last executing test programs: 10.230679081s ago: executing program 1 (id=3100): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001100), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001500), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001580)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10000) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000001200)={&(0x7f00000010c0), 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x80000, @mcast2}, 0x1c, 0x0}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)}, 0x9fc) 9.992310195s ago: executing program 1 (id=3103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x41, 0xfffffffffffffffe}}]}}}]}, 0x60}, 0x1, 0x300, 0x0, 0x1}, 0x20040000) 9.787405188s ago: executing program 1 (id=3106): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}], 0x1, 0x2400c044) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x970b) shutdown(r2, 0x1) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x30, r4, 0x20, 0x20000000, 0x0, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4004050) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = accept$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) setsockopt$packet_int(r6, 0x107, 0x13, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x28, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000080008400000000a0400164008001540000000030400170058000d"], 0xd4}, 0x1, 0x0, 0x0, 0x2f00}, 0x0) 9.288369012s ago: executing program 1 (id=3110): socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbfe, 0x2b7efebbf}, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r1, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000802}, 0x81) r2 = socket(0x2a, 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @empty}, &(0x7f00000003c0)=0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket(0x15, 0x5, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000c80)={0x2, 0x12, 0x93, 0x7, 0x2, 0x0, 0x70bd29, 0x25dfdbfb}, 0x10}, 0x1, 0x97ff}, 0x20000000) 9.048206994s ago: executing program 1 (id=3112): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{&(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480)}}], 0x400, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0xc3ff}, 0x0) sendmsg$sock(r6, &(0x7f0000000180)={&(0x7f0000000300)=@in6={0xa, 0x4e22, 0x7a47, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000380)="d88bd6182232bf5121090772aec65950c716813eaf8006deeafa46dba19663cff870d074569c4e9f1449fd", 0x2b}, {0x0}, {0x0}], 0x3}, 0x48040) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x800, @private0, 0x7f15}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000002900000037000000ff0000000000000024000000000000002900000032000000fe80000000000000000000000000003b", @ANYRES32=r9, @ANYRES32], 0x40}}], 0x1, 0x4008090) 8.061494731s ago: executing program 1 (id=3116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd29, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040014}, 0x0) (fail_nth: 7) 3.226758144s ago: executing program 4 (id=3157): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000597f84bd1e030a01020000000000000000010000000900010073797a30000000000900030073797a300000000068000000060a010400000000000000000100000008000b4000000000400004803c00018008000100636d7000300002801c000380150001007a07fc564df4d25f510b20859fa0548773000000080001400000000b08000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xdc}, 0x1, 0x0, 0x0, 0x1880}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000001300)={'filter\x00', 0x1000, "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"}, &(0x7f00000002c0)=0x1024) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r5) writev(r6, &(0x7f0000000940)=[{&(0x7f00000004c0)="71419f11f6ba6ffcf1688a2c5bfb851402cded9eec936bda14cdefc827966afd05f01fd1f9fc7f729fb5a1845276adfb7e3e784d6ec1ffac4069002e980cd2eb89af5ab022a5b3a80e643737796de7e1e9b2c14f54be12309170a4da6091b921e5df2eed76ac119563804eb5d27c3de964cf74e3f642229f534033d02fd3af6fbd64a67533ea22bab34da515e5c23353c4b93a78ee69413ff167674f1c42f9d33253", 0xa2}, {&(0x7f0000000340)="b0455ba0df4428ee", 0x8}, {&(0x7f0000000680)="13732dd9e4a35420ef611dc6d916852baed81927dcf84ff185fee0", 0x1b}, {&(0x7f0000002e40)="d5423e60905e12992648a667ef66dbf84cb38e0d3bbb317733ced88de04bfe2bf190c365a83580673c4e2c532015f04010d426b8a5018a9854af68a1963c3092bbbc1fc5eacab98393274fcda106ac611ade107864da6bd282c6b2dc92f4e19a82886d764b987cae234a1873d3faf5ca842aaba0fa38d6f9a97ec7e5fb0e93290c900cc57747ef01b8dbf22a73bfe0467b4f48b54d17a465c206aa80d9b2b0b4007a991ebecf68c01eec65bd8398b00d4714b2f888498f0adb29c4e1240751e955f999235f2959745a8ee4ea441c0121ba99cc29f49ad58efef985130557749c369b404b762c1181aec37eb15d738ccf22a7a22f2ed491775c6a458c167bdc6b552cda68659e35945efe7bb342351a743c77c29b232b67f8f27d5af0aca98fff4818a3a3dacb5c126278e8ed431b753661d6b7f70cef9965d76fed9def7924cef1f41bd6ede745718b45ae6e1d53dd2a55d6bf519d9984dd159158e2e156683ea22909b5c2aa0a8218274d5e45ce90761954c3f130d17877a356506e721710616ed3b3e97e7968ed28df4ea0f49fe6f8cb7ed1acd66e025efdaa447c57cebb665b7d1d36533aab0f40d6d3994801491bb1056bb9f0b8cbe832bea20642d60f5e08c5532a46f70b8eb61c93c510bd1423d4dea9f4d481ce0c1c69f21c22be8ae802a34b8e794959e8be8f692aed66e82ebe1b7b6e39ecd922161144cd672fefcab9877716132516b417b0aa795d464e8bda139080dd9888584e114c21c928f74dc70031fc131194a937e3e5c23fc8eb89d37b6b1c88e37ba16d02572c15314e32527549e4d1f192ee86c7d10b63c990aafa9fcd35fecae0956211438e9c7a5cb26c94364fafb032ab25bcf94748bc4fb5f230364471f4223d51f1b52daa43fa8107dcb96b26b039b5c6d0aa718363572136958b59eb0912bc9d9080e5dd2431a2b4eb43bc7790f295864d77e683032fd5446bf58210bf0c2ed6f3b3668d2a9ccba31f7cb6516d67ef334b31750138a09389b3654d621df1b40c7e018ed3a3e621b4e1a3203cc38286e80e9365db020405384b5999a51eaf1cee681043dc9e1ae9a8573a3a3ea1acf70e7ccfc865183d36de6b7fff60a22ff2dddb92cf80ae2fa4847436efa9370de3e632fc903eca49b2e7942a2697e9a093a2bdf7eb19b365212513c6e14999652a65ecb4b5a0a20171d9f4a477b86268ef58cb53e7864034e5d6d40832d4335f3e93dec486c4b6ee992a2e2f597a17a8252880aca5f1d8bc97cd95d41110cd0684b539dff849207a5c57bed3c65ac0161024b36d9aeaa7324916516c7941307a9e024cff9e38ba4e8778733ce156fb6e0727de2f593ceb42d1ff4e20b82c1a4225552351f8351ea1b51f6610ac88cae40b4583b9a48c11990f663c9de4c7cb0b19935b1ff62db99bb19f858e7a8e3e2280312d8bea3497685f825681add3512eeff2c202584425b9ccee14112af20989dfb6b183119e747745fc3195c6f66b30e60e70a0a28d95d204822d680a707844294dd94f1e4fc8b34c553322a36ff0d25e220be7e55102e2233da082ffce22bc7b3ca9b91ce58f6cbaf8500bb79ccf1780a00344b02ed5cc0ff96655e5cb5c8bae50dfff8eaebc04b59a5c2a436b0fc0e0090e42ec6ddd618f1339b25df58c6f73870d65f52a9752ccd1a1a2a5b7ecae9cd8f6bed1637b522ce8e3876a4421c5dcaf46db9b18956dbb1bafc3ec9188a694c4202678158ba03402369392ac4f5893170b50fc3b30a0a891d9d2375cc17fabdbeff43c07e333d0a5f29688edd988a8a91440fc1a5e5b4f9de341050b80d3a8cda8130eee646dadcb78d8926ce07f04e2a6289083e1f15deb6bcb62975af9bc2be82684493f0701f9627ff8e3e7203c6410fe734673b686e6264ea4cef3ff2c38e03f2a2154cdeb97aeccc8c21e0cc0c7334fc4836ceb8a7b78dac0a17b1acbf70b711e3522c64b2578506b5acbc1f45b32d3c55f5d7950833055ff1dd84072e14c703e58f86eec49c482c12d0ca2629d00f95c9fd3ff86a3d91afcf65ab7d4603cc206982b082cc076185b0820db07672bde441297612801f1155b9da35f59ba74cd9f52062f97e94b083e0339aecf1571c61750d1226ecad748a35fb2d30eccf703991cb68cf866659f2cf872d2a45e4989dfe4392d4922116cd7b967788af5a9b279b769e5d4c3d9c497007a88fb87fd024ffa30366cfcec3005adae06d527349f5eae249610c4fb17532d7b653e40e48cb296e34e6e3e974646c3ee01b49783062b2de125550b74a1dde3f173305ac4cb73c18ab35041195ba019f00eff83c98c94ea3d38da9f8ca2cdca2b5bd07c7b1d1093ac68c37cbb3e47d78ab1d065fcd5605a3162fb7eec3ac67761028d4b306bbf060b44c41f6c68f2b2ff6bc56e85e54b5e81f63d2725d9e91fb3d5f37e1958a89605e5007dcb2eb52a1fa07b0aacdc0c1adea75a8f56d6e1b82952b038ba027c5c57bcc9f4148f744dc319b7dd585d33f5b26136a77d343d30ce265b1b32ed2d316e825e99090a5619a70faa9b1d1bed5a3665162ca97cb0f87f4427d1d044cb0f2424018387c65520a70f4d1cad7517da9a6538a38f7edd5405421de07830db8e4fcc27e996327414ac27402e34219396c9b3f360d42033204b97aac8d880218a8831c3384d79ad5eb69941d96dd2b9d72e387fc819abc88198f4f1a6ab590f75dc9a24456aef3927c3e786b9a2ff674f9aad6225fcb3222ff7c616e163701bd411b74822cd9009ba778e3b6e8a5b8d13d4f7dc73ec342a11bfc032f8bd4a69b7490c71b501e67b64397ecdfff0388dca5c500b79cd378881ec14fbaedd713b6a932f2a8ae456f3b9f99b33fca8f85a74cb43068e76d6bc80f026b7b8d6b4fd06f4390410c2792a97e7a38797dd388558399b42d4b2641276f5ae77d679622d85bb5f66074205195458d9ff9b9e7097d23ebc0e4d8cc5c98fce7624bee2c5c6e9fd092f0feb33de9028130e15e3124d911b47338d88c22be7e7518589b81405ccc312d605ccabda9b98d58d537a51378a705df59cfde57a27e7b2213edbbccce90d9b346bf91e5877876e1c25450a08330bec5e1f5cbd1cb58c02286a4555954b9d09ebf96b42761130ab5e99e78f9dfdf967c3bdc3aa73fa2da7e8ff39fe1d17c72438f5cf8c4d1b1fbf43fc845235a6f023abfe57cfb0a6bf0afa481d00cc3a331fcdc6b7150e1233bc79f8843ecc6ccd8fae16c5abce55bc86e7636868ff66b98f6272f66989bbebb6943d9d21127ffd326029e9ab98de6cdb21a1f086ce8b3e3a180e03678e321671b923b2867c0b2c16eebdde23be43a60811b99e1bccee8e08b123dc01138da886537d1b16bb784a33b0ac432863adb7832e41021143bc1379e13d98dfdcd2f691eca2a5a56f3c32d93f7f817da35adfc0a75d9846615caf72e07c635206213734ceceb4f297674e463ec3e9d6735eb9a44e94562098570033d6f552d1d2c9dccd305c8cd8eb5fff9169c01a9f63c1a9db733719091a252fbca0113771092a946f8055d1f2d54b5046ed52a1970de6101165ef5694c71141146815ee91f6748e46c39d48854f67e79545c979da4405d9499ddd689f12dd2416b17ba7ce6545e3f7f571bef57bd35d96034ea6217a497c1eae528706d95b8b6fe7620f6510d25c3adb11da7e502bdb49b3e6458be97a46121f9695eef00f3b57a0d313d2ddb7deda05bab2f8909832949627fa988203b3603e2a32181cafb14f4373256ebf4b503e1b0c7a886a7c57554d93a1ab56d1806d686504d22a2b9b98e182859bd1fc33df5c45cd3018a019bdbf6d412de2d4985cf3b1947adc94707e552af7c7669b71c8ba32a6a3b1b39e34c05fb77db8b91a6257e87191a5af72d596366bf43afc97362fee8951948a8225599df6b199f0ddb5ae5c119edce3e784b1e671fa0f94542c36aaf95ec7d3fea034c5d30a468376b6b008f2ddd0ed70d38fb00cefeb75b138e2856c059d0c45e7d375261bc993ecccf62e6fdc0d43f8968bd2dbf43d9a08bf1b33a4bdadca7f376d3f31c00bd0dc5783f812a6b8844ba8106afb539e1c37bf0ba3d5615bbd9ee96e657ee227993ec63d6d23b15f492794068d9083546eb9489ddc4c44981ae212792d1ebe4c2c2672df0b924813a9b66f6451fb30dd6d4239911beb81de57418956bfa544de78044499fa619a1ea6a8cae09b6e54ba8b5becd90fc74ff326c8212b99525a741d1fa00abc43ea5fc42d8071583e944faf4b0604fc8ee0ced789b15518b40f4e1abc3e93c834eaae43fc63a1bdf0fcd3d024ac84624ea8062b2926489bbde458c839a3c18dca92b6c806d4958697a5d42350a6133ce1de3dcf7fda93a94f6fb19450256ffc8f862bcdc9e5f80ae62f465e036d21c82045275d89e5e82d6ae9db4dab6dae71c76ccfeedee84d5bd028349916a0f4cb7d620da0199072894540597865d59c7343e73f7fd350651634e4270b913337fc639e85bddf2ae3adaf0bccd08c689a25e325a02389c97489922f90a9670184b98ae374eef26956a9dce4ab237f61d02609dc9019aee15d6a9183fcbd5209ff4bf3f132513b3ff2db34f0586eeb99160b28e4ffa5760c94500811a6c55c3bad8444ae66b61a7b1313049565d01db36c09cfb80b6a706a33dab3860b81f9198461f84d8ac801bcd0e3ead2d16c2c185d19dd2b3d77a97f5040632380ca91f3d568317c4655fcc7334c04505fef85a78f84ce868dafa51611ff9e8a6b49ca8013f94e2311aef22382efbc7f202414b1c93366fd290fe23bcc5927797e3079e217a7d08f3fcd8e13ad216617abaa50c7a9e6a94e507d74a9407e7930b50ab0485a0978e1f38467a7c58b31fe7814d78762a7d870e27d536bfdbfa2eca5d490a89c3ee290f0205bf609a6499d006d00eafa965f4267bf9703d451fd7b00e2e38a05a588659a2f021c47db4cb81d3a83907622fd523a5ae642cc835e885e12b688766250c0fee1b7ef39b30f543ecc373b463fcc58571d267fcc0f43e102a70aaece588aad104cf4c729d91e91fe0fc69213e5fb17f33393e1573f38a55d2c5805272469d0510598d419a29ad8419f6a9bb01952904173d56d2072e054ffaaf689a41d659d5e1761fa2ec50eeda428875e4848e3fd660e1194e072eb904f45d0991418dc6d2853352bd6893e7f42b8d33b6fe23a875746a1239a44c63a3afc5163048ac4e61dcf58075290ee2ac5062f2044e990a3aebc6960b2acbb785d7b81f84f82ed00ce6b633c9867a97d3950413e1a64aab17fce08a952d9ce7e37170df4b578f96de38150098c1a9257f366b77ffe498cc8e56e7f68327cc074c3ae6ebb8dd9c182101a85caef7b8e2b59eb7b50ae5988f1e387ab2b78cbe39ffea5cebcf4d02341474a877c29a8f3ee058109dad5d8341bc7be2e5131bb5d1b4f5119c6de07d62d682f7285bd8b2f901349c66e114f096875c8112d2521b4419d9dda171ff5c7b9475ceee880240746251c5e629373d67107cf8294d5e14b1a6f9d420cbf40956ec567cae277ca45bdfc7c5d2eb2f14319e4d2d3866b39acbe49d3aca8a3a05e80dc540dd4709e94262abfa4e0e8d3115296c2e66907f11a5a7390864319930da152a1dfec4f6f2cdc9d712d4b2cb67f1610b1a72f95c0e027adb33259e6ebf3ea7e0de2b5cab8f17a2988deb6db5fc649eb572a9188054a4762a3ae1289762a804c4c1545f3647b38889b36d063664aa3006386828992673300e994178f90ea78113f7eb4d2c169e30cfe8fc95354138b01de4d5cce", 0x1000}, {&(0x7f00000007c0)="d1e80c0f805d3dcf4acada762c7e737a56d3e28fe8db5a11884e713f081b148ea3c9d13dd1620f074a2db74be03576f30ed5d92157ec4d1fd66edbbbf8c40509ee2fcb2cbb1e20e6befb96ac6ef3734a2a353055f2bb5889a258492221af6fa3ea548284531bc2951f7da7ec290611ee5db46f5cc2f6319ff4b2c12d4751f394d1204948fe4e70706af7bd142e16debf82fbeecf8cfd9074b06335bf5f3bff7c216e0a41630824a86a46dd7eb8d33f23e080eea23b20724b3020317cfa90f32b777aece341a046e419435e7d217630104e92c4f2fc191ad93cb6adc8f2afddd8b4099386535067190f639f1fe9330fa1834228ae", 0xf4}, {&(0x7f0000003e40)="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", 0x1000}, {&(0x7f00000006c0)="66a86c8b5e755daa97c165886dd4a1e81c0bed09e54bad6a7bf8689a1268c06cfd8eb196c99b13eff062636ad66661abac9e395c4e9914f45d400cdde6eadda7ed71eedd355df80f3fc84e9991bee60978e9d5118bf61a52180fe3539cffdc719ccd3708da5330f825eac19f8040d21d3f3be0223b170e9d8b4feebfe347c9d0e4b7c76837ede867957dd70f128bc5ba990a4e2d5cb8cbe0a5a80f331fb228ae5bfcc8740d", 0xa5}, {&(0x7f00000008c0)="0bc562030b5c925d2207d1dbdc1a85718c714b5e297cce1ec00bc2b65453d5a1a5348439baba5c24e92b15e46c9eca07048ebb691dfa46e28d78d779c2b380552cd2b7ffbe416872a3e6e8b81c0e98a764", 0x51}], 0x8) ioctl$int_in(r0, 0x5421, &(0x7f0000000a00)=0x8) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0xd8a88b3807bbf5cf, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x1d, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x41}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=@newlink={0x258, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1801, 0x931b}, [@IFLA_VFINFO_LIST={0x238, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x7}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7fffffff, 0xbc6, 0x0, 0x88a8}}, {0x14, 0x1, {0x2, 0xa00, 0xfffffffc, 0x88a8}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x81}}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x837, 0x8, 0x8100}}, {0x14, 0x1, {0xff, 0x89a, 0x80000000, 0x88a8}}, {0x14, 0x1, {0xb, 0x70, 0x2, 0x88a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x90a, 0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7fff, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xde, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xc8, 0x68872b2c}}]}, {0xdc, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1000, 0x3}}, @IFLA_VF_VLAN_LIST={0xb8, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x7fb, 0x8, 0x8100}}, {0x14, 0x1, {0x5, 0x1d8, 0x1, 0x88a8}}, {0x14, 0x1, {0x4, 0x4b0, 0xfffffffc, 0x88a8}}, {0x14, 0x1, {0x9, 0x1c0, 0x4}}, {0x14, 0x1, {0xe, 0x19a, 0x3, 0x8100}}, {0x14, 0x1, {0x6, 0x996, 0x200, 0x8100}}, {0x14, 0x1, {0xb, 0xb5, 0x400, 0x8100}}, {0x14, 0x1, {0x7fff, 0x771, 0x9, 0x8100}}, {0x14, 0x1, {0x5, 0x42b, 0x4, 0x88a8}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x3}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x1ff, 0x2, 0x7fffffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0xe}}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8, 0x6, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x0, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0xab4, @random}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x3d9, 0xd74}}]}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040015) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r0, 0x0, 0x0, 0x800) connect$vsock_stream(r5, &(0x7f00000009c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r10, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000a80)=""/77, 0x4d}, {&(0x7f0000000b80)=""/89, 0x59}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x2) 2.984519347s ago: executing program 2 (id=3162): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.759581273s ago: executing program 4 (id=3164): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x44}, 0x1, 0xba01, 0x0, 0x700}, 0x810) 2.681318339s ago: executing program 2 (id=3165): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) sendto$packet(r1, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee03a879c0779591813076fe8893e54bae6115825fd42b9c850ae09a0c9138676ef04e8706ec6057fc878302be3a1b9f7bf9805a3eac79cf2fcc0637e8b799b59439dae06bbca57a1254d8f17267776053f23801b92d20f12402acde62c60df22c4cf3bc5d7318e17650b88abedef3dcea88d3", 0x2a, 0x0, 0x0, 0x0) 2.451971749s ago: executing program 2 (id=3166): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000000000"], 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000008000000000000100800010001000000"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000001e80)=ANY=[@ANYBLOB="020900090200000000000556b8503375fdaad3d78d0200fedbdf25"], 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) sendmsg$tipc(r6, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f0000001e40)={0x60, 0x7, 0x8, 0x5, 0x4, 0x81}) recvmmsg$unix(r8, &(0x7f0000001c40)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/16, 0x10}], 0x1, 0x0, 0xffffffffffffff38}}, {{&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/91, 0x5b}, {&(0x7f00000004c0)=""/112, 0x70}, {&(0x7f0000000540)=""/112, 0x70}, {&(0x7f00000005c0)=""/255, 0xff}, {&(0x7f0000000880)=""/186, 0xba}, {&(0x7f0000000940)=""/171, 0xab}], 0x6, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000b40)=""/88, 0x58}, {&(0x7f0000000bc0)=""/201, 0xc9}, {&(0x7f0000000cc0)=""/221, 0xdd}, {&(0x7f0000000440)=""/2, 0x2}, {&(0x7f0000000dc0)=""/248, 0xf8}, {&(0x7f0000000ec0)=""/129, 0x81}, {&(0x7f0000000f80)=""/148, 0x94}, {&(0x7f0000001040)=""/157, 0x9d}], 0x8, &(0x7f0000001180)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f00000012c0)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001ec0)=""/10, 0xa}, {&(0x7f0000001380)=""/32, 0x20}, {&(0x7f00000013c0)=""/112, 0x70}], 0x3}}, {{&(0x7f0000001480), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001500)=""/152, 0x98}, {&(0x7f00000015c0)=""/221, 0xdd}], 0x2}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001780)=""/60, 0x3c}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/83, 0x53}], 0x3}}, {{0x0, 0x3d, &(0x7f0000001980)=[{&(0x7f0000001880)=""/11, 0xb}, {&(0x7f00000018c0)=""/34, 0x22}, {&(0x7f0000001900)=""/109, 0x6d}], 0x3, &(0x7f00000019c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001a40)=""/62, 0x3e}, {&(0x7f0000001a80)=""/199, 0xc7}, {&(0x7f0000001b80)=""/74, 0x4a}], 0x3}}], 0x8, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.361148532s ago: executing program 4 (id=3167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000010200000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000004f104300000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.279978684s ago: executing program 2 (id=3168): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) close(r0) (async) close(r0) recvmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f00000003c0)=@rc, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/100, 0x64}, {&(0x7f00000004c0)=""/59, 0x3b}, {&(0x7f0000000500)=""/150, 0x96}, {&(0x7f00000005c0)=""/25, 0x19}, {&(0x7f0000000600)=""/131, 0x83}, {&(0x7f00000006c0)=""/134, 0x86}, {&(0x7f0000000780)=""/141, 0x8d}, {&(0x7f0000000840)=""/69, 0x45}, {&(0x7f00000008c0)=""/36, 0x24}, {&(0x7f0000000900)=""/162, 0xa2}], 0xa, &(0x7f0000000bc0)=""/255, 0xff}, 0x192a}], 0x1, 0x40000000, &(0x7f0000000ac0)) (async) recvmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f00000003c0)=@rc, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000440)=""/100, 0x64}, {&(0x7f00000004c0)=""/59, 0x3b}, {&(0x7f0000000500)=""/150, 0x96}, {&(0x7f00000005c0)=""/25, 0x19}, {&(0x7f0000000600)=""/131, 0x83}, {&(0x7f00000006c0)=""/134, 0x86}, {&(0x7f0000000780)=""/141, 0x8d}, {&(0x7f0000000840)=""/69, 0x45}, {&(0x7f00000008c0)=""/36, 0x24}, {&(0x7f0000000900)=""/162, 0xa2}], 0xa, &(0x7f0000000bc0)=""/255, 0xff}, 0x192a}], 0x1, 0x40000000, &(0x7f0000000ac0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000002c0)=""/190, &(0x7f0000000380)=0xbe) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000002c0)=""/190, &(0x7f0000000380)=0xbe) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x9, &(0x7f0000000240)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000000)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2.22101321s ago: executing program 2 (id=3169): connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2.057574807s ago: executing program 2 (id=3172): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1409, 0x1, 0x10}, 0x10}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000400)={r7, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x81, 0x9e, 0x3}, @isdn={0x22, 0xc, 0x0, 0x1, 0x9}, @nfc={0x27, 0x0, 0x0, 0x2}, 0x68e7, 0x0, 0x0, 0x0, 0x400, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x4, 0x0, 0x7ff}) sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}], 0x1}}], 0x2, 0x4048884) 2.057097751s ago: executing program 4 (id=3173): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000000780)=""/122, 