last executing test programs: 4m9.541332855s ago: executing program 1 (id=3318): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) close(0x3) 4m9.082158185s ago: executing program 1 (id=3321): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000061106d000000000095", @ANYRESHEX=r0], &(0x7f0000000480)='syzkaller\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r3, 0x11, 0x70bd2a, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff2, 0x5}, {0xa, 0xa}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x80000001}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10000}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1008}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000c5}, 0x8085) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FRA_FLOW={0x8}]}, 0x34}}, 0x0) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x14}, 0x200400d1) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xc, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000003001d004aa9000000000000005110b1000000000095002dae6258a4dc4ade6900eed73d76e8d42cdff793779d0b1519"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ce000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 4m8.848199688s ago: executing program 1 (id=3323): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xfff9, 0x4, [0x2, 0x7, 0x6, 0x2]}, &(0x7f0000000140)=0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x88044}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r8) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r3, 0x3, 0x2, [0x80, 0x1]}, &(0x7f00000001c0)=0xc) ioctl$sock_bt_hci(r2, 0x800448d7, &(0x7f0000000000)) sendmmsg$inet6(r1, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002473616e0016000280100005800a000400000072da000000000000000000001300000000"], 0x44}}, 0x0) listen(r1, 0x100) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000340)={0x1d, r11, 0x0, {0x0, 0x0, 0x6}, 0xff}, 0x18) sendmmsg$sock(r10, &(0x7f0000007480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x814) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYRESHEX=r10], 0x8) accept4(r1, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) 3m43.298544239s ago: executing program 1 (id=3329): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r6 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80200003e000701feffffff00000000017c0000040042808802018006000600800a00007b02018020ef82972c4a888fa13836e811c4cd03b722b4ceca8be06b765000fcffffffffffff7eb6b5009a881fd61885956a03d9a9dc8452516454a3d167abf84c778c4df8237c0c0860693c5060dfea16df72653289de5ae7f1f3a2746c7e0900000011b9b91ed5687f850c00c8007d25212b2b4a2d000800a500", @ANYRES32=r8, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xc, 0x3, &(0x7f00000000c0)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x82}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r10) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r11, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x44}, @val={0x8, 0x3, r12}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) r13 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000007c0)="b49588044419ba1896493a", 0x1002, 0xffffffffffffffff, 0x4}, 0x38) (async) ioctl$sock_SIOCSIFBR(r13, 0x890c, &(0x7f0000000300)=@generic={0x0, 0x2}) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x13c, r9, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x41}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x480, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {0x7ffc}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x803, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x84, 0x1}}, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x4, 0x21, 0xe}}}}, @NL80211_ATTR_IE_PROBE_RESP={0xb9, 0x7f, [@preq={0x82, 0x46, {{0x1, 0x1}, 0x4, 0x2, 0x0, @broadcast, 0x401, @void, 0x7, 0x4, 0x4, [{{0x1}, @device_a, 0x10000}, {{0x1}, @device_a, 0xdb}, {{}, @device_a, 0x6}, {{0x1}, @device_b, 0x5}]}}, @cf={0x4, 0x6, {0x7, 0x1, 0x2, 0x5}}, @supported_rates, @ibss={0x6, 0x2, 0x8001}, @random_vendor={0xdd, 0x5a, "ee0a91ee939c3b75fab86f76aed92f9e656eccffac6ba931b809abedbfe5b2680fc6bb7cbe2f9338fe5a354c1f1d63a8472414172ecc62816f059f6efe4fc7b909b46c17183f67824c090d0ceb3802ac7ce8dd0c7947b887aea5"}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_PROBE_RESP={0x358, 0x91, "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"}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}]}, 0x480}, 0x1, 0x0, 0x0, 0x10}, 0x11) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x34, 0x9, 0x1, 0xfffffffd, {0x3}}, 0x14}}, 0x4000010) 3m43.293639028s ago: executing program 1 (id=3333): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r1, 0xb03, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c080}, 0x814) 3m32.850749714s ago: executing program 1 (id=3335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x0) poll(&(0x7f0000000200)=[{r2, 0x401}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000017c0), r1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001800)={0x1c, r3, 0x7ce7e4ef5851f55f, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000fcc4a5e7da19d994", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000002000), 0x4) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, &(0x7f0000002040)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, &(0x7f0000009b40)={@loopback, @multicast1, 0x0, "e0ed43b9008423623755d3d37d95aaf383592ab9a4fedb2f5809a710447f5e02", 0xd8b7d5ea, 0xfffffff7, 0x1, 0x3ff}, 0x3c) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x18, 0x14, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x13, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x4000) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r11, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r12 = socket(0x40000000015, 0x5, 0x0) bind$inet(r12, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xf) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x800, 0x70bd2a, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008015}, 0x2043) 3m17.662977436s ago: executing program 32 (id=3335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x0) poll(&(0x7f0000000200)=[{r2, 0x401}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000017c0), r1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001800)={0x1c, r3, 0x7ce7e4ef5851f55f, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000fcc4a5e7da19d994", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000002000), 0x4) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, &(0x7f0000002040)={@loopback, @multicast1, 0x0, "4cf9463cf5f78e0c2970455235bc5da3205a45a30af3ae005466bbfe74a4c44a", 0x2, 0x0, 0x9, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, &(0x7f0000009b40)={@loopback, @multicast1, 0x0, "e0ed43b9008423623755d3d37d95aaf383592ab9a4fedb2f5809a710447f5e02", 0xd8b7d5ea, 0xfffffff7, 0x1, 0x3ff}, 0x3c) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x18, 0x14, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x13, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x4000) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r11, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r12 = socket(0x40000000015, 0x5, 0x0) bind$inet(r12, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xf) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x800, 0x70bd2a, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24008015}, 0x2043) 9.549680644s ago: executing program 4 (id=4526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f0000001c0007800c0004003a5f00000000003a0c0003"], 0x30}, 0x1, 0x0, 0x0, 0x80001}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 7.196429469s ago: executing program 4 (id=4537): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x20000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x48004, 0x0, 0x0) 5.083593036s ago: executing program 3 (id=4549): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007f00), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000007f40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000081c0)={0x0, 0x0, &(0x7f0000008180)={&(0x7f0000007f80)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4040080) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESOCT=r4, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000030000ee6a491530f05065"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000007f00), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000007f40)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000081c0)={0x0, 0x0, &(0x7f0000008180)={&(0x7f0000007f80)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4040080) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r5}, 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) (async) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESOCT=r4, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000030000ee6a491530f05065"], 0x48}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) 3.80815303s ago: executing program 4 (id=4552): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d040}, 0x4048014) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0xe00, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c02}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.806709494s ago: executing program 3 (id=4553): r0 = socket(0x10, 0x803, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000300)={0x2}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, '\x00', "cd178e27c9f2efcc95cfdcb7c5d6c030", "61fe1374", "55b60162d58b6bff"}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$kcm(0x11, 0x3, 0x0) (async) r9 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0xfff2, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x7, 0x4, 0x8, 0x5, 0x7}, 0x6, 0x5, [{0xff, 0x8, 0x9, 0x8, 0xdcc6, 0x8}]}, [{0x4b, 0x9ce, 0x6, 0x1, 0x9, 0x9}, {0x81, 0x7, 0x80000001, 0x1, 0x9f, 0x3}, {0x5, 0x5, 0x400, 0x4b13e0b0, 0x8, 0x9}, {0x4, 0x20, 0x4, 0x200, 0x8, 0x75}, {0x3, 0x5, 0x8, 0x6, 0xfcc4, 0x2}, {0x24, 0x80, 0x1fb979a6, 0x1, 0x180000, 0x401}, {0x1, 0xff, 0x9, 0xfffffffb, 0xb2e, 0x2}, {0x4, 0x0, 0x3, 0x1ff, 0xbb59, 0x4}, {0x3, 0x0, 0x81, 0x8, 0x0, 0x5}, {0x9, 0x2, 0x200, 0xe, 0xb370, 0x1}, {0x4, 0x3, 0x4, 0x8, 0x2, 0x8e}, {0x0, 0x4, 0x9, 0x8, 0x3}, {0x0, 0x8, 0x80000001, 0x0, 0x8001, 0x3}, {0x78d, 0x2, 0x2, 0x4, 0x4, 0x8}, {0x6, 0x100, 0x18f, 0x7, 0x0, 0x1}, {0x40, 0x4, 0x3, 0xffffffff, 0x9, 0x5}, {0xfffffeff, 0x9, 0x101, 0x2, 0xfffffbff, 0x9}, {0xffffffff, 0x0, 0x8, 0x3, 0x80000000, 0x2}, {0x81, 0x7, 0x1, 0x8, 0x101, 0x9}, {0x7, 0x5, 0x7d, 0x0, 0x0, 0x2}, {0xab, 0x40, 0x3, 0xfffffffd, 0x0, 0x3}, {0x4, 0x7, 0x6, 0x401, 0xfffffffe, 0x2}, {0x10001, 0xff, 0x0, 0x0, 0x5, 0x66a8}, {0x708c, 0x5, 0x401, 0x3, 0x0, 0x4}, {0x8, 0x0, 0x1, 0x5, 0x5, 0x7}, {0x3, 0xef60, 0x8, 0x7, 0xf4ec, 0x8400000}, {0x8, 0x7, 0x3, 0x8, 0x73, 0x91}, {0x7, 0x3, 0x0, 0xffffffff, 0x6, 0x7fd}, {0xa6fd, 0x4, 0x80000001, 0x1, 0xffffffe1, 0x401}, {0x3, 0x4024, 0x5, 0x5, 0xf, 0x2}, {0x1, 0x7, 0xc0, 0x7, 0x100, 0x2}, {0x1, 0x3, 0xffffff3a, 0xffffff0c, 0x4, 0x59d4}, {0x400, 0x5, 0x1ee, 0x4, 0x1, 0x91}, {0x2, 0x1, 0x5, 0x0, 0x9, 0x2}, {0x296, 0x6, 0x5, 0x8, 0x5, 0xa}, {0xf54, 0xd3, 0x5, 0x60, 0x9, 0x10}, {0x200, 0xff, 0x9, 0x1, 0x4, 0x3}, {0x7, 0x80, 0xb, 0x0, 0x4, 0x200}, {0x3, 0x9, 0x7, 0x3, 0x3, 0x3}, {0x0, 0x10, 0x3ff, 0x3, 0x3, 0x4}, {0xd57, 0xffffffff, 0x7, 0x6, 0xe, 0xf}, {0x74c3, 0x4, 0x7, 0x0, 0x5, 0x5}, {0x1, 0x3, 0x1, 0x3, 0x101, 0x2}, {0x7f, 0x2, 0x1, 0xb6b, 0x0, 0x5}, {0xffff, 0xb28, 0x7, 0x3, 0x3, 0x80000000}, {0x0, 0xfc3, 0x8, 0x0, 0xcc3, 0x101}, {0xf4cd, 0x4, 0x9, 0x9, 0x7fff, 0x9}, {0x6, 0x2, 0xb7, 0x1, 0x80000001, 0x6}, {0x2, 0x0, 0x6, 0x1, 0x6, 0x1}, {0x7ff, 0x237, 0xdfc, 0xffff, 0x400, 0x3}, {0x3, 0x3, 0x800, 0x2, 0xebf, 0x6}, {0x3263, 0x7, 0x80000001, 0x8, 0xb, 0x9}, {0x8, 0x5, 0x5, 0x2, 0x1, 0x40}, {0x7fb, 0x400, 0x3, 0x400, 0x7, 0xa0a}, {0x2, 0x1, 0xfffffff7, 0x8, 0x3, 0x8}, {0x487f, 0x800, 0x7ff, 0x6, 0x10001, 0x80000000}, {0x7fc, 0xd, 0x1ff, 0x6, 0xfffffff9, 0xffffff01}, {0x3, 0x3, 0x480, 0x8000, 0x8, 0x3}, {0x0, 0x8, 0x7, 0x5, 0x0, 0x101}, {0x5, 0x7, 0xd, 0x80000000, 0xffff, 0x2}, {0x4, 0x9, 0xfff, 0xffffff81, 0x0, 0x6f}, {0x3, 0x2, 0x6bfe1ad4, 0x3, 0x2, 0x8}, {0x2, 0x101, 0x80, 0xfff, 0x9, 0x9}, {0x25, 0x4, 0xfffffbff, 0x77cf, 0x800, 0x9}, {0x2, 0x4, 0x101, 0x5, 0x101, 0xd05}, {0xfffffffe, 0xd, 0x0, 0x5, 0x7, 0x7941}, {0x2, 0x7, 0x7, 0x40, 0x9, 0x6}, {0x2, 0x370, 0x1, 0x7, 0x7, 0x9}, {0x3, 0x9, 0xc688, 0x3, 0x80000001, 0x3}, {0x5, 0x8, 0x3, 0x6, 0x7fff, 0x3}, {0x0, 0x2, 0x8, 0x10, 0x2, 0x5b5}, {0x2, 0x5, 0x4, 0xa, 0x19, 0x4}, {0xfffffffc, 0x95, 0x8, 0x2028, 0x5, 0x7}, {0x30, 0x1, 0x5, 0x1, 0x4, 0x5}, {0x0, 0x968d, 0x101, 0x5c, 0xff, 0xff}, {0x7, 0x5, 0x9, 0x8, 0x0, 0x7}, {0x6, 0x8, 0x934, 0x9}, {0x0, 0x3, 0x2, 0x10000, 0xc, 0x101}, {0x4, 0x1, 0x6, 0x7, 0xf582, 0x7}, {0x2, 0x7, 0x5, 0xa6, 0x3, 0x3de8}, {0xb9, 0x1, 0x8001, 0x1, 0xe9, 0xb440}, {0x1ff, 0x6, 0x3928, 0x5, 0x80000000, 0x3ff}, {0x8, 0x7fff, 0x7, 0xff, 0x81, 0x1b2}, {0x5, 0x3, 0x1, 0xd, 0x1, 0x800}, {0xc, 0x2, 0x78fd, 0x7, 0x7ff, 0x4}, {0x5, 0x34e1, 0x3, 0x7fffffff, 0x4, 0xd}, {0x1, 0x800, 0x3, 0xff, 0x2, 0x6}, {0x1, 0x8f2, 0x5, 0x2800000, 0x2, 0x7}, {0x401, 0x7ff, 0x6, 0x2a7318d7, 0x9, 0xffffff80}, {0x80000, 0xbd, 0x8, 0x0, 0x3b, 0x6}, {0xcd, 0x800, 0x7, 0x5}, {0x2, 0xb, 0xffffffff, 0x3, 0x7, 0x9}, {0x5, 0x0, 0x7fffffff, 0xb, 0x7, 0x4}, {0x9, 0x8, 0x5, 0x1ff, 0x2, 0xfffffffb}, {0x9, 0x276, 0x9, 0xffff, 0x93}, {0x8095, 0xfffffff2, 0x3, 0x3, 0x7, 0x8}, {0x76d, 0x9, 0x7, 0x1004, 0x3, 0xd}, {0x5, 0x4, 0x69, 0x3, 0x7, 0x4}, {0x2, 0x3, 0xfffffe01, 0x7, 0x8, 0x1}, {0x1, 0x7c4, 0x18e99bd9, 0x2, 0x9, 0x5}, {0x9, 0x2, 0x6, 0xfffffffb, 0x0, 0x441}, {0xffff0001, 0x5, 0x10000000, 0x9, 0x0, 0x200}, {0x2, 0x6, 0x0, 0x1, 0x2, 0x7}, {0x9, 0x80000001, 0x3, 0x4, 0x0, 0x4}, {0x0, 0x7, 0x2, 0x49, 0xffff, 0x1}, {0x9, 0x3877a981, 0x2, 0x5, 0x7c1e}, {0x6, 0x7, 0x1, 0x37, 0x101, 0x6}, {0x5, 0x400, 0xcc, 0xa8, 0x200, 0x10}, {0x4, 0x101, 0x8000, 0x8, 0x3, 0x9}, {0x9, 0x0, 0x6, 0x4, 0x4c14, 0x8}, {0x8, 0x3, 0x2, 0x5, 0x1, 0xa0}, {0x8, 0xe5, 0x68e4, 0xc, 0x340a, 0x7fff}, {0x401, 0x7f, 0x0, 0x0, 0x3, 0x98000000}, {0x6, 0x56, 0x10, 0x1, 0x29, 0x40}, {0xfffffff7, 0xffad, 0x5, 0x5d, 0xff, 0xe8000000}, {0xfffffff8, 0x40f1b4ea, 0x10000, 0x5, 0x3, 0x3}, {0x3, 0xd26, 0x7, 0x7, 0x5, 0x2}, {0xffffffff, 0xfffe, 0x8, 0x7, 0x2, 0x5}, {0x1, 0x6, 0x4, 0x1, 0x3, 0x8}, {0x7, 0x1ff80, 0x2006, 0x36, 0x6, 0x9}, {0x5, 0x9, 0xb, 0xf1f5, 0x5, 0x2}, {0x4000000, 0x8, 0xfffffffa, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x7f, 0x6, 0x0, 0xffff, 0x1}, {0x9, 0x2, 0x3, 0x9, 0x4, 0x5}, {0x1119, 0xd75, 0xf, 0x1, 0x5, 0x1}, {0x6, 0x401, 0x2, 0x5359, 0x80000001, 0x8}, {0xb, 0x6db, 0x7, 0x200, 0x80, 0x6}], [{0x3}, {0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x1}, {0x3, 0x2}, {0x2}, {0x1}, {0x0, 0x1}, {0x5}, {0x2}, {}, {}, {0x4, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x7, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x2}, {0x5, 0x1}, {}, {0x5}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x46b716bf411929ed, 0x1}, {}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x2, 0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r9, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r7, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f0000000000)={0xa9a1, 0x1, 0x238, 0x3ff, 0x0, 0x20, 0x2}) 3.692522802s ago: executing program 2 (id=4556): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f00000000c0)="0766f9e9a00925f0ad4c73cffac202f5cd6c1058564baafaf76c8fcd922285e3a164e208f5adb0647771c31d20c142a627c4b85e39", 0x35, 0x800, 0x0, 0x0) 3.553491155s ago: executing program 0 (id=4557): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) 3.54769444s ago: executing program 5 (id=4558): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000440)=0xfffffff0, 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x7f, 0x0, &(0x7f0000001180)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010042cc62e4e671a86e0d256d00000008000900"/32, @ANYRES32=r5, @ANYBLOB="0c009900880000007f000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYRES8=r7, @ANYRESHEX=r7, @ANYBLOB="9f40595ef2777a82f65e35189608e040bff8691fd5e37044a87e1e04d9596990a200bc45a966c50c87e8455a39aab39a06f41d35cc8d52df917f3b7f72dc24b746a94d6bf38cd0e77e3c53fda3d3bd1175553ad2d76d3f0d60161eb32c66f0d7fdb5392be13bc26e655d3f53acf5627cc4f4d6b0a299e18d1860cf407b0e2fcb8f7fe4d82c09", @ANYRESOCT=r1, @ANYRES16, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) readv(r8, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000040)={0x4d, 0x7ff, 0x3, 0x800, 0x3, [0xddeb, 0x9, 0xa46, 0x100]}) 3.459542524s ago: executing program 2 (id=4559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x1e8, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0x4}}, [@TCA_STAB={0x1c4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x6, 0x8001, 0x1, 0x0, 0x5, 0x0, 0xa}}, {0x18, 0x2, [0x0, 0x1, 0x9, 0xee, 0x8, 0x3, 0xfff8, 0x102, 0x4, 0x7]}}, {{0x1c, 0x1, {0x3, 0x4, 0x3, 0x1, 0x0, 0xa, 0x8, 0x4}}, {0xc, 0x2, [0x3, 0x2, 0x2, 0x10]}}, {{0x1c, 0x1, {0x10, 0x5, 0x40, 0x8, 0x2, 0x4, 0x0, 0x8}}, {0x14, 0x2, [0x8, 0x200, 0x78, 0x85, 0x80, 0x9, 0x81, 0xfffe]}}, {{0x1c, 0x1, {0xf8, 0x14, 0x5, 0x9, 0x1, 0x7, 0x5, 0x2}}, {0x8, 0x2, [0x1ff, 0x55a]}}, {{0x1c, 0x1, {0x5, 0x1, 0x5, 0x4, 0x0, 0x1ff, 0x3, 0x8}}, {0x14, 0x2, [0x0, 0x3, 0xfffd, 0x8, 0x4, 0xffff, 0x4, 0x5]}}, {{0x1c, 0x1, {0x3, 0x0, 0xacb8, 0x80, 0x1, 0x7, 0x0, 0x5}}, {0xe, 0x2, [0x6, 0x4, 0x2f9, 0x6, 0x1e2]}}, {{0x1c, 0x1, {0x5, 0x0, 0xfff7, 0x4, 0x0, 0x0, 0x2, 0x8}}, {0x14, 0x2, [0x1, 0x2, 0x0, 0x1, 0x7, 0x6, 0x0, 0xf1f4]}}, {{0x1c, 0x1, {0x7, 0x7, 0x64cc, 0x9, 0x1, 0x2, 0xe8, 0x9}}, {0x16, 0x2, [0xde5f, 0x7, 0x6, 0x6, 0x4, 0x8, 0xe, 0xd1, 0xff]}}, {{0x1c, 0x1, {0x7, 0x5, 0x3, 0x1, 0x1, 0x5, 0x80000001, 0x2}}, {0x8, 0x2, [0x1800, 0x1]}}, {{0x1c, 0x1, {0x9, 0x5, 0x8, 0x3, 0x0, 0xfffffffd, 0x0, 0x5}}, {0xe, 0x2, [0x8, 0x1, 0x3, 0xc, 0x6]}}]}]}, 0x1e8}}, 0x48814) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r13, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x6}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xcd, 0x4, 0xaf4585f225cdc3e8, 0x64, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(0x3) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x4810) close(0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0x0, 0xfff3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x3, 0x3, 0x7, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 3.455183484s ago: executing program 0 (id=4560): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x200, 0x42}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x19af7f58d24b3d6d}, 0x8000) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r6, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10d}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x401}]}, 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x20000010) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) (async) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x0, 0x2c8, 0xffffffff, 0x0, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'fsm\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @rand_addr=0x64010101, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x29}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000006c0)={r8}) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000840)=0x473e, 0x4) syz_emit_ethernet(0x8a, &(0x7f0000000700)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @val={@void, {0x8100, 0x3, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) 930.441446ms ago: executing program 0 (id=4561): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 803.859166ms ago: executing program 5 (id=4562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 735.581554ms ago: executing program 3 (id=4563): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000024002000047a6548071a0ddaa0ad6383", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000500)) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400058005000400000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002640)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xffff, 0xc}, {}, {0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x1}, {0x6000, 0x0, 0x4, 0x2, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3fff, 0x0, 0x0, {{0x5, 0x7, 0x6}, {{0x1, 0x1, 0x1}, {0x1fffffff}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f00000007c0), 0x0}, 0x20) r7 = socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x2, 0x0, &(0x7f0000000000)) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1, 0xff, 0x0, 0x5394}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x35, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r9, 0xf501, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811278000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 726.13846ms ago: executing program 0 (id=4564): ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x40011) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf25050000000400028004000280140001800600010002000000080005000300000008000400ff070000398b469a1961ff7e035de92e0bea52ce2f5b210a605ece1b3da94552ab150d98e8dec5def9e1945b3932b0701720e978451cc490ff79da7cbbd7"], 0x38}, 0x1, 0x0, 0x0, 0x44041}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a00010000000000010000000a000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x4801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000fc0)={'sit0\x00', &(0x7f0000000f40)={'gre0\x00', 0x0, 0x40, 0x80, 0xb7, 0x5, {{0x11, 0x4, 0x3, 0x8, 0x44, 0x67, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local, {[@cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x0, 0xb, "24f65dab8c01e2bdae"}, {0x6, 0x8, "5dd315bfa80b"}, {0x0, 0x2}]}, @timestamp={0x44, 0x14, 0x26, 0x0, 0x4, [0xfffffffe, 0x286c, 0x5, 0x3]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001000)={r5, r6, 0x25, 0x10, @void}, 0x10) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r9, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}, 0x1, 0x620b}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_LEAVE_MESH(r10, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r11, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}}, 