last executing test programs: 3.73685535s ago: executing program 4 (id=926): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xc8, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x1500000000000000}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x48}}, 0x400c0c0) 3.341676712s ago: executing program 4 (id=931): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0x10064, 0x30, 0x53b, 0x1}, 0x10064}}, 0x24008805) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000) r3 = socket$inet6(0xa, 0x4, 0x10) sendmmsg$inet6(r3, &(0x7f0000002740)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @empty, 0x19d}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="380000000000000029000000040000003a030000000000000109000000000000000000c910000000000000000000000000000000000000001400000000000000290000003e0000000a00000000000000140000000000000029000000430000000400000000000000a80000000000000029000000390000003212020a00000000000000000000000000000000000000010000000000000000fc00000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001ff02000000000000000000000000000100000000000000000000000000000000fc010000000000000000000000000000ff0100000000000000000000000000012000000000000000290000"], 0x148}}], 0x2, 0x0) close(0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) connect$inet6(r6, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f000068e000/0x8000)=nil, 0x8000, 0x2, 0x12, r7, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$cgroup_int(r7, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x32, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0xffffeffb}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r8 = socket(0x1f, 0x5, 0x6) bind$vsock_stream(r8, &(0x7f0000000040), 0x10) listen(r8, 0x0) socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 2.576348057s ago: executing program 4 (id=938): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0x2710}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f000082c000/0xc000)=nil, 0xc000, 0x6, 0x13, r1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x5, 0x4, 0x800, 0x800, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x9, 0x8}, 0xc) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000010003904000000100000000001000000", @ANYRES32=r9, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac141402"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r5, &(0x7f00000001c0)="11eb03", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x4, 0x6, @multicast}, 0x14) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r10, 0x4030582a, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r11, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000001a80)={0x1a0, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x5b}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa3}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}]}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x7fffffff, 0x6, 0x800, 0x3, 0xe3, 0x8001, 0x98, 0xffff, 0x65f]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x18}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x7, 0xad7, 0x10001, 0x80, 0x4]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xa}]}}, @CTA_NAT_DST={0x94, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x68, 0x1, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_NAT_DST={0x0, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x0, 0x5, @mcast2}, @CTA_NAT_PROTO={0x0, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x0, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x0, 0x2, 0x4e22}]}]}]}, 0x1a0}}, 0x400c001) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe4d, 0x10, 0x0, 0x0, 0x0}}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{r10, 0xffffffffffffffff}, &(0x7f0000001800), &(0x7f0000001840)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x19, 0x18, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x5, 0x1, 0x0, r10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x93b2, 0x0, 0x0, 0x0, 0x1}, @generic={0x5, 0x4, 0x8, 0x8001, 0x5}, @call={0x85, 0x0, 0x0, 0xbc}, @ldst={0x2, 0x3, 0x6, 0x8, 0x6, 0x20}, @cb_func={0x18, 0xb}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @generic={0x9, 0x3, 0x2, 0x80, 0x69}]}, &(0x7f0000000300)='syzkaller\x00', 0x1000, 0x1000, &(0x7f0000000780)=""/4096, 0x40f00, 0x29, '\x00', 0x0, @cgroup_sockopt=0x16, r10, 0x8, &(0x7f0000001780)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000017c0)={0x1, 0x2, 0x2, 0x9}, 0x10, r12, r13, 0x0, &(0x7f00000018c0)=[r10, r14, r10, r11, r10, r10, r10, r10], 0x0, 0x10, 0x9}, 0x94) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000019c0)=@bpf_tracing={0x1a, 0x1, &(0x7f0000001340)=@raw=[@jmp={0x5, 0x0, 0xa, 0x1, 0xa, 0x68, 0x8}], &(0x7f0000001380)='syzkaller\x00', 0x40, 0x2b, &(0x7f00000013c0)=""/43, 0x41000, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001440)={0x4, 0x9, 0x80000000, 0x2}, 0x10, 0xf89f, 0xffffffffffffffff, 0x9, &(0x7f0000001480)=[0xffffffffffffffff], &(0x7f00000014c0)=[{0x2, 0x2, 0x9, 0x7}, {0x1, 0x3, 0x9, 0x1}, {0x1, 0x1, 0x8, 0x6}, {0x4, 0x1, 0xc, 0x5}, {0x4, 0x4, 0x1, 0x6}, {0x4, 0x5, 0x6, 0x1}, {0x4, 0x2, 0x4, 0x8}, {0x1, 0x3, 0x4, 0x8}, {0x4, 0x4, 0xc, 0x7}], 0x10, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x3, 0x1a, &(0x7f00000001c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5d}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0xb1}, @alu={0x4, 0x0, 0x2, 0x3, 0x6, 0x2, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x41000, 0x40, '\x00', r9, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001300)={0x4, 0x9, 0x9, 0xf}, 0x10, r12, r15, 0x4, 0x0, &(0x7f0000001640)=[{0x1, 0x4, 0x2, 0xa}, {0x5, 0x3, 0x3, 0x1}, {0x4, 0x4, 0x8, 0x8}, {0x2, 0x4, 0x4, 0x8}], 0x10, 0x8}, 0x94) 2.526276866s ago: executing program 2 (id=939): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000005c0)={r0, &(0x7f0000000480)='wlan0\x00', 0x10000, &(0x7f00000004c0)={@_ha_fsid={[0x0, 0x3]}, {0x0, 0x800, 0x6, 0x1}}, 0xf, &(0x7f0000000540), &(0x7f0000000580)=0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYRESDEC=r0], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a00000000000000000000000000000000000000000000000100ffff0073ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000010000000000"], 0x90) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000700)=""/114, 0x41000, 0x1}, 0x94) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0x27) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002000010025c77000fcdbdf25601800000800a500", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000851}, 0x24040004) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000500410009002abdf000000000000333a0f91af30000000004000ab7bdb9293a0e"], 0x18}}, 0x4004080) socket$kcm(0x10, 0x2, 0x4) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000380)={[0xfffffffffffffffb]}, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="390000001400815210003c000500018311001f9f660fcf066505acb640c89566c312f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d5", 0x39}], 0x1}, 0x4004) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0xffffffad, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="40000000000101000000000000000200000004001700240001801400018008000100e000000108000200e00000010c0002800500010000000000040016403fb497598955476f2a03000000d747328db9f0856835165bb26cd0ac18fca3fb2f003177992a98c61e65d10c37500e41b0602aec6a97f3fe4a6b176e6720c39ebad22231be1114099bc1e0e734f9ecf113b00058d683add25600f3323e9aa2f55fc2bb845ca5a6e82c1d96c699215c6548103a1723c83959a7c6979a2087b21da9dae8ffad721ec4502a53a8a0e7ffc0f1204198"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.333593531s ago: executing program 1 (id=940): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x4008800) 2.332703979s ago: executing program 0 (id=941): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x400d0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="698925bd7e2b7067df250800000010000400"], 0x24}}, 0x4004000) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000447bd7000fbdbdf25fc00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000002000063000000"], 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x93}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x94) socket$packet(0x11, 0x3, 0x300) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53d571a76d2608054c65c9a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000032c0)=[{{&(0x7f0000000840)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b40)=[{&(0x7f00000008c0)="de4d5a15a2c64e7174aba4a6fcd2f6952fe3be721b7c7b458ecfefdb68f8968a7733a6ad2b569330a624bf7f047b99e212cbbb68c870410afdbac8d36092d9eb90ecedc5982c61af94ddee3b0ce9fd9854fce9ab5170f2bea1c64e359ff8f7f56da8133ce3d53f7a94209427007fd82e", 0x70}, {&(0x7f0000000940)="2161138f0dea48ae94edfaf0d8b851bb34385d00a02df91e4d4861da2bcf7a7114e80a4f63d8c0377176da38153eba27466606ab07540e8401417fe1372880f12543438f03f8b3471dc35a8be5d53c36ba12c6c862905470c21010e429fb2b3168add168ab5ad6fce9b22b63d66f6fc5bdb6", 0x72}, {&(0x7f00000009c0)="4cb4e920dcf7a312478dd4f0785056de97f67e3cc4b0dfd8fa6fed99b2be74ec429aa2225d3453c7994d5eb560ede2ba3bc16a6ccdbee1e7e5fb7f8877b71cd7c03dd19179ced653a2dc8c74233b680349439cd0d0cb9ddbdfac8f78fbebade9c109baa4505691", 0x67}, {&(0x7f0000000a40)="3dc4340fdb70e6a158cc68628d549d13d6f35b3037c1e4d4df0a4fd8d77c915ef57d144e717ae8e662cf2ba5f918c1f0b43d1d6942d99910d5a7ae8bfa913fbd5f4ded41f62d1f47762a9ad480d1f32714b417b394addd52ab91d664d8831dc73cebba6cf34dac9134796a9cbb9811cee8650dfbbdd549d4a99ba61da0033ba3ee263a2b5ecf8257178cc9e8d54c7b18f3b480ec8d2b251ebdda8ec742d16b8f72a054a741ac2f5db00d3d30f02bf647dc3bb8b5e510443cce53048fa31623130b27b29381a61c440b2b827cf6e23a757b5d7892b8cde92f6ee01e92256cc1c6dc98bb5bd57f7c5a845ff48fc66f280d", 0xf0}], 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0793d857715b0e280975d79c8c40223c98526702804baba375dda77504563fbb43c0bbbe55434add8596b5c209ed7d1d8bb9d792341775048180e6e9a2b02e7a4a436992f65ff5e10e4550089ccef8d85d53784adadb49bc31864a608cefd059dd267be9cc984d7c227be0f20d9fc89f791013d8b6b7", @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001f997fd5f1202d7efd7636bb97d00000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000170765b18f5f3b45e3f226b35dfb9ab348cefc4b33043adcb888a7f074d2f8090892e574ced4e6636ed56b7ce0a259d6f7d1bf93f762d255ed00"/72], 0xb8, 0x20000800}}, {{&(0x7f00000010c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000d80)="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", 0x14a}], 0x1, &(0x7f0000001b00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}], 0x50, 0x4050}}, {{&(0x7f0000001b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x40005}}, {{0x0, 0x0, &(0x7f0000002800), 0x0, 0x0, 0x0, 0x4055}}, {{&(0x7f00000028c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002940)="28e62203fe71d4957404e9a839771bd508845edfe2f02d96b821122f50b5e25d", 0x20}, {&(0x7f0000002980)="5320729902652940fe9e66901546887534faf50e500cef1a126394265c2ce6256b8d311b67590c80a8fd1093808de92bdaf2a027218274576c659f5f006598106a273a655c5978f3aebe6485406745b4589a6245e9f49e6b87ab1107256d3e49c96ce6e438b4c3621df568753b3612a26df1763c11085e32cbe316d585967e25910bdfcee0ea5cfa0dac21bc346f8c0727904d1f92a3e1752086", 0x9a}], 0x2, 0x0, 0x0, 0x8000}}, {{&(0x7f0000002a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002e00)=[{&(0x7f00000003c0)="d78610b174ac1ad85ce0fae6ee08d661138956d9f0d3524a2ce7becbe2", 0x1d}, {&(0x7f0000002b40)="cf8c676280d0c9c1bcde5a6abf2f222f8c9111d38a6b598afe1f8259ab2527e31a16e6429cf24c8f2183969956e05afe395fd2e8eab2b6c58cc4ac67e2584b8d074a563ffbbf8210b5530f95883661d7c0f9e3251195dc42933a53f26487468b795eb1881d5fcd4c26c9c4af1280329d89d62400cc4f77aa55f357f5d7e956b37510c766f74f5d0fb2a42098f647348f66cf91a109c5eb4552f668dd28ce8588a09c4ecdcbf2e704b6eed76ce0deafd5235a555b805db69ff960dd374a334b92d18706f5a0190e85fa4aeee4b89f0324235cf3a60ce3f6b305a053fc5e2912f207072b6e59bfaf99623b67", 0xeb}, {&(0x7f0000002c40)="d9ba8bfac7e2ebb2c397682e554d8c177b3e2ee8d578c454b6f6d1a190aa5538d19af94dfa81dd6f6eb9d92f1ac92e9f271ef00102581806d9bd07650e0e7dc0a3cf6dbfa8c242dba304e90bfece6ab15d436dac3ef8858b55dbdb5cfec104f32390989e5734597f6a0d9c036f847c6a57b0a84e0901c0365e53d0c302731b4baa4a8aea3346fc214976859de599b897df11807903bbb8ee61a7fa0bd6b51d7d83a9d3e7aac9cc20905cad193435de7ebd69895bdee1aef8dffea9e71cc50a0ef4f116d2b8b527d8739001c78158faca0989c7c38276ddf5b5230499c0de9ce2", 0xe0}, {&(0x7f0000002d40)="0cec634e190cbd445fd02e4cfd545bbf85a1dd9aab4f7e5e16a879699d72db5eeeeb64231c21cd8fcbb0a3c1f28347ac0137d9eb4ae48f7a7f04dae30a3d0d490eb7b563204fc3a3f25dc519e140f82a466d8d25bee58f406e17ae259352a09e1929fe1359102f293ec158fa22dd7a567d701d6e5cb4ffe5e4f2ecd7401271cdc4852fcbd7d681c29a28e098e0def21dff00d705234027ecf76d2fb49f99e441ba22946d1ac05d73521dad99432ec560712ccf3949b16bf91c", 0xb9}], 0x4, &(0x7f0000000b80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, r8, r3, r1]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r6, 0xffffffffffffffff, r7, r3, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8, 0x840}}, {{&(0x7f00000030c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000003140)="f8f7accb94f98a0c8e5d1e2c5aff17a8c62e2cd699faa52f17e5ebcaff3470df844e0ecde9de7e659bed48facb7b4e5a6f6f00bffc3b4dcdb965db286de48779650155e9d0b073ffd1be82240839002c9fea340eea96d3e80552910abc73457b92343fe9f3543687d6f297c5362af3d04f3790258eb4817b391bd0e5a970d62aa9ee70d408b08604d82382b4d64cbdb91711811212c324d5470ffd92054b6539d656e3c225c8dd934dcfe5ed9b1139fdbecd85dfb0ea39c8baf728b5d95e4d35e2d6255efa06627a1f", 0xc9}], 0x1, &(0x7f0000003280)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x4800}}], 0x7, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x5e, 0x102, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000013dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="00000002c4bd93223da8b60c00dc7cf5fe0517723e7f09fc1078c86263e64744d7c69bbbdf863b50e8da8e85c6066774ddfc65c28fada7f10acbd544b7e76a5d76a4e5d7e308c7844f3f1dbbb1692d03ba4d45b1f11e65b777"], 0x18, 0x20008010}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000280)) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f00103c00fe800000000000000000000000000000fe80000004de4962fb22b827000000aa0000fd00660000003b00040005000180"], 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001d005b1429bd700800000000000000004dff8cf631dd879b8c63f7555613bdad18c29e4a2db66e1d286f115a4b4a1c6bc94dbec727c10ff050cc9b1cb41e2a5b7baf01a19d66ddbc1865", @ANYRES32=0x0, @ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x200440d4}, 0x4804) 2.277146685s ago: executing program 4 (id=942): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2.098031463s ago: executing program 1 (id=943): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller0\x00', {0x4}, 0xb5}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fa08fda2b2b172756af55f8ed29bd3f51d2f82becb178e69c1326cffffffff00000000ffffd5667e927f284d46f706f0a3929c4ce4584a9b520ffed81e0cb4b375fd6f2adf846be70e4a944f0b4690958e3430c9f0261ae4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$inet6(r6, 0x0, &(0x7f00000003c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x20, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000008000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="00000000000014000000b7030000fffe00008500000086000000bf09000000000000550901000000008095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff0f0000000000000000b7030000020000008500000006000000350003000000000018010000696c6c2500000000082020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080010008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000500009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r11 = socket$netlink(0x10, 0x3, 0x14) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000280)={'veth1_to_hsr\x00', @remote}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x16}], 0x26, 0x8, 0x2) 1.854822499s ago: executing program 4 (id=945): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000540)='syzkaller\x00', 0x9}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="200028bd7000fcdbdf251200000008000100", @ANYRES32=r1, @ANYBLOB="bdf377b5262627fcd4e482606c2d75d8fbd37096faf63bdf1fbb45f9be672509c54afa8c06613bf4e7f50a29864b2c"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x8001) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x338) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x89}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x306, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x5, 0x3, 0x8, 0x6}) r7 = socket(0xa, 0x1, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000017c0)={0x3c, r9, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r9, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4b71}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000000}, 0x4004005) 1.629411758s ago: executing program 3 (id=946): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80) 1.603042068s ago: executing program 2 (id=947): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1.422260926s ago: executing program 0 (id=948): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@remote, @local, 0xffffffffffffffff, "43b87a1297bda0f063efe7c3ab6a9bf05bbfca63c0ffff00", 0x9, 0x5, 0xf8, 0x6}, 0x3c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7fff}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044004}, 0x240008c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r3, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x0, 0x4, 0x4, 0x7, 0x3, 0x5]}}]}]}]}, 0x40}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30050000110a01"], 0x530}}, 0x40) 1.421709881s ago: executing program 1 (id=949): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r1, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x3, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x24b30b80f5cd5bc5, 0x0, 0x0, 0x0, 0x3}]}]}, 0x13c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c0000000905b00400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff00440000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000180003801400008008000340000000020800028004000100140000001000010000000000000000000084000a"], 0xd8}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r5 = accept(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r5, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x5e0}], 0x1}, 0x4) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x10}}, @TCA_RATE={0x6, 0x5, {0xd, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20040054) recvmsg(0xffffffffffffffff, &(0x7f0000003e00)={&(0x7f0000000500)=@can, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000000580)=""/71, 0x47}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/52, 0x34}], 0x3, &(0x7f0000003d00)=""/240, 0xf0}, 0x2002) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) 1.376151655s ago: executing program 3 (id=950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x140c0) (fail_nth: 4) 1.338585714s ago: executing program 2 (id=951): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f0000000000)=@raw=[@generic={0x89, 0x4, 0xb, 0x200, 0xd70}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x81}, @map_fd={0x18, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8c, &(0x7f00000000c0)=""/140, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x2, 0x8, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x5, 0x3, 0xe}, {0x4, 0x1, 0xb, 0x4}, {0x1, 0x2, 0x9, 0x3}, {0x3, 0x2, 0x3, 0x3}, {0x3, 0x9, 0x10}, {0x5, 0x1, 0x10, 0x7}], 0x10, 0x56a1}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x47, 0xeb}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@ifindex=0x0, 0x2e, 0x1, 0x10001, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0}, 0x40) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 32) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000540)={0x6, 0x0}, 0x8) (rerun: 32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@fallback=r4, r0, 0x0, 0x2a, r1, @void, @void, @void, @value=r5, r3}, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 32) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000b80)={{r0, &(0x7f0000000580)='syzkaller\x00', 0x20000, &(0x7f00000005c0)={@_ha_fsid={[0x3ff, 0xa]}, {0x49, 0x7, 0xf, 0x6}}, 0x8000, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0x586}, 0x6, &(0x7f0000000ac0)=[{0x1, 0x0, &(0x7f0000000680)='\x00', &(0x7f00000006c0)="1cfb513c4065cef996ba22beb22fb1e086ea8a8406d0f57e847f1263d076732c39f904b5ec17fd322d4d75d5302aebb32d7be753f1a04985440472c113be9f2937c2e08aa2d2e6f8271aee5f41802919c32cf137461863d96cbcaf6a68735a579c0a6aefe65df237ad9d3fbdbc3f11765d0b48f93fdc11da3e3459146a147bbbd3122191f5d8c131a233193e7568f861c2e7737cc2ea5444110ad931", 0x9c, 0x20}, {0x2, 0x4, &(0x7f0000000780)='\x00', &(0x7f00000007c0)="1b3bbcffc2168bca8f010f898cdde0bd23b60874460e2a0966c0358c59", 0x1d, 0x18}, {0x2, 0x7, &(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)="2d9388", 0x3, 0x38}, {0x2, 0x8, &(0x7f0000000880)='syzkaller\x00', &(0x7f00000008c0)="bf58bde45a22fdcb50b8513d7ca1c4a54b57a760db1e734ec97ac610313d86c9ec93a91c9f5b5f75466dd552e82d2ec9c91040196192202e31199d696e9b44dd5323aa282d16462ff38b336dbc4aabaf841a599094ed63f717b1647fa10ce6c81725ffc1295aeeb1d8159c0fbc29c2e0789c0bb9619add671bdf516800038556", 0x80, 0x1e}, {0x2, 0x7, &(0x7f0000000940)='*\x00', &(0x7f0000000980)="4e35b74be53ee3fb3288aa244eb95dcc07704db0c1974ef980c1d2ad45ef027ef3a644e32b241d10fd509f37dad35a62ef5ac62c2737e512866497b835110f144039e64892b83b5f9109bab490be85aec9295cf5455c8c729d", 0x59, 0x10}, {0x5, 0xfff, &(0x7f0000000a00)=',\x00', &(0x7f0000000a40)="6d78f459a8787b6f528d4f27493e380398f73b24a179a9a13f1dd127dae34beedd70ae2119a4453f3c1743c49f437e023ce9857102644c963863929fcd1aebd11952fbd427f40dc512e1ea8b85909496c7a55aa14c0b9a80f22fca545b720c012d06a8", 0x63, 0x28}]}) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x15, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xed040000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x7ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f0000000cc0)='syzkaller\x00', 0xe46c, 0xad, &(0x7f0000000d00)=""/173, 0x0, 0xf, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000e40)=[r1, r4, r1, r7, r1, r1, r1, r1, r1], &(0x7f0000000e80)=[{0x4, 0x2, 0x2, 0x1}, {0x1, 0x5, 0x2, 0xc}, {0x4, 0x2, 0x3, 0x4}, {0x5, 0x2, 0x7, 0x4}, {0x4, 0x5, 0xc, 0x9}, {0x3, 0x2, 0x4}, {0x0, 0x4, 0x3, 0x5}], 0x10, 0x10}, 0x94) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001140)={r6, 0x20, &(0x7f0000001100)={&(0x7f0000000fc0)=""/142, 0x8e, 0x0, &(0x7f0000001080)=""/124, 0x7c}}, 0x10) (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001180)={r0, r2, 0x25, 0x8, @val=@target_btf_id=r8}, 0x14) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0)) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000001200), &(0x7f0000001240)=0x4) (async, rerun: 32) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000001280)={0x0, 0x4, 0x6, 0x1}, &(0x7f00000012c0)=0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000001340)={'sit0\x00', &(0x7f0000001300)={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1d, 0x1f}}) (async) r11 = socket$pptp(0x18, 0x1, 0x2) ioctl$int_in(r11, 0x5421, &(0x7f0000001380)=0x5ac2baeb) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r1) (rerun: 32) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x20, r12, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x42}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x90) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r13) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000015c0)={r10, 