][T19224] netlink: 'syz.2.4013': attribute type 14 has an invalid length. [ 462.922124][T19254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.045606][T19254] veth3: entered allmulticast mode [ 463.165045][T19265] syzkaller0: entered promiscuous mode [ 463.165070][T19265] syzkaller0: entered allmulticast mode [ 463.192882][T19266] FAULT_INJECTION: forcing a failure. [ 463.192882][T19266] name failslab, interval 1, probability 0, space 0, times 0 [ 463.192913][T19266] CPU: 1 UID: 0 PID: 19266 Comm: syz.2.4023 Not tainted syzkaller #0 PREEMPT(full) [ 463.192932][T19266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 463.192944][T19266] Call Trace: [ 463.192952][T19266] [ 463.192961][T19266] dump_stack_lvl+0xe8/0x150 [ 463.192993][T19266] should_fail_ex+0x410/0x560 [ 463.193022][T19266] should_failslab+0xa8/0x100 [ 463.193053][T19266] __kmalloc_cache_noprof+0xa3/0x600 [ 463.193075][T19266] ? __kmalloc_cache_noprof+0x14d/0x600 [ 463.193093][T19266] ? sctp_add_bind_addr+0x8c/0x370 [ 463.193114][T19266] ? sctp_add_bind_addr+0x8c/0x370 [ 463.193141][T19266] sctp_add_bind_addr+0x8c/0x370 [ 463.193168][T19266] sctp_copy_local_addr_list+0x31a/0x4e0 [ 463.193196][T19266] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 463.193220][T19266] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 463.193244][T19266] ? sctp_v6_is_any+0x64/0x80 [ 463.193270][T19266] ? sctp_copy_one_addr+0x93/0x360 [ 463.193308][T19266] sctp_bind_addr_copy+0xb3/0x3c0 [ 463.193335][T19266] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 463.193360][T19266] sctp_connect_new_asoc+0x2ff/0x6b0 [ 463.193383][T19266] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 463.193409][T19266] ? __local_bh_enable_ip+0xd6/0x140 [ 463.193429][T19266] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 463.193446][T19266] ? security_sctp_bind_connect+0x7e/0x2c0 [ 463.193471][T19266] sctp_sendmsg+0x159b/0x2d00 [ 463.193504][T19266] ? __pfx_sctp_sendmsg+0x10/0x10 [ 463.193527][T19266] ? __lock_acquire+0x747/0x2de0 [ 463.193562][T19266] ? aa_sock_msg_perm+0xf5/0x210 [ 463.193588][T19266] ? sock_rps_record_flow+0x19/0x350 [ 463.193617][T19266] ? inet_sendmsg+0x298/0x320 [ 463.193644][T19266] ? __pfx_inet_sendmsg+0x10/0x10 [ 463.193668][T19266] sock_sendmsg_nosec+0x10e/0x180 [ 463.193697][T19266] ____sys_sendmsg+0x54e/0x850 [ 463.193722][T19266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.193750][T19266] ? import_iovec+0x73/0xa0 [ 463.193779][T19266] ___sys_sendmsg+0x2a5/0x360 [ 463.193798][T19266] ? __lock_acquire+0x747/0x2de0 [ 463.193818][T19266] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.193839][T19266] ? kstrtouint+0x6e/0xe0 [ 463.193882][T19266] ? __fget_files+0x2a/0x420 [ 463.193900][T19266] ? __fget_files+0x3a2/0x420 [ 463.193927][T19266] __sys_sendmmsg+0x273/0x4d0 [ 463.193953][T19266] ? __pfx___sys_sendmmsg+0x10/0x10 [ 463.193984][T19266] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 463.194021][T19266] ? ksys_write+0x242/0x270 [ 463.194042][T19266] ? __pfx_ksys_write+0x10/0x10 [ 463.194069][T19266] __x64_sys_sendmmsg+0xa0/0xc0 [ 463.194093][T19266] do_syscall_64+0x166/0x520 [ 463.194113][T19266] ? trace_irq_disable+0x3b/0x140 [ 463.194131][T19266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.194151][T19266] ? clear_bhb_loop+0x70/0xc0 [ 463.194172][T19266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.194191][T19266] RIP: 0033:0x7fc7dcb9e559 [ 463.194209][T19266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.194225][T19266] RSP: 002b:00007fc7dda3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 463.194246][T19266] RAX: ffffffffffffffda RBX: 00007fc7dce25fa0 RCX: 00007fc7dcb9e559 [ 463.194260][T19266] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 463.194272][T19266] RBP: 00007fc7dda3b090 R08: 0000000000000000 R09: 0000000000000000 [ 463.194284][T19266] R10: 0000000020048041 R11: 0000000000000246 R12: 0000000000000002 [ 463.194305][T19266] R13: 00007fc7dce26038 R14: 00007fc7dce25fa0 R15: 00007ffcf07ba258 [ 463.194338][T19266] [ 463.196547][T19265] tipc: Started in network mode [ 463.196573][T19265] tipc: Node identity ae99fa730d6, cluster identity 4711 [ 463.198915][T19265] tipc: Enabled bearer , priority 0 [ 463.401116][T19264] tipc: Resetting bearer [ 463.733706][T19264] tipc: Disabling bearer [ 463.735375][T19279] Bluetooth: MGMT ver 1.23 [ 463.748661][T19280] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 464.996632][T19322] openvswitch: netlink: Message has 8 unknown bytes. [ 465.163005][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4042'. [ 465.353262][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4042'. [ 465.353296][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4042'. [ 465.424776][T19357] Bluetooth: MGMT ver 1.23 [ 465.424854][T19353] netlink: 'syz.0.4043': attribute type 1 has an invalid length. [ 465.444984][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4043'. [ 465.808107][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 465.808175][ T5623] Bluetooth: hci5: Opcode 0x0c3a failed: -110 [ 465.947521][T19372] FAULT_INJECTION: forcing a failure. [ 465.947521][T19372] name failslab, interval 1, probability 0, space 0, times 0 [ 465.947562][T19372] CPU: 0 UID: 0 PID: 19372 Comm: syz.0.4047 Not tainted syzkaller #0 PREEMPT(full) [ 465.947582][T19372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 465.947593][T19372] Call Trace: [ 465.947601][T19372] [ 465.947609][T19372] dump_stack_lvl+0xe8/0x150 [ 465.947639][T19372] should_fail_ex+0x410/0x560 [ 465.947670][T19372] should_failslab+0xa8/0x100 [ 465.947697][T19372] __kmalloc_cache_noprof+0xa3/0x600 [ 465.947720][T19372] ? __kmalloc_cache_noprof+0x14d/0x600 [ 465.947739][T19372] ? sctp_add_bind_addr+0x8c/0x370 [ 465.947763][T19372] ? sctp_add_bind_addr+0x8c/0x370 [ 465.947785][T19372] sctp_add_bind_addr+0x8c/0x370 [ 465.947800][T19372] sctp_copy_local_addr_list+0x31a/0x4e0 [ 465.947821][T19372] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 465.947835][T19372] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 465.947850][T19372] ? sctp_v6_is_any+0x64/0x80 [ 465.947867][T19372] ? sctp_copy_one_addr+0x93/0x360 [ 465.947882][T19372] sctp_bind_addr_copy+0xb3/0x3c0 [ 465.947900][T19372] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 465.947915][T19372] sctp_connect_new_asoc+0x2ff/0x6b0 [ 465.947928][T19372] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 465.947942][T19372] ? __local_bh_enable_ip+0xd6/0x140 [ 465.947957][T19372] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 465.947971][T19372] ? security_sctp_bind_connect+0x7e/0x2c0 [ 465.948051][T19372] sctp_sendmsg+0x159b/0x2d00 [ 465.948079][T19372] ? __pfx_sctp_sendmsg+0x10/0x10 [ 465.948100][T19372] ? __lock_acquire+0x747/0x2de0 [ 465.948124][T19372] ? aa_sock_msg_perm+0xf5/0x210 [ 465.948139][T19372] ? sock_rps_record_flow+0x19/0x350 [ 465.948156][T19372] ? inet_sendmsg+0x298/0x320 [ 465.948170][T19372] ? __pfx_inet_sendmsg+0x10/0x10 [ 465.948183][T19372] sock_sendmsg_nosec+0x10e/0x180 [ 465.948199][T19372] ____sys_sendmsg+0x54e/0x850 [ 465.948214][T19372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.948230][T19372] ? import_iovec+0x73/0xa0 [ 465.948248][T19372] ___sys_sendmsg+0x2a5/0x360 [ 465.948258][T19372] ? __lock_acquire+0x747/0x2de0 [ 