0x20040011) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) sendmsg$ETHTOOL_MSG_WOL_GET(r13, &(0x7f0000000f00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x14, r14, 0x20, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r12, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r12}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x58}}, 0x0) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 680.555219ms ago: executing program 5 (id=4565): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 654.718784ms ago: executing program 0 (id=4566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x3, 0x3, 0x6361, 0xffff2a4b, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8001, 0x9, 0x7fffffff, 0xffffdf2d, 0x6}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000006c0)="8c3fe11ab92621892c08002ce7ae", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x4c, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14091, 0x8240}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 591.508931ms ago: executing program 5 (id=4567): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000030000000000000000000000000080a00"], 0xb8}}, 0x0) 528.471355ms ago: executing program 2 (id=4568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="4400000010000104000000000000f0ffffff0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) 528.164911ms ago: executing program 4 (id=4569): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x0}) sendmsg$tipc(r1, &(0x7f0000002400)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{}, 0x3}}, 0x10, &(0x7f0000002380)=[{&(0x7f0000000080)="79dfb5fc76015b89863a91c883b7841e36a2b330ed49cf1fe68adae5f8f1e9c42a57c3901313429c", 0x28}, {&(0x7f00000000c0)="736ee69bddb575612ed499220ee39c6c73fc8227855235d058bc1a88", 0x1c}, {&(0x7f0000000100)="23887e921153936c438be6cc4597a813588c0573f0f00d2719d8299b", 0x1c}, {&(0x7f0000000240)="27169e9b858d2ca97271a9f11363e35f3f50b033f272d0c6ee67d7161277307e3213901a17473ee0b272b67faaab60be18d72f1c63d779c235baa069b79392d251452493866dd76ea2c58b394e0afcb6553045953442ce1b6b464cd675889ee693eefe790789e26ef11019f4a21bc687dd4f61b2770f2e23d38f5a1e0e4fec6fcee9fabcccf6296a1e9e8bd4d7020c41e9fcb6d9a48dd73159cdfc564f4312ec7a59d19e41931fbc14bac68a0d99fc50dcc2c4dae2213c122238098006b9d16e200cb55693326f506e51782f2f574422a3a1dbd017703584c78a996c72533cd19d537a331ba04e53ad5ea09601a5f8ca8519ce45e7508f8370e37978e8303976739dde69d11471048606b85fe234cee5c1d037353e3294aa5ce4ce2c94357a957418f3416ee45a0b23ab4a8777051af7cb7abebecfb6cf2d27ceaba3d01aa93366ee93365919a7b8ac1e9e9e465bd331d8b8b1a8221f7c2abe0ba70afe5ca03ebb72d56c63e4776448aea008e16a0ed21f8469c18beda65d8af56d874aa82a785f04bc250f10f1ef894e92bc855a0b0cd8a34bddfb8457cb5b8ba78f20a47649df0d93b7d9753f58b8607e8052aca7aa86c153bdf4d30cf8f30ce7de32e5d6a924ad1e727531e754b30c31b580022f26214df66bc4f6c076f0b710190248ffbc14ab8033bb5d263ec69062151702bad7b38121518d441a2e08a9d5a2f18b2c335c4d9d85ca05863136a0d1c3470817c3505995d053963ec9c71619cca17e5abd01343e1dd11ce8090b8bb8684ea2181701e8147669f33790dc7c6865109766371b53f951cf22493c71b3b477e867c2bd8cf3f406274927cfd1854839418181fa48765437364ec8ef9c68fdbb6de1bbe08f6ba6c7de34ab65cb20c4b27f11e941e6b09f8109cacd59d041741833ab67424f8f201ffc88d227aa29b74a4f182d5c51fc36d14ad3f2fa91e7c5f6991c5bcb7925a2c8f9a890aa9f0437f409f1933a99853b5a46d641fe080c0089f9f96cb3f9855f9682a355bae40e2a3f056d71fd0f1c0ac361ee61de157b8be71c0f89e8b9ca8524c0938e800cc3e7b25829ef3531852063e4ad002ee9ce34e23beddb09f5202780a70717a96a4021d77d197637d006b02802c3e7ad1a3f464924e5a0fd5fdc05568d07a1af94a4f72bbb8a73b66a7b1c2f17b746e4ee7d126a0a0862eb50ea99e0a15fa5ba20ea2b9da821de365a6a5dc61b994eaed58ae42a6d0f6742ca7fac9269cbf825d36a9491f1e87630f883ac15ac393fce1116a73bb89a09b4bca46e6e37d9f7f5277be54532dcdfce31e3c57939a4407f4648c8fea6234a051503a558f0c7fdb10539f2c3523a5b163e4e9105ac710cd9583f0c185f18c4b2bf0347c748ec33ccf476944b322371ccb7b5ab6ea77392df0976cab09a10794aa05bf90547b8babd6abc0aab8c925869f54c825f99ffeb47e08b433a5effd476f784421436f1a5f33bd1ad66c8119700b614939cb18e5bcbb59bf6a2daac3f9885c671751fc239d7642a59499123a1b5a9df10c0b3b3456740f6ba0e2e766227378bccaa7332e64f8ec41f03f5373cbe38ed6f63e62890dc5bf1ae72a6bfe42f8fef3ab05d5a6215c5ef5686a9c8cd6976099d7daf51d504b08cd2e33309ff77180cf91608e3c91c4b797bb8d31ed12508b6f63e91811568a8dcf3cdadf49a6bc126eaecc2617312058e820980271d927c6a3bdca7b9b69a1902f45fa40e1aea81e516703a57d6d7f91df28c2a4959aa625e8450921646030e688ec7f69966c15bd7d5a7f77a9b3d09c0c11ac8c76dcb47d62c44d839b34ba42fb3a4c8e75ed18e98147c072aa98b4b17804d2cf2396dfc32df89ea78efad003b5ba66034c5908516ab153f07493fd9e0dbfb0f4ba94fb48f8ad36481a14e52f01275581b0c5a802f03d0534134522b28a912381dab93ad57eeb1577460d01ec3a75bf1d04131de606e176afed1fb1c7cc92b8b1cf6b53640183d7444077c550b387a6b4ac62c467c5f2a84500169a8a8b78e6ea7bf6af3353c10ce4fc8b89a5de386c13509220fa197979d363b3553d47a9bee8c2af4d61eec0585100f499ceab9f019e769e81228fda4a7a0df8a04ae94e5481b3e136d2efac2a97926e7eda158ab2633fd154ed0cdbb29890b6d7ff3aec0a4d66797a521500e4c37f9e186d1bf673d12cc83cfec2f1d0cd6ebb88496f206de23fe9c20209ec1ed130302ca5830e065f0a4f87043fa27761e44e32494868dcad2017c4631845289d2e652b6a490750c89964aaaae95d18c1e3e0b0b5d9b9e08b08502a7028e9dd03f8814dd6e6308110c93a217f06c25a2fd689ca1cb2a6f6d89d0f74672fc20a6c6ca8697121fa3d7cab47b7ca8b537ffad1b6ba7ae54ca9e0dff6f0c563c12decab8426062b7e504d0cff7f5bfdfb043b49e567cba61d8bdfdf442107f057dbf2d1396270246205ad3bcbae411ce4960e826d538f27063b8e750e0f1b0a6acf67ca49016d791c7ef4892571f664403a67396716169592cc9f85905cc450e5e3d3ff2b44a72c05cb53e4128bd8f0e1370bf49ff6f08db3f8e5ba548ee0ac9d7d7c27004bb79f69714f90d80813691d818c3ebfc1fbde45a29be9a0657f5948c3dbc22534cb25b7d2630935d541bd87bcc2410ef1378bf593c7a54dd21d7f26e0b3f6ae33bbf0164866682139abb7f96c77acad42c5dbc8ffa4b7a90d5f67a569d91ab68d7fc718aa43219560ef1883c27ef06a367720e2eef811a690b067b19b9a0fc6e5bb924ade6aa67809f10279053121ce36a0975ef03b0637d4fe4703724a384bc19241552a9fe2fd3a27e96707c91293012f12dd23d5189f2fbfc4e438d67647be0716ddbad7e14965c50da2bfcf8e64d38ce65006fafb2858d5b7713526e2b31cf44ef1a62d31a68a763dcac9578754688c50dafe8e0331846aa9594248008e5e929f9f527f744b871ebae7078b74d75b3505f3fb2530c7bae7cf83a523fabd99d78680b8e26d4e9d724b1be16482aa146fa73ff538dc7387ea52a25b3c60596c0d3dffd6c09fe23ca50f4fe44f6f8ef792dc5e0888402a234397c6daaca7c952d5c3d217f9e44ebd3d01df074e274cffd5e893c5ca5af60889243110f0e42bd48f7e81ab885cbc417a0d70738f7ac08cbf7582d5e6bac0f832eadf7cfdc27fa52cd1187fc97537b6ebb0a12348c3f2687439482db7af675459f9e3c374618c0423194059df2cd059ab0344ef0a9d30c2a353c0be8adee20ed9862b9f5b53a47b0f0b46ad03fa7a8456d0cbac7f1c5a8eb301dad1756152be7ace19cdaa80e9c48cfe56883a49a172915f3f57c4b5541d8598cb1dc78d836681797a5ed1d47644c44184f8745ab2ce2f37f9eaee9b10c42f7a43104e72ca12ee682eefd09fd75130756283e95b585c88cb99ae4fcc5759f9c126d591151ec2d9328ccc1b5fbb4686fc5dada960484d9c512953195c79c5312b667e019a59be1685c5bad9635c08159dcaf6cf002037b600e10361ffd5635085125950c62ec9b0a0ee247a2dae7c7cd5cde93e07f47ca02c474719ab153580e5d0bd277272972e812a7a4dff51722f9ce38b4f5d10467cddbc62c3dea7f3251608486b75bd80b16caedefed182fc54fe222b6502d8e301429b6cc1298a45026e0b71a34bcf68db6a4305e4caddfcd0083c7ac4629b8a97e1c5d2d03d8218d75a123b90c9795137858815ce0c735b346353a30f10f34864342949dd36b7f33b24587fe3acb39885907d10dd91a8051311106051e4fd3040b921766724f853a21b73f0871adfc2f5d20de1bede2af9e98913a659dc9c3d7dc04a0830f2bae04c8af772ee611b301d10065d4dc6e6514bb1d448db5037dc0922672a3d7387cbbf559303c342881a9a686c2d73cb5be291405bd2e93302c3d900953d93f9154158cade4629683b380476f6e3fee30deaf9630dcaa1763fbf990d8868a18aef376ab362ade63555997abdfead46ffb33761a6c1909527b7378e21e03e59bf5e4271d7c408d625fb1bcde0bf993f30cea7262addc4f6db02ab297c9d8bd9e72352361835e42a2bc6e5748ba53a345c31b53227b3f158712314648c6492b30edf26bef521ee71f12fccde9fc3849d81b1b70e71c15c6a6e210a69414cfc2d28205b16fdf285c1a493780e5a76cc0750f9854208a3be3a388d71123539d29702fbb082a4a6eb23dd432da6e81f1bdca7377f31c1836bcd913f3a78070ae4e86e9b15cb9ed212bba5631634281237ca04c4b83121e97c6f2baf10e62416bbf9cb1555a3c825fce80805dc0655dca08d4f4fac4da66877a671b5c7993dda004078a83f066fd10f64fb3446355eb851dc0d9304c525ba21ae167d1baa6bb160ad1c5303bc73f01266c3e177d87c565a5c083bcb183fc10210caa2ab381537d93454764f9cf6e805476962212c43f6db8b2b6952ff199375413a7233c330ee7918dc4f66cb4a601f6715f1d471135b536435fb2414d11086f15ad4310f6a0c94ae17d6b42509f374a839c70c74ac4731b70b14f0634378b6f86d2f3b59c43d56f99969c0ef64444477a399c4f6aa4af7df0a6e2013e657b5fc1725a751d031fc5294aa72a38a4167088129b4dae517d8868063be36ebff2407b8d5b3df65ae796cb26876d3b51260974efe94e2f405c58a14c50eeec76e8fc9843573ac406e0da3382f8c37352946e8c1b1c2e79f8b27d736c9f3e0eab8bc6f9cd73d689c88f5d553c9425a58298d74362107740689252bf90ee4541856e9556997ca786da9ea5371498485e685fa6a5c02b7223f0926bc423f6fa29ac1897b77190b2eb4bc98667a52c41651c789ba96c3fce1c1ee2568cc03b11d9cdaf5372e5d80065151a512c2786d0be8e9f6bcec669211cef34bd57ccefceef2deea5faad4f08902382128ea5d4b18993792e2bf52a3b6ff0e71b33b5e9bf89355acb5aac7fe415b3cfe06ae211d1535c4c9a71bd3f4472554cf7e045ba8e474e6bbd5398b92f627d144f0b6eb7abc2961c0d8ab20d41e5621b5da5637aa8f77635ca924b000da1cc69cc885c557a385a2926d0cb1ec6bcb6c4ab4dab7615dbaa0e6e817fc29c9f2846386724c9582c30d7451d2b30b658ad4430aaa1c0a7433d488b91347173b8ab272f0315eb2bc8a054ee15b459e20551e3739932d872afe6e2c6c20139be4fc4f499f647145df83aa2684bfcd4e59d7168895f97f27e9c083659037a26e58a3228b41cbdfc0351daf31c928a635fc6cbbbdad4e8d809cccfafac15f97aeb7499837904bbc5bf3c7081653b1dc01447fedc34c824d5c54bc0e78cd64f325d4a578275e029229e658a2bcb2a77f4911acbea133f1d245fe35ccb6248b5ce36e53ba02e744c870b2d7e98ee59c46004f4d59985015a74ece24d06a3e07d67aa84bad2b4f3427170ec3bbeb0032f9a6bb151495a726a5e93e0b4b9ea982b403bcadb7cedf6f5d6aeb9f21b96811dcd71ee1db0af3fa20737181e7152d37868271040441056310efbf96a46bc7a7b83a0b31404c97c5303d7a1b09dec326dee1ee9e62b17f691f54cc444546fe1de30b3b7014168069586230883009c35bed35eae2ccebec6f4bd970134df7abc13f2674e1d84e8440b023d88bf7049b50f32e93a6570f2ef6d3137712b76546c416b9edb0705479dfab6ee6b550839d6cbcfac5f118443daf4653ae1c35c91f9151e4e7b2cad0e361c3bfb6b15de9eb103785aa6351c173ac5eee3ed82c79a29b1d6ea2619f8f7fa641a77381c23939ca9ccf02876e7282bd50cfd7f5c7c32980ab9", 0x1000}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="de11b8e63212edae1305dcca8c6f39a9cf8b41b79baa44b21b6362fcaa08d8dbfda529a5854fbfa2aac1da13341c1b4cd3decb73e8d6dea95f23e1338fc236c52b387601fde5ce789ebcfaa18daa2f6191c8e79f57ff42625a13035157d622d7117ff7a349da44e8ea337c82b4a3f6987b81", 0x72}, {&(0x7f00000022c0)="19ad8d8baed603fd6ad420c126733f6878cf32088b66e0e22cc021d0da60061eb6e725fbde542af307d4452135094c8fcb13c2a575ff7786d75a272012322f005c93394267c99d6b2c4d9858655370f8fe25bd3b9079177070e4d5c08c95aa189f52eaa3e4462f0563d9fa18e6b6c54717ddb2685878d83298a3e125e8c02ec90d3622fba9f035323bc4321942f4e858972071acc0129475a440425ebc8de6d18b5c3ddf756afaa58ebc", 0xaa}], 0x7, 0x0, 0x0, 0x4}, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 366.398632ms ago: executing program 5 (id=4570): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2d}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="08008000100001002f00000000237fc7a8000000", @ANYRES32=0x0, @ANYBLOB="57270200001400001400030067656e6576653000000000000000000014001680100001800c000400ffff00000008c005"], 0x48}}, 0x24040800) 355.359497ms ago: executing program 0 (id=4571): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() write$cgroup_pid(r0, &(0x7f0000000040)=r2, 0x12) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) write(r0, &(0x7f0000000080)="91333c56ffc98298a406c99dbf56fa634e56eb1ccb2ab57b8f8cbde60a86b9140b718585", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r6, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000200)={0xffffeac5, 0x3, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, 'pim6reg0\x00'}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000240)={'veth0_to_batadv\x00'}) ioctl$XFS_IOC_GOINGDOWN(r5, 0x8004587d, &(0x7f0000000280)=0x6) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f00000002c0)={r3}) r7 = openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.kill\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000340)) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x12, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7b0, 0x0, 0x0, 0x0, 0x10b0}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24870c91}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}, @jmp={0x5, 0x0, 0xb, 0x2, 0x6, 0x30, 0xfffffffffffffffc}, @map_val={0x18, 0x7, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x70b5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}]}, &(0x7f0000000480)='syzkaller\x00', 0x4, 0x61, &(0x7f00000004c0)=""/97, 0x40f00, 0x0, '\x00', r8, 0x0, r7, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x4, 0xa, 0xeeb}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000600)=[{0x4, 0x3, 0xd, 0x4}, {0x4, 0x4, 0x7, 0xa}, {0x5, 0x1, 0xc, 0x2}, {0x5, 0x4, 0x4}, {0x3, 0x1, 0x4, 0x3}, {0x2, 0x5, 0xd, 0x4}, {0x1, 0x5, 0x8, 0x1}, {0x4, 0x1, 0x0, 0x9}, {0x1, 0x5, 0x0, 0xb}], 0x10, 0x10}, 0x94) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getpeername$inet(r9, &(0x7f0000000780)={0x2, 0x0, @private}, &(0x7f00000007c0)=0x10) openat$cgroup_devices(r0, &(0x7f0000000800)='devices.allow\x00', 0x2, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_ADD_DEV(r10, 0x5000940a, &(0x7f0000000840)={{r3}, "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"}) getsockname$tipc(r1, &(0x7f0000001840)=@id, &(0x7f0000001880)=0x10) ioctl$XFS_IOC_FSGEOMETRY_V1(r7, 0x80705864, &(0x7f00000018c0)) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000001940)=0x4, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r7, 0x89f5, &(0x7f0000001a40)={'sit0\x00', &(0x7f0000001980)={@broadcast, 0x0, 0x0, 0xa0, 0x0, [{@remote}, {@empty}, {@remote}, {@remote}, {@initdev}, {@remote}, {@broadcast}, {@loopback}, {@broadcast}, {@empty}]}}) recvmmsg$unix(r3, &(0x7f0000003ec0)=[{{&(0x7f0000001a80)=@abs, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001b00)=""/47, 0x2f}, {&(0x7f0000001b40)=""/249, 0xf9}, {&(0x7f0000001c40)=""/6, 0x6}, {&(0x7f0000001c80)=""/152, 0x98}, {&(0x7f0000001d40)=""/13, 0xd}], 0x5}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001e80)=""/129, 0x81}, {&(0x7f0000001f40)=""/169, 0xa9}], 0x2, &(0x7f0000002040)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000002140)=@abs, 0x6e, &(0x7f0000002380)=[{&(0x7f00000021c0)=""/172, 0xac}, {&(0x7f0000002280)=""/228, 0xe4}], 0x2, &(0x7f00000023c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000002500)=@abs, 0x6e, &(0x7f0000003b80)=[{&(0x7f0000002580)=""/209, 0xd1}, {&(0x7f0000002680)=""/82, 0x52}, {&(0x7f0000002700)}, {&(0x7f0000002740)=""/255, 0xff}, {&(0x7f0000002840)=""/51, 0x33}, {&(0x7f0000002880)=""/138, 0x8a}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/103, 0x67}, {&(0x7f00000039c0)=""/132, 0x84}, {&(0x7f0000003a80)=""/253, 0xfd}], 0xa, &(0x7f0000003c40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000003d00)=@abs, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003d80)=""/189, 0xbd}], 0x1, &(0x7f0000003e80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x5, 0x12120, 0x0) 258.028296ms ago: executing program 2 (id=4572): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="210f00000000fedbdf252000000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="c2c6b02afe6ea4e387f069ffc2d3abc86744b06e193b91d8f5d5a6535933c224ccbe37004347774d4c6dfc0fe3a59f3bfcaed346400fbaea6d0af556c12708fffb4bfabbb8bb6a2036dc1b"], 0x4c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) 248.829333ms ago: executing program 3 (id=4573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@local, 0x0, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000440)={r0, &(0x7f0000000340)='@](\x00', 0x408004, &(0x7f0000000380)={@align=0x200, {0x9, 0x7000, 0x3, 0x100000001}}, 0x6c4e, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x9}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x57d4, 0x30}, &(0x7f00000004c0)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000500)={r2, 0x400}, &(0x7f0000000540)=0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x100000000, 0x4, 0x7ff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r4, 0x401, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x58}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x24000804) 206.919558ms ago: executing program 3 (id=4574): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000020900010073797a30000000000900020073797a3100000000140003800800014000000000080002400000000038000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000"], 0xc0}, 0x1, 0x0, 0x0, 0x20042014}, 0x4004000) 97.911676ms ago: executing program 4 (id=4575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @local, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xa, @mcast1, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) r4 = socket(0x10, 0x2, 0x0) syz_emit_ethernet(0x20, &(0x7f0000002480)={@random="2b893c1caa3e", @random="caf66222e6aa", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "a3", "d6d9cc", 0x884c, "45bb8c97ec23fa20ead1"}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getneightbl={0x14, 0x42, 0x8, 0x70bd2a, 0xfffffffe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1855c1be7fce47e9}, 0xc04c) write(r4, &(0x7f00000002c0)="fc0000001a000708ab09250009a3330081ab0700a90100001d6051930800018000000000090000000000ffff00039815fa2c1ec28656aaa79bb94b46fe000000bc000300050000006c884000d09165d52495115ef5a46bd1ad140000270400117c22ebc205214000000000008935d0730206001720d7d5bbc91a3e3280775e9ddefd5a32e280fc83ab820d9473decc9204d287f605f702e2f4aa656d0448c22b7c59159ddef2fe082038f4f8b29d3ef3d92c83170c5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd1a6b567b4d5715587e658a1ad0a4f05731d05b0310b0041f2", 0xfc) 88.716711ms ago: executing program 2 (id=4576): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @mcast1, 0x4}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474804000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56da4dc46dc2767bbe00"}, 0x6c) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) (async) r3 = socket$kcm(0x23, 0x5, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, 0x1c) (async) listen(r3, 0x800) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000c40)=ANY=[@ANYBLOB="b4010000130000002bbd7000fcdbdf25580305094e224e220500000000028000030000000000000009000000000000000500000006000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8a, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1a, 0x232, 0x3, 0x852, 0x4000, 0x1, 0x2, '\x00', r7, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={0x1, 0xffffffffffffffff}, 0x4) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, r1, 0x2, 0x3, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x7, 0x14, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0xa7}, @call={0x85, 0x0, 0x0, 0xaf}, @map_fd={0x18, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x2a, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x8, 0xfa, 0x1000}, 0x10, r8, 0xffffffffffffffff, 0x2, &(0x7f0000000b00)=[r4, r9, r10, r11, r12], &(0x7f0000000b40)=[{0x3, 0x4, 0x6, 0xa}, {0x1, 0x5, 0x7, 0xa}], 0x10, 0x8}, 0x94) 28.54982ms ago: executing program 5 (id=4577): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 2.085744ms ago: executing program 3 (id=4578): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) sendmsg$nl_route(r0, 0x0, 0x40050) syz_emit_ethernet(0x36, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) getuid() getuid() r3 = socket$inet6(0xa, 0x80000, 0xa38a) connect$inet6(r3, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000000000000000000000000ffff7f000001ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000027"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000000000000000000000080ffffff00000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 297.185µs ago: executing program 4 (id=4579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x20008890) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_bond\x00'}) socket$unix(0x1, 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x130, r2, 0x1, 0x3, 0x0, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff0000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0x130}}, 0x0) 0s ago: executing program 2 (id=4580): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x0, [0x80000000, 0x5]}, &(0x7f0000000440)=0x44) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0xfffffffe, 0x20, 0x0, 0x9}, 0x10}, 0x94) syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaff07dd6a000000006411fffe8000000000000000000000000000aafe8000000010000000000000000000aa4e1d4e200064907802000000030000000200000054e90dade0f83f43817a33a14e88567da5f38ab436a174d6f2369fc532f6c82bfc7dfb6e5293418dd950af36edd6dc1c9cf20b4958f15cd0a3eddaf23b2e0eaf6272f64f06756f4bee7a8933b1524843"], 0x0) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x16d) socket$l2tp(0x2, 0x2, 0x73) (async) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x0, [0x80000000, 0x5]}, &(0x7f0000000440)=0x44) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000180)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0xfffffffe, 0x20, 0x0, 0x9}, 0x10}, 0x94) (async) syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaff07dd6a000000006411fffe8000000000000000000000000000aafe8000000010000000000000000000aa4e1d4e200064907802000000030000000200000054e90dade0f83f43817a33a14e88567da5f38ab436a174d6f2369fc532f6c82bfc7dfb6e5293418dd950af36edd6dc1c9cf20b4958f15cd0a3eddaf23b2e0eaf6272f64f06756f4bee7a8933b1524843"], 0x0) (async) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x16d) (async) kernel console output (not intermixed with test programs): ributes in process `syz.2.3588'. [ 477.956456][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 479.124621][T18918] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 479.224935][ T5294] veth0_macvtap: left promiscuous mode [ 479.261228][T18435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.270763][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3589'. [ 479.308962][T18948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3589'. [ 