last executing test programs: 8.225030644s ago: executing program 0 (id=1914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x52, &(0x7f0000000040)=0x27, 0x4) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xffffffff, @empty, 0x80007}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r2, &(0x7f000000ae80), 0x1, 0x142, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa448100200086dd60005507002c060cd16a48ed3ec68823cd367e6a00fc010000000000000000000000150002fe8000000000000000000000000000aa0000c001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b002000090787ffefe06e2d4c3d9130e0794306a6d418070abd95a8700000000"], 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8c}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @loopback, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x4006}}}}}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="d91f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000440)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000640)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a55e831d2", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000002380)="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", 0xdea}], 0x1}}], 0x2, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0xc80, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r3}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000180)={0x2008}) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c04000090780000080affffa888000000000000"], 0x0) 7.964624959s ago: executing program 0 (id=1917): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/146, 0x92}], 0x1}, 0x9}], 0x1, 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)=0x1a60da94) 6.8259863s ago: executing program 0 (id=1930): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x18, 0x0, &(0x7f0000000300)) listen(r0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, 0x0, 0x4090) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r3, &(0x7f0000000340), 0x40001ca, 0x20, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x10010, 0xffffffffffffffff, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x290, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}, {0x278, 0x1, [@m_sample={0x90, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x72e}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x831}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb3}]}, {0x3a, 0x6, "a5e385c5cf15b689e35a5d7cf319406eb7e1c993df0167a7155ad72ed090e0d55e1213683325d8cbb0bd64b1628ffd0d242123925559"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x11c, 0x1b, 0x0, 0x0, {{0x8}, {0x98, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="4c6d78985579"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x7, 0x5, 0xffffffff}}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}]}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x8e}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x234, 0x4, 0x0, 0x8}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x5f, 0x6, "68463ec38d1b67b6925271a7524f0e5aad6ac8b4a4dadf4ccd63c3b4abbc9859b494a3a221eacb0d92843f2da2bb22e1ee4aa17cc57ff7328b241fef7a026df67a90cba959055c3955a1307a658b4bfe44b9700e1e03437c3c5d97"}, {0xc}, {0xc}}}, @m_police={0xc8, 0x18, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x99, 0x6, "2fb3c696bbe3882e5215ccb4706bd8b0efc081023ad2903b867bc20b2cef54399bc4ae96b95031f9ef89061183014b31a8a15073c4adb05cbc4557af15e1484d314766fb524d20e8bf6665698b2dbd28baa9d65d9464930e6e2a2c1d3fd69613d2ba08e671279e535b46f00bdaa57e533b94cd6d0661bcd456da1c26e9010e09d1a281953baa65cd376d5a51b16e710dc47860793d"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x400c894}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r4, 0x0, 0xeeec1fcb43f961cb) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x414b00, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.378962622s ago: executing program 4 (id=1956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000380)={@void, @val={0x3, 0x3, 0x8, 0x13, 0x16, 0xc}, @ipv4=@esp={{0x38, 0x4, 0x0, 0xf, 0x24e, 0x64, 0x0, 0x0, 0x32, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0xc, 0x37, 0x0, 0xf, [0x52000000, 0x80000000]}, @timestamp_addr={0x44, 0x24, 0x2b, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x5}, {@remote}, {@remote, 0x4}, {@multicast1, 0x8}]}, @cipso={0x86, 0x55, 0x3, [{0x2, 0xb, "566743a90212c94aa8"}, {0x2, 0x6, "b1c02b71"}, {0x6, 0x10, "11b71de0f286ee431d8f2cc56933"}, {0x1, 0x11, "beac8253c682560873635fc5530ea1"}, {0x0, 0xd, "09d82844da1fa2c7666c8e"}, {0x6, 0x10, "2e9fd2e99ba09b13dd559f04447d"}]}, @timestamp_prespec={0x44, 0x2c, 0xc6, 0x3, 0x4, [{@private=0xa010101, 0x10001}, {@multicast2, 0x8}, {@remote, 0x9}, {@private=0xa010100, 0x4}, {@loopback, 0x8}]}, @ssrr={0x89, 0xb, 0xed, [@remote, @local]}, @cipso={0x86, 0xf, 0x2, [{0x6, 0x9, "d6e5551d3fbffc"}]}]}}, {0x4d3, 0x9, @cc={0x1, 0x0, 0x8, 0x5, 0x0, 0x6, 0x0, [@ipv6=@icmpv6={0xe, 0x6, "ef8d58", 0x38, 0x3a, 0x1, @mcast2, @mcast1, {[@hopopts={0x0, 0x1, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}, @fragment={0x73, 0x0, 0x19, 0x0, 0x0, 0x12, 0x67}], @mld={0x83, 0x0, 0x0, 0x7, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @ipv6=@esp={0x1, 0x6, "04a031", 0xc4, 0x32, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, {[@srh={0x84, 0x8, 0x4, 0x4, 0x0, 0x20, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x18}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x4, 0xa, 0x4, 0x5, 0x4, 0x60, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @mcast1, @remote, @empty]}], {0x4d6, 0x9, @cc={0x1, 0x0, 0x5, 0x3, 0xd538, 0x4, 0xc512}, '\bN', 0x2}}}]}}}}, 0x258) 2.865893299s ago: executing program 4 (id=1958): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[], 0x28c}, 0x1, 0x0, 0x0, 0x81}, 0x4000080) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="23e051420e41de4f580212d67bc6a8704c3e8d732b48f82410c280c191fc55f307cf620a2562ec8be818bacef53824310d50c1c03e3034cbadc170c14d62e94d3fce21524b4b165d4c59767ac59d2f17180a1ed4911847b3d23019c2238e2d7be4f7b31f5559a6fa02447ffb40b94bb6ecbc574e51289a5fae6fad0d21ce38063dfe7cbe33d83edbafac2723abeea90a28be2eb1407188f866ffbfe050a2f26e33ef994848c69352f03e6eb88b0f4b4672eef366151be9f84a9a9073d15f319f70825348b17d736b5708cdaf53eacf239b6162"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8004) (async) socket$inet_smc(0x2b, 0x1, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x4, 0x4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async) recvmsg(r3, &(0x7f0000002c00)={&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, 0x0, 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x1) (async) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000580)={0x0, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x5]}}, 0x5c) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r8, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e000108000200e0000002080007400000000010000580"], 0x74}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRESDEC=r5], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000003c0)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:*}9w\x00'], 0x9) (async) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802110000010802110009000000000000010000000000000000000164000100000602020202020c06002400000000000000"], 0x36) 2.645978808s ago: executing program 2 (id=1961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) readv(r2, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/220, 0xdc}], 0x1) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000016000b63d25a80f77311d12022508ec9a280c1877fb9494b3efd6422b3a1471c070000000000000036a8ec7284e9dfa4b143947091460dfed9682a69b7bf85496a94ac7112c28b08d44b0045d1fcb429e2ec1e9c50e35076de3005251d18ff1c7cc04617871e6bf72833bbcb401f3b770a565f40920055535cd3bf29b167a87d03372f25f602f6d4241d514230dbedc2fbf390266b0d031f00977dc116e966d4b0c2106b8febbfc97038253fc92255723d706166950fa8", 0xbb}], 0x1}, 0x40090) 2.316662001s ago: executing program 2 (id=1965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="500008000102030000000000000000000a0000023c0002802c00018014000300000000aa14000400ff0100000000000000000000000000010000000000000000000000000063202a6a33993f5130f221503f6e0cd23f05d65bf26aba1a8ead0698051473c5bc31ddb2f7338053f8814014798d5fd8b01186089bedfd3752a2b578fef13cbc39013af237c5e6813eb95db41818e694b0dec798876b3417210847bc259c192f10fe4aab3a31db68cb45c023bbcdc091dbb83b2c616040ee7d5d56f21c93a0ef8df8b34531271312f799c81f287e5eb18973b53a134be73ea723d49715e472a5ed"], 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)={0x4bc, 0x0, 0x5, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x3}, 0x7, 0xf, 0x8, 0x7, 0x1b, 'syz1\x00', "28d13152fe705ec89b1bda0c03f3cf452e79d1c2b82b5aabc3cc0a372e56f87c", "b63ec821b3a7e5e0905469b4ccd7d410b595c633e1f910580b677c90300dfe0b", [{0x0, 0x7, {0x3, 0xd}}, {0xfffc, 0x1, {0x2, 0xfffffff8}}, {0x401, 0xa32, {0x1, 0x80000000}}, {0xc280, 0x3, {0x1, 0x8}}, {0x6, 0x401, {0x1, 0xfffff486}}, {0x2, 0x0, {0x1, 0x3}}, {0x7, 0x60, {0x2, 0x4}}, {0x4, 0x6, {0x3, 0x7}}, {0x5267, 0x5, {0x1, 0x2d0f}}, {0x2, 0x8, {0x3, 0xbc5}}, {0x101, 0xd00, {0x3, 0x6}}, {0x7f, 0x40, {0x2, 0x4}}, {0x25b0, 0x3, {0x1, 0x4}}, {0x2, 0x1, {0x2}}, {0x6, 0x9, {0x2, 0xfd23}}, {0x6, 0xa, {0x2, 0xfffffffe}}, {0x8, 0xfff7, {0x0, 0x9}}, {0x2, 0x2, {0x2, 0xffff}}, {0x9, 0x4, {0x3, 0x3}}, {0x1, 0x8001, {0x2, 0x7}}, {0xc, 0xcf8}, {0x3, 0x9, {0x1, 0x80000001}}, {0x7, 0xfb56, {0x3, 0x4}}, {0xc, 0x7, {0x3}}, {0x1e, 0x3, {0x3}}, {0x8, 0x81, {0x2, 0x23a32181}}, {0x5, 0x47, {0x2, 0x6}}, {0x9, 0x0, {0x2, 0x3}}, {0x5, 0x8, {0x1}}, {0xfffd, 0x8a, {0x3, 0xe}}, {0xc, 0x400, {0x3, 0xbe4}}, {0x0, 0x5, {0x1, 0xfc32}}, {0x800, 0x0, {0x3}}, {0x2, 0xe, {0x2, 0x8}}, {0x9, 0x1, {0x3, 0x10}}, {0x9, 0x2, {0x1, 0x6}}, {0x9, 0x7}, {0xc, 0x800, {0x3, 0x8cd0}}, {0x4401, 0x5, {0x1, 0xff}}, {0xfff, 0x5, {0x3, 0xb4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x5, 0x0, 0x4, 0x1000, 0xc, 'syz0\x00', "48366f7de7fafff91d675e2add3c68391989636ef6a155d3131d625938ca243b", "6a66ad64d14790c8a61eeea458ee29cbffc09c6c39dd29d2f645dbb836d9fc56", [{0x9, 0x0, {0x0, 0x10000}}, {0x6, 0x1, {0x0, 0x8}}, {0xc, 0xffd7, {0x3, 0x9}}, {0x0, 0x1, {0x0, 0x3}}, {0x8, 0x2b8, {0x2, 0x6}}, {0x5, 0xb5, {0x1, 0x2}}, {0x32e5, 0x8000, {0x3, 0x1b}}, {0x5a, 0x2, {0x0, 0x2}}, {0xfffa, 0x8, {0x2, 0x101}}, {0x3, 0x8, {0x0, 0x5}}, {0x6cd, 0x4, {0x0, 0xffffffff}}, {0xfff8, 0x9, {0x1, 0x7f}}, {0xffc0, 0x0, {0x1, 0x5}}, {0x5, 0x7, {0x0, 0xda5a1be}}, {0x611d, 0xe218, {0x3, 0xa}}, {0x0, 0x6, {0x0, 0xfffffc00}}, {0xfea, 0x36f, {0x3, 0x5}}, {0x1000, 0xee3, {0x0, 0x3}}, {0x1, 0x0, {0x0, 0xffff}}, {0x2, 0x7e, {0x0, 0x4b6}}, {0x0, 0x9, {0x1, 0xf3e}}, {0x13, 0xf20, {0x0, 0x4}}, {0x4, 0xfff, {0x1, 0x7}}, {0x7, 0x1, {0x2, 0x7}}, {0x5, 0xb5, {0x2, 0x549}}, {0x1ff, 0x3, {0x1, 0x6}}, {0x5, 0x6, {0x3, 0x7}}, {0x1d, 0xa, {0x2, 0x8}}, {0x8, 0xf7, {0x0, 0x200}}, {0x23, 0x6, {0x3, 0x5}}, {0x7f, 0x0, {0x0, 0x755}}, {0x4, 0x5, {0x0, 0x3ff}}, {0x4, 0x0, {0x3, 0x80000001}}, {0x1ff, 0x1, {0x1, 0x8}}, {0x6, 0x7f, {0x2, 0x6}}, {0x3, 0x6, {0x2}}, {0x4, 0xf16e, {0x2, 0x81}}, {0x7, 0x83, {0x2, 0xfffffffe}}, {0x8, 0x7f, {0x3, 0x5}}, {0x50, 0x7, {0x0, 0x8}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x44004}, 0x10) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x11}, 0x40000) socket$inet_mptcp(0x2, 0x1, 0x106) 2.182052297s ago: executing program 0 (id=1966): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000ffffffff0500"/20, @ANYRES32=r0], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) socket$kcm(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001980), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1c200000", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf254b000000"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x80) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x8000000, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a000000000000000000d200050000000000000000000000000000021809ab75dbc7eb0440ffff0000000003000600000000000200"/67], 0x50}}, 0x20004055) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40480, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4049004) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r12, 0x400003e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf", 0x22}], 0x1}, 0x0) unshare(0x6040580) socket$alg(0x26, 0x5, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000001d00)={'batadv_slave_1\x00'}) 2.130793687s ago: executing program 2 (id=1967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000203050000000000000000000200000008000340000003ff0900020047628c67be"], 0x28}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x14, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x10, 0x1, "1fbabd000000000093080000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x108}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000004010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="6d9311000000f8dbdf25010000000c00030003"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 2.021224421s ago: executing program 4 (id=1969): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x40010) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) read(r2, &(0x7f00000000c0)=""/63, 0x3f) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 2.010002006s ago: executing program 1 (id=1970): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) r2 = socket(0x10, 0x2, 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000740)) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES64=r2], 0x20}}, 0x1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000000b010300000000000000000a008008e3120240ffff0300000001007b2d290008000340000000000800024005000001df23ec21bcc53ce4d10183c717c35b68b2fddacafbd64bdf"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4048010) (async) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x12, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r4}, 0x8) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f00000000c0)={@private=0xa010100, @private=0xa010102, @remote}, 0xc) 1.923262143s ago: executing program 1 (id=1971): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, 0x0, 0x4000000) write$cgroup_int(r6, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000) 1.555507047s ago: executing program 3 (id=1973): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000b8000100000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005f0ff00bca900000000000035090100000000009500000000000000b7020000001000007baaf8ff00000000b6090000e4b00000dbaaf8ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 1.540199476s ago: executing program 1 (id=1974): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_WEIGHT={0x8, 0xf, 0x9}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}}, 0x0) 1.348468739s ago: executing program 1 (id=1975): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x1010, r0, 0x679e1000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x20000010) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a", @ANYRES8=r0, @ANYRES16=r1, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c810) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) 1.347632062s ago: executing program 3 (id=1976): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000740)={0x30, r1, 0xb1c21d04d6f403e9, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc008002}, 0x8004000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$key(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)={0x2, 0x8, 0x4, 0x6, 0x1c, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_x_sec_ctx={0xd, 0x18, 0xf2, 0x9, 0x5b, "9d057401d416cbdd2d4f49c9b99f701543c138140b1057141ab9667eacf90806569887849338506fe3232b8f098bfc380f49ac4b43c8ef5133b732c98b21ae936e4a98ef8914369065f6a563eed29f84e9ebeeea773b5c4d1be008"}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x1, 0xef, 0x3, 0xc0000000}, @sadb_sa={0x2, 0x1, 0x4d3, 0x6, 0xc5, 0x1b, 0x2, 0xa0000000}, @sadb_address={0x5, 0x6, 0x2b, 0x0, 0x0, @in6={0xa, 0x4e20, 0x800, @mcast2, 0x9}}, @sadb_sa={0x2, 0x1, 0x4d6, 0xe3, 0xc1, 0xdc, 0x1, 0xc0000000}]}, 0xe0}}, 0x20040004) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) read$alg(r8, &(0x7f0000000400)=""/245, 0xf5) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r9, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000340)={0x50, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xcef}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x276}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x50}}, 0x1) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINK={0x8, 0x5, r11}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000240)=0x4000000000000) 746.890318ms ago: executing program 4 (id=1977): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 713.13639ms ago: executing program 0 (id=1978): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x1b, 0x5, 0x3b0, 0x0, 0x220, 0xffffffff, 0x178, 0x0, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, &(0x7f0000000080), {[{{@ip={@multicast2, @multicast1, 0x0, 0xffffff00, 'ip6gretap0\x00', 'ipvlan1\x00', {}, {}, 0x84, 0x0, 0x5e}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x11, @multicast2, @rand_addr=0x64010100, @gre_key=0x1, @port=0x4e23}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x8, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @empty, @local, @gre_key, @icmp_id=0x64}}}}, {{@ip={@broadcast, @local, 0x0, 0xff000000, 'pimreg\x00', 'batadv_slave_1\x00', {}, {}, 0x29, 0x2, 0x22}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @private=0xa010101, @multicast2, @port=0x4e21, @port=0x4e20}}}}, {{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x2, 0x3, 0x1, 0x1, 0x5, 0x1], 0x3, 0x2}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv4=@multicast1, @ipv6=@mcast1, @icmp_id=0x65, @port=0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000540)={'bond_slave_0\x00', @ifru_ivalue=0x2a}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000600)={@empty, @empty, 0x0}, &(0x7f0000000640)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl2\x00', r0, 0x2f, 0x0, 0x4, 0x6b, 0x8, @mcast2, @private0, 0x7800, 0x1, 0x9, 0x1600}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xb4, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0x3e91}, 0xc) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x13, 0x6, 0x5, 0x0, 0x0, r8, 0x8, '\x00', r6, r9, 0x3, 0x2, 0x4}, 0x50) r11 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000980)="3b6c4c2a169429dbe0ad9549eb8f517c528da2f5a0d407a78622c435c603e4840582d938855d865bb1bc4c357e918920501fb581cd5015b596fb57f96105677085bed45da5cf6f68ab533d1b3033b515d3b9c839e067b8c047052501b022019c98ff72cc357cd25860a4de9a9c86feb81c4a8fd7cc5446a1182ce4ab2b41e1656c2fcf12fbb0765a418127c4a61d1ee9a32a4d04c9737a708d402f323e95", 0x9e}, {&(0x7f0000000a40)="00c950f234da9f61eda0cd5139411e140cc20dde666d78782c534f5bf421f782067457a939af354e567b6d08cf2098849440f208d49a4c94dfbbefa319e9db0c10f7f3d40878a7cdf62bd8bc131bf29eb030a3baa4000e401c78d54f2ca47b8c2a036e0c3725a7474e3e9e65edeb56f09bb3af8c1097fde736fe18b8dae2e26d6de451c509a4d5baf0360b86cebe174998ce322372712cdf27ff511580615ec529bd806bf6bd18bde4bb5790d454095fb607d3c6ac0f78eb1589ee0d9b908d8934acdfe3e9449648836d11f949fb19e538f5852b04074b0457124bf8760f633bc62228fa20cbaa959bcaf889e81d220c3e", 0xf1}, {&(0x7f0000000b40)="41fa550eb398dd72ffb6e0be2c633efe15c0692e46e8c0e54bbfbb1bcc358074e483f03bcdfa147a7619b26d631ec1f384e2f8a279e89853b3da31a176fd2e1797a6ae4a6ae72eb1268fb317a3cba17499dd39a135601219d32d2bc50b96e744", 0x60}, {&(0x7f0000000bc0)="88b692695c0429e49b9cf0f9c4cfd6c81acdb021bbe1733037ec720ad9bf566c5f", 0x21}, {&(0x7f0000000c00)="e2308115d5b24b07940d566bf5613694f463b79a21a205e0e90de3861f93410254753b1e03b0b58a694492cae5e6bfdbf601c85cfe3289fb227f7568d497e44f0b17738f75ace11e67f088f025805e747e5e18e31a2b2a4cb4eb90cab90db93314ddce009cbe707be3b15fb908518d90dc81975f83f047f0780fd662a5ec952cfdf058a3e1e09ce8adcfa9a5a94bcec81028158999866544a6b6d6076f544798e3e7e857ba8e996bfc463de3941968969b782f36fcfc3aeb163a25fa24872414da341846617088f9df8df2e72f722f8e4bd01033dd65a89514ef096a79d0689ea8fa751f2b8f5c891b1fd7830e2984e4a39e223e", 0xf4}, {&(0x7f0000000d00)="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", 0x1000}], 0x6, &(0x7f0000001d80)=[{0x48, 0x11, 0x5, "bcbf2efcaed36207875128302d165ee614f67941ec71981373fc70419648bae659c2c12265a1f7ef0749b6c0677e4cbe92e2c33ad5"}, {0x20, 0xff, 0x0, "e2d520b9463544595d5c5dbd40634f83"}, {0xe8, 0x102, 0x5, "13cf05dd90a2959c0921d07b198ddc782bc954b5915788b09612c33025a78639a4cac8bf73a2c3997f6f73093e7607a7941da51b0dbd6ed7a2239db9f703f811446d4ef1fcbf11f913e51e11bd5ec3b6f78ad9391eee6a707e12d32ac233eace02304afe81d69f378260271fe28b162d93594ba7a5d56063d2054e9e346eedb6985fcf39c844790cc9d66f5796d9e0eb220b7bec85a3806f70bebfff4ce022a9e12d2c662af76ce9044de79183bdb934b2f75d53e43cef8a9caa058bd141bd0e6bec52c885b53eb68e74a8db97d87bd6725630ba4006d6"}, {0xf0, 0x11, 