last executing test programs: 41.368752428s ago: executing program 4 (id=1693): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000000000b47d619900000000000014000100fc000000000000000000000000000001000000000000000000", @ANYBLOB="44000000fbfc1377fe5ceeec8196b3b4619e3507b2038d7e44fbea32630f3b51b1c05a4af539b894f6d80991849c0cd749aa6e8df1c1f40df8998cd3ce1a62fc351181991305a21cc27d4b3bcf283167fa781c4597e0249559b4558f337fe5185107a0f8690872aa21bc7db567a014770602a1c89650dce22f213e377b154397528281cb23baf0b49d73e7f5e38ae5acf4058947575da821842732550696b7f1be29f1869f215584a9e3ed0e089ae39d55b4b462639bd3eaf164c55caeb2859478616594bbd35e1245ee0ea3d581fe8e6cfbc7261dff8655714bf8360bd4f5e08c16", @ANYRES32=0x0, @ANYRES8=0x0], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r1, 0x6e566000) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) unshare(0x22020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000e00000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) socket$tipc(0x1e, 0x2, 0x0) unshare(0x2a020400) socket$netlink(0x10, 0x3, 0x10) 40.211833375s ago: executing program 4 (id=1701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000008e00"/28], 0x48) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0004000000000000000000"], 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1, 0x0, &(0x7f0000000000)="b0", 0x0, 0x3, 0xbe02, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x2, 0x0, 0x200}, 0x50) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@map, 0x35, 0x0, 0x8, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880), &(0x7f00000008c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@cgroup, 0xffffffffffffffff, 0x5c, 0x4, 0x0, @void, @value, @void, @void, r5}, 0x20) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup=r6, r3, 0x1a, 0x0, 0x0, @void, @value=r3, @void, @void, r5}, 0x20) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000001c0)="0fdd435322df3775ceb6cdcba8b44fd5a290cadd32baa5d5fbefed0b82c8e5939a4d81c6b707", 0x26}, {&(0x7f0000000300)}, {&(0x7f0000001080)="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", 0x1000}, {&(0x7f00000006c0)="ba2a76085bb48d39b67b8d72e08966a39e27efdffcfcd6c44571c569be3c912e82c3c7d049cb431b075434f56bbc4f7c70311fe4950edf5009939a59729cbab029298a1102437e8357ab97729081a65ed81caa5d11abced37a15f86d9a33bd1935621a5432a0abd4a84f55172cd6fb57bf8e93c2607a235b86c67b1200e0d33f8389", 0x82}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000000980)="c8f7a5a3dfc8a345f7f6dcae9b117fe1fe1b47e8e87dd6599ed47c9fa954cfc789ac6bf878e04c37a7e05a1e2fe21f149dbfa27ad3675b4f41986c1297cafaf6d6fafd094b4318d33b3ee103c396947344434d8739982978876638ffda9f75dd1c13c263f4e516e190549e598505e889ed4c0ecec76811af5d6b5e609961ae342d337fb53930475a261cd342aa991816227eceff14ecddd10a61a62b77f277c7b9669970", 0xa4}, {&(0x7f0000000340)="d88800aaaf0c8a441851e54b1a8b50d10f6c57683a7b13e7747c3f6161616cf809d8289ccc85ccbd59fc0afa5d80e26bb36d4caa554d2fc35dc0cc425d6c", 0x3e}, {&(0x7f0000000a40)="2e9119d6109693a6f11026a14e7ac029a623fbb4290d3da61504e51e115097626c57080d6b7b1f9661d3e4058b5f89aff188ec39d6487cdda819ef28882de3a362ba17e7aa6d16a006fa36a2e3bff2868140e173237a4e88b6a7f1420823f0a68d8c333bf6d3fc7dbd0ec51feeae23a2e2041af159ad17eca6be970410c78928a07830f9ff86999f9908e0a34c6d45fd459f1374eca61c3b110031137c79b765099e9512c476ef2fce", 0xa9}], 0x8}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000fc0)="2d7e43e66a19959d86c60aed4958b106cab761371d1fa40f1e58ea15f0880cb4f20b7790755aae5ac6c66b91900e553401e8eda21ad08bb79ff9a65f41e7a149ac0957c3bc01d55bbe79984741", 0x4d}, {&(0x7f0000003100)="135859cdfa6ccb432153aa4a9e5fe89cb0db35f2c7d72a503a904fc4d34390061dc189ddca4cd7ca048cf9bf957746bdf54ddbcd48f8b32fafc515f5fa0169145a377ec6f020bcbee126a7", 0x4b}, {&(0x7f0000003180)="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", 0x10b}], 0x3, &(0x7f0000000440)}}, {{&(0x7f0000000780)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000c00)="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", 