479.353464][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3589'. [ 479.423186][T18951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3589'. [ 479.636689][T18961] netlink: 'syz.2.3591': attribute type 178 has an invalid length. [ 479.833398][T18964] bond1: entered allmulticast mode [ 479.887401][T18972] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 480.438212][T18435] veth0_vlan: entered promiscuous mode [ 480.499511][T18435] veth1_vlan: entered promiscuous mode [ 480.604574][T18435] veth0_macvtap: entered promiscuous mode [ 480.643723][T18435] veth1_macvtap: entered promiscuous mode [ 480.692109][T18435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.722693][T18435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.779358][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.814105][T19005] netlink: 'syz.4.3601': attribute type 1 has an invalid length. [ 480.832141][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.858462][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.131769][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.455764][T19017] xt_hashlimit: size too large, truncated to 1048576 [ 481.479319][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.515270][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.676149][ T7597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.722391][ T7597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.274974][T19042] xt_hashlimit: size too large, truncated to 1048576 [ 482.295347][T19037] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 482.724438][T19053] syzkaller0: entered promiscuous mode [ 482.757327][T19053] syzkaller0: entered allmulticast mode [ 482.825579][T19053] Bluetooth: MGMT ver 1.23 [ 482.848935][T19059] netlink: 'syz.2.3614': attribute type 10 has an invalid length. [ 482.860488][T19059] veth1_virt_wifi: entered promiscuous mode [ 483.174149][T19069] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3617'. [ 483.629769][T19069] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.639311][T19069] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.888515][T19065] syzkaller0: entered promiscuous mode [ 483.907847][T19065] syzkaller0: entered allmulticast mode [ 484.477475][T19103] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3622'. [ 487.269585][T19121] netlink: 'syz.0.3626': attribute type 15 has an invalid length. [ 487.311489][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3626'. [ 487.873984][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3634'. [ 488.482525][T19166] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 488.498531][ T7941] IPVS: starting estimator thread 0... [ 488.651170][T19191] IPVS: using max 35 ests per chain, 84000 per kthread [ 488.872733][T19163] syzkaller0: entered promiscuous mode [ 488.888669][T19163] syzkaller0: entered allmulticast mode [ 488.992548][T19170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.292763][T19214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3650'. [ 489.325590][T19215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3650'. [ 489.437259][T19226] netlink: 'syz.0.3652': attribute type 2 has an invalid length. [ 489.476351][T19229] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 490.779556][T19245] Bluetooth: MGMT ver 1.23 [ 492.790800][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3661'. [ 492.895955][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.905189][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3661'. [ 493.164114][T19270] bond1: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 493.248717][T19282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3665'. [ 493.268435][T19270] bond1 (unregistering): Released all slaves [ 493.323040][ T5635] Bluetooth: hci3: command 0x0406 tx timeout [ 493.881925][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.900527][ T1183] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.923400][T19282] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3665'. [ 493.944365][ T1183] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.106454][T19307] syzkaller0: entered promiscuous mode [ 494.119423][T19307] syzkaller0: entered allmulticast mode [ 494.545317][T19331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3673'. [ 495.245230][T19353] sctp: [Deprecated]: syz.5.3676 (pid 19353) Use of int in maxseg socket option. [ 495.245230][T19353] Use struct sctp_assoc_value instead [ 497.832476][T19373] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3679'. [ 497.921047][T19383] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 497.956984][T19387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3682'. [ 498.012890][T19387] sctp: [Deprecated]: syz.4.3682 (pid 19387) Use of struct sctp_assoc_value in delayed_ack socket option. [ 498.012890][T19387] Use struct sctp_sack_info instead [ 498.377960][T19406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3689'. [ 499.406117][T19452] netlink: 'syz.3.3695': attribute type 6 has an invalid length. [ 499.587439][T19431] netlink: 'syz.5.3694': attribute type 3 has an invalid length. [ 499.908422][T19450] syzkaller0: entered promiscuous mode [ 499.918062][T19450] syzkaller0: entered allmulticast mode [ 501.483347][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.601285][T19512] syzkaller0: entered promiscuous mode [ 503.606808][T19512] syzkaller0: entered allmulticast mode [ 503.813173][T19531] netlink: 'syz.5.3714': attribute type 1 has an invalid length. [ 503.875919][T19534] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3714'. [ 504.441871][T19531] bond1: entered promiscuous mode [ 504.456558][T19531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.468912][T19534] bond1: entered allmulticast mode [ 507.134938][T19540] bond1: (slave bridge1): making interface the new active one [ 507.143237][T19540] bridge1: entered promiscuous mode [ 507.148633][T19540] bridge1: entered allmulticast mode [ 507.165235][T19540] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 507.356363][T19581] IPVS: length: 128 != 24 [ 507.455909][T11338] bridge_slave_1: left allmulticast mode [ 507.495065][T11338] bridge_slave_1: left promiscuous mode [ 507.521111][T11338] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.577507][T19591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3726'. [ 507.591275][T19591] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3726'. [ 507.606789][T19591] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3726'. [ 507.628636][T19593] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3727'. [ 507.673364][T11338] bridge_slave_0: left allmulticast mode [ 507.699285][T11338] bridge_slave_0: left promiscuous mode [ 507.723105][T11338] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.773483][T11338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.800354][T11338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.812735][T11338] bond0 (unregistering): Released all slaves [ 508.827676][T11338] bond1 (unregistering): Released all slaves [ 508.851274][T11338] bond2 (unregistering): Released all slaves [ 508.876108][T11338] bond3 (unregistering): (slave lo): Releasing backup interface [ 508.886451][T11338] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 508.905869][T11338] bond3 (unregistering): Released all slaves [ 508.926901][T11338] bond4 (unregistering): Released all slaves [ 508.947879][T11338] bond5 (unregistering): Released all slaves [ 508.968336][T11338] bond6 (unregistering): Released all slaves [ 509.011417][T11338] bond7 (unregistering): Released all slaves [ 509.031078][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 509.319420][T11338] tipc: Left network mode [ 509.857634][T19627] syzkaller0: entered promiscuous mode [ 509.877642][T19645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3738'. [ 509.888090][T19646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3738'. [ 509.892386][T19627] syzkaller0: entered allmulticast mode [ 510.354328][T11338] IPVS: stopping backup sync thread 7380 ... [ 510.374734][T19659] FAULT_INJECTION: forcing a failure. [ 510.374734][T19659] name failslab, interval 1, probability 0, space 0, times 0 [ 510.457826][T19659] CPU: 0 UID: 0 PID: 19659 Comm: syz.2.3740 Not tainted syzkaller #0 PREEMPT(full) [ 510.457853][T19659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.457864][T19659] Call Trace: [ 510.457871][T19659] [ 510.457879][T19659] dump_stack_lvl+0xe8/0x150 [ 510.457905][T19659] should_fail_ex+0x412/0x560 [ 510.457929][T19659] should_failslab+0xa8/0x100 [ 510.457947][T19659] __kmalloc_cache_noprof+0x88/0x660 [ 510.457971][T19659] ? sctp_stream_init_ext+0x57/0x180 [ 510.458002][T19659] sctp_stream_init_ext+0x57/0x180 [ 510.458029][T19659] sctp_sendmsg_to_asoc+0x8e4/0x1900 [ 510.458048][T19659] ? __asan_memcpy+0x40/0x70 [ 510.458076][T19659] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 510.458108][T19659] ? sctp_connect_new_asoc+0x40a/0x6b0 [ 510.458128][T19659] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 510.458149][T19659] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 510.458172][T19659] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 510.458194][T19659] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 510.458213][T19659] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 510.458235][T19659] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 510.458258][T19659] ? security_sctp_bind_connect+0x7e/0x2c0 [ 510.458287][T19659] sctp_sendmsg+0x1b85/0x2c50 [ 510.458324][T19659] ? __pfx_sctp_sendmsg+0x10/0x10 [ 510.458347][T19659] ? aa_sk_perm+0x6d5/0x900 [ 510.458370][T19659] ? __might_fault+0xaf/0x130 [ 510.458398][T19659] ? __pfx_aa_sk_perm+0x10/0x10 [ 510.458424][T19659] ? sock_rps_record_flow+0x19/0x350 [ 510.458443][T19659] ? __pfx_inet_sendmsg+0x10/0x10 [ 510.458461][T19659] ? inet_sendmsg+0x2f4/0x370 [ 510.458479][T19659] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 510.458501][T19659] ? __pfx_inet_sendmsg+0x10/0x10 [ 510.458520][T19659] __sys_sendto+0x5de/0x710 [ 510.458546][T19659] ? __pfx___sys_sendto+0x10/0x10 [ 510.458568][T19659] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 510.458599][T19659] ? __fget_files+0x3a0/0x420 [ 510.458631][T19659] ? ksys_write+0x242/0x270 [ 510.458656][T19659] ? __pfx_ksys_write+0x10/0x10 [ 510.458685][T19659] __x64_sys_sendto+0xde/0x100 [ 510.458715][T19659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.458734][T19659] do_syscall_64+0x174/0x580 [ 510.458751][T19659] ? trace_irq_disable+0x3b/0x140 [ 510.458775][T19659] ? clear_bhb_loop+0x40/0x90 [ 510.458796][T19659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.458813][T19659] RIP: 0033:0x7f216f19ce59 [ 510.458829][T19659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.458843][T19659] RSP: 002b:00007f2170103028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 510.458862][T19659] RAX: ffffffffffffffda RBX: 00007f216f415fa0 RCX: 00007f216f19ce59 [ 510.458874][T19659] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 510.458886][T19659] RBP: 00007f2170103090 R08: 000020000005ffe4 R09: 000000000000001c [ 510.458897][T19659] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 510.458907][T19659] R13: 00007f216f416038 R14: 00007f216f415fa0 R15: 00007fff7a6d2758 [ 510.458936][T19659] [ 510.509163][T19663] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20003 [ 510.721267][T19661] xt_CT: No such helper "pptp" [ 511.208850][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3745'. [ 511.253195][T19690] netlink: 'syz.2.3745': attribute type 5 has an invalid length. [ 511.272652][T19690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3745'. [ 513.706087][T19690] geneve2: entered promiscuous mode [ 513.731301][T19690] geneve2: entered allmulticast mode [ 513.747572][T19693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.815169][ T1183] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 513.925975][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3746'. [ 513.927386][ T1183] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 513.962457][T19699] netlink: 'syz.5.3746': attribute type 15 has an invalid length. [ 513.997189][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3746'. [ 514.006140][ T1183] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 514.006179][ T1183] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 514.108357][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3746'. [ 514.121174][ T1183] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2048 - 0 [ 514.162152][ T1183] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2048 - 0 [ 514.175585][T19699] netlink: 'syz.5.3746': attribute type 15 has an invalid length. [ 514.202061][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3746'. [ 514.318105][ T1183] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2048 - 0 [ 514.408968][ T1183] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2048 - 0 [ 514.887304][T11338] hsr_slave_0: left promiscuous mode [ 515.112251][T11338] vlan0: left allmulticast mode [ 515.126432][T11338] veth0_vlan: left allmulticast mode [ 515.148318][T11338] vlan0: left promiscuous mode [ 515.163205][T11338] veth0_macvtap: left promiscuous mode [ 515.179498][T11338] veth1_vlan: left promiscuous mode [ 515.189563][T11338] veth0_vlan: left promiscuous mode [ 515.651943][T11338] pim6reg (unregistering): left allmulticast mode [ 516.427370][T11338] team0 (unregistering): Port device team_slave_1 removed [ 516.626495][T19725] netlink: 'syz.2.3750': attribute type 3 has an invalid length. [ 517.289173][T11338] IPVS: stop unused estimator thread 0... [ 517.425379][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bfb8400: rx timeout, send abort [ 517.556269][T19793] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.566131][T19793] bridge0: port 2(bridge_slave_1) entered listening state [ 517.574601][T19793] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.582704][T19793] bridge0: port 1(bridge_slave_0) entered listening state [ 517.925499][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bfb8800: rx timeout, send abort [ 517.936037][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bfb8400: abort rx timeout. Force session deactivation [ 518.187742][T19793] veth0_to_team: entered promiscuous mode [ 518.398093][T19825] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3775'. [ 518.433824][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bfb8800: abort rx timeout. Force session deactivation [ 518.548747][T19820] syzkaller0: Caught tx_queue_len zero misconfig [ 518.916606][T19774] Bluetooth: hci4: command 0x0406 tx timeout [ 518.983305][T19838] pimreg3: entered allmulticast mode [ 519.048654][T19845] FAULT_INJECTION: forcing a failure. [ 519.048654][T19845] name failslab, interval 1, probability 0, space 0, times 0 [ 519.062263][T19845] CPU: 1 UID: 0 PID: 19845 Comm: syz.4.3783 Not tainted syzkaller #0 PREEMPT(full) [ 519.062290][T19845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 519.062300][T19845] Call Trace: [ 519.062307][T19845] [ 519.062314][T19845] dump_stack_lvl+0xe8/0x150 [ 519.062340][T19845] should_fail_ex+0x412/0x560 [ 519.062364][T19845] should_failslab+0xa8/0x100 [ 519.062381][T19845] ? sctp_chunkify+0x5a/0x260 [ 519.062400][T19845] kmem_cache_alloc_noprof+0x87/0x650 [ 519.062432][T19845] sctp_chunkify+0x5a/0x260 [ 519.062454][T19845] _sctp_make_chunk+0x122/0x290 [ 519.062475][T19845] sctp_make_datafrag_empty+0x12a/0x240 [ 519.062496][T19845] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 519.062518][T19845] ? sctp_user_addto_chunk+0xa8/0x240 [ 519.062542][T19845] sctp_datamsg_from_user+0x729/0xef0 [ 519.062585][T19845] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 519.062604][T19845] ? __asan_memcpy+0x40/0x70 [ 519.062631][T19845] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 519.062667][T19845] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 519.062688][T19845] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 519.062710][T19845] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 519.062731][T19845] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 519.062750][T19845] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 519.062771][T19845] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 519.062794][T19845] ? security_sctp_bind_connect+0x7e/0x2c0 [ 519.062825][T19845] sctp_sendmsg+0x1b85/0x2c50 [ 519.062859][T19845] ? __pfx_sctp_sendmsg+0x10/0x10 [ 519.062884][T19845] ? aa_sk_perm+0x6d5/0x900 [ 519.062906][T19845] ? __might_fault+0xaf/0x130 [ 519.062933][T19845] ? __pfx_aa_sk_perm+0x10/0x10 [ 519.062958][T19845] ? sock_rps_record_flow+0x19/0x350 [ 519.062976][T19845] ? __pfx_inet_sendmsg+0x10/0x10 [ 519.062996][T19845] ? inet_sendmsg+0x2f4/0x370 [ 519.063013][T19845] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 519.063033][T19845] ? __pfx_inet_sendmsg+0x10/0x10 [ 519.063053][T19845] __sys_sendto+0x5de/0x710 [ 519.063079][T19845] ? __pfx___sys_sendto+0x10/0x10 [ 519.063100][T19845] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 519.063132][T19845] ? __fget_files+0x3a0/0x420 [ 519.063162][T19845] ? ksys_write+0x242/0x270 [ 519.063186][T19845] ? __pfx_ksys_write+0x10/0x10 [ 519.063210][T19845] __x64_sys_sendto+0xde/0x100 [ 519.063229][T19845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.063246][T19845] do_syscall_64+0x174/0x580 [ 519.063263][T19845] ? clear_bhb_loop+0x40/0x90 [ 519.063282][T19845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.063296][T19845] RIP: 0033:0x7fdf1439ce59 [ 519.063310][T19845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.063323][T19845] RSP: 002b:00007fdf15207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 519.063340][T19845] RAX: ffffffffffffffda RBX: 00007fdf14615fa0 RCX: 00007fdf1439ce59 [ 519.063352][T19845] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 519.063363][T19845] RBP: 00007fdf15207090 R08: 000020000005ffe4 R09: 000000000000001c [ 519.063373][T19845] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 519.063383][T19845] R13: 00007fdf14616038 R14: 00007fdf14615fa0 R15: 00007ffead03f968 [ 519.063412][T19845] [ 519.211478][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bfb8000: rx timeout, send abort [ 519.396385][T19853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3787'. [ 519.415333][T19847] hsr0: entered allmulticast mode [ 519.420372][T19847] hsr_slave_0: entered allmulticast mode [ 519.430857][T19847] hsr_slave_1: entered allmulticast mode [ 519.441519][T19853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3787'. [ 519.765638][T19863] syzkaller0: entered promiscuous mode [ 519.771147][T19863] syzkaller0: entered allmulticast mode [ 519.795045][T19868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3791'. [ 519.808956][T19865] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.3790'. [ 519.813650][T19868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3791'. [ 519.894202][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bfb8000: abort rx timeout. Force session deactivation [ 520.244794][T19854] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 520.252342][T19854] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 522.377207][T19854] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 522.388043][T19854] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 522.443337][T19854] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 522.454141][T19854] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 522.610522][T19854] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 522.619170][T19854] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 523.198088][T19907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3798'. [ 523.254741][T19907] openvswitch: netlink: Flow key attr not present in new flow. [ 523.695784][T19942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3809'. [ 523.856816][T19949] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 523.863281][T19949] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 523.870472][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3811'. [ 523.883456][T19938] syzkaller0: entered promiscuous mode [ 523.888950][T19938] syzkaller0: entered allmulticast mode [ 523.899490][T19949] hsr_slave_0: left promiscuous mode [ 523.915367][T19949] hsr_slave_1: left promiscuous mode [ 524.360586][T19981] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3815'. [ 527.076433][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 527.251780][T20025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3828'. [ 527.303625][T20025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3828'. [ 527.447690][T20027] gtp1: entered allmulticast mode [ 527.472792][T20027] team0: Device gtp1 is of different type [ 527.762613][T20052] netlink: 'syz.2.3835': attribute type 2 has an invalid length. [ 527.983366][T20064] syzkaller0: entered promiscuous mode [ 527.988880][T20064] syzkaller0: entered allmulticast mode [ 528.252731][T20063] syzkaller0: entered promiscuous mode [ 528.258239][T20063] syzkaller0: entered allmulticast mode [ 528.405868][T20053] syzkaller0: entered promiscuous mode [ 528.411383][T20053] syzkaller0: entered allmulticast mode [ 528.574593][T20083] netlink: 'syz.2.3843': attribute type 11 has an invalid length. [ 528.582472][T20083] netlink: 'syz.2.3843': attribute type 11 has an invalid length. [ 528.590285][T20083] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3843'. [ 531.129248][T20095] FAULT_INJECTION: forcing a failure. [ 531.129248][T20095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.142396][T20095] CPU: 0 UID: 0 PID: 20095 Comm: syz.4.3847 Not tainted syzkaller #0 PREEMPT(full) [ 531.142420][T20095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 531.142430][T20095] Call Trace: [ 531.142439][T20095] [ 531.142446][T20095] dump_stack_lvl+0xe8/0x150 [ 531.142470][T20095] should_fail_ex+0x412/0x560 [ 531.142493][T20095] _copy_from_iter+0x1d3/0x1670 [ 531.142511][T20095] ? sctp_chunkify+0x5a/0x260 [ 