465.948272][T19372] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.948286][T19372] ? kstrtouint+0x6e/0xe0 [ 465.948313][T19372] ? __fget_files+0x2a/0x420 [ 465.948323][T19372] ? __fget_files+0x3a2/0x420 [ 465.948339][T19372] __sys_sendmmsg+0x273/0x4d0 [ 465.948353][T19372] ? __pfx___sys_sendmmsg+0x10/0x10 [ 465.948370][T19372] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 465.948403][T19372] ? ksys_write+0x242/0x270 [ 465.948416][T19372] ? __pfx_ksys_write+0x10/0x10 [ 465.948431][T19372] __x64_sys_sendmmsg+0xa0/0xc0 [ 465.948443][T19372] do_syscall_64+0x166/0x520 [ 465.948455][T19372] ? trace_irq_disable+0x3b/0x140 [ 465.948467][T19372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.948478][T19372] ? clear_bhb_loop+0x70/0xc0 [ 465.948491][T19372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.948501][T19372] RIP: 0033:0x7f7c0c99e559 [ 465.948514][T19372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.948525][T19372] RSP: 002b:00007f7c0d940028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 465.948546][T19372] RAX: ffffffffffffffda RBX: 00007f7c0cc25fa0 RCX: 00007f7c0c99e559 [ 465.948554][T19372] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 465.948561][T19372] RBP: 00007f7c0d940090 R08: 0000000000000000 R09: 0000000000000000 [ 465.948568][T19372] R10: 0000000020048041 R11: 0000000000000246 R12: 0000000000000002 [ 465.948575][T19372] R13: 00007f7c0cc26038 R14: 00007f7c0cc25fa0 R15: 00007fff30510c78 [ 465.948592][T19372] [ 466.711816][T19389] netlink: 'syz.0.4049': attribute type 1 has an invalid length. [ 466.816227][T19391] 8021q: adding VLAN 0 to HW filter on device bond6 [ 466.829394][T19391] bond5: (slave bond6): making interface the new active one [ 466.844267][T19391] bond5: (slave bond6): Enslaving as an active interface with an up link [ 467.035804][T19397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4050'. [ 467.825954][T19322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.216653][T19405] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 468.246928][T19404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.248852][T19404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.249159][T19404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.298019][T19403] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4051'. [ 468.328319][T19410] netlink: 'syz.0.4054': attribute type 1 has an invalid length. [ 468.351256][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.382123][T19413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.382409][T19413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.528802][T19410] bond7: entered promiscuous mode [ 468.543640][T19410] 8021q: adding VLAN 0 to HW filter on device bond7 [ 468.576465][T19421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4056'. [ 468.635265][T19414] ipvlan2: entered allmulticast mode [ 468.635288][T19414] bond7: entered allmulticast mode [ 468.652685][T19414] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 468.652712][T19414] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 468.652727][T19414] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 468.784733][T19428] FAULT_INJECTION: forcing a failure. [ 468.784733][T19428] name failslab, interval 1, probability 0, space 0, times 0 [ 468.784771][T19428] CPU: 1 UID: 0 PID: 19428 Comm: syz.6.4059 Not tainted syzkaller #0 PREEMPT(full) [ 468.784813][T19428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 468.784831][T19428] Call Trace: [ 468.784839][T19428] [ 468.784848][T19428] dump_stack_lvl+0xe8/0x150 [ 468.784879][T19428] should_fail_ex+0x410/0x560 [ 468.784905][T19428] should_failslab+0xa8/0x100 [ 468.784929][T19428] __kmalloc_cache_noprof+0xa3/0x600 [ 468.784947][T19428] ? __kmalloc_cache_noprof+0x14d/0x600 [ 468.784963][T19428] ? sctp_add_bind_addr+0x8c/0x370 [ 468.784983][T19428] ? sctp_add_bind_addr+0x8c/0x370 [ 468.785008][T19428] sctp_add_bind_addr+0x8c/0x370 [ 468.785031][T19428] sctp_copy_local_addr_list+0x31a/0x4e0 [ 468.785054][T19428] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 468.785074][T19428] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 468.785096][T19428] ? sctp_v6_is_any+0x64/0x80 [ 468.785119][T19428] ? sctp_copy_one_addr+0x93/0x360 [ 468.785142][T19428] sctp_bind_addr_copy+0xb3/0x3c0 [ 468.785163][T19428] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 468.785184][T19428] sctp_connect_new_asoc+0x2ff/0x6b0 [ 468.785203][T19428] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 468.785233][T19428] ? __local_bh_enable_ip+0xd6/0x140 [ 468.785254][T19428] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 468.785271][T19428] ? security_sctp_bind_connect+0x7e/0x2c0 [ 468.785295][T19428] sctp_sendmsg+0x159b/0x2d00 [ 468.785322][T19428] ? __pfx_sctp_sendmsg+0x10/0x10 [ 468.785341][T19428] ? __lock_acquire+0x747/0x2de0 [ 468.785369][T19428] ? aa_sock_msg_perm+0xf5/0x210 [ 468.785391][T19428] ? sock_rps_record_flow+0x19/0x350 [ 468.785415][T19428] ? inet_sendmsg+0x298/0x320 [ 468.785440][T19428] ? __pfx_inet_sendmsg+0x10/0x10 [ 468.785459][T19428] sock_sendmsg_nosec+0x10e/0x180 [ 468.785482][T19428] ____sys_sendmsg+0x54e/0x850 [ 468.785504][T19428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.785527][T19428] ? import_iovec+0x73/0xa0 [ 468.785553][T19428] ___sys_sendmsg+0x2a5/0x360 [ 468.785568][T19428] ? __lock_acquire+0x747/0x2de0 [ 468.785587][T19428] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.785608][T19428] ? kstrtouint+0x6e/0xe0 [ 468.785647][T19428] ? __fget_files+0x2a/0x420 [ 468.785661][T19428] ? __fget_files+0x3a2/0x420 [ 468.785683][T19428] __sys_sendmmsg+0x273/0x4d0 [ 468.785704][T19428] ? __pfx___sys_sendmmsg+0x10/0x10 [ 468.785728][T19428] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 468.785759][T19428] ? ksys_write+0x242/0x270 [ 468.785777][T19428] ? __pfx_ksys_write+0x10/0x10 [ 468.785798][T19428] __x64_sys_sendmmsg+0xa0/0xc0 [ 468.785816][T19428] do_syscall_64+0x166/0x520 [ 468.785833][T19428] ? trace_irq_disable+0x3b/0x140 [ 468.785850][T19428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.785865][T19428] ? clear_bhb_loop+0x70/0xc0 [ 468.785883][T19428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.785898][T19428] RIP: 0033:0x7f930959e559 [ 468.785914][T19428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.785928][T19428] RSP: 002b:00007f930a52b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 468.785947][T19428] RAX: ffffffffffffffda RBX: 00007f9309825fa0 RCX: 00007f930959e559 [ 468.785959][T19428] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 468.785969][T19428] RBP: 00007f930a52b090 R08: 0000000000000000 R09: 0000000000000000 [ 468.785980][T19428] R10: 0000000020048041 R11: 0000000000000246 R12: 0000000000000002 [ 468.785990][T19428] R13: 00007f9309826038 R14: 00007f9309825fa0 R15: 00007ffc000707b8 [ 468.786031][T19428] [ 468.798687][T19414] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 469.001477][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.531968][T19422] syzkaller0: entered promiscuous mode [ 469.531996][T19422] syzkaller0: entered allmulticast mode [ 470.138737][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4064'. [ 470.292377][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 473.009989][ T5624] Bluetooth: hci6: command 0x0406 tx timeout [ 476.655230][T19466] xt_MASQUERADE: bad rangesize 2147483646 [ 476.866943][T19471] netlink: 'syz.2.4068': attribute type 12 has an invalid length. [ 476.866967][T19471] netlink: 'syz.2.4068': attribute type 29 has an invalid length. [ 476.866979][T19471] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4068'. [ 476.866995][T19471] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4068'. [ 477.044235][T19480] FAULT_INJECTION: forcing a failure. [ 477.044235][T19480] name failslab, interval 1, probability 0, space 0, times 0 [ 477.044271][T19480] CPU: 0 UID: 0 PID: 19480 Comm: syz.0.4070 Not tainted syzkaller #0 PREEMPT(full) [ 477.044293][T19480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 477.044305][T19480] Call Trace: [ 477.044313][T19480] [ 477.044322][T19480] dump_stack_lvl+0xe8/0x150 [ 477.044367][T19480] should_fail_ex+0x410/0x560 [ 477.044400][T19480] should_failslab+0xa8/0x100 [ 477.044429][T19480] __kmalloc_cache_noprof+0xa3/0x600 [ 477.044452][T19480] ? __kmalloc_cache_noprof+0x14d/0x600 [ 477.044471][T19480] ? sctp_add_bind_addr+0x8c/0x370 [ 477.044496][T19480] ? sctp_add_bind_addr+0x8c/0x370 [ 477.044527][T19480] sctp_add_bind_addr+0x8c/0x370 [ 477.044557][T19480] sctp_copy_local_addr_list+0x31a/0x4e0 [ 477.044584][T19480] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 477.044611][T19480] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 477.044636][T19480] ? sctp_v6_is_any+0x64/0x80 [ 477.044666][T19480] ? sctp_copy_one_addr+0x93/0x360 [ 477.044693][T19480] sctp_bind_addr_copy+0xb3/0x3c0 [ 477.044716][T19480] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 477.044738][T19480] sctp_connect_new_asoc+0x2ff/0x6b0 [ 477.044759][T19480] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 477.044784][T19480] ? __local_bh_enable_ip+0xd6/0x140 [ 477.044807][T19480] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 477.044825][T19480] ? security_sctp_bind_connect+0x7e/0x2c0 [ 477.044850][T19480] sctp_sendmsg+0x159b/0x2d00 [ 477.044883][T19480] ? __pfx_sctp_sendmsg+0x10/0x10 [ 477.044906][T19480] ? __lock_acquire+0x747/0x2de0 [ 477.044940][T19480] ? aa_sock_msg_perm+0xf5/0x210 [ 477.044966][T19480] ? sock_rps_record_flow+0x19/0x350 [ 477.044995][T19480] ? inet_sendmsg+0x298/0x320 [ 477.045022][T19480] ? __pfx_inet_sendmsg+0x10/0x10 [ 477.045045][T19480] sock_sendmsg_nosec+0x10e/0x180 [ 477.045072][T19480] ____sys_sendmsg+0x54e/0x850 [ 477.045096][T19480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.045126][T19480] ? import_iovec+0x73/0xa0 [ 477.045155][T19480] ___sys_sendmsg+0x2a5/0x360 [ 477.045174][T19480] ? __lock_acquire+0x747/0x2de0 [ 477.045204][T19480] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.045228][T19480] ? kstrtouint+0x6e/0xe0 [ 477.045279][T19480] ? __fget_files+0x2a/0x420 [ 477.045296][T19480] ? __fget_files+0x3a2/0x420 [ 477.045324][T19480] __sys_sendmmsg+0x273/0x4d0 [ 477.045360][T19480] ? __pfx___sys_sendmmsg+0x10/0x10 [ 477.045396][T19480] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 477.045434][T19480] ? ksys_write+0x242/0x270 [ 477.045457][T19480] ? __pfx_ksys_write+0x10/0x10 [ 477.045484][T19480] __x64_sys_sendmmsg+0xa0/0xc0 [ 477.045508][T19480] do_syscall_64+0x166/0x520 [ 477.045527][T19480] ? trace_irq_disable+0x3b/0x140 [ 477.045548][T19480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.045568][T19480] ? clear_bhb_loop+0x70/0xc0 [ 477.045592][T19480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.045611][T19480] RIP: 0033:0x7f7c0c99e559 [ 477.045630][T19480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.045647][T19480] RSP: 002b:00007f7c0d940028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 477.045668][T19480] RAX: ffffffffffffffda RBX: 00007f7c0cc25fa0 RCX: 00007f7c0c99e559 [ 477.045682][T19480] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 477.045695][T19480] RBP: 00007f7c0d940090 R08: 0000000000000000 R09: 0000000000000000 [ 477.045707][T19480] R10: 0000000020048041 R11: 0000000000000246 R12: 0000000000000002 [ 477.045719][T19480] R13: 00007f7c0cc26038 R14: 00007f7c0cc25fa0 R15: 00007fff30510c78 [ 477.045749][T19480] [ 477.225680][T19484] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 477.934645][T19496] syzkaller0: entered promiscuous mode [ 477.934674][T19496] syzkaller0: entered allmulticast mode [ 477.973176][T19513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4079'. [ 478.293893][T19519] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4081'. [ 478.615823][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.752822][T19472] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 484.778458][T19520] bridge2: port 1(erspan0) entered blocking state [ 484.778613][T19520] bridge2: port 1(erspan0) entered disabled state [ 484.778729][T19520] erspan0: entered allmulticast mode [ 484.792585][T19520] erspan0: entered promiscuous mode [ 484.796341][T19520] bridge2: port 1(erspan0) entered blocking state [ 484.796459][T19520] bridge2: port 1(erspan0) entered forwarding state [ 485.185884][T19538] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4084'. [ 485.187757][T19538] netlink: 'syz.0.4084': attribute type 1 has an invalid length. [ 485.361698][T19542] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 485.430932][T19542] netlink: 'syz.2.4087': attribute type 1 has an invalid length. [ 485.450778][T19547] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4090'. [ 485.531997][T19542] 8021q: adding VLAN 0 to HW filter on device bond10 [ 485.573029][T19557] netlink: 'syz.6.4090': attribute type 10 has an invalid length. [ 485.637057][T19562] netlink: 'syz.2.4087': attribute type 4 has an invalid length. [ 485.692316][T19564] netlink: 'syz.2.4087': attribute type 4 has an invalid length. [ 485.811119][T18465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.811189][T18465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.811239][T18465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.811286][T18465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.815279][T19557] team0: Device wg2 is of different type [ 485.818982][T19566] FAULT_INJECTION: forcing a failure. [ 485.818982][T19566] name failslab, interval 1, probability 0, space 0, times 0 [ 485.819007][T19566] CPU: 0 UID: 0 PID: 19566 Comm: syz.3.4094 Not tainted syzkaller #0 PREEMPT(full) [ 485.819020][T19566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 485.819027][T19566] Call Trace: [ 485.819031][T19566] [ 485.819037][T19566] dump_stack_lvl+0xe8/0x150 [ 485.819057][T19566] should_fail_ex+0x410/0x560 [ 485.819076][T19566] should_failslab+0xa8/0x100 [ 485.819092][T19566] __kmalloc_cache_noprof+0xa3/0x600 [ 485.819106][T19566] ? __kmalloc_cache_noprof+0x14d/0x600 [ 485.819116][T19566] ? sctp_add_bind_addr+0x8c/0x370 [ 485.819130][T19566] ? sctp_add_bind_addr+0x8c/0x370 [ 485.819147][T19566] sctp_add_bind_addr+0x8c/0x370 [ 485.819162][T19566] sctp_copy_local_addr_list+0x31a/0x4e0 [ 485.819179][T19566] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 485.819193][T19566] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 485.819210][T19566] ? sctp_v6_is_any+0x64/0x80 [ 485.819235][T19566] ? sctp_copy_one_addr+0x93/0x360 [ 485.819259][T19566] sctp_bind_addr_copy+0xb3/0x3c0 [ 485.819287][T19566] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 485.819310][T19566] sctp_connect_new_asoc+0x2ff/0x6b0 [ 