0x4c, &(0x7f0000001540)=[@in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x3}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000001600)=0x10) (async) r14 = getpid() (async, rerun: 32) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000017c0)={0x0, 0x0}, &(0x7f0000001800)=0xc) (rerun: 32) r16 = getuid() (async) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000001a80)=0x0) sendmsg$netlink(r4, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000001640)={0x24, 0x3f, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x14, 0xe6, 0x0, 0x0, @ipv6=@local}]}, 0x24}, {&(0x7f0000001680)={0x108, 0x39, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0xb1, 0x0, 0x0, @u32=0x51}, @generic="e6dc110ae73dc869e0b80265747a13815fc5600c11a5b0961f0de6347eabb707812289019580d6748008b7711d362b14868f69e9e77f2178797a7fca86e6ba3f5f46ea571e9a126615ba4994ac93669cd7ab28dd6f5b2afadb96b7083024329d4d4c4992b4698e60f5205403fa1661c06f34f7ecab5ec3a69ab107d0cbf8480083a4df8435e010d3924d3a64993c694b1be4dd28b327d31675debba2321466e0fd20b39734e006ece2a2bd4cb2a16346b8362d55f82d605a91d364fa132f08edcc2117cad7718bdef5f0d2d073c3c50419a1f4e1e477fb2afc43dfec", @generic="ea0350aa3fc9fb1f88a254fd386d3a26f7f03b"]}, 0x108}, {&(0x7f0000001840)={0xe0, 0x30, 0x400, 0x70bd28, 0x25dfdbfb, "", [@nested={0xc3, 0x12f, 0x0, 0x1, [@typed={0x8, 0x11a, 0x0, 0x0, @pid=r14}, @typed={0x8, 0x20, 0x0, 0x0, @uid=r15}, @typed={0x8, 0xbe, 0x0, 0x0, @uid=r16}, @generic="9d2b963a4eab8e9ee35196e1151f8aee36f203fd5168c4c69e7ce1de3535e7219976922eced6c87a320a771b870c9d1d706d3093be7001ee517ab488d461e251cfab9e4652f2dc15194b9460fd93a0ecb30832cd84422d33e0d1", @generic="fb6f1412ef86d0a5b9fd62cc17bbf58559511873106c864e0adf6228567bcf7e6e2e30107b59cd7c13a9cbf3840de72a7cb080740c0ca08bf77bcfadd5177b66d0c0608e156aecd596", @nested={0x4, 0x147}]}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x14000000000}]}, 0xe0}, {&(0x7f0000001940)={0x110, 0x2a, 0x200, 0x70bd29, 0x25dfdbfd, "", [@nested={0xef, 0xdb, 0x0, 0x1, [@generic="f3cd16956eb78dcc09fafc89eff936b275b408bc928feaea59f687827a9bf26448872455ec81ba14b26cd637c8a76d8cb15de41ba177f73ff6a41c188521f0f17470798203d56f63889042fdf4a310a492024e29b614f0f2207dc62ff85fc5196868bbd0bb7ea9c7dd91c09f4b3c13d47024d0f12c84a9bd8fb4a54167e8b330004bd0c6c62aebfe7326722f3ee7de112d00d034f8ca3f948288d024f160d0c9a70fedabdfafa6fa1580012ab3d607c0149acfcce64251a15dc0fcac33dbc95744e17dea6a914cc225f543f4b28fc41f4204b3042a7c10bbe57e4284c4c92c", @nested={0x4, 0x12c}, @nested={0x4, 0xe}, @nested={0x4, 0x14e}]}, @typed={0xe, 0xc6, 0x0, 0x0, @str='syzkaller\x00'}]}, 0x110}, {&(0x7f0000001ac0)={0xfc, 0x38, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0xa7, 0x0, 0x0, @pid=r17}, @nested={0x10, 0x156, 0x0, 0x1, [@typed={0x8, 0x30, 0x0, 0x0, @pid}, @nested={0x4, 0xed}]}, @generic="a64e131c514be8819fa077d4587bc238b3c3a5bc2938403fac3a9a0134095d815a49ed477aa1d5408b4d1072d2ec3204818354a7ad95a66017a5143e69536039decffea52d097ffafa7fea158ebede91453f563ab874c4184abf9438246fe954fb68145919222287e6b263fa281942fdac45df411daba8dbbcbee6dcbb4d27725d0711b88748c1bca170e90d55d2fb1462ddcc05efba4e37cea2b6801100aa776b21bfc40f0be4ed7b3cb0989bcc95c7c30b98d1bcc8878c4c19ca68b4d5f3a6239011a3208262b7e2a80515b11816cf4827"]}, 0xfc}, {&(0x7f0000001bc0)={0x14, 0x13, 0x2, 0x70bd27, 0x25dfdbfb, "", [@typed={0x4, 0xfd}]}, 0x14}, {&(0x7f0000001c00)={0x21c, 0x27, 0x200, 0x70bd27, 0x25dfdbfb, "", [@generic="511b2b618de4b7e9078acb5aa17f457155ca6ebd38a6257efd1b02b6b43ad4e53481ce246e74c0925e8bcc866ea73b3f4a0bcfced926d3be8f7d07ba3a7f1fae5aed4f43e697236b125f3f9562d845f1150f02e4260065742944735fa65cf40c55f1265d2c883df59ee2b329d06eddec91a00bc5bcb2c5d17786ee2c92199b28c1d2a1bcbc20da91", @nested={0xd3, 0xe5, 0x0, 0x1, [@generic="1b8bc78f15d6b470ada344181a194ff06916c8fbd12173d13f22402fc79e0fc0359a877fe1cf661ee1dd4d60c758e8ecfdba980a76b1fa65a82fa10024aea792a80fe89576a75014c3eaf9d3801a33230a45826857d0ccd56918da0814b50d1d26974fb96063b2fc27203520693d5192c54132e84239382fc98388faf922776ef4824ab15956920d44c8d3edee01310a0ab2df5ea2cd50d288d08a6f2dfc4cffac57738afa1c6266ce79e18d5d272019c2a7735f06525f36fdb7d27200a9787c26d7cfa5ac61739fc0599f3a02577c"]}, @nested={0x8, 0x83, 0x0, 0x1, [@nested={0x4, 0x55}]}, @generic="bbbc904539ce3cacbf50629c7deb70abe167170c593081392550afbe7888461a6b83264ea630f2a37279f20ffecdb3ab5089f85c36fa9945d387e1adddc0f9b28048417f255781f13bf869ef243919f6402a2dcd48a33b35893bc1f7c3fb0f1f9ac2bfe8bdb377958b25460e431ca98aae056b52d7fcab97919c32c084a2c80f3b6a19b8d6907fde7af8bf7514ca12f6685d8464ffe5532f655eee9737cdbd811a7ef2c67eaffc"]}, 0x21c}, {&(0x7f0000001e40)={0xec, 0x17, 0x8, 0x70bd27, 0x25dfdbfd, "", [@generic="5b9dae13d9aaedea3ff01adebf6d27799b1b327d4355b0108509ee9e61365d3310de59710702f2e431af69a9c09023ac7a3e0dc4f16a8020be94f75ecf0649b26446e067388ec4b870f2c78b5f1f5fa2fb3c3d581cd6fd0b1f05ceb75af3f153ec4b8490442150ce37307b860a75a79566cdb6ec52b65ac1bf0041b05588be388ee3b53a0b7e4b9de5442054063cd81d5269c2e796813ed542b712cbe989687ecc50108edb54886b2a318f4fccb8d9", @nested={0x22, 0x9e, 0x0, 0x1, [@generic="ba424013749263bea691c4c4093f030828780c2a075d5cc72693f6a75f57"]}, @typed={0x8, 0x15b, 0x0, 0x0, @uid=0xee00}]}, 0xec}, {&(0x7f0000002580)={0x1800, 0x29, 0x200, 0x70bd28, 0x25dfdbfd, "", [@nested={0x8, 0xe7, 0x0, 0x1, [@nested={0x4, 0xd0}]}, @typed={0xde, 0x5c, 0x0, 0x0, @binary="cb9bd68bd8e0da14c3f350aa2dc2f4aaceb3a026ef41fcc99f5d3d99fe4feeab79e207155a428fb852d3b4dd9205782fd71ac82391f8e503e3e1aa6d7232d3029171e78728086c339d8ebb374faada84475ba68d2995d65788aff259a1d4658dd47885dca3cb5e6481f2e9b7a9ce1e25190ba1a31d00ce06649ba3d7ae57def6fcaa7db1b817b1fac7329b10779b2555b5dc85e6fb74109b668a76445180822e80fafe66ffc74bec5fadece78984fdfd108c322927fcd3d3e40cff97204227eb4ed0bc4a0af2ba7a5340a8bc68937004f73af56dee6f15e45102"}, @nested={0x1dc, 0x139, 0x0, 0x1, [@typed={0x14, 0x108, 0x0, 0x0, @ipv6=@private1}, @generic="cc40140da8b90a277e9c58cbe609be6f9a6fd31aba45723ad33fa7609762ee787d0e3ed4031ba6b78a9d2eb3dd0f5cd3f37e2347d786e4686359becc3067af8d0a2aa67d0300e7f6c81359d71bf363263deb2695ecf9d7b3bd4d502fad79e0cdfabfed6d90ce651c4020e4202d3485ed7773c11afbe834618d12ee86612912166df7ed27ad44f05632d3d3533462549d92104a67a569675589f19c5227f0ae13ed6a699c357f8ee70470ba65a586be069d4d6829e65dcd2a35efa4f9556d87668e598339b5", @generic="4f363027700fdfc48d0fe1ec06ec396a132e4b85864eb3450aae87d0ad15a7a9160c507c5d979d4f32445d3cbff9071c38481fa732520f54b6919da91b5bf2827f8f228c440d23b684b2ebc044de4f2834e1c476f9e1981d4becac29", @generic="7377be9414cc0e200fde7c233ce6c9f078c6a9fe870c0e618f3c9e0281b48dfa039cfcd9c1dd4637da6d88ebde2d07152eb18133f742f6befefcc8c4077001bdca04687b12235847946e20af2f695a6ec35ad91f340fd9ad67f48dce04a9b33b08166aa5f4ff91002cdf9089e50db128d1019f45062637f3c5851a3853d4d8", @generic="c140462cac3809ba7b94fe728d073ed9", @nested={0x4, 0xfd}, @typed={0xc, 0x4e, 0x0, 0x0, @u64=0x35}, @nested={0x4, 0x105}]}, @nested={0x1184, 0xa9, 0x0, 0x1, [@generic="fbe0497c321f5b5ed0fe8b18984d99442488ac59b50920d1a4a430629c87e0b99a7cee3ffe8217b065b32f5bf473cfbcdd7abe3190d0f14957e7fed8d212b8db1c3f5fba8284f01203380e165d0ebe74f7af0d5ad9413d26e345632506f20aa9747757102ba4ea134b8c6c0b041a82959498382e94ca0a4c19000166596ed0e37f4ce23b910aacc9127511d0c5a3acf5b24a1012f860888dfd436baca0e518d5a58a8e1b9e61d437d5", @typed={0x8, 0x7, 0x0, 0x0, @fd}, @nested={0x4, 0x4f}, @nested={0x4, 0x13d}, @generic="6eabe3e69084e04b6c33b4f305898998f13fbc512a30b310685ca86b2c2a86b4a4975e73e4bd97a4783055bee76844d46b326a213639bda44edaa362a3f8a337f3306db6be98e9d614ca15c94155fd30abedf3e85c11e144b036a2ad8622802698a30e28d6fd73c290ef65be3253bcbd11f62bddf5fe02639c813cf7d0e82517cd45954a2b22619334fb8caf7b37f8c6119c2d351edccdbaf526970e4d5121aaa7aef7949fc15d7fe1af6e853dd42aaf0fd133", @nested={0x4, 0xa7}, @typed={0x8, 0xed, 0x0, 0x0, @u32=0xffff}, @generic="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", @typed={0x8, 0x38, 0x0, 0x0, @uid}]}, @generic="da6c5cb8cb7c01a0537e9433abbac823d5f5e6affc63aeb18f7ac45855702dc9cecd74648de09158e70618cb48a7e7fc8975960362a718249e963cf6b49ab7c7c7f1cc8e77570f49fb17631dd6a8b42d3d26a554efe55f7c3e9f7f4c9fc3c53943a817d8a3dd0b0bd34d2f7a552c8338dd82361a017ea53f56c16151381a8df02481888b7dc49a1529d122fb2879f8aa1dcb494bc45dd8ba1a5e5c1028ce3360f718750e94cdabbb80189a3b44504eeb48568df65b8fa319b3d541754a04bd6ed7b9928024124e4bae4648a2d49b50d7036a70ea41a4ceb484f7", @nested={0x1aa, 0xc6, 0x0, 0x1, [@generic="f6ef1bd6f98993d717c37da3cd3f86b28d4ce15e8e3cdc1118f25cdf6152843b6beff0a94e365e07d75c7a24259b6f39707263ca16d795f7fe9638633d6c0a6457ea36c0d325c705445af9e0b80f84b5accc79eb0d4ac0531473a22530e03cb168d5faa1f6a56501", @typed={0x8, 0x15, 0x0, 0x0, @uid}, @generic="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", @generic="e09f0111f390e2500d3b8ce882974f7690c55bed0c1d41e90df10086211e47fa50cea46d", @typed={0x8, 0x36, 0x0, 0x0, @u32}, @typed={0x8, 0x4b, 0x0, 0x0, @fd=r4}, @typed={0x4, 0x133}]}, @generic="95912e2bc7baf7c2763ded235793da69ff9a0ba2814d42ff0eb7fbc96f0b2f8e6fc9e86a40a837269eb3bd9b9b5bcfc6b420145e658ec0a3bc31327fb4deceb50e14bc286aa80611aa457a0d776bfe0d257c6e93a3be2205c31bd35b34d4b65e55c95e7637d5fdaa5bc884e2a7ce428067a8742cd6c63e454e67f9ad9c558f18731fa72d082698d635627f5d8f9cdeb31f48d7f01eb1688d258372baa7b113a9c6b1c7374058208311e3005edbfb6c7209609107d60c948787b50e39", @generic="890b6b001486172de9d7be9b788f8a632d317d3cfc9a1453579b54e2f1247a611b1c0195ebda8c4953e7847abbe5dc12322003e6b100c91b781a47f1b2f7b310291dcd582abaa252d7992386c37c1d26b22bbdc17c08cdeb2c89e52307f4a1d59a1b70582cbf"]}, 0x1800}, {&(0x7f0000003d80)={0x28, 0x101, 0x200, 0x70bd27, 0x25dfdbfb, "", [@generic="3f837c25af020a7fc118c31cf676cc6ca5f572d2d7ca"]}, 0x28}], 0xa, &(0x7f0000004200)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r4, r11, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60, 0x20000044}, 0x4000040) 805.685126ms ago: executing program 0 (id=952): syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, {[@rr={0x7, 0x3, 0x6e}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x5, 0x2}]}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000900000080599990000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 805.255198ms ago: executing program 3 (id=953): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x4008800) 759.363388ms ago: executing program 4 (id=954): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="c14d000000000000200007800e00010069703667f26574baea6e1d36c9816e54ee93082061700000000c00028008000100a8ae2ecdcea0", @ANYRES32=r1, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$inet6_int(r2, 0x29, 0xce, 0x0, 0xfefc) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018010000756c6c250000000000202020c31af8ffa10000005e000000000000000701000000feffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=@delchain={0x1174, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x7, 0x2}, {0xf, 0x4}, {0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_u32={{0x8}, {0x1128, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_SEL={0x574, 0x5, {0x10, 0x6, 0xa, 0x10, 0x2, 0xfff, 0x401, 0x0, [{0xba, 0x3, 0xffffffff, 0x7331}, {0x7fff, 0xffff8000, 0x9, 0x8001}, {0x7, 0xff, 0x44a, 0x3}, {0x3, 0xf, 0x9, 0x4}, {0x0, 0x4, 0x2, 0x7}, {0x1, 0x1, 0x3ff, 0x4}, {0x6, 0x8ce9, 0x6, 0x8000}, {0x2d, 0x5ab800, 0x5, 0x18}, {0x8, 0x40, 0x0, 0x9}, {0x20f, 0x6, 0x9, 0x7}, {0x5, 0x6, 0x0, 0x54}, {0x84, 0x0, 0x6, 0x9}, {0x9fb, 0x56, 0x7, 0xfffff31a}, {0x3, 0x4, 0x4, 0x101}, {0x6, 0xd, 0x800, 0x2}, {0xd2c0, 0x4aea, 0xfffffff7, 0xffffffff}, {0x7, 0x8000, 0x80000}, {0x4ab, 0x1ff, 0x9, 0x8}, {0x3, 0x7, 0xffffffff, 0x2}, {0x5, 0x4, 0x5, 0xff}, {0x9, 0x400, 0x0, 0x3}, {0xc, 0x4, 0x10, 0xff}, {0xbb31, 0x51, 0x0, 0x4}, {0x5, 0x6, 0x7ff, 0xaa}, {0xfcf5, 0x8, 0x3952, 0x8000}, {0x9, 0x8, 0x2}, {0x33ec, 0xfffffffe, 0x2, 0x7c}, {0x2, 0x927, 0x7, 0x9}, {0xca1c, 0xc14, 0x9, 0x4}, {0x4, 0x79680419, 0x5, 0x2}, {0x3, 0x993, 0xe, 0x4}, {0x3, 0xffffffda, 0x1, 0x6}, {0xd, 0xd, 0x2}, {0xf89d, 0x5, 0x3050, 0x5}, {0x5, 0x7fff, 0x7f, 0x10001}, {0x3, 0x40, 0x3}, {0x8, 0x8bb, 0x5, 0x6}, {0x7fff, 0xe, 0xfffffffe, 0x3}, {0x6, 0xfffffffe, 0x40100, 0x7ff}, {0x200, 0x3, 0x800, 0x6}, {0x4, 0x2, 0x9, 0x2}, {0x1a1a, 0x40, 0x7aa5, 0x6}, {0x2000, 0x3, 0xf93, 0x7}, {0x1, 0x4, 0x4b2f, 0xe}, {0x7, 0xe, 0x1ff}, {0x5, 0x6, 0x58, 0x9}, {0x5, 0x400, 0x4, 0x9}, {0x7, 0xfe3, 0x10, 0x6}, {0x0, 0xd, 0x7f, 0x2}, {0xfffffffc, 0xe9, 0x5, 0x3}, {0x5, 0x2, 0x3, 0x72c4}, {0x3ff, 0x10001, 0x7, 0x838}, {0x1, 0x6, 0x4, 0x418}, {0x7f, 0x6, 0x2, 0xe2}, {0x8, 0x2, 0x80000001, 0x83dd}, {0x9, 0xa, 0x3, 0x8000}, {0x91, 0xc, 0x376, 0x400}, {0x9, 0x4, 0x698, 0x6}, {0x5, 0x0, 0x6, 0xffffffff}, {0x5, 0x3, 0x3, 0xe3}, {0x0, 0x800, 0x10001, 0x8000}, {0xb1, 0x4, 0x4, 0x6}, {0x7, 0x67410b06, 0x3, 0x1}, {0x4, 0x5, 0x1, 0xfff}, {0x8000, 0x1, 0x3, 0x7fffffff}, {0x8000, 0x0, 0xfffffff8, 0xfffffff7}, {0x8, 0x3, 0x7, 0x4}, {0x0, 0x1, 0xfffff82f, 0x4}, {0x48, 0x6, 0x6e, 0x71}, {0xffff, 0x5, 0x8, 0xffffffe5}, {0x2, 0x9, 0x7, 0x5}, {0xac1, 0x9}, {0x2, 0x2, 0x7b4, 0xf9d000}, {0x2, 0x800, 0x26, 0x7}, {0x74b, 0x8, 0x400, 0x80}, {0x0, 0x80000000, 0x101, 0xff}, {0xa000000, 0x2, 0x7, 0x4}, {0x0, 0x4, 0x28c8, 0x4}, {0x1, 0x5, 0x8001, 0xfffffff8}, {0xd782, 0x9357, 0x2, 0x7fe00}, {0x3, 0x3, 0x1, 0x4}, {0x5, 0x1, 0xf9e}, {0x30, 0x7, 0x8000, 0x6}, {0x9, 0x40, 0x3, 0x9}, {0x4, 0x80000001, 0x3, 0x5}, {0x0, 0x9, 0x9, 0xfffffffc}]}}, @TCA_U32_POLICE={0x478, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8001, 0xfffffffa, 0x6, 0x4, 0x7, 0x2, 0x1000, 0x6, 0x0, 0x9, 0x2, 0x8000, 0xfadc, 0x83, 0x6, 0x3a2, 0x1, 0x0, 0x7, 0xaca, 0x4, 0xfffffffc, 0x0, 0x4, 0x8, 0x8001, 0x2, 0xed77, 0x0, 0xb4, 0x9, 0xe3fe, 0xf, 0x6, 0x10001, 0x10001, 0x50c9, 0x3, 0xfffff000, 0x92a, 0x3ff, 0x7, 0x3cc, 0x6, 0x81, 0x80000000, 0x8001, 0x7ff, 0x9, 0xe, 0x4, 0x1, 0x8697, 0xa1, 0xb, 0x9, 0x60000000, 0x0, 0x9, 0x100, 0x1, 0x3, 0x1, 0x300, 0x1e1, 0x4, 0x5, 0x7, 0x6, 0x82d, 0xc, 0x1, 0xf, 0x80, 0x40, 0xfc000000, 0x0, 0x2, 0x9, 0x1379, 0x6, 0x7, 0x59e, 0x2, 0x62f, 0x0, 0x7f, 0x9, 0x7fff, 0x5, 0x6, 0x9, 0x5, 0x0, 0x5, 0x80000001, 0x8, 0xfffffff9, 0xffff, 0x7, 0x3, 0x52a4, 0x8, 0xb, 0x2, 0xffff, 0x72, 0x7fffffff, 0x6049, 0x2d8ba61a, 0x200, 0x7, 0x5c84, 0x200, 0x0, 0x0, 0xbc, 0x3ff, 0x8446, 0x1, 0x998, 0xf0a, 0x8, 0xd3, 0x6, 0x7e, 0xa2f, 0xd, 0x200, 0x10, 0x8, 0x400000, 0x2d, 0x4, 0x4, 0x7ff, 0x3ff, 0x3, 0x6, 0x2, 0xfff, 0xe, 0x5, 0x2, 0x10001, 0xfffff8cb, 0x8, 0x9, 0x8ee, 0x9, 0x1, 0xf, 0x7, 0x1, 0x1, 0x9, 0x3ff, 0x8, 0x3, 0x2c, 0x8, 0x48e7, 0x5add, 0x3, 0x7, 0x2, 0x9, 0x8, 0x5, 0x8, 0x80, 0x9bd14cb, 0x1, 0x5, 0x2, 0xb1, 0x4, 0x1, 0x52671dd8, 0x1, 0x5, 0xfff, 0x0, 0x2d, 0x0, 0xd, 0x2f96, 0xe1c2, 0x25, 0x7, 0x92, 0xb2, 0x5, 0x1, 0xc5, 0x9, 0x2, 0x6, 0x0, 0xfffffffd, 0xf0c8, 0x7, 0x80000000, 0xfffffff9, 0xa, 0x8, 0x8, 0x9, 0x3a38186d, 0x7fffffff, 0x80, 0xffff, 0x6, 0x9, 0x0, 0x4, 0xa, 0x3, 0xe, 0x3ff, 0x4, 0x5, 0xffff, 0xd2f0, 0x5d, 0x5, 0x3, 0x8000, 0x7fffffff, 0x6, 0x0, 0x7, 0x9, 0x6, 0x8000, 0xaf70, 0x4, 0xffffffff, 0x3, 0x3ff, 0xb, 0x5, 0x7, 0x5, 0x8000, 0x9, 0x2, 0x8, 0x7, 0x4, 0x6, 0x9, 0x6, 0xfff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb318, 0x6, 0x86, 0xfffff800, 0x5, {0x36, 0x1, 0x7, 0xfffa, 0x4, 0x8c0b}, {0x6, 0x0, 0x9a, 0x7f, 0xb, 0x5}, 0x5, 0x1, 0x9}}]}, @TCA_U32_INDEV={0x14, 0x8, 'hsr0\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x2}, @TCA_U32_SEL={0x714, 0x5, {0x1, 0x6, 0x0, 0x9a, 0x8000, 0xfde, 0x5, 0x4, [{0x1ff, 0xfffffff0, 0x9fb, 0x4}, {0x4, 0x2659, 0x4, 0x9}, {0xc546, 0x7ff, 0xf, 0x101}, {0x1, 0x3, 0xc, 0x8}, {0x0, 0x0, 0x17d28ceb, 0x7}, {0xfff, 0x7fffffff, 0x0, 0xc}, {0x2, 0x5, 0x6, 0x80800}, {0x5, 0xb, 0x0, 0x8}, {0x3, 0x81, 0x7f, 0x101}, {0x6, 0x3, 0x2, 0x3}, {0x4, 0x6, 0x5, 0xf}, {0x3, 0xffffffff, 0x8, 0x3ff}, {0x7, 0x1, 0x200, 0x3}, {0x9, 0x0, 0x2b4, 0x2}, {0x8c02, 0x401, 0x101, 0x7}, {0x9, 0x8, 0x3, 0xb}, {0x6, 0x6, 0x4e, 0x100}, {0x6, 0x1, 0xee6, 0x9}, {0x6, 0x3, 0x1fcb, 0xa}, {0x7fff, 0xfff, 0x0, 0xfffffffa}, {0xfff, 0x4a5d, 0x8, 0x1}, {0x22, 0x2, 0x5, 0xfffffeff}, {0xfffffff1, 0x8, 0x0, 0x8}, {0xfffffffc, 0x4, 0x7, 0xb09}, {0x7fff, 0xb, 0x762ea574, 0x5}, {0x1, 0x8, 0x4, 0x8}, {0x9, 0xd, 0x9, 0x5}, {0x101, 0x5, 0x7, 0x6}, {0xfffffff7, 0x4, 0x9, 0x300000}, {0x0, 0x8, 0x0, 0x3}, {0x1, 0x9, 0xffffff4c, 0x400}, {0x2, 0x0, 0x5, 0x3}, {0x5, 0x1, 0x2, 0x8}, {0x8, 0x9, 0x1, 0x4}, {0x6, 0x1, 0x3, 0x1ff}, {0x7, 0xc, 0x1, 0x2}, {0x4, 0x20, 0x6, 0x8}, {0x34, 0x0, 0x9, 0x4}, {0x40, 0x1, 0x6, 0x200}, {0x3, 0x0, 0x6, 0x156a}, {0x6, 0x0, 0x4568472c, 0x2}, {0x410000, 0x7, 0x80000000, 0x7}, {0x4, 0x1ff, 0xe, 0x8001}, {0x10000, 0x8, 0x5, 0xf}, {0x3, 0x6, 0x3, 0x200}, {0x80000000, 0xffff, 0x3, 0x6}, {0x2, 0x100, 0x0, 0x7f}, {0x1, 0x200, 0x5}, {0x1e000000, 0x6, 0x1, 0x8}, {0xfffffff7, 0x9, 0xa2, 0x2}, {0x4, 0x40, 0x7fffffff, 0x6}, {0x2, 0x8, 0x5, 0x7}, {0x10000, 0x20, 0xffff, 0x8}, {0x8, 0x1a9, 0x400, 0xd04}, {0x8, 0xea, 0x213d, 0xcd}, {0x3, 0x4fa, 0xabea, 0xfffffe00}, {0x6, 0x5, 0x0, 0xfffffffd}, {0x5, 0x7, 0x8, 0xf6}, {0x3ff, 0x40, 0x7, 0x7}, {0x8, 0x9, 0xffffbf8a}, {0x81, 0x5, 0x7, 0x8}, {0x4, 0x91, 0x7}, {0x5, 0x3d, 0x401, 0x7}, {0x9, 0x2, 0x7f, 0x7f}, {0x2, 0x2, 0x200, 0x10001}, {0x9, 0x2, 0x8}, {0x7, 0xb, 0x401, 0x7e3ff4bb}, {0x0, 0x5, 0xffffffff, 0x1}, {0x4, 0x4523, 0x200, 0x3}, {0x400, 0x0, 0xf, 0xbb}, {0x8, 0x4, 0x9, 0xd6}, {0x5, 0x7, 0x300, 0x7}, {0xd93, 0x4, 0x6, 0x1}, {0x2, 0x1, 0x1, 0x7}, {0x4, 0xa19b, 0x7, 0x6}, {0x1ff, 0x39d, 0x401, 0x8}, {0x7, 0x7fffffff, 0xfffffff9, 0xffff}, {0xfffffff1, 0x9d7e, 0x1, 0x9}, {0x5, 0x7, 0x1, 0xfffffb34}, {0xffffffff, 0x5, 0xffff, 0x10000}, {0x0, 0x72e5, 0x1236, 0x5}, {0x10000000, 0x5, 0x8d1}, {0x200, 0x2, 0x8, 0x9}, {0x8, 0x7, 0x9, 0x80}, {0x7, 0x6, 0x5, 0x4}, {0xb69a, 0xe, 0x6, 0x101}, {0x6, 0x1, 0x0, 0x8}, {0x7fffffff, 0x7, 0x5, 0x81}, {0x81, 0x1392e374, 0x0, 0x8}, {0x9, 0x8, 0x4, 0x6}, {0x4, 0xf, 0x7, 0x3}, {0x7, 0x401, 0x2, 0x7fff}, {0xc1, 0x5, 0x6, 0x9}, {0xe, 0x4, 0x3d, 0x3}, {0x0, 0xea, 0x133f, 0x2}, {0x7, 0x40, 0x5, 0x5}, {0x5, 0x9, 0xd}, {0x2, 0x7, 0xf, 0xf5}, {0x7fff, 0x2, 0xfffffffd, 0x3c}, {0x5, 0x7d2a, 0x7ff, 0x84}, {0x3, 0x969d, 0xffffff6f, 0x3}, {0x4, 0x3, 0x3, 0x2}, {0x3, 0x1, 0x7f, 0xd7}, {0x8001, 0xfffffffc, 0x4, 0x8c}, {0x4, 0x3ff, 0x80, 0x3}, {0x2, 0xffff8000, 0x4, 0xa75}, {0x1, 0x8, 0x10000, 0x8}, {0x9, 0x2, 0x101, 0x1}, {0x8, 0x6c2, 0x7fffffff, 0x45}, {0x3, 0x7, 0x2, 0x2}, {0x81, 0x9, 0x9, 0x9}, {0x9, 0xa, 0x8, 0x1}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xe, 0x80}}, @TCA_RATE={0x6, 0x5, {0x35, 0x6}}]}, 0x1174}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0xa888, r11, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) 623.723839ms ago: executing program 2 (id=955): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r2}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0x5, 0x8, {0x3}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x240400d0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000001e56c10c9c53fa5e0001000400000000000000080000002ad0c00bd897ea6c69251fb0d14829131e7b9beee8", @ANYRES32=r0, @ANYBLOB="0800828004005a80"], 0x20}], 0x1, 0x0, 0x0, 0xc94e52d035f3eab1}, 0x8000) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000001e56c10c9c53fa5e0001000400000000000000080000002ad0c00bd897ea6c69251fb0d14829131e7b9beee8", @ANYRES32=r0, @ANYBLOB="0800828004005a80"], 0x20}], 0x1, 0x0, 0x0, 0xc94e52d035f3eab1}, 0x8000) 606.699369ms ago: executing program 1 (id=956): r0 = socket$pptp(0x18, 0x1, 0x2) recvmmsg(r0, &(0x7f0000007e40)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/227, 0xe3}, {&(0x7f0000000180)=""/152, 0x98}, {&(0x7f0000000240)=""/29, 0x1d}], 0x3, &(0x7f00000002c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f00000012c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000002600)=[{&(0x7f0000001340)=""/227, 0xe3}, {&(0x7f0000001440)=""/239, 0xef}, {&(0x7f0000001540)=""/55, 0x37}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/101, 0x65}], 0x5, &(0x7f0000002680)=""/53, 0x35}, 0xad89}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000026c0)=""/182, 0xb6}, {&(0x7f0000002780)=""/163, 0xa3}, {&(0x7f0000002840)=""/61, 0x3d}, {&(0x7f0000002880)=""/53, 0x35}, {&(0x7f00000028c0)}, {&(0x7f0000002900)=""/96, 0x60}, {&(0x7f0000002980)=""/245, 0xf5}, {&(0x7f0000002a80)}, {&(0x7f0000002ac0)=""/114, 0x72}, {&(0x7f0000002b40)=""/138, 0x8a}], 0xa, &(0x7f0000002cc0)=""/133, 0x85}, 0x3}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002d80)=""/197, 0xc5}], 0x1, &(0x7f0000002ec0)=""/140, 0x8c}, 0x3}, {{&(0x7f0000002f80)=@sco, 0x80, &(0x7f0000004080)=[{&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/124, 0x7c}], 0x2, &(0x7f00000040c0)}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004100)=""/166, 0xa6}], 0x1, &(0x7f0000004200)=""/130, 0x82}, 0x3}, {{&(0x7f00000042c0)=@un=@abs, 0x80, &(0x7f0000004500)=[{&(0x7f0000004340)=""/177, 0xb1}, {&(0x7f0000004400)=""/26, 0x1a}, {&(0x7f0000004440)=""/179, 0xb3}], 0x3, &(0x7f0000004540)=""/4096, 0x1000}, 0x2}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000005540)=""/151, 0x97}, {&(0x7f0000005600)=""/109, 0x6d}, {&(0x7f0000005680)=""/182, 0xb6}, {&(0x7f0000005740)=""/186, 0xba}], 0x4, &(0x7f0000005840)=""/73, 0x49}, 0x25}, {{&(0x7f00000058c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005940)=""/248, 0xf8}], 0x1}, 0x6}, {{&(0x7f0000005a80)=@caif, 0x80, &(0x7f0000007d00)=[{&(0x7f0000005b00)=""/81, 0x51}, {&(0x7f0000005b80)=""/30, 0x1e}, {&(0x7f0000005bc0)=""/128, 0x80}, {&(0x7f0000005c40)=""/4096, 0x1000}, {&(0x7f0000006c40)=""/173, 0xad}, {&(0x7f0000006d00)=""/4096, 0x1000}], 0x6, &(0x7f0000007d80)=""/132, 0x84}, 0x2}], 0xa, 0x0, &(0x7f00000080c0)) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000008100), &(0x7f0000008140)=0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000081c0), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000008280)={&(0x7f0000008180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000008240)={&(0x7f0000008200)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8090) sendmsg$sock(r1, &(0x7f0000008440)={0x0, 0x0, &(0x7f0000008400)=[{&(0x7f00000082c0)="4035a0ebfd1c3316f6a19fd1a1de612acde16c3b934c05144e96047e0f335f5552217b5a8f3d177fcea67db68e3c544a6ccd7d3a8187b4e3b11dc414d3f8ef776c9f879b002b3e0eded61b70b80e5ab8078b8c800a98eaf026d6520630a5ea11528a0c7e10a242b201ff9d1a506922357f21c2eaf22caa8f8f93e2fd94cd790c23c4d1c8c8e2a8946520011bb06ad8e611592465d9ce5d5dfe5575f90d790181b8980108cf2a1c04e25e24e3ef8f5de4a99e2b10875fed62cfadfda80e669f33b563f28f4d3af59d01645cebd3613bf28765bee82fb15865085a56774d5b63e1f0", 0xe1}, {&(0x7f00000083c0)="fe2fca417ffc26c68f3aa7110628affb683ac68c87193c46b046291d87a48a5261a7e1cc38fd30925ba1a251c4", 0x2d}], 0x2}, 0x44000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000084c0), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000008580)={&(0x7f0000008480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000008540)={&(0x7f0000008500)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x50) pselect6(0x40, &(0x7f00000085c0)={0x1ff, 0x766, 0x7, 0xffffffff, 0x35, 0xf19f, 0xf, 0x10}, &(0x7f0000008600)={0x21c9, 0x10000, 0xffffffff, 0x6, 0x6, 0xffffffffffffff2a, 0x4, 0x46f9}, &(0x7f0000008640)={0x6, 0x0, 0x88, 0x4, 0x5e, 0x9, 0x1, 0xf5}, &(0x7f0000008680), &(0x7f0000008700)={&(0x7f00000086c0)={[0xb]}, 0x8}) sendmsg$NFT_BATCH(r1, &(0x7f0000008840)={&(0x7f0000008740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000008800)={&(0x7f0000008780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x386c2be4a2d5c768}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x1, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x11926566}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x80) shutdown(r1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000008b00)=@nat={'nat\x00', 