last executing test programs: 8.704403525s ago: executing program 4 (id=824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r2 = socket$key(0xf, 0x3, 0x2) socket$kcm(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff3a00132001000000000000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42, 0x100}}}}}}}, 0x0) 5.36195266s ago: executing program 4 (id=835): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000500)={{0xffffffffffffffff, &(0x7f0000000380)='.$\x00', 0x129000, &(0x7f00000003c0)={@_ha_fsid={[0x1, 0xee]}, {0x5, 0x7, 0xa, 0x3}}, 0xe825, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x1}, {[0x40, 0x8000, 0x7, 0x4]}, 0x1, 0x44, &(0x7f0000000480)=""/68}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x0, 0x40000000}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x8000000, 0xc, 0xc, 0x2, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}}, 0x0, 0x26}, 0x28) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44011}, 0x4000000) r6 = accept(r4, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) writev(r6, &(0x7f00000003c0), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) 4.833986997s ago: executing program 0 (id=840): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) (async) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="3994b53a8f832ecfca76f40dd82b71971ca6830304f70069fade499e8e7ff5cc4c4befb02a6bc9c58af111790be4922c07ec50d6cf952c4b424120d54cfe475c80ab859e", @ANYRESHEX=r2, @ANYRESDEC=r2], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$ITER_CREATE(0xb, &(0x7f00000010c0), 0x8) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000010c0), 0x8) close(0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "9a"}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) (async) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) socket$inet6(0xa, 0x5, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4412c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r12, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r12, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) (async) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r12, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x37}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x67}, 0x1, 0x0, 0x0, 0x4000020}, 0x40040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r13 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r13, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000280)="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", 0xd81}], 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000480)={r14, 0x7, 0x3}, 0x8) (async) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000480)={r14, 0x7, 0x3}, 0x8) 4.283053198s ago: executing program 2 (id=843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r1, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x1536ef9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000400)={r4, @in={{0x2, 0x4e24, @private=0xa010104}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000002c0)={r5, 0x9}, 0x8) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r0) 4.177617834s ago: executing program 0 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r2 = socket$key(0xf, 0x3, 0x2) socket$kcm(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff3a00132001000000000000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42, 0x100}}}}}}}, 0x0) 4.097532011s ago: executing program 2 (id=847): r0 = socket(0x1d, 0x2, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x100000001) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)=0xa96) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r8, 0x0, 0x2400409c) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, r11, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x40, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6, 0xfffffffd}]}}}}}}}, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb6}}, 0x10) close(r5) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) 3.425285811s ago: executing program 1 (id=849): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7c35, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x3c, r2, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950036000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x34, &(0x7f0000000100)=""/198, 0x41000, 0x0, '\x00', 0x0, 0x0, r3, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x10}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000017b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000100000007040000f0ffffffb70200000800000018210000", @ANYBLOB="a8a51d2478b2a1c4b67741313411d3467b6717b0", @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x1002, &(0x7f00000004c0)=""/4098, 0x41100, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) 3.386721711s ago: executing program 1 (id=850): socketpair$tipc(0x1e, 0x3, 0x0, &(0x7f0000000080)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='=\x00'], 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@newlink={0x78, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0x7}}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0xbd}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x78}}, 0x0) 3.323684202s ago: executing program 3 (id=851): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) 3.145744103s ago: executing program 1 (id=852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) pread64(r0, 0x0, 0x0, 0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000000)={0x32, @private=0xa010100, 0x4e24, 0x4, 'sed\x00', 0x2f, 0x4, 0x1e}, 0x2c) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 3.105717322s ago: executing program 2 (id=853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001110040001400020010000c000900090073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r4, 0x12) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x7, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.966681135s ago: executing program 3 (id=854): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000071122500000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtclass={0x2c, 0x28, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x5, 0xffe0}, {0x0, 0x4}, {0x3, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4054805}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000180)=0x5b6, 0x4) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0x1c8, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x1b4, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x0, 0x1, {0x4, 0x1, 0x3, 0x6}}, @TCA_CT_MARK={0x0, 0x5, 0x9}, @TCA_CT_NAT_IPV4_MAX={0x0, 0xa, @empty}]}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x184, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x0, 0x5, @val=0x4}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffe}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xa53d}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x14, 0x1, @void}]}]}, {0x10f, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x5, 0x3, 0x1, {}, {0x0, 0x2710}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "eb090b08ece8dca0"}}, 0x48}, 0x300}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.871529011s ago: executing program 4 (id=855): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000002c0)=""/222, 0x41000, 0x8}, 0x94) 2.493254914s ago: executing program 4 (id=856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) (async, rerun: 64) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) (async) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4044044}, 0x4040004) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x84}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) 2.293904126s ago: executing program 0 (id=857): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xefff, @empty}, 0x8, &(0x7f00000000c0)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0x8}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b04"], 0x40}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b912"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x84) close(0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44}, [@IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@fallback, 0xffffffffffffffff, 0x4, 0x201a}, 0x20) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c0400070080000700", 0x33a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000100)={'gretap0\x00', r7, 0x700, 0x8000, 0x0, 0x5, {{0xd, 0x4, 0x1, 0x2, 0x34, 0x67, 0x0, 0x6, 0x4, 0x0, @empty, @multicast2, {[@end, @cipso={0x86, 0x11, 0x3, [{0x7, 0xb, "4bf5cda53b395dc0ce"}]}, @timestamp_addr={0x44, 0xc, 0x5e, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=@newqdisc={0x2b8, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x9}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x81}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x40000, 0x0, 0xfe, 0x0, 0x10}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x2b8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 2.149287443s ago: executing program 1 (id=858): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) 2.093780707s ago: executing program 4 (id=859): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x204006, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d73060000006d0000080002"], 0x30}}, 0x4000) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd91) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0xe, 0x2, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x1, 0x1, 0x5}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400800000000000", @ANYRES32, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="00e0cc5ecaa1030032a367839ecff0000000", @ANYRES16=r3, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESOCT=r7, @ANYRES64=r4, @ANYRES8, @ANYRES8=r1, @ANYRES32, @ANYBLOB="1c04acdf14c256901c5eba12740018dc4be6e79f287f477df36d4600"], 0x84}, 0x1, 0x0, 0x0, 0x4004}, 0x810) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e0000000100009050300000000000800d20001000000a50000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce2871285f282828"], 0xe0}], 0x1, 0x0, 0x0, 0x1}, 0x40040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt(r9, 0xb2d, 0x2711, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) 2.048570389s ago: executing program 3 (id=860): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x76, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000d40)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48884}, 0x20008000) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x3d, 0xc, 0x1, 0x40, @private0, @loopback, 0x20, 0x40, 0x9, 0xfd}}) (rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x28, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, 0x8093, 0x8268}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x8, 0x40, 0x4, 0xab23, {{0x13, 0x4, 0x0, 0x12, 0x4c, 0x67, 0x0, 0xf7, 0x6, 0x0, @remote, @loopback, {[@rr={0x7, 0x1f, 0x6b, [@remote, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010101, @remote]}, @timestamp={0x44, 0x14, 0x7b, 0x0, 0xb, [0x401, 0x9aa0, 0x6, 0x9]}, @end, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x7800, 0x40, 0x4, 0x85c6, {{0x9, 0x4, 0x1, 0x5, 0x24, 0x65, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@lsrr={0x83, 0xf, 0xcc, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', 0x0, 0x29, 0x10, 0x6, 0x53, 0x0, @private1, @mcast2, 0x0, 0x80, 0x4, 0x5}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000900)={0x194, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}]}, 0x194}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async, rerun: 32) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r15, 0x8e9f2000) (async) r16 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r16, 0x0, 0x0, &(0x7f0000000040)="e14cf8488269815b62006d3f419747bfc9d07ac107333403a6456ee45e5d130236d40900000000000000c270d3217ccae75e3fe5b955a09a2df2b24f0046556d61e0d6b35c5ee7b4d7fd739d99ef00000000", 0x52) 1.774356078s ago: executing program 0 (id=861): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xeffbf00c}, {0x6, 0x0, 0xb, 0x4}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001800010a00000700000000000000ad6ca9f94ea78bcd765c25fdc203"], 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="92971a0000000800"/17, @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000600000002000000ffff000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f00000004c0), 0x0}, 0x20) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x1406, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffee1, 0x1, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0xfffffffffffffd71, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r5}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x840000000002, 0x1, 0x100) write$rfkill(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x17, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x4, 0x0, 0x3, 0x8, 0xa, 0x100}, @generic={0x8, 0x4, 0x8}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/135}, 0x2042) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r9, 0x58, &(0x7f0000000600)}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r3}, 0xc) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) socket$unix(0x1, 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000008c0)={0x60, r12, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0xe}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004811}, 0x44001) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002ba2f6272f69e271e400002667bd8944dea6cf254032387508", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r10, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf250ce8a400"/26], 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x4080) 1.545491937s ago: executing program 3 (id=862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x8, 0x42, 0x6f}, 0x2c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010103, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0x6, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000700)={&(0x7f0000000000), 0x10, &(0x7f0000000800)={&(0x7f0000000900)={0x44, 0xa, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}}, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'veth1_to_team\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0x4, "050000009582"}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x2, 0x1, 0x8, @local, @local, 0x20, 0x7, 0x6, 0x334a}}) r7 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000001080)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x10, 0x7800, 0x3, 0x8, {{0x15, 0x4, 0x1, 0x1a, 0x54, 0x67, 0x0, 0x7, 0x4, 0x0, @remote, @loopback, {[@rr={0x7, 0xf, 0xdd, [@local, @remote, @empty]}, @lsrr={0x83, 0x17, 0x11, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @broadcast]}, @lsrr={0x83, 0x13, 0xd, [@multicast2, @remote, @multicast2, @private=0xa010102]}, @noop, @cipso={0x86, 0x6, 0x3}]}}}}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="94", 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB="05"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x15, 0x1e, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x42ff288a}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@jmp={0x5, 0x1, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, @printk={@lld}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x613e, 0x41, &(0x7f0000000b00)=""/65, 0x40f00, 0x48, '\x00', r6, @fallback=0x29, r10, 0x8, &(0x7f0000000b80)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x3, 0x9, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000001000)=[r10, 0xffffffffffffffff, 0xffffffffffffffff, r10, r10, r12, r10, r10], &(0x7f0000001040)=[{0x2, 0x4, 0x6, 0xb}, {0x2, 0x2, 0xf, 0x4}, {0x0, 0x4, 0x4, 0x1}], 0x10, 0x6}, 0x94) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000006a00000127bd7000fbdbdf250a0000000000000004000b0008000a0001000000080001000000000004000b0008000500", @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32=r8, @ANYBLOB="ef52ad1fe73c4d7a66a4c61994a1cdcce983fdf5559b08006ac755ecb5890a573f35b09f9d64feda8673d53ba635"], 0x4c}, 0x1, 0x0, 0x0, 0xe976e0ab393ca9ac}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x2000e8a4) 1.441333876s ago: executing program 0 (id=863): r0 = socket(0x1d, 0x2, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x100000001) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)=0xa96) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r8, 0x0, 0x2400409c) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r9, r11, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x40, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6, 0xfffffffd}]}}}}}}}, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb6}}, 0x10) close(r5) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x4) 1.126937929s ago: executing program 1 (id=864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20) 1.013822016s ago: executing program 3 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000003"], 0x50) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1}}]}}]}, 0x8c}}, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="94b5de81c6ce63f3f0f9e91f39b16ea3fc789ba5c9b3ad2cb0404b4898dbdc68b9571af0eed381d91d12e2ff", 0x2c}], 0x1, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_retopts={{0x88, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x51, 0x1, 0x6, [{@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x37}}, {@broadcast, 0x9}, {@rand_addr=0x64010101, 0x4}, {@loopback, 0x9}]}, @cipso={0x86, 0x23, 0x3, [{0x0, 0x4, "b797"}, {0x7, 0xf, "09377775cf555630840404d80b"}, {0x6, 0xa, "e4edbc7268dc487f"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x69, 0x1, 0x8, [{@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x8}, {@remote, 0xb}]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_retopts={{0x88, 0x0, 0x7, {[@rr={0x7, 0x7, 