531.142528][T20095] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 531.142557][T20095] ? __pfx__copy_from_iter+0x10/0x10 [ 531.142573][T20095] ? __asan_memcpy+0x40/0x70 [ 531.142593][T20095] ? sctp_make_datafrag_empty+0x184/0x240 [ 531.142611][T20095] ? skb_put+0x11b/0x210 [ 531.142635][T20095] sctp_user_addto_chunk+0x87/0x240 [ 531.142656][T20095] sctp_datamsg_from_user+0x748/0xef0 [ 531.142697][T20095] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 531.142716][T20095] ? __asan_memcpy+0x40/0x70 [ 531.142741][T20095] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 531.142773][T20095] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 531.142793][T20095] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 531.142814][T20095] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 531.142833][T20095] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 531.142851][T20095] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 531.142871][T20095] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 531.142893][T20095] ? security_sctp_bind_connect+0x7e/0x2c0 [ 531.142915][T20095] sctp_sendmsg+0x1b85/0x2c50 [ 531.142948][T20095] ? __pfx_sctp_sendmsg+0x10/0x10 [ 531.142971][T20095] ? aa_sk_perm+0x6d5/0x900 [ 531.142991][T20095] ? __might_fault+0xaf/0x130 [ 531.143017][T20095] ? __pfx_aa_sk_perm+0x10/0x10 [ 531.143041][T20095] ? sock_rps_record_flow+0x19/0x350 [ 531.143059][T20095] ? __pfx_inet_sendmsg+0x10/0x10 [ 531.143076][T20095] ? inet_sendmsg+0x2f4/0x370 [ 531.143090][T20095] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 531.143108][T20095] ? __pfx_inet_sendmsg+0x10/0x10 [ 531.143124][T20095] __sys_sendto+0x5de/0x710 [ 531.143155][T20095] ? __pfx___sys_sendto+0x10/0x10 [ 531.143172][T20095] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 531.143199][T20095] ? __fget_files+0x3a0/0x420 [ 531.143225][T20095] ? ksys_write+0x242/0x270 [ 531.143247][T20095] ? __pfx_ksys_write+0x10/0x10 [ 531.143271][T20095] __x64_sys_sendto+0xde/0x100 [ 531.143291][T20095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.143307][T20095] do_syscall_64+0x174/0x580 [ 531.143320][T20095] ? trace_irq_disable+0x3b/0x140 [ 531.143340][T20095] ? clear_bhb_loop+0x40/0x90 [ 531.143358][T20095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.143371][T20095] RIP: 0033:0x7fdf1439ce59 [ 531.143397][T20095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.143408][T20095] RSP: 002b:00007fdf15207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 531.143424][T20095] RAX: ffffffffffffffda RBX: 00007fdf14615fa0 RCX: 00007fdf1439ce59 [ 531.143434][T20095] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 531.143443][T20095] RBP: 00007fdf15207090 R08: 000020000005ffe4 R09: 000000000000001c [ 531.143453][T20095] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 531.143461][T20095] R13: 00007fdf14616038 R14: 00007fdf14615fa0 R15: 00007ffead03f968 [ 531.143487][T20095] [ 531.553084][T20097] netlink: 207116 bytes leftover after parsing attributes in process `syz.4.3848'. [ 532.199395][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 532.207092][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 533.955702][T20111] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3852'. [ 536.253567][T20116] netem: change failed [ 536.433753][T20123] netlink: 'syz.2.3856': attribute type 4 has an invalid length. [ 536.483365][T20126] FAULT_INJECTION: forcing a failure. [ 536.483365][T20126] name failslab, interval 1, probability 0, space 0, times 0 [ 536.528236][T20133] netlink: 'syz.3.3854': attribute type 1 has an invalid length. [ 536.544630][T20126] CPU: 0 UID: 0 PID: 20126 Comm: syz.0.3858 Not tainted syzkaller #0 PREEMPT(full) [ 536.544653][T20126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 536.544664][T20126] Call Trace: [ 536.544671][T20126] [ 536.544678][T20126] dump_stack_lvl+0xe8/0x150 [ 536.544704][T20126] should_fail_ex+0x412/0x560 [ 536.544729][T20126] should_failslab+0xa8/0x100 [ 536.544747][T20126] ? sctp_chunkify+0x5a/0x260 [ 536.544766][T20126] kmem_cache_alloc_noprof+0x87/0x650 [ 536.544797][T20126] sctp_chunkify+0x5a/0x260 [ 536.544819][T20126] _sctp_make_chunk+0x122/0x290 [ 536.544841][T20126] sctp_make_datafrag_empty+0x12a/0x240 [ 536.544870][T20126] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 536.544893][T20126] ? sctp_user_addto_chunk+0xa8/0x240 [ 536.544917][T20126] sctp_datamsg_from_user+0x729/0xef0 [ 536.544963][T20126] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 536.544984][T20126] ? __asan_memcpy+0x40/0x70 [ 536.545011][T20126] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 536.545048][T20126] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 536.545068][T20126] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 536.545092][T20126] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 536.545112][T20126] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 536.545132][T20126] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 536.545153][T20126] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 536.545177][T20126] ? security_sctp_bind_connect+0x7e/0x2c0 [ 536.545201][T20126] sctp_sendmsg+0x1b85/0x2c50 [ 536.545236][T20126] ? __pfx_sctp_sendmsg+0x10/0x10 [ 536.545260][T20126] ? aa_sk_perm+0x6d5/0x900 [ 536.545281][T20126] ? __might_fault+0xaf/0x130 [ 536.545308][T20126] ? __pfx_aa_sk_perm+0x10/0x10 [ 536.545334][T20126] ? sock_rps_record_flow+0x19/0x350 [ 536.545353][T20126] ? __pfx_inet_sendmsg+0x10/0x10 [ 536.545373][T20126] ? inet_sendmsg+0x2f4/0x370 [ 536.545390][T20126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 536.545410][T20126] ? __pfx_inet_sendmsg+0x10/0x10 [ 536.545430][T20126] __sys_sendto+0x5de/0x710 [ 536.545457][T20126] ? __pfx___sys_sendto+0x10/0x10 [ 536.545478][T20126] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 536.545510][T20126] ? __fget_files+0x3a0/0x420 [ 536.545541][T20126] ? ksys_write+0x242/0x270 [ 536.545568][T20126] ? __pfx_ksys_write+0x10/0x10 [ 536.545597][T20126] __x64_sys_sendto+0xde/0x100 [ 536.545621][T20126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.545640][T20126] do_syscall_64+0x174/0x580 [ 536.545662][T20126] ? clear_bhb_loop+0x40/0x90 [ 536.545682][T20126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.545700][T20126] RIP: 0033:0x7f6be539ce59 [ 536.545717][T20126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.545731][T20126] RSP: 002b:00007f6be35f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 536.545749][T20126] RAX: ffffffffffffffda RBX: 00007f6be5615fa0 RCX: 00007f6be539ce59 [ 536.545762][T20126] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 536.545772][T20126] RBP: 00007f6be35f6090 R08: 000020000005ffe4 R09: 000000000000001c [ 536.545784][T20126] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 536.545794][T20126] R13: 00007f6be5616038 R14: 00007f6be5615fa0 R15: 00007ffdbddaec98 [ 536.545823][T20126] [ 536.901806][T20133] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 537.390852][T20138] bond1: option all_slaves_active: invalid value (222) [ 537.552964][T20138] bond1 (unregistering): Released all slaves [ 537.586143][T20157] FAULT_INJECTION: forcing a failure. [ 537.586143][T20157] name fail_futex, interval 1, probability 0, space 0, times 1 [ 537.598957][T20157] CPU: 1 UID: 0 PID: 20157 Comm: syz.2.3862 Not tainted syzkaller #0 PREEMPT(full) [ 537.598981][T20157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 537.598992][T20157] Call Trace: [ 537.598999][T20157] [ 537.599005][T20157] dump_stack_lvl+0xe8/0x150 [ 537.599029][T20157] should_fail_ex+0x412/0x560 [ 537.599052][T20157] get_futex_key+0x8d1/0x1590 [ 537.599075][T20157] ? perf_lock_task_context+0x785/0x850 [ 537.599101][T20157] ? __pfx_get_futex_key+0x10/0x10 [ 537.599122][T20157] ? __pfx___mutex_trylock_common+0x10/0x10 [ 537.599151][T20157] futex_wake+0x114/0x580 [ 537.599174][T20157] ? __mutex_lock+0x319/0x1550 [ 537.599195][T20157] ? __pfx_futex_wake+0x10/0x10 [ 537.599223][T20157] ? exit_mm_release+0x1a/0x30 [ 537.599248][T20157] do_futex+0x395/0x420 [ 537.599274][T20157] ? __pfx_do_futex+0x10/0x10 [ 537.599296][T20157] ? __might_fault+0xaf/0x130 [ 537.599321][T20157] mm_release+0x101/0x290 [ 537.599342][T20157] exit_mm+0x54/0x2d0 [ 537.599369][T20157] do_exit+0x6a2/0x22c0 [ 537.599399][T20157] ? __pfx_do_exit+0x10/0x10 [ 537.599421][T20157] ? cgroup1_freezing+0x20/0x350 [ 537.599443][T20157] ? cgroup1_freezing+0x20/0x350 [ 537.599472][T20157] do_group_exit+0x21b/0x2d0 [ 537.599493][T20157] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.599520][T20157] get_signal+0x1284/0x1330 [ 537.599558][T20157] arch_do_signal_or_restart+0xbc/0x840 [ 537.599587][T20157] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 537.599619][T20157] ? ksys_write+0x242/0x270 [ 537.599651][T20157] exit_to_user_mode_loop+0xa9/0x680 [ 537.599667][T20157] ? rcu_is_watching+0x15/0xb0 [ 537.599686][T20157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.599704][T20157] do_syscall_64+0x353/0x580 [ 537.599719][T20157] ? clear_bhb_loop+0x40/0x90 [ 537.599739][T20157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.599764][T20157] RIP: 0033:0x7f216f19ce59 [ 537.599781][T20157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.599796][T20157] RSP: 002b:00007f2170103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 537.599815][T20157] RAX: fffffffffffffffc RBX: 00007f216f415fa0 RCX: 00007f216f19ce59 [ 537.599828][T20157] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 537.599839][T20157] RBP: 00007f2170103090 R08: 0000000000000000 R09: 0000000000000000 [ 537.599851][T20157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.599861][T20157] R13: 00007f216f416038 R14: 00007f216f415fa0 R15: 00007fff7a6d2758 [ 537.599891][T20157] [ 538.290940][T20171] syzkaller1: entered promiscuous mode [ 538.422805][T20183] netlink: 'syz.2.3870': attribute type 1 has an invalid length. [ 538.434500][T20179] bond1 (unregistering): Released all slaves [ 538.492647][T20182] vet: renamed from veth0_vlan (while UP) [ 538.581213][T20187] netlink: 'syz.2.3870': attribute type 1 has an invalid length. [ 538.745375][T20200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3873'. [ 538.755025][T20200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3873'. [ 538.818686][T20200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3873'. [ 538.866481][T20200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3873'. [ 539.022795][T20208] FAULT_INJECTION: forcing a failure. [ 539.022795][T20208] name failslab, interval 1, probability 0, space 0, times 0 [ 539.035428][T20208] CPU: 1 UID: 0 PID: 20208 Comm: syz.3.3876 Not tainted syzkaller #0 PREEMPT(full) [ 539.035451][T20208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 539.035461][T20208] Call Trace: [ 539.035468][T20208] [ 539.035475][T20208] dump_stack_lvl+0xe8/0x150 [ 539.035501][T20208] should_fail_ex+0x412/0x560 [ 539.035524][T20208] should_failslab+0xa8/0x100 [ 539.035541][T20208] ? sctp_chunkify+0x5a/0x260 [ 539.035560][T20208] kmem_cache_alloc_noprof+0x87/0x650 [ 539.035592][T20208] sctp_chunkify+0x5a/0x260 [ 539.035613][T20208] _sctp_make_chunk+0x122/0x290 [ 539.035635][T20208] sctp_make_datafrag_empty+0x12a/0x240 [ 539.035656][T20208] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 539.035678][T20208] ? sctp_user_addto_chunk+0xa8/0x240 [ 539.035702][T20208] sctp_datamsg_from_user+0x729/0xef0 [ 539.035748][T20208] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 539.035768][T20208] ? __asan_memcpy+0x40/0x70 [ 539.035796][T20208] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 539.035832][T20208] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 539.035853][T20208] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 539.035876][T20208] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 539.035897][T20208] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 539.035923][T20208] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 539.035944][T20208] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 539.035967][T20208] ? security_sctp_bind_connect+0x7e/0x2c0 [ 539.035992][T20208] sctp_sendmsg+0x1b85/0x2c50 [ 539.036029][T20208] ? __pfx_sctp_sendmsg+0x10/0x10 [ 539.036053][T20208] ? aa_sk_perm+0x6d5/0x900 [ 539.036076][T20208] ? __might_fault+0xaf/0x130 [ 539.036105][T20208] ? __pfx_aa_sk_perm+0x10/0x10 [ 539.036132][T20208] ? sock_rps_record_flow+0x19/0x350 [ 539.036150][T20208] ? __pfx_inet_sendmsg+0x10/0x10 [ 539.036170][T20208] ? inet_sendmsg+0x2f4/0x370 [ 539.036186][T20208] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 539.036208][T20208] ? __pfx_inet_sendmsg+0x10/0x10 [ 539.036228][T20208] __sys_sendto+0x5de/0x710 [ 539.036255][T20208] ? __pfx___sys_sendto+0x10/0x10 [ 539.036276][T20208] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 539.036309][T20208] ? __fget_files+0x3a0/0x420 [ 539.036340][T20208] ? ksys_write+0x242/0x270 [ 539.036367][T20208] ? __pfx_ksys_write+0x10/0x10 [ 539.036396][T20208] __x64_sys_sendto+0xde/0x100 [ 539.036420][T20208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.036440][T20208] do_syscall_64+0x174/0x580 [ 539.036457][T20208] ? trace_irq_disable+0x3b/0x140 [ 539.036481][T20208] ? clear_bhb_loop+0x40/0x90 [ 539.036502][T20208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.036520][T20208] RIP: 0033:0x7fe61c19ce59 [ 539.036537][T20208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.036551][T20208] RSP: 002b:00007fe61cf84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 539.036570][T20208] RAX: ffffffffffffffda RBX: 00007fe61c415fa0 RCX: 00007fe61c19ce59 [ 539.036583][T20208] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 539.036594][T20208] RBP: 00007fe61cf84090 R08: 000020000005ffe4 R09: 000000000000001c [ 539.036605][T20208] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 539.036615][T20208] R13: 00007fe61c416038 R14: 00007fe61c415fa0 R15: 00007fff34d69f18 [ 539.036644][T20208] [ 539.068466][T20200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3873'. [ 539.103202][T20212] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3877'. [ 539.141499][T20200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3873'. [ 539.343219][T20222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3881'. [ 539.453076][T20223] netlink: 'syz.3.3879': attribute type 1 has an invalid length. [ 539.460828][T20223] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3879'. [ 539.469913][T20223] netlink: 'syz.3.3879': attribute type 1 has an invalid length. [ 539.477668][T20223] netlink: 578 bytes leftover after parsing attributes in process `syz.3.3879'. [ 539.670235][T20237] netlink: 'syz.4.3883': attribute type 10 has an invalid length. [ 539.678691][T20237] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3883'. [ 539.825071][T20250] FAULT_INJECTION: forcing a failure. [ 539.825071][T20250] name failslab, interval 1, probability 0, space 0, times 0 [ 539.838002][T20250] CPU: 1 UID: 0 PID: 20250 Comm: syz.4.3890 Not tainted syzkaller #0 PREEMPT(full) [ 539.838027][T20250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 539.838037][T20250] Call Trace: [ 539.838044][T20250] [ 539.838051][T20250] dump_stack_lvl+0xe8/0x150 [ 539.838077][T20250] should_fail_ex+0x412/0x560 [ 539.838102][T20250] should_failslab+0xa8/0x100 [ 539.838122][T20250] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 539.838148][T20250] ? __alloc_skb+0x1d0/0x7d0 [ 539.838169][T20250] ? __local_bh_enable_ip+0xd0/0x130 [ 539.838193][T20250] __alloc_skb+0x1d0/0x7d0 [ 539.838219][T20250] _sctp_make_chunk+0x59/0x290 [ 539.838243][T20250] sctp_make_datafrag_empty+0x12a/0x240 [ 539.838265][T20250] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 539.838287][T20250] ? sctp_user_addto_chunk+0xa8/0x240 [ 539.838311][T20250] sctp_datamsg_from_user+0x729/0xef0 [ 539.838357][T20250] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 539.838377][T20250] ? __asan_memcpy+0x40/0x70 [ 539.838407][T20250] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 539.838443][T20250] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 539.838465][T20250] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 539.838488][T20250] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 539.838509][T20250] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 539.838528][T20250] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 539.838548][T20250] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 539.838569][T20250] ? security_sctp_bind_connect+0x7e/0x2c0 [ 539.838593][T20250] sctp_sendmsg+0x1b85/0x2c50 [ 539.838626][T20250] ? __pfx_sctp_sendmsg+0x10/0x10 [ 539.838650][T20250] ? aa_sk_perm+0x6d5/0x900 [ 539.838672][T20250] ? __might_fault+0xaf/0x130 [ 539.838700][T20250] ? __pfx_aa_sk_perm+0x10/0x10 [ 539.838727][T20250] ? sock_rps_record_flow+0x19/0x350 [ 539.838744][T20250] ? __pfx_inet_sendmsg+0x10/0x10 [ 539.838765][T20250] ? inet_sendmsg+0x2f4/0x370 [ 539.838782][T20250] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 539.838802][T20250] ? __pfx_inet_sendmsg+0x10/0x10 [ 539.838828][T20250] __sys_sendto+0x5de/0x710 [ 539.838855][T20250] ? __pfx___sys_sendto+0x10/0x10 [ 539.838877][T20250] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 539.838909][T20250] ? __fget_files+0x3a0/0x420 [ 539.838941][T20250] ? ksys_write+0x242/0x270 [ 539.838967][T20250] ? __pfx_ksys_write+0x10/0x10 [ 539.838997][T20250] __x64_sys_sendto+0xde/0x100 [ 539.839021][T20250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.839041][T20250] do_syscall_64+0x174/0x580 [ 539.839058][T20250] ? trace_irq_disable+0x3b/0x140 [ 539.839083][T20250] ? clear_bhb_loop+0x40/0x90 [ 539.839104][T20250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.839122][T20250] RIP: 0033:0x7fdf1439ce59 [ 539.839139][T20250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.839153][T20250] RSP: 002b:00007fdf15207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 539.839172][T20250] RAX: ffffffffffffffda RBX: 00007fdf14615fa0 RCX: 00007fdf1439ce59 [ 539.839184][T20250] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 539.839195][T20250] RBP: 00007fdf15207090 R08: 000020000005ffe4 R09: 000000000000001c [ 539.839207][T20250] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 539.839217][T20250] R13: 00007fdf14616038 R14: 00007fdf14615fa0 R15: 00007ffead03f968 [ 539.839247][T20250] [ 539.843496][T20247] bond1 (unregistering): Released all slaves [ 539.931403][T20253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3891'. [ 540.111231][T20257] ieee802154 phy0 wpan0: encryption failed: -22 [ 540.272488][T20253] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 540.287415][T20253] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3891'. [ 540.335548][T20261] xt_hl: Unknown TTL match mode: 255 [ 540.348423][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3894'. [ 540.661112][T20286] FAULT_INJECTION: forcing a failure. [ 540.661112][T20286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.674186][T20286] CPU: 1 UID: 0 PID: 20286 Comm: syz.0.3902 Not tainted syzkaller #0 PREEMPT(full) [ 540.674209][T20286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 540.674217][T20286] Call Trace: [ 540.674224][T20286] [ 540.674230][T20286] dump_stack_lvl+0xe8/0x150 [ 540.674254][T20286] should_fail_ex+0x412/0x560 [ 540.674277][T20286] _copy_from_iter+0x1d3/0x1670 [ 540.674292][T20286] ? sctp_chunkify+0x5a/0x260 [ 540.674309][T20286] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 540.674336][T20286] ? __pfx__copy_from_iter+0x10/0x10 [ 540.674354][T20286] ? __asan_memcpy+0x40/0x70 [ 540.674381][T20286] ? sctp_make_datafrag_empty+0x184/0x240 [ 540.674400][T20286] ? skb_put+0x11b/0x210 [ 540.674427][T20286] sctp_user_addto_chunk+0x87/0x240 [ 540.674457][T20286] sctp_datamsg_from_user+0x748/0xef0 [ 540.674502][T20286] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 540.674522][T20286] ? __asan_memcpy+0x40/0x70 [ 540.674549][T20286] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 540.674582][T20286] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 540.674600][T20286] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 540.674621][T20286] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 540.674641][T20286] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 540.674659][T20286] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 540.674679][T20286] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 540.674702][T20286] ? security_sctp_bind_connect+0x7e/0x2c0 [ 540.674765][T20286] sctp_sendmsg+0x1b85/0x2c50 [ 540.674801][T20286] ? __pfx_sctp_sendmsg+0x10/0x10 [ 540.674826][T20286] ? aa_sk_perm+0x6d5/0x900 [ 540.674849][T20286] ? __might_fault+0xaf/0x130 [ 540.674877][T20286] ? __pfx_aa_sk_perm+0x10/0x10 [ 540.674910][T20286] ? sock_rps_record_flow+0x19/0x350 [ 540.674929][T20286] ? __pfx_inet_sendmsg+0x10/0x10 [ 540.674949][T20286] ? inet_sendmsg+0x2f4/0x370 [ 540.674967][T20286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 540.674988][T20286] ? __pfx_inet_sendmsg+0x10/0x10 [ 540.675009][T20286] __sys_sendto+0x5de/0x710 [ 540.675036][T20286] ? __pfx___sys_sendto+0x10/0x10 [ 540.675057][T20286] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 540.675090][T20286] ? __fget_files+0x3a0/0x420 [ 540.675122][T20286] ? ksys_write+0x242/0x270 [ 540.675148][T20286] ? __pfx_ksys_write+0x10/0x10 [ 540.675176][T20286] __x64_sys_sendto+0xde/0x100 [ 540.675201][T20286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.675221][T20286] do_syscall_64+0x174/0x580 [ 540.675237][T20286] ? trace_irq_disable+0x3b/0x140 [ 540.675260][T20286] ? clear_bhb_loop+0x40/0x90 [ 540.675278][T20286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.675300][T20286] RIP: 0033:0x7f6be539ce59 [ 540.675317][T20286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.675331][T20286] RSP: 002b:00007f6be35f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 540.675350][T20286] RAX: ffffffffffffffda RBX: 00007f6be5615fa0 RCX: 00007f6be539ce59 [ 540.675362][T20286] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 540.675373][T20286] RBP: 