0x7a}], 0x2}, 0x2ca998c3}], 0x1, 0x40000021, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000403f0000180100002020782500000000002020207b1a00fe000000007b0a0000000000000701b092f8ffffffb702000008000000b70300000f000000a500feff0600000095"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x34e487becbe708f4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x44854}, 0x8048815) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280080001000100001a"], 0x64}}, 0x2000000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000a80), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r6, 0x303, 0x70bd29, 0x10000000, {0xa}}, 0x14}}, 0x4) 1.860289025s ago: executing program 3 (id=3174): connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x1, 0x62, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.822294836s ago: executing program 4 (id=3175): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x10, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x0, 0x30020000}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.700117945s ago: executing program 0 (id=3176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001700)={@in6={{0xa, 0x4e24, 0xb, @mcast1, 0x81}}, 0x0, 0x0, 0x3f, 0x0, "f1990e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae3d393dd38ea6c02965c6776267517308a3d40aa1c788df600"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000740)=0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000001400)=[{&(0x7f00000004c0)="e41cdbf161be3e2ef03b5091e7c02394c1b045ecf6e191834738f71ecff73aaf2a6ca218674d52892bca1c76c3374978bee4ee976f24220eb138a0157f14f31183f233142c9188df", 0x48}, {&(0x7f0000000640)="3d56086e2648463ba46b682391850fd76edf9300a5b8bccf8e1e90e81c79a5cda75f40112b950e3325675abe32396907673bfab35f1b000186c48c18f2719972b561c5660d02472124c5422d7f18d380713988ddf9aceae218d79bc54c56e934af10202f5f28b559d5a8c113d9cfd52a6940eb609370a4c6080d538b4a00a549a5e2b1050dd6c6312cefed57bdc5199cf19716fdcced4d9adb7b423643f83fdce763245bfe358ee62712802225bc9d93d16711a5293d19fd5070fe76f0320caf57fdf1b0c8b7018146b9bbcd", 0xcc}, {&(0x7f0000000780)="4b97f8be3e319c7692ceeeeb0fc665c1bfe72483a1b330edbc0efcea1c0f1fdfc555dd99a72a684c6546bd31536d0f6be4e7671f93f6bfa53fe2908876465e572a62493f9a96460d373db0f18308ff9781e5cdb4e65fd84a4846d7499ac57fb6394d7c3b315b7f2ec29412d0fb30fb60ea649db212700f223662bd9c7dfbd5b78d5ecc34a99c728072ada8b688a83f38ae4a34a40d360d5bf9dbae42d07595bdaf0f89247e1062d30ddebc047d5bd16d8287a5e10069c380160210", 0xbb}, {&(0x7f0000001800)="c6c4dd44da9f6061a68271a90443b0b65b9f254228815e0b4899f22065ab2bebf294b4125f55016f159843ab9e1d480108553e785f260abb37ffd12f03e1bf36792ac35df1355b93b821d4a29cdf851569ebb691346c0324d2dbb8ea4a57c3b54ad2b3cde6bf4253a58bc7506a680056dca9a240b3200f9ac27e0cc1536423f98382e868a8de6878129b96a0a1cfb76681afe912226cd35c468bf92d1f4175ca40f7b550dd076410cb7a63af942ad2c6909b2cfd85c5b4ef3f6dc632b835dfad689c76697890c49562433763f4457c2fbaa2f5e4673a5bf1e2ad24dd15cb480d", 0xe0}, {&(0x7f0000001600)="8ede3549c5f3dde9186b965f491b62640f4f9a50131e96f875387b36b6c5d8d5bd8259401b69c507db8f29d6a07938793e0941ad63a8c8a736ec31c3c989dc105ecb057b0af62ab2cabb2bf781d42744c4328eb429256f6eec6db2f717d632bf7f63c0ba7b5ffd07de828f2bc0dbc2d0a50ff743315aea4dc390f39c4b2f05dd4ea73238f0726db6342c819bbcf526ba16f141bd78e18bb2d9d08c8dbcf46f7a0a5259494cb3bf", 0xa7}, {&(0x7f0000001140)="ca55560633d9e55959a61f7a94e1505c6ed53e22cd46e1d0609e70d3d95ae8192f08db8b00dedad47eba95fe87895f9ab139f1a656f009962cef1c3ca5b483630ca2ef184d83de890b86833aa125c7eb6a8cda87e5043e2401d0a1ff1aebd4cf98d347a539fb7442c49421103b23c161065cde0055afe04a80f5cf42e12a0b4634ab3217af3d726f94c9503ea027c4780c24ac5707974573b2dd20e31b754fed74da020238274503d83c8865f006600d8ba08c3e8436cde9b19f16fd324d2bf0", 0xc0}, {&(0x7f0000001200)="8558ba6560642a7efb760017c3b06ff184b806aa456f58eab3cb93510741a9f8ea544805d0053d808a658d1ce0586d8d50a939196bf2b1d311253751f6188e951232e8da305d14814b84eed25e7f00ce81c990cb1bb4ed5f404e377d2fe1833f2ad85e7a4dd485704b8cc3a53fdce552ae3ecdc59a17d26020c5d8f3c89a07169a4896a429a5c6b19b496707e88705257100b52cbcf184991fd142c696a3d10e8a70f726abf85e172df9480b164463", 0xaf}], 0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000240)={0x9, 0x8, 0x7, 0x4}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000006140400000000"], 0x18}, 0x1, 0x0, 0x0, 0x8081}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@getlink={0x54, 0x12, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x120, 0x100}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_LINK={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xf30e}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_TXQLEN={0x8, 0xd, 0x8001}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_IFALIASn={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18027a0000000000000000003b0000009500000000000000c5fa788cca331a612cc6cae844cb54b8e3fdb6f92f0f7e8a1c2dcec56ed74dbe6b259a5c557c1edbefc427fdfbd7fc97e0c057097dd8c7bd5acf6e3be2f96d8b217b199eb6dcf1205c35e11815c74c888074f6dacad8b8fb2a35ff50715463d21815317efa508af22e291b3c7ec78a2e7b7cb9bf5400eb3f0a6142314aa6ad8d9ffc88f151c12d9d713f33f8298aac59ff05a2ebe4deb330c9e3aca7502a327fbee8236b20746a7c2fe53159116f13cd08ea3535bd4cf0"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6}, 0x90) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0xd8b}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1a, 0x5, &(0x7f0000000280)=@raw=[@tail_call], &(0x7f00000002c0)='GPL\x00', 0x1546, 0xd3, &(0x7f0000000300)=""/211, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2e, r4, 0x8, &(0x7f0000000440)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x8, 0x8, 0x1}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r8, 0x1], 0x0, 0x10, 0x6}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, r11, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r10) close(r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000008c00000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffd}, 0x94) 1.588434101s ago: executing program 4 (id=3177): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x2ffdfff, 0x0, 0x2, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) 1.587480295s ago: executing program 3 (id=3178): getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000fa", 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x7e, 0x0, 0xca9e}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 1.43541116s ago: executing program 0 (id=3179): sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x80000, @mcast2}, 0x1c, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x73) 1.341082606s ago: executing program 3 (id=3180): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x888, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x3ff, 0x5, 0xfffffffd, {0x8, 0x1, 0x2, 0xf801, 0xa6d, 0x12b}, {0x5, 0x0, 0x4, 0x3701, 0xcc42, 0x7}, 0x0, 0x2, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0x4, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x2, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x80000001, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x6, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x8001, 0x9, 0x4, 0x9, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r2 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040014}, 0x0) recvmmsg(r2, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000000c0)=""/154, 0x9a}], 0x1}, 0x10001}], 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.292284307s ago: executing program 0 (id=3181): connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 1.243035265s ago: executing program 0 (id=3182): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xd8, 0x97ffffff}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 1.105308297s ago: executing program 0 (id=3183): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080010000200000000000", @ANYRES16, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003c000000fe80000000000500000000000000000b2303000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a0002"], 0x104}, 0x1, 0x0, 0x0, 0x2000c8c0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a1150015400400142603600e120800060000001001a8001600a40004", 0x37}], 0x1}, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000040)='\x00', 0xfd04) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28030}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001811ff00000000000000000000000000000000ff0200000000000000000000000000014f194e2000189078"], 0x52) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x20c, r5, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x80, @mcast1, 0x8b7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @private1, 0x90}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="c4a2aa3ec0d537cc562f28c12dc19e771d56f67db86e6e0f505f616a50bc6cb44aaa81", 0x23}, {&(0x7f00000000c0)="0ef53decc1eda21d6d251a8ddc6fd2e546f87f42d2771cf259fba1bd413e6b898f6b65599fbe36e9abe5471b88ed27e071b26490265339cbf2e624c3b1c8ef7375fbe3b1623e480ce5b91bf98c3f4a20058467173b2e864b3ab3abb18ea69dd9b04b1d6caff1c5f092867cff8ccca4a2d31ae902a5edb69475ff7769b3cd90c725f72b8964b0819b21c9", 0x8a}, {&(0x7f0000000080)="dc1c6602b38304753ebe231d5588cc79eb0c835533ead7b367e7af19f30e443d", 0x20}, {&(0x7f0000000200)="d7bc6e0aef38915398873ea453c92b954da92c2c76e25f2e6837c884016e5b103ae2f1f39ac6690fd3ef54940f2613a7e64753c651c3579dcac949718ec9a45bc384734692d200554c200b5842d8edfeea3b24908f71455cfd957984b0ef998235e72be3e60ac71fad4c5afdfe06f5906564958c68b9cc50218092dd736820305844b95289261bd8861f4490bb2ca90dd34da450ad0ea1c8711a01b35f5000"/174, 0xae}], 0x4}, 0x8085) r11 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r11, 0x110, 0x2, &(0x7f0000000380)='}*\x00', 0x3) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33) 764.325455ms ago: executing program 3 (id=3184): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x44080) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x20}}, 0x0) 577.685199ms ago: executing program 3 (id=3185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1d, 0x13, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000005000000000000000000010018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000050000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000840700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c00044000000000000000090c0005"], 0xe8}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="0000230c1100"}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x3f5, 0x300, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48c0}, 0x4048040) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) shutdown(r6, 0x1) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r7, &(0x7f00000001c0)={0x6, 0x8, 0x2}, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x9, 0xb, 0x14, 0x5}}]}}]}, 0x150}}, 0x4000010) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0xfffffefc, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xf}, {}, {0x10}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x100}, {0x6, 0x100, 0x4, 0x6, 0x9, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@gettfilter={0x4c, 0x2e, 0x222, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1, 0xc}, {0xfff2, 0xe}, {0xb, 0x7}}, [{0x8, 0xb, 0xff}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8eaf}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1000}, 0x8000) 99.084363ms ago: executing program 0 (id=3186): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1409, 0x1, 0x10}, 0x10}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000400)={r7, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x81, 0x9e, 0x3}, @isdn={0x22, 0xc, 0x0, 0x1, 0x9}, @nfc={0x27, 0x0, 0x0, 0x2}, 0x68e7, 0x0, 0x0, 0x0, 0x400, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x4, 0x0, 0x7ff}) sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) 0s ago: executing program 3 (id=3187): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000540)=0xc) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x10, 0xfffffb}]}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000780)="2050bbcdbba6af523930d0f388abe3fee1062b468d2e63dc3d2f883b0358e022f5f53e5d5a3570e1e040f2b6e8b0e35cc9ee1b442ed96674960a1f64fa0e440a09d1cf5a8ee0dbe6866038ef269a65026c3d57856f35efa9d16604f01a40ba11f2eb32718ffff767a5dc5fb0285c16b82911c2c5e134ac09b13a982bb4a91365b1f82b674f49388893c2d10a9c25e7a632130921d77cf5be928b565c3b122ca4c98ff02affbc03", 0xa7}], 0x1}}], 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r6], 0x24}}, 0x4000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc0000b076bda2ecc91d00", @ANYRES16=r5, @ANYBLOB="01002cbd7000fcdbdf250f00000008002c000700000006002800040000000a000900aaaaaaaaaabb000005002e000000000008000b00ff07000008000600", @ANYRES32=r7, @ANYBLOB="0a000900aaaaaaaaaabb000008002c00ff03000005003700010000000500370001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xfff2, 0x1}, {0xffff, 0xffff}, {0x2, 0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x10}]}, 0x2c}}, 0x40400d0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@delqdisc={0x494, 0x25, 0x800, 0x10000, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x10, 0xb}, {0xa, 0x7}, {0x6, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x101}, @qdisc_kind_options=@q_drr={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_tbf={{0x8}, {0x448, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1f18}, @TCA_TBF_PTAB={0x404, 0x3, [0x5, 0x8, 0xff, 0x0, 0x7f, 0x5, 0x0, 0xc987, 0x4, 0x4, 0xffffffff, 0x2, 0x4, 0x5, 0x2, 0x80000000, 0x7ff, 0x7, 0x2, 0x4, 0x4, 0x8, 0x1, 0x5, 0xfffff800, 0x8001, 0xfffffc00, 0x4, 0x24e5, 0x2000000, 0x5, 0x7fffffff, 0x3, 0x101, 0xdb29, 0x3, 0xbe50, 0x4e41, 0xff, 0x1, 0x4, 0x2, 0x0, 0x7, 0x70, 0x400, 0x8000, 0x9, 0x3, 0x7, 0x3, 0x6, 0x9, 0x7, 0x6, 0x3, 0x3, 0x7, 0x9, 0x3, 0x9, 0x8, 0x4800, 0xab3f, 0x2, 0x10, 0x4, 0x2, 0x80000001, 0x80000000, 0x0, 0x1, 0x7ff, 0x2, 0x8, 0xbe2, 0x7fffffff, 0x0, 0x0, 0xd, 0xb, 0x6, 0x70000, 0xfec, 0x2, 0x7f, 0x8, 0x1000, 0x4, 0x70f6, 0x9, 0x7, 0x3, 0x40003, 0x3, 0xfffffee2, 0x5, 0x4, 0x2, 0x1, 0x1, 0x3, 0x80000001, 0x8, 0x0, 0x662f, 0x7, 0x4, 0x80000001, 0x19, 0x1, 0xffffffff, 0x0, 0x3, 0x401, 0x1, 0x650, 0x7, 0xffffff23, 0x8, 0x3, 0x5, 0x7, 0x2, 0x8, 0x9, 0xfffff801, 0x7, 0x3ff, 0x5, 0x200, 0xf1a, 0xeb, 0xffff0000, 0x10001, 0x6, 0x5, 0x4, 0x19, 0x200, 0x5, 0x4000000, 0x4, 0x2, 0x7fffffff, 0x5, 0x0, 0x0, 0x5b, 0xe, 0x6, 0x7, 0x1, 0x6, 0x7, 0x40, 0xb, 0x4, 0xe, 0x1, 0xffff, 0x3991, 0x6, 0x7f4, 0x5, 0x6, 0x9, 0x4, 0x0, 0xcea, 0x367, 0x8, 0x6, 0x200, 0x8, 0xffff, 0x7f, 0x9, 0xfff, 0x3, 0x2, 0x5, 0x7, 0xfffffffc, 0xa7, 0x81, 0x6, 0x8, 0x0, 0x493, 0x5, 0x9, 0x81, 0x9, 0x7fff, 0x8, 0x9, 0x5, 0x480000, 0x5, 0x6, 0x2, 0x9, 0x8, 0x8, 0x1, 0x8000, 0x6, 0x0, 0x10000, 0x3, 0x4, 0x6f9, 0x3, 0x4, 0x8, 0xff, 0x4, 0x7, 0xd48, 0xa, 0x40, 0x4, 0x3, 0x7, 0xffffffff, 0xffffffff, 0xc, 0xfffffff8, 0x5101, 0x8, 0x4, 0xb, 0x3ff, 0x7fc0, 0xfc, 0x6, 0x95, 0x8000, 0x3, 0x8, 0x8, 0x122, 0x4404, 0x8, 0x40, 0x1, 0xffff, 0xffff, 0x5, 0xd, 0x6, 0x5d8, 0x1, 0x3, 0x5]}, @TCA_TBF_PARMS={0x28, 0x1, {{0xc, 0x2913a9d5d376db82, 0x3, 0x9, 0x0, 0x101}, {0x3, 0x2, 0x3ff, 0xff, 0x2, 0x4}, 0x5, 0x5, 0xa08}}, @TCA_TBF_PBURST={0x8, 0x7, 0x18c6}, @TCA_TBF_BURST={0x8, 0x6, 0xffff}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x494}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r12}, 0x10) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): 333.486885][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1983'. [ 333.543426][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1983'. [ 333.712154][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1987'. [ 333.775905][T12359] lo speed is unknown, defaulting to 1000 [ 333.783977][T12359] lo speed is unknown, defaulting to 1000 [ 333.816188][T12354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.830672][T12361] netlink: 'syz.1.1989': attribute type 6 has an invalid length. [ 333.859304][T12361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.776999][T12399] macvtap4: entered promiscuous mode [ 334.793069][T12399] macvtap4: entered allmulticast mode [ 334.803027][T12399] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 335.026539][T12414] FAULT_INJECTION: forcing a failure. [ 335.026539][T12414] name failslab, interval 1, probability 0, space 0, times 0 [ 335.049929][T12414] CPU: 1 UID: 0 PID: 12414 Comm: syz.1.2006 Not tainted syzkaller #0 PREEMPT(full) [ 335.049960][T12414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.049972][T12414] Call Trace: [ 335.049980][T12414] [ 335.049988][T12414] dump_stack_lvl+0x189/0x250 [ 335.050015][T12414] ? __pfx____ratelimit+0x10/0x10 [ 335.050035][T12414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.050059][T12414] ? __pfx__printk+0x10/0x10 [ 335.050090][T12414] ? __pfx___might_resched+0x10/0x10 [ 335.050109][T12414] ? fs_reclaim_acquire+0x7d/0x100 [ 335.050145][T12414] should_fail_ex+0x414/0x560 [ 335.050186][T12414] should_failslab+0xa8/0x100 [ 335.050224][T12414] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 335.050251][T12414] ? __alloc_skb+0x112/0x2d0 [ 335.050292][T12414] __alloc_skb+0x112/0x2d0 [ 335.050317][T12414] alloc_skb_with_frags+0xca/0x890 [ 335.050358][T12414] sock_alloc_send_pskb+0x857/0x990 [ 335.050407][T12414] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 335.050435][T12414] ? ipv6_dev_get_saddr+0x143/0xb70 [ 335.050470][T12414] __ip6_append_data+0x2b43/0x3f30 [ 335.050528][T12414] ? __pfx_ping_getfrag+0x10/0x10 [ 335.050580][T12414] ? __pfx___ip6_append_data+0x10/0x10 [ 335.050605][T12414] ? __pfx_ip6_mtu+0x10/0x10 [ 335.050643][T12414] ip6_append_data+0x1c4/0x380 [ 335.050677][T12414] ? __pfx_ping_getfrag+0x10/0x10 [ 335.050706][T12414] ping_v6_sendmsg+0xe0e/0x1210 [ 335.050739][T12414] ? look_up_lock_class+0x74/0x170 [ 335.050763][T12414] ? __pfx_ping_v6_sendmsg+0x10/0x10 [ 335.050811][T12414] ? __local_bh_enable_ip+0x12d/0x1c0 [ 335.050836][T12414] ? __local_bh_enable_ip+0x12d/0x1c0 [ 335.050854][T12414] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 335.050876][T12414] ? do_raw_spin_unlock+0x122/0x240 [ 335.050900][T12414] ? inet_sendmsg+0x14f/0x370 [ 335.050927][T12414] ? inet_sendmsg+0x2f4/0x370 [ 335.050981][T12414] __sock_sendmsg+0x19c/0x270 [ 335.051012][T12414] __sys_sendto+0x3bd/0x520 [ 335.051035][T12414] ? __pfx___sys_sendto+0x10/0x10 [ 335.051052][T12414] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 335.051091][T12414] ? __fget_files+0x3a0/0x420 [ 335.051119][T12414] ? ksys_write+0x22a/0x250 [ 335.051146][T12414] ? __pfx_ksys_write+0x10/0x10 [ 335.051167][T12414] ? rcu_is_watching+0x15/0xb0 [ 335.051194][T12414] __x64_sys_sendto+0xde/0x100 [ 335.051218][T12414] do_syscall_64+0xfa/0x3b0 [ 335.051235][T12414] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.051252][T12414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.051277][T12414] ? clear_bhb_loop+0x60/0xb0 [ 335.051300][T12414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.051318][T12414] RIP: 0033:0x7fac6bd8ebe9 [ 335.051338][T12414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.051354][T12414] RSP: 002b:00007fac6cc41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 335.051376][T12414] RAX: ffffffffffffffda RBX: 00007fac6bfc5fa0 RCX: 00007fac6bd8ebe9 [ 335.051390][T12414] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000004 [ 335.051402][T12414] RBP: 00007fac6cc41090 R08: 0000200000000180 R09: 000000000000001c [ 335.051414][T12414] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 335.051425][T12414] R13: 00007fac6bfc6038 R14: 00007fac6bfc5fa0 R15: 00007ffd0f15c018 [ 335.051466][T12414] [ 335.756150][T12427] sctp: [Deprecated]: syz.1.2008 (pid 12427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.756150][T12427] Use struct sctp_sack_info instead [ 336.052040][T12442] __nla_validate_parse: 12 callbacks suppressed [ 336.052064][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 336.193665][T12441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2016'. [ 336.200843][T12449] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2018'. [ 336.394488][T12459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2023'. [ 336.485862][T12462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'. [ 336.522200][T12462] batadv0: entered promiscuous mode [ 336.527950][T12462] macvtap4: entered promiscuous mode [ 336.537294][T12462] macvtap4: entered allmulticast mode [ 336.537416][T12468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2024'. [ 336.543167][T12462] batadv0: entered allmulticast mode [ 336.548246][T12462] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 336.690214][T12472] FAULT_INJECTION: forcing a failure. [ 336.690214][T12472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.733095][T12472] CPU: 0 UID: 0 PID: 12472 Comm: syz.0.2027 Not tainted syzkaller #0 PREEMPT(full) [ 336.733126][T12472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.733138][T12472] Call Trace: [ 336.733146][T12472] [ 336.733154][T12472] dump_stack_lvl+0x189/0x250 [ 336.733183][T12472] ? __pfx____ratelimit+0x10/0x10 [ 336.733203][T12472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.733226][T12472] ? __pfx__printk+0x10/0x10 [ 336.733252][T12472] ? __might_fault+0xb0/0x130 [ 336.733293][T12472] should_fail_ex+0x414/0x560 [ 