last executing test programs: 2.56394617s ago: executing program 3 (id=1775): recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/156, 0x9c}], 0x1, &(0x7f00000005c0)=""/82, 0x52}}, {{&(0x7f0000000280)=@ieee802154, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000400)=""/32, 0x20}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000880)=""/63, 0x3f}], 0x6, &(0x7f0000000b80)=""/94, 0x5e}, 0x400}], 0x3, 0x42, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x39}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x40000840) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x500) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/156, 0x9c}], 0x1, &(0x7f00000005c0)=""/82, 0x52}}, {{&(0x7f0000000280)=@ieee802154, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000400)=""/32, 0x20}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000880)=""/63, 0x3f}], 0x6, &(0x7f0000000b80)=""/94, 0x5e}, 0x400}], 0x3, 0x42, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) accept4(r0, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x39}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x40000840) (async) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x500) (async) 2.407791217s ago: executing program 3 (id=1778): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="33b40e806005fffbaa06ffffaaaaaaaaaabb08004500001c0000e0000004907800f80000000000004e220000000890788487c545adb5f12bcc56168f748e4e2af408681e6fce23e4cdec0ef52e3154029d6cb673db9e3a221d8959c5a10848fe29d356ebcdc5126b4065fb1eb0bfe892bc32e76b27c5e86b1212d8fea3c99ebddc0bcfcb2f0c48"], 0x2e) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$packet(0x11, 0x2, 0x300) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000200)=0x80, 0x4) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f0000000180), &(0x7f0000000100)=r6}, 0x20) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x8, 0x3af81ffd, 0x7fffffff}, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.50841221s ago: executing program 0 (id=1792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x401, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0xfffffffffffffe04, 0x8e, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004001}, 0x48810) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff4}, {0x2, 0xf}, {0xfff1, 0x9}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)={0x1a8, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b10fb4f5fdaf9331c7510e19feecb90ee6bb49fdb1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296774f1fe35663c0d236fde58b"}]}, @nested={0x144, 0x6, 0x0, 0x1, [@nested={0x140, 0xce, 0x0, 0x1, [@nested={0x13c, 0x13e, 0x0, 0x1, [@nested={0x138, 0xa0, 0x0, 0x1, [@nested={0x134, 0x61, 0x0, 0x1, [@nested={0x130, 0x9d, 0x0, 0x1, [@nested={0x12c, 0x63, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @nested={0x120, 0x90, 0x0, 0x1, [@nested={0x11c, 0x44, 0x0, 0x1, [@typed={0x8, 0xa5, 0x0, 0x0, @u32=0x10}, @nested={0x10d, 0x13d, 0x0, 0x1, [@nested={0xc1, 0x12f, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @fd}, @generic="9b598191b7e935ff76a32367ad8bf5c5e149f8d949f547d0875704a1b4d2c2d1b217d96aeb93d7e9671603767887c5beb789a69b4aa1242f5adf10af6998d5fd6d34b7c3e6e85ca9b7d629530e230432ba51a1bd57", @nested={0x4, 0xfe}, @nested={0x58, 0x149, 0x0, 0x1, [@nested={0x4d, 0x12a, 0x0, 0x1, [@nested={0x4, 0x13d}, @typed={0xd, 0x11d, 0x0, 0x0, @str='trans=fd,'}, @typed={0x4, 0x129}, @generic="b5256c58efc72ca281a19f00ccb9de9d64579dc3775418325ceb778cfa8b454c77608e22", @nested={0x4, 0x3f}, @generic="90507974e5230c553e"]}, @typed={0x4, 0xa1}]}, @nested={0x4, 0xa9}]}, @generic="8e6ba0a7c095f72f0354f88e7dcb24c9b16fc96923d17705c3ef3ab9819625fbb3216b67c35310af8b160410b617b03d1454291481f7bca8fd01a6f1eb579701152d371e32"]}]}]}]}]}]}]}]}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x144}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2004c0a0) 1.459307109s ago: executing program 1 (id=1793): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x11, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000940)=[{&(0x7f0000000040)="1333", 0x2}, {&(0x7f00000007c0)="b4", 0x1}, {&(0x7f00000000c0)="008e777f9d", 0x5}], 0x3, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) (async) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000100)=@nfc_llcp={0x27, r7, 0x0, 0xf, 0x7, 0x2, "87546dbab6e82f7f20e2b2a8967a3d1251f6b2483f01a1ef8bc265093cd2c4fdf0f38a1d712a13322831b74869a80acf028109a1e4173971758f4cb9f8a6a3", 0x27}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f00000001c0)="8b474063a4dc887b80e3", 0xa}, {&(0x7f0000000200)="a429b2c3d550e8e29f6549e70583a903780bb2d01b8d700e6d06f20a8c3d93d7c884df58603b1460b527e7801b5a1dc91879d46b5d9d399a7e27303bdbcf71de1c21dadfe62f753741043d38975ae380720b1cd27cc2ccc557ec5068b5daf25bb6c755939f67ebc2f23b9b3c264430a7dd0d730f625b5e9ce92d6e26fab999425d718192f835431de4b1c64f306bea1407ce628b69af2a4cab884fe2e83b", 0x9e}, {&(0x7f0000000400)="a82be1f6e01d58ea0e73ae4acc7e2b757e68081d8cffe5198eaf991d9dee6c4c95732850bf940d71fdad3ad1633cc8a79866911b4bf2614025852041b8014fd2e129452ff0bea06072e0c477815793fb7bdd04f13283d6c7a236485fca64736f30bb027a764b3dd03daa9e14740058feae50f125e16cc11968ee30d08085baf2fa59f3ff14481de609d8a4", 0x8b}, {&(0x7f00000002c0)="9c0d245bab333321a9028c33798e7cc8bd53f9978896295854f6d4d32143d8d60fc0ab83201c08f06d4889c7", 0x2c}, {&(0x7f00000004c0)="05f65e68bc423782c4054e8921e4297e59cd5a8b10dc16e1c916b0b750546a6a5312a40e7d9733ec1f80fa34c465f75f1a37bfdfb3a0c5eab288c936a49b7d1afd9177851d5fab399e24", 0x4a}], 0x6, &(0x7f00000005c0)=[{0xf0, 0x10e, 0x0, "71d71171a61210318eb1347e500277a7bac469f3af6eff7b64bb42bdaa61f45224bf86777e217fd03a7401ab27f264fa27f1005db0836e4e37a9e6b2debdfca8b4aa3aa3063c2d83053be1d8b8c23cb3738b29de3dc6a88d00b57af20e9f5d10d7e9a98298fab135fae7f960b6ab3c8bd93008ca4930529e83dff936c4183ce06f6959276d504bd16296f17e820c1f14962cad356c4a5b3d5561c6bb5d84dec9facd35dd7254b6b66b777a38726f587005ea90d29270cd3ebc4e7e021138d8cfa891320c4093ad22bd5522513ae371182a417f3e98386cae87346c8c"}, {0x48, 0x6, 0xb, "683d37599abe9acf3a22f48d066e3bf5609b6f9d94579a2278fef6113f2dd774f17e9eafc8160954c834c94d0de3385561358f42f1"}, {0x78, 0x11, 0x7, "b914a719b33e3c5a2a9642a4383ece52ebbb4e7ccf0eb35c1325749d88ad936ca9dabd348edec0b4ddc60d954917b586fa0131b05f41c0dfc9b258a4b88dd6e3467c6c010f6636ef1ca5e55ba72fd2cc1571c38f92c747c7887d3b702d5069710a9fd2b2db5f0a47"}, {0x38, 0x110, 0x1, "f6926c5b87fe51986df34f6cb5aa25a1c9d1f7775fff5414379e728710692bb7c3752989649539dd"}], 0x1e8}, 0x4000080) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x18, 0x0, "01d787"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd, 0x40000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_key={0x2, 0x8, 0x8, 0x0, "e0"}]}, 0x70}, 0x1, 0x7}, 0x0) (async) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) 1.407907371s ago: executing program 4 (id=1794): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000055090100000000009500000000000000181100"/60, @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014000300766c616e3000000000002500000000000a0001"], 0x11c}}, 0x4) 1.299027936s ago: executing program 4 (id=1795): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@delchain={0x34, 0x66, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0x0, 0xfff1}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x3e}, @TCA_RATE={0x6, 0x5, {0x9, 0x40}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 1.167527493s ago: executing program 3 (id=1796): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r2, 0x607}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044894) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x2c}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r2, 0x607}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044894) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x2c}}, 0x80) (async) 1.103917161s ago: executing program 1 (id=1797): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000580)="b9ff0307680426", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.087929251s ago: executing program 0 (id=1798): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@deltclass={0x38, 0x29, 0x400, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0x5}, {0xffff, 0xfff2}, {0xffff, 0x5}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x1d9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x801) r2 = socket(0x1d, 0x5, 0x8) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x2, 0xe3253a0d1a6a6976, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe}]}, 0x80}, 0x1, 0x0, 0x0, 0x8011}, 0x1) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) write$cgroup_pid(r3, &(0x7f0000000340)=r4, 0x12) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000380)={0x0, 0x3, 0x1, [0x5, 0x6, 0x3, 0x1b7, 0x100], [0x76, 0x9, 0xa, 0x3ff, 0x771, 0x5, 0x1, 0x3, 0x8, 0x0, 0x0, 0x9, 0xfffffffffffffffb, 0x9, 0x3ff, 0x5, 0x1, 0x3, 0x1, 0x0, 0x2, 0x98, 0x0, 0x5, 0x7, 0x7, 0x9, 0x1000, 0x0, 0x100000001, 0x6be7, 0x9, 0x1, 0x8000000000000001, 0x2, 0x4, 0x152, 0x100000001, 0x5, 0x8, 0x7ff, 0x4c03, 0xfe, 0x1000, 0x0, 0xff, 0x2, 0x1000, 0x1, 0x4, 0x2, 0x5, 0x100, 0x4, 0xea, 0x0, 0x100, 0x9, 0x100000001, 0x9, 0x80000000000000, 0x10001, 0x7, 0x10001, 0x81, 0x2, 0x6, 0xcd, 0x4, 0x0, 0x8, 0x8001, 0x2, 0x8, 0x4000800000000, 0xfffffffffffffffa, 0xe059, 0x6, 0x9, 0x5, 0xb, 0x8, 0x9, 0x6, 0x7, 0x225, 0x9, 0x7, 0x6, 0x2, 0x7, 0x1, 0x9, 0x6, 0x4, 0x1, 0x4, 0x6, 0x10001, 0x6, 0x8, 0xe96a, 0x10, 0x8, 0x7, 0x7f, 0x100000001, 0x7f, 0x7, 0x3, 0x200, 0x9, 0x0, 0x4, 0x91df, 0x4, 0x98, 0x2, 0x3, 0x9, 0x140000000000]}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000007c0)={r5, "6306731bed52259f039f0c0034b8bdc6"}) close(r0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000017c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @local, 0x2bb}}, 0x4, 0x7, 0x1, 0x3, 0x88, 0xfffff422, 0x3}, &(0x7f0000001880)=0x9c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000018c0)={0x244f, 0xe6, 0x200, 0xfffffff6, 0x9, 0x10001, 0x40, 0x80000001, r7}, &(0x7f0000001900)=0x20) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002bc0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000002cc0)=0xe8) r9 = getgid() r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002d00)={0x0, 0x2, 0x8}, 0xc) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002d40), 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002d80)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000002e80)=0xe8) r14 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000002ec0)={0x0, 0x0}, &(0x7f0000002f00)=0xc) r16 = getgid() r17 = accept$inet6(r3, &(0x7f0000002f40)={0xa, 0x0, 0x0, @local}, &(0x7f0000002f80)=0x1c) sendmsg$unix(r2, &(0x7f0000003140)={&(0x7f0000001940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002b80)=[{&(0x7f00000019c0)="513f623ae61bb166dcdf02769f5807441489fcc5243a5815cee522ddb4649813d87991cabd4bf8bfb5a2cb373a323183bab356539b2877a18f72d570e12c92678e4dff0190", 0x45}, {&(0x7f0000001a40)="ad207f30c78c9f3ddacfc9aa6c8091fc4ca35b4a165f824fbde8eebb4f460777c44d41146f4bc4aad3e5359d02edfe3994ceccc5f5b419a57c49", 0x3a}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000002a80)="79a862387dac6061cc7a0a9f8532568160d27da28530a8beba040f695b63114b0f08270ad405c43f6e6803edecd5f16498aaebf3a296b3ba69aa2af1f4dafbc3307cbcd75e578563690e03fdaf20fbd4a24cda7dd3d78fcabb580b96c4cf2c00ff732da407c523ea36f06c480302b3eb712fb1d050d1c0aa7b34c84ff0da9b81830344a4e2e6fbf134a1e1e2758c1a9fda73545964f0135f623bdcd6d9ba480f3db2437d175766ac1923febf0914b807e43b93a1e98d2937bd0c61a36a4b15835a661bd4bc5fb6ded8fe7d7a1e8c6f8a9483b439f07ea2e7988d5e", 0xdb}], 0x4, &(0x7f0000002fc0)=[@cred={{0x1c, 0x1, 0x2, {r4, r8, r9}}}, @rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, r0, r0, r6, r10, r11]}}, @rights={{0x1c, 0x1, 0x1, [r3, r12, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r13, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r14, r2, r0, r3, r3, r6, r3]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, r15, r16}}}, @rights={{0x1c, 0x1, 0x1, [r6, 0xffffffffffffffff, r17]}}, @rights={{0x28, 0x1, 0x1, [r3, r6, r3, 0xffffffffffffffff, r0, r2]}}], 0x148, 0x4800}, 0x40040c0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000003240)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0xd, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000032c0)={r7, 0x0, &(0x7f0000003280)}, &(0x7f0000003300)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000003380)={r18, 0x2c, &(0x7f0000003340)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e23, 0x6, @loopback, 0xe6}]}, &(0x7f00000033c0)=0x10) accept4$bt_l2cap(r3, &(0x7f0000003400)={0x1f, 0x0, @none}, &(0x7f0000003440)=0xe, 0x1000) 895.926827ms ago: executing program 1 (id=1800): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}]}, 0x40}}, 0x0) r2 = socket$kcm(0xa, 0x3, 0x87) r3 = accept(r2, 0x0, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0xffffffffffffffa8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1b, 0x24}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4040005) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7, @mcast2}, 0x80, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000280)="7cb6482a", 0x4}], 0x2}, 0x40810) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}]}, 0x40}}, 0x0) (async) socket$kcm(0xa, 0x3, 0x87) (async) accept(r2, 0x0, &(0x7f0000000080)) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0xffffffffffffffa8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1b, 0x24}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4040005) (async) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7, @mcast2}, 0x80, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000280)="7cb6482a", 0x4}], 0x2}, 0x40810) (async) 894.59925ms ago: executing program 0 (id=1801): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ffff00001420914a5f87db13fcead9fea773000000000004188ae0438f5edd90a214b40c613e215bd8f255000024c45bff8dd75f3ad3d3f7a77f41a7d08351fec1576f38fcaacef317f19e128ae27fa8f0e10635592747f034318c8a65b5e1cd8c4176a909bda022271cf0d438f13d8915c2ae16c495ed501a468728690319ead244eb74eda2e91259790c476d402ab6a3f10746a29b99669091e6eb45adf1089c5933aef163a0287544c9290016fc5f640775a45fce61ba4ac7903da8053ce7a7799583b26e271f737ce40cfd2056ae4640b2d042df167cc1731259", 0xdc}], 0x1, 0x0, 0x0, 0x7400}, 0x800) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x20004000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv4_delroute={0x1c, 0x19, 0x300, 0x70bd27, 0x25dfdbfb, {0x2, 0x20, 0x14, 0x7f, 0xfc, 0x4, 0xff, 0x0, 0x2400}}, 0x1c}, 0x1, 0xba01}, 0x0) 889.722008ms ago: executing program 3 (id=1802): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010500000000ffffffb90300000006000100143a15d93728429fed43730dadca2c4825842f6fec71e7d16bed0bb5d5118c1f6279be57afa9029223f7446c32f2eeb5f3c929e05fbfff8fca4a8fa92fc84dbbd9875ff7060974211d3378fd954913f44e8aaaeba123dccd4a4a12d5044f64b80d659b497113e398db3a027f0b9c2df469053358e9ec4db5188d0797095f060308c0d1246977b74c5f240c93ae561dbad5df3b8868a884f46561da"], 0x1c}}, 0x20008080) 792.367779ms ago: executing program 4 (id=1803): r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r2, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) 735.865973ms ago: executing program 2 (id=1804): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000040)="a3d554662fd2ad6aa65e00000000000000", 0x11, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) listen(r0, 0xda90) (async) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x5, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0xffffffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x83350}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xff59, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x5, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0xffffffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x83350}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xff59, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 735.55672ms ago: executing program 1 (id=1805): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (rerun: 64) sendmsg$nl_route(r4, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket(0x1, 0x803, 0x0) (rerun: 32) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r9, @ANYBLOB="0e2516caf510564be220ce3c8e7c0d1bd0b1ad782366462fc4e633570200000000000000119da90d75ecc327407c5301a14dda7dd60053936dc06349b3e8ecafbf43843fa1af41e15459fc5c31acb73522b9460fab86998967c925f3cf59142f5154d385e0251c67fc6885f8a701f5da19ede0f6025603d1acd972871bcd95e7748269f53bec24e127fba1982a63ed5323e686f0c22df791"], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async, rerun: 32) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000400)="80d731d4fdc7e6925e62d03677025fc43e93bb", 0x13}], 0x1}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="300000000c7dad172900000000000000f8ffffff018000"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000b40)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRESOCT=r3, @ANYRES64, @ANYRES32=0x0, @ANYRES64=r3, @ANYRES32=r2, @ANYRES8=r1], 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='kvm_dirty_ring_push\x00', r0, 0x0, 0x5e}, 0x67) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) (async, rerun: 32) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="19000000020000006d0500000300000002000000ad5ba6046100cc9d89770fa6", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 64) r12 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016200500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r11}, 0x38) 735.146986ms ago: executing program 3 (id=1806): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xffff7d3e, 0x83f0, 0x8a, 0x1, 0x649, 0x4}, {0xcab5, 0xffffff00, 0x7, 0x0, 0x7, 0x3ff}], ['\x00', '\x00']}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r4, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 734.953802ms ago: executing program 0 (id=1807): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x48}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}, 0x2062) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x1800}]}}]}, 0x38}}, 0x4000010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2020000) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r5) sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYBLOB="6ec74ccb0f4705e544412b5c05b956121988b6a4b631287ed8c0cdd6abfcb0f2d0e64057907f5ba429d0037a3d9ebdcec757fab721145528106de48e84f99474977abfe04e3119879abdd95769b12b58bf70376f6e0a5a26c492310d389c683369ef7d86c82b10d292570d331b94572afe1a4d1c24772cd49b490dd912124b1e1bd3eccdbb", @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000950000000000000b00f0e552d1813df9dcb317d29cda9314961b55e01af9ab068f7af08dd28a36dd9186b2ef42c39ed71834cbdc20b6655e8837155ee7efeb52f39acb0563a512d8d8835cb0762df6a5d00ffac56634d6c22851053d87c805e40cf010a6ddf4ddc03fce6828ee71a82dc025fa917d2448f44ce7ef2adfadf6b50fd7d3c2fec3abe2c860a5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r8, &(0x7f0000000000)=0x8, 0x12) close(r8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r8, 0x0, 0x74, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0xffffff1f, 0x2000000}}, 0x20) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='z\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000125bd7000fcdbdf250800000008000400ac1414aa2800070073797374656d5f753a6f626a6563745f723a6e7672616d5f6465766963655f743a7330000500010001000000050001000000000014000300fe80000000000000000000000000002d1400030000000000000000000000000000000001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x55) 652.09644ms ago: executing program 4 (id=1808): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}]}, 0x2c}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x7d, &(0x7f0000000040)={r3}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 552.018778ms ago: executing program 2 (id=1809): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000500140000007ef506be00000000803500000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 483.787482ms ago: executing program 1 (id=1810): ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x404000, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000080)={{r1}, "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"}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001080), 0x103a43, 0x0) write$rfkill(r2, &(0x7f00000010c0)={0x6, 0x2, 0x0, 0x0, 0x1}, 0x8) write$bt_hci(0xffffffffffffffff, &(0x7f0000001100)={0x1, @reject_sync_conn_req={{0x42a, 0x7}, {@any, 0x5}}}, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000001340)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xe0, r4, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dcd8ba7d8c"}, @NL80211_ATTR_KEY={0x7c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xd, 