0xfb}, {&(0x7f0000004140)="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", 0x10b1}, {&(0x7f0000000d00)="caa38c23f6bab9c6b71955e12248f4d8ab1ecd181dd8354d595249d134edc12ec9b8b4b57537f28942ade01c4168af099437d3c70c1fde464f993fb0fdff64e4fab5f2a070a36758e229914ab11888af26d60a9eeab4ae321d3e424af16f3e23603593a141c3db53760deac4dd331e9e380db1fb593540900e3ba166b8059d8920bd2b5e7f939fcb4bc5ad7e758840b9008e3094ecc900e49410dfbd7a5ebe503114a332501308df1f9236df2b025fe4df2673ce77491fdfcf3e9b0368a11e4f6029cfefbe11c0f8269ccb14c4178a84b5064a3e577470fb7316b7e5d5235cd4", 0xe0}, {&(0x7f0000000e00)="4aea0e6dffa9f37e7789f705af773fee4f0c585b7c90addbf4da74a79dbe6a949297377c272f7582389741d53085df3a7f44c967234700671b36490182558b078781b9c3b32f2c67ac4cfaaa6aa78d596a787c9425ce4a49d7118afce2eb7cf55d262deed441d01e34052e0c3f173b0bdddd939e52d5cc24d39ae31a71119b0323cdc2df41b12c92a26babcde40758174942d1984fcb505d249f7fb6fb64d152c16b119779d03be4cea8e176f417f36c226a0c02bf38c8d3c8b719c9a5509c", 0xbf}, {&(0x7f0000000800)}, {&(0x7f0000000ec0)="bc3c0d9aab4dbe265114445c96d3c6800ff53cd8cdefc53eb9f54f347e48c73bca0566efdc97c44feceb358f81776d841c2b10e9fac5e4c986e16e8b6a849b9efd9a2aeda4f21714f9b81eb0dbcc99f436dc4bbe970a6cede58a56b04ceb73e2b7a7e2fd40993b870c4533b516312a9dc53b00bbb90b5016764a8556db", 0x7d}], 0x6, &(0x7f0000000880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}], 0x18}}], 0x3, 0x801) sendmmsg$inet(r4, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x4000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000300)={r0, r3}) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x81, 0x9e, 0x3}, @isdn={0x22, 0xc, 0x0, 0x1, 0x9}, @nfc={0x27, 0x0, 0x0, 0x2}, 0x68e7, 0x0, 0x0, 0x0, 0x400, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x4, 0x0, 0x7ff}) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) 39.485545725s ago: executing program 4 (id=1709): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x44000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) 39.307448327s ago: executing program 4 (id=1711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000e234d9e67417f653a58a162b404400000000b42893af6a61a214ed5319faa6bcf8a60af4b08ed0d3cb64e0577253de8ff4af08f8ca65afe578c4f55fb546f903857d1785ac858c0d39b41783226df384ab996211bd12217a56c1a3247ed9672ff84e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, 0x0, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 34.862910223s ago: executing program 4 (id=1740): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000004000000000000000000008500000036000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r3, 0x25, 0x0, @val=@tracing}, 0x40) syz_emit_ethernet(0xd81, &(0x7f0000002940)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r6) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300020c00000000000000000000000200080008000000fd00000000000000030006000000000002000000ac1414000000000000000000020001000000000000000000000000200300050000000000023c5800"/96], 0x60}, 0x1, 0x7}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000002c0), 0x1000, r9}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@flushpolicy={0x40, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@address_filter={0x28, 0x1a, {@in=@local, @in=@private=0xa010100, 0x2, 0x6, 0x10}}, @proto={0x5, 0x19, 0xff}]}, 0x40}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)={0x64, r7, 0x4d1b20c6161d1adb, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:inetd_child_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @broadcast}]}, 0x64}}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r5, 0xffffffff, 0x5}, 0x10) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0x0, 0x9}, [@IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c045}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0) 34.719695764s ago: executing program 4 (id=1742): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffff001}, {}, {}, {}, {}, {}, {}, {}, {}, {0x40}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x782}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x100}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, &(0x7f0000000040)=0x4, r1, &(0x7f0000000180)=0x5, 