336.733325][T12472] _copy_from_user+0x2d/0xb0 [ 336.733348][T12472] kstrtouint_from_user+0xc4/0x170 [ 336.733382][T12472] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 336.733430][T12472] proc_fail_nth_write+0x88/0x200 [ 336.733452][T12472] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 336.733482][T12472] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 336.733505][T12472] vfs_write+0x27e/0xb30 [ 336.733543][T12472] ? __pfx_vfs_write+0x10/0x10 [ 336.733570][T12472] ? __fget_files+0x2a/0x420 [ 336.733593][T12472] ? __fget_files+0x3a0/0x420 [ 336.733609][T12472] ? __fget_files+0x2a/0x420 [ 336.733637][T12472] ksys_write+0x145/0x250 [ 336.733665][T12472] ? __pfx_ksys_write+0x10/0x10 [ 336.733686][T12472] ? rcu_is_watching+0x15/0xb0 [ 336.733712][T12472] ? do_syscall_64+0xbe/0x3b0 [ 336.733738][T12472] do_syscall_64+0xfa/0x3b0 [ 336.733755][T12472] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.733773][T12472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.733792][T12472] ? clear_bhb_loop+0x60/0xb0 [ 336.733816][T12472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.733834][T12472] RIP: 0033:0x7fe32158d69f [ 336.733852][T12472] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 336.733869][T12472] RSP: 002b:00007fe32246e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 336.733891][T12472] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe32158d69f [ 336.733904][T12472] RDX: 0000000000000001 RSI: 00007fe32246e0a0 RDI: 0000000000000005 [ 336.733916][T12472] RBP: 00007fe32246e090 R08: 0000000000000000 R09: 000000000000001c [ 336.733929][T12472] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000001 [ 336.733940][T12472] R13: 00007fe3217c6038 R14: 00007fe3217c5fa0 R15: 00007ffdff21eb78 [ 336.733975][T12472] [ 336.767738][T12470] sit0: left allmulticast mode [ 336.974675][T12479] netlink: 'syz.1.2029': attribute type 2 has an invalid length. [ 337.630941][T12470] xfrm0: left allmulticast mode [ 337.987465][T12470] macvtap1: left allmulticast mode [ 338.015195][ T9381] lo speed is unknown, defaulting to 1000 [ 338.024403][ T9381] syz1: Port: 1 Link DOWN [ 338.038485][ T8592] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.059085][T12508] netlink: 212280 bytes leftover after parsing attributes in process `syz.1.2037'. [ 338.094016][ T8592] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.142030][ T8592] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.157295][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2038'. [ 338.184611][ T8592] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.209390][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2038'. [ 338.288281][T12509] macvtap5: entered promiscuous mode [ 338.301586][T12509] macvtap5: entered allmulticast mode [ 338.340827][T12509] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 338.343986][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2039'. [ 339.019950][T12550] netlink: 'syz.0.2053': attribute type 15 has an invalid length. [ 339.124825][T12548] sit0: entered allmulticast mode [ 339.176701][T12555] macvtap5: entered promiscuous mode [ 339.218245][T12555] macvtap5: entered allmulticast mode [ 339.252744][T12555] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 339.514823][T12578] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 339.663908][T12583] macvtap6: entered promiscuous mode [ 339.677184][T12583] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 339.829941][T12592] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 339.840281][T12597] netlink: 'syz.1.2072': attribute type 4 has an invalid length. [ 339.860913][T12597] netlink: 'syz.1.2072': attribute type 4 has an invalid length. [ 340.088994][T12606] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 340.301662][T12615] sctp: [Deprecated]: syz.4.2078 (pid 12615) Use of int in max_burst socket option deprecated. [ 340.301662][T12615] Use struct sctp_assoc_value instead [ 340.387001][T12621] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 340.411826][T12621] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 341.080060][T12658] lo speed is unknown, defaulting to 1000 [ 341.103642][T12658] lo speed is unknown, defaulting to 1000 [ 341.349126][T12677] __nla_validate_parse: 21 callbacks suppressed [ 341.349150][T12677] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2100'. [ 341.743432][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2104'. [ 341.766358][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2106'. [ 341.778645][T12689] lo speed is unknown, defaulting to 1000 [ 341.803428][T12689] lo speed is unknown, defaulting to 1000 [ 342.177316][T12704] syzkaller0: entered promiscuous mode [ 342.184045][T12704] syzkaller0: entered allmulticast mode [ 342.450742][T12725] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2115'. [ 342.932519][T12737] FAULT_INJECTION: forcing a failure. [ 342.932519][T12737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.969959][T12737] CPU: 1 UID: 0 PID: 12737 Comm: syz.2.2119 Not tainted syzkaller #0 PREEMPT(full) [ 342.969991][T12737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.970003][T12737] Call Trace: [ 342.970011][T12737] [ 342.970020][T12737] dump_stack_lvl+0x189/0x250 [ 342.970051][T12737] ? __pfx____ratelimit+0x10/0x10 [ 342.970072][T12737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.970095][T12737] ? __pfx__printk+0x10/0x10 [ 342.970122][T12737] ? __might_fault+0xb0/0x130 [ 342.970161][T12737] should_fail_ex+0x414/0x560 [ 342.970266][T12737] _copy_from_iter+0x1de/0x1790 [ 342.970293][T12737] ? __lock_acquire+0xab9/0xd20 [ 342.970322][T12737] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 342.970349][T12737] ? policy_nodemask+0x27c/0x720 [ 342.970371][T12737] ? __pfx__copy_from_iter+0x10/0x10 [ 342.970397][T12737] ? set_page_refcounted+0xa0/0x1e0 [ 342.970420][T12737] ? page_copy_sane+0x4e/0x280 [ 342.970440][T12737] copy_page_from_iter+0xdd/0x170 [ 342.970463][T12737] tun_get_user+0x1d7b/0x3e20 [ 342.970492][T12737] ? tun_get_user+0x6f6/0x3e20 [ 342.970520][T12737] ? aa_file_perm+0x44d/0x1550 [ 342.970542][T12737] ? __pfx_tun_get_user+0x10/0x10 [ 342.970562][T12737] ? _parse_integer_limit+0x1ae/0x1f0 [ 342.970601][T12737] ? __lock_acquire+0xab9/0xd20 [ 342.970637][T12737] ? ref_tracker_alloc+0x318/0x460 [ 342.970662][T12737] ? __lock_acquire+0xab9/0xd20 [ 342.970692][T12737] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 342.970726][T12737] ? tun_get+0x1c/0x2f0 [ 342.970753][T12737] ? tun_get+0x1c/0x2f0 [ 342.970773][T12737] ? tun_get+0x1c/0x2f0 [ 342.970800][T12737] tun_chr_write_iter+0x113/0x200 [ 342.970824][T12737] vfs_write+0x5c6/0xb30 [ 342.970858][T12737] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 342.970880][T12737] ? __pfx_vfs_write+0x10/0x10 [ 342.970931][T12737] ? __fget_files+0x2a/0x420 [ 342.970962][T12737] ksys_write+0x145/0x250 [ 342.970992][T12737] ? __pfx_ksys_write+0x10/0x10 [ 342.971016][T12737] ? rcu_is_watching+0x15/0xb0 [ 342.971043][T12737] ? do_syscall_64+0xbe/0x3b0 [ 342.971074][T12737] do_syscall_64+0xfa/0x3b0 [ 342.971093][T12737] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.971111][T12737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.971129][T12737] ? clear_bhb_loop+0x60/0xb0 [ 342.971151][T12737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.971169][T12737] RIP: 0033:0x7f20d4f8d69f [ 342.971188][T12737] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 342.971205][T12737] RSP: 002b:00007f20d5da9000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 342.971227][T12737] RAX: ffffffffffffffda RBX: 00007f20d51c5fa0 RCX: 00007f20d4f8d69f [ 342.971241][T12737] RDX: 000000000000006e RSI: 0000200000000100 RDI: 00000000000000c8 [ 342.971253][T12737] RBP: 00007f20d5da9090 R08: 0000000000000000 R09: 0000000000000000 [ 342.971264][T12737] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 342.971274][T12737] R13: 00007f20d51c6038 R14: 00007f20d51c5fa0 R15: 00007ffdf3ff4db8 [ 342.971305][T12737] [ 343.722603][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2122'. [ 344.535904][T12780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2133'. [ 344.877866][T12798] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2137'. [ 346.402854][T12782] syzkaller0: entered promiscuous mode [ 346.418165][T12782] syzkaller0: entered allmulticast mode [ 347.658270][T12822] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2145'. [ 348.855451][T12816] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2143'. [ 349.056379][T12830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2148'. [ 349.129895][T12834] ipvlan9: entered promiscuous mode [ 349.138058][T12834] 8021q: adding VLAN 0 to HW filter on device ipvlan9 [ 349.158478][T12833] bond2: (slave gretap1): Releasing active interface [ 349.187797][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2150'. [ 349.213759][T12837] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2151'. [ 349.264181][T12837] tipc: Enabling of bearer rejected, failed to enable media [ 349.278369][T12843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2153'. [ 349.679491][T12862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2161'. [ 349.845057][T12868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2163'. [ 349.953071][T12872] ipvlan1: entered promiscuous mode [ 349.960443][T12872] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 350.103816][T12876] tipc: Enabled bearer , priority 0 [ 350.112161][T12876] syzkaller0: entered promiscuous mode [ 350.117677][T12876] syzkaller0: entered allmulticast mode [ 350.195647][T12876] tipc: Resetting bearer [ 350.220003][T12875] tipc: Resetting bearer [ 350.311935][T12875] tipc: Disabling bearer [ 350.913900][T12907] ipvlan2: entered promiscuous mode [ 350.934209][T12907] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 351.355680][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2186'. [ 351.364045][T12932] lo speed is unknown, defaulting to 1000 [ 351.404863][T12932] lo speed is unknown, defaulting to 1000 [ 351.443781][T12933] nbd0: detected capacity change from 0 to 127 [ 351.535616][ T5183] block nbd0: Receive control failed (result -32) [ 352.146718][T12970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2194'. [ 353.276722][T13025] __nla_validate_parse: 1 callbacks suppressed [ 353.276744][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2212'. [ 353.642592][T13035] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 354.273307][T13056] sctp: [Deprecated]: syz.4.2223 (pid 13056) Use of int in max_burst socket option. [ 354.273307][T13056] Use struct sctp_assoc_value instead [ 354.294369][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2224'. [ 354.456155][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 354.467951][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 354.587218][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 354.599749][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 354.845926][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 354.855499][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 354.884290][T13074] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2228'. [ 354.905097][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 355.105213][T13087] netlink: 'syz.1.2231': attribute type 10 has an invalid length. [ 355.588326][T13106] ipvlan10: entered promiscuous mode [ 355.603390][T13106] 8021q: adding VLAN 0 to HW filter on device ipvlan10 [ 356.297318][T13140] netlink: 'syz.1.2250': attribute type 14 has an invalid length. [ 356.574430][T13137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.615126][T13145] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.829966][T13165] lo speed is unknown, defaulting to 1000 [ 356.863561][T13165] lo speed is unknown, defaulting to 1000 [ 357.016008][T13133] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 357.523991][T13183] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.758116][T13196] netlink: 'syz.2.2269': attribute type 10 has an invalid length. [ 357.815733][T13193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.342553][T13218] __nla_validate_parse: 16 callbacks suppressed [ 358.342574][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 358.365917][T13207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2274'. [ 358.403000][T13207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2274'. [ 358.508418][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2280'. [ 358.886116][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2287'. [ 358.907347][T13236] tipc: Enabled bearer , priority 0 [ 358.914619][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2287'. [ 358.931712][T13236] syzkaller0: entered promiscuous mode [ 358.939095][T13236] syzkaller0: entered allmulticast mode [ 358.963621][T13243] netlink: 'syz.0.2288': attribute type 1 has an invalid length. [ 358.988667][T13235] tipc: Resetting bearer [ 359.028596][T13235] tipc: Disabling bearer [ 359.037101][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2287'. [ 359.071520][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2287'. [ 359.200272][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2289'. [ 359.251549][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2287'. [ 359.350200][T13262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.515862][T13267] tipc: Enabled bearer , priority 0 [ 359.529011][T13267] syzkaller0: entered promiscuous mode [ 359.538238][T13267] syzkaller0: entered allmulticast mode [ 359.607406][T13265] tipc: Resetting bearer [ 359.666340][T13265] tipc: Disabling bearer [ 360.218657][T13306] netlink: 'syz.1.2309': attribute type 10 has an invalid length. [ 360.983554][T13344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.596527][T13368] lo speed is unknown, defaulting to 1000 [ 361.622332][T13368] lo speed is unknown, defaulting to 1000 [ 362.316951][T13401] netlink: 'syz.2.2342': attribute type 10 has an invalid length. [ 362.322275][T13397] lo speed is unknown, defaulting to 1000 [ 362.343886][T13397] lo speed is unknown, defaulting to 1000 [ 362.710335][T13418] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.025879][T13427] nbd: nbd0 already in use [ 363.037912][T13427] block nbd0: NBD_DISCONNECT [ 363.049365][T13427] block nbd0: Send disconnect failed -32 [ 363.056590][T13427] block nbd0: shutting down sockets [ 363.083876][T13429] FAULT_INJECTION: forcing a failure. [ 363.083876][T13429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.117146][T13429] CPU: 0 UID: 0 PID: 13429 Comm: syz.3.2350 Not tainted syzkaller #0 PREEMPT(full) [ 363.117178][T13429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.117190][T13429] Call Trace: [ 363.117198][T13429] [ 363.117207][T13429] dump_stack_lvl+0x189/0x250 [ 363.117238][T13429] ? __pfx____ratelimit+0x10/0x10 [ 363.117261][T13429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.117284][T13429] ? __pfx__printk+0x10/0x10 [ 363.117313][T13429] ? __might_fault+0xb0/0x130 [ 363.117355][T13429] should_fail_ex+0x414/0x560 [ 363.117388][T13429] _copy_from_user+0x2d/0xb0 [ 363.117413][T13429] ___sys_sendmsg+0x158/0x2a0 [ 363.117441][T13429] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.117509][T13429] ? __fget_files+0x2a/0x420 [ 363.117527][T13429] ? __fget_files+0x3a0/0x420 [ 363.117558][T13429] __x64_sys_sendmsg+0x19b/0x260 [ 363.117586][T13429] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.117621][T13429] ? __pfx_ksys_write+0x10/0x10 [ 363.117645][T13429] ? rcu_is_watching+0x15/0xb0 [ 363.117672][T13429] ? do_syscall_64+0xbe/0x3b0 [ 363.117699][T13429] do_syscall_64+0xfa/0x3b0 [ 363.117719][T13429] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.117739][T13429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.117759][T13429] ? clear_bhb_loop+0x60/0xb0 [ 363.117784][T13429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.117804][T13429] RIP: 0033:0x7f0172d8ebe9 [ 363.117823][T13429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.117840][T13429] RSP: 002b:00007f0173c51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.117864][T13429] RAX: ffffffffffffffda RBX: 00007f0172fc5fa0 RCX: 00007f0172d8ebe9 [ 363.117879][T13429] RDX: 0000000020000000 RSI: 0000200000000d40 RDI: 0000000000000007 [ 363.117892][T13429] RBP: 00007f0173c51090 R08: 0000000000000000 R09: 0000000000000000 [ 363.117905][T13429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.117926][T13429] R13: 00007f0172fc6038 R14: 00007f0172fc5fa0 R15: 00007ffe03dae038 [ 363.117961][T13429] [ 363.656483][T13436] tipc: Failed to remove unknown binding: 66,1,1/0:1447288720/1447288722 [ 363.754581][T13445] tipc: Failed to remove unknown binding: 66,1,1/0:1447288720/1447288722 [ 363.787046][T13445] tipc: Failed to remove unknown binding: 66,1,1/0:1447288720/1447288722 [ 363.798305][T13444] __nla_validate_parse: 27 callbacks suppressed [ 363.798326][T13444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2357'. [ 363.868398][T13447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2358'. [ 364.043985][T13458] gretap0: left promiscuous mode [ 364.050335][T13458] sit0: left promiscuous mode [ 364.085839][T13458] sit0: left allmulticast mode [ 364.111623][T13462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2362'. [ 364.118453][T13458] team0: left promiscuous mode [ 364.145989][T13458] xfrm0: left promiscuous mode [ 364.157957][T13462] openvswitch: netlink: Flow key attr not present in new flow. [ 364.195650][T13458] vlan2: left promiscuous mode [ 364.200581][T13458] bond0: left promiscuous mode [ 364.206082][T13458] macsec1: left promiscuous mode [ 364.212034][T13458] geneve2: left promiscuous mode [ 364.220931][T13458] macvtap1: left promiscuous mode [ 364.227317][T13447] tipc: Enabling of bearer rejected, failed to enable media [ 364.250414][T13462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2362'. [ 364.276147][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2363'. [ 364.542525][T13474] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2367'. [ 364.597595][T13478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.690538][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2369'. [ 364.735414][T13484] netlink: 'syz.0.2370': attribute type 10 has an invalid length. [ 364.908208][T13489] lo speed is unknown, defaulting to 1000 [ 364.916920][T13489] lo speed is unknown, defaulting to 1000 [ 365.497529][T13515] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2380'. [ 365.682024][T13521] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2383'. [ 365.700093][T13519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2382'. [ 366.440523][T13551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.462369][T13589] netlink: 'syz.2.2404': attribute type 1 has an invalid length. [ 367.667410][T13596] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 367.703765][T13596] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 367.836243][T13589] gretap1: entered promiscuous mode [ 367.969685][T13613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.191688][T13620] lo speed is unknown, defaulting to 1000 [ 368.237208][T13620] lo speed is unknown, defaulting to 1000 [ 369.032152][T13648] __nla_validate_parse: 11 callbacks suppressed [ 369.032174][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 369.085831][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'. [ 369.302171][T13661] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2430'. [ 369.348399][T13664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2432'. [ 369.400048][T13664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2432'. [ 369.448397][T13670] lo speed is unknown, defaulting to 1000 [ 369.516713][T13670] lo speed is unknown, defaulting to 1000 [ 369.627737][ T9374] IPVS: starting estimator thread 0... [ 369.642793][T13673] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 369.695149][T13679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.707747][T13678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2434'. [ 369.771509][T13677] IPVS: using max 26 ests per chain, 62400 per kthread [ 369.909255][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2436'. [ 369.918904][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2436'. [ 370.386256][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2441'. [ 370.418543][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2441'. [ 370.706178][T13708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.449962][T13738] IPVS: Error connecting to the multicast addr [ 371.597344][T13747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.080369][T13766] lo speed is unknown, defaulting to 1000 [ 372.148877][T13766] lo speed is unknown, defaulting to 1000 [ 372.396395][T13783] team1: entered promiscuous mode [ 372.428842][T13783] team1: entered allmulticast mode [ 372.712762][T13799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.763522][T13800] netlink: 'syz.0.2478': attribute type 5 has an invalid length. [ 373.179179][T13819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.219751][T13819] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.220224][T13863] __nla_validate_parse: 