0x4, "a61a7766836af6ba00"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7cbd2af535e765472ead70fde8"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8ae8bd01e854bf1bb305e75270"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5c607b01cf"}]]}, 0xe0}}, 0x884) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000001380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x14, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x8000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x24}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x80) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r8, 0x29, 0xcd, &(0x7f00000017c0)={{0xa, 0x4e24, 0x4, @mcast2, 0x4}, {0xa, 0x4e23, 0x1, @mcast2, 0xa}, 0x0, {[0xa, 0x0, 0x58c, 0x3, 0x7, 0x9, 0xfffffff9, 0x7]}}, 0x5c) r9 = socket$inet6(0xa, 0x1, 0x3) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000001840)={'pimreg1\x00', {0x2, 0x4e23, @broadcast}}) socket$packet(0x11, 0x2, 0x300) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000018c0)={r10, 0xffffffffffffffff, 0x4, r9}, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001940), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001980)={0x8c, r11, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7621a87b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37cc1dec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61b08d04}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49517250}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65037cf8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6723d9ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f0a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42840bc1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5dc73d50}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44962972}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9aad}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) r12 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001ac0)={'pimreg0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f0000001e00)={&(0x7f0000001b00)=@ll={0x11, 0x17, r13, 0x1, 0x6, 0x6, @local}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001b80)="ffb5ae6b452e19e4bc07799960bb8e10c85db602", 0x14}, {&(0x7f0000001bc0)="95fe342535471f2b0b570b2b18253121b6d2ebbe7302838c8051b7aefe657188a1eba069bd304bb12cf5e8fe9ac146e8013e7481548855879349359569c9", 0x3e}, {&(0x7f0000001c00)="b9", 0x1}], 0x3, &(0x7f0000001c80)=[{0x58, 0x10f, 0xfffffffd, "474458eaef4a06d4d3d96434bd64d18a402b39f33b77f2d867ba9d7ffc5e8706f2d5e78ec703839dda0f806a1e96ede0d747a307096502c18235855925b9a0e5530e42afea74090a"}, {0x100, 0x10b, 0x9, "8038934406bf00fd800f24091287daeaf69a3cc8514fb437e81f8636fcdcc1e1dc8d4aa408d74d6d2f03d52a897bfb5bb830e1a2182706973ca949ab53f4fec3e013a58e5c5e18da84a93dba7c841c9c7b59fc3e0d5c476f5c3543dac4786cbdc8aab0cd813f2437dea66637a4aff316b6fe4702d774f3a63410dc507c1ab7c1f832a1754bc9189e89615811e5b5c7af5131caf722b5700939f5b4d1647420502e0b86831a1fd62b0392852f877c531d570261ab07a4e0673dd9afd88a29b7625b76084b21174f0b69aa808f0d09903df6b07af7482d539e286fc12819202147779a44f634f8dac8e23978f964ecad"}], 0x158}, 0x80) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r14, 0x89f9, &(0x7f0000001e80)={'sit0\x00', &(0x7f0000001e40)={@loopback, @local, 0x19, 0x1f}}) 483.582273ms ago: executing program 0 (id=1811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0xc, 0x1010, &(0x7f0000002500)=""/4112, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffb8}, 0x94) 413.708789ms ago: executing program 4 (id=1812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0x5}, 0x8) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000020901030000000000000005100002000c000280050001", @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40044) 373.061066ms ago: executing program 3 (id=1813): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$phonet(0x23, 0x2, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e21, @remote}}}, 0x84) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r12, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xde}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x10) sendmsg$BATADV_CMD_SET_MESH(r11, 0x0, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x24000086) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x0, 0x1, 0x406, 0xfffffffe, 0xffffffff, 0x23}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffe, 0x5}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bind$phonet(r2, &(0x7f0000000140)={0x23, 0xb3, 0xef, 0x3}, 0x10) r13 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f0000004840)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}], 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{0x0, 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 292.153069ms ago: executing program 2 (id=1814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000102c000000030a01010000000000000000050000000900010073797a30"], 0xc8}}, 0x0) 279.225903ms ago: executing program 0 (id=1815): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) close(0x4) close(0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000) 203.432599ms ago: executing program 2 (id=1816): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010500000000ffffffb90300000006000100143a15d93728429fed43730dadca2c4825842f6fec71e7d16bed0bb5d5118c1f6279be57afa9029223f7446c32f2eeb5f3c929e05fbfff8fca4a8fa92fc84dbbd9875ff7060974211d3378fd954913f44e8aaaeba123dccd4a4a12d5044f64b80d659b497113e398db3a027f0b9c2df469053358e9ec4db5188d0797095f060308c0d1246977b74c5f240c93ae561dbad5df3b8868a884f46561da"], 0x1c}}, 0x20008080) 142.276445ms ago: executing program 4 (id=1817): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0xa00000, 0x0, 0xff, 0x1, 0x7f, 0xfffb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0xa00000, 0x2, 0x0, 0xb, 0x4, 0x600}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x0) vmsplice(r6, &(0x7f0000000400)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000380)="a6", 0x1}, {&(0x7f0000001100)="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", 0xf01}], 0x3, 0x6) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write(r4, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r8, 0x0, 0x0, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000fdffffff000100000300400085200000020000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x6c, 0x2c, &(0x7f00000002c0)=""/44, 0x41000, 0x11, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r8, 0x4, &(0x7f0000000580), &(0x7f00000005c0)=[{0x2, 0x2, 0xa, 0x8}, {0x0, 0x4, 0x2, 0x5}, {0x0, 0x4, 0x9}, {0x1, 0x1, 0x2, 0x3}], 0x10, 0xf0}, 0x94) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=0x0, @ANYBLOB="c511ce5fd61127e870af2c4a4e83f3edf8777db432427cbc538e6bc3eb1b2d6330ee079c1e000000"], 0x1c}}, 0x0) 64.119375ms ago: executing program 2 (id=1818): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x891d, &(0x7f0000000100)="26a8415a54a6867f8a1e3a") sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x14008044) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x2, 0xa, 0x2, 0x2, 0x5, 0x8, 0x0, 0x0, 0x6, 0x4, 0x35, 0x5, 0x1, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={r1}, 0x8) (fail_nth: 1) 21.21583ms ago: executing program 1 (id=1819): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket(0x10, 0x6, 0x8000) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000500)={0x2, {{0x2, 0x4e23, @local}}}, 0x88) (async, rerun: 32) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0e00"], 0x14}}, 0x0) (rerun: 32) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x80000009, 0x2}, 0x10) (async, rerun: 32) r5 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async, rerun: 32) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) (async, rerun: 32) unshare(0x20000400) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) (async, rerun: 32) ppoll(&(0x7f0000000280)=[{r4, 0x7220}, {r6, 0x701}], 0x2, &(0x7f00000003c0), 0x0, 0x0) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a00", @ANYRES32=0x0, @ANYBLOB="a0b85038c7320f831e588c363fea91d107acac6893f97d2979b098f8d37e47ded65a2a92faf8103e12c9ce765e4102199100d613ae4b1695d6da0e0c483b5f7c96319e3ac4f1a46d23b231f235b4ebc415319a624d638c854f2593659201422bf2b5d5113f5ceb22456ace7319689a2da75e8e6897443d590af5952a842e2cb6f7340ae1a3bc690ab1265fe2a100378a9c8a84"], 0x3c}}, 0x0) 0s ago: executing program 2 (id=1820): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000040)="25e200ea3f5b3179d7b52eb343fc", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 9) kernel console output (not intermixed with test programs): owmem_reserve[]: 0 0 0 0 0 [ 113.517239][ T6617] Node 1 Normal free:3879836kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24704kB local_pcp:16224kB free_cma:0kB [ 113.630236][ T6617] lowmem_reserve[]: 0 0 0 0 0 [ 113.658238][ T6665] netlink: 240 bytes leftover after parsing attributes in process `syz.0.176'. [ 113.662047][ T6617] Node 0 [ 113.686615][ T6666] netlink: 'syz.1.180': attribute type 9 has an invalid length. [ 113.729145][ T6617] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 113.750478][ T6666] netlink: 224 bytes leftover after parsing attributes in process `syz.1.180'. [ 113.835311][ T6617] Node 0 DMA32: 488*4kB (UM) 293*8kB (UME) 28*16kB (M) 297*32kB (UME) 148*64kB (UME) 45*128kB (UME) 28*256kB (UM) 8*512kB (UM) 4*1024kB (UME) 2*2048kB (M) 337*4096kB (M) = 1429288kB [ 113.901191][ T6617] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 113.953977][ T6617] Node 1 Normal: 225*4kB (UE) 75*8kB (UME) 42*16kB (UME) 67*32kB (UME) 21*64kB (UME) 7*128kB (UME) 4*256kB (ME) 3*512kB (UM) 4*1024kB (UM) 2*2048kB (UE) 943*4096kB (M) = 3879836kB [ 114.014290][ T6617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.069757][ T6617] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.157955][ T6617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.189455][ T6617] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.223523][ T6682] IPv6: addrconf: prefix option has invalid lifetime [ 114.270448][ T6617] 44440 total pagecache pages [ 114.275217][ T6617] 0 pages in swap cache [ 114.310502][ T6617] Free swap = 124996kB [ 114.315616][ T6617] Total swap = 124996kB [ 114.319805][ T6617] 2097051 pages RAM [ 114.334026][ T6617] 0 pages HighMem/MovableOnly [ 114.338764][ T6617] 424998 pages reserved [ 114.366540][ T6617] 0 pages cma reserved [ 114.464566][ T6693] syzkaller1: entered promiscuous mode [ 114.481265][ T6693] syzkaller1: entered allmulticast mode [ 114.488379][ T6694] tipc: Started in network mode [ 114.494028][ T6694] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 114.516283][ T6694] tipc: Enabled bearer , priority 10 [ 114.726726][ T6696] bond1: entered promiscuous mode [ 114.738118][ T6696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.931820][ T6715] : renamed from vlan0 (while UP) [ 115.521344][ T5930] tipc: Node number set to 4269801488 [ 116.046140][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 116.271614][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.288472][ T6761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.326933][ T6761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.340529][ T6761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.409397][ T6761] bond0: (slave batadv0): Releasing backup interface [ 116.918423][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 117.059441][ T6800] warning: `syz.1.208' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.502805][ T10] IPVS: starting estimator thread 0... [ 117.504987][ T6818] netlink: 'syz.4.214': attribute type 1 has an invalid length. [ 117.508588][ T6815] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 117.612149][ T6819] IPVS: using max 25 ests per chain, 60000 per kthread [ 117.799949][ T6826] macvlan0: entered promiscuous mode [ 117.833608][ T6826] batadv0: entered promiscuous mode [ 117.886685][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 117.897098][ T6826] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 117.918964][ T6831] netlink: 84 bytes leftover after parsing attributes in process `syz.4.218'. [ 117.930258][ T6826] hsr1: entered allmulticast mode [ 117.936913][ T6826] macvlan0: entered allmulticast mode [ 117.942828][ T6826] veth1_vlan: entered allmulticast mode [ 117.948538][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 117.957695][ T6826] batadv0: entered allmulticast mode [ 118.003718][ T6826] macvlan0: left promiscuous mode [ 118.041331][ T6826] batadv0: left promiscuous mode [ 118.651205][ T6863] FAULT_INJECTION: forcing a failure. [ 118.651205][ T6863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.693022][ T6865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.228'. [ 118.705837][ T6863] CPU: 0 UID: 0 PID: 6863 Comm: syz.4.227 Not tainted syzkaller #0 PREEMPT(full) [ 118.705861][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.705873][ T6863] Call Trace: [ 118.705880][ T6863] [ 118.705888][ T6863] dump_stack_lvl+0x189/0x250 [ 118.705922][ T6863] ? __pfx____ratelimit+0x10/0x10 [ 118.705945][ T6863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.705967][ T6863] ? __pfx__printk+0x10/0x10 [ 118.705994][ T6863] ? __might_fault+0xb0/0x130 [ 118.706031][ T6863] should_fail_ex+0x414/0x560 [ 118.706065][ T6863] _copy_from_user+0x2d/0xb0 [ 118.706090][ T6863] kstrtouint_from_user+0xc4/0x170 [ 118.706113][ T6863] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 118.706150][ T6863] proc_fail_nth_write+0x88/0x200 [ 118.706172][ T6863] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 118.706197][ T6863] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 118.706219][ T6863] vfs_write+0x27e/0xb30 [ 118.706252][ T6863] ? __pfx_vfs_write+0x10/0x10 [ 118.706278][ T6863] ? __fget_files+0x2a/0x420 [ 118.706311][ T6863] ? __fget_files+0x3a0/0x420 [ 118.706337][ T6863] ? __fget_files+0x2a/0x420 [ 118.706383][ T6863] ksys_write+0x145/0x250 [ 118.706409][ T6863] ? __pfx_ksys_write+0x10/0x10 [ 118.706432][ T6863] ? rcu_is_watching+0x15/0xb0 [ 118.706455][ T6863] ? do_syscall_64+0xbe/0x3b0 [ 118.706482][ T6863] do_syscall_64+0xfa/0x3b0 [ 118.706504][ T6863] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.706525][ T6863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.706543][ T6863] ? clear_bhb_loop+0x60/0xb0 [ 118.706567][ T6863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.706586][ T6863] RIP: 0033:0x7fa600b8d97f [ 118.706610][ T6863] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 118.706626][ T6863] RSP: 002b:00007fa601afc030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 118.706650][ T6863] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa600b8d97f [ 118.706664][ T6863] RDX: 0000000000000001 RSI: 00007fa601afc0a0 RDI: 0000000000000005 [ 118.706675][ T6863] RBP: 00007fa601afc090 R08: 0000000000000000 R09: 0000000000000014 [ 118.706688][ T6863] R10: 000000000400c000 R11: 0000000000000293 R12: 0000000000000001 [ 118.706699][ T6863] R13: 00007fa600de6038 R14: 00007fa600de5fa0 R15: 00007ffc50602e28 [ 118.706730][ T6863] [ 118.997295][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.229'. [ 119.619026][ T6901] netlink: 52 bytes leftover after parsing attributes in process `syz.3.238'. [ 119.629074][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 119.640608][ T6900] netlink: 248 bytes leftover after parsing attributes in process `syz.4.239'. [ 120.094197][ T6915] Bluetooth: MGMT ver 1.23 [ 120.478621][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 120.907349][ T6953] tipc: Can't bind to reserved service type 1 [ 121.173508][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.253'. [ 122.198913][ T7003] team_slave_0 (unregistering): left promiscuous mode [ 122.224528][ T7003] team0: Port device team_slave_0 removed [ 122.501956][ T7030] netlink: 'syz.0.269': attribute type 1 has an invalid length. [ 123.271701][ T7061] __nla_validate_parse: 8 callbacks suppressed [ 123.271721][ T7061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.274'. [ 123.321297][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.274'. [ 123.487853][ T7059] netlink: 'syz.4.275': attribute type 12 has an invalid length. [ 124.575604][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.282'. [ 124.706649][ T7094] netlink: 32 bytes leftover after parsing attributes in process `syz.0.282'. [ 125.301703][ T7107] IPv6: addrconf: prefix option has invalid lifetime [ 125.489896][ T7073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.278'. [ 125.525463][ T7073] netlink: 'syz.4.278': attribute type 17 has an invalid length. [ 125.543126][ T7073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.982421][ T7128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.290'. [ 126.053068][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'. [ 126.258864][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 126.289687][ T7136] !: renamed from dummy0 (while UP) [ 126.290381][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 126.428298][ T7141] netlink: 'syz.0.291': attribute type 12 has an invalid length. [ 126.497111][ T7141] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.291'. [ 127.181205][ T7160] IPv6: addrconf: prefix option has invalid lifetime [ 127.817731][ T7187] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.770928][ T7226] netlink: 'syz.0.313': attribute type 4 has an invalid length. [ 129.334574][ T7236] syz.4.316 (7236) used greatest stack depth: 16696 bytes left [ 129.357429][ T7247] __nla_validate_parse: 2 callbacks suppressed [ 129.357447][ T7247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.319'. [ 129.386106][ T7247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.319'. [ 129.833015][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 130.235908][ T7247] netlink: 'syz.2.319': attribute type 6 has an invalid length. [ 130.339403][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.324'. [ 130.396258][ T7272] netlink: 'syz.3.324': attribute type 1 has an invalid length. [ 130.968219][ T7297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.330'. [ 130.995060][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.330'. [ 131.786774][ T7321] bridge5: port 1(macvlan2) entered blocking state [ 131.795523][ T7321] bridge5: port 1(macvlan2) entered disabled state [ 131.802732][ T7321] macvlan2: entered allmulticast mode [ 131.825577][ T7321] macvlan2: entered promiscuous mode [ 132.371995][ T7336] team_slave_0: entered promiscuous mode [ 132.377793][ T7336] team_slave_1: entered promiscuous mode [ 132.391373][ T7336] vlan2: entered promiscuous mode [ 132.410323][ T7336] team0: entered promiscuous mode [ 132.691597][ T7352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.341'. [ 132.768490][ T7356] netlink: 'syz.4.343': attribute type 1 has an invalid length. [ 132.818442][ T7356] netlink: 224 bytes leftover after parsing attributes in process `syz.4.343'. [ 132.930757][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.345'. [ 133.047455][ T7366] netlink: 52 bytes leftover after parsing attributes in process `syz.0.346'. [ 133.674152][ T7396] vlan2: entered promiscuous mode [ 134.428179][ T7430] openvswitch: netlink: Actions may not be safe on all matching packets [ 134.492355][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 134.544792][ T7437] bond1: option ad_user_port_key: invalid value (65535) [ 134.590434][ T7437] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 134.659942][ T7444] IPv6: addrconf: prefix option has invalid lifetime [ 134.706834][ T7437] bond1 (unregistering): Released all slaves [ 134.844533][ T7441] veth0_virt_wifi: renamed from veth1_vlan [ 134.880858][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 135.363634][ T7469] netlink: 'syz.2.378': attribute type 10 has an invalid length. [ 135.433085][ T7475] netlink: 'syz.0.380': attribute type 9 has an invalid length. [ 135.460964][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'. [ 135.473652][ T7469] batman_adv: batadv0: Adding interface: netdevsim0 [ 135.501766][ T7469] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.531307][ T7469] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 135.998782][ T7499] netlink: 'syz.0.382': attribute type 21 has an invalid length. [ 136.090802][ T7499] netlink: 156 bytes leftover after parsing attributes in process `syz.0.382'. [ 136.420628][ T7514] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 136.765015][ T7527] IPv6: addrconf: prefix option has invalid lifetime [ 136.870979][ T5528] veth0_virt_wifi: left promiscuous mode [ 137.028349][ T7536] netlink: 'syz.3.396': attribute type 14 has an invalid length. [ 137.050610][ T7544] netlink: 'syz.1.398': attribute type 5 has an invalid