0x19, 0x1, 0x206, [0x2000000088c0, 0x0, 0x0, 0x2000000088f0, 0x200000008920], 0x0, &(0x7f0000008880), &(0x7f00000088c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x0, 0x1, [{0x3, 0x0, 0x806, 'virt_wifi0\x00', 'veth1_virt_wifi\x00', 'erspan0\x00', 'ipvlan1\x00', @multicast, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x106, 0x13e, 0x176, [@limit={{'limit\x00', 0x0, 0x20}, {{0x6, 0x7, 0x1, 0x4, 0x2, 0x101}}}, @ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@local, [0xffffffff, 0xff, 0xffffff00, 0xffffffff], 0x4e22, 0x3c, 0x6, 0x4e21, 0x0, 0x4}}}], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@random="963173f9a4b1", 0xfffffffffffffffd}}}}]}]}, 0x27e) syz_genetlink_get_family_id$ipvs(&(0x7f0000008b80), r1) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000008c00), r1) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000008dc0)={&(0x7f0000008bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000008d80)={&(0x7f0000008c40)={0x128, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000100}, 0x4084) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000008ec0)={&(0x7f0000008e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000008e80)={&(0x7f0000008e40)={0x34, 0xf, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000008f80)={'ip6gre0\x00', &(0x7f0000008f00)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0xe, 0xffffcfe6, 0x1b, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x700, 0x7, 0x8}}) sendto$inet(r1, &(0x7f0000008fc0), 0x0, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ppoll(&(0x7f0000009000)=[{r1, 0x10}, {r0, 0x21}, {r0, 0x1400}, {r0, 0x1048}, {0xffffffffffffffff, 0x414}, {r6, 0x2200}], 0x6, &(0x7f0000009040)={0x0, 0x989680}, &(0x7f0000009080)={[0x6]}, 0x8) getsockname$packet(r1, &(0x7f00000090c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000009100)=0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000091c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000009280)={&(0x7f0000009140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000009240)={&(0x7f0000009200)={0x24, r7, 0x102, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xb2f9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x40801) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000092c0)) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000009300), &(0x7f0000009340)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000009440)={'syztnl0\x00', &(0x7f00000093c0)={'ip_vti0\x00', r5, 0x700, 0x80, 0x7, 0x1, {{0xa, 0x4, 0x0, 0x3c, 0x28, 0x68, 0x0, 0x6a, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010101, {[@timestamp_addr={0x44, 0x14, 0x52, 0x1, 0x0, [{@private=0xa010101}, {@remote, 0xffffffff}]}]}}}}}) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r1, &(0x7f0000009540)={&(0x7f0000009380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000009500)={&(0x7f0000009480)=@bridge_dellink={0x54, 0x11, 0x400, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, r9, 0x4, 0x8082}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, r10}, @IFLA_TXQLEN={0x8, 0xd, 0x2}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x538d9}, @IFLA_WEIGHT={0x8, 0xf, 0x1}]}, 0x54}}, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000009580)=""/136, &(0x7f0000009640)=0x88) 523.938039ms ago: executing program 0 (id=957): socket$netlink(0x10, 0x3, 0xd32523e5c77729c5) 517.472095ms ago: executing program 3 (id=958): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x0, 0x3f}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 404.693544ms ago: executing program 1 (id=959): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xc8, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x7ffffffe}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x48}}, 0x400c0c0) 332.604446ms ago: executing program 0 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x80) 279.637891ms ago: executing program 3 (id=961): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 193.854428ms ago: executing program 2 (id=962): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x228, 0x3a8, 0x3a8, 0x228, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x700, {}, [@inet=@rpfilter={{0x2000}, {0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@dccp={{}, {[0x4e24, 0x4e24], [0x4e21, 0x4e20], 0x0, 0x0, 0x1000, 0xa5}}, @common=@ipv6header={{0x28}, {0x0, 0x82, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x2, 0x3}, {0x4, 0x3, 0x2}, 0x401, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xff91) syz_emit_ethernet(0x76, &(0x7f00000006c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @private2, [@dstopts={0x0, 0x0, '\x00', [@generic={0x40}]}]}}}}}}}, 0x0) 185.709854ms ago: executing program 0 (id=963): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0xa355, 0xffffffff, 0xb28, 0xfffffffffffffd03, 0x101}}]}}}]}, 0x8c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @multicast2}, {0x20000010304, @local}, 0x12, {0x2, 0x4e24, @multicast1}, 'lo\x00'}) sendmsg$nl_netfilter(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30050000110a01"], 0x530}}, 0x40) 108.883717ms ago: executing program 1 (id=964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe}, {0x4, 0xfff1}, {0x9, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x38}}, 0x0) 97.561936ms ago: executing program 3 (id=965): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf0300000000000085000000a4000000b70000000000002895"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 0s ago: executing program 2 (id=966): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0xac9e, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x10000, '\x00', 0x0, r0, 0x0, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$inet6_mtu(r6, 0x29, 0x1e, &(0x7f0000000040), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r7) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fedbdf250500000008000200ea"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): s leftover after parsing attributes in process `syz.0.57'. [ 107.331592][ T6057] net_ratelimit: 3132 callbacks suppressed [ 107.331616][ T6057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.740985][ T6071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.68'. [ 107.778330][ T6071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.68'. [ 108.187891][ T6095] warning: `syz.1.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.221001][ T6095] netlink: 132 bytes leftover after parsing attributes in process `syz.1.76'. [ 108.233805][ T6103] netlink: 40 bytes leftover after parsing attributes in process `syz.0.78'. [ 108.243799][ T6102] netlink: 268 bytes leftover after parsing attributes in process `syz.3.77'. [ 108.608035][ T6112] xt_HMARK: spi-set and port-set can't be combined [ 108.683359][ T6114] tipc: Invalid UDP bearer configuration [ 108.683431][ T6114] tipc: Enabling of bearer rejected, failed to enable media [ 108.702393][ T6116] syz.0.82 uses obsolete (PF_INET,SOCK_PACKET) [ 108.713170][ T6107] can: request_module (can-proto-0) failed. [ 109.028119][ T6132] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 109.251192][ T6139] netlink: 'syz.2.87': attribute type 1 has an invalid length. [ 109.301847][ T6139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.530825][ T6154] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 109.767767][ T6160] veth1_macvtap: left promiscuous mode [ 109.800686][ T6160] macsec0: entered promiscuous mode [ 109.825791][ T6160] macsec0: entered allmulticast mode [ 109.916773][ T6164] netlink: 'syz.4.97': attribute type 1 has an invalid length. [ 109.992070][ T6171] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 110.095119][ T6175] Cannot find add_set index 0 as target [ 110.214706][ T6175] 8021q: VLANs not supported on ipvlan0 [ 110.247540][ T6170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.828858][ T6194] GUP no longer grows the stack in syz.4.106 (6194): 200000003000-20000000a000 (200000001000) [ 110.875650][ T6194] CPU: 0 UID: 0 PID: 6194 Comm: syz.4.106 Not tainted syzkaller #0 PREEMPT(full) [ 110.875680][ T6194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 110.875692][ T6194] Call Trace: [ 110.875700][ T6194] [ 110.875709][ T6194] dump_stack_lvl+0xe8/0x150 [ 110.875740][ T6194] __get_user_pages+0x2378/0x2720 [ 110.875771][ T6194] ? __gup_longterm_locked+0xc4e/0x1630 [ 110.875813][ T6194] ? __gup_longterm_locked+0xc4e/0x1630 [ 110.875837][ T6194] ? down_read_killable+0x1bb/0x340 [ 110.875868][ T6194] __gup_longterm_locked+0xdcf/0x1630 [ 110.875899][ T6194] ? lock_acquire+0x106/0x350 [ 110.875953][ T6194] gup_fast_fallback+0x1d84/0x20d0 [ 110.876013][ T6194] ? __pfx_gup_fast_fallback+0x10/0x10 [ 110.876047][ T6194] ? is_valid_gup_args+0x11f/0x200 [ 110.876076][ T6194] ? get_user_pages_fast+0x4d/0xb0 [ 110.876105][ T6194] __iov_iter_get_pages_alloc+0x370/0xa10 [ 110.876148][ T6194] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 110.876186][ T6194] iov_iter_get_pages2+0x5e/0xa0 [ 110.876223][ T6194] __se_sys_vmsplice+0x7c7/0x1620 [ 110.876275][ T6194] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 110.876310][ T6194] ? __pfx_futex_wake+0x10/0x10 [ 110.876350][ T6194] ? fdget+0x148/0x1e0 [ 110.876397][ T6194] ? put_files_struct+0x256/0x350 [ 110.876421][ T6194] ? 0xffffffffff600000 [ 110.876478][ T6194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.876503][ T6194] do_syscall_64+0x15f/0xf80 [ 110.876524][ T6194] ? trace_irq_disable+0x3b/0x140 [ 110.876557][ T6194] ? clear_bhb_loop+0x40/0x90 [ 110.876585][ T6194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.876607][ T6194] RIP: 0033:0x7f5131b9ce59 [ 110.876627][ T6194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.876645][ T6194] RSP: 002b:00007f51329a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 110.876668][ T6194] RAX: ffffffffffffffda RBX: 00007f5131e15fa0 RCX: 00007f5131b9ce59 [ 110.876684][ T6194] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 110.876698][ T6194] RBP: 00007f5131c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 110.876712][ T6194] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 110.876725][ T6194] R13: 00007f5131e16038 R14: 00007f5131e15fa0 R15: 00007ffebe925ca8 [ 110.876761][ T6194] [ 111.136561][ T6194] __nla_validate_parse: 6 callbacks suppressed [ 111.136582][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'. [ 111.230932][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'. [ 111.554951][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 111.813090][ T6213] netlink: 'syz.3.113': attribute type 1 has an invalid length. [ 111.963673][ T6216] SET target dimension over the limit! [ 112.011521][ T6218] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 112.077881][ T6218] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.114'. [ 112.180298][ T6215] bond1: (slave bridge1): making interface the new active one [ 112.230590][ T6215] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 112.317093][ T6222] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 112.811067][ T6220] netlink: 'syz.0.115': attribute type 11 has an invalid length. [ 112.829370][ T6238] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.120'. [ 112.852616][ T6220] netlink: 'syz.0.115': attribute type 5 has an invalid length. [ 112.879986][ T6220] netlink: 6548 bytes leftover after parsing attributes in process `syz.0.115'. [ 113.314751][ T6238] syz.4.120 (6238) used greatest stack depth: 18080 bytes left [ 113.332973][ T6243] syz.4.120 (6243) used greatest stack depth: 17248 bytes left [ 113.382408][ T6250] netlink: 'syz.1.121': attribute type 12 has an invalid length. [ 113.395473][ T6250] netlink: 'syz.1.121': attribute type 29 has an invalid length. [ 113.437521][ T6250] netlink: 148 bytes leftover after parsing attributes in process `syz.1.121'. [ 113.670776][ T6257] netlink: 'syz.0.123': attribute type 1 has an invalid length. [ 113.722527][ T6255] gretap0: entered promiscuous mode [ 113.741158][ T6255] macvlan2: entered promiscuous mode [ 113.766487][ T6255] gretap0: left promiscuous mode [ 114.039318][ T6264] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 114.170514][ T6267] netlink: 'syz.4.127': attribute type 4 has an invalid length. [ 114.892706][ T6292] netlink: 'syz.1.131': attribute type 1 has an invalid length. [ 115.196009][ T6286] syzkaller0: entered promiscuous mode [ 115.235855][ T6286] syzkaller0: entered allmulticast mode [ 115.633587][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.138'. [ 117.507223][ T6232] Set syz1 is full, maxelem 65536 reached [ 117.612928][ T6311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 117.937273][ T6318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.144'. [ 118.403098][ T6328] netlink: 60 bytes leftover after parsing attributes in process `syz.0.147'. [ 118.423066][ T6331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.148'. [ 118.445093][ T6332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.148'. [ 118.581929][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.152'. [ 118.999756][ T6359] netlink: 188 bytes leftover after parsing attributes in process `syz.2.156'. [ 119.473211][ T6379] openvswitch: netlink: Key 32 has unexpected len 8 expected 2 [ 119.821133][ T6395] netlink: 72 bytes leftover after parsing attributes in process `syz.0.166'. [ 119.830588][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 119.865342][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'. [ 120.002330][ T6406] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 120.013274][ T6406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.047330][ T6401] gretap0: entered promiscuous mode [ 120.052983][ T6401] macvlan2: entered promiscuous mode [ 120.095869][ T6401] gretap0: left promiscuous mode [ 120.254903][ T6418] openvswitch: netlink: Duplicate key (type 3). [ 120.960786][ T6437] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 121.136696][ T6448] openvswitch: netlink: Missing key (keys=40, expected=80) [ 121.202977][ T6443] macsec1: entered promiscuous mode [ 122.250405][ T6483] gretap0: entered promiscuous mode [ 122.258175][ T6483] macsec1: entered promiscuous mode [ 122.263898][ T6483] macsec1: entered allmulticast mode [ 122.270644][ T6483] gretap0: entered allmulticast mode [ 122.288126][ T6483] gretap0: left allmulticast mode [ 122.293621][ T6483] gretap0: left promiscuous mode [ 122.408879][ T6468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.794281][ T6495] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 122.943849][ T6502] __nla_validate_parse: 6 callbacks suppressed [ 122.943870][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 124.249562][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'. [ 124.546620][ T6561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 125.631192][ T6417] Set syz1 is full, maxelem 65536 reached [ 125.641967][ T6554] Cannot find add_set index 2 as target [ 126.913746][ T6637] sctp: [Deprecated]: syz.4.220 (pid 6637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.913746][ T6637] Use struct sctp_sack_info instead [ 126.934309][ T6634] netlink: 64 bytes leftover after parsing attributes in process `syz.4.220'. [ 126.948960][ T6634] netlink: 64 bytes leftover after parsing attributes in process `syz.4.220'. [ 126.984064][ T6636] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 127.272191][ T6649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.220'. [ 127.402917][ T6654] FAULT_INJECTION: forcing a failure. [ 127.402917][ T6654] name failslab, interval 1, probability 0, space 0, times 0 [ 127.422564][ T6654] CPU: 0 UID: 0 PID: 6654 Comm: syz.0.226 Not tainted syzkaller #0 PREEMPT(full) [ 127.422595][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.422609][ T6654] Call Trace: [ 127.422618][ T6654] [ 127.422628][ T6654] dump_stack_lvl+0xe8/0x150 [ 127.422671][ T6654] should_fail_ex+0x412/0x560 [ 127.422706][ T6654] should_failslab+0xa8/0x100 [ 127.422742][ T6654] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 127.422772][ T6654] ? __alloc_skb+0x186/0x7d0 [ 127.422801][ T6654] ? __alloc_skb+0x1d0/0x7d0 [ 127.422827][ T6654] ? __local_bh_enable_ip+0xd0/0x130 [ 127.422855][ T6654] __alloc_skb+0x1d0/0x7d0 [ 127.422890][ T6654] netlink_sendmsg+0x5d4/0xb40 [ 127.422933][ T6654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.422969][ T6654] ? aa_sock_msg_perm+0xf1/0x1b0 [ 127.423000][ T6654] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.423033][ T6654] ____sys_sendmsg+0x972/0x9f0 [ 127.423066][ T6654] ? __might_fault+0xaf/0x130 [ 127.423100][ T6654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.423143][ T6654] ? import_iovec+0x73/0xa0 [ 127.423178][ T6654] ___sys_sendmsg+0x2a5/0x360 [ 127.423217][ T6654] ? __lock_acquire+0x6b5/0x2cf0 [ 127.423244][ T6654] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.423308][ T6654] ? __fget_files+0x2a/0x420 [ 127.423333][ T6654] ? __fget_files+0x3a0/0x420 [ 127.423368][ T6654] __x64_sys_sendmsg+0x1bd/0x2a0 [ 127.423401][ T6654] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.423442][ T6654] ? __pfx_ksys_write+0x10/0x10 [ 127.423481][ T6654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.423505][ T6654] do_syscall_64+0x15f/0xf80 [ 127.423525][ T6654] ? trace_irq_disable+0x3b/0x140 [ 127.423555][ T6654] ? clear_bhb_loop+0x40/0x90 [ 127.423580][ T6654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.423601][ T6654] RIP: 0033:0x7f5dde59ce59 [ 127.423628][ T6654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.423645][ T6654] RSP: 002b:00007f5ddf373028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.423680][ T6654] RAX: ffffffffffffffda RBX: 00007f5dde815fa0 RCX: 00007f5dde59ce59 [ 127.423695][ T6654] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 127.423709][ T6654] RBP: 00007f5ddf373090 R08: 0000000000000000 R09: 0000000000000000 [ 127.423721][ T6654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.423732][ T6654] R13: 00007f5dde816038 R14: 00007f5dde815fa0 R15: 00007ffd55777758 [ 127.423765][ T6654] [ 127.831642][ T6662] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.230'. [ 127.846688][ T6664] gretap0: entered promiscuous mode [ 127.852106][ T6664] macsec1: entered promiscuous mode [ 127.857971][ T6664] macsec1: entered allmulticast mode [ 127.863319][ T6664] gretap0: entered allmulticast mode [ 127.872117][ T6662] openvswitch: netlink: Duplicate key (type 3). [ 127.882645][ T6664] gretap0: left allmulticast mode [ 127.888052][ T6664] gretap0: left promiscuous mode [ 128.390173][ T6680] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 128.401761][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'. [ 128.613878][ T6692] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 128.644458][ T6692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.753514][ T6700] gretap0: entered promiscuous mode [ 128.769697][ T6700] macvlan2: entered promiscuous mode [ 128.788468][ T6700] gretap0: left promiscuous mode [ 129.040355][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 129.077611][ T6711] netlink: 52 bytes leftover after parsing attributes in process `syz.4.245'. [ 129.210890][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 129.233453][ T6721] Bluetooth: MGMT ver 1.23 [ 129.412644][ T6725] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 129.853138][ T6737] ip6t_srh: unknown srh match flags 4000 [ 129.894004][ T6737] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 129.999384][ T6735] xt_ecn: cannot match TCP bits for non-tcp packets [ 130.284412][ T6755] netlink: 44 bytes leftover after parsing attributes in process `syz.4.261'. [ 130.346955][ T6757] syzkaller0: entered promiscuous mode [ 130.363001][ T6757] syzkaller0: entered allmulticast mode [ 130.387457][ T6757] tipc: Started in network mode [ 130.397882][ T6757] tipc: Node identity c2e03a3b4b79, cluster identity 4711 [ 130.408949][ T6757] tipc: Enabled bearer , priority 10 [ 130.440320][ T6756] tipc: Resetting bearer [ 130.581204][ T6756] tipc: Disabling bearer [ 130.687996][ T6775] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 130.837310][ T6783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.267'. [ 130.930346][ T6784] netlink: 260 bytes leftover after parsing attributes in process `syz.4.269'. [ 131.142671][ T6793] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 131.179245][ T6793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.192473][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'. [ 131.214741][ T6793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.272'. [ 131.228986][ T6800] netlink: 32 bytes leftover after parsing attributes in process `syz.2.274'. [ 131.331622][ T6806] FAULT_INJECTION: forcing a failure. [ 131.331622][ T6806] name failslab, interval 1, probability 0, space 0, times 0 [ 131.378837][ T6806] CPU: 1 UID: 0 PID: 6806 Comm: syz.3.275 Not tainted syzkaller #0 PREEMPT(full) [ 131.378867][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.378880][ T6806] Call Trace: [ 131.378888][ T6806] [ 131.378898][ T6806] dump_stack_lvl+0xe8/0x150 [ 131.378928][ T6806] should_fail_ex+0x412/0x560 [ 131.378964][ T6806] should_failslab+0xa8/0x100 [ 131.378997][ T6806] ? skb_clone+0x212/0x3a0 [ 131.379018][ T6806] kmem_cache_alloc_noprof+0x87/0x650 [ 131.379048][ T6806] ? __netlink_lookup+0xc6/0x8b0 [ 131.379075][ T6806] skb_clone+0x212/0x3a0 [ 131.379100][ T6806] __netlink_deliver_tap+0x404/0x850 [ 131.379145][ T6806] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.379179][ T6806] netlink_deliver_tap+0x19c/0x1b0 [ 131.379212][ T6806] netlink_unicast+0x730/0x8e0 [ 131.379253][ T6806] netlink_sendmsg+0x813/0xb40 [ 131.379304][ T6806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.379340][ T6806] ? aa_sock_msg_perm+0xf1/0x1b0 [ 131.379371][ T6806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 131.379406][ T6806] ____sys_sendmsg+0x972/0x9f0 [ 131.379438][ T6806] ? __might_fault+0xaf/0x130 [ 131.379473][ T6806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.379517][ T6806] ? import_iovec+0x73/0xa0 [ 131.379552][ T6806] ___sys_sendmsg+0x2a5/0x360 [ 131.379584][ T6806] ? __lock_acquire+0x6b5/0x2cf0 [ 131.379614][ T6806] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.379688][ T6806] ? __fget_files+0x2a/0x420 [ 131.379713][ T6806] ? __fget_files+0x3a0/0x420 [ 131.379755][ T6806] __x64_sys_sendmsg+0x1bd/0x2a0 [ 131.379792][ T6806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.379837][ T6806] ? __pfx_ksys_write+0x10/0x10 [ 131.379876][ T6806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.379899][ T6806] do_syscall_64+0x15f/0xf80 [ 131.379919][ T6806] ? trace_irq_disable+0x3b/0x140 [ 131.379952][ T6806] ? clear_bhb_loop+0x40/0x90 [ 131.379978][ T6806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.380000][ T6806] RIP: 0033:0x7fd51699ce59 [ 131.380020][ T6806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.380037][ T6806] RSP: 002b:00007fd514bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.380059][ T6806] RAX: ffffffffffffffda RBX: 00007fd516c15fa0 RCX: 00007fd51699ce59 [ 131.380074][ T6806] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 131.380087][ T6806] RBP: 00007fd514bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 131.380100][ T6806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.380112][ T6806] R13: 00007fd516c16038 R14: 00007fd516c15fa0 R15: 00007ffdb934a818 [ 131.380148][ T6806] [ 131.384507][ T6806] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 131.694528][ T6806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.015720][ T6823] syzkaller0: entered promiscuous mode [ 132.035106][ T6827] FAULT_INJECTION: forcing a failure. [ 132.035106][ T6827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.051529][ T6823] syzkaller0: entered allmulticast mode [ 132.072580][ T6827] CPU: 1 UID: 0 PID: 6827 Comm: syz.0.281 Not tainted syzkaller #0 PREEMPT(full) [ 132.072609][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.072622][ T6827] Call Trace: [ 132.072631][ T6827] [ 132.072640][ T6827] dump_stack_lvl+0xe8/0x150 [ 132.072671][ T6827] should_fail_ex+0x412/0x560 [ 132.072704][ T6827] _copy_from_user+0x2d/0xb0 [ 132.072737][ T6827] ___sys_sendmsg+0x1c6/0x360 [ 132.072776][ T6827] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.072807][ T6827] ? __lock_acquire+0x6b5/0x2cf0 [ 132.072883][ T6827] __sys_sendmmsg+0x27c/0x4e0 [ 132.072923][ T6827] ? __pfx___sys_sendmmsg+0x10/0x10 [ 132.072954][ T6827] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 132.073003][ T6827] ? ksys_write+0x242/0x270 [ 132.073038][ T6827] ? __pfx_ksys_write+0x10/0x10 [ 132.073075][ T6827] __x64_sys_sendmmsg+0xa0/0xc0 [ 132.073109][ T6827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.073131][ T6827] do_syscall_64+0x15f/0xf80 [ 132.073151][ T6827] ? trace_irq_disable+0x3b/0x140 [ 132.073183][ T6827] ? clear_bhb_loop+0x40/0x90 [ 132.073210][ T6827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.073231][ T6827] RIP: 0033:0x7f5dde59ce59 [ 132.073251][ T6827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.073269][ T6827] RSP: 002b:00007f5ddf373028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 132.073300][ T6827] RAX: ffffffffffffffda RBX: 00007f5dde815fa0 RCX: 00007f5dde59ce59 [ 132.073315][ T6827] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 132.073329][ T6827] RBP: 00007f5ddf373090 R08: 0000000000000000 R09: 0000000000000000 [ 132.073341][ T6827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.073354][ T6827] R13: 00007f5dde816038 R14: 00007f5dde815fa0 R15: 00007ffd55777758 [ 132.073388][ T6827] [ 132.311256][ T6825] tipc: Started in network mode [ 132.319275][ T6825] tipc: Node identity 4a67cdcf98ef, cluster identity 4711 [ 132.363927][ T6825] tipc: Enabled bearer , priority 10 [ 132.391000][ T6821] tipc: Resetting bearer [ 132.419320][ T6821] tipc: Disabling bearer [ 132.592133][ T6849] syzkaller0: entered promiscuous mode [ 132.617112][ T6849] syzkaller0: entered allmulticast mode [ 132.640998][ T6855] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 132.659571][ T6858] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 132.741501][ T6861] bond1: (slave bridge2): making interface the new active one [ 132.750017][ T6861] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 132.764993][ T6858] SET target dimension over the limit! [ 132.793018][ T6858] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 132.940902][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.949363][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.072171][ T6867] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 133.091356][ T6867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.467728][ T6880] netlink: 'syz.4.298': attribute type 1 has an invalid length. [ 133.521603][ T6882] macsec2: entered promiscuous mode [ 133.534645][ T6882] macsec2: entered allmulticast mode [ 133.548709][ T6882] gretap0: entered allmulticast mode [ 133.572079][ T6882] gretap0: left allmulticast mode [ 133.678459][ T6880] bond1: entered promiscuous mode [ 133.684165][ T6880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.801536][ T6900] __nla_validate_parse: 1 callbacks suppressed [ 133.801558][ T6900] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.303'. [ 133.854423][ T6901] syzkaller0: entered promiscuous mode [ 133.861586][ T6901] syzkaller0: entered allmulticast mode [ 133.870057][ T6900] openvswitch: netlink: Duplicate key (type 3). [ 133.894153][ T6885] tipc: Started in network mode [ 133.902916][ T6885] tipc: Node identity 9224f9a23532, cluster identity 4711 [ 133.922770][ T6885] tipc: Enabled bearer , priority 10 [ 133.954416][ T6883] tipc: Resetting bearer [ 134.071910][ T6883] tipc: Disabling bearer [ 134.309575][ T6917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.307'. [ 134.350459][ T6917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.307'. [ 134.369843][ T6921] ip6tnl1: entered allmulticast mode [ 134.442364][ T1099] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 134.473267][ T5759] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 134.490790][ T1099] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 134.584846][ T6926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 134.622298][ T6926] syzkaller0: entered promiscuous mode [ 134.642023][ T6926] syzkaller0: entered allmulticast mode [ 134.679315][ T6926] tipc: Enabled bearer , priority 0 [ 134.695864][ T6925] tipc: Resetting bearer [ 134.731184][ T6925] tipc: Disabling bearer [ 134.807861][ T6945] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.315'. [ 134.840817][ T6945] openvswitch: netlink: Duplicate key (type 3). [ 134.885485][ T5759] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.239224][ T6967] FAULT_INJECTION: forcing a failure. [ 135.239224][ T6967] name failslab, interval 1, probability 0, space 0, times 0 [ 135.332949][ T6973] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 135.340607][ T5759] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 135.350579][ T6967] CPU: 1 UID: 0 PID: 6967 Comm: syz.2.323 Not tainted syzkaller #0 PREEMPT(full) [ 135.350609][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.350623][ T6967] Call Trace: [ 135.350631][ T6967] [ 135.350640][ T6967] dump_stack_lvl+0xe8/0x150 [ 135.350672][ T6967] should_fail_ex+0x412/0x560 [ 135.350711][ T6967] should_failslab+0xa8/0x100 [ 135.350748][ T6967] __kmalloc_cache_noprof+0x88/0x660 [ 135.350780][ T6967] ? ovs_flow_cmd_new+0x356/0xe80 [ 135.350818][ T6967] ovs_flow_cmd_new+0x356/0xe80 [ 135.350848][ T6967] ? kasan_save_track+0x3e/0x80 [ 135.350887][ T6967] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 135.350980][ T6967] ? __nla_parse+0x40/0x60 [ 135.351018][ T6967] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 135.351045][ T6967] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 135.351080][ T6967] genl_family_rcv_msg_doit+0x22a/0x330 [ 135.351114][ T6967] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 135.351155][ T6967] ? bpf_lsm_capable+0x9/0x20 [ 135.351176][ T6967] ? security_capable+0x7e/0x2c0 [ 135.351210][ T6967] genl_rcv_msg+0x61c/0x7a0 [ 135.351242][ T6967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.351265][ T6967] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 135.351297][ T6967] ? __pfx_ref_tracker_free+0x10/0x10 [ 135.351338][ T6967] netlink_rcv_skb+0x232/0x4b0 [ 135.351371][ T6967] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.351397][ T6967] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.351455][ T6967] ? down_read+0x270/0x2e0 [ 135.351477][ T6967] ? genl_rcv+0xd/0x40 [ 135.351502][ T6967] genl_rcv+0x28/0x40 [ 135.351524][ T6967] netlink_unicast+0x75c/0x8e0 [ 135.351565][ T6967] netlink_sendmsg+0x813/0xb40 [ 135.351610][ T6967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.351647][ T6967] ? aa_sock_msg_perm+0xf1/0x1b0 [ 135.351678][ T6967] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 135.351711][ T6967] ____sys_sendmsg+0x972/0x9f0 [ 135.351745][ T6967] ? __might_fault+0xaf/0x130 [ 135.351780][ T6967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.351825][ T6967] ? import_iovec+0x73/0xa0 [ 135.351861][ T6967] ___sys_sendmsg+0x2a5/0x360 [ 135.351893][ T6967] ? __lock_acquire+0x6b5/0x2cf0 [ 135.351922][ T6967] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.351996][ T6967] ? __fget_files+0x2a/0x420 [ 135.352022][ T6967] ? __fget_files+0x3a0/0x420 [ 135.352060][ T6967] __x64_sys_sendmsg+0x1bd/0x2a0 [ 135.352098][ T6967] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.352143][ T6967] ? __pfx_ksys_write+0x10/0x10 [ 135.352186][ T6967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.352210][ T6967] do_syscall_64+0x15f/0xf80 [ 135.352230][ T6967] ? trace_irq_disable+0x3b/0x140 [ 135.352262][ T6967] ? clear_bhb_loop+0x40/0x90 [ 135.352288][ T6967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.352309][ T6967] RIP: 0033:0x7fd019d9ce59 [ 135.352330][ T6967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.352347][ T6967] RSP: 002b:00007fd01ab95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.352371][ T6967] RAX: ffffffffffffffda RBX: 00007fd01a015fa0 RCX: 00007fd019d9ce59 [ 135.352386][ T6967] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 135.352400][ T6967] RBP: 00007fd01ab95090 R08: 0000000000000000 R09: 0000000000000000 [ 135.352412][ T6967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.352425][ T6967] R13: 00007fd01a016038 R14: 00007fd01a015fa0 R15: 00007ffe585f53b8 [ 135.352468][ T6967] [ 135.950318][ T6981] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.328'. [ 136.000955][ T6981] net_ratelimit: 1 callbacks suppressed [ 136.000974][ T6981] openvswitch: netlink: Duplicate key (type 3). [ 136.021633][ T6979] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 136.075383][ T6979] CPU: 1 UID: 0 PID: 6979 Comm: syz.2.327 Not tainted syzkaller #0 PREEMPT(full) [ 136.075419][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.075433][ T6979] Call Trace: [ 136.075442][ T6979] [ 136.075451][ T6979] dump_stack_lvl+0xe8/0x150 [ 136.075483][ T6979] sysfs_warn_dup+0x8e/0xa0 [ 136.075513][ T6979] sysfs_do_create_link_sd+0xc0/0x110 [ 136.075546][ T6979] device_add_class_symlinks+0x1cf/0x240 [ 136.075579][ T6979] device_add+0x475/0xbb0 [ 136.075612][ T6979] wiphy_register+0x1fb1/0x2fe0 [ 136.075654][ T6979] ? __pfx_wiphy_register+0x10/0x10 [ 136.075676][ T6979] ? __pfx_netdev_run_todo+0x10/0x10 [ 136.075701][ T6979] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 136.075739][ T6979] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 136.075783][ T6979] ieee80211_register_hw+0x3c53/0x4910 [ 136.075823][ T6979] ? ieee80211_register_hw+0x18f1/0x4910 [ 136.075883][ T6979] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 136.075913][ T6979] ? __asan_memset+0x22/0x50 [ 136.075942][ T6979] ? __hrtimer_setup+0x1b7/0x260 [ 136.075970][ T6979] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 136.076005][ T6979] mac80211_hwsim_new_radio+0x3327/0x57e0 [ 136.076072][ T6979] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 136.076100][ T6979] ? kstrndup+0xbf/0x160 [ 136.076134][ T6979] hwsim_new_radio_nl+0xe20/0x26e0 [ 136.076161][ T6979] ? unwind_next_frame+0xa6/0x2550 [ 136.076209][ T6979] ? is_bpf_text_address+0x26/0x2b0 [ 136.076247][ T6979] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 136.076276][ T6979] ? __kernel_text_address+0xd/0x30 [ 136.076308][ T6979] ? unwind_get_return_address+0x4d/0x90 [ 136.076335][ T6979] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 136.076369][ T6979] ? arch_stack_walk+0xfb/0x150 [ 136.076420][ T6979] ? stack_trace_save+0xa9/0x100 [ 136.076455][ T6979] ? __pfx_stack_trace_save+0x10/0x10 [ 136.076492][ T6979] ? stack_depot_save_flags+0x33/0x810 [ 136.076537][ T6979] ? __nla_validate_parse+0x2480/0x2dc0 [ 136.076569][ T6979] ? ____sys_sendmsg+0x972/0x9f0 [ 136.076600][ T6979] ? ___sys_sendmsg+0x2a5/0x360 [ 136.076654][ T6979] ? __pfx___nla_validate_parse+0x10/0x10 [ 136.076709][ T6979] ? rcu_is_watching+0x15/0xb0 [ 136.076736][ T6979] ? trace_kmalloc+0x2a/0xf0 [ 136.076773][ T6979] ? __nla_parse+0x40/0x60 [ 136.076811][ T6979] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 136.076838][ T6979] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 136.076874][ T6979] genl_family_rcv_msg_doit+0x22a/0x330 [ 136.076911][ T6979] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 136.076952][ T6979] ? bpf_lsm_capable+0x9/0x20 [ 136.076973][ T6979] ? security_capable+0x7e/0x2c0 [ 136.077009][ T6979] genl_rcv_msg+0x61c/0x7a0 [ 136.077043][ T6979] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.077069][ T6979] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 136.077115][ T6979] netlink_rcv_skb+0x232/0x4b0 [ 136.077150][ T6979] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.077176][ T6979] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.077228][ T6979] ? down_read+0x270/0x2e0 [ 136.077251][ T6979] ? genl_rcv+0xd/0x40 [ 136.077276][ T6979] genl_rcv+0x28/0x40 [ 136.077298][ T6979] netlink_unicast+0x75c/0x8e0 [ 136.077339][ T6979] netlink_sendmsg+0x813/0xb40 [ 136.077381][ T6979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.077428][ T6979] ? aa_sock_msg_perm+0xf1/0x1b0 [ 136.077459][ T6979] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 136.077494][ T6979] ____sys_sendmsg+0x972/0x9f0 [ 136.077529][ T6979] ? __might_fault+0xaf/0x130 [ 136.077566][ T6979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.077613][ T6979] ? import_iovec+0x73/0xa0 [ 136.077651][ T6979] ___sys_sendmsg+0x2a5/0x360 [ 136.077684][ T6979] ? __lock_acquire+0x6b5/0x2cf0 [ 136.077714][ T6979] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.077758][ T6979] ? futex_wait+0x2a2/0x390 [ 136.077822][ T6979] ? __fget_files+0x2a/0x420 [ 136.077850][ T6979] ? __fget_files+0x3a0/0x420 [ 136.077890][ T6979] __x64_sys_sendmsg+0x1bd/0x2a0 [ 136.077929][ T6979] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.077975][ T6979] ? rcu_is_watching+0x15/0xb0 [ 136.078014][ T6979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.078039][ T6979] do_syscall_64+0x15f/0xf80 [ 136.078060][ T6979] ? trace_irq_disable+0x3b/0x140 [ 136.078094][ T6979] ? clear_bhb_loop+0x40/0x90 [ 136.078122][ T6979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.078143][ T6979] RIP: 0033:0x7fd019d9ce59 [ 136.078165][ T6979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.078183][ T6979] RSP: 002b:00007fd01ab95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.078208][ T6979] RAX: ffffffffffffffda RBX: 00007fd01a015fa0 RCX: 00007fd019d9ce59 [ 136.078224][ T6979] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 136.078238][ T6979] RBP: 00007fd019e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 136.078252][ T6979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.078265][ T6979] R13: 00007fd01a016038 R14: 00007fd01a015fa0 R15: 00007ffe585f53b8 [ 136.078303][ T6979] [ 136.626851][ T6990] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 136.861837][ T6988] syzkaller0: entered promiscuous mode [ 136.862150][ T6994] netlink: 'syz.1.330': attribute type 1 has an invalid length. [ 136.871297][ T6988] syzkaller0: entered allmulticast mode [ 136.891752][ T6994] netlink: 1 bytes leftover after parsing attributes in process `syz.1.330'. [ 136.968159][ T7002] netlink: 48 bytes leftover after parsing attributes in process `syz.4.333'. [ 137.189633][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 137.315668][ T7013] FAULT_INJECTION: forcing a failure. [ 137.315668][ T7013] name failslab, interval 1, probability 0, space 0, times 0 [ 137.360475][ T7013] CPU: 0 UID: 0 PID: 7013 Comm: syz.0.337 Not tainted syzkaller #0 PREEMPT(full) [ 137.360505][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.360518][ T7013] Call Trace: [ 137.360527][ T7013] [ 137.360536][ T7013] dump_stack_lvl+0xe8/0x150 [ 137.360568][ T7013] should_fail_ex+0x412/0x560 [ 137.360613][ T7013] should_failslab+0xa8/0x100 [ 137.360650][ T7013] __kmalloc_cache_noprof+0x88/0x660 [ 137.360682][ T7013] ? ovs_flow_cmd_new+0x356/0xe80 [ 137.360720][ T7013] ovs_flow_cmd_new+0x356/0xe80 [ 137.360749][ T7013] ? kasan_save_track+0x3e/0x80 [ 137.360787][ T7013] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 137.360879][ T7013] ? __nla_parse+0x40/0x60 [ 137.360916][ T7013] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 137.360943][ T7013] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 137.360977][ T7013] genl_family_rcv_msg_doit+0x22a/0x330 [ 137.361010][ T7013] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 137.361050][ T7013] ? bpf_lsm_capable+0x9/0x20 [ 137.361071][ T7013] ? security_capable+0x7e/0x2c0 [ 137.361106][ T7013] genl_rcv_msg+0x61c/0x7a0 [ 137.361139][ T7013] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.361163][ T7013] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 137.361195][ T7013] ? __pfx_ref_tracker_free+0x10/0x10 [ 137.361241][ T7013] netlink_rcv_skb+0x232/0x4b0 [ 137.361274][ T7013] ? __pfx_genl_rcv_msg+0x10/0x10 [ 137.361301][ T7013] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.361350][ T7013] ? down_read+0x270/0x2e0 [ 137.361371][ T7013] ? genl_rcv+0xd/0x40 [ 137.361396][ T7013] genl_rcv+0x28/0x40 [ 137.361418][ T7013] netlink_unicast+0x75c/0x8e0 [ 137.361459][ T7013] netlink_sendmsg+0x813/0xb40 [ 137.361500][ T7013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.361538][ T7013] ? aa_sock_msg_perm+0xf1/0x1b0 [ 137.361568][ T7013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 137.361602][ T7013] ____sys_sendmsg+0x972/0x9f0 [ 137.361646][ T7013] ? __might_fault+0xaf/0x130 [ 137.361682][ T7013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.361725][ T7013] ? import_iovec+0x73/0xa0 [ 137.361762][ T7013] ___sys_sendmsg+0x2a5/0x360 [ 137.361795][ T7013] ? __lock_acquire+0x6b5/0x2cf0 [ 137.361824][ T7013] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.361898][ T7013] ? __fget_files+0x2a/0x420 [ 137.361924][ T7013] ? __fget_files+0x3a0/0x420 [ 137.361962][ T7013] __x64_sys_sendmsg+0x1bd/0x2a0 [ 137.362000][ T7013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.362046][ T7013] ? __pfx_ksys_write+0x10/0x10 [ 137.362086][ T7013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.362110][ T7013] do_syscall_64+0x15f/0xf80 [ 137.362130][ T7013] ? trace_irq_disable+0x3b/0x140 [ 137.362164][ T7013] ? clear_bhb_loop+0x40/0x90 [ 137.362191][ T7013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.362213][ T7013] RIP: 0033:0x7f5dde59ce59 [ 137.362233][ T7013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.362251][ T7013] RSP: 002b:00007f5ddf373028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.362274][ T7013] RAX: ffffffffffffffda RBX: 00007f5dde815fa0 RCX: 00007f5dde59ce59 [ 137.362300][ T7013] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 137.362314][ T7013] RBP: 00007f5ddf373090 R08: 0000000000000000 R09: 0000000000000000 [ 137.362327][ T7013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.362347][ T7013] R13: 00007f5dde816038 R14: 00007f5dde815fa0 R15: 00007ffd55777758 [ 137.362398][ T7013] [ 137.768579][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 138.296641][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 139.505245][ T7033] tipc: Enabling of bearer rejected, failed to enable media [ 139.893184][ T7049] netlink: 'syz.0.345': attribute type 1 has an invalid length. [ 140.025929][ T7054] SET target dimension over the limit! [ 140.238119][ T7051] bond2: (slave bridge1): making interface the new active one [ 140.283726][ T7051] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 140.370895][ T7070] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 140.405831][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 140.441184][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 140.487367][ T7078] netlink: 'syz.2.351': attribute type 21 has an invalid length. [ 140.516090][ T7078] netlink: 128 bytes leftover after parsing attributes in process `syz.2.351'. [ 140.557151][ T7078] netlink: 'syz.2.351': attribute type 5 has an invalid length. [ 140.594272][ T7078] netlink: 3 bytes leftover after parsing attributes in process `syz.2.351'. [ 141.171001][ T7107] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.358'. [ 141.199401][ T7107] openvswitch: netlink: Duplicate key (type 3). [ 141.248422][ T7110] netlink: 'syz.0.357': attribute type 1 has an invalid length. [ 141.282252][ T7110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.891033][ T7134] syzkaller0: entered promiscuous mode [ 141.918838][ T7134] syzkaller0: entered allmulticast mode [ 141.944793][ T7135] tipc: Started in network mode [ 141.960616][ T7135] tipc: Node identity fad7ae8763e1, cluster identity 4711 [ 141.983979][ T7135] tipc: Enabled bearer , priority 10 [ 142.113176][ T7148] netlink: 'syz.2.363': attribute type 1 has an invalid length. [ 142.146043][ T7133] tipc: Resetting bearer [ 142.266048][ T7133] tipc: Disabling bearer [ 142.560343][ T7164] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.371'. [ 142.604548][ T7164] openvswitch: netlink: Duplicate key (type 3). [ 142.614123][ T4943] Bluetooth: hci2: link tx timeout [ 142.621203][ T4943] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.637132][ T4943] Bluetooth: hci2: link tx timeout [ 142.642838][ T4943] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.651277][ T4943] Bluetooth: hci2: link tx timeout [ 142.656638][ T4943] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.666454][ T4943] Bluetooth: hci2: link tx timeout [ 142.672896][ T4943] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.682202][ T4943] Bluetooth: hci2: link tx timeout [ 142.687547][ T4943] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.696226][ T4943] Bluetooth: hci2: link tx timeout [ 142.701997][ T4943] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.709809][ T4943] Bluetooth: hci2: link tx timeout [ 142.714988][ T4943] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.726661][ T4943] Bluetooth: hci2: link tx timeout [ 142.731854][ T4943] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.739935][ T4943] Bluetooth: hci2: link tx timeout [ 142.745116][ T4943] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.753096][ T4943] Bluetooth: hci2: link tx timeout [ 142.760842][ T4943] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.773043][ T4943] Bluetooth: hci2: link tx timeout [ 142.778341][ T4943] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.787259][ T4943] Bluetooth: hci2: link tx timeout [ 142.793853][ T4943] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.802855][ T4943] Bluetooth: hci2: link tx timeout [ 142.808086][ T4943] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 142.981608][ T7174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.029835][ T7176] netlink: 720 bytes leftover after parsing attributes in process `syz.3.376'. [ 143.151328][ T7179] netlink: 48 bytes leftover after parsing attributes in process `syz.4.374'. [ 143.212053][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 143.794110][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 143.892835][ T7209] sctp: [Deprecated]: syz.2.387 (pid 7209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 143.892835][ T7209] Use struct sctp_sack_info instead [ 144.592192][ T7220] syzkaller1: entered promiscuous mode [ 144.620692][ T7220] syzkaller1: entered allmulticast mode [ 144.672886][ T7222] xt_hashlimit: size too large, truncated to 1048576 [ 144.680581][ T7222] xt_hashlimit: invalid interval [ 144.699390][ T4943] Bluetooth: hci2: command 0x0406 tx timeout [ 144.708015][ T7220] openvswitch: netlink: Flow key attr not present in new flow. [ 145.040903][ T7244] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 145.050492][ T7244] CPU: 0 UID: 0 PID: 7244 Comm: syz.0.397 Not tainted syzkaller #0 