0xe6, 0xc) socket(0xa, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911300000000000851000000200000085000000b400000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) close(r8) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettaction={0x90, 0x32, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4e36}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2b}}, {0xc, 0x1000, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000300)={'team0\x00', @random='\x00\t\x00'}) 22.294555175s ago: executing program 1 (id=1825): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b405000000000000711035000000000005000000000000009500000000000000d3d00bc6a9b03b3cb6704db5d53dbf1221882437bf7adc7ebfafb97f8b7cb9beb7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x2b0, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@lastused={0xc, 0xf, 0x10000}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@remote}}, @etimer_thresh={0x8, 0xc, 0xca1e}, @algo_comp={0xb6, 0x3, {{'deflate\x00'}, 0x370, "3c0341649a63368b2c7d951d4c9d4d838e14fb146a6579800c75fc8a1d1c5cb1c378c355d3ebf3b458d2c6026c019f9df8d998af143622d3a62828128cb0627ed9b7d096eb49c972d31a7b8551094f4ad35c277bf00759bbab180f703934cf67200954c98ff0c647443b8d450888"}}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@rand_addr=0x64010101, 0x4e20, 0xff, 0x9, 0x1, 0x0, 0xa0, 0xc0}, {0x0, 0x1, 0x10, 0x60415abf, 0x5, 0x7, 0x1, 0xc3}, {0x81, 0x2, 0x100000001, 0x1ff}, 0x0, 0x6, 0x1, 0x0, 0x3, 0x3}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f2}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0xfffffffffffffffd) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd29, 0xa5dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000240)="fe3100e424d1e52fbea1", 0xa) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x1f4, 0xd28, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) 22.189042977s ago: executing program 1 (id=1829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, 0x0, 0x0, 0x0) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, 0x0, &(0x7f0000004600)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 21.57909069s ago: executing program 1 (id=1836): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="3d70a6897b8a5e7f5fad2da61b90ee2363ab9e65c89ebde880df9914000635b869acb04f5210b6cf4c6d42cc81bea243edd572959f3df677464ca5dce4154e4be5e98d79c70d4840379878f6b035d6b5df2fc6ec8b521be982079301e96f6fe9b62f182a951343973b5c09ddb0d60f34471647ba485b4722ea0019f21895d185701a7b018b52ffb62776e820609c9660dfaa2824a4fcedab5332b6cb6a7dc9772eeda403fb05e603dbb4f568620ea8e5686bf0a0fdae8b8134b456c0251cbb78508ce2d65f78d2fc4484617d56f278365a1cadb50731fc0b0858412efc55524a7be6a7e239a2355f1b32f0", 0xeb}, {&(0x7f0000000100)="e41a2b0b4cff950b7a3c6a8e583a3a06000e36ed19ba9a6041747d6f2d9b2f6ce898932ea56b35d191c7153edc2cff2dea85636f0df90b2499a8354d0cea17935ba078633672b85b93555915d396c8fff54bdebe034ae70efc2b945ef0ddddc0c5f213c75cb9f7c75550092c6c9fb25be8124a84f933c0ba", 0x78}, {&(0x7f0000001300)="33fe0956a3a8bfde1f58381be9168a1eb229da8d924726acc70f453f54ec4afad82ed90d0e3fc6204eaec8aad1ebeba95dac585d180f4e8180bf469911520e6842", 0x41}, {&(0x7f0000001380)="39a87be89335b1a3dc473627c6e9c8ef7a69ae1765d3e07d17ab7e271d481d1a05a4201bf50211ed5a8225f30dd6032f4775f5d28a7679eebe1a739da1b5dbcdad11bd1d58998d303e137827bb4f3f0ad51edaeddc090f88cf85cea34e6df7051b775eefd58774dcfe22365447cbdf549628b5c5afa1905be10fc1819dca7b6a1506d1517426e217d3732b45cc616358a9779ca562ab29079e0a74afa5c654668ead", 0xa2}], 0x5, &(0x7f00000014c0)=[{0x58, 0x36, 0x8, "5647b5fd37d3882fa07f4bbee8eac2d17ea2e25edb47ff108c5c126c8f6faa48d2b863f7607eab9930d634fb1f5caf8335cc3296a0b512ee5c5924b0adc776d5f21123"}], 0x58}}], 0x1, 0x4000000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) 21.382832048s ago: executing program 1 (id=1838): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x340, r2, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4b}}}}, [@NL80211_ATTR_IE={0xd8, 0x2a, [@cf={0x4, 0x6, {0x10, 0xee, 0xe4cb, 0x7}}, @fast_bss_trans={0x37, 0x68, {0xe, 0x1, "0e93d5fdf312661732183cad7a42c8dc", "1c3d7163fa189428c602c7f81af48b8b8ac693969834676af04d7ca7c5026c2a", "aa687a9c9e63e1953e231a8d9e2f17c6a8c205457fd69d6595c7112e395d9d6d", [{0x2, 0x14, "65f3ec1ee12cae953552d77114f3236276afad31"}]}}, @mic={0x8c, 0x18, {0x101, "7679b5933069", @long="e78fa1b0a99ab2130fe115ee16c0285f"}}, @measure_req={0x26, 0x1a, {0x7, 0x5, 0x0, "1b43f37867a66b6fce6636af846061cd531fb987f0fee6"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xc, 0x9, @device_b, 0x7, @value, 0x2, 0x101, @broadcast, 0xfffffff8}}, @channel_switch={0x25, 0x3, {0x1, 0x7c, 0xa}}]}, @NL80211_ATTR_IE={0x4b, 0x2a, [@tim={0x5, 0x27, {0x3, 0xc4, 0x8, "3b9befb1efe2a856df6683a298e42d3fe34b73ccdd8a0f58aeaf2200f88de33e12829b37"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2, 0x26}, @mic={0x8c, 0x10, {0x2ba, "7e0eafab8b55", @short="2edbe10772a61c40"}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4e}, @NL80211_ATTR_IE={0x1bd, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @dsss={0x3, 0x1, 0x30}, @supported_rates, @random_vendor={0xdd, 0xb5, "57bb605c216f9d82d9f88fe8d003e96db9a7605baebd82b5762b100c13bb1d2f07b6244da321acaff7e5f1dba2350b91f65b7d8419f0ef8fe096e33a4a8d3ea9acf1508b2f0fc14124bed6cee969bc1c97c99b44e6422a1c851d9a8c758b82669e655c19a073773e3148a9155403696a8ccc5a0930668e54394457ac08f17d73eb8ba091a3c49a59902d53855cb25802a1a18c0d9cb526c3dad1cdcb5038e67b60fc472822ff63504621416f5a6e3337b906061f1a"}, @perr={0x84, 0xe3, {0x4, 0xf, [{{}, @device_a, 0x5, @void, 0x17}, {{0x0, 0x1}, @broadcast, 0x1, @value, 0x38}, {{}, @device_a, 0x101, @void, 0x16}, {{}, @broadcast, 0x2d9, @void, 0x12}, {{}, @device_b, 0x8000, @void, 0x22}, {{}, @device_a, 0x1, @void, 0x3d}, {{}, @device_b, 0xab9, @void, 0x32}, {{0x0, 0x1}, @device_a, 0xffffffff, @value=@broadcast, 0x400}, {{0x0, 0x1}, @device_b, 0x9, @value, 0x1b}, {{}, @broadcast, 0x4, @void, 0x39}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x1d}, {{}, @broadcast, 0x4, @void, 0x2e}, {{0x0, 0x1}, @broadcast, 0x21, @value, 0x2c}, {{}, @device_a, 0x3b, @void, 0x3c}, {{}, @broadcast, 0x45, @void, 0x1b}]}}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x22}]}, 0x340}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="53148a5a586fae0600000000000000699599ea5f3136ce44d4e1d03a24afa456719e78eab237b3c532d0a57cb376971b19c5335e1c9a9b8f30820981f0eabb474798a8eea348faabaf201ad8f0c00600ea0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x14004040) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r4, 0x0, 0xffffffff000) getsockname$llc(r4, &(0x7f0000000480)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000004c0)=0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0xfffffd55, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000003e0007012d00001800018006000600800a00000c0015003000000000000000000000000000000000000000000197cf170c1f2977b4c3227ee0907072ad735f06992f33823c63871f510d2d43481e712bfec6f05a29320d1cc0fbb66540a7a6412d71ab6b11c7c8b03a7b41640040c9c0dece23314d02bca48331a01de07514bd77aaee241a968e84afe32e6af8c91304224cf3557c8eb422325ce89875e3968ad26e39421481ded1a8fb5fcf002d02c15f19f2ee198e3f", @ANYRESOCT=r5], 0x30}}, 0x40840) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x79, @local, 0x2}, 0x1c) r6 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="9110ff7f00000000956088fe2000000000c49f010a3965c498ebbb3adf2d03140c4b03ffa055042048341588cd8f02dc09f2710ee4380d13bcdcc39236b280bfbc"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @private=0xa010100}, {0x306, @multicast}, 0x46, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'pimreg1\x00'}) syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="01008040000b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9fff8fef50000000000a2"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000200)=0xda, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000000)=0x48b, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) 