length. [ 137.386439][ T7559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.403'. [ 137.952379][ T7579] IPv6: addrconf: prefix option has invalid lifetime [ 138.167395][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.220707][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.409'. [ 138.251503][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.409'. [ 138.710745][ T7597] netlink: 16 bytes leftover after parsing attributes in process `syz.4.412'. [ 139.404452][ T7592] netlink: 'syz.2.410': attribute type 6 has an invalid length. [ 139.718198][ T7641] IPv6: addrconf: prefix option has invalid lifetime [ 139.941682][ T7651] vlan2: entered promiscuous mode [ 140.580518][ T7669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.427'. [ 140.625632][ T7672] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 140.648085][ T5930] IPVS: starting estimator thread 0... [ 140.755125][ T7676] IPVS: using max 25 ests per chain, 60000 per kthread [ 140.770633][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'. [ 140.800583][ T7682] netlink: 'syz.0.430': attribute type 1 has an invalid length. [ 140.814613][ T7682] netlink: 'syz.0.430': attribute type 2 has an invalid length. [ 140.825893][ T7682] netlink: 80 bytes leftover after parsing attributes in process `syz.0.430'. [ 141.329897][ T7693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.364309][ T7704] macvlan2: entered promiscuous mode [ 141.369668][ T7704] macvlan2: entered allmulticast mode [ 141.383625][ T7704] veth0: entered promiscuous mode [ 141.393388][ T7704] veth0: entered allmulticast mode [ 141.425906][ T7704] bond2: (slave macvlan2): making interface the new active one [ 141.456620][ T7704] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 141.507944][ T7696] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 141.519075][ T7696] macsec1: entered promiscuous mode [ 141.529784][ T7696] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 141.582006][ T7706] batadv_slave_0: entered promiscuous mode [ 141.675269][ T7705] batadv_slave_0: left promiscuous mode [ 141.885161][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.440'. [ 141.931546][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 141.952673][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 142.131685][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 142.194267][ T7727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.446'. [ 142.228292][ T7729] netlink: 'syz.4.447': attribute type 13 has an invalid length. [ 142.242231][ T7729] netlink: 'syz.4.447': attribute type 17 has an invalid length. [ 142.328535][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.444'. [ 142.470808][ T7739] netlink: 92 bytes leftover after parsing attributes in process `syz.1.450'. [ 142.820555][ T7748] vlan2: entered promiscuous mode [ 143.010588][ T7755] netlink: 'syz.4.453': attribute type 4 has an invalid length. [ 143.186324][ T7759] netlink: 'syz.0.455': attribute type 1 has an invalid length. [ 143.370977][ T7765] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 143.384266][ T7764] !: renamed from dummy0 (while UP) [ 144.179410][ T7799] ip6gre1: entered allmulticast mode [ 144.815696][ T7814] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 3, id = 0 [ 145.252671][ T7823] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 145.726688][ T7829] bridge0: port 3(team0) entered disabled state [ 145.734773][ T7829] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.742798][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.764751][ T7844] IPv6: addrconf: prefix option has invalid lifetime [ 145.952308][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.969664][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.239552][ T7854] __nla_validate_parse: 6 callbacks suppressed [ 146.239571][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 146.255050][ T7829] bond1: left promiscuous mode [ 146.314147][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.330118][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.656078][ T38] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.688165][ T38] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.901673][ T7877] netlink: 'syz.1.486': attribute type 3 has an invalid length. [ 146.943958][ T7877] netlink: 'syz.1.486': attribute type 3 has an invalid length. [ 147.074063][ T7892] IPv6: addrconf: prefix option has invalid lifetime [ 147.206856][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 147.216051][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.491'. [ 147.227227][ T7895] netlink: 'syz.3.491': attribute type 1 has an invalid length. [ 147.257543][ T7895] netlink: 10 bytes leftover after parsing attributes in process `syz.3.491'. [ 147.410034][ T7907] netlink: 'syz.4.495': attribute type 10 has an invalid length. [ 147.499632][ T7907] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 148.156314][ T7921] bridge0: entered promiscuous mode [ 148.173524][ T7921] bridge0: port 3(macvlan3) entered blocking state [ 148.180808][ T7921] bridge0: port 3(macvlan3) entered disabled state [ 148.187936][ T7921] macvlan3: entered allmulticast mode [ 148.194088][ T7921] bridge0: entered allmulticast mode [ 148.205699][ T7921] macvlan3: left allmulticast mode [ 148.212193][ T7921] bridge0: left allmulticast mode [ 148.250375][ T7921] bridge0: left promiscuous mode [ 148.451423][ T7933] netlink: 220 bytes leftover after parsing attributes in process `syz.1.506'. [ 148.624897][ T7941] vlan2: entered promiscuous mode [ 149.132426][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.519'. [ 149.142880][ T7964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.518'. [ 149.217780][ T7967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.520'. [ 149.490549][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.520'. [ 149.536971][ T7979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.522'. [ 151.247110][ T8041] __nla_validate_parse: 6 callbacks suppressed [ 151.247129][ T8041] netlink: 220 bytes leftover after parsing attributes in process `syz.0.545'. [ 151.528547][ T8058] netlink: 28 bytes leftover after parsing attributes in process `syz.4.549'. [ 151.560222][ T8058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.549'. [ 151.664167][ T8065] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 151.890598][ T8065] netlink: 'syz.1.553': attribute type 1 has an invalid length. [ 152.365714][ T8090] netlink: 220 bytes leftover after parsing attributes in process `syz.3.558'. [ 153.337044][ T8133] netlink: 220 bytes leftover after parsing attributes in process `syz.0.569'. [ 153.432108][ T8144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.570'. [ 153.558293][ T8151] netlink: 104 bytes leftover after parsing attributes in process `syz.2.572'. [ 153.645691][ T8157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.573'. [ 153.672642][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 153.957018][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'. [ 154.129966][ T8175] IPv6: addrconf: prefix option has invalid lifetime [ 154.331857][ T8186] netlink: 'syz.3.582': attribute type 16 has an invalid length. [ 154.345914][ T8186] netlink: 'syz.3.582': attribute type 17 has an invalid length. [ 154.393761][ T8186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.604021][ T8195] netlink: 'syz.1.584': attribute type 1 has an invalid length. [ 154.694304][ T8195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.813699][ T8201] veth3: entered promiscuous mode [ 154.828633][ T8201] bond2: (slave veth3): Enslaving as an active interface with a down link [ 155.041002][ T8221] IPv6: addrconf: prefix option has invalid lifetime [ 155.109771][ T8219] netlink: 'syz.2.590': attribute type 16 has an invalid length. [ 155.262109][ T8225] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 155.277696][ T8227] team0: left allmulticast mode [ 155.282879][ T8227] team_slave_0: left allmulticast mode [ 155.288419][ T8227] team_slave_1: left allmulticast mode [ 155.299749][ T8227] bridge0: port 3(team0) entered disabled state [ 155.339291][ T8227] bridge_slave_1: left allmulticast mode [ 155.359708][ T8227] bridge_slave_1: left promiscuous mode [ 155.365984][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.392793][ T8227] bridge_slave_0: left allmulticast mode [ 155.398556][ T8227] bridge_slave_0: left promiscuous mode [ 155.404682][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.519581][ T8234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.773131][ T8245] vlan2: entered promiscuous mode [ 156.142664][ T8256] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 156.247508][ T8262] IPv6: addrconf: prefix option has invalid lifetime [ 156.491754][ T8276] __nla_validate_parse: 7 callbacks suppressed [ 156.491773][ T8276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.609'. [ 156.527885][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.611'. [ 156.556848][ T8273] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 156.573178][ T8282] sctp: [Deprecated]: syz.4.610 (pid 8282) Use of int in max_burst socket option. [ 156.573178][ T8282] Use struct sctp_assoc_value instead [ 156.606254][ T8283] netlink: 32 bytes leftover after parsing attributes in process `syz.2.609'. [ 156.623152][ T8285] netlink: 34 bytes leftover after parsing attributes in process `syz.2.609'. [ 156.897294][ T8297] FAULT_INJECTION: forcing a failure. [ 156.897294][ T8297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.929835][ T8297] CPU: 0 UID: 0 PID: 8297 Comm: syz.4.616 Not tainted syzkaller #0 PREEMPT(full) [ 156.929865][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.929879][ T8297] Call Trace: [ 156.929888][ T8297] [ 156.929897][ T8297] dump_stack_lvl+0x189/0x250 [ 156.929927][ T8297] ? __pfx____ratelimit+0x10/0x10 [ 156.929953][ T8297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.929976][ T8297] ? __pfx__printk+0x10/0x10 [ 156.930006][ T8297] ? __might_fault+0xb0/0x130 [ 156.930048][ T8297] should_fail_ex+0x414/0x560 [ 156.930085][ T8297] _copy_from_user+0x2d/0xb0 [ 156.930117][ T8297] __sys_sendto+0x25c/0x520 [ 156.930146][ T8297] ? __pfx___sys_sendto+0x10/0x10 [ 156.930167][ T8297] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 156.930225][ T8297] ? __fget_files+0x3a0/0x420 [ 156.930267][ T8297] ? ksys_write+0x22a/0x250 [ 156.930296][ T8297] ? __pfx_ksys_write+0x10/0x10 [ 156.930328][ T8297] __x64_sys_sendto+0xde/0x100 [ 156.930358][ T8297] do_syscall_64+0xfa/0x3b0 [ 156.930381][ T8297] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.930403][ T8297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.930425][ T8297] ? clear_bhb_loop+0x60/0xb0 [ 156.930451][ T8297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.930471][ T8297] RIP: 0033:0x7fa600b8eec9 [ 156.930490][ T8297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.930508][ T8297] RSP: 002b:00007fa601afc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 156.930529][ T8297] RAX: ffffffffffffffda RBX: 00007fa600de5fa0 RCX: 00007fa600b8eec9 [ 156.930545][ T8297] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000005 [ 156.930558][ T8297] RBP: 00007fa601afc090 R08: 0000200000000540 R09: 0000000000000014 [ 156.930572][ T8297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.930583][ T8297] R13: 00007fa600de6038 R14: 00007fa600de5fa0 R15: 00007ffc50602e28 [ 156.930617][ T8297] [ 157.213375][ T8302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.617'. [ 157.225971][ T8302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'. [ 157.401426][ T8311] : renamed from bond_slave_0 [ 157.904389][ T8322] netlink: 60 bytes leftover after parsing attributes in process `syz.2.622'. [ 158.030333][ T8324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.625'. [ 158.180969][ T8324] nbd: socks must be embedded in a SOCK_ITEM attr [ 158.470293][ T8339] dvmrp8: entered allmulticast mode [ 158.585205][ T8340] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 158.661564][ T8343] bridge0: entered promiscuous mode [ 158.677300][ T8343] macsec1: entered promiscuous mode [ 158.689747][ T8343] bridge0: port 3(macsec1) entered blocking state [ 158.710494][ T8343] bridge0: port 3(macsec1) entered disabled state [ 158.727871][ T8343] macsec1: entered allmulticast mode [ 158.743701][ T8343] bridge0: entered allmulticast mode [ 158.771502][ T8343] macsec1: left allmulticast mode [ 158.776622][ T8343] bridge0: left allmulticast mode [ 158.784543][ T8343] bridge0: left promiscuous mode [ 158.964197][ T8354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.633'. [ 159.061278][ T8362] netlink: 32 bytes leftover after parsing attributes in process `syz.4.633'. [ 160.622759][ T8410] nbd: must specify a size in bytes for the device [ 160.701069][ T8410] bond3: entered promiscuous mode [ 160.707231][ T8410] bond3: entered allmulticast mode [ 160.733395][ T8410] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.825061][ T8421] lo speed is unknown, defaulting to 1000 [ 160.863909][ T8421] lo speed is unknown, defaulting to 1000 [ 160.875634][ T8421] lo speed is unknown, defaulting to 1000 [ 160.895547][ T8421] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 160.949966][ T8430] IPv6: addrconf: prefix option has invalid lifetime [ 160.966718][ T8421] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 161.044330][ T8421] lo speed is unknown, defaulting to 1000 [ 161.052575][ T8421] lo speed is unknown, defaulting to 1000 [ 161.062223][ T8421] lo speed is unknown, defaulting to 1000 [ 161.070303][ T8421] lo speed is unknown, defaulting to 1000 [ 161.078339][ T8421] lo speed is unknown, defaulting to 1000 [ 161.289015][ T8437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.298959][ T8437] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 161.373994][ T8437] bond0: (slave gre0): Error -95 calling set_mac_address [ 161.406059][ T8445] batadv_slave_0: entered promiscuous mode [ 161.424073][ T8452] tipc: Enabled bearer , priority 0 [ 161.447468][ T8448] syzkaller0: entered promiscuous mode [ 161.478030][ T8448] syzkaller0: entered allmulticast mode [ 161.503049][ T8445] batadv_slave_0: left promiscuous mode [ 161.519308][ T8448] tipc: Resetting bearer [ 161.568213][ T8444] tipc: Resetting bearer [ 161.606016][ T8444] tipc: Disabling bearer [ 161.612052][ T8468] __nla_validate_parse: 8 callbacks suppressed [ 161.612068][ T8468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.665'. [ 161.629027][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.665'. [ 161.649058][ T8474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.664'. [ 161.661125][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.664'. [ 161.671307][ T8468] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 161.980262][ T8491] IPv6: addrconf: prefix option has invalid lifetime [ 162.341484][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.673'. [ 162.479584][ T8512] pim6reg1: entered allmulticast mode [ 162.669003][ T8522] lo speed is unknown, defaulting to 1000 [ 162.906822][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.677'. [ 163.711631][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.686'. [ 163.765397][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.686'. [ 163.816949][ T8565] netlink: 112 bytes leftover after parsing attributes in process `syz.3.683'. [ 163.925915][ T8550] lo speed is unknown, defaulting to 1000 [ 164.121982][ T8554] lo speed is unknown, defaulting to 1000 [ 164.315231][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'. [ 164.492958][ T8590] syz_tun: entered promiscuous mode [ 164.498513][ T8590] macvtap1: entered promiscuous mode [ 164.600432][ T8590] macvtap1: entered allmulticast mode [ 164.608349][ T8590] syz_tun: entered allmulticast mode [ 164.656023][ T24] IPVS: starting estimator thread 0... [ 164.751885][ T8600] IPVS: using max 29 ests per chain, 69600 per kthread [ 165.222649][ T8615] lo speed is unknown, defaulting to 1000 [ 165.629824][ T8628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.647627][ T8628] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 165.841422][ T8653] netlink: 'syz.1.703': attribute type 14 has an invalid length. [ 165.918227][ T8660] FAULT_INJECTION: forcing a failure. [ 165.918227][ T8660] name failslab, interval 1, probability 0, space 0, times 0 [ 165.934726][ T8660] CPU: 0 UID: 0 PID: 8660 Comm: syz.1.705 Not tainted syzkaller #0 PREEMPT(full) [ 165.934752][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 165.934764][ T8660] Call Trace: [ 165.934771][ T8660] [ 165.934779][ T8660] dump_stack_lvl+0x189/0x250 [ 165.934807][ T8660] ? __pfx____ratelimit+0x10/0x10 [ 165.934829][ T8660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.934849][ T8660] ? __pfx__printk+0x10/0x10 [ 165.934880][ T8660] ? __pfx___might_resched+0x10/0x10 [ 165.934908][ T8660] ? fs_reclaim_acquire+0x7d/0x100 [ 165.934941][ T8660] should_fail_ex+0x414/0x560 [ 165.934973][ T8660] should_failslab+0xa8/0x100 [ 165.935002][ T8660] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 165.935026][ T8660] ? __alloc_skb+0x112/0x2d0 [ 165.935052][ T8660] __alloc_skb+0x112/0x2d0 [ 165.935078][ T8660] netlink_ack+0x146/0xa50 [ 165.935098][ T8660] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 165.935138][ T8660] netlink_rcv_skb+0x28c/0x470 [ 165.935158][ T8660] ? __lock_acquire+0xab9/0xd20 [ 165.935186][ T8660] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 165.935210][ T8660] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 165.935244][ T8660] ? netlink_deliver_tap+0x2e/0x1b0 [ 165.935285][ T8660] netlink_unicast+0x82c/0x9e0 [ 165.935313][ T8660] ? __pfx_netlink_unicast+0x10/0x10 [ 165.935335][ T8660] ? netlink_sendmsg+0x642/0xb30 [ 165.935357][ T8660] ? skb_put+0x11b/0x210 [ 165.935383][ T8660] netlink_sendmsg+0x805/0xb30 [ 165.935417][ T8660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.935444][ T8660] ? aa_sock_msg_perm+0xf1/0x1d0 [ 165.935477][ T8660] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 165.935497][ T8660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.935521][ T8660] __sock_sendmsg+0x219/0x270 [ 165.935556][ T8660] ____sys_sendmsg+0x505/0x830 [ 165.935588][ T8660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.935624][ T8660] ? import_iovec+0x74/0xa0 [ 165.935653][ T8660] ___sys_sendmsg+0x21f/0x2a0 [ 165.935681][ T8660] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.935744][ T8660] ? __fget_files+0x2a/0x420 [ 165.935771][ T8660] ? __fget_files+0x3a0/0x420 [ 165.935810][ T8660] __x64_sys_sendmsg+0x19b/0x260 [ 165.935839][ T8660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 165.935875][ T8660] ? __pfx_ksys_write+0x10/0x10 [ 165.935897][ T8660] ? rcu_is_watching+0x15/0xb0 [ 165.935921][ T8660] ? do_syscall_64+0xbe/0x3b0 [ 165.935949][ T8660] do_syscall_64+0xfa/0x3b0 [ 165.935970][ T8660] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.935991][ T8660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.936011][ T8660] ? clear_bhb_loop+0x60/0xb0 [ 165.936053][ T8660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.936073][ T8660] RIP: 0033:0x7fee6d38eec9 [ 165.936092][ T8660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.936109][ T8660] RSP: 002b:00007fee6e1cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.936132][ T8660] RAX: ffffffffffffffda RBX: 00007fee6d5e5fa0 RCX: 00007fee6d38eec9 [ 165.936159][ T8660] RDX: 0000000000008050 RSI: 00002000000006c0 RDI: 0000000000000008 [ 165.936171][ T8660] RBP: 00007fee6e1cc090 R08: 0000000000000000 R09: 0000000000000000 [ 165.936183][ T8660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.936194][ T8660] R13: 00007fee6d5e6038 R14: 00007fee6d5e5fa0 R15: 00007ffce86b0fb8 [ 165.936226][ T8660] [ 166.677809][ T8672] __nla_validate_parse: 9 callbacks suppressed [ 166.677829][ T8672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.710'. [ 167.071468][ T8687] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 167.133539][ T8691] netlink: 56 bytes leftover after parsing attributes in process `syz.3.714'. [ 167.158770][ T8691] netlink: 19 bytes leftover after parsing attributes in process `syz.3.714'. [ 167.182178][ T8691] netlink: 19 bytes leftover after parsing attributes in process `syz.3.714'. [ 167.292718][ T8700] wg1: entered promiscuous mode [ 167.297744][ T8700] wg1: entered allmulticast mode [ 167.387525][ T8703] FAULT_INJECTION: forcing a failure. [ 167.387525][ T8703] name failslab, interval 1, probability 0, space 0, times 0 [ 167.400540][ T8703] CPU: 0 UID: 0 PID: 8703 Comm: syz.0.718 Not tainted syzkaller #0 PREEMPT(full) [ 167.400566][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 