PREEMPT(full) [ 145.050522][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.050536][ T7244] Call Trace: [ 145.050546][ T7244] [ 145.050555][ T7244] dump_stack_lvl+0xe8/0x150 [ 145.050590][ T7244] sysfs_warn_dup+0x8e/0xa0 [ 145.050620][ T7244] sysfs_do_create_link_sd+0xc0/0x110 [ 145.050651][ T7244] device_add_class_symlinks+0x1cf/0x240 [ 145.050685][ T7244] device_add+0x475/0xbb0 [ 145.050716][ T7244] wiphy_register+0x1fb1/0x2fe0 [ 145.050759][ T7244] ? __pfx_wiphy_register+0x10/0x10 [ 145.050781][ T7244] ? __pfx_netdev_run_todo+0x10/0x10 [ 145.050807][ T7244] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 145.050845][ T7244] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 145.050889][ T7244] ieee80211_register_hw+0x3c53/0x4910 [ 145.050929][ T7244] ? ieee80211_register_hw+0x18f1/0x4910 [ 145.050988][ T7244] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 145.051018][ T7244] ? __asan_memset+0x22/0x50 [ 145.051046][ T7244] ? __hrtimer_setup+0x1b7/0x260 [ 145.051074][ T7244] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 145.051109][ T7244] mac80211_hwsim_new_radio+0x3327/0x57e0 [ 145.051176][ T7244] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 145.051205][ T7244] ? kstrndup+0xbf/0x160 [ 145.051239][ T7244] hwsim_new_radio_nl+0xe20/0x26e0 [ 145.051265][ T7244] ? unwind_next_frame+0xa6/0x2550 [ 145.051322][ T7244] ? is_bpf_text_address+0x26/0x2b0 [ 145.051361][ T7244] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 145.051391][ T7244] ? __kernel_text_address+0xd/0x30 [ 145.051422][ T7244] ? unwind_get_return_address+0x4d/0x90 [ 145.051450][ T7244] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 145.051489][ T7244] ? arch_stack_walk+0xfb/0x150 [ 145.051532][ T7244] ? stack_trace_save+0xa9/0x100 [ 145.051565][ T7244] ? __pfx_stack_trace_save+0x10/0x10 [ 145.051603][ T7244] ? stack_depot_save_flags+0x33/0x810 [ 145.051651][ T7244] ? __nla_validate_parse+0x2480/0x2dc0 [ 145.051683][ T7244] ? ____sys_sendmsg+0x972/0x9f0 [ 145.051716][ T7244] ? ___sys_sendmsg+0x2a5/0x360 [ 145.051772][ T7244] ? __pfx___nla_validate_parse+0x10/0x10 [ 145.051829][ T7244] ? rcu_is_watching+0x15/0xb0 [ 145.051857][ T7244] ? trace_kmalloc+0x2a/0xf0 [ 145.051895][ T7244] ? __nla_parse+0x40/0x60 [ 145.051933][ T7244] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 145.051960][ T7244] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 145.051997][ T7244] genl_family_rcv_msg_doit+0x22a/0x330 [ 145.052032][ T7244] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 145.052075][ T7244] ? bpf_lsm_capable+0x9/0x20 [ 145.052097][ T7244] ? security_capable+0x7e/0x2c0 [ 145.052134][ T7244] genl_rcv_msg+0x61c/0x7a0 [ 145.052167][ T7244] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.052190][ T7244] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 145.052234][ T7244] netlink_rcv_skb+0x232/0x4b0 [ 145.052268][ T7244] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.052305][ T7244] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.052359][ T7244] ? down_read+0x270/0x2e0 [ 145.052383][ T7244] ? genl_rcv+0xd/0x40 [ 145.052410][ T7244] genl_rcv+0x28/0x40 [ 145.052433][ T7244] netlink_unicast+0x75c/0x8e0 [ 145.052478][ T7244] netlink_sendmsg+0x813/0xb40 [ 145.052524][ T7244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.052562][ T7244] ? aa_sock_msg_perm+0xf1/0x1b0 [ 145.052594][ T7244] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 145.052628][ T7244] ____sys_sendmsg+0x972/0x9f0 [ 145.052661][ T7244] ? __might_fault+0xaf/0x130 [ 145.052698][ T7244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.052744][ T7244] ? import_iovec+0x73/0xa0 [ 145.052783][ T7244] ___sys_sendmsg+0x2a5/0x360 [ 145.052817][ T7244] ? __lock_acquire+0x6b5/0x2cf0 [ 145.052847][ T7244] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.052891][ T7244] ? futex_wake+0x4ac/0x580 [ 145.052955][ T7244] ? __fget_files+0x2a/0x420 [ 145.052981][ T7244] ? __fget_files+0x3a0/0x420 [ 145.053022][ T7244] __x64_sys_sendmsg+0x1bd/0x2a0 [ 145.053061][ T7244] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.053108][ T7244] ? rcu_is_watching+0x15/0xb0 [ 145.053147][ T7244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.053171][ T7244] do_syscall_64+0x15f/0xf80 [ 145.053191][ T7244] ? trace_irq_disable+0x3b/0x140 [ 145.053225][ T7244] ? clear_bhb_loop+0x40/0x90 [ 145.053254][ T7244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.053276][ T7244] RIP: 0033:0x7f5dde59ce59 [ 145.053307][ T7244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.053325][ T7244] RSP: 002b:00007f5ddc7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.053350][ T7244] RAX: ffffffffffffffda RBX: 00007f5dde816090 RCX: 00007f5dde59ce59 [ 145.053366][ T7244] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 145.053380][ T7244] RBP: 00007f5dde632d6f R08: 0000000000000000 R09: 0000000000000000 [ 145.053394][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.053407][ T7244] R13: 00007f5dde816128 R14: 00007f5dde816090 R15: 00007ffd55777758 [ 145.053445][ T7244] [ 145.735467][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 146.288981][ T7267] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 146.404169][ T7271] __nla_validate_parse: 7 callbacks suppressed [ 146.404189][ T7271] netlink: 52 bytes leftover after parsing attributes in process `syz.1.403'. [ 146.431532][ T7267] bond3: entered promiscuous mode [ 146.437544][ T7267] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.445438][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 146.574119][ T7272] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.593703][ T7272] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 146.623168][ T7272] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 146.667843][ T7272] bond3: (slave vti0): making interface the new active one [ 146.697264][ T7272] vti0: entered promiscuous mode [ 146.712270][ T7272] bond3: (slave vti0): Enslaving as an active interface with an up link [ 147.525133][ T7317] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 147.587328][ T7317] CPU: 1 UID: 0 PID: 7317 Comm: syz.0.411 Not tainted syzkaller #0 PREEMPT(full) [ 147.587360][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.587375][ T7317] Call Trace: [ 147.587384][ T7317] [ 147.587394][ T7317] dump_stack_lvl+0xe8/0x150 [ 147.587429][ T7317] sysfs_warn_dup+0x8e/0xa0 [ 147.587464][ T7317] sysfs_do_create_link_sd+0xc0/0x110 [ 147.587496][ T7317] device_add_class_symlinks+0x1cf/0x240 [ 147.587529][ T7317] device_add+0x475/0xbb0 [ 147.587561][ T7317] wiphy_register+0x1fb1/0x2fe0 [ 147.587618][ T7317] ? __pfx_wiphy_register+0x10/0x10 [ 147.587642][ T7317] ? __pfx_netdev_run_todo+0x10/0x10 [ 147.587667][ T7317] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 147.587706][ T7317] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 147.587748][ T7317] ieee80211_register_hw+0x3c53/0x4910 [ 147.587789][ T7317] ? ieee80211_register_hw+0x18f1/0x4910 [ 147.587846][ T7317] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 147.587876][ T7317] ? __asan_memset+0x22/0x50 [ 147.587903][ T7317] ? __hrtimer_setup+0x1b7/0x260 [ 147.587931][ T7317] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 147.587993][ T7317] mac80211_hwsim_new_radio+0x3327/0x57e0 [ 147.588060][ T7317] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 147.588088][ T7317] ? kstrndup+0xbf/0x160 [ 147.588121][ T7317] hwsim_new_radio_nl+0xe20/0x26e0 [ 147.588147][ T7317] ? unwind_next_frame+0xa6/0x2550 [ 147.588193][ T7317] ? is_bpf_text_address+0x26/0x2b0 [ 147.588230][ T7317] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 147.588259][ T7317] ? __kernel_text_address+0xd/0x30 [ 147.588290][ T7317] ? unwind_get_return_address+0x4d/0x90 [ 147.588318][ T7317] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 147.588354][ T7317] ? arch_stack_walk+0xfb/0x150 [ 147.588398][ T7317] ? stack_trace_save+0xa9/0x100 [ 147.588432][ T7317] ? __pfx_stack_trace_save+0x10/0x10 [ 147.588471][ T7317] ? stack_depot_save_flags+0x33/0x810 [ 147.588503][ T7317] ? __pfx_css_rstat_updated+0x10/0x10 [ 147.588539][ T7317] ? __nla_validate_parse+0x2480/0x2dc0 [ 147.588572][ T7317] ? ____sys_sendmsg+0x972/0x9f0 [ 147.588614][ T7317] ? ___sys_sendmsg+0x2a5/0x360 [ 147.588670][ T7317] ? __pfx___nla_validate_parse+0x10/0x10 [ 147.588747][ T7317] ? rcu_is_watching+0x15/0xb0 [ 147.588790][ T7317] ? trace_kmalloc+0x2a/0xf0 [ 147.588830][ T7317] ? __nla_parse+0x40/0x60 [ 147.588868][ T7317] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 147.588896][ T7317] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 147.588944][ T7317] genl_family_rcv_msg_doit+0x22a/0x330 [ 147.588980][ T7317] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 147.589023][ T7317] ? bpf_lsm_capable+0x9/0x20 [ 147.589045][ T7317] ? security_capable+0x7e/0x2c0 [ 147.589083][ T7317] genl_rcv_msg+0x61c/0x7a0 [ 147.589117][ T7317] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.589142][ T7317] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 147.589189][ T7317] netlink_rcv_skb+0x232/0x4b0 [ 147.589223][ T7317] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.589251][ T7317] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.589303][ T7317] ? down_read+0x270/0x2e0 [ 147.589326][ T7317] ? genl_rcv+0xd/0x40 [ 147.589353][ T7317] genl_rcv+0x28/0x40 [ 147.589376][ T7317] netlink_unicast+0x75c/0x8e0 [ 147.589420][ T7317] netlink_sendmsg+0x813/0xb40 [ 147.589466][ T7317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.589504][ T7317] ? aa_sock_msg_perm+0xf1/0x1b0 [ 147.589537][ T7317] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.589572][ T7317] ____sys_sendmsg+0x972/0x9f0 [ 147.589615][ T7317] ? __might_fault+0xaf/0x130 [ 147.589654][ T7317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.589702][ T7317] ? import_iovec+0x73/0xa0 [ 147.589746][ T7317] ___sys_sendmsg+0x2a5/0x360 [ 147.589780][ T7317] ? __lock_acquire+0x6b5/0x2cf0 [ 147.589810][ T7317] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.589853][ T7317] ? futex_wake+0x4ac/0x580 [ 147.589914][ T7317] ? __fget_files+0x2a/0x420 [ 147.589941][ T7317] ? __fget_files+0x3a0/0x420 [ 147.589982][ T7317] __x64_sys_sendmsg+0x1bd/0x2a0 [ 147.590021][ T7317] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.590065][ T7317] ? rcu_is_watching+0x15/0xb0 [ 147.590113][ T7317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.590139][ T7317] do_syscall_64+0x15f/0xf80 [ 147.590160][ T7317] ? trace_irq_disable+0x3b/0x140 [ 147.590195][ T7317] ? clear_bhb_loop+0x40/0x90 [ 147.590224][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.590246][ T7317] RIP: 0033:0x7f5dde59ce59 [ 147.590265][ T7317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.590283][ T7317] RSP: 002b:00007f5ddc7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.590307][ T7317] RAX: ffffffffffffffda RBX: 00007f5dde816090 RCX: 00007f5dde59ce59 [ 147.590322][ T7317] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 147.590334][ T7317] RBP: 00007f5dde632d6f R08: 0000000000000000 R09: 0000000000000000 [ 147.590347][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.590360][ T7317] R13: 00007f5dde816128 R14: 00007f5dde816090 R15: 00007ffd55777758 [ 147.590397][ T7317] [ 148.671899][ T7351] netlink: 'syz.0.417': attribute type 1 has an invalid length. [ 148.719571][ T7350] netlink: 'syz.3.416': attribute type 1 has an invalid length. [ 148.727645][ T7350] netlink: 224 bytes leftover after parsing attributes in process `syz.3.416'. [ 148.781178][ T7354] sctp: [Deprecated]: syz.1.418 (pid 7354) Use of int in max_burst socket option. [ 148.781178][ T7354] Use struct sctp_assoc_value instead [ 148.798437][ T7353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.417'. [ 148.892032][ T7351] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.927194][ T7353] bond4: entered promiscuous mode [ 148.942568][ T7353] bond4: entered allmulticast mode [ 149.016547][ T7359] bond4: (slave dummy0): making interface the new active one [ 149.044548][ T7359] dummy0: entered promiscuous mode [ 149.053026][ T7359] dummy0: entered allmulticast mode [ 149.069823][ T7359] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 149.090076][ T7360] netlink: 68 bytes leftover after parsing attributes in process `syz.2.419'. [ 149.148198][ T7360] netlink: 60 bytes leftover after parsing attributes in process `syz.2.419'. [ 149.821598][ T7379] netlink: 'syz.0.421': attribute type 1 has an invalid length. [ 149.936849][ T7381] syzkaller0: entered promiscuous mode [ 149.946269][ T7381] syzkaller0: entered allmulticast mode [ 150.528519][ T7406] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.428'. [ 150.727622][ T7403] syzkaller0: entered promiscuous mode [ 150.733397][ T7403] syzkaller0: entered allmulticast mode [ 150.743078][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 150.763507][ T7413] 8021q: VLANs not supported on ip6tnl0 [ 150.776929][ T7405] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 150.786696][ T7405] CPU: 1 UID: 0 PID: 7405 Comm: syz.2.427 Not tainted syzkaller #0 PREEMPT(full) [ 150.786726][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.786741][ T7405] Call Trace: [ 150.786750][ T7405] [ 150.786760][ T7405] dump_stack_lvl+0xe8/0x150 [ 150.786794][ T7405] sysfs_warn_dup+0x8e/0xa0 [ 150.786824][ T7405] sysfs_do_create_link_sd+0xc0/0x110 [ 150.786855][ T7405] device_add_class_symlinks+0x1cf/0x240 [ 150.786906][ T7405] device_add+0x475/0xbb0 [ 150.786938][ T7405] wiphy_register+0x1fb1/0x2fe0 [ 150.786982][ T7405] ? __pfx_wiphy_register+0x10/0x10 [ 150.787005][ T7405] ? __pfx_netdev_run_todo+0x10/0x10 [ 150.787030][ T7405] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 150.787069][ T7405] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 150.787112][ T7405] ieee80211_register_hw+0x3c53/0x4910 [ 150.787152][ T7405] ? ieee80211_register_hw+0x18f1/0x4910 [ 150.787211][ T7405] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 150.787241][ T7405] ? __asan_memset+0x22/0x50 [ 150.787270][ T7405] ? __hrtimer_setup+0x1b7/0x260 [ 150.787298][ T7405] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 150.787333][ T7405] mac80211_hwsim_new_radio+0x3327/0x57e0 [ 150.787397][ T7405] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 150.787426][ T7405] ? kstrndup+0xbf/0x160 [ 150.787461][ T7405] hwsim_new_radio_nl+0xe20/0x26e0 [ 150.787488][ T7405] ? unwind_next_frame+0xa6/0x2550 [ 150.787537][ T7405] ? is_bpf_text_address+0x26/0x2b0 [ 150.787576][ T7405] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 150.787605][ T7405] ? __kernel_text_address+0xd/0x30 [ 150.787637][ T7405] ? unwind_get_return_address+0x4d/0x90 [ 150.787665][ T7405] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 150.787700][ T7405] ? arch_stack_walk+0xfb/0x150 [ 150.787743][ T7405] ? stack_trace_save+0xa9/0x100 [ 150.787777][ T7405] ? __pfx_stack_trace_save+0x10/0x10 [ 150.787815][ T7405] ? stack_depot_save_flags+0x33/0x810 [ 150.787862][ T7405] ? __nla_validate_parse+0x2480/0x2dc0 [ 150.787903][ T7405] ? ____sys_sendmsg+0x972/0x9f0 [ 150.787936][ T7405] ? ___sys_sendmsg+0x2a5/0x360 [ 150.787993][ T7405] ? __pfx___nla_validate_parse+0x10/0x10 [ 150.788050][ T7405] ? rcu_is_watching+0x15/0xb0 [ 150.788078][ T7405] ? trace_kmalloc+0x2a/0xf0 [ 150.788117][ T7405] ? __nla_parse+0x40/0x60 [ 150.788154][ T7405] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 150.788181][ T7405] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 150.788218][ T7405] genl_family_rcv_msg_doit+0x22a/0x330 [ 150.788253][ T7405] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 150.788296][ T7405] ? bpf_lsm_capable+0x9/0x20 [ 150.788317][ T7405] ? security_capable+0x7e/0x2c0 [ 150.788354][ T7405] genl_rcv_msg+0x61c/0x7a0 [ 150.788387][ T7405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 150.788412][ T7405] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 150.788458][ T7405] netlink_rcv_skb+0x232/0x4b0 [ 150.788493][ T7405] ? __pfx_genl_rcv_msg+0x10/0x10 [ 150.788520][ T7405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.788573][ T7405] ? down_read+0x270/0x2e0 [ 150.788595][ T7405] ? genl_rcv+0xd/0x40 [ 150.788622][ T7405] genl_rcv+0x28/0x40 [ 150.788644][ T7405] netlink_unicast+0x75c/0x8e0 [ 150.788688][ T7405] netlink_sendmsg+0x813/0xb40 [ 150.788735][ T7405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.788773][ T7405] ? aa_sock_msg_perm+0xf1/0x1b0 [ 150.788805][ T7405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 150.788840][ T7405] ____sys_sendmsg+0x972/0x9f0 [ 150.788874][ T7405] ? __might_fault+0xaf/0x130 [ 150.788919][ T7405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.788966][ T7405] ? import_iovec+0x73/0xa0 [ 150.789005][ T7405] ___sys_sendmsg+0x2a5/0x360 [ 150.789039][ T7405] ? __lock_acquire+0x6b5/0x2cf0 [ 150.789069][ T7405] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.789114][ T7405] ? futex_wake+0x4ac/0x580 [ 150.789178][ T7405] ? __fget_files+0x2a/0x420 [ 150.789205][ T7405] ? __fget_files+0x3a0/0x420 [ 150.789246][ T7405] __x64_sys_sendmsg+0x1bd/0x2a0 [ 150.789285][ T7405] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.789331][ T7405] ? rcu_is_watching+0x15/0xb0 [ 150.789371][ T7405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.789397][ T7405] do_syscall_64+0x15f/0xf80 [ 150.789417][ T7405] ? trace_irq_disable+0x3b/0x140 [ 150.789451][ T7405] ? clear_bhb_loop+0x40/0x90 [ 150.789479][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.789502][ T7405] RIP: 0033:0x7fd019d9ce59 [ 150.789523][ T7405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.789542][ T7405] RSP: 002b:00007fd01ab95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.789567][ T7405] RAX: ffffffffffffffda RBX: 00007fd01a015fa0 RCX: 00007fd019d9ce59 [ 150.789583][ T7405] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 150.789597][ T7405] RBP: 00007fd019e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 150.789610][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.789623][ T7405] R13: 00007fd01a016038 R14: 00007fd01a015fa0 R15: 00007ffe585f53b8 [ 150.789661][ T7405] [ 153.349724][ T7454] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 153.535588][ T7468] netlink: 48 bytes leftover after parsing attributes in process `syz.3.442'. [ 153.593620][ T7458] netlink: 'syz.2.439': attribute type 1 has an invalid length. [ 153.955769][ T7482] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 153.975536][ T7482] CPU: 0 UID: 0 PID: 7482 Comm: syz.2.449 Not tainted syzkaller #0 PREEMPT(full) [ 153.975567][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.975582][ T7482] Call Trace: [ 153.975591][ T7482] [ 153.975600][ T7482] dump_stack_lvl+0xe8/0x150 [ 153.975633][ T7482] sysfs_warn_dup+0x8e/0xa0 [ 153.975662][ T7482] sysfs_do_create_link_sd+0xc0/0x110 [ 153.975693][ T7482] device_add_class_symlinks+0x1cf/0x240 [ 153.975725][ T7482] device_add+0x475/0xbb0 [ 153.975756][ T7482] wiphy_register+0x1fb1/0x2fe0 [ 153.975797][ T7482] ? __pfx_wiphy_register+0x10/0x10 [ 153.975819][ T7482] ? __pfx_netdev_run_todo+0x10/0x10 [ 153.975842][ T7482] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 153.975879][ T7482] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 153.975931][ T7482] ieee80211_register_hw+0x3c53/0x4910 [ 153.975970][ T7482] ? ieee80211_register_hw+0x18f1/0x4910 [ 153.976026][ T7482] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 153.976055][ T7482] ? __asan_memset+0x22/0x50 [ 153.976083][ T7482] ? __hrtimer_setup+0x1b7/0x260 [ 153.976110][ T7482] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 153.976144][ T7482] mac80211_hwsim_new_radio+0x3327/0x57e0 [ 153.976206][ T7482] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 153.976234][ T7482] ? kstrndup+0xbf/0x160 [ 153.976276][ T7482] hwsim_new_radio_nl+0xe20/0x26e0 [ 153.976304][ T7482] ? unwind_next_frame+0xa6/0x2550 [ 153.976351][ T7482] ? is_bpf_text_address+0x26/0x2b0 [ 153.976389][ T7482] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 153.976420][ T7482] ? __kernel_text_address+0xd/0x30 [ 153.976452][ T7482] ? unwind_get_return_address+0x4d/0x90 [ 153.976479][ T7482] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 153.976513][ T7482] ? arch_stack_walk+0xfb/0x150 [ 153.976556][ T7482] ? stack_trace_save+0xa9/0x100 [ 153.976590][ T7482] ? __pfx_stack_trace_save+0x10/0x10 [ 153.976623][ T7482] ? __lock_acquire+0x6b5/0x2cf0 [ 153.976652][ T7482] ? stack_depot_save_flags+0x33/0x810 [ 153.976704][ T7482] ? __nla_validate_parse+0x2480/0x2dc0 [ 153.976737][ T7482] ? ____sys_sendmsg+0x972/0x9f0 [ 153.976770][ T7482] ? ___sys_sendmsg+0x2a5/0x360 [ 153.976826][ T7482] ? __pfx___nla_validate_parse+0x10/0x10 [ 153.976892][ T7482] ? rcu_is_watching+0x15/0xb0 [ 153.976922][ T7482] ? trace_kmalloc+0x2a/0xf0 [ 153.976963][ T7482] ? __nla_parse+0x40/0x60 [ 153.977002][ T7482] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 153.977030][ T7482] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 153.977067][ T7482] genl_family_rcv_msg_doit+0x22a/0x330 [ 153.977103][ T7482] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 153.977146][ T7482] ? bpf_lsm_capable+0x9/0x20 [ 153.977168][ T7482] ? security_capable+0x7e/0x2c0 [ 153.977205][ T7482] genl_rcv_msg+0x61c/0x7a0 [ 153.977239][ T7482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.977264][ T7482] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 153.977311][ T7482] netlink_rcv_skb+0x232/0x4b0 [ 153.977354][ T7482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.977382][ T7482] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.977434][ T7482] ? down_read+0x270/0x2e0 [ 153.977457][ T7482] ? genl_rcv+0xd/0x40 [ 153.977482][ T7482] genl_rcv+0x28/0x40 [ 153.977504][ T7482] netlink_unicast+0x75c/0x8e0 [ 153.977547][ T7482] netlink_sendmsg+0x813/0xb40 [ 153.977591][ T7482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.977629][ T7482] ? aa_sock_msg_perm+0xf1/0x1b0 [ 153.977662][ T7482] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 153.977698][ T7482] ____sys_sendmsg+0x972/0x9f0 [ 153.977734][ T7482] ? __might_fault+0xaf/0x130 [ 153.977772][ T7482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.977819][ T7482] ? import_iovec+0x73/0xa0 [ 153.977859][ T7482] ___sys_sendmsg+0x2a5/0x360 [ 153.977902][ T7482] ? __lock_acquire+0x6b5/0x2cf0 [ 153.977933][ T7482] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.977977][ T7482] ? futex_wake+0x4ac/0x580 [ 153.978039][ T7482] ? __fget_files+0x2a/0x420 [ 153.978072][ T7482] ? __fget_files+0x3a0/0x420 [ 153.978112][ T7482] __x64_sys_sendmsg+0x1bd/0x2a0 [ 153.978151][ T7482] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.978197][ T7482] ? rcu_is_watching+0x15/0xb0 [ 153.978234][ T7482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.978258][ T7482] do_syscall_64+0x15f/0xf80 [ 153.978286][ T7482] ? trace_irq_disable+0x3b/0x140 [ 153.978322][ T7482] ? clear_bhb_loop+0x40/0x90 [ 153.978350][ T7482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.978373][ T7482] RIP: 0033:0x7fd019d9ce59 [ 153.978396][ T7482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.978413][ T7482] RSP: 002b:00007fd01ab74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.978436][ T7482] RAX: ffffffffffffffda RBX: 00007fd01a016090 RCX: 00007fd019d9ce59 [ 153.978452][ T7482] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 153.978467][ T7482] RBP: 00007fd019e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 