last executing test programs: 2.266479723s ago: executing program 3 (id=2076): syz_emit_ethernet(0x5a, &(0x7f0000000380)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x24, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x40, 0x5}, @window={0x3, 0x3, 0x80}]}}}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x10, 0x0}}], 0x2c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000000)=""/133, &(0x7f00000000c0)=0x85) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/131, 0x83}, {&(0x7f0000001400)=""/210, 0xd2}, {&(0x7f0000001500)=""/145, 0x91}], 0x5, &(0x7f0000001640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}], 0x1, 0x40000002, &(0x7f00000017c0)) 2.145690559s ago: executing program 1 (id=2078): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000000000000000003b0c000280051f0100000000003c0003800c00028005000106000000002c00018014000300fe8000000000000000000000000000bb14000400ff0200000000000000000000000000013c0002802c000180140003000000000000000000000000000000000014000400ff0200000000000000000000000000010c000280050001"], 0xc8}, 0x1, 0x0, 0x0, 0x1001}, 0x44) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/67, 0x43}, {&(0x7f0000000240)=""/101, 0x65}], 0x2, 0x0, 0x0, 0x10}, 0x40800) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) socket(0x1d, 0xa, 0x400) r5 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/15, 0x22}, {0x0}, {&(0x7f0000000380)=""/130}, {&(0x7f0000000440)=""/132}], 0x2}, 0x40000100) socket$alg(0x26, 0x5, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 2.086973246s ago: executing program 3 (id=2080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[], 0x174}, 0x1, 0x0, 0x0, 0x4044000}, 0xedbebf75c1354aed) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="24000000157089cf968a718db7645dee7fdc867be5cd70d6d1899ee63642d27a6fa63745491a12a635f9c06c2ae92eed20d9157fe4e9d879d9c62df9677816fa8d78af9881c1ca5b9751d60d99def5a15e5bb574acaf523a9e4ee3e4fbacfa5af950556a8e96e5ae3a9d5cca79cce22643c407ef990660904360ffa8415040a1b51074ee576aeea152387b1db8acb27a1b66898e9d44e22c8a96910f1e75256bdf6e18f77c55e81a13249538021793c8c12207739346a7eb9025635666124eca91e0be76", @ANYRES16=r3, @ANYBLOB="000129bd7000fedbdf2504000000050007000300000006001b004e210000"], 0x24}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240011030000000000000000010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4090, 0xffa}], 0x1}, 0xacd2}], 0x1, 0x10000, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) write$tun(r6, &(0x7f0000000400)=ANY=[@ANYRES16=r7, @ANYRESOCT=r0, @ANYRES32=r8], 0xfdef) connect$can_bcm(r4, &(0x7f0000000000), 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$can_bcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="0400000000000000000400000000000021f68abc8d2dbab9e0edc2104ea800e93c1d4426a4cb23cb85c1a6562764defcc8984c2789768bcc4ca69220ea91836d1a1e4763bba7ed6da60e828c6989e0ac7a475f0ff1bfac95a813a6c63bb2e36c0fdd495749c4e4a09facec851c513dadec0e6ad72d8238ab36d936b549d7419a7a3a0186fb08ceda6348e9fc9a452d1485b6cbf24b906f1e8410ddb84cfbf582252edf6e85b2517c565c3d22873af5d613c812", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000100040063bad47c2fbf2948"], 0x48}}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r10 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007110410000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x41000, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe58, 0x10, 0x0, 0xfffffffffffffd8b}, 0x53) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010229bd7000fedbdf25060000000c00018008000100", @ANYRES32=r11, @ANYBLOB="b46bffdb41fe6a3c0cfa3c462b98f44535962a29fa7c7b8ebbf63c4ec362d8db7ab49c614703af560bf51922f6bf8eded8832398040b8603a7af0a6ecfefcf3bff"], 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) 1.925096939s ago: executing program 2 (id=2083): ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) (async) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000001c0), 0x4) 1.87791598s ago: executing program 2 (id=2084): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x7, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r0, 0xffffffffffffffff, 0x7}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x40, 0x80, 0x10, 0x20000008, {{0x5, 0x4, 0x0, 0x20, 0x50, 0x66, 0x0, 0x80, 0x4, 0x0, @local, @multicast1}}}}) readv(r1, 0x0, 0x0) write$tun(r1, 0x0, 0x0) 1.868874727s ago: executing program 1 (id=2085): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103003a290100000000000000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8812}, 0x4000) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x2, 0x0, 0x4}}], 0x38, 0x4855}, 0x24000052) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r4}, 0x38) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r1, @ANYBLOB="f4347264071ecc2718d1499d013661182210272827d31695e13c3ead6822dd94f8ce22fc96477576c4bdb5951e59eeb34be8b3ec58ed6bf8fcb67f766a68b03461631b0913f678da6f41c61f75ef606ef70aa88ee0e4538880d248afdd5637407e36254f00d48239f9c44c6b2b99e4fefa348f", @ANYRES8=r3, @ANYRES32=r4], 0xc8}}, 0xc880) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000", 0x36}], 0x1) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f931", 0x38}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000200000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000001900)={0x58, 0xb, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'pim6reg\x00'}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc004805}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r8, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r8}, 0x20) close(r8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r9, &(0x7f0000000900)}, 0x20) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @rand_addr=0x64010101}, 0xc) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {0x0}, {&(0x7f00000008c0)=""/4119, 0x1017}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}], 0x9, 0x4022, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f00000001c0)={0x30bd, 0x6, 0x0, 0x7, 0x1, 0xc, 0x9, 0xfffffffb}, 0x20) 1.63515532s ago: executing program 1 (id=2089): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) (async) 1.501517427s ago: executing program 1 (id=2090): mmap(&(0x7f00008d9000/0x1000)=nil, 0x1000, 0xa, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, 0x0, 0x0, 0x40000c1) connect$tipc(r1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESOCT=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x5, 0x7) listen(r6, 0x8) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0xc0000) setsockopt(r7, 0x84, 0x7f, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)=0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901000000008095000000000000001801000020207525aa453659e62238075e3400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000002500f4fff0ffffffbf91000000000000b7020000030000008500000085000000b70000000000402c22c82cdda8a488da115d68a445f779af495ce69a46d0b9473dec62e4711f4381f326a3b29d670200f7"], &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r8) r9 = socket(0x40000000015, 0x5, 0x0) bind$inet(r9, 0x0, 0x0) 1.500743005s ago: executing program 2 (id=2091): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103003a290100000000000000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8812}, 0x4000) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x2, 0x0, 0x4}}], 0x38, 0x4855}, 0x24000052) (fail_nth: 4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r4}, 0x38) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r1, @ANYBLOB="f4347264071ecc2718d1499d013661182210272827d31695e13c3ead6822dd94f8ce22fc96477576c4bdb5951e59eeb34be8b3ec58ed6bf8fcb67f766a68b03461631b0913f678da6f41c61f75ef606ef70aa88ee0e4538880d248afdd5637407e36254f00d48239f9c44c6b2b99e4fefa348f", @ANYRES8=r3, @ANYRES32=r4], 0xc8}}, 0xc880) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000", 0x36}], 0x1) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f931", 0x38}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000200000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r8, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r8}, 0x20) close(r8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r9, &(0x7f0000000900)}, 0x20) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @rand_addr=0x64010101}, 0xc) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {0x0}, {&(0x7f00000008c0)=""/4119, 0x1017}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}], 0x9, 0x4022, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f00000001c0)={0x30bd, 0x6, 0x0, 0x7, 0x1, 0xc, 0x9, 0xfffffffb}, 0x20) 1.496624082s ago: executing program 4 (id=2092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) 1.450742434s ago: executing program 0 (id=2093): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, 0x0, 0x0) 1.443470089s ago: executing program 3 (id=2094): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f00000000c0)=0x68) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, 0x140d, 0x4, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004000}, 0x40040) (async) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x12288}, [@IFLA_LINK={0x8}]}, 0x28}}, 0x0) (async) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x884) 1.387620084s ago: executing program 4 (id=2095): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x7a, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f00000000c0)={0x38, "74649b36e2f640c5bb16e58f2350c1903b1b794bf83503b07745ce12e64080c1e9174bb37b35ed3f04a053d010b5be30b79bee63f2dd392d652357c7502d568d4f106779f5ad439fd1e0c6f5250cd7ebc7023334a9156631eafc31806d57a3330dd056d6b00c4738b8044f6b6ff1dab8c4d3ac472f0598ef00b148ae9920f60b"}) 1.233457097s ago: executing program 4 (id=2096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000380)="a6", 0x1}, {&(0x7f0000001100)="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", 0xf01}], 0x3, 0x6) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x14, &(0x7f0000000400)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0xe103}, @exit, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffff7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x7, 0x2, 0x0, r1}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f0000000300)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480280001800a00010071756f74610000001800028008000240000000000c000140000000000000086724000180090001006d6574610000000014000280080002400000001a08000140000000060900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) 1.087186872s ago: executing program 0 (id=2097): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x4a30, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) r4 = getpid() sendmsg$nl_generic(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x294, 0x27, 0x200, 0x70bd25, 0x25dfdbfb, {0x1d}, [@typed={0x8, 0x109, 0x0, 0x0, @str='..^\x00'}, @nested={0x11c, 0x6, 0x0, 0x1, [@generic="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", @nested={0x4, 0xf9}, @typed={0x8, 0x126, 0x0, 0x0, @uid=r2}, @generic="5d75af0847fea7d0d1cfebc05b0406641b"]}, @generic="f9f7adfa674788e003bffa", @typed={0x8, 0x110, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x112}, @nested={0x68, 0x60, 0x0, 0x1, [@nested={0x4, 0x9e}, @nested={0x4, 0xff}, @typed={0x8, 0x66, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x108}, @nested={0x4, 0xcd}, @nested={0x4, 0x65}, @generic="4525da347f2977ea3300e2cca5b3188908eb89ec8d62366e19292de45305c820098270dd36a1f18cd5bd893762ee6674888c97b4a047954b71823ebbf931ff12ad9a5c64", @nested={0x4, 0x40}]}, @typed={0x5, 0x1a, 0x0, 0x0, @str='\x00'}, @typed={0x26, 0x1f, 0x0, 0x0, @binary="fcff15de160e102377e30061e95741784b81e8f76469e5fa67905206e5c4f8c2a0a3"}, @generic="09be2ea001d9854a67558489baf567d7c2a09b3d5cd1d58d4e268f8558596297a3f5c74f1623c03785e1fc7f2c8f2b5f7e101bc72ef64f4c020ff742a94bd5561356471c0908fa1d3aaee29d904e7913e9eee4c4aae6b088ea6322d7970613a37dba48174aaa0e1cbcef529b2a222bc78e591c4bba71f53f5bfed3c8630e164dbfe9967d781f4524ed77824223678e1b857d113cf61269e8db68cd8005d4af46", @nested={0xc, 0xda, 0x0, 0x1, [@typed={0x8, 0x5d, 0x0, 0x0, @u32=0x5}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x24008004}, 0x80) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000500), 0x3) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r6, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffcf0e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000006c0)="bfe4e2c15c8eb6bfb13b1c320b9bd83d", 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000700)={0x0, 0x1383, 0x7e4}, &(0x7f0000000740)=0x8) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044090}, 0x800) r9 = socket$netlink(0x10, 0x3, 0xa) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xb4, r10, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'team0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg0\x00'}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000001}, 0x20000000) r12 = socket(0x9, 0x1, 0x2) setsockopt$inet6_buf(r12, 0x29, 0x2d, &(0x7f0000000ac0)="22b4e512b8024c42582e8c66c73aacac59db6c22aa5d3aad4bcadd32f55870ee69eda7636e44bea47e69735d354180495ff89658f7cb95f16ed62eed117576e66a7cd3c9e4e0db7a9585f1b19a99de070b16f7e93a4c96063cd572cd862790", 0x5f) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r13, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r14, 0x5548bfc92de96c2e, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d00), r15) getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000000d40)={0x0, @multicast2, @empty}, &(0x7f0000000d80)=0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r16, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x60, r17, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2412}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r18}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20080}, 0x800) 989.359415ms ago: executing program 4 (id=2098): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f0000000380)="d8990ef9b33a") r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="06000300020000000000008988a8e46686dd", 0x0, 0x101, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) pselect6(0x40, &(0x7f0000000040)={0x10, 0x4, 0x80000000000, 0x3, 0x0, 0xffffffffffffffff, 0x10, 0x8f}, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) writev(r3, &(0x7f0000002c00)=[{&(0x7f0000002940)="59721f1223e8d1f829bfa3e27a317bdab2973149c7b70b981e5e3dbd2a155a52d656b4905bdd", 0x26}], 0x1) ioctl$sock_proto_private(0xffffffffffffffff, 0x8b27, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="198000f20300000000000000000000fffffd0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffeab, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20044090}, 0x41) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4000880) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4090) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000040)={0x0, @multicast}) socket$nl_generic(0x10, 0x3, 0x10) 897.77861ms ago: executing program 3 (id=2099): r0 = socket$netlink(0x10, 0x3, 0xb) close(r0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d00000000009500000000000000e2981e9e6b3d3f831e9c7e3a6ca629f981c399"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (rerun: 64) 897.206005ms ago: executing program 2 (id=2100): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0x1}, 0x50) socket$inet6(0xa, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x11, 0x80a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) close(r4) write(r2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$tcp_mem(r1, &(0x7f0000000140)={0x5, 0x20, 0x3, 0x20, 0x1ff}, 0x48) 840.062374ms ago: executing program 0 (id=2101): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x1d8, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x1a0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c09aa090c54ef42b0f66a272813dbf21"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0xd8, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8649}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x358000000000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c91bbce82508eede42adc8dd851880f3"}, @NL802154_KEY_ATTR_ID={0x8c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}]}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "28cf73a26b4ac109e0584720b888993e"}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000854}, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rpcgss_upcall_msg\x00', r4, 0x0, 0x3}, 0x18) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) close(0x3) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="011027bd7000fedbdf252700000008000300", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x840) (async, rerun: 64) bind$unix(r6, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) (async, rerun: 64) close(r6) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {0xffff, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_red={{0x8}, {0xc, 0x2, [@TCA_RED_MAX_P={0x8}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) (async) r10 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r10, 0x8919, 0x0) (async) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f00000000c0)={r9, 0x1, 0x6, @remote}, 0x10) (async, rerun: 64) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 64) 637.177806ms ago: executing program 4 (id=2102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000390400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000e0522a77660b900e000000280012800b000100697036746e6c00001800028014000300ff010000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) epoll_create1(0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x64, r3, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3ff, 0x63}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x2, 0x4, 0x0, {0x7, 0x7, 0x0, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x400, 0x200, 0xb}}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x1454}, 0x4000004) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20044014) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0xffff0001, 0x25dfdbfe}, 0x1c}}, 0x1) recvmmsg(r6, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)=""/2, 0x2}, {&(0x7f0000000540)=""/65, 0x41}], 0x2}, 0x913f}], 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r7 = socket$netlink(0x10, 0x3, 0x13) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x4c, r3, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40881}, 0x8ae454779deac78b) pipe(0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000140)={'geneve0\x00', 0xfff9}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pread64(0xffffffffffffffff, &(0x7f0000001840)=""/4096, 0x1000, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8801, 0x31863}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 533.730676ms ago: executing program 0 (id=2103): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="760a0000000000006111680000000000180000000000000000000000000000009500000000000000cb91c6a0b65bba45838306431c857645fca8c1e796df4a680462705b96f98ea484147aef089a156e7762b3e235db8445573b178383932851c48f99fb43"], &(0x7f0000000000)='GPL\x00'}, 0x94) 532.540432ms ago: executing program 3 (id=2104): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086088a84803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14) (async) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086088a84803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000000310480000000000630a04ff100021834421816400009500"], &(0x7f0000000600)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x18e6841}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="a0e8c75e39bf222bb233e21878dc9f754ecb37ae653f73f8f94cd2520a8b27c099710eb440673fb5e0facb35a55893a3253afa7d7062ba9def0db647f408119ae8dfb5d36938db61b226aadfa0702e5ec876a178ca6a016e0dcabb0ba715da9912b593c4d816c19d1830ce1681260cc3a8bb7b0ad68772500cc6b49def2d0cdd299d236d134e2e72c2db2e31bf9d66586b214903e92690e5fbef754c4d955f2205753efbb162e51f67cb6faedb391f33201e8151f43cef291066ff3c27ee314b3415c38f0f2077dd89fece93caa4d7102f1962b9b17a91fc5b5b91bdfbf2a9cc9ba73a0ab0f9", @ANYRES8=r1, @ANYRES8=r2, @ANYRESOCT=r6, @ANYBLOB="4bd38d893e6d620c88505b158a2155e24b60a2ae7af4a1c8b7a5", @ANYRES8=r4, @ANYBLOB="23c015fbdd48e7d0a3652d06242211a8d4f255a3a7d4ca0837cdd522e8a14a8eb07e6bd117469e74f61809cd276d6f40404ab43d6f8ae58c3065504a1fb33771a23c6ac4c1f527b2bc453bec6221ecbd22bf2240ca16aa4e3e9ca52f91227f471f9217c59bcf609d36ccc85d321ae36e711b559d5ed4bc35f99a5e57743aac", @ANYRESOCT=r5, @ANYBLOB="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"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='ext4_evict_inode\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="6a0500000000000079107c0000000000050001000000000095fdffffff000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000740), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="6a0500000000000079107c0000000000050001000000000095fdffffff000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000740), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r13, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={0x0, 0x14}}, 0x4c884) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r10) sendmsg$L2TP_CMD_SESSION_GET(r10, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010027bd7000fddbdf2508000000050012000000000006001b006f200000"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x8010) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0xffffffffffffffce, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x26}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0xffff, 0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0xffffffffffffffce, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x26}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 367.961854ms ago: executing program 0 (id=2105): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x9, 0x1, 0x6, 0x0, 0x0, [{{r1}, 0x3}, {{}, 0x7fff}, {{}, 0x1}, {{r2}, 0x7}, {{r3}, 0xe77}, {{r4}, 