167.400579][ T8703] Call Trace: [ 167.400587][ T8703] [ 167.400596][ T8703] dump_stack_lvl+0x189/0x250 [ 167.400625][ T8703] ? __pfx____ratelimit+0x10/0x10 [ 167.400649][ T8703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.400673][ T8703] ? __pfx__printk+0x10/0x10 [ 167.400697][ T8703] ? __local_bh_enable_ip+0x12d/0x1c0 [ 167.400746][ T8703] should_fail_ex+0x414/0x560 [ 167.400782][ T8703] should_failslab+0xa8/0x100 [ 167.400814][ T8703] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 167.400842][ T8703] ? __alloc_skb+0x112/0x2d0 [ 167.400872][ T8703] __alloc_skb+0x112/0x2d0 [ 167.400896][ T8703] ? __neigh_notify+0x29/0x310 [ 167.400922][ T8703] __neigh_notify+0x15c/0x310 [ 167.400952][ T8703] neigh_cleanup_and_release+0xb0/0x290 [ 167.400975][ T8703] __neigh_ifdown+0x1e8/0x8b0 [ 167.401006][ T8703] ? __pfx___neigh_ifdown+0x10/0x10 [ 167.401030][ T8703] ? in6_dev_get+0x1a/0x290 [ 167.401059][ T8703] ? in6_dev_get+0x1a/0x290 [ 167.401086][ T8703] ? in6_dev_get+0x1a/0x290 [ 167.401118][ T8703] neigh_carrier_down+0x22/0x30 [ 167.401137][ T8703] ndisc_netdev_event+0x3f2/0x4d0 [ 167.401190][ T8703] notifier_call_chain+0x1b3/0x3e0 [ 167.401218][ T8703] netif_state_change+0x284/0x3a0 [ 167.401241][ T8703] ? __pfx_netif_state_change+0x10/0x10 [ 167.401267][ T8703] ? netif_change_flags+0xe8/0x1a0 [ 167.401297][ T8703] do_setlink+0x35de/0x41c0 [ 167.401323][ T8703] ? __kernel_text_address+0xd/0x40 [ 167.401351][ T8703] ? arch_stack_walk+0xfc/0x150 [ 167.401378][ T8703] ? __pfx_do_setlink+0x10/0x10 [ 167.401416][ T8703] ? __lock_acquire+0xab9/0xd20 [ 167.401451][ T8703] ? __mutex_trylock_common+0x153/0x260 [ 167.401475][ T8703] ? __pfx___mutex_trylock_common+0x10/0x10 [ 167.401500][ T8703] ? rcu_is_watching+0x15/0xb0 [ 167.401518][ T8703] ? trace_contention_end+0x39/0x120 [ 167.401537][ T8703] ? __mutex_lock+0x335/0x1350 [ 167.401570][ T8703] ? rtnl_newlink+0x8e9/0x1c80 [ 167.401588][ T8703] ? __pfx___mutex_lock+0x10/0x10 [ 167.401609][ T8703] ? full_name_hash+0xb0/0xe0 [ 167.401625][ T8703] ? netdev_name_node_lookup+0xdf/0x120 [ 167.401649][ T8703] rtnl_newlink+0x1619/0x1c80 [ 167.401674][ T8703] ? __pfx_rtnl_newlink+0x10/0x10 [ 167.401726][ T8703] ? preempt_schedule+0xae/0xc0 [ 167.401739][ T8703] ? __dev_queue_xmit+0x27b/0x3b50 [ 167.401761][ T8703] ? preempt_schedule_common+0x83/0xd0 [ 167.401777][ T8703] ? preempt_schedule+0xae/0xc0 [ 167.401791][ T8703] ? __pfx_preempt_schedule+0x10/0x10 [ 167.401808][ T8703] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 167.401834][ T8703] ? preempt_schedule_thunk+0x16/0x30 [ 167.401860][ T8703] ? __local_bh_enable_ip+0x13e/0x1c0 [ 167.401884][ T8703] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 167.401910][ T8703] ? __dev_queue_xmit+0x27b/0x3b50 [ 167.401931][ T8703] ? __dev_queue_xmit+0x27b/0x3b50 [ 167.401950][ T8703] ? __dev_queue_xmit+0x27b/0x3b50 [ 167.401984][ T8703] ? __dev_queue_xmit+0x1d79/0x3b50 [ 167.402009][ T8703] ? __lock_acquire+0xab9/0xd20 [ 167.402046][ T8703] ? __pfx_rtnl_newlink+0x10/0x10 [ 167.402061][ T8703] rtnetlink_rcv_msg+0x7cc/0xb70 [ 167.402079][ T8703] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 167.402094][ T8703] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.402114][ T8703] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 167.402140][ T8703] netlink_rcv_skb+0x208/0x470 [ 167.402154][ T8703] ? rcu_is_watching+0x15/0xb0 [ 167.402167][ T8703] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.402192][ T8703] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.402217][ T8703] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.402239][ T8703] netlink_unicast+0x82c/0x9e0 [ 167.402259][ T8703] ? __pfx_netlink_unicast+0x10/0x10 [ 167.402275][ T8703] ? netlink_sendmsg+0x642/0xb30 [ 167.402290][ T8703] ? skb_put+0x11b/0x210 [ 167.402309][ T8703] netlink_sendmsg+0x805/0xb30 [ 167.402333][ T8703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.402352][ T8703] ? aa_sock_msg_perm+0xf1/0x1d0 [ 167.402376][ T8703] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.402390][ T8703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.402408][ T8703] __sock_sendmsg+0x219/0x270 [ 167.402452][ T8703] ____sys_sendmsg+0x505/0x830 [ 167.402477][ T8703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.402504][ T8703] ? import_iovec+0x74/0xa0 [ 167.402526][ T8703] ___sys_sendmsg+0x21f/0x2a0 [ 167.402547][ T8703] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.402596][ T8703] ? __fget_files+0x2a/0x420 [ 167.402618][ T8703] ? __fget_files+0x3a0/0x420 [ 167.402648][ T8703] __x64_sys_sendmsg+0x19b/0x260 [ 167.402670][ T8703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.402698][ T8703] ? __pfx_ksys_write+0x10/0x10 [ 167.402715][ T8703] ? rcu_is_watching+0x15/0xb0 [ 167.402732][ T8703] ? do_syscall_64+0xbe/0x3b0 [ 167.402753][ T8703] do_syscall_64+0xfa/0x3b0 [ 167.402769][ T8703] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.402785][ T8703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.402800][ T8703] ? clear_bhb_loop+0x60/0xb0 [ 167.402818][ T8703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.402832][ T8703] RIP: 0033:0x7fca8398eec9 [ 167.402846][ T8703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.402858][ T8703] RSP: 002b:00007fca847cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.402874][ T8703] RAX: ffffffffffffffda RBX: 00007fca83be5fa0 RCX: 00007fca8398eec9 [ 167.402885][ T8703] RDX: 0000000000008050 RSI: 00002000000006c0 RDI: 0000000000000008 [ 167.402894][ T8703] RBP: 00007fca847cc090 R08: 0000000000000000 R09: 0000000000000000 [ 167.402903][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.402911][ T8703] R13: 00007fca83be6038 R14: 00007fca83be5fa0 R15: 00007fffc5dcd158 [ 167.402935][ T8703] [ 167.980943][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'. [ 168.100943][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'. [ 168.270341][ T8713] netlink: 64 bytes leftover after parsing attributes in process `syz.2.722'. [ 168.297024][ T8717] netlink: 64 bytes leftover after parsing attributes in process `syz.2.722'. [ 168.311923][ T8715] netlink: 28 bytes leftover after parsing attributes in process `syz.0.723'. [ 168.548657][ T8726] lo speed is unknown, defaulting to 1000 [ 168.590125][ T8733] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 168.621793][ T24] lo speed is unknown, defaulting to 1000 [ 168.660931][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.732'. [ 168.736440][ T8734] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 168.874758][ T8745] Bluetooth: MGMT ver 1.23 [ 169.176354][ T8756] bridge4: port 1(macvlan3) entered blocking state [ 169.193175][ T8756] bridge4: port 1(macvlan3) entered disabled state [ 169.215088][ T8756] macvlan3: entered allmulticast mode [ 169.247899][ T8756] macvlan3: entered promiscuous mode [ 169.829716][ T8784] netlink: 'syz.3.749': attribute type 12 has an invalid length. [ 170.090483][ T8787] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.348147][ T8795] lo speed is unknown, defaulting to 1000 [ 170.447162][ T8799] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 170.560508][ T8787] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.736096][ T8803] netlink: 'syz.4.751': attribute type 1 has an invalid length. [ 170.744469][ T8803] netlink: 'syz.4.751': attribute type 1 has an invalid length. [ 170.859317][ T8787] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.951576][ T5866] Bluetooth: hci2: command 0x0401 tx timeout [ 170.957737][ T5867] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 171.093139][ T8787] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.266505][ T38] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.274944][ T38] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.308227][ T38] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.335690][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.803438][ T8841] bridge0: port 1(macvlan2) entered blocking state [ 171.812162][ T8841] bridge0: port 1(macvlan2) entered disabled state [ 171.818922][ T8841] macvlan2: entered allmulticast mode [ 171.828662][ T8841] macvlan2: entered promiscuous mode [ 171.854433][ T8846] __nla_validate_parse: 10 callbacks suppressed [ 171.854452][ T8846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.764'. [ 171.898218][ T8846] 8021q: VLANs not supported on nlmon0 [ 171.929955][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.766'. [ 172.203015][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 172.361800][ T8871] syzkaller1: entered promiscuous mode [ 172.400310][ T8871] syzkaller1: entered allmulticast mode [ 172.506948][ T8871] lo speed is unknown, defaulting to 1000 [ 172.533859][ T8879] vxcan1: entered allmulticast mode [ 172.772828][ T8886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.781'. [ 173.520388][ T8898] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 173.529151][ T8889] netlink: 32 bytes leftover after parsing attributes in process `syz.1.781'. [ 174.548749][ T8918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.789'. [ 174.850419][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.794'. [ 174.867527][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.794'. [ 175.228405][ T8942] lo speed is unknown, defaulting to 1000 [ 175.245903][ T8944] lo speed is unknown, defaulting to 1000 [ 175.734649][ T8958] netlink: 'syz.3.804': attribute type 10 has an invalid length. [ 175.742621][ T8958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.804'. [ 175.761779][ T8960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.805'. [ 175.855470][ T8958] geneve0: entered promiscuous mode [ 175.876384][ T8958] team0: Port device geneve0 added [ 175.936003][ T8960] bond1: entered promiscuous mode [ 175.946302][ T8960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.095665][ T8960] bond1 (unregistering): Released all slaves [ 176.122127][ T8961] netlink: 'syz.3.804': attribute type 6 has an invalid length. [ 176.146214][ T8974] macsec0: entered allmulticast mode [ 176.152444][ T8977] veth1_macvtap: entered allmulticast mode [ 176.158476][ T8977] macsec0: left allmulticast mode [ 176.165136][ T8977] veth1_macvtap: left allmulticast mode [ 176.368623][ T8985] netlink: 'syz.3.810': attribute type 1 has an invalid length. [ 177.003410][ T9007] __nla_validate_parse: 6 callbacks suppressed [ 177.003431][ T9007] netlink: 27 bytes leftover after parsing attributes in process `syz.1.815'. [ 177.155934][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 177.204924][ T9012] delete_channel: no stack [ 177.209948][ T9012] delete_channel: no stack [ 177.315711][ T9024] FAULT_INJECTION: forcing a failure. [ 177.315711][ T9024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.332227][ T9024] CPU: 0 UID: 0 PID: 9024 Comm: syz.4.820 Not tainted syzkaller #0 PREEMPT(full) [ 177.332254][ T9024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.332265][ T9024] Call Trace: [ 177.332273][ T9024] [ 177.332281][ T9024] dump_stack_lvl+0x189/0x250 [ 177.332309][ T9024] ? __pfx____ratelimit+0x10/0x10 [ 177.332331][ T9024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.332373][ T9024] ? __pfx__printk+0x10/0x10 [ 177.332400][ T9024] ? __might_fault+0xb0/0x130 [ 177.332438][ T9024] should_fail_ex+0x414/0x560 [ 177.332472][ T9024] _copy_from_user+0x2d/0xb0 [ 177.332498][ T9024] __sys_sendto+0x25c/0x520 [ 177.332525][ T9024] ? __pfx___sys_sendto+0x10/0x10 [ 177.332545][ T9024] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 177.332583][ T9024] ? __fget_files+0x3a0/0x420 [ 177.332622][ T9024] ? ksys_write+0x22a/0x250 [ 177.332649][ T9024] ? __pfx_ksys_write+0x10/0x10 [ 177.332671][ T9024] ? rcu_is_watching+0x15/0xb0 [ 177.332696][ T9024] __x64_sys_sendto+0xde/0x100 [ 177.332724][ T9024] do_syscall_64+0xfa/0x3b0 [ 177.332745][ T9024] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.332767][ T9024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.332786][ T9024] ? clear_bhb_loop+0x60/0xb0 [ 177.332811][ T9024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.332830][ T9024] RIP: 0033:0x7fa600b8eec9 [ 177.332847][ T9024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.332863][ T9024] RSP: 002b:00007fa601afc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 177.332901][ T9024] RAX: ffffffffffffffda RBX: 00007fa600de5fa0 RCX: 00007fa600b8eec9 [ 177.332916][ T9024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 177.332927][ T9024] RBP: 00007fa601afc090 R08: 00002000000001c0 R09: 000000000000001c [ 177.332941][ T9024] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 177.332953][ T9024] R13: 00007fa600de6038 R14: 00007fa600de5fa0 R15: 00007ffc50602e28 [ 177.332988][ T9024] [ 177.583899][ T9028] netlink: 32 bytes leftover after parsing attributes in process `syz.3.822'. [ 177.768156][ T9039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.824'. [ 177.800882][ T9040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.826'. [ 177.802840][ T9042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.827'. [ 177.861840][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.826'. [ 177.879797][ T9042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.827'. [ 177.891589][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 177.926364][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.827'. [ 177.996736][ T9033] bridge_slave_1: left allmulticast mode [ 178.016905][ T9033] bridge_slave_1: left promiscuous mode [ 178.031190][ T9033] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.047654][ T9033] bridge_slave_0: left allmulticast mode [ 178.071448][ T9033] bridge_slave_0: left promiscuous mode [ 178.086507][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.318257][ T9061] syzkaller1: entered promiscuous mode [ 178.326930][ T9061] syzkaller1: entered allmulticast mode [ 178.453139][ T9064] netlink: 'syz.4.833': attribute type 13 has an invalid length. [ 178.486025][ T9064] netlink: 'syz.4.833': attribute type 17 has an invalid length. [ 178.568468][ T9064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.758369][ T9070] FAULT_INJECTION: forcing a failure. [ 178.758369][ T9070] name failslab, interval 1, probability 0, space 0, times 0 [ 178.795786][ T9070] CPU: 0 UID: 0 PID: 9070 Comm: syz.3.834 Not tainted syzkaller #0 PREEMPT(full) [ 178.795815][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.795827][ T9070] Call Trace: [ 178.795836][ T9070] [ 178.795845][ T9070] dump_stack_lvl+0x189/0x250 [ 178.795874][ T9070] ? __pfx____ratelimit+0x10/0x10 [ 178.795898][ T9070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.795922][ T9070] ? __pfx__printk+0x10/0x10 [ 178.795956][ T9070] ? __pfx___might_resched+0x10/0x10 [ 178.795987][ T9070] ? fs_reclaim_acquire+0x7d/0x100 [ 178.796024][ T9070] should_fail_ex+0x414/0x560 [ 178.796060][ T9070] should_failslab+0xa8/0x100 [ 178.796092][ T9070] __kmalloc_cache_noprof+0x70/0x3d0 [ 178.796119][ T9070] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 178.796154][ T9070] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 178.796184][ T9070] tcp_sendmsg_locked+0x4cc9/0x5540 [ 178.796210][ T9070] ? tcp_sendmsg_locked+0x371/0x5540 [ 178.796265][ T9070] ? __lock_acquire+0xab9/0xd20 [ 178.796309][ T9070] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 178.796327][ T9070] ? __local_bh_enable_ip+0x12d/0x1c0 [ 178.796364][ T9070] ? __local_bh_enable_ip+0x12d/0x1c0 [ 178.796411][ T9070] tcp_sendmsg+0x2f/0x50 [ 178.796440][ T9070] __sock_sendmsg+0xe5/0x270 [ 178.796477][ T9070] __sys_sendto+0x3bd/0x520 [ 178.796506][ T9070] ? __pfx___sys_sendto+0x10/0x10 [ 178.796527][ T9070] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 178.796568][ T9070] ? __fget_files+0x3a0/0x420 [ 178.796610][ T9070] ? ksys_write+0x22a/0x250 [ 178.796640][ T9070] ? __pfx_ksys_write+0x10/0x10 [ 178.796664][ T9070] ? rcu_is_watching+0x15/0xb0 [ 178.796690][ T9070] __x64_sys_sendto+0xde/0x100 [ 178.796719][ T9070] do_syscall_64+0xfa/0x3b0 [ 178.796742][ T9070] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.796763][ T9070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.796788][ T9070] ? clear_bhb_loop+0x60/0xb0 [ 178.796814][ T9070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.796834][ T9070] RIP: 0033:0x7f860a78eec9 [ 178.796853][ T9070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.796871][ T9070] RSP: 002b:00007f860b5bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 178.796892][ T9070] RAX: ffffffffffffffda RBX: 00007f860a9e5fa0 RCX: 00007f860a78eec9 [ 178.796907][ T9070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 178.796919][ T9070] RBP: 00007f860b5bd090 R08: 00002000000001c0 R09: 000000000000001c [ 178.796933][ T9070] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 178.796945][ T9070] R13: 00007f860a9e6038 R14: 00007f860a9e5fa0 R15: 00007fff6f492508 [ 178.796980][ T9070] [ 179.448748][ T9097] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20002 [ 179.605289][ T9105] tipc: Enabling of bearer rejected, failed to enable media [ 179.929747][ T9129] sctp: [Deprecated]: syz.3.851 (pid 9129) Use of int in maxseg socket option. [ 179.929747][ T9129] Use struct sctp_assoc_value instead [ 179.969671][ T9127] bridge2: port 1(macvlan3) entered blocking state [ 180.000576][ T9127] bridge2: port 1(macvlan3) entered disabled state [ 180.007340][ T9127] macvlan3: entered allmulticast mode [ 180.022772][ T9127] macvlan3: entered promiscuous mode [ 180.058188][ T9131] lo speed is unknown, defaulting to 1000 [ 180.178968][ T9129] lo speed is unknown, defaulting to 1000 [ 180.735055][ T9162] openvswitch: netlink: Key 2 has unexpected len 72 expected 4 [ 180.849517][ T9166] gre1: entered promiscuous mode [ 180.854670][ T9166] gre1: entered allmulticast mode [ 181.034975][ T9173] bridge0: entered promiscuous mode [ 181.289901][ T9183] tipc: Enabling of bearer rejected, failed to enable media [ 181.373098][ T9188] sctp: [Deprecated]: syz.2.872 (pid 9188) Use of int in maxseg socket option. [ 181.373098][ T9188] Use struct sctp_assoc_value instead [ 181.661893][ T9167] delete_channel: no stack [ 181.802227][ T9208] ip6gretap0: entered promiscuous mode [ 181.814094][ T9208] macsec1: entered allmulticast mode [ 181.821085][ T9208] ip6gretap0: entered allmulticast mode [ 181.837400][ T9208] ip6gretap0: left allmulticast mode [ 181.850482][ T9208] ip6gretap0: left promiscuous mode [ 181.904740][ T9210] bridge0: entered promiscuous mode [ 181.915290][ T9210] bridge0: entered allmulticast mode [ 181.963757][ T9210] team0: Port device bridge0 added [ 182.126764][ T9216] __nla_validate_parse: 10 callbacks suppressed [ 182.126786][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'. [ 182.157641][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'. [ 182.374158][ T9234] netlink: 'syz.3.886': attribute type 1 has an invalid length. [ 182.386199][ T9229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.885'. [ 182.638257][ T9246] netlink: 52 bytes leftover after parsing attributes in process `syz.2.891'. [ 182.651501][ T9246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.891'. [ 182.976736][ T9269] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 182.993675][ T9269] bond1 (unregistering): Released all slaves [ 183.042562][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 183.232573][ T9284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.900'. [ 183.245690][ T9286] netlink: 20 bytes leftover after parsing attributes in process `syz.4.902'. [ 183.507844][ T9302] FAULT_INJECTION: forcing a failure. [ 183.507844][ T9302] name failslab, interval 1, probability 0, space 0, times 0 [ 183.523800][ T9302] CPU: 0 UID: 0 PID: 9302 Comm: syz.0.906 Not tainted syzkaller #0 PREEMPT(full) [ 183.523828][ T9302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.523840][ T9302] Call Trace: [ 183.523849][ T9302] [ 183.523857][ T9302] dump_stack_lvl+0x189/0x250 [ 183.523886][ T9302] ? __pfx____ratelimit+0x10/0x10 [ 183.523909][ T9302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.523933][ T9302] ? __pfx__printk+0x10/0x10 [ 183.523967][ T9302] ? __pfx___might_resched+0x10/0x10 [ 183.523996][ T9302] ? fs_reclaim_acquire+0x7d/0x100 [ 183.524033][ T9302] should_fail_ex+0x414/0x560 [ 183.524069][ T9302] should_failslab+0xa8/0x100 [ 183.524099][ T9302] __kmalloc_cache_noprof+0x70/0x3d0 [ 183.524127][ T9302] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 183.524159][ T9302] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 183.524196][ T9302] sctp_association_new+0x15d3/0x25f0 [ 183.524247][ T9302] sctp_connect_new_asoc+0x2c5/0x690 [ 183.524282][ T9302] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 