0xb571, "4ac66b8cc12a0433bf15029f4c1733421841b2f7be8d52d3719a7c1999ab5f5e83cbe5f89819187447022169146fe832cfd8cc43e8b718bc87931c2e8a478993422347c60dae34e971282453c89953ace532b4c544146de5ec1f34ee6c3862828735629b628376f734542d3c9d21b5d77b931906908dda8fef16e00c61cbf9118acac207f4bce304c37d503888d621e94f3c3dbc8d8cf0aad21f7fb0d6f46eeb5f49f861bfbd79b92b473a4d471e3491dbd259adc5740d6232f7dfc1f5bccf6a1807eba201536218812330f8125808e8c58d7d88d40782adddcadb3ef6da9e"}, {0xa0, 0x84, 0x31, "85145110e5706fa4780af3f11fd71f37fb87e7090a1f33991d7ed253bb48ce5222eec2a8b342c5eefdaf6abfbea0860ab0dc2bbd8077d500e0f36d60b4daf9eca54ac7c2be4497c15f39858ab087bbfe92aaaab8a218299b8e654e580fab8eddd2eef2c5d651d5060a00e2ec94388befd6b2907d648fba526e0c7959c642497df12fd088e5b8f7be75"}, {0x1010, 0x29, 0xab, "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"}, {0x100, 0x113, 0x649, "d0e07b98d5ca62c3022c4a757d8cdd14dc42747059c455544526cd47a42ef7d0a0dc495c2b95ffd2a8e8da5e104e03e4c185b39080544876199e130085d87a8da655c1f680817d4e4811299c3072f9cc72705c0a8de33598b9dbbd6d982b2e331bcb0f0075e39a05ab680e9ffd944bfba1fb1ca14b498fcf35f82165b143d53be6efd3764e5407af0c5a9053fa4cb0c1ae67256ae1c941f22394aa528694c655be8b4deea2e864a7dcbe42193ca59462cb6722a7bf840ee54a75084829982f8886c136e7412ca936e3c644fe5bb14f13b1ecf387782a42b18bc98d7dcb7ccad5bc79a2ddab83433ffc73ecb74b"}, {0x1010, 0x10d, 0x5, "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"}, {0x20, 0xff, 0x9, "a8f4cd0e45f3e9c528dc"}], 0x2420}, 0x40080c0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000004200)={0x0, @in={{0x2, 0x4e24, @local}}, 0x200, 0x4, 0x8, 0xf214, 0x4, 0xfff}, &(0x7f00000042c0)=0x9c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000004300)={0x8, 0x8, 0x5, 0x10001, 0x1280, 0xa, 0x200, 0x1ff, r12}, &(0x7f0000004340)=0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004380)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000043c0)={0x7ff, 0x201, 0x7, 0x9c, r12}, &(0x7f0000004400)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r14, 0x84, 0x7b, &(0x7f0000004440)={r15, 0x2}, 0x8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000004480)={0x0, @dev, @dev}, &(0x7f00000044c0)=0xc) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000004500)={@empty, @loopback, r16}, 0xc) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000004540)) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000004640)=@bloom_filter={0x1e, 0xfffffffb, 0x1, 0xa, 0x4400, r10, 0x8, '\x00', 0x0, r9, 0x5, 0x3, 0x5, 0x2}, 0x50) setsockopt$inet_mtu(r14, 0x0, 0xa, &(0x7f00000046c0)=0x5, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r13, 0xc0709411, &(0x7f0000004700)={{0x0, 0x10, 0xffffffffffff7fff, 0xfffffffffffffff9, 0x1acb8fe7, 0x82, 0x7, 0xa238, 0x1, 0x8001, 0x97d4, 0x8, 0x2, 0xa1, 0x7}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r17, 0xc0709411, &(0x7f0000004780)={{r18, 0x2, 0x5, 0x3, 0x4, 0x1, 0x2, 0x6, 0xf, 0x5, 0x2, 0x9, 0x9, 0x7, 0x1}, 0x8, [0x0]}) 665.02127ms ago: executing program 3 (id=1979): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x2c, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040000}, 0x10) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x2c, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040000}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r5, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r5, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000e0000000200000008000100", @ANYRES32=r5, @ANYBLOB="0800020001000000080008"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 664.641165ms ago: executing program 2 (id=1980): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, 0x13, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0x1c, 0x145, 0x0, 0x1, [@typed={0xc, 0xb0, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x63}, @typed={0x8, 0x2b, 0x0, 0x0, @u32=0xf}]}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 605.45737ms ago: executing program 4 (id=1981): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r9, r8, 0x25, 0x0, @void}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@rand_addr, @private, 0x0}, &(0x7f0000000200)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x7, 0x20, 0x7, 0x8, {{0x9, 0x4, 0x2, 0x9, 0x24, 0x64, 0x0, 0xc0, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@ra={0x94, 0x4}, @generic={0x44, 0xa, "66ed354d5296f1c8"}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, r6, 0xd00, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 555.96442ms ago: executing program 0 (id=1982): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) getsockopt$SO_NETNS_COOKIE(0xffffffffffffffff, 0x1, 0x47, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8e9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004014}, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4ea3, 0x8, @loopback, 0x3}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x8}, @empty, 0x7, 0x17}}) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000005c0)) 492.906936ms ago: executing program 2 (id=1983): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r0}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000700)={{r1, &(0x7f0000000040)='l2tp\x00', 0x288c40, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x80000000]}, {0x0, 0xd, 0xef6, 0xffffffffffff72e2}}, 0xd5, &(0x7f0000000140), &(0x7f0000000200)=0x3}, 0x3, &(0x7f0000000680)=[{0x3, 0x2, &(0x7f0000000240)='[+!^@\x00', &(0x7f00000002c0)="7844997d71fedad0fbaed9924aca5a1cfa4772cc715ea8cf7217677c4c08c8486b5ce20af2f2ebeed53677381550b2d8b8523ff91a9107bcb403622c0aef61a8104de7fdafcc795be4a1cd370bb80e6e8f88cf45c4aa2e6f8d2a391ac6916187d1ed334323147e665d324b87c22b22993c7ed47963", 0x75, 0x22}, {0x1, 0x7, &(0x7f0000000380)='l2tp\x00', &(0x7f00000003c0)="f00f0fcda0b8f630f259641990a2ff92826b8ed9542e91c535ed04287f4a79b224ddf7b537aa4461b88bb22e011ed39608f8e61d0c9a97ff590fcba22b21ea7e8001da41e3788fd7bb1fa4ac19c0daf532ee84a93a6dc2fcd49db2188bfd7fee8b83a22051d1158113f17fbe3e5f3137add5eb024caca57479f9131c2e850190d7beeb45f072d294ce5b0911b82484386bb2adb73d9e53c3bace817634ecc9dfb84731a770b8e5b5e26160da0e4c60df58701c380a29b3cfc50f5fe5565fad6a49e018b597f345b61f07ff4500d974f06b86a2b93ec82ec32829ec2b9990d0d9c4c5c0095f0085b7d59b5d50310324d5a7301b4761a76c59", 0xf8}, {0x1, 0xff, &(0x7f0000000580)='^-\x00', &(0x7f00000005c0)="a58a5003fe1222f81b72452fffdcd8144f5ebd2599db8f562472742baa111229170e5a4ca39cc14d30b7165e0709806d4c61953bd793e9bad3560ebee41abe2da1c39680f7ff86273cdccf61a4d7541dd9638c5c3d1392142759a4a5d9ec1af5fbcab723d015ac74acb18bb93a99ce1beec534215992e2cb6d7be11d1371ce84dcb32fe0e9dd2d073efe3a7353e235e7662112521c3b4fe100da7dd44b8cc8b3b73e5916f4b0bcf94bd9f874dc2cc2d924f2", 0xb2}]}) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20060810) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f000000000000001c0012800b00010062726964676500800c00028006002700"], 0x3c}}, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x3c}}, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48010000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000a08000240000000000900010073797a30000000000900020073797a3200000000eb0007"], 0x170}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xffffffffffffff9a, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 413.82755ms ago: executing program 1 (id=1984): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x7}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x8}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffe0, 0x7}, {}, {0xa, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xbf15}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="460a0000000000006111500000000000180000000000200000000000000000009500000000000000c61123a6f8ffccfb76e9443b999941ac40f3b8ef5d58fa4053b135a948e74e8590204689410cd08f8163cdcf9c313cd7a3e224b089005becf939"], &(0x7f0000000000)='GPL\x00', 0x9}, 0x94) 410.482192ms ago: executing program 3 (id=1985): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newtaction={0x98, 0x30, 0x30b, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mirred={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x84, 0x8, 0xfffffffa, 0xffffffff}, 0x1, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x98}}, 0x0) 270.060354ms ago: executing program 3 (id=1986): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000b8000100000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000500f000bca900000000000035090100000000009500000000000000b7020000001000007baaf8ff00000000b6090000e4b00000dbaaf8ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 189.113261ms ago: executing program 2 (id=1987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000040000010000030900010073797a30000000002c000000030a01020000000000000000010000090900010073797a30000000000900030073797a3200000000b0000000060a010400000000000000000100000008000b400000000088000480340001800b000100657874686472000024000280080001400000000c080003400000000a08000440000000220500020007000000500001800c0001006269747769736500400002800800034000000002080001400000000e080002400000000700000040000000041c0007801500010024200b84ca94c1ce064081bec78a3cb2ed0000000900010073797a30"], 0x124}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000bc0)=""/214, 0xd6}, {&(0x7f0000001040)=""/4100, 0x1004}, {&(0x7f0000000580)=""/151, 0x97}], 0x4}, 0x2}, {{0x0, 0x0, 0x0}, 0x40000000}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000002080)=""/4079, 0xfef}, {&(0x7f0000000340)=""/242, 0xf2}], 0x3}, 0x6}], 0x7, 0x140, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x3c, r4, 0x1, 0xfffffffd, 0x3, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0xc800) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r3) 150.33179ms ago: executing program 4 (id=1988): r0 = socket$packet(0x11, 0x2, 0x300) recvmsg(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x3c65e5a12d2f864f) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d7fb7c27a1059ae31c6", 0xd8}, {0x0}], 0x2, 0x0, 0x0, 0x7400}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0000ef030000ed040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r4 = socket(0x14, 0x2, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r5) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r8, @ANYBLOB="0300000000004000000000000000448879f000000000000000", @ANYRES32=r4, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030029bd70000e0000000100000008000100", @ANYRES32=r8, @ANYBLOB="08000200c3"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x201, 0x0, 0x0, {0xb, 0x0, 0x4}, [@CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x511}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa68}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xe87}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x44}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4004040) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403, 0x14112}, [@IFLA_NET_NS_FD={0x8, 0x1c, r10}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@empty, 0x0}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x41000, 0x8, '\x00', r11}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 372.567µs ago: executing program 1 (id=1989): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000f8000000bca300000000000024030000b0feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0bf8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7714}, 0x10}, 0x4f) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x4, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x6, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x44080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010014000000000000028c00000008000300", @ANYRES32=r6], 0x28}}, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r12 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r12, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r13 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r13, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'wpan3\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x4c, r5, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x45}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xd}, @NL80211_ATTR_PMKID={0x14, 0x55, "2c1871dde237de3928d0c3496958dc0c"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x29}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004004) pipe(&(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r14, &(0x7f0000001200)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001380)=ANY=[@ANYBLOB='9\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="00022abd7000fbdbdf25140000000c000600000000000000000008001c00", @ANYRES32=0x0, @ANYBLOB="0800010001000000080001000100000008000300", @ANYRES32=r16, @ANYBLOB="08001d00", @ANYRES32=r17, @ANYBLOB="0c000600020000000000000008000300", @ANYRES32=r18, @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x15}, 0x800) 0s ago: executing program 3 (id=1990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14}}, 0x6c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xf, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x88}, [@generic={0x91, 0x1, 0x1, 0x88}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a1c010000090a010400000000000000000100000108000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd80009800800014000000006cc0002802c"], 0x144}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@enum64={0x6, 0x2, 0x0, 0x13, 0x0, 0x8, [{0x9, 0x8, 0x2b6}, {0x4, 0x1, 0x9}]}]}, {0x0, [0x0, 0x30, 0x0, 0x0, 0x2e, 0x61, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x47, 0xff9, 0x6, 0xffffffff}, 0x28) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x63, 0x7, 0x1, 0x0, "a8116060d06a017ee495c5cc558e7375d48d73071fae474b476666318f51f9538875c285af7bcfbbd53f7249cbf2eb5444492023cac1f21512755b617e5f9721e9e71bdb9887c30134606538eff6f40e46d61017304bade4b8976186386ed4"}]}, @NFT_MSG_NEWTABLE={0x108, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0xffffff26, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xb6, 0x6, "02b00ab0cf87d55f12723f1a885d962cec0c9510ff3a7c5947b0f6b75646b619d7775291f174593d86732e29935c29f8efaa9d275d952bbfc8671d829b17a7ad0cb6a1bf066e87c28dd52232bd0923ff041e83fd05219cc5d4a7e2a3232367ecf97588388c707cbd41d7a1bad6345a52324ac46fe5553d0ee6d14f3640499988a79d2cdb2e9056ad2908d83b559f2a8bd5e2862a2f931d9baa4ba2e1b8099b967b57806ba1b523334c6840acc1b4230c0a0f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1c0}, 0x1, 0x0, 0x0, 0x24000850}, 0x24044010) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000000", 0x3a}], 0x1}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x2f, 0x1, 0xa2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ab}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0feffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r7, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r8}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r6, r1, 0x1c, 0x30, 0x0, @void, @void, @void, @value=r8, r5}, 0x20) kernel console output (not intermixed with test programs): pfx_number+0x10/0x10 [ 246.628071][T11395] check_store_reg+0x664/0xe20 [ 246.628112][T11395] do_check_insn+0x9df/0x18e70 [ 246.628142][T11395] ? vscnprintf+0x5c/0x90 [ 246.628163][T11395] ? bpf_verifier_vlog+0x3d1/0x900 [ 246.628200][T11395] ? format_decode+0xdc/0xda0 [ 246.628228][T11395] ? vsnprintf+0x3a0/0xef0 [ 246.628258][T11395] ? __asan_memcpy+0x40/0x70 [ 246.628281][T11395] ? __pfx_do_check_insn+0x10/0x10 [ 246.628335][T11395] ? vscnprintf+0x5c/0x90 [ 246.628357][T11395] ? bpf_verifier_vlog+0x3d1/0x900 [ 246.628389][T11395] ? verbose+0x11d/0x1a0 [ 246.628408][T11395] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 246.628431][T11395] ? __pfx_verbose+0x10/0x10 [ 246.628452][T11395] ? bpf_vlog_reset+0x1db/0x340 [ 246.628475][T11395] ? print_insn_state+0x106/0x170 [ 246.628499][T11395] do_check_common+0x3c19/0x5d30 [ 246.628565][T11395] ? __pfx_do_check_common+0x10/0x10 [ 246.628600][T11395] ? __pfx_verbose+0x10/0x10 [ 246.628616][T11395] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 246.628649][T11395] bpf_check+0x2639/0x2e10 [ 246.628684][T11395] ? ktime_get_with_offset+0x93/0x2d0 [ 246.628712][T11395] ? __pfx_bpf_check+0x10/0x10 [ 246.628738][T11395] ? bpf_obj_name_cpy+0x194/0x1e0 [ 246.628776][T11395] bpf_prog_load+0x14d6/0x1c20 [ 246.628813][T11395] ? __pfx_bpf_prog_load+0x10/0x10 [ 246.628864][T11395] __sys_bpf+0xd0d/0xd90 [ 246.628897][T11395] ? __pfx___sys_bpf+0x10/0x10 [ 246.628933][T11395] ? __fget_files+0x2a/0x420 [ 246.628981][T11395] ? ksys_write+0x242/0x270 [ 246.629013][T11395] ? __pfx_ksys_write+0x10/0x10 [ 246.629048][T11395] __x64_sys_bpf+0xba/0xd0 [ 246.629072][T11395] do_syscall_64+0x166/0x520 [ 246.629095][T11395] ? trace_irq_disable+0x3b/0x140 [ 246.629115][T11395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.629136][T11395] ? clear_bhb_loop+0x70/0xc0 [ 246.629161][T11395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.629181][T11395] RIP: 0033:0x7f1ba779e159 [ 246.629201][T11395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.629216][T11395] RSP: 002b:00007f1ba862a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.629240][T11395] RAX: ffffffffffffffda RBX: 00007f1ba7a25fa0 RCX: 00007f1ba779e159 [ 246.629254][T11395] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 246.629268][T11395] RBP: 00007f1ba862a090 R08: 0000000000000000 R09: 0000000000000000 [ 246.629280][T11395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.629293][T11395] R13: 00007f1ba7a26038 R14: 00007f1ba7a25fa0 R15: 00007ffd2d4e9488 [ 246.629327][T11395] [ 247.406636][ T7061] IPVS: starting estimator thread 0... [ 247.501393][T11417] IPVS: using max 24 ests per chain, 57600 per kthread [ 248.025129][T11442] FAULT_INJECTION: forcing a failure. [ 248.025129][T11442] name failslab, interval 1, probability 0, space 0, times 0 [ 248.025180][T11442] CPU: 0 UID: 0 PID: 11442 Comm: syz.0.1214 Not tainted syzkaller #0 PREEMPT(full) [ 248.025202][T11442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.025219][T11442] Call Trace: [ 248.025227][T11442] [ 248.025236][T11442] dump_stack_lvl+0xe8/0x150 [ 248.025270][T11442] should_fail_ex+0x410/0x560 [ 248.025299][T11442] should_failslab+0xa8/0x100 [ 248.025326][T11442] __kmalloc_cache_noprof+0xa3/0x600 [ 248.025344][T11442] ? copy_array+0xab/0x100 [ 248.025370][T11442] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 248.025395][T11442] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 248.025432][T11442] bpf_copy_verifier_state+0xb1f/0x1170 [ 248.025471][T11442] bpf_is_state_visited+0x377d/0x47d0 [ 248.025505][T11442] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 248.025535][T11442] ? bpf_vlog_reset+0x1db/0x340 [ 248.025562][T11442] do_check_common+0x2848/0x5d30 [ 248.025636][T11442] ? __pfx_do_check_common+0x10/0x10 [ 248.025659][T11442] ? __pfx_verbose+0x10/0x10 [ 248.025676][T11442] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 248.025709][T11442] bpf_check+0x2639/0x2e10 [ 248.025741][T11442] ? ktime_get_with_offset+0x93/0x2d0 [ 248.025767][T11442] ? __pfx_bpf_check+0x10/0x10 [ 248.025792][T11442] ? bpf_obj_name_cpy+0x194/0x1e0 [ 248.025825][T11442] bpf_prog_load+0x14d6/0x1c20 [ 248.025863][T11442] ? __pfx_bpf_prog_load+0x10/0x10 [ 248.025913][T11442] __sys_bpf+0xd0d/0xd90 [ 248.025945][T11442] ? __pfx___sys_bpf+0x10/0x10 [ 248.025980][T11442] ? __fget_files+0x2a/0x420 [ 248.026025][T11442] ? ksys_write+0x242/0x270 [ 248.026058][T11442] ? __pfx_ksys_write+0x10/0x10 [ 248.026092][T11442] __x64_sys_bpf+0xba/0xd0 [ 248.026117][T11442] do_syscall_64+0x166/0x520 [ 248.026141][T11442] ? trace_irq_disable+0x3b/0x140 [ 248.026160][T11442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.026181][T11442] ? clear_bhb_loop+0x70/0xc0 [ 248.026205][T11442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.026225][T11442] RIP: 0033:0x7f1ba779e159 [ 248.026245][T11442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.026261][T11442] RSP: 002b:00007f1ba862a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.026284][T11442] RAX: ffffffffffffffda RBX: 00007f1ba7a25fa0 RCX: 00007f1ba779e159 [ 248.026299][T11442] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 248.026312][T11442] RBP: 00007f1ba862a090 R08: 0000000000000000 R09: 0000000000000000 [ 248.026325][T11442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.026337][T11442] R13: 00007f1ba7a26038 R14: 00007f1ba7a25fa0 R15: 00007ffd2d4e9488 [ 248.026372][T11442] [ 248.284063][T11444] ip6erspan0: entered allmulticast mode [ 248.378866][T11450] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 248.448273][T11453] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 248.514383][T11448] syzkaller0: entered promiscuous mode [ 248.514410][T11448] syzkaller0: entered allmulticast mode [ 248.698556][T11468] __nla_validate_parse: 3 callbacks suppressed [ 248.698580][T11468] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1221'. [ 248.763254][T11468] veth0_macvtap: entered promiscuous mode [ 248.811240][ T6504] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 