15 callbacks suppressed [ 374.220247][T13863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2501'. [ 374.575973][T13871] tipc: Enabled bearer , priority 0 [ 374.609258][T13871] syzkaller0: entered promiscuous mode [ 374.631336][T13871] syzkaller0: entered allmulticast mode [ 374.657927][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2507'. [ 374.681271][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2507'. [ 374.719900][T13871] tipc: Resetting bearer [ 374.761548][T13869] tipc: Resetting bearer [ 374.805385][T13869] tipc: Disabling bearer [ 374.986907][T13893] FAULT_INJECTION: forcing a failure. [ 374.986907][T13893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.030280][T13891] lo speed is unknown, defaulting to 1000 [ 375.051620][T13893] CPU: 0 UID: 0 PID: 13893 Comm: syz.0.2514 Not tainted syzkaller #0 PREEMPT(full) [ 375.051651][T13893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.051662][T13893] Call Trace: [ 375.051670][T13893] [ 375.051678][T13893] dump_stack_lvl+0x189/0x250 [ 375.051706][T13893] ? __pfx____ratelimit+0x10/0x10 [ 375.051726][T13893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.051748][T13893] ? __pfx__printk+0x10/0x10 [ 375.051773][T13893] ? __might_fault+0xb0/0x130 [ 375.051812][T13893] should_fail_ex+0x414/0x560 [ 375.051842][T13893] _copy_from_iter+0x1de/0x1790 [ 375.051870][T13893] ? rcu_is_watching+0x15/0xb0 [ 375.051891][T13893] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 375.051914][T13893] ? __pfx__copy_from_iter+0x10/0x10 [ 375.051933][T13893] ? __build_skb_around+0x257/0x3e0 [ 375.051955][T13893] ? netlink_sendmsg+0x642/0xb30 [ 375.051972][T13893] ? skb_put+0x11b/0x210 [ 375.051995][T13893] netlink_sendmsg+0x6b2/0xb30 [ 375.052024][T13893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.052047][T13893] ? aa_sock_msg_perm+0xf1/0x1d0 [ 375.052067][T13893] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.052087][T13893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.052107][T13893] __sock_sendmsg+0x21c/0x270 [ 375.052138][T13893] ____sys_sendmsg+0x505/0x830 [ 375.052166][T13893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.052197][T13893] ? import_iovec+0x74/0xa0 [ 375.052222][T13893] ___sys_sendmsg+0x21f/0x2a0 [ 375.052246][T13893] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.052309][T13893] ? __fget_files+0x2a/0x420 [ 375.052327][T13893] ? __fget_files+0x3a0/0x420 [ 375.052355][T13893] __x64_sys_sendmsg+0x19b/0x260 [ 375.052380][T13893] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.052412][T13893] ? __pfx_ksys_write+0x10/0x10 [ 375.052433][T13893] ? rcu_is_watching+0x15/0xb0 [ 375.052456][T13893] ? do_syscall_64+0xbe/0x3b0 [ 375.052482][T13893] do_syscall_64+0xfa/0x3b0 [ 375.052500][T13893] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.052518][T13893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.052537][T13893] ? clear_bhb_loop+0x60/0xb0 [ 375.052558][T13893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.052576][T13893] RIP: 0033:0x7fe32158ebe9 [ 375.052602][T13893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.052624][T13893] RSP: 002b:00007fe32246e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.052645][T13893] RAX: ffffffffffffffda RBX: 00007fe3217c5fa0 RCX: 00007fe32158ebe9 [ 375.052659][T13893] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 375.052671][T13893] RBP: 00007fe32246e090 R08: 0000000000000000 R09: 0000000000000000 [ 375.052682][T13893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.052693][T13893] R13: 00007fe3217c6038 R14: 00007fe3217c5fa0 R15: 00007ffdff21eb78 [ 375.052727][T13893] [ 375.064353][T13891] lo speed is unknown, defaulting to 1000 [ 375.112628][T13899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2517'. [ 375.594009][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2523'. [ 375.601745][T13918] FAULT_INJECTION: forcing a failure. [ 375.601745][T13918] name failslab, interval 1, probability 0, space 0, times 0 [ 375.616415][T13918] CPU: 0 UID: 0 PID: 13918 Comm: syz.1.2524 Not tainted syzkaller #0 PREEMPT(full) [ 375.616443][T13918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.616455][T13918] Call Trace: [ 375.616463][T13918] [ 375.616471][T13918] dump_stack_lvl+0x189/0x250 [ 375.616498][T13918] ? __pfx____ratelimit+0x10/0x10 [ 375.616517][T13918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.616538][T13918] ? __pfx__printk+0x10/0x10 [ 375.616558][T13918] ? __mutex_trylock_common+0x153/0x260 [ 375.616583][T13918] ? __pfx___mutex_trylock_common+0x10/0x10 [ 375.616615][T13918] should_fail_ex+0x414/0x560 [ 375.616647][T13918] should_failslab+0xa8/0x100 [ 375.616677][T13918] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 375.616703][T13918] ? __alloc_skb+0x112/0x2d0 [ 375.616727][T13918] __alloc_skb+0x112/0x2d0 [ 375.616751][T13918] dump_sp+0xb9/0x460 [ 375.616786][T13918] xfrm_policy_walk+0x20d/0x630 [ 375.616814][T13918] ? __pfx_dump_sp+0x10/0x10 [ 375.616842][T13918] pfkey_do_dump+0x5f/0x420 [ 375.616865][T13918] ? pfkey_spddump+0x17e/0x260 [ 375.616891][T13918] pfkey_sendmsg+0xbfe/0x1090 [ 375.616921][T13918] ? __lock_acquire+0xab9/0xd20 [ 375.616956][T13918] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 375.617009][T13918] ? aa_sock_msg_perm+0xf1/0x1d0 [ 375.617030][T13918] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.617050][T13918] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 375.617072][T13918] __sock_sendmsg+0x21c/0x270 [ 375.617103][T13918] ____sys_sendmsg+0x505/0x830 [ 375.617133][T13918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.617167][T13918] ? import_iovec+0x74/0xa0 [ 375.617194][T13918] ___sys_sendmsg+0x21f/0x2a0 [ 375.617219][T13918] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.617287][T13918] ? __fget_files+0x2a/0x420 [ 375.617303][T13918] ? __fget_files+0x3a0/0x420 [ 375.617331][T13918] __x64_sys_sendmsg+0x19b/0x260 [ 375.617357][T13918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.617390][T13918] ? __pfx_ksys_write+0x10/0x10 [ 375.617412][T13918] ? rcu_is_watching+0x15/0xb0 [ 375.617438][T13918] ? do_syscall_64+0xbe/0x3b0 [ 375.617464][T13918] do_syscall_64+0xfa/0x3b0 [ 375.617483][T13918] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.617501][T13918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.617520][T13918] ? clear_bhb_loop+0x60/0xb0 [ 375.617543][T13918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.617561][T13918] RIP: 0033:0x7fac6bd8ebe9 [ 375.617580][T13918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.617596][T13918] RSP: 002b:00007fac6cc41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.617618][T13918] RAX: ffffffffffffffda RBX: 00007fac6bfc5fa0 RCX: 00007fac6bd8ebe9 [ 375.617631][T13918] RDX: 0000000020000000 RSI: 0000200000000d40 RDI: 0000000000000007 [ 375.617642][T13918] RBP: 00007fac6cc41090 R08: 0000000000000000 R09: 0000000000000000 [ 375.617654][T13918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.617666][T13918] R13: 00007fac6bfc6038 R14: 00007fac6bfc5fa0 R15: 00007ffd0f15c018 [ 375.617699][T13918] [ 376.226423][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'. [ 376.235705][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'. [ 376.369554][T13930] netlink: 'syz.3.2526': attribute type 6 has an invalid length. [ 376.471824][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2530'. [ 376.518692][T13942] bridge0: Device is already in use. [ 376.982232][T13968] FAULT_INJECTION: forcing a failure. [ 376.982232][T13968] name failslab, interval 1, probability 0, space 0, times 0 [ 377.004994][T13968] CPU: 1 UID: 0 PID: 13968 Comm: syz.0.2541 Not tainted syzkaller #0 PREEMPT(full) [ 377.005023][T13968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 377.005034][T13968] Call Trace: [ 377.005042][T13968] [ 377.005051][T13968] dump_stack_lvl+0x189/0x250 [ 377.005078][T13968] ? __pfx____ratelimit+0x10/0x10 [ 377.005099][T13968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.005120][T13968] ? __pfx__printk+0x10/0x10 [ 377.005149][T13968] ? __pfx___might_resched+0x10/0x10 [ 377.005167][T13968] ? fs_reclaim_acquire+0x7d/0x100 [ 377.005198][T13968] should_fail_ex+0x414/0x560 [ 377.005226][T13968] should_failslab+0xa8/0x100 [ 377.005254][T13968] kmem_cache_alloc_noprof+0x73/0x3c0 [ 377.005278][T13968] ? skb_clone+0x212/0x3a0 [ 377.005303][T13968] skb_clone+0x212/0x3a0 [ 377.005322][T13968] ? nfnetlink_rcv+0x486/0x2520 [ 377.005348][T13968] nfnetlink_rcv+0x4b4/0x2520 [ 377.005372][T13968] ? is_bpf_text_address+0x26/0x2b0 [ 377.005401][T13968] ? kernel_text_address+0xa5/0xe0 [ 377.005426][T13968] ? __kernel_text_address+0xd/0x40 [ 377.005449][T13968] ? unwind_get_return_address+0x4d/0x90 [ 377.005469][T13968] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 377.005489][T13968] ? arch_stack_walk+0xfc/0x150 [ 377.005541][T13968] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 377.005608][T13968] ? __lock_acquire+0xab9/0xd20 [ 377.005647][T13968] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.005688][T13968] netlink_unicast+0x82c/0x9e0 [ 377.005724][T13968] ? __pfx_netlink_unicast+0x10/0x10 [ 377.005752][T13968] ? netlink_sendmsg+0x642/0xb30 [ 377.005767][T13968] ? skb_put+0x11b/0x210 [ 377.005789][T13968] netlink_sendmsg+0x805/0xb30 [ 377.005818][T13968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.005840][T13968] ? aa_sock_msg_perm+0xf1/0x1d0 [ 377.005861][T13968] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 377.005880][T13968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.005900][T13968] __sock_sendmsg+0x21c/0x270 [ 377.005931][T13968] ____sys_sendmsg+0x505/0x830 [ 377.005960][T13968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.005999][T13968] ? import_iovec+0x74/0xa0 [ 377.006025][T13968] ___sys_sendmsg+0x21f/0x2a0 [ 377.006051][T13968] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.006115][T13968] ? __fget_files+0x2a/0x420 [ 377.006132][T13968] ? __fget_files+0x3a0/0x420 [ 377.006162][T13968] __x64_sys_sendmsg+0x19b/0x260 [ 377.006187][T13968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 377.006219][T13968] ? __pfx_ksys_write+0x10/0x10 [ 377.006241][T13968] ? rcu_is_watching+0x15/0xb0 [ 377.006267][T13968] ? do_syscall_64+0xbe/0x3b0 [ 377.006288][T13968] do_syscall_64+0xfa/0x3b0 [ 377.006305][T13968] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.006323][T13968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.006342][T13968] ? clear_bhb_loop+0x60/0xb0 [ 377.006363][T13968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.006381][T13968] RIP: 0033:0x7fe32158ebe9 [ 377.006400][T13968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.006417][T13968] RSP: 002b:00007fe32246e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.006439][T13968] RAX: ffffffffffffffda RBX: 00007fe3217c5fa0 RCX: 00007fe32158ebe9 [ 377.006452][T13968] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 377.006464][T13968] RBP: 00007fe32246e090 R08: 0000000000000000 R09: 0000000000000000 [ 377.006475][T13968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.006486][T13968] R13: 00007fe3217c6038 R14: 00007fe3217c5fa0 R15: 00007ffdff21eb78 [ 377.006528][T13968] [ 377.014356][T13970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.444444][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2546'. [ 377.553363][T13988] netlink: 'syz.1.2549': attribute type 10 has an invalid length. [ 377.713794][T13990] lo speed is unknown, defaulting to 1000 [ 377.762089][T13990] lo speed is unknown, defaulting to 1000 [ 377.861643][T13999] IPVS: length: 24 != 55320 [ 378.418708][T14032] FAULT_INJECTION: forcing a failure. [ 378.418708][T14032] name failslab, interval 1, probability 0, space 0, times 0 [ 378.468308][T14032] CPU: 1 UID: 0 PID: 14032 Comm: syz.3.2566 Not tainted syzkaller #0 PREEMPT(full) [ 378.468360][T14032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.468371][T14032] Call Trace: [ 378.468379][T14032] [ 378.468387][T14032] dump_stack_lvl+0x189/0x250 [ 378.468416][T14032] ? __pfx____ratelimit+0x10/0x10 [ 378.468436][T14032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.468459][T14032] ? __pfx__printk+0x10/0x10 [ 378.468491][T14032] ? __pfx___might_resched+0x10/0x10 [ 378.468524][T14032] ? fs_reclaim_acquire+0x7d/0x100 [ 378.468557][T14032] should_fail_ex+0x414/0x560 [ 378.468588][T14032] should_failslab+0xa8/0x100 [ 378.468617][T14032] __kmalloc_cache_noprof+0x70/0x3d0 [ 378.468641][T14032] ? nfnetlink_rcv+0xeff/0x2520 [ 378.468672][T14032] nfnetlink_rcv+0xeff/0x2520 [ 378.468736][T14032] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 378.468823][T14032] ? netlink_deliver_tap+0x2e/0x1b0 [ 378.468863][T14032] netlink_unicast+0x82c/0x9e0 [ 378.468899][T14032] ? __pfx_netlink_unicast+0x10/0x10 [ 378.468927][T14032] ? netlink_sendmsg+0x642/0xb30 [ 378.468943][T14032] ? skb_put+0x11b/0x210 [ 378.468967][T14032] netlink_sendmsg+0x805/0xb30 [ 378.468998][T14032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.469021][T14032] ? aa_sock_msg_perm+0xf1/0x1d0 [ 378.469040][T14032] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 378.469059][T14032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.469080][T14032] __sock_sendmsg+0x21c/0x270 [ 378.469109][T14032] ____sys_sendmsg+0x505/0x830 [ 378.469136][T14032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.469169][T14032] ? import_iovec+0x74/0xa0 [ 378.469195][T14032] ___sys_sendmsg+0x21f/0x2a0 [ 378.469220][T14032] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.469285][T14032] ? __fget_files+0x2a/0x420 [ 378.469303][T14032] ? __fget_files+0x3a0/0x420 [ 378.469333][T14032] __x64_sys_sendmsg+0x19b/0x260 [ 378.469358][T14032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 378.469389][T14032] ? __pfx_ksys_write+0x10/0x10 [ 378.469411][T14032] ? rcu_is_watching+0x15/0xb0 [ 378.469436][T14032] ? do_syscall_64+0xbe/0x3b0 [ 378.469461][T14032] do_syscall_64+0xfa/0x3b0 [ 378.469478][T14032] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.469505][T14032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.469523][T14032] ? clear_bhb_loop+0x60/0xb0 [ 378.469547][T14032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.469564][T14032] RIP: 0033:0x7f0172d8ebe9 [ 378.469582][T14032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.469599][T14032] RSP: 002b:00007f0173c51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.469620][T14032] RAX: ffffffffffffffda RBX: 00007f0172fc5fa0 RCX: 00007f0172d8ebe9 [ 378.469634][T14032] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 378.469645][T14032] RBP: 00007f0173c51090 R08: 0000000000000000 R09: 0000000000000000 [ 378.469657][T14032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.469668][T14032] R13: 00007f0172fc6038 R14: 00007f0172fc5fa0 R15: 00007ffe03dae038 [ 378.469702][T14032] [ 378.888097][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.977166][T14042] syzkaller1: entered promiscuous mode [ 378.994141][T14042] syzkaller1: entered allmulticast mode [ 379.020739][T14046] FAULT_INJECTION: forcing a failure. [ 379.020739][T14046] name failslab, interval 1, probability 0, space 0, times 0 [ 379.038565][T14046] CPU: 1 UID: 0 PID: 14046 Comm: syz.3.2572 Not tainted syzkaller #0 PREEMPT(full) [ 379.038595][T14046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.038607][T14046] Call Trace: [ 379.038616][T14046] [ 379.038624][T14046] dump_stack_lvl+0x189/0x250 [ 379.038654][T14046] ? __pfx____ratelimit+0x10/0x10 [ 379.038675][T14046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.038699][T14046] ? __pfx__printk+0x10/0x10 [ 379.038732][T14046] ? pfkey_xfrm_policy2msg_size+0x64f/0x890 [ 379.038760][T14046] should_fail_ex+0x414/0x560 [ 379.038792][T14046] should_failslab+0xa8/0x100 [ 379.038819][T14046] kmem_cache_alloc_noprof+0x73/0x3c0 [ 379.038842][T14046] ? skb_clone+0x212/0x3a0 [ 379.038869][T14046] skb_clone+0x212/0x3a0 [ 379.038889][T14046] ? pfkey_broadcast_one+0x7d/0x360 [ 379.038910][T14046] pfkey_broadcast_one+0x9b/0x360 [ 379.038926][T14046] ? pfkey_broadcast+0x39c/0x3e0 [ 379.038949][T14046] pfkey_broadcast+0x3a9/0x3e0 [ 379.038967][T14046] ? pfkey_broadcast+0x48/0x3e0 [ 379.038989][T14046] pfkey_do_dump+0x2c9/0x420 [ 379.039019][T14046] pfkey_sendmsg+0xbfe/0x1090 [ 379.039048][T14046] ? __lock_acquire+0xab9/0xd20 [ 379.039081][T14046] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 379.039132][T14046] ? aa_sock_msg_perm+0xf1/0x1d0 [ 379.039153][T14046] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 379.039173][T14046] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 379.039195][T14046] __sock_sendmsg+0x21c/0x270 [ 379.039226][T14046] ____sys_sendmsg+0x505/0x830 [ 379.039255][T14046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.039289][T14046] ? import_iovec+0x74/0xa0 [ 379.039317][T14046] ___sys_sendmsg+0x21f/0x2a0 [ 379.039342][T14046] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.039411][T14046] ? __fget_files+0x2a/0x420 [ 379.039427][T14046] ? __fget_files+0x3a0/0x420 [ 379.039457][T14046] __x64_sys_sendmsg+0x19b/0x260 [ 379.039483][T14046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.039518][T14046] ? __pfx_ksys_write+0x10/0x10 [ 379.039540][T14046] ? rcu_is_watching+0x15/0xb0 [ 379.039576][T14046] ? do_syscall_64+0xbe/0x3b0 [ 379.039601][T14046] do_syscall_64+0xfa/0x3b0 [ 379.039619][T14046] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.039638][T14046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.039657][T14046] ? clear_bhb_loop+0x60/0xb0 [ 379.039682][T14046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.039700][T14046] RIP: 0033:0x7f0172d8ebe9 [ 379.039717][T14046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.039733][T14046] RSP: 002b:00007f0173c51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.039755][T14046] RAX: ffffffffffffffda RBX: 00007f0172fc5fa0 RCX: 00007f0172d8ebe9 [ 379.039769][T14046] RDX: 0000000020000000 RSI: 0000200000000d40 RDI: 0000000000000007 [ 379.039781][T14046] RBP: 00007f0173c51090 R08: 0000000000000000 R09: 0000000000000000 [ 379.039792][T14046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.039803][T14046] R13: 00007f0172fc6038 R14: 00007f0172fc5fa0 R15: 00007ffe03dae038 [ 379.039836][T14046] [ 379.492458][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2574'. [ 379.597424][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2575'. [ 379.599351][T14050] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 379.618662][T14050] syzkaller1: linktype set to 6 [ 380.124062][T14075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.363340][T14089] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.371553][T14090] FAULT_INJECTION: forcing a failure. [ 380.371553][T14090] name failslab, interval 1, probability 0, space 0, times 0 [ 380.420478][T14090] CPU: 1 UID: 0 PID: 14090 Comm: syz.2.2588 Not tainted syzkaller #0 PREEMPT(full) [ 380.420509][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.420520][T14090] Call Trace: [ 380.420527][T14090] [ 380.420536][T14090] dump_stack_lvl+0x189/0x250 [ 380.420565][T14090] ? __pfx____ratelimit+0x10/0x10 [ 380.420585][T14090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.420608][T14090] ? __pfx__printk+0x10/0x10 [ 380.420642][T14090] ? __pfx___might_resched+0x10/0x10 [ 380.420660][T14090] ? fs_reclaim_acquire+0x7d/0x100 [ 380.420695][T14090] should_fail_ex+0x414/0x560 [ 380.420728][T14090] should_failslab+0xa8/0x100 [ 380.420758][T14090] __kmalloc_cache_noprof+0x70/0x3d0 [ 380.420791][T14090] ? nfnetlink_rcv+0xeff/0x2520 [ 380.420825][T14090] nfnetlink_rcv+0xeff/0x2520 [ 380.420891][T14090] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 380.420938][T14090] ? ref_tracker_free+0x63a/0x7d0 [ 380.421000][T14090] ? __netlink_deliver_tap+0x807/0x850 [ 380.421020][T14090] ? netlink_deliver_tap+0x2e/0x1b0 [ 380.421063][T14090] netlink_unicast+0x82c/0x9e0 [ 380.421099][T14090] ? __pfx_netlink_unicast+0x10/0x10 [ 380.421129][T14090] ? netlink_sendmsg+0x642/0xb30 [ 380.421145][T14090] ? skb_put+0x11b/0x210 [ 380.421170][T14090] netlink_sendmsg+0x805/0xb30 [ 380.421201][T14090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.421225][T14090] ? aa_sock_msg_perm+0xf1/0x1d0 [ 380.421245][T14090] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 380.421266][T14090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.421286][T14090] __sock_sendmsg+0x21c/0x270 [ 380.421315][T14090] ____sys_sendmsg+0x505/0x830 [ 380.421344][T14090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.421377][T14090] ? import_iovec+0x74/0xa0 [ 380.421403][T14090] ___sys_sendmsg+0x21f/0x2a0 [ 380.421427][T14090] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.421498][T14090] ? __fget_files+0x2a/0x420 [ 380.421514][T14090] ? __fget_files+0x3a0/0x420 [ 380.421542][T14090] __x64_sys_sendmsg+0x19b/0x260 [ 380.421567][T14090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.421601][T14090] ? rcu_is_watching+0x15/0xb0 [ 380.421627][T14090] ? do_syscall_64+0xbe/0x3b0 [ 380.421650][T14090] do_syscall_64+0xfa/0x3b0 [ 380.421668][T14090] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.421686][T14090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.421705][T14090] ? clear_bhb_loop+0x60/0xb0 [ 380.421727][T14090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.421746][T14090] RIP: 0033:0x7f20d4f8ebe9 [ 380.421832][T14090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.421847][T14090] RSP: 002b:00007f20d5da9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.421869][T14090] RAX: ffffffffffffffda RBX: 00007f20d51c5fa0 RCX: 00007f20d4f8ebe9 [ 380.421883][T14090] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 380.421896][T14090] RBP: 00007f20d5da9090 R08: 0000000000000000 R09: 0000000000000000 [ 380.421907][T14090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.421919][T14090] R13: 00007f20d51c6038 R14: 00007f20d51c5fa0 R15: 00007ffdf3ff4db8 [ 380.421954][T14090] [ 380.947903][T14103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2593'. [ 380.954773][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2595'. [ 380.991439][T14103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2593'. [ 381.694218][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2602'. [ 381.901268][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2607'. [ 381.920632][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2607'. [ 381.988232][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2607'. [ 382.024171][T14150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2607'. [ 382.346211][T14170] netlink: 'syz.3.2615': attribute type 13 has an invalid length. [ 382.368756][T14166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.393509][T14170] gretap0: refused to change device tx_queue_len [ 382.400187][T14170] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 382.632556][T14186] bond0: (slave ipvlan1): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 383.147696][T14200] vxcan1: entered allmulticast mode [ 383.468815][T14208] lo speed is unknown, defaulting to 1000 [ 383.509904][T14208] lo speed is unknown, defaulting to 1000 [ 384.503139][T14208] __nla_validate_parse: 8 callbacks suppressed [ 384.503162][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'. [ 384.580996][T14208] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2628'. [ 385.688742][T14275] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2650'. [ 385.709229][T14277] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 385.839526][T14282] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2650'. [ 386.603689][T14300] syzkaller0: entered promiscuous mode [ 386.609844][T14300] syzkaller0: entered allmulticast mode [ 387.018051][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2658'. [ 387.243328][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2661'. [ 387.588038][T14323] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2665'. [ 387.666155][T14326] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2665'. [ 387.971964][T14336] syzkaller0: entered promiscuous mode [ 388.000914][T14336] syzkaller0: entered allmulticast mode [ 388.120226][T14339] nr3: entered promiscuous mode [ 388.136082][T14315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.247413][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2673'. [ 388.258048][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2673'. [ 389.257090][T14376] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 389.798328][T14385] gre0: entered allmulticast mode [ 389.805781][T14384] gre0: left allmulticast mode [ 390.034190][T14389] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.049134][T14391] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 390.379485][T14397] bond0: (slave ipvlan1): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 390.574347][T14405] __nla_validate_parse: 4 callbacks suppressed [ 390.574368][T14405] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2695'. [ 390.679169][T14410] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2695'. [ 390.717082][T14412] FAULT_INJECTION: forcing a failure. [ 390.717082][T14412] name failslab, interval 1, probability 0, space 0, times 0 [ 390.786689][T14412] CPU: 0 UID: 0 PID: 14412 Comm: syz.3.2697 Not tainted syzkaller #0 PREEMPT(full) [ 390.786719][T14412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 390.786731][T14412] Call Trace: [ 390.786739][T14412] [ 390.786748][T14412] dump_stack_lvl+0x189/0x250 [ 390.786777][T14412] ? __pfx____ratelimit+0x10/0x10 [ 390.786798][T14412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.786821][T14412] ? __pfx__printk+0x10/0x10 [ 390.786851][T14412] ? __pfx___might_resched+0x10/0x10 [ 390.786867][T14412] ? fs_reclaim_acquire+0x7d/0x100 [ 390.786896][T14412] should_fail_ex+0x414/0x560 [ 390.786925][T14412] ? nf_hook_entries_grow+0x27c/0x710 [ 390.786943][T14412] should_failslab+0xa8/0x100 [ 390.786972][T14412] __kvmalloc_node_noprof+0x161/0x5f0 [ 390.786998][T14412] ? nf_hook_entries_grow+0x27c/0x710 [ 390.787015][T14412] ? rhltable_insert_key+0x1b6/0x1350 [ 390.787045][T14412] nf_hook_entries_grow+0x27c/0x710 [ 390.787079][T14412] __nf_register_net_hook+0x2c9/0x930 [ 390.787111][T14412] nf_register_net_hook+0xda/0x190 [ 390.787134][T14412] nf_tables_newchain+0x2469/0x2900 [ 390.787174][T14412] ? __pfx_nf_tables_newchain+0x10/0x10 [ 390.787239][T14412] ? nfnl_pernet+0x23/0x240 [ 390.787278][T14412] ? __nla_parse+0x40/0x60 [ 390.787311][T14412] nfnetlink_rcv+0x1132/0x2520 [ 390.787376][T14412] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 390.787476][T14412] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.787518][T14412] netlink_unicast+0x82c/0x9e0 [ 390.787557][T14412] ? __pfx_netlink_unicast+0x10/0x10 [ 390.787586][T14412] ? netlink_sendmsg+0x642/0xb30 [ 390.787603][T14412] ? skb_put+0x11b/0x210 [ 390.787628][T14412] netlink_sendmsg+0x805/0xb30 [ 390.787658][T14412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.787681][T14412] ? aa_sock_msg_perm+0xf1/0x1d0 [ 390.787703][T14412] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.787730][T14412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.787749][T14412] __sock_sendmsg+0x21c/0x270 [ 390.787779][T14412] ____sys_sendmsg+0x505/0x830 [ 390.787807][T14412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.787841][T14412] ? import_iovec+0x74/0xa0 [ 390.787867][T14412] ___sys_sendmsg+0x21f/0x2a0 [ 390.787892][T14412] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.787960][T14412] ? __fget_files+0x2a/0x420 [ 390.787976][T14412] ? __fget_files+0x3a0/0x420 [ 390.788004][T14412] __x64_sys_sendmsg+0x19b/0x260 [ 390.788028][T14412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.788062][T14412] ? __pfx_ksys_write+0x10/0x10 [ 390.788083][T14412] ? rcu_is_watching+0x15/0xb0 [ 390.788107][T14412] ? do_syscall_64+0xbe/0x3b0 [ 390.788131][T14412] do_syscall_64+0xfa/0x3b0 [ 390.788148][T14412] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.788164][T14412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.788180][T14412] ? clear_bhb_loop+0x60/0xb0 [ 390.788225][T14412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.788241][T14412] RIP: 0033:0x7f0172d8ebe9 [ 390.788260][T14412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.788274][T14412] RSP: 002b:00007f0173c51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.788295][T14412] RAX: ffffffffffffffda RBX: 00007f0172fc5fa0 RCX: 00007f0172d8ebe9 [ 390.788309][T14412] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 390.788321][T14412] RBP: 00007f0173c51090 R08: 0000000000000000 R09: 0000000000000000 [ 390.788333][T14412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.788344][T14412] R13: 00007f0172fc6038 R14: 00007f0172fc5fa0 R15: 00007ffe03dae038 [ 390.788377][T14412] [ 391.393653][T14425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2702'. [ 391.468811][T14425] sit0: entered promiscuous mode [ 391.495829][T14425] sit0: entered allmulticast mode [ 391.656835][T14430] bond0: (slave ipvlan1): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 391.947608][T14432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2705'. [ 392.213360][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2712'. [ 392.224833][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2710'. [ 392.242706][T14449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2712'. [ 392.283027][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2712'. [ 392.323528][T14449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2712'. [ 392.408657][T14454] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2713'. [ 392.492956][T14460] FAULT_INJECTION: forcing a failure. [ 392.492956][T14460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.518028][T14456] lo speed is unknown, defaulting to 1000 [ 392.553675][T14456] lo speed is unknown, defaulting to 1000 [ 392.572470][T14460] CPU: 0 UID: 0 PID: 14460 Comm: syz.1.2715 Not tainted syzkaller #0 PREEMPT(full) [ 392.572500][T14460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.572511][T14460] Call Trace: [ 392.572519][T14460] [ 392.572527][T14460] dump_stack_lvl+0x189/0x250 [ 392.572556][T14460] ? __pfx____ratelimit+0x10/0x10 [ 392.572575][T14460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.572606][T14460] ? __pfx__printk+0x10/0x10 [ 392.572633][T14460] ? __might_fault+0xb0/0x130 [ 392.572673][T14460] should_fail_ex+0x414/0x560 [ 392.572704][T14460] _copy_from_user+0x2d/0xb0 [ 392.572728][T14460] ___sys_sendmsg+0x158/0x2a0 [ 392.572754][T14460] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.572815][T14460] ? __fget_files+0x2a/0x420 [ 392.572831][T14460] ? __fget_files+0x3a0/0x420 [ 392.572860][T14460] __x64_sys_sendmsg+0x19b/0x260 [ 392.572885][T14460] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 392.572917][T14460] ? __pfx_ksys_write+0x10/0x10 [ 392.572939][T14460] ? rcu_is_watching+0x15/0xb0 [ 392.572963][T14460] ? do_syscall_64+0xbe/0x3b0 [ 392.572988][T14460] do_syscall_64+0xfa/0x3b0 [ 392.573006][T14460] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.573025][T14460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.573044][T14460] ? clear_bhb_loop+0x60/0xb0 [ 392.573068][T14460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.573086][T14460] RIP: 0033:0x7fac6bd8ebe9 [ 392.573103][T14460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.573119][T14460] RSP: 002b:00007fac6cc41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.573141][T14460] RAX: ffffffffffffffda RBX: 00007fac6bfc5fa0 RCX: 00007fac6bd8ebe9 [ 392.573156][T14460] RDX: 0000000020040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 392.573168][T14460] RBP: 00007fac6cc41090 R08: 0000000000000000 R09: 0000000000000000 [ 392.573180][T14460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.573192][T14460] R13: 00007fac6bfc6038 R14: 00007fac6bfc5fa0 R15: 00007ffd0f15c018 [ 392.573225][T14460] [ 394.253753][T14486] FAULT_INJECTION: forcing a failure. [ 394.253753][T14486] name failslab, interval 1, probability 0, space 0, times 0 [ 394.291644][T14486] CPU: 1 UID: 0 PID: 14486 Comm: syz.3.2722 Not tainted syzkaller #0 PREEMPT(full) [ 394.291675][T14486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.291687][T14486] Call Trace: [ 394.291695][T14486] [ 394.291704][T14486] dump_stack_lvl+0x189/0x250 [ 394.291734][T14486] ? __pfx____ratelimit+0x10/0x10 [ 394.291755][T14486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.291778][T14486] ? __pfx__printk+0x10/0x10 [ 394.291812][T14486] ? __pfx___might_resched+0x10/0x10 [ 394.291829][T14486] ? fs_reclaim_acquire+0x7d/0x100 [ 394.291864][T14486] should_fail_ex+0x414/0x560 [ 394.291896][T14486] ? nf_hook_entries_grow+0x27c/0x710 [ 394.291914][T14486] should_failslab+0xa8/0x100 [ 394.291943][T14486] __kvmalloc_node_noprof+0x161/0x5f0 [ 394.291971][T14486] ? nf_hook_entries_grow+0x27c/0x710 [ 394.291997][T14486] nf_hook_entries_grow+0x27c/0x710 [ 394.292035][T14486] __nf_register_net_hook+0x2c9/0x930 [ 394.292069][T14486] nf_register_net_hook+0xf9/0x190 [ 394.292092][T14486] nf_tables_newchain+0x2469/0x2900 [ 394.292136][T14486] ? __pfx_nf_tables_newchain+0x10/0x10 [ 394.292201][T14486] ? nfnl_pernet+0x23/0x240 [ 394.292240][T14486] ? __nla_parse+0x40/0x60 [ 394.292275][T14486] nfnetlink_rcv+0x1132/0x2520 [ 394.292349][T14486] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 394.292435][T14486] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.292475][T14486] netlink_unicast+0x82c/0x9e0 [ 394.292513][T14486] ? __pfx_netlink_unicast+0x10/0x10 [ 394.292543][T14486] ? netlink_sendmsg+0x642/0xb30 [ 394.292559][T14486] ? skb_put+0x11b/0x210 [ 394.292584][T14486] netlink_sendmsg+0x805/0xb30 [ 394.292614][T14486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.292637][T14486] ? aa_sock_msg_perm+0xf1/0x1d0 [ 394.292659][T14486] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.292679][T14486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.292699][T14486] __sock_sendmsg+0x21c/0x270 [ 394.292732][T14486] ____sys_sendmsg+0x505/0x830 [ 394.292762][T14486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.292795][T14486] ? import_iovec+0x74/0xa0 [ 394.292824][T14486] ___sys_sendmsg+0x21f/0x2a0 [ 394.292849][T14486] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.292917][T14486] ? __fget_files+0x2a/0x420 [ 394.292933][T14486] ? __fget_files+0x3a0/0x420 [ 394.292964][T14486] __x64_sys_sendmsg+0x19b/0x260 [ 394.292988][T14486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.293022][T14486] ? __pfx_ksys_write+0x10/0x10 [ 394.293045][T14486] ? rcu_is_watching+0x15/0xb0 [ 394.293071][T14486] ? do_syscall_64+0xbe/0x3b0 [ 394.293095][T14486] do_syscall_64+0xfa/0x3b0 [ 394.293112][T14486] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.293130][T14486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.293149][T14486] ? clear_bhb_loop+0x60/0xb0 [ 394.293173][T14486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.293191][T14486] RIP: 0033:0x7f0172d8ebe9 [ 394.293209][T14486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.293226][T14486] RSP: 002b:00007f0173c51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.293249][T14486] RAX: ffffffffffffffda RBX: 00007f0172fc5fa0 RCX: 00007f0172d8ebe9 [ 394.293263][T14486] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 394.293275][T14486] RBP: 00007f0173c51090 R08: 0000000000000000 R09: 0000000000000000 [ 394.293286][T14486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 394.293297][T14486] R13: 00007f0172fc6038 R14: 00007f0172fc5fa0 R15: 00007ffe03dae038 [ 394.293332][T14486] [ 395.669912][T14510] __nla_validate_parse: 4 callbacks suppressed [ 395.669933][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2730'. [ 395.860812][T14517] netlink: 'syz.3.2733': attribute type 3 has an invalid length. [ 396.250395][T14534] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2741'. [ 396.325230][T14541] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2741'. [ 396.343353][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 396.916351][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2753'. [ 396.931685][T14575] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2758'. [ 396.973700][T14573] tipc: Enabled bearer , priority 0 [ 396.990738][T14573] syzkaller0: entered promiscuous mode [ 397.008761][T14573] syzkaller0: entered allmulticast mode [ 397.024052][T14580] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2758'. [ 397.102083][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2760'. [ 397.145707][T14573] tipc: Resetting bearer [ 397.173160][T14585] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.235971][T14572] tipc: Resetting bearer [ 397.382109][T14572] tipc: Disabling bearer [ 397.466888][T14590] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.026665][T14619] netlink: 'syz.2.2770': attribute type 1 has an invalid length. [ 398.104627][T14619] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 398.141522][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2771'. [ 398.247700][T14633] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2774'. [ 399.189680][T14678] nbd: must specify at least one socket [ 399.375703][T14691] FAULT_INJECTION: forcing a failure. [ 399.375703][T14691] name failslab, interval 1, probability 0, space 0, times 0 [ 399.385353][T14687] tipc: Enabled bearer , priority 0 [ 399.389370][T14691] CPU: 1 UID: 0 PID: 14691 Comm: syz.3.2791 Not tainted syzkaller #0 PREEMPT(full) [ 399.389396][T14691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 399.389407][T14691] Call Trace: [ 399.389418][T14691] [ 399.389427][T14691] dump_stack_lvl+0x189/0x250 [ 399.389453][T14691] ? __pfx____ratelimit+0x10/0x10 [ 399.389471][T14691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.389491][T14691] ? __pfx__printk+0x10/0x10 [ 399.389520][T14691] ? __pfx___might_resched+0x10/0x10 [ 399.389535][T14691] ? fs_reclaim_acquire+0x7d/0x100 [ 399.389606][T14691] should_fail_ex+0x414/0x560 [ 399.389634][T14691] should_failslab+0xa8/0x100 [ 399.389660][T14691] __kmalloc_noprof+0xcb/0x4f0 [ 399.389681][T14691] ? nf_tables_newrule+0x1506/0x2890 [ 399.389707][T14691] nf_tables_newrule+0x1506/0x2890 [ 399.389745][T14691] ? __pfx_nf_tables_newrule+0x10/0x10 [ 399.389767][T14691] ? nfnl_pernet+0x23/0x240 [ 399.389800][T14691] ? __nla_parse+0x40/0x60 [ 399.389830][T14691] nfnetlink_rcv+0x1132/0x2520 [ 399.389896][T14691] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 399.390004][T14691] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.390042][T14691] netlink_unicast+0x82c/0x9e0 [ 399.390076][T14691] ? __pfx_netlink_unicast+0x10/0x10 [ 399.390102][T14691] ? netlink_sendmsg+0x642/0xb30 [ 399.390116][T14691] ? skb_put+0x11b/0x210 [ 399.390139][T14691] netlink_sendmsg+0x805/0xb30 [ 399.390166][T14691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.390187][T14691] ? aa_sock_msg_perm+0xf1/0x1d0 [ 399.390207][T14691] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 399.390225][T14691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.390242][T14691] __sock_sendmsg+0x21c/0x270 [ 399.390277][T14691] ____sys_sendmsg+0x505/0x830 [ 399.390303][T14691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.390333][T14691] ? import_iovec+0x74/0xa0 [ 399.390356][T14691] ___sys_sendmsg+0x21f/0x2a0 [ 399.390378][T14691] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.390439][T14691] ? __fget_files+0x2a/0x420 [ 399.390454][T14691] ? __fget_files+0x3a0/0x420 [ 399.390481][T14691] __x64_sys_sendmsg+0x19b/0x260 [ 399.390503][T14691] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.390533][T14691] ? __pfx_ksys_write+0x10/0x10 [ 399.390563][T14691] ? rcu_is_watching+0x15/0xb0 [ 399.390585][T14691] ? do_syscall_64+0xbe/0x3b0 [ 399.390608][T14691] do_syscall_64+0xfa/0x3b0 [ 399.390624][T14691] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.390640][T14691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.390656][T14691] ? clear_bhb_loop+0x60/0xb0 [ 399.390677][T14691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.390694][T14691] RIP: 0033:0x7f0172d8ebe9 [ 399.390711][T14691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.390725][T14691] RSP: 002b:00007f0173c51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.390745][T14691] RAX: ffffffffffffffda RBX: 00007f0172fc5fa0 RCX: 00007f0172d8ebe9 [ 399.390757][T14691] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 399.390769][T14691] RBP: 00007f0173c51090 R08: 0000000000000000 R09: 0000000000000000 [ 399.390779][T14691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.390789][T14691] R13: 00007f0172fc6038 R14: 00007f0172fc5fa0 R15: 00007ffe03dae038 [ 399.390819][T14691] [ 399.564226][T14694] raw_sendmsg: syz.2.2790 forgot to set AF_INET. Fix it! [ 399.570708][T14692] syzkaller0: entered promiscuous mode [ 399.755183][T14692] syzkaller0: entered allmulticast mode [ 399.814291][T14700] tipc: Resetting bearer [ 399.874605][T14686] tipc: Resetting bearer [ 399.978631][T14686] tipc: Disabling bearer [ 400.067695][T14714] lo speed is unknown, defaulting to 1000 [ 400.115380][T14714] lo speed is unknown, defaulting to 1000 [ 400.162631][ T5183] Bluetooth: hci4: link tx timeout [ 400.168370][ T5183] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 400.207482][ T5875] Bluetooth: hci4: link tx timeout [ 400.216205][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 400.235202][ T5875] Bluetooth: hci4: link tx timeout [ 400.240376][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 400.248734][ T5875] Bluetooth: hci4: link tx timeout [ 400.254086][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 400.262259][ T5875] Bluetooth: hci4: link tx timeout [ 400.267516][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 400.279300][ T5875] Bluetooth: hci4: link tx timeout [ 400.284832][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 400.697432][T14732] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.827720][ T30] audit: type=1804 audit(1756820002.471:7): pid=14738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2805" name="/newroot/565/cgroup.controllers" dev="tmpfs" ino=2920 res=1 errno=0 [ 400.838356][T14736] __nla_validate_parse: 15 callbacks suppressed [ 400.838377][T14736] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2804'. [ 400.882884][ T30] audit: type=1800 audit(1756820002.501:8): pid=14738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2805" name="cgroup.controllers" dev="tmpfs" ino=2920 