20.77075314s ago: executing program 1 (id=1849): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xca02}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r4, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b", @ANYRES64=r1], 0x30}}, 0x4094) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x3, 0x4) socket(0x2, 0x3, 0xfffffff8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050427bd7000d434df250100000008000102", @ANYRES32=r8, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 20.61346488s ago: executing program 1 (id=1853): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x0, @dev}, 0x8, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f0000000280)=0x5cf8, 0x4) writev(r6, &(0x7f00000003c0)=[{&(0x7f00000001c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}}, 0x44840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x44000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) 19.581995747s ago: executing program 32 (id=1742): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffff001}, {}, {}, {}, {}, {}, {}, {}, {}, {0x40}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x782}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x100}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, &(0x7f0000000040)=0x4, r1, &(0x7f0000000180)=0x5, 0xe6, 0xc) socket(0xa, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911300000000000851000000200000085000000b400000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) close(r8) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettaction={0x90, 0x32, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4e36}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2b}}, {0xc, 0x1000, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000300)={'team0\x00', @random='\x00\t\x00'}) 19.066653231s ago: executing program 2 (id=1862): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000700)=0x102, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) unshare(0x6a040000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000002b00)={'syztnl1\x00', 0x0, 0x4, 0xff, 0x0, 0x7, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0x12}, 0x1, 0x10, 0x38fc5865, 0x10001}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r5 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r5, 0x61d0, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000280)={0x0, 0x0, 0x98a}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001480)={r6, "9adbfb5a05eaff1960a839014bb6b8e6"}) 18.285279234s ago: executing program 0 (id=1867): pipe(&(0x7f0000000000)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)="1005000000ff8200040647", 0xb, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x1, 0x6, @broadcast}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb75f5514b7f725ef, '\x00', r1, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff7c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0x11) 18.273860316s ago: executing program 2 (id=1868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'veth1_to_team\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@newtfilter={0x104, 0x28, 0x800, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r7, {0x10}, {0xffe0}, {0xfff1, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0xd8, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x1ac, 0x8, 0x9, 0x8001}, {0x1, 0x2, 0x4, 0x7}, {0x5, 0x8, 0x2, 0x80000001}, {0x8, 0x3, 0x9c, 0x1}, {0xf8, 0x7, 0xf, 0x2}, {0x8, 0x2, 0x8, 0x101}, {0x7ff, 0xd1, 0x8, 0xffff8000}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}, @TCA_BPF_OPS={{0x6, 0x4, 0x9}, {0x4c, 0x5, [{0x5, 0x4, 0xf5, 0xfffffffd}, {0xfff, 0x6, 0x7, 0x780}, {0x0, 0x81, 0x8, 0xfffff673}, {0xfd7, 0x0, 0x9, 0x1}, {0x8000, 0x5, 0x41, 0xd}, {0x865, 0xa6, 0xe, 0xffff}, {0x5, 0x43, 0xb, 0x5}, {0x9, 0x7, 0x1, 0xfffffffd}, {0x1a, 0x54, 0x6, 0x1}]}}, @TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3d31}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}]}}]}, 