249.189405][T11485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1223'. [ 249.240246][ T6504] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 249.691736][T11502] bond0: invalid NS target ff00:0:0:f9:: specified for addition [ 249.691769][T11502] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 249.861311][T11508] FAULT_INJECTION: forcing a failure. [ 249.861311][T11508] name failslab, interval 1, probability 0, space 0, times 0 [ 249.861346][T11508] CPU: 0 UID: 0 PID: 11508 Comm: syz.3.1229 Not tainted syzkaller #0 PREEMPT(full) [ 249.861367][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 249.861379][T11508] Call Trace: [ 249.861388][T11508] [ 249.861397][T11508] dump_stack_lvl+0xe8/0x150 [ 249.861432][T11508] should_fail_ex+0x410/0x560 [ 249.861461][T11508] should_failslab+0xa8/0x100 [ 249.861489][T11508] __kmalloc_cache_noprof+0xa3/0x600 [ 249.861512][T11508] ? push_stack+0x7e/0x380 [ 249.861539][T11508] ? push_stack+0x7e/0x380 [ 249.861585][T11508] push_stack+0x7e/0x380 [ 249.861618][T11508] do_check_insn+0xb48b/0x18e70 [ 249.861677][T11508] ? __pfx_do_check_insn+0x10/0x10 [ 249.861715][T11508] ? vscnprintf+0x5c/0x90 [ 249.861737][T11508] ? bpf_verifier_vlog+0x3d1/0x900 [ 249.861770][T11508] ? verbose+0x11d/0x1a0 [ 249.861795][T11508] ? __pfx_verbose+0x10/0x10 [ 249.861823][T11508] ? print_insn_state+0x106/0x170 [ 249.861847][T11508] do_check_common+0x3c19/0x5d30 [ 249.861916][T11508] ? __pfx_do_check_common+0x10/0x10 [ 249.861941][T11508] ? __pfx_verbose+0x10/0x10 [ 249.861958][T11508] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 249.861992][T11508] bpf_check+0x2639/0x2e10 [ 249.862028][T11508] ? ktime_get_with_offset+0x93/0x2d0 [ 249.862054][T11508] ? __pfx_bpf_check+0x10/0x10 [ 249.862084][T11508] ? bpf_obj_name_cpy+0x194/0x1e0 [ 249.862118][T11508] bpf_prog_load+0x14d6/0x1c20 [ 249.862155][T11508] ? __pfx_bpf_prog_load+0x10/0x10 [ 249.862209][T11508] __sys_bpf+0xd0d/0xd90 [ 249.862242][T11508] ? __pfx___sys_bpf+0x10/0x10 [ 249.862278][T11508] ? __fget_files+0x2a/0x420 [ 249.862327][T11508] ? ksys_write+0x242/0x270 [ 249.862360][T11508] ? __pfx_ksys_write+0x10/0x10 [ 249.862395][T11508] __x64_sys_bpf+0xba/0xd0 [ 249.862420][T11508] do_syscall_64+0x166/0x520 [ 249.862443][T11508] ? trace_irq_disable+0x3b/0x140 [ 249.862463][T11508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.862485][T11508] ? clear_bhb_loop+0x70/0xc0 [ 249.862511][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.862531][T11508] RIP: 0033:0x7f51be79e159 [ 249.862558][T11508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.862575][T11508] RSP: 002b:00007f51bf674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.862598][T11508] RAX: ffffffffffffffda RBX: 00007f51bea25fa0 RCX: 00007f51be79e159 [ 249.862613][T11508] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 249.862627][T11508] RBP: 00007f51bf674090 R08: 0000000000000000 R09: 0000000000000000 [ 249.862639][T11508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.862651][T11508] R13: 00007f51bea26038 R14: 00007f51bea25fa0 R15: 00007ffcf489c1f8 [ 249.862686][T11508] [ 249.969505][T11512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.000598][T11514] x_tables: duplicate underflow at hook 1 [ 250.000743][T11515] x_tables: duplicate underflow at hook 1 [ 250.520381][T11531] netlink: 'syz.0.1234': attribute type 1 has an invalid length. [ 250.637849][T11535] netlink: 'syz.3.1236': attribute type 1 has an invalid length. [ 250.805693][T11535] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.899109][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'. [ 251.147233][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'. [ 251.280389][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 251.341411][T11561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.448014][T11567] FAULT_INJECTION: forcing a failure. [ 251.448014][T11567] name failslab, interval 1, probability 0, space 0, times 0 [ 251.448049][T11567] CPU: 1 UID: 0 PID: 11567 Comm: syz.2.1243 Not tainted syzkaller #0 PREEMPT(full) [ 251.448071][T11567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.448084][T11567] Call Trace: [ 251.448092][T11567] [ 251.448100][T11567] dump_stack_lvl+0xe8/0x150 [ 251.448136][T11567] should_fail_ex+0x410/0x560 [ 251.448170][T11567] should_failslab+0xa8/0x100 [ 251.448197][T11567] __kmalloc_cache_noprof+0xa3/0x600 [ 251.448220][T11567] ? push_stack+0x7e/0x380 [ 251.448247][T11567] ? push_stack+0x7e/0x380 [ 251.448282][T11567] push_stack+0x7e/0x380 [ 251.448332][T11567] do_check_insn+0xb48b/0x18e70 [ 251.448388][T11567] ? __pfx_do_check_insn+0x10/0x10 [ 251.448426][T11567] ? vscnprintf+0x5c/0x90 [ 251.448449][T11567] ? bpf_verifier_vlog+0x3d1/0x900 [ 251.448481][T11567] ? verbose+0x11d/0x1a0 [ 251.448507][T11567] ? __pfx_verbose+0x10/0x10 [ 251.448535][T11567] ? print_insn_state+0x106/0x170 [ 251.448558][T11567] do_check_common+0x3c19/0x5d30 [ 251.448695][T11567] ? __pfx_do_check_common+0x10/0x10 [ 251.448720][T11567] ? __pfx_verbose+0x10/0x10 [ 251.448737][T11567] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 251.448770][T11567] bpf_check+0x2639/0x2e10 [ 251.448805][T11567] ? ktime_get_with_offset+0x93/0x2d0 [ 251.448832][T11567] ? __pfx_bpf_check+0x10/0x10 [ 251.448857][T11567] ? bpf_obj_name_cpy+0x194/0x1e0 [ 251.448890][T11567] bpf_prog_load+0x14d6/0x1c20 [ 251.448927][T11567] ? __pfx_bpf_prog_load+0x10/0x10 [ 251.448978][T11567] __sys_bpf+0xd0d/0xd90 [ 251.449011][T11567] ? __pfx___sys_bpf+0x10/0x10 [ 251.449046][T11567] ? __fget_files+0x2a/0x420 [ 251.449092][T11567] ? ksys_write+0x242/0x270 [ 251.449124][T11567] ? __pfx_ksys_write+0x10/0x10 [ 251.449158][T11567] __x64_sys_bpf+0xba/0xd0 [ 251.449183][T11567] do_syscall_64+0x166/0x520 [ 251.449206][T11567] ? trace_irq_disable+0x3b/0x140 [ 251.449226][T11567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.449247][T11567] ? clear_bhb_loop+0x70/0xc0 [ 251.449272][T11567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.449292][T11567] RIP: 0033:0x7f343a39e159 [ 251.449313][T11567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.449330][T11567] RSP: 002b:00007f34385f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 251.449353][T11567] RAX: ffffffffffffffda RBX: 00007f343a625fa0 RCX: 00007f343a39e159 [ 251.449368][T11567] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 251.449382][T11567] RBP: 00007f34385f6090 R08: 0000000000000000 R09: 0000000000000000 [ 251.449394][T11567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.449407][T11567] R13: 00007f343a626038 R14: 00007f343a625fa0 R15: 00007ffc02352538 [ 251.449441][T11567] [ 252.367324][T11590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1250'. [ 252.537165][T11596] tc action pedit offset must be on 32 bit boundaries [ 252.883534][T11602] netlink: 'syz.1.1253': attribute type 10 has an invalid length. [ 252.959630][T11604] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1254'. [ 253.042694][T11608] netlink: 'syz.3.1257': attribute type 26 has an invalid length. [ 253.047108][T11608] netlink: 'syz.3.1257': attribute type 26 has an invalid length. [ 253.191367][T11614] FAULT_INJECTION: forcing a failure. [ 253.191367][T11614] name failslab, interval 1, probability 0, space 0, times 0 [ 253.191400][T11614] CPU: 1 UID: 0 PID: 11614 Comm: syz.1.1256 Not tainted syzkaller #0 PREEMPT(full) [ 253.191422][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.191434][T11614] Call Trace: [ 253.191442][T11614] [ 253.191452][T11614] dump_stack_lvl+0xe8/0x150 [ 253.191487][T11614] should_fail_ex+0x410/0x560 [ 253.191515][T11614] should_failslab+0xa8/0x100 [ 253.191542][T11614] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 253.191566][T11614] ? copy_array+0x71/0x100 [ 253.191590][T11614] ? copy_array+0x71/0x100 [ 253.191618][T11614] ? copy_array+0x71/0x100 [ 253.191644][T11614] krealloc_node_align_noprof+0x19a/0x390 [ 253.191664][T11614] ? __kmalloc_cache_noprof+0x14d/0x600 [ 253.191681][T11614] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 253.191712][T11614] copy_array+0x71/0x100 [ 253.191740][T11614] bpf_copy_verifier_state+0x9b0/0x1170 [ 253.191779][T11614] push_stack+0x1b9/0x380 [ 253.191811][T11614] do_check_insn+0xb48b/0x18e70 [ 253.191866][T11614] ? __pfx_do_check_insn+0x10/0x10 [ 253.191903][T11614] ? vscnprintf+0x5c/0x90 [ 253.191925][T11614] ? bpf_verifier_vlog+0x3d1/0x900 [ 253.191958][T11614] ? verbose+0x11d/0x1a0 [ 253.191983][T11614] ? __pfx_verbose+0x10/0x10 [ 253.192012][T11614] ? print_insn_state+0x106/0x170 [ 253.192036][T11614] do_check_common+0x3c19/0x5d30 [ 253.192109][T11614] ? __pfx_do_check_common+0x10/0x10 [ 253.192134][T11614] ? __pfx_verbose+0x10/0x10 [ 253.192150][T11614] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 253.192182][T11614] bpf_check+0x2639/0x2e10 [ 253.192217][T11614] ? ktime_get_with_offset+0x93/0x2d0 [ 253.192241][T11614] ? __pfx_bpf_check+0x10/0x10 [ 253.192266][T11614] ? bpf_obj_name_cpy+0x194/0x1e0 [ 253.192299][T11614] bpf_prog_load+0x14d6/0x1c20 [ 253.192336][T11614] ? __pfx_bpf_prog_load+0x10/0x10 [ 253.192387][T11614] __sys_bpf+0xd0d/0xd90 [ 253.192420][T11614] ? __pfx___sys_bpf+0x10/0x10 [ 253.192455][T11614] ? __fget_files+0x2a/0x420 [ 253.192500][T11614] ? ksys_write+0x242/0x270 [ 253.192530][T11614] ? __pfx_ksys_write+0x10/0x10 [ 253.192565][T11614] __x64_sys_bpf+0xba/0xd0 [ 253.192592][T11614] do_syscall_64+0x166/0x520 [ 253.192613][T11614] ? trace_irq_disable+0x3b/0x140 [ 253.192633][T11614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.192652][T11614] ? clear_bhb_loop+0x70/0xc0 [ 253.192677][T11614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.192696][T11614] RIP: 0033:0x7f38ec79e159 [ 253.192716][T11614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.192733][T11614] RSP: 002b:00007f38ed693028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.192756][T11614] RAX: ffffffffffffffda RBX: 00007f38eca25fa0 RCX: 00007f38ec79e159 [ 253.192769][T11614] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 253.192783][T11614] RBP: 00007f38ed693090 R08: 0000000000000000 R09: 0000000000000000 [ 253.192795][T11614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.192806][T11614] R13: 00007f38eca26038 R14: 00007f38eca25fa0 R15: 00007ffdefaeda78 [ 253.192839][T11614] [ 253.580606][T11624] netlink: 'syz.1.1261': attribute type 2 has an invalid length. [ 253.789107][T11637] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 254.148731][T11645] nbd: socks must be embedded in a SOCK_ITEM attr [ 254.149192][T11645] block nbd4: shutting down sockets [ 254.164260][T11645] netlink: 'syz.1.1267': attribute type 2 has an invalid length. [ 254.247002][T11648] syzkaller1: entered allmulticast mode [ 254.369004][T11655] FAULT_INJECTION: forcing a failure. [ 254.369004][T11655] name failslab, interval 1, probability 0, space 0, times 0 [ 254.369038][T11655] CPU: 1 UID: 0 PID: 11655 Comm: syz.4.1271 Not tainted syzkaller #0 PREEMPT(full) [ 254.369060][T11655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.369072][T11655] Call Trace: [ 254.369080][T11655] [ 254.369090][T11655] dump_stack_lvl+0xe8/0x150 [ 254.369124][T11655] should_fail_ex+0x410/0x560 [ 254.369153][T11655] should_failslab+0xa8/0x100 [ 254.369179][T11655] __kmalloc_cache_noprof+0xa3/0x600 [ 254.369198][T11655] ? bpf_mark_reg_not_init+0x5f/0x1c0 [ 254.369229][T11655] ? bpf_is_state_visited+0x2d6b/0x47d0 [ 254.369249][T11655] ? bpf_is_state_visited+0x2d6b/0x47d0 [ 254.369277][T11655] bpf_is_state_visited+0x2d6b/0x47d0 [ 254.369338][T11655] do_check_common+0x2848/0x5d30 [ 254.369406][T11655] ? __pfx_do_check_common+0x10/0x10 [ 254.369435][T11655] ? __pfx_verbose+0x10/0x10 [ 254.369452][T11655] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 254.369486][T11655] bpf_check+0x2639/0x2e10 [ 254.369519][T11655] ? ktime_get_with_offset+0x93/0x2d0 [ 254.369545][T11655] ? __pfx_bpf_check+0x10/0x10 [ 254.369569][T11655] ? bpf_obj_name_cpy+0x194/0x1e0 [ 254.369600][T11655] bpf_prog_load+0x14d6/0x1c20 [ 254.369635][T11655] ? __pfx_bpf_prog_load+0x10/0x10 [ 254.369693][T11655] __sys_bpf+0xd0d/0xd90 [ 254.369725][T11655] ? __pfx___sys_bpf+0x10/0x10 [ 254.369757][T11655] ? __fget_files+0x2a/0x420 [ 254.369802][T11655] ? ksys_write+0x242/0x270 [ 254.369834][T11655] ? __pfx_ksys_write+0x10/0x10 [ 254.369869][T11655] __x64_sys_bpf+0xba/0xd0 [ 254.369893][T11655] do_syscall_64+0x166/0x520 [ 254.369915][T11655] ? trace_irq_disable+0x3b/0x140 [ 254.369934][T11655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.369953][T11655] ? clear_bhb_loop+0x70/0xc0 [ 254.369977][T11655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.369996][T11655] RIP: 0033:0x7f667b19e159 [ 254.370016][T11655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.370034][T11655] RSP: 002b:00007f667bfd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.370056][T11655] RAX: ffffffffffffffda RBX: 00007f667b425fa0 RCX: 00007f667b19e159 [ 254.370072][T11655] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 254.370085][T11655] RBP: 00007f667bfd1090 R08: 0000000000000000 R09: 0000000000000000 [ 254.370096][T11655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.370108][T11655] R13: 00007f667b426038 R14: 00007f667b425fa0 R15: 00007ffcbff99bf8 [ 254.370141][T11655] [ 254.557408][T11667] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1275'. [ 254.557431][T11667] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 254.569394][T11667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1275'. [ 254.999001][T11680] xt_policy: neither incoming nor outgoing policy selected [ 255.010601][T11681] ip_tables: iptables: counters copy to user failed while replacing table [ 255.294549][ T7050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.294575][ T7050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.387733][T11695] IPVS: set_ctl: invalid protocol: 4 100.1.1.0:20004 [ 255.541276][T11698] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1286'. [ 255.541459][T11698] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1286'. [ 255.541749][T11698] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1286'. [ 255.541901][T11698] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1286'. [ 255.542158][T11698] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1286'. [ 255.542307][T11698] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1286'. [ 255.542564][T11698] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1286'. [ 255.551883][T11698] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1286'. [ 255.638853][T11702] FAULT_INJECTION: forcing a failure. [ 255.638853][T11702] name failslab, interval 1, probability 0, space 0, times 0 [ 255.638888][T11702] CPU: 1 UID: 0 PID: 11702 Comm: syz.0.1285 Not tainted syzkaller #0 PREEMPT(full) [ 255.638912][T11702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.638923][T11702] Call Trace: [ 255.638931][T11702] [ 255.638940][T11702] dump_stack_lvl+0xe8/0x150 [ 255.638975][T11702] should_fail_ex+0x410/0x560 [ 255.639003][T11702] should_failslab+0xa8/0x100 [ 255.639030][T11702] __kmalloc_cache_noprof+0xa3/0x600 [ 255.639052][T11702] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 255.639081][T11702] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 255.639117][T11702] bpf_copy_verifier_state+0xb1f/0x1170 [ 255.639157][T11702] bpf_is_state_visited+0x377d/0x47d0 [ 255.639217][T11702] do_check_common+0x2848/0x5d30 [ 255.639278][T11702] ? __pfx_do_check_common+0x10/0x10 [ 255.639303][T11702] ? __pfx_verbose+0x10/0x10 [ 255.639321][T11702] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 255.639351][T11702] bpf_check+0x2639/0x2e10 [ 255.639384][T11702] ? ktime_get_with_offset+0x93/0x2d0 [ 255.639411][T11702] ? __pfx_bpf_check+0x10/0x10 [ 255.639433][T11702] ? bpf_obj_name_cpy+0x194/0x1e0 [ 255.639464][T11702] bpf_prog_load+0x14d6/0x1c20 [ 255.639498][T11702] ? __pfx_bpf_prog_load+0x10/0x10 [ 255.639547][T11702] __sys_bpf+0xd0d/0xd90 [ 255.639605][T11702] ? __pfx___sys_bpf+0x10/0x10 [ 255.639638][T11702] ? __fget_files+0x2a/0x420 [ 255.639681][T11702] ? ksys_write+0x242/0x270 [ 255.639712][T11702] ? __pfx_ksys_write+0x10/0x10 [ 255.639746][T11702] __x64_sys_bpf+0xba/0xd0 [ 255.639769][T11702] do_syscall_64+0x166/0x520 [ 255.639791][T11702] ? trace_irq_disable+0x3b/0x140 [ 255.639810][T11702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.639830][T11702] ? clear_bhb_loop+0x70/0xc0 [ 255.639855][T11702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.639874][T11702] RIP: 0033:0x7f1ba779e159 [ 255.639898][T11702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.639913][T11702] RSP: 002b:00007f1ba862a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.639935][T11702] RAX: ffffffffffffffda RBX: 00007f1ba7a25fa0 RCX: 00007f1ba779e159 [ 255.639949][T11702] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 255.639962][T11702] RBP: 00007f1ba862a090 R08: 0000000000000000 R09: 0000000000000000 [ 255.639973][T11702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.639985][T11702] R13: 00007f1ba7a26038 R14: 00007f1ba7a25fa0 R15: 00007ffd2d4e9488 [ 255.640017][T11702] [ 255.774382][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.995220][T11717] netlink: zone id is out of range [ 256.037269][T11724] netlink: zone id is out of range [ 256.054123][T11722] netlink: 'syz.2.1291': attribute type 1 has an invalid length. [ 256.069284][T11725] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 256.172165][T11722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.318676][T11722] veth11: entered allmulticast mode [ 256.334263][T11722] bond0: (slave veth11): Enslaving as an active interface with an up link [ 257.513355][T11785] netlink: 'syz.3.1302': attribute type 3 has an invalid length. [ 257.513561][T11785] netlink: 'syz.3.1302': attribute type 3 has an invalid length. [ 257.525321][T11788] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 257.922559][ T7061] wlan0: Trigger new scan to find an IBSS to join [ 258.054629][T11822] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 258.094759][T11822] netlink: 'syz.0.1311': attribute type 16 has an invalid length. [ 258.094786][T11822] netlink: 'syz.0.1311': attribute type 17 has an invalid length. [ 258.130447][T11822] erspan0: left promiscuous mode [ 258.162151][T11822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.163749][T11822] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.188327][T11822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.292980][T11822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.293009][T11822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.301483][T11822] veth0_vlan: left promiscuous mode [ 258.304804][T11822] veth0_vlan: entered promiscuous mode [ 258.307448][T11822] veth1_vlan: entered promiscuous mode [ 258.315696][T11822] veth1_macvtap: left promiscuous mode [ 258.318246][T11822] veth0_macvtap: left promiscuous mode [ 258.319691][T11822] veth0_macvtap: entered promiscuous mode [ 258.322259][T11822] veth1_macvtap: entered promiscuous mode [ 258.346797][T11822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 258.356313][T11822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 258.376172][T11822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 258.387249][T11822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 258.395291][T11822] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 258.427606][ T7050] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.427738][ T7050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.436977][ T7050] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.437104][ T7050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.684007][ T6504] batman_adv: batadv0: Interface activated: vlan2 [ 258.698598][ T7064] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.699345][ T7064] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.699517][ T7064] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.699696][ T7064] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.804560][T11841] FAULT_INJECTION: forcing a failure. [ 258.804560][T11841] name failslab, interval 1, probability 0, space 0, times 0 [ 258.804630][T11841] CPU: 1 UID: 0 PID: 11841 Comm: syz.0.1315 Not tainted syzkaller #0 PREEMPT(full) [ 258.804653][T11841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.804665][T11841] Call Trace: [ 258.804674][T11841] [ 258.804683][T11841] dump_stack_lvl+0xe8/0x150 [ 258.804717][T11841] should_fail_ex+0x410/0x560 [ 258.804745][T11841] should_failslab+0xa8/0x100 [ 258.804781][T11841] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 258.804805][T11841] ? copy_array+0x71/0x100 [ 258.804832][T11841] ? copy_array+0x71/0x100 [ 258.804861][T11841] ? copy_array+0x71/0x100 [ 258.804889][T11841] krealloc_node_align_noprof+0x19a/0x390 [ 258.804912][T11841] ? __kmalloc_cache_noprof+0x14d/0x600 [ 