0xae, [@dev={0xac, 0x14, 0x14, 0x1a}]}, @timestamp={0x44, 0xc, 0x7e, 0x0, 0x3, [0x2, 0xfffffff7]}, @ssrr={0x89, 0x17, 0x7c, [@remote, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @timestamp={0x44, 0x8, 0x2a, 0x0, 0xd, [0x4]}, @timestamp_addr={0x44, 0xc, 0x95, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x4}]}, @lsrr={0x83, 0x27, 0xfe, [@private=0xa010102, @private=0xa010101, @rand_addr=0x64010100, @private=0xa010101, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}, @remote, @multicast2]}, @lsrr={0x83, 0x13, 0x29, [@remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf34}}], 0x1a8}, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 849.362313ms ago: executing program 1 (id=866): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) connect$can_bcm(r4, &(0x7f00000006c0)={0x1d, r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c2500000000002020"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) socket$inet(0x2, 0xa, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_group_source_req(r9, 0x29, 0x6, &(0x7f0000000400)={0x17, {{0x29, 0x0, 0x43000004, @private1, 0xf0a00000}}, {{0xa, 0xfffe, 0x4, @remote}}}, 0x108) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) 621.722027ms ago: executing program 3 (id=867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r2 = socket$key(0xf, 0x3, 0x2) socket$kcm(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff3a00132001000000000000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42, 0x100}}}}}}}, 0x0) 486.017439ms ago: executing program 2 (id=868): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c00003400028008000100", @ANYRES32=r0, @ANYBLOB="140003000000000000000000000000000000003414000200fe88"], 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008010) 247.228482ms ago: executing program 0 (id=869): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x6, 0x0, 0x491, 0x0, 0x0, 0x0, 0x7, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r8, 0x0, 0x6, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f00000000c0)=ANY=[@ANYRES32=r8], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[], 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r8, 0xeea70000) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x200) r10 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r10, 0x0, 0xcf, 0x0, &(0x7f0000000240)) 117.91681ms ago: executing program 2 (id=870): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x11, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="17010000a4fc8a000500feff", @ANYRESDEC, @ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x8, 0x7d, &(0x7f0000003300)=""/125, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x94) 33.58701ms ago: executing program 2 (id=871): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) pipe(&(0x7f0000000000)) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r4}) (async) syz_emit_ethernet(0x52, &(0x7f0000004000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x1c, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x5}, {0x22}]}}}}}}, 0x0) 0s ago: executing program 4 (id=872): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000440)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000003, 0x10, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) kernel console output (not intermixed with test programs): 646][ T5898] R13: 00007f3234e26038 R14: 00007f3234e25fa0 R15: 00007ffe858569b8 [ 96.369728][ T5898] [ 96.732271][ T5905] tipc: Started in network mode [ 96.732336][ T5905] tipc: Node identity ac1414aa, cluster identity 4711 [ 96.752056][ T5905] tipc: New replicast peer: 172.20.20.187 [ 96.762600][ T5905] tipc: Enabled bearer , priority 10 [ 96.887407][ T5877] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 96.887969][ T13] IPVS: starting estimator thread 0... [ 96.979936][ T5914] IPVS: using max 27 ests per chain, 64800 per kthread [ 97.258429][ T5919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.287741][ T5932] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 97.368984][ T5940] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 97.679415][ T5946] netlink: 32 bytes leftover after parsing attributes in process `syz.0.32'. [ 97.772455][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 97.819758][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 97.820285][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 97.820842][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 97.846989][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 97.847550][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 97.848047][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 97.867557][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 97.868103][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 97.880537][ T5755] tipc: Node number set to 2886997162 [ 98.361247][ T5979] Bluetooth: MGMT ver 1.23 [ 98.616319][ T5994] x_tables: unsorted entry at hook 2 [ 99.325502][ T6027] netlink: 'syz.1.47': attribute type 178 has an invalid length. [ 100.067250][ T6067] ip6t_hbh: Not strict - not implemented [ 100.405687][ T6083] syz.1.61 uses obsolete (PF_INET,SOCK_PACKET) [ 100.911851][ T6106] digital: digital_start_poll: Unknown protocol [ 101.334316][ T6119] x_tables: duplicate entry at hook 1 [ 101.710183][ T6135] TCP: TCP_TX_DELAY enabled [ 101.792966][ T6142] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 101.885948][ T6144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.943238][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.073924][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.074008][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.074118][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.107200][ T6154] FAULT_INJECTION: forcing a failure. [ 102.107200][ T6154] name failslab, interval 1, probability 0, space 0, times 0 [ 102.107255][ T6154] CPU: 0 UID: 0 PID: 6154 Comm: syz.0.83 Not tainted syzkaller #0 PREEMPT(full) [ 102.107308][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.107351][ T6154] Call Trace: [ 102.107379][ T6154] [ 102.107411][ T6154] dump_stack_lvl+0xe8/0x150 [ 102.107514][ T6154] should_fail_ex+0x410/0x560 [ 102.107604][ T6154] ? __alloc_skb+0x1db/0x7a0 [ 102.107689][ T6154] should_failslab+0xa8/0x100 [ 102.107759][ T6154] ? __alloc_skb+0x1db/0x7a0 [ 102.107835][ T6154] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 102.107925][ T6154] ? __alloc_skb+0x18d/0x7a0 [ 102.108008][ T6154] ? __alloc_skb+0x1db/0x7a0 [ 102.108107][ T6154] __alloc_skb+0x1db/0x7a0 [ 102.108207][ T6154] alloc_skb_with_frags+0xc6/0x760 [ 102.108293][ T6154] sock_alloc_send_pskb+0x878/0x990 [ 102.108403][ T6154] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 102.108464][ T6154] ? kasan_quarantine_put+0xbb/0x1f0 [ 102.108553][ T6154] ? lockdep_hardirqs_on+0x7b/0x110 [ 102.108646][ T6154] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 102.108710][ T6154] ? kmem_cache_free+0x182/0x650 [ 102.108779][ T6154] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 102.108882][ T6154] unix_dgram_sendmsg+0x4da/0x17b0 [ 102.108962][ T6154] ? __lock_acquire+0x6df/0x2e50 [ 102.109045][ T6154] ? __pfx_process_measurement+0x10/0x10 [ 102.109141][ T6154] ? __lock_acquire+0x6df/0x2e50 [ 102.109195][ T6154] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 102.109285][ T6154] ? aa_sock_msg_perm+0x129/0x210 [ 102.109358][ T6154] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 102.109436][ T6154] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 102.109513][ T6154] sock_sendmsg_nosec+0x13a/0x180 [ 102.109593][ T6154] ____sys_sendmsg+0x54e/0x850 [ 102.109660][ T6154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.109750][ T6154] ? import_iovec+0x73/0xa0 [ 102.109816][ T6154] ___sys_sendmsg+0x2a5/0x360 [ 102.109877][ T6154] ? __lock_acquire+0x6df/0x2e50 [ 102.109941][ T6154] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.109994][ T6154] ? __lock_acquire+0x6df/0x2e50 [ 102.110074][ T6154] ? kstrtouint+0x6e/0xe0 [ 102.110273][ T6154] __sys_sendmmsg+0x273/0x4d0 [ 102.110352][ T6154] ? __pfx___sys_sendmmsg+0x10/0x10 [ 102.110436][ T6154] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.110556][ T6154] ? ksys_write+0x242/0x270 [ 102.110647][ T6154] ? __pfx_ksys_write+0x10/0x10 [ 102.110743][ T6154] __x64_sys_sendmmsg+0xa0/0xc0 [ 102.110808][ T6154] do_syscall_64+0x166/0x520 [ 102.110889][ T6154] ? trace_irq_disable+0x3b/0x140 [ 102.110942][ T6154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.110996][ T6154] ? clear_bhb_loop+0x70/0xc0 [ 102.111078][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.111132][ T6154] RIP: 0033:0x7f8ec119e159 [ 102.111185][ T6154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.111228][ T6154] RSP: 002b:00007f8ebf3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 102.111290][ T6154] RAX: ffffffffffffffda RBX: 00007f8ec1425fa0 RCX: 00007f8ec119e159 [ 102.111332][ T6154] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 102.111373][ T6154] RBP: 00007f8ebf3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 102.111405][ T6154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.111444][ T6154] R13: 00007f8ec1426038 R14: 00007f8ec1425fa0 R15: 00007fffcb447c98 [ 102.111529][ T6154] [ 102.870031][ T6172] netlink: 'syz.2.90': attribute type 10 has an invalid length. [ 102.967365][ T6172] team0 (unregistering): Port device team_slave_0 removed [ 102.979511][ T6178] __nla_validate_parse: 66 callbacks suppressed [ 102.987461][ T6178] netlink: 44 bytes leftover after parsing attributes in process `syz.4.94'. [ 102.998022][ T6178] netlink: 43 bytes leftover after parsing attributes in process `syz.4.94'. [ 103.011371][ T6178] netlink: 'syz.4.94': attribute type 6 has an invalid length. [ 103.011428][ T6178] netlink: 'syz.4.94': attribute type 5 has an invalid length. [ 103.011445][ T6178] netlink: 43 bytes leftover after parsing attributes in process `syz.4.94'. [ 103.057850][ T6172] team0 (unregistering): Port device team_slave_1 removed [ 103.181713][ T6192] xt_connbytes: Forcing CT accounting to be enabled [ 103.200215][ T6191] netlink: 72 bytes leftover after parsing attributes in process `syz.2.90'. [ 103.357474][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 103.398615][ T6203] C: renamed from veth1_to_team (while UP) [ 103.511505][ T6203] netlink: 'syz.1.93': attribute type 1 has an invalid length. [ 103.511551][ T6203] netlink: 116 bytes leftover after parsing attributes in process `syz.1.93'. [ 103.524396][ T6203] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 104.065683][ T494] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 104.078973][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 104.126659][ T6221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.96'. [ 104.168249][ T6214] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.124787][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.103'. [ 105.484613][ T6263] netlink: 36 bytes leftover after parsing attributes in process `syz.3.105'. [ 105.720985][ T6253] bond1: entered promiscuous mode [ 105.733752][ T6253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.146931][ T6300] batman_adv: batadv0: Adding interface: macvtap1 [ 106.146975][ T6300] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.155895][ T6300] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 106.300877][ T6301] batman_adv: batadv0: Removing interface: macvtap1 [ 107.005658][ T6348] warning: `syz.3.122' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.062972][ T6353] FAULT_INJECTION: forcing a failure. [ 107.062972][ T6353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.069397][ T6353] CPU: 1 UID: 0 PID: 6353 Comm: syz.4.123 Not tainted syzkaller #0 PREEMPT(full) [ 107.069424][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.069437][ T6353] Call Trace: [ 107.069445][ T6353] [ 107.069502][ T6353] dump_stack_lvl+0xe8/0x150 [ 107.069613][ T6353] should_fail_ex+0x410/0x560 [ 107.069724][ T6353] _copy_from_user+0x2d/0xb0 [ 107.069788][ T6353] ___sys_sendmsg+0x1c6/0x360 [ 107.069843][ T6353] ? __lock_acquire+0x6df/0x2e50 [ 107.069915][ T6353] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.069968][ T6353] ? __lock_acquire+0x6df/0x2e50 [ 107.070041][ T6353] ? kstrtouint+0x6e/0xe0 [ 107.070219][ T6353] __sys_sendmmsg+0x273/0x4d0 [ 107.070294][ T6353] ? __pfx___sys_sendmmsg+0x10/0x10 [ 107.070380][ T6353] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.070505][ T6353] ? ksys_write+0x242/0x270 [ 107.070597][ T6353] ? __pfx_ksys_write+0x10/0x10 [ 107.070693][ T6353] __x64_sys_sendmmsg+0xa0/0xc0 [ 107.070758][ T6353] do_syscall_64+0x166/0x520 [ 107.070842][ T6353] ? trace_irq_disable+0x3b/0x140 [ 107.070903][ T6353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.070973][ T6353] ? clear_bhb_loop+0x70/0xc0 [ 107.071074][ T6353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.071131][ T6353] RIP: 0033:0x7f262879e159 [ 107.071184][ T6353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.071235][ T6353] RSP: 002b:00007f26295ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 107.071298][ T6353] RAX: ffffffffffffffda RBX: 00007f2628a25fa0 RCX: 00007f262879e159 [ 107.071340][ T6353] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 107.071381][ T6353] RBP: 00007f26295ec090 R08: 0000000000000000 R09: 0000000000000000 [ 107.071415][ T6353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.071448][ T6353] R13: 00007f2628a26038 R14: 00007f2628a25fa0 R15: 00007fffdb03d8f8 [ 107.071526][ T6353] [ 107.893688][ T6366] netlink: 'syz.3.127': attribute type 7 has an invalid length. [ 107.893739][ T6366] netlink: 'syz.3.127': attribute type 8 has an invalid length. [ 108.547338][ T6388] __nla_validate_parse: 6 callbacks suppressed [ 108.547397][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 108.558108][ T6388] netlink: 'syz.0.133': attribute type 11 has an invalid length. [ 108.807536][ T6396] FAULT_INJECTION: forcing a failure. [ 108.807536][ T6396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.807596][ T6396] CPU: 1 UID: 0 PID: 6396 Comm: syz.1.136 Not tainted syzkaller #0 PREEMPT(full) [ 108.807621][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.807635][ T6396] Call Trace: [ 108.807643][ T6396] [ 108.807693][ T6396] dump_stack_lvl+0xe8/0x150 [ 108.807793][ T6396] should_fail_ex+0x410/0x560 [ 108.807922][ T6396] _copy_from_user+0x2d/0xb0 [ 108.807991][ T6396] ___sys_sendmsg+0x1c6/0x360 [ 108.808052][ T6396] ? __lock_acquire+0x6df/0x2e50 [ 108.808124][ T6396] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.808190][ T6396] ? __lock_acquire+0x6df/0x2e50 [ 108.808258][ T6396] ? rcu_is_watching+0x16/0xb0 [ 108.808422][ T6396] __sys_sendmmsg+0x273/0x4d0 [ 108.808493][ T6396] ? __pfx___sys_sendmmsg+0x10/0x10 [ 108.808583][ T6396] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.808697][ T6396] ? ksys_write+0x242/0x270 [ 108.808776][ T6396] ? rcu_is_watching+0x16/0xb0 [ 108.808858][ T6396] __x64_sys_sendmmsg+0xa0/0xc0 [ 108.808919][ T6396] do_syscall_64+0x166/0x520 [ 108.809004][ T6396] ? trace_irq_disable+0x3b/0x140 [ 108.809074][ T6396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.809129][ T6396] ? clear_bhb_loop+0x70/0xc0 [ 108.809209][ T6396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.809282][ T6396] RIP: 0033:0x7f4b5959e159 [ 108.809334][ T6396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.809379][ T6396] RSP: 002b:00007f4b577f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 108.809441][ T6396] RAX: ffffffffffffffda RBX: 00007f4b59825fa0 RCX: 00007f4b5959e159 [ 108.809490][ T6396] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 108.809533][ T6396] RBP: 00007f4b577f6090 R08: 0000000000000000 R09: 0000000000000000 [ 108.809572][ T6396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.809604][ T6396] R13: 00007f4b59826038 R14: 00007f4b59825fa0 R15: 00007ffc7ba3c3c8 [ 108.809695][ T6396] [ 109.231651][ T6406] sctp: [Deprecated]: syz.2.135 (pid 6406) Use of int in max_burst socket option deprecated. [ 109.231651][ T6406] Use struct sctp_assoc_value instead [ 109.743622][ T6425] netlink: 3560 bytes leftover after parsing attributes in process `syz.1.145'. [ 109.951356][ T6428] netlink: 116 bytes leftover after parsing attributes in process `syz.2.146'. [ 110.256201][ T6443] FAULT_INJECTION: forcing a failure. [ 110.256201][ T6443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.274915][ T6443] CPU: 0 UID: 0 PID: 6443 Comm: syz.3.149 Not tainted syzkaller #0 PREEMPT(full) [ 110.274947][ T6443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.274961][ T6443] Call Trace: [ 110.274970][ T6443] [ 110.274979][ T6443] dump_stack_lvl+0xe8/0x150 [ 110.275016][ T6443] should_fail_ex+0x410/0x560 [ 110.275055][ T6443] _copy_from_user+0x2d/0xb0 [ 110.275079][ T6443] ___sys_sendmsg+0x1c6/0x360 [ 110.275102][ T6443] ? __lock_acquire+0x6df/0x2e50 [ 110.275128][ T6443] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.275148][ T6443] ? __lock_acquire+0x6df/0x2e50 [ 110.275175][ T6443] ? kstrtouint+0x6e/0xe0 [ 110.275273][ T6443] __sys_sendmmsg+0x273/0x4d0 [ 110.275304][ T6443] ? __pfx___sys_sendmmsg+0x10/0x10 [ 110.275338][ T6443] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 110.275387][ T6443] ? ksys_write+0x242/0x270 [ 110.275421][ T6443] ? __pfx_ksys_write+0x10/0x10 [ 110.275459][ T6443] __x64_sys_sendmmsg+0xa0/0xc0 [ 110.275486][ T6443] do_syscall_64+0x166/0x520 [ 110.275517][ T6443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.275548][ T6443] ? clear_bhb_loop+0x70/0xc0 [ 110.275575][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.275597][ T6443] RIP: 0033:0x7f3234b9e159 [ 110.275617][ T6443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.275637][ T6443] RSP: 002b:00007f3235b04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 110.275662][ T6443] RAX: ffffffffffffffda RBX: 00007f3234e25fa0 RCX: 00007f3234b9e159 [ 110.275678][ T6443] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 110.275692][ T6443] RBP: 00007f3235b04090 R08: 0000000000000000 R09: 0000000000000000 [ 110.275706][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.275719][ T6443] R13: 00007f3234e26038 R14: 00007f3234e25fa0 R15: 00007ffe858569b8 [ 110.275755][ T6443] [ 110.316537][ T6442] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 110.316563][ T6442] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.318590][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'. [ 110.753825][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 110.780115][ T6448] syzkaller0: entered promiscuous mode [ 110.780157][ T6448] syzkaller0: entered allmulticast mode [ 110.864724][ T12] IPVS: starting estimator thread 0... [ 110.953441][ T6453] IPVS: using max 25 ests per chain, 60000 per kthread [ 111.011192][ T6460] netlink: 100 bytes leftover after parsing attributes in process `syz.4.154'. [ 111.431297][ T6473] ip_tables: iptables: counters copy to user failed while replacing table [ 111.457741][ T6468] netlink: 'syz.1.156': attribute type 1 has an invalid length. [ 111.473300][ T6471] netlink: 'syz.1.156': attribute type 1 has an invalid length. [ 111.796302][ T6484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.159'. [ 112.185839][ T6497] netlink: 'syz.1.161': attribute type 11 has an invalid length. [ 113.182177][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'. [ 113.214812][ T6513] netlink: 'syz.1.164': attribute type 4 has an invalid length. [ 113.275638][ T6513] netlink: 'syz.1.164': attribute type 4 has an invalid length. [ 113.331676][ T6520] netlink: 148 bytes leftover after parsing attributes in process `syz.4.165'. [ 113.345863][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 113.772270][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 113.772324][ T6530] bond0: option arp_validate: invalid value (256) [ 113.939618][ T6539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.172'. [ 114.488289][ T6547] syzkaller1: entered promiscuous mode [ 114.488336][ T6547] syzkaller1: entered allmulticast mode [ 115.128062][ T6569] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 115.457977][ T6569] bond2 (unregistering): Released all slaves [ 115.888547][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 116.197976][ T4934] block nbd0: Receive control failed (result -32) [ 116.225862][ T6597] syzkaller0: entered promiscuous mode [ 116.225960][ T6597] syzkaller0: entered allmulticast mode [ 116.323251][ T4934] Bluetooth: hci4: command 0x0405 tx timeout [ 116.398674][ T6598] syzkaller1: entered promiscuous mode [ 116.398773][ T6598] syzkaller1: entered allmulticast mode [ 116.648412][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'. [ 116.674000][ T6602] syzkaller1: entered promiscuous mode [ 116.674099][ T6602] syzkaller1: entered allmulticast mode [ 116.723840][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 116.723942][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 116.729095][ T6605] netlink: 'syz.3.188': attribute type 12 has an invalid length. [ 116.729152][ T6605] netlink: 'syz.3.188': attribute type 11 has an invalid length. [ 117.063336][ T6617] bridge2: entered promiscuous mode [ 117.441194][ T6629] xt_TCPMSS: Only works on TCP SYN packets [ 117.492936][ T6629] xt_TCPMSS: Only works on TCP SYN packets [ 117.812758][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 117.905911][ T6643] ipvlan2: entered promiscuous mode [ 117.972044][ T6647] FAULT_INJECTION: forcing a failure. [ 117.972044][ T6647] name failslab, interval 1, probability 0, space 0, times 0 [ 117.988762][ T6647] CPU: 1 UID: 0 PID: 6647 Comm: syz.4.196 Not tainted syzkaller #0 PREEMPT(full) [ 117.988792][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.988806][ T6647] Call Trace: [ 117.988815][ T6647] [ 117.988833][ T6647] dump_stack_lvl+0xe8/0x150 [ 117.988884][ T6647] should_fail_ex+0x410/0x560 [ 117.988923][ T6647] ? __alloc_skb+0x1db/0x7a0 [ 117.988956][ T6647] should_failslab+0xa8/0x100 [ 117.988984][ T6647] ? __alloc_skb+0x1db/0x7a0 [ 117.989016][ T6647] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 117.989055][ T6647] ? __alloc_skb+0x18d/0x7a0 [ 117.989088][ T6647] ? __alloc_skb+0x1db/0x7a0 [ 117.989128][ T6647] __alloc_skb+0x1db/0x7a0 [ 117.989167][ T6647] alloc_skb_with_frags+0xc6/0x760 [ 117.989202][ T6647] sock_alloc_send_pskb+0x878/0x990 [ 117.989248][ T6647] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 117.989272][ T6647] ? kasan_quarantine_put+0xbb/0x1f0 [ 117.989307][ T6647] ? lockdep_hardirqs_on+0x7b/0x110 [ 117.989343][ T6647] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 117.989371][ T6647] ? kmem_cache_free+0x182/0x650 [ 117.989393][ T6647] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 117.989426][ T6647] unix_dgram_sendmsg+0x4da/0x17b0 [ 117.989457][ T6647] ? __lock_acquire+0x6df/0x2e50 [ 117.989485][ T6647] ? __pfx_process_measurement+0x10/0x10 [ 117.989523][ T6647] ? __lock_acquire+0x6df/0x2e50 [ 117.989546][ T6647] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 117.989580][ T6647] ? aa_sock_msg_perm+0x129/0x210 [ 117.989610][ T6647] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 117.989642][ T6647] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 117.989672][ T6647] sock_sendmsg_nosec+0x13a/0x180 [ 117.989705][ T6647] ____sys_sendmsg+0x54e/0x850 [ 117.989735][ T6647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.989769][ T6647] ? import_iovec+0x73/0xa0 [ 117.989797][ T6647] ___sys_sendmsg+0x2a5/0x360 [ 117.989821][ T6647] ? __lock_acquire+0x6df/0x2e50 [ 117.989856][ T6647] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.989878][ T6647] ? __lock_acquire+0x6df/0x2e50 [ 117.989905][ T6647] ? kstrtouint+0x6e/0xe0 [ 117.989976][ T6647] __sys_sendmmsg+0x273/0x4d0 [ 117.990007][ T6647] ? __pfx___sys_sendmmsg+0x10/0x10 [ 117.990042][ T6647] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.990091][ T6647] ? ksys_write+0x242/0x270 [ 117.990125][ T6647] ? __pfx_ksys_write+0x10/0x10 [ 117.990164][ T6647] __x64_sys_sendmmsg+0xa0/0xc0 [ 117.990192][ T6647] do_syscall_64+0x166/0x520 [ 117.990223][ T6647] ? trace_irq_disable+0x3b/0x140 [ 117.990245][ T6647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.990268][ T6647] ? clear_bhb_loop+0x70/0xc0 [ 117.990300][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.990323][ T6647] RIP: 0033:0x7f262879e159 [ 117.990351][ T6647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.990375][ T6647] RSP: 002b:00007f26295ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 117.990404][ T6647] RAX: ffffffffffffffda RBX: 00007f2628a25fa0 RCX: 00007f262879e159 [ 117.990421][ T6647] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 117.990435][ T6647] RBP: 00007f26295ec090 R08: 0000000000000000 R09: 0000000000000000 [ 117.990449][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.990463][ T6647] R13: 00007f2628a26038 R14: 00007f2628a25fa0 R15: 00007fffdb03d8f8 [ 117.990497][ T6647] [ 118.714762][ T6656] x_tables: duplicate underflow at hook 2 [ 118.860458][ T6659] raw_sendmsg: syz.2.201 forgot to set AF_INET. Fix it! [ 119.163845][ T6670] netlink: 48 bytes leftover after parsing attributes in process `syz.4.205'. [ 119.513442][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'. [ 119.708703][ T6683] netlink: 'syz.4.208': attribute type 1 has an invalid length. [ 119.800036][ T6686] FAULT_INJECTION: forcing a failure. [ 119.800036][ T6686] name failslab, interval 1, probability 0, space 0, times 0 [ 119.816469][ T6686] CPU: 1 UID: 0 PID: 6686 Comm: syz.3.209 Not tainted syzkaller #0 PREEMPT(full) [ 119.816499][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.816513][ T6686] Call Trace: [ 119.816521][ T6686] [ 119.816530][ T6686] dump_stack_lvl+0xe8/0x150 [ 119.816567][ T6686] should_fail_ex+0x410/0x560 [ 119.816606][ T6686] ? __alloc_skb+0x1db/0x7a0 [ 119.816638][ T6686] should_failslab+0xa8/0x100 [ 119.816666][ T6686] ? __alloc_skb+0x1db/0x7a0 [ 119.816695][ T6686] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 119.816728][ T6686] ? __alloc_skb+0x18d/0x7a0 [ 119.816762][ T6686] ? __alloc_skb+0x1db/0x7a0 [ 119.816801][ T6686] __alloc_skb+0x1db/0x7a0 [ 119.816838][ T6686] alloc_skb_with_frags+0xc6/0x760 [ 119.816872][ T6686] sock_alloc_send_pskb+0x878/0x990 [ 119.816916][ T6686] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 119.816941][ T6686] ? kasan_quarantine_put+0xbb/0x1f0 [ 119.816974][ T6686] ? lockdep_hardirqs_on+0x7b/0x110 [ 119.817009][ T6686] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 119.817037][ T6686] ? kmem_cache_free+0x182/0x650 [ 119.817059][ T6686] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 119.817094][ T6686] unix_dgram_sendmsg+0x4da/0x17b0 [ 119.817125][ T6686] ? __lock_acquire+0x6df/0x2e50 [ 119.817153][ T6686] ? __pfx_process_measurement+0x10/0x10 [ 119.817189][ T6686] ? __lock_acquire+0x6df/0x2e50 [ 119.817211][ T6686] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 119.817244][ T6686] ? aa_sock_msg_perm+0x129/0x210 [ 119.817272][ T6686] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 119.817311][ T6686] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 119.817341][ T6686] sock_sendmsg_nosec+0x13a/0x180 [ 119.817374][ T6686] ____sys_sendmsg+0x54e/0x850 [ 119.817403][ T6686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.817436][ T6686] ? import_iovec+0x73/0xa0 [ 119.817463][ T6686] ___sys_sendmsg+0x2a5/0x360 [ 119.817485][ T6686] ? __lock_acquire+0x6df/0x2e50 [ 119.817511][ T6686] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.817532][ T6686] ? __lock_acquire+0x6df/0x2e50 [ 119.817559][ T6686] ? kstrtouint+0x6e/0xe0 [ 119.817628][ T6686] __sys_sendmmsg+0x273/0x4d0 [ 119.817658][ T6686] ? __pfx___sys_sendmmsg+0x10/0x10 [ 119.817691][ T6686] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 119.817739][ T6686] ? ksys_write+0x242/0x270 [ 119.817773][ T6686] ? __pfx_ksys_write+0x10/0x10 [ 119.817811][ T6686] __x64_sys_sendmmsg+0xa0/0xc0 [ 119.817837][ T6686] do_syscall_64+0x166/0x520 [ 119.817869][ T6686] ? trace_irq_disable+0x3b/0x140 [ 119.817890][ T6686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.817912][ T6686] ? clear_bhb_loop+0x70/0xc0 [ 119.817939][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.817962][ T6686] RIP: 0033:0x7f3234b9e159 [ 119.817982][ T6686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.818000][ T6686] RSP: 002b:00007f3235b04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 119.818024][ T6686] RAX: ffffffffffffffda RBX: 00007f3234e25fa0 RCX: 00007f3234b9e159 [ 119.818040][ T6686] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 119.818054][ T6686] RBP: 00007f3235b04090 R08: 0000000000000000 R09: 0000000000000000 [ 119.818068][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.818080][ T6686] R13: 00007f3234e26038 R14: 00007f3234e25fa0 R15: 00007ffe858569b8 [ 119.818114][ T6686] [ 120.311657][ T6683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.414189][ T6687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.414621][ T6687] bond1: (slave ip6_vti0): The slave device specified does not support setting the MAC address [ 120.445160][ T6687] bond1: (slave ip6_vti0): Error -95 calling set_mac_address [ 120.597826][ T6697] FAULT_INJECTION: forcing a failure. [ 120.597826][ T6697] name failslab, interval 1, probability 0, space 0, times 0 [ 120.597933][ T6697] CPU: 0 UID: 0 PID: 6697 Comm: syz.3.211 Not tainted syzkaller #0 PREEMPT(full) [ 120.598018][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.598058][ T6697] Call Trace: [ 120.598085][ T6697] [ 120.598107][ T6697] dump_stack_lvl+0xe8/0x150 [ 120.598204][ T6697] should_fail_ex+0x410/0x560 [ 120.598317][ T6697] ? __alloc_skb+0x1db/0x7a0 [ 120.598399][ T6697] should_failslab+0xa8/0x100 [ 120.598471][ T6697] ? __alloc_skb+0x1db/0x7a0 [ 120.598543][ T6697] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 120.598647][ T6697] ? __alloc_skb+0x1db/0x7a0 [ 120.598739][ T6697] __alloc_skb+0x1db/0x7a0 [ 120.598830][ T6697] alloc_skb_with_frags+0xc6/0x760 [ 120.598912][ T6697] sock_alloc_send_pskb+0x878/0x990 [ 120.599022][ T6697] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 120.599077][ T6697] ? kasan_quarantine_put+0xbb/0x1f0 [ 120.599160][ T6697] ? lockdep_hardirqs_on+0x7b/0x110 [ 120.599244][ T6697] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 120.599314][ T6697] ? kmem_cache_free+0x182/0x650 [ 120.599373][ T6697] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 120.599494][ T6697] unix_dgram_sendmsg+0x4da/0x17b0 [ 120.599608][ T6697] ? __lock_acquire+0x6df/0x2e50 [ 120.599688][ T6697] ? __pfx_process_measurement+0x10/0x10 [ 120.599782][ T6697] ? __lock_acquire+0x6df/0x2e50 [ 120.599834][ T6697] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 120.599917][ T6697] ? aa_sock_msg_perm+0x129/0x210 [ 120.599991][ T6697] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 120.600075][ T6697] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 120.600143][ T6697] sock_sendmsg_nosec+0x13a/0x180 [ 120.600234][ T6697] ____sys_sendmsg+0x54e/0x850 [ 120.600316][ T6697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.600400][ T6697] ? import_iovec+0x73/0xa0 [ 120.600472][ T6697] ___sys_sendmsg+0x2a5/0x360 [ 120.600527][ T6697] ? __lock_acquire+0x6df/0x2e50 [ 120.600612][ T6697] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.600663][ T6697] ? __lock_acquire+0x6df/0x2e50 [ 120.600732][ T6697] ? irqentry_exit+0x218/0x910 [ 120.600824][ T6697] ? trace_irq_disable+0x3b/0x140 [ 120.601037][ T6697] __sys_sendmmsg+0x273/0x4d0 [ 120.601106][ T6697] ? __pfx___sys_sendmmsg+0x10/0x10 [ 120.601197][ T6697] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 120.601313][ T6697] ? ksys_write+0x242/0x270 [ 120.601399][ T6697] ? __pfx_ksys_write+0x10/0x10 [ 120.601501][ T6697] __x64_sys_sendmmsg+0xa0/0xc0 [ 120.601566][ T6697] do_syscall_64+0x166/0x520 [ 120.601658][ T6697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.601712][ T6697] ? clear_bhb_loop+0x70/0xc0 [ 120.601784][ T6697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.601837][ T6697] RIP: 0033:0x7f3234b9e159 [ 120.601896][ T6697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.601940][ T6697] RSP: 002b:00007f3235b04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 120.602003][ T6697] RAX: ffffffffffffffda RBX: 00007f3234e25fa0 RCX: 00007f3234b9e159 [ 120.602044][ T6697] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 120.602078][ T6697] RBP: 00007f3235b04090 R08: 0000000000000000 R09: 0000000000000000 [ 120.602111][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 120.602143][ T6697] R13: 00007f3234e26038 R14: 00007f3234e25fa0 R15: 00007ffe858569b8 [ 120.602234][ T6697] [ 121.482258][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 121.735565][ T6719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.220'. [ 121.912547][ T6719] vlan2: entered promiscuous mode [ 121.912646][ T6719] erspan0: entered promiscuous mode [ 122.099723][ T6730] veth1_to_bond: entered allmulticast mode [ 122.115945][ T6730] veth1_to_bond: entered promiscuous mode [ 122.122618][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 122.140392][ T6733] FAULT_INJECTION: forcing a failure. [ 122.140392][ T6733] name failslab, interval 1, probability 0, space 0, times 0 [ 122.140528][ T6733] CPU: 0 UID: 0 PID: 6733 Comm: syz.4.225 Not tainted syzkaller #0 PREEMPT(full) [ 122.140600][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.140651][ T6733] Call Trace: [ 122.140678][ T6733] [ 122.140700][ T6733] dump_stack_lvl+0xe8/0x150 [ 122.140795][ T6733] should_fail_ex+0x410/0x560 [ 122.140887][ T6733] ? __alloc_skb+0x1db/0x7a0 [ 122.140973][ T6733] should_failslab+0xa8/0x100 [ 122.141035][ T6733] ? __alloc_skb+0x1db/0x7a0 [ 122.141113][ T6733] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 122.141199][ T6733] ? __alloc_skb+0x18d/0x7a0 [ 122.141273][ T6733] ? __alloc_skb+0x1db/0x7a0 [ 122.141371][ T6733] __alloc_skb+0x1db/0x7a0 [ 122.141469][ T6733] alloc_skb_with_frags+0xc6/0x760 [ 122.141571][ T6733] sock_alloc_send_pskb+0x878/0x990 [ 122.141685][ T6733] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 122.141746][ T6733] ? kasan_quarantine_put+0xbb/0x1f0 [ 122.141839][ T6733] ? lockdep_hardirqs_on+0x7b/0x110 [ 122.141941][ T6733] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 122.142038][ T6733] ? kmem_cache_free+0x182/0x650 [ 122.142122][ T6733] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 122.142206][ T6733] unix_dgram_sendmsg+0x4da/0x17b0 [ 122.142278][ T6733] ? __lock_acquire+0x6df/0x2e50 [ 122.142347][ T6733] ? __pfx_process_measurement+0x10/0x10 [ 122.142447][ T6733] ? __lock_acquire+0x6df/0x2e50 [ 122.142505][ T6733] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 122.142572][ T6733] ? aa_sock_msg_perm+0x129/0x210 [ 122.142635][ T6733] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 122.142714][ T6733] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 122.142783][ T6733] sock_sendmsg_nosec+0x13a/0x180 [ 122.142865][ T6733] ____sys_sendmsg+0x54e/0x850 [ 122.142949][ T6733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.143029][ T6733] ? import_iovec+0x73/0xa0 [ 122.143097][ T6733] ___sys_sendmsg+0x2a5/0x360 [ 122.143143][ T6733] ? __lock_acquire+0x6df/0x2e50 [ 122.143205][ T6733] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.143255][ T6733] ? __lock_acquire+0x6df/0x2e50 [ 122.143338][ T6733] ? kstrtouint+0x6e/0xe0 [ 122.143583][ T6733] __sys_sendmmsg+0x273/0x4d0 [ 122.143648][ T6733] ? __pfx___sys_sendmmsg+0x10/0x10 [ 122.143735][ T6733] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 122.143838][ T6733] ? ksys_write+0x242/0x270 [ 122.143918][ T6733] ? __pfx_ksys_write+0x10/0x10 [ 122.144014][ T6733] __x64_sys_sendmmsg+0xa0/0xc0 [ 122.144075][ T6733] do_syscall_64+0x166/0x520 [ 122.144155][ T6733] ? trace_irq_disable+0x3b/0x140 [ 122.144226][ T6733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.144286][ T6733] ? clear_bhb_loop+0x70/0xc0 [ 122.144360][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.144406][ T6733] RIP: 0033:0x7f262879e159 [ 122.144464][ T6733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.144506][ T6733] RSP: 002b:00007f26295ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 122.144564][ T6733] RAX: ffffffffffffffda RBX: 00007f2628a25fa0 RCX: 00007f262879e159 [ 122.144604][ T6733] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 122.144661][ T6733] RBP: 00007f26295ec090 R08: 0000000000000000 R09: 0000000000000000 [ 122.144687][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.144718][ T6733] R13: 00007f2628a26038 R14: 00007f2628a25fa0 R15: 00007fffdb03d8f8 [ 122.144822][ T6733] [ 122.502581][ T6730] veth1_to_bond (unregistering): left promiscuous mode [ 122.509831][ T6730] veth1_to_bond (unregistering): left allmulticast mode [ 122.601598][ T6730] bond0: (slave bond_slave_1): Releasing backup interface [ 122.812112][ T6741] netlink: 56 bytes leftover after parsing attributes in process `syz.3.226'. [ 122.931831][ T6749] netlink: 'syz.3.226': attribute type 3 has an invalid length. [ 123.047546][ T6750] netlink: 36 bytes leftover after parsing attributes in process `syz.0.230'. [ 123.882335][ T6773] xt_l2tp: v2 doesn't support IP mode [ 123.895438][ T32] audit: type=1800 audit(1789019342.541:2): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.234" name="blkio.bfq.time_recursive" dev="tmpfs" ino=270 res=0 errno=0 [ 123.930413][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.234'. [ 123.948542][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'. [ 124.091545][ T6777] netlink: 'syz.3.234': attribute type 7 has an invalid length. [ 124.462285][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'. [ 124.462354][ T6785] netlink: 'syz.4.237': attribute type 1 has an invalid length. [ 124.570124][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'. [ 124.570243][ T6786] netlink: 'syz.4.237': attribute type 1 has an invalid length. [ 125.342568][ T6821] xt_hashlimit: invalid rate [ 125.662788][ T143] IPVS: starting estimator thread 0... [ 125.688741][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'. [ 125.781689][ T6832] IPVS: using max 23 ests per chain, 55200 per kthread [ 126.305097][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880556f7400: rx timeout, send abort [ 126.429321][ T6852] netlink: 'syz.1.255': attribute type 21 has an invalid length. [ 126.437526][ T6852] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.446138][ T6852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.446182][ T6852] IPv6: NLM_F_CREATE should be set when creating new route [ 126.446232][ T6852] IPv6: NLM_F_CREATE should be set when creating new route [ 126.446262][ T6852] IPv6: NLM_F_CREATE should be set when creating new route [ 126.569419][ T6852] netlink: 'syz.1.255': attribute type 21 has an invalid length. [ 126.569554][ T6852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.590988][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 126.595414][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 126.615503][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 126.628346][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 126.646388][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 126.656977][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 126.666778][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 126.805396][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880556f7c00: rx timeout, send abort [ 126.814014][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880556f7400: abort rx timeout. Force session deactivation [ 127.070334][ T6865] Cannot find set identified by id 0 to match [ 127.305482][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880556f7c00: abort rx timeout. Force session deactivation [ 127.460093][ T6875] netlink: 'syz.2.260': attribute type 8 has an invalid length. [ 127.566118][ T6878] FAULT_INJECTION: forcing a failure. [ 127.566118][ T6878] name failslab, interval 1, probability 0, space 0, times 0 [ 127.566234][ T6878] CPU: 0 UID: 0 PID: 6878 Comm: syz.1.261 Not tainted syzkaller #0 PREEMPT(full) [ 127.566299][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.566350][ T6878] Call Trace: [ 127.566391][ T6878] [ 127.566406][ T6878] dump_stack_lvl+0xe8/0x150 [ 127.566512][ T6878] should_fail_ex+0x410/0x560 [ 127.566613][ T6878] ? __alloc_skb+0x1db/0x7a0 [ 127.566694][ T6878] should_failslab+0xa8/0x100 [ 127.566765][ T6878] ? __alloc_skb+0x1db/0x7a0 [ 127.566838][ T6878] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 127.566928][ T6878] ? __alloc_skb+0x1db/0x7a0 [ 127.567027][ T6878] __alloc_skb+0x1db/0x7a0 [ 127.567118][ T6878] alloc_skb_with_frags+0xc6/0x760 [ 127.567193][ T6878] sock_alloc_send_pskb+0x878/0x990 [ 127.567291][ T6878] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 127.567353][ T6878] ? kasan_quarantine_put+0xbb/0x1f0 [ 127.567437][ T6878] ? lockdep_hardirqs_on+0x7b/0x110 [ 127.567538][ T6878] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 127.567608][ T6878] ? kmem_cache_free+0x182/0x650 [ 127.567661][ T6878] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 127.567765][ T6878] unix_dgram_sendmsg+0x4da/0x17b0 [ 127.567855][ T6878] ? __lock_acquire+0x6df/0x2e50 [ 127.567935][ T6878] ? __pfx_process_measurement+0x10/0x10 [ 127.568015][ T6878] ? __lock_acquire+0x6df/0x2e50 [ 127.568078][ T6878] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 127.568160][ T6878] ? aa_sock_msg_perm+0x129/0x210 [ 127.568240][ T6878] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 127.568328][ T6878] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 127.568401][ T6878] sock_sendmsg_nosec+0x13a/0x180 [ 127.568478][ T6878] ____sys_sendmsg+0x54e/0x850 [ 127.568570][ T6878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.568654][ T6878] ? import_iovec+0x73/0xa0 [ 127.568727][ T6878] ___sys_sendmsg+0x2a5/0x360 [ 127.568781][ T6878] ? __lock_acquire+0x6df/0x2e50 [ 127.568847][ T6878] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.568907][ T6878] ? __lock_acquire+0x6df/0x2e50 [ 127.568980][ T6878] ? kstrtouint+0x6e/0xe0 [ 127.569169][ T6878] __sys_sendmmsg+0x273/0x4d0 [ 127.569258][ T6878] ? __pfx___sys_sendmmsg+0x10/0x10 [ 127.569424][ T6878] __x64_sys_sendmmsg+0xa0/0xc0 [ 127.569488][ T6878] do_syscall_64+0x166/0x520 [ 127.569582][ T6878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.569637][ T6878] ? clear_bhb_loop+0x70/0xc0 [ 127.569695][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.569756][ T6878] RIP: 0033:0x7f4b5959e159 [ 127.569808][ T6878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.569854][ T6878] RSP: 002b:00007f4b577f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 127.569917][ T6878] RAX: ffffffffffffffda RBX: 00007f4b59825fa0 RCX: 00007f4b5959e159 [ 127.569958][ T6878] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 127.569992][ T6878] RBP: 00007f4b577f6090 R08: 0000000000000000 R09: 0000000000000000 [ 127.570028][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.570067][ T6878] R13: 00007f4b59826038 R14: 00007f4b59825fa0 R15: 00007ffc7ba3c3c8 [ 127.570153][ T6878] [ 128.040825][ T6897] netlink: 'syz.1.266': attribute type 11 has an invalid length. [ 128.040884][ T6897] netlink: 'syz.1.266': attribute type 4 has an invalid length. [ 128.675066][ T6925] FAULT_INJECTION: forcing a failure. [ 128.675066][ T6925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.675167][ T6925] CPU: 0 UID: 0 PID: 6925 Comm: syz.1.273 Not tainted syzkaller #0 PREEMPT(full) [ 128.675234][ T6925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.675272][ T6925] Call Trace: [ 128.675301][ T6925] [ 128.675330][ T6925] dump_stack_lvl+0xe8/0x150 [ 128.675443][ T6925] should_fail_ex+0x410/0x560 [ 128.675547][ T6925] _copy_from_user+0x2d/0xb0 [ 128.675618][ T6925] ___sys_sendmsg+0x1c6/0x360 [ 128.675673][ T6925] ? __lock_acquire+0x6df/0x2e50 [ 128.675745][ T6925] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.675799][ T6925] ? __lock_acquire+0x6df/0x2e50 [ 128.675983][ T6925] __sys_sendmmsg+0x273/0x4d0 [ 128.676057][ T6925] ? __pfx___sys_sendmmsg+0x10/0x10 [ 128.676142][ T6925] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.676259][ T6925] ? ksys_write+0x242/0x270 [ 128.676351][ T6925] ? __pfx_ksys_write+0x10/0x10 [ 128.676454][ T6925] __x64_sys_sendmmsg+0xa0/0xc0 [ 128.676518][ T6925] do_syscall_64+0x166/0x520 [ 128.676601][ T6925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.676662][ T6925] ? clear_bhb_loop+0x70/0xc0 [ 128.676760][ T6925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.676828][ T6925] RIP: 0033:0x7f4b5959e159 [ 128.676884][ T6925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.676934][ T6925] RSP: 002b:00007f4b577f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 128.676996][ T6925] RAX: ffffffffffffffda RBX: 00007f4b59825fa0 RCX: 00007f4b5959e159 [ 128.677039][ T6925] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 128.677072][ T6925] RBP: 00007f4b577f6090 R08: 0000000000000000 R09: 0000000000000000 [ 128.677112][ T6925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.677144][ T6925] R13: 00007f4b59826038 R14: 00007f4b59825fa0 R15: 00007ffc7ba3c3c8 [ 128.677227][ T6925] [ 128.969061][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.075687][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.640872][ T6939] netlink: 'syz.0.277': attribute type 46 has an invalid length. [ 129.799448][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022ff8000: rx timeout, send abort [ 129.800542][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888022ff8000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 129.955509][ T6953] __nla_validate_parse: 70 callbacks suppressed [ 129.962253][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 129.962827][ T6953] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 129.979693][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 129.979797][ T6954] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 130.148773][ T6957] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 130.166865][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 131.596143][ T6959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.068257][ T6979] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 132.185530][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'. [ 132.352944][ T7006] netlink: 52 bytes leftover after parsing attributes in process `syz.4.290'. [ 132.424715][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.425847][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.592981][ T7006] bridge0: entered promiscuous mode [ 132.815110][ T7010] sctp: [Deprecated]: syz.2.292 (pid 7010) Use of int in max_burst socket option deprecated. [ 132.815110][ T7010] Use struct sctp_assoc_value instead [ 132.888126][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.894678][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.982313][ T7005] bridge0: left promiscuous mode [ 133.177812][ T7021] netlink: 48 bytes leftover after parsing attributes in process `syz.3.293'. [ 133.602041][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.296'. [ 133.812016][ T7030] FAULT_INJECTION: forcing a failure. [ 133.812016][ T7030] name failslab, interval 1, probability 0, space 0, times 0 [ 133.812126][ T7030] CPU: 0 UID: 0 PID: 7030 Comm: syz.2.297 Not tainted syzkaller #0 PREEMPT(full) [ 133.812162][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.812176][ T7030] Call Trace: [ 133.812185][ T7030] [ 133.812195][ T7030] dump_stack_lvl+0xe8/0x150 [ 133.812231][ T7030] should_fail_ex+0x410/0x560 [ 133.812270][ T7030] ? __alloc_skb+0x1db/0x7a0 [ 133.812303][ T7030] should_failslab+0xa8/0x100 [ 133.812331][ T7030] ? __alloc_skb+0x1db/0x7a0 [ 133.812361][ T7030] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 133.812406][ T7030] ? __alloc_skb+0x18d/0x7a0 [ 133.812456][ T7030] ? __alloc_skb+0x1db/0x7a0 [ 133.812495][ T7030] __alloc_skb+0x1db/0x7a0 [ 133.812534][ T7030] alloc_skb_with_frags+0xc6/0x760 [ 133.812569][ T7030] sock_alloc_send_pskb+0x878/0x990 [ 133.812614][ T7030] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 133.812639][ T7030] ? kasan_quarantine_put+0xbb/0x1f0 [ 133.812674][ T7030] ? lockdep_hardirqs_on+0x7b/0x110 [ 133.812710][ T7030] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 133.812738][ T7030] ? kmem_cache_free+0x182/0x650 [ 133.812762][ T7030] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 133.812796][ T7030] unix_dgram_sendmsg+0x4da/0x17b0 [ 133.812826][ T7030] ? lockdep_hardirqs_on+0x7b/0x110 [ 133.812859][ T7030] ? trace_irq_disable+0x3b/0x140 [ 133.812895][ T7030] ? __lock_acquire+0x6df/0x2e50 [ 133.812917][ T7030] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 133.812950][ T7030] ? aa_sock_msg_perm+0x129/0x210 [ 133.812979][ T7030] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 133.813011][ T7030] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 133.813040][ T7030] sock_sendmsg_nosec+0x13a/0x180 [ 133.813071][ T7030] ____sys_sendmsg+0x54e/0x850 [ 133.813101][ T7030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.813135][ T7030] ? import_iovec+0x73/0xa0 [ 133.813172][ T7030] ___sys_sendmsg+0x2a5/0x360 [ 133.813195][ T7030] ? __lock_acquire+0x6df/0x2e50 [ 133.813222][ T7030] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.813243][ T7030] ? __lock_acquire+0x6df/0x2e50 [ 133.813270][ T7030] ? kstrtouint+0x6e/0xe0 [ 133.813345][ T7030] __sys_sendmmsg+0x273/0x4d0 [ 133.813375][ T7030] ? __pfx___sys_sendmmsg+0x10/0x10 [ 133.813409][ T7030] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.813484][ T7030] __x64_sys_sendmmsg+0xa0/0xc0 [ 133.813510][ T7030] do_syscall_64+0x166/0x520 [ 133.813540][ T7030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.813561][ T7030] ? clear_bhb_loop+0x70/0xc0 [ 133.813655][ T7030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.813714][ T7030] RIP: 0033:0x7f044339e159 [ 133.813760][ T7030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.813818][ T7030] RSP: 002b:00007f0444187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 133.813879][ T7030] RAX: ffffffffffffffda RBX: 00007f0443625fa0 RCX: 00007f044339e159 [ 133.813920][ T7030] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 133.813954][ T7030] RBP: 00007f0444187090 R08: 0000000000000000 R09: 0000000000000000 [ 133.813994][ T7030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.814025][ T7030] R13: 00007f0443626038 R14: 00007f0443625fa0 R15: 00007ffdd7bd9558 [ 133.814110][ T7030] [ 134.331092][ T5637] udevd[5637]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 134.582157][ T7032] netlink: 564 bytes leftover after parsing attributes in process `syz.4.298'. [ 134.689119][ T7032] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 135.132645][ T7053] netlink: 10 bytes leftover after parsing attributes in process `syz.3.304'. [ 135.524502][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 135.524620][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'. [ 136.134510][ T7087] FAULT_INJECTION: forcing a failure. [ 136.134510][ T7087] name failslab, interval 1, probability 0, space 0, times 0 [ 136.149205][ T7087] CPU: 1 UID: 0 PID: 7087 Comm: syz.4.310 Not tainted syzkaller #0 PREEMPT(full) [ 136.149236][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.149250][ T7087] Call Trace: [ 136.149259][ T7087] [ 136.149268][ T7087] dump_stack_lvl+0xe8/0x150 [ 136.149307][ T7087] should_fail_ex+0x410/0x560 [ 136.149346][ T7087] ? __alloc_skb+0x1db/0x7a0 [ 136.149380][ T7087] should_failslab+0xa8/0x100 [ 136.149407][ T7087] ? __alloc_skb+0x1db/0x7a0 [ 136.149439][ T7087] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 136.149472][ T7087] ? __alloc_skb+0x18d/0x7a0 [ 136.149506][ T7087] ? __alloc_skb+0x1db/0x7a0 [ 136.149546][ T7087] __alloc_skb+0x1db/0x7a0 [ 136.149583][ T7087] alloc_skb_with_frags+0xc6/0x760 [ 136.149619][ T7087] sock_alloc_send_pskb+0x878/0x990 [ 136.149677][ T7087] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 136.149701][ T7087] ? kasan_quarantine_put+0xbb/0x1f0 [ 136.149735][ T7087] ? lockdep_hardirqs_on+0x7b/0x110 [ 136.149769][ T7087] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 136.149799][ T7087] ? kmem_cache_free+0x182/0x650 [ 136.149823][ T7087] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 136.149856][ T7087] unix_dgram_sendmsg+0x4da/0x17b0 [ 136.149886][ T7087] ? __lock_acquire+0x6df/0x2e50 [ 136.149921][ T7087] ? __pfx_process_measurement+0x10/0x10 [ 136.149958][ T7087] ? __lock_acquire+0x6df/0x2e50 [ 136.149979][ T7087] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 136.150010][ T7087] ? aa_sock_msg_perm+0x129/0x210 [ 136.150039][ T7087] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 136.150071][ T7087] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 136.150100][ T7087] sock_sendmsg_nosec+0x13a/0x180 [ 136.150132][ T7087] ____sys_sendmsg+0x54e/0x850 [ 136.150161][ T7087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.150194][ T7087] ? import_iovec+0x73/0xa0 [ 136.150222][ T7087] ___sys_sendmsg+0x2a5/0x360 [ 136.150244][ T7087] ? __lock_acquire+0x6df/0x2e50 [ 136.150270][ T7087] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.150309][ T7087] ? __lock_acquire+0x6df/0x2e50 [ 136.150337][ T7087] ? kstrtouint+0x6e/0xe0 [ 136.150440][ T7087] __sys_sendmmsg+0x273/0x4d0 [ 136.150471][ T7087] ? __pfx___sys_sendmmsg+0x10/0x10 [ 136.150507][ T7087] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.150555][ T7087] ? ksys_write+0x242/0x270 [ 136.150590][ T7087] ? __pfx_ksys_write+0x10/0x10 [ 136.150629][ T7087] __x64_sys_sendmmsg+0xa0/0xc0 [ 136.150655][ T7087] do_syscall_64+0x166/0x520 [ 136.150687][ T7087] ? trace_irq_disable+0x3b/0x140 [ 136.150709][ T7087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.150734][ T7087] ? clear_bhb_loop+0x70/0xc0 [ 136.150761][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.150784][ T7087] RIP: 0033:0x7f262879e159 [ 136.150806][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.150824][ T7087] RSP: 002b:00007f26295ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 136.150848][ T7087] RAX: ffffffffffffffda RBX: 00007f2628a25fa0 RCX: 00007f262879e159 [ 136.150864][ T7087] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 136.150895][ T7087] RBP: 00007f26295ec090 R08: 0000000000000000 R09: 0000000000000000 [ 136.150916][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.150931][ T7087] R13: 00007f2628a26038 R14: 00007f2628a25fa0 R15: 00007fffdb03d8f8 [ 136.150965][ T7087] [ 136.224227][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.308'. [ 136.910976][ T7095] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 138.010721][ T7082] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 138.409410][ T7132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.318'. [ 138.409594][ T7132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.318'. [ 138.419078][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 138.583626][ T7141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.322'. [ 138.879362][ T7151] netlink: 27 bytes leftover after parsing attributes in process `syz.3.321'. [ 139.397520][ T7166] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 139.896254][ T7181] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 140.028573][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 140.286266][ T7188] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 141.444820][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.986740][ T7218] FAULT_INJECTION: forcing a failure. [ 142.986740][ T7218] name failslab, interval 1, probability 0, space 0, times 0 [ 142.986793][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.2.337 Not tainted syzkaller #0 PREEMPT(full) [ 142.986818][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.986831][ T7218] Call Trace: [ 142.986840][ T7218] [ 142.986849][ T7218] dump_stack_lvl+0xe8/0x150 [ 142.986893][ T7218] should_fail_ex+0x410/0x560 [ 142.986931][ T7218] ? __alloc_skb+0x1db/0x7a0 [ 142.986964][ T7218] should_failslab+0xa8/0x100 [ 142.986990][ T7218] ? __alloc_skb+0x1db/0x7a0 [ 142.987020][ T7218] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 142.987053][ T7218] ? __alloc_skb+0x18d/0x7a0 [ 142.987086][ T7218] ? __alloc_skb+0x1db/0x7a0 [ 142.987125][ T7218] __alloc_skb+0x1db/0x7a0 [ 142.987162][ T7218] alloc_skb_with_frags+0xc6/0x760 [ 142.987198][ T7218] sock_alloc_send_pskb+0x878/0x990 [ 142.987243][ T7218] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 142.987267][ T7218] ? kasan_quarantine_put+0xbb/0x1f0 [ 142.987301][ T7218] ? lockdep_hardirqs_on+0x7b/0x110 [ 142.987336][ T7218] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 142.987363][ T7218] ? kmem_cache_free+0x182/0x650 [ 142.987386][ T7218] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 142.987422][ T7218] unix_dgram_sendmsg+0x4da/0x17b0 [ 142.987452][ T7218] ? __lock_acquire+0x6df/0x2e50 [ 142.987479][ T7218] ? __pfx_process_measurement+0x10/0x10 [ 142.987516][ T7218] ? __lock_acquire+0x6df/0x2e50 [ 142.987537][ T7218] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 142.987569][ T7218] ? aa_sock_msg_perm+0x129/0x210 [ 142.987598][ T7218] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 142.987629][ T7218] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 142.987658][ T7218] sock_sendmsg_nosec+0x13a/0x180 [ 142.987690][ T7218] ____sys_sendmsg+0x54e/0x850 [ 142.987719][ T7218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.987753][ T7218] ? import_iovec+0x73/0xa0 [ 142.987781][ T7218] ___sys_sendmsg+0x2a5/0x360 [ 142.987804][ T7218] ? __lock_acquire+0x6df/0x2e50 [ 142.987830][ T7218] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.987851][ T7218] ? __lock_acquire+0x6df/0x2e50 [ 142.987884][ T7218] ? kstrtouint+0x6e/0xe0 [ 142.987957][ T7218] __sys_sendmmsg+0x273/0x4d0 [ 142.987988][ T7218] ? __pfx___sys_sendmmsg+0x10/0x10 [ 142.988022][ T7218] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.988070][ T7218] ? ksys_write+0x242/0x270 [ 142.988104][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 142.988142][ T7218] __x64_sys_sendmmsg+0xa0/0xc0 [ 142.988169][ T7218] do_syscall_64+0x166/0x520 [ 142.988200][ T7218] ? trace_irq_disable+0x3b/0x140 [ 142.988222][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.988244][ T7218] ? clear_bhb_loop+0x70/0xc0 [ 142.988271][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.988292][ T7218] RIP: 0033:0x7f044339e159 [ 142.988313][ T7218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.988331][ T7218] RSP: 002b:00007f0444187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.988355][ T7218] RAX: ffffffffffffffda RBX: 00007f0443625fa0 RCX: 00007f044339e159 [ 142.988371][ T7218] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 142.988385][ T7218] RBP: 00007f0444187090 R08: 0000000000000000 R09: 0000000000000000 [ 142.988399][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.988412][ T7218] R13: 00007f0443626038 R14: 00007f0443625fa0 R15: 00007ffdd7bd9558 [ 142.988446][ T7218] [ 145.115775][ T7315] tipc: Can't bind to reserved service type 1 [ 145.359394][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 145.612334][ T7317] bond0: (slave bond_slave_1): Releasing backup interface [ 145.648156][ T7332] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.656930][ T7332] IPv6: Can't replace route, no match found [ 145.702932][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 145.705425][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.349'. [ 146.259896][ T7336] team0: Device wg1 is of different type [ 146.281246][ T7336] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 146.418148][ T7341] veth3: entered allmulticast mode [ 146.452655][ T7341] team0: Port device veth3 added [ 146.812471][ T7368] ieee802154 phy0 wpan0: encryption failed: -22 [ 147.051738][ T7365] macsec0: entered promiscuous mode [ 147.058854][ T7365] macsec0: entered allmulticast mode [ 147.132544][ T7377] netlink: 'syz.0.358': attribute type 11 has an invalid length. [ 147.138854][ T7378] netlink: 'syz.0.358': attribute type 11 has an invalid length. [ 149.337958][ T7440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.371'. [ 149.750908][ T7447] netlink: 32 bytes leftover after parsing attributes in process `syz.2.374'. [ 149.985442][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 150.163735][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.177063][ T7465] syzkaller1: entered promiscuous mode [ 150.177100][ T7465] syzkaller1: entered allmulticast mode [ 151.086293][ T7461] syz.1.375 (7461) used greatest stack depth: 17640 bytes left [ 152.313229][ T7513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.385'. [ 154.271334][ T7536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.209426][ T7582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.392'. [ 155.488595][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 155.546414][ T7592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.395'. [ 155.564900][ T7594] netlink: 76 bytes leftover after parsing attributes in process `syz.4.396'. [ 155.639143][ T7596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.395'. [ 155.668539][ T7564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.706215][ T7564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.803687][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.396'. [ 156.027071][ T7388] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.082484][ T7598] netlink: 136 bytes leftover after parsing attributes in process `syz.1.395'. [ 156.082608][ T7598] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 156.143560][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.156592][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.158365][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.582499][ T7613] batman_adv: batadv0: Adding interface: gretap1 [ 156.582537][ T7613] batman_adv: batadv0: The MTU of interface gretap1 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.582596][ T7613] batman_adv: batadv0: Interface activated: gretap1 [ 157.591023][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 157.792614][ T7647] openvswitch: netlink: Message has 8 unknown bytes. [ 157.965114][ T7660] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 157.989038][ T7660] netlink: 'syz.0.409': attribute type 62 has an invalid length. [ 158.186180][ T7665] FAULT_INJECTION: forcing a failure. [ 158.186180][ T7665] name failslab, interval 1, probability 0, space 0, times 0 [ 158.202088][ T7665] CPU: 1 UID: 0 PID: 7665 Comm: syz.4.410 Not tainted syzkaller #0 PREEMPT(full) [ 158.202119][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.202133][ T7665] Call Trace: [ 158.202142][ T7665] [ 158.202151][ T7665] dump_stack_lvl+0xe8/0x150 [ 158.202190][ T7665] should_fail_ex+0x410/0x560 [ 158.202229][ T7665] ? __alloc_skb+0x1db/0x7a0 [ 158.202262][ T7665] should_failslab+0xa8/0x100 [ 158.202290][ T7665] ? __alloc_skb+0x1db/0x7a0 [ 158.202322][ T7665] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 158.202356][ T7665] ? __alloc_skb+0x18d/0x7a0 [ 158.202390][ T7665] ? __alloc_skb+0x1db/0x7a0 [ 158.202430][ T7665] __alloc_skb+0x1db/0x7a0 [ 158.202469][ T7665] alloc_skb_with_frags+0xc6/0x760 [ 158.202505][ T7665] sock_alloc_send_pskb+0x878/0x990 [ 158.202561][ T7665] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 158.202586][ T7665] ? kasan_quarantine_put+0xbb/0x1f0 [ 158.202622][ T7665] ? lockdep_hardirqs_on+0x7b/0x110 [ 158.202657][ T7665] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 158.202687][ T7665] ? kmem_cache_free+0x182/0x650 [ 158.202712][ T7665] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 158.202747][ T7665] unix_dgram_sendmsg+0x4da/0x17b0 [ 158.202780][ T7665] ? __lock_acquire+0x6df/0x2e50 [ 158.202810][ T7665] ? __pfx_process_measurement+0x10/0x10 [ 158.202849][ T7665] ? __lock_acquire+0x6df/0x2e50 [ 158.202873][ T7665] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 158.202906][ T7665] ? aa_sock_msg_perm+0x129/0x210 [ 158.202937][ T7665] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 158.202970][ T7665] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 158.203000][ T7665] sock_sendmsg_nosec+0x13a/0x180 [ 158.203034][ T7665] ____sys_sendmsg+0x54e/0x850 [ 158.203065][ T7665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.203099][ T7665] ? import_iovec+0x73/0xa0 [ 158.203128][ T7665] ___sys_sendmsg+0x2a5/0x360 [ 158.203150][ T7665] ? __lock_acquire+0x6df/0x2e50 [ 158.203177][ T7665] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.203200][ T7665] ? __lock_acquire+0x6df/0x2e50 [ 158.203227][ T7665] ? kstrtouint+0x6e/0xe0 [ 158.203303][ T7665] __sys_sendmmsg+0x273/0x4d0 [ 158.203335][ T7665] ? __pfx___sys_sendmmsg+0x10/0x10 [ 158.203371][ T7665] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.203423][ T7665] ? ksys_write+0x242/0x270 [ 158.203459][ T7665] ? __pfx_ksys_write+0x10/0x10 [ 158.203499][ T7665] __x64_sys_sendmmsg+0xa0/0xc0 [ 158.203525][ T7665] do_syscall_64+0x166/0x520 [ 158.203565][ T7665] ? trace_irq_disable+0x3b/0x140 [ 158.203587][ T7665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.203610][ T7665] ? clear_bhb_loop+0x70/0xc0 [ 158.203638][ T7665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.203661][ T7665] RIP: 0033:0x7f262879e159 [ 158.203682][ T7665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.203700][ T7665] RSP: 002b:00007f26295ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.203724][ T7665] RAX: ffffffffffffffda RBX: 00007f2628a25fa0 RCX: 00007f262879e159 [ 158.203741][ T7665] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 158.203755][ T7665] RBP: 00007f26295ec090 R08: 0000000000000000 R09: 0000000000000000 [ 158.203769][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.203782][ T7665] R13: 00007f2628a26038 R14: 00007f2628a25fa0 R15: 00007fffdb03d8f8 [ 158.203817][ T7665] [ 159.015344][ T7679] netlink: 404 bytes leftover after parsing attributes in process `syz.2.413'. [ 159.015386][ T7679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.413'. [ 159.015424][ T7679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.413'. [ 159.015457][ T7679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.413'. [ 159.248937][ T7677] ipvlan2: entered promiscuous mode [ 159.256413][ T7677] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 159.269089][ T7677] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 159.269292][ T7677] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 159.544631][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 160.015678][ T7709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.419'. [ 160.026968][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 160.168602][ T7672] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 160.192065][ T7672] bond1 (unregistering): Released all slaves [ 160.320561][ T7685] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 160.423577][ T5723] bridge0: entered promiscuous mode [ 160.788623][ T7728] syzkaller0: entered promiscuous mode [ 160.788666][ T7728] syzkaller0: entered allmulticast mode [ 161.195885][ T7748] xt_HMARK: spi-set and port-set can't be combined [ 161.310178][ T7743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.429'. [ 163.149537][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 163.275956][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 163.357495][ T7794] bond2: option mode: invalid value (7) [ 163.384059][ T7794] bond2 (unregistering): Released all slaves [ 163.447709][ T7812] netlink: 'syz.0.443': attribute type 83 has an invalid length. [ 163.654985][ T7799] bond2: option mode: invalid value (7) [ 163.664350][ T7799] bond2 (unregistering): Released all slaves [ 164.524463][ T7391] IPVS: starting estimator thread 0... [ 164.572196][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 164.613323][ T7840] IPVS: using max 26 ests per chain, 62400 per kthread [ 164.730537][ T5628] Bluetooth: unknown link type 231 [ 164.730613][ T5628] Bluetooth: hci4: connection err: -111 [ 166.163241][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.714285][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 167.731139][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 167.743799][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 167.832782][ T7886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.459'. [ 167.959668][ T7893] netlink: 249 bytes leftover after parsing attributes in process `syz.2.461'. [ 168.093644][ T7893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.461'. [ 168.791347][ T7914] netlink: 'syz.0.467': attribute type 2 has an invalid length. [ 168.835127][ T7912] netlink: 'syz.1.468': attribute type 4 has an invalid length. [ 168.897578][ T7918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.897971][ T7918] IPv6: NLM_F_CREATE should be set when creating new route [ 168.929919][ T7918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.469'. [ 168.957942][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.468'. [ 168.975334][ T7914] : entered promiscuous mode [ 169.056176][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.468'. [ 169.667090][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 169.681113][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 169.767334][ T7949] netlink: 'syz.0.476': attribute type 4 has an invalid length. [ 169.767424][ T7949] netlink: 17 bytes leftover after parsing attributes in process `syz.0.476'. [ 169.940804][ T5723] hid-generic 0005:15C2:0003.0001: item fetching failed at offset 0/1 [ 169.966492][ T5723] hid-generic 0005:15C2:0003.0001: probe with driver hid-generic failed with error -22 [ 170.277518][ T7973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.481'. [ 170.350881][ T7977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.483'. [ 170.406198][ T7984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.484'. [ 170.490648][ T7972] netlink: 60 bytes leftover after parsing attributes in process `syz.3.479'. [ 173.765514][ T5628] Bluetooth: hci4: link tx timeout [ 173.772499][ T5628] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.758475][ T8131] __nla_validate_parse: 4 callbacks suppressed [ 174.759398][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 174.794732][ T8128] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 174.814533][ T8128] bond1 (unregistering): Released all slaves [ 175.843229][ T5628] Bluetooth: hci4: command 0x0405 tx timeout [ 176.774893][ T8187] nbd: must specify at least one socket [ 176.818831][ T8190] nbd: must specify at least one socket [ 177.142462][ T8204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.524'. [ 177.638448][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.526'. [ 177.709595][ T8227] 8021q: VLANs not supported on ip_vti0 [ 178.068518][ T8236] netlink: 100 bytes leftover after parsing attributes in process `syz.1.532'. [ 178.452358][ T8247] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 179.143442][ T8269] netlink: 56 bytes leftover after parsing attributes in process `syz.2.537'. [ 179.409364][ T8265] No such timeout policy "syz1" [ 179.821211][ T8295] netlink: 92 bytes leftover after parsing attributes in process `syz.1.541'. [ 179.860470][ T8295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.541'. [ 179.915350][ T8298] netlink: 'syz.1.541': attribute type 3 has an invalid length. [ 179.926151][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'. [ 180.605547][ T8311] pim6reg1: entered promiscuous mode [ 180.617940][ T8311] pim6reg1: entered allmulticast mode [ 180.775121][ T8324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.416727][ T8339] netlink: 136 bytes leftover after parsing attributes in process `syz.4.549'. [ 181.416769][ T8339] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 181.768697][ T8355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.550'. [ 181.768742][ T8355] openvswitch: netlink: Flow actions attr not present in new flow. [ 182.576250][ T8378] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 182.795290][ T8387] netlink: 40 bytes leftover after parsing attributes in process `syz.2.559'. [ 182.795434][ T8387] netlink: 40 bytes leftover after parsing attributes in process `syz.2.559'. [ 182.822016][ T8362] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 182.921618][ T8381] netlink: 'syz.2.559': attribute type 3 has an invalid length. [ 183.040276][ T8395] C: renamed from veth1_to_team (while UP) [ 183.095467][ T8395] netlink: 'syz.0.562': attribute type 1 has an invalid length. [ 183.095566][ T8395] netlink: 116 bytes leftover after parsing attributes in process `syz.0.562'. [ 183.118208][ T8395] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 183.433715][ T8407] IPVS: Error joining to the multicast group [ 183.778422][ T8427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.564'. [ 183.897436][ T5628] block nbd2: Receive control failed (result -32) [ 183.897584][ T4934] block nbd2: Receive control failed (result -32) [ 184.577766][ T8456] netlink: 'syz.4.568': attribute type 8 has an invalid length. [ 185.118888][ T8471] netlink: 'syz.3.574': attribute type 4 has an invalid length. [ 185.119006][ T8471] netlink: 3581 bytes leftover after parsing attributes in process `syz.3.574'. [ 185.404072][ T8479] tipc: Started in network mode [ 185.405212][ T8479] tipc: Node identity ac141441, cluster identity 4711 [ 185.418948][ T8479] tipc: Enabled bearer , priority 10 [ 185.596305][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 185.847995][ T8495] FAULT_INJECTION: forcing a failure. [ 185.847995][ T8495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.866279][ T8495] CPU: 1 UID: 0 PID: 8495 Comm: syz.1.579 Not tainted syzkaller #0 PREEMPT(full) [ 185.866318][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.866332][ T8495] Call Trace: [ 185.866342][ T8495] [ 185.866351][ T8495] dump_stack_lvl+0xe8/0x150 [ 185.866389][ T8495] should_fail_ex+0x410/0x560 [ 185.866429][ T8495] _copy_from_user+0x2d/0xb0 [ 185.866455][ T8495] ___sys_sendmsg+0x1c6/0x360 [ 185.866479][ T8495] ? __lock_acquire+0x6df/0x2e50 [ 185.866507][ T8495] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.866529][ T8495] ? __lock_acquire+0x6df/0x2e50 [ 185.866557][ T8495] ? kstrtouint+0x6e/0xe0 [ 185.866629][ T8495] __sys_sendmmsg+0x273/0x4d0 [ 185.866660][ T8495] ? __pfx___sys_sendmmsg+0x10/0x10 [ 185.866695][ T8495] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.866743][ T8495] ? ksys_write+0x242/0x270 [ 185.866778][ T8495] ? __pfx_ksys_write+0x10/0x10 [ 185.866814][ T8495] __x64_sys_sendmmsg+0xa0/0xc0 [ 185.866841][ T8495] do_syscall_64+0x166/0x520 [ 185.866872][ T8495] ? trace_irq_disable+0x3b/0x140 [ 185.866894][ T8495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.866917][ T8495] ? clear_bhb_loop+0x70/0xc0 [ 185.866945][ T8495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.866967][ T8495] RIP: 0033:0x7f4b5959e159 [ 185.866988][ T8495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.867006][ T8495] RSP: 002b:00007f4b577f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 185.867030][ T8495] RAX: ffffffffffffffda RBX: 00007f4b59825fa0 RCX: 00007f4b5959e159 [ 185.867047][ T8495] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 185.867062][ T8495] RBP: 00007f4b577f6090 R08: 0000000000000000 R09: 0000000000000000 [ 185.867076][ T8495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.867089][ T8495] R13: 00007f4b59826038 R14: 00007f4b59825fa0 R15: 00007ffc7ba3c3c8 [ 185.867124][ T8495] [ 186.209415][ T8497] netlink: 'syz.4.578': attribute type 25 has an invalid length. [ 186.431180][ T9] tipc: Node number set to 2886997057 [ 187.122820][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'. [ 188.264794][ T8567] FAULT_INJECTION: forcing a failure. [ 188.264794][ T8567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.264913][ T8567] CPU: 0 UID: 0 PID: 8567 Comm: syz.2.592 Not tainted syzkaller #0 PREEMPT(full) [ 188.264985][ T8567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.265029][ T8567] Call Trace: [ 188.265058][ T8567] [ 188.265093][ T8567] dump_stack_lvl+0xe8/0x150 [ 188.265240][ T8567] should_fail_ex+0x410/0x560 [ 188.265342][ T8567] _copy_from_user+0x2d/0xb0 [ 188.265406][ T8567] ___sys_sendmsg+0x1c6/0x360 [ 188.265468][ T8567] ? __lock_acquire+0x6df/0x2e50 [ 188.265541][ T8567] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.265600][ T8567] ? __lock_acquire+0x6df/0x2e50 [ 188.265666][ T8567] ? irqentry_exit+0x218/0x910 [ 188.265746][ T8567] ? trace_irq_disable+0x3b/0x140 [ 188.265921][ T8567] __sys_sendmmsg+0x273/0x4d0 [ 188.265995][ T8567] ? __pfx___sys_sendmmsg+0x10/0x10 [ 188.266090][ T8567] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.266211][ T8567] ? ksys_write+0x242/0x270 [ 188.266303][ T8567] ? __pfx_ksys_write+0x10/0x10 [ 188.266394][ T8567] __x64_sys_sendmmsg+0xa0/0xc0 [ 188.266477][ T8567] do_syscall_64+0x166/0x520 [ 188.266567][ T8567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.266627][ T8567] ? clear_bhb_loop+0x70/0xc0 [ 188.266700][ T8567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.266754][ T8567] RIP: 0033:0x7f044339e159 [ 188.266813][ T8567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.266872][ T8567] RSP: 002b:00007f0444187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 188.266928][ T8567] RAX: ffffffffffffffda RBX: 00007f0443625fa0 RCX: 00007f044339e159 [ 188.266970][ T8567] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 188.267010][ T8567] RBP: 00007f0444187090 R08: 0000000000000000 R09: 0000000000000000 [ 188.267050][ T8567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.267082][ T8567] R13: 00007f0443626038 R14: 00007f0443625fa0 R15: 00007ffdd7bd9558 [ 188.267174][ T8567] [ 189.708796][ T8587] tipc: Enabling of bearer rejected, failed to enable media [ 190.441956][ T8617] gtp1: entered promiscuous mode [ 190.577673][ T8620] bridge_slave_0: left allmulticast mode [ 190.577794][ T8620] bridge_slave_0: left promiscuous mode [ 190.583964][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.659192][ T8620] bridge_slave_1: left allmulticast mode [ 190.667070][ T8620] bridge_slave_1: left promiscuous mode [ 190.673070][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.774584][ T8620] bond0: (slave bond_slave_0): Releasing backup interface [ 190.818916][ T8624] netlink: 'syz.2.599': attribute type 49 has an invalid length. [ 190.837566][ T8620] team0: Port device team_slave_0 removed [ 190.862890][ T8620] team0: Port device team_slave_1 removed [ 190.891435][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d7c5000: rx timeout, send abort [ 190.901166][ T8620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.929019][ T8620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.939651][ T8620] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.207453][ T8639] netlink: 60 bytes leftover after parsing attributes in process `syz.3.603'. [ 191.281612][ T8624] ip6gretap0: entered promiscuous mode [ 191.281712][ T8624] ip6gretap0: entered allmulticast mode [ 191.391818][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d7c4800: rx timeout, send abort [ 191.396334][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d7c5000: abort rx timeout. Force session deactivation [ 191.891936][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d7c4800: abort rx timeout. Force session deactivation [ 191.988862][ T8667] netlink: 'syz.1.610': attribute type 3 has an invalid length. [ 191.998303][ T8668] netlink: 'syz.1.610': attribute type 3 has an invalid length. [ 192.430946][ T8679] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 192.430946][ T8679] Please contact the netfilter-devel mailing list or update your nftables rules. [ 193.040875][ T32] audit: type=1804 audit(1789019411.691:3): pid=8687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.614" name="/newroot/130/cgroup.controllers" dev="tmpfs" ino=678 res=1 errno=0 [ 193.041047][ T32] audit: type=1800 audit(1789019411.691:4): pid=8687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.614" name="cgroup.controllers" dev="tmpfs" ino=678 res=0 errno=0 [ 193.157135][ T8695] FAULT_INJECTION: forcing a failure. [ 193.157135][ T8695] name failslab, interval 1, probability 0, space 0, times 0 [ 193.157195][ T8695] CPU: 1 UID: 0 PID: 8695 Comm: syz.1.615 Not tainted syzkaller #0 PREEMPT(full) [ 193.157221][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.157234][ T8695] Call Trace: [ 193.157243][ T8695] [ 193.157252][ T8695] dump_stack_lvl+0xe8/0x150 [ 193.157363][ T8695] should_fail_ex+0x410/0x560 [ 193.157489][ T8695] ? __alloc_skb+0x1db/0x7a0 [ 193.157573][ T8695] should_failslab+0xa8/0x100 [ 193.157646][ T8695] ? __alloc_skb+0x1db/0x7a0 [ 193.157729][ T8695] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 193.157812][ T8695] ? __alloc_skb+0x18d/0x7a0 [ 193.157890][ T8695] ? __alloc_skb+0x1db/0x7a0 [ 193.157996][ T8695] __alloc_skb+0x1db/0x7a0 [ 193.158074][ T8695] alloc_skb_with_frags+0xc6/0x760 [ 193.158177][ T8695] sock_alloc_send_pskb+0x878/0x990 [ 193.158285][ T8695] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 193.158340][ T8695] ? kasan_quarantine_put+0xbb/0x1f0 [ 193.158426][ T8695] ? lockdep_hardirqs_on+0x7b/0x110 [ 193.158523][ T8695] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 193.158582][ T8695] ? kmem_cache_free+0x182/0x650 [ 193.158643][ T8695] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 193.158726][ T8695] unix_dgram_sendmsg+0x4da/0x17b0 [ 193.158823][ T8695] ? __lock_acquire+0x6df/0x2e50 [ 193.158903][ T8695] ? __pfx_process_measurement+0x10/0x10 [ 193.158991][ T8695] ? __lock_acquire+0x6df/0x2e50 [ 193.159043][ T8695] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 193.159126][ T8695] ? aa_sock_msg_perm+0x129/0x210 [ 193.159200][ T8695] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 193.159284][ T8695] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 193.159359][ T8695] sock_sendmsg_nosec+0x13a/0x180 [ 193.159442][ T8695] ____sys_sendmsg+0x54e/0x850 [ 193.159523][ T8695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.159601][ T8695] ? import_iovec+0x73/0xa0 [ 193.159672][ T8695] ___sys_sendmsg+0x2a5/0x360 [ 193.159726][ T8695] ? __lock_acquire+0x6df/0x2e50 [ 193.159791][ T8695] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.159845][ T8695] ? __lock_acquire+0x6df/0x2e50 [ 193.159918][ T8695] ? kstrtouint+0x6e/0xe0 [ 193.160093][ T8695] __sys_sendmmsg+0x273/0x4d0 [ 193.160182][ T8695] ? __pfx___sys_sendmmsg+0x10/0x10 [ 193.160286][ T8695] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 193.160404][ T8695] ? ksys_write+0x242/0x270 [ 193.160512][ T8695] ? __pfx_ksys_write+0x10/0x10 [ 193.160607][ T8695] __x64_sys_sendmmsg+0xa0/0xc0 [ 193.160672][ T8695] do_syscall_64+0x166/0x520 [ 193.160756][ T8695] ? trace_irq_disable+0x3b/0x140 [ 193.160808][ T8695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.160870][ T8695] ? clear_bhb_loop+0x70/0xc0 [ 193.160934][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.160987][ T8695] RIP: 0033:0x7f4b5959e159 [ 193.161040][ T8695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.161085][ T8695] RSP: 002b:00007f4b577f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 193.161147][ T8695] RAX: ffffffffffffffda RBX: 00007f4b59825fa0 RCX: 00007f4b5959e159 [ 193.161200][ T8695] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 193.161239][ T8695] RBP: 00007f4b577f6090 R08: 0000000000000000 R09: 0000000000000000 [ 193.161271][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.161303][ T8695] R13: 00007f4b59826038 R14: 00007f4b59825fa0 R15: 00007ffc7ba3c3c8 [ 193.161386][ T8695] [ 193.681989][ T8700] netlink: 32 bytes leftover after parsing attributes in process `syz.2.616'. [ 193.740200][ T8702] sctp: [Deprecated]: syz.1.617 (pid 8702) Use of int in maxseg socket option. [ 193.740200][ T8702] Use struct sctp_assoc_value instead [ 193.885734][ T8704] netlink: 148 bytes leftover after parsing attributes in process `syz.0.618'. [ 193.901607][ T8704] netlink: 164 bytes leftover after parsing attributes in process `syz.0.618'. [ 194.112569][ T8711] syzkaller0: entered promiscuous mode [ 194.112616][ T8711] syzkaller0: entered allmulticast mode [ 194.237409][ T8712] bond2: entered promiscuous mode [ 194.237456][ T8712] bond2: entered allmulticast mode [ 194.328380][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.328459][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.630571][ T8724] bridge2: entered allmulticast mode [ 194.927975][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.622'. [ 195.122439][ T8739] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 195.143739][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.622'. [ 195.231634][ T8748] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.625'. [ 195.270326][ T8740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.283564][ T8740] bond3: (slave bond4): Enslaving as an active interface with an up link [ 196.538319][ T8763] netlink: 'syz.1.628': attribute type 13 has an invalid length. [ 196.659935][ T8770] netlink: 16 bytes leftover after parsing attributes in process `syz.4.629'. [ 196.691635][ T8776] netlink: 'syz.0.631': attribute type 1 has an invalid length. [ 196.883700][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.914371][ T8776] bond2: entered promiscuous mode [ 196.921383][ T8776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.431128][ T8785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.443242][ T8785] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 197.443291][ T8785] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 197.477941][ T8785] bond2: (slave ipip0): making interface the new active one [ 197.477993][ T8785] ipip0: entered promiscuous mode [ 197.487958][ T8785] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 197.985494][ T8823] netlink: 104 bytes leftover after parsing attributes in process `syz.4.635'. [ 198.106602][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 198.126055][ T8824] netlink: 22 bytes leftover after parsing attributes in process `syz.3.636'. [ 198.177046][ T8831] netlink: 22 bytes leftover after parsing attributes in process `syz.3.636'. [ 198.275701][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 198.578511][ T8829] geneve2: entered promiscuous mode [ 198.628866][ T8842] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 198.728597][ T8842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.640'. [ 199.354291][ T8858] tipc: Enabling of bearer rejected, already enabled [ 199.376960][ T8853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.643'. [ 199.458272][ T8861] syzkaller0: entered promiscuous mode [ 199.458322][ T8861] syzkaller0: entered allmulticast mode [ 200.036025][ T8871] pim6reg: entered allmulticast mode [ 200.039496][ T8875] pim6reg: left allmulticast mode [ 200.153837][ T8887] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.154083][ T8887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 200.381565][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'. [ 200.885247][ T8907] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 200.930457][ T8907] bond2 (unregistering): Released all slaves [ 201.058130][ T8921] netlink: 'syz.2.654': attribute type 1 has an invalid length. [ 201.681308][ T8925] veth5: entered allmulticast mode [ 201.755725][ T8916] bond5: (slave veth0_to_bond): making interface the new active one [ 201.814957][ T8916] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 201.891178][ T8927] macvlan2: entered promiscuous mode [ 201.891227][ T8927] macvlan2: entered allmulticast mode [ 201.907008][ T8927] bond5: entered promiscuous mode [ 201.907048][ T8927] veth0_to_bond: entered promiscuous mode [ 201.937072][ T8927] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 201.945618][ T8927] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 201.945945][ T8927] bond5: left promiscuous mode [ 201.945987][ T8927] veth0_to_bond: left promiscuous mode [ 202.604374][ T8969] netlink: 'syz.0.660': attribute type 1 has an invalid length. [ 202.786839][ T8969] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.151009][ T8903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.164886][ T8970] __nla_validate_parse: 4 callbacks suppressed [ 203.164937][ T8970] netlink: 1244 bytes leftover after parsing attributes in process `syz.1.661'. [ 203.560543][ T8980] syzkaller0: entered promiscuous mode [ 203.560583][ T8980] syzkaller0: entered allmulticast mode [ 205.194085][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.196121][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.681054][ T9001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.694451][ T9001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.053376][ T7389] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.053477][ T7389] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.053573][ T7389] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.053686][ T7389] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.099459][ T9011] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 206.109914][ T9019] tap0: tun_chr_ioctl cmd 1074025677 [ 206.110216][ T9019] tap0: linktype set to 805 [ 206.160299][ T9037] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 206.237645][ T9038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.411845][ T9062] netlink: 47 bytes leftover after parsing attributes in process `syz.3.676'. [ 206.562235][ T9062] netlink: 'syz.3.676': attribute type 11 has an invalid length. [ 206.673351][ T9066] netlink: 488 bytes leftover after parsing attributes in process `syz.4.677'. [ 206.760285][ T9074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.678'. [ 206.760859][ T9074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.678'. [ 206.768300][ T9074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.678'. [ 207.077964][ T9084] netlink: 'syz.3.683': attribute type 4 has an invalid length. [ 207.154442][ T9084] block nbd0: reconnected socket [ 207.155970][ T9084] block nbd0: Unsupported socket: should be TCP or UNIX. [ 207.177349][ T4934] block nbd0: Receive control failed (result -104) [ 208.118314][ T9109] netlink: 380 bytes leftover after parsing attributes in process `syz.2.688'. [ 208.118363][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 208.118396][ T9109] netlink: 7 bytes leftover after parsing attributes in process `syz.2.688'. [ 208.403554][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.403818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.147524][ T9149] syzkaller1: entered promiscuous mode [ 209.147622][ T9149] syzkaller1: entered allmulticast mode [ 209.385420][ T9155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.698'. [ 209.645291][ T9164] netlink: 72 bytes leftover after parsing attributes in process `syz.1.699'. [ 209.684076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.831127][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 209.831244][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 210.179863][ T9173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.219367][ T9173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.230592][ T9175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.702'. [ 210.289093][ T9173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.292930][ T9173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.293361][ T9173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.313911][ T9173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.679024][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 210.733187][ T7388] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.742101][ T7388] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.742177][ T7388] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.742221][ T7388] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.910632][ T9185] netlink: 144 bytes leftover after parsing attributes in process `syz.1.705'. [ 211.501911][ T9212] netlink: 156 bytes leftover after parsing attributes in process `syz.1.711'. [ 211.523336][ T9212] netlink: 'syz.1.711': attribute type 1 has an invalid length. [ 211.531192][ T9212] netlink: 224 bytes leftover after parsing attributes in process `syz.1.711'. [ 211.566534][ T9214] netlink: 'syz.3.712': attribute type 15 has an invalid length. [ 211.566636][ T9214] netlink: 'syz.3.712': attribute type 7 has an invalid length. [ 211.567396][ T9214] netlink: 52 bytes leftover after parsing attributes in process `syz.3.712'. [ 211.708467][ T9214] net_ratelimit: 159 callbacks suppressed [ 211.716896][ T9214] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 211.764850][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 211.766875][ T5619] Bluetooth: hci1: command 0x0406 tx timeout [ 211.771027][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 212.478669][ T9237] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.830602][ T543] tipc: Subscription rejected, illegal request [ 213.887357][ T9287] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 214.165964][ T9043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.174085][ T7388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.450223][ T9301] syzkaller0: entered promiscuous mode [ 214.456984][ T9301] syzkaller0: entered allmulticast mode [ 214.524787][ T9301] tipc: Started in network mode [ 214.524840][ T9301] tipc: Node identity 320df94f5ca1, cluster identity 4711 [ 214.525109][ T9301] tipc: Enabled bearer , priority 0 [ 214.558609][ T9303] FAULT_INJECTION: forcing a failure. [ 214.558609][ T9303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.572079][ T9303] CPU: 1 UID: 0 PID: 9303 Comm: syz.3.735 Not tainted syzkaller #0 PREEMPT(full) [ 214.572107][ T9303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.572121][ T9303] Call Trace: [ 214.572130][ T9303] [ 214.572140][ T9303] dump_stack_lvl+0xe8/0x150 [ 214.572177][ T9303] should_fail_ex+0x410/0x560 [ 214.572217][ T9303] _copy_from_user+0x2d/0xb0 [ 214.572242][ T9303] ___sys_sendmsg+0x1c6/0x360 [ 214.572265][ T9303] ? __lock_acquire+0x6df/0x2e50 [ 214.572292][ T9303] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.572353][ T9303] ? __fget_files+0x2a/0x420 [ 214.572382][ T9303] ? __fget_files+0x3a2/0x420 [ 214.572422][ T9303] __x64_sys_sendmsg+0x1b1/0x290 [ 214.572450][ T9303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.572497][ T9303] do_syscall_64+0x166/0x520 [ 214.572528][ T9303] ? trace_irq_disable+0x3b/0x140 [ 214.572548][ T9303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.572571][ T9303] ? clear_bhb_loop+0x70/0xc0 [ 214.572598][ T9303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.572620][ T9303] RIP: 0033:0x7f3234b9e159 [ 214.572640][ T9303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.572660][ T9303] RSP: 002b:00007f3235b04028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.572684][ T9303] RAX: ffffffffffffffda RBX: 00007f3234e25fa0 RCX: 00007f3234b9e159 [ 214.572702][ T9303] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 214.572716][ T9303] RBP: 00007f3235b04090 R08: 0000000000000000 R09: 0000000000000000 [ 214.572730][ T9303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.572744][ T9303] R13: 00007f3234e26038 R14: 00007f3234e25fa0 R15: 00007ffe858569b8 [ 214.572779][ T9303] [ 214.818430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.831317][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.855258][ T7388] tipc: Resetting bearer [ 214.946980][ T9298] tipc: Resetting bearer [ 215.207827][ T9298] tipc: Disabling bearer [ 215.230889][ T9322] __nla_validate_parse: 8 callbacks suppressed [ 215.240005][ T9322] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.736'. [ 215.435359][ T9339] netlink: 104 bytes leftover after parsing attributes in process `syz.4.740'. [ 215.467658][ T9339] syzkaller0: entered promiscuous mode [ 215.473520][ T9339] syzkaller0: entered allmulticast mode [ 215.490213][ T9339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.740'. [ 215.669851][ T9345] netlink: 1327 bytes leftover after parsing attributes in process `syz.2.741'. [ 215.732286][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 215.732888][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 215.732959][ T9348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.742'. [ 215.734041][ T9347] netlink: 20 bytes leftover after parsing attributes in process `syz.4.742'. [ 215.740863][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.742'. [ 215.795471][ T9348] team0: Port device team_slave_0 removed [ 215.813629][ T9347] syzkaller1: entered promiscuous mode [ 215.813718][ T9347] syzkaller1: entered allmulticast mode [ 217.759346][ T9311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.005310][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.006607][ T7389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.114248][ T9376] FAULT_INJECTION: forcing a failure. [ 218.114248][ T9376] name failslab, interval 1, probability 0, space 0, times 0 [ 218.127326][ T9376] CPU: 1 UID: 0 PID: 9376 Comm: syz.3.745 Not tainted syzkaller #0 PREEMPT(full) [ 218.127357][ T9376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.127371][ T9376] Call Trace: [ 218.127381][ T9376] [ 218.127391][ T9376] dump_stack_lvl+0xe8/0x150 [ 218.127430][ T9376] should_fail_ex+0x410/0x560 [ 218.127469][ T9376] ? __alloc_skb+0x1db/0x7a0 [ 218.127502][ T9376] should_failslab+0xa8/0x100 [ 218.127531][ T9376] ? __alloc_skb+0x1db/0x7a0 [ 218.127562][ T9376] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 218.127596][ T9376] ? __alloc_skb+0x18d/0x7a0 [ 218.127629][ T9376] ? __alloc_skb+0x1db/0x7a0 [ 218.127669][ T9376] __alloc_skb+0x1db/0x7a0 [ 218.127706][ T9376] alloc_skb_with_frags+0xc6/0x760 [ 218.127749][ T9376] sock_alloc_send_pskb+0x878/0x990 [ 218.127795][ T9376] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 218.127821][ T9376] ? kasan_quarantine_put+0xbb/0x1f0 [ 218.127856][ T9376] ? lockdep_hardirqs_on+0x7b/0x110 [ 218.127892][ T9376] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 218.127920][ T9376] ? kmem_cache_free+0x182/0x650 [ 218.127944][ T9376] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 218.127976][ T9376] unix_dgram_sendmsg+0x4da/0x17b0 [ 218.128006][ T9376] ? __lock_acquire+0x6df/0x2e50 [ 218.128035][ T9376] ? __pfx_process_measurement+0x10/0x10 [ 218.128073][ T9376] ? __lock_acquire+0x6df/0x2e50 [ 218.128095][ T9376] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 218.128127][ T9376] ? aa_sock_msg_perm+0x129/0x210 [ 218.128156][ T9376] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 218.128189][ T9376] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 218.128220][ T9376] sock_sendmsg_nosec+0x13a/0x180 [ 218.128253][ T9376] ____sys_sendmsg+0x54e/0x850 [ 218.128282][ T9376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.128320][ T9376] ? import_iovec+0x73/0xa0 [ 218.128349][ T9376] ___sys_sendmsg+0x2a5/0x360 [ 218.128372][ T9376] ? __lock_acquire+0x6df/0x2e50 [ 218.128399][ T9376] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.128421][ T9376] ? __lock_acquire+0x6df/0x2e50 [ 218.128448][ T9376] ? kstrtouint+0x6e/0xe0 [ 218.128522][ T9376] __sys_sendmmsg+0x273/0x4d0 [ 218.128553][ T9376] ? __pfx___sys_sendmmsg+0x10/0x10 [ 218.128588][ T9376] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 218.128637][ T9376] ? ksys_write+0x242/0x270 [ 218.128673][ T9376] ? __pfx_ksys_write+0x10/0x10 [ 218.128727][ T9376] __x64_sys_sendmmsg+0xa0/0xc0 [ 218.128755][ T9376] do_syscall_64+0x166/0x520 [ 218.128786][ T9376] ? trace_irq_disable+0x3b/0x140 [ 218.128808][ T9376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.128831][ T9376] ? clear_bhb_loop+0x70/0xc0 [ 218.128858][ T9376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.128881][ T9376] RIP: 0033:0x7f3234b9e159 [ 218.128902][ T9376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.128923][ T9376] RSP: 002b:00007f3235b04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 218.128947][ T9376] RAX: ffffffffffffffda RBX: 00007f3234e25fa0 RCX: 00007f3234b9e159 [ 218.128964][ T9376] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 218.128979][ T9376] RBP: 00007f3235b04090 R08: 0000000000000000 R09: 0000000000000000 [ 218.128993][ T9376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 218.129019][ T9376] R13: 00007f3234e26038 R14: 00007f3234e25fa0 R15: 00007ffe858569b8 [ 218.129053][ T9376] [ 218.585976][ T9382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.748'. [ 218.889420][ T9384] vcan0: tx drop: invalid sa for name 0x0000003ffffffffe [ 219.059949][ T9401] Unsupported ieee802154 address type: 0 [ 219.385811][ T9402] xt_CT: No such helper "snmp_trap" [ 219.402561][ T9405] bond5: entered promiscuous mode [ 219.410493][ T9405] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.437582][ T9411] bridge0: port 3(wlan1) entered blocking state [ 219.450482][ T9411] bridge0: port 3(wlan1) entered disabled state [ 219.450887][ T9411] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 219.474173][ T9411] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 219.628819][ T9424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.944610][ T3352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.982650][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.489784][ T9452] FAULT_INJECTION: forcing a failure. [ 220.489784][ T9452] name failslab, interval 1, probability 0, space 0, times 0 [ 220.502696][ T9452] CPU: 1 UID: 0 PID: 9452 Comm: syz.2.760 Not tainted syzkaller #0 PREEMPT(full) [ 220.502727][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.502740][ T9452] Call Trace: [ 220.502750][ T9452] [ 220.502759][ T9452] dump_stack_lvl+0xe8/0x150 [ 220.502797][ T9452] should_fail_ex+0x410/0x560 [ 220.502835][ T9452] ? __alloc_skb+0x1db/0x7a0 [ 220.502869][ T9452] should_failslab+0xa8/0x100 [ 220.502896][ T9452] ? __alloc_skb+0x1db/0x7a0 [ 220.502936][ T9452] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 220.502974][ T9452] ? __alloc_skb+0x18d/0x7a0 [ 220.503007][ T9452] ? __alloc_skb+0x1db/0x7a0 [ 220.503047][ T9452] __alloc_skb+0x1db/0x7a0 [ 220.503086][ T9452] alloc_skb_with_frags+0xc6/0x760 [ 220.503121][ T9452] sock_alloc_send_pskb+0x878/0x990 [ 220.503167][ T9452] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 220.503192][ T9452] ? kasan_quarantine_put+0xbb/0x1f0 [ 220.503226][ T9452] ? lockdep_hardirqs_on+0x7b/0x110 [ 220.503262][ T9452] ? unix_dgram_sendmsg+0x5d7/0x17b0 [ 220.503291][ T9452] ? kmem_cache_free+0x182/0x650 [ 220.503315][ T9452] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 220.503349][ T9452] unix_dgram_sendmsg+0x4da/0x17b0 [ 220.503381][ T9452] ? __lock_acquire+0x6df/0x2e50 [ 220.503408][ T9452] ? __pfx_process_measurement+0x10/0x10 [ 220.503447][ T9452] ? __lock_acquire+0x6df/0x2e50 [ 220.503470][ T9452] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 220.503503][ T9452] ? aa_sock_msg_perm+0x129/0x210 [ 220.503533][ T9452] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 220.503566][ T9452] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 220.503596][ T9452] sock_sendmsg_nosec+0x13a/0x180 [ 220.503630][ T9452] ____sys_sendmsg+0x54e/0x850 [ 220.503660][ T9452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.503695][ T9452] ? import_iovec+0x73/0xa0 [ 220.503722][ T9452] ___sys_sendmsg+0x2a5/0x360 [ 220.503745][ T9452] ? __lock_acquire+0x6df/0x2e50 [ 220.503771][ T9452] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.503793][ T9452] ? __lock_acquire+0x6df/0x2e50 [ 220.503821][ T9452] ? kstrtouint+0x6e/0xe0 [ 220.503895][ T9452] __sys_sendmmsg+0x273/0x4d0 [ 220.503934][ T9452] ? __pfx___sys_sendmmsg+0x10/0x10 [ 220.503969][ T9452] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 220.504018][ T9452] ? ksys_write+0x242/0x270 [ 220.504054][ T9452] ? __pfx_ksys_write+0x10/0x10 [ 220.504093][ T9452] __x64_sys_sendmmsg+0xa0/0xc0 [ 220.504120][ T9452] do_syscall_64+0x166/0x520 [ 220.504151][ T9452] ? trace_irq_disable+0x3b/0x140 [ 220.504173][ T9452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.504196][ T9452] ? clear_bhb_loop+0x70/0xc0 [ 220.504223][ T9452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.504246][ T9452] RIP: 0033:0x7f044339e159 [ 220.504267][ T9452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.504286][ T9452] RSP: 002b:00007f0444187028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 220.504311][ T9452] RAX: ffffffffffffffda RBX: 00007f0443625fa0 RCX: 00007f044339e159 [ 220.504328][ T9452] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 220.504343][ T9452] RBP: 00007f0444187090 R08: 0000000000000000 R09: 0000000000000000 [ 220.504358][ T9452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.504372][ T9452] R13: 00007f0443626038 R14: 00007f0443625fa0 R15: 00007ffdd7bd9558 [ 220.504407][ T9452] [ 221.167770][ T9456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.167983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.501440][ T9465] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 222.103249][ T9494] __nla_validate_parse: 1 callbacks suppressed [ 222.103332][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 222.156224][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 222.156324][ T9494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.766'. [ 222.192308][ T9498] syzkaller0: entered promiscuous mode [ 222.192411][ T9498] syzkaller0: entered allmulticast mode [ 222.204666][ T9495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.767'. [ 222.249306][ T9507] tipc: Started in network mode [ 222.250305][ T9507] tipc: Node identity 4a7ec22db127, cluster identity 4711 [ 222.252892][ T9507] tipc: Enabled bearer , priority 0 [ 222.263746][ T9507] tipc: Enabling of bearer rejected, already enabled [ 222.264958][ T9507] tipc: Enabling of bearer rejected, already enabled [ 222.398984][ T9511] ip6tnl1: entered allmulticast mode [ 222.474429][ T9501] netlink: 220 bytes leftover after parsing attributes in process `syz.4.768'. [ 222.474477][ T9501] netlink: 120 bytes leftover after parsing attributes in