153.978480][ T7482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.978493][ T7482] R13: 00007fd01a016128 R14: 00007fd01a016090 R15: 00007ffe585f53b8 [ 153.978530][ T7482] [ 154.877928][ T7505] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.451'. [ 154.986676][ T5733] IPVS: starting estimator thread 0... [ 155.085627][ T7512] IPVS: using max 24 ests per chain, 57600 per kthread [ 155.368227][ T7529] gretap0: entered promiscuous mode [ 155.396704][ T7529] macvlan3: entered promiscuous mode [ 155.429419][ T7529] gretap0: left promiscuous mode [ 155.484074][ T7533] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 155.603715][ T7537] SET target dimension over the limit! [ 155.916176][ T7542] netlink: 'syz.4.459': attribute type 1 has an invalid length. [ 155.967623][ T7535] bond2: (slave bridge3): making interface the new active one [ 155.978056][ T7535] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 156.052388][ T7555] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.464'. [ 156.668886][ T7575] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 156.721390][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'. [ 156.732649][ T7577] openvswitch: netlink: Key type 9961 is out of range max 32 [ 156.749025][ T7575] unsupported nla_type 216 [ 156.773966][ T7575] netlink: zone id is out of range [ 156.784586][ T7575] netlink: zone id is out of range [ 156.798020][ T7575] netlink: zone id is out of range [ 156.809917][ T7575] netlink: zone id is out of range [ 156.830713][ T7575] netlink: zone id is out of range [ 156.856099][ T7575] netlink: zone id is out of range [ 156.870558][ T7579] gretap0: entered promiscuous mode [ 156.882740][ T7575] netlink: zone id is out of range [ 156.899495][ T7575] netlink: zone id is out of range [ 156.908939][ T7579] vlan2: entered promiscuous mode [ 156.925990][ T7575] netlink: zone id is out of range [ 157.155272][ T7589] netlink: 44 bytes leftover after parsing attributes in process `syz.2.477'. [ 157.504992][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.514392][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.889702][ T7591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.909412][ T7591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.953345][ T7591] .70·X: left allmulticast mode [ 158.094798][ T7591] bond1: left promiscuous mode [ 158.101678][ T7591] ip6tnl1: left allmulticast mode [ 158.121360][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.137200][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.159706][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.170772][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.277989][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.485'. [ 158.488461][ T7636] tipc: Enabling of bearer rejected, failed to enable media [ 158.641668][ T7639] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 158.671111][ T7639] CPU: 0 UID: 0 PID: 7639 Comm: syz.0.489 Not tainted syzkaller #0 PREEMPT(full) [ 158.671142][ T7639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.671156][ T7639] Call Trace: [ 158.671165][ T7639] [ 158.671175][ T7639] dump_stack_lvl+0xe8/0x150 [ 158.671209][ T7639] sysfs_warn_dup+0x8e/0xa0 [ 158.671239][ T7639] sysfs_do_create_link_sd+0xc0/0x110 [ 158.671272][ T7639] device_add_class_symlinks+0x1cf/0x240 [ 158.671305][ T7639] device_add+0x475/0xbb0 [ 158.671335][ T7639] wiphy_register+0x1fb1/0x2fe0 [ 158.671380][ T7639] ? __pfx_wiphy_register+0x10/0x10 [ 158.671403][ T7639] ? __pfx_netdev_run_todo+0x10/0x10 [ 158.671427][ T7639] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 158.671467][ T7639] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 158.671511][ T7639] ieee80211_register_hw+0x3c53/0x4910 [ 158.671577][ T7639] ? ieee80211_register_hw+0x18f1/0x4910 [ 158.671637][ T7639] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 158.671668][ T7639] ? __asan_memset+0x22/0x50 [ 158.671697][ T7639] ? __hrtimer_setup+0x1b7/0x260 [ 158.671734][ T7639] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 158.671769][ T7639] mac80211_hwsim_new_radio+0x3327/0x57e0 [ 158.671834][ T7639] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 158.671863][ T7639] ? kstrndup+0xbf/0x160 [ 158.671898][ T7639] hwsim_new_radio_nl+0xe20/0x26e0 [ 158.671925][ T7639] ? unwind_next_frame+0xa6/0x2550 [ 158.671974][ T7639] ? is_bpf_text_address+0x26/0x2b0 [ 158.672012][ T7639] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 158.672042][ T7639] ? __kernel_text_address+0xd/0x30 [ 158.672073][ T7639] ? unwind_get_return_address+0x4d/0x90 [ 158.672105][ T7639] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 158.672139][ T7639] ? arch_stack_walk+0xfb/0x150 [ 158.672181][ T7639] ? stack_trace_save+0xa9/0x100 [ 158.672213][ T7639] ? __pfx_stack_trace_save+0x10/0x10 [ 158.672250][ T7639] ? stack_depot_save_flags+0x33/0x810 [ 158.672296][ T7639] ? __nla_validate_parse+0x2480/0x2dc0 [ 158.672328][ T7639] ? ____sys_sendmsg+0x972/0x9f0 [ 158.672359][ T7639] ? ___sys_sendmsg+0x2a5/0x360 [ 158.672414][ T7639] ? __pfx___nla_validate_parse+0x10/0x10 [ 158.672470][ T7639] ? rcu_is_watching+0x15/0xb0 [ 158.672499][ T7639] ? trace_kmalloc+0x2a/0xf0 [ 158.672548][ T7639] ? __nla_parse+0x40/0x60 [ 158.672585][ T7639] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 158.672611][ T7639] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 158.672660][ T7639] genl_family_rcv_msg_doit+0x22a/0x330 [ 158.672696][ T7639] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 158.672739][ T7639] ? bpf_lsm_capable+0x9/0x20 [ 158.672761][ T7639] ? security_capable+0x7e/0x2c0 [ 158.672798][ T7639] genl_rcv_msg+0x61c/0x7a0 [ 158.672829][ T7639] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.672857][ T7639] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 158.672900][ T7639] netlink_rcv_skb+0x232/0x4b0 [ 158.672932][ T7639] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.672965][ T7639] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.673012][ T7639] ? down_read+0x270/0x2e0 [ 158.673034][ T7639] ? genl_rcv+0xd/0x40 [ 158.673058][ T7639] genl_rcv+0x28/0x40 [ 158.673081][ T7639] netlink_unicast+0x75c/0x8e0 [ 158.673125][ T7639] netlink_sendmsg+0x813/0xb40 [ 158.673169][ T7639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.673207][ T7639] ? aa_sock_msg_perm+0xf1/0x1b0 [ 158.673239][ T7639] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.673274][ T7639] ____sys_sendmsg+0x972/0x9f0 [ 158.673308][ T7639] ? __might_fault+0xaf/0x130 [ 158.673345][ T7639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.673391][ T7639] ? import_iovec+0x73/0xa0 [ 158.673430][ T7639] ___sys_sendmsg+0x2a5/0x360 [ 158.673464][ T7639] ? __lock_acquire+0x6b5/0x2cf0 [ 158.673493][ T7639] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.673546][ T7639] ? futex_wait+0x2a2/0x390 [ 158.673612][ T7639] ? __fget_files+0x2a/0x420 [ 158.673639][ T7639] ? __fget_files+0x3a0/0x420 [ 158.673678][ T7639] __x64_sys_sendmsg+0x1bd/0x2a0 [ 158.673717][ T7639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.673762][ T7639] ? rcu_is_watching+0x15/0xb0 [ 158.673801][ T7639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.673826][ T7639] do_syscall_64+0x15f/0xf80 [ 158.673847][ T7639] ? trace_irq_disable+0x3b/0x140 [ 158.673881][ T7639] ? clear_bhb_loop+0x40/0x90 [ 158.673910][ T7639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.673932][ T7639] RIP: 0033:0x7f5dde59ce59 [ 158.673954][ T7639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.673972][ T7639] RSP: 002b:00007f5ddf373028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.673996][ T7639] RAX: ffffffffffffffda RBX: 00007f5dde815fa0 RCX: 00007f5dde59ce59 [ 158.674012][ T7639] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 158.674026][ T7639] RBP: 00007f5dde632d6f R08: 0000000000000000 R09: 0000000000000000 [ 158.674041][ T7639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.674053][ T7639] R13: 00007f5dde816038 R14: 00007f5dde815fa0 R15: 00007ffd55777758 [ 158.674091][ T7639] [ 159.517299][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 159.593979][ T7655] netlink: 72 bytes leftover after parsing attributes in process `syz.2.492'. [ 159.638087][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'. [ 159.673851][ T7657] netlink: 68 bytes leftover after parsing attributes in process `syz.0.493'. [ 159.700765][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 160.002194][ T7666] syzkaller0: entered promiscuous mode [ 160.029923][ T7666] syzkaller0: entered allmulticast mode [ 160.048580][ T7666] tipc: Enabled bearer , priority 10 [ 160.067509][ T7665] tipc: Resetting bearer [ 160.164497][ T7665] tipc: Disabling bearer [ 160.232333][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 160.260841][ T7676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.291869][ T7676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.379323][ T7681] ip6_vti0: entered promiscuous mode [ 160.387862][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 160.437676][ T7685] gretap0: entered promiscuous mode [ 160.444579][ T7685] macvlan2: entered promiscuous mode [ 160.453277][ T7685] gretap0: left promiscuous mode [ 160.494539][ T7680] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 160.505453][ T7680] CPU: 1 UID: 0 PID: 7680 Comm: syz.3.503 Not tainted syzkaller #0 PREEMPT(full) [ 160.505482][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.505495][ T7680] Call Trace: [ 160.505504][ T7680] [ 160.505513][ T7680] dump_stack_lvl+0xe8/0x150 [ 160.505545][ T7680] sysfs_warn_dup+0x8e/0xa0 [ 160.505575][ T7680] sysfs_do_create_link_sd+0xc0/0x110 [ 160.505608][ T7680] device_add_class_symlinks+0x1cf/0x240 [ 160.505640][ T7680] device_add+0x475/0xbb0 [ 160.505669][ T7680] wiphy_register+0x1fb1/0x2fe0 [ 160.505711][ T7680] ? __pfx_wiphy_register+0x10/0x10 [ 160.505733][ T7680] ? __pfx_netdev_run_todo+0x10/0x10 [ 160.505758][ T7680] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 160.505794][ T7680] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 160.505842][ T7680] ieee80211_register_hw+0x3c53/0x4910 [ 160.505882][ T7680] ? ieee80211_register_hw+0x18f1/0x4910 [ 160.505938][ T7680] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 160.505968][ T7680] ? __asan_memset+0x22/0x50 [ 160.505996][ T7680] ? __hrtimer_setup+0x1b7/0x260 [ 160.506024][ T7680] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 160.506059][ T7680] mac80211_hwsim_new_radio+0x3327/0x57e0 [ 160.506125][ T7680] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 160.506153][ T7680] ? kstrndup+0xbf/0x160 [ 160.506186][ T7680] hwsim_new_radio_nl+0xe20/0x26e0 [ 160.506213][ T7680] ? unwind_next_frame+0xa6/0x2550 [ 160.506261][ T7680] ? is_bpf_text_address+0x26/0x2b0 [ 160.506317][ T7680] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 160.506347][ T7680] ? __kernel_text_address+0xd/0x30 [ 160.506379][ T7680] ? unwind_get_return_address+0x4d/0x90 [ 160.506406][ T7680] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 160.506440][ T7680] ? arch_stack_walk+0xfb/0x150 [ 160.506483][ T7680] ? stack_trace_save+0xa9/0x100 [ 160.506516][ T7680] ? __pfx_stack_trace_save+0x10/0x10 [ 160.506552][ T7680] ? stack_depot_save_flags+0x33/0x810 [ 160.506601][ T7680] ? __nla_validate_parse+0x2480/0x2dc0 [ 160.506633][ T7680] ? ____sys_sendmsg+0x972/0x9f0 [ 160.506665][ T7680] ? ___sys_sendmsg+0x2a5/0x360 [ 160.506720][ T7680] ? __pfx___nla_validate_parse+0x10/0x10 [ 160.506777][ T7680] ? rcu_is_watching+0x15/0xb0 [ 160.506806][ T7680] ? trace_kmalloc+0x2a/0xf0 [ 160.506842][ T7680] ? __nla_parse+0x40/0x60 [ 160.506877][ T7680] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 160.506904][ T7680] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 160.506940][ T7680] genl_family_rcv_msg_doit+0x22a/0x330 [ 160.506972][ T7680] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 160.507012][ T7680] ? bpf_lsm_capable+0x9/0x20 [ 160.507034][ T7680] ? security_capable+0x7e/0x2c0 [ 160.507071][ T7680] genl_rcv_msg+0x61c/0x7a0 [ 160.507105][ T7680] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.507129][ T7680] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 160.507176][ T7680] netlink_rcv_skb+0x232/0x4b0 [ 160.507211][ T7680] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.507238][ T7680] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.507291][ T7680] ? down_read+0x270/0x2e0 [ 160.507322][ T7680] ? genl_rcv+0xd/0x40 [ 160.507348][ T7680] genl_rcv+0x28/0x40 [ 160.507370][ T7680] netlink_unicast+0x75c/0x8e0 [ 160.507412][ T7680] netlink_sendmsg+0x813/0xb40 [ 160.507457][ T7680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.507495][ T7680] ? aa_sock_msg_perm+0xf1/0x1b0 [ 160.507527][ T7680] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.507562][ T7680] ____sys_sendmsg+0x972/0x9f0 [ 160.507597][ T7680] ? __might_fault+0xaf/0x130 [ 160.507634][ T7680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.507683][ T7680] ? import_iovec+0x73/0xa0 [ 160.507720][ T7680] ___sys_sendmsg+0x2a5/0x360 [ 160.507753][ T7680] ? __lock_acquire+0x6b5/0x2cf0 [ 160.507783][ T7680] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.507828][ T7680] ? futex_wake+0x4ac/0x580 [ 160.507892][ T7680] ? __fget_files+0x2a/0x420 [ 160.507919][ T7680] ? __fget_files+0x3a0/0x420 [ 160.507960][ T7680] __x64_sys_sendmsg+0x1bd/0x2a0 [ 160.507998][ T7680] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.508044][ T7680] ? rcu_is_watching+0x15/0xb0 [ 160.508084][ T7680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.508110][ T7680] do_syscall_64+0x15f/0xf80 [ 160.508131][ T7680] ? trace_irq_disable+0x3b/0x140 [ 160.508166][ T7680] ? clear_bhb_loop+0x40/0x90 [ 160.508193][ T7680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.508215][ T7680] RIP: 0033:0x7fd51699ce59 [ 160.508236][ T7680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.508253][ T7680] RSP: 002b:00007fd514bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.508276][ T7680] RAX: ffffffffffffffda RBX: 00007fd516c15fa0 RCX: 00007fd51699ce59 [ 160.508292][ T7680] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 160.508316][ T7680] RBP: 00007fd516a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 160.508329][ T7680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.508342][ T7680] R13: 00007fd516c16038 R14: 00007fd516c15fa0 R15: 00007ffdb934a818 [ 160.508380][ T7680] [ 161.726970][ T7723] netlink: 48 bytes leftover after parsing attributes in process `syz.1.513'. [ 161.845683][ T7726] netlink: 'syz.4.516': attribute type 13 has an invalid length. [ 161.867030][ T7726] netlink: 'syz.4.516': attribute type 17 has an invalid length. [ 161.947544][ T7726] ip6_vti0: left promiscuous mode [ 162.025012][ T7726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.061065][ T7735] IPVS: persistence engine module ip_vs_pe_À not found [ 162.072068][ T7726] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.120997][ T7726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.250241][ T7726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.269107][ T7726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.280967][ T7726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.328198][ T7726] veth1_vlan: left promiscuous mode [ 162.335853][ T7726] veth0_vlan: left promiscuous mode [ 162.342376][ T7726] veth0_vlan: entered promiscuous mode [ 162.359576][ T7726] veth1_vlan: entered promiscuous mode [ 162.374428][ T7726] veth1_macvtap: left promiscuous mode [ 162.384107][ T7726] veth0_macvtap: left promiscuous mode [ 162.391508][ T7726] veth0_macvtap: entered promiscuous mode [ 162.410217][ T7726] veth1_macvtap: entered promiscuous mode [ 162.450348][ T7726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.499109][ T7726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.536710][ T7726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.563881][ T7726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.620481][ T7726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.682906][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.690176][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.742586][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.749907][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.919785][ T5771] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.955878][ T5771] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.014201][ T5771] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.050688][ T5771] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.149542][ T7760] netlink: 'syz.3.527': attribute type 4 has an invalid length. [ 163.232915][ T7764] netlink: 'syz.3.527': attribute type 4 has an invalid length. [ 163.337114][ T60] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 163.394634][ T7769] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 163.407491][ T7769] netlink: 'syz.4.530': attribute type 2 has an invalid length. [ 163.625065][ T7779] syzkaller1: entered promiscuous mode [ 163.631045][ T7779] syzkaller1: entered allmulticast mode [ 163.884262][ T7783] IPVS: Error connecting to the multicast addr [ 164.475703][ T7797] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.541'. [ 164.802762][ T7807] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.546'. [ 164.831500][ T7807] net_ratelimit: 14 callbacks suppressed [ 164.831520][ T7807] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 165.088846][ T7817] netlink: 108 bytes leftover after parsing attributes in process `syz.2.550'. [ 165.447051][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 165.472126][ T7828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.552'. [ 165.481997][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.552'. [ 165.492823][ T7828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.552'. [ 165.802980][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 165.821894][ T7835] netlink: 'syz.4.556': attribute type 5 has an invalid length. [ 165.846333][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.556'. [ 165.985714][ T7845] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.559'. [ 165.998239][ T7835] geneve2: entered promiscuous mode [ 166.034105][ T7835] geneve2: entered allmulticast mode [ 166.045871][ T7850] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.560'. [ 166.075943][ T5771] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 166.098649][ T7850] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 166.128631][ T5771] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 166.171997][ T5771] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 166.196154][ T5771] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 166.742938][ T7873] FAULT_INJECTION: forcing a failure. [ 166.742938][ T7873] name failslab, interval 1, probability 0, space 0, times 0 [ 166.784421][ T7873] CPU: 1 UID: 0 PID: 7873 Comm: syz.4.568 Not tainted syzkaller #0 PREEMPT(full) [ 166.784452][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.784465][ T7873] Call Trace: [ 166.784473][ T7873] [ 166.784483][ T7873] dump_stack_lvl+0xe8/0x150 [ 166.784514][ T7873] should_fail_ex+0x412/0x560 [ 166.784551][ T7873] should_failslab+0xa8/0x100 [ 166.784587][ T7873] __kmalloc_noprof+0xe8/0x760 [ 166.784618][ T7873] ? fib6_info_alloc+0x30/0xf0 [ 166.784653][ T7873] fib6_info_alloc+0x30/0xf0 [ 166.784682][ T7873] ip6_route_info_create+0x142/0x860 [ 166.784722][ T7873] ip6_route_add+0x49/0x1b0 [ 166.784766][ T7873] addrconf_prefix_route+0x3a2/0x480 [ 166.784796][ T7873] ? addrconf_prefix_route+0xf5/0x480 [ 166.784824][ T7873] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 166.784852][ T7873] ? atomic_notifier_call_chain+0x26/0x180 [ 166.784899][ T7873] ? __pfx_ipv6_add_addr+0x10/0x10 [ 166.784928][ T7873] ? ipv6_mc_up+0x3da/0x580 [ 166.784964][ T7873] inet6_addr_add+0x508/0xb20 [ 166.785002][ T7873] inet6_rtm_newaddr+0xa17/0xe30 [ 166.785035][ T7873] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 166.785055][ T7873] ? __dev_queue_xmit+0x2b6/0x3950 [ 166.785087][ T7873] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 166.785134][ T7873] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 166.785154][ T7873] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 166.785188][ T7873] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 166.785217][ T7873] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 166.785245][ T7873] ? ref_tracker_free+0x693/0x840 [ 166.785279][ T7873] ? __pfx_ref_tracker_free+0x10/0x10 [ 166.785321][ T7873] netlink_rcv_skb+0x232/0x4b0 [ 166.785354][ T7873] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 166.785386][ T7873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.785434][ T7873] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.785465][ T7873] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.785503][ T7873] netlink_unicast+0x75c/0x8e0 [ 166.785545][ T7873] netlink_sendmsg+0x813/0xb40 [ 166.785623][ T7873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.785674][ T7873] ? aa_sock_msg_perm+0xf1/0x1b0 [ 166.785705][ T7873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 166.785738][ T7873] ____sys_sendmsg+0x972/0x9f0 [ 166.785800][ T7873] ? __might_fault+0xaf/0x130 [ 166.785836][ T7873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.785879][ T7873] ? import_iovec+0x73/0xa0 [ 166.785916][ T7873] ___sys_sendmsg+0x2a5/0x360 [ 166.785953][ T7873] ? __lock_acquire+0x6b5/0x2cf0 [ 166.785980][ T7873] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.786047][ T7873] ? __fget_files+0x2a/0x420 [ 166.786069][ T7873] ? __fget_files+0x3a0/0x420 [ 166.786101][ T7873] __x64_sys_sendmsg+0x1bd/0x2a0 [ 166.786134][ T7873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.786169][ T7873] ? __pfx_ksys_write+0x10/0x10 [ 166.786202][ T7873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.786221][ T7873] do_syscall_64+0x15f/0xf80 [ 166.786238][ T7873] ? trace_irq_disable+0x3b/0x140 [ 166.786268][ T7873] ? clear_bhb_loop+0x40/0x90 [ 166.786291][ T7873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.786309][ T7873] RIP: 0033:0x7f5131b9ce59 [ 166.786327][ T7873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.786343][ T7873] RSP: 002b:00007f51329a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.786363][ T7873] RAX: ffffffffffffffda RBX: 00007f5131e15fa0 RCX: 00007f5131b9ce59 [ 166.786376][ T7873] RDX: 000000000400c0c0 RSI: 0000200000000140 RDI: 0000000000000003 [ 166.786388][ T7873] RBP: 00007f51329a7090 R08: 0000000000000000 R09: 0000000000000000 [ 166.786400][ T7873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.786410][ T7873] R13: 00007f5131e16038 R14: 00007f5131e15fa0 R15: 00007ffebe925ca8 [ 166.786437][ T7873] [ 167.045938][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 167.454074][ T7889] netlink: 'syz.2.572': attribute type 1 has an invalid length. [ 167.815978][ T7905] lo speed is unknown, defaulting to 1000 [ 168.130732][ T7905] lo speed is unknown, defaulting to 1000 [ 168.182000][ T7905] lo speed is unknown, defaulting to 1000 [ 168.351803][ T7901] netlink: 'syz.4.577': attribute type 1 has an invalid length. [ 168.602531][ T7934] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.245943][ T7905] infiniband sqz0: set active [ 169.252265][ T5759] lo speed is unknown, defaulting to 1000 [ 169.269735][ T7905] infiniband sqz0: added lo [ 169.306916][ T7905] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 