00007f6be35f6090 R08: 000020000005ffe4 R09: 000000000000001c [ 540.675384][T20286] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 540.675394][T20286] R13: 00007f6be5616038 R14: 00007f6be5615fa0 R15: 00007ffdbddaec98 [ 540.675424][T20286] [ 541.329791][T20305] bond1 (unregistering): Released all slaves [ 541.459096][T20311] netlink: 'syz.4.3911': attribute type 16 has an invalid length. [ 541.466949][T20311] netlink: 'syz.4.3911': attribute type 17 has an invalid length. [ 541.512365][T20311] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 541.528726][T20308] netlink: 'syz.3.3909': attribute type 10 has an invalid length. [ 541.552797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 541.567636][T20308] veth1_macvtap: left promiscuous mode [ 541.627529][T20308] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 541.655037][T20320] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 541.662300][T20320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.787460][T20328] macsec1: entered promiscuous mode [ 541.808384][T20328] bridge0: entered promiscuous mode [ 541.829449][T20328] macsec1: entered allmulticast mode [ 541.843604][T20328] bridge0: entered allmulticast mode [ 541.857285][T20328] bridge0: port 3(macsec1) entered blocking state [ 541.871316][T20328] bridge0: port 3(macsec1) entered disabled state [ 542.081887][T20328] bridge0: left allmulticast mode [ 542.112780][ T5365] bridge0: left promiscuous mode [ 542.163086][T20341] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 542.180425][T20330] syzkaller0: entered promiscuous mode [ 542.185925][T20330] syzkaller0: entered allmulticast mode [ 542.222419][T20341] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 542.442224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 544.652244][T20357] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 544.940152][T20376] __nla_validate_parse: 6 callbacks suppressed [ 544.940171][T20376] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3932'. [ 544.955235][T20378] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3931'. [ 545.633061][T20401] bond3 (unregistering): Released all slaves [ 545.789595][T20408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3940'. [ 545.828739][T20408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3940'. [ 545.866874][T20408] netlink: 'syz.0.3940': attribute type 3 has an invalid length. [ 548.202642][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 548.212431][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 562.921239][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.588636][T20418] netlink: 'syz.0.3944': attribute type 2 has an invalid length. [ 569.607371][T20424] veth0_virt_wifi: mtu less than device minimum [ 569.725449][T20429] tipc: Started in network mode [ 569.730359][T20429] tipc: Node identity ac14140f, cluster identity 4711 [ 569.737366][T20429] tipc: New replicast peer: 255.255.255.255 [ 569.745559][T20429] tipc: Enabled bearer , priority 10 [ 569.908879][T20438] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3948'. [ 570.323666][T20452] netlink: 'syz.5.3954': attribute type 1 has an invalid length. [ 570.372610][T20448] bond1 (unregistering): Released all slaves [ 570.704709][T20450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.732912][T20450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.742280][T20450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.792699][T20450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.812686][T20450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.824292][T20450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.836868][T20466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3959'. [ 570.846211][T20466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3959'. [ 570.877847][T20450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.886977][T20450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.914330][ T7946] tipc: Node number set to 2886997007 [ 570.980692][T20450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.514638][T20494] netlink: 71 bytes leftover after parsing attributes in process `syz.5.3966'. [ 571.999368][T20504] bond1 (unregistering): Released all slaves [ 572.312128][T20513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3971'. [ 572.354356][T20512] ip6gre0: entered allmulticast mode [ 572.376764][T20512] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3972'. [ 572.405296][T20512] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3972'. [ 572.443745][T20513] macvtap1: entered promiscuous mode [ 572.449129][T20513] vlan0: entered promiscuous mode [ 572.455580][T20513] macvtap1: entered allmulticast mode [ 572.460983][T20513] vlan0: entered allmulticast mode [ 572.466107][T20513] vet: entered allmulticast mode [ 572.473089][T20512] netlink: 'syz.3.3972': attribute type 21 has an invalid length. [ 572.496695][T20512] IPv6: NLM_F_CREATE should be specified when creating new route [ 572.529188][T20512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 572.536467][T20512] IPv6: NLM_F_CREATE should be set when creating new route [ 572.543753][T20512] IPv6: NLM_F_CREATE should be set when creating new route [ 572.551027][T20512] IPv6: NLM_F_CREATE should be set when creating new route [ 572.686301][T20516] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 572.753902][T20526] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 572.811392][T20527] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 572.964444][T20499] Cannot find del_set index 3 as target [ 573.055355][T20533] syzkaller0: entered promiscuous mode [ 573.060879][T20533] syzkaller0: entered allmulticast mode [ 573.238020][T20537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3978'. [ 574.496099][T20548] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3981'. [ 574.507808][T20548] netlink: 'syz.4.3981': attribute type 1 has an invalid length. [ 574.711779][T20552] netlink: 'syz.5.3983': attribute type 1 has an invalid length. [ 574.719571][T20552] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3983'. [ 574.861806][T20556] netlink: 'syz.5.3984': attribute type 1 has an invalid length. [ 576.564820][T20550] bond3 (unregistering): Released all slaves [ 576.626874][T20566] __nla_validate_parse: 1 callbacks suppressed [ 576.626894][T20566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3987'. [ 576.646354][T20556] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 576.697673][T20570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3988'. [ 576.768966][T20575] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3989'. [ 576.792150][T20574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3989'. [ 576.869824][T20578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3991'. [ 576.934618][T20578] netlink: 'syz.3.3991': attribute type 7 has an invalid length. [ 576.956392][T20578] netlink: 'syz.3.3991': attribute type 8 has an invalid length. [ 577.021239][T20578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3991'. [ 577.226493][T20598] vxcan0: tx address claim with different name [ 577.258297][T20594] syzkaller0: entered promiscuous mode [ 577.263816][T20594] syzkaller0: entered allmulticast mode [ 577.344778][T20612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3999'. [ 577.357592][T20612] netlink: 'syz.3.3999': attribute type 1 has an invalid length. [ 577.369132][T20612] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3999'. [ 577.379938][T20612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3999'. [ 577.395642][T20617] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4001'. [ 578.357916][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.365157][ C1] bridge0: topology change detected, propagating [ 578.371915][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.379223][ C1] bridge0: topology change detected, propagating [ 579.984974][T20649] bond3 (unregistering): Released all slaves [ 580.544549][T20675] batadv0: entered promiscuous mode [ 580.550638][T20675] macsec1: entered promiscuous mode [ 580.557769][T20675] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 580.705532][T20685] pimreg: entered allmulticast mode [ 580.754321][T20685] syz_tun: entered allmulticast mode [ 580.771848][T20684] pimreg: left allmulticast mode [ 581.137425][T20709] bond1 (unregistering): Released all slaves [ 581.177492][T20714] netlink: 'syz.5.4025': attribute type 5 has an invalid length. [ 581.516497][T20705] infiniband syz2: set down [ 581.518633][T20734] netlink: 'syz.4.4032': attribute type 1 has an invalid length. [ 581.521132][T20705] infiniband syz2: added ipvlan0 [ 581.572488][T20705] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 581.587623][T20705] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 581.604851][T20705] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 581.644456][T20705] RDS/IB: syz2: added [ 581.648535][T20705] smc: adding ib device syz2 with port count 1 [ 581.654705][T20705] smc: ib device syz2 port 1 has no pnetid [ 581.701967][T20737] syz_tun: entered allmulticast mode [ 581.718971][T20740] __nla_validate_parse: 11 callbacks suppressed [ 581.718987][T20740] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4033'. [ 581.787413][T20741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4033'. [ 581.853024][T20740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4033'. [ 582.258075][T20767] tipc: Enabling of bearer rejected, media not registered [ 582.321023][T20767] syzkaller0: entered promiscuous mode [ 582.326643][T20767] syzkaller0: entered allmulticast mode [ 582.428159][T20776] syzkaller0: entered promiscuous mode [ 582.433666][T20776] syzkaller0: entered allmulticast mode [ 582.461222][T20774] batman_adv: batadv0: Adding interface: dummy0 [ 582.467508][T20774] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.492763][T20774] batman_adv: batadv0: Interface activated: dummy0 [ 582.737239][T20774] net_ratelimit: 247 callbacks suppressed [ 582.737258][T20774] batadv0: mtu less than device minimum [ 582.750118][T20774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.762225][T20774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.773980][T20774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.785689][T20774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.808247][T20774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.820008][T20774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.831716][T20774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.843481][T20774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.855331][T20774] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 582.906613][T20782] netlink: 'syz.3.4047': attribute type 2 has an invalid length. [ 582.947092][T20782] netlink: 'syz.3.4047': attribute type 1 has an invalid length. [ 582.954905][T20782] netlink: 'syz.3.4047': attribute type 1 has an invalid length. [ 582.962633][T20782] netlink: 'syz.3.4047': attribute type 1 has an invalid length. [ 583.537381][T20805] IPv6: sit1: Disabled Multicast RS [ 584.288734][T20835] FAULT_INJECTION: forcing a failure. [ 584.288734][T20835] name failslab, interval 1, probability 0, space 0, times 0 [ 584.305027][T20835] CPU: 0 UID: 0 PID: 20835 Comm: syz.2.4067 Not tainted syzkaller #0 PREEMPT(full) [ 584.305051][T20835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 584.305062][T20835] Call Trace: [ 584.305070][T20835] [ 584.305077][T20835] dump_stack_lvl+0xe8/0x150 [ 584.305103][T20835] should_fail_ex+0x412/0x560 [ 584.305129][T20835] should_failslab+0xa8/0x100 [ 584.305149][T20835] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 584.305174][T20835] ? __alloc_skb+0x1d0/0x7d0 [ 584.305196][T20835] ? __local_bh_enable_ip+0xd0/0x130 [ 584.305220][T20835] __alloc_skb+0x1d0/0x7d0 [ 584.305247][T20835] _sctp_make_chunk+0x59/0x290 [ 584.305271][T20835] sctp_make_datafrag_empty+0x12a/0x240 [ 584.305293][T20835] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 584.305316][T20835] ? sctp_user_addto_chunk+0xa8/0x240 [ 584.305340][T20835] sctp_datamsg_from_user+0x729/0xef0 [ 584.305387][T20835] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 584.305407][T20835] ? __asan_memcpy+0x40/0x70 [ 584.305436][T20835] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 584.305479][T20835] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 584.305500][T20835] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 584.305523][T20835] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 584.305545][T20835] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 584.305565][T20835] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 584.305587][T20835] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 584.305610][T20835] ? security_sctp_bind_connect+0x7e/0x2c0 [ 584.305634][T20835] sctp_sendmsg+0x1b85/0x2c50 [ 584.305670][T20835] ? __pfx_sctp_sendmsg+0x10/0x10 [ 584.305694][T20835] ? aa_sk_perm+0x6d5/0x900 [ 584.305722][T20835] ? __might_fault+0xaf/0x130 [ 584.305750][T20835] ? __pfx_aa_sk_perm+0x10/0x10 [ 584.305776][T20835] ? sock_rps_record_flow+0x19/0x350 [ 584.305799][T20835] ? __pfx_inet_sendmsg+0x10/0x10 [ 584.305819][T20835] ? inet_sendmsg+0x2f4/0x370 [ 584.305836][T20835] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 584.305858][T20835] ? __pfx_inet_sendmsg+0x10/0x10 [ 584.305899][T20835] __sys_sendto+0x5de/0x710 [ 584.305926][T20835] ? __pfx___sys_sendto+0x10/0x10 [ 584.305947][T20835] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 584.305981][T20835] ? __fget_files+0x3a0/0x420 [ 584.306013][T20835] ? ksys_write+0x242/0x270 [ 584.306040][T20835] ? __pfx_ksys_write+0x10/0x10 [ 584.306070][T20835] __x64_sys_sendto+0xde/0x100 [ 584.306094][T20835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.306114][T20835] do_syscall_64+0x174/0x580 [ 584.306131][T20835] ? trace_irq_disable+0x3b/0x140 [ 584.306155][T20835] ? clear_bhb_loop+0x40/0x90 [ 584.306177][T20835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.306195][T20835] RIP: 0033:0x7f216f19ce59 [ 584.306211][T20835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.306224][T20835] RSP: 002b:00007f2170103028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 584.306242][T20835] RAX: ffffffffffffffda RBX: 00007f216f415fa0 RCX: 00007f216f19ce59 [ 584.306255][T20835] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 584.306266][T20835] RBP: 00007f2170103090 R08: 000020000005ffe4 R09: 000000000000001c [ 584.306278][T20835] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 584.306288][T20835] R13: 00007f216f416038 R14: 00007f216f415fa0 R15: 00007fff7a6d2758 [ 584.306319][T20835] [ 584.832355][T20843] netlink: 'syz.2.4071': attribute type 25 has an invalid length. [ 584.841970][T20843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4071'. [ 585.320783][T20863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4079'. [ 585.412086][T20875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4079'. [ 585.430635][T20865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4079'. [ 585.513339][T20881] FAULT_INJECTION: forcing a failure. [ 585.513339][T20881] name failslab, interval 1, probability 0, space 0, times 0 [ 585.525982][T20881] CPU: 1 UID: 0 PID: 20881 Comm: syz.0.4082 Not tainted syzkaller #0 PREEMPT(full) [ 585.526006][T20881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.526016][T20881] Call Trace: [ 585.526024][T20881] [ 585.526032][T20881] dump_stack_lvl+0xe8/0x150 [ 585.526056][T20881] should_fail_ex+0x412/0x560 [ 585.526082][T20881] should_failslab+0xa8/0x100 [ 585.526101][T20881] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 585.526125][T20881] ? __alloc_skb+0x1d0/0x7d0 [ 585.526142][T20881] ? __local_bh_enable_ip+0xd0/0x130 [ 585.526161][T20881] __alloc_skb+0x1d0/0x7d0 [ 585.526189][T20881] _sctp_make_chunk+0x59/0x290 [ 585.526213][T20881] sctp_make_datafrag_empty+0x12a/0x240 [ 585.526234][T20881] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 585.526257][T20881] ? sctp_user_addto_chunk+0xa8/0x240 [ 585.526281][T20881] sctp_datamsg_from_user+0x729/0xef0 [ 585.526327][T20881] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 585.526348][T20881] ? __asan_memcpy+0x40/0x70 [ 585.526397][T20881] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 585.526434][T20881] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 585.526455][T20881] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 585.526479][T20881] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 585.526500][T20881] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 585.526520][T20881] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 585.526541][T20881] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 585.526563][T20881] ? security_sctp_bind_connect+0x7e/0x2c0 [ 585.526588][T20881] sctp_sendmsg+0x1b85/0x2c50 [ 585.526625][T20881] ? __pfx_sctp_sendmsg+0x10/0x10 [ 585.526649][T20881] ? aa_sk_perm+0x6d5/0x900 [ 585.526672][T20881] ? __might_fault+0xaf/0x130 [ 585.526700][T20881] ? __pfx_aa_sk_perm+0x10/0x10 [ 585.526726][T20881] ? sock_rps_record_flow+0x19/0x350 [ 585.526745][T20881] ? __pfx_inet_sendmsg+0x10/0x10 [ 585.526766][T20881] ? inet_sendmsg+0x2f4/0x370 [ 585.526783][T20881] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 585.526804][T20881] ? __pfx_inet_sendmsg+0x10/0x10 [ 585.526824][T20881] __sys_sendto+0x5de/0x710 [ 585.526851][T20881] ? __pfx___sys_sendto+0x10/0x10 [ 585.526872][T20881] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 585.526905][T20881] ? __fget_files+0x3a0/0x420 [ 585.526937][T20881] ? ksys_write+0x242/0x270 [ 585.526971][T20881] ? __pfx_ksys_write+0x10/0x10 [ 585.527000][T20881] __x64_sys_sendto+0xde/0x100 [ 585.527024][T20881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.527043][T20881] do_syscall_64+0x174/0x580 [ 585.527060][T20881] ? trace_irq_disable+0x3b/0x140 [ 585.527084][T20881] ? clear_bhb_loop+0x40/0x90 [ 585.527106][T20881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.527122][T20881] RIP: 0033:0x7f6be539ce59 [ 585.527140][T20881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.527154][T20881] RSP: 002b:00007f6be35f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 585.527173][T20881] RAX: ffffffffffffffda RBX: 00007f6be5615fa0 RCX: 00007f6be539ce59 [ 585.527185][T20881] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 585.527196][T20881] RBP: 00007f6be35f6090 R08: 000020000005ffe4 R09: 000000000000001c [ 585.527207][T20881] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 585.527218][T20881] R13: 00007f6be5616038 R14: 00007f6be5615fa0 R15: 00007ffdbddaec98 [ 585.527248][T20881] [ 586.387341][T20883] syzkaller0: entered promiscuous mode [ 586.410976][T20883] syzkaller0: entered allmulticast mode [ 586.564529][T20907] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4089'. [ 586.614055][T20909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4090'. [ 586.893746][T20923] FAULT_INJECTION: forcing a failure. [ 586.893746][T20923] name failslab, interval 1, probability 0, space 0, times 0 [ 586.936530][T20923] CPU: 1 UID: 0 PID: 20923 Comm: syz.5.4094 Not tainted syzkaller #0 PREEMPT(full) [ 586.936555][T20923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 586.936565][T20923] Call Trace: [ 586.936572][T20923] [ 586.936580][T20923] dump_stack_lvl+0xe8/0x150 [ 586.936606][T20923] should_fail_ex+0x412/0x560 [ 586.936632][T20923] should_failslab+0xa8/0x100 [ 586.936650][T20923] ? sctp_chunkify+0x5a/0x260 [ 586.936669][T20923] kmem_cache_alloc_noprof+0x87/0x650 [ 586.936702][T20923] sctp_chunkify+0x5a/0x260 [ 586.936724][T20923] _sctp_make_chunk+0x122/0x290 [ 586.936746][T20923] sctp_make_datafrag_empty+0x12a/0x240 [ 586.936769][T20923] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 586.936790][T20923] ? sctp_user_addto_chunk+0xa8/0x240 [ 586.936814][T20923] sctp_datamsg_from_user+0x729/0xef0 [ 586.936860][T20923] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 586.936881][T20923] ? __asan_memcpy+0x40/0x70 [ 586.936910][T20923] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 586.936946][T20923] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 586.936968][T20923] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 586.936999][T20923] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 586.937021][T20923] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 586.937041][T20923] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 586.937063][T20923] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 586.937087][T20923] ? security_sctp_bind_connect+0x7e/0x2c0 [ 586.937112][T20923] sctp_sendmsg+0x1b85/0x2c50 [ 586.937145][T20923] ? __pfx_sctp_sendmsg+0x10/0x10 [ 586.937166][T20923] ? aa_sk_perm+0x6d5/0x900 [ 586.937188][T20923] ? __might_fault+0xaf/0x130 [ 586.937215][T20923] ? __pfx_aa_sk_perm+0x10/0x10 [ 586.937241][T20923] ? sock_rps_record_flow+0x19/0x350 [ 586.937259][T20923] ? __pfx_inet_sendmsg+0x10/0x10 [ 586.937279][T20923] ? inet_sendmsg+0x2f4/0x370 [ 586.937297][T20923] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 586.937318][T20923] ? __pfx_inet_sendmsg+0x10/0x10 [ 586.937336][T20923] __sys_sendto+0x5de/0x710 [ 586.937363][T20923] ? __pfx___sys_sendto+0x10/0x10 [ 586.937384][T20923] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 586.937416][T20923] ? __fget_files+0x3a0/0x420 [ 586.937448][T20923] ? ksys_write+0x242/0x270 [ 586.937474][T20923] ? __pfx_ksys_write+0x10/0x10 [ 586.937500][T20923] __x64_sys_sendto+0xde/0x100 [ 586.937521][T20923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.937539][T20923] do_syscall_64+0x174/0x580 [ 586.937554][T20923] ? trace_irq_disable+0x3b/0x140 [ 586.937577][T20923] ? clear_bhb_loop+0x40/0x90 [ 586.937598][T20923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.937613][T20923] RIP: 0033:0x7f6b6959ce59 [ 586.937630][T20923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.937644][T20923] RSP: 002b:00007f6b6a3a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 586.937662][T20923] RAX: ffffffffffffffda RBX: 00007f6b69815fa0 RCX: 00007f6b6959ce59 [ 