process `syz.4.768'. [ 222.474513][ T9501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.768'. [ 222.601933][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.763'. [ 222.822316][ T7388] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 222.857836][ T5631] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 222.874258][ T7388] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 222.934393][ T5631] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 222.996743][ T9497] tipc: Resetting bearer [ 223.118964][ T9497] tipc: Disabling bearer [ 223.150015][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.569593][ T9524] vcan0: tx drop: invalid sa for name 0x0000004000000000 [ 223.600349][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 223.610406][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'. [ 223.661605][ T9524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.662516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.679718][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.684114][ T5631] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 223.686696][ T543] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.686827][ T543] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.686931][ T543] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.723785][ T9532] FAULT_INJECTION: forcing a failure. [ 223.723785][ T9532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.723880][ T9532] CPU: 0 UID: 0 PID: 9532 Comm: syz.4.772 Not tainted syzkaller #0 PREEMPT(full) [ 223.723943][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.723976][ T9532] Call Trace: [ 223.724005][ T9532] [ 223.724027][ T9532] dump_stack_lvl+0xe8/0x150 [ 223.724108][ T9532] should_fail_ex+0x410/0x560 [ 223.724210][ T9532] _copy_from_user+0x2d/0xb0 [ 223.724274][ T9532] ___sys_sendmsg+0x1c6/0x360 [ 223.724336][ T9532] ? __lock_acquire+0x6df/0x2e50 [ 223.724401][ T9532] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.724454][ T9532] ? __lock_acquire+0x6df/0x2e50 [ 223.724533][ T9532] ? kstrtouint+0x6e/0xe0 [ 223.724721][ T9532] __sys_sendmmsg+0x273/0x4d0 [ 223.724795][ T9532] ? __pfx___sys_sendmmsg+0x10/0x10 [ 223.724884][ T9532] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 223.724954][ T9532] ? ksys_write+0x242/0x270 [ 223.724988][ T9532] ? __pfx_ksys_write+0x10/0x10 [ 223.725027][ T9532] __x64_sys_sendmmsg+0xa0/0xc0 [ 223.725053][ T9532] do_syscall_64+0x166/0x520 [ 223.725085][ T9532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.725107][ T9532] ? clear_bhb_loop+0x70/0xc0 [ 223.725132][ T9532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.725153][ T9532] RIP: 0033:0x7f262879e159 [ 223.725173][ T9532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.725192][ T9532] RSP: 002b:00007f26295ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 223.725214][ T9532] RAX: ffffffffffffffda RBX: 00007f2628a25fa0 RCX: 00007f262879e159 [ 223.725230][ T9532] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 223.725245][ T9532] RBP: 00007f26295ec090 R08: 0000000000000000 R09: 0000000000000000 [ 223.725258][ T9532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.725271][ T9532] R13: 00007f2628a26038 R14: 00007f2628a25fa0 R15: 00007fffdb03d8f8 [ 223.725304][ T9532] [ 223.946721][ T9529] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 224.406932][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.981091][ T9571] netlink: 'syz.0.782': attribute type 1 has an invalid length. [ 225.173676][ T9571] 8021q: adding VLAN 0 to HW filter on device bond6 [ 225.305717][ T9574] bond6: (slave gretap1): making interface the new active one [ 225.319577][ T9574] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 225.548897][ T9585] block nbd4: not configured, cannot reconfigure [ 225.690034][ T7391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.717217][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.016334][ T9612] sctp: [Deprecated]: syz.3.792 (pid 9612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.016334][ T9612] Use struct sctp_sack_info instead [ 226.118466][ T9603] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 226.129238][ T9603] bond2: (slave macvlan2): making interface the new active one [ 226.138902][ T9603] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 226.161594][ T9604] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 226.328168][ T9628] x_tables: duplicate underflow at hook 2 [ 226.601360][ T9043] bond_slave_0: entered promiscuous mode [ 226.601420][ T9043] bond_slave_1: entered promiscuous mode [ 226.723301][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 226.908341][ T9639] netlink: Conntrack attr has 4 unknown bytes [ 226.914644][ T9639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.137057][ T9648] __nla_validate_parse: 8 callbacks suppressed [ 227.137124][ T9648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.799'. [ 227.598918][ T9671] syz_tun: entered allmulticast mode [ 227.659683][ T9671] dvmrp6: entered allmulticast mode [ 227.718756][ T9677] netlink: 'syz.0.808': attribute type 13 has an invalid length. [ 227.930962][ T9669] syz_tun: left allmulticast mode [ 228.036336][ T9676] syzkaller0: entered promiscuous mode [ 228.036379][ T9676] syzkaller0: entered allmulticast mode [ 228.495985][ T9691] veth3: entered promiscuous mode [ 228.502508][ T9691] veth3: entered allmulticast mode [ 228.511716][ T9691] team0: Device veth3 is up. Set it down before adding it as a team port [ 228.747449][ T9695] syzkaller1: entered promiscuous mode [ 228.747493][ T9695] syzkaller1: entered allmulticast mode [ 228.886222][ T7388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.068846][ T9706] netlink: 'syz.1.816': attribute type 1 has an invalid length. [ 229.199919][ T9715] netlink: 'syz.1.816': attribute type 1 has an invalid length. [ 229.248060][ T9706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.329541][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 229.362356][ T9710] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 229.385914][ T7389] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 229.516629][ T7391] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 229.593492][ T9731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.822'. [ 229.885795][ T9737] netlink: Failed to add helper -22 [ 229.885869][ T9737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.151055][ T9752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.151544][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.178460][ T7388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.410085][ T9758] netlink: 'syz.1.827': attribute type 5 has an invalid length. [ 230.593816][ T9771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.829'. [ 230.627906][ T9771] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 230.766174][ T9776] netlink: 32 bytes leftover after parsing attributes in process `syz.2.829'. [ 230.783015][ T9776] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 230.807222][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.444779][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.002348][ T9795] netlink: 48 bytes leftover after parsing attributes in process `syz.1.834'. [ 232.011737][ T9795] netlink: 48 bytes leftover after parsing attributes in process `syz.1.834'. [ 233.670904][ T9814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.838'. [ 233.736622][ T9816] block nbd0: reconnected socket [ 233.764412][ T9816] netlink: 'syz.0.840': attribute type 9 has an invalid length. [ 233.997471][ T5628] block nbd0: Receive control failed (result -32) [ 234.162166][ T9827] net_ratelimit: 3 callbacks suppressed [ 234.162224][ T9827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.162720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.301240][ T9832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.313975][ T9832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.434458][ T9838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.592551][ T9835] netlink: 'syz.3.846': attribute type 21 has an invalid length. [ 234.592647][ T9835] netlink: 'syz.3.846': attribute type 22 has an invalid length. [ 234.592740][ T9835] netlink: 'syz.3.846': attribute type 23 has an invalid length. [ 234.592780][ T9835] netlink: 'syz.3.846': attribute type 25 has an invalid length. [ 234.609692][ T9835] netlink: 'syz.3.846': attribute type 26 has an invalid length. [ 234.609750][ T9835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.846'. [ 234.643854][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 234.653955][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.705045][ T9846] netlink: 84 bytes leftover after parsing attributes in process `syz.1.848'. [ 234.742168][ T9835] --map-set only usable from mangle table [ 234.762779][ T9846] netlink: 'syz.1.848': attribute type 13 has an invalid length. [ 235.396439][ T9865] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 235.544883][ T9867] tipc: Started in network mode [ 235.549963][ T9867] tipc: Node identity 6eb9b63ec6c5, cluster identity 4711 [ 235.559648][ T9867] tipc: Enabled bearer , priority 0 [ 235.569042][ T9867] syzkaller0: entered promiscuous mode [ 235.569081][ T9867] syzkaller0: entered allmulticast mode [ 235.878827][ T9865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.878956][ T9865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.938304][ T7388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.048474][ T9871] tipc: Resetting bearer [ 236.101925][ T9876] netlink: 348 bytes leftover after parsing attributes in process `syz.3.854'. [ 236.121061][ T9884] netlink: 'syz.0.857': attribute type 3 has an invalid length. [ 236.121092][ T9884] netlink: 646 bytes leftover after parsing attributes in process `syz.0.857'. [ 236.142429][ T9866] tipc: Resetting bearer [ 236.180713][ T9866] tipc: Disabling bearer [ 236.392455][ T9865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.403992][ T9865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.429556][ T9891] batman_adv: batadv0: Adding interface: wlan1 [ 236.437117][ T9891] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.466562][ T9891] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 236.581127][ T7388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.582484][ T9865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.582530][ T9865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.636708][ T9898] netlink: 64 bytes leftover after parsing attributes in process `syz.0.861'. [ 236.813290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.834768][ T9865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.834869][ T9865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.143278][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.143333][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.263873][ T7388] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.264002][ T7388] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.342617][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.859'. [ 237.386062][ T9894] ovs-s: entered promiscuous mode [ 237.505912][ T9916] block nbd3: server does not support multiple connections per device. [ 237.518354][ T9916] block nbd3: shutting down sockets [ 238.017985][ T9930] ip6tnl2: entered allmulticast mode [ 238.045160][ T7389] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.053593][ T7389] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.057517][ T143] ovs-s: left promiscuous mode [ 238.357508][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 238.363054][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 238.384079][ T5630] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 238.485176][ T5630] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 238.600820][ T9919] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 238.626120][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.626262][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.644796][ T9919] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 238.797960][ T9919] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 238.806081][ T9919] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 238.879748][ T9919] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 238.879871][ T9919] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 238.924635][ T9919] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 238.924732][ T9919] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 239.138982][ T9919] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 239.151041][ T9919] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 239.159505][ T9919] CPU: 0 UID: 0 PID: 9919 Comm: syz.1.866 Not tainted syzkaller #0 PREEMPT(full) [ 239.168742][ T9919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.178830][ T9919] RIP: 0010:klist_remove+0x156/0x340 [ 239.184160][ T9919] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd cb 5c f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 be cb 5c f6 49 8b 44 24 58 48 89 44 24 08 [ 239.204572][ T9919] RSP: 0018:ffffc900039e7820 EFLAGS: 00010202 [ 239.210666][ T9919] RAX: 000000000000000b RBX: ffff88802bbe8000 RCX: ffffffff9a9db501 [ 239.218660][ T9919] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058 [ 239.226645][ T9919] RBP: ffffc900039e7920 R08: ffffffff905f8fe3 R09: 1ffffffff20bf1fc [ 239.234634][ T9919] R10: dffffc0000000000 R11: fffffbfff20bf1fd R12: 0000000000000000 [ 239.242635][ T9919] R13: 1ffff1100f75538c R14: ffff88807baa9c60 R15: dffffc0000000000 [ 239.250652][ T9919] FS: 00007f4b577d56c0(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 239.259607][ T9919] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.266214][ T9919] CR2: 0000557dde2b94dc CR3: 00000000569b4000 CR4: 00000000003526f0 [ 239.274212][ T9919] Call Trace: [ 239.277511][ T9919] [ 239.280462][ T9919] ? __pfx_klist_remove+0x10/0x10 [ 239.285526][ T9919] ? kobject_move+0x5e2/0x720 [ 239.290232][ T9919] ? __pfx_kobject_move+0x10/0x10 [ 239.295286][ T9919] ? do_raw_spin_unlock+0xf5/0x200 [ 239.300427][ T9919] ? get_device_parent+0x366/0x3a0 [ 239.305567][ T9919] device_move+0x18e/0x720 [ 239.310001][ T9919] hci_conn_del_sysfs+0xb8/0x1a0 [ 239.314971][ T9919] hci_conn_del+0xc3d/0x1200 [ 239.319626][ T9919] hci_conn_hash_flush+0x189/0x260 [ 239.324780][ T9919] hci_dev_close_sync+0x7fc/0x10c0 [ 239.329942][ T9919] ? __pfx___mutex_lock+0x10/0x10 [ 239.335016][ T9919] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 239.340596][ T9919] ? do_raw_spin_lock+0x12b/0x2f0 [ 239.345666][ T9919] hci_dev_do_close+0x30/0xc0 [ 239.350387][ T9919] hci_rfkill_set_block+0x1f4/0x290 [ 239.355633][ T9919] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 239.361385][ T9919] rfkill_set_block+0x19f/0x4d0 [ 239.366267][ T9919] rfkill_fop_write+0x43b/0x560 [ 239.371155][ T9919] ? common_file_perm+0x20e/0x2b0 [ 239.376200][ T9919] ? __pfx_rfkill_fop_write+0x10/0x10 [ 239.381611][ T9919] ? security_file_permission+0x60/0x260 [ 239.387307][ T9919] ? rw_verify_area+0x203/0x4c0 [ 239.392229][ T9919] ? __pfx_rfkill_fop_write+0x10/0x10 [ 239.397649][ T9919] vfs_write+0x296/0xba0 [ 239.401963][ T9919] ? __pfx_vfs_write+0x10/0x10 [ 239.406766][ T9919] ? __fget_files+0x2a/0x420 [ 239.411403][ T9919] ? __fget_files+0x2a/0x420 [ 239.416026][ T9919] ? __fget_files+0x3a2/0x420 [ 239.420738][ T9919] ? __fget_files+0x2a/0x420 [ 239.425374][ T9919] ksys_write+0x150/0x270 [ 239.429742][ T9919] ? __pfx_ksys_write+0x10/0x10 [ 239.434638][ T9919] do_syscall_64+0x166/0x520 [ 239.439268][ T9919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.445365][ T9919] ? clear_bhb_loop+0x70/0xc0 [ 239.450073][ T9919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.455993][ T9919] RIP: 0033:0x7f4b5959e159 [ 239.460438][ T9919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.480077][ T9919] RSP: 002b:00007f4b577d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.488519][ T9919] RAX: ffffffffffffffda RBX: 00007f4b59826090 RCX: 00007f4b5959e159 [ 239.496514][ T9919] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000a [ 239.504518][ T9919] RBP: 00007f4b5963503b R08: 0000000000000000 R09: 0000000000000000 [ 239.512513][ T9919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.520506][ T9919] R13: 00007f4b59826128 R14: 00007f4b59826090 R15: 00007ffc7ba3c3c8 [ 239.528511][ T9919] [ 239.531547][ T9919] Modules linked in: [ 239.565575][ T9919] ---[ end trace 0000000000000000 ]--- [ 239.632289][ T5630] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 239.697386][ T9919] RIP: 0010:klist_remove+0x156/0x340 [ 239.702834][ T9919] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd cb 5c f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 be cb 5c f6 49 8b 44 24 58 48 89 44 24 08 [ 239.723156][ T9919] RSP: 0018:ffffc900039e7820 EFLAGS: 00010202 [ 239.729373][ T9919] RAX: 000000000000000b RBX: ffff88802bbe8000 RCX: ffffffff9a9db501 [ 239.740676][ T9919] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058 [ 239.749665][ T9919] RBP: ffffc900039e7920 R08: ffffffff905f8fe3 R09: 1ffffffff20bf1fc [ 239.749715][ T9919] R10: dffffc0000000000 R11: fffffbfff20bf1fd R12: 0000000000000000 [ 239.749737][ T9919] R13: 1ffff1100f75538c R14: ffff88807baa9c60 R15: dffffc0000000000 [ 239.749759][ T9919] FS: 00007f4b577d56c0(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 239.749782][ T9919] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.749800][ T9919] CR2: 00007ff9e546fe9c CR3: 00000000569b4000 CR4: 00000000003526f0 [ 239.749832][ T9919] Kernel panic - not syncing: Fatal exception [ 239.804017][ T9919] Kernel Offset: disabled [ 239.808371][ T9919] Rebooting in 86400 seconds..