258.804929][T11841] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 258.804963][T11841] copy_array+0x71/0x100 [ 258.804992][T11841] bpf_copy_verifier_state+0x9b0/0x1170 [ 258.805042][T11841] push_stack+0x1b9/0x380 [ 258.805075][T11841] do_check_insn+0xb48b/0x18e70 [ 258.805131][T11841] ? __pfx_do_check_insn+0x10/0x10 [ 258.805170][T11841] ? vscnprintf+0x5c/0x90 [ 258.805192][T11841] ? bpf_verifier_vlog+0x3d1/0x900 [ 258.805229][T11841] ? verbose+0x11d/0x1a0 [ 258.805254][T11841] ? __pfx_verbose+0x10/0x10 [ 258.805284][T11841] ? print_insn_state+0x106/0x170 [ 258.805308][T11841] do_check_common+0x3c19/0x5d30 [ 258.805374][T11841] ? __pfx_do_check_common+0x10/0x10 [ 258.805405][T11841] ? __pfx_verbose+0x10/0x10 [ 258.805422][T11841] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 258.805453][T11841] bpf_check+0x2639/0x2e10 [ 258.805485][T11841] ? ktime_get_with_offset+0x93/0x2d0 [ 258.805510][T11841] ? __pfx_bpf_check+0x10/0x10 [ 258.805534][T11841] ? bpf_obj_name_cpy+0x194/0x1e0 [ 258.805565][T11841] bpf_prog_load+0x14d6/0x1c20 [ 258.805599][T11841] ? __pfx_bpf_prog_load+0x10/0x10 [ 258.805646][T11841] __sys_bpf+0xd0d/0xd90 [ 258.805682][T11841] ? __pfx___sys_bpf+0x10/0x10 [ 258.805716][T11841] ? __fget_files+0x2a/0x420 [ 258.805760][T11841] ? ksys_write+0x242/0x270 [ 258.805790][T11841] ? __pfx_ksys_write+0x10/0x10 [ 258.805821][T11841] __x64_sys_bpf+0xba/0xd0 [ 258.805845][T11841] do_syscall_64+0x166/0x520 [ 258.805867][T11841] ? trace_irq_disable+0x3b/0x140 [ 258.805886][T11841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.805906][T11841] ? clear_bhb_loop+0x70/0xc0 [ 258.805930][T11841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.805948][T11841] RIP: 0033:0x7f1ba779e159 [ 258.805968][T11841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.805983][T11841] RSP: 002b:00007f1ba862a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.806005][T11841] RAX: ffffffffffffffda RBX: 00007f1ba7a25fa0 RCX: 00007f1ba779e159 [ 258.806028][T11841] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 258.806041][T11841] RBP: 00007f1ba862a090 R08: 0000000000000000 R09: 0000000000000000 [ 258.806053][T11841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.806065][T11841] R13: 00007f1ba7a26038 R14: 00007f1ba7a25fa0 R15: 00007ffd2d4e9488 [ 258.806095][T11841] [ 259.160801][T11851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.162122][T11849] syzkaller0: entered promiscuous mode [ 259.162145][T11849] syzkaller0: entered allmulticast mode [ 259.464922][T11860] tipc: Started in network mode [ 259.464955][T11860] tipc: Node identity ac141441, cluster identity 4711 [ 259.469011][T11860] tipc: Enabled bearer , priority 10 [ 259.839478][T11872] __nla_validate_parse: 29 callbacks suppressed [ 259.839500][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'. [ 260.122246][T11892] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1328'. [ 260.368921][T11898] FAULT_INJECTION: forcing a failure. [ 260.368921][T11898] name failslab, interval 1, probability 0, space 0, times 0 [ 260.368957][T11898] CPU: 1 UID: 0 PID: 11898 Comm: syz.2.1330 Not tainted syzkaller #0 PREEMPT(full) [ 260.368980][T11898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.368992][T11898] Call Trace: [ 260.369000][T11898] [ 260.369009][T11898] dump_stack_lvl+0xe8/0x150 [ 260.369045][T11898] should_fail_ex+0x410/0x560 [ 260.369073][T11898] should_failslab+0xa8/0x100 [ 260.369100][T11898] __kmalloc_cache_noprof+0xa3/0x600 [ 260.369120][T11898] ? bpf_mark_reg_not_init+0x5f/0x1c0 [ 260.369152][T11898] ? bpf_is_state_visited+0x2d6b/0x47d0 [ 260.369172][T11898] ? bpf_is_state_visited+0x2d6b/0x47d0 [ 260.369201][T11898] bpf_is_state_visited+0x2d6b/0x47d0 [ 260.369262][T11898] do_check_common+0x2848/0x5d30 [ 260.369329][T11898] ? __pfx_do_check_common+0x10/0x10 [ 260.369354][T11898] ? __pfx_verbose+0x10/0x10 [ 260.369371][T11898] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 260.369404][T11898] bpf_check+0x2639/0x2e10 [ 260.369439][T11898] ? ktime_get_with_offset+0x93/0x2d0 [ 260.369465][T11898] ? __pfx_bpf_check+0x10/0x10 [ 260.369489][T11898] ? bpf_obj_name_cpy+0x194/0x1e0 [ 260.369530][T11898] bpf_prog_load+0x14d6/0x1c20 [ 260.369568][T11898] ? __pfx_bpf_prog_load+0x10/0x10 [ 260.369625][T11898] __sys_bpf+0xd0d/0xd90 [ 260.369657][T11898] ? __pfx___sys_bpf+0x10/0x10 [ 260.369693][T11898] ? __fget_files+0x2a/0x420 [ 260.369741][T11898] ? ksys_write+0x242/0x270 [ 260.369774][T11898] ? __pfx_ksys_write+0x10/0x10 [ 260.369810][T11898] __x64_sys_bpf+0xba/0xd0 [ 260.369835][T11898] do_syscall_64+0x166/0x520 [ 260.369858][T11898] ? trace_irq_disable+0x3b/0x140 [ 260.369876][T11898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.369897][T11898] ? clear_bhb_loop+0x70/0xc0 [ 260.369922][T11898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.369940][T11898] RIP: 0033:0x7f343a39e159 [ 260.369960][T11898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.369975][T11898] RSP: 002b:00007f34385f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.369999][T11898] RAX: ffffffffffffffda RBX: 00007f343a625fa0 RCX: 00007f343a39e159 [ 260.370013][T11898] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 260.370025][T11898] RBP: 00007f34385f6090 R08: 0000000000000000 R09: 0000000000000000 [ 260.370038][T11898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.370050][T11898] R13: 00007f343a626038 R14: 00007f343a625fa0 R15: 00007ffc02352538 [ 260.370083][T11898] [ 260.608186][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 260.647064][T11902] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 260.669818][T11902] bond2 (unregistering): Released all slaves [ 260.881206][ T7049] wlan0: Trigger new scan to find an IBSS to join [ 261.064866][T11901] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 261.120924][T11901] bond2 (unregistering): Released all slaves [ 261.306848][T11905] bridge8: entered promiscuous mode [ 261.445169][ T6504] tipc: Node number set to 2886997057 [ 261.591963][T11928] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 261.685520][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 261.773171][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 261.857597][T11935] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1339'. [ 262.042467][T11948] FAULT_INJECTION: forcing a failure. [ 262.042467][T11948] name failslab, interval 1, probability 0, space 0, times 0 [ 262.042501][T11948] CPU: 0 UID: 0 PID: 11948 Comm: syz.1.1343 Not tainted syzkaller #0 PREEMPT(full) [ 262.042522][T11948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.042533][T11948] Call Trace: [ 262.042541][T11948] [ 262.042549][T11948] dump_stack_lvl+0xe8/0x150 [ 262.042582][T11948] should_fail_ex+0x410/0x560 [ 262.042609][T11948] should_failslab+0xa8/0x100 [ 262.042634][T11948] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 262.042658][T11948] ? copy_array+0x71/0x100 [ 262.042686][T11948] ? copy_array+0x71/0x100 [ 262.042717][T11948] ? copy_array+0x71/0x100 [ 262.042747][T11948] krealloc_node_align_noprof+0x19a/0x390 [ 262.042769][T11948] ? __kmalloc_cache_noprof+0x14d/0x600 [ 262.042788][T11948] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 262.042821][T11948] copy_array+0x71/0x100 [ 262.042852][T11948] bpf_copy_verifier_state+0x9b0/0x1170 [ 262.042894][T11948] push_stack+0x1b9/0x380 [ 262.042928][T11948] do_check_insn+0xb48b/0x18e70 [ 262.042993][T11948] ? __pfx_do_check_insn+0x10/0x10 [ 262.043030][T11948] ? vscnprintf+0x5c/0x90 [ 262.043053][T11948] ? bpf_verifier_vlog+0x3d1/0x900 [ 262.043085][T11948] ? verbose+0x11d/0x1a0 [ 262.043110][T11948] ? __pfx_verbose+0x10/0x10 [ 262.043142][T11948] ? print_insn_state+0x106/0x170 [ 262.043166][T11948] do_check_common+0x3c19/0x5d30 [ 262.043233][T11948] ? __pfx_do_check_common+0x10/0x10 [ 262.043257][T11948] ? __pfx_verbose+0x10/0x10 [ 262.043273][T11948] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 262.043306][T11948] bpf_check+0x2639/0x2e10 [ 262.043340][T11948] ? ktime_get_with_offset+0x93/0x2d0 [ 262.043367][T11948] ? __pfx_bpf_check+0x10/0x10 [ 262.043392][T11948] ? bpf_obj_name_cpy+0x194/0x1e0 [ 262.043425][T11948] bpf_prog_load+0x14d6/0x1c20 [ 262.043463][T11948] ? __pfx_bpf_prog_load+0x10/0x10 [ 262.043512][T11948] __sys_bpf+0xd0d/0xd90 [ 262.043542][T11948] ? __pfx___sys_bpf+0x10/0x10 [ 262.043575][T11948] ? __fget_files+0x2a/0x420 [ 262.043618][T11948] ? ksys_write+0x242/0x270 [ 262.043649][T11948] ? __pfx_ksys_write+0x10/0x10 [ 262.043682][T11948] __x64_sys_bpf+0xba/0xd0 [ 262.043704][T11948] do_syscall_64+0x166/0x520 [ 262.043726][T11948] ? trace_irq_disable+0x3b/0x140 [ 262.043745][T11948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.043765][T11948] ? clear_bhb_loop+0x70/0xc0 [ 262.043789][T11948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.043808][T11948] RIP: 0033:0x7f38ec79e159 [ 262.043827][T11948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.043842][T11948] RSP: 002b:00007f38ed693028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.043864][T11948] RAX: ffffffffffffffda RBX: 00007f38eca25fa0 RCX: 00007f38ec79e159 [ 262.043878][T11948] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 262.043890][T11948] RBP: 00007f38ed693090 R08: 0000000000000000 R09: 0000000000000000 [ 262.043902][T11948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.043914][T11948] R13: 00007f38eca26038 R14: 00007f38eca25fa0 R15: 00007ffdefaeda78 [ 262.043945][T11948] [ 262.067691][T11938] vlan2: entered allmulticast mode [ 262.067713][T11938] bridge_slave_0: entered allmulticast mode [ 262.550295][T11965] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1346'. [ 262.644015][T11975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1345'. [ 262.932820][T11999] xt_connbytes: Forcing CT accounting to be enabled [ 262.983455][T11993] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1345'. [ 262.983849][T11994] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1345'. [ 263.661722][T12025] FAULT_INJECTION: forcing a failure. [ 263.661722][T12025] name failslab, interval 1, probability 0, space 0, times 0 [ 263.661756][T12025] CPU: 1 UID: 0 PID: 12025 Comm: syz.4.1354 Not tainted syzkaller #0 PREEMPT(full) [ 263.661779][T12025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.661791][T12025] Call Trace: [ 263.661800][T12025] [ 263.661809][T12025] dump_stack_lvl+0xe8/0x150 [ 263.661844][T12025] should_fail_ex+0x410/0x560 [ 263.661873][T12025] should_failslab+0xa8/0x100 [ 263.661901][T12025] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 263.661927][T12025] ? bpf_push_jmp_history+0x26c/0x6d0 [ 263.661947][T12025] ? bpf_push_jmp_history+0x26c/0x6d0 [ 263.661972][T12025] ? bpf_push_jmp_history+0x26c/0x6d0 [ 263.661996][T12025] krealloc_node_align_noprof+0x19a/0x390 [ 263.662024][T12025] bpf_push_jmp_history+0x26c/0x6d0 [ 263.662054][T12025] do_check_common+0x2a0a/0x5d30 [ 263.662118][T12025] ? __pfx_do_check_common+0x10/0x10 [ 263.662141][T12025] ? __pfx_verbose+0x10/0x10 [ 263.662158][T12025] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 263.662191][T12025] bpf_check+0x2639/0x2e10 [ 263.662224][T12025] ? ktime_get_with_offset+0x93/0x2d0 [ 263.662251][T12025] ? __pfx_bpf_check+0x10/0x10 [ 263.662276][T12025] ? bpf_obj_name_cpy+0x194/0x1e0 [ 263.662310][T12025] bpf_prog_load+0x14d6/0x1c20 [ 263.662347][T12025] ? __pfx_bpf_prog_load+0x10/0x10 [ 263.662399][T12025] __sys_bpf+0xd0d/0xd90 [ 263.662432][T12025] ? __pfx___sys_bpf+0x10/0x10 [ 263.662467][T12025] ? __fget_files+0x2a/0x420 [ 263.662514][T12025] ? ksys_write+0x242/0x270 [ 263.662556][T12025] ? __pfx_ksys_write+0x10/0x10 [ 263.662592][T12025] __x64_sys_bpf+0xba/0xd0 [ 263.662617][T12025] do_syscall_64+0x166/0x520 [ 263.662642][T12025] ? trace_irq_disable+0x3b/0x140 [ 263.662662][T12025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.662683][T12025] ? clear_bhb_loop+0x70/0xc0 [ 263.662709][T12025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.662729][T12025] RIP: 0033:0x7f667b19e159 [ 263.662749][T12025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.662766][T12025] RSP: 002b:00007f667bfd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.662790][T12025] RAX: ffffffffffffffda RBX: 00007f667b425fa0 RCX: 00007f667b19e159 [ 263.662805][T12025] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 263.662819][T12025] RBP: 00007f667bfd1090 R08: 0000000000000000 R09: 0000000000000000 [ 263.662832][T12025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.662844][T12025] R13: 00007f667b426038 R14: 00007f667b425fa0 R15: 00007ffcbff99bf8 [ 263.662879][T12025] [ 263.896054][T12029] x_tables: duplicate underflow at hook 2 [ 263.931207][ T7049] wlan0: Trigger new scan to find an IBSS to join [ 263.978236][T12029] netlink: 'syz.4.1358': attribute type 39 has an invalid length. [ 264.297269][T12044] veth1_macvtap: left promiscuous mode [ 264.297292][T12044] macsec0: entered promiscuous mode [ 264.316886][T12045] veth1_macvtap: entered promiscuous mode [ 264.317815][T12045] macsec0: left promiscuous mode [ 264.347353][T12047] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 264.863443][ T7061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.875274][T12064] veth0_to_bridge: entered promiscuous mode [ 264.875551][T12064] macvtap1: entered allmulticast mode [ 264.875565][T12064] veth0_to_bridge: entered allmulticast mode [ 264.914586][T12064] veth0_to_bridge: left allmulticast mode [ 264.914620][T12064] veth0_to_bridge: left promiscuous mode [ 265.000298][T12075] FAULT_INJECTION: forcing a failure. [ 265.000298][T12075] name failslab, interval 1, probability 0, space 0, times 0 [ 265.000334][T12075] CPU: 0 UID: 0 PID: 12075 Comm: syz.4.1369 Not tainted syzkaller #0 PREEMPT(full) [ 265.000357][T12075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.000369][T12075] Call Trace: [ 265.000377][T12075] [ 265.000386][T12075] dump_stack_lvl+0xe8/0x150 [ 265.000421][T12075] should_fail_ex+0x410/0x560 [ 265.000451][T12075] should_failslab+0xa8/0x100 [ 265.000478][T12075] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 265.000502][T12075] ? bpf_push_jmp_history+0x26c/0x6d0 [ 265.000524][T12075] ? bpf_push_jmp_history+0x26c/0x6d0 [ 265.000549][T12075] ? bpf_push_jmp_history+0x26c/0x6d0 [ 265.000571][T12075] krealloc_node_align_noprof+0x19a/0x390 [ 265.000602][T12075] bpf_push_jmp_history+0x26c/0x6d0 [ 265.000635][T12075] do_check_common+0x2a0a/0x5d30 [ 265.000702][T12075] ? __pfx_do_check_common+0x10/0x10 [ 265.000727][T12075] ? __pfx_verbose+0x10/0x10 [ 265.000744][T12075] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 265.000776][T12075] bpf_check+0x2639/0x2e10 [ 265.000810][T12075] ? ktime_get_with_offset+0x93/0x2d0 [ 265.000835][T12075] ? __pfx_bpf_check+0x10/0x10 [ 265.000859][T12075] ? bpf_obj_name_cpy+0x194/0x1e0 [ 265.000889][T12075] bpf_prog_load+0x14d6/0x1c20 [ 265.000924][T12075] ? __pfx_bpf_prog_load+0x10/0x10 [ 265.000975][T12075] __sys_bpf+0xd0d/0xd90 [ 265.001008][T12075] ? __pfx___sys_bpf+0x10/0x10 [ 265.001044][T12075] ? __fget_files+0x2a/0x420 [ 265.001099][T12075] ? ksys_write+0x242/0x270 [ 265.001131][T12075] ? __pfx_ksys_write+0x10/0x10 [ 265.001166][T12075] __x64_sys_bpf+0xba/0xd0 [ 265.001190][T12075] do_syscall_64+0x166/0x520 [ 265.001214][T12075] ? trace_irq_disable+0x3b/0x140 [ 265.001234][T12075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.001254][T12075] ? clear_bhb_loop+0x70/0xc0 [ 265.001279][T12075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.001299][T12075] RIP: 0033:0x7f667b19e159 [ 265.001318][T12075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.001335][T12075] RSP: 002b:00007f667bfd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 265.001359][T12075] RAX: ffffffffffffffda RBX: 00007f667b425fa0 RCX: 00007f667b19e159 [ 265.001373][T12075] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 265.001387][T12075] RBP: 00007f667bfd1090 R08: 0000000000000000 R09: 0000000000000000 [ 265.001400][T12075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.001412][T12075] R13: 00007f667b426038 R14: 00007f667b425fa0 R15: 00007ffcbff99bf8 [ 265.001455][T12075] [ 265.511572][T12082] bond2: entered allmulticast mode [ 265.597626][T12096] __nla_validate_parse: 5 callbacks suppressed [ 265.597651][T12096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1371'. [ 265.665630][T12089] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 265.674374][T12089] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 266.000546][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 266.084693][T12109] syzkaller1: entered promiscuous mode [ 266.084719][T12109] syzkaller1: entered allmulticast mode [ 266.209159][T12122] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 266.216540][T12122] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 266.227862][T12122] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 266.689346][T12132] FAULT_INJECTION: forcing a failure. [ 266.689346][T12132] name failslab, interval 1, probability 0, space 0, times 0 [ 266.689380][T12132] CPU: 0 UID: 0 PID: 12132 Comm: syz.0.1381 Not tainted syzkaller #0 PREEMPT(full) [ 266.689412][T12132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.689424][T12132] Call Trace: [ 266.689433][T12132] [ 266.689442][T12132] dump_stack_lvl+0xe8/0x150 [ 266.689486][T12132] should_fail_ex+0x410/0x560 [ 266.689515][T12132] should_failslab+0xa8/0x100 [ 266.689542][T12132] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 266.689566][T12132] ? copy_array+0x71/0x100 [ 266.689597][T12132] ? copy_array+0x71/0x100 [ 266.689629][T12132] ? copy_array+0x71/0x100 [ 266.689658][T12132] krealloc_node_align_noprof+0x19a/0x390 [ 266.689681][T12132] ? rcu_is_watching+0x16/0xb0 [ 266.689709][T12132] copy_array+0x71/0x100 [ 266.689741][T12132] bpf_copy_verifier_state+0xad/0x1170 [ 266.689782][T12132] bpf_is_state_visited+0x377d/0x47d0 [ 266.689842][T12132] do_check_common+0x2848/0x5d30 [ 266.689938][T12132] ? __pfx_do_check_common+0x10/0x10 [ 266.689961][T12132] ? __pfx_verbose+0x10/0x10 [ 266.689992][T12132] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 266.690032][T12132] bpf_check+0x2639/0x2e10 [ 266.690067][T12132] ? ktime_get_with_offset+0x93/0x2d0 [ 266.690092][T12132] ? __pfx_bpf_check+0x10/0x10 [ 266.690117][T12132] ? bpf_obj_name_cpy+0x194/0x1e0 [ 266.690150][T12132] bpf_prog_load+0x14d6/0x1c20 [ 266.690195][T12132] ? __pfx_bpf_prog_load+0x10/0x10 [ 266.690246][T12132] __sys_bpf+0xd0d/0xd90 [ 266.690279][T12132] ? __pfx___sys_bpf+0x10/0x10 [ 266.690314][T12132] ? __fget_files+0x2a/0x420 [ 266.690362][T12132] ? ksys_write+0x242/0x270 [ 266.690394][T12132] ? __pfx_ksys_write+0x10/0x10 [ 266.690429][T12132] __x64_sys_bpf+0xba/0xd0 [ 266.690455][T12132] do_syscall_64+0x166/0x520 [ 266.690479][T12132] ? trace_irq_disable+0x3b/0x140 [ 266.690499][T12132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.690519][T12132] ? clear_bhb_loop+0x70/0xc0 [ 266.690544][T12132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.690564][T12132] RIP: 0033:0x7f1ba779e159 [ 266.690582][T12132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.690599][T12132] RSP: 002b:00007f1ba862a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 266.690621][T12132] RAX: ffffffffffffffda RBX: 00007f1ba7a25fa0 RCX: 00007f1ba779e159 [ 266.690636][T12132] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 266.690650][T12132] RBP: 00007f1ba862a090 R08: 0000000000000000 R09: 0000000000000000 [ 266.690663][T12132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.690675][T12132] R13: 00007f1ba7a26038 R14: 00007f1ba7a25fa0 R15: 00007ffd2d4e9488 [ 266.690709][T12132] [ 266.867200][T12135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1382'. [ 267.155579][T12139] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 267.782981][T12175] FAULT_INJECTION: forcing a failure. [ 267.782981][T12175] name failslab, interval 1, probability 0, space 0, times 0 [ 267.783005][T12175] CPU: 0 UID: 0 PID: 12175 Comm: syz.4.1396 Not tainted syzkaller #0 PREEMPT(full) [ 267.783020][T12175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.783027][T12175] Call Trace: [ 267.783032][T12175] [ 267.783038][T12175] dump_stack_lvl+0xe8/0x150 [ 267.783060][T12175] should_fail_ex+0x410/0x560 [ 267.783078][T12175] should_failslab+0xa8/0x100 [ 267.783093][T12175] __kmalloc_cache_noprof+0xa3/0x600 [ 267.783105][T12175] ? bpf_mark_reg_not_init+0x5f/0x1c0 [ 267.783123][T12175] ? bpf_is_state_visited+0x2d6b/0x47d0 [ 267.783135][T12175] ? bpf_is_state_visited+0x2d6b/0x47d0 [ 267.783159][T12175] bpf_is_state_visited+0x2d6b/0x47d0 [ 267.783195][T12175] do_check_common+0x2848/0x5d30 [ 267.783259][T12175] ? __pfx_do_check_common+0x10/0x10 [ 267.783284][T12175] ? __pfx_verbose+0x10/0x10 [ 267.783301][T12175] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 267.783326][T12175] bpf_check+0x2639/0x2e10 [ 267.783346][T12175] ? ktime_get_with_offset+0x93/0x2d0 [ 267.783361][T12175] ? __pfx_bpf_check+0x10/0x10 [ 267.783375][T12175] ? bpf_obj_name_cpy+0x194/0x1e0 [ 267.783393][T12175] bpf_prog_load+0x14d6/0x1c20 [ 267.783414][T12175] ? __pfx_bpf_prog_load+0x10/0x10 [ 267.783458][T12175] __sys_bpf+0xd0d/0xd90 [ 267.783489][T12175] ? __pfx___sys_bpf+0x10/0x10 [ 267.783523][T12175] ? __fget_files+0x2a/0x420 [ 267.783549][T12175] ? ksys_write+0x242/0x270 [ 267.783567][T12175] ? __pfx_ksys_write+0x10/0x10 [ 267.783587][T12175] __x64_sys_bpf+0xba/0xd0 [ 267.783601][T12175] do_syscall_64+0x166/0x520 [ 267.783614][T12175] ? trace_irq_disable+0x3b/0x140 [ 267.783629][T12175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.783641][T12175] ? clear_bhb_loop+0x70/0xc0 [ 267.783659][T12175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.783670][T12175] RIP: 0033:0x7f667b19e159 [ 267.783683][T12175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.783693][T12175] RSP: 002b:00007f667bfd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.783708][T12175] RAX: ffffffffffffffda RBX: 00007f667b425fa0 RCX: 00007f667b19e159 [ 267.783717][T12175] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 267.783725][T12175] RBP: 00007f667bfd1090 R08: 0000000000000000 R09: 0000000000000000 [ 267.783732][T12175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.783739][T12175] R13: 00007f667b426038 R14: 00007f667b425fa0 R15: 00007ffcbff99bf8 [ 267.783759][T12175] [ 267.787619][T12170] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 267.793603][T12170] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1394'. [ 267.793628][T12170] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1394'. [ 268.328709][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'. [ 268.357524][T12189] sctp: [Deprecated]: syz.0.1401 (pid 12189) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.357524][T12189] Use struct sctp_sack_info instead [ 268.357745][T12189] sctp: [Deprecated]: syz.0.1401 (pid 12189) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.357745][T12189] Use struct sctp_sack_info instead [ 268.403274][ T7051] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 268.403385][ T7051] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 268.403421][ T7051] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 268.403481][ T7051] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 268.670256][T12199] IPVS: set_ctl: invalid protocol: 242 172.20.20.170:20001 [ 268.818249][T12203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1404'. [ 268.903281][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'. [ 269.389106][T12222] FAULT_INJECTION: forcing a failure. [ 269.389106][T12222] name failslab, interval 1, probability 0, space 0, times 0 [ 269.389160][T12222] CPU: 1 UID: 0 PID: 12222 Comm: syz.0.1408 Not tainted syzkaller #0 PREEMPT(full) [ 269.389181][T12222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.389193][T12222] Call Trace: [ 269.389201][T12222] [ 269.389210][T12222] dump_stack_lvl+0xe8/0x150 [ 269.389244][T12222] should_fail_ex+0x410/0x560 [ 269.389273][T12222] should_failslab+0xa8/0x100 [ 269.389298][T12222] __kmalloc_cache_noprof+0xa3/0x600 [ 269.389318][T12222] ? copy_array+0xab/0x100 [ 269.389346][T12222] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 269.389372][T12222] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 269.389410][T12222] bpf_copy_verifier_state+0xb1f/0x1170 [ 269.389450][T12222] bpf_is_state_visited+0x377d/0x47d0 [ 269.389514][T12222] do_check_common+0x2848/0x5d30 [ 269.389583][T12222] ? __pfx_do_check_common+0x10/0x10 [ 269.389607][T12222] ? __pfx_verbose+0x10/0x10 [ 269.389625][T12222] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 269.389659][T12222] bpf_check+0x2639/0x2e10 [ 269.389695][T12222] ? ktime_get_with_offset+0x93/0x2d0 [ 269.389722][T12222] ? __pfx_bpf_check+0x10/0x10 [ 269.389748][T12222] ? bpf_obj_name_cpy+0x194/0x1e0 [ 269.389782][T12222] bpf_prog_load+0x14d6/0x1c20 [ 269.389820][T12222] ? __pfx_bpf_prog_load+0x10/0x10 [ 269.389873][T12222] __sys_bpf+0xd0d/0xd90 [ 269.389906][T12222] ? __pfx___sys_bpf+0x10/0x10 [ 269.389951][T12222] ? __fget_files+0x2a/0x420 [ 269.389996][T12222] ? ksys_write+0x242/0x270 [ 269.390026][T12222] ? __pfx_ksys_write+0x10/0x10 [ 269.390060][T12222] __x64_sys_bpf+0xba/0xd0 [ 269.390084][T12222] do_syscall_64+0x166/0x520 [ 269.390107][T12222] ? trace_irq_disable+0x3b/0x140 [ 269.390126][T12222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.390146][T12222] ? clear_bhb_loop+0x70/0xc0 [ 269.390170][T12222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.390191][T12222] RIP: 0033:0x7f1ba779e159 [ 269.390210][T12222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.390225][T12222] RSP: 002b:00007f1ba862a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 269.390249][T12222] RAX: ffffffffffffffda RBX: 00007f1ba7a25fa0 RCX: 00007f1ba779e159 [ 269.390263][T12222] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 269.390276][T12222] RBP: 00007f1ba862a090 R08: 0000000000000000 R09: 0000000000000000 [ 269.390288][T12222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 269.390300][T12222] R13: 00007f1ba7a26038 R14: 00007f1ba7a25fa0 R15: 00007ffd2d4e9488 [ 269.390333][T12222] [ 269.530629][ T5626] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 269.575581][T12225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1410'. [ 269.577466][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1410'. [ 269.577806][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1410'. [ 269.668701][T12232] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 270.258622][T12257] FAULT_INJECTION: forcing a failure. [ 270.258622][T12257] name failslab, interval 1, probability 0, space 0, times 0 [ 270.258657][T12257] CPU: 0 UID: 0 PID: 12257 Comm: syz.1.1421 Not tainted syzkaller #0 PREEMPT(full) [ 270.258680][T12257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.258692][T12257] Call Trace: [ 270.258701][T12257] [ 270.258710][T12257] dump_stack_lvl+0xe8/0x150 [ 270.258753][T12257] should_fail_ex+0x410/0x560 [ 270.258783][T12257] should_failslab+0xa8/0x100 [ 270.258809][T12257] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 270.258833][T12257] ? bpf_push_jmp_history+0x26c/0x6d0 [ 270.258853][T12257] ? bpf_push_jmp_history+0x26c/0x6d0 [ 270.258877][T12257] ? bpf_push_jmp_history+0x26c/0x6d0 [ 270.258899][T12257] krealloc_node_align_noprof+0x19a/0x390 [ 270.258928][T12257] bpf_push_jmp_history+0x26c/0x6d0 [ 270.258960][T12257] do_check_common+0x2a0a/0x5d30 [ 270.259024][T12257] ? __pfx_do_check_common+0x10/0x10 [ 270.259048][T12257] ? __pfx_verbose+0x10/0x10 [ 270.259065][T12257] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 270.259099][T12257] bpf_check+0x2639/0x2e10 [ 270.259134][T12257] ? ktime_get_with_offset+0x93/0x2d0 [ 270.259161][T12257] ? __pfx_bpf_check+0x10/0x10 [ 270.259187][T12257] ? bpf_obj_name_cpy+0x194/0x1e0 [ 270.259220][T12257] bpf_prog_load+0x14d6/0x1c20 [ 270.259258][T12257] ? __pfx_bpf_prog_load+0x10/0x10 [ 270.259308][T12257] __sys_bpf+0xd0d/0xd90 [ 270.259341][T12257] ? __pfx___sys_bpf+0x10/0x10 [ 270.259376][T12257] ? __fget_files+0x2a/0x420 [ 270.259424][T12257] ? ksys_write+0x242/0x270 [ 270.259455][T12257] ? __pfx_ksys_write+0x10/0x10 [ 270.259496][T12257] __x64_sys_bpf+0xba/0xd0 [ 270.259520][T12257] do_syscall_64+0x166/0x520 [ 270.259541][T12257] ? trace_irq_disable+0x3b/0x140 [ 270.259560][T12257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.259580][T12257] ? clear_bhb_loop+0x70/0xc0 [ 270.259605][T12257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.259624][T12257] RIP: 0033:0x7f38ec79e159 [ 270.259644][T12257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.259659][T12257] RSP: 002b:00007f38ed693028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 270.259680][T12257] RAX: ffffffffffffffda RBX: 00007f38eca25fa0 RCX: 00007f38ec79e159 [ 270.259694][T12257] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 270.259706][T12257] RBP: 00007f38ed693090 R08: 0000000000000000 R09: 0000000000000000 [ 270.259718][T12257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 270.259729][T12257] R13: 00007f38eca26038 R14: 00007f38eca25fa0 R15: 00007ffdefaeda78 [ 270.259766][T12257] [ 270.793618][T12235] __nla_validate_parse: 3 callbacks suppressed [ 270.793643][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'. [ 271.104917][T12283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1424'. [ 271.104945][T12283] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1424'. [ 271.296671][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 271.526781][T12302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1428'. [ 271.526806][T12302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1428'. [ 271.668049][T12297] syzkaller0: entered promiscuous mode [ 271.668075][T12297] syzkaller0: entered allmulticast mode [ 271.749583][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1434'. [ 271.781230][T12309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1432'. [ 271.781255][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1432'. [ 271.800848][T12297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1430'. [ 271.891646][T12317] FAULT_INJECTION: forcing a failure. [ 271.891646][T12317] name failslab, interval 1, probability 0, space 0, times 0 [ 271.891679][T12317] CPU: 0 UID: 0 PID: 12317 Comm: syz.2.1433 Not tainted syzkaller #0 PREEMPT(full) [ 271.891727][T12317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.891740][T12317] Call Trace: [ 271.891748][T12317] [ 271.891757][T12317] dump_stack_lvl+0xe8/0x150 [ 271.891793][T12317] should_fail_ex+0x410/0x560 [ 271.891822][T12317] should_failslab+0xa8/0x100 [ 271.891850][T12317] __kmalloc_cache_noprof+0xa3/0x600 [ 271.891868][T12317] ? bpf_mark_reg_not_init+0x5f/0x1c0 [ 271.891898][T12317] ? bpf_is_state_visited+0x2d6b/0x47d0 [ 271.891919][T12317] ? bpf_is_state_visited+0x2d6b/0x47d0 [ 271.891946][T12317] bpf_is_state_visited+0x2d6b/0x47d0 [ 271.892005][T12317] do_check_common+0x2848/0x5d30 [ 271.892071][T12317] ? __pfx_do_check_common+0x10/0x10 [ 271.892099][T12317] ? __pfx_verbose+0x10/0x10 [ 271.892116][T12317] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 271.892150][T12317] bpf_check+0x2639/0x2e10 [ 271.892184][T12317] ? ktime_get_with_offset+0x93/0x2d0 [ 271.892210][T12317] ? __pfx_bpf_check+0x10/0x10 [ 271.892235][T12317] ? bpf_obj_name_cpy+0x194/0x1e0 [ 271.892268][T12317] bpf_prog_load+0x14d6/0x1c20 [ 271.892305][T12317] ? __pfx_bpf_prog_load+0x10/0x10 [ 271.892356][T12317] __sys_bpf+0xd0d/0xd90 [ 271.892390][T12317] ? __pfx___sys_bpf+0x10/0x10 [ 271.892425][T12317] ? __fget_files+0x2a/0x420 [ 271.892480][T12317] ? ksys_write+0x242/0x270 [ 271.892512][T12317] ? __pfx_ksys_write+0x10/0x10 [ 271.892547][T12317] __x64_sys_bpf+0xba/0xd0 [ 271.892572][T12317] do_syscall_64+0x166/0x520 [ 271.892595][T12317] ? trace_irq_disable+0x3b/0x140 [ 271.892615][T12317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.892636][T12317] ? clear_bhb_loop+0x70/0xc0 [ 271.892661][T12317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.892682][T12317] RIP: 0033:0x7f343a39e159 [ 271.892701][T12317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.892718][T12317] RSP: 002b:00007f34385f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 271.892741][T12317] RAX: ffffffffffffffda RBX: 00007f343a625fa0 RCX: 00007f343a39e159 [ 271.892755][T12317] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 271.892768][T12317] RBP: 00007f34385f6090 R08: 0000000000000000 R09: 0000000000000000 [ 271.892780][T12317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.892791][T12317] R13: 00007f343a626038 R14: 00007f343a625fa0 R15: 00007ffc02352538 [ 271.892824][T12317] [ 272.200938][T12331] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.208963][T12331] pim6reg1: entered promiscuous mode [ 272.208988][T12331] pim6reg1: entered allmulticast mode [ 272.231738][T12331] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.464700][T12339] syzkaller0: entered promiscuous mode [ 272.464726][T12339] syzkaller0: entered allmulticast mode [ 272.647624][T12348] netlink: 'syz.3.1439': attribute type 4 has an invalid length. [ 272.647649][T12348] netlink: 'syz.3.1439': attribute type 8 has an invalid length. [ 272.647662][T12348] netlink: 'syz.3.1439': attribute type 1 has an invalid length. [ 272.647678][T12348] NCSI netlink: No device for ifindex 48485 [ 272.647911][T12345] netlink: 'syz.3.1439': attribute type 4 has an invalid length. [ 272.647927][T12345] netlink: 'syz.3.1439': attribute type 8 has an invalid length. [ 272.647939][T12345] netlink: 'syz.3.1439': attribute type 1 has an invalid length. [ 272.647953][T12345] NCSI netlink: No device for ifindex 48485 [ 272.991299][T12368] netlink: 'syz.0.1445': attribute type 1 has an invalid length. [ 273.027103][T12371] FAULT_INJECTION: forcing a failure. [ 273.027103][T12371] name failslab, interval 1, probability 0, space 0, times 0 [ 273.027137][T12371] CPU: 1 UID: 0 PID: 12371 Comm: syz.3.1446 Not tainted syzkaller #0 PREEMPT(full) [ 273.027160][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.027171][T12371] Call Trace: [ 273.027180][T12371] [ 273.027188][T12371] dump_stack_lvl+0xe8/0x150 [ 273.027223][T12371] should_fail_ex+0x410/0x560 [ 273.027253][T12371] should_failslab+0xa8/0x100 [ 273.027279][T12371] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 273.027303][T12371] ? copy_array+0x71/0x100 [ 273.027330][T12371] ? copy_array+0x71/0x100 [ 273.027359][T12371] ? copy_array+0x71/0x100 [ 273.027389][T12371] krealloc_node_align_noprof+0x19a/0x390 [ 273.027412][T12371] ? rcu_is_watching+0x16/0xb0 [ 273.027438][T12371] copy_array+0x71/0x100 [ 273.027467][T12371] bpf_copy_verifier_state+0xad/0x1170 [ 273.027508][T12371] bpf_is_state_visited+0x377d/0x47d0 [ 273.027569][T12371] do_check_common+0x2848/0x5d30 [ 273.027634][T12371] ? __pfx_do_check_common+0x10/0x10 [ 273.027658][T12371] ? __pfx_verbose+0x10/0x10 [ 273.027674][T12371] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 273.027705][T12371] bpf_check+0x2639/0x2e10 [ 273.027739][T12371] ? ktime_get_with_offset+0x93/0x2d0 [ 273.027765][T12371] ? __pfx_bpf_check+0x10/0x10 [ 273.027791][T12371] ? bpf_obj_name_cpy+0x194/0x1e0 [ 273.027827][T12371] bpf_prog_load+0x14d6/0x1c20 [ 273.027863][T12371] ? __pfx_bpf_prog_load+0x10/0x10 [ 273.027913][T12371] __sys_bpf+0xd0d/0xd90 [ 273.027944][T12371] ? __pfx___sys_bpf+0x10/0x10 [ 273.027987][T12371] ? __fget_files+0x2a/0x420 [ 273.028029][T12371] ? ksys_write+0x242/0x270 [ 273.028060][T12371] ? __pfx_ksys_write+0x10/0x10 [ 273.028094][T12371] __x64_sys_bpf+0xba/0xd0 [ 273.028119][T12371] do_syscall_64+0x166/0x520 [ 273.028141][T12371] ? trace_irq_disable+0x3b/0x140 [ 273.028184][T12371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.028204][T12371] ? clear_bhb_loop+0x70/0xc0 [ 273.028229][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.028249][T12371] RIP: 0033:0x7f51be79e159 [ 273.028268][T12371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.028285][T12371] RSP: 002b:00007f51bf674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.028307][T12371] RAX: ffffffffffffffda RBX: 00007f51bea25fa0 RCX: 00007f51be79e159 [ 273.028322][T12371] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 273.028334][T12371] RBP: 00007f51bf674090 R08: 0000000000000000 R09: 0000000000000000 [ 273.028346][T12371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.028358][T12371] R13: 00007f51bea26038 R14: 00007f51bea25fa0 R15: 00007ffcf489c1f8 [ 273.028391][T12371] [ 273.172121][T12368] bond3: entered promiscuous mode [ 273.172757][T12368] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.373277][T12368] veth3: entered allmulticast mode [ 273.393490][T12368] bond3: (slave veth3): making interface the new active one [ 273.393515][T12368] veth3: entered promiscuous mode [ 273.394418][T12368] bond3: (slave veth3): Enslaving as an active interface with an up link [ 273.580284][T12390] netlink: 'syz.0.1451': attribute type 17 has an invalid length. [ 273.637557][T12390] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 273.866178][T12400] syz_tun: entered promiscuous mode [ 273.866331][T12400] macsec2: entered promiscuous mode [ 273.906443][T12400] syz_tun: left promiscuous mode [ 273.986315][T12396] netlink: 'syz.2.1453': attribute type 4 has an invalid length. [ 274.062714][T12409] syzkaller1: entered promiscuous mode [ 274.062740][T12409] syzkaller1: entered allmulticast mode [ 274.508996][T12428] lo: entered allmulticast mode [ 274.635763][T12426] RDS: rds_bind could not find a transport for ::a:2800:0, load rds_tcp or rds_rdma? [ 274.936185][T12441] FAULT_INJECTION: forcing a failure. [ 274.936185][T12441] name failslab, interval 1, probability 0, space 0, times 0 [ 274.936220][T12441] CPU: 1 UID: 0 PID: 12441 Comm: syz.3.1461 Not tainted syzkaller #0 PREEMPT(full) [ 274.936242][T12441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.936254][T12441] Call Trace: [ 274.936262][T12441] [ 274.936270][T12441] dump_stack_lvl+0xe8/0x150 [ 274.936305][T12441] should_fail_ex+0x410/0x560 [ 274.936333][T12441] should_failslab+0xa8/0x100 [ 274.936359][T12441] __kmalloc_cache_noprof+0xa3/0x600 [ 274.936378][T12441] ? copy_array+0xab/0x100 [ 274.936408][T12441] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 274.936444][T12441] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 274.936482][T12441] bpf_copy_verifier_state+0xb1f/0x1170 [ 274.936521][T12441] bpf_is_state_visited+0x377d/0x47d0 [ 274.936582][T12441] do_check_common+0x2848/0x5d30 [ 274.936655][T12441] ? __pfx_do_check_common+0x10/0x10 [ 274.936678][T12441] ? __pfx_verbose+0x10/0x10 [ 274.936695][T12441] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 274.936727][T12441] bpf_check+0x2639/0x2e10 [ 274.936762][T12441] ? ktime_get_with_offset+0x93/0x2d0 [ 274.936787][T12441] ? __pfx_bpf_check+0x10/0x10 [ 274.936810][T12441] ? bpf_obj_name_cpy+0x194/0x1e0 [ 274.936841][T12441] bpf_prog_load+0x14d6/0x1c20 [ 274.936877][T12441] ? __pfx_bpf_prog_load+0x10/0x10 [ 274.936929][T12441] __sys_bpf+0xd0d/0xd90 [ 274.936960][T12441] ? __pfx___sys_bpf+0x10/0x10 [ 274.936994][T12441] ? __fget_files+0x2a/0x420 [ 274.937041][T12441] ? ksys_write+0x242/0x270 [ 274.937070][T12441] ? __pfx_ksys_write+0x10/0x10 [ 274.937103][T12441] __x64_sys_bpf+0xba/0xd0 [ 274.937126][T12441] do_syscall_64+0x166/0x520 [ 274.937147][T12441] ? trace_irq_disable+0x3b/0x140 [ 274.937173][T12441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.937192][T12441] ? clear_bhb_loop+0x70/0xc0 [ 274.937217][T12441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.937235][T12441] RIP: 0033:0x7f51be79e159 [ 274.937254][T12441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.937270][T12441] RSP: 002b:00007f51bf674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.937292][T12441] RAX: ffffffffffffffda RBX: 00007f51bea25fa0 RCX: 00007f51be79e159 [ 274.937305][T12441] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 274.937318][T12441] RBP: 00007f51bf674090 R08: 0000000000000000 R09: 0000000000000000 [ 274.937330][T12441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.937342][T12441] R13: 00007f51bea26038 R14: 00007f51bea25fa0 R15: 00007ffcf489c1f8 [ 274.937376][T12441] [ 275.376468][T12449] ieee802154 phy1 wpan1: encryption failed: -22 [ 275.790253][T12467] netlink: 'syz.1.1469': attribute type 9 has an invalid length. [ 275.921964][ T7042] wlan0: Trigger new scan to find an IBSS to join [ 276.406245][T12476] FAULT_INJECTION: forcing a failure. [ 276.406245][T12476] name failslab, interval 1, probability 0, space 0, times 0 [ 276.406361][T12476] CPU: 0 UID: 0 PID: 12476 Comm: syz.3.1473 Not tainted syzkaller #0 PREEMPT(full) [ 276.406382][T12476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.406395][T12476] Call Trace: [ 276.406402][T12476] [ 276.406411][T12476] dump_stack_lvl+0xe8/0x150 [ 276.406444][T12476] should_fail_ex+0x410/0x560 [ 276.406472][T12476] should_failslab+0xa8/0x100 [ 276.406498][T12476] __kmalloc_cache_noprof+0xa3/0x600 [ 276.406516][T12476] ? copy_array+0xab/0x100 [ 276.406553][T12476] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 276.406580][T12476] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 276.406614][T12476] bpf_copy_verifier_state+0xb1f/0x1170 [ 276.406655][T12476] bpf_is_state_visited+0x377d/0x47d0 [ 276.406714][T12476] do_check_common+0x2848/0x5d30 [ 276.406779][T12476] ? __pfx_do_check_common+0x10/0x10 [ 276.406802][T12476] ? __pfx_verbose+0x10/0x10 [ 276.406817][T12476] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 276.406849][T12476] bpf_check+0x2639/0x2e10 [ 276.406882][T12476] ? ktime_get_with_offset+0x93/0x2d0 [ 276.406908][T12476] ? __pfx_bpf_check+0x10/0x10 [ 276.406931][T12476] ? bpf_obj_name_cpy+0x194/0x1e0 [ 276.406963][T12476] bpf_prog_load+0x14d6/0x1c20 [ 276.406998][T12476] ? __pfx_bpf_prog_load+0x10/0x10 [ 276.407047][T12476] __sys_bpf+0xd0d/0xd90 [ 276.407074][T12476] ? __pfx___sys_bpf+0x10/0x10 [ 276.407108][T12476] ? __fget_files+0x2a/0x420 [ 276.407158][T12476] ? ksys_write+0x242/0x270 [ 276.407188][T12476] ? __pfx_ksys_write+0x10/0x10 [ 276.407222][T12476] __x64_sys_bpf+0xba/0xd0 [ 276.407245][T12476] do_syscall_64+0x166/0x520 [ 276.407267][T12476] ? trace_irq_disable+0x3b/0x140 [ 276.407286][T12476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.407305][T12476] ? clear_bhb_loop+0x70/0xc0 [ 276.407329][T12476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.407348][T12476] RIP: 0033:0x7f51be79e159 [ 276.407366][T12476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.407382][T12476] RSP: 002b:00007f51bf674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 276.407404][T12476] RAX: ffffffffffffffda RBX: 00007f51bea25fa0 RCX: 00007f51be79e159 [ 276.407418][T12476] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 276.407430][T12476] RBP: 00007f51bf674090 R08: 0000000000000000 R09: 0000000000000000 [ 276.407442][T12476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 276.407454][T12476] R13: 00007f51bea26038 R14: 00007f51bea25fa0 R15: 00007ffcf489c1f8 [ 276.407487][T12476] [ 276.968551][T12480] netlink: 'syz.3.1476': attribute type 11 has an invalid length. [ 277.052366][T12485] __nla_validate_parse: 6 callbacks suppressed [ 277.052391][T12485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1475'. [ 277.076272][T12485] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1475'. [ 277.079415][T12482] syzkaller0: entered promiscuous mode [ 277.079437][T12482] syzkaller0: entered allmulticast mode [ 277.476243][T12497] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 277.476276][T12497] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 277.608497][T12502] dummy0: entered allmulticast mode [ 277.811864][T12501] dummy0: left allmulticast mode [ 278.606335][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1487'. [ 279.019621][T12553] FAULT_INJECTION: forcing a failure. [ 279.019621][T12553] name failslab, interval 1, probability 0, space 0, times 0 [ 279.019655][T12553] CPU: 1 UID: 0 PID: 12553 Comm: syz.4.1488 Not tainted syzkaller #0 PREEMPT(full) [ 279.019677][T12553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.019689][T12553] Call Trace: [ 279.019697][T12553] [ 279.019705][T12553] dump_stack_lvl+0xe8/0x150 [ 279.019738][T12553] should_fail_ex+0x410/0x560 [ 279.019765][T12553] should_failslab+0xa8/0x100 [ 279.019792][T12553] __kmalloc_cache_noprof+0xa3/0x600 [ 279.019811][T12553] ? copy_array+0xab/0x100 [ 279.019840][T12553] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 279.019868][T12553] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 279.019908][T12553] bpf_copy_verifier_state+0xb1f/0x1170 [ 279.019946][T12553] bpf_is_state_visited+0x377d/0x47d0 [ 279.020005][T12553] do_check_common+0x2848/0x5d30 [ 279.020069][T12553] ? __pfx_do_check_common+0x10/0x10 [ 279.020093][T12553] ? __pfx_verbose+0x10/0x10 [ 279.020110][T12553] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 279.020143][T12553] bpf_check+0x2639/0x2e10 [ 279.020177][T12553] ? ktime_get_with_offset+0x93/0x2d0 [ 279.020204][T12553] ? __pfx_bpf_check+0x10/0x10 [ 279.020230][T12553] ? bpf_obj_name_cpy+0x194/0x1e0 [ 279.020263][T12553] bpf_prog_load+0x14d6/0x1c20 [ 279.020300][T12553] ? __pfx_bpf_prog_load+0x10/0x10 [ 279.020352][T12553] __sys_bpf+0xd0d/0xd90 [ 279.020384][T12553] ? __pfx___sys_bpf+0x10/0x10 [ 279.020430][T12553] ? __fget_files+0x2a/0x420 [ 279.020477][T12553] ? ksys_write+0x242/0x270 [ 279.020507][T12553] ? __pfx_ksys_write+0x10/0x10 [ 279.020541][T12553] __x64_sys_bpf+0xba/0xd0 [ 279.020565][T12553] do_syscall_64+0x166/0x520 [ 279.020588][T12553] ? trace_irq_disable+0x3b/0x140 [ 279.020608][T12553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.020629][T12553] ? clear_bhb_loop+0x70/0xc0 [ 279.020652][T12553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.020673][T12553] RIP: 0033:0x7f667b19e159 [ 279.020693][T12553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.020710][T12553] RSP: 002b:00007f667bfd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 279.020733][T12553] RAX: ffffffffffffffda RBX: 00007f667b425fa0 RCX: 00007f667b19e159 [ 279.020748][T12553] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 279.020761][T12553] RBP: 00007f667bfd1090 R08: 0000000000000000 R09: 0000000000000000 [ 279.020773][T12553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 279.020785][T12553] R13: 00007f667b426038 R14: 00007f667b425fa0 R15: 00007ffcbff99bf8 [ 279.020818][T12553] [ 279.089894][T12556] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.1490'. [ 279.095063][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 279.096822][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 279.511128][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1494'. [ 279.556093][T12572] vlan2: entered allmulticast mode [ 279.628478][T12571] syzkaller1: entered promiscuous mode [ 279.628505][T12571] syzkaller1: entered allmulticast mode [ 280.389608][T12603] FAULT_INJECTION: forcing a failure. [ 280.389608][T12603] name failslab, interval 1, probability 0, space 0, times 0 [ 280.389642][T12603] CPU: 1 UID: 0 PID: 12603 Comm: syz.4.1503 Not tainted syzkaller #0 PREEMPT(full) [ 280.389664][T12603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 280.389676][T12603] Call Trace: [ 280.389684][T12603] [ 280.389693][T12603] dump_stack_lvl+0xe8/0x150 [ 280.389728][T12603] should_fail_ex+0x410/0x560 [ 280.389756][T12603] should_failslab+0xa8/0x100 [ 280.389783][T12603] __kmalloc_cache_noprof+0xa3/0x600 [ 280.389802][T12603] ? bpf_mark_reg_not_init+0x5f/0x1c0 [ 280.389833][T12603] ? bpf_is_state_visited+0x2d6b/0x47d0 [ 280.389852][T12603] ? bpf_is_state_visited+0x2d6b/0x47d0 [ 280.389880][T12603] bpf_is_state_visited+0x2d6b/0x47d0 [ 280.389941][T12603] do_check_common+0x2848/0x5d30 [ 280.390006][T12603] ? __pfx_do_check_common+0x10/0x10 [ 280.390030][T12603] ? __pfx_verbose+0x10/0x10 [ 280.390047][T12603] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 280.390079][T12603] bpf_check+0x2639/0x2e10 [ 280.390113][T12603] ? ktime_get_with_offset+0x93/0x2d0 [ 280.390138][T12603] ? __pfx_bpf_check+0x10/0x10 [ 280.390163][T12603] ? bpf_obj_name_cpy+0x194/0x1e0 [ 280.390195][T12603] bpf_prog_load+0x14d6/0x1c20 [ 280.390232][T12603] ? __pfx_bpf_prog_load+0x10/0x10 [ 280.390284][T12603] __sys_bpf+0xd0d/0xd90 [ 280.390317][T12603] ? __pfx___sys_bpf+0x10/0x10 [ 280.390353][T12603] ? __fget_files+0x2a/0x420 [ 280.390408][T12603] ? ksys_write+0x242/0x270 [ 280.390441][T12603] ? __pfx_ksys_write+0x10/0x10 [ 280.390477][T12603] __x64_sys_bpf+0xba/0xd0 [ 280.390502][T12603] do_syscall_64+0x166/0x520 [ 280.390526][T12603] ? trace_irq_disable+0x3b/0x140 [ 280.390546][T12603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.390566][T12603] ? clear_bhb_loop+0x70/0xc0 [ 280.390591][T12603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.390611][T12603] RIP: 0033:0x7f667b19e159 [ 280.390630][T12603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.390646][T12603] RSP: 002b:00007f667bfd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.390669][T12603] RAX: ffffffffffffffda RBX: 00007f667b425fa0 RCX: 00007f667b19e159 [ 280.390684][T12603] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 280.390697][T12603] RBP: 00007f667bfd1090 R08: 0000000000000000 R09: 0000000000000000 [ 280.390709][T12603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.390722][T12603] R13: 00007f667b426038 R14: 00007f667b425fa0 R15: 00007ffcbff99bf8 [ 280.390755][T12603] [ 280.638421][T12610] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 280.638450][T12610] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 280.840334][T12614] x_tables: duplicate underflow at hook 1 [ 280.884705][ T7042] wlan0: Trigger new scan to find an IBSS to join [ 281.028287][T12621] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1509'. [ 281.060157][T12621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'. [ 281.281915][T12630] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1511'. [ 281.319514][T12630] veth0_to_bridge: entered promiscuous mode [ 281.337125][T12630] macvtap1: entered allmulticast mode [ 281.337151][T12630] veth0_to_bridge: entered allmulticast mode [ 281.353274][T12630] veth0_to_bridge: left allmulticast mode [ 281.353297][T12630] veth0_to_bridge: left promiscuous mode [ 281.782039][ T7049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.983014][T12648] FAULT_INJECTION: forcing a failure. [ 281.983014][T12648] name failslab, interval 1, probability 0, space 0, times 0 [ 281.983039][T12648] CPU: 0 UID: 0 PID: 12648 Comm: syz.3.1515 Not tainted syzkaller #0 PREEMPT(full) [ 281.983052][T12648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.983060][T12648] Call Trace: [ 281.983065][T12648] [ 281.983070][T12648] dump_stack_lvl+0xe8/0x150 [ 281.983092][T12648] should_fail_ex+0x410/0x560 [ 281.983109][T12648] should_failslab+0xa8/0x100 [ 281.983125][T12648] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 281.983139][T12648] ? copy_array+0x71/0x100 [ 281.983154][T12648] ? copy_array+0x71/0x100 [ 281.983171][T12648] ? copy_array+0x71/0x100 [ 281.983187][T12648] krealloc_node_align_noprof+0x19a/0x390 [ 281.983199][T12648] ? __kmalloc_cache_noprof+0x14d/0x600 [ 281.983210][T12648] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 281.983228][T12648] copy_array+0x71/0x100 [ 281.983245][T12648] bpf_copy_verifier_state+0x9b0/0x1170 [ 281.983267][T12648] bpf_is_state_visited+0x377d/0x47d0 [ 281.983300][T12648] do_check_common+0x2848/0x5d30 [ 281.983335][T12648] ? __pfx_do_check_common+0x10/0x10 [ 281.983348][T12648] ? __pfx_verbose+0x10/0x10 [ 281.983358][T12648] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 281.983376][T12648] bpf_check+0x2639/0x2e10 [ 281.983402][T12648] ? ktime_get_with_offset+0x93/0x2d0 [ 281.983417][T12648] ? __pfx_bpf_check+0x10/0x10 [ 281.983431][T12648] ? bpf_obj_name_cpy+0x194/0x1e0 [ 281.983449][T12648] bpf_prog_load+0x14d6/0x1c20 [ 281.983469][T12648] ? __pfx_bpf_prog_load+0x10/0x10 [ 281.983497][T12648] __sys_bpf+0xd0d/0xd90 [ 281.983514][T12648] ? __pfx___sys_bpf+0x10/0x10 [ 281.983534][T12648] ? __fget_files+0x2a/0x420 [ 281.983559][T12648] ? ksys_write+0x242/0x270 [ 281.983587][T12648] ? __pfx_ksys_write+0x10/0x10 [ 281.983619][T12648] __x64_sys_bpf+0xba/0xd0 [ 281.983644][T12648] do_syscall_64+0x166/0x520 [ 281.983664][T12648] ? trace_irq_disable+0x3b/0x140 [ 281.983675][T12648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.983687][T12648] ? clear_bhb_loop+0x70/0xc0 [ 281.983701][T12648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.983712][T12648] RIP: 0033:0x7f51be79e159 [ 281.983725][T12648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.983735][T12648] RSP: 002b:00007f51bf674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.983750][T12648] RAX: ffffffffffffffda RBX: 00007f51bea25fa0 RCX: 00007f51be79e159 [ 281.983759][T12648] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 281.983767][T12648] RBP: 00007f51bf674090 R08: 0000000000000000 R09: 0000000000000000 [ 281.983774][T12648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.983781][T12648] R13: 00007f51bea26038 R14: 00007f51bea25fa0 R15: 00007ffcf489c1f8 [ 281.983799][T12648] [ 282.476251][T12659] __nla_validate_parse: 2 callbacks suppressed [ 282.476276][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 282.476293][T12659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1519'. [ 282.476307][T12659] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1519'. [ 282.640439][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 283.508656][T12673] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1522'. [ 283.745782][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 283.747352][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 283.747721][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 283.748004][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 283.748469][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 283.748872][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'. [ 284.052519][T12690] FAULT_INJECTION: forcing a failure. [ 284.052519][T12690] name failslab, interval 1, probability 0, space 0, times 0 [ 284.052555][T12690] CPU: 1 UID: 0 PID: 12690 Comm: syz.3.1527 Not tainted syzkaller #0 PREEMPT(full) [ 284.052577][T12690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.052588][T12690] Call Trace: [ 284.052597][T12690] [ 284.052606][T12690] dump_stack_lvl+0xe8/0x150 [ 284.052641][T12690] should_fail_ex+0x410/0x560 [ 284.052669][T12690] should_failslab+0xa8/0x100 [ 284.052696][T12690] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 284.052720][T12690] ? bpf_push_jmp_history+0x26c/0x6d0 [ 284.052741][T12690] ? bpf_push_jmp_history+0x26c/0x6d0 [ 284.052766][T12690] ? bpf_push_jmp_history+0x26c/0x6d0 [ 284.052789][T12690] krealloc_node_align_noprof+0x19a/0x390 [ 284.052817][T12690] bpf_push_jmp_history+0x26c/0x6d0 [ 284.052849][T12690] do_check_common+0x2a0a/0x5d30 [ 284.052915][T12690] ? __pfx_do_check_common+0x10/0x10 [ 284.052939][T12690] ? __pfx_verbose+0x10/0x10 [ 284.052959][T12690] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 284.052992][T12690] bpf_check+0x2639/0x2e10 [ 284.053027][T12690] ? ktime_get_with_offset+0x93/0x2d0 [ 284.053053][T12690] ? __pfx_bpf_check+0x10/0x10 [ 284.053078][T12690] ? bpf_obj_name_cpy+0x194/0x1e0 [ 284.053110][T12690] bpf_prog_load+0x14d6/0x1c20 [ 284.053147][T12690] ? __pfx_bpf_prog_load+0x10/0x10 [ 284.053198][T12690] __sys_bpf+0xd0d/0xd90 [ 284.053230][T12690] ? __pfx___sys_bpf+0x10/0x10 [ 284.053266][T12690] ? __fget_files+0x2a/0x420 [ 284.053310][T12690] ? ksys_write+0x242/0x270 [ 284.053342][T12690] ? __pfx_ksys_write+0x10/0x10 [ 284.053376][T12690] __x64_sys_bpf+0xba/0xd0 [ 284.053400][T12690] do_syscall_64+0x166/0x520 [ 284.053423][T12690] ? trace_irq_disable+0x3b/0x140 [ 284.053442][T12690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.053471][T12690] ? clear_bhb_loop+0x70/0xc0 [ 284.053496][T12690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.053515][T12690] RIP: 0033:0x7f51be79e159 [ 284.053534][T12690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.053551][T12690] RSP: 002b:00007f51bf674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 284.053575][T12690] RAX: ffffffffffffffda RBX: 00007f51bea25fa0 RCX: 00007f51be79e159 [ 284.053589][T12690] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 284.053602][T12690] RBP: 00007f51bf674090 R08: 0000000000000000 R09: 0000000000000000 [ 284.053615][T12690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.053627][T12690] R13: 00007f51bea26038 R14: 00007f51bea25fa0 R15: 00007ffcf489c1f8 [ 284.053661][T12690] [ 285.074467][T12710] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 285.455506][T12719] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 285.678173][T12724] FAULT_INJECTION: forcing a failure. [ 285.678173][T12724] name failslab, interval 1, probability 0, space 0, times 0 [ 285.678207][T12724] CPU: 1 UID: 0 PID: 12724 Comm: syz.3.1538 Not tainted syzkaller #0 PREEMPT(full) [ 285.678229][T12724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.678244][T12724] Call Trace: [ 285.678253][T12724] [ 285.678262][T12724] dump_stack_lvl+0xe8/0x150 [ 285.678295][T12724] should_fail_ex+0x410/0x560 [ 285.678324][T12724] should_failslab+0xa8/0x100 [ 285.678360][T12724] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 285.678382][T12724] ? bpf_diag_mod_end+0x4cf/0x6e0 [ 285.678407][T12724] ? bpf_push_jmp_history+0x26c/0x6d0 [ 285.678428][T12724] ? bpf_push_jmp_history+0x26c/0x6d0 [ 285.678452][T12724] ? bpf_push_jmp_history+0x26c/0x6d0 [ 285.678474][T12724] krealloc_node_align_noprof+0x19a/0x390 [ 285.678503][T12724] bpf_push_jmp_history+0x26c/0x6d0 [ 285.678534][T12724] check_mem_access+0xf9e/0x2620 [ 285.678571][T12724] ? __pfx_check_mem_access+0x10/0x10 [ 285.678594][T12724] ? number+0xc60/0xed0 [ 285.678634][T12724] ? __pfx_number+0x10/0x10 [ 285.678670][T12724] check_store_reg+0x664/0xe20 [ 285.678710][T12724] do_check_insn+0x9df/0x18e70 [ 285.678740][T12724] ? vscnprintf+0x5c/0x90 [ 285.678761][T12724] ? bpf_verifier_vlog+0x3d1/0x900 [ 285.678787][T12724] ? format_decode+0xdc/0xda0 [ 285.678815][T12724] ? vsnprintf+0x3a0/0xef0 [ 285.678843][T12724] ? __asan_memcpy+0x40/0x70 [ 285.678865][T12724] ? __pfx_do_check_insn+0x10/0x10 [ 285.678902][T12724] ? vscnprintf+0x5c/0x90 [ 285.678924][T12724] ? bpf_verifier_vlog+0x3d1/0x900 [ 285.678955][T12724] ? verbose+0x11d/0x1a0 [ 285.678980][T12724] ? __pfx_verbose+0x10/0x10 [ 285.679014][T12724] ? print_insn_state+0x106/0x170 [ 285.679037][T12724] do_check_common+0x3c19/0x5d30 [ 285.679103][T12724] ? __pfx_do_check_common+0x10/0x10 [ 285.679126][T12724] ? __pfx_verbose+0x10/0x10 [ 285.679143][T12724] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 285.679175][T12724] bpf_check+0x2639/0x2e10 [ 285.679209][T12724] ? ktime_get_with_offset+0x93/0x2d0 [ 285.679236][T12724] ? __pfx_bpf_check+0x10/0x10 [ 285.679261][T12724] ? bpf_obj_name_cpy+0x194/0x1e0 [ 285.679291][T12724] bpf_prog_load+0x14d6/0x1c20 [ 285.679329][T12724] ? __pfx_bpf_prog_load+0x10/0x10 [ 285.679387][T12724] __sys_bpf+0xd0d/0xd90 [ 285.679419][T12724] ? __pfx___sys_bpf+0x10/0x10 [ 285.679454][T12724] ? __fget_files+0x2a/0x420 [ 285.679499][T12724] ? ksys_write+0x242/0x270 [ 285.679531][T12724] ? __pfx_ksys_write+0x10/0x10 [ 285.679566][T12724] __x64_sys_bpf+0xba/0xd0 [ 285.679590][T12724] do_syscall_64+0x166/0x520 [ 285.679614][T12724] ? trace_irq_disable+0x3b/0x140 [ 285.679633][T12724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.679653][T12724] ? clear_bhb_loop+0x70/0xc0 [ 285.679678][T12724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.679698][T12724] RIP: 0033:0x7f51be79e159 [ 285.679725][T12724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.679742][T12724] RSP: 002b:00007f51bf674028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.679766][T12724] RAX: ffffffffffffffda RBX: 00007f51bea25fa0 RCX: 00007f51be79e159 [ 285.679781][T12724] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 285.679794][T12724] RBP: 00007f51bf674090 R08: 0000000000000000 R09: 0000000000000000 [ 285.679806][T12724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 285.679818][T12724] R13: 00007f51bea26038 R14: 00007f51bea25fa0 R15: 00007ffcf489c1f8 [ 285.679850][T12724] [ 285.769589][T12726] tc_dump_action: action bad kind [ 285.778473][T12726] validate_nla: 3 callbacks suppressed [ 285.778491][T12726] netlink: 'syz.3.1539': attribute type 2 has an invalid length. [ 286.519460][T12742] xt_IDLETIMER: timeout value is too big [ 286.559024][T12742] xt_IDLETIMER: timeout value is too big [ 287.108799][T12768] netlink: 'syz.4.1551': attribute type 29 has an invalid length. [ 287.108824][T12768] netlink: 'syz.4.1551': attribute type 1 has an invalid length. [ 287.152584][T12768] Bluetooth: hci0: invalid len left 17, exp >= 93 [ 287.161985][T12768] netlink: 'syz.4.1551': attribute type 2 has an invalid length. [ 287.519895][T12774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.698772][T12794] __nla_validate_parse: 5 callbacks suppressed [ 287.698812][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 287.967056][T12806] macsec1: entered promiscuous mode [ 287.967087][T12806] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 287.967366][T12806] macsec1: entered allmulticast mode [ 287.967386][T12806] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 287.967868][T12806] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 287.977731][T12806] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 287.977761][T12806] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 288.028184][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1562'. [ 288.105667][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1562'. [ 288.568218][T12839] vti0: entered promiscuous mode [ 288.568246][T12839] vti0: entered allmulticast mode [ 289.146647][T12864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1578'. [ 289.149011][T12864] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1578'. [ 289.172664][T12864] gretap0: entered promiscuous mode [ 289.275602][T12874] netlink: 'syz.4.1581': attribute type 1 has an invalid length. [ 289.275627][T12874] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1581'. [ 289.275642][T12874] netlink: 'syz.4.1581': attribute type 1 has an invalid length. [ 289.278342][T12874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1581'. [ 289.567027][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 289.589117][T12892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1584'. [ 