586.937675][T20923] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 586.937686][T20923] RBP: 00007f6b6a3a4090 R08: 000020000005ffe4 R09: 000000000000001c [ 586.937697][T20923] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 586.937707][T20923] R13: 00007f6b69816038 R14: 00007f6b69815fa0 R15: 00007ffcf3685f38 [ 586.937735][T20923] [ 588.518452][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 589.452445][T20913] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4089'. [ 589.516119][T20933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4096'. [ 589.544047][T20933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4096'. [ 589.596750][T20935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4098'. [ 589.699244][T20936] net_ratelimit: 10 callbacks suppressed [ 589.699262][T20936] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 589.741292][T20950] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 589.817764][T20948] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.4099'. [ 590.101676][T20967] FAULT_INJECTION: forcing a failure. [ 590.101676][T20967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.167991][T20967] CPU: 0 UID: 0 PID: 20967 Comm: syz.5.4105 Not tainted syzkaller #0 PREEMPT(full) [ 590.168016][T20967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 590.168027][T20967] Call Trace: [ 590.168035][T20967] [ 590.168042][T20967] dump_stack_lvl+0xe8/0x150 [ 590.168068][T20967] should_fail_ex+0x412/0x560 [ 590.168092][T20967] _copy_from_iter+0x1d3/0x1670 [ 590.168110][T20967] ? sctp_chunkify+0x5a/0x260 [ 590.168129][T20967] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 590.168160][T20967] ? __pfx__copy_from_iter+0x10/0x10 [ 590.168179][T20967] ? __asan_memcpy+0x40/0x70 [ 590.168201][T20967] ? sctp_make_datafrag_empty+0x184/0x240 [ 590.168221][T20967] ? skb_put+0x11b/0x210 [ 590.168247][T20967] sctp_user_addto_chunk+0x87/0x240 [ 590.168271][T20967] sctp_datamsg_from_user+0x748/0xef0 [ 590.168313][T20967] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 590.168334][T20967] ? __asan_memcpy+0x40/0x70 [ 590.168360][T20967] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 590.168391][T20967] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 590.168411][T20967] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 590.168433][T20967] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 590.168453][T20967] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 590.168471][T20967] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 590.168493][T20967] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 590.168516][T20967] ? security_sctp_bind_connect+0x7e/0x2c0 [ 590.168538][T20967] sctp_sendmsg+0x1b85/0x2c50 [ 590.168572][T20967] ? __pfx_sctp_sendmsg+0x10/0x10 [ 590.168596][T20967] ? aa_sk_perm+0x6d5/0x900 [ 590.168635][T20967] ? __might_fault+0xaf/0x130 [ 590.168669][T20967] ? __pfx_aa_sk_perm+0x10/0x10 [ 590.168694][T20967] ? sock_rps_record_flow+0x19/0x350 [ 590.168712][T20967] ? __pfx_inet_sendmsg+0x10/0x10 [ 590.168730][T20967] ? inet_sendmsg+0x2f4/0x370 [ 590.168747][T20967] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 590.168767][T20967] ? __pfx_inet_sendmsg+0x10/0x10 [ 590.168785][T20967] __sys_sendto+0x5de/0x710 [ 590.168810][T20967] ? __pfx___sys_sendto+0x10/0x10 [ 590.168830][T20967] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 590.168862][T20967] ? __fget_files+0x3a0/0x420 [ 590.168894][T20967] ? ksys_write+0x242/0x270 [ 590.168919][T20967] ? __pfx_ksys_write+0x10/0x10 [ 590.168946][T20967] __x64_sys_sendto+0xde/0x100 [ 590.168970][T20967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.168989][T20967] do_syscall_64+0x174/0x580 [ 590.169005][T20967] ? trace_irq_disable+0x3b/0x140 [ 590.169029][T20967] ? clear_bhb_loop+0x40/0x90 [ 590.169050][T20967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.169065][T20967] RIP: 0033:0x7f6b6959ce59 [ 590.169082][T20967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.169096][T20967] RSP: 002b:00007f6b6a3a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 590.169115][T20967] RAX: ffffffffffffffda RBX: 00007f6b69815fa0 RCX: 00007f6b6959ce59 [ 590.169127][T20967] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 590.169137][T20967] RBP: 00007f6b6a3a4090 R08: 000020000005ffe4 R09: 000000000000001c [ 590.169148][T20967] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 590.169159][T20967] R13: 00007f6b69816038 R14: 00007f6b69815fa0 R15: 00007ffcf3685f38 [ 590.169189][T20967] [ 591.779590][T21045] macvlan4: entered promiscuous mode [ 591.784936][T21045] macvlan4: entered allmulticast mode [ 591.791916][T21045] bond0: entered allmulticast mode [ 591.797066][T21045] bond_slave_0: entered allmulticast mode [ 591.802818][T21045] bond_slave_1: entered allmulticast mode [ 591.808671][T21045] bond_slave_0: entered promiscuous mode [ 591.814783][T21045] bond_slave_1: entered promiscuous mode [ 591.820455][T21045] bond0: entered promiscuous mode [ 591.834661][T21045] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 591.850772][T21045] team0: Port device macvlan4 added [ 591.989444][T21051] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 592.001809][T21051] bond1 (unregistering): Released all slaves [ 592.115535][T21061] FAULT_INJECTION: forcing a failure. [ 592.115535][T21061] name failslab, interval 1, probability 0, space 0, times 0 [ 592.129665][T21061] CPU: 0 UID: 0 PID: 21061 Comm: syz.2.4139 Not tainted syzkaller #0 PREEMPT(full) [ 592.129696][T21061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 592.129706][T21061] Call Trace: [ 592.129713][T21061] [ 592.129722][T21061] dump_stack_lvl+0xe8/0x150 [ 592.129748][T21061] should_fail_ex+0x412/0x560 [ 592.129772][T21061] should_failslab+0xa8/0x100 [ 592.129792][T21061] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 592.129818][T21061] ? __alloc_skb+0x1d0/0x7d0 [ 592.129840][T21061] ? __local_bh_enable_ip+0xd0/0x130 [ 592.129862][T21061] __alloc_skb+0x1d0/0x7d0 [ 592.129889][T21061] _sctp_make_chunk+0x59/0x290 [ 592.129917][T21061] sctp_make_datafrag_empty+0x12a/0x240 [ 592.129945][T21061] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 592.129968][T21061] ? sctp_user_addto_chunk+0xa8/0x240 [ 592.129995][T21061] sctp_datamsg_from_user+0x729/0xef0 [ 592.130040][T21061] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 592.130061][T21061] ? __asan_memcpy+0x40/0x70 [ 592.130089][T21061] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 592.130125][T21061] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 592.130146][T21061] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 592.130170][T21061] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 592.130191][T21061] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 592.130211][T21061] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 592.130232][T21061] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 592.130261][T21061] ? security_sctp_bind_connect+0x7e/0x2c0 [ 592.130286][T21061] sctp_sendmsg+0x1b85/0x2c50 [ 592.130321][T21061] ? __pfx_sctp_sendmsg+0x10/0x10 [ 592.130345][T21061] ? aa_sk_perm+0x6d5/0x900 [ 592.130367][T21061] ? __might_fault+0xaf/0x130 [ 592.130396][T21061] ? __pfx_aa_sk_perm+0x10/0x10 [ 592.130422][T21061] ? sock_rps_record_flow+0x19/0x350 [ 592.130447][T21061] ? __pfx_inet_sendmsg+0x10/0x10 [ 592.130467][T21061] ? inet_sendmsg+0x2f4/0x370 [ 592.130484][T21061] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 592.130506][T21061] ? __pfx_inet_sendmsg+0x10/0x10 [ 592.130525][T21061] __sys_sendto+0x5de/0x710 [ 592.130552][T21061] ? __pfx___sys_sendto+0x10/0x10 [ 592.130573][T21061] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 592.130606][T21061] ? __fget_files+0x3a0/0x420 [ 592.130643][T21061] ? rcu_is_watching+0x15/0xb0 [ 592.130670][T21061] __x64_sys_sendto+0xde/0x100 [ 592.130694][T21061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.130714][T21061] do_syscall_64+0x174/0x580 [ 592.130731][T21061] ? trace_irq_disable+0x3b/0x140 [ 592.130760][T21061] ? clear_bhb_loop+0x40/0x90 [ 592.130782][T21061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.130799][T21061] RIP: 0033:0x7f216f19ce59 [ 592.130817][T21061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.130831][T21061] RSP: 002b:00007f2170103028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 592.130850][T21061] RAX: ffffffffffffffda RBX: 00007f216f415fa0 RCX: 00007f216f19ce59 [ 592.130862][T21061] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 592.130873][T21061] RBP: 00007f2170103090 R08: 000020000005ffe4 R09: 000000000000001c [ 592.130884][T21061] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 592.130894][T21061] R13: 00007f216f416038 R14: 00007f216f415fa0 R15: 00007fff7a6d2758 [ 592.130924][T21061] [ 593.126221][T21104] netlink: 'syz.2.4150': attribute type 1 has an invalid length. [ 593.197927][T21104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 593.220718][T21104] bond1: (slave veth0_to_bond): making interface the new active one [ 593.239708][T21104] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 593.332574][T21111] FAULT_INJECTION: forcing a failure. [ 593.332574][T21111] name failslab, interval 1, probability 0, space 0, times 0 [ 593.365520][T21111] CPU: 0 UID: 0 PID: 21111 Comm: syz.3.4153 Not tainted syzkaller #0 PREEMPT(full) [ 593.365545][T21111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 593.365556][T21111] Call Trace: [ 593.365564][T21111] [ 593.365571][T21111] dump_stack_lvl+0xe8/0x150 [ 593.365596][T21111] should_fail_ex+0x412/0x560 [ 593.365621][T21111] should_failslab+0xa8/0x100 [ 593.365638][T21111] ? sctp_chunkify+0x5a/0x260 [ 593.365657][T21111] kmem_cache_alloc_noprof+0x87/0x650 [ 593.365689][T21111] sctp_chunkify+0x5a/0x260 [ 593.365711][T21111] _sctp_make_chunk+0x122/0x290 [ 593.365733][T21111] sctp_make_datafrag_empty+0x12a/0x240 [ 593.365759][T21111] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 593.365781][T21111] ? sctp_user_addto_chunk+0xa8/0x240 [ 593.365804][T21111] sctp_datamsg_from_user+0x729/0xef0 [ 593.365850][T21111] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 593.365871][T21111] ? __asan_memcpy+0x40/0x70 [ 593.365901][T21111] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 593.365937][T21111] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 593.365959][T21111] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 593.365981][T21111] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 593.366003][T21111] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 593.366023][T21111] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 593.366045][T21111] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 593.366069][T21111] ? security_sctp_bind_connect+0x7e/0x2c0 [ 593.366093][T21111] sctp_sendmsg+0x1b85/0x2c50 [ 593.366130][T21111] ? __pfx_sctp_sendmsg+0x10/0x10 [ 593.366154][T21111] ? aa_sk_perm+0x6d5/0x900 [ 593.366176][T21111] ? __might_fault+0xaf/0x130 [ 593.366204][T21111] ? __pfx_aa_sk_perm+0x10/0x10 [ 593.366230][T21111] ? sock_rps_record_flow+0x19/0x350 [ 593.366248][T21111] ? __pfx_inet_sendmsg+0x10/0x10 [ 593.366267][T21111] ? inet_sendmsg+0x2f4/0x370 [ 593.366283][T21111] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 593.366302][T21111] ? __pfx_inet_sendmsg+0x10/0x10 [ 593.366328][T21111] __sys_sendto+0x5de/0x710 [ 593.366355][T21111] ? __pfx___sys_sendto+0x10/0x10 [ 593.366376][T21111] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 593.366407][T21111] ? __fget_files+0x3a0/0x420 [ 593.366439][T21111] ? ksys_write+0x242/0x270 [ 593.366465][T21111] ? __pfx_ksys_write+0x10/0x10 [ 593.366494][T21111] __x64_sys_sendto+0xde/0x100 [ 593.366515][T21111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.366532][T21111] do_syscall_64+0x174/0x580 [ 593.366547][T21111] ? trace_irq_disable+0x3b/0x140 [ 593.366571][T21111] ? clear_bhb_loop+0x40/0x90 [ 593.366592][T21111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.366609][T21111] RIP: 0033:0x7fe61c19ce59 [ 593.366625][T21111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.366637][T21111] RSP: 002b:00007fe61cf84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 593.366656][T21111] RAX: ffffffffffffffda RBX: 00007fe61c415fa0 RCX: 00007fe61c19ce59 [ 593.366668][T21111] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 593.366679][T21111] RBP: 00007fe61cf84090 R08: 000020000005ffe4 R09: 000000000000001c [ 593.366690][T21111] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 593.366699][T21111] R13: 00007fe61c416038 R14: 00007fe61c415fa0 R15: 00007fff34d69f18 [ 593.366730][T21111] [ 593.409144][T21109] syzkaller0: entered promiscuous mode [ 593.733422][T21109] syzkaller0: entered allmulticast mode [ 593.747604][ T7596] bond6: left allmulticast mode [ 593.761825][ T7596] bond6: left promiscuous mode [ 593.766947][ T7596] bridge0: port 3(bond6) entered disabled state [ 593.798854][ T7596] bridge_slave_1: left allmulticast mode [ 593.806073][ T7596] bridge_slave_1: left promiscuous mode [ 593.811831][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.845637][ T7596] bridge_slave_0: left allmulticast mode [ 593.851289][ T7596] bridge_slave_0: left promiscuous mode [ 593.856968][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.881593][T21132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4159'. [ 594.083432][ T7596] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 594.206029][ T7596] bond4 (unregistering): (slave geneve2): Releasing active interface [ 594.925454][ T7596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.941695][ T7596] bond0 (unregistering): Released all slaves [ 594.965197][ T7596] bond1 (unregistering): Released all slaves [ 594.992921][ T7596] bond2 (unregistering): Released all slaves [ 595.022092][ T7596] bond3 (unregistering): Released all slaves [ 595.049015][ T7596] bond4 (unregistering): Released all slaves [ 595.072703][ T7596] bond5 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 595.085943][ T7596] bond5 (unregistering): Released all slaves [ 595.124832][ T7596] bond6 (unregistering): Released all slaves [ 595.144632][ T7596] bond7 (unregistering): Released all slaves [ 595.165067][ T7596] bond8 (unregistering): Released all slaves [ 598.048091][T21155] FAULT_INJECTION: forcing a failure. [ 598.048091][T21155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.115736][T21155] CPU: 1 UID: 0 PID: 21155 Comm: syz.4.4167 Not tainted syzkaller #0 PREEMPT(full) [ 598.115759][T21155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 598.115769][T21155] Call Trace: [ 598.115775][T21155] [ 598.115781][T21155] dump_stack_lvl+0xe8/0x150 [ 598.115802][T21155] should_fail_ex+0x412/0x560 [ 598.115821][T21155] _copy_from_iter+0x1d3/0x1670 [ 598.115834][T21155] ? sctp_chunkify+0x5a/0x260 [ 598.115849][T21155] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 598.115874][T21155] ? __pfx__copy_from_iter+0x10/0x10 [ 598.115888][T21155] ? __asan_memcpy+0x40/0x70 [ 598.115905][T21155] ? sctp_make_datafrag_empty+0x184/0x240 [ 598.115922][T21155] ? skb_put+0x11b/0x210 [ 598.115944][T21155] sctp_user_addto_chunk+0x87/0x240 [ 598.115963][T21155] sctp_datamsg_from_user+0x748/0xef0 [ 598.115998][T21155] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 598.116014][T21155] ? __asan_memcpy+0x40/0x70 [ 598.116035][T21155] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 598.116063][T21155] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 598.116081][T21155] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 598.116099][T21155] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 598.116117][T21155] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 598.116133][T21155] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 598.116150][T21155] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 598.116181][T21155] ? security_sctp_bind_connect+0x7e/0x2c0 [ 598.116202][T21155] sctp_sendmsg+0x1b85/0x2c50 [ 598.116232][T21155] ? __pfx_sctp_sendmsg+0x10/0x10 [ 598.116251][T21155] ? aa_sk_perm+0x6d5/0x900 [ 598.116270][T21155] ? __might_fault+0xaf/0x130 [ 598.116293][T21155] ? __pfx_aa_sk_perm+0x10/0x10 [ 598.116312][T21155] ? sock_rps_record_flow+0x19/0x350 [ 598.116328][T21155] ? __pfx_inet_sendmsg+0x10/0x10 [ 598.116344][T21155] ? inet_sendmsg+0x2f4/0x370 [ 598.116359][T21155] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 598.116379][T21155] ? __pfx_inet_sendmsg+0x10/0x10 [ 598.116398][T21155] __sys_sendto+0x5de/0x710 [ 598.116424][T21155] ? __pfx___sys_sendto+0x10/0x10 [ 598.116443][T21155] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 598.116473][T21155] ? __fget_files+0x3a0/0x420 [ 598.116502][T21155] ? ksys_write+0x242/0x270 [ 598.116528][T21155] ? __pfx_ksys_write+0x10/0x10 [ 598.116556][T21155] __x64_sys_sendto+0xde/0x100 [ 598.116581][T21155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.116599][T21155] do_syscall_64+0x174/0x580 [ 598.116616][T21155] ? trace_irq_disable+0x3b/0x140 [ 598.116641][T21155] ? clear_bhb_loop+0x40/0x90 [ 598.116662][T21155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.116680][T21155] RIP: 0033:0x7fdf1439ce59 [ 598.116696][T21155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.116709][T21155] RSP: 002b:00007fdf15207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 598.116729][T21155] RAX: ffffffffffffffda RBX: 00007fdf14615fa0 RCX: 00007fdf1439ce59 [ 598.116741][T21155] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 598.116752][T21155] RBP: 00007fdf15207090 R08: 000020000005ffe4 R09: 000000000000001c [ 598.116764][T21155] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 598.116774][T21155] R13: 00007fdf14616038 R14: 00007fdf14615fa0 R15: 00007ffead03f968 [ 598.116806][T21155] [ 598.562702][T21159] bond2 (unregistering): Released all slaves [ 598.708164][ T7596] tipc: Disabling bearer [ 598.736383][ T7596] tipc: Disabling bearer [ 598.787060][ T7596] tipc: Disabling bearer [ 598.806603][T21176] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 598.831152][ T7596] tipc: Left network mode [ 598.933954][T21176] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4171'. [ 599.481674][T21200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.523373][T21199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.534818][T21203] bridge_slave_0: default FDB implementation only supports local addresses [ 599.665848][T21211] FAULT_INJECTION: forcing a failure. [ 599.665848][T21211] name failslab, interval 1, probability 0, space 0, times 0 [ 599.665931][T21208] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4180'. [ 599.709570][T21211] CPU: 1 UID: 0 PID: 21211 Comm: syz.2.4181 Not tainted syzkaller #0 PREEMPT(full) [ 599.709594][T21211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 599.709604][T21211] Call Trace: [ 599.709611][T21211] [ 599.709619][T21211] dump_stack_lvl+0xe8/0x150 [ 599.709646][T21211] should_fail_ex+0x412/0x560 [ 599.709670][T21211] should_failslab+0xa8/0x100 [ 599.709686][T21211] ? sctp_chunkify+0x5a/0x260 [ 599.709703][T21211] kmem_cache_alloc_noprof+0x87/0x650 [ 599.709734][T21211] sctp_chunkify+0x5a/0x260 [ 599.709756][T21211] _sctp_make_chunk+0x122/0x290 [ 599.709778][T21211] sctp_make_datafrag_empty+0x12a/0x240 [ 599.709799][T21211] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 599.709819][T21211] ? sctp_user_addto_chunk+0xa8/0x240 [ 599.709842][T21211] sctp_datamsg_from_user+0x729/0xef0 [ 599.709883][T21211] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 599.709903][T21211] ? __asan_memcpy+0x40/0x70 [ 599.709928][T21211] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 599.709969][T21211] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 599.709987][T21211] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 599.710009][T21211] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 599.710030][T21211] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 599.710050][T21211] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 599.710069][T21211] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 599.710092][T21211] ? security_sctp_bind_connect+0x7e/0x2c0 [ 599.710115][T21211] sctp_sendmsg+0x1b85/0x2c50 [ 599.710146][T21211] ? __pfx_sctp_sendmsg+0x10/0x10 [ 599.710168][T21211] ? aa_sk_perm+0x6d5/0x900 [ 599.710190][T21211] ? __might_fault+0xaf/0x130 [ 599.710218][T21211] ? __pfx_aa_sk_perm+0x10/0x10 [ 599.710245][T21211] ? sock_rps_record_flow+0x19/0x350 [ 599.710263][T21211] ? __pfx_inet_sendmsg+0x10/0x10 [ 599.710283][T21211] ? inet_sendmsg+0x2f4/0x370 [ 599.710300][T21211] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 599.710322][T21211] ? __pfx_inet_sendmsg+0x10/0x10 [ 599.710341][T21211] __sys_sendto+0x5de/0x710 [ 599.710368][T21211] ? __pfx___sys_sendto+0x10/0x10 [ 599.710389][T21211] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 599.710423][T21211] ? __fget_files+0x3a0/0x420 [ 599.710455][T21211] ? ksys_write+0x242/0x270 [ 599.710482][T21211] ? __pfx_ksys_write+0x10/0x10 [ 599.710512][T21211] __x64_sys_sendto+0xde/0x100 [ 599.710536][T21211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.710556][T21211] do_syscall_64+0x174/0x580 [ 599.710573][T21211] ? trace_irq_disable+0x3b/0x140 [ 599.710598][T21211] ? clear_bhb_loop+0x40/0x90 [ 599.710620][T21211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.710638][T21211] RIP: 0033:0x7f216f19ce59 [ 599.710654][T21211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.710668][T21211] RSP: 002b:00007f2170103028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 599.710686][T21211] RAX: ffffffffffffffda RBX: 00007f216f415fa0 RCX: 00007f216f19ce59 [ 599.710698][T21211] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 599.710709][T21211] RBP: 00007f2170103090 R08: 000020000005ffe4 R09: 000000000000001c [ 599.710720][T21211] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 599.710729][T21211] R13: 00007f216f416038 R14: 00007f216f415fa0 R15: 00007fff7a6d2758 [ 599.710759][T21211] [ 599.787421][T21213] bond2 (unregistering): Released all slaves [ 600.310204][T21222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4183'. [ 