183.524312][ T9302] ? __local_bh_enable_ip+0x12d/0x1c0 [ 183.524353][ T9302] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 183.524388][ T9302] ? security_sctp_bind_connect+0x7e/0x2e0 [ 183.524419][ T9302] sctp_sendmsg+0x155c/0x2810 [ 183.524463][ T9302] ? __pfx_sctp_sendmsg+0x10/0x10 [ 183.524497][ T9302] ? aa_sk_perm+0x81e/0x950 [ 183.524534][ T9302] ? __pfx_aa_sk_perm+0x10/0x10 [ 183.524569][ T9302] ? sock_rps_record_flow+0x19/0x410 [ 183.524594][ T9302] ? inet_sendmsg+0x2f4/0x370 [ 183.524620][ T9302] __sock_sendmsg+0x19c/0x270 [ 183.524657][ T9302] __sys_sendto+0x3bd/0x520 [ 183.524684][ T9302] ? __pfx___sys_sendto+0x10/0x10 [ 183.524705][ T9302] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 183.524745][ T9302] ? __fget_files+0x3a0/0x420 [ 183.524805][ T9302] ? rcu_is_watching+0x15/0xb0 [ 183.524830][ T9302] __x64_sys_sendto+0xde/0x100 [ 183.524860][ T9302] do_syscall_64+0xfa/0x3b0 [ 183.524884][ T9302] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.524907][ T9302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.524927][ T9302] ? clear_bhb_loop+0x60/0xb0 [ 183.524953][ T9302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.524973][ T9302] RIP: 0033:0x7fca8398eec9 [ 183.524991][ T9302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.525009][ T9302] RSP: 002b:00007fca847ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 183.525031][ T9302] RAX: ffffffffffffffda RBX: 00007fca83be6090 RCX: 00007fca8398eec9 [ 183.525046][ T9302] RDX: 000000000002a0f5 RSI: 0000200000847fff RDI: 0000000000000006 [ 183.525059][ T9302] RBP: 00007fca847ab090 R08: 000020000005ffe4 R09: 000000000000001c [ 183.525072][ T9302] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 183.525084][ T9302] R13: 00007fca83be6128 R14: 00007fca83be6090 R15: 00007fffc5dcd158 [ 183.525119][ T9302] [ 183.543956][ T9303] lo speed is unknown, defaulting to 1000 [ 184.450731][ T9321] netlink: 220 bytes leftover after parsing attributes in process `syz.4.913'. [ 184.545274][ T9326] lo speed is unknown, defaulting to 1000 [ 184.607197][ T9330] bridge0: left promiscuous mode [ 184.630026][ T9330] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 184.816420][ T9336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.099262][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.924'. [ 185.154954][ T9336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.181076][ T9352] netlink: 'syz.2.922': attribute type 41 has an invalid length. [ 185.294363][ T9336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.408393][ T9336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.687238][ T74] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.709490][ T74] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.735183][ T3494] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.775555][ T3494] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.968519][ T9384] tipc: Started in network mode [ 185.992365][ T9384] tipc: Node identity 521e253ac60d, cluster identity 4711 [ 186.022872][ T9384] tipc: Enabled bearer , priority 0 [ 186.054634][ T9395] syzkaller0: entered promiscuous mode [ 186.061634][ T9395] syzkaller0: entered allmulticast mode [ 186.118066][ T9384] tipc: Resetting bearer [ 186.182424][ T9383] tipc: Resetting bearer [ 186.369504][ T9383] tipc: Disabling bearer [ 186.716893][ T9424] bond0: entered promiscuous mode [ 186.757549][ T9424] : entered promiscuous mode [ 186.782044][ T9424] bond_slave_1: entered promiscuous mode [ 186.813023][ T9424] bond0: left promiscuous mode [ 186.817858][ T9424] : left promiscuous mode [ 186.823658][ T9424] bond_slave_1: left promiscuous mode [ 187.056921][ T9437] syz_tun: entered allmulticast mode [ 187.151326][ T9437] syz_tun: left allmulticast mode [ 187.163570][ T9447] __nla_validate_parse: 8 callbacks suppressed [ 187.163640][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.943'. [ 187.750472][ T9479] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 187.770678][ T9480] bridge3: port 1(macvlan4) entered blocking state [ 187.796378][ T9480] bridge3: port 1(macvlan4) entered disabled state [ 187.809889][ T9480] macvlan4: entered allmulticast mode [ 187.818252][ T9480] macvlan4: entered promiscuous mode [ 187.906733][ T9484] netlink: 96 bytes leftover after parsing attributes in process `syz.3.956'. [ 187.948826][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.957'. [ 187.963103][ T9489] veth1_to_batadv: mtu less than device minimum [ 187.969708][ T9488] veth1_to_batadv: mtu less than device minimum [ 188.589398][ T9531] netlink: 220 bytes leftover after parsing attributes in process `syz.0.969'. [ 188.685998][ T9535] lo speed is unknown, defaulting to 1000 [ 188.919763][ T9547] netlink: 'syz.3.975': attribute type 3 has an invalid length. [ 188.936835][ T9547] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 188.946350][ T9547] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.975'. [ 189.284397][ T9559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.979'. [ 189.400920][ T9557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.687574][ T9567] macvlan2: left promiscuous mode [ 189.697397][ T9567] gre1: left promiscuous mode [ 189.786764][ T9559] syzkaller0: entered promiscuous mode [ 189.792904][ T9559] syzkaller0: entered allmulticast mode [ 189.845433][ T9586] bridge2: port 1(macvlan2) entered blocking state [ 189.872753][ T9586] bridge2: port 1(macvlan2) entered disabled state [ 189.889972][ T9586] macvlan2: entered allmulticast mode [ 189.903213][ T9586] macvlan2: entered promiscuous mode [ 190.236059][ T9606] netlink: 'syz.2.992': attribute type 1 has an invalid length. [ 190.349075][ T9613] gretap1: entered allmulticast mode [ 190.385552][ T9613] bond1: (slave gretap1): making interface the new active one [ 190.409451][ T9613] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 190.419988][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'. [ 190.481362][ T9621] netlink: 'syz.0.997': attribute type 1 has an invalid length. [ 190.497915][ T9621] netlink: 88 bytes leftover after parsing attributes in process `syz.0.997'. [ 190.562363][ T9621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.997'. [ 190.662954][ T9631] FAULT_INJECTION: forcing a failure. [ 190.662954][ T9631] name failslab, interval 1, probability 0, space 0, times 0 [ 190.677642][ T9631] CPU: 1 UID: 0 PID: 9631 Comm: syz.3.998 Not tainted syzkaller #0 PREEMPT(full) [ 190.677670][ T9631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 190.677681][ T9631] Call Trace: [ 190.677689][ T9631] [ 190.677697][ T9631] dump_stack_lvl+0x189/0x250 [ 190.677724][ T9631] ? __pfx____ratelimit+0x10/0x10 [ 190.677746][ T9631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.677769][ T9631] ? __pfx__printk+0x10/0x10 [ 190.677813][ T9631] should_fail_ex+0x414/0x560 [ 190.677848][ T9631] should_failslab+0xa8/0x100 [ 190.677876][ T9631] __kmalloc_cache_noprof+0x70/0x3d0 [ 190.677900][ T9631] ? sctp_add_bind_addr+0x8c/0x370 [ 190.677929][ T9631] sctp_add_bind_addr+0x8c/0x370 [ 190.677956][ T9631] sctp_copy_local_addr_list+0x30b/0x4e0 [ 190.677983][ T9631] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 190.678006][ T9631] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 190.678031][ T9631] ? sctp_v6_is_any+0x64/0x80 [ 190.678056][ T9631] ? sctp_copy_one_addr+0x93/0x360 [ 190.678082][ T9631] sctp_bind_addr_copy+0xb3/0x3c0 [ 190.678106][ T9631] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 190.678129][ T9631] sctp_connect_new_asoc+0x2e0/0x690 [ 190.678160][ T9631] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 190.678186][ T9631] ? __local_bh_enable_ip+0x12d/0x1c0 [ 190.678222][ T9631] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 190.678244][ T9631] ? security_sctp_bind_connect+0x7e/0x2e0 [ 190.678362][ T9631] sctp_sendmsg+0x155c/0x2810 [ 190.678401][ T9631] ? __pfx_sctp_sendmsg+0x10/0x10 [ 190.678440][ T9631] ? aa_sk_perm+0x81e/0x950 [ 190.678478][ T9631] ? __pfx_aa_sk_perm+0x10/0x10 [ 190.678508][ T9631] ? sock_rps_record_flow+0x19/0x410 [ 190.678530][ T9631] ? inet_sendmsg+0x2f4/0x370 [ 190.678553][ T9631] __sock_sendmsg+0x19c/0x270 [ 190.678590][ T9631] __sys_sendto+0x3bd/0x520 [ 190.678614][ T9631] ? __pfx___sys_sendto+0x10/0x10 [ 190.678632][ T9631] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 190.678676][ T9631] ? __fget_files+0x3a0/0x420 [ 190.678726][ T9631] ? ksys_write+0x22a/0x250 [ 190.678755][ T9631] ? __pfx_ksys_write+0x10/0x10 [ 190.678775][ T9631] ? rcu_is_watching+0x15/0xb0 [ 190.678797][ T9631] __x64_sys_sendto+0xde/0x100 [ 190.678822][ T9631] do_syscall_64+0xfa/0x3b0 [ 190.678842][ T9631] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.678861][ T9631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.678878][ T9631] ? clear_bhb_loop+0x60/0xb0 [ 190.678900][ T9631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.678923][ T9631] RIP: 0033:0x7f860a78eec9 [ 190.678940][ T9631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.678957][ T9631] RSP: 002b:00007f860b59c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 190.678977][ T9631] RAX: ffffffffffffffda RBX: 00007f860a9e6090 RCX: 00007f860a78eec9 [ 190.678992][ T9631] RDX: 000000000002a0f5 RSI: 0000200000847fff RDI: 0000000000000006 [ 190.679004][ T9631] RBP: 00007f860b59c090 R08: 000020000005ffe4 R09: 000000000000001c [ 190.679017][ T9631] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 190.679027][ T9631] R13: 00007f860a9e6128 R14: 00007f860a9e6090 R15: 00007fff6f492508 [ 190.679059][ T9631] [ 191.053329][ T9636] IPv6: addrconf: prefix option has invalid lifetime [ 191.115065][ T9639] netlink: 'syz.4.1003': attribute type 1 has an invalid length. [ 191.178705][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 192.172455][ T9690] __nla_validate_parse: 5 callbacks suppressed [ 192.172475][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1017'. [ 192.403430][ T9695] lo speed is unknown, defaulting to 1000 [ 192.429574][ T9691] lo speed is unknown, defaulting to 1000 [ 192.764674][ T9714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1022'. [ 193.260747][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 193.411448][ T9740] lo speed is unknown, defaulting to 1000 [ 193.430388][ T9742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1030'. [ 193.564923][ T9749] netlink: 'syz.3.1033': attribute type 1 has an invalid length. [ 193.611211][ T9749] netlink: 'syz.3.1033': attribute type 2 has an invalid length. [ 194.059257][ T9740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1031'. [ 194.186356][ T9783] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 194.623136][ T9801] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1051'. [ 194.665793][ T9801] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1051'. [ 194.698184][ T9804] batadv0: entered promiscuous mode [ 194.704762][ T9804] macsec1: entered promiscuous mode [ 194.725664][ T9804] batadv0: left promiscuous mode [ 195.175177][ T9828] netlink: 'syz.0.1061': attribute type 11 has an invalid length. [ 195.222098][ T9828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1061'. [ 195.275374][ T9828] openvswitch: netlink: Flow actions attr not present in new flow. [ 195.415595][ T9837] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 195.438548][ T9840] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1065'. [ 195.467078][ T9840] block nbd0: not configured, cannot reconfigure [ 195.473163][ T9837] trusted_key: syz.3.1064 sent an empty control message without MSG_MORE. [ 195.524753][ T9847] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1068'. [ 196.065820][ T9852] lo speed is unknown, defaulting to 1000 [ 196.234296][ T9859] 8021q: VLANs not supported on ip_vti0 [ 196.251577][ T9851] lo speed is unknown, defaulting to 1000 [ 196.441283][ T9867] FAULT_INJECTION: forcing a failure. [ 196.441283][ T9867] name failslab, interval 1, probability 0, space 0, times 0 [ 196.474902][ T9867] CPU: 0 UID: 0 PID: 9867 Comm: syz.4.1074 Not tainted syzkaller #0 PREEMPT(full) [ 196.474931][ T9867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.474944][ T9867] Call Trace: [ 196.474953][ T9867] [ 196.474962][ T9867] dump_stack_lvl+0x189/0x250 [ 196.474992][ T9867] ? __pfx____ratelimit+0x10/0x10 [ 196.475017][ T9867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.475041][ T9867] ? __pfx__printk+0x10/0x10 [ 196.475086][ T9867] should_fail_ex+0x414/0x560 [ 196.475122][ T9867] should_failslab+0xa8/0x100 [ 196.475173][ T9867] __kmalloc_cache_noprof+0x70/0x3d0 [ 196.475200][ T9867] ? sctp_add_bind_addr+0x8c/0x370 [ 196.475233][ T9867] sctp_add_bind_addr+0x8c/0x370 [ 196.475265][ T9867] sctp_copy_local_addr_list+0x30b/0x4e0 [ 196.475297][ T9867] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 196.475324][ T9867] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 196.475353][ T9867] ? sctp_v6_is_any+0x64/0x80 [ 196.475384][ T9867] ? sctp_copy_one_addr+0x93/0x360 [ 196.475416][ T9867] sctp_bind_addr_copy+0xb3/0x3c0 [ 196.475444][ T9867] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 196.475472][ T9867] sctp_connect_new_asoc+0x2e0/0x690 [ 196.475509][ T9867] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 196.475540][ T9867] ? __local_bh_enable_ip+0x12d/0x1c0 [ 196.475583][ T9867] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 196.475607][ T9867] ? security_sctp_bind_connect+0x7e/0x2e0 [ 196.475641][ T9867] sctp_sendmsg+0x155c/0x2810 [ 196.475688][ T9867] ? __pfx_sctp_sendmsg+0x10/0x10 [ 196.475731][ T9867] ? aa_sk_perm+0x81e/0x950 [ 196.475771][ T9867] ? __pfx_aa_sk_perm+0x10/0x10 [ 196.475807][ T9867] ? sock_rps_record_flow+0x19/0x410 [ 196.475834][ T9867] ? inet_sendmsg+0x2f4/0x370 [ 196.475861][ T9867] __sock_sendmsg+0x19c/0x270 [ 196.475901][ T9867] __sys_sendto+0x3bd/0x520 [ 196.475930][ T9867] ? __pfx___sys_sendto+0x10/0x10 [ 196.475952][ T9867] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 196.475996][ T9867] ? __fget_files+0x3a0/0x420 [ 196.476041][ T9867] ? ksys_write+0x22a/0x250 [ 196.476072][ T9867] ? __pfx_ksys_write+0x10/0x10 [ 196.476097][ T9867] ? rcu_is_watching+0x15/0xb0 [ 196.476123][ T9867] __x64_sys_sendto+0xde/0x100 [ 196.476154][ T9867] do_syscall_64+0xfa/0x3b0 [ 196.476179][ T9867] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.476202][ T9867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.476224][ T9867] ? clear_bhb_loop+0x60/0xb0 [ 196.476251][ T9867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.476272][ T9867] RIP: 0033:0x7fa600b8eec9 [ 196.476292][ T9867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.476310][ T9867] RSP: 002b:00007fa601adb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 196.476333][ T9867] RAX: ffffffffffffffda RBX: 00007fa600de6090 RCX: 00007fa600b8eec9 [ 196.476348][ T9867] RDX: 000000000002a0f5 RSI: 0000200000847fff RDI: 0000000000000006 [ 196.476362][ T9867] RBP: 00007fa601adb090 R08: 000020000005ffe4 R09: 000000000000001c [ 196.476377][ T9867] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 196.476389][ T9867] R13: 00007fa600de6128 R14: 00007fa600de6090 R15: 00007ffc50602e28 [ 196.476426][ T9867] [ 196.549129][ T9874] lo speed is unknown, defaulting to 1000 [ 197.253805][ T9889] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 197.374544][ T9902] __nla_validate_parse: 7 callbacks suppressed [ 197.374566][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1085'. [ 197.467646][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1085'. [ 197.539939][ T9908] lo speed is unknown, defaulting to 1000 [ 197.958171][ T9931] FAULT_INJECTION: forcing a failure. [ 197.958171][ T9931] name failslab, interval 1, probability 0, space 0, times 0 [ 197.987635][ T9931] CPU: 1 UID: 0 PID: 9931 Comm: syz.0.1095 Not tainted syzkaller #0 PREEMPT(full) [ 197.987665][ T9931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.987678][ T9931] Call Trace: [ 197.987687][ T9931] [ 197.987696][ T9931] dump_stack_lvl+0x189/0x250 [ 197.987725][ T9931] ? __pfx____ratelimit+0x10/0x10 [ 197.987749][ T9931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.987773][ T9931] ? __pfx__printk+0x10/0x10 [ 197.987815][ T9931] should_fail_ex+0x414/0x560 [ 197.987849][ T9931] should_failslab+0xa8/0x100 [ 197.987881][ T9931] __kmalloc_cache_noprof+0x70/0x3d0 [ 197.987908][ T9931] ? sctp_add_bind_addr+0x8c/0x370 [ 197.987938][ T9931] sctp_add_bind_addr+0x8c/0x370 [ 197.987968][ T9931] sctp_copy_local_addr_list+0x30b/0x4e0 [ 197.987997][ T9931] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 197.988022][ T9931] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 197.988049][ T9931] ? sctp_v6_is_any+0x64/0x80 [ 197.988077][ T9931] ? sctp_copy_one_addr+0x93/0x360 [ 197.988107][ T9931] sctp_bind_addr_copy+0xb3/0x3c0 [ 197.988134][ T9931] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 197.988161][ T9931] sctp_connect_new_asoc+0x2e0/0x690 [ 197.988197][ T9931] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 197.988226][ T9931] ? __local_bh_enable_ip+0x12d/0x1c0 [ 197.988267][ T9931] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 197.988291][ T9931] ? security_sctp_bind_connect+0x7e/0x2e0 [ 197.988333][ T9931] sctp_sendmsg+0x155c/0x2810 [ 197.988375][ T9931] ? __pfx_sctp_sendmsg+0x10/0x10 [ 197.988407][ T9931] ? aa_sk_perm+0x81e/0x950 [ 197.988442][ T9931] ? __pfx_aa_sk_perm+0x10/0x10 [ 197.988475][ T9931] ? sock_rps_record_flow+0x19/0x410 [ 197.988500][ T9931] ? inet_sendmsg+0x2f4/0x370 [ 197.988524][ T9931] __sock_sendmsg+0x19c/0x270 [ 197.988560][ T9931] __sys_sendto+0x3bd/0x520 [ 197.988586][ T9931] ? __pfx___sys_sendto+0x10/0x10 [ 197.988614][ T9931] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 197.988653][ T9931] ? __fget_files+0x3a0/0x420 [ 197.988694][ T9931] ? ksys_write+0x22a/0x250 [ 197.988722][ T9931] ? __pfx_ksys_write+0x10/0x10 [ 197.988744][ T9931] ? rcu_is_watching+0x15/0xb0 [ 197.988768][ T9931] __x64_sys_sendto+0xde/0x100 [ 197.988794][ T9931] do_syscall_64+0xfa/0x3b0 [ 197.988816][ T9931] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.988836][ T9931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.988855][ T9931] ? clear_bhb_loop+0x60/0xb0 [ 197.988879][ T9931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.988898][ T9931] RIP: 0033:0x7fca8398eec9 [ 197.988915][ T9931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.988931][ T9931] RSP: 002b:00007fca847ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 197.988951][ T9931] RAX: ffffffffffffffda RBX: 00007fca83be6090 RCX: 00007fca8398eec9 [ 197.988966][ T9931] RDX: 000000000002a0f5 RSI: 0000200000847fff RDI: 0000000000000006 [ 197.988978][ T9931] RBP: 00007fca847ab090 R08: 000020000005ffe4 R09: 000000000000001c [ 197.988991][ T9931] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 197.989001][ T9931] R13: 00007fca83be6128 R14: 00007fca83be6090 R15: 00007fffc5dcd158 [ 197.989032][ T9931] [ 198.012272][ T9936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1098'. [ 198.323725][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'. [ 198.508655][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'. [ 198.529303][ T9957] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1104'. [ 199.105113][ T9980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1113'. [ 199.170725][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1114'. [ 199.189631][ T9982] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 199.521587][T10000] netlink: 'syz.3.1121': attribute type 12 has an invalid length. [ 199.597126][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.632773][T10006] syz_tun: entered allmulticast mode [ 199.668581][T10006] dvmrp1: entered allmulticast mode [ 199.709915][T10017] syz_tun: left allmulticast mode [ 200.000510][T10038] netlink: 'syz.2.1129': attribute type 13 has an invalid length. [ 200.124979][T10038] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.132965][T10038] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.295960][T10038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.322462][T10038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.398488][T10038] veth0_virt_wifi: left allmulticast mode [ 200.511649][T10038] syz_tun: left allmulticast mode [ 200.594539][T10047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.620043][ T38] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.646855][ T38] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.668102][ T38] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.697376][T10039] lo speed is unknown, defaulting to 1000 [ 200.796409][ T38] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.901692][T10056] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 