289.804363][T12901] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1588'. [ 290.388175][T12920] sock: sock_set_timeout: `syz.0.1594' (pid 12920) tries to set negative timeout [ 290.545249][T12922] bond4: option tlb_dynamic_lb: invalid value (3) [ 290.547381][T12922] bond4 (unregistering): Released all slaves [ 290.571879][T12924] openvswitch: netlink: Duplicate or invalid key (type 0). [ 291.313700][T12952] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 291.338054][T12948] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 291.371149][T12948] bond3 (unregistering): Released all slaves [ 291.537765][T12956] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 291.556115][T12956] openvswitch: netlink: Duplicate key (type 0). [ 291.654099][T12959] IPv6: NLM_F_CREATE should be specified when creating new route [ 291.779081][T12973] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 291.779113][T12973] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 292.140596][T12988] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 292.789501][T13018] __nla_validate_parse: 4 callbacks suppressed [ 292.789524][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'. [ 292.938670][T13018] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20265 [ 294.084789][T13074] netlink: 'syz.0.1634': attribute type 5 has an invalid length. [ 295.182563][T13100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1638'. [ 295.353279][T13107] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 295.386619][T13107] netlink: 'syz.3.1639': attribute type 1 has an invalid length. [ 295.470842][T13107] 8021q: adding VLAN 0 to HW filter on device bond6 [ 295.554548][T13114] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1639'. [ 296.422274][T13113] bond6: entered promiscuous mode [ 296.422303][T13113] bond6: entered allmulticast mode [ 296.632408][T13125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1643'. [ 296.632576][T13125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1643'. [ 296.632723][T13125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1643'. [ 296.632885][T13125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1643'. [ 296.633054][T13125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1643'. [ 296.633197][T13125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1643'. [ 296.633347][T13125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1643'. [ 296.806616][ T7061] nci: nci_rx_work: unknown MT 0x6 [ 296.838011][T13133] netlink: 'syz.4.1644': attribute type 4 has an invalid length. [ 296.838052][T13133] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 297.066581][T13142] netlink: 'syz.1.1647': attribute type 4 has an invalid length. [ 297.309060][T13152] syzkaller0: entered promiscuous mode [ 297.309086][T13152] syzkaller0: entered allmulticast mode [ 299.632002][T13129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.967827][T13186] FAULT_INJECTION: forcing a failure. [ 299.967827][T13186] name failslab, interval 1, probability 0, space 0, times 0 [ 299.967861][T13186] CPU: 0 UID: 0 PID: 13186 Comm: syz.1.1655 Not tainted syzkaller #0 PREEMPT(full) [ 299.967883][T13186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.967895][T13186] Call Trace: [ 299.967903][T13186] [ 299.967911][T13186] dump_stack_lvl+0xe8/0x150 [ 299.967944][T13186] should_fail_ex+0x410/0x560 [ 299.967974][T13186] should_failslab+0xa8/0x100 [ 299.968016][T13186] __kmalloc_cache_noprof+0xa3/0x600 [ 299.968036][T13186] ? bpf_mark_reg_not_init+0x5f/0x1c0 [ 299.968067][T13186] ? bpf_is_state_visited+0x2d6b/0x47d0 [ 299.968088][T13186] ? bpf_is_state_visited+0x2d6b/0x47d0 [ 299.968117][T13186] bpf_is_state_visited+0x2d6b/0x47d0 [ 299.968177][T13186] do_check_common+0x2848/0x5d30 [ 299.968239][T13186] ? __pfx_do_check_common+0x10/0x10 [ 299.968273][T13186] ? __pfx_verbose+0x10/0x10 [ 299.968290][T13186] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 299.968324][T13186] bpf_check+0x2639/0x2e10 [ 299.968359][T13186] ? ktime_get_with_offset+0x93/0x2d0 [ 299.968386][T13186] ? __pfx_bpf_check+0x10/0x10 [ 299.968411][T13186] ? bpf_obj_name_cpy+0x194/0x1e0 [ 299.968443][T13186] bpf_prog_load+0x14d6/0x1c20 [ 299.968484][T13186] ? __pfx_bpf_prog_load+0x10/0x10 [ 299.968536][T13186] __sys_bpf+0xd0d/0xd90 [ 299.968569][T13186] ? __pfx___sys_bpf+0x10/0x10 [ 299.968604][T13186] ? __fget_files+0x2a/0x420 [ 299.968650][T13186] ? ksys_write+0x242/0x270 [ 299.968683][T13186] ? __pfx_ksys_write+0x10/0x10 [ 299.968720][T13186] __x64_sys_bpf+0xba/0xd0 [ 299.968744][T13186] do_syscall_64+0x166/0x520 [ 299.968767][T13186] ? trace_irq_disable+0x3b/0x140 [ 299.968788][T13186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.968809][T13186] ? clear_bhb_loop+0x70/0xc0 [ 299.968835][T13186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.968856][T13186] RIP: 0033:0x7f38ec79e159 [ 299.968876][T13186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.968893][T13186] RSP: 002b:00007f38ed693028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 299.968917][T13186] RAX: ffffffffffffffda RBX: 00007f38eca25fa0 RCX: 00007f38ec79e159 [ 299.968932][T13186] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 299.968945][T13186] RBP: 00007f38ed693090 R08: 0000000000000000 R09: 0000000000000000 [ 299.968958][T13186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.968970][T13186] R13: 00007f38eca26038 R14: 00007f38eca25fa0 R15: 00007ffdefaeda78 [ 299.969004][T13186] [ 300.197576][T13194] ip6t_hbh: unknown flags AD [ 300.269273][T13202] __nla_validate_parse: 63 callbacks suppressed [ 300.269296][T13202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1658'. [ 300.340369][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1660'. [ 300.377799][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 300.377828][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 300.379813][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 300.384796][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1661'. [ 300.385546][T13206] SET target dimension over the limit! [ 300.386686][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 301.418123][T13233] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1667'. [ 301.653864][T13246] FAULT_INJECTION: forcing a failure. [ 301.653864][T13246] name failslab, interval 1, probability 0, space 0, times 0 [ 301.653900][T13246] CPU: 1 UID: 0 PID: 13246 Comm: syz.0.1671 Not tainted syzkaller #0 PREEMPT(full) [ 301.653922][T13246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.653935][T13246] Call Trace: [ 301.653943][T13246] [ 301.653952][T13246] dump_stack_lvl+0xe8/0x150 [ 301.653987][T13246] should_fail_ex+0x410/0x560 [ 301.654017][T13246] should_failslab+0xa8/0x100 [ 301.654045][T13246] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 301.654069][T13246] ? copy_array+0x71/0x100 [ 301.654096][T13246] ? copy_array+0x71/0x100 [ 301.654127][T13246] ? copy_array+0x71/0x100 [ 301.654157][T13246] krealloc_node_align_noprof+0x19a/0x390 [ 301.654181][T13246] ? rcu_is_watching+0x16/0xb0 [ 301.654209][T13246] copy_array+0x71/0x100 [ 301.654239][T13246] bpf_copy_verifier_state+0xad/0x1170 [ 301.654276][T13246] bpf_is_state_visited+0x377d/0x47d0 [ 301.654336][T13246] do_check_common+0x2848/0x5d30 [ 301.654403][T13246] ? __pfx_do_check_common+0x10/0x10 [ 301.654428][T13246] ? __pfx_verbose+0x10/0x10 [ 301.654446][T13246] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 301.654478][T13246] bpf_check+0x2639/0x2e10 [ 301.654514][T13246] ? ktime_get_with_offset+0x93/0x2d0 [ 301.654541][T13246] ? __pfx_bpf_check+0x10/0x10 [ 301.654568][T13246] ? bpf_obj_name_cpy+0x194/0x1e0 [ 301.654601][T13246] bpf_prog_load+0x14d6/0x1c20 [ 301.654639][T13246] ? __pfx_bpf_prog_load+0x10/0x10 [ 301.654692][T13246] __sys_bpf+0xd0d/0xd90 [ 301.654722][T13246] ? __pfx___sys_bpf+0x10/0x10 [ 301.654755][T13246] ? __fget_files+0x2a/0x420 [ 301.654809][T13246] ? ksys_write+0x242/0x270 [ 301.654841][T13246] ? __pfx_ksys_write+0x10/0x10 [ 301.654876][T13246] __x64_sys_bpf+0xba/0xd0 [ 301.654901][T13246] do_syscall_64+0x166/0x520 [ 301.654924][T13246] ? trace_irq_disable+0x3b/0x140 [ 301.654944][T13246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.654966][T13246] ? clear_bhb_loop+0x70/0xc0 [ 301.654994][T13246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.655014][T13246] RIP: 0033:0x7f1ba779e159 [ 301.655034][T13246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.655051][T13246] RSP: 002b:00007f1ba862a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 301.655074][T13246] RAX: ffffffffffffffda RBX: 00007f1ba7a25fa0 RCX: 00007f1ba779e159 [ 301.655089][T13246] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 301.655102][T13246] RBP: 00007f1ba862a090 R08: 0000000000000000 R09: 0000000000000000 [ 301.655114][T13246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.655125][T13246] R13: 00007f1ba7a26038 R14: 00007f1ba7a25fa0 R15: 00007ffd2d4e9488 [ 301.655158][T13246] [ 302.309754][T13261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1677'. [ 302.435982][T13258] batadv0: entered allmulticast mode [ 302.780972][T13280] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1680'. [ 303.790619][T13338] netlink: 'syz.1.1693': attribute type 2 has an invalid length. [ 305.257957][ T6495] lo speed is unknown, defaulting to 1000 [ 305.261756][ T49] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.261787][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.263560][ T7028] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.263585][ T7028] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.263618][ T7028] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.263639][ T7028] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.263669][ T7028] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.263690][ T7028] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.267863][ T6495] syz0: Port: 1 Link DOWN [ 305.267963][ T6495] lo speed is unknown, defaulting to 1000 [ 305.555747][T13359] batadv0: entered allmulticast mode [ 305.642659][T13369] x_tables: duplicate underflow at hook 1 [ 305.695417][T13378] netlink: 'syz.1.1707': attribute type 1 has an invalid length. [ 305.697959][T13378] netlink: 'syz.1.1707': attribute type 1 has an invalid length. [ 305.799341][T13383] __nla_validate_parse: 4 callbacks suppressed [ 305.799364][T13383] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1709'. [ 305.958172][T13388] netlink: 'syz.3.1708': attribute type 14 has an invalid length. [ 306.347460][T13404] netlink: 'syz.0.1717': attribute type 1 has an invalid length. [ 306.635046][T13416] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1720'. [ 306.644091][T13416] netlink: 'syz.3.1720': attribute type 3 has an invalid length. [ 306.644261][T13416] netlink: 'syz.3.1720': attribute type 3 has an invalid length. [ 306.689636][T13419] batadv0: entered allmulticast mode [ 306.784861][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1721'. [ 307.172260][T13438] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1724'. [ 307.179819][T13438] hsr_slave_0 (unregistering): left promiscuous mode [ 307.224626][T13439] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1724'. [ 307.295441][T13444] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 307.295467][T13444] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1725'. [ 307.777404][T13464] team_slave_0: entered allmulticast mode [ 308.255334][T13470] lo speed is unknown, defaulting to 1000 [ 308.845193][T13505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.845782][T13505] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 308.909726][T13509] openvswitch: netlink: Duplicate or invalid key (type 0). [ 309.010069][T13505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1739'. [ 309.316537][T13523] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 309.316567][T13523] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 309.329869][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 309.400231][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 309.679326][T13537] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 309.698608][T13539] netlink: zone id is out of range [ 310.294992][T13572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1749'. [ 310.306551][T13572] netlink: 'syz.0.1749': attribute type 39 has an invalid length. [ 310.320358][ T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 310.502499][T13584] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1753'. [ 310.545475][T13584] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1753'. [ 311.085290][T13600] netlink: 'syz.1.1758': attribute type 7 has an invalid length. [ 311.085315][T13600] netlink: 'syz.1.1758': attribute type 3 has an invalid length. [ 311.085328][T13600] __nla_validate_parse: 1 callbacks suppressed [ 311.085339][T13600] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1758'. [ 311.214204][T13607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.225853][T13608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.240551][T13597] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1757'. [ 311.395979][T13612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1762'. [ 311.751878][T13633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1765'. [ 311.751918][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1765'. [ 311.801168][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1763'. [ 312.306959][T13645] bond7: Removing last arp target with arp_interval on [ 312.391567][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1766'. [ 312.391950][T13645] 8021q: VLANs not supported on sit0 [ 312.813354][T13667] tc action pedit unable to extract header offset for header type (0x5) [ 312.813379][T13667] tc action pedit unable to extract header offset for header type (0x5) [ 312.813393][T13667] tc action pedit unable to extract header offset for header type (0x5) [ 312.813406][T13667] tc action pedit unable to extract header offset for header type (0x5) [ 312.813418][T13667] tc action pedit unable to extract header offset for header type (0x5) [ 312.813431][T13667] tc action pedit unable to extract header offset for header type (0x5) [ 312.813442][T13667] tc action pedit unable to extract header offset for header type (0x5) [ 312.813454][T13667] tc action pedit unable to extract header offset for header type (0x5) [ 312.813466][T13667] tc action pedit unable to extract header offset for header type (0x5) [ 312.813479][T13667] tc action pedit unable to extract header offset for header type (0x5) [ 312.813512][T13667] 0: reclassify loop, rule prio 0, protocol 800 [ 312.935057][T13672] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 312.935080][T13672] netlink: 'syz.3.1771': attribute type 2 has an invalid length. [ 312.958639][T13673] netlink: 'syz.3.1771': attribute type 9 has an invalid length. [ 312.958660][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 313.404308][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'. [ 313.404364][T13699] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1776'. [ 313.432120][T13699] geneve2: entered promiscuous mode [ 313.432143][T13699] geneve2: entered allmulticast mode [ 313.796463][T13714] xt_hashlimit: size too large, truncated to 1048576 [ 313.826533][T13716] netlink: 'syz.1.1779': attribute type 16 has an invalid length. [ 313.826559][T13716] netlink: 'syz.1.1779': attribute type 17 has an invalid length. [ 313.985710][T13716] ip6gretap0: left promiscuous mode [ 314.022955][T13716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.086768][T13716] batadv0: left allmulticast mode [ 314.088442][T13716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.165033][T13716] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.165104][T13716] 0·: left allmulticast mode [ 314.165119][T13716] hsr_slave_1: left allmulticast mode [ 314.194666][T13716] veth1_vlan: left promiscuous mode [ 314.196060][T13716] veth0_vlan: left promiscuous mode [ 314.197986][T13716] veth0_vlan: entered promiscuous mode [ 314.202334][T13730] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 314.225460][T13716] veth1_vlan: entered promiscuous mode [ 314.232338][T13716] veth1_macvtap: left promiscuous mode [ 314.233595][T13716] veth0_macvtap: left promiscuous mode [ 314.234819][T13716] veth0_macvtap: entered promiscuous mode [ 314.236045][T13716] veth1_macvtap: entered promiscuous mode [ 314.245909][T13716] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 314.249396][T13716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.250905][T13716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.252060][T13716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.253639][T13716] bond1: left allmulticast mode [ 314.253954][T13716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.279012][T13716] ip6erspan0: left allmulticast mode [ 314.294981][T13716] ip6gretap0: entered promiscuous mode [ 314.297571][T13716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 314.309813][T13716] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 314.339870][T13716] geneve3: left promiscuous mode [ 314.344592][T13716] geneve3: left allmulticast mode [ 314.344617][T13716] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 314.345124][ T9] lo speed is unknown, defaulting to 1000 [ 314.345165][ T9] syz0: Port: 1 Link ACTIVE [ 314.345257][ T9] lo speed is unknown, defaulting to 1000 [ 314.991456][ T7028] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.991494][ T7028] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.020869][ T7026] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.020903][ T7026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.020957][ T7026] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.020978][ T7026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.021026][ T7026] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.021047][ T7026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.033028][T13756] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 315.437851][T13772] veth0: entered promiscuous mode [ 315.455295][T13771] veth0: left promiscuous mode [ 315.630985][T13788] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 315.631018][T13788] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 316.093269][T13804] __nla_validate_parse: 6 callbacks suppressed [ 316.093290][T13804] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1800'. [ 316.210414][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 316.389010][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 316.490345][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1803'. [ 316.505336][T13808] bond6: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 316.533623][T13808] bond6 (unregistering): Released all slaves [ 316.645432][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'. [ 316.706819][T13810] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 316.770868][T13833] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1806'. [ 317.050704][T13828] pim6reg1: entered allmulticast mode [ 317.175836][T13843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1809'. [ 317.175879][T13843] openvswitch: netlink: Flow actions attr not present in new flow. [ 317.207656][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.434549][T13843] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20001 [ 317.435105][T13843] IPVS: set_ctl: invalid protocol: 22 100.1.1.2:20000 [ 318.513610][T13881] sch_fq: defrate 8 ignored. [ 318.607202][T13891] 0: reclassify loop, rule prio 0, protocol 800 [ 319.565370][T13929] sctp: [Deprecated]: syz.2.1838 (pid 13929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.565370][T13929] Use struct sctp_sack_info instead [ 319.721809][T13933] netlink: 'syz.1.1840': attribute type 2 has an invalid length. [ 319.787443][T13933] IPv6: NLM_F_REPLACE set, but no existing node found! [ 319.794062][T13933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1840'. [ 320.650304][T13966] netlink: 'syz.2.1848': attribute type 1 has an invalid length. [ 320.755706][T13966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1848'. [ 320.868974][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1851'. [ 321.083436][ T7029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.083461][ T7029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.132639][T13990] __nla_validate_parse: 2 callbacks suppressed [ 321.132663][T13990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1854'. [ 321.677893][T14023] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1859'. [ 321.774168][T13989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.794283][T13990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.153378][T14035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1860'. [ 322.153417][T14035] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1860'. [ 