0x5}]}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f00000001c0)=""/227, &(0x7f00000002c0)=0xe3) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3f7, 0x1, 0x70bd28, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd25, 0x25dfdbfd, {0x2, 0x10, 0x0, 0x1, 0x106, 0x3, 0x0, 0x5, 0x1000}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c084}, 0x40040) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r8, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x80) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r6, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0], 0x0, 0x33, &(0x7f0000000980)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x1d, 0x20, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x0, 0x9, 0x9, 0x8, 0x20, 0x8}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='GPL\x00', 0xd, 0x28, &(0x7f0000000780)=""/40, 0x41000, 0x42, '\x00', r9, 0x1b, r6, 0x8, &(0x7f0000000840)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x10, 0xb7, 0xffff}, 0x10, r10, 0x0, 0x4, &(0x7f0000000bc0)=[r6], &(0x7f0000000c00)=[{0x1, 0x5, 0xb, 0x4}, {0x4, 0x2, 0x2, 0xc}, {0x5, 0x1, 0xa, 0x5}, {0x1, 0x3, 0x0, 0x2}], 0x10, 0x3ff}, 0x94) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000d00)={0x0, 0x7}, &(0x7f0000000d40)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r11, 0x84, 0x17, &(0x7f0000000d80)={r12, 0x9, 0x4e, "bb04c29bde95b395dcfefa89b9acfaff6902ae98d310473758f3650350fec82d480a2e5d32248ca56732028ef239c9f2b07fe3c417b242eaef1e673c8f67220033de4f78e57a49030a23d4295064"}, 0x56) sendmmsg$alg(r6, &(0x7f0000001180)=[{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="6c1171478a225d769fa71e7d05b4f7bfde73d4cb37db17c2ad3e5bd0e8622d928f9ba7b3a74462f027f6aeaf14661ab846b17c2322e7e42bd30abebe80bee1d7e43a0e87fd03b9451eb2fa83cd448ffb8d96b731352d936d1df040894f1fd9d7173bcf53dc0ae72784d4118001003f5816a3b170c0c3cfbb5c3f45d9303510667c9ab1019538a32b7b687bd4289fc3bfe097c8ddf8d731", 0x97}, {&(0x7f0000000ec0)="17d6e0bb2d1aa64ce81c7667ad0461", 0xf}], 0x2, &(0x7f0000000f40)=[@iv={0x90, 0x117, 0x2, 0x75, "193ffb466bbbd03beb2b84a159ed99a3941c98a034987daa4b5f0e87ce69deae7aab2f20d5f1fcd68181c3c374ceaf78681af6ab32956969944356531de49bab7ee4fd74287c6fbe3d41df94b484ff7845c85ea597fd553e91377211c0409c598801c3a565ad7f8bcd21199c0d369baa34cdf2495c"}, @iv={0x98, 0x117, 0x2, 0x81, "b7c67d812908b7ddeaebb1b4a6d09ce956358ae12e49f8b78be032c1893de1d5bd1c6ce4f5016d935d6137b5a4c91b0af851da19df4b7cd6be6ace715d51ccf78fc34f826bbca1b6c2ff7a82d8c23d4e50480263fd993649f522cf8c3ae81a6fb9dfbbda3feb78db76c1e28a999e3cd8d675829454eead42abf5d4dcee123b9fb1"}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0xb8, 0x117, 0x2, 0x9d, "8d2b3fcab9ec21062121e8c6e9fedf47bdae495f7ea06403f8c067a2a0a7a21998f862aea1c20a02487ec9c8ee00daccfd3b041aa41afe12ab73d8a66cdc54b0c5816a72ca6a99b8504719effb7a4f405be3f7fee22869bea6438d2c889547b09ebbc3a8e7fb1d6bda41a16ff26529ffef34c63358e7487d7da0fd6125e8dd9423ec5985ecd08081eaa4ccf90e8301e1f50f86ddf634f9565323d74109"}, @op={0x18, 0x117, 0x3, 0x1}], 0x210, 0x800}], 0x1, 0x40000) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000011c0)=@int=0x7f, 0x4) r13 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000001200)={r12, 0x38}, &(0x7f0000001240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r13, 0x84, 0x11, &(0x7f0000001280)={r14, 0x1}, 0x8) accept$netrom(r6, &(0x7f00000012c0)={{0x3, @bcast}, [@null, @default, @bcast, @default, @rose, @bcast, @default]}, &(0x7f0000001340)=0x48) socket$inet6(0xa, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x4, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x5}, {0x10, 0x4}, {0x9, 0x2}, {0xc, 0x1}, {0x1, 0x4}]}, @var={0x8, 0x0, 0x0, 0xe, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @ptr={0xc, 0x0, 0x0, 0x2, 0x3}, @volatile={0x5}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x39, 0x3f46a063afa749f5}, @const={0x10}, @const={0xa, 0x0, 0x0, 0xa, 0x3}, @ptr={0xc, 0x0, 0x0, 0x2, 0x3}, @func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000001480)=""/170, 0xd0, 0xaa, 0x0, 0x1000, 0x10000, @value=r6}, 0x28) getsockname(0xffffffffffffffff, &(0x7f0000001580)=@rc={0x1f, @fixed}, &(0x7f0000001600)=0x80) 338.59854ms ago: executing program 1 (id=2106): syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x244, r0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2000}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0xa}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x400}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x47da}, {0x8, 0x15, 0xfde}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x55b}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x4}}]}, 0x244}, 0x1, 0x0, 0x0, 0x10}, 0x10000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x10}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff86}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x401, 0x17}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40800) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xdc, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}]}], @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_SSID={0x9, 0x34, @random="7cbc9ca350"}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "868c03fdb77f65a804cd212c05392f"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "89dae1538511f5e66ac37dfc74"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1af8c8b05977d1f28a89899ae9"}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xdc}, 0x1, 0x0, 0x0, 0xe040}, 0x48010) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000007c0)={0x0, 0x2}, &(0x7f0000000800)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000840)={r5, 0x2}, &(0x7f0000000880)=0x8) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000008c0)={r4, 0x8001, 0x1, 0x3ff}) write$bt_hci(r6, &(0x7f0000000900)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x79}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x6, 0x7, 0x7, 0x12, r4, 0xffff00, '\x00', 0x0, r6, 0x1, 0x1, 0x5, 0xd}, 0x50) r8 = accept4$tipc(r6, &(0x7f0000000ac0)=@id, &(0x7f0000000b00)=0x10, 0x80800) ioctl$BTRFS_IOC_RM_DEV(r8, 0x5000940b, &(0x7f0000000b40)={{r4}, "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"}) getsockname$packet(r4, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b80)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001bc0)={0x1b, 0x0, 0x0, 0x2, 0x0, r7, 0x0, '\x00', r9, r6, 0x1, 0x5, 0x2}, 0x50) sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0xc800008}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x50, r1, 0x10, 0x200, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x2000c800) openat$tun(0xffffffffffffff9c, &(0x7f0000001d80), 0x10000, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000001dc0)={0xffffffffffffffff, 0x8, 0xb4, 0xc0000000, @vifc_lcl_ifindex=r9, @local}, 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0) preadv(r10, &(0x7f0000002e40)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1, 0x1, 0x9) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002ec0), r4) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000003040)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003000)={&(0x7f0000002f00)={0xe0, r11, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x26}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000041) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb, 0x80010, r10, 0x6a59c000) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000003080)={r9, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 229.513628ms ago: executing program 3 (id=2107): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast1}], 0x40) sendto$inet(r2, &(0x7f0000000300)="fa", 0x1, 0x44054, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e000000", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$inet(0x2, 0x3, 0x7) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f900000005000400400000000500", @ANYRES32], 0x6c}}, 0x40) 222.181886ms ago: executing program 4 (id=2108): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @broadcast}], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x24) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x24) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) (async) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r7 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r7, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x40) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e23, @empty}}, 0x4, 0x3}, &(0x7f0000000100)=0x90) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e23, @empty}}, 0x4, 0x3}, &(0x7f0000000100)=0x90) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 77.269346ms ago: executing program 1 (id=2109): socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f00000000c0)={@private=0xa010102, @local, 0x0, "dc29bab1e36691aafe7c31452411349934414f1ce3bdee556671fb58b3c10571", 0x724, 0xff, 0x1, 0x100}, 0x3c) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0x9, [@typedef={0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x7fff, 0x4, 0x101}}, @datasec={0x7, 0x6, 0x0, 0xf, 0x1, [{0x2, 0x9, 0x4}, {0x5, 0xfff, 0xd}, {0x1, 0x1, 0x4}, {0x3, 0x4, 0xb10}, {0x1, 0x7f7, 0x2}, {0x2, 0x5, 0xe}], "f7"}, @typedef={0x10, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x61, 0x5f, 0x0, 0x61, 0x61, 0x61]}}, &(0x7f0000000580)=""/97, 0xa9, 0x61, 0x0, 0x6, 0x10000}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0xfffffffe, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x20, &(0x7f0000fee000)=0x3fa, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000010900010000002c0004802800018007000100637400001c0002800800014000000001050003009a00000008000240000000010900020073797a3200000000140000001100010000000000000000000a00000a000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40894}, 0x10000000) r11 = getpid() r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r13, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) r15 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r11, r14, r15}, 0xc) 75.748914ms ago: executing program 2 (id=2110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) 15.500588ms ago: executing program 0 (id=2111): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103003a290100000000000000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8812}, 0x4000) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x2, 0x0, 0x4}}], 0x38, 0x4855}, 0x24000052) (fail_nth: 5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r4}, 0x38) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r1, @ANYBLOB="f4347264071ecc2718d1499d013661182210272827d31695e13c3ead6822dd94f8ce22fc96477576c4bdb5951e59eeb34be8b3ec58ed6bf8fcb67f766a68b03461631b0913f678da6f41c61f75ef606ef70aa88ee0e4538880d248afdd5637407e36254f00d48239f9c44c6b2b99e4fefa348f", @ANYRES8=r3, @ANYRES32=r4], 0xc8}}, 0xc880) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000", 0x36}], 0x1) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f931", 0x38}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000200000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r8, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r8}, 0x20) close(r8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r9, &(0x7f0000000900)}, 0x20) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @rand_addr=0x64010101}, 0xc) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {0x0}, {&(0x7f00000008c0)=""/4119, 0x1017}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}], 0x9, 0x4022, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f00000001c0)={0x30bd, 0x6, 0x0, 0x7, 0x1, 0xc, 0x9, 0xfffffffb}, 0x20) 0s ago: executing program 2 (id=2112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES16=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000240)='btrfs_find_cluster\x00', 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0xfffffffffffffea9, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}, 0x6}], 0x1, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x8100, 0x0, {0x8}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r5, r5, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x405, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x8}, {0x3, 0x3, 0x0, 0x4}], 0x10, 0x5}, 0x94) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c0500080002"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="1bd9164d3c0000008f79783594790b56cb762f65d8b6b82d37e829e39c6203cfdb0099942ccf9cee108a3676189328f2a224b9747e691ad77029444acd6ad7861fc15cacb9bb01a5006e6e1ba2184e50536fb66346824f6aa4c2bdd53458f59f99", @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a00340002020202020200000a000600080211000000"], 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x2e) kernel console output (not intermixed with test programs): 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.816551][ T8754] RSP: 002b:00007fa4325a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.816573][ T8754] RAX: ffffffffffffffda RBX: 00007fa4319e5fa0 RCX: 00007fa43178eec9 [ 167.816588][ T8754] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 167.816601][ T8754] RBP: 00007fa4325a2090 R08: 0000000000000000 R09: 0000000000000000 [ 167.816613][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.816625][ T8754] R13: 00007fa4319e6038 R14: 00007fa4319e5fa0 R15: 00007ffe44384668 [ 167.816658][ T8754] [ 167.851451][ T8756] Bluetooth: MGMT ver 1.23 [ 168.007272][ T8758] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1054'. [ 168.166255][ T8756] netlink: 'syz.1.1054': attribute type 2 has an invalid length. [ 168.516412][ T8784] FAULT_INJECTION: forcing a failure. [ 168.516412][ T8784] name failslab, interval 1, probability 0, space 0, times 0 [ 168.599046][ T8784] CPU: 1 UID: 0 PID: 8784 Comm: syz.0.1063 Not tainted syzkaller #0 PREEMPT(full) [ 168.599074][ T8784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.599086][ T8784] Call Trace: [ 168.599094][ T8784] [ 168.599102][ T8784] dump_stack_lvl+0x189/0x250 [ 168.599131][ T8784] ? __pfx____ratelimit+0x10/0x10 [ 168.599162][ T8784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.599186][ T8784] ? __pfx__printk+0x10/0x10 [ 168.599222][ T8784] ? __pfx___might_resched+0x10/0x10 [ 168.599249][ T8784] should_fail_ex+0x414/0x560 [ 168.599282][ T8784] should_failslab+0xa8/0x100 [ 168.599317][ T8784] __kmalloc_cache_noprof+0x70/0x3d0 [ 168.599341][ T8784] ? sctp_association_new+0x89/0x25f0 [ 168.599375][ T8784] sctp_association_new+0x89/0x25f0 [ 168.599406][ T8784] ? sctp_has_association+0x1cd/0x1f0 [ 168.599435][ T8784] ? sctp_has_association+0x2f/0x1f0 [ 168.599466][ T8784] ? __ipv6_addr_type+0x247/0x2f0 [ 168.599492][ T8784] sctp_connect_new_asoc+0x2c5/0x690 [ 168.599524][ T8784] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 168.599552][ T8784] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 168.599579][ T8784] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 168.599604][ T8784] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 168.599632][ T8784] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 168.599654][ T8784] ? security_sctp_bind_connect+0x7e/0x2e0 [ 168.599681][ T8784] sctp_sendmsg+0x155c/0x2810 [ 168.599722][ T8784] ? __pfx_sctp_sendmsg+0x10/0x10 [ 168.599752][ T8784] ? aa_sk_perm+0x81e/0x950 [ 168.599784][ T8784] ? __pfx_aa_sk_perm+0x10/0x10 [ 168.599813][ T8784] ? sock_rps_record_flow+0x19/0x410 [ 168.599846][ T8784] ? inet_sendmsg+0x2f4/0x370 [ 168.599874][ T8784] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.599907][ T8784] __sock_sendmsg+0x19c/0x270 [ 168.599940][ T8784] __sys_sendto+0x3bd/0x520 [ 168.599964][ T8784] ? __pfx___sys_sendto+0x10/0x10 [ 168.599982][ T8784] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 168.600018][ T8784] ? __fget_files+0x3a0/0x420 [ 168.600055][ T8784] ? ksys_write+0x22a/0x250 [ 168.600082][ T8784] ? __pfx_ksys_write+0x10/0x10 [ 168.600101][ T8784] ? rcu_is_watching+0x15/0xb0 [ 168.600129][ T8784] __x64_sys_sendto+0xde/0x100 [ 168.600154][ T8784] do_syscall_64+0xfa/0x3b0 [ 168.600173][ T8784] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.600202][ T8784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.600222][ T8784] ? clear_bhb_loop+0x60/0xb0 [ 168.600247][ T8784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.600266][ T8784] RIP: 0033:0x7fbba338eec9 [ 168.600283][ T8784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.600306][ T8784] RSP: 002b:00007fbba427d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 168.600327][ T8784] RAX: ffffffffffffffda RBX: 00007fbba35e5fa0 RCX: 00007fbba338eec9 [ 168.600343][ T8784] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 168.600355][ T8784] RBP: 00007fbba427d090 R08: 000020000005ffe4 R09: 000000000000001c [ 168.600369][ T8784] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001 [ 168.600381][ T8784] R13: 00007fbba35e6038 R14: 00007fbba35e5fa0 R15: 00007ffd01331ee8 [ 168.600415][ T8784] [ 169.121925][ T8794] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 169.129709][ T8794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.352001][ T8798] FAULT_INJECTION: forcing a failure. [ 169.352001][ T8798] name failslab, interval 1, probability 0, space 0, times 0 [ 169.366825][ T8798] CPU: 0 UID: 0 PID: 8798 Comm: syz.0.1070 Not tainted syzkaller #0 PREEMPT(full) [ 169.366851][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 169.366863][ T8798] Call Trace: [ 169.366870][ T8798] [ 169.366877][ T8798] dump_stack_lvl+0x189/0x250 [ 169.366906][ T8798] ? __pfx____ratelimit+0x10/0x10 [ 169.366935][ T8798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.366960][ T8798] ? __pfx__printk+0x10/0x10 [ 169.366993][ T8798] ? __lock_acquire+0xab9/0xd20 [ 169.367022][ T8798] should_fail_ex+0x414/0x560 [ 169.367056][ T8798] should_failslab+0xa8/0x100 [ 169.367084][ T8798] kmem_cache_alloc_noprof+0x73/0x3c0 [ 169.367108][ T8798] ? sctp_get_port_local+0x6d3/0x1680 [ 169.367142][ T8798] sctp_get_port_local+0x6d3/0x1680 [ 169.367185][ T8798] ? __pfx_sctp_get_port_local+0x10/0x10 [ 169.367217][ T8798] ? sctp_bind_addr_match+0x28b/0x2b0 [ 169.367247][ T8798] sctp_do_bind+0x4ea/0x940 [ 169.367296][ T8798] sctp_connect_new_asoc+0x25c/0x690 [ 169.367328][ T8798] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 169.367354][ T8798] ? __local_bh_enable_ip+0x12d/0x1c0 [ 169.367384][ T8798] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 169.367404][ T8798] ? security_sctp_bind_connect+0x7e/0x2e0 [ 169.367431][ T8798] sctp_sendmsg+0x155c/0x2810 [ 169.367472][ T8798] ? __pfx_sctp_sendmsg+0x10/0x10 [ 169.367503][ T8798] ? aa_sk_perm+0x81e/0x950 [ 169.367536][ T8798] ? __pfx_aa_sk_perm+0x10/0x10 [ 169.367566][ T8798] ? sock_rps_record_flow+0x19/0x410 [ 169.367600][ T8798] ? inet_sendmsg+0x2f4/0x370 [ 169.367635][ T8798] __sock_sendmsg+0x19c/0x270 [ 169.367668][ T8798] ____sys_sendmsg+0x505/0x830 [ 169.367699][ T8798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.367734][ T8798] ? import_iovec+0x74/0xa0 [ 169.367758][ T8798] ___sys_sendmsg+0x21f/0x2a0 [ 169.367782][ T8798] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.367843][ T8798] ? __fget_files+0x2a/0x420 [ 169.367868][ T8798] ? __fget_files+0x3a0/0x420 [ 169.367907][ T8798] __x64_sys_sendmsg+0x19b/0x260 [ 169.367934][ T8798] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.367969][ T8798] ? __pfx_ksys_write+0x10/0x10 [ 169.367990][ T8798] ? rcu_is_watching+0x15/0xb0 [ 169.368017][ T8798] ? do_syscall_64+0xbe/0x3b0 [ 169.368041][ T8798] do_syscall_64+0xfa/0x3b0 [ 169.368059][ T8798] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.368085][ T8798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.368105][ T8798] ? clear_bhb_loop+0x60/0xb0 [ 169.368130][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.368149][ T8798] RIP: 0033:0x7fbba338eec9 [ 169.368167][ T8798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.368192][ T8798] RSP: 002b:00007fbba427d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.368214][ T8798] RAX: ffffffffffffffda RBX: 00007fbba35e5fa0 RCX: 00007fbba338eec9 [ 169.368229][ T8798] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 169.368243][ T8798] RBP: 00007fbba427d090 R08: 0000000000000000 R09: 0000000000000000 [ 169.368256][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.368268][ T8798] R13: 00007fbba35e6038 R14: 00007fbba35e5fa0 R15: 00007ffd01331ee8 [ 169.368311][ T8798] [ 170.233127][ T8812] bond1: ARP target 9.0.0.0 is already present [ 170.239526][ T8812] bond1: option arp_ip_target: invalid value (9) [ 170.253936][ T8812] bond1 (unregistering): Released all slaves [ 170.457469][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1076'. [ 170.844282][ T8840] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1083'. [ 172.487721][ T8892] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 172.680258][ T8897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1101'. [ 172.707737][ T8884] tipc: Enabled bearer , priority 0 [ 172.771633][ T8884] syzkaller0: entered promiscuous mode [ 172.778834][ T8884] syzkaller0: entered allmulticast mode [ 172.788743][ T8884] tipc: Resetting bearer [ 172.817690][ T8883] tipc: Resetting bearer [ 174.404753][ T8883] tipc: Disabling bearer [ 174.770354][ T8925] netlink: 'syz.4.1109': attribute type 1 has an invalid length. [ 175.022321][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1117'. [ 175.501894][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'. [ 175.812787][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 175.896595][ T8970] netlink: 'syz.3.1127': attribute type 13 has an invalid length. [ 175.911347][ T8970] netlink: 'syz.3.1127': attribute type 17 has an invalid length. [ 176.122544][ T8970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.199580][ T8967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.288409][ T8983] syzkaller0: entered promiscuous mode [ 176.310282][ T8983] syzkaller0: entered allmulticast mode [ 177.900620][ T9016] FAULT_INJECTION: forcing a failure. [ 177.900620][ T9016] name failslab, interval 1, probability 0, space 0, times 0 [ 177.964279][ T9016] CPU: 1 UID: 0 PID: 9016 Comm: syz.0.1142 Not tainted syzkaller #0 PREEMPT(full) [ 177.964307][ T9016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.964320][ T9016] Call Trace: [ 177.964328][ T9016] [ 177.964336][ T9016] dump_stack_lvl+0x189/0x250 [ 177.964365][ T9016] ? __pfx____ratelimit+0x10/0x10 [ 177.964405][ T9016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.964428][ T9016] ? __pfx__printk+0x10/0x10 [ 177.964463][ T9016] ? __pfx___might_resched+0x10/0x10 [ 177.964488][ T9016] ? fs_reclaim_acquire+0x7d/0x100 [ 177.964520][ T9016] should_fail_ex+0x414/0x560 [ 177.964551][ T9016] ? __pfx_sock_alloc_inode+0x10/0x10 [ 177.964578][ T9016] should_failslab+0xa8/0x100 [ 177.964605][ T9016] ? __pfx_sock_alloc_inode+0x10/0x10 [ 177.964630][ T9016] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 177.964653][ T9016] ? sock_alloc_inode+0x28/0xc0 [ 177.964683][ T9016] ? __pfx_sock_alloc_inode+0x10/0x10 [ 177.964710][ T9016] sock_alloc_inode+0x28/0xc0 [ 177.964736][ T9016] alloc_inode+0x6a/0x1b0 [ 177.964763][ T9016] do_accept+0x111/0x680 [ 177.964788][ T9016] ? __pfx_do_accept+0x10/0x10 [ 177.964830][ T9016] __sys_accept4+0x11c/0x1c0 [ 177.964852][ T9016] ? __pfx___sys_accept4+0x10/0x10 [ 177.964871][ T9016] ? __pfx_ksys_write+0x10/0x10 [ 177.964891][ T9016] ? rcu_is_watching+0x15/0xb0 [ 177.964920][ T9016] __x64_sys_accept4+0x9a/0xb0 [ 177.964941][ T9016] do_syscall_64+0xfa/0x3b0 [ 177.964960][ T9016] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.964988][ T9016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.965008][ T9016] ? clear_bhb_loop+0x60/0xb0 [ 177.965031][ T9016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.965050][ T9016] RIP: 0033:0x7fbba338eec9 [ 177.965066][ T9016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.965083][ T9016] RSP: 002b:00007fbba427d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 177.965103][ T9016] RAX: ffffffffffffffda RBX: 00007fbba35e5fa0 RCX: 00007fbba338eec9 [ 177.965125][ T9016] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 177.965137][ T9016] RBP: 00007fbba427d090 R08: 0000000000000000 R09: 0000000000000000 [ 177.965149][ T9016] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 177.965161][ T9016] R13: 00007fbba35e6038 R14: 00007fbba35e5fa0 R15: 00007ffd01331ee8 [ 177.965196][ T9016] [ 178.488085][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 178.581490][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1147'. [ 178.673767][ T9040] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 180.128377][ T9032] netlink: 'syz.2.1147': attribute type 1 has an invalid length. [ 180.136261][ T9032] netlink: 'syz.2.1147': attribute type 2 has an invalid length. [ 180.145507][ T9032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1147'. [ 180.202164][ T9074] ªªªªª»: renamed from bond_slave_0 (while UP) [ 180.500745][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1166'. [ 181.709297][ T9132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1178'. [ 181.726789][ T9132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1178'. [ 183.054925][ T9149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1183'. [ 183.094253][ T9150] tc_dump_action: action bad kind [ 183.255806][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 183.265348][ T9164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1185'. [ 183.287815][ T9164] gretap1: entered promiscuous mode [ 183.422870][ T9169] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1189'. [ 183.781124][ T9146] FAULT_INJECTION: forcing a failure. [ 183.781124][ T9146] name fail_futex, interval 1, probability 0, space 0, times 1 [ 183.810371][ T9146] CPU: 1 UID: 0 PID: 9146 Comm: syz.2.1182 Not tainted syzkaller #0 PREEMPT(full) [ 183.810395][ T9146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.810406][ T9146] Call Trace: [ 183.810413][ T9146] [ 183.810422][ T9146] dump_stack_lvl+0x189/0x250 [ 183.810450][ T9146] ? __pfx____ratelimit+0x10/0x10 [ 183.810479][ T9146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.810503][ T9146] ? __pfx__printk+0x10/0x10 [ 183.810548][ T9146] should_fail_ex+0x414/0x560 [ 183.810581][ T9146] get_futex_key+0xffc/0x1660 [ 183.810606][ T9146] ? look_up_lock_class+0x74/0x170 [ 183.810632][ T9146] ? __pfx_get_futex_key+0x10/0x10 [ 183.810654][ T9146] ? __lock_acquire+0xab9/0xd20 [ 183.810695][ T9146] futex_wake+0xf8/0x560 [ 183.810714][ T9146] ? __pfx___mutex_trylock_common+0x10/0x10 [ 183.810743][ T9146] ? __pfx_futex_wake+0x10/0x10 [ 183.810764][ T9146] ? __lock_acquire+0xab9/0xd20 [ 183.810794][ T9146] do_futex+0x395/0x420 [ 183.810827][ T9146] ? __pfx_do_futex+0x10/0x10 [ 183.810857][ T9146] ? __might_fault+0xb0/0x130 [ 183.810884][ T9146] mm_release+0x188/0x390 [ 183.810907][ T9146] ? __pfx_mm_release+0x10/0x10 [ 183.810928][ T9146] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.810969][ T9146] exit_mm+0xa8/0x2c0 [ 183.810997][ T9146] ? __pfx_exit_mm+0x10/0x10 [ 183.811025][ T9146] ? rcu_is_watching+0x15/0xb0 [ 183.811055][ T9146] do_exit+0x648/0x2300 [ 183.811083][ T9146] ? do_raw_spin_lock+0x121/0x290 [ 183.811108][ T9146] ? __pfx_do_exit+0x10/0x10 [ 183.811147][ T9146] do_group_exit+0x21c/0x2d0 [ 183.811172][ T9146] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.811199][ T9146] get_signal+0x1285/0x1340 [ 183.811237][ T9146] arch_do_signal_or_restart+0xa0/0x790 [ 183.811269][ T9146] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 183.811314][ T9146] ? exit_to_user_mode_loop+0x40/0x110 [ 183.811347][ T9146] exit_to_user_mode_loop+0x72/0x110 [ 183.811377][ T9146] do_syscall_64+0x2bd/0x3b0 [ 183.811395][ T9146] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.811423][ T9146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.811442][ T9146] ? clear_bhb_loop+0x60/0xb0 [ 183.811464][ T9146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.811481][ T9146] RIP: 0033:0x7fa43178eec9 [ 183.811497][ T9146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.811514][ T9146] RSP: 002b:00007fa4325a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 183.811534][ T9146] RAX: fffffffffffffe00 RBX: 00007fa4319e5fa0 RCX: 00007fa43178eec9 [ 183.811547][ T9146] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000003 [ 183.811560][ T9146] RBP: 00007fa4325a2090 R08: 0000000000000000 R09: 0000000000000000 [ 183.811571][ T9146] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 183.811583][ T9146] R13: 00007fa4319e6038 R14: 00007fa4319e5fa0 R15: 00007ffe44384668 [ 183.811614][ T9146] [ 184.197325][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 184.206584][ T9194] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1195'. [ 184.217638][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 184.351523][ T9200] bond0: option packets_per_slave: invalid value (16779898) [ 184.358873][ T9200] bond0: option packets_per_slave: allowed values 0 - 65535 [ 184.525485][ T5207] udevd[5207]: worker [5895] terminated by signal 33 (Unknown signal 33) [ 184.561281][ T5207] udevd[5207]: worker [5895] failed while handling '/devices/virtual/block/loop0' [ 184.873578][ T9229] FAULT_INJECTION: forcing a failure. [ 184.873578][ T9229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.889561][ T9229] CPU: 0 UID: 0 PID: 9229 Comm: syz.4.1207 Not tainted syzkaller #0 PREEMPT(full) [ 184.889588][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.889600][ T9229] Call Trace: [ 184.889607][ T9229] [ 184.889616][ T9229] dump_stack_lvl+0x189/0x250 [ 184.889653][ T9229] ? __pfx____ratelimit+0x10/0x10 [ 184.889687][ T9229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.889712][ T9229] ? __pfx__printk+0x10/0x10 [ 184.889745][ T9229] ? __might_fault+0xb0/0x130 [ 184.889806][ T9229] should_fail_ex+0x414/0x560 [ 184.889844][ T9229] _copy_from_user+0x2d/0xb0 [ 184.889868][ T9229] __sys_bpf+0x1e3/0x860 [ 184.889897][ T9229] ? __pfx___sys_bpf+0x10/0x10 [ 184.889943][ T9229] ? ksys_write+0x22a/0x250 [ 184.889978][ T9229] ? __pfx_ksys_write+0x10/0x10 [ 184.889998][ T9229] ? rcu_is_watching+0x15/0xb0 [ 184.890027][ T9229] __x64_sys_bpf+0x7c/0x90 [ 184.890088][ T9229] do_syscall_64+0xfa/0x3b0 [ 184.890106][ T9229] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.890134][ T9229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.890153][ T9229] ? clear_bhb_loop+0x60/0xb0 [ 184.890174][ T9229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.890200][ T9229] RIP: 0033:0x7fc50f18eec9 [ 184.890219][ T9229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.890248][ T9229] RSP: 002b:00007fc50ff83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.890308][ T9229] RAX: ffffffffffffffda RBX: 00007fc50f3e5fa0 RCX: 00007fc50f18eec9 [ 184.890321][ T9229] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 184.890333][ T9229] RBP: 00007fc50ff83090 R08: 0000000000000000 R09: 0000000000000000 [ 184.890345][ T9229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.890356][ T9229] R13: 00007fc50f3e6038 R14: 00007fc50f3e5fa0 R15: 00007ffea3d67998 [ 184.890387][ T9229] [ 185.936558][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1214'. [ 186.401377][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 186.674476][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.683231][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.716122][ T9297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1228'. [ 186.836247][ T9289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.850666][ T9289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.092771][ T5896] syz0: Port: 1 Link DOWN [ 187.093736][ T8558] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.119163][ T8558] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.145434][ T8558] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.173680][ T8558] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.199597][ T8558] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.219657][ T8558] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.270157][ T9313] netlink: 'syz.1.1233': attribute type 1 has an invalid length. [ 187.271180][ T8558] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.316331][ T8558] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.671255][ T9326] delete_channel: no stack [ 187.956479][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 187.971562][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 187.981656][ T9340] FAULT_INJECTION: forcing a failure. [ 187.981656][ T9340] name failslab, interval 1, probability 0, space 0, times 0 [ 187.995647][ T9340] CPU: 0 UID: 0 PID: 9340 Comm: syz.0.1243 Not tainted syzkaller #0 PREEMPT(full) [ 187.995677][ T9340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 187.995689][ T9340] Call Trace: [ 187.995695][ T9340] [ 187.995703][ T9340] dump_stack_lvl+0x189/0x250 [ 187.995731][ T9340] ? __pfx____ratelimit+0x10/0x10 [ 187.995763][ T9340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.995788][ T9340] ? __pfx__printk+0x10/0x10 [ 187.995824][ T9340] ? __pfx___might_resched+0x10/0x10 [ 187.995844][ T9340] ? fs_reclaim_acquire+0x7d/0x100 [ 187.995878][ T9340] should_fail_ex+0x414/0x560 [ 187.995912][ T9340] should_failslab+0xa8/0x100 [ 187.995940][ T9340] __kmalloc_cache_noprof+0x70/0x3d0 [ 187.995965][ T9340] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 187.995994][ T9340] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 187.996028][ T9340] sctp_association_new+0x15d3/0x25f0 [ 187.996068][ T9340] sctp_connect_new_asoc+0x2c5/0x690 [ 187.996100][ T9340] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 187.996124][ T9340] ? __local_bh_enable_ip+0x12d/0x1c0 [ 187.996153][ T9340] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 187.996172][ T9340] ? security_sctp_bind_connect+0x7e/0x2e0 [ 187.996199][ T9340] sctp_sendmsg+0x155c/0x2810 [ 187.996239][ T9340] ? __pfx_sctp_sendmsg+0x10/0x10 [ 187.996270][ T9340] ? aa_sk_perm+0x81e/0x950 [ 187.996301][ T9340] ? __pfx_aa_sk_perm+0x10/0x10 [ 187.996330][ T9340] ? sock_rps_record_flow+0x19/0x410 [ 187.996363][ T9340] ? inet_sendmsg+0x2f4/0x370 [ 187.996398][ T9340] __sock_sendmsg+0x19c/0x270 [ 187.996431][ T9340] ____sys_sendmsg+0x505/0x830 [ 187.996461][ T9340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.996496][ T9340] ? import_iovec+0x74/0xa0 [ 187.996524][ T9340] ___sys_sendmsg+0x21f/0x2a0 [ 187.996561][ T9340] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.996627][ T9340] ? __fget_files+0x2a/0x420 [ 187.996653][ T9340] ? __fget_files+0x3a0/0x420 [ 187.996691][ T9340] __x64_sys_sendmsg+0x19b/0x260 [ 187.996719][ T9340] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.996754][ T9340] ? __pfx_ksys_write+0x10/0x10 [ 187.996774][ T9340] ? rcu_is_watching+0x15/0xb0 [ 187.996803][ T9340] ? do_syscall_64+0xbe/0x3b0 [ 187.996828][ T9340] do_syscall_64+0xfa/0x3b0 [ 187.996847][ T9340] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.996877][ T9340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.996897][ T9340] ? clear_bhb_loop+0x60/0xb0 [ 187.996921][ T9340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.996941][ T9340] RIP: 0033:0x7fbba338eec9 [ 187.996960][ T9340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.996978][ T9340] RSP: 002b:00007fbba427d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.996999][ T9340] RAX: ffffffffffffffda RBX: 00007fbba35e5fa0 RCX: 00007fbba338eec9 [ 187.997015][ T9340] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 187.997028][ T9340] RBP: 00007fbba427d090 R08: 0000000000000000 R09: 0000000000000000 [ 187.997046][ T9340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.997057][ T9340] R13: 00007fbba35e6038 R14: 00007fbba35e5fa0 R15: 00007ffd01331ee8 [ 187.997092][ T9340] [ 188.982769][ T9378] netlink: 'syz.2.1255': attribute type 1 has an invalid length. [ 189.057255][ T9378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.072557][ T9385] ipvlan2: entered allmulticast mode [ 189.078773][ T9385] bond1: entered allmulticast mode [ 189.137822][ T9378] bond1: (slave gretap1): making interface the new active one [ 189.146535][ T9378] gretap1: entered allmulticast mode [ 189.156190][ T9378] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 189.293639][ T5924] hid-generic 0005:15C2:0008.0001: item fetching failed at offset 0/1 [ 189.313177][ T5924] hid-generic 0005:15C2:0008.0001: probe with driver hid-generic failed with error -22 [ 189.549521][ T9397] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1262'. [ 189.751010][ T9409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1265'. [ 189.803505][ T9416] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 189.822049][ T9412] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.933943][ T9412] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.007273][ T9412] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.150965][ T9412] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.375382][ T9445] netlink: 'syz.0.1276': attribute type 3 has an invalid length. [ 190.404479][ T9445] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1276'. [ 190.423591][ T8553] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.458430][ T8553] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.470631][ T8553] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.491276][ T8553] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.558518][ T9455] FAULT_INJECTION: forcing a failure. [ 190.558518][ T9455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.574713][ T9455] CPU: 0 UID: 0 PID: 9455 Comm: syz.4.1282 Not tainted syzkaller #0 PREEMPT(full) [ 190.574739][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 190.574751][ T9455] Call Trace: [ 190.574759][ T9455] [ 190.574767][ T9455] dump_stack_lvl+0x189/0x250 [ 190.574796][ T9455] ? __pfx____ratelimit+0x10/0x10 [ 190.574824][ T9455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.574847][ T9455] ? __pfx__printk+0x10/0x10 [ 190.574887][ T9455] should_fail_ex+0x414/0x560 [ 190.574919][ T9455] _copy_to_user+0x31/0xb0 [ 190.574944][ T9455] simple_read_from_buffer+0xe1/0x170 [ 190.574985][ T9455] proc_fail_nth_read+0x1b3/0x220 [ 190.575007][ T9455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.575029][ T9455] ? rw_verify_area+0x2a6/0x4d0 [ 190.575050][ T9455] ? __lock_acquire+0xab9/0xd20 [ 190.575066][ T9455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.575087][ T9455] vfs_read+0x1fd/0xa30 [ 190.575109][ T9455] ? fdget_pos+0x247/0x320 [ 190.575140][ T9455] ? __pfx___mutex_lock+0x10/0x10 [ 190.575160][ T9455] ? __pfx_vfs_read+0x10/0x10 [ 190.575182][ T9455] ? __fget_files+0x2a/0x420 [ 190.575210][ T9455] ? __fget_files+0x3a0/0x420 [ 190.575231][ T9455] ? __fget_files+0x2a/0x420 [ 190.575262][ T9455] ksys_read+0x145/0x250 [ 190.575286][ T9455] ? __pfx_ksys_read+0x10/0x10 [ 190.575304][ T9455] ? rcu_is_watching+0x15/0xb0 [ 190.575333][ T9455] ? do_syscall_64+0xbe/0x3b0 [ 190.575358][ T9455] do_syscall_64+0xfa/0x3b0 [ 190.575376][ T9455] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.575405][ T9455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.575425][ T9455] ? clear_bhb_loop+0x60/0xb0 [ 190.575450][ T9455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.575469][ T9455] RIP: 0033:0x7fc50f18d8dc [ 190.575487][ T9455] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 190.575504][ T9455] RSP: 002b:00007fc50ff83030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.575526][ T9455] RAX: ffffffffffffffda RBX: 00007fc50f3e5fa0 RCX: 00007fc50f18d8dc [ 190.575541][ T9455] RDX: 000000000000000f RSI: 00007fc50ff830a0 RDI: 0000000000000005 [ 190.575553][ T9455] RBP: 00007fc50ff83090 R08: 0000000000000000 R09: 0000000000000000 [ 190.575565][ T9455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.575577][ T9455] R13: 00007fc50f3e6038 R14: 00007fc50f3e5fa0 R15: 00007ffea3d67998 [ 190.575611][ T9455] [ 191.003831][ T9469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1286'. [ 191.141260][ T9474] FAULT_INJECTION: forcing a failure. [ 191.141260][ T9474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.187170][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'. [ 191.205011][ T9474] CPU: 1 UID: 0 PID: 9474 Comm: syz.4.1287 Not tainted syzkaller #0 PREEMPT(full) [ 191.205036][ T9474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.205045][ T9474] Call Trace: [ 191.205051][ T9474] [ 191.205058][ T9474] dump_stack_lvl+0x189/0x250 [ 191.205084][ T9474] ? __pfx____ratelimit+0x10/0x10 [ 191.205109][ T9474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.205128][ T9474] ? __pfx__printk+0x10/0x10 [ 191.205161][ T9474] should_fail_ex+0x414/0x560 [ 191.205231][ T9474] _copy_to_user+0x31/0xb0 [ 191.205258][ T9474] bpf_test_finish+0x1ab/0x700 [ 191.205286][ T9474] ? __pfx_bpf_test_finish+0x10/0x10 [ 191.205311][ T9474] ? bpf_test_init+0x113/0x150 [ 191.205330][ T9474] bpf_prog_test_run_xdp+0x893/0x10e0 [ 191.205367][ T9474] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 191.205393][ T9474] ? __fget_files+0x2a/0x420 [ 191.205421][ T9474] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 191.205442][ T9474] bpf_prog_test_run+0x2c7/0x340 [ 191.205465][ T9474] __sys_bpf+0x562/0x860 [ 191.205495][ T9474] ? __pfx___sys_bpf+0x10/0x10 [ 191.205542][ T9474] ? ksys_write+0x22a/0x250 [ 191.205568][ T9474] ? __pfx_ksys_write+0x10/0x10 [ 191.205588][ T9474] ? rcu_is_watching+0x15/0xb0 [ 191.205619][ T9474] __x64_sys_bpf+0x7c/0x90 [ 191.205650][ T9474] do_syscall_64+0xfa/0x3b0 [ 191.205669][ T9474] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.205698][ T9474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.205717][ T9474] ? clear_bhb_loop+0x60/0xb0 [ 191.205741][ T9474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.205760][ T9474] RIP: 0033:0x7fc50f18eec9 [ 191.205778][ T9474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.205795][ T9474] RSP: 002b:00007fc50ff83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 191.205817][ T9474] RAX: ffffffffffffffda RBX: 00007fc50f3e5fa0 RCX: 00007fc50f18eec9 [ 191.205831][ T9474] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 191.205844][ T9474] RBP: 00007fc50ff83090 R08: 0000000000000000 R09: 0000000000000000 [ 191.205857][ T9474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.205868][ T9474] R13: 00007fc50f3e6038 R14: 00007fc50f3e5fa0 R15: 00007ffea3d67998 [ 191.205901][ T9474] [ 191.448474][ T9476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1288'. [ 191.942967][ T9501] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1296'. [ 192.867896][ T9549] bond1: (slave bond_slave_1): Device is not our slave [ 192.876052][ T9549] bond1: option active_slave: invalid value (bond_slave_1) [ 192.887174][ T9549] bond1 (unregistering): Released all slaves [ 192.915675][ T9557] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1309'. [ 193.203431][ T9566] bridge_slave_1: left allmulticast mode [ 193.209626][ T9566] bridge_slave_1: left promiscuous mode [ 193.217813][ T9566] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.237387][ T9566] bridge_slave_0: left allmulticast mode [ 193.248522][ T9566] bridge_slave_0: left promiscuous mode [ 193.255852][ T9566] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.445079][ T9565] delete_channel: no stack [ 193.777011][ T9593] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1320'. [ 194.413523][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.999043][ T9627] kthread_run failed with err -4 [ 196.012068][ T9630] bond0: (slave bond_slave_0): Releasing backup interface [ 196.054364][ T9630] bond0: (slave bond_slave_1): Releasing backup interface [ 196.098914][ T9630] team0: Port device team_slave_0 removed [ 196.125165][ T9630] team0: Port device team_slave_1 removed [ 196.145208][ T9630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.160001][ T9630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.171012][ T9630] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 196.184023][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'. [ 196.270766][ T9651] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1332'. [ 198.492478][ T9712] sit2: entered promiscuous mode [ 198.738359][ T9725] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1357'. [ 198.803075][ T9728] netlink: 'syz.3.1360': attribute type 4 has an invalid length. [ 198.926392][ T9735] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1359'. [ 198.940376][ T52] Bluetooth: hci4: link tx timeout [ 198.946605][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 199.005953][ T9735] veth1: entered promiscuous mode [ 199.089851][ T9745] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1365'. [ 199.468597][ T9763] FAULT_INJECTION: forcing a failure. [ 199.468597][ T9763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.509074][ T9763] CPU: 0 UID: 0 PID: 9763 Comm: syz.0.1371 Not tainted syzkaller #0 PREEMPT(full) [ 199.509099][ T9763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.509110][ T9763] Call Trace: [ 199.509117][ T9763] [ 199.509125][ T9763] dump_stack_lvl+0x189/0x250 [ 199.509162][ T9763] ? __pfx____ratelimit+0x10/0x10 [ 199.509192][ T9763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.509214][ T9763] ? __pfx__printk+0x10/0x10 [ 199.509239][ T9763] ? __might_fault+0xb0/0x130 [ 199.509272][ T9763] should_fail_ex+0x414/0x560 [ 199.509302][ T9763] _copy_from_iter+0x1de/0x1790 [ 199.509318][ T9763] ? __lock_acquire+0xab9/0xd20 [ 199.509343][ T9763] ? __lock_acquire+0xab9/0xd20 [ 199.509360][ T9763] ? __pfx__copy_from_iter+0x10/0x10 [ 199.509389][ T9763] ? page_copy_sane+0x4e/0x280 [ 199.509409][ T9763] copy_page_from_iter+0xdd/0x170 [ 199.509433][ T9763] tun_get_user+0x1d7b/0x3e90 [ 199.509469][ T9763] ? tun_get_user+0x6f6/0x3e90 [ 199.509503][ T9763] ? aa_file_perm+0x44d/0x1550 [ 199.509531][ T9763] ? __pfx_tun_get_user+0x10/0x10 [ 199.509556][ T9763] ? _parse_integer_limit+0x1ae/0x1f0 [ 199.509594][ T9763] ? __lock_acquire+0xab9/0xd20 [ 199.509618][ T9763] ? ref_tracker_alloc+0x318/0x460 [ 199.509644][ T9763] ? __lock_acquire+0xab9/0xd20 [ 199.509664][ T9763] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 199.509698][ T9763] ? tun_get+0x1c/0x2f0 [ 199.509730][ T9763] ? tun_get+0x1c/0x2f0 [ 199.509754][ T9763] ? tun_get+0x1c/0x2f0 [ 199.509785][ T9763] tun_chr_write_iter+0x113/0x200 [ 199.509814][ T9763] vfs_write+0x5c6/0xb30 [ 199.509842][ T9763] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 199.509869][ T9763] ? __pfx_vfs_write+0x10/0x10 [ 199.509903][ T9763] ? __fget_files+0x2a/0x420 [ 199.509938][ T9763] ksys_write+0x145/0x250 [ 199.509964][ T9763] ? __pfx_ksys_write+0x10/0x10 [ 199.509983][ T9763] ? rcu_is_watching+0x15/0xb0 [ 199.510011][ T9763] ? do_syscall_64+0xbe/0x3b0 [ 199.510035][ T9763] do_syscall_64+0xfa/0x3b0 [ 199.510053][ T9763] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.510082][ T9763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.510101][ T9763] ? clear_bhb_loop+0x60/0xb0 [ 199.510125][ T9763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.510151][ T9763] RIP: 0033:0x7fbba338d97f [ 199.510170][ T9763] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 199.510187][ T9763] RSP: 002b:00007fbba427d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 199.510209][ T9763] RAX: ffffffffffffffda RBX: 00007fbba35e5fa0 RCX: 00007fbba338d97f [ 199.510223][ T9763] RDX: 0000000000000052 RSI: 00002000000007c0 RDI: 00000000000000c8 [ 199.510236][ T9763] RBP: 00007fbba427d090 R08: 0000000000000000 R09: 0000000000000000 [ 199.510248][ T9763] R10: 0000000000000052 R11: 0000000000000293 R12: 0000000000000001 [ 199.510260][ T9763] R13: 00007fbba35e6038 R14: 00007fbba35e5fa0 R15: 00007ffd01331ee8 [ 199.510293][ T9763] [ 199.965467][ T9745] netlink: 'syz.4.1365': attribute type 2 has an invalid length. [ 200.329647][ T9783] tipc: Enabling of bearer rejected, failed to enable media [ 200.365285][ T9790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1381'. [ 200.489914][ T9803] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1386'. [ 200.504687][ T9803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1386'. [ 200.548949][ T9803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1386'. [ 200.638763][ T9807] netlink: 'syz.4.1389': attribute type 1 has an invalid length. [ 200.648230][ T9807] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1389'. [ 200.868740][ T9816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.961590][ T5157] Bluetooth: hci4: command 0x0405 tx timeout [ 201.310895][ T9830] netlink: 'syz.4.1395': attribute type 13 has an invalid length. [ 201.470770][ T9836] __nla_validate_parse: 9 callbacks suppressed [ 201.470789][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 201.802911][ T9850] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 201.898819][ T9855] netlink: 'syz.1.1403': attribute type 1 has an invalid length. [ 201.936272][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 201.936312][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 201.942375][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 201.962955][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 202.014467][ T9855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1403'. [ 202.037562][ T9859] bond1: (slave veth3): Enslaving as an active interface with a down link [ 202.328386][ T9883] FAULT_INJECTION: forcing a failure. [ 202.328386][ T9883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.359441][ T9883] CPU: 1 UID: 0 PID: 9883 Comm: syz.1.1411 Not tainted syzkaller #0 PREEMPT(full) [ 202.359469][ T9883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.359479][ T9883] Call Trace: [ 202.359485][ T9883] [ 202.359493][ T9883] dump_stack_lvl+0x189/0x250 [ 202.359527][ T9883] ? __pfx____ratelimit+0x10/0x10 [ 202.359558][ T9883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.359581][ T9883] ? __pfx__printk+0x10/0x10 [ 202.359619][ T9883] should_fail_ex+0x414/0x560 [ 202.359651][ T9883] _copy_to_user+0x31/0xb0 [ 202.359676][ T9883] simple_read_from_buffer+0xe1/0x170 [ 202.359705][ T9883] proc_fail_nth_read+0x1b3/0x220 [ 202.359734][ T9883] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.359756][ T9883] ? rw_verify_area+0x2a6/0x4d0 [ 202.359775][ T9883] ? __lock_acquire+0xab9/0xd20 [ 202.359792][ T9883] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.359811][ T9883] vfs_read+0x1fd/0xa30 [ 202.359831][ T9883] ? fdget_pos+0x247/0x320 [ 202.359860][ T9883] ? __pfx___mutex_lock+0x10/0x10 [ 202.359881][ T9883] ? __pfx_vfs_read+0x10/0x10 [ 202.359905][ T9883] ? __fget_files+0x2a/0x420 [ 202.359928][ T9883] ? __fget_files+0x3a0/0x420 [ 202.359946][ T9883] ? __fget_files+0x2a/0x420 [ 202.359979][ T9883] ksys_read+0x145/0x250 [ 202.360004][ T9883] ? __pfx_ksys_read+0x10/0x10 [ 202.360032][ T9883] ? do_syscall_64+0xbe/0x3b0 [ 202.360056][ T9883] do_syscall_64+0xfa/0x3b0 [ 202.360072][ T9883] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.360107][ T9883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.360127][ T9883] ? clear_bhb_loop+0x60/0xb0 [ 202.360151][ T9883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.360170][ T9883] RIP: 0033:0x7fad0818d8dc [ 202.360188][ T9883] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 202.360205][ T9883] RSP: 002b:00007fad08f87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.360233][ T9883] RAX: ffffffffffffffda RBX: 00007fad083e5fa0 RCX: 00007fad0818d8dc [ 202.360247][ T9883] RDX: 000000000000000f RSI: 00007fad08f870a0 RDI: 0000000000000004 [ 202.360259][ T9883] RBP: 00007fad08f87090 R08: 0000000000000000 R09: 0000000000000000 [ 202.360270][ T9883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.360282][ T9883] R13: 00007fad083e6038 R14: 00007fad083e5fa0 R15: 00007ffefecfd408 [ 202.360316][ T9883] [ 202.612858][ T9888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1412'. [ 202.795060][ T9903] netlink: 'syz.0.1417': attribute type 29 has an invalid length. [ 202.810558][ T9903] netlink: 'syz.0.1417': attribute type 29 has an invalid length. [ 202.820125][ T9903] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1417'. [ 202.910286][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'. [ 202.940084][ T9908] bond1: option updelay: invalid value (18446744072065443590) [ 202.950099][ T9908] bond1: option updelay: allowed values 0 - 2147483647 [ 202.959532][ T9907] netlink: 'syz.4.1418': attribute type 9 has an invalid length. [ 202.973311][ T9908] bond1 (unregistering): Released all slaves [ 204.171679][ T9950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1435'. [ 204.376839][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 204.590809][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1445'. [ 204.622538][ T9973] IPVS: Error connecting to the multicast addr [ 204.782824][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1448'. [ 204.847410][ T9983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1449'. [ 205.482140][T10011] nbd0: detected capacity change from 0 to 127 [ 205.498897][ T5840] block nbd0: Receive control failed (result -32) [ 205.791326][T10050] netlink: 'syz.1.1471': attribute type 1 has an invalid length. [ 205.796986][T10051] syzkaller0: entered promiscuous mode [ 205.805933][T10051] syzkaller0: entered allmulticast mode [ 206.299566][T10063] syzkaller0: entered promiscuous mode [ 206.306026][T10063] syzkaller0: entered allmulticast mode [ 206.479362][T10071] __nla_validate_parse: 2 callbacks suppressed [ 206.479382][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1480'. [ 206.537246][T10073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1481'. [ 206.644664][T10081] netlink: 'syz.0.1482': attribute type 1 has an invalid length. [ 206.656672][T10081] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1482'. [ 206.688827][T10083] netlink: 4308 bytes leftover after parsing attributes in process `syz.4.1485'. [ 207.043631][T10104] syzkaller0: entered promiscuous mode [ 207.049265][T10104] syzkaller0: entered allmulticast mode [ 207.087727][T10111] macsec1: entered allmulticast mode [ 207.093522][T10111] ip6gretap0: entered allmulticast mode [ 207.105725][T10111] ip6gretap0: left allmulticast mode [ 208.693832][T10133] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 208.696910][T10134] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 208.844293][T10152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1507'. [ 209.003845][T10168] tipc: New replicast peer: 255.255.255.255 [ 209.019803][T10168] tipc: Enabled bearer , priority 10 [ 209.067374][T10169] bridge_slave_0: left allmulticast mode [ 209.073939][T10169] bridge_slave_0: left promiscuous mode [ 209.079869][T10169] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.096598][T10169] bridge_slave_1: left allmulticast mode [ 209.104129][T10169] bridge_slave_1: left promiscuous mode [ 209.118691][T10169] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.149738][T10169] bond0: (slave ªªªªª»): Releasing backup interface [ 209.157416][T10169] ªªªªª»: left promiscuous mode [ 209.178110][T10169] bond0: (slave bond_slave_1): Releasing backup interface [ 209.188370][T10169] bond_slave_1: left promiscuous mode [ 209.200831][T10169] team_slave_0: left promiscuous mode [ 209.220297][T10169] team0: Port device team_slave_0 removed [ 209.227277][T10169] team_slave_1: left promiscuous mode [ 209.237518][T10169] team0: Port device team_slave_1 removed [ 209.247089][T10169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.255881][T10169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.264680][T10169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.272622][T10169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.281944][T10169] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.396359][T10188] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1520'. [ 209.411841][T10188] veth0_to_batadv: mtu less than device minimum [ 209.550323][T10204] netlink: 508 bytes leftover after parsing attributes in process `syz.1.1524'. [ 209.602674][T10208] openvswitch: netlink: Flow key attr not present in new flow. [ 209.793201][T10217] Bluetooth: MGMT ver 1.23 [ 210.160261][T10236] netlink: 'syz.4.1536': attribute type 1 has an invalid length. [ 210.178721][T10236] IPVS: set_ctl: invalid protocol: 31 10.1.1.2:20002 [ 210.984129][T10278] FAULT_INJECTION: forcing a failure. [ 210.984129][T10278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.031222][T10278] CPU: 1 UID: 0 PID: 10278 Comm: syz.1.1552 Not tainted syzkaller #0 PREEMPT(full) [ 211.031252][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 211.031264][T10278] Call Trace: [ 211.031272][T10278] [ 211.031281][T10278] dump_stack_lvl+0x189/0x250 [ 211.031310][T10278] ? __pfx____ratelimit+0x10/0x10 [ 211.031338][T10278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.031360][T10278] ? __pfx__printk+0x10/0x10 [ 211.031401][T10278] should_fail_ex+0x414/0x560 [ 211.031433][T10278] _copy_from_user+0x2d/0xb0 [ 211.031457][T10278] bpf_test_init+0xd8/0x150 [ 211.031481][T10278] bpf_prog_test_run_skb+0x206/0x1550 [ 211.031500][T10278] ? __fget_files+0x2a/0x420 [ 211.031533][T10278] ? __fget_files+0x2a/0x420 [ 211.031563][T10278] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 211.031583][T10278] bpf_prog_test_run+0x2c7/0x340 [ 211.031607][T10278] __sys_bpf+0x562/0x860 [ 211.031643][T10278] ? __pfx___sys_bpf+0x10/0x10 [ 211.031688][T10278] ? ksys_write+0x22a/0x250 [ 211.031718][T10278] ? __pfx_ksys_write+0x10/0x10 [ 211.031737][T10278] ? rcu_is_watching+0x15/0xb0 [ 211.031767][T10278] __x64_sys_bpf+0x7c/0x90 [ 211.031794][T10278] do_syscall_64+0xfa/0x3b0 [ 211.031813][T10278] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.031841][T10278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.031860][T10278] ? clear_bhb_loop+0x60/0xb0 [ 211.031884][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.031903][T10278] RIP: 0033:0x7fad0818eec9 [ 211.031921][T10278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.031938][T10278] RSP: 002b:00007fad08f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.031960][T10278] RAX: ffffffffffffffda RBX: 00007fad083e5fa0 RCX: 00007fad0818eec9 [ 211.031975][T10278] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 211.031987][T10278] RBP: 00007fad08f87090 R08: 0000000000000000 R09: 0000000000000000 [ 211.031999][T10278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.032016][T10278] R13: 00007fad083e6038 R14: 00007fad083e5fa0 R15: 00007ffefecfd408 [ 211.032049][T10278] [ 211.525087][T10298] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1556'. [ 212.339605][T10332] FAULT_INJECTION: forcing a failure. [ 212.339605][T10332] name failslab, interval 1, probability 0, space 0, times 0 [ 212.355633][T10332] CPU: 0 UID: 0 PID: 10332 Comm: syz.0.1573 Not tainted syzkaller #0 PREEMPT(full) [ 212.355660][T10332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.355673][T10332] Call Trace: [ 212.355681][T10332] [ 212.355689][T10332] dump_stack_lvl+0x189/0x250 [ 212.355718][T10332] ? __pfx____ratelimit+0x10/0x10 [ 212.355748][T10332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.355773][T10332] ? __pfx__printk+0x10/0x10 [ 212.355818][T10332] should_fail_ex+0x414/0x560 [ 212.355851][T10332] should_failslab+0xa8/0x100 [ 212.355879][T10332] __kmalloc_cache_noprof+0x70/0x3d0 [ 212.355903][T10332] ? sctp_add_bind_addr+0x8c/0x370 [ 212.355931][T10332] sctp_add_bind_addr+0x8c/0x370 [ 212.355958][T10332] sctp_copy_local_addr_list+0x30b/0x4e0 [ 212.355985][T10332] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 212.356014][T10332] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 212.356038][T10332] ? sctp_v6_is_any+0x64/0x80 [ 212.356064][T10332] ? sctp_copy_one_addr+0x93/0x360 [ 212.356089][T10332] sctp_bind_addr_copy+0xb3/0x3c0 [ 212.356112][T10332] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 212.356147][T10332] sctp_connect_new_asoc+0x2e0/0x690 [ 212.356178][T10332] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 212.356203][T10332] ? __local_bh_enable_ip+0x12d/0x1c0 [ 212.356233][T10332] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 212.356252][T10332] ? security_sctp_bind_connect+0x7e/0x2e0 [ 212.356277][T10332] sctp_sendmsg+0x155c/0x2810 [ 212.356317][T10332] ? __pfx_sctp_sendmsg+0x10/0x10 [ 212.356347][T10332] ? aa_sk_perm+0x81e/0x950 [ 212.356379][T10332] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.356409][T10332] ? sock_rps_record_flow+0x19/0x410 [ 212.356443][T10332] ? inet_sendmsg+0x2f4/0x370 [ 212.356475][T10332] __sock_sendmsg+0x19c/0x270 [ 212.356507][T10332] ____sys_sendmsg+0x505/0x830 [ 212.356538][T10332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.356572][T10332] ? import_iovec+0x74/0xa0 [ 212.356603][T10332] ___sys_sendmsg+0x21f/0x2a0 [ 212.356629][T10332] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.356692][T10332] ? __fget_files+0x2a/0x420 [ 212.356715][T10332] ? __fget_files+0x3a0/0x420 [ 212.356751][T10332] __x64_sys_sendmsg+0x19b/0x260 [ 212.356777][T10332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.356812][T10332] ? __pfx_ksys_write+0x10/0x10 [ 212.356841][T10332] ? do_syscall_64+0xbe/0x3b0 [ 212.356866][T10332] do_syscall_64+0xfa/0x3b0 [ 212.356884][T10332] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.356912][T10332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.356932][T10332] ? clear_bhb_loop+0x60/0xb0 [ 212.356956][T10332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.356975][T10332] RIP: 0033:0x7fbba338eec9 [ 212.356992][T10332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.357016][T10332] RSP: 002b:00007fbba427d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.357037][T10332] RAX: ffffffffffffffda RBX: 00007fbba35e5fa0 RCX: 00007fbba338eec9 [ 212.357052][T10332] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 212.357070][T10332] RBP: 00007fbba427d090 R08: 0000000000000000 R09: 0000000000000000 [ 212.357082][T10332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.357094][T10332] R13: 00007fbba35e6038 R14: 00007fbba35e5fa0 R15: 00007ffd01331ee8 [ 212.357127][T10332] [ 212.856425][T10345] FAULT_INJECTION: forcing a failure. [ 212.856425][T10345] name failslab, interval 1, probability 0, space 0, times 0 [ 212.890884][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1579'. [ 212.910110][T10345] CPU: 1 UID: 0 PID: 10345 Comm: syz.1.1578 Not tainted syzkaller #0 PREEMPT(full) [ 212.910139][T10345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.910151][T10345] Call Trace: [ 212.910223][T10345] [ 212.910237][T10345] dump_stack_lvl+0x189/0x250 [ 212.910268][T10345] ? __pfx____ratelimit+0x10/0x10 [ 212.910295][T10345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.910317][T10345] ? __pfx__printk+0x10/0x10 [ 212.910346][T10345] ? __pfx___might_resched+0x10/0x10 [ 212.910363][T10345] ? fs_reclaim_acquire+0x7d/0x100 [ 212.910390][T10345] should_fail_ex+0x414/0x560 [ 212.910418][T10345] should_failslab+0xa8/0x100 [ 212.910441][T10345] __kmalloc_noprof+0xcb/0x4f0 [ 212.910461][T10345] ? sk_prot_alloc+0xe7/0x220 [ 212.910486][T10345] sk_prot_alloc+0xe7/0x220 [ 212.910505][T10345] ? sk_alloc+0x24/0x370 [ 212.910528][T10345] sk_alloc+0x3a/0x370 [ 212.910548][T10345] ? bpf_ctx_init+0x167/0x1d0 [ 212.910571][T10345] bpf_prog_test_run_skb+0x313/0x1550 [ 212.910601][T10345] ? __fget_files+0x2a/0x420 [ 212.910634][T10345] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 212.910654][T10345] bpf_prog_test_run+0x2c7/0x340 [ 212.910678][T10345] __sys_bpf+0x562/0x860 [ 212.910710][T10345] ? __pfx___sys_bpf+0x10/0x10 [ 212.910757][T10345] ? ksys_write+0x22a/0x250 [ 212.910784][T10345] ? __pfx_ksys_write+0x10/0x10 [ 212.910804][T10345] ? rcu_is_watching+0x15/0xb0 [ 212.910831][T10345] __x64_sys_bpf+0x7c/0x90 [ 212.910857][T10345] do_syscall_64+0xfa/0x3b0 [ 212.910875][T10345] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.910950][T10345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.910970][T10345] ? clear_bhb_loop+0x60/0xb0 [ 212.910995][T10345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.911015][T10345] RIP: 0033:0x7fad0818eec9 [ 212.911033][T10345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.911051][T10345] RSP: 002b:00007fad08f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.911074][T10345] RAX: ffffffffffffffda RBX: 00007fad083e5fa0 RCX: 00007fad0818eec9 [ 212.911086][T10345] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 212.911097][T10345] RBP: 00007fad08f87090 R08: 0000000000000000 R09: 0000000000000000 [ 212.911109][T10345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.911119][T10345] R13: 00007fad083e6038 R14: 00007fad083e5fa0 R15: 00007ffefecfd408 [ 212.911147][T10345] [ 213.241414][T10351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.249924][T10351] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.265558][T10351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.474699][T10373] tipc: Started in network mode [ 213.481147][T10373] tipc: Node identity 4, cluster identity 4711 [ 213.488739][T10373] tipc: Node number set to 4 [ 213.494802][T10376] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004 [ 213.506656][T10374] tipc: Started in network mode [ 213.512111][T10374] tipc: Node identity 4, cluster identity 4711 [ 213.518366][T10374] tipc: Node number set to 4 [ 213.752872][T10390] netlink: 'syz.0.1595': attribute type 1 has an invalid length. [ 213.789730][T10386] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 214.361938][T10408] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 214.646413][T10428] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1606'. [ 