485.819331][T19566] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 485.819732][T19566] ? __local_bh_enable_ip+0xd6/0x140 [ 485.819769][T19566] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 485.819784][T19566] ? security_sctp_bind_connect+0x7e/0x2c0 [ 485.819809][T19566] sctp_sendmsg+0x159b/0x2d00 [ 485.819841][T19566] ? __pfx_sctp_sendmsg+0x10/0x10 [ 485.819865][T19566] ? __lock_acquire+0x747/0x2de0 [ 485.819899][T19566] ? aa_sock_msg_perm+0xf5/0x210 [ 485.819924][T19566] ? sock_rps_record_flow+0x19/0x350 [ 485.819950][T19566] ? inet_sendmsg+0x298/0x320 [ 485.819972][T19566] ? __pfx_inet_sendmsg+0x10/0x10 [ 485.819992][T19566] sock_sendmsg_nosec+0x10e/0x180 [ 485.820211][T19566] ____sys_sendmsg+0x54e/0x850 [ 485.820236][T19566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.820264][T19566] ? import_iovec+0x73/0xa0 [ 485.820296][T19566] ___sys_sendmsg+0x2a5/0x360 [ 485.820314][T19566] ? __lock_acquire+0x747/0x2de0 [ 485.820339][T19566] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.820365][T19566] ? kstrtouint+0x6e/0xe0 [ 485.820414][T19566] ? __fget_files+0x2a/0x420 [ 485.822227][T19566] ? __fget_files+0x3a2/0x420 [ 485.822263][T19566] __sys_sendmmsg+0x273/0x4d0 [ 485.822291][T19566] ? __pfx___sys_sendmmsg+0x10/0x10 [ 485.822322][T19566] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 485.822361][T19566] ? ksys_write+0x242/0x270 [ 485.822384][T19566] ? __pfx_ksys_write+0x10/0x10 [ 485.824593][T19566] __x64_sys_sendmmsg+0xa0/0xc0 [ 485.824632][T19566] do_syscall_64+0x166/0x520 [ 485.824809][T19566] ? trace_irq_disable+0x3b/0x140 [ 485.824830][T19566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.824851][T19566] ? clear_bhb_loop+0x70/0xc0 [ 485.824874][T19566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.824894][T19566] RIP: 0033:0x7f9646b9e559 [ 485.824913][T19566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.824928][T19566] RSP: 002b:00007f9647ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 485.824950][T19566] RAX: ffffffffffffffda RBX: 00007f9646e25fa0 RCX: 00007f9646b9e559 [ 485.824963][T19566] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 485.824975][T19566] RBP: 00007f9647ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 485.824987][T19566] R10: 0000000020048041 R11: 0000000000000246 R12: 0000000000000002 [ 485.824999][T19566] R13: 00007f9646e26038 R14: 00007f9646e25fa0 R15: 00007fffac371208 [ 485.825031][T19566] [ 485.957882][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.957939][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.957984][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.097980][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.537772][T19573] syzkaller0: entered promiscuous mode [ 486.537798][T19573] syzkaller0: entered allmulticast mode [ 486.856229][T19586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4100'. [ 486.891353][T19591] syzkaller0: entered promiscuous mode [ 486.891381][T19591] syzkaller0: entered allmulticast mode [ 486.917796][T15787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.062165][T19598] netlink: 'syz.1.4105': attribute type 3 has an invalid length. [ 487.062186][T19598] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4105'. [ 487.183085][T19602] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 488.350483][ T5624] Bluetooth: hci1: command 0x0405 tx timeout [ 488.638043][T19638] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 488.639341][T19637] No such timeout policy "s" [ 488.681963][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4119'. [ 489.090810][T19649] syzkaller0: entered promiscuous mode [ 489.090835][T19649] syzkaller0: entered allmulticast mode [ 489.145267][T19654] netlink: 'syz.1.4126': attribute type 21 has an invalid length. [ 489.229415][T19658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4128'. [ 489.287172][T19659] netlink: 'syz.2.4127': attribute type 10 has an invalid length. [ 489.337464][T19662] netlink: 'syz.2.4127': attribute type 10 has an invalid length. [ 489.395347][T19659] syzkaller0: entered promiscuous mode [ 489.395372][T19659] syzkaller0: entered allmulticast mode [ 489.642548][T19678] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 489.665333][T19672] netlink: 'syz.6.4132': attribute type 1 has an invalid length. [ 489.731524][T19672] 8021q: adding VLAN 0 to HW filter on device bond2 [ 489.780915][T19672] bond2: (slave geneve2): making interface the new active one [ 489.807068][T19672] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 489.966466][T19686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4135'. [ 490.414469][T15788] net_ratelimit: 38 callbacks suppressed [ 490.414492][T15788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.531191][T15788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.669121][T19710] netlink: Conntrack attr has 12 unknown bytes [ 490.669176][T19710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.704935][T18467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.830038][T18470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.873350][T18470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.928421][T19721] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 491.037810][T18465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.040625][T18465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.091104][T19716] syzkaller0: entered promiscuous mode [ 491.091131][T19716] syzkaller0: entered allmulticast mode [ 491.167506][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.283980][T19730] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4150'. [ 491.286901][T19730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4150'. [ 491.326447][T19727] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4148'. [ 491.436141][T19727] gretap2: entered promiscuous mode [ 491.436172][T19727] gretap2: entered allmulticast mode [ 491.558439][T19730] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4150'. [ 491.781743][T19743] validate_nla: 2 callbacks suppressed [ 491.781768][T19743] netlink: 'syz.1.4153': attribute type 1 has an invalid length. [ 491.873868][T19743] 8021q: adding VLAN 0 to HW filter on device bond4 [ 491.922942][T19743] netlink: 'syz.1.4153': attribute type 4 has an invalid length. [ 491.956220][T19743] netlink: 'syz.1.4153': attribute type 4 has an invalid length. [ 492.008601][T19753] xt_hashlimit: size too large, truncated to 1048576 [ 492.085580][T19755] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 254 [ 492.378069][T19764] netlink: 'syz.0.4160': attribute type 1 has an invalid length. [ 492.497447][T19764] 8021q: adding VLAN 0 to HW filter on device bond8 [ 492.599164][T19766] bond8: (slave veth5): Enslaving as an active interface with a down link [ 492.715779][T19770] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode [ 492.748630][T19770] bond8: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 493.195617][T19798] tunl0: entered promiscuous mode [ 493.236616][T19798] netlink: 'syz.3.4170': attribute type 3 has an invalid length. [ 493.236642][T19798] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4170'. [ 493.278113][T19802] netlink: 'syz.6.4172': attribute type 1 has an invalid length. [ 493.278139][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4172'. [ 