201.076276][T10062] lo speed is unknown, defaulting to 1000 [ 201.417608][T10081] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1142'. [ 202.058638][T10112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1151'. [ 202.137103][T10110] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 202.226789][T10119] tipc: Enabled bearer , priority 0 [ 202.278775][T10119] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 202.309871][T10119] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 202.344647][T10119] tipc: Resetting bearer [ 202.438851][T10133] tipc: Resetting bearer [ 202.643192][ T36] tipc: Resetting bearer [ 202.661397][T10141] __nla_validate_parse: 3 callbacks suppressed [ 202.661417][T10141] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1158'. [ 202.861700][T10143] lo speed is unknown, defaulting to 1000 [ 203.084321][T10160] netlink: 'syz.4.1164': attribute type 1 has an invalid length. [ 203.183205][T10160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.219639][T10164] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1164'. [ 203.261480][ T10] tipc: Node number set to 2638786861 [ 203.456766][T10162] bond1: (slave veth3): Enslaving as an active interface with a down link [ 203.483170][T10166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.525094][T10172] veth1_macvtap: left promiscuous mode [ 203.649467][T10185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1171'. [ 203.666387][T10187] FAULT_INJECTION: forcing a failure. [ 203.666387][T10187] name failslab, interval 1, probability 0, space 0, times 0 [ 203.700334][T10187] CPU: 1 UID: 0 PID: 10187 Comm: syz.4.1169 Not tainted syzkaller #0 PREEMPT(full) [ 203.700371][T10187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 203.700385][T10187] Call Trace: [ 203.700416][T10187] [ 203.700426][T10187] dump_stack_lvl+0x189/0x250 [ 203.700469][T10187] ? __pfx____ratelimit+0x10/0x10 [ 203.700494][T10187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.700536][T10187] ? __pfx__printk+0x10/0x10 [ 203.700582][T10187] should_fail_ex+0x414/0x560 [ 203.700619][T10187] should_failslab+0xa8/0x100 [ 203.700652][T10187] __kmalloc_cache_noprof+0x70/0x3d0 [ 203.700680][T10187] ? sctp_add_bind_addr+0x8c/0x370 [ 203.700712][T10187] sctp_add_bind_addr+0x8c/0x370 [ 203.700745][T10187] sctp_copy_local_addr_list+0x30b/0x4e0 [ 203.700777][T10187] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 203.700805][T10187] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 203.700835][T10187] ? sctp_v6_is_any+0x64/0x80 [ 203.700867][T10187] ? sctp_copy_one_addr+0x93/0x360 [ 203.700898][T10187] sctp_bind_addr_copy+0xb3/0x3c0 [ 203.700926][T10187] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 203.700955][T10187] sctp_connect_new_asoc+0x2e0/0x690 [ 203.700992][T10187] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 203.701024][T10187] ? __local_bh_enable_ip+0x12d/0x1c0 [ 203.701068][T10187] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 203.701092][T10187] ? security_sctp_bind_connect+0x7e/0x2e0 [ 203.701124][T10187] sctp_sendmsg+0x155c/0x2810 [ 203.701174][T10187] ? __pfx_sctp_sendmsg+0x10/0x10 [ 203.701211][T10187] ? aa_sk_perm+0x81e/0x950 [ 203.701249][T10187] ? __pfx_aa_sk_perm+0x10/0x10 [ 203.701286][T10187] ? sock_rps_record_flow+0x19/0x410 [ 203.701312][T10187] ? inet_sendmsg+0x2f4/0x370 [ 203.701340][T10187] __sock_sendmsg+0x19c/0x270 [ 203.701386][T10187] __sys_sendto+0x3bd/0x520 [ 203.701428][T10187] ? __pfx___sys_sendto+0x10/0x10 [ 203.701450][T10187] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 203.701490][T10187] ? __fget_files+0x3a0/0x420 [ 203.701534][T10187] ? ksys_write+0x22a/0x250 [ 203.701564][T10187] ? __pfx_ksys_write+0x10/0x10 [ 203.701588][T10187] ? rcu_is_watching+0x15/0xb0 [ 203.701613][T10187] __x64_sys_sendto+0xde/0x100 [ 203.701643][T10187] do_syscall_64+0xfa/0x3b0 [ 203.701667][T10187] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.701690][T10187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.701711][T10187] ? clear_bhb_loop+0x60/0xb0 [ 203.701738][T10187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.701759][T10187] RIP: 0033:0x7fa600b8eec9 [ 203.701778][T10187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.701796][T10187] RSP: 002b:00007fa601adb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 203.701818][T10187] RAX: ffffffffffffffda RBX: 00007fa600de6090 RCX: 00007fa600b8eec9 [ 203.701834][T10187] RDX: 000000000002a0f5 RSI: 0000200000847fff RDI: 0000000000000006 [ 203.701848][T10187] RBP: 00007fa601adb090 R08: 000020000005ffe4 R09: 000000000000001c [ 203.701863][T10187] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 203.701875][T10187] R13: 00007fa600de6128 R14: 00007fa600de6090 R15: 00007ffc50602e28 [ 203.701912][T10187] [ 204.222664][T10200] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1176'. [ 204.324950][T10204] netlink: 'syz.2.1176': attribute type 10 has an invalid length. [ 204.379538][T10206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1177'. [ 204.556655][T10217] atomic_op ffff88802f02a998 conn xmit_atomic 0000000000000000 [ 204.644707][T10217] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.737671][T10223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1184'. [ 204.749767][T10223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1184'. [ 204.904164][T10234] netlink: 'syz.2.1188': attribute type 1 has an invalid length. [ 204.949564][T10234] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.966312][T10238] team0: Device gtp1 is of different type [ 205.061002][T10236] team0: Device gtp1 is of different type [ 205.134155][T10232] tipc: Started in network mode [ 205.152648][T10232] tipc: Node identity c6baa2d9c6ea, cluster identity 4711 [ 205.169140][T10232] tipc: Enabled bearer , priority 0 [ 205.249702][T10239] bond2: (slave ip6gretap1): making interface the new active one [ 205.272032][T10239] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 205.304017][T10234] veth3: entered promiscuous mode [ 205.317773][T10234] bond2: (slave veth3): Enslaving as an active interface with a down link [ 205.343518][T10244] syzkaller0: entered promiscuous mode [ 205.355661][T10244] syzkaller0: entered allmulticast mode [ 205.373729][T10245] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1190'. [ 205.400252][T10245] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1190'. [ 205.432198][T10246] lo speed is unknown, defaulting to 1000 [ 205.813226][T10279] netlink: 'syz.4.1197': attribute type 11 has an invalid length. [ 205.840755][T10279] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1197'. [ 205.925571][T10232] tipc: Resetting bearer [ 205.964160][T10229] tipc: Resetting bearer [ 206.045824][T10229] tipc: Disabling bearer [ 206.228786][T10294] lo speed is unknown, defaulting to 1000 [ 206.540005][T10302] syzkaller0: entered promiscuous mode [ 206.546167][T10302] syzkaller0: entered allmulticast mode [ 206.940795][T10315] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 207.586239][T10346] netlink: 'syz.0.1218': attribute type 4 has an invalid length. [ 208.883403][T10364] vlan0: entered promiscuous mode [ 208.938523][T10368] __nla_validate_parse: 3 callbacks suppressed [ 208.938544][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1226'. [ 209.011972][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'. [ 209.327682][T10392] netlink: 'syz.1.1235': attribute type 1 has an invalid length. [ 209.497583][T10398] netlink: 'syz.1.1237': attribute type 142 has an invalid length. [ 209.583690][T10404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1239'. [ 209.613809][T10404] tipc: Enabled bearer , priority 0 [ 209.631639][T10404] syzkaller0: entered promiscuous mode [ 209.637252][T10404] syzkaller0: entered allmulticast mode [ 209.669035][T10412] netlink: 'syz.3.1241': attribute type 10 has an invalid length. [ 209.701035][T10412] bond0: (slave 0!): Enslaving as an active interface with an up link [ 209.725746][T10404] tipc: Resetting bearer [ 209.753922][T10403] tipc: Resetting bearer [ 209.797581][T10403] tipc: Disabling bearer [ 209.931261][T10418] lo speed is unknown, defaulting to 1000 [ 210.075957][T10426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1244'. [ 210.858283][T10473] tipc: Started in network mode [ 210.875131][T10473] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 210.893212][T10473] tipc: Enabled bearer , priority 10 [ 210.941970][T10471] lo speed is unknown, defaulting to 1000 [ 211.291073][T10499] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 211.319258][T10499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1265'. [ 211.722267][T10509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1267'. [ 211.753251][ T1209] IPVS: starting estimator thread 0... [ 211.821804][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 211.840836][T10510] IPVS: using max 25 ests per chain, 60000 per kthread [ 211.915197][ T5879] Bluetooth: hci1: command 0x0406 tx timeout [ 211.922327][ T5863] Bluetooth: hci3: command 0x0406 tx timeout [ 211.923005][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 212.001921][T10524] FAULT_INJECTION: forcing a failure. [ 212.001921][T10524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.016742][ T5870] tipc: Node number set to 4269801488 [ 212.066042][T10524] CPU: 1 UID: 0 PID: 10524 Comm: syz.4.1272 Not tainted syzkaller #0 PREEMPT(full) [ 212.066085][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.066099][T10524] Call Trace: [ 212.066108][T10524] [ 212.066118][T10524] dump_stack_lvl+0x189/0x250 [ 212.066147][T10524] ? __pfx____ratelimit+0x10/0x10 [ 212.066172][T10524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.066196][T10524] ? __pfx__printk+0x10/0x10 [ 212.066238][T10524] should_fail_ex+0x414/0x560 [ 212.066275][T10524] _copy_to_user+0x31/0xb0 [ 212.066305][T10524] simple_read_from_buffer+0xe1/0x170 [ 212.066341][T10524] proc_fail_nth_read+0x1b3/0x220 [ 212.066368][T10524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 212.066395][T10524] ? rw_verify_area+0x2a6/0x4d0 [ 212.066420][T10524] ? __lock_acquire+0xab9/0xd20 [ 212.066457][T10524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 212.066482][T10524] vfs_read+0x1fd/0xa30 [ 212.066507][T10524] ? fdget_pos+0x247/0x320 [ 212.066544][T10524] ? __pfx___mutex_lock+0x10/0x10 [ 212.066570][T10524] ? __pfx_vfs_read+0x10/0x10 [ 212.066597][T10524] ? __fget_files+0x2a/0x420 [ 212.066633][T10524] ? __fget_files+0x3a0/0x420 [ 212.066662][T10524] ? __fget_files+0x2a/0x420 [ 212.066705][T10524] ksys_read+0x145/0x250 [ 212.066734][T10524] ? __pfx_ksys_read+0x10/0x10 [ 212.066758][T10524] ? rcu_is_watching+0x15/0xb0 [ 212.066785][T10524] ? do_syscall_64+0xbe/0x3b0 [ 212.066814][T10524] do_syscall_64+0xfa/0x3b0 [ 212.066838][T10524] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.066861][T10524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.066882][T10524] ? clear_bhb_loop+0x60/0xb0 [ 212.066909][T10524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.066941][T10524] RIP: 0033:0x7fa600b8d8dc [ 212.066965][T10524] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 212.066982][T10524] RSP: 002b:00007fa601afc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.067003][T10524] RAX: ffffffffffffffda RBX: 00007fa600de5fa0 RCX: 00007fa600b8d8dc [ 212.067018][T10524] RDX: 000000000000000f RSI: 00007fa601afc0a0 RDI: 0000000000000004 [ 212.067031][T10524] RBP: 00007fa601afc090 R08: 0000000000000000 R09: 0000000000000000 [ 212.067047][T10524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.067059][T10524] R13: 00007fa600de6038 R14: 00007fa600de5fa0 R15: 00007ffc50602e28 [ 212.067092][T10524] [ 212.323891][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 212.509483][T10535] virt_wifi0 speed is unknown, defaulting to 1000 [ 212.516147][T10535] virt_wifi0 speed is unknown, defaulting to 1000 [ 212.531773][T10535] virt_wifi0 speed is unknown, defaulting to 1000 [ 212.592798][T10535] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 212.593113][T10543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1275'. [ 212.627449][T10535] virt_wifi0 speed is unknown, defaulting to 1000 [ 212.848461][T10535] virt_wifi0 speed is unknown, defaulting to 1000 [ 212.876957][T10535] virt_wifi0 speed is unknown, defaulting to 1000 [ 212.901411][T10552] virt_wifi0 speed is unknown, defaulting to 1000 [ 212.947690][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 212.978513][T10550] vlan3: entered promiscuous mode [ 213.014344][T10535] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.045510][T10535] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.056538][T10555] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 213.161141][T10555] bond0: (slave syz_tun): Releasing backup interface [ 213.194488][T10555] bond0: (slave bond_slave_0): Releasing backup interface [ 213.224262][T10555] bond0: (slave bond_slave_1): Releasing backup interface [ 213.237957][T10555] team_slave_0: left promiscuous mode [ 213.257819][T10555] team0: Port device team_slave_0 removed [ 213.265139][T10555] team_slave_1: left promiscuous mode [ 213.314215][T10555] team0: Port device team_slave_1 removed [ 213.356841][T10555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.381023][T10555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.419355][T10570] netlink: 'syz.4.1279': attribute type 10 has an invalid length. [ 213.452125][T10555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.459569][T10555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.497145][T10555] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.548668][T10553] netlink: 'syz.0.1277': attribute type 142 has an invalid length. [ 213.580996][T10570] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 213.607851][T10570] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 213.653195][T10573] virt_wifi0 speed is unknown, defaulting to 1000 [ 214.148624][T10596] __nla_validate_parse: 1 callbacks suppressed [ 214.148644][T10596] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1288'. [ 214.237450][T10601] FAULT_INJECTION: forcing a failure. [ 214.237450][T10601] name failslab, interval 1, probability 0, space 0, times 0 [ 214.270722][T10601] CPU: 1 UID: 0 PID: 10601 Comm: syz.0.1289 Not tainted syzkaller #0 PREEMPT(full) [ 214.270753][T10601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.270767][T10601] Call Trace: [ 214.270776][T10601] [ 214.270786][T10601] dump_stack_lvl+0x189/0x250 [ 214.270816][T10601] ? __pfx____ratelimit+0x10/0x10 [ 214.270841][T10601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.270866][T10601] ? __pfx__printk+0x10/0x10 [ 214.270910][T10601] should_fail_ex+0x414/0x560 [ 214.270946][T10601] should_failslab+0xa8/0x100 [ 214.270979][T10601] __kmalloc_cache_noprof+0x70/0x3d0 [ 214.271008][T10601] ? sctp_add_bind_addr+0x8c/0x370 [ 214.271039][T10601] sctp_add_bind_addr+0x8c/0x370 [ 214.271071][T10601] sctp_copy_local_addr_list+0x30b/0x4e0 [ 214.271102][T10601] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 214.271129][T10601] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 214.271158][T10601] ? sctp_v6_is_any+0x64/0x80 [ 214.271188][T10601] ? sctp_copy_one_addr+0x93/0x360 [ 214.271218][T10601] sctp_bind_addr_copy+0xb3/0x3c0 [ 214.271246][T10601] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 214.271273][T10601] sctp_connect_new_asoc+0x2e0/0x690 [ 214.271309][T10601] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 214.271339][T10601] ? __local_bh_enable_ip+0x12d/0x1c0 [ 214.271381][T10601] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 214.271405][T10601] ? security_sctp_bind_connect+0x7e/0x2e0 [ 214.271436][T10601] sctp_sendmsg+0x155c/0x2810 [ 214.271482][T10601] ? __pfx_sctp_sendmsg+0x10/0x10 [ 214.271518][T10601] ? aa_sk_perm+0x81e/0x950 [ 214.271563][T10601] ? __pfx_aa_sk_perm+0x10/0x10 [ 214.271598][T10601] ? sock_rps_record_flow+0x19/0x410 [ 214.271625][T10601] ? inet_sendmsg+0x2f4/0x370 [ 214.271651][T10601] __sock_sendmsg+0x19c/0x270 [ 214.271690][T10601] __sys_sendto+0x3bd/0x520 [ 214.271718][T10601] ? __pfx___sys_sendto+0x10/0x10 [ 214.271741][T10601] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 214.271782][T10601] ? __fget_files+0x3a0/0x420 [ 214.271833][T10601] ? ksys_write+0x22a/0x250 [ 214.271863][T10601] ? __pfx_ksys_write+0x10/0x10 [ 214.271887][T10601] ? rcu_is_watching+0x15/0xb0 [ 214.271913][T10601] __x64_sys_sendto+0xde/0x100 [ 214.271944][T10601] do_syscall_64+0xfa/0x3b0 [ 214.271967][T10601] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.271990][T10601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.272011][T10601] ? clear_bhb_loop+0x60/0xb0 [ 214.272037][T10601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.272058][T10601] RIP: 0033:0x7fca8398eec9 [ 214.272077][T10601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.272094][T10601] RSP: 002b:00007fca847ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 214.272117][T10601] RAX: ffffffffffffffda RBX: 00007fca83be6090 RCX: 00007fca8398eec9 [ 214.272133][T10601] RDX: 000000000002a0f5 RSI: 0000200000847fff RDI: 0000000000000006 [ 214.272147][T10601] RBP: 00007fca847ab090 R08: 000020000005ffe4 R09: 000000000000001c [ 214.272161][T10601] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 214.272174][T10601] R13: 00007fca83be6128 R14: 00007fca83be6090 R15: 00007fffc5dcd158 [ 214.272209][T10601] [ 215.221236][T10615] vlan2: entered promiscuous mode [ 215.226455][T10615] team0: entered promiscuous mode [ 215.237375][T10615] team_slave_0: entered promiscuous mode [ 215.262679][T10615] team_slave_1: entered promiscuous mode [ 215.534859][T10624] tipc: Enabled bearer , priority 0 [ 215.547346][T10624] syzkaller0: entered promiscuous mode [ 215.552999][T10624] syzkaller0: entered allmulticast mode [ 215.565206][T10624] tipc: Resetting bearer [ 215.593226][T10623] tipc: Resetting bearer [ 215.618358][T10623] tipc: Disabling bearer [ 215.882062][T10647] FAULT_INJECTION: forcing a failure. [ 215.882062][T10647] name failslab, interval 1, probability 0, space 0, times 0 [ 215.958949][T10647] CPU: 1 UID: 0 PID: 10647 Comm: syz.4.1302 Not tainted syzkaller #0 PREEMPT(full) [ 215.958977][T10647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 215.958990][T10647] Call Trace: [ 215.958997][T10647] [ 215.959006][T10647] dump_stack_lvl+0x189/0x250 [ 215.959034][T10647] ? __pfx____ratelimit+0x10/0x10 [ 215.959057][T10647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.959079][T10647] ? __pfx__printk+0x10/0x10 [ 215.959119][T10647] should_fail_ex+0x414/0x560 [ 215.959154][T10647] should_failslab+0xa8/0x100 [ 215.959184][T10647] __kmalloc_cache_noprof+0x70/0x3d0 [ 215.959209][T10647] ? sctp_add_bind_addr+0x8c/0x370 [ 215.959236][T10647] sctp_add_bind_addr+0x8c/0x370 [ 215.959263][T10647] sctp_copy_local_addr_list+0x30b/0x4e0 [ 215.959290][T10647] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 215.959316][T10647] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 215.959342][T10647] ? sctp_v6_is_any+0x64/0x80 [ 215.959380][T10647] ? sctp_copy_one_addr+0x93/0x360 [ 215.959409][T10647] sctp_bind_addr_copy+0xb3/0x3c0 [ 215.959435][T10647] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 215.959460][T10647] sctp_connect_new_asoc+0x2e0/0x690 [ 215.959494][T10647] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 215.959522][T10647] ? __local_bh_enable_ip+0x12d/0x1c0 [ 215.959560][T10647] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 215.959583][T10647] ? security_sctp_bind_connect+0x7e/0x2e0 [ 215.959613][T10647] sctp_sendmsg+0x155c/0x2810 [ 215.959655][T10647] ? __pfx_sctp_sendmsg+0x10/0x10 [ 215.959689][T10647] ? aa_sk_perm+0x81e/0x950 [ 215.959724][T10647] ? __pfx_aa_sk_perm+0x10/0x10 [ 215.959756][T10647] ? sock_rps_record_flow+0x19/0x410 [ 215.959781][T10647] ? inet_sendmsg+0x2f4/0x370 [ 215.959806][T10647] __sock_sendmsg+0x19c/0x270 [ 215.959841][T10647] __sys_sendto+0x3bd/0x520 [ 215.959868][T10647] ? __pfx___sys_sendto+0x10/0x10 [ 215.959889][T10647] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 215.959927][T10647] ? __fget_files+0x3a0/0x420 [ 215.959967][T10647] ? ksys_write+0x22a/0x250 [ 215.959995][T10647] ? __pfx_ksys_write+0x10/0x10 [ 215.960017][T10647] ? rcu_is_watching+0x15/0xb0 [ 215.960040][T10647] __x64_sys_sendto+0xde/0x100 [ 215.960067][T10647] do_syscall_64+0xfa/0x3b0 [ 215.960092][T10647] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.960112][T10647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.960133][T10647] ? clear_bhb_loop+0x60/0xb0 [ 215.960157][T10647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.960176][T10647] RIP: 