600.336000][T21223] netlink: 'syz.3.4183': attribute type 10 has an invalid length. [ 600.346001][T21223] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4183'. [ 600.432939][T21223] dummy0: entered promiscuous mode [ 600.602567][T21229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4185'. [ 600.604408][T21237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4185'. [ 600.611459][T21229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4185'. [ 600.679163][T21237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4185'. [ 600.763694][T21249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4192'. [ 600.793044][T21249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4192'. [ 600.923952][T21257] netlink: 'syz.0.4194': attribute type 39 has an invalid length. [ 601.092256][T21241] syzkaller0: entered promiscuous mode [ 601.097761][T21241] syzkaller0: entered allmulticast mode [ 601.876500][ T7947] IPVS: starting estimator thread 0... [ 602.138739][T21288] IPVS: using max 33 ests per chain, 79200 per kthread [ 603.922589][T21268] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 603.936035][T21275] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 604.574786][T21311] netlink: 'syz.3.4216': attribute type 1 has an invalid length. [ 604.609068][T21311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.654104][T21311] __nla_validate_parse: 5 callbacks suppressed [ 604.654122][T21311] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.4216'. [ 604.898202][T21318] bond2 (unregistering): Released all slaves [ 604.968553][ T7596] hsr_slave_0: left promiscuous mode [ 604.974666][ T7596] hsr_slave_1: left promiscuous mode [ 604.980603][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.987985][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.995414][T21338] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4222'. [ 605.005983][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.038001][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.061433][ T7596] dummy0: left allmulticast mode [ 605.072147][T21338] nbd: socks must be embedded in a SOCK_ITEM attr [ 605.082556][T21339] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 605.149630][ T7596] pim6reg (unregistering): left allmulticast mode [ 605.506267][ T7596] team0 (unregistering): Port device team_slave_1 removed [ 605.531965][ T7596] team0 (unregistering): Port device team_slave_0 removed [ 605.712736][T21346] bridge_slave_0: default FDB implementation only supports local addresses [ 605.789504][T21350] syzkaller0: entered promiscuous mode [ 605.795009][T21350] syzkaller0: entered allmulticast mode [ 606.136013][T21374] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4231'. [ 606.171745][T21378] FAULT_INJECTION: forcing a failure. [ 606.171745][T21378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.186593][T21378] CPU: 0 UID: 0 PID: 21378 Comm: syz.4.4232 Not tainted syzkaller #0 PREEMPT(full) [ 606.186614][T21378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 606.186623][T21378] Call Trace: [ 606.186629][T21378] [ 606.186636][T21378] dump_stack_lvl+0xe8/0x150 [ 606.186658][T21378] should_fail_ex+0x412/0x560 [ 606.186683][T21378] _copy_from_iter+0x1d3/0x1670 [ 606.186697][T21378] ? sctp_chunkify+0x5a/0x260 [ 606.186713][T21378] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 606.186739][T21378] ? __pfx__copy_from_iter+0x10/0x10 [ 606.186754][T21378] ? __asan_memcpy+0x40/0x70 [ 606.186772][T21378] ? sctp_make_datafrag_empty+0x184/0x240 [ 606.186789][T21378] ? skb_put+0x11b/0x210 [ 606.186811][T21378] sctp_user_addto_chunk+0x87/0x240 [ 606.186831][T21378] sctp_datamsg_from_user+0x748/0xef0 [ 606.186868][T21378] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 606.186885][T21378] ? __asan_memcpy+0x40/0x70 [ 606.186908][T21378] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 606.186937][T21378] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 606.186954][T21378] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 606.186972][T21378] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 606.186988][T21378] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 606.187004][T21378] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 606.187021][T21378] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 606.187040][T21378] ? security_sctp_bind_connect+0x7e/0x2c0 [ 606.187078][T21378] sctp_sendmsg+0x1b85/0x2c50 [ 606.187109][T21378] ? __pfx_sctp_sendmsg+0x10/0x10 [ 606.187128][T21378] ? aa_sk_perm+0x6d5/0x900 [ 606.187145][T21378] ? __might_fault+0xaf/0x130 [ 606.187169][T21378] ? __pfx_aa_sk_perm+0x10/0x10 [ 606.187190][T21378] ? sock_rps_record_flow+0x19/0x350 [ 606.187204][T21378] ? __pfx_inet_sendmsg+0x10/0x10 [ 606.187220][T21378] ? inet_sendmsg+0x2f4/0x370 [ 606.187233][T21378] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 606.187250][T21378] ? __pfx_inet_sendmsg+0x10/0x10 [ 606.187266][T21378] __sys_sendto+0x5de/0x710 [ 606.187287][T21378] ? __pfx___sys_sendto+0x10/0x10 [ 606.187304][T21378] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 606.187330][T21378] ? __fget_files+0x3a0/0x420 [ 606.187356][T21378] ? ksys_write+0x242/0x270 [ 606.187378][T21378] ? __pfx_ksys_write+0x10/0x10 [ 606.187407][T21378] __x64_sys_sendto+0xde/0x100 [ 606.187426][T21378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.187442][T21378] do_syscall_64+0x174/0x580 [ 606.187456][T21378] ? trace_irq_disable+0x3b/0x140 [ 606.187475][T21378] ? clear_bhb_loop+0x40/0x90 [ 606.187493][T21378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.187506][T21378] RIP: 0033:0x7fdf1439ce59 [ 606.187521][T21378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.187532][T21378] RSP: 002b:00007fdf15207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 606.187547][T21378] RAX: ffffffffffffffda RBX: 00007fdf14615fa0 RCX: 00007fdf1439ce59 [ 606.187557][T21378] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 606.187566][T21378] RBP: 00007fdf15207090 R08: 000020000005ffe4 R09: 000000000000001c [ 606.187575][T21378] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 606.187583][T21378] R13: 00007fdf14616038 R14: 00007fdf14615fa0 R15: 00007ffead03f968 [ 606.187609][T21378] [ 606.589227][T21383] xt_hashlimit: size too large, truncated to 1048576 [ 608.761298][T21385] erspan0: entered promiscuous mode [ 608.785244][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4233'. [ 608.995775][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 609.041482][T21391] bond1 (unregistering): Released all slaves [ 609.052776][T21402] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4237'. [ 609.117724][T21395] bond2 (unregistering): Released all slaves [ 609.161725][T21402] bridge_slave_0: invalid flags given to default FDB implementation [ 609.177860][T21402] netlink: 'syz.2.4237': attribute type 11 has an invalid length. [ 609.194571][T21412] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 609.258054][T21415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4242'. [ 609.289958][T21402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4237'. [ 609.308125][T21417] FAULT_INJECTION: forcing a failure. [ 609.308125][T21417] name failslab, interval 1, probability 0, space 0, times 0 [ 609.322158][T21417] CPU: 0 UID: 0 PID: 21417 Comm: syz.0.4243 Not tainted syzkaller #0 PREEMPT(full) [ 609.322183][T21417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 609.322193][T21417] Call Trace: [ 609.322201][T21417] [ 609.322209][T21417] dump_stack_lvl+0xe8/0x150 [ 609.322236][T21417] should_fail_ex+0x412/0x560 [ 609.322261][T21417] should_failslab+0xa8/0x100 [ 609.322279][T21417] ? sctp_chunkify+0x5a/0x260 [ 609.322299][T21417] kmem_cache_alloc_noprof+0x87/0x650 [ 609.322331][T21417] sctp_chunkify+0x5a/0x260 [ 609.322354][T21417] _sctp_make_chunk+0x122/0x290 [ 609.322376][T21417] sctp_make_datafrag_empty+0x12a/0x240 [ 609.322399][T21417] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 609.322422][T21417] ? sctp_user_addto_chunk+0xa8/0x240 [ 609.322446][T21417] sctp_datamsg_from_user+0x729/0xef0 [ 609.322493][T21417] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 609.322514][T21417] ? __asan_memcpy+0x40/0x70 [ 609.322544][T21417] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 609.322580][T21417] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 609.322602][T21417] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 609.322625][T21417] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 609.322647][T21417] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 609.322667][T21417] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 609.322689][T21417] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 609.322713][T21417] ? security_sctp_bind_connect+0x7e/0x2c0 [ 609.322738][T21417] sctp_sendmsg+0x1b85/0x2c50 [ 609.322775][T21417] ? __pfx_sctp_sendmsg+0x10/0x10 [ 609.322800][T21417] ? aa_sk_perm+0x6d5/0x900 [ 609.322822][T21417] ? __might_fault+0xaf/0x130 [ 609.322851][T21417] ? __pfx_aa_sk_perm+0x10/0x10 [ 609.322882][T21417] ? sock_rps_record_flow+0x19/0x350 [ 609.322901][T21417] ? __pfx_inet_sendmsg+0x10/0x10 [ 609.322921][T21417] ? inet_sendmsg+0x2f4/0x370 [ 609.322938][T21417] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 609.322960][T21417] ? __pfx_inet_sendmsg+0x10/0x10 [ 609.322980][T21417] __sys_sendto+0x5de/0x710 [ 609.323008][T21417] ? __pfx___sys_sendto+0x10/0x10 [ 609.323030][T21417] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 609.323063][T21417] ? __fget_files+0x3a0/0x420 [ 609.323102][T21417] ? ksys_write+0x242/0x270 [ 609.323128][T21417] ? __pfx_ksys_write+0x10/0x10 [ 609.323158][T21417] __x64_sys_sendto+0xde/0x100 [ 609.323183][T21417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.323202][T21417] do_syscall_64+0x174/0x580 [ 609.323220][T21417] ? trace_irq_disable+0x3b/0x140 [ 609.323244][T21417] ? clear_bhb_loop+0x40/0x90 [ 609.323266][T21417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.323284][T21417] RIP: 0033:0x7f6be539ce59 [ 609.323301][T21417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.323316][T21417] RSP: 002b:00007f6be35f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 609.323334][T21417] RAX: ffffffffffffffda RBX: 00007f6be5615fa0 RCX: 00007f6be539ce59 [ 609.323347][T21417] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 609.323358][T21417] RBP: 00007f6be35f6090 R08: 000020000005ffe4 R09: 000000000000001c [ 609.323370][T21417] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 609.323380][T21417] R13: 00007f6be5616038 R14: 00007f6be5615fa0 R15: 00007ffdbddaec98 [ 609.323411][T21417] [ 609.787031][T21425] syzkaller0: entered promiscuous mode [ 609.793456][T21425] syzkaller0: entered allmulticast mode [ 609.852079][T21431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4248'. [ 609.889290][T21431] block nbd0: reconnected socket [ 609.972156][ T50] block nbd0: Receive control failed (result -32) [ 612.916522][T21467] ip6t_srh: unknown srh match flags 5F28 [ 612.966101][T21475] netlink: 'syz.3.4259': attribute type 39 has an invalid length. [ 613.001752][T21471] bond2 (unregistering): Released all slaves [ 613.098655][T21483] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4263'. [ 613.168516][ T7596] IPVS: stop unused estimator thread 0... [ 613.351051][T21492] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4267'. [ 613.467909][T21500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4269'. [ 613.479233][T21500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4269'. [ 613.500969][T21501] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4271'. [ 613.510030][T21501] netlink: 'syz.0.4271': attribute type 1 has an invalid length. [ 613.523661][T21501] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4271'. [ 613.638990][ T7596] bridge_slave_1: left allmulticast mode [ 613.644727][ T7596] bridge_slave_1: left promiscuous mode [ 613.650490][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.694566][ T7596] bridge_slave_0: left allmulticast mode [ 613.700258][ T7596] bridge_slave_0: left promiscuous mode [ 613.706026][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.710957][T21513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4275'. [ 613.770783][T21515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4275'. [ 613.779338][ T7596] pimreg3: left allmulticast mode [ 613.826043][T21518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4276'. [ 615.637156][ T7596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.649342][ T7596] bond0 (unregistering): Released all slaves [ 615.667642][ T7596] bond1 (unregistering): Released all slaves [ 615.698592][ T7596] bond2 (unregistering): Released all slaves [ 615.719614][ T7596] bond3 (unregistering): Released all slaves [ 615.893029][ T7596] bond7 (unregistering): (slave ip6gretap0): Releasing active interface [ 616.125213][ T7596] bond8 (unregistering): (slave geneve3): Releasing active interface [ 616.287889][ T7596] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 616.296203][ T7596] bridge2 (unregistering): left promiscuous mode [ 616.577232][ T7596] bond0 (unregistering): Released all slaves [ 616.592792][ T7596] bond1 (unregistering): Released all slaves [ 616.617194][ T7596] bond2 (unregistering): Released all slaves [ 616.636326][ T7596] bond3 (unregistering): Released all slaves [ 616.655687][ T7596] bond4 (unregistering): Released all slaves [ 616.692838][ T7596] bond5 (unregistering): Released all slaves [ 616.714568][ T7596] bond6 (unregistering): Released all slaves [ 616.734370][ T7596] bond7 (unregistering): Released all slaves [ 616.761519][ T7596] bond8 (unregistering): Released all slaves [ 616.782642][ T7596] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 616.796577][ T7596] bond9 (unregistering): Released all slaves [ 617.114542][T21547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4284'. [ 617.233285][T21549] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4284'. [ 617.324066][ T7596] : left promiscuous mode [ 617.350555][T21555] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4287'. [ 617.426990][T21561] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4288'. [ 617.633541][T21568] bond2 (unregistering): Released all slaves [ 617.768350][ T7596] tipc: Disabling bearer [ 617.793338][ T7596] tipc: Left network mode [ 617.834714][ T7596] tipc: Disabling bearer [ 617.840217][ T7596] tipc: Left network mode [ 618.361648][T21609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4299'. [ 618.425239][T21609] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 618.497573][T21609] netlink: 184 bytes leftover after parsing attributes in process `syz.5.4299'. [ 618.648434][T21620] bond1 (unregistering): Released all slaves [ 618.682115][T21618] team0: No ports can be present during mode change [ 618.711876][T21624] netlink: 83 bytes leftover after parsing attributes in process `syz.5.4306'. [ 618.825602][T21630] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4308'. [ 618.868790][T21630] block nbd0: reconnected socket [ 618.875625][T21630] block nbd0: Unsupported socket: should be TCP or UNIX. [ 618.896172][T21632] netlink: 'syz.5.4310': attribute type 61 has an invalid length. [ 618.905463][T21633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4310'. [ 618.917415][ T50] block nbd0: Receive control failed (result -32) [ 619.058651][T21639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4312'. [ 619.081842][T21653] netlink: 'syz.4.4315': attribute type 1 has an invalid length. [ 619.150413][T21653] 8021q: adding VLAN 0 to HW filter on device bond3 [ 619.199580][T21658] bond3: (slave veth0_to_bond): making interface the new active one [ 619.217452][T21658] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 619.244017][T21653] bond3: entered promiscuous mode [ 619.249321][T21653] veth0_to_bond: entered promiscuous mode [ 619.256189][T21653] bond3: entered allmulticast mode [ 619.267958][T21653] veth0_to_bond: entered allmulticast mode [ 619.645446][T21679] syzkaller0: entered promiscuous mode [ 619.651228][T21679] syzkaller0: entered allmulticast mode [ 619.779688][T21682] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.885193][T21688] openvswitch: netlink: IPv6 tunnel dst address is zero [ 620.314444][T21722] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 620.337126][T21722] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 621.403097][T21763] netlink: 'syz.5.4350': attribute type 1 has an invalid length. [ 621.443676][ T7596] hsr_slave_1: left promiscuous mode [ 621.449706][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.457095][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.465280][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.472716][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.488325][ T7596] hsr_slave_0: left promiscuous mode [ 621.554361][ T7596] veth1_macvtap: left promiscuous mode [ 621.559880][ T7596] veth0_macvtap: left promiscuous mode [ 621.565547][ T7596] veth1_vlan: left promiscuous mode [ 621.590383][ T7596] veth0_vlan: left promiscuous mode [ 621.596862][ T7596] veth1_macvtap: left promiscuous mode [ 621.602355][ T7596] veth0_macvtap: left promiscuous mode [ 621.621813][ T7596] veth1_vlan: left promiscuous mode [ 621.627102][ T7596] veth0_vlan: left promiscuous mode [ 621.917215][ T7596] team0 (unregistering): Port device team_slave_1 removed [ 621.933661][ T7596] team0 (unregistering): Port device team_slave_0 removed [ 622.625412][T21771] pim6reg: entered allmulticast mode [ 622.648025][T21786] syz_tun (unregistering): left allmulticast mode [ 622.700190][T21797] __nla_validate_parse: 12 callbacks suppressed [ 622.700209][T21797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4358'. [ 623.146712][T21814] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 623.674158][T21844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4371'. [ 623.862466][T21849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4375'. [ 623.888003][T21849] openvswitch: netlink: Missing key (keys=40, expected=80) [ 623.907420][T21849] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4375'. [ 624.012835][T21863] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4377'. [ 624.051967][T21863] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4377'. [ 624.200768][T21877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4383'. [ 624.253687][T21881] bond2 (unregistering): Released all slaves [ 624.255231][T21884] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4385'. [ 624.379448][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.528419][T21841] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 624.820234][T21908] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4392'. [ 625.035208][T21914] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.044824][T21914] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.074820][T21917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4395'. [ 625.184195][T21924] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 625.272756][T21926] bond5 (unregistering): Released all slaves [ 625.335204][T21931] FAULT_INJECTION: forcing a failure. [ 625.335204][T21931] name failslab, interval 1, probability 0, space 0, times 0 [ 625.350150][T21931] CPU: 0 UID: 0 PID: 21931 Comm: syz.3.4400 Not tainted syzkaller #0 PREEMPT(full) [ 625.350175][T21931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 625.350185][T21931] Call Trace: [ 625.350192][T21931] [ 625.350199][T21931] dump_stack_lvl+0xe8/0x150 [ 625.350232][T21931] should_fail_ex+0x412/0x560 [ 625.350260][T21931] should_failslab+0xa8/0x100 [ 625.350276][T21931] ? sctp_chunkify+0x5a/0x260 [ 625.350294][T21931] kmem_cache_alloc_noprof+0x87/0x650 [ 625.350325][T21931] sctp_chunkify+0x5a/0x260 [ 625.350345][T21931] _sctp_make_chunk+0x122/0x290 [ 625.350366][T21931] sctp_make_datafrag_empty+0x12a/0x240 [ 625.350388][T21931] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 625.350409][T21931] ? sctp_user_addto_chunk+0xa8/0x240 [ 625.350432][T21931] sctp_datamsg_from_user+0x729/0xef0 [ 625.350474][T21931] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 625.350494][T21931] ? __asan_memcpy+0x40/0x70 [ 625.350524][T21931] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 625.350556][T21931] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 625.350574][T21931] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 625.350597][T21931] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 625.350618][T21931] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 625.350634][T21931] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 625.350656][T21931] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 625.350680][T21931] ? security_sctp_bind_connect+0x7e/0x2c0 [ 625.350704][T21931] sctp_sendmsg+0x1b85/0x2c50 [ 625.350739][T21931] ? __pfx_sctp_sendmsg+0x10/0x10 [ 625.350763][T21931] ? aa_sk_perm+0x6d5/0x900 [ 625.350785][T21931] ? __might_fault+0xaf/0x130 [ 625.350813][T21931] ? __pfx_aa_sk_perm+0x10/0x10 [ 625.350839][T21931] ? sock_rps_record_flow+0x19/0x350 [ 625.350858][T21931] ? __pfx_inet_sendmsg+0x10/0x10 [ 625.350877][T21931] ? inet_sendmsg+0x2f4/0x370 [ 625.350894][T21931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 625.350915][T21931] ? __pfx_inet_sendmsg+0x10/0x10 [ 625.350934][T21931] __sys_sendto+0x5de/0x710 [ 625.350960][T21931] ? __pfx___sys_sendto+0x10/0x10 [ 625.350978][T21931] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 625.351007][T21931] ? __fget_files+0x3a0/0x420 [ 625.351037][T21931] ? ksys_write+0x242/0x270 [ 625.351062][T21931] ? __pfx_ksys_write+0x10/0x10 [ 625.351090][T21931] __x64_sys_sendto+0xde/0x100 [ 625.351112][T21931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.351129][T21931] do_syscall_64+0x174/0x580 [ 625.351143][T21931] ? trace_irq_disable+0x3b/0x140 [ 625.351165][T21931] ? clear_bhb_loop+0x40/0x90 [ 625.351185][T21931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.351202][T21931] RIP: 0033:0x7fe61c19ce59 [ 625.351227][T21931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.351241][T21931] RSP: 