493.278215][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4172'. [ 493.347916][T19804] syzkaller0: entered promiscuous mode [ 493.347940][T19804] syzkaller0: entered allmulticast mode [ 493.485701][T19810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4174'. [ 493.525169][T19812] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 493.548088][T19808] tc_dump_action: action bad kind [ 493.911912][T19828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4181'. [ 493.987537][T19827] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 493.987830][T19831] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 494.068950][T19836] FAULT_INJECTION: forcing a failure. [ 494.068950][T19836] name failslab, interval 1, probability 0, space 0, times 0 [ 494.068984][T19836] CPU: 1 UID: 0 PID: 19836 Comm: syz.3.4185 Not tainted syzkaller #0 PREEMPT(full) [ 494.069005][T19836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 494.069017][T19836] Call Trace: [ 494.069025][T19836] [ 494.069033][T19836] dump_stack_lvl+0xe8/0x150 [ 494.069066][T19836] should_fail_ex+0x410/0x560 [ 494.069098][T19836] should_failslab+0xa8/0x100 [ 494.069126][T19836] __kmalloc_cache_noprof+0xa3/0x600 [ 494.069148][T19836] ? __kmalloc_cache_noprof+0x14d/0x600 [ 494.069166][T19836] ? sctp_add_bind_addr+0x8c/0x370 [ 494.069190][T19836] ? sctp_add_bind_addr+0x8c/0x370 [ 494.069222][T19836] sctp_add_bind_addr+0x8c/0x370 [ 494.069251][T19836] sctp_copy_local_addr_list+0x31a/0x4e0 [ 494.069280][T19836] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 494.069307][T19836] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 494.069340][T19836] ? sctp_v6_is_any+0x64/0x80 [ 494.069367][T19836] ? sctp_copy_one_addr+0x93/0x360 [ 494.069396][T19836] sctp_bind_addr_copy+0xb3/0x3c0 [ 494.069470][T19836] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 494.069501][T19836] sctp_connect_new_asoc+0x2ff/0x6b0 [ 494.069522][T19836] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 494.069546][T19836] ? __local_bh_enable_ip+0xd6/0x140 [ 494.069568][T19836] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 494.069586][T19836] ? security_sctp_bind_connect+0x7e/0x2c0 [ 494.069613][T19836] sctp_sendmsg+0x159b/0x2d00 [ 494.069656][T19836] ? __pfx_sctp_sendmsg+0x10/0x10 [ 494.069682][T19836] ? __lock_acquire+0x747/0x2de0 [ 494.069716][T19836] ? aa_sock_msg_perm+0xf5/0x210 [ 494.069743][T19836] ? sock_rps_record_flow+0x19/0x350 [ 494.069773][T19836] ? inet_sendmsg+0x298/0x320 [ 494.069802][T19836] ? __pfx_inet_sendmsg+0x10/0x10 [ 494.069827][T19836] sock_sendmsg_nosec+0x10e/0x180 [ 494.069856][T19836] ____sys_sendmsg+0x54e/0x850 [ 494.069881][T19836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.069911][T19836] ? import_iovec+0x73/0xa0 [ 494.069943][T19836] ___sys_sendmsg+0x2a5/0x360 [ 494.069963][T19836] ? __lock_acquire+0x747/0x2de0 [ 494.069989][T19836] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.070016][T19836] ? kstrtouint+0x6e/0xe0 [ 494.070066][T19836] ? __fget_files+0x2a/0x420 [ 494.070083][T19836] ? __fget_files+0x3a2/0x420 [ 494.070112][T19836] __sys_sendmmsg+0x273/0x4d0 [ 494.070136][T19836] ? __pfx___sys_sendmmsg+0x10/0x10 [ 494.070162][T19836] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 494.070192][T19836] ? ksys_write+0x242/0x270 [ 494.070210][T19836] ? __pfx_ksys_write+0x10/0x10 [ 494.070232][T19836] __x64_sys_sendmmsg+0xa0/0xc0 [ 494.070250][T19836] do_syscall_64+0x166/0x520 [ 494.070267][T19836] ? trace_irq_disable+0x3b/0x140 [ 494.070284][T19836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.070299][T19836] ? clear_bhb_loop+0x70/0xc0 [ 494.070323][T19836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.070338][T19836] RIP: 0033:0x7f9646b9e559 [ 494.070353][T19836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.070366][T19836] RSP: 002b:00007f9647ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 494.070383][T19836] RAX: ffffffffffffffda RBX: 00007f9646e25fa0 RCX: 00007f9646b9e559 [ 494.070394][T19836] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 494.070404][T19836] RBP: 00007f9647ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 494.070414][T19836] R10: 0000000020048041 R11: 0000000000000246 R12: 0000000000000002 [ 494.070424][T19836] R13: 00007f9646e26038 R14: 00007f9646e25fa0 R15: 00007fffac371208 [ 494.070449][T19836] [ 494.254435][T19833] siw: device registration error -23 [ 494.731416][T19846] veth1_to_bond: entered allmulticast mode [ 494.738581][T19848] netlink: 232 bytes leftover after parsing attributes in process `syz.6.4189'. [ 494.867094][T19844] veth1_to_bond: left allmulticast mode [ 494.963268][T19856] netlink: 'syz.1.4190': attribute type 7 has an invalid length. [ 494.963289][T19856] netlink: 'syz.1.4190': attribute type 5 has an invalid length. [ 495.166573][T19866] syzkaller0: entered promiscuous mode [ 495.166597][T19866] syzkaller0: entered allmulticast mode [ 495.446698][T19881] pim6reg: entered allmulticast mode [ 495.492393][T11319] net_ratelimit: 38 callbacks suppressed [ 495.492418][T11319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.494146][T11319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.615386][T19891] x_tables: duplicate underflow at hook 3 [ 495.677894][T19891] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20002 [ 495.712488][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.740065][T19895] openvswitch: netlink: Missing key (keys=40, expected=100) [ 496.012258][T19906] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 496.306209][T11329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.394382][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.654321][T11319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.654565][T11319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.722024][T19928] __nla_validate_parse: 2 callbacks suppressed [ 496.722049][T19928] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4210'. [ 496.762706][T15788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.226956][T19944] block nbd2: server does not support multiple connections per device. [ 497.291463][T19944] block nbd2: shutting down sockets [ 497.374328][T19952] block nbd3: server does not support multiple connections per device. [ 497.441394][T19952] block nbd3: shutting down sockets [ 497.944433][T19971] netlink: 'syz.1.4223': attribute type 1 has an invalid length. [ 498.000910][T19971] 8021q: adding VLAN 0 to HW filter on device bond5 [ 498.064471][T19971] netlink: 'syz.1.4223': attribute type 4 has an invalid length. [ 498.088252][T19971] netlink: 'syz.1.4223': attribute type 4 has an invalid length. [ 498.338703][T19990] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4226'. [ 498.395321][T19992] syzkaller0: entered promiscuous mode [ 498.395346][T19992] syzkaller0: entered allmulticast mode [ 498.553831][T19996] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 498.983467][T20007] FAULT_INJECTION: forcing a failure. [ 498.983467][T20007] name failslab, interval 1, probability 0, space 0, times 0 [ 498.983503][T20007] CPU: 1 UID: 0 PID: 20007 Comm: syz.6.4234 Not tainted syzkaller #0 PREEMPT(full) [ 498.983525][T20007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 498.983537][T20007] Call Trace: [ 498.983545][T20007] [ 498.983555][T20007] dump_stack_lvl+0xe8/0x150 [ 498.983589][T20007] should_fail_ex+0x410/0x560 [ 498.983622][T20007] should_failslab+0xa8/0x100 [ 498.983651][T20007] __kmalloc_cache_noprof+0xa3/0x600 [ 498.983675][T20007] ? __kmalloc_cache_noprof+0x14d/0x600 [ 498.983696][T20007] ? sctp_add_bind_addr+0x8c/0x370 [ 498.983721][T20007] ? sctp_add_bind_addr+0x8c/0x370 [ 498.983753][T20007] sctp_add_bind_addr+0x8c/0x370 [ 498.983782][T20007] sctp_copy_local_addr_list+0x31a/0x4e0 [ 498.983809][T20007] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 498.983832][T20007] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 498.983859][T20007] ? sctp_v6_is_any+0x64/0x80 [ 498.983888][T20007] ? sctp_copy_one_addr+0x93/0x360 [ 498.983918][T20007] sctp_bind_addr_copy+0xb3/0x3c0 [ 498.983949][T20007] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 498.983978][T20007] sctp_connect_new_asoc+0x2ff/0x6b0 [ 498.984002][T20007] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 498.984031][T20007] ? __local_bh_enable_ip+0xd6/0x140 [ 498.984062][T20007] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 498.984080][T20007] ? security_sctp_bind_connect+0x7e/0x2c0 [ 498.984110][T20007] sctp_sendmsg+0x159b/0x2d00 [ 498.984146][T20007] ? __pfx_sctp_sendmsg+0x10/0x10 [ 498.984172][T20007] ? __lock_acquire+0x747/0x2de0 [ 498.984226][T20007] ? aa_sock_msg_perm+0xf5/0x210 [ 498.984265][T20007] ? sock_rps_record_flow+0x19/0x350 [ 498.984293][T20007] ? inet_sendmsg+0x298/0x320 [ 498.984323][T20007] ? __pfx_inet_sendmsg+0x10/0x10 [ 498.984347][T20007] sock_sendmsg_nosec+0x10e/0x180 [ 498.984375][T20007] ____sys_sendmsg+0x54e/0x850 [ 498.984403][T20007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.984436][T20007] ? import_iovec+0x73/0xa0 [ 498.984470][T20007] ___sys_sendmsg+0x2a5/0x360 [ 498.984491][T20007] ? __lock_acquire+0x747/0x2de0 [ 498.984518][T20007] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.984546][T20007] ? kstrtouint+0x6e/0xe0 [ 498.984600][T20007] ? __fget_files+0x2a/0x420 [ 498.984619][T20007] ? __fget_files+0x3a2/0x420 [ 498.984650][T20007] __sys_sendmmsg+0x273/0x4d0 [ 498.984678][T20007] ? __pfx___sys_sendmmsg+0x10/0x10 [ 498.984711][T20007] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 498.984752][T20007] ? ksys_write+0x242/0x270 [ 498.984776][T20007] ? __pfx_ksys_write+0x10/0x10 [ 498.984805][T20007] __x64_sys_sendmmsg+0xa0/0xc0 [ 498.984829][T20007] do_syscall_64+0x166/0x520 [ 498.984852][T20007] ? trace_irq_disable+0x3b/0x140 [ 498.984874][T20007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.984896][T20007] ? clear_bhb_loop+0x70/0xc0 [ 498.984921][T20007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.984941][T20007] RIP: 0033:0x7f930959e559 [ 498.984962][T20007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.984979][T20007] RSP: 002b:00007f930a52b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 498.985002][T20007] RAX: ffffffffffffffda RBX: 00007f9309825fa0 RCX: 00007f930959e559 [ 498.985016][T20007] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 498.985029][T20007] RBP: 00007f930a52b090 R08: 0000000000000000 R09: 0000000000000000 [ 498.985042][T20007] R10: 0000000020048041 R11: 0000000000000246 R12: 0000000000000002 [ 498.985061][T20007] R13: 00007f9309826038 R14: 00007f9309825fa0 R15: 00007ffc000707b8 [ 498.985095][T20007] [ 499.654767][T20018] netlink: 'syz.2.4238': attribute type 1 has an invalid length. [ 499.882230][T20036] netlink: 'syz.2.4238': attribute type 4 has an invalid length. [ 499.885265][T20037] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 499.956829][T20039] netlink: 'syz.2.4238': attribute type 4 has an invalid length. [ 499.988470][T20018] 8021q: adding VLAN 0 to HW filter on device bond11 [ 500.194744][T20043] netlink: 'syz.0.4242': attribute type 1 has an invalid length. [ 500.194772][T20043] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4242'. [ 500.350310][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 500.514229][ T5733] net_ratelimit: 24 callbacks suppressed [ 500.514252][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.514458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.590619][T15788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.599368][T20048] syzkaller0: entered promiscuous mode [ 500.599410][T20048] syzkaller0: entered allmulticast mode [ 500.804275][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.922583][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.995768][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.174953][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.178048][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.646089][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.646420][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.771593][ T43] net_ratelimit: 24 callbacks suppressed [ 505.771619][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.774236][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.889635][T15788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.137146][T15787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.498168][T18467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.591807][T17252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.592852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.764083][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 506.923022][T15788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.945293][T11320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.950865][T11320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.370488][T20071] batadv0: entered promiscuous mode [ 507.370664][T20071] macsec1: entered promiscuous mode [ 507.373471][T20071] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 507.374844][T20071] batadv0: left promiscuous mode [ 507.621821][T20084] syzkaller0: entered promiscuous mode [ 507.621854][T20084] syzkaller0: entered allmulticast mode [ 507.718783][T20090] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 507.931391][T20092] No such timeout policy "s" [ 508.209007][T20105] netlink: 'syz.1.4258': attribute type 1 has an invalid length. [ 508.254588][T20105] 8021q: adding VLAN 0 to HW filter on device bond6 [ 508.284568][T20105] netlink: 'syz.1.4258': attribute type 4 has an invalid length. [ 508.348213][T20109] netlink: 'syz.1.4258': attribute type 4 has an invalid length. [ 508.483639][T20114] xt_cgroup: invalid path, errno=-2 [ 508.748036][T20127] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 510.057258][T20165] syzkaller0: entered promiscuous mode [ 510.057285][T20165] syzkaller0: entered allmulticast mode [ 510.090639][T20187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4283'. [ 510.266402][T20183] bond12 (unregistering): Released all slaves [ 510.597147][T20202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4289'. [ 511.063318][T11321] net_ratelimit: 25 callbacks suppressed [ 511.063342][T11321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.084272][T15788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.256390][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.329175][T15787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.594311][T11321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.612004][T11321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.140172][T15787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.261953][T11321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.390924][T15788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.677636][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.191122][ T189] net_ratelimit: 21 callbacks suppressed [ 516.191148][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.267614][T11329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.267923][T11329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.283428][T15788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.632750][T15788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.737102][T20202] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 516.872956][T11320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.975210][T20212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4292'. [ 517.001875][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.002041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.138542][T20219] netlink: 'syz.1.4296': attribute type 2 has an invalid length. [ 517.138569][T20219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4296'. [ 517.211266][T20221] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4295'. [ 517.231663][T20221] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4295'. [ 517.313507][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.428627][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.781919][T20245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4304'. [ 517.858294][T20246] syzkaller0: entered promiscuous mode [ 517.858319][T20246] syzkaller0: entered allmulticast mode [ 517.874961][T20251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4303'. [ 517.953718][T20253] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 518.007415][T20254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4303'. [ 518.838506][T20289] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 518.938686][T20288] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4317'. [ 519.606327][T20304] syzkaller0: entered promiscuous mode [ 519.606357][T20304] syzkaller0: entered allmulticast mode [ 519.611963][T20310] netlink: 'syz.2.4322': attribute type 1 has an invalid length. [ 519.611986][T20310] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4322'. [ 519.720168][T20316] netlink: 538 bytes leftover after parsing attributes in process `syz.6.4324'. [ 520.052506][T20340] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 520.996955][T20378] xt_REDIRECT: bad rangesize 26624. [ 521.464776][T18464] net_ratelimit: 31 callbacks suppressed [ 521.464801][T18464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.489317][T15788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.578863][T20387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.596358][T20387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.828924][T15787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.076488][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.076712][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.117550][ T32] INFO: task syz.5.3246:16386 blocked for more than 143 seconds. [ 522.117625][ T32] Not tainted syzkaller #0 [ 522.117635][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.117685][ T32] task:syz.5.3246 state:D stack:26792 pid:16386 tgid:16378 ppid:15237 task_flags:0x40 ** replaying previous printk message ** [ 522.117685][ T32] task:syz.5.3246 state:D stack:26792 pid:16386 tgid:16378 ppid:15237 task_flags:0x400140 flags:0x00080002 [ 522.117728][ T32] Call Trace: [ 522.117735][ T32] [ 522.117747][ T32] __schedule+0x17db/0x58f0 [ 522.117793][ T32] ? __pfx___schedule+0x10/0x10 [ 522.117817][ T32] ? schedule+0x90/0x2b0 [ 522.117836][ T32] schedule+0x164/0x2b0 [ 522.117853][ T32] schedule_preempt_disabled+0x13/0x30 [ 522.117869][ T32] __mutex_lock+0x7c1/0x1550 [ 522.117892][ T32] ? __mutex_lock+0x5d4/0x1550 [ 522.117913][ T32] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 522.117937][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 522.117953][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 522.117977][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 522.117992][ T32] ? do_syscall_64+0x166/0x520 [ 522.118009][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.118035][ T32] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 522.118063][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 522.118090][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 522.118111][ T32] ? trace_kmalloc+0x2a/0xf0 [ 522.118131][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 522.118150][ T32] ? __nla_parse+0x40/0x60 [ 522.118169][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 522.118194][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 522.118229][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 522.118259][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 522.118306][ T32] ? bpf_lsm_capable+0x9/0x20 [ 522.118324][ T32] ? security_capable+0x7e/0x2c0 [ 522.118356][ T32] genl_rcv_msg+0x614/0x7a0 [ 522.118386][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 522.118410][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 522.118453][ T32] netlink_rcv_skb+0x226/0x4a0 [ 522.118568][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 522.118600][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 522.118650][ T32] ? down_read+0x2be/0x330 [ 522.118677][ T32] genl_rcv+0x28/0x40 [ 522.118702][ T32] netlink_unicast+0x8ef/0xa80 [ 522.118736][ T32] netlink_sendmsg+0x813/0xb40 [ 522.118766][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.118811][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 522.118836][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.118856][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 522.118882][ T32] ____sys_sendmsg+0x54e/0x850 [ 522.118907][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.118937][ T32] ? import_iovec+0x73/0xa0 [ 522.118970][ T32] ___sys_sendmsg+0x2a5/0x360 [ 522.118990][ T32] ? __lock_acquire+0x747/0x2de0 [ 522.119016][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.119039][ T32] ? futex_wait+0x2a2/0x390 [ 522.119084][ T32] ? __fget_files+0x2a/0x420 [ 522.119102][ T32] ? __fget_files+0x3a2/0x420 [ 522.119129][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 522.141934][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 522.142001][ T32] do_syscall_64+0x166/0x520 [ 522.142026][ T32] ? trace_irq_disable+0x3b/0x140 [ 522.142049][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.142070][ T32] ? clear_bhb_loop+0x70/0xc0 [ 522.142094][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.142115][ T32] RIP: 0033:0x7f6459f9e559 [ 522.142133][ T32] RSP: 002b:00007f645adc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.142162][ T32] RAX: ffffffffffffffda RBX: 00007f645a226090 RCX: 00007f6459f9e559 [ 522.142177][ T32] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000004 [ 522.142191][ T32] RBP: 00007f645a035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 522.142203][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.142231][ T32] R13: 00007f645a226128 R14: 00007f645a226090 R15: 00007fffbd5c4218 [ 522.142265][ T32] [ 522.173759][ T32] [ 522.173759][ T32] Showing all locks held in the system: [ 522.173781][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 522.173799][ T32] #0: ffffffff8fc36518 