0033:0x7fa600b8eec9 [ 215.960194][T10647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.960211][T10647] RSP: 002b:00007fa601adb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 215.960232][T10647] RAX: ffffffffffffffda RBX: 00007fa600de6090 RCX: 00007fa600b8eec9 [ 215.960247][T10647] RDX: 000000000002a0f5 RSI: 0000200000847fff RDI: 0000000000000006 [ 215.960260][T10647] RBP: 00007fa601adb090 R08: 000020000005ffe4 R09: 000000000000001c [ 215.960272][T10647] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 215.960284][T10647] R13: 00007fa600de6128 R14: 00007fa600de6090 R15: 00007ffc50602e28 [ 215.960315][T10647] [ 216.443805][T10661] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.172292][T10694] unsupported nlmsg_type 40 [ 217.189066][T10691] virt_wifi0 speed is unknown, defaulting to 1000 [ 217.280665][T10698] sctp: [Deprecated]: syz.2.1318 (pid 10698) Use of int in max_burst socket option deprecated. [ 217.280665][T10698] Use struct sctp_assoc_value instead [ 217.627094][T10717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1323'. [ 217.672792][T10701] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.843306][T10701] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.972321][T10701] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.989850][T10735] netlink: 'syz.2.1331': attribute type 1 has an invalid length. [ 218.103290][T10701] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.173593][T10741] vlan0: entered promiscuous mode [ 218.226805][T10742] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 218.239414][T10742] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 218.281354][T10735] vlan2: entered allmulticast mode [ 218.301265][T10735] bridge0: entered allmulticast mode [ 218.320438][T10735] bond3: (slave vlan2): Opening slave failed [ 218.389357][T10749] virt_wifi0 speed is unknown, defaulting to 1000 [ 218.518680][ T74] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.527159][ T74] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.606087][ T74] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.654604][ T74] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.905748][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 218.972439][T10764] bridge9: entered allmulticast mode [ 219.289322][T10777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1342'. [ 219.392470][T10782] virt_wifi0 speed is unknown, defaulting to 1000 [ 219.553929][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1344'. [ 219.780455][T10793] netlink: 'syz.0.1345': attribute type 10 has an invalid length. [ 219.808101][T10793] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.843892][T10793] bond0: (slave team0): Enslaving as an active interface with an up link [ 219.937146][T10797] tipc: Enabled bearer , priority 0 [ 219.956907][T10788] virt_wifi0 speed is unknown, defaulting to 1000 [ 219.965515][T10797] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 219.984621][T10797] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 220.011435][T10797] tipc: Resetting bearer [ 220.116069][T10797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1347'. [ 220.128705][T10797] tipc: Resetting bearer [ 220.247038][T10808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1351'. [ 220.309686][T10808] virt_wifi0 speed is unknown, defaulting to 1000 [ 220.352258][T10813] netlink: 'syz.0.1353': attribute type 1 has an invalid length. [ 220.494860][T10821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1354'. [ 220.540568][T10822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1354'. [ 220.974238][ T44] tipc: Node number set to 5284569 [ 221.150279][ T3494] tipc: Resetting bearer [ 221.157949][T10828] tipc: Resetting bearer [ 221.181699][T10828] tipc: Resetting bearer [ 221.671310][T10859] netlink: 'syz.2.1364': attribute type 10 has an invalid length. [ 221.679186][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1364'. [ 221.709362][T10862] netlink: 'syz.1.1366': attribute type 12 has an invalid length. [ 221.728481][T10862] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1366'. [ 221.743736][ T30] audit: type=1800 audit(1759334703.076:3): pid=10864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1365" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1501 res=0 errno=0 [ 221.789764][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1361'. [ 221.839124][T10862] netlink: 'syz.1.1366': attribute type 39 has an invalid length. [ 222.565436][T10897] netlink: 'syz.4.1375': attribute type 1 has an invalid length. [ 222.586296][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1376'. [ 222.677032][T10897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.816962][T10897] vlan0: entered allmulticast mode [ 222.830693][T10897] veth1: entered allmulticast mode [ 222.854991][T10897] bond2: (slave vlan0): making interface the new active one [ 222.884597][T10897] bond2: (slave vlan0): Enslaving as an active interface with an up link [ 223.078498][T10909] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 223.118206][T10909] bridge6: entered allmulticast mode [ 224.437896][T10969] ip6erspan0: entered promiscuous mode [ 224.967602][T11000] __nla_validate_parse: 6 callbacks suppressed [ 224.967624][T11000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1412'. [ 225.214530][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 225.223824][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 225.304839][T11004] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1414'. [ 225.571005][T11027] syz_tun: entered allmulticast mode [ 225.614443][T11026] syz_tun: left allmulticast mode [ 225.811818][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 225.863484][T11043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1424'. [ 226.034385][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 226.136048][T11043] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.143930][T11043] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.247152][T11043] wg1: left promiscuous mode [ 226.253555][T11043] wg1: left allmulticast mode [ 226.297446][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1431'. [ 226.547825][T11043] bridge9: left allmulticast mode [ 226.568059][T11054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1428'. [ 226.689461][T11055] hsr_slave_0: left promiscuous mode [ 226.725518][T11055] hsr_slave_1: left promiscuous mode [ 226.788029][ T3457] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.797480][ T3457] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.815924][ T3457] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.842088][ T3457] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.928104][T11096] netlink: 'syz.4.1440': attribute type 10 has an invalid length. [ 227.961259][T11096] dummy0: entered promiscuous mode [ 227.971558][T11096] team0: Port device dummy0 added [ 228.505629][T11121] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1447'. [ 228.527514][T11121] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 229.544854][T11156] sctp: [Deprecated]: syz.2.1461 (pid 11156) Use of int in max_burst socket option. [ 229.544854][T11156] Use struct sctp_assoc_value instead [ 229.772242][T11167] virt_wifi0 speed is unknown, defaulting to 1000 [ 229.912983][T11173] netlink: 'syz.0.1466': attribute type 11 has an invalid length. [ 230.015106][T11180] netlink: 'syz.2.1468': attribute type 1 has an invalid length. [ 230.050063][T11180] __nla_validate_parse: 5 callbacks suppressed [ 230.057472][T11180] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1468'. [ 230.181586][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1470'. [ 231.025320][T11214] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1477'. [ 231.213657][T11224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1480'. [ 231.250710][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 231.281582][T11226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1480'. [ 231.385110][T11226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1480'. [ 231.615966][T11237] IPVS: set_ctl: invalid protocol: 2 172.20.20.38:20000 [ 231.779941][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 232.256701][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 232.452076][T11268] netlink: 34 bytes leftover after parsing attributes in process `syz.3.1494'. [ 233.018269][T11296] virt_wifi0 speed is unknown, defaulting to 1000 [ 233.570561][T11316] netlink: 'syz.4.1506': attribute type 12 has an invalid length. [ 234.011125][T11328] macsec1: entered promiscuous mode [ 234.016540][T11328] macsec1: entered allmulticast mode [ 234.738278][T11385] virt_wifi0 speed is unknown, defaulting to 1000 [ 235.106398][T11408] virt_wifi0 speed is unknown, defaulting to 1000 [ 235.287491][T11410] virt_wifi0 speed is unknown, defaulting to 1000 [ 235.314868][T11400] nbd: must specify at least one socket [ 235.568204][T11420] __nla_validate_parse: 1 callbacks suppressed [ 235.568225][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1533'. [ 235.925428][T11436] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1538'. [ 236.240841][T11453] FAULT_INJECTION: forcing a failure. [ 236.240841][T11453] name failslab, interval 1, probability 0, space 0, times 0 [ 236.293913][T11453] CPU: 0 UID: 0 PID: 11453 Comm: syz.3.1545 Not tainted syzkaller #0 PREEMPT(full) [ 236.293944][T11453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 236.293957][T11453] Call Trace: [ 236.293966][T11453] [ 236.293977][T11453] dump_stack_lvl+0x189/0x250 [ 236.294007][T11453] ? __pfx____ratelimit+0x10/0x10 [ 236.294030][T11453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.294055][T11453] ? __pfx__printk+0x10/0x10 [ 236.294091][T11453] ? __pfx___might_resched+0x10/0x10 [ 236.294122][T11453] ? fs_reclaim_acquire+0x7d/0x100 [ 236.294160][T11453] should_fail_ex+0x414/0x560 [ 236.294198][T11453] should_failslab+0xa8/0x100 [ 236.294229][T11453] __kmalloc_noprof+0xcb/0x4f0 [ 236.294257][T11453] ? bpf_test_init+0x9f/0x150 [ 236.294284][T11453] bpf_test_init+0x9f/0x150 [ 236.294313][T11453] bpf_prog_test_run_xdp+0x49e/0x10e0 [ 236.294355][T11453] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 236.294386][T11453] ? __fget_files+0x2a/0x420 [ 236.294421][T11453] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 236.294449][T11453] bpf_prog_test_run+0x2c4/0x340 [ 236.294485][T11453] __sys_bpf+0x581/0x870 [ 236.294515][T11453] ? __pfx___sys_bpf+0x10/0x10 [ 236.294578][T11453] ? ksys_write+0x22a/0x250 [ 236.294620][T11453] ? __pfx_ksys_write+0x10/0x10 [ 236.294642][T11453] ? rcu_is_watching+0x15/0xb0 [ 236.294668][T11453] __x64_sys_bpf+0x7c/0x90 [ 236.294691][T11453] do_syscall_64+0xfa/0x3b0 [ 236.294713][T11453] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.294734][T11453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.294754][T11453] ? clear_bhb_loop+0x60/0xb0 [ 236.294778][T11453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.294798][T11453] RIP: 0033:0x7f860a78eec9 [ 236.294816][T11453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.294834][T11453] RSP: 002b:00007f860b5bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.294856][T11453] RAX: ffffffffffffffda RBX: 00007f860a9e5fa0 RCX: 00007f860a78eec9 [ 236.294870][T11453] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 236.294883][T11453] RBP: 00007f860b5bd090 R08: 0000000000000000 R09: 0000000000000000 [ 236.294895][T11453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.294906][T11453] R13: 00007f860a9e6038 R14: 00007f860a9e5fa0 R15: 00007fff6f492508 [ 236.294938][T11453] [ 236.688712][T11464] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1547'. [ 236.712941][T11469] netlink: 'syz.3.1548': attribute type 13 has an invalid length. [ 236.720941][T11469] netlink: 'syz.3.1548': attribute type 17 has an invalid length. [ 236.967022][T11469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.991208][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1552'. [ 237.001817][T11469] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.011296][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1552'. [ 237.022116][T11469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.358598][T11496] virt_wifi0 speed is unknown, defaulting to 1000 [ 238.155788][T11533] sch_fq: defrate 0 ignored. [ 238.248653][T11536] virt_wifi0 speed is unknown, defaulting to 1000 [ 238.336800][T11546] netlink: 'syz.2.1572': attribute type 1 has an invalid length. [ 238.494110][T11553] virt_wifi0 speed is unknown, defaulting to 1000 [ 238.736889][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1578'. [ 238.751335][T11566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.836141][T11570] ieee802154 phy1 wpan1: encryption failed: -22 [ 238.880534][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1580'. [ 238.988094][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1582'. [ 239.019872][ T30] audit: type=1107 audit(1759334720.336:4): pid=11578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='6ߤ<*neB,ǀJ[S`2*:,M{xy(__y0mGPiC—3MRbET:D5N6sKX`&J|bqCk͚>HSs S8@XYQJ4 qҏ-;Q8ߟl(nHP)GT a>4'p(AfMyGtm!dmL9@s [ 239.019872][ T30] )#^03 AJ|Iv' [ 239.552728][T11605] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 239.676522][T11607] netlink: 'syz.3.1592': attribute type 12 has an invalid length. [ 239.792907][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1593'. [ 239.944461][T11625] netlink: 'syz.2.1595': attribute type 16 has an invalid length. [ 239.952583][T11625] netlink: 'syz.2.1595': attribute type 17 has an invalid length. [ 240.079226][T11625] syz_tun: left promiscuous mode [ 240.097302][T11625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.107960][T11625] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.129873][T11625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.848433][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1608'. [ 241.096841][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1616'. [ 241.355556][T11691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1617'. [ 241.430403][T11691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1617'. [ 241.471323][T11703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1622'. [ 241.482427][T11703] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1622'. [ 241.726270][T11712] ieee802154 phy1 wpan1: encryption failed: -22 [ 241.754830][T11715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1625'. [ 242.130221][T11742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1636'. [ 242.351077][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1640'. [ 242.857026][T11789] netlink: 'syz.3.1651': attribute type 1 has an invalid length. [ 242.884966][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 243.043448][T11805] netlink: 'syz.2.1654': attribute type 10 has an invalid length. [ 243.080600][T11805] batadv_slave_1: entered promiscuous mode [ 243.098237][T11805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.142973][T11805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.206856][T11805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.207899][T11814] netlink: 'syz.3.1658': attribute type 1 has an invalid length. [ 243.243272][T11805] bridge0: port 3(batadv_slave_1) entered blocking state [ 243.244115][T11816] netlink: 'syz.3.1658': attribute type 1 has an invalid length. [ 243.250612][T11805] bridge0: port 3(batadv_slave_1) entered disabled state [ 243.250795][T11805] batadv_slave_1: entered allmulticast mode [ 243.505083][T11831] !: entered allmulticast mode [ 243.524227][T11833] netlink: 'syz.1.1663': attribute type 4 has an invalid length. [ 243.543543][T11829] !: left allmulticast mode [ 243.898459][T11861] ip6tnl3: entered promiscuous mode [ 243.921240][T11861] ip6tnl3: entered allmulticast mode [ 243.928152][T11861] team0: Device ip6tnl3 is of different type [ 244.088884][T11873] netlink: 'syz.0.1681': attribute type 1 has an invalid length. [ 244.252003][T11882] netlink: 'syz.2.1680': attribute type 4 has an invalid length. [ 245.046812][T11904] dvmrp0: entered allmulticast mode [ 245.600318][ T5866] Bluetooth: hci4: command 0x0405 tx timeout [ 246.060989][T11970] virt_wifi0 speed is unknown, defaulting to 1000 [ 246.365011][T11998] netlink: 'syz.4.1716': attribute type 2 has an invalid length. [ 246.758308][T12000] virt_wifi0 speed is unknown, defaulting to 1000 [ 246.901688][T12011] virt_wifi0 speed is unknown, defaulting to 1000 [ 246.926995][T12012] virt_wifi0 speed is unknown, defaulting to 1000 [ 246.962621][T12018] __nla_validate_parse: 13 callbacks suppressed [ 246.962647][T12018] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1722'. [ 247.437896][T12033] netlink: 'syz.4.1727': attribute type 58 has an invalid length. [ 247.464516][T12033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1727'. [ 247.938566][T12062] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1735'. [ 248.064128][T12044] batman_adv: batadv0: Removing interface: netdevsim0 [ 248.275742][T12081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1737'. [ 248.284172][T12071] virt_wifi0 speed is unknown, defaulting to 1000 [ 248.331887][T12081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1737'. [ 248.646906][T12113] netlink: 'syz.1.1741': attribute type 11 has an invalid length. [ 248.950610][T12126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1744'. [ 248.959666][T12126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1744'. [ 249.206151][T12139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1746'. [ 249.220548][T12128] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1745'. [ 249.268099][T12094] netlink: 'syz.4.1738': attribute type 6 has an invalid length. [ 249.297283][T12139] bond3: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 249.320639][T12139] bond3 (unregistering): Released all slaves [ 249.363972][T12128] syzkaller0 speed is unknown, defaulting to 1000 [ 249.402910][T12128] syzkaller0 speed is unknown, defaulting to 1000 [ 249.414756][T12119] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.423130][T12128] syzkaller0 speed is unknown, defaulting to 1000 [ 249.457075][T12128] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 249.639421][T12128] syzkaller0 speed is unknown, defaulting to 1000 [ 249.677029][T12128] syzkaller0 speed is unknown, defaulting to 1000 [ 249.700273][T12128] syzkaller0 speed is unknown, defaulting to 1000 [ 249.716075][T12128] syzkaller0 speed is unknown, defaulting to 1000 [ 249.794018][T12128] syzkaller0 speed is unknown, defaulting to 1000 [ 249.812021][T12128] syzkaller0 speed is unknown, defaulting to 1000 [ 249.820754][T12128] syzkaller0 speed is unknown, defaulting to 1000 [ 249.829279][T12128] syzkaller0 speed is unknown, defaulting to 1000 [ 249.845791][T12147] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.471450][T12178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1759'. [ 250.499088][T12181] netlink: 'syz.0.1761': attribute type 1 has an invalid length. [ 251.145511][T12200] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.173684][T12204] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.186442][T12204] team0: No ports can be present during mode change [ 251.211918][T12200] syzkaller0 speed is unknown, defaulting to 1000 [ 252.197728][T12231] __nla_validate_parse: 4 callbacks suppressed [ 252.197749][T12231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1773'. [ 252.573370][T12255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1779'. [ 252.657505][T12262] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1782'. [ 252.883403][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1786'. [ 252.952207][T12278] netlink: 'syz.2.1785': attribute type 16 has an invalid length. [ 252.960303][T12278] netlink: 'syz.2.1785': attribute type 17 has an invalid length. [ 252.978338][T12278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.989426][T12280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1788'. [ 253.014424][T12280] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1788'. [ 253.056968][T12283] syzkaller1: entered promiscuous mode [ 253.063526][T12283] syzkaller1: entered allmulticast mode [ 253.489586][T12294] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1794'. [ 253.504576][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 253.554974][T12298] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 253.950720][T12327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1799'. [ 254.234172][T12352] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1804'. [ 254.317657][T12354] virt_wifi0 speed is