322.168671][T14035] geneve2: entered promiscuous mode [ 322.168693][T14035] geneve2: entered allmulticast mode [ 322.697870][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'. [ 322.713244][T14055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'. [ 322.816962][T14063] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 322.831389][T14063] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 322.945874][T14068] Bluetooth: hci0: unsupported parameter 5135 [ 322.945979][T14068] Bluetooth: hci0: invalid length 11, exp 2 for type 3 [ 322.995817][T14060] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 322.995843][T14060] pim6reg0: persist disabled [ 323.644407][T14094] bond3: option tlb_dynamic_lb: invalid value (128) [ 323.648526][T14094] bond3 (unregistering): Released all slaves [ 323.874476][T14104] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1884'. [ 324.027101][T14105] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1884'. [ 324.340175][T14123] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 324.340217][T14123] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 324.380156][T14123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1888'. [ 324.473339][T14135] 0: reclassify loop, rule prio 0, protocol 800 [ 324.827282][T14150] sit0: left promiscuous mode [ 324.994801][T14150] macvtap1: left promiscuous mode [ 324.995102][T14150] ip6gre2: left promiscuous mode [ 325.054588][T14150] ip6erspan0: left allmulticast mode [ 325.121590][T14150] veth11: left allmulticast mode [ 325.169112][T14166] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1897'. [ 325.182953][T14166] unsupported nlmsg_type 40 [ 326.205843][T14206] openvswitch: netlink: IP tunnel TTL not specified. [ 326.206329][T14205] __nla_validate_parse: 3 callbacks suppressed [ 326.206346][T14205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1911'. [ 326.932603][T14227] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1919'. [ 326.957605][T14227] netlink: 'syz.4.1919': attribute type 2 has an invalid length. [ 326.993800][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 327.002997][T14229] xt_cgroup: path and classid specified [ 328.205375][T14276] 0: reclassify loop, rule prio 0, protocol 800 [ 328.251989][T14280] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1933'. [ 328.745826][T14296] openvswitch: netlink: IP tunnel dst address not specified [ 328.745865][T14296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.969289][T14305] macvtap1: entered promiscuous mode [ 328.969316][T14305] vlan0: entered promiscuous mode [ 328.969871][T14305] macvtap1: entered allmulticast mode [ 328.990300][T14305] vlan0: entered allmulticast mode [ 328.990321][T14305] veth0_vlan: entered allmulticast mode [ 329.097818][T14304] netlink: 564 bytes leftover after parsing attributes in process `syz.4.1938'. [ 329.451316][T14328] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1942'. [ 329.451731][T14328] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1942'. [ 329.452076][T14328] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1942'. [ 329.452453][T14328] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1942'. [ 329.516561][T14329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1941'. [ 329.609763][T14329] netlink: 'syz.1.1941': attribute type 1 has an invalid length. [ 330.524119][T14364] sctp: [Deprecated]: syz.1.1949 (pid 14364) Use of int in maxseg socket option. [ 330.524119][T14364] Use struct sctp_assoc_value instead [ 331.253891][T14358] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 331.992934][ T7037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.992958][ T7037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.031111][T14400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.173402][T14406] __nla_validate_parse: 4 callbacks suppressed [ 332.173423][T14406] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1963'. [ 332.216677][T14406] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 332.542823][T14416] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 332.542855][T14416] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 332.546831][T14416] netlink: 'syz.3.1964': attribute type 1 has an invalid length. [ 332.585409][T14416] erspan1: entered allmulticast mode [ 332.739376][T14428] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1970'. [ 332.995582][T14445] erspan0: entered promiscuous mode [ 333.016957][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 333.510485][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1976'. [ 333.516403][T14461] netlink: 'syz.3.1976': attribute type 1 has an invalid length. [ 333.596355][T14461] bond8: entered promiscuous mode [ 333.596912][T14461] 8021q: adding VLAN 0 to HW filter on device bond8 [ 333.622192][T14463] macvtap1: entered allmulticast mode [ 333.653389][T14461] bond8: (slave bridge6): making interface the new active one [ 333.653415][T14461] bridge6: entered promiscuous mode [ 333.655858][T14461] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 334.118214][T14470] x_tables: duplicate underflow at hook 1 [ 334.225405][T14480] netlink: 'syz.0.1982': attribute type 1 has an invalid length. [ 334.400306][T14485] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 334.423082][T14480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1982'. [ 334.464482][T14480] 8021q: adding VLAN 0 to HW filter on device bond4 [ 334.534992][T14480] bridge10: entered promiscuous mode [ 334.562652][T14480] bond4: (slave bridge10): making interface the new active one [ 334.582176][T14480] bond4: (slave bridge10): Enslaving as an active interface with an up link [ 334.633547][T14497] nbd4: detected capacity change from 0 to 63 [ 334.663242][T14485] bridge11: entered promiscuous mode [ 334.678186][T14485] bond4: (slave bridge11): Enslaving as a backup interface with an up link [ 334.694794][ T5626] block nbd4: Receive control failed (result -104) [ 334.697702][T14499] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1988'. [ 334.723368][T14499] [ 334.725737][T14499] ====================================================== [ 334.732771][T14499] WARNING: possible circular locking dependency detected [ 334.739810][T14499] syzkaller #0 Not tainted [ 334.744247][T14499] ------------------------------------------------------ [ 334.751286][T14499] syz.4.1988/14499 is trying to acquire lock: [ 334.757359][T14499] ffffffff8ee90160 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x600 [ 334.766688][T14499] [ 334.766688][T14499] but task is already holding lock: [ 334.774055][T14499] ffff8880361e1530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xaf0 [ 334.783286][T14499] [ 334.783286][T14499] which lock already depends on the new lock. [ 334.783286][T14499] [ 334.793703][T14499] [ 334.793703][T14499] the existing dependency chain (in reverse order) is: [ 334.802803][T14499] [ 334.802803][T14499] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 334.810375][T14499] __mutex_lock+0x19d/0x1550 [ 334.815499][T14499] __ipv6_dev_mc_inc+0x4e/0xaf0 [ 334.820867][T14499] __ipv6_sock_mc_join+0x511/0x830 [ 334.826551][T14499] do_ipv6_mcast_group_source+0x3df/0x4c0 [ 334.832806][T14499] do_ipv6_setsockopt+0x17a7/0x2960 [ 334.838539][T14499] ipv6_setsockopt+0x59/0x170 [ 334.843744][T14499] do_sock_setsockopt+0x17c/0x1b0 [ 334.849291][T14499] __x64_sys_setsockopt+0x13d/0x1b0 [ 334.855010][T14499] do_syscall_64+0x166/0x520 [ 334.860125][T14499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.866550][T14499] [ 334.866550][T14499] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 334.874285][T14499] lock_sock_nested+0x41/0x100 [ 334.879571][T14499] inet_shutdown+0x6a/0x390 [ 334.884604][T14499] nbd_mark_nsock_dead+0x2cb/0x550 [ 334.890240][T14499] recv_work+0x1cee/0x1e10 [ 334.895180][T14499] process_scheduled_works+0xc3d/0x1630 [ 334.901251][T14499] worker_thread+0xa47/0xfb0 [ 334.906367][T14499] kthread+0x38b/0x480 [ 334.910959][T14499] ret_from_fork+0x514/0xb70 [ 334.916078][T14499] ret_from_fork_asm+0x1a/0x30 [ 334.921373][T14499] [ 334.921373][T14499] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 334.929016][T14499] __mutex_lock+0x19d/0x1550 [ 334.934127][T14499] nbd_queue_rq+0x373/0xff0 [ 334.939238][T14499] blk_mq_dispatch_rq_list+0x499/0x1990 [ 334.945326][T14499] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 334.952176][T14499] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 334.958689][T14499] blk_mq_run_work_fn+0x16c/0x300 [ 334.964241][T14499] process_scheduled_works+0xc3d/0x1630 [ 334.970403][T14499] worker_thread+0xa47/0xfb0 [ 334.975694][T14499] kthread+0x38b/0x480 [ 334.980296][T14499] ret_from_fork+0x514/0xb70 [ 334.985426][T14499] ret_from_fork_asm+0x1a/0x30 [ 334.990728][T14499] [ 334.990728][T14499] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 334.997948][T14499] __mutex_lock+0x19d/0x1550 [ 335.003058][T14499] nbd_queue_rq+0xc1/0xff0 [ 335.008256][T14499] blk_mq_dispatch_rq_list+0x499/0x1990 [ 335.014324][T14499] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 335.021173][T14499] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 335.027674][T14499] blk_mq_run_work_fn+0x16c/0x300 [ 335.033230][T14499] process_scheduled_works+0xc3d/0x1630 [ 335.039300][T14499] worker_thread+0xa47/0xfb0 [ 335.044416][T14499] kthread+0x38b/0x480 [ 335.049008][T14499] ret_from_fork+0x514/0xb70 [ 335.054114][T14499] ret_from_fork_asm+0x1a/0x30 [ 335.059410][T14499] [ 335.059410][T14499] -> #3 (set->srcu){.+.+}-{0:0}: [ 335.066532][T14499] __synchronize_srcu+0xc9/0x2f0 [ 335.072010][T14499] elevator_switch+0x1e8/0x7b0 [ 335.077309][T14499] elevator_change+0x2fa/0x480 [ 335.082594][T14499] elevator_set_default+0x375/0x440 [ 335.088325][T14499] blk_register_queue+0x3f3/0x4e0 [ 335.093893][T14499] __add_disk+0x6b8/0xdb0 [ 335.098756][T14499] add_disk_fwnode+0x100/0x3a0 [ 335.104049][T14499] nbd_dev_add+0x733/0xb60 [ 335.108987][T14499] nbd_init+0x168/0x1f0 [ 335.113673][T14499] do_one_initcall+0x250/0x870 [ 335.118964][T14499] do_initcall_level+0x10a/0x1a0 [ 335.124434][T14499] do_initcalls+0x59/0xa0 [ 335.129304][T14499] kernel_init_freeable+0x29d/0x3e0 [ 335.135035][T14499] kernel_init+0x22/0x1d0 [ 335.139922][T14499] ret_from_fork+0x514/0xb70 [ 335.145134][T14499] ret_from_fork_asm+0x1a/0x30 [ 335.150517][T14499] [ 335.150517][T14499] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 335.158347][T14499] __mutex_lock+0x19d/0x1550 [ 335.163465][T14499] elevator_change+0x1af/0x480 [ 335.168752][T14499] elevator_set_none+0xb5/0x140 [ 335.174130][T14499] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 335.180470][T14499] nbd_start_device+0x189/0xb30 [ 335.185838][T14499] nbd_genl_connect+0x167d/0x1cd0 [ 335.191385][T14499] genl_family_rcv_msg_doit+0x233/0x340 [ 335.197454][T14499] genl_rcv_msg+0x614/0x7a0 [ 335.202479][T14499] netlink_rcv_skb+0x226/0x4a0 [ 335.207773][T14499] genl_rcv+0x28/0x40 [ 335.212274][T14499] netlink_unicast+0x7bd/0x940 [ 335.217561][T14499] netlink_sendmsg+0x813/0xb40 [ 335.222850][T14499] sock_sendmsg_nosec+0x13a/0x180 [ 335.228422][T14499] ____sys_sendmsg+0x54e/0x850 [ 335.233709][T14499] ___sys_sendmsg+0x2a5/0x360 [ 335.238912][T14499] __x64_sys_sendmsg+0x1b1/0x290 [ 335.244376][T14499] do_syscall_64+0x166/0x520 [ 335.249490][T14499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.255906][T14499] [ 335.255906][T14499] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 335.264523][T14499] blk_alloc_queue+0x544/0x690 [ 335.269832][T14499] __blk_mq_alloc_disk+0x194/0x390 [ 335.275648][T14499] nbd_dev_add+0x494/0xb60 [ 335.280602][T14499] nbd_init+0x168/0x1f0 [ 335.285280][T14499] do_one_initcall+0x250/0x870 [ 335.290571][T14499] do_initcall_level+0x10a/0x1a0 [ 335.296053][T14499] do_initcalls+0x59/0xa0 [ 335.300907][T14499] kernel_init_freeable+0x29d/0x3e0 [ 335.306646][T14499] kernel_init+0x22/0x1d0 [ 335.311531][T14499] ret_from_fork+0x514/0xb70 [ 335.316661][T14499] ret_from_fork_asm+0x1a/0x30 [ 335.321967][T14499] [ 335.321967][T14499] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 335.329206][T14499] __lock_acquire+0x164c/0x2de0 [ 335.334599][T14499] lock_acquire+0x115/0x350 [ 335.339629][T14499] fs_reclaim_acquire+0x71/0x100 [ 335.345091][T14499] __kmalloc_cache_noprof+0x61/0x600 [ 335.350898][T14499] __ipv6_dev_mc_inc+0x447/0xaf0 [ 335.356357][T14499] pndisc_constructor+0xe0/0x150 [ 335.361827][T14499] pneigh_create+0x253/0x4e0 [ 335.366939][T14499] neigh_add+0x77a/0x1090 [ 335.371794][T14499] rtnetlink_rcv_msg+0x7b9/0xc00 [ 335.377259][T14499] netlink_rcv_skb+0x226/0x4a0 [ 335.382546][T14499] netlink_unicast+0x7bd/0x940 [ 335.387838][T14499] netlink_sendmsg+0x813/0xb40 [ 335.393130][T14499] sock_sendmsg_nosec+0x13a/0x180 [ 335.398760][T14499] ____sys_sendmsg+0x54e/0x850 [ 335.404055][T14499] ___sys_sendmsg+0x2a5/0x360 [ 335.409257][T14499] __x64_sys_sendmsg+0x1b1/0x290 [ 335.414717][T14499] do_syscall_64+0x166/0x520 [ 335.419832][T14499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.426243][T14499] [ 335.426243][T14499] other info that might help us debug this: [ 335.426243][T14499] [ 335.436555][T14499] Chain exists of: [ 335.436555][T14499] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 335.436555][T14499] [ 335.449158][T14499] Possible unsafe locking scenario: [ 335.449158][T14499] [ 335.456602][T14499] CPU0 CPU1 [ 335.461972][T14499] ---- ---- [ 335.467341][T14499] lock(&idev->mc_lock); [ 335.471675][T14499] lock(sk_lock-AF_INET6); [ 335.478700][T14499] lock(&idev->mc_lock); [ 335.485555][T14499] lock(fs_reclaim); [ 335.489544][T14499] [ 335.489544][T14499] *** DEADLOCK *** [ 335.489544][T14499] [ 335.497686][T14499] locks held by syz.4.1988/14499: 3, last CPU#0: [ 335.504013][T14499] #0: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 335.513427][T14499] #1: ffff8880202a43f8 (&tbl->phash_lock){+.+.}-{4:4}, at: pneigh_create+0x49/0x4e0 [ 335.522912][T14499] #2: ffff8880361e1530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xaf0 [ 335.532578][T14499] [ 335.532578][T14499] stack backtrace: [ 335.538464][T14499] CPU: 0 UID: 0 PID: 14499 Comm: syz.4.1988 Not tainted syzkaller #0 PREEMPT(full) [ 335.547831][T14499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.557883][T14499] Call Trace: [ 335.561164][T14499] [ 335.564098][T14499] dump_stack_lvl+0xe8/0x150 [ 335.568696][T14499] print_circular_bug+0x2e2/0x300 [ 335.573728][T14499] check_noncircular+0x12f/0x150 [ 335.578672][T14499] __lock_acquire+0x164c/0x2de0 [ 335.583524][T14499] ? preempt_schedule_common+0x7f/0xd0 [ 335.588986][T14499] ? preempt_schedule_thunk+0x16/0x40 [ 335.594367][T14499] ? __mutex_lock+0x321/0x1550 [ 335.599136][T14499] lock_acquire+0x115/0x350 [ 335.603652][T14499] ? __kmalloc_cache_noprof+0x61/0x600 [ 335.609117][T14499] ? __pfx___mutex_lock+0x10/0x10 [ 335.614147][T14499] fs_reclaim_acquire+0x71/0x100 [ 335.619088][T14499] ? __kmalloc_cache_noprof+0x61/0x600 [ 335.624549][T14499] __kmalloc_cache_noprof+0x61/0x600 [ 335.629832][T14499] ? __ipv6_dev_mc_inc+0x447/0xaf0 [ 335.635026][T14499] ? __ipv6_dev_mc_inc+0x447/0xaf0 [ 335.640149][T14499] __ipv6_dev_mc_inc+0x447/0xaf0 [ 335.645093][T14499] pndisc_constructor+0xe0/0x150 [ 335.650052][T14499] ? __pfx_pndisc_constructor+0x10/0x10 [ 335.655602][T14499] ? __kmalloc_noprof+0x1ab/0x720 [ 335.660627][T14499] ? pneigh_create+0x12c/0x4e0 [ 335.665393][T14499] ? pneigh_create+0x148/0x4e0 [ 335.670159][T14499] pneigh_create+0x253/0x4e0 [ 335.674848][T14499] neigh_add+0x77a/0x1090 [ 335.679185][T14499] ? __pfx_neigh_add+0x10/0x10 [ 335.683963][T14499] ? __pfx_neigh_add+0x10/0x10 [ 335.688732][T14499] rtnetlink_rcv_msg+0x7b9/0xc00 [ 335.693674][T14499] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 335.698787][T14499] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.704260][T14499] ? ref_tracker_free+0x689/0x830 [ 335.709293][T14499] ? __pfx_ref_tracker_free+0x10/0x10 [ 335.714669][T14499] netlink_rcv_skb+0x226/0x4a0 [ 335.719442][T14499] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.724907][T14499] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.730206][T14499] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.735415][T14499] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.740619][T14499] netlink_unicast+0x7bd/0x940 [ 335.745393][T14499] netlink_sendmsg+0x813/0xb40 [ 335.750174][T14499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.755469][T14499] ? apparmor_socket_sendmsg+0x98/0x360 [ 335.761023][T14499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.766323][T14499] sock_sendmsg_nosec+0x13a/0x180 [ 335.771351][T14499] ____sys_sendmsg+0x54e/0x850 [ 335.776120][T14499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.781413][T14499] ? import_iovec+0x73/0xa0 [ 335.785919][T14499] ___sys_sendmsg+0x2a5/0x360 [ 335.790608][T14499] ? __lock_acquire+0x747/0x2de0 [ 335.795551][T14499] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.800758][T14499] ? futex_wait+0x2a2/0x390 [ 335.805281][T14499] ? __fget_files+0x2a/0x420 [ 335.809962][T14499] ? __fget_files+0x3a2/0x420 [ 335.814645][T14499] __x64_sys_sendmsg+0x1b1/0x290 [ 335.819585][T14499] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.825056][T14499] do_syscall_64+0x166/0x520 [ 335.829736][T14499] ? trace_irq_disable+0x3b/0x140 [ 335.834766][T14499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.840834][T14499] ? clear_bhb_loop+0x70/0xc0 [ 335.845516][T14499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.851408][T14499] RIP: 0033:0x7f667b19e159 [ 335.855825][T14499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.875864][T14499] RSP: 002b:00007f667bfd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.884280][T14499] RAX: ffffffffffffffda RBX: 00007f667b425fa0 RCX: 00007f667b19e159 [ 335.892258][T14499] RDX: 0000000000000004 RSI: 0000200000000940 RDI: 0000000000000004 [ 335.900231][T14499] RBP: 00007f667b23506b R08: 0000000000000000 R09: 0000000000000000 [ 335.908205][T14499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.916179][T14499] R13: 00007f667b426038 R14: 00007f667b425fa0 R15: 00007ffcbff99bf8 [ 335.924162][T14499] [ 336.018232][T14499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1988'. [ 336.027306][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1988'. [ 336.029626][T14509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1990'. [ 336.036322][T14505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1990'. [ 341.521921][ T1958] block nbd4: Connection timed out, retrying (0/1 alive) [ 341.521974][ T1958] block nbd4: Connection timed out, retrying (0/1 alive) [ 341.521996][ T1958] block nbd4: Connection timed out, retrying (0/1 alive) [ 341.522014][ T1958] block nbd4: Connection timed out, retrying (0/1 alive) [ 341.522055][ T1958] block nbd4: Dead connection, failed to find a fallback [ 341.522065][ T1958] block nbd4: shutting down sockets [ 341.522073][ T1958] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 341.522092][ T1958] Buffer I/O error on dev nbd4, logical block 3, async page read [ 341.522108][ T1958] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 341.522121][ T1958] Buffer I/O error on dev nbd4, logical block 2, async page read [ 341.522132][ T1958] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 341.522144][ T1958] Buffer I/O error on dev nbd4, logical block 1, async page read [ 341.522154][ T1958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 341.522167][ T1958] Buffer I/O error on dev nbd4, logical block 0, async page read [ 341.522318][ T4941] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 341.522335][ T4941] Buffer I/O error on dev nbd4, logical block 0, async page read [ 341.522388][ T4941] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 341.522403][ T4941] Buffer I/O error on dev nbd4, logical block 1, async page read [ 341.522445][ T4941] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 341.522460][ T4941] Buffer I/O error on dev nbd4, logical block 2, async page read [ 341.522502][ T4941] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 341.522517][ T4941] Buffer I/O error on dev nbd4, logical block 3, async page read [ 341.522570][ T4941] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 341.522585][ T4941] Buffer I/O error on dev nbd4, logical block 0, async page read [ 341.522627][ T4941] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 341.522641][ T4941] Buffer I/O error on dev nbd4, logical block 1, async page read [ 341.524020][ T5628] ldm_validate_partition_table(): Disk read failed. [ 341.524696][ T5628] Dev nbd4: unable to read RDB block 0 [ 341.525418][ T5628] nbd4: unable to read partition table [ 341.530974][ T5628] ldm_validate_partition_table(): Disk read failed. [ 341.531904][ T5628] Dev nbd4: unable to read RDB block 0 [ 341.532902][ T5628] nbd4: unable to read partition table