002b:00007fe61cf84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 625.351259][T21931] RAX: ffffffffffffffda RBX: 00007fe61c415fa0 RCX: 00007fe61c19ce59 [ 625.351270][T21931] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 625.351282][T21931] RBP: 00007fe61cf84090 R08: 000020000005ffe4 R09: 000000000000001c [ 625.351293][T21931] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 625.351303][T21931] R13: 00007fe61c416038 R14: 00007fe61c415fa0 R15: 00007fff34d69f18 [ 625.351332][T21931] [ 625.777829][T21941] netlink: 'syz.2.4402': attribute type 1 has an invalid length. [ 625.791091][T21941] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 626.043865][T21954] netlink: 'syz.0.4409': attribute type 1 has an invalid length. [ 626.501636][T21954] bond2: entered promiscuous mode [ 626.508586][T21954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 626.516768][T21978] batadv0: mtu less than device minimum [ 626.523911][T21978] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 626.536140][T21978] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 626.547001][T21978] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 626.558003][T21978] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 626.568906][T21978] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 626.580380][T21978] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 626.591937][T21978] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 626.721679][ T7596] IPVS: stop unused estimator thread 0... [ 626.775903][ T7596] IPVS: stop unused estimator thread 0... [ 627.076388][ T50] block nbd2: Receive control failed (result -32) [ 627.306200][T22015] vlan3: entered allmulticast mode [ 627.311364][T22015] bond0: entered allmulticast mode [ 627.316569][T22015] bond_slave_0: entered allmulticast mode [ 627.322320][T22015] bond_slave_1: entered allmulticast mode [ 627.344258][T22011] bridge0: port 3(ipvlan2) entered blocking state [ 627.351410][T22011] bridge0: port 3(ipvlan2) entered disabled state [ 627.358810][T22011] ipvlan2: entered allmulticast mode [ 627.367378][T22011] bridge0: entered allmulticast mode [ 627.375754][T22011] ipvlan2: left allmulticast mode [ 627.381950][T22011] bridge0: left allmulticast mode [ 627.786161][T22043] __nla_validate_parse: 9 callbacks suppressed [ 627.786181][T22043] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4438'. [ 627.897560][T22046] bond3: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 627.922299][T22046] bond3 (unregistering): Released all slaves [ 627.990931][T22052] team0: entered promiscuous mode [ 627.996034][T22052] team_slave_0: entered promiscuous mode [ 628.010904][T22052] team_slave_1: entered promiscuous mode [ 628.017033][T22052] team0: entered allmulticast mode [ 628.022317][T22052] team_slave_0: entered allmulticast mode [ 628.028068][T22052] team_slave_1: entered allmulticast mode [ 628.056685][T22028] nbd3: detected capacity change from 0 to 63 [ 628.079149][T19774] block nbd3: Receive control failed (result -104) [ 628.080495][ T50] block nbd3: Receive control failed (result -32) [ 628.210459][T22063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4441'. [ 628.335484][ T7947] IPVS: starting estimator thread 0... [ 628.451945][T22070] IPVS: using max 31 ests per chain, 74400 per kthread [ 628.573485][T22079] netlink: 'syz.5.4445': attribute type 1 has an invalid length. [ 628.582435][T22079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4445'. [ 628.625710][T22079] bond4 (unregistering): Released all slaves [ 628.647623][T22082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4445'. [ 628.716605][T22084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4446'. [ 629.022094][T22087] netlink: 'syz.4.4447': attribute type 4 has an invalid length. [ 629.030061][T22087] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4447'. [ 629.055846][T22087] .`: renamed from bond0 (while UP) [ 629.102769][T22092] syzkaller0: entered promiscuous mode [ 629.108280][T22092] syzkaller0: entered allmulticast mode [ 629.615070][T22121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4456'. [ 632.041648][T22137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4458'. [ 632.104811][T22140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4459'. [ 632.668819][T22172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4466'. [ 632.696100][T22167] net_ratelimit: 13 callbacks suppressed [ 632.696150][T22167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 633.189516][T22188] syzkaller0: entered promiscuous mode [ 633.195033][T22188] syzkaller0: entered allmulticast mode [ 633.273412][T22197] netlink: 'syz.4.4475': attribute type 1 has an invalid length. [ 633.281188][T22197] netlink: 'syz.4.4475': attribute type 4 has an invalid length. [ 633.288915][T22197] netlink: 9422 bytes leftover after parsing attributes in process `syz.4.4475'. [ 633.371553][T22193] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 633.652455][T22207] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 634.905986][T22231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4484'. [ 636.102859][T22223] syzkaller0: left promiscuous mode [ 636.109241][T22223] syzkaller0: left allmulticast mode [ 636.244049][T22241] netlink: 'syz.4.4486': attribute type 1 has an invalid length. [ 636.370070][T22250] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 637.122562][T22302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4505'. [ 637.285800][T22314] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 637.329471][T22319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4511'. [ 637.340693][T22314] bond0 (unregistering): Released all slaves [ 637.427349][T22322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4512'. [ 637.791452][T22345] xt_hashlimit: size too large, truncated to 1048576 [ 638.274677][T22362] bond0 (unregistering): Released all slaves [ 638.521527][T22369] netlink: 'syz.4.4526': attribute type 2 has an invalid length. [ 638.992828][T22371] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 639.227533][T22380] syzkaller0: entered promiscuous mode [ 639.234075][T22380] syzkaller0: entered allmulticast mode [ 640.295609][T22387] syz_tun (unregistering): left allmulticast mode [ 640.593933][T22329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 640.718942][T22392] netlink: 'syz.2.4534': attribute type 1 has an invalid length. [ 640.756685][T22392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 640.783090][T22392] bond2: (slave gretap3): making interface the new active one [ 640.794475][T22392] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 641.089449][T22410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4540'. [ 641.407396][T22398] bond4 (unregistering): Released all slaves [ 641.689375][T22422] syzkaller0: entered promiscuous mode [ 641.701573][T22422] syzkaller0: entered allmulticast mode [ 641.845493][T22441] IPv6: NLM_F_CREATE should be specified when creating new route [ 641.870908][T22441] netlink: 'syz.3.4543': attribute type 1 has an invalid length. [ 642.237240][T22455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'. [ 643.013578][T22464] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4550'. [ 644.354387][T22480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4555'. [ 644.429491][T22477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4552'. [ 644.664688][T22477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4552'. [ 644.802856][T22488] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4558'. [ 645.054794][T22509] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4559'. [ 647.496576][T22533] openvswitch: netlink: IP tunnel dst address not specified [ 647.517682][T22531] bond3 (unregistering): Released all slaves [ 647.546296][T22529] syzkaller0: entered promiscuous mode [ 647.570297][T22529] syzkaller0: entered allmulticast mode [ 647.580566][T22540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4569'. [ 647.723386][T22546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4570'. [ 647.778828][T22551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4570'. [ 647.829625][T22548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4572'. [ 647.853238][T22553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4574'. [ 647.858725][T22548] 8021q: adding VLAN 0 to HW filter on device bond3 [ 647.951677][T22558] tipc: Enabling of bearer rejected, already enabled [ 648.072296][T22570] [ 648.074659][T22570] ====================================================== [ 648.081676][T22570] WARNING: possible circular locking dependency detected [ 648.088715][T22570] syzkaller #0 Not tainted [ 648.089529][T22566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4578'. [ 648.093121][T22570] ------------------------------------------------------ [ 648.093131][T22570] syz.2.4580/22570 is trying to acquire lock: [ 648.114999][T22570] ffffffff8ea85600 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x40/0x650 [ 648.124413][T22570] [ 648.124413][T22570] but task is already holding lock: [ 648.131752][T22570] ffff8880323d2210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_setattr+0x83/0x3f0 [ 648.142106][T22570] [ 648.142106][T22570] which lock already depends on the new lock. [ 648.142106][T22570] [ 648.152509][T22570] [ 648.152509][T22570] the existing dependency chain (in reverse order) is: [ 648.161527][T22570] [ 648.161527][T22570] -> #7 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 648.170049][T22570] down_read+0x47/0x2e0 [ 648.174718][T22570] kernfs_iop_permission+0x7f/0x430 [ 648.180430][T22570] inode_permission+0x46f/0x5f0 [ 648.185801][T22570] cgroup_attach_permissions+0x286/0x9e0 [ 648.191952][T22570] __cgroup_procs_write+0x23a/0x300 [ 648.197666][T22570] cgroup_threads_write+0x24/0x50 [ 648.203199][T22570] cgroup_file_write+0x331/0x8f0 [ 648.208649][T22570] kernfs_fop_write_iter+0x3af/0x540 [ 648.214441][T22570] vfs_write+0x61d/0xb90 [ 648.219196][T22570] ksys_write+0x150/0x270 [ 648.224048][T22570] do_syscall_64+0x174/0x580 [ 648.229146][T22570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.235554][T22570] [ 648.235554][T22570] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 648.243283][T22570] cpus_read_lock+0x42/0x160 [ 648.248392][T22570] static_key_slow_inc+0x12/0x30 [ 648.253839][T22570] nbd_genl_reconfigure+0x132f/0x1ea0 [ 648.259723][T22570] genl_family_rcv_msg_doit+0x22a/0x330 [ 648.265782][T22570] genl_rcv_msg+0x61c/0x7a0 [ 648.270797][T22570] netlink_rcv_skb+0x232/0x4b0 [ 648.276070][T22570] genl_rcv+0x28/0x40 [ 648.280557][T22570] netlink_unicast+0x75c/0x8e0 [ 648.285834][T22570] netlink_sendmsg+0x813/0xb40 [ 648.291111][T22570] ____sys_sendmsg+0x972/0x9f0 [ 648.296379][T22570] ___sys_sendmsg+0x2a5/0x360 [ 648.301561][T22570] __x64_sys_sendmsg+0x1bd/0x2a0 [ 648.307002][T22570] do_syscall_64+0x174/0x580 [ 648.312100][T22570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.318759][T22570] [ 648.318759][T22570] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 648.326389][T22570] __mutex_lock+0x1a3/0x1550 [ 648.331485][T22570] nbd_queue_rq+0x37b/0x1100 [ 648.336588][T22570] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 648.342647][T22570] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 648.349497][T22570] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 648.356006][T22570] blk_mq_run_hw_queue+0x348/0x4f0 [ 648.361630][T22570] blk_mq_dispatch_list+0xd16/0xe10 [ 648.367338][T22570] blk_mq_flush_plug_list+0x48d/0x570 [ 648.373231][T22570] __blk_flush_plug+0x3ed/0x4d0 [ 648.378593][T22570] __submit_bio+0x28d/0x580 [ 648.383604][T22570] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 648.389757][T22570] block_read_full_folio+0x599/0x830 [ 648.395552][T22570] filemap_read_folio+0x137/0x3b0 [ 648.401087][T22570] do_read_cache_folio+0x358/0x590 [ 648.406710][T22570] read_part_sector+0xb6/0x2b0 [ 648.411982][T22570] adfspart_check_ICS+0xb1/0x960 [ 648.417429][T22570] bdev_disk_changed+0x817/0x1770 [ 648.422961][T22570] blkdev_get_whole+0x380/0x510 [ 648.428329][T22570] bdev_open+0x31e/0xd30 [ 648.433096][T22570] blkdev_open+0x470/0x610 [ 648.438034][T22570] do_dentry_open+0x822/0x13a0 [ 648.443312][T22570] vfs_open+0x3b/0x340 [ 648.447895][T22570] path_openat+0x2e08/0x3860 [ 648.452998][T22570] do_file_open+0x23e/0x4a0 [ 648.458010][T22570] do_sys_openat2+0x113/0x200 [ 648.463196][T22570] __x64_sys_openat+0x138/0x170 [ 648.468556][T22570] do_syscall_64+0x174/0x580 [ 648.473652][T22570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.480062][T22570] [ 648.480062][T22570] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 648.487359][T22570] __mutex_lock+0x1a3/0x1550 [ 648.492455][T22570] nbd_queue_rq+0xc6/0x1100 [ 648.497480][T22570] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 648.503531][T22570] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 648.510369][T22570] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 648.516868][T22570] blk_mq_run_hw_queue+0x348/0x4f0 [ 648.522495][T22570] blk_mq_dispatch_list+0xd16/0xe10 [ 648.528204][T22570] blk_mq_flush_plug_list+0x48d/0x570 [ 648.534091][T22570] __blk_flush_plug+0x3ed/0x4d0 [ 648.539456][T22570] __submit_bio+0x28d/0x580 [ 648.544468][T22570] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 648.550609][T22570] block_read_full_folio+0x599/0x830 [ 648.556410][T22570] filemap_read_folio+0x137/0x3b0 [ 648.561984][T22570] do_read_cache_folio+0x358/0x590 [ 648.567605][T22570] read_part_sector+0xb6/0x2b0 [ 648.572875][T22570] adfspart_check_ICS+0xb1/0x960 [ 648.578326][T22570] bdev_disk_changed+0x817/0x1770 [ 648.583857][T22570] blkdev_get_whole+0x380/0x510 [ 648.589218][T22570] bdev_open+0x31e/0xd30 [ 648.593978][T22570] blkdev_open+0x470/0x610 [ 648.598913][T22570] do_dentry_open+0x822/0x13a0 [ 648.604211][T22570] vfs_open+0x3b/0x340 [ 648.608799][T22570] path_openat+0x2e08/0x3860 [ 648.613994][T22570] do_file_open+0x23e/0x4a0 [ 648.619009][T22570] do_sys_openat2+0x113/0x200 [ 648.624199][T22570] __x64_sys_openat+0x138/0x170 [ 648.629560][T22570] do_syscall_64+0x174/0x580 [ 648.634661][T22570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.641066][T22570] [ 648.641066][T22570] -> #3 (set->srcu){.+.+}-{0:0}: [ 648.648180][T22570] __synchronize_srcu+0xca/0x300 [ 648.653629][T22570] elevator_switch+0x1e8/0x7a0 [ 648.658901][T22570] elevator_change+0x2cc/0x450 [ 648.664174][T22570] elevator_set_default+0x36c/0x430 [ 648.669889][T22570] blk_register_queue+0x3e9/0x4e0 [ 648.675425][T22570] __add_disk+0x677/0xd50 [ 648.680264][T22570] add_disk_fwnode+0xfb/0x480 [ 648.685460][T22570] nbd_dev_add+0x72c/0xb50 [ 648.690390][T22570] nbd_init+0x168/0x1f0 [ 648.695098][T22570] do_one_initcall+0x250/0x870 [ 648.700370][T22570] do_initcall_level+0x104/0x190 [ 648.705815][T22570] do_initcalls+0x59/0xa0 [ 648.710650][T22570] kernel_init_freeable+0x2a6/0x3e0 [ 648.716354][T22570] kernel_init+0x1d/0x1d0 [ 648.721276][T22570] ret_from_fork+0x514/0xb70 [ 648.726369][T22570] ret_from_fork_asm+0x1a/0x30 [ 648.731643][T22570] [ 648.731643][T22570] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 648.739450][T22570] __mutex_lock+0x1a3/0x1550 [ 648.744544][T22570] elevator_change+0x1b3/0x450 [ 648.749813][T22570] elevator_set_none+0xb5/0x140 [ 648.755170][T22570] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 648.761486][T22570] nbd_start_device+0x17f/0xb10 [ 648.766851][T22570] nbd_genl_connect+0x165b/0x1cf0 [ 648.772393][T22570] genl_family_rcv_msg_doit+0x22a/0x330 [ 648.778446][T22570] genl_rcv_msg+0x61c/0x7a0 [ 648.783453][T22570] netlink_rcv_skb+0x232/0x4b0 [ 648.788728][T22570] genl_rcv+0x28/0x40 [ 648.793216][T22570] netlink_unicast+0x75c/0x8e0 [ 648.798487][T22570] netlink_sendmsg+0x813/0xb40 [ 648.803758][T22570] ____sys_sendmsg+0x972/0x9f0 [ 648.809028][T22570] ___sys_sendmsg+0x2a5/0x360 [ 648.814204][T22570] __x64_sys_sendmsg+0x1bd/0x2a0 [ 648.819642][T22570] do_syscall_64+0x174/0x580 [ 648.824739][T22570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.831143][T22570] [ 648.831143][T22570] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 648.839735][T22570] blk_alloc_queue+0x546/0x680 [ 648.845020][T22570] __blk_mq_alloc_disk+0x197/0x390 [ 648.850645][T22570] nbd_dev_add+0x499/0xb50 [ 648.855572][T22570] nbd_init+0x168/0x1f0 [ 648.860324][T22570] do_one_initcall+0x250/0x870 [ 648.865597][T22570] do_initcall_level+0x104/0x190 [ 648.871161][T22570] do_initcalls+0x59/0xa0 [ 648.876017][T22570] kernel_init_freeable+0x2a6/0x3e0 [ 648.881727][T22570] kernel_init+0x1d/0x1d0 [ 648.886569][T22570] ret_from_fork+0x514/0xb70 [ 648.891767][T22570] ret_from_fork_asm+0x1a/0x30 [ 648.897042][T22570] [ 648.897042][T22570] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 648.904239][T22570] __lock_acquire+0x15a5/0x2cf0 [ 648.909600][T22570] lock_acquire+0x106/0x350 [ 648.914609][T22570] fs_reclaim_acquire+0x71/0x100 [ 648.920056][T22570] kmem_cache_alloc_noprof+0x40/0x650 [ 648.925936][T22570] __kernfs_iattrs+0xdf/0x320 [ 648.931122][T22570] kernfs_iop_setattr+0xea/0x3f0 [ 648.936570][T22570] notify_change+0xc1a/0xf40 [ 648.941667][T22570] do_truncate+0x1c2/0x250 [ 648.946594][T22570] path_openat+0x2f89/0x3860 [ 648.951695][T22570] do_file_open+0x23e/0x4a0 [ 648.956707][T22570] do_sys_openat2+0x113/0x200 [ 648.961894][T22570] __x64_sys_openat+0x138/0x170 [ 648.967257][T22570] do_syscall_64+0x174/0x580 [ 648.972351][T22570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.978748][T22570] [ 648.978748][T22570] other info that might help us debug this: [ 648.978748][T22570] [ 648.988962][T22570] Chain exists of: [ 648.988962][T22570] fs_reclaim --> cpu_hotplug_lock --> &root->kernfs_iattr_rwsem [ 648.988962][T22570] [ 649.002510][T22570] Possible unsafe locking scenario: [ 649.002510][T22570] [ 649.009945][T22570] CPU0 CPU1 [ 649.015294][T22570] ---- ---- [ 649.020648][T22570] lock(&root->kernfs_iattr_rwsem); [ 649.025922][T22570] lock(cpu_hotplug_lock); [ 649.032939][T22570] lock(&root->kernfs_iattr_rwsem); [ 649.040733][T22570] lock(fs_reclaim); [ 649.044699][T22570] [ 649.044699][T22570] *** DEADLOCK *** [ 649.044699][T22570] [ 649.052825][T22570] 3 locks held by syz.2.4580/22570: [ 649.058002][T22570] #0: ffff88803530a410 (sb_writers#10){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 649.067228][T22570] #1: ffff888076e66280 (&sb->s_type->i_mutex_key#19){+.+.}-{4:4}, at: do_truncate+0x18f/0x250 [ 649.077581][T22570] #2: ffff8880323d2210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_setattr+0x83/0x3f0 [ 649.088281][T22570] [ 649.088281][T22570] stack backtrace: [ 649.094157][T22570] CPU: 0 UID: 0 PID: 22570 Comm: syz.2.4580 Not tainted syzkaller #0 PREEMPT(full) [ 649.094176][T22570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 649.094185][T22570] Call Trace: [ 649.094192][T22570] [ 649.094200][T22570] dump_stack_lvl+0xe8/0x150 [ 649.094218][T22570] print_circular_bug+0x2e1/0x300 [ 649.094239][T22570] check_noncircular+0x12e/0x150 [ 649.094257][T22570] __lock_acquire+0x15a5/0x2cf0 [ 649.094274][T22570] ? check_path+0x21/0x40 [ 649.094291][T22570] ? add_lock_to_list+0xc7/0x100 [ 649.094309][T22570] ? lockdep_unlock+0x5d/0xd0 [ 649.094320][T22570] ? __lock_acquire+0x146e/0x2cf0 [ 649.094337][T22570] ? kmem_cache_alloc_noprof+0x40/0x650 [ 649.094353][T22570] lock_acquire+0x106/0x350 [ 649.094368][T22570] ? kmem_cache_alloc_noprof+0x40/0x650 [ 649.094387][T22570] ? __kernfs_iattrs+0xdf/0x320 [ 649.094406][T22570] fs_reclaim_acquire+0x71/0x100 [ 649.094424][T22570] ? kmem_cache_alloc_noprof+0x40/0x650 [ 649.094442][T22570] kmem_cache_alloc_noprof+0x40/0x650 [ 649.094458][T22570] ? kernfs_iop_setattr+0x83/0x3f0 [ 649.094477][T22570] __kernfs_iattrs+0xdf/0x320 [ 649.094494][T22570] ? __pfx___kernfs_iattrs+0x10/0x10 [ 649.094510][T22570] ? down_write+0x16d/0x200 [ 649.094525][T22570] ? setattr_prepare+0x232/0xb30 [ 649.094539][T22570] ? kernfs_root+0x1c/0x230 [ 649.094552][T22570] ? kernfs_root+0x1c/0x230 [ 649.094570][T22570] kernfs_iop_setattr+0xea/0x3f0 [ 649.094585][T22570] ? try_break_deleg+0x5b/0x180 [ 649.094599][T22570] ? __pfx_kernfs_iop_setattr+0x10/0x10 [ 649.094614][T22570] notify_change+0xc1a/0xf40 [ 649.094633][T22570] do_truncate+0x1c2/0x250 [ 649.094652][T22570] ? __pfx_do_truncate+0x10/0x10 [ 649.094671][T22570] ? apparmor_file_truncate+0x39f/0x470 [ 649.094695][T22570] path_openat+0x2f89/0x3860 [ 649.094726][T22570] ? __pfx_path_openat+0x10/0x10 [ 649.094743][T22570] ? __x64_sys_openat+0x138/0x170 [ 649.094766][T22570] do_file_open+0x23e/0x4a0 [ 649.094786][T22570] ? __pfx_do_file_open+0x10/0x10 [ 649.094811][T22570] ? _raw_spin_unlock+0x28/0x50 [ 649.094831][T22570] ? alloc_fd+0x64b/0x6c0 [ 649.094847][T22570] do_sys_openat2+0x113/0x200 [ 649.094865][T22570] ? __se_sys_futex+0x3a8/0x450 [ 649.094880][T22570] ? __pfx_do_sys_openat2+0x10/0x10 [ 649.094903][T22570] ? rcu_is_watching+0x15/0xb0 [ 649.094921][T22570] __x64_sys_openat+0x138/0x170 [ 649.094938][T22570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.094953][T22570] do_syscall_64+0x174/0x580 [ 649.094967][T22570] ? trace_irq_disable+0x3b/0x140 [ 649.094986][T22570] ? clear_bhb_loop+0x40/0x90 [ 649.095003][T22570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.095018][T22570] RIP: 0033:0x7f216f19ce59 [ 649.095032][T22570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.095044][T22570] RSP: 002b:00007f2170103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 649.095061][T22570] RAX: ffffffffffffffda RBX: 00007f216f415fa0 RCX: 00007f216f19ce59 [ 649.095071][T22570] RDX: 000000000000275a RSI: 0000200000000140 RDI: 0000000000000004 [ 649.095081][T22570] RBP: 00007f216f232d6f R08: 0000000000000000 R09: 0000000000000000 [ 649.095092][T22570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.095100][T22570] R13: 00007f216f416038 R14: 00007f216f415fa0 R15: 00007fff7a6d2758 [ 649.095116][T22570] [ 649.505013][T22577] ieee80211 phy50: Selected rate control algorithm 'minstrel_ht' [ 655.071132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)