215.087126][T10456] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1616'. [ 215.191174][T10462] netlink: 'syz.0.1619': attribute type 1 has an invalid length. [ 215.209258][T10462] raw_sendmsg: syz.0.1619 forgot to set AF_INET. Fix it! [ 215.215384][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1620'. [ 215.227072][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1620'. [ 215.236348][T10466] netlink: 'syz.2.1620': attribute type 14 has an invalid length. [ 215.246081][T10466] netlink: 'syz.2.1620': attribute type 13 has an invalid length. [ 215.297570][T10468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1621'. [ 215.308121][T10462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1619'. [ 215.557493][T10476] syzkaller0: entered promiscuous mode [ 215.565294][T10476] syzkaller0: entered allmulticast mode [ 216.993493][T10485] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1627'. [ 217.101027][T10508] netlink: 'syz.2.1632': attribute type 1 has an invalid length. [ 217.109424][T10508] netlink: 'syz.2.1632': attribute type 1 has an invalid length. [ 217.213101][T10516] FAULT_INJECTION: forcing a failure. [ 217.213101][T10516] name failslab, interval 1, probability 0, space 0, times 0 [ 217.250388][T10516] CPU: 1 UID: 0 PID: 10516 Comm: syz.2.1636 Not tainted syzkaller #0 PREEMPT(full) [ 217.250417][T10516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 217.250430][T10516] Call Trace: [ 217.250438][T10516] [ 217.250446][T10516] dump_stack_lvl+0x189/0x250 [ 217.250475][T10516] ? __pfx____ratelimit+0x10/0x10 [ 217.250505][T10516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.250529][T10516] ? __pfx__printk+0x10/0x10 [ 217.250581][T10516] should_fail_ex+0x414/0x560 [ 217.250614][T10516] should_failslab+0xa8/0x100 [ 217.250642][T10516] __kmalloc_cache_noprof+0x70/0x3d0 [ 217.250666][T10516] ? sctp_add_bind_addr+0x8c/0x370 [ 217.250693][T10516] sctp_add_bind_addr+0x8c/0x370 [ 217.250721][T10516] sctp_copy_local_addr_list+0x30b/0x4e0 [ 217.250744][T10516] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 217.250765][T10516] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 217.250787][T10516] ? sctp_v6_is_any+0x64/0x80 [ 217.250811][T10516] ? sctp_copy_one_addr+0x93/0x360 [ 217.250837][T10516] sctp_bind_addr_copy+0xb3/0x3c0 [ 217.250859][T10516] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 217.250893][T10516] sctp_connect_new_asoc+0x2e0/0x690 [ 217.250924][T10516] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 217.250948][T10516] ? __local_bh_enable_ip+0x12d/0x1c0 [ 217.250976][T10516] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 217.250995][T10516] ? security_sctp_bind_connect+0x7e/0x2e0 [ 217.251021][T10516] sctp_sendmsg+0x155c/0x2810 [ 217.251063][T10516] ? __pfx_sctp_sendmsg+0x10/0x10 [ 217.251089][T10516] ? aa_sk_perm+0x81e/0x950 [ 217.251116][T10516] ? __pfx_aa_sk_perm+0x10/0x10 [ 217.251143][T10516] ? sock_rps_record_flow+0x19/0x410 [ 217.251176][T10516] ? inet_sendmsg+0x2f4/0x370 [ 217.251210][T10516] __sock_sendmsg+0x19c/0x270 [ 217.251243][T10516] __sys_sendto+0x3bd/0x520 [ 217.251267][T10516] ? __pfx___sys_sendto+0x10/0x10 [ 217.251285][T10516] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 217.251321][T10516] ? __fget_files+0x3a0/0x420 [ 217.251359][T10516] ? ksys_write+0x22a/0x250 [ 217.251385][T10516] ? __pfx_ksys_write+0x10/0x10 [ 217.251405][T10516] ? rcu_is_watching+0x15/0xb0 [ 217.251432][T10516] __x64_sys_sendto+0xde/0x100 [ 217.251457][T10516] do_syscall_64+0xfa/0x3b0 [ 217.251476][T10516] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.251505][T10516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.251525][T10516] ? clear_bhb_loop+0x60/0xb0 [ 217.251557][T10516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.251575][T10516] RIP: 0033:0x7fa43178eec9 [ 217.251592][T10516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.251608][T10516] RSP: 002b:00007fa4325a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 217.251628][T10516] RAX: ffffffffffffffda RBX: 00007fa4319e5fa0 RCX: 00007fa43178eec9 [ 217.251650][T10516] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 217.251661][T10516] RBP: 00007fa4325a2090 R08: 0000200000000140 R09: 000000000000001c [ 217.251674][T10516] R10: 000000000400c0d4 R11: 0000000000000246 R12: 0000000000000002 [ 217.251686][T10516] R13: 00007fa4319e6038 R14: 00007fa4319e5fa0 R15: 00007ffe44384668 [ 217.251718][T10516] [ 217.694598][T10529] netlink: 1220 bytes leftover after parsing attributes in process `syz.1.1639'. [ 217.866416][T10538] FAULT_INJECTION: forcing a failure. [ 217.866416][T10538] name failslab, interval 1, probability 0, space 0, times 0 [ 217.879633][T10538] CPU: 1 UID: 0 PID: 10538 Comm: syz.2.1642 Not tainted syzkaller #0 PREEMPT(full) [ 217.879661][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 217.879673][T10538] Call Trace: [ 217.879681][T10538] [ 217.879690][T10538] dump_stack_lvl+0x189/0x250 [ 217.879718][T10538] ? __pfx____ratelimit+0x10/0x10 [ 217.879749][T10538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.879773][T10538] ? __pfx__printk+0x10/0x10 [ 217.879818][T10538] should_fail_ex+0x414/0x560 [ 217.879849][T10538] should_failslab+0xa8/0x100 [ 217.879878][T10538] __kmalloc_cache_noprof+0x70/0x3d0 [ 217.879902][T10538] ? sctp_add_bind_addr+0x8c/0x370 [ 217.879930][T10538] sctp_add_bind_addr+0x8c/0x370 [ 217.879956][T10538] sctp_copy_local_addr_list+0x30b/0x4e0 [ 217.879982][T10538] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 217.880003][T10538] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 217.880028][T10538] ? sctp_v6_is_any+0x64/0x80 [ 217.880052][T10538] ? sctp_copy_one_addr+0x93/0x360 [ 217.880076][T10538] sctp_bind_addr_copy+0xb3/0x3c0 [ 217.880098][T10538] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 217.880133][T10538] sctp_connect_new_asoc+0x2e0/0x690 [ 217.880163][T10538] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 217.880188][T10538] ? __local_bh_enable_ip+0x12d/0x1c0 [ 217.880218][T10538] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 217.880237][T10538] ? security_sctp_bind_connect+0x7e/0x2e0 [ 217.880263][T10538] sctp_sendmsg+0x155c/0x2810 [ 217.880304][T10538] ? __pfx_sctp_sendmsg+0x10/0x10 [ 217.880334][T10538] ? aa_sk_perm+0x81e/0x950 [ 217.880366][T10538] ? __pfx_aa_sk_perm+0x10/0x10 [ 217.880396][T10538] ? sock_rps_record_flow+0x19/0x410 [ 217.880430][T10538] ? inet_sendmsg+0x2f4/0x370 [ 217.880471][T10538] __sock_sendmsg+0x19c/0x270 [ 217.880504][T10538] ____sys_sendmsg+0x505/0x830 [ 217.880534][T10538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.880569][T10538] ? import_iovec+0x74/0xa0 [ 217.880596][T10538] ___sys_sendmsg+0x21f/0x2a0 [ 217.880623][T10538] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.880690][T10538] ? __fget_files+0x2a/0x420 [ 217.880715][T10538] ? __fget_files+0x3a0/0x420 [ 217.880753][T10538] __x64_sys_sendmsg+0x19b/0x260 [ 217.880780][T10538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.880816][T10538] ? __pfx_ksys_write+0x10/0x10 [ 217.880836][T10538] ? rcu_is_watching+0x15/0xb0 [ 217.880865][T10538] ? do_syscall_64+0xbe/0x3b0 [ 217.880890][T10538] do_syscall_64+0xfa/0x3b0 [ 217.880908][T10538] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.880937][T10538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.880957][T10538] ? clear_bhb_loop+0x60/0xb0 [ 217.880982][T10538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.881002][T10538] RIP: 0033:0x7fa43178eec9 [ 217.881020][T10538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.881038][T10538] RSP: 002b:00007fa4325a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.881062][T10538] RAX: ffffffffffffffda RBX: 00007fa4319e5fa0 RCX: 00007fa43178eec9 [ 217.881075][T10538] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 217.881086][T10538] RBP: 00007fa4325a2090 R08: 0000000000000000 R09: 0000000000000000 [ 217.881097][T10538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.881107][T10538] R13: 00007fa4319e6038 R14: 00007fa4319e5fa0 R15: 00007ffe44384668 [ 217.881137][T10538] [ 218.240879][T10543] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1643'. [ 218.266596][T10546] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1645'. [ 218.280637][T10543] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1643'. [ 218.352427][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1647'. [ 218.380814][T10546] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 218.394131][T10546] batman_adv: batadv0: Adding interface: gretap1 [ 218.400500][T10546] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.430058][T10546] batman_adv: batadv0: Interface activated: gretap1 [ 218.545348][T10563] netlink: 'syz.3.1651': attribute type 3 has an invalid length. [ 218.555170][T10563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1651'. [ 218.567160][T10564] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 218.603622][T10562] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 218.848706][T10580] FAULT_INJECTION: forcing a failure. [ 218.848706][T10580] name failslab, interval 1, probability 0, space 0, times 0 [ 218.883838][T10580] CPU: 1 UID: 0 PID: 10580 Comm: syz.0.1658 Not tainted syzkaller #0 PREEMPT(full) [ 218.883861][T10580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 218.883870][T10580] Call Trace: [ 218.883876][T10580] [ 218.883883][T10580] dump_stack_lvl+0x189/0x250 [ 218.883907][T10580] ? __pfx____ratelimit+0x10/0x10 [ 218.883936][T10580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.883954][T10580] ? __pfx__printk+0x10/0x10 [ 218.883990][T10580] should_fail_ex+0x414/0x560 [ 218.884016][T10580] should_failslab+0xa8/0x100 [ 218.884038][T10580] __kmalloc_cache_noprof+0x70/0x3d0 [ 218.884057][T10580] ? sctp_add_bind_addr+0x8c/0x370 [ 218.884078][T10580] sctp_add_bind_addr+0x8c/0x370 [ 218.884099][T10580] sctp_copy_local_addr_list+0x30b/0x4e0 [ 218.884118][T10580] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 218.884135][T10580] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 218.884154][T10580] ? sctp_v6_is_any+0x64/0x80 [ 218.884173][T10580] ? sctp_copy_one_addr+0x93/0x360 [ 218.884192][T10580] sctp_bind_addr_copy+0xb3/0x3c0 [ 218.884208][T10580] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 218.884234][T10580] sctp_connect_new_asoc+0x2e0/0x690 [ 218.884259][T10580] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 218.884278][T10580] ? __local_bh_enable_ip+0x12d/0x1c0 [ 218.884302][T10580] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 218.884319][T10580] ? security_sctp_bind_connect+0x7e/0x2e0 [ 218.884342][T10580] sctp_sendmsg+0x155c/0x2810 [ 218.884374][T10580] ? __pfx_sctp_sendmsg+0x10/0x10 [ 218.884404][T10580] ? aa_sk_perm+0x81e/0x950 [ 218.884430][T10580] ? __pfx_aa_sk_perm+0x10/0x10 [ 218.884452][T10580] ? sock_rps_record_flow+0x19/0x410 [ 218.884480][T10580] ? inet_sendmsg+0x2f4/0x370 [ 218.884510][T10580] __sock_sendmsg+0x19c/0x270 [ 218.884543][T10580] ____sys_sendmsg+0x505/0x830 [ 218.884568][T10580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.884600][T10580] ? import_iovec+0x74/0xa0 [ 218.884624][T10580] ___sys_sendmsg+0x21f/0x2a0 [ 218.884647][T10580] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.884709][T10580] ? __fget_files+0x2a/0x420 [ 218.884732][T10580] ? __fget_files+0x3a0/0x420 [ 218.884768][T10580] __x64_sys_sendmsg+0x19b/0x260 [ 218.884793][T10580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.884827][T10580] ? __pfx_ksys_write+0x10/0x10 [ 218.884848][T10580] ? rcu_is_watching+0x15/0xb0 [ 218.884875][T10580] ? do_syscall_64+0xbe/0x3b0 [ 218.884897][T10580] do_syscall_64+0xfa/0x3b0 [ 218.884914][T10580] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.884942][T10580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.884961][T10580] ? clear_bhb_loop+0x60/0xb0 [ 218.884986][T10580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.885005][T10580] RIP: 0033:0x7fbba338eec9 [ 218.885024][T10580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.885041][T10580] RSP: 002b:00007fbba427d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.885060][T10580] RAX: ffffffffffffffda RBX: 00007fbba35e5fa0 RCX: 00007fbba338eec9 [ 218.885074][T10580] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 218.885085][T10580] RBP: 00007fbba427d090 R08: 0000000000000000 R09: 0000000000000000 [ 218.885097][T10580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 218.885109][T10580] R13: 00007fbba35e6038 R14: 00007fbba35e5fa0 R15: 00007ffd01331ee8 [ 218.885141][T10580] [ 255.844436][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.285277][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.841389][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 342.869615][T10606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1666'. [ 342.880651][T10606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1666'. [ 343.080813][T10622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1670'. [ 343.288165][T10632] netlink: 'syz.0.1673': attribute type 61 has an invalid length. [ 343.300132][T10631] FAULT_INJECTION: forcing a failure. [ 343.300132][T10631] name failslab, interval 1, probability 0, space 0, times 0 [ 343.313543][T10631] CPU: 0 UID: 0 PID: 10631 Comm: syz.3.1674 Not tainted syzkaller #0 PREEMPT(full) [ 343.313569][T10631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 343.313596][T10631] Call Trace: [ 343.313604][T10631] [ 343.313612][T10631] dump_stack_lvl+0x189/0x250 [ 343.313643][T10631] ? __pfx____ratelimit+0x10/0x10 [ 343.313674][T10631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.313698][T10631] ? __pfx__printk+0x10/0x10 [ 343.313743][T10631] should_fail_ex+0x414/0x560 [ 343.313774][T10631] should_failslab+0xa8/0x100 [ 343.313801][T10631] __kmalloc_cache_noprof+0x70/0x3d0 [ 343.313825][T10631] ? sctp_add_bind_addr+0x8c/0x370 [ 343.313852][T10631] sctp_add_bind_addr+0x8c/0x370 [ 343.313879][T10631] sctp_copy_local_addr_list+0x30b/0x4e0 [ 343.313903][T10631] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 343.313924][T10631] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 343.313949][T10631] ? sctp_v6_is_any+0x64/0x80 [ 343.313974][T10631] ? sctp_copy_one_addr+0x93/0x360 [ 343.313999][T10631] sctp_bind_addr_copy+0xb3/0x3c0 [ 343.314022][T10631] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 343.314057][T10631] sctp_connect_new_asoc+0x2e0/0x690 [ 343.314087][T10631] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 343.314111][T10631] ? __local_bh_enable_ip+0x12d/0x1c0 [ 343.314146][T10631] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 343.314165][T10631] ? security_sctp_bind_connect+0x7e/0x2e0 [ 343.314189][T10631] sctp_sendmsg+0x155c/0x2810 [ 343.314226][T10631] ? __pfx_sctp_sendmsg+0x10/0x10 [ 343.314257][T10631] ? aa_sk_perm+0x81e/0x950 [ 343.314288][T10631] ? __pfx_aa_sk_perm+0x10/0x10 [ 343.314318][T10631] ? sock_rps_record_flow+0x19/0x410 [ 343.314352][T10631] ? inet_sendmsg+0x2f4/0x370 [ 343.314386][T10631] __sock_sendmsg+0x19c/0x270 [ 343.314418][T10631] ____sys_sendmsg+0x505/0x830 [ 343.314449][T10631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.314484][T10631] ? import_iovec+0x74/0xa0 [ 343.314511][T10631] ___sys_sendmsg+0x21f/0x2a0 [ 343.314537][T10631] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.314604][T10631] ? __fget_files+0x2a/0x420 [ 343.314629][T10631] ? __fget_files+0x3a0/0x420 [ 343.314668][T10631] __x64_sys_sendmsg+0x19b/0x260 [ 343.314693][T10631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.314725][T10631] ? __pfx_ksys_write+0x10/0x10 [ 343.314746][T10631] ? rcu_is_watching+0x15/0xb0 [ 343.314775][T10631] ? do_syscall_64+0xbe/0x3b0 [ 343.314800][T10631] do_syscall_64+0xfa/0x3b0 [ 343.314818][T10631] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.314848][T10631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.314867][T10631] ? clear_bhb_loop+0x60/0xb0 [ 343.314891][T10631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.314910][T10631] RIP: 0033:0x7f870438eec9 [ 343.314928][T10631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.314946][T10631] RSP: 002b:00007f870528c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.314967][T10631] RAX: ffffffffffffffda RBX: 00007f87045e5fa0 RCX: 00007f870438eec9 [ 343.314982][T10631] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 343.314995][T10631] RBP: 00007f870528c090 R08: 0000000000000000 R09: 0000000000000000 [ 343.315008][T10631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.315019][T10631] R13: 00007f87045e6038 R14: 00007f87045e5fa0 R15: 00007ffdf2e00a08 [ 343.315053][T10631] [ 343.745169][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1675'. [ 343.834977][T10639] netlink: 'syz.3.1677': attribute type 39 has an invalid length. [ 344.195819][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1682'. [ 344.223404][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'. [ 344.428293][T10670] FAULT_INJECTION: forcing a failure. [ 344.428293][T10670] name failslab, interval 1, probability 0, space 0, times 0 [ 344.442289][T10670] CPU: 0 UID: 0 PID: 10670 Comm: syz.1.1687 Not tainted syzkaller #0 PREEMPT(full) [ 344.442316][T10670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 344.442328][T10670] Call Trace: [ 344.442336][T10670] [ 344.442344][T10670] dump_stack_lvl+0x189/0x250 [ 344.442373][T10670] ? __pfx____ratelimit+0x10/0x10 [ 344.442404][T10670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.442427][T10670] ? __pfx__printk+0x10/0x10 [ 344.442473][T10670] should_fail_ex+0x414/0x560 [ 344.442505][T10670] should_failslab+0xa8/0x100 [ 344.442532][T10670] __kmalloc_cache_noprof+0x70/0x3d0 [ 344.442556][T10670] ? sctp_add_bind_addr+0x8c/0x370 [ 344.442583][T10670] sctp_add_bind_addr+0x8c/0x370 [ 344.442610][T10670] sctp_copy_local_addr_list+0x30b/0x4e0 [ 344.442636][T10670] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 344.442658][T10670] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 344.442681][T10670] ? sctp_v6_is_any+0x64/0x80 [ 344.442707][T10670] ? sctp_copy_one_addr+0x93/0x360 [ 344.442733][T10670] sctp_bind_addr_copy+0xb3/0x3c0 [ 344.442756][T10670] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 344.442791][T10670] sctp_connect_new_asoc+0x2e0/0x690 [ 344.442829][T10670] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 344.442854][T10670] ? __local_bh_enable_ip+0x12d/0x1c0 [ 344.442883][T10670] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 344.442902][T10670] ? security_sctp_bind_connect+0x7e/0x2e0 [ 344.442928][T10670] sctp_sendmsg+0x155c/0x2810 [ 344.442967][T10670] ? __pfx_sctp_sendmsg+0x10/0x10 [ 344.442996][T10670] ? aa_sk_perm+0x81e/0x950 [ 344.443027][T10670] ? __pfx_aa_sk_perm+0x10/0x10 [ 344.443055][T10670] ? sock_rps_record_flow+0x19/0x410 [ 344.443088][T10670] ? inet_sendmsg+0x2f4/0x370 [ 344.443121][T10670] __sock_sendmsg+0x19c/0x270 [ 344.443157][T10670] ____sys_sendmsg+0x505/0x830 [ 344.443187][T10670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.443221][T10670] ? import_iovec+0x74/0xa0 [ 344.443248][T10670] ___sys_sendmsg+0x21f/0x2a0 [ 344.443273][T10670] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.443335][T10670] ? __fget_files+0x2a/0x420 [ 344.443358][T10670] ? __fget_files+0x3a0/0x420 [ 344.443395][T10670] __x64_sys_sendmsg+0x19b/0x260 [ 344.443421][T10670] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.443456][T10670] ? __pfx_ksys_write+0x10/0x10 [ 344.443477][T10670] ? rcu_is_watching+0x15/0xb0 [ 344.443505][T10670] ? do_syscall_64+0xbe/0x3b0 [ 344.443530][T10670] do_syscall_64+0xfa/0x3b0 [ 344.443548][T10670] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.443577][T10670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.443597][T10670] ? clear_bhb_loop+0x60/0xb0 [ 344.443621][T10670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.443640][T10670] RIP: 0033:0x7fad0818eec9 [ 344.443659][T10670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.443674][T10670] RSP: 002b:00007fad08f87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.443696][T10670] RAX: ffffffffffffffda RBX: 00007fad083e5fa0 RCX: 00007fad0818eec9 [ 344.443711][T10670] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 344.443723][T10670] RBP: 00007fad08f87090 R08: 0000000000000000 R09: 0000000000000000 [ 344.443735][T10670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.443746][T10670] R13: 00007fad083e6038 R14: 00007fad083e5fa0 R15: 00007ffefecfd408 [ 344.443780][T10670] [ 345.085694][T10689] syzkaller1: entered promiscuous mode [ 345.091325][T10689] syzkaller1: entered allmulticast mode [ 345.267097][T10701] veth1_to_bond: entered allmulticast mode [ 345.273778][T10701] veth1_to_bond: entered promiscuous mode [ 345.285525][T10700] veth1_to_bond: left promiscuous mode [ 345.291918][T10700] veth1_to_bond: left allmulticast mode [ 345.299090][T10697] tipc: Enabling of bearer rejected, failed to enable media [ 345.594389][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1699'. [ 346.165349][T10732] netlink: 'syz.3.1704': attribute type 10 has an invalid length. [ 346.175504][T10732] bond0: (slave wlan1): Opening slave failed [ 346.217742][T10732] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 346.948569][T10753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1711'. [ 347.051918][T10756] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 347.124171][T10760] netlink: 'syz.3.1713': attribute type 10 has an invalid length. [ 347.134839][T10760] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 347.145059][T10760] team0: Failed to send options change via netlink (err -105) [ 347.153655][T10760] team0: Port device netdevsim0 added [ 347.217564][T10763] syzkaller0: entered promiscuous mode [ 347.223496][T10763] syzkaller0: entered allmulticast mode [ 347.337206][T10767] netlink: 'syz.0.1716': attribute