169.314748][ T7948] syzkaller0: entered promiscuous mode [ 169.341712][ T7905] infiniband sqz0: Couldn't open port 1 [ 169.353716][ T7948] syzkaller0: entered allmulticast mode [ 169.365773][ T7905] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 169.408323][ T7905] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 169.448800][ T7905] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 169.560189][ T7905] RDS/IB: sqz0: added [ 169.567294][ T7905] smc: adding ib device sqz0 with port count 1 [ 169.573713][ T7905] smc: ib device sqz0 port 1 has no pnetid [ 169.595872][ T5759] lo speed is unknown, defaulting to 1000 [ 169.629920][ T7905] lo speed is unknown, defaulting to 1000 [ 170.057388][ T7966] netlink: 'syz.4.592': attribute type 1 has an invalid length. [ 170.286183][ T7905] lo speed is unknown, defaulting to 1000 [ 170.502261][ T7986] __nla_validate_parse: 2 callbacks suppressed [ 170.502283][ T7986] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.599'. [ 170.545359][ T7986] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 170.742788][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.601'. [ 170.771073][ T7993] netlink: 20 bytes leftover after parsing attributes in process `syz.4.601'. [ 170.880167][ T7996] netlink: 32 bytes leftover after parsing attributes in process `syz.4.601'. [ 171.108975][ T7905] lo speed is unknown, defaulting to 1000 [ 171.815250][ T4943] Bluetooth: hci2: command 0x0406 tx timeout [ 171.868990][ T7905] lo speed is unknown, defaulting to 1000 [ 172.194947][ T8023] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.611'. [ 172.241538][ T8023] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 172.462570][ T8027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.613'. [ 172.750979][ T7905] lo speed is unknown, defaulting to 1000 [ 173.281436][ T8052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.619'. [ 173.790043][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 173.806286][ T8070] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.625'. [ 173.843433][ T8070] vti1: entered promiscuous mode [ 173.863004][ T8070] netlink: 'syz.0.625': attribute type 30 has an invalid length. [ 173.884349][ T8072] macvlan2: entered promiscuous mode [ 174.226545][ T8088] FAULT_INJECTION: forcing a failure. [ 174.226545][ T8088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.241144][ T8088] CPU: 0 UID: 0 PID: 8088 Comm: syz.3.631 Not tainted syzkaller #0 PREEMPT(full) [ 174.241179][ T8088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.241193][ T8088] Call Trace: [ 174.241201][ T8088] [ 174.241210][ T8088] dump_stack_lvl+0xe8/0x150 [ 174.241241][ T8088] should_fail_ex+0x412/0x560 [ 174.241276][ T8088] _copy_from_user+0x2d/0xb0 [ 174.241309][ T8088] __copy_msghdr+0x3c5/0x5b0 [ 174.241352][ T8088] ___sys_sendmsg+0x213/0x360 [ 174.241383][ T8088] ? __lock_acquire+0x6b5/0x2cf0 [ 174.241411][ T8088] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.241478][ T8088] ? __fget_files+0x2a/0x420 [ 174.241502][ T8088] ? __fget_files+0x3a0/0x420 [ 174.241540][ T8088] __x64_sys_sendmsg+0x1bd/0x2a0 [ 174.241576][ T8088] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.241620][ T8088] ? __pfx_ksys_write+0x10/0x10 [ 174.241661][ T8088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.241684][ T8088] do_syscall_64+0x15f/0xf80 [ 174.241705][ T8088] ? trace_irq_disable+0x3b/0x140 [ 174.241739][ T8088] ? clear_bhb_loop+0x40/0x90 [ 174.241764][ T8088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.241786][ T8088] RIP: 0033:0x7fd51699ce59 [ 174.241808][ T8088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.241827][ T8088] RSP: 002b:00007fd514bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.241850][ T8088] RAX: ffffffffffffffda RBX: 00007fd516c15fa0 RCX: 00007fd51699ce59 [ 174.241866][ T8088] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 174.241879][ T8088] RBP: 00007fd514bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.241892][ T8088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.241912][ T8088] R13: 00007fd516c16038 R14: 00007fd516c15fa0 R15: 00007ffdb934a818 [ 174.241947][ T8088] [ 174.830286][ T8095] netlink: 'syz.4.632': attribute type 1 has an invalid length. [ 175.175766][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 175.203934][ T8114] netlink: 720 bytes leftover after parsing attributes in process `syz.4.637'. [ 175.270061][ T8120] syzkaller0: entered promiscuous mode [ 175.288561][ T8120] syzkaller0: entered allmulticast mode [ 175.440652][ T8128] sctp: [Deprecated]: syz.4.641 (pid 8128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.440652][ T8128] Use struct sctp_sack_info instead [ 175.772402][ T8135] FAULT_INJECTION: forcing a failure. [ 175.772402][ T8135] name failslab, interval 1, probability 0, space 0, times 0 [ 175.807500][ T8135] CPU: 0 UID: 0 PID: 8135 Comm: syz.2.643 Not tainted syzkaller #0 PREEMPT(full) [ 175.807533][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 175.807558][ T8135] Call Trace: [ 175.807568][ T8135] [ 175.807577][ T8135] dump_stack_lvl+0xe8/0x150 [ 175.807608][ T8135] should_fail_ex+0x412/0x560 [ 175.807644][ T8135] should_failslab+0xa8/0x100 [ 175.807682][ T8135] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 175.807714][ T8135] ? __alloc_skb+0x186/0x7d0 [ 175.807747][ T8135] ? __alloc_skb+0x1d0/0x7d0 [ 175.807774][ T8135] ? __local_bh_enable_ip+0xd0/0x130 [ 175.807804][ T8135] __alloc_skb+0x1d0/0x7d0 [ 175.807834][ T8135] ? process_measurement+0x451/0x1c80 [ 175.807861][ T8135] alloc_skb_with_frags+0xc8/0x760 [ 175.807894][ T8135] ? __lock_acquire+0x6b5/0x2cf0 [ 175.807928][ T8135] sock_alloc_send_pskb+0x878/0x990 [ 175.807959][ T8135] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 175.808001][ T8135] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 175.808030][ T8135] ? dev_get_by_index+0x22/0x2e0 [ 175.808055][ T8135] ? dev_get_by_index+0x22/0x2e0 [ 175.808086][ T8135] packet_sendmsg+0x315a/0x4fb0 [ 175.808145][ T8135] ? unwind_next_frame+0xa6/0x2550 [ 175.808196][ T8135] ? __pfx_packet_sendmsg+0x10/0x10 [ 175.808230][ T8135] ? aa_sk_perm+0x6d5/0x900 [ 175.808268][ T8135] ? __pfx_aa_sk_perm+0x10/0x10 [ 175.808293][ T8135] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 175.808333][ T8135] ? aa_sock_msg_perm+0xf1/0x1b0 [ 175.808364][ T8135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.808398][ T8135] ____sys_sendmsg+0x972/0x9f0 [ 175.808442][ T8135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.808485][ T8135] ? import_iovec+0x73/0xa0 [ 175.808521][ T8135] ___sys_sendmsg+0x2a5/0x360 [ 175.808553][ T8135] ? __lock_acquire+0x6b5/0x2cf0 [ 175.808581][ T8135] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.808650][ T8135] ? __fget_files+0x2a/0x420 [ 175.808676][ T8135] ? __fget_files+0x3a0/0x420 [ 175.808714][ T8135] __x64_sys_sendmsg+0x1bd/0x2a0 [ 175.808750][ T8135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.808794][ T8135] ? __pfx_ksys_write+0x10/0x10 [ 175.808833][ T8135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.808856][ T8135] do_syscall_64+0x15f/0xf80 [ 175.808875][ T8135] ? trace_irq_disable+0x3b/0x140 [ 175.808906][ T8135] ? clear_bhb_loop+0x40/0x90 [ 175.808933][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.808955][ T8135] RIP: 0033:0x7fd019d9ce59 [ 175.808975][ T8135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.808993][ T8135] RSP: 002b:00007fd01ab95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.809015][ T8135] RAX: ffffffffffffffda RBX: 00007fd01a015fa0 RCX: 00007fd019d9ce59 [ 175.809031][ T8135] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 175.809044][ T8135] RBP: 00007fd01ab95090 R08: 0000000000000000 R09: 0000000000000000 [ 175.809058][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.809071][ T8135] R13: 00007fd01a016038 R14: 00007fd01a015fa0 R15: 00007ffe585f53b8 [ 175.809105][ T8135] [ 176.396177][ T8143] netlink: 192 bytes leftover after parsing attributes in process `syz.0.645'. [ 176.450070][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 176.506453][ T8139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.645'. [ 176.701412][ T8142] lo speed is unknown, defaulting to 1000 [ 177.217566][ T8158] netlink: 720 bytes leftover after parsing attributes in process `syz.3.651'. [ 177.415875][ T8163] macsec0: entered promiscuous mode [ 177.427204][ T8163] macsec0: entered allmulticast mode [ 177.473940][ T8163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.653'. [ 177.493017][ T8163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.653'. [ 177.682749][ T8168] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.655'. [ 177.722388][ T8168] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 178.379125][ T8180] lo speed is unknown, defaulting to 1000 [ 178.553601][ T8190] IPv6: addrconf: prefix option has invalid lifetime [ 178.910662][ T8196] netlink: 720 bytes leftover after parsing attributes in process `syz.2.663'. [ 179.322263][ T8204] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.667'. [ 179.331936][ T8204] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 179.544598][ T8209] netlink: 144 bytes leftover after parsing attributes in process `syz.3.669'. [ 179.574400][ T8209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.616093][ T8209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.947739][ T8222] x_tables: duplicate underflow at hook 1 [ 180.092865][ T8216] lo speed is unknown, defaulting to 1000 [ 180.288230][ T8232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.761540][ T5759] IPVS: starting estimator thread 0... [ 180.885369][ T8249] IPVS: using max 26 ests per chain, 62400 per kthread [ 181.217054][ T8256] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 181.269091][ T8256] netlink: 'syz.3.679': attribute type 27 has an invalid length. [ 181.311529][ T8258] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 182.046576][ T8266] netlink: 'syz.4.683': attribute type 1 has an invalid length. [ 182.086323][ T8283] __nla_validate_parse: 3 callbacks suppressed [ 182.086341][ T8283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.687'. [ 182.336968][ T8289] trusted_key: syz.4.689 sent an empty control message without MSG_MORE. [ 182.366937][ T8284] lo speed is unknown, defaulting to 1000 [ 182.521047][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 182.811284][ T8303] netlink: 'syz.4.695': attribute type 1 has an invalid length. [ 182.944075][ T8311] SET target dimension over the limit! [ 183.080402][ T8307] bond2: (slave bridge2): making interface the new active one [ 183.096920][ T8307] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 183.187301][ T8311] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 183.298248][ T8315] macsec1: entered promiscuous mode [ 183.319980][ T8315] macsec1: entered allmulticast mode [ 183.599099][ T8328] netlink: 'syz.0.699': attribute type 25 has an invalid length. [ 183.750579][ T8324] lo speed is unknown, defaulting to 1000 [ 185.579495][ T8354] syzkaller0: entered promiscuous mode [ 185.598899][ T8354] syzkaller0: entered allmulticast mode [ 185.641209][ T8352] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.706'. [ 186.292983][ T8368] gretap0: entered promiscuous mode [ 186.315845][ T8368] macvlan2: entered promiscuous mode [ 186.341973][ T8368] gretap0: left promiscuous mode [ 186.692664][ T8379] netlink: 'syz.2.715': attribute type 1 has an invalid length. [ 187.359606][ T8393] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 187.458361][ T8393] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 188.639187][ T8419] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.726'. [ 188.665837][ T8419] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 188.959932][ T8424] netlink: 44 bytes leftover after parsing attributes in process `syz.1.728'. [ 189.498657][ T8445] netlink: 'syz.1.732': attribute type 1 has an invalid length. [ 189.516167][ T8444] netlink: 'syz.1.732': attribute type 1 has an invalid length. [ 189.595029][ T8445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.838267][ T8451] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 189.940537][ T8453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.734'. [ 189.966187][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 190.130445][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 190.535646][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 190.712384][ T8473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 190.969627][ T8487] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.744'. [ 190.991877][ T8487] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 191.241325][ T8496] IPv6: sit1: Disabled Multicast RS [ 191.460573][ T8507] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 191.902787][ T8522] netlink: 'syz.1.755': attribute type 1 has an invalid length. [ 192.011155][ T8529] SET target dimension over the limit! [ 192.567450][ T8526] bond2: (slave bridge2): making interface the new active one [ 192.656821][ T8526] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 192.732102][ T8529] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 192.870123][ T30] audit: type=1800 audit(1778780923.584:4): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.758" name="memory.events" dev="tmpfs" ino=823 res=0 errno=0 [ 194.039892][ T8584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.051154][ T8585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.069239][ T8583] TCP: TCP_TX_DELAY enabled [ 194.111967][ T8584] macsec2: entered promiscuous mode [ 194.126399][ T8584] bridge0: entered promiscuous mode [ 194.141610][ T8584] bridge0: port 3(macsec2) entered blocking state [ 194.148804][ T8584] bridge0: port 3(macsec2) entered disabled state [ 194.166801][ T8584] macsec2: entered allmulticast mode [ 194.181013][ T8584] bridge0: entered allmulticast mode [ 194.211010][ T8584] macsec2: left allmulticast mode [ 194.222272][ T8584] bridge0: left allmulticast mode [ 194.248242][ T29] bridge0: left promiscuous mode [ 194.351650][ T8589] netlink: 'syz.2.775': attribute type 3 has an invalid length. [ 194.374340][ T8589] netlink: 244 bytes leftover after parsing attributes in process `syz.2.775'. [ 194.387504][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.393917][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.327573][ T8620] netlink: 'syz.4.783': attribute type 4 has an invalid length. [ 196.135430][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 197.276594][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'. [ 197.720712][ T8703] netlink: 'syz.4.806': attribute type 1 has an invalid length. [ 197.808519][ T8703] bond3: (slave bridge3): making interface the new active one [ 197.824636][ T8703] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 197.842934][ T8703] SET target dimension over the limit! [ 197.877270][ T8703] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 198.000661][ T8713] bond0: entered promiscuous mode [ 198.010766][ T8713] bond_slave_0: entered promiscuous mode [ 198.020820][ T8713] bond_slave_1: entered promiscuous mode [ 198.052967][ T8713] batadv0: entered promiscuous mode [ 198.096414][ T8713] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 198.226116][ T8721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.634306][ T8757] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.821'. [ 199.670604][ T8757] openvswitch: netlink: Message has 3 unknown bytes. [ 199.697770][ T8758] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 199.713920][ T8766] gretap0: entered promiscuous mode [ 199.741761][ T8766] macvlan0: entered promiscuous mode [ 199.780345][ T8766] gretap0: left promiscuous mode [ 199.816567][ T8757] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 200.471054][ T8809] FAULT_INJECTION: forcing a failure. [ 200.471054][ T8809] name failslab, interval 1, probability 0, space 0, times 0 [ 200.530911][ T8809] CPU: 0 UID: 0 PID: 8809 Comm: syz.3.836 Not tainted syzkaller #0 PREEMPT(full) [ 200.530941][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 200.530954][ T8809] Call Trace: [ 200.530963][ T8809] [ 200.530972][ T8809] dump_stack_lvl+0xe8/0x150 [ 200.531003][ T8809] should_fail_ex+0x412/0x560 [ 200.531038][ T8809] should_failslab+0xa8/0x100 [ 200.531075][ T8809] __kvmalloc_node_noprof+0x178/0x8a0 [ 200.531108][ T8809] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 200.531151][ T8809] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 200.531190][ T8809] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 200.531233][ T8809] ? __pfx_autoremove_wake_function+0x10/0x10 [ 200.531271][ T8809] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 200.531335][ T8809] ? 0xffffffffa0203370 [ 200.531384][ T8809] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 200.531417][ T8809] ? _copy_from_user+0x94/0xb0 [ 200.531460][ T8809] ? bpf_test_init+0x113/0x150 [ 200.531488][ T8809] ? xdp_convert_md_to_buff+0x5b/0x330 [ 200.531523][ T8809] bpf_prog_test_run_xdp+0x81c/0x1160 [ 200.531574][ T8809] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 200.531612][ T8809] ? __fget_files+0x2a/0x420 [ 200.531644][ T8809] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 200.531677][ T8809] bpf_prog_test_run+0x2c7/0x340 [ 200.531704][ T8809] __sys_bpf+0x643/0x950 [ 200.531739][ T8809] ? __pfx___sys_bpf+0x10/0x10 [ 200.531788][ T8809] ? ksys_write+0x242/0x270 [ 200.531823][ T8809] ? __pfx_ksys_write+0x10/0x10 [ 200.531859][ T8809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.531883][ T8809] __x64_sys_bpf+0x7c/0x90 [ 200.531919][ T8809] do_syscall_64+0x15f/0xf80 [ 200.531939][ T8809] ? trace_irq_disable+0x3b/0x140 [ 200.531971][ T8809] ? clear_bhb_loop+0x40/0x90 [ 200.531998][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.532019][ T8809] RIP: 0033:0x7fd51699ce59 [ 200.532038][ T8809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.532057][ T8809] RSP: 002b:00007fd514bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 200.532081][ T8809] RAX: ffffffffffffffda RBX: 00007fd516c15fa0 RCX: 00007fd51699ce59 [ 200.532097][ T8809] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 200.532110][ T8809] RBP: 00007fd514bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 200.532124][ T8809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.532137][ T8809] R13: 00007fd516c16038 R14: 00007fd516c15fa0 R15: 00007ffdb934a818 [ 200.532171][ T8809] [ 201.294038][ T8828] veth1_macvtap: entered promiscuous mode [ 201.351928][ T8828] veth1_macvtap: entered allmulticast mode [ 201.367725][ T8828] macsec0: left promiscuous mode [ 201.373071][ T8828] macsec0: left allmulticast mode [ 201.379201][ T8828] veth1_macvtap: left allmulticast mode [ 201.477745][ T8828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.581410][ T5759] IPVS: starting estimator thread 0... [ 201.675507][ T8854] IPVS: using max 25 ests per chain, 60000 per kthread [ 201.775809][ T8856] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 201.799244][ T8856] CPU: 1 UID: 0 PID: 8856 Comm: syz.4.845 Not tainted syzkaller #0 PREEMPT(full) [ 201.799278][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.799292][ T8856] Call Trace: [ 201.799301][ T8856] [ 201.799312][ T8856] dump_stack_lvl+0xe8/0x150 [ 201.799347][ T8856] sysfs_warn_dup+0x8e/0xa0 [ 201.799377][ T8856] sysfs_do_create_link_sd+0xc0/0x110 [ 201.799411][ T8856] device_add_class_symlinks+0x1cf/0x240 [ 201.799444][ T8856] device_add+0x475/0xbb0 [ 201.799477][ T8856] wiphy_register+0x1fb1/0x2fe0 [ 201.799521][ T8856] ? __pfx_wiphy_register+0x10/0x10 [ 201.799545][ T8856] ? __pfx_netdev_run_todo+0x10/0x10 [ 201.799570][ T8856] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 201.799608][ T8856] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 201.799661][ T8856] ieee80211_register_hw+0x3c53/0x4910 [ 201.799708][ T8856] ? ieee80211_register_hw+0x18f1/0x4910 [ 201.799766][ T8856] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 201.799796][ T8856] ? __asan_memset+0x22/0x50 [ 201.799823][ T8856] ? __hrtimer_setup+0x1b7/0x260 [ 201.799852][ T8856] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 201.799889][ T8856] mac80211_hwsim_new_radio+0x3327/0x57e0 [ 201.799953][ T8856] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 201.799982][ T8856] ? kstrndup+0xbf/0x160 [ 201.800015][ T8856] hwsim_new_radio_nl+0xe20/0x26e0 [ 201.800041][ T8856] ? unwind_next_frame+0xa6/0x2550 [ 201.800087][ T8856] ? is_bpf_text_address+0x26/0x2b0 [ 201.800124][ T8856] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 201.800152][ T8856] ? __kernel_text_address+0xd/0x30 [ 201.800184][ T8856] ? unwind_get_return_address+0x4d/0x90 [ 201.800211][ T8856] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 201.800245][ T8856] ? arch_stack_walk+0xfb/0x150 [ 201.800292][ T8856] ? stack_trace_save+0xa9/0x100 [ 201.800326][ T8856] ? __pfx_stack_trace_save+0x10/0x10 [ 201.800363][ T8856] ? stack_depot_save_flags+0x33/0x810 [ 201.800411][ T8856] ? __nla_validate_parse+0x2480/0x2dc0 [ 201.800443][ T8856] ? ____sys_sendmsg+0x972/0x9f0 [ 201.800476][ T8856] ? ___sys_sendmsg+0x2a5/0x360 [ 201.800532][ T8856] ? __pfx___nla_validate_parse+0x10/0x10 [ 201.800590][ T8856] ? rcu_is_watching+0x15/0xb0 [ 201.800619][ T8856] ? trace_kmalloc+0x2a/0xf0 [ 201.800669][ T8856] ? __nla_parse+0x40/0x60 [ 201.800708][ T8856] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 201.800736][ T8856] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 201.800774][ T8856] genl_family_rcv_msg_doit+0x22a/0x330 [ 201.800810][ T8856] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 201.800854][ T8856] ? bpf_lsm_capable+0x9/0x20 [ 201.800877][ T8856] ? security_capable+0x7e/0x2c0 [ 201.800913][ T8856] genl_rcv_msg+0x61c/0x7a0 [ 201.800948][ T8856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.800974][ T8856] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 201.801021][ T8856] netlink_rcv_skb+0x232/0x4b0 [ 201.801058][ T8856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.801086][ T8856] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.801138][ T8856] ? down_read+0x270/0x2e0 [ 201.801162][ T8856] ? genl_rcv+0xd/0x40 [ 201.801188][ T8856] genl_rcv+0x28/0x40 [ 201.801212][ T8856] netlink_unicast+0x75c/0x8e0 [ 201.801255][ T8856] netlink_sendmsg+0x813/0xb40 [ 201.801303][ T8856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.801342][ T8856] ? aa_sock_msg_perm+0xf1/0x1b0 [ 201.801373][ T8856] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.801406][ T8856] ____sys_sendmsg+0x972/0x9f0 [ 201.801441][ T8856] ? __might_fault+0xaf/0x130 [ 201.801479][ T8856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.801526][ T8856] ? import_iovec+0x73/0xa0 [ 201.801564][ T8856] ___sys_sendmsg+0x2a5/0x360 [ 201.801596][ T8856] ? __lock_acquire+0x6b5/0x2cf0 [ 201.801634][ T8856] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.801671][ T8856] ? futex_wake+0x4ac/0x580 [ 201.801722][ T8856] ? __fget_files+0x2a/0x420 [ 201.801744][ T8856] ? __fget_files+0x3a0/0x420 [ 201.801777][ T8856] __x64_sys_sendmsg+0x1bd/0x2a0 [ 201.801808][ T8856] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.801846][ T8856] ? rcu_is_watching+0x15/0xb0 [ 201.801877][ T8856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.801897][ T8856] do_syscall_64+0x15f/0xf80 [ 201.801914][ T8856] ? trace_irq_disable+0x3b/0x140 [ 201.801943][ T8856] ? clear_bhb_loop+0x40/0x90 [ 201.801965][ T8856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.801984][ T8856] RIP: 0033:0x7f5131b9ce59 [ 201.802004][ T8856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.802020][ T8856] RSP: 002b:00007f51329a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.802040][ T8856] RAX: ffffffffffffffda RBX: 00007f5131e15fa0 RCX: 00007f5131b9ce59 [ 201.802054][ T8856] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 201.802065][ T8856] RBP: 00007f5131c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 201.802076][ T8856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.802086][ T8856] R13: 00007f5131e16038 R14: 00007f5131e15fa0 R15: 00007ffebe925ca8 [ 201.802115][ T8856] [ 202.450832][ T8862] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 202.815452][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'. [ 202.954968][ T8878] netlink: 'syz.2.855': attribute type 10 has an invalid length. [ 202.998828][ T8878] team0: Port device dummy0 added [ 203.087344][ T8885] netlink: 'syz.2.855': attribute type 10 has an invalid length. [ 203.184372][ T8885] team0: Port device dummy0 removed [ 203.202181][ T8885] dummy0: entered promiscuous mode [ 203.212508][ T8885] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 203.528513][ T8878] nbd0: detected capacity change from 0 to 63 [ 203.588145][ T4943] block nbd0: Receive control failed (result -104) [ 203.602240][ T5633] block nbd0: Receive control failed (result -32) [ 204.298526][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'. [ 204.337415][ T8938] netlink: 36 bytes leftover after parsing attributes in process `syz.0.875'. [ 204.548409][ T8950] netlink: 1308 bytes leftover after parsing attributes in process `syz.2.879'. [ 204.570630][ T8943] netlink: 'syz.3.876': attribute type 4 has an invalid length. [ 204.581123][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 204.586623][ T8943] netlink: 32 bytes leftover after parsing attributes in process `syz.3.876'. [ 205.241541][ T8980] netlink: 152 bytes leftover after parsing attributes in process `syz.1.890'. [ 205.286583][ T8967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.370619][ T8978] gretap0: entered promiscuous mode [ 205.376750][ T8978] macvlan2: entered promiscuous mode [ 205.387361][ T8978] gretap0: left promiscuous mode [ 205.410417][ T8987] netlink: 'syz.0.893': attribute type 1 has an invalid length. [ 205.518648][ T8992] SET target dimension over the limit! [ 205.540588][ T8967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.752752][ T8988] bond6: (slave bridge3): making interface the new active one [ 205.762035][ T8988] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 205.796905][ T8992] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 205.880888][ T8967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.036248][ T9012] netlink: 'syz.4.899': attribute type 9 has an invalid length. [ 206.070469][ T8967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.464082][ T9031] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 206.503473][ T57] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.513706][ T9033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.907'. [ 206.565874][ T57] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.619003][ T8236] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.649884][ T8236] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.932274][ T9052] netlink: 'syz.4.909': attribute type 4 has an invalid length. [ 206.954454][ T9052] netlink: 156 bytes leftover after parsing attributes in process `syz.4.909'. [ 206.974534][ T9052] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 207.040478][ T9056] netlink: 3 bytes leftover after parsing attributes in process `syz.2.911'. [ 207.071763][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 207.103252][ T9056] netlink: 3 bytes leftover after parsing attributes in process `syz.2.911'. [ 207.124857][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 207.138646][ T9056] netlink: 3 bytes leftover after parsing attributes in process `syz.2.911'. [ 207.347438][ T9075] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 207.372224][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.382207][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.229313][ T9117] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 208.282574][ T9118] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.623764][ T9113] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 208.740506][ T9135] netlink: 280 bytes leftover after parsing attributes in process `syz.2.932'. [ 209.206720][ T9154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.937'. [ 209.910006][ T9177] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 209.949225][ T9173] veth1_to_hsr: entered allmulticast mode [ 209.975081][ T9177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.131263][ T9180] netlink: 'syz.4.945': attribute type 12 has an invalid length. [ 210.305106][ T9186] block nbd1: server does not support multiple connections per device. [ 210.368311][ T9186] block nbd1: shutting down sockets [ 210.471724][ T9193] __nla_validate_parse: 6 callbacks suppressed [ 210.471746][ T9193] netlink: 1308 bytes leftover after parsing attributes in process `syz.0.948'. [ 210.493214][ T9195] FAULT_INJECTION: forcing a failure. [ 210.493214][ T9195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.526947][ T9195] CPU: 0 UID: 0 PID: 9195 Comm: syz.3.950 Not tainted syzkaller #0 PREEMPT(full) [ 210.526977][ T9195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 210.526991][ T9195] Call Trace: [ 210.526999][ T9195] [ 210.527008][ T9195] dump_stack_lvl+0xe8/0x150 [ 210.527039][ T9195] should_fail_ex+0x412/0x560 [ 210.527075][ T9195] _copy_from_iter+0x1d3/0x1670 [ 210.527109][ T9195] ? rcu_is_watching+0x15/0xb0 [ 210.527142][ T9195] ? __pfx__copy_from_iter+0x10/0x10 [ 210.527182][ T9195] ? netlink_sendmsg+0x650/0xb40 [ 210.527214][ T9195] ? skb_put+0x11b/0x210 [ 210.527251][ T9195] netlink_sendmsg+0x6c0/0xb40 [ 210.527303][ T9195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.527340][ T9195] ? aa_sock_msg_perm+0xf1/0x1b0 [ 210.527371][ T9195] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 210.527404][ T9195] ____sys_sendmsg+0x972/0x9f0 [ 210.527456][ T9195] ? __might_fault+0xaf/0x130 [ 210.527491][ T9195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.527536][ T9195] ? import_iovec+0x73/0xa0 [ 210.527571][ T9195] ___sys_sendmsg+0x2a5/0x360 [ 210.527603][ T9195] ? __lock_acquire+0x6b5/0x2cf0 [ 210.527631][ T9195] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.527704][ T9195] ? __fget_files+0x2a/0x420 [ 210.527728][ T9195] ? __fget_files+0x3a0/0x420 [ 210.527765][ T9195] __x64_sys_sendmsg+0x1bd/0x2a0 [ 210.527804][ T9195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 210.527852][ T9195] ? __pfx_ksys_write+0x10/0x10 [ 210.527892][ T9195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.527915][ T9195] do_syscall_64+0x15f/0xf80 [ 210.527937][ T9195] ? trace_irq_disable+0x3b/0x140 [ 210.527969][ T9195] ? clear_bhb_loop+0x40/0x90 [ 210.527996][ T9195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.528017][ T9195] RIP: 0033:0x7fd51699ce59 [ 210.528037][ T9195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.528056][ T9195] RSP: 002b:00007fd514bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.528078][ T9195] RAX: ffffffffffffffda RBX: 00007fd516c15fa0 RCX: 00007fd51699ce59 [ 210.528094][ T9195] RDX: 00000000000140c0 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 210.528107][ T9195] RBP: 00007fd514bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 210.528120][ T9195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.528133][ T9195] R13: 00007fd516c16038 R14: 00007fd516c15fa0 R15: 00007ffdb934a818 [ 210.528168][ T9195] [ 211.236436][ T9212] netlink: 'syz.2.955': attribute type 1 has an invalid length. [ 211.285765][ T9212] netlink: 96 bytes leftover after parsing attributes in process `syz.2.955'. [ 211.311203][ T9212] netlink: 1 bytes leftover after parsing attributes in process `syz.2.955'. [ 211.352776][ T9212] netlink: 'syz.2.955': attribute type 1 has an invalid length. [ 211.391098][ T9212] netlink: 'syz.2.955': attribute type 8 has an invalid length. [ 211.447396][ T9208] syzkaller0: entered promiscuous mode [ 211.458737][ T9208] syzkaller0: entered allmulticast mode [ 211.767885][ T9238] netlink: 1308 bytes leftover after parsing attributes in process `syz.0.963'. [ 211.812686][ T9242] [ 211.815094][ T9242] ====================================================== [ 211.822148][ T9242] WARNING: possible circular locking dependency detected [ 211.829212][ T9242] syzkaller #0 Not tainted [ 211.833664][ T9242] ------------------------------------------------------ [ 211.840719][ T9242] syz.2.966/9242 is trying to acquire lock: [ 211.846643][ T9242] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 211.856640][ T9242] [ 211.856640][ T9242] but task is already holding lock: [ 211.864044][ T9242] ffff888035746e60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 211.867105][ T4943] Bluetooth: hci3: command 0x0406 tx timeout [ 211.873777][ T9242] [ 211.873777][ T9242] which lock already depends on the new lock. [ 211.873777][ T9242] [ 211.873791][ T9242] [ 211.873791][ T9242] the existing dependency chain (in reverse order) is: [ 211.873801][ T9242] [ 211.873801][ T9242] -> #7 ( [ 211.880008][ T5636] Bluetooth: hci0: command 0x0406 tx timeout [ 211.890209][ T9242] k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 211.890241][ T9242] lock_sock_nested+0x41/0x100 [ 211.899505][ T4943] Bluetooth: hci1: command 0x0406 tx timeout [ 211.904400][ T9242] mptcp_connect+0x4c3/0x830 [ 211.910621][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 211.915513][ T9242] __inet_stream_connect+0x25a/0xdd0 [ 211.915539][ T9242] inet_stream_connect+0x66/0xa0 [ 211.915560][ T9242] __sys_connect+0x312/0x450 [ 211.915587][ T9242] __x64_sys_connect+0x7a/0x90 [ 211.915616][ T9242] do_syscall_64+0x15f/0xf80 [ 211.915634][ T9242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.915656][ T9242] [ 211.915656][ T9242] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 211.915692][ T9242] lock_sock_nested+0x41/0x100 [ 211.915716][ T9242] inet_shutdown+0x6a/0x390 [ 211.915737][ T9242] nbd_mark_nsock_dead+0x2e9/0x560 [ 211.915758][ T9242] sock_shutdown+0x15e/0x260 [ 211.915778][ T9242] nbd_clear_sock+0x24/0x170 [ 211.915798][ T9242] nbd_config_put+0x2dd/0x580 [ 211.915818][ T9242] nbd_genl_connect+0x19d5/0x1cf0 [ 211.915839][ T9242] genl_family_rcv_msg_doit+0x22a/0x330 [ 211.915863][ T9242] genl_rcv_msg+0x61c/0x7a0 [ 211.915884][ T9242] netlink_rcv_skb+0x232/0x4b0 [ 211.915913][ T9242] genl_rcv+0x28/0x40 [ 211.915932][ T9242] netlink_unicast+0x75c/0x8e0 [ 211.915958][ T9242] netlink_sendmsg+0x813/0xb40 [ 211.915988][ T9242] ____sys_sendmsg+0x972/0x9f0 [ 211.916019][ T9242] ___sys_sendmsg+0x2a5/0x360 [ 211.916050][ T9242] __x64_sys_sendmsg+0x1bd/0x2a0 [ 211.916090][ T9242] do_syscall_64+0x15f/0xf80 [ 211.916109][ T9242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.916131][ T9242] [ 211.916131][ T9242] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 211.916164][ T9242] __mutex_lock+0x1a3/0x1550 [ 212.092411][ T9242] nbd_queue_rq+0x37b/0x1100 [ 212.097571][ T9242] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 212.103697][ T9242] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 212.110605][ T9242] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 212.117165][ T9242] blk_mq_run_hw_queue+0x348/0x4f0 [ 212.122852][ T9242] blk_mq_dispatch_list+0xd16/0xe10 [ 212.128618][ T9242] blk_mq_flush_plug_list+0x48d/0x570 [ 212.134555][ T9242] __blk_flush_plug+0x3ed/0x4d0 [ 212.139968][ T9242] __submit_bio+0x28d/0x580 [ 212.145016][ T9242] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 212.151202][ T9242] block_read_full_folio+0x599/0x830 [ 212.157031][ T9242] filemap_read_folio+0x137/0x3b0 [ 212.162604][ T9242] do_read_cache_folio+0x358/0x590 [ 212.168274][ T9242] read_part_sector+0xb6/0x2b0 [ 212.173600][ T9242] adfspart_check_ICS+0xb1/0x960 [ 212.179091][ T9242] bdev_disk_changed+0x817/0x1770 [ 212.186351][ T9242] blkdev_get_whole+0x380/0x510 [ 212.191775][ T9242] bdev_open+0x31e/0xd30 [ 212.196683][ T9242] blkdev_open+0x470/0x610 [ 212.201651][ T9242] do_dentry_open+0x785/0x14e0 [ 212.207233][ T9242] vfs_open+0x3b/0x340 [ 212.211997][ T9242] path_openat+0x2e08/0x3860 [ 212.217157][ T9242] do_file_open+0x23e/0x4a0 [ 212.222224][ T9242] do_sys_openat2+0x113/0x200 [ 212.227455][ T9242] __x64_sys_openat+0x138/0x170 [ 212.232859][ T9242] do_syscall_64+0x15f/0xf80 [ 212.237987][ T9242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.244425][ T9242] [ 212.244425][ T9242] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 212.251662][ T9242] __mutex_lock+0x1a3/0x1550 [ 212.256798][ T9242] nbd_queue_rq+0xc6/0x1100 [ 212.261848][ T9242] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 212.267946][ T9242] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 212.274833][ T9242] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 212.281373][ T9242] blk_mq_run_hw_queue+0x348/0x4f0 [ 212.287031][ T9242] blk_mq_dispatch_list+0xd16/0xe10 [ 212.292790][ T9242] blk_mq_flush_plug_list+0x48d/0x570 [ 212.298758][ T9242] __blk_flush_plug+0x3ed/0x4d0 [ 212.304157][ T9242] __submit_bio+0x28d/0x580 [ 212.309204][ T9242] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 212.315385][ T9242] block_read_full_folio+0x599/0x830 [ 212.321225][ T9242] filemap_read_folio+0x137/0x3b0 [ 212.326817][ T9242] do_read_cache_folio+0x358/0x590 [ 212.332483][ T9242] read_part_sector+0xb6/0x2b0 [ 212.337802][ T9242] adfspart_check_ICS+0xb1/0x960 [ 212.343298][ T9242] bdev_disk_changed+0x817/0x1770 [ 212.348878][ T9242] blkdev_get_whole+0x380/0x510 [ 212.354284][ T9242] bdev_open+0x31e/0xd30 [ 212.359078][ T9242] blkdev_open+0x470/0x610 [ 212.364042][ T9242] do_dentry_open+0x785/0x14e0 [ 212.369356][ T9242] vfs_open+0x3b/0x340 [ 212.373971][ T9242] path_openat+0x2e08/0x3860 [ 212.379109][ T9242] do_file_open+0x23e/0x4a0 [ 212.384164][ T9242] do_sys_openat2+0x113/0x200 [ 212.389388][ T9242] __x64_sys_openat+0x138/0x170 [ 212.394782][ T9242] do_syscall_64+0x15f/0xf80 [ 212.399916][ T9242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.406353][ T9242] [ 212.406353][ T9242] -> #3 (set->srcu){.+.+}-{0:0}: [ 212.413505][ T9242] __synchronize_srcu+0xca/0x300 [ 212.418988][ T9242] elevator_switch+0x1e8/0x7a0 [ 212.424313][ T9242] elevator_change+0x2cc/0x450 [ 212.429630][ T9242] elevator_set_default+0x36c/0x430 [ 212.435383][ T9242] blk_register_queue+0x3e9/0x4e0 [ 212.440947][ T9242] __add_disk+0x677/0xd50 [ 212.445824][ T9242] add_disk_fwnode+0xfb/0x480 [ 212.451048][ T9242] nbd_dev_add+0x72c/0xb50 [ 212.456006][ T9242] nbd_init+0x168/0x1f0 [ 212.460721][ T9242] do_one_initcall+0x250/0x870 [ 212.466037][ T9242] do_initcall_level+0x104/0x190 [ 212.471532][ T9242] do_initcalls+0x59/0xa0 [ 212.476418][ T9242] kernel_init_freeable+0x2a6/0x3e0 [ 212.482166][ T9242] kernel_init+0x1d/0x1d0 [ 212.487044][ T9242] ret_from_fork+0x514/0xb70 [ 212.492183][ T9242] ret_from_fork_asm+0x1a/0x30 [ 212.497501][ T9242] [ 212.497501][ T9242] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 212.505351][ T9242] __mutex_lock+0x1a3/0x1550 [ 212.510487][ T9242] elevator_change+0x1b3/0x450 [ 212.515801][ T9242] elevator_set_none+0xb5/0x140 [ 212.521209][ T9242] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 212.527557][ T9242] nbd_start_device+0x17f/0xb10 [ 212.532959][ T9242] nbd_genl_connect+0x165b/0x1cf0 [ 212.538536][ T9242] genl_family_rcv_msg_doit+0x22a/0x330 [ 212.544630][ T9242] genl_rcv_msg+0x61c/0x7a0 [ 212.549679][ T9242] netlink_rcv_skb+0x232/0x4b0 [ 212.554993][ T9242] genl_rcv+0x28/0x40 [ 212.559527][ T9242] netlink_unicast+0x75c/0x8e0 [ 212.564836][ T9242] netlink_sendmsg+0x813/0xb40 [ 212.570149][ T9242] ____sys_sendmsg+0x972/0x9f0 [ 212.575465][ T9242] ___sys_sendmsg+0x2a5/0x360 [ 212.580712][ T9242] __x64_sys_sendmsg+0x1bd/0x2a0 [ 212.586204][ T9242] do_syscall_64+0x15f/0xf80 [ 212.591338][ T9242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.597771][ T9242] [ 212.597771][ T9242] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 212.606427][ T9242] blk_alloc_queue+0x546/0x680 [ 212.611774][ T9242] __blk_mq_alloc_disk+0x197/0x390 [ 212.617429][ T9242] nbd_dev_add+0x499/0xb50 [ 212.622399][ T9242] nbd_init+0x168/0x1f0 [ 212.627104][ T9242] do_one_initcall+0x250/0x870 [ 212.632418][ T9242] do_initcall_level+0x104/0x190 [ 212.637931][ T9242] do_initcalls+0x59/0xa0 [ 212.642818][ T9242] kernel_init_freeable+0x2a6/0x3e0 [ 212.648566][ T9242] kernel_init+0x1d/0x1d0 [ 212.653445][ T9242] ret_from_fork+0x514/0xb70 [ 212.658574][ T9242] ret_from_fork_asm+0x1a/0x30 [ 212.663895][ T9242] [ 212.663895][ T9242] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 212.671134][ T9242] __lock_acquire+0x15a5/0x2cf0 [ 212.676531][ T9242] lock_acquire+0x106/0x350 [ 212.681578][ T9242] fs_reclaim_acquire+0x71/0x100 [ 212.687076][ T9242] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 212.693516][ T9242] __alloc_skb+0x1d0/0x7d0 [ 212.698487][ T9242] tcp_stream_alloc_skb+0x3f/0x580 [ 212.704148][ T9242] tcp_connect+0x1570/0x5400 [ 212.709290][ T9242] tcp_v4_connect+0x10f7/0x19b0 [ 212.714714][ T9242] tcp_v6_connect+0xbbb/0x1b10 [ 212.720025][ T9242] __inet_stream_connect+0x25a/0xdd0 [ 212.725864][ T9242] inet_stream_connect+0x66/0xa0 [ 212.731359][ T9242] kernel_connect+0x141/0x1c0 [ 212.736587][ T9242] smc_connect+0x7a5/0xd90 [ 212.741556][ T9242] __sys_connect+0x312/0x450 [ 212.746694][ T9242] __x64_sys_connect+0x7a/0x90 [ 212.752001][ T9242] do_syscall_64+0x15f/0xf80 [ 212.757137][ T9242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.763570][ T9242] [ 212.763570][ T9242] other info that might help us debug this: [ 212.763570][ T9242] [ 212.773819][ T9242] Chain exists of: [ 212.773819][ T9242] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 212.773819][ T9242] [ 212.786790][ T9242] Possible unsafe locking scenario: [ 212.786790][ T9242] [ 212.794436][ T9242] CPU0 CPU1 [ 212.799833][ T9242] ---- ---- [ 212.805219][ T9242] lock(k-sk_lock-AF_INET6); [ 212.809922][ T9242] lock(sk_lock-AF_INET6); [ 212.816964][ T9242] lock(k-sk_lock-AF_INET6); [ 212.824626][ T9242] lock(fs_reclaim); [ 212.828638][ T9242] [ 212.828638][ T9242] *** DEADLOCK *** [ 212.828638][ T9242] [ 212.836798][ T9242] 2 locks held by syz.2.966/9242: [ 212.841839][ T9242] #0: ffff88805ace4d60 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xbd/0xd90 [ 212.851024][ T9242] #1: ffff888035746e60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 212.861163][ T9242] [ 212.861163][ T9242] stack backtrace: [ 212.867090][ T9242] CPU: 1 UID: 0 PID: 9242 Comm: syz.2.966 Not tainted syzkaller #0 PREEMPT(full) [ 212.867115][ T9242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 212.867127][ T9242] Call Trace: [ 212.867142][ T9242] [ 212.867150][ T9242] dump_stack_lvl+0xe8/0x150 [ 212.867191][ T9242] print_circular_bug+0x2e1/0x300 [ 212.867221][ T9242] check_noncircular+0x12e/0x150 [ 212.867248][ T9242] __lock_acquire+0x15a5/0x2cf0 [ 212.867275][ T9242] ? __lock_acquire+0x6b5/0x2cf0 [ 212.867296][ T9242] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 212.867321][ T9242] lock_acquire+0x106/0x350 [ 212.867339][ T9242] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 212.867367][ T9242] ? __lock_acquire+0x6b5/0x2cf0 [ 212.867387][ T9242] fs_reclaim_acquire+0x71/0x100 [ 212.867414][ T9242] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 212.867438][ T9242] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 212.867463][ T9242] ? __alloc_skb+0x1d0/0x7d0 [ 212.867488][ T9242] ? ipv4_default_advmss+0x20/0x340 [ 212.867510][ T9242] __alloc_skb+0x1d0/0x7d0 [ 212.867544][ T9242] tcp_stream_alloc_skb+0x3f/0x580 [ 212.867566][ T9242] ? __asan_memset+0x22/0x50 [ 212.867590][ T9242] tcp_connect+0x1570/0x5400 [ 212.867620][ T9242] ? get_random_u16+0x139/0x910 [ 212.867641][ T9242] ? __pfx_tcp_connect+0x10/0x10 [ 212.867666][ T9242] ? __asan_memset+0x22/0x50 [ 212.867690][ T9242] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 212.867715][ T9242] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 212.867745][ T9242] ? sk_setup_caps+0x9ef/0xc40 [ 212.867775][ T9242] ? sk_setup_caps+0x29/0xc40 [ 212.867804][ T9242] tcp_v4_connect+0x10f7/0x19b0 [ 212.867826][ T9242] ? finish_task_switch+0x4da/0xbe0 [ 212.867852][ T9242] ? __pfx_tcp_v4_connect+0x10/0x10 [ 212.867875][ T9242] ? plist_check_list+0x2f4/0x310 [ 212.867898][ T9242] ? tcp_v6_connect+0x62d/0x1b10 [ 212.867921][ T9242] tcp_v6_connect+0xbbb/0x1b10 [ 212.867946][ T9242] ? __lock_acquire+0x6b5/0x2cf0 [ 212.867966][ T9242] ? __pfx_tcp_v6_connect+0x10/0x10 [ 212.867988][ T9242] ? futex_unqueue+0x22/0x240 [ 212.868006][ T9242] ? futex_unqueue+0x22/0x240 [ 212.868025][ T9242] ? futex_unqueue+0x211/0x240 [ 212.868046][ T9242] __inet_stream_connect+0x25a/0xdd0 [ 212.868068][ T9242] ? do_raw_spin_lock+0x12b/0x2f0 [ 212.868094][ T9242] ? lock_sock_nested+0x6a/0x100 [ 212.868122][ T9242] ? __pfx___inet_stream_connect+0x10/0x10 [ 212.868147][ T9242] ? inet_stream_connect+0x51/0xa0 [ 212.868165][ T9242] ? __local_bh_enable_ip+0xd0/0x130 [ 212.868190][ T9242] inet_stream_connect+0x66/0xa0 [ 212.868210][ T9242] kernel_connect+0x141/0x1c0 [ 212.868229][ T9242] ? __pfx_kernel_connect+0x10/0x10 [ 212.868247][ T9242] ? do_raw_spin_lock+0x12b/0x2f0 [ 212.868277][ T9242] ? smc_connect+0xbd/0xd90 [ 212.868305][ T9242] ? __local_bh_enable_ip+0xd0/0x130 [ 212.868325][ T9242] smc_connect+0x7a5/0xd90 [ 212.868354][ T9242] __sys_connect+0x312/0x450 [ 212.868380][ T9242] ? __pfx___sys_connect+0x10/0x10 [ 212.868410][ T9242] ? rcu_is_watching+0x15/0xb0 [ 212.868433][ T9242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.868453][ T9242] __x64_sys_connect+0x7a/0x90 [ 212.868478][ T9242] do_syscall_64+0x15f/0xf80 [ 212.868495][ T9242] ? trace_irq_disable+0x3b/0x140 [ 212.868523][ T9242] ? clear_bhb_loop+0x40/0x90 [ 212.868550][ T9242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.868567][ T9242] RIP: 0033:0x7fd019d9ce59 [ 212.868586][ T9242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.868602][ T9242] RSP: 002b:00007fd01ab95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 212.868623][ T9242] RAX: ffffffffffffffda RBX: 00007fd01a015fa0 RCX: 00007fd019d9ce59 [ 212.868636][ T9242] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000005 [ 212.868648][ T9242] RBP: 00007fd019e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 212.868659][ T9242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.868670][ T9242] R13: 00007fd01a016038 R14: 00007fd01a015fa0 R15: 00007ffe585f53b8 [ 212.868691][ T9242] [ 213.351359][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 214.844646][ T9252] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.852412][ T9252] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.901591][ T9252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.004993][ T8236] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.030137][ T8236] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.040845][ T8236] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.050132][ T8236] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.335391][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!