res=0 errno=0 [ 400.919708][ T30] audit: type=1800 audit(1756820002.561:9): pid=14740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2805" name="cgroup.controllers" dev="tmpfs" ino=2920 res=0 errno=0 [ 401.012108][T14743] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2806'. [ 401.012751][T14736] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2804'. [ 401.066840][T14744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2806'. [ 401.307542][T14760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2809'. [ 401.325799][T14759] bond0: (slave ipvlan1): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 401.415037][T14765] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 401.648725][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2812'. [ 401.705687][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2813'. [ 401.846997][T14780] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2817'. [ 401.960318][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2818'. [ 401.987759][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2818'. [ 402.243782][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 403.198414][T14822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.383423][T14839] bond0: (slave ipvlan1): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 404.290718][T14883] FAULT_INJECTION: forcing a failure. [ 404.290718][T14883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.305416][T14883] CPU: 0 UID: 0 PID: 14883 Comm: syz.4.2847 Not tainted syzkaller #0 PREEMPT(full) [ 404.305446][T14883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 404.305466][T14883] Call Trace: [ 404.305474][T14883] [ 404.305482][T14883] dump_stack_lvl+0x189/0x250 [ 404.305511][T14883] ? __pfx____ratelimit+0x10/0x10 [ 404.305531][T14883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.305554][T14883] ? __pfx__printk+0x10/0x10 [ 404.305580][T14883] ? __might_fault+0xb0/0x130 [ 404.305621][T14883] should_fail_ex+0x414/0x560 [ 404.305652][T14883] _copy_from_user+0x2d/0xb0 [ 404.305675][T14883] do_sock_getsockopt+0x17d/0x450 [ 404.305702][T14883] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 404.305723][T14883] ? write_ibpb+0x30/0x40 [ 404.305745][T14883] ? ksys_write+0x1e1/0x250 [ 404.305777][T14883] __x64_sys_getsockopt+0x1a5/0x250 [ 404.305797][T14883] ? write_ibpb+0x30/0x40 [ 404.305818][T14883] ? write_ibpb+0x30/0x40 [ 404.305842][T14883] do_syscall_64+0xfa/0x3b0 [ 404.305860][T14883] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.305877][T14883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.305896][T14883] ? clear_bhb_loop+0x60/0xb0 [ 404.305919][T14883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.305937][T14883] RIP: 0033:0x7f305438ebe9 [ 404.305955][T14883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.305972][T14883] RSP: 002b:00007f30552f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 404.305993][T14883] RAX: ffffffffffffffda RBX: 00007f30545c5fa0 RCX: 00007f305438ebe9 [ 404.306007][T14883] RDX: 0000000000000009 RSI: 000000000000010e RDI: 0000000000000003 [ 404.306018][T14883] RBP: 00007f30552f4090 R08: 0000000000000000 R09: 0000000000000000 [ 404.306030][T14883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.306041][T14883] R13: 00007f30545c6038 R14: 00007f30545c5fa0 R15: 00007ffe4e293238 [ 404.306073][T14883] [ 404.610031][T14885] lo speed is unknown, defaulting to 1000 [ 404.618247][T14885] lo speed is unknown, defaulting to 1000 [ 404.771139][T14895] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.119512][T14914] FAULT_INJECTION: forcing a failure. [ 405.119512][T14914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.160529][T14911] vlan4: entered promiscuous mode [ 405.191279][T14914] CPU: 1 UID: 0 PID: 14914 Comm: syz.0.2857 Not tainted syzkaller #0 PREEMPT(full) [ 405.191310][T14914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 405.191322][T14914] Call Trace: [ 405.191329][T14914] [ 405.191337][T14914] dump_stack_lvl+0x189/0x250 [ 405.191366][T14914] ? __pfx____ratelimit+0x10/0x10 [ 405.191386][T14914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.191407][T14914] ? __pfx__printk+0x10/0x10 [ 405.191427][T14914] ? __might_fault+0xb0/0x130 [ 405.191465][T14914] should_fail_ex+0x414/0x560 [ 405.191490][T14914] _copy_from_user+0x2d/0xb0 [ 405.191509][T14914] ___sys_sendmsg+0x158/0x2a0 [ 405.191529][T14914] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.191579][T14914] ? __fget_files+0x2a/0x420 [ 405.191591][T14914] ? __fget_files+0x3a0/0x420 [ 405.191614][T14914] __x64_sys_sendmsg+0x19b/0x260 [ 405.191633][T14914] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.191659][T14914] ? __pfx_ksys_write+0x10/0x10 [ 405.191675][T14914] ? rcu_is_watching+0x15/0xb0 [ 405.191695][T14914] ? do_syscall_64+0xbe/0x3b0 [ 405.191714][T14914] do_syscall_64+0xfa/0x3b0 [ 405.191728][T14914] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.191742][T14914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.191756][T14914] ? clear_bhb_loop+0x60/0xb0 [ 405.191774][T14914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.191788][T14914] RIP: 0033:0x7fe32158ebe9 [ 405.191802][T14914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.191814][T14914] RSP: 002b:00007fe32246e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.191832][T14914] RAX: ffffffffffffffda RBX: 00007fe3217c5fa0 RCX: 00007fe32158ebe9 [ 405.191842][T14914] RDX: 00000000000009fc RSI: 0000200000001180 RDI: 0000000000000003 [ 405.191852][T14914] RBP: 00007fe32246e090 R08: 0000000000000000 R09: 0000000000000000 [ 405.191861][T14914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.191869][T14914] R13: 00007fe3217c6038 R14: 00007fe3217c5fa0 R15: 00007ffdff21eb78 [ 405.191894][T14914] [ 405.192115][T14911] gretap0: entered promiscuous mode [ 405.978087][T14943] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.136151][T14949] bond0: (slave ipvlan1): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 406.419594][T14963] __nla_validate_parse: 14 callbacks suppressed [ 406.419618][T14963] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2872'. [ 406.546076][T14966] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2872'. [ 406.909392][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2877'. [ 407.066684][T14995] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.635650][T15015] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2888'. [ 407.932081][T15014] bond0: (slave ipvlan1): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 407.971365][T15026] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2890'. [ 408.038185][T15020] lo speed is unknown, defaulting to 1000 [ 408.084825][T15029] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2890'. [ 408.180781][T15020] lo speed is unknown, defaulting to 1000 [ 408.554616][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2895'. [ 408.580350][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2895'. [ 408.633978][T15049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2893'. [ 409.030495][T15061] syz.4.2900 (15061) used obsolete PPPIOCDETACH ioctl [ 409.502188][T15081] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2906'. [ 411.136681][T15145] bond0: (slave ipvlan1): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 411.397525][T15163] vlan4: entered allmulticast mode [ 411.410437][T15163] bridge0: entered allmulticast mode [ 411.515035][T15167] batadv_slave_1: entered promiscuous mode [ 411.530604][T15162] lo speed is unknown, defaulting to 1000 [ 411.598582][T15159] batadv_slave_1: left promiscuous mode [ 411.609189][T15176] __nla_validate_parse: 12 callbacks suppressed [ 411.609212][T15176] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2940'. [ 411.638213][T15162] lo speed is unknown, defaulting to 1000 [ 411.696127][T15174] lo speed is unknown, defaulting to 1000 [ 411.706645][T15179] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2940'. [ 411.767893][T15174] lo speed is unknown, defaulting to 1000 [ 412.132365][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2943'. [ 412.971643][T15209] lo speed is unknown, defaulting to 1000 [ 413.021857][T15209] lo speed is unknown, defaulting to 1000 [ 413.133084][ T5875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 413.147860][ T5875] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 413.158844][ T5875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 413.168355][ T5875] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 413.177579][ T5875] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 413.254265][T15220] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2952'. [ 413.365003][T15223] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2952'. [ 413.675927][T15217] lo speed is unknown, defaulting to 1000 [ 413.753902][T15232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2954'. [ 413.800102][T15226] lo speed is unknown, defaulting to 1000 [ 413.808906][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2954'. [ 413.825559][T15217] lo speed is unknown, defaulting to 1000 [ 413.928829][T15226] lo speed is unknown, defaulting to 1000 [ 413.936128][T15227] lo speed is unknown, defaulting to 1000 [ 413.967021][T15227] lo speed is unknown, defaulting to 1000 [ 414.235611][T15241] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2955'. [ 414.830240][T15252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2959'. [ 415.164111][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2960'. [ 415.202464][ T5875] Bluetooth: hci5: command tx timeout [ 415.972700][ T8587] bond0 (unregistering): Released all slaves [ 416.110177][ T8587] bond1 (unregistering): Released all slaves [ 416.126504][ T8587] bond2 (unregistering): Released all slaves [ 416.141600][ T8587] bond3 (unregistering): Released all slaves [ 416.364116][T15217] chnl_net:caif_netlink_parms(): no params data found [ 416.386962][ T8587] tipc: Left network mode [ 416.525976][T15280] lo speed is unknown, defaulting to 1000 [ 416.637107][T15280] lo speed is unknown, defaulting to 1000 [ 417.143008][T15289] lo speed is unknown, defaulting to 1000 [ 417.271406][T15217] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.281477][ T5875] Bluetooth: hci5: command tx timeout [ 417.301346][T15217] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.309152][T15217] bridge_slave_0: entered allmulticast mode [ 417.360517][T15217] bridge_slave_0: entered promiscuous mode [ 417.388311][T15289] lo speed is unknown, defaulting to 1000 [ 417.389116][T15217] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.421244][T15217] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.429142][T15217] bridge_slave_1: entered allmulticast mode [ 417.443386][T15217] bridge_slave_1: entered promiscuous mode [ 417.495246][T15297] smc: net device bond0 applied user defined pnetid SYZ2 [ 417.840320][T15217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.893817][T15217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.948600][T15310] __nla_validate_parse: 7 callbacks suppressed [ 417.948623][T15310] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2974'. [ 418.061796][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2975'. [ 418.131380][T15319] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2974'. [ 418.385542][T15217] team0: Port device team_slave_0 added [ 418.433611][ T8587] hsr_slave_0: left promiscuous mode [ 418.454941][ T8587] hsr_slave_1: left promiscuous mode [ 418.516221][T15327] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2977'. [ 418.561648][T15328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2976'. [ 418.571708][T15329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2977'. [ 419.371961][ T5875] Bluetooth: hci5: command tx timeout [ 419.658784][T15217] team0: Port device team_slave_1 added [ 419.740705][T15332] FAULT_INJECTION: forcing a failure. [ 419.740705][T15332] name failslab, interval 1, probability 0, space 0, times 0 [ 419.765773][T15332] CPU: 0 UID: 0 PID: 15332 Comm: syz.0.2978 Not tainted syzkaller #0 PREEMPT(full) [ 419.765802][T15332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.765815][T15332] Call Trace: [ 419.765823][T15332] [ 419.765831][T15332] dump_stack_lvl+0x189/0x250 [ 419.765860][T15332] ? __pfx____ratelimit+0x10/0x10 [ 419.765880][T15332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.765903][T15332] ? __pfx__printk+0x10/0x10 [ 419.765935][T15332] ? __pfx___might_resched+0x10/0x10 [ 419.765959][T15332] should_fail_ex+0x414/0x560 [ 419.765991][T15332] should_failslab+0xa8/0x100 [ 419.766020][T15332] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 419.766044][T15332] ? __alloc_skb+0x112/0x2d0 [ 419.766068][T15332] __alloc_skb+0x112/0x2d0 [ 419.766093][T15332] netlink_sendmsg+0x5c6/0xb30 [ 419.766123][T15332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.766147][T15332] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.766167][T15332] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.766188][T15332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.766208][T15332] __sock_sendmsg+0x21c/0x270 [ 419.766239][T15332] ____sys_sendmsg+0x505/0x830 [ 419.766268][T15332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.766309][T15332] ? import_iovec+0x74/0xa0 [ 419.766336][T15332] ___sys_sendmsg+0x21f/0x2a0 [ 419.766361][T15332] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.766425][T15332] ? __fget_files+0x2a/0x420 [ 419.766442][T15332] ? __fget_files+0x3a0/0x420 [ 419.766472][T15332] __x64_sys_sendmsg+0x19b/0x260 [ 419.766497][T15332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.766530][T15332] ? __pfx_ksys_write+0x10/0x10 [ 419.766552][T15332] ? rcu_is_watching+0x15/0xb0 [ 419.766583][T15332] ? do_syscall_64+0xbe/0x3b0 [ 419.766606][T15332] do_syscall_64+0xfa/0x3b0 [ 419.766624][T15332] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.766642][T15332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.766661][T15332] ? clear_bhb_loop+0x60/0xb0 [ 419.766684][T15332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.766702][T15332] RIP: 0033:0x7fe32158ebe9 [ 419.766720][T15332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.766736][T15332] RSP: 002b:00007fe32246e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.766757][T15332] RAX: ffffffffffffffda RBX: 00007fe3217c5fa0 RCX: 00007fe32158ebe9 [ 419.766771][T15332] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 419.766783][T15332] RBP: 00007fe32246e090 R08: 0000000000000000 R09: 0000000000000000 [ 419.766795][T15332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.766806][T15332] R13: 00007fe3217c6038 R14: 00007fe3217c5fa0 R15: 00007ffdff21eb78 [ 419.766838][T15332] [ 420.139259][T15217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.146775][T15217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.177192][T15217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.196633][T15217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.205212][T15217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.235836][T15217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.399891][T15339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2979'. [ 420.423403][T15217] hsr_slave_0: entered promiscuous mode [ 420.430577][T15217] hsr_slave_1: entered promiscuous mode [ 420.437389][T15217] debugfs: 'hsr0' already exists in 'hsr' [ 420.443878][T15217] Cannot create hsr debugfs directory [ 420.465892][T15338] lo speed is unknown, defaulting to 1000 [ 420.628882][ T8587] IPVS: stop unused estimator thread 0... [ 421.131482][T15362] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2984'. [ 421.142879][T15346] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.357099][T15368] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2985'. [ 421.442255][ T5875] Bluetooth: hci5: command tx timeout [ 421.476606][T15370] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2985'. [ 422.337754][T15217] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 422.373704][T15217] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 422.408731][T15217] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 422.494816][T15217] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 422.944003][T15217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.024621][T15217] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.090659][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.098489][ T8593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.137631][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.145082][ T8593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.199903][T15456] __nla_validate_parse: 9 callbacks suppressed [ 423.199924][T15456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3011'. [ 423.257503][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3011'. [ 423.334898][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3010'. [ 423.355972][T15461] sctp: [Deprecated]: syz.2.3012 (pid 15461) Use of int in maxseg socket option. [ 423.355972][T15461] Use struct sctp_assoc_value instead [ 423.653925][T15471] vxlan0: entered promiscuous mode [ 423.659927][T15471] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 423.688375][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.702632][T15476] netlink: 'syz.2.3015': attribute type 48 has an invalid length. [ 423.760528][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.810573][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.832700][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.895947][T15483] bond0: (slave veth0_to_hsr): Device is not bonding slave [ 423.934473][T15483] bond0: option active_slave: invalid value (veth0_to_hsr) [ 424.083890][T15217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.122356][T15494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3021'. [ 424.188356][T15217] veth0_vlan: entered promiscuous mode [ 424.219201][T15217] veth1_vlan: entered promiscuous mode [ 424.318225][T15217] veth0_macvtap: entered promiscuous mode [ 424.346912][T15217] veth1_macvtap: entered promiscuous mode [ 424.407223][T15217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.457256][T15217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.487036][ T8587] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.500852][ T8587] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.513143][ T8587] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.548118][ T8587] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.635580][T15501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3023'. [ 424.665393][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3023'. [ 424.677392][ T8593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.693577][ T8593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.737728][ T8589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.773085][ T8589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.903720][T15511] netlink: 'syz.4.3024': attribute type 1 has an invalid length. [ 424.912887][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 425.003185][T15519] FAULT_INJECTION: forcing a failure. [ 425.003185][T15519] name failslab, interval 1, probability 0, space 0, times 0 [ 425.016509][T15519] CPU: 1 UID: 0 PID: 15519 Comm: syz.3.2944 Not tainted syzkaller #0 PREEMPT(full) [ 425.016535][T15519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.016547][T15519] Call Trace: [ 425.016554][T15519] [ 425.016562][T15519] dump_stack_lvl+0x189/0x250 [ 425.016592][T15519] ? __pfx____ratelimit+0x10/0x10 [ 425.016613][T15519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.016636][T15519] ? __pfx__printk+0x10/0x10 [ 425.016671][T15519] ? __pfx___might_resched+0x10/0x10 [ 425.016688][T15519] ? fs_reclaim_acquire+0x7d/0x100 [ 425.016724][T15519] should_fail_ex+0x414/0x560 [ 425.016756][T15519] ? nf_hook_entries_grow+0x27c/0x710 [ 425.016772][T15519] should_failslab+0xa8/0x100 [ 425.016800][T15519] __kvmalloc_node_noprof+0x161/0x5f0 [ 425.016827][T15519] ? nf_hook_entries_grow+0x27c/0x710 [ 425.016844][T15519] ? rhltable_insert_key+0x1b6/0x1350 [ 425.016875][T15519] nf_hook_entries_grow+0x27c/0x710 [ 425.016912][T15519] __nf_register_net_hook+0x2c9/0x930 [ 425.016946][T15519] nf_register_net_hook+0xda/0x190 [ 425.016970][T15519] nf_tables_newchain+0x2469/0x2900 [ 425.017013][T15519] ? __pfx_nf_tables_newchain+0x10/0x10 [ 425.017081][T15519] ? nfnl_pernet+0x23/0x240 [ 425.017120][T15519] ? __nla_parse+0x40/0x60 [ 425.017155][T15519] nfnetlink_rcv+0x1132/0x2520 [ 425.017224][T15519] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 425.017282][T15519] ? ref_tracker_free+0x63a/0x7d0 [ 425.017347][T15519] ? __netlink_deliver_tap+0x807/0x850 [ 425.017366][T15519] ? netlink_deliver_tap+0x2e/0x1b0 [ 425.017409][T15519] netlink_unicast+0x82c/0x9e0 [ 425.017449][T15519] ? __pfx_netlink_unicast+0x10/0x10 [ 425.017479][T15519] ? netlink_sendmsg+0x642/0xb30 [ 425.017496][T15519] ? skb_put+0x11b/0x210 [ 425.017522][T15519] netlink_sendmsg+0x805/0xb30 [ 425.017554][T15519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.017579][T15519] ? aa_sock_msg_perm+0xf1/0x1d0 [ 425.017600][T15519] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.017621][T15519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.017642][T15519] __sock_sendmsg+0x21c/0x270 [ 425.017674][T15519] ____sys_sendmsg+0x505/0x830 [ 425.017704][T15519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.017739][T15519] ? import_iovec+0x74/0xa0 [ 425.017767][T15519] ___sys_sendmsg+0x21f/0x2a0 [ 425.017792][T15519] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.017863][T15519] ? __fget_files+0x2a/0x420 [ 425.017879][T15519] ? __fget_files+0x3a0/0x420 [ 425.017911][T15519] __x64_sys_sendmsg+0x19b/0x260 [ 425.017937][T15519] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.017980][T15519] ? __pfx_ksys_write+0x10/0x10 [ 425.018002][T15519] ? rcu_is_watching+0x15/0xb0 [ 425.018028][T15519] ? do_syscall_64+0xbe/0x3b0 [ 425.018055][T15519] do_syscall_64+0xfa/0x3b0 [ 425.018073][T15519] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.018092][T15519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.018111][T15519] ? clear_bhb_loop+0x60/0xb0 [ 425.018135][T15519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.018154][T15519] RIP: 0033:0x7f3d1378ebe9 [ 425.018173][T15519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.018189][T15519] RSP: 002b:00007f3d1464d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.018211][T15519] RAX: ffffffffffffffda RBX: 00007f3d139c5fa0 RCX: 00007f3d1378ebe9 [ 425.018224][T15519] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 425.018244][T15519] RBP: 00007f3d1464d090 R08: 0000000000000000 R09: 0000000000000000 [ 425.018256][T15519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 425.018267][T15519] R13: 00007f3d139c6038 R14: 00007f3d139c5fa0 R15: 00007fff14aa9a48 [ 425.018303][T15519] [ 425.401765][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3027'. [ 425.438881][T15511] bond4: entered promiscuous mode [ 425.445145][T15511] 8021q: adding VLAN 0 to HW filter on device bond4 [ 425.535513][T15524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3029'. [ 425.548252][T15524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3029'. [ 425.716332][T15503] 8021q: adding VLAN 0 to HW filter on device bond4 [ 425.756454][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 425.784433][ T5183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 425.793741][T15503] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 425.794750][ T5183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 425.813648][ T5183] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 425.816226][T15503] bond4: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 425.823569][ T5183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 425.841547][T15531] FAULT_INJECTION: forcing a failure. [ 425.841547][T15531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.843579][ T5183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 425.907578][T15503] bond4: (slave vxcan5): making interface the new active one [ 425.915644][T15503] vxcan5: entered promiscuous mode [ 425.923695][T15531] CPU: 1 UID: 0 PID: 15531 Comm: syz.1.3031 Not tainted syzkaller #0 PREEMPT(full) [ 425.923724][T15531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.923736][T15531] Call Trace: [ 425.923744][T15531] [ 425.923752][T15531] dump_stack_lvl+0x189/0x250 [ 425.923781][T15531] ? __pfx____ratelimit+0x10/0x10 [ 425.923800][T15531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.923823][T15531] ? __pfx__printk+0x10/0x10 [ 425.923850][T15531] ? __might_fault+0xb0/0x130 [ 425.923888][T15531] should_fail_ex+0x414/0x560 [ 425.923920][T15531] _copy_from_iter+0x1de/0x1790 [ 425.923950][T15531] ? rcu_is_watching+0x15/0xb0 [ 425.923972][T15531] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 425.924000][T15531] ? __pfx__copy_from_iter+0x10/0x10 [ 425.924022][T15531] ? __build_skb_around+0x257/0x3e0 [ 425.924045][T15531] ? netlink_sendmsg+0x642/0xb30 [ 425.924062][T15531] ? skb_put+0x11b/0x210 [ 425.924087][T15531] netlink_sendmsg+0x6b2/0xb30 [ 425.924118][T15531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.924141][T15531] ? aa_sock_msg_perm+0xf1/0x1d0 [ 425.924162][T15531] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.924182][T15531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.924202][T15531] __sock_sendmsg+0x21c/0x270 [ 425.924234][T15531] ____sys_sendmsg+0x505/0x830 [ 425.924262][T15531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.924303][T15531] ? import_iovec+0x74/0xa0 [ 425.924330][T15531] ___sys_sendmsg+0x21f/0x2a0 [ 425.924355][T15531] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.924420][T15531] ? __fget_files+0x2a/0x420 [ 425.924435][T15531] ? __fget_files+0x3a0/0x420 [ 425.924465][T15531] __x64_sys_sendmsg+0x19b/0x260 [ 425.924490][T15531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.924529][T15531] ? __pfx_ksys_write+0x10/0x10 [ 425.924551][T15531] ? rcu_is_watching+0x15/0xb0 [ 425.924642][T15531] ? do_syscall_64+0xbe/0x3b0 [ 425.924684][T15531] do_syscall_64+0xfa/0x3b0 [ 425.924703][T15531] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.924722][T15531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.924742][T15531] ? clear_bhb_loop+0x60/0xb0 [ 425.924764][T15531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.924782][T15531] RIP: 0033:0x7fac6bd8ebe9 [ 425.924800][T15531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.924816][T15531] RSP: 002b:00007fac6cc41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.924838][T15531] RAX: ffffffffffffffda RBX: 00007fac6bfc5fa0 RCX: 00007fac6bd8ebe9 [ 425.924852][T15531] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 425.924865][T15531] RBP: 00007fac6cc41090 R08: 0000000000000000 R09: 0000000000000000 [ 425.924876][T15531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.924888][T15531] R13: 00007fac6bfc6038 R14: 00007fac6bfc5fa0 R15: 00007ffd0f15c018 [ 425.924921][T15531] [ 425.927257][T15503] bond4: (slave vxcan5): Enslaving as an active interface with an up link [ 426.378753][T15526] lo speed is unknown, defaulting to 1000 [ 426.565992][T15541] IPVS: Scheduler module ip_vs_sip not found [ 426.680980][ T8590] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.789133][T15556] sit0: left promiscuous mode [ 426.794517][T15556] sit0: left allmulticast mode [ 426.820034][T15556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.837679][ T9375] lo speed is unknown, defaulting to 1000 [ 426.868598][ T9375] syz2: Port: 1 Link ACTIVE [ 426.926749][ T8590] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.090608][ T8590] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.287658][ T8590] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.546998][T15582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.574019][T15582] bond0: (slave bond1): Enslaving as an active interface with an up link [ 427.590508][T15526] chnl_net:caif_netlink_parms(): no params data found [ 427.846787][T15594] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 427.922754][ T5183] Bluetooth: hci4: command tx timeout [ 428.329677][T15526] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.355296][T15604] __nla_validate_parse: 3 callbacks suppressed [ 428.355316][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3052'. [ 428.361869][T15526] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.387916][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3052'. [ 428.429608][T15526] bridge_slave_0: entered allmulticast mode [ 428.460387][T15526] bridge_slave_0: entered promiscuous mode [ 428.480375][T15526] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.501453][T15526] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.521348][T15526] bridge_slave_1: entered allmulticast mode [ 428.542691][T15526] bridge_slave_1: entered promiscuous mode [ 428.625029][T15612] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3053'. [ 428.812484][T15621] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3056'. [ 428.826081][T15621] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3056'. [ 428.842404][T15621] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3056'. [ 428.855248][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3057'. [ 428.864668][T15526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.866510][ T8590] bridge0: port 4(batadv0) entered disabled state [ 428.876789][T15624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3056'. [ 428.892005][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3057'. [ 428.910823][ T8590] team0: left allmulticast mode [ 428.916568][ T8590] C: left allmulticast mode [ 428.921677][ T8590] team_slave_1: left allmulticast mode [ 428.931260][ T8590] bond3: left allmulticast mode [ 428.937745][ T8590] team0: left promiscuous mode [ 428.944590][ T8590] C: left promiscuous mode [ 428.949895][ T8590] team_slave_1: left promiscuous mode [ 428.956480][ T8590] bond3: left promiscuous mode [ 428.963506][ T8590] bridge0: port 3(team0) entered disabled state [ 428.977796][ T8590] bridge_slave_1: left allmulticast mode [ 428.984997][ T8590] bridge_slave_1: left promiscuous mode [ 428.990753][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.002051][ T8590] bridge_slave_0: left allmulticast mode [ 429.007798][ T8590] bridge_slave_0: left promiscuous mode [ 429.014898][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.110418][ T8590] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 429.115521][T15630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3058'. [ 429.504544][ T8590] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 429.529150][ T8590] vxlan0 (unregistering): left promiscuous mode [ 429.561856][ T8590] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 429.574250][ T8590] bridge0 (unregistering): left promiscuous mode [ 430.011732][ T5183] Bluetooth: hci4: command tx timeout [ 430.949034][ T8590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.958263][ T8590] bond_slave_0: left promiscuous mode [ 430.966241][ T8590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.976863][ T8590] bond_slave_1: left promiscuous mode [ 430.984674][ T8590] bond0 (unregistering): Released all slaves [ 431.003092][ T8590] bond1 (unregistering): Released all slaves [ 431.128298][ T8590] bond2 (unregistering): Released all slaves [ 431.240944][ T8590] team0: Port device bond3 removed [ 431.248011][ T8590] bond3 (unregistering): Released all slaves [ 431.371953][ T8590] bond4 (unregistering): Released all slaves [ 431.387171][ T8590] bond5 (unregistering): Released all slaves [ 431.406050][T15526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.426326][T15629] tun0: tun_chr_ioctl cmd 1074812118 [ 431.637545][ T8590] tipc: Left network mode [ 431.659078][T15645] lo speed is unknown, defaulting to 1000 [ 431.682790][T15526] team0: Port device team_slave_0 added [ 431.708393][T15526] team0: Port device team_slave_1 added [ 431.785637][T15657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.969548][T15526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.981558][T15526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.019559][T15526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.091409][ T5183] Bluetooth: hci4: command tx timeout [ 432.148479][T15526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.155977][T15526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.186557][T15526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.502523][ T8590] hsr_slave_0: left promiscuous mode [ 432.511732][ T8590] hsr_slave_1: left promiscuous mode [ 432.524535][ T8590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.544399][ T8590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.152740][ T8590] team0 (unregistering): Port device team_slave_1 removed [ 433.210006][ T8590] team0 (unregistering): Port device C removed [ 433.514381][ T8590] vxcan1 (unregistering): left allmulticast mode [ 433.728086][T15526] hsr_slave_0: entered promiscuous mode [ 433.739403][T15526] hsr_slave_1: entered promiscuous mode [ 433.745718][T15526] debugfs: 'hsr0' already exists in 'hsr' [ 433.753810][T15526] Cannot create hsr debugfs directory [ 434.067889][T15692] bond0: (slave ipvlan1): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 434.088282][T15690] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.161655][ T5183] Bluetooth: hci4: command tx timeout [ 434.382638][ T8590] IPVS: stop unused estimator thread 0... [ 434.533388][T15707] ipvlan3: entered promiscuous mode [ 434.540300][T15707] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 434.628732][T15709] __nla_validate_parse: 2 callbacks suppressed [ 434.628751][T15709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3085'. [ 434.651145][T15709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3085'. [ 434.826596][T15526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 434.836913][T15717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3089'. [ 434.854229][T15720] syz_tun: entered allmulticast mode [ 434.861005][T15526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 434.935900][T15720] dvmrp8: entered allmulticast mode [ 434.972164][T15526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 435.029878][T15720] lo speed is unknown, defaulting to 1000 [ 435.097059][T15526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 435.401724][T15722] syz_tun: left allmulticast mode [ 435.458259][T15722] dvmrp8: left allmulticast mode [ 435.634251][T15725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.805006][T15759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.933955][T15756] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3099'. [ 436.208002][T15526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.284992][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3101'. [ 436.299647][T15526] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.346667][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3101'. [ 436.347954][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.363817][ T8587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.460527][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.467848][ T8587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.898155][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3106'. [ 436.952184][T15782] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3106'. [ 437.325125][T15526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.455789][T15526] veth0_vlan: entered promiscuous mode [ 437.478975][T15526] veth1_vlan: entered promiscuous mode [ 437.560483][T15526] veth0_macvtap: entered promiscuous mode [ 437.579884][T15526] veth1_macvtap: entered promiscuous mode [ 437.624219][T15526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.635857][T15803] lo speed is unknown, defaulting to 1000 [ 437.653329][T15526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.675415][T15805] lo speed is unknown, defaulting to 1000 [ 437.794493][ T8592] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.867480][ T8594] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.881390][ T8594] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.977186][ T8594] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.339213][ T8587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.363930][ T8593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.375591][ T8587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.410923][ T8593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.447120][T15811] lo speed is unknown, defaulting to 1000 [ 438.538545][T15817] FAULT_INJECTION: forcing a failure. [ 438.538545][T15817] name failslab, interval 1, probability 0, space 0, times 0 [ 438.597983][T15817] CPU: 0 UID: 0 PID: 15817 Comm: syz.1.3116 Not tainted syzkaller #0 PREEMPT(full) [ 438.598015][T15817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.598027][T15817] Call Trace: [ 438.598035][T15817] [ 438.598043][T15817] dump_stack_lvl+0x189/0x250 [ 438.598073][T15817] ? __pfx____ratelimit+0x10/0x10 [ 438.598093][T15817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.598115][T15817] ? __pfx__printk+0x10/0x10 [ 438.598150][T15817] ? __pfx___might_resched+0x10/0x10 [ 438.598167][T15817] ? fs_reclaim_acquire+0x7d/0x100 [ 438.598202][T15817] should_fail_ex+0x414/0x560 [ 438.598234][T15817] should_failslab+0xa8/0x100 [ 438.598264][T15817] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 438.598292][T15817] ? __alloc_skb+0x112/0x2d0 [ 438.598318][T15817] __alloc_skb+0x112/0x2d0 [ 438.598342][T15817] netlink_ack+0x146/0xa50 [ 438.598360][T15817] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.598389][T15817] ? __asan_memcpy+0x40/0x70 [ 438.598410][T15817] ? __pfx_ref_tracker_free+0x10/0x10 [ 438.598447][T15817] netlink_rcv_skb+0x28c/0x470 [ 438.598463][T15817] ? __lock_acquire+0xab9/0xd20 [ 438.598491][T15817] ? __pfx_genl_rcv_msg+0x10/0x10 [ 438.598518][T15817] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 438.598560][T15817] ? down_read+0x1ad/0x2e0 [ 438.598586][T15817] genl_rcv+0x28/0x40 [ 438.598608][T15817] netlink_unicast+0x82c/0x9e0 [ 438.598647][T15817] ? __pfx_netlink_unicast+0x10/0x10 [ 438.598678][T15817] ? netlink_sendmsg+0x642/0xb30 [ 438.598695][T15817] ? skb_put+0x11b/0x210 [ 438.598719][T15817] netlink_sendmsg+0x805/0xb30 [ 438.598751][T15817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.598775][T15817] ? aa_sock_msg_perm+0xf1/0x1d0 [ 438.598798][T15817] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 438.598818][T15817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.598849][T15817] __sock_sendmsg+0x21c/0x270 [ 438.598881][T15817] ____sys_sendmsg+0x505/0x830 [ 438.598910][T15817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.598945][T15817] ? import_iovec+0x74/0xa0 [ 438.598973][T15817] ___sys_sendmsg+0x21f/0x2a0 [ 438.598998][T15817] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.599065][T15817] ? __fget_files+0x2a/0x420 [ 438.599081][T15817] ? __fget_files+0x3a0/0x420 [ 438.599112][T15817] __x64_sys_sendmsg+0x19b/0x260 [ 438.599138][T15817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.599172][T15817] ? __pfx_ksys_write+0x10/0x10 [ 438.599195][T15817] ? rcu_is_watching+0x15/0xb0 [ 438.599220][T15817] ? do_syscall_64+0xbe/0x3b0 [ 438.599246][T15817] do_syscall_64+0xfa/0x3b0 [ 438.599265][T15817] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.599283][T15817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.599302][T15817] ? clear_bhb_loop+0x60/0xb0 [ 438.599326][T15817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.599344][T15817] RIP: 0033:0x7fac6bd8ebe9 [ 438.599362][T15817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.599378][T15817] RSP: 002b:00007fac6cc41038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.599401][T15817] RAX: ffffffffffffffda RBX: 00007fac6bfc5fa0 RCX: 00007fac6bd8ebe9 [ 438.599415][T15817] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 438.599427][T15817] RBP: 00007fac6cc41090 R08: 0000000000000000 R09: 0000000000000000 [ 438.599439][T15817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.599450][T15817] R13: 00007fac6bfc6038 R14: 00007fac6bfc5fa0 R15: 00007ffd0f15c018 [ 438.599484][T15817] [ 439.732992][T15828] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 439.771555][T15828] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 439.821586][T15828] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 440.094455][T15834] netlink: 828 bytes leftover after parsing attributes in process `syz.2.3122'. [ 440.136444][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3121'. [ 440.189328][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 440.192369][T15835] sctp: [Deprecated]: syz.0.3121 (pid 15835) Use of int in max_burst socket option deprecated. [ 440.192369][T15835] Use struct sctp_assoc_value instead [ 440.229768][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 440.284275][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 440.305790][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 440.316584][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 440.329424][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.494196][T15845] ipvlan10: entered promiscuous mode [ 440.503405][T15845] 8021q: adding VLAN 0 to HW filter on device ipvlan10 [ 440.541582][T15838] lo speed is unknown, defaulting to 1000 [ 440.628921][T15852] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3126'. [ 441.128563][T15864] 8021q: adding VLAN 0 to HW filter on device bond7 [ 441.148107][T15864] bond7: entered promiscuous mode [ 441.169448][T15864] bond0: (slave bond7): Enslaving as an active interface with an up link [ 441.233890][T15869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3132'. [ 441.251527][T15869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3132'. [ 442.274721][T15838] chnl_net:caif_netlink_parms(): no params data found [ 442.401289][ T5183] Bluetooth: hci0: command tx timeout [ 442.417274][T15914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3144'. [ 442.427140][T15914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3144'. [ 442.809658][T15927] bond5: (slave geneve3): Opening slave failed [ 