type 1 has an invalid length. [ 347.351312][T10767] netlink: 'syz.0.1716': attribute type 6 has an invalid length. [ 347.376668][T10767] netlink: 'syz.0.1716': attribute type 3 has an invalid length. [ 347.563444][T10772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.019333][T10789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1721'. [ 348.569905][T10802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1727'. [ 348.588190][T10800] nbd2: detected capacity change from 0 to 127 [ 348.612714][ T5844] block nbd2: Receive control failed (result -32) [ 348.621879][T10802] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1727'. [ 348.702663][T10807] netlink: 'syz.2.1728': attribute type 13 has an invalid length. [ 348.720437][T10805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.730175][T10805] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.773284][T10805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 348.796865][T10810] FAULT_INJECTION: forcing a failure. [ 348.796865][T10810] name failslab, interval 1, probability 0, space 0, times 0 [ 348.809673][T10814] netlink: 'syz.0.1729': attribute type 10 has an invalid length. [ 348.818403][T10810] CPU: 1 UID: 0 PID: 10810 Comm: syz.3.1730 Not tainted syzkaller #0 PREEMPT(full) [ 348.818428][T10810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 348.818440][T10810] Call Trace: [ 348.818449][T10810] [ 348.818456][T10810] dump_stack_lvl+0x189/0x250 [ 348.818481][T10810] ? __pfx____ratelimit+0x10/0x10 [ 348.818508][T10810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.818529][T10810] ? __pfx__printk+0x10/0x10 [ 348.818576][T10810] should_fail_ex+0x414/0x560 [ 348.818606][T10810] should_failslab+0xa8/0x100 [ 348.818633][T10810] __kmalloc_cache_noprof+0x70/0x3d0 [ 348.818654][T10810] ? sctp_add_bind_addr+0x8c/0x370 [ 348.818679][T10810] sctp_add_bind_addr+0x8c/0x370 [ 348.818705][T10810] sctp_copy_local_addr_list+0x30b/0x4e0 [ 348.818729][T10810] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 348.818750][T10810] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 348.818773][T10810] ? sctp_v6_is_any+0x64/0x80 [ 348.818798][T10810] ? sctp_copy_one_addr+0x93/0x360 [ 348.818823][T10810] sctp_bind_addr_copy+0xb3/0x3c0 [ 348.818845][T10810] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 348.818880][T10810] sctp_connect_new_asoc+0x2e0/0x690 [ 348.818910][T10810] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 348.818934][T10810] ? __local_bh_enable_ip+0x12d/0x1c0 [ 348.818964][T10810] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 348.818983][T10810] ? security_sctp_bind_connect+0x7e/0x2e0 [ 348.819009][T10810] sctp_sendmsg+0x155c/0x2810 [ 348.819050][T10810] ? __pfx_sctp_sendmsg+0x10/0x10 [ 348.819080][T10810] ? aa_sk_perm+0x81e/0x950 [ 348.819112][T10810] ? __pfx_aa_sk_perm+0x10/0x10 [ 348.819141][T10810] ? sock_rps_record_flow+0x19/0x410 [ 348.819174][T10810] ? inet_sendmsg+0x2f4/0x370 [ 348.819208][T10810] __sock_sendmsg+0x19c/0x270 [ 348.819240][T10810] ____sys_sendmsg+0x505/0x830 [ 348.819270][T10810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.819303][T10810] ? import_iovec+0x74/0xa0 [ 348.819332][T10810] ___sys_sendmsg+0x21f/0x2a0 [ 348.819358][T10810] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.819425][T10810] ? __fget_files+0x2a/0x420 [ 348.819448][T10810] ? __fget_files+0x3a0/0x420 [ 348.819484][T10810] __x64_sys_sendmsg+0x19b/0x260 [ 348.819515][T10810] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.819555][T10810] ? __pfx_ksys_write+0x10/0x10 [ 348.819576][T10810] ? rcu_is_watching+0x15/0xb0 [ 348.819604][T10810] ? do_syscall_64+0xbe/0x3b0 [ 348.819629][T10810] do_syscall_64+0xfa/0x3b0 [ 348.819647][T10810] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.819677][T10810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.819695][T10810] ? clear_bhb_loop+0x60/0xb0 [ 348.819718][T10810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.819737][T10810] RIP: 0033:0x7f870438eec9 [ 348.819755][T10810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.819770][T10810] RSP: 002b:00007f870528c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.819791][T10810] RAX: ffffffffffffffda RBX: 00007f87045e5fa0 RCX: 00007f870438eec9 [ 348.819805][T10810] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 348.819818][T10810] RBP: 00007f870528c090 R08: 0000000000000000 R09: 0000000000000000 [ 348.819830][T10810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 348.819842][T10810] R13: 00007f87045e6038 R14: 00007f87045e5fa0 R15: 00007ffdf2e00a08 [ 348.819876][T10810] [ 349.159316][T10814] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.169056][T10814] bond0: (slave team0): Enslaving as an active interface with an up link [ 349.404622][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 349.417562][T10826] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1734'. [ 350.383371][T10865] @ÿ: renamed from veth0_vlan [ 350.551284][T10876] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1747'. [ 350.757211][T10893] netlink: 'syz.4.1751': attribute type 3 has an invalid length. [ 350.777762][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'. [ 350.790183][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'. [ 350.951618][T10906] netlink: 'syz.2.1756': attribute type 21 has an invalid length. [ 350.974476][T10905] tipc: Enabled bearer , priority 0 [ 350.982530][T10906] netlink: 'syz.2.1756': attribute type 6 has an invalid length. [ 351.004466][T10906] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1756'. [ 351.004527][T10909] netlink: 'syz.2.1756': attribute type 1 has an invalid length. [ 351.038761][T10905] syzkaller0: entered promiscuous mode [ 351.046065][T10905] syzkaller0: entered allmulticast mode [ 351.338753][T10919] tipc: Resetting bearer [ 351.390169][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1760'. [ 351.781529][T10903] tipc: Resetting bearer [ 351.826453][T10903] tipc: Disabling bearer [ 353.216010][T10994] __nla_validate_parse: 4 callbacks suppressed [ 353.216031][T10994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1781'. [ 353.485502][T11009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1785'. [ 353.540235][T11010] netlink: 'syz.4.1786': attribute type 1 has an invalid length. [ 353.562508][T11010] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1786'. [ 353.594792][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1786'. [ 353.736880][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1788'. [ 353.785966][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1788'. [ 353.828537][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'. [ 353.866573][T11031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1792'. [ 354.020398][T11037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1792'. [ 354.234434][ T30] audit: type=1107 audit(1759553151.559:2): pid=11053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 354.546089][T11067] : entered promiscuous mode [ 354.588058][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1803'. [ 354.599465][T11072] IPVS: set_ctl: invalid protocol: 98 172.30.0.2:20001 [ 354.655851][T11075] Àÿ: renamed from team_slave_1 [ 354.922684][T11090] FAULT_INJECTION: forcing a failure. [ 354.922684][T11090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.926599][T11087] syzkaller0: entered promiscuous mode [ 354.975890][T11087] syzkaller0: entered allmulticast mode [ 355.002260][T11090] CPU: 1 UID: 0 PID: 11090 Comm: syz.4.1811 Not tainted syzkaller #0 PREEMPT(full) [ 355.002309][T11090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 355.002325][T11090] Call Trace: [ 355.002332][T11090] [ 355.002341][T11090] dump_stack_lvl+0x189/0x250 [ 355.002371][T11090] ? __pfx____ratelimit+0x10/0x10 [ 355.002401][T11090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.002425][T11090] ? __pfx__printk+0x10/0x10 [ 355.002468][T11090] should_fail_ex+0x414/0x560 [ 355.002499][T11090] _copy_from_user+0x2d/0xb0 [ 355.002524][T11090] __copy_msghdr+0x3c5/0x5b0 [ 355.002552][T11090] ___sys_sendmsg+0x1a5/0x2a0 [ 355.002587][T11090] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.002649][T11090] ? __fget_files+0x2a/0x420 [ 355.002673][T11090] ? __fget_files+0x3a0/0x420 [ 355.002710][T11090] __sys_sendmmsg+0x227/0x430 [ 355.002738][T11090] ? __pfx___sys_sendmmsg+0x10/0x10 [ 355.002759][T11090] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 355.002808][T11090] ? ksys_write+0x22a/0x250 [ 355.002834][T11090] ? __pfx_ksys_write+0x10/0x10 [ 355.002863][T11090] __x64_sys_sendmmsg+0xa0/0xc0 [ 355.002889][T11090] do_syscall_64+0xfa/0x3b0 [ 355.002907][T11090] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.002935][T11090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.002955][T11090] ? clear_bhb_loop+0x60/0xb0 [ 355.002978][T11090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.003002][T11090] RIP: 0033:0x7fc50f18eec9 [ 355.003019][T11090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.003036][T11090] RSP: 002b:00007fc50ff62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 355.003057][T11090] RAX: ffffffffffffffda RBX: 00007fc50f3e6090 RCX: 00007fc50f18eec9 [ 355.003072][T11090] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000005 [ 355.003085][T11090] RBP: 00007fc50ff62090 R08: 0000000000000000 R09: 0000000000000000 [ 355.003097][T11090] R10: 0000000008000004 R11: 0000000000000246 R12: 0000000000000001 [ 355.003109][T11090] R13: 00007fc50f3e6128 R14: 00007fc50f3e6090 R15: 00007ffea3d67998 [ 355.003140][T11090] [ 355.213754][T11089] !: renamed from dummy0 [ 355.363493][T11100] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 357.120369][T11107] batadv_slave_0: entered promiscuous mode [ 357.127939][T11110] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 357.160364][T11115] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 357.249825][T11107] batadv_slave_0: left promiscuous mode [ 357.854853][T11175] FAULT_INJECTION: forcing a failure. [ 357.854853][T11175] name failslab, interval 1, probability 0, space 0, times 0 [ 357.867854][T11175] CPU: 0 UID: 0 PID: 11175 Comm: syz.0.1830 Not tainted syzkaller #0 PREEMPT(full) [ 357.867883][T11175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 357.867895][T11175] Call Trace: [ 357.867902][T11175] [ 357.867910][T11175] dump_stack_lvl+0x189/0x250 [ 357.867938][T11175] ? __pfx____ratelimit+0x10/0x10 [ 357.867968][T11175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.867990][T11175] ? __pfx__printk+0x10/0x10 [ 357.868034][T11175] should_fail_ex+0x414/0x560 [ 357.868062][T11175] should_failslab+0xa8/0x100 [ 357.868088][T11175] __kmalloc_cache_noprof+0x70/0x3d0 [ 357.868112][T11175] ? sctp_add_bind_addr+0x8c/0x370 [ 357.868137][T11175] sctp_add_bind_addr+0x8c/0x370 [ 357.868164][T11175] sctp_copy_local_addr_list+0x30b/0x4e0 [ 357.868191][T11175] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 357.868212][T11175] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 357.868234][T11175] ? sctp_v6_is_any+0x64/0x80 [ 357.868258][T11175] ? sctp_copy_one_addr+0x93/0x360 [ 357.868283][T11175] sctp_bind_addr_copy+0xb3/0x3c0 [ 357.868304][T11175] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 357.868337][T11175] sctp_connect_new_asoc+0x2e0/0x690 [ 357.868364][T11175] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 357.868387][T11175] ? __local_bh_enable_ip+0x12d/0x1c0 [ 357.868417][T11175] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 357.868436][T11175] ? security_sctp_bind_connect+0x7e/0x2e0 [ 357.868462][T11175] sctp_sendmsg+0x155c/0x2810 [ 357.868512][T11175] ? __pfx_sctp_sendmsg+0x10/0x10 [ 357.868542][T11175] ? aa_sk_perm+0x81e/0x950 [ 357.868574][T11175] ? __pfx_aa_sk_perm+0x10/0x10 [ 357.868604][T11175] ? sock_rps_record_flow+0x19/0x410 [ 357.868642][T11175] ? inet_sendmsg+0x2f4/0x370 [ 357.868676][T11175] __sock_sendmsg+0x19c/0x270 [ 357.868709][T11175] ____sys_sendmsg+0x505/0x830 [ 357.868738][T11175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.868773][T11175] ? import_iovec+0x74/0xa0 [ 357.868801][T11175] ___sys_sendmsg+0x21f/0x2a0 [ 357.868827][T11175] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.868894][T11175] ? __fget_files+0x2a/0x420 [ 357.868918][T11175] ? __fget_files+0x3a0/0x420 [ 357.868955][T11175] __x64_sys_sendmsg+0x19b/0x260 [ 357.868982][T11175] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.869018][T11175] ? __pfx_ksys_write+0x10/0x10 [ 357.869038][T11175] ? rcu_is_watching+0x15/0xb0 [ 357.869067][T11175] ? do_syscall_64+0xbe/0x3b0 [ 357.869090][T11175] do_syscall_64+0xfa/0x3b0 [ 357.869108][T11175] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.869137][T11175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.869157][T11175] ? clear_bhb_loop+0x60/0xb0 [ 357.869180][T11175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.869198][T11175] RIP: 0033:0x7fbba338eec9 [ 357.869217][T11175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.869234][T11175] RSP: 002b:00007fbba427d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.869255][T11175] RAX: ffffffffffffffda RBX: 00007fbba35e5fa0 RCX: 00007fbba338eec9 [ 357.869269][T11175] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 357.869282][T11175] RBP: 00007fbba427d090 R08: 0000000000000000 R09: 0000000000000000 [ 357.869295][T11175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 357.869307][T11175] R13: 00007fbba35e6038 R14: 00007fbba35e5fa0 R15: 00007ffd01331ee8 [ 357.869342][T11175] [ 358.287842][T11181] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 358.310909][T11181] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 358.386491][T11179] batadv1: entered allmulticast mode [ 358.462440][T11179] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 358.563868][T11185] __nla_validate_parse: 2 callbacks suppressed [ 358.563887][T11185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1834'. [ 358.956895][T11218] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1841'. [ 358.978055][T11218] batman_adv: batadv0: Adding interface: dummy0 [ 358.978722][T11220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1842'. [ 358.984926][T11218] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.984962][T11218] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 359.053382][T11220] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1842'. [ 359.318180][T11241] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1848'. [ 359.338479][T11241] 8021q: VLANs not supported on sit0 [ 359.399136][T11242] dvmrp8: entered allmulticast mode [ 359.418306][T11244] IPVS: Scheduler module ip_vs_sip not found [ 359.556426][T11251] netlink: 'syz.3.1850': attribute type 23 has an invalid length. [ 359.878565][T11278] erspan0: entered promiscuous mode [ 359.895439][T11240] dvmrp8: left allmulticast mode [ 359.937459][T11280] openvswitch: netlink: Duplicate key (type 32). [ 360.582007][T11309] ip6tnl1: entered promiscuous mode [ 360.587806][T11309] ip6tnl1: entered allmulticast mode [ 360.595385][T11309] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 360.617629][T11310] veth0_to_bridge: entered promiscuous mode [ 360.810418][T11307] veth0_to_bridge: left promiscuous mode [ 361.132719][T11322] gretap1: left promiscuous mode [ 361.433282][T11350] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1874'. [ 361.525009][T11353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1874'. [ 361.676508][T11355] FAULT_INJECTION: forcing a failure. [ 361.676508][T11355] name failslab, interval 1, probability 0, space 0, times 0 [ 361.698423][T11355] CPU: 0 UID: 0 PID: 11355 Comm: syz.2.1877 Not tainted syzkaller #0 PREEMPT(full) [ 361.698453][T11355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 361.698466][T11355] Call Trace: [ 361.698474][T11355] [ 361.698483][T11355] dump_stack_lvl+0x189/0x250 [ 361.698512][T11355] ? __pfx____ratelimit+0x10/0x10 [ 361.698543][T11355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.698567][T11355] ? __pfx__printk+0x10/0x10 [ 361.698611][T11355] should_fail_ex+0x414/0x560 [ 361.698643][T11355] should_failslab+0xa8/0x100 [ 361.698670][T11355] __kmalloc_cache_noprof+0x70/0x3d0 [ 361.698694][T11355] ? sctp_add_bind_addr+0x8c/0x370 [ 361.698721][T11355] sctp_add_bind_addr+0x8c/0x370 [ 361.698748][T11355] sctp_copy_local_addr_list+0x30b/0x4e0 [ 361.698772][T11355] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 361.698793][T11355] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 361.698815][T11355] ? sctp_v6_is_any+0x64/0x80 [ 361.698840][T11355] ? sctp_copy_one_addr+0x93/0x360 [ 361.698866][T11355] sctp_bind_addr_copy+0xb3/0x3c0 [ 361.698889][T11355] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 361.698924][T11355] sctp_connect_new_asoc+0x2e0/0x690 [ 361.698955][T11355] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 361.698980][T11355] ? __local_bh_enable_ip+0x12d/0x1c0 [ 361.699010][T11355] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 361.699030][T11355] ? security_sctp_bind_connect+0x7e/0x2e0 [ 361.699056][T11355] sctp_sendmsg+0x155c/0x2810 [ 361.699097][T11355] ? __pfx_sctp_sendmsg+0x10/0x10 [ 361.699127][T11355] ? aa_sk_perm+0x81e/0x950 [ 361.699166][T11355] ? __pfx_aa_sk_perm+0x10/0x10 [ 361.699196][T11355] ? sock_rps_record_flow+0x19/0x410 [ 361.699229][T11355] ? inet_sendmsg+0x2f4/0x370 [ 361.699263][T11355] __sock_sendmsg+0x19c/0x270 [ 361.699296][T11355] ____sys_sendmsg+0x505/0x830 [ 361.699326][T11355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.699361][T11355] ? import_iovec+0x74/0xa0 [ 361.699389][T11355] ___sys_sendmsg+0x21f/0x2a0 [ 361.699416][T11355] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.699484][T11355] ? __fget_files+0x2a/0x420 [ 361.699509][T11355] ? __fget_files+0x3a0/0x420 [ 361.699547][T11355] __x64_sys_sendmsg+0x19b/0x260 [ 361.699575][T11355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.699610][T11355] ? __pfx_ksys_write+0x10/0x10 [ 361.699631][T11355] ? rcu_is_watching+0x15/0xb0 [ 361.699660][T11355] ? do_syscall_64+0xbe/0x3b0 [ 361.699684][T11355] do_syscall_64+0xfa/0x3b0 [ 361.699703][T11355] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.699732][T11355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.699752][T11355] ? clear_bhb_loop+0x60/0xb0 [ 361.699777][T11355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.699796][T11355] RIP: 0033:0x7fa43178eec9 [ 361.699814][T11355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.699832][T11355] RSP: 002b:00007fa4325a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.699852][T11355] RAX: ffffffffffffffda RBX: 00007fa4319e5fa0 RCX: 00007fa43178eec9 [ 361.699865][T11355] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 361.699877][T11355] RBP: 00007fa4325a2090 R08: 0000000000000000 R09: 0000000000000000 [ 361.699888][T11355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 361.699899][T11355] R13: 00007fa4319e6038 R14: 00007fa4319e5fa0 R15: 00007ffe44384668 [ 361.699932][T11355] [ 362.447005][T11364] FAULT_INJECTION: forcing a failure. [ 362.447005][T11364] name failslab, interval 1, probability 0, space 0, times 0 [ 362.485913][T11364] CPU: 0 UID: 0 PID: 11364 Comm: syz.2.1880 Not tainted syzkaller #0 PREEMPT(full) [ 362.485940][T11364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 362.485952][T11364] Call Trace: [ 362.485960][T11364] [ 362.485968][T11364] dump_stack_lvl+0x189/0x250 [ 362.485995][T11364] ? __pfx____ratelimit+0x10/0x10 [ 362.486044][T11364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.486067][T11364] ? __pfx__printk+0x10/0x10 [ 362.486099][T11364] ? __pfx_fib_rules_lookup+0x10/0x10 [ 362.486118][T11364] ? l3mdev_update_flow+0x29/0x640 [ 362.486138][T11364] ? l3mdev_update_flow+0x4d1/0x640 [ 362.486162][T11364] should_fail_ex+0x414/0x560 [ 362.486192][T11364] should_failslab+0xa8/0x100 [ 362.486220][T11364] kmem_cache_alloc_noprof+0x73/0x3c0 [ 362.486242][T11364] ? dst_alloc+0x105/0x170 [ 362.486268][T11364] dst_alloc+0x105/0x170 [ 362.486297][T11364] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 362.486335][T11364] ? ip_route_output_key_hash+0xc1/0x280 [ 362.486365][T11364] ip_route_output_key_hash+0x174/0x280 [ 362.486407][T11364] ? __lock_acquire+0xab9/0xd20 [ 362.486426][T11364] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 362.486469][T11364] ip_route_output_flow+0x2a/0x150 [ 362.486489][T11364] ? security_sk_classify_flow+0x70/0x180 [ 362.486513][T11364] udp_sendmsg+0x142e/0x2170 [ 362.486557][T11364] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 362.486586][T11364] ? __pfx_udp_sendmsg+0x10/0x10 [ 362.486631][T11364] ? get_random_u32+0x155/0x940 [ 362.486668][T11364] ? register_lock_class+0x51/0x320 [ 362.486684][T11364] ? get_random_u32+0x155/0x940 [ 362.486712][T11364] ? __lock_acquire+0xab9/0xd20 [ 362.486741][T11364] udpv6_sendmsg+0xc1c/0x2510 [ 362.486781][T11364] ? udp_lib_get_port+0x164b/0x1b10 [ 362.486806][T11364] ? udp_lib_get_port+0x164b/0x1b10 [ 362.486831][T11364] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 362.486866][T11364] ? __lock_acquire+0xab9/0xd20 [ 362.486899][T11364] ? __local_bh_enable_ip+0x12d/0x1c0 [ 362.486919][T11364] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 362.486945][T11364] ? inet_send_prepare+0x1b9/0x270 [ 362.486977][T11364] ? inet_send_prepare+0x1b9/0x270 [ 362.487008][T11364] ? inet6_sendmsg+0xe4/0x120 [ 362.487036][T11364] __sock_sendmsg+0xe5/0x270 [ 362.487066][T11364] ____sys_sendmsg+0x52d/0x830 [ 362.487095][T11364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.487127][T11364] ? import_iovec+0x74/0xa0 [ 362.487153][T11364] ___sys_sendmsg+0x21f/0x2a0 [ 362.487180][T11364] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.487243][T11364] ? __fget_files+0x2a/0x420 [ 362.487268][T11364] ? __fget_files+0x3a0/0x420 [ 362.487306][T11364] __sys_sendmmsg+0x227/0x430 [ 