unknown, defaulting to 1000 [ 254.326202][T12354] syzkaller0 speed is unknown, defaulting to 1000 [ 254.544839][T12373] tipc: Enabled bearer , priority 0 [ 254.553250][T12373] syzkaller0: entered promiscuous mode [ 254.558904][T12373] syzkaller0: entered allmulticast mode [ 254.793250][T12382] tipc: Resetting bearer [ 254.907166][T12398] FAULT_INJECTION: forcing a failure. [ 254.907166][T12398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.908406][T12398] [ 254.908415][T12398] ====================================================== [ 254.908424][T12398] WARNING: possible circular locking dependency detected [ 254.908438][T12398] syzkaller #0 Not tainted [ 254.908448][T12398] ------------------------------------------------------ [ 254.908455][T12398] syz.2.1820/12398 is trying to acquire lock: [ 254.908466][T12398] ffffffff8e12e320 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 254.908517][T12398] [ 254.908517][T12398] but task is already holding lock: [ 254.908523][T12398] ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 254.908574][T12398] [ 254.908574][T12398] which lock already depends on the new lock. [ 254.908574][T12398] [ 254.908580][T12398] [ 254.908580][T12398] the existing dependency chain (in reverse order) is: [ 254.908588][T12398] [ 254.908588][T12398] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 254.908613][T12398] lock_acquire+0x120/0x360 [ 254.908637][T12398] _raw_spin_lock_nested+0x32/0x50 [ 254.908655][T12398] raw_spin_rq_lock_nested+0x2a/0x140 [ 254.908681][T12398] task_rq_lock+0xbc/0x470 [ 254.908705][T12398] cgroup_move_task+0x92/0x2a0 [ 254.908721][T12398] css_set_move_task+0x658/0x9e0 [ 254.908738][T12398] cgroup_post_fork+0x1ef/0x790 [ 254.908756][T12398] copy_process+0x3862/0x3c00 [ 254.908773][T12398] kernel_clone+0x21e/0x840 [ 254.908790][T12398] user_mode_thread+0xdd/0x140 [ 254.908809][T12398] rest_init+0x23/0x300 [ 254.908832][T12398] start_kernel+0x3a9/0x410 [ 254.908864][T12398] x86_64_start_reservations+0x24/0x30 [ 254.908884][T12398] x86_64_start_kernel+0x143/0x1c0 [ 254.908901][T12398] common_startup_64+0x13e/0x147 [ 254.908923][T12398] [ 254.908923][T12398] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 254.908948][T12398] lock_acquire+0x120/0x360 [ 254.908971][T12398] _raw_spin_lock_irqsave+0xa7/0xf0 [ 254.908988][T12398] try_to_wake_up+0x67/0x12b0 [ 254.909007][T12398] __wake_up_common_lock+0x137/0x1f0 [ 254.909029][T12398] tty_port_default_wakeup+0xa2/0xf0 [ 254.909048][T12398] serial8250_tx_chars+0x72e/0x970 [ 254.909066][T12398] serial8250_handle_irq+0x633/0xbb0 [ 254.909083][T12398] serial8250_default_handle_irq+0xbf/0x1e0 [ 254.909105][T12398] serial8250_interrupt+0x8d/0x160 [ 254.909130][T12398] __handle_irq_event_percpu+0x289/0x980 [ 254.909157][T12398] handle_irq_event+0x8b/0x1e0 [ 254.909177][T12398] handle_edge_irq+0x23b/0xa10 [ 254.909194][T12398] __common_interrupt+0x13e/0x1f0 [ 254.909219][T12398] common_interrupt+0xb6/0xe0 [ 254.909262][T12398] asm_common_interrupt+0x26/0x40 [ 254.909281][T12398] lock_is_held_type+0x137/0x190 [ 254.909301][T12398] file_close_fd_locked+0xe3/0x270 [ 254.909328][T12398] file_close_fd+0x5b/0x80 [ 254.909355][T12398] __x64_sys_close+0x3c/0x110 [ 254.909375][T12398] do_syscall_64+0xfa/0x3b0 [ 254.909396][T12398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.909414][T12398] [ 254.909414][T12398] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 254.909442][T12398] lock_acquire+0x120/0x360 [ 254.909467][T12398] _raw_spin_lock_irqsave+0xa7/0xf0 [ 254.909484][T12398] __wake_up_common_lock+0x2f/0x1f0 [ 254.909507][T12398] tty_port_default_wakeup+0xa2/0xf0 [ 254.909528][T12398] serial8250_tx_chars+0x72e/0x970 [ 254.909545][T12398] serial8250_handle_irq+0x633/0xbb0 [ 254.909563][T12398] serial8250_default_handle_irq+0xbf/0x1e0 [ 254.909587][T12398] serial8250_interrupt+0x8d/0x160 [ 254.909613][T12398] __handle_irq_event_percpu+0x289/0x980 [ 254.909646][T12398] handle_irq_event+0x8b/0x1e0 [ 254.909665][T12398] handle_edge_irq+0x23b/0xa10 [ 254.909682][T12398] __common_interrupt+0x13e/0x1f0 [ 254.909707][T12398] common_interrupt+0xb6/0xe0 [ 254.909748][T12398] asm_common_interrupt+0x26/0x40 [ 254.909766][T12398] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 254.909784][T12398] uart_port_unlock_deref+0x111/0x2f0 [ 254.909801][T12398] uart_write+0xe8/0x130 [ 254.909817][T12398] n_tty_write+0xd29/0x1200 [ 254.909840][T12398] file_tty_write+0x551/0xa20 [ 254.909878][T12398] vfs_write+0x5c6/0xb30 [ 254.909915][T12398] ksys_write+0x145/0x250 [ 254.909937][T12398] do_syscall_64+0xfa/0x3b0 [ 254.909958][T12398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.909976][T12398] [ 254.909976][T12398] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 254.910003][T12398] lock_acquire+0x120/0x360 [ 254.910028][T12398] _raw_spin_lock_irqsave+0xa7/0xf0 [ 254.910046][T12398] serial8250_console_write+0x17e/0x1ba0 [ 254.910066][T12398] console_flush_all+0x728/0xc40 [ 254.910084][T12398] console_unlock+0xc4/0x270 [ 254.910101][T12398] vprintk_emit+0x5b7/0x7a0 [ 254.910118][T12398] _printk+0xcf/0x120 [ 254.910152][T12398] register_console+0xa8b/0xf90 [ 254.910173][T12398] univ8250_console_init+0x3a/0x70 [ 254.910195][T12398] console_init+0x10e/0x430 [ 254.910214][T12398] start_kernel+0x254/0x410 [ 254.910241][T12398] x86_64_start_reservations+0x24/0x30 [ 254.910263][T12398] x86_64_start_kernel+0x143/0x1c0 [ 254.910283][T12398] common_startup_64+0x13e/0x147 [ 254.910307][T12398] [ 254.910307][T12398] -> #0 (console_owner){-.-.}-{0:0}: [ 254.910334][T12398] validate_chain+0xb9b/0x2140 [ 254.910351][T12398] __lock_acquire+0xab9/0xd20 [ 254.910377][T12398] lock_acquire+0x120/0x360 [ 254.910402][T12398] console_flush_all+0x6d2/0xc40 [ 254.910422][T12398] console_unlock+0xc4/0x270 [ 254.910438][T12398] vprintk_emit+0x5b7/0x7a0 [ 254.910454][T12398] _printk+0xcf/0x120 [ 254.910476][T12398] should_fail_ex+0x3f5/0x560 [ 254.910502][T12398] strncpy_from_user+0x36/0x290 [ 254.910527][T12398] strncpy_from_user_nofault+0x72/0x150 [ 254.910548][T12398] bpf_bprintf_prepare+0xbbc/0x13d0 [ 254.910571][T12398] bpf_trace_printk+0xdb/0x190 [ 254.910599][T12398] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 254.910616][T12398] bpf_trace_run2+0x284/0x4b0 [ 254.910638][T12398] __bpf_trace_contention_begin+0xdc/0x130 [ 254.910655][T12398] trace_contention_begin+0x114/0x140 [ 254.910675][T12398] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 254.910698][T12398] queued_spin_lock_slowpath+0x43/0x50 [ 254.910720][T12398] do_raw_spin_lock+0x21f/0x290 [ 254.910741][T12398] raw_spin_rq_lock_nested+0x2a/0x140 [ 254.910769][T12398] try_to_wake_up+0x635/0x12b0 [ 254.910789][T12398] kthread_queue_work+0xff/0x180 [ 254.910809][T12398] synchronize_rcu_expedited+0x4b5/0x730 [ 254.910829][T12398] synchronize_rcu+0x11a/0x310 [ 254.910846][T12398] bpf_dispatcher_change_prog+0xad2/0xc90 [ 254.910875][T12398] bpf_prog_test_run_xdp+0x6ef/0x10e0 [ 254.910896][T12398] bpf_prog_test_run+0x2c4/0x340 [ 254.910920][T12398] __sys_bpf+0x581/0x870 [ 254.910940][T12398] __x64_sys_bpf+0x7c/0x90 [ 254.910959][T12398] do_syscall_64+0xfa/0x3b0 [ 254.910981][T12398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.910999][T12398] [ 254.910999][T12398] other info that might help us debug this: [ 254.910999][T12398] [ 254.911006][T12398] Chain exists of: [ 254.911006][T12398] console_owner --> &p->pi_lock --> &rq->__lock [ 254.911006][T12398] [ 254.911049][T12398] Possible unsafe locking scenario: [ 254.911049][T12398] [ 254.911055][T12398] CPU0 CPU1 [ 254.911062][T12398] ---- ---- [ 254.911067][T12398] lock(&rq->__lock); [ 254.911079][T12398] lock(&p->pi_lock); [ 254.911092][T12398] lock(&rq->__lock); [ 254.911105][T12398] lock(console_owner); [ 254.911117][T12398] [ 254.911117][T12398] *** DEADLOCK *** [ 254.911117][T12398] [ 254.911131][T12398] 8 locks held by syz.2.1820/12398: [ 254.911149][T12398] #0: ffffffff8f53dee8 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x9c/0xc90 [ 254.911204][T12398] #1: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 254.911250][T12398] #2: ffff88814043a120 ((worker)->lock){....}-{2:2}, at: kthread_queue_work+0x31/0x180 [ 254.911296][T12398] #3: ffff88801d2ca828 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x67/0x12b0 [ 254.911343][T12398] #4: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 254.911395][T12398] #5: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 254.911443][T12398] #6: ffffffff8e12e380 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 254.911491][T12398] #7: ffffffff8e015c50 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 254.911536][T12398] [ 254.911536][T12398] stack backtrace: [ 254.911546][T12398] CPU: 0 UID: 0 PID: 12398 Comm: syz.2.1820 Not tainted syzkaller #0 PREEMPT(full) [ 254.911568][T12398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.911585][T12398] Call Trace: [ 254.911593][T12398] [ 254.911601][T12398] dump_stack_lvl+0x189/0x250 [ 254.911625][T12398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.911646][T12398] ? __pfx__printk+0x10/0x10 [ 254.911672][T12398] ? print_lock_name+0xde/0x100 [ 254.911699][T12398] print_circular_bug+0x2ee/0x310 [ 254.911720][T12398] check_noncircular+0x134/0x160 [ 254.911743][T12398] validate_chain+0xb9b/0x2140 [ 254.911792][T12398] __lock_acquire+0xab9/0xd20 [ 254.911841][T12398] ? console_flush_all+0x13a/0xc40 [ 254.911863][T12398] lock_acquire+0x120/0x360 [ 254.911892][T12398] ? console_flush_all+0x13a/0xc40 [ 254.911920][T12398] ? do_raw_spin_unlock+0x122/0x240 [ 254.911944][T12398] ? console_flush_all+0x13a/0xc40 [ 254.911968][T12398] console_flush_all+0x6d2/0xc40 [ 254.911991][T12398] ? console_flush_all+0x13a/0xc40 [ 254.912016][T12398] ? console_flush_all+0x13a/0xc40 [ 254.912043][T12398] ? __pfx_console_flush_all+0x10/0x10 [ 254.912073][T12398] ? is_printk_cpu_sync_owner+0x32/0x40 [ 254.912102][T12398] console_unlock+0xc4/0x270 [ 254.912124][T12398] ? __pfx_console_unlock+0x10/0x10 [ 254.912157][T12398] ? is_printk_cpu_sync_owner+0x32/0x40 [ 254.912186][T12398] vprintk_emit+0x5b7/0x7a0 [ 254.912207][T12398] ? __pfx_vprintk_emit+0x10/0x10 [ 254.912225][T12398] ? cmp_ex_search+0x1e/0x80 [ 254.912248][T12398] ? bsearch+0x95/0xc0 [ 254.912272][T12398] ? __pfx_cmp_ex_search+0x10/0x10 [ 254.912293][T12398] ? strncpy_from_user+0x1bc/0x290 [ 254.912320][T12398] ? search_extable+0x8f/0xd0 [ 254.912342][T12398] ? __pfx_search_extable+0x10/0x10 [ 254.912371][T12398] _printk+0xcf/0x120 [ 254.912397][T12398] ? __pfx____ratelimit+0x10/0x10 [ 254.912421][T12398] ? __pfx__printk+0x10/0x10 [ 254.912451][T12398] ? rb_read_data_buffer+0x4e8/0x580 [ 254.912480][T12398] should_fail_ex+0x3f5/0x560 [ 254.912511][T12398] strncpy_from_user+0x36/0x290 [ 254.912542][T12398] strncpy_from_user_nofault+0x72/0x150 [ 254.912566][T12398] bpf_bprintf_prepare+0xbbc/0x13d0 [ 254.912599][T12398] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 254.912628][T12398] ? bpf_trace_printk+0xc1/0x190 [ 254.912662][T12398] bpf_trace_printk+0xdb/0x190 [ 254.912693][T12398] ? __lock_acquire+0xab9/0xd20 [ 254.912723][T12398] ? __pfx_bpf_trace_printk+0x10/0x10 [ 254.912757][T12398] ? bpf_trace_run2+0x186/0x4b0 [ 254.912791][T12398] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 254.912809][T12398] bpf_trace_run2+0x284/0x4b0 [ 254.912832][T12398] ? bpf_trace_run2+0x186/0x4b0 [ 254.912858][T12398] ? __pfx_bpf_trace_run2+0x10/0x10 [ 254.912884][T12398] ? switch_ldt+0x10a/0x250 [ 254.912906][T12398] ? __pfx_switch_ldt+0x10/0x10 [ 254.912929][T12398] ? switch_ldt+0x10a/0x250 [ 254.912950][T12398] ? __bpf_trace_contention_begin+0xcd/0x130 [ 254.912973][T12398] __bpf_trace_contention_begin+0xdc/0x130 [ 254.913004][T12398] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 254.913022][T12398] ? switch_mm_irqs_off+0x5b6/0x7a0 [ 254.913066][T12398] ? get_flush_tlb_info+0x171/0x260 [ 254.913098][T12398] trace_contention_begin+0x114/0x140 [ 254.913121][T12398] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 254.913159][T12398] ? __lock_acquire+0xab9/0xd20 [ 254.913187][T12398] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 254.913225][T12398] queued_spin_lock_slowpath+0x43/0x50 [ 254.913251][T12398] do_raw_spin_lock+0x21f/0x290 [ 254.913275][T12398] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 254.913305][T12398] raw_spin_rq_lock_nested+0x2a/0x140 [ 254.913336][T12398] try_to_wake_up+0x635/0x12b0 [ 254.913360][T12398] ? kthread_insert_work+0x2b9/0x490 [ 254.913388][T12398] kthread_queue_work+0xff/0x180 [ 254.913413][T12398] ? bpf_dispatcher_xdp+0x800/0x1000 [ 254.913433][T12398] synchronize_rcu_expedited+0x4b5/0x730 [ 254.913456][T12398] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 254.913486][T12398] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 254.913522][T12398] ? __pfx___might_resched+0x10/0x10 [ 254.913553][T12398] ? __static_call_update+0x575/0x5d0 [ 254.913583][T12398] ? bpf_dispatcher_xdp+0x800/0x1000 [ 254.913601][T12398] synchronize_rcu+0x11a/0x310 [ 254.913622][T12398] ? __pfx_synchronize_rcu+0x10/0x10 [ 254.913648][T12398] ? bpf_dispatcher_xdp+0x800/0x1000 [ 254.913667][T12398] ? bpf_dispatcher_xdp+0x800/0x1000 [ 254.913685][T12398] bpf_dispatcher_change_prog+0xad2/0xc90 [ 254.913722][T12398] ? bpf_dispatcher_xdp+0x800/0x1000 [ 254.913741][T12398] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 254.913775][T12398] ? 0xffffffffa020174c [ 254.913791][T12398] ? 0xffffffffa02019d0 [ 254.913806][T12398] ? 0xffffffffa0201a14 [ 254.913821][T12398] ? 0xffffffffa0201a58 [ 254.913836][T12398] ? 0xffffffffa0203c98 [ 254.913851][T12398] ? 0xffffffffa02070d4 [ 254.913886][T12398] ? _copy_from_user+0x94/0xb0 [ 254.913913][T12398] ? bpf_test_init+0x113/0x150 [ 254.913934][T12398] ? xdp_convert_md_to_buff+0x5b/0x330 [ 254.913960][T12398] bpf_prog_test_run_xdp+0x6ef/0x10e0 [ 254.913993][T12398] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 254.914021][T12398] ? __fget_files+0x2a/0x420 [ 254.914053][T12398] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 254.914078][T12398] bpf_prog_test_run+0x2c4/0x340 [ 254.914108][T12398] __sys_bpf+0x581/0x870 [ 254.914134][T12398] ? __pfx___sys_bpf+0x10/0x10 [ 254.914175][T12398] ? ksys_write+0x22a/0x250 [ 254.914203][T12398] ? __pfx_ksys_write+0x10/0x10 [ 254.914227][T12398] ? rcu_is_watching+0x15/0xb0 [ 254.914249][T12398] __x64_sys_bpf+0x7c/0x90 [ 254.914272][T12398] do_syscall_64+0xfa/0x3b0 [ 254.914295][T12398] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.914317][T12398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.914339][T12398] ? clear_bhb_loop+0x60/0xb0 [ 254.914363][T12398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.914384][T12398] RIP: 0033:0x7fe31b98eec9 [ 254.914414][T12398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.914432][T12398] RSP: 002b:00007fe31c8d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.914453][T12398] RAX: ffffffffffffffda RBX: 00007fe31bbe5fa0 RCX: 00007fe31b98eec9 [ 254.914480][T12398] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 254.914493][T12398] RBP: 00007fe31c8d0090 R08: 0000000000000000 R09: 0000000000000000 [ 254.914505][T12398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.914517][T12398] R13: 00007fe31bbe6038 R14: 00007fe31bbe5fa0 R15: 00007ffe246860f8 [ 254.914541][T12398] [ 256.402431][T12398] CPU: 0 UID: 0 PID: 12398 Comm: syz.2.1820 Not tainted syzkaller #0 PREEMPT(full) [ 256.402453][T12398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 256.402463][T12398] Call Trace: [ 256.402471][T12398] [ 256.402480][T12398] dump_stack_lvl+0x189/0x250 [ 256.402502][T12398] ? __pfx____ratelimit+0x10/0x10 [ 256.402519][T12398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.402535][T12398] ? __pfx__printk+0x10/0x10 [ 256.402558][T12398] ? rb_read_data_buffer+0x4e8/0x580 [ 256.402579][T12398] should_fail_ex+0x414/0x560 [ 256.402603][T12398] strncpy_from_user+0x36/0x290 [ 256.402625][T12398] strncpy_from_user_nofault+0x72/0x150 [ 256.402644][T12398] bpf_bprintf_prepare+0xbbc/0x13d0 [ 256.402668][T12398] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 256.402689][T12398] ? bpf_trace_printk+0xc1/0x190 [ 256.402714][T12398] bpf_trace_printk+0xdb/0x190 [ 256.402737][T12398] ? __lock_acquire+0xab9/0xd20 [ 256.402758][T12398] ? __pfx_bpf_trace_printk+0x10/0x10 [ 256.402782][T12398] ? bpf_trace_run2+0x186/0x4b0 [ 256.402807][T12398] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 256.402821][T12398] bpf_trace_run2+0x284/0x4b0 [ 256.402839][T12398] ? bpf_trace_run2+0x186/0x4b0 [ 256.402857][T12398] ? __pfx_bpf_trace_run2+0x10/0x10 [ 256.402875][T12398] ? switch_ldt+0x10a/0x250 [ 256.402891][T12398] ? __pfx_switch_ldt+0x10/0x10 [ 256.402906][T12398] ? switch_ldt+0x10a/0x250 [ 256.402921][T12398] ? __bpf_trace_contention_begin+0xcd/0x130 [ 256.402938][T12398] __bpf_trace_contention_begin+0xdc/0x130 [ 256.402953][T12398] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 256.402967][T12398] ? switch_mm_irqs_off+0x5b6/0x7a0 [ 256.402989][T12398] ? get_flush_tlb_info+0x171/0x260 [ 256.403012][T12398] trace_contention_begin+0x114/0x140 [ 256.403029][T12398] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 256.403057][T12398] ? __lock_acquire+0xab9/0xd20 [ 256.403078][T12398] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 256.403101][T12398] queued_spin_lock_slowpath+0x43/0x50 [ 256.403120][T12398] do_raw_spin_lock+0x21f/0x290 [ 256.403138][T12398] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 256.403159][T12398] raw_spin_rq_lock_nested+0x2a/0x140 [ 256.403184][T12398] try_to_wake_up+0x635/0x12b0 [ 256.403202][T12398] ? kthread_insert_work+0x2b9/0x490 [ 256.403222][T12398] kthread_queue_work+0xff/0x180 [ 256.403257][T12398] ? bpf_dispatcher_xdp+0x800/0x1000 [ 256.403271][T12398] synchronize_rcu_expedited+0x4b5/0x730 [ 256.403307][T12398] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 256.403331][T12398] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 256.403358][T12398] ? __pfx___might_resched+0x10/0x10 [ 256.403382][T12398] ? __static_call_update+0x575/0x5d0 [ 256.403406][T12398] ? bpf_dispatcher_xdp+0x800/0x1000 [ 256.403420][T12398] synchronize_rcu+0x11a/0x310 [ 256.403436][T12398] ? __pfx_synchronize_rcu+0x10/0x10 [ 256.403456][T12398] ? bpf_dispatcher_xdp+0x800/0x1000 [ 256.403470][T12398] ? bpf_dispatcher_xdp+0x800/0x1000 [ 256.403484][T12398] bpf_dispatcher_change_prog+0xad2/0xc90 [ 256.403513][T12398] ? bpf_dispatcher_xdp+0x800/0x1000 [ 256.403528][T12398] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 256.403553][T12398] ? 0xffffffffa020174c [ 256.403565][T12398] ? 0xffffffffa02019d0 [ 256.403577][T12398] ? 0xffffffffa0201a14 [ 256.403588][T12398] ? 0xffffffffa0201a58 [ 256.403600][T12398] ? 0xffffffffa0203c98 [ 256.403612][T12398] ? 0xffffffffa02070d4 [ 256.403641][T12398] ? _copy_from_user+0x94/0xb0 [ 256.403662][T12398] ? bpf_test_init+0x113/0x150 [ 256.403679][T12398] ? xdp_convert_md_to_buff+0x5b/0x330 [ 256.403699][T12398] bpf_prog_test_run_xdp+0x6ef/0x10e0 [ 256.403727][T12398] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 256.403749][T12398] ? __fget_files+0x2a/0x420 [ 256.403776][T12398] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 256.403797][T12398] bpf_prog_test_run+0x2c4/0x340 [ 256.403821][T12398] __sys_bpf+0x581/0x870 [ 256.403842][T12398] ? __pfx___sys_bpf+0x10/0x10 [ 256.403868][T12398] ? ksys_write+0x22a/0x250 [ 256.403890][T12398] ? __pfx_ksys_write+0x10/0x10 [ 256.403909][T12398] ? rcu_is_watching+0x15/0xb0 [ 256.403927][T12398] __x64_sys_bpf+0x7c/0x90 [ 256.403945][T12398] do_syscall_64+0xfa/0x3b0 [ 256.403965][T12398] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.403983][T12398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.404000][T12398] ? clear_bhb_loop+0x60/0xb0 [ 256.404019][T12398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.404035][T12398] RIP: 0033:0x7fe31b98eec9 [ 256.404057][T12398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.404072][T12398] RSP: 002b:00007fe31c8d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 256.404090][T12398] RAX: ffffffffffffffda RBX: 00007fe31bbe5fa0 RCX: 00007fe31b98eec9 [ 256.404103][T12398] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 256.404114][T12398] RBP: 00007fe31c8d0090 R08: 0000000000000000 R09: 0000000000000000 [ 256.404125][T12398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.404135][T12398] R13: 00007fe31bbe6038 R14: 00007fe31bbe5fa0 R15: 00007ffe246860f8 [ 256.404155][T12398] [ 256.920608][T12371] tipc: Resetting bearer [ 256.967902][T12371] tipc: Disabling bearer [ 261.033773][ T1298] ieee802154 phy1 wpan1: encryption failed: -22