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 522.174715][ T32] #1: ffffffff9bd4be38 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 522.174782][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 522.174864][ T32] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 522.174943][ T32] locks held by getty/5368: 2, on CPU#1: [ 522.174957][ T32] #0: ffff8880356e30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 522.175004][ T32] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 522.175071][ T32] locks held by kworker/u8:14/11325: 3, on CPU#0: [ 522.175085][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 522.175138][ T32] #1: ffffc900025c7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 522.175188][ T32] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 522.175359][ T32] locks held by syz.4.2860/14608: 2, on CPU#1: [ 522.175374][ T32] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 522.175424][ T32] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 522.175486][ T32] locks held by syz.5.3246/16386: 2, on CPU#1: [ 522.175500][ T32] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 522.175549][ T32] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 522.175609][ T32] locks held by syz.1.4321/20303: 1, last CPU#1: [ 522.175623][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 522.175673][ T32] locks held by syz.3.4327/20326: 1, on CPU#1: [ 522.175687][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x137/0x10d0 [ 522.175730][ T32] locks held by syz.3.4327/20327: 1, on CPU#0: [ 522.175744][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x137/0x10d0 [ 522.175793][ T32] locks held by syz.3.4327/20329: 1, on CPU#0: [ 522.175804][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x137/0x10d0 [ 522.178489][ T32] locks held by syz.0.4336/20356: 2, on CPU#1: [ 522.178506][ T32] #0: ffff88807b6f36e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 522.178558][ T32] #1: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 522.178609][ T32] locks held by syz.0.4336/20363: 1, on CPU#1: [ 522.178623][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4ac/0x810 [ 522.178660][ T32] locks held by syz.6.4338/20375: 1, on CPU#1: [ 522.178670][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 522.178703][ T32] locks held by syz.6.4338/20379: 1, on CPU#0: [ 522.178716][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 522.178764][ T32] [ 522.178770][ T32] ============================================= [ 522.178770][ T32] [ 522.178796][ T32] NMI backtrace for cpu 1 [ 522.178811][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 522.178831][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 522.178842][ T32] Call Trace: [ 522.178853][ T32] [ 522.178864][ T32] dump_stack_lvl+0xe8/0x150 [ 522.178893][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 522.178921][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 522.178954][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 522.178985][ T32] sys_info+0x135/0x170 [ 522.179016][ T32] watchdog+0xfd7/0x1030 [ 522.179048][ T32] ? watchdog+0x1c7/0x1030 [ 522.179076][ T32] kthread+0x38b/0x480 [ 522.179097][ T32] ? __pfx_watchdog+0x10/0x10 [ 522.179116][ T32] ? __pfx_kthread+0x10/0x10 [ 522.179197][ T32] ret_from_fork+0x514/0xb70 [ 522.179220][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 522.179244][ T32] ? __switch_to+0xc89/0x1420 [ 522.179272][ T32] ? __pfx_kthread+0x10/0x10 [ 522.179293][ T32] ret_from_fork_asm+0x1a/0x30 [ 522.179328][ T32] [ 522.179335][ T32] Sending NMI from CPU 1 to CPUs 0: [ 522.179369][ C0] NMI backtrace for cpu 0 [ 522.179384][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 522.179405][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 522.179417][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 522.179449][ C0] Code: e8 de 6b 53 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 4b c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 ca 35 77 06 cc 44 89 f9 80 e1 07 [ 522.179463][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 522.179476][ C0] RAX: 1ffffffff37a9700 RBX: 00000000000003fd RCX: 0000000000000000 [ 522.179487][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 522.179496][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 522.179506][ C0] R10: dffffc0000000000 R11: ffffffff8574a450 R12: dffffc0000000000 [ 522.179519][ C0] R13: 0000000000000000 R14: ffffffff9bd4be60 R15: 0000000000000000 [ 522.179529][ C0] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 522.179543][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 522.179553][ C0] CR2: 00007fc7dcbebc40 CR3: 0000000024374000 CR4: 00000000003526f0 [ 522.179571][ C0] Call Trace: [ 522.179578][ C0] [ 522.179588][ C0] wait_for_lsr+0x184/0x2f0 [ 522.179618][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 522.179708][ C0] serial8250_console_write+0xa7e/0x1200 [ 522.179735][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 522.179764][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 522.179790][ C0] ? __schedule+0x17f1/0x58f0 [ 522.179819][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 522.179854][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 522.179882][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 522.179914][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 522.179936][ C0] nbcon_kthread_func+0x679/0x880 [ 522.179962][ C0] ? nbcon_kthread_func+0x163/0x880 [ 522.179984][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 522.180011][ C0] ? __kthread_parkme+0x71/0x1f0 [ 522.180040][ C0] ? __kthread_parkme+0x199/0x1f0 [ 522.180072][ C0] kthread+0x38b/0x480 [ 522.180097][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 522.180118][ C0] ? __pfx_kthread+0x10/0x10 [ 522.180137][ C0] ret_from_fork+0x514/0xb70 [ 522.180158][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 522.180177][ C0] ? __switch_to+0xc89/0x1420 [ 522.180206][ C0] ? __pfx_kthread+0x10/0x10 [ 522.180226][ C0] ret_from_fork_asm+0x1a/0x30 [ 522.180254][ C0] [ 522.180534][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 523.728501][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 523.739904][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 523.754248][ T32] Call Trace: [ 523.757993][ T32] [ 523.761962][ T32] vpanic+0x56d/0xa60 [ 523.767872][ T32] ? __pfx___schedule+0x10/0x10 [ 523.776601][ T32] ? __pfx_vpanic+0x10/0x10 [ 523.782998][ T32] panic+0xc5/0xd0 [ 523.788675][ T32] ? __pfx_panic+0x10/0x10 [ 523.796311][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 523.802574][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 523.809737][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 523.818898][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 523.829192][ T32] watchdog+0x1030/0x1030 [ 523.834690][ T32] ? watchdog+0x1c7/0x1030 [ 523.841736][ T32] kthread+0x38b/0x480 [ 523.846134][ T32] ? __pfx_watchdog+0x10/0x10 [ 523.852674][ T32] ? __pfx_kthread+0x10/0x10 [ 523.858139][ T32] ret_from_fork+0x514/0xb70 [ 523.864914][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 523.871931][ T32] ? __switch_to+0xc89/0x1420 [ 523.877817][ T32] ? __pfx_kthread+0x10/0x10 [ 523.884031][ T32] ret_from_fork_asm+0x1a/0x30 [ 523.889903][ T32] [ 523.896002][ T32] Kernel Offset: disabled [ 523.902194][ T32] Rebooting in 86400 seconds..