362.487336][T11364] ? __pfx___sys_sendmmsg+0x10/0x10 [ 362.487356][T11364] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 362.487411][T11364] ? ksys_write+0x22a/0x250 [ 362.487437][T11364] ? __pfx_ksys_write+0x10/0x10 [ 362.487456][T11364] ? rcu_is_watching+0x15/0xb0 [ 362.487487][T11364] __x64_sys_sendmmsg+0xa0/0xc0 [ 362.487513][T11364] do_syscall_64+0xfa/0x3b0 [ 362.487532][T11364] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.487559][T11364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.487579][T11364] ? clear_bhb_loop+0x60/0xb0 [ 362.487603][T11364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.487622][T11364] RIP: 0033:0x7fa43178eec9 [ 362.487641][T11364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.487658][T11364] RSP: 002b:00007fa4325a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 362.487680][T11364] RAX: ffffffffffffffda RBX: 00007fa4319e5fa0 RCX: 00007fa43178eec9 [ 362.487694][T11364] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000005 [ 362.487706][T11364] RBP: 00007fa4325a2090 R08: 0000000000000000 R09: 0000000000000000 [ 362.487718][T11364] R10: 0000000008000004 R11: 0000000000000246 R12: 0000000000000001 [ 362.487730][T11364] R13: 00007fa4319e6038 R14: 00007fa4319e5fa0 R15: 00007ffe44384668 [ 362.487764][T11364] [ 363.041784][T11374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1883'. [ 363.251528][T11374] gre0: entered promiscuous mode [ 363.256539][T11374] gre0: entered allmulticast mode [ 363.544185][T11393] tipc: Enabled bearer , priority 0 [ 363.554401][T11386] syzkaller0: entered promiscuous mode [ 363.559911][T11386] syzkaller0: entered allmulticast mode [ 363.611860][T11386] tipc: Resetting bearer [ 363.630944][T11385] tipc: Resetting bearer [ 363.664501][T11397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1887'. [ 363.685948][T11385] tipc: Disabling bearer [ 363.878466][T11403] FAULT_INJECTION: forcing a failure. [ 363.878466][T11403] name failslab, interval 1, probability 0, space 0, times 0 [ 363.927231][T11404] syzkaller0: entered promiscuous mode [ 363.932919][T11404] syzkaller0: entered allmulticast mode [ 363.957617][T11403] CPU: 0 UID: 0 PID: 11403 Comm: syz.3.1889 Not tainted syzkaller #0 PREEMPT(full) [ 363.957647][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 363.957663][T11403] Call Trace: [ 363.957671][T11403] [ 363.957680][T11403] dump_stack_lvl+0x189/0x250 [ 363.957709][T11403] ? __pfx____ratelimit+0x10/0x10 [ 363.957739][T11403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.957763][T11403] ? __pfx__printk+0x10/0x10 [ 363.957808][T11403] should_fail_ex+0x414/0x560 [ 363.957841][T11403] should_failslab+0xa8/0x100 [ 363.957868][T11403] __kmalloc_cache_noprof+0x70/0x3d0 [ 363.957900][T11403] ? sctp_add_bind_addr+0x8c/0x370 [ 363.957927][T11403] sctp_add_bind_addr+0x8c/0x370 [ 363.957954][T11403] sctp_copy_local_addr_list+0x30b/0x4e0 [ 363.957979][T11403] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 363.958001][T11403] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 363.958026][T11403] ? sctp_v6_is_any+0x64/0x80 [ 363.958051][T11403] ? sctp_copy_one_addr+0x93/0x360 [ 363.958077][T11403] sctp_bind_addr_copy+0xb3/0x3c0 [ 363.958099][T11403] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 363.958133][T11403] sctp_connect_new_asoc+0x2e0/0x690 [ 363.958164][T11403] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 363.958187][T11403] ? __local_bh_enable_ip+0x12d/0x1c0 [ 363.958216][T11403] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 363.958235][T11403] ? security_sctp_bind_connect+0x7e/0x2e0 [ 363.958261][T11403] sctp_sendmsg+0x155c/0x2810 [ 363.958302][T11403] ? __pfx_sctp_sendmsg+0x10/0x10 [ 363.958331][T11403] ? aa_sk_perm+0x81e/0x950 [ 363.958363][T11403] ? __pfx_aa_sk_perm+0x10/0x10 [ 363.958393][T11403] ? sock_rps_record_flow+0x19/0x410 [ 363.958427][T11403] ? inet_sendmsg+0x2f4/0x370 [ 363.958461][T11403] __sock_sendmsg+0x19c/0x270 [ 363.958493][T11403] ____sys_sendmsg+0x505/0x830 [ 363.958524][T11403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.958558][T11403] ? import_iovec+0x74/0xa0 [ 363.958586][T11403] ___sys_sendmsg+0x21f/0x2a0 [ 363.958612][T11403] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.958679][T11403] ? __fget_files+0x2a/0x420 [ 363.958703][T11403] ? __fget_files+0x3a0/0x420 [ 363.958742][T11403] __x64_sys_sendmsg+0x19b/0x260 [ 363.958769][T11403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.958804][T11403] ? __pfx_ksys_write+0x10/0x10 [ 363.958824][T11403] ? rcu_is_watching+0x15/0xb0 [ 363.958851][T11403] ? do_syscall_64+0xbe/0x3b0 [ 363.958873][T11403] do_syscall_64+0xfa/0x3b0 [ 363.958896][T11403] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.958926][T11403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.958946][T11403] ? clear_bhb_loop+0x60/0xb0 [ 363.958970][T11403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.958989][T11403] RIP: 0033:0x7f870438eec9 [ 363.959006][T11403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.959023][T11403] RSP: 002b:00007f870528c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.959044][T11403] RAX: ffffffffffffffda RBX: 00007f87045e5fa0 RCX: 00007f870438eec9 [ 363.959058][T11403] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 363.959071][T11403] RBP: 00007f870528c090 R08: 0000000000000000 R09: 0000000000000000 [ 363.959084][T11403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.959095][T11403] R13: 00007f87045e6038 R14: 00007f87045e5fa0 R15: 00007ffdf2e00a08 [ 363.959129][T11403] [ 364.636160][T11412] netlink: 'syz.3.1891': attribute type 24 has an invalid length. [ 364.644218][T11412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1891'. [ 365.962083][T11410] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1891'. [ 365.972724][T11412] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 365.973202][T11416] netlink: 'syz.2.1892': attribute type 1 has an invalid length. [ 366.164325][T11429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1894'. [ 366.304626][T11437] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 366.311373][T11437] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 366.491876][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1900'. [ 366.548716][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1903'. [ 366.781014][ T8556] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 366.806310][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 366.814966][ T8556] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 366.927382][T11460] lo: entered promiscuous mode [ 366.932776][T11460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.981315][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 367.107482][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 367.139796][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 367.152266][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 367.160963][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 367.181259][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 368.093564][T11554] netlink: 'syz.3.1928': attribute type 10 has an invalid length. [ 368.115041][T11554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.130399][T11554] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 368.577718][T11593] tipc: Started in network mode [ 368.582785][T11593] tipc: Node identity ae8ae71fae32, cluster identity 4711 [ 368.590176][T11593] tipc: Enabled bearer , priority 0 [ 368.593925][T11594] netlink: 'syz.1.1934': attribute type 32 has an invalid length. [ 368.612376][T11593] openvswitch: netlink: Message has 5424 unknown bytes. [ 368.619490][T11593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.713292][T11593] syzkaller0: entered promiscuous mode [ 368.718934][T11593] syzkaller0: entered allmulticast mode [ 368.839769][T11600] tipc: Resetting bearer [ 368.876463][T11592] tipc: Resetting bearer [ 368.938105][T11597] can: request_module (can-proto-0) failed. [ 368.961951][T11592] tipc: Disabling bearer [ 369.567122][T11643] syzkaller1: entered promiscuous mode [ 369.574950][T11643] syzkaller1: entered allmulticast mode [ 369.597415][T11655] netlink: 'syz.2.1952': attribute type 3 has an invalid length. [ 369.605803][T11655] netlink: 'syz.2.1952': attribute type 1 has an invalid length. [ 369.614541][T11655] __nla_validate_parse: 155 callbacks suppressed [ 369.614562][T11655] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1952'. [ 369.908551][T11669] netlink: 'syz.2.1957': attribute type 4 has an invalid length. [ 369.946601][T11669] netlink: 'syz.2.1957': attribute type 4 has an invalid length. [ 370.095501][T11671] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1958'. [ 370.350990][T11684] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1962'. [ 370.370446][T11684] team0: Mode "broadcas" not found [ 370.881393][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 370.932725][T11696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1966'. [ 370.984993][T11697] erspan0: left promiscuous mode [ 371.024587][T11697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.032607][T11697] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 371.159773][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1967'. [ 371.549170][T11706] Can't find ip_set type hash:ip,maº° [ 371.683655][T11715] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.1972'. [ 371.760072][T11715] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1972'. [ 371.790321][T11715] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1972'. [ 371.850171][T11715] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 371.861003][T11715] gretap2: entered promiscuous mode [ 371.866705][T11715] gretap2: entered allmulticast mode [ 372.090202][T11734] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1977'. [ 372.122610][T11727] 8021q: adding VLAN 0 to HW filter on device bond3 [ 372.358252][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1978'. [ 372.571942][T11747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 372.579655][T11747] IPv6: NLM_F_CREATE should be set when creating new route [ 372.699090][T11758] netlink: 'syz.4.1984': attribute type 2 has an invalid length. [ 373.509606][T11788] macsec1: entered promiscuous mode [ 373.525966][T11788] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 373.538447][T11788] macsec1: entered allmulticast mode [ 373.549967][T11788] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 373.574378][T11790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.923613][T11809] netlink: 'syz.4.1998': attribute type 1 has an invalid length. [ 374.164393][T11828] dvmrp0: entered allmulticast mode [ 374.986264][T11835] __nla_validate_parse: 7 callbacks suppressed [ 374.986282][T11835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2005'. [ 375.002945][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2003'. [ 375.097092][T11842] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2005'. [ 375.128128][T11836] vlan0: entered allmulticast mode [ 375.140552][T11842] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2005'. [ 375.151477][T11836] bridge_slave_0: entered allmulticast mode [ 375.213291][T11849] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2009'. [ 376.211659][T11871] rdma_rxe: rxe_newlink: failed to add lo [ 376.219567][T11871] lo: left promiscuous mode [ 376.359664][T11871] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.371704][T11871] batman_adv: batadv0: Interface activated: dummy0 [ 376.461331][T11871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.805347][T11896] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2018'. [ 376.835390][T11894] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2018'. [ 377.113824][T11915] tc_dump_action: action bad kind [ 377.184834][T11919] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 377.404045][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 377.618912][T11936] netlink: 'syz.2.2032': attribute type 13 has an invalid length. [ 377.639109][T11936] netlink: 'syz.2.2032': attribute type 17 has an invalid length. [ 377.689940][T11936] gre0: left promiscuous mode [ 377.708499][T11936] gre0: left allmulticast mode [ 377.849017][T11936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.858028][T11936] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.873163][T11936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.650025][T11988] bond2: option mode: unable to set because the bond device is up [ 378.702839][T11990] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2050'. [ 378.725244][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.747644][T11990] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 378.812294][T11993] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 378.822444][T11993] bond2: (slave macvlan4): Enslaving as a backup interface with a down link [ 378.991446][T11999] FAULT_INJECTION: forcing a failure. [ 378.991446][T11999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.016490][T11999] CPU: 0 UID: 0 PID: 11999 Comm: syz.1.2051 Not tainted syzkaller #0 PREEMPT(full) [ 379.016519][T11999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 379.016531][T11999] Call Trace: [ 379.016539][T11999] [ 379.016548][T11999] dump_stack_lvl+0x189/0x250 [ 379.016576][T11999] ? __pfx____ratelimit+0x10/0x10 [ 379.016615][T11999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.016638][T11999] ? __pfx__printk+0x10/0x10 [ 379.016680][T11999] should_fail_ex+0x414/0x560 [ 379.016710][T11999] _copy_from_user+0x2d/0xb0 [ 379.016731][T11999] __copy_msghdr+0x3c5/0x5b0 [ 379.016756][T11999] ___sys_sendmsg+0x1a5/0x2a0 [ 379.016779][T11999] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.016835][T11999] ? __fget_files+0x2a/0x420 [ 379.016857][T11999] ? __fget_files+0x3a0/0x420 [ 379.016892][T11999] __x64_sys_sendmsg+0x19b/0x260 [ 379.016919][T11999] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.016953][T11999] ? __pfx_ksys_write+0x10/0x10 [ 379.016973][T11999] ? rcu_is_watching+0x15/0xb0 [ 379.016998][T11999] ? do_syscall_64+0xbe/0x3b0 [ 379.017018][T11999] do_syscall_64+0xfa/0x3b0 [ 379.017033][T11999] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.017062][T11999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.017082][T11999] ? clear_bhb_loop+0x60/0xb0 [ 379.017104][T11999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.017121][T11999] RIP: 0033:0x7fad0818eec9 [ 379.017138][T11999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.017154][T11999] RSP: 002b:00007fad08f87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.017175][T11999] RAX: ffffffffffffffda RBX: 00007fad083e5fa0 RCX: 00007fad0818eec9 [ 379.017188][T11999] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000004 [ 379.017200][T11999] RBP: 00007fad08f87090 R08: 0000000000000000 R09: 0000000000000000 [ 379.017212][T11999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.017224][T11999] R13: 00007fad083e6038 R14: 00007fad083e5fa0 R15: 00007ffefecfd408 [ 379.017258][T11999] [ 379.361271][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 379.376585][T12016] vlan2: entered promiscuous mode [ 379.382946][T12016] vlan2: entered allmulticast mode [ 379.388360][T12016] hsr_slave_1: entered allmulticast mode [ 379.425794][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2055'. [ 379.659725][T12028] IPVS: Scheduler module ip_vs_sip not found [ 379.895315][T12044] netlink: 'syz.1.2061': attribute type 1 has an invalid length. [ 379.975422][T12056] netlink: 'syz.2.2065': attribute type 5 has an invalid length. [ 379.997732][T12057] __nla_validate_parse: 4 callbacks suppressed [ 379.997753][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2065'. [ 380.027255][T12056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2065'. [ 380.071288][T12057] netlink: 'syz.2.2065': attribute type 5 has an invalid length. [ 380.131386][T12057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2065'. [ 380.174894][T12056] geneve2: entered promiscuous mode [ 380.180149][T12056] geneve2: entered allmulticast mode [ 380.224939][ T8556] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 380.241325][ T8556] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 380.277155][ T8556] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 380.363999][T12078] netlink: 'syz.3.2070': attribute type 1 has an invalid length. [ 380.421348][ T8556] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 380.443535][T12084] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2074'. [ 380.471190][T12084] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 380.487877][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 380.691895][T12097] netlink: 'syz.2.2077': attribute type 5 has an invalid length. [ 380.724285][T12100] netlink: 'syz.1.2078': attribute type 32 has an invalid length. [ 380.732573][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'. [ 380.789956][T12100] bond2: option coupled_control: invalid value (128) [ 380.832654][T12100] bond2 (unregistering): Released all slaves [ 380.860155][T12109] ieee802154 phy0 wpan0: encryption failed: -90 [ 380.899623][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2080'. [ 380.911551][T12108] bridge_slave_1: left allmulticast mode [ 380.917244][T12108] bridge_slave_1: left promiscuous mode [ 380.951531][T12108] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.972937][T12108] bridge_slave_0: left allmulticast mode [ 380.979101][T12108] bridge_slave_0: left promiscuous mode [ 380.993747][T12108] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.488591][T12149] FAULT_INJECTION: forcing a failure. [ 381.488591][T12149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.520689][T12149] CPU: 1 UID: 0 PID: 12149 Comm: syz.2.2091 Not tainted syzkaller #0 PREEMPT(full) [ 381.520715][T12149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 381.520725][T12149] Call Trace: [ 381.520732][T12149] [ 381.520740][T12149] dump_stack_lvl+0x189/0x250 [ 381.520767][T12149] ? __pfx____ratelimit+0x10/0x10 [ 381.520796][T12149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.520817][T12149] ? __pfx__printk+0x10/0x10 [ 381.520843][T12149] ? __might_fault+0xb0/0x130 [ 381.520876][T12149] should_fail_ex+0x414/0x560 [ 381.520907][T12149] _copy_from_user+0x2d/0xb0 [ 381.520928][T12149] ____sys_sendmsg+0x2fe/0x830 [ 381.520957][T12149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.520989][T12149] ? import_iovec+0x74/0xa0 [ 381.521013][T12149] ___sys_sendmsg+0x21f/0x2a0 [ 381.521038][T12149] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.521096][T12149] ? __fget_files+0x2a/0x420 [ 381.521119][T12149] ? __fget_files+0x3a0/0x420 [ 381.521149][T12149] __x64_sys_sendmsg+0x19b/0x260 [ 381.521171][T12149] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.521201][T12149] ? __pfx_ksys_write+0x10/0x10 [ 381.521219][T12149] ? rcu_is_watching+0x15/0xb0 [ 381.521246][T12149] ? do_syscall_64+0xbe/0x3b0 [ 381.521269][T12149] do_syscall_64+0xfa/0x3b0 [ 381.521287][T12149] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.521315][T12149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.521332][T12149] ? clear_bhb_loop+0x60/0xb0 [ 381.521354][T12149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.521371][T12149] RIP: 0033:0x7fa43178eec9 [ 381.521389][T12149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.521404][T12149] RSP: 002b:00007fa4325a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.521425][T12149] RAX: ffffffffffffffda RBX: 00007fa4319e5fa0 RCX: 00007fa43178eec9 [ 381.521440][T12149] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000004 [ 381.521452][T12149] RBP: 00007fa4325a2090 R08: 0000000000000000 R09: 0000000000000000 [ 381.521465][T12149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.521476][T12149] R13: 00007fa4319e6038 R14: 00007fa4319e5fa0 R15: 00007ffe44384668 [ 381.521515][T12149] [ 381.521910][T12150] netlink: 'syz.3.2094': attribute type 1 has an invalid length. [ 382.234189][T12186] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2102'. [ 382.380485][T12169] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 382.715296][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2107'. [ 382.896180][T12218] FAULT_INJECTION: forcing a failure. [ 382.896180][T12218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.897415][T12218] [ 382.897424][T12218] ====================================================== [ 382.897432][T12218] WARNING: possible circular locking dependency detected [ 382.897445][T12218] syzkaller #0 Not tainted [ 382.897455][T12218] ------------------------------------------------------ [ 382.897462][T12218] syz.0.2111/12218 is trying to acquire lock: [ 382.897472][T12218] ffffffff8dd2e820 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 382.897524][T12218] [ 382.897524][T12218] but task is already holding lock: [ 382.897530][T12218] ffff8880b8839fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 382.897570][T12218] [ 382.897570][T12218] which lock already depends on the new lock. [ 382.897570][T12218] [ 382.897577][T12218] [ 382.897577][T12218] the existing dependency chain (in reverse order) is: [ 382.897584][T12218] [ 382.897584][T12218] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 382.897608][T12218] lock_acquire+0x120/0x360 [ 382.897625][T12218] _raw_spin_lock_nested+0x32/0x50 [ 382.897652][T12218] raw_spin_rq_lock_nested+0x2a/0x140 [ 382.897669][T12218] task_rq_lock+0xbc/0x470 [ 382.897685][T12218] cgroup_move_task+0x92/0x2a0 [ 382.897705][T12218] css_set_move_task+0x658/0x9e0 [ 382.897727][T12218] cgroup_post_fork+0x1ef/0x790 [ 382.897748][T12218] copy_process+0x3862/0x3c00 [ 382.897767][T12218] kernel_clone+0x21e/0x840 [ 382.897787][T12218] user_mode_thread+0xdd/0x140 [ 382.897807][T12218] rest_init+0x23/0x300 [ 382.897828][T12218] start_kernel+0x3ae/0x410 [ 382.897850][T12218] x86_64_start_reservations+0x24/0x30 [ 382.897868][T12218] x86_64_start_kernel+0x143/0x1c0 [ 382.897885][T12218] common_startup_64+0x13e/0x147 [ 382.897909][T12218] [ 382.897909][T12218] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 382.897934][T12218] lock_acquire+0x120/0x360 [ 382.897949][T12218] _raw_spin_lock_irqsave+0xa7/0xf0 [ 382.897974][T12218] try_to_wake_up+0x67/0x12b0 [ 382.897996][T12218] create_worker+0x503/0x720 [ 382.898020][T12218] workqueue_init+0x3f0/0x6a0 [ 382.898039][T12218] kernel_init_freeable+0x302/0x4b0 [ 382.898063][T12218] kernel_init+0x1d/0x1d0 [ 382.898083][T12218] ret_from_fork+0x436/0x7d0 [ 382.898100][T12218] ret_from_fork_asm+0x1a/0x30 [ 382.898125][T12218] [ 382.898125][T12218] -> #3 (&pool->lock){-.