442.848962][T15838] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.872675][T15838] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.927325][T15838] bridge_slave_0: entered allmulticast mode [ 442.953261][T15838] bridge_slave_0: entered promiscuous mode [ 443.003862][T15838] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.026612][T15838] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.040752][T15838] bridge_slave_1: entered allmulticast mode [ 443.050419][T15838] bridge_slave_1: entered promiscuous mode [ 443.219578][T15838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.256352][T15838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.457573][T15948] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3157'. [ 443.457875][T15838] team0: Port device team_slave_0 added [ 443.507991][T15838] team0: Port device team_slave_1 added [ 443.660347][T15963] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 443.710801][T15838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.737221][T15838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.774214][T15838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.798418][T15963] pim6reg: entered allmulticast mode [ 443.804928][T15968] pim6reg: left allmulticast mode [ 443.838294][T15971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3165'. [ 443.913101][T15967] ipvlan11: entered promiscuous mode [ 443.944892][T15967] 8021q: adding VLAN 0 to HW filter on device ipvlan11 [ 443.954131][T15974] netlink: 'syz.0.3160': attribute type 21 has an invalid length. [ 443.966994][T15838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.026914][T15838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.057542][T15838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.308998][T15838] hsr_slave_0: entered promiscuous mode [ 444.318349][T15838] hsr_slave_1: entered promiscuous mode [ 444.352904][T15838] debugfs: 'hsr0' already exists in 'hsr' [ 444.358976][T15838] Cannot create hsr debugfs directory [ 444.451680][T15992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3173'. [ 444.481515][ T5183] Bluetooth: hci0: command tx timeout [ 444.761605][T15991] lo speed is unknown, defaulting to 1000 [ 445.424003][T16022] __nla_validate_parse: 2 callbacks suppressed [ 445.424026][T16022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3183'. [ 445.480453][T15838] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.550356][T16008] lo speed is unknown, defaulting to 1000 [ 445.837518][T15838] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.036769][T15838] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.233237][T15838] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.436898][T16045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3186'. [ 446.561302][ C1] [ 446.563801][ C1] ================================ [ 446.569125][ C1] WARNING: inconsistent lock state [ 446.574342][ C1] syzkaller #0 Not tainted [ 446.578779][ C1] -------------------------------- [ 446.584002][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 446.591042][ C1] syz.3.3187/16050 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 446.597474][ C1] ffff88807910d8a8 (&p->tcfa_lock){+.?.}-{3:3}, at: est_timer+0xd4/0x9f0 [ 446.605943][ C1] {SOFTIRQ-ON-W} state was registered at: [ 446.611842][ C1] lock_acquire+0x120/0x360 [ 446.616544][ C1] _raw_spin_lock+0x2e/0x40 [ 446.621189][ C1] tcf_skbmod_init+0x672/0xbe0 [ 446.626138][ C1] tcf_action_init_1+0x460/0x6d0 [ 446.631180][ C1] tcf_action_init+0x2cf/0xab0 [ 446.636043][ C1] tc_ctl_action+0x430/0xbd0 [ 446.640813][ C1] rtnetlink_rcv_msg+0x77c/0xb70 [ 446.645965][ C1] netlink_rcv_skb+0x205/0x470 [ 446.650989][ C1] netlink_unicast+0x82c/0x9e0 [ 446.655932][ C1] netlink_sendmsg+0x805/0xb30 [ 446.661059][ C1] __sock_sendmsg+0x21c/0x270 [ 446.665845][ C1] ____sys_sendmsg+0x505/0x830 [ 446.670869][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 446.675804][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 446.680920][ C1] do_syscall_64+0xfa/0x3b0 [ 446.685958][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.692470][ C1] irq event stamp: 1012 [ 446.696679][ C1] hardirqs last enabled at (1012): [] _raw_spin_unlock_irq+0x23/0x50 [ 446.706496][ C1] hardirqs last disabled at (1011): [] _raw_spin_lock_irq+0x7d/0xf0 [ 446.716147][ C1] softirqs last enabled at (944): [] packet_release+0xafc/0xce0 [ 446.725956][ C1] softirqs last disabled at (1009): [] __irq_exit_rcu+0xca/0x1f0 [ 446.735329][ C1] [ 446.735329][ C1] other info that might help us debug this: [ 446.743383][ C1] Possible unsafe locking scenario: [ 446.743383][ C1] [ 446.751634][ C1] CPU0 [ 446.754951][ C1] ---- [ 446.758239][ C1] lock(&p->tcfa_lock); [ 446.762686][ C1] [ 446.766135][ C1] lock(&p->tcfa_lock); [ 446.770741][ C1] [ 446.770741][ C1] *** DEADLOCK *** [ 446.770741][ C1] [ 446.778978][ C1] 2 locks held by syz.3.3187/16050: [ 446.784315][ C1] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 446.794430][ C1] #1: ffffc90000a08be0 ((&est->timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 446.803883][ C1] [ 446.803883][ C1] stack backtrace: [ 446.809775][ C1] CPU: 1 UID: 0 PID: 16050 Comm: syz.3.3187 Not tainted syzkaller #0 PREEMPT(full) [ 446.809795][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.809803][ C1] Call Trace: [ 446.809810][ C1] [ 446.809817][ C1] dump_stack_lvl+0x189/0x250 [ 446.809838][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.809854][ C1] ? __pfx__printk+0x10/0x10 [ 446.809872][ C1] ? print_lock_name+0xde/0x100 [ 446.809892][ C1] print_usage_bug+0x297/0x2e0 [ 446.809907][ C1] valid_state+0xc3/0xf0 [ 446.809921][ C1] mark_lock_irq+0x36/0x390 [ 446.809935][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 446.809954][ C1] mark_lock+0x11b/0x190 [ 446.809968][ C1] __lock_acquire+0x680/0xd20 [ 446.809989][ C1] ? est_timer+0xd4/0x9f0 [ 446.810007][ C1] lock_acquire+0x120/0x360 [ 446.810025][ C1] ? est_timer+0xd4/0x9f0 [ 446.810045][ C1] ? lockdep_unlock+0x89/0x120 [ 446.810063][ C1] _raw_spin_lock+0x2e/0x40 [ 446.810082][ C1] ? est_timer+0xd4/0x9f0 [ 446.810099][ C1] est_timer+0xd4/0x9f0 [ 446.810119][ C1] ? call_timer_fn+0xbe/0x5f0 [ 446.810137][ C1] ? call_timer_fn+0xbe/0x5f0 [ 446.810155][ C1] ? __pfx_est_timer+0x10/0x10 [ 446.810176][ C1] call_timer_fn+0x17e/0x5f0 [ 446.810201][ C1] ? __pfx_est_timer+0x10/0x10 [ 446.810218][ C1] ? call_timer_fn+0xbe/0x5f0 [ 446.810236][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 446.810257][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.810275][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.810288][ C1] ? __pfx_est_timer+0x10/0x10 [ 446.810306][ C1] __run_timer_base+0x61a/0x860 [ 446.810323][ C1] ? ktime_get+0x3e/0x1f0 [ 446.810341][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 446.810357][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 446.810378][ C1] run_timer_softirq+0xb7/0x180 [ 446.810395][ C1] handle_softirqs+0x283/0x870 [ 446.810410][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 446.810425][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 446.810441][ C1] __irq_exit_rcu+0xca/0x1f0 [ 446.810454][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 446.810469][ C1] irq_exit_rcu+0x9/0x30 [ 446.810481][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 446.810502][ C1] [ 446.810506][ C1] [ 446.810512][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 446.810526][ C1] RIP: 0010:unwind_next_frame+0x1318/0x2390 [ 446.810543][ C1] Code: 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 49 63 07 4c 01 f8 <49> 8d 4f 04 4c 39 e0 48 0f 46 e9 49 8d 47 fc 48 0f 47 d8 4d 0f 46 [ 446.810555][ C1] RSP: 0018:ffffc9000b6cf3f8 EFLAGS: 00000287 [ 446.810569][ C1] RAX: ffffffff8164d0d8 RBX: ffffffff8fb675b4 RCX: dffffc0000000000 [ 446.810579][ C1] RDX: ffffffff8fb675b4 RSI: ffffffff9031fb64 RDI: ffffffff8be337a0 [ 446.810589][ C1] RBP: ffffffff8fb675b4 R08: 0000000000000001 R09: ffffffff8172c195 [ 446.810599][ C1] R10: ffffc9000b6cf518 R11: ffffffff81ac3820 R12: ffffffff8164d169 [ 446.810609][ C1] R13: ffffffff8fb675b4 R14: ffffc9000b6cf4c8 R15: ffffffff8fb675b4 [ 446.810620][ C1] ? arch_do_signal_or_restart+0x99/0x750 [ 446.810641][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 446.810657][ C1] ? unwind_next_frame+0xa5/0x2390 [ 446.810671][ C1] ? arch_do_signal_or_restart+0x8/0x750 [ 446.810692][ C1] ? unwind_next_frame+0xd4/0x2390 [ 446.810714][ C1] ? unwind_next_frame+0xa5/0x2390 [ 446.810729][ C1] ? arch_do_signal_or_restart+0x9a/0x750 [ 446.810749][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 446.810765][ C1] arch_stack_walk+0x11c/0x150 [ 446.810783][ C1] ? arch_do_signal_or_restart+0x9a/0x750 [ 446.810803][ C1] stack_trace_save+0x9c/0xe0 [ 446.810819][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 446.810837][ C1] ? __lock_acquire+0xab9/0xd20 [ 446.810855][ C1] kasan_save_track+0x3e/0x80 [ 446.810872][ C1] ? kasan_save_track+0x3e/0x80 [ 446.810886][ C1] ? kasan_save_free_info+0x46/0x50 [ 446.810899][ C1] ? __kasan_slab_free+0x5b/0x80 [ 446.810915][ C1] ? kmem_cache_free+0x18f/0x400 [ 446.810932][ C1] ? __dentry_kill+0x4d2/0x660 [ 446.810943][ C1] ? dput+0x19f/0x2b0 [ 446.810954][ C1] ? __fput+0x68e/0xa70 [ 446.810967][ C1] ? task_work_run+0x1d4/0x260 [ 446.810984][ C1] ? do_exit+0x6b5/0x2300 [ 446.810999][ C1] ? do_group_exit+0x21c/0x2d0 [ 446.811016][ C1] ? get_signal+0x1286/0x1340 [ 446.811030][ C1] ? arch_do_signal_or_restart+0x9a/0x750 [ 446.811071][ C1] ? __dentry_kill+0x4d2/0x660 [ 446.811085][ C1] kasan_save_free_info+0x46/0x50 [ 446.811102][ C1] __kasan_slab_free+0x5b/0x80 [ 446.811123][ C1] kmem_cache_free+0x18f/0x400 [ 446.811145][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 446.811167][ C1] __dentry_kill+0x4d2/0x660 [ 446.811181][ C1] ? dput+0x37/0x2b0 [ 446.811196][ C1] dput+0x19f/0x2b0 [ 446.811210][ C1] __fput+0x68e/0xa70 [ 446.811232][ C1] task_work_run+0x1d4/0x260 [ 446.811255][ C1] ? __pfx_task_work_run+0x10/0x10 [ 446.811282][ C1] do_exit+0x6b5/0x2300 [ 446.811305][ C1] ? do_raw_spin_lock+0x121/0x290 [ 446.811326][ C1] ? __pfx_do_exit+0x10/0x10 [ 446.811347][ C1] do_group_exit+0x21c/0x2d0 [ 446.811363][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.811377][ C1] get_signal+0x1286/0x1340 [ 446.811396][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 446.811416][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 446.811432][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 446.811456][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 446.811476][ C1] exit_to_user_mode_loop+0x75/0x110 [ 446.811499][ C1] ? ret_from_fork+0x472/0x770 [ 446.811513][ C1] ret_from_fork+0x47f/0x770 [ 446.811527][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 446.811543][ C1] ? __switch_to_asm+0x39/0x70 [ 446.811559][ C1] ? __switch_to_asm+0x33/0x70 [ 446.811577][ C1] ret_from_fork_asm+0x1a/0x30 [ 446.811599][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 447.406151][T16044] lo speed is unknown, defaulting to 1000 [ 447.437327][ T5183] Bluetooth: hci0: command tx timeout [ 448.090234][ T8590] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.206856][ T8590] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.255347][ T8590] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.309519][ T8590] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.417405][ T8590] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.428754][ T8590] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.484480][ T8590] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.495341][ T8590] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.554973][ T8590] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.565111][ T8590] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.615694][ T8590] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.627986][ T8590] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.687402][ T8590] bridge_slave_1: left allmulticast mode [ 448.693280][ T8590] bridge_slave_1: left promiscuous mode [ 448.698940][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.707896][ T8590] bridge_slave_0: left allmulticast mode [ 448.714268][ T8590] bridge_slave_0: left promiscuous mode [ 448.720003][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.729808][ T8590] bridge_slave_1: left allmulticast mode [ 448.735922][ T8590] bridge_slave_1: left promiscuous mode [ 448.741810][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.749958][ T8590] bridge_slave_0: left allmulticast mode [ 448.755896][ T8590] bridge_slave_0: left promiscuous mode [ 448.762631][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.867382][ T8590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.878590][ T8590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.888892][ T8590] bond0 (unregistering): (slave bond1): Releasing backup interface [ 448.897675][ T8590] bond0 (unregistering): Released all slaves [ 449.011520][ T8590] bond1 (unregistering): Released all slaves [ 449.024545][ T8590] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 449.033314][ T8590] bond3 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - b2:74:57:8f:46:e2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 449.052607][ T8590] bond3 (unregistering): (slave erspan0): making interface the new active one [ 449.103186][ T8590] bond3 (unregistering): (slave erspan0): Releasing active interface [ 449.139377][ T8590] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 449.327104][ T8590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.336132][ T8590] bond_slave_0: left promiscuous mode [ 449.343388][ T8590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.352845][ T8590] bond_slave_1: left promiscuous mode [ 449.359805][ T8590] bond0 (unregistering): (slave 0!): Releasing backup interface [ 449.368636][ T8590] !: left promiscuous mode [ 449.374401][ T8590] bond0 (unregistering): (slave bond7): Releasing backup interface [ 449.383339][ T8590] bond7 (unregistering): left promiscuous mode [ 449.389887][ T8590] bond0 (unregistering): Released all slaves [ 449.399464][ T8590] bond1 (unregistering): Released all slaves [ 449.408595][ T8590] bond2 (unregistering): Released all slaves [ 449.422105][ T8590] bond3 (unregistering): (slave veth3): Releasing active interface [ 449.431692][ T8590] bond3 (unregistering): Released all slaves [ 449.538860][ T8590] bond4 (unregistering): (slave veth5): Releasing active interface [ 449.549005][ T8590] bond4 (unregistering): Released all slaves [ 449.558064][ T8590] bond5 (unregistering): Released all slaves [ 449.567226][ T8590] bond6 (unregistering): Released all slaves [ 449.668405][ T8590] bond7 (unregistering): Released all slaves [ 449.761522][ T8590] tipc: Disabling bearer [ 449.767320][ T8590] tipc: Left network mode [ 450.014246][ T8590] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode [ 450.113858][ T8590] hsr_slave_0: left promiscuous mode [ 450.119888][ T8590] hsr_slave_1: left promiscuous mode [ 450.126202][ T8590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.134084][ T8590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.142182][ T8590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.149587][ T8590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.164751][ T8590] hsr_slave_0: left promiscuous mode [ 450.170613][ T8590] hsr_slave_1: left promiscuous mode [ 450.180995][ T8590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.188700][ T8590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.196825][ T8590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.204547][ T8590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.215440][ T8590] veth1_macvtap: left promiscuous mode [ 450.221302][ T8590] veth0_macvtap: left promiscuous mode [ 450.227064][ T8590] veth1_vlan: left promiscuous mode [ 450.232627][ T8590] veth0_vlan: left promiscuous mode [ 450.239029][ T8590] veth1_vlan: left promiscuous mode [ 450.398434][ T8590] team0 (unregistering): Port device team_slave_1 removed [ 450.424789][ T8590] team0 (unregistering): Port device team_slave_0 removed [ 450.690008][ T8590] team_slave_1 (unregistering): left promiscuous mode [ 450.698748][ T8590] team0 (unregistering): Port device team_slave_1 removed [ 451.318602][ T8590] IPVS: stop unused estimator thread 0... [ 451.397544][ T8590] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.445816][ T8590] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.495278][ T8590] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.535402][ T8590] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.947341][ T8590] bridge_slave_1: left allmulticast mode [ 451.953151][ T8590] bridge_slave_1: left promiscuous mode [ 451.958938][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.968596][ T8590] bridge_slave_0: left allmulticast mode [ 451.974942][ T8590] bridge_slave_0: left promiscuous mode [ 451.980821][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.990095][ T8590] bridge_slave_1: left allmulticast mode [ 451.996056][ T8590] bridge_slave_1: left promiscuous mode [ 452.002137][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.010097][ T8590] bridge_slave_0: left allmulticast mode [ 452.015954][ T8590] bridge_slave_0: left promiscuous mode [ 452.022233][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.031708][ T8590] team0: left allmulticast mode [ 452.036661][ T8590] team_slave_0: left allmulticast mode [ 452.042284][ T8590] team_slave_1: left allmulticast mode [ 452.047941][ T8590] team0: left promiscuous mode [ 452.052938][ T8590] team_slave_0: left promiscuous mode [ 452.058540][ T8590] team_slave_1: left promiscuous mode [ 452.064190][ T8590] bridge0: port 3(team0) entered disabled state [ 452.071891][ T8590] bridge_slave_1: left allmulticast mode [ 452.077556][ T8590] bridge_slave_1: left promiscuous mode [ 452.083321][ T8590] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.091917][ T8590] bridge_slave_0: left allmulticast mode [ 452.097613][ T8590] bridge_slave_0: left promiscuous mode [ 452.103691][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.209189][ T8590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.219924][ T8590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.230245][ T8590] bond0 (unregistering): Released all slaves [ 452.279373][ T8590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.289541][ T8590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.299225][ T8590] bond0 (unregistering): Released all slaves [ 452.466130][ T8590] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 452.804808][ T8590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.814665][ T8590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.824188][ T8590] bond0 (unregistering): (slave bond1): Releasing backup interface [ 452.832759][ T8590] bond0 (unregistering): Released all slaves [ 452.942333][ T8590] bond1 (unregistering): Released all slaves [ 452.951806][ T8590] bond2 (unregistering): Released all slaves [ 453.057076][ T8590] bond3 (unregistering): Released all slaves [ 453.159099][ T8590] bond4 (unregistering): (slave vxcan5): Releasing backup interface [ 453.167550][ T8590] vxcan5: left promiscuous mode [ 453.173542][ T8590] bond4 (unregistering): Released all slaves [ 453.182711][ T8590] bond5 (unregistering): Released all slaves [ 453.275524][ T8590] tipc: Left network mode [ 453.473166][ T8590] hsr_slave_0: left promiscuous mode [ 453.478959][ T8590] hsr_slave_1: left promiscuous mode [ 453.485000][ T8590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.492636][ T8590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.500277][ T8590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.508626][ T8590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.519195][ T8590] hsr_slave_0: left promiscuous mode [ 453.525110][ T8590] hsr_slave_1: left promiscuous mode [ 453.530804][ T8590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.538609][ T8590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.547346][ T8590] batadv_slave_0: left promiscuous mode [ 453.556189][ T8590] hsr_slave_0: left promiscuous mode [ 453.562156][ T8590] hsr_slave_1: left promiscuous mode [ 453.567933][ T8590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.575738][ T8590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.587332][ T8590] veth1_macvtap: left promiscuous mode [ 453.593293][ T8590] veth0_macvtap: left promiscuous mode [ 453.598959][ T8590] veth1_vlan: left promiscuous mode [ 453.604594][ T8590] veth0_vlan: left promiscuous mode [ 453.723790][ T8590] team0 (unregistering): Port device team_slave_1 removed [ 453.750760][ T8590] team0 (unregistering): Port device team_slave_0 removed [ 453.906923][ T8590] team0 (unregistering): Port device team_slave_1 removed [ 453.917506][ T8590] team0 (unregistering): Port device team_slave_0 removed [ 454.357198][ T8590] team0 (unregistering): Port device team_slave_1 removed [ 454.393176][ T8590] team0 (unregistering): Port device team_slave_0 removed [ 454.730415][ T9381] lo speed is unknown, defaulting to 1000 [ 454.736409][ T9381] infiniband syz2: ib_query_port failed (-19) [ 455.469807][ T8590] IPVS: stop unused estimator thread 0...