-.}-{2:2}: [ 382.898155][T12218] lock_acquire+0x120/0x360 [ 382.898170][T12218] _raw_spin_lock+0x2e/0x40 [ 382.898194][T12218] __queue_work+0x809/0xfb0 [ 382.898212][T12218] queue_work_on+0x181/0x270 [ 382.898230][T12218] rpm_suspend+0xe54/0x1720 [ 382.898254][T12218] __pm_runtime_idle+0x12f/0x1a0 [ 382.898276][T12218] __device_attach+0x342/0x400 [ 382.898301][T12218] bus_probe_device+0x185/0x260 [ 382.898320][T12218] device_add+0x7b6/0xb50 [ 382.898341][T12218] serial_base_port_add+0x2e3/0x410 [ 382.898364][T12218] serial_core_register_port+0x369/0x27c0 [ 382.898391][T12218] serial8250_register_8250_port+0x16db/0x2050 [ 382.898416][T12218] serial_pnp_probe+0x527/0x790 [ 382.898441][T12218] pnp_device_probe+0x30b/0x4c0 [ 382.898464][T12218] really_probe+0x26a/0x9e0 [ 382.898489][T12218] __driver_probe_device+0x18c/0x2f0 [ 382.898514][T12218] driver_probe_device+0x4f/0x430 [ 382.898539][T12218] __driver_attach+0x452/0x700 [ 382.898564][T12218] bus_for_each_dev+0x230/0x2b0 [ 382.898582][T12218] bus_add_driver+0x345/0x640 [ 382.898601][T12218] driver_register+0x23a/0x320 [ 382.898617][T12218] serial8250_init+0x8f/0x160 [ 382.898634][T12218] do_one_initcall+0x233/0x820 [ 382.898656][T12218] do_initcall_level+0x104/0x190 [ 382.898679][T12218] do_initcalls+0x59/0xa0 [ 382.898702][T12218] kernel_init_freeable+0x334/0x4b0 [ 382.898725][T12218] kernel_init+0x1d/0x1d0 [ 382.898745][T12218] ret_from_fork+0x436/0x7d0 [ 382.898762][T12218] ret_from_fork_asm+0x1a/0x30 [ 382.898785][T12218] [ 382.898785][T12218] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 382.898810][T12218] lock_acquire+0x120/0x360 [ 382.898825][T12218] _raw_spin_lock_irqsave+0xa7/0xf0 [ 382.898850][T12218] __pm_runtime_resume+0x10f/0x180 [ 382.898873][T12218] __uart_start+0x171/0x460 [ 382.898887][T12218] uart_write+0xdc/0x130 [ 382.898901][T12218] n_tty_write+0xd27/0x1200 [ 382.898922][T12218] file_tty_write+0x554/0xa20 [ 382.898948][T12218] vfs_write+0x5c6/0xb30 [ 382.898967][T12218] ksys_write+0x145/0x250 [ 382.898986][T12218] do_syscall_64+0xfa/0x3b0 [ 382.899005][T12218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.899022][T12218] [ 382.899022][T12218] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 382.899047][T12218] lock_acquire+0x120/0x360 [ 382.899062][T12218] _raw_spin_lock_irqsave+0xa7/0xf0 [ 382.899087][T12218] serial8250_console_write+0x17e/0x1ba0 [ 382.899107][T12218] console_flush_all+0x728/0xc40 [ 382.899130][T12218] console_unlock+0xc4/0x270 [ 382.899154][T12218] vprintk_emit+0x5b7/0x7a0 [ 382.899174][T12218] _printk+0xcf/0x120 [ 382.899198][T12218] register_console+0xa8b/0xf90 [ 382.899217][T12218] univ8250_console_init+0x3a/0x70 [ 382.899232][T12218] console_init+0x10e/0x430 [ 382.899247][T12218] start_kernel+0x254/0x410 [ 382.899269][T12218] x86_64_start_reservations+0x24/0x30 [ 382.899287][T12218] x86_64_start_kernel+0x143/0x1c0 [ 382.899303][T12218] common_startup_64+0x13e/0x147 [ 382.899327][T12218] [ 382.899327][T12218] -> #0 (console_owner){-.-.}-{0:0}: [ 382.899352][T12218] validate_chain+0xb9b/0x2140 [ 382.899372][T12218] __lock_acquire+0xab9/0xd20 [ 382.899387][T12218] lock_acquire+0x120/0x360 [ 382.899401][T12218] console_flush_all+0x6d2/0xc40 [ 382.899429][T12218] console_unlock+0xc4/0x270 [ 382.899449][T12218] vprintk_emit+0x5b7/0x7a0 [ 382.899471][T12218] _printk+0xcf/0x120 [ 382.899495][T12218] should_fail_ex+0x3f5/0x560 [ 382.899518][T12218] strncpy_from_user+0x36/0x290 [ 382.899539][T12218] strncpy_from_user_nofault+0x72/0x150 [ 382.899557][T12218] bpf_probe_read_compat_str+0xe2/0x180 [ 382.899577][T12218] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 382.899592][T12218] bpf_trace_run4+0x28b/0x4a0 [ 382.899620][T12218] __bpf_trace_sched_switch+0x17a/0x1e0 [ 382.899643][T12218] __traceiter_sched_switch+0x9a/0xd0 [ 382.899667][T12218] __schedule+0x238f/0x4cc0 [ 382.899691][T12218] preempt_schedule_irq+0xb5/0x150 [ 382.899717][T12218] irqentry_exit+0x6f/0x90 [ 382.899732][T12218] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 382.899750][T12218] lock_acquire+0x175/0x360 [ 382.899765][T12218] unwind_next_frame+0xc2/0x2390 [ 382.899787][T12218] arch_stack_walk+0x11c/0x150 [ 382.899808][T12218] stack_trace_save+0x9c/0xe0 [ 382.899829][T12218] kasan_save_track+0x3e/0x80 [ 382.899848][T12218] __kasan_kmalloc+0x93/0xb0 [ 382.899867][T12218] __kmalloc_noprof+0x27a/0x4f0 [ 382.899887][T12218] sock_kmalloc+0xd6/0x160 [ 382.899908][T12218] ____sys_sendmsg+0x1b5/0x830 [ 382.899928][T12218] ___sys_sendmsg+0x21f/0x2a0 [ 382.899947][T12218] __x64_sys_sendmsg+0x19b/0x260 [ 382.899967][T12218] do_syscall_64+0xfa/0x3b0 [ 382.899984][T12218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.900002][T12218] [ 382.900002][T12218] other info that might help us debug this: [ 382.900002][T12218] [ 382.900008][T12218] Chain exists of: [ 382.900008][T12218] console_owner --> &p->pi_lock --> &rq->__lock [ 382.900008][T12218] [ 382.900038][T12218] Possible unsafe locking scenario: [ 382.900038][T12218] [ 382.900044][T12218] CPU0 CPU1 [ 382.900050][T12218] ---- ---- [ 382.900056][T12218] lock(&rq->__lock); [ 382.900069][T12218] lock(&p->pi_lock); [ 382.900083][T12218] lock(&rq->__lock); [ 382.900097][T12218] lock(console_owner); [ 382.900110][T12218] [ 382.900110][T12218] *** DEADLOCK *** [ 382.900110][T12218] [ 382.900115][T12218] 5 locks held by syz.0.2111/12218: [ 382.900126][T12218] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 382.900181][T12218] #1: ffff8880b8839fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 382.900225][T12218] #2: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 382.900276][T12218] #3: ffffffff8dd2e880 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 382.900327][T12218] #4: ffffffff8dc16150 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 382.900376][T12218] [ 382.900376][T12218] stack backtrace: [ 382.900386][T12218] CPU: 0 UID: 0 PID: 12218 Comm: syz.0.2111 Not tainted syzkaller #0 PREEMPT(full) [ 382.900408][T12218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 382.900421][T12218] Call Trace: [ 382.900427][T12218] [ 382.900436][T12218] dump_stack_lvl+0x189/0x250 [ 382.900460][T12218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.900483][T12218] ? __pfx__printk+0x10/0x10 [ 382.900511][T12218] ? print_lock_name+0xde/0x100 [ 382.900540][T12218] print_circular_bug+0x2ee/0x310 [ 382.900564][T12218] check_noncircular+0x134/0x160 [ 382.900590][T12218] validate_chain+0xb9b/0x2140 [ 382.900622][T12218] __lock_acquire+0xab9/0xd20 [ 382.900643][T12218] ? console_flush_all+0x13a/0xc40 [ 382.900665][T12218] lock_acquire+0x120/0x360 [ 382.900681][T12218] ? console_flush_all+0x13a/0xc40 [ 382.900708][T12218] ? do_raw_spin_unlock+0x122/0x240 [ 382.900733][T12218] ? console_flush_all+0x13a/0xc40 [ 382.900758][T12218] console_flush_all+0x6d2/0xc40 [ 382.900781][T12218] ? console_flush_all+0x13a/0xc40 [ 382.900806][T12218] ? console_flush_all+0x13a/0xc40 [ 382.900833][T12218] ? __pfx_console_flush_all+0x10/0x10 [ 382.900862][T12218] ? is_printk_cpu_sync_owner+0x32/0x40 [ 382.900886][T12218] console_unlock+0xc4/0x270 [ 382.900905][T12218] ? __pfx_console_unlock+0x10/0x10 [ 382.900925][T12218] ? is_printk_cpu_sync_owner+0x32/0x40 [ 382.900947][T12218] vprintk_emit+0x5b7/0x7a0 [ 382.900967][T12218] ? __pfx_vprintk_emit+0x10/0x10 [ 382.900988][T12218] ? kernelmode_fixup_or_oops+0x7c/0xf0 [ 382.901009][T12218] ? __bad_area_nosemaphore+0x11a/0x780 [ 382.901035][T12218] _printk+0xcf/0x120 [ 382.901061][T12218] ? __pfx____ratelimit+0x10/0x10 [ 382.901085][T12218] ? __pfx__printk+0x10/0x10 [ 382.901113][T12218] should_fail_ex+0x3f5/0x560 [ 382.901137][T12218] strncpy_from_user+0x36/0x290 [ 382.901170][T12218] strncpy_from_user_nofault+0x72/0x150 [ 382.901191][T12218] bpf_probe_read_compat_str+0xe2/0x180 [ 382.901214][T12218] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 382.901230][T12218] bpf_trace_run4+0x28b/0x4a0 [ 382.901257][T12218] ? bpf_trace_run4+0x19c/0x4a0 [ 382.901282][T12218] ? __pfx_bpf_trace_run4+0x10/0x10 [ 382.901309][T12218] ? rcu_read_lock_sched_held+0x89/0x100 [ 382.901335][T12218] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 382.901363][T12218] __bpf_trace_sched_switch+0x17a/0x1e0 [ 382.901390][T12218] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 382.901416][T12218] ? psi_group_change+0xab8/0x1050 [ 382.901442][T12218] ? __schedule+0x22e9/0x4cc0 [ 382.901471][T12218] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 382.901499][T12218] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 382.901525][T12218] __traceiter_sched_switch+0x9a/0xd0 [ 382.901552][T12218] __schedule+0x238f/0x4cc0 [ 382.901583][T12218] ? is_bpf_text_address+0x26/0x2b0 [ 382.901613][T12218] ? __pfx___schedule+0x10/0x10 [ 382.901648][T12218] ? __lock_acquire+0xab9/0xd20 [ 382.901669][T12218] ? preempt_schedule_irq+0xaa/0x150 [ 382.901699][T12218] preempt_schedule_irq+0xb5/0x150 [ 382.901727][T12218] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 382.901755][T12218] ? ima_match_policy+0x10b/0x2150 [ 382.901780][T12218] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 382.901803][T12218] irqentry_exit+0x6f/0x90 [ 382.901819][T12218] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 382.901840][T12218] RIP: 0010:lock_acquire+0x175/0x360 [ 382.901859][T12218] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb 3f ac 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 382.901877][T12218] RSP: 0018:ffffc9000b427478 EFLAGS: 00000206 [ 382.901894][T12218] RAX: 8c0d6ae8f4c26700 RBX: 0000000000000000 RCX: 8c0d6ae8f4c26700 [ 382.901909][T12218] RDX: 0000000000000001 RSI: ffffffff8d6ef4b7 RDI: ffffffff8b9ec4e0 [ 382.901923][T12218] RBP: ffffffff81725d05 R08: 0000000000000000 R09: ffffffff81725d05 [ 382.901938][T12218] R10: ffffc9000b427638 R11: ffffffff81aaf070 R12: 0000000000000002 [ 382.901951][T12218] R13: ffffffff8dd3a860 R14: 0000000000000000 R15: 0000000000000246 [ 382.901966][T12218] ? unwind_next_frame+0xa5/0x2390 [ 382.901989][T12218] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 382.902014][T12218] ? unwind_next_frame+0xa5/0x2390 [ 382.902043][T12218] ? unwind_next_frame+0xa5/0x2390 [ 382.902064][T12218] ? __kmalloc_noprof+0x27a/0x4f0 [ 382.902087][T12218] ? unwind_next_frame+0xa5/0x2390 [ 382.902108][T12218] unwind_next_frame+0xc2/0x2390 [ 382.902130][T12218] ? unwind_next_frame+0xa5/0x2390 [ 382.902160][T12218] ? unwind_next_frame+0xa5/0x2390 [ 382.902183][T12218] ? __kasan_kmalloc+0x93/0xb0 [ 382.902206][T12218] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 382.902232][T12218] arch_stack_walk+0x11c/0x150 [ 382.902257][T12218] ? __kmalloc_noprof+0x27a/0x4f0 [ 382.902280][T12218] stack_trace_save+0x9c/0xe0 [ 382.902304][T12218] ? __pfx_stack_trace_save+0x10/0x10 [ 382.902332][T12218] ? __lock_acquire+0xab9/0xd20 [ 382.902350][T12218] kasan_save_track+0x3e/0x80 [ 382.902369][T12218] ? kasan_save_track+0x3e/0x80 [ 382.902388][T12218] ? __kasan_kmalloc+0x93/0xb0 [ 382.902407][T12218] ? __kmalloc_noprof+0x27a/0x4f0 [ 382.902449][T12218] __kasan_kmalloc+0x93/0xb0 [ 382.902472][T12218] __kmalloc_noprof+0x27a/0x4f0 [ 382.902493][T12218] ? sock_kmalloc+0xd6/0x160 [ 382.902518][T12218] sock_kmalloc+0xd6/0x160 [ 382.902541][T12218] ____sys_sendmsg+0x1b5/0x830 [ 382.902566][T12218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.902590][T12218] ? import_iovec+0x74/0xa0 [ 382.902612][T12218] ___sys_sendmsg+0x21f/0x2a0 [ 382.902634][T12218] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.902673][T12218] ? __fget_files+0x2a/0x420 [ 382.902697][T12218] ? __fget_files+0x3a0/0x420 [ 382.902726][T12218] __x64_sys_sendmsg+0x19b/0x260 [ 382.902750][T12218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.902776][T12218] ? __pfx_ksys_write+0x10/0x10 [ 382.902797][T12218] ? rcu_is_watching+0x15/0xb0 [ 382.902820][T12218] ? do_syscall_64+0xbe/0x3b0 [ 382.902841][T12218] do_syscall_64+0xfa/0x3b0 [ 382.902859][T12218] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.902887][T12218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.902902][T12218] ? clear_bhb_loop+0x60/0xb0 [ 382.902923][T12218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.902942][T12218] RIP: 0033:0x7fbba338eec9 [ 382.902959][T12218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.902977][T12218] RSP: 002b:00007fbba427d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.902996][T12218] RAX: ffffffffffffffda RBX: 00007fbba35e5fa0 RCX: 00007fbba338eec9 [ 382.903010][T12218] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000004 [ 382.903021][T12218] RBP: 00007fbba427d090 R08: 0000000000000000 R09: 0000000000000000 [ 382.903033][T12218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.903044][T12218] R13: 00007fbba35e6038 R14: 00007fbba35e5fa0 R15: 00007ffd01331ee8 [ 382.903066][T12218] [ 384.423954][T12218] CPU: 0 UID: 0 PID: 12218 Comm: syz.0.2111 Not tainted syzkaller #0 PREEMPT(full) [ 384.423979][T12218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.423987][T12218] Call Trace: [ 384.423994][T12218] [ 384.424000][T12218] dump_stack_lvl+0x189/0x250 [ 384.424017][T12218] ? __pfx____ratelimit+0x10/0x10 [ 384.424033][T12218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.424044][T12218] ? __pfx__printk+0x10/0x10 [ 384.424061][T12218] should_fail_ex+0x414/0x560 [ 384.424076][T12218] strncpy_from_user+0x36/0x290 [ 384.424090][T12218] strncpy_from_user_nofault+0x72/0x150 [ 384.424101][T12218] bpf_probe_read_compat_str+0xe2/0x180 [ 384.424115][T12218] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 384.424124][T12218] bpf_trace_run4+0x28b/0x4a0 [ 384.424138][T12218] ? bpf_trace_run4+0x19c/0x4a0 [ 384.424151][T12218] ? __pfx_bpf_trace_run4+0x10/0x10 [ 384.424165][T12218] ? rcu_read_lock_sched_held+0x89/0x100 [ 384.424178][T12218] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 384.424193][T12218] __bpf_trace_sched_switch+0x17a/0x1e0 [ 384.424207][T12218] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 384.424220][T12218] ? psi_group_change+0xab8/0x1050 [ 384.424233][T12218] ? __schedule+0x22e9/0x4cc0 [ 384.424248][T12218] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 384.424263][T12218] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 384.424276][T12218] __traceiter_sched_switch+0x9a/0xd0 [ 384.424291][T12218] __schedule+0x238f/0x4cc0 [ 384.424307][T12218] ? is_bpf_text_address+0x26/0x2b0 [ 384.424320][T12218] ? __pfx___schedule+0x10/0x10 [ 384.424335][T12218] ? __lock_acquire+0xab9/0xd20 [ 384.424351][T12218] ? preempt_schedule_irq+0xaa/0x150 [ 384.424366][T12218] preempt_schedule_irq+0xb5/0x150 [ 384.424381][T12218] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 384.424395][T12218] ? ima_match_policy+0x10b/0x2150 [ 384.424408][T12218] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 384.424420][T12218] irqentry_exit+0x6f/0x90 [ 384.424429][T12218] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 384.424441][T12218] RIP: 0010:lock_acquire+0x175/0x360 [ 384.424451][T12218] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb 3f ac 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 384.424461][T12218] RSP: 0018:ffffc9000b427478 EFLAGS: 00000206 [ 384.424471][T12218] RAX: 8c0d6ae8f4c26700 RBX: 0000000000000000 RCX: 8c0d6ae8f4c26700 [ 384.424479][T12218] RDX: 0000000000000001 RSI: ffffffff8d6ef4b7 RDI: ffffffff8b9ec4e0 [ 384.424486][T12218] RBP: ffffffff81725d05 R08: 0000000000000000 R09: ffffffff81725d05 [ 384.424493][T12218] R10: ffffc9000b427638 R11: ffffffff81aaf070 R12: 0000000000000002 [ 384.424500][T12218] R13: ffffffff8dd3a860 R14: 0000000000000000 R15: 0000000000000246 [ 384.424508][T12218] ? unwind_next_frame+0xa5/0x2390 [ 384.424520][T12218] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 384.424533][T12218] ? unwind_next_frame+0xa5/0x2390 [ 384.424548][T12218] ? unwind_next_frame+0xa5/0x2390 [ 384.424559][T12218] ? __kmalloc_noprof+0x27a/0x4f0 [ 384.424571][T12218] ? unwind_next_frame+0xa5/0x2390 [ 384.424582][T12218] unwind_next_frame+0xc2/0x2390 [ 384.424593][T12218] ? unwind_next_frame+0xa5/0x2390 [ 384.424606][T12218] ? unwind_next_frame+0xa5/0x2390 [ 384.424617][T12218] ? __kasan_kmalloc+0x93/0xb0 [ 384.424629][T12218] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 384.424642][T12218] arch_stack_walk+0x11c/0x150 [ 384.424656][T12218] ? __kmalloc_noprof+0x27a/0x4f0 [ 384.424668][T12218] stack_trace_save+0x9c/0xe0 [ 384.424680][T12218] ? __pfx_stack_trace_save+0x10/0x10 [ 384.424694][T12218] ? __lock_acquire+0xab9/0xd20 [ 384.424703][T12218] kasan_save_track+0x3e/0x80 [ 384.424714][T12218] ? kasan_save_track+0x3e/0x80 [ 384.424723][T12218] ? __kasan_kmalloc+0x93/0xb0 [ 384.424733][T12218] ? __kmalloc_noprof+0x27a/0x4f0 [ 384.424756][T12218] __kasan_kmalloc+0x93/0xb0 [ 384.424768][T12218] __kmalloc_noprof+0x27a/0x4f0 [ 384.424778][T12218] ? sock_kmalloc+0xd6/0x160 [ 384.424791][T12218] sock_kmalloc+0xd6/0x160 [ 384.424804][T12218] ____sys_sendmsg+0x1b5/0x830 [ 384.424817][T12218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.424830][T12218] ? import_iovec+0x74/0xa0 [ 384.424842][T12218] ___sys_sendmsg+0x21f/0x2a0 [ 384.424854][T12218] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.424873][T12218] ? __fget_files+0x2a/0x420 [ 384.424886][T12218] ? __fget_files+0x3a0/0x420 [ 384.424900][T12218] __x64_sys_sendmsg+0x19b/0x260 [ 384.424911][T12218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.424925][T12218] ? __pfx_ksys_write+0x10/0x10 [ 384.424935][T12218] ? rcu_is_watching+0x15/0xb0 [ 384.424946][T12218] ? do_syscall_64+0xbe/0x3b0 [ 384.424957][T12218] do_syscall_64+0xfa/0x3b0 [ 384.424966][T12218] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.424980][T12218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.424990][T12218] ? clear_bhb_loop+0x60/0xb0 [ 384.425000][T12218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.425010][T12218] RIP: 0033:0x7fbba338eec9 [ 384.425019][T12218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.425027][T12218] RSP: 002b:00007fbba427d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.425037][T12218] RAX: ffffffffffffffda RBX: 00007fbba35e5fa0 RCX: 00007fbba338eec9 [ 384.425045][T12218] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000004 [ 384.425051][T12218] RBP: 00007fbba427d090 R08: 0000000000000000 R09: 0000000000000000 [ 384.425057][T12218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.425062][T12218] R13: 00007fbba35e6038 R14: 00007fbba35e5fa0 R15: 00007ffd01331ee8 [ 384.425073][T12218] [ 384.984388][T12222] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2109'. [ 385.010259][T12204] batman_adv: batadv0: Interface deactivated: dummy0 [ 385.027602][T12221] netlink: 'syz.2.2112': attribute type 13 has an invalid length. [ 385.036400][T12221] netlink: 'syz.2.2112': attribute type 17 has an invalid length. [ 385.055238][T12204] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 385.066421][T12204] sit2: left promiscuous mode [ 385.077878][T12204] batman_adv: batadv0: Interface deactivated: gretap1 [ 385.152069][T12209] geneve2: entered promiscuous mode [ 385.157745][T12209] geneve2: entered allmulticast mode [ 385.190263][T12222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.307717][T12217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.420641][T12221] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 385.428948][T12221] ipvlan2: left allmulticast mode [ 385.434160][T12221] bond1: left allmulticast mode [ 385.439236][T12221] gretap1: left allmulticast mode [ 385.450684][T12221] syzkaller0: left promiscuous mode [ 385.455987][T12221] syzkaller0: left allmulticast mode [ 385.463055][T12221] batadv1: left allmulticast mode [ 385.469239][T12221] gretap2: left promiscuous mode [ 385.474307][T12221] gretap2: left allmulticast mode [ 385.481579][T12221] geneve2: left promiscuous mode [ 385.486957][T12221] geneve2: left allmulticast mode [ 385.501247][T12220] xfrm0: entered promiscuous mode [ 385.511290][T12220] xfrm0: entered allmulticast mode [ 385.516867][ T8566] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.526154][ T8566] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.535419][ T8566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.550785][T12222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.566842][ T8566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.575813][ T8566] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 385.587343][ T8566] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 385.596570][ T8566] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 385.611334][T12222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.632237][ T8566] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 385.670515][T12222] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.722965][ T8566] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.735003][ T8557] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.746833][ T8557] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.759199][ T8557] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0