0x104}}, 0x40) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000300)={@broadcast, @random="291b4931d6cf", @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @multicast, @private2={0xfc, 0x2, '\x00', 0x1}, @random="1e535f780afb", @rand_addr=' \x01\x00'}}}}, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r14 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r14, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553) 17.954867285s ago: executing program 0 (id=1870): socket$netlink(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/185, 0xb9}, 0x8}], 0x1, 0x2000000022, 0x0) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002637850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e000000680002800600030006000000060002"], 0xa4}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000240), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x9, 0x10000, @vifc_lcl_addr=@local, @multicast1}, 0x10) unshare(0x6a040000) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) bind$rds(r7, &(0x7f0000000340)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000c80)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r10, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x18, 0x3f9, 0x58d, 0x70bd29, 0x25dfdbfd, {0x1}, ["", "", "", "", "", ""]}, 0x18}}, 0x40002) setsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r9, 0x5}, 0x8) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xfffe, 0x0, @empty, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r4, @ANYRESOCT=0x0, @ANYRESHEX=r4], 0x8b}, 0x24000050) socket$kcm(0x10, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r12, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r11], 0x38}}, 0x10) 17.910463723s ago: executing program 2 (id=1871): r0 = socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x10, 0xff, 0xfd, 0x1, 0xfe, 0x4, 0x600}, [@RTA_MARK={0x8, 0x10, 0x2}, @RTA_UID={0x8}]}, 0x2c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='xdp_devmap_xmit\x00', r5, 0x0, 0x4000000000000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbf, 0xbf, 0x7, [@enum64={0x3, 0x7, 0x0, 0x13, 0x0, 0x4, [{0x1, 0x0, 0x6}, {0xd, 0x1, 0x3}, {0xd, 0x19, 0x6c9}, {0xb, 0x6, 0x2c}, {0x10, 0x5, 0x16}, {0x2, 0x8, 0x7}, {0xe, 0x2, 0x6}]}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x5}, @datasec={0x5, 0x2, 0x0, 0xf, 0x3, [{0x5, 0x101, 0x2}, {0x4, 0x8, 0x4}], "864caa"}, @float={0x6, 0x0, 0x0, 0x10, 0x2}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x2}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x61, 0x30, 0x0, 0x0, 0x5f]}}, &(0x7f00000007c0)=""/219, 0xdf, 0xdb, 0x0, 0x400, 0x10000, @value=r6}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001600010a2dbd700003000000fd0000ba"], 0x1c}}, 0x40040) 17.854581326s ago: executing program 2 (id=1873): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071100a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3a, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @fd}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0xc000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x5c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}]}, 0x5c}}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r7, 0x89ee, &(0x7f0000000300)) sendmmsg$unix(r6, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x38, 0x4000001}}], 0x2, 0x40000) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7f, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x20000092, '\x00'/12}, {0x5, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000002000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 17.671090144s ago: executing program 2 (id=1874): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c00000052001757"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x3ff}], 0x4, 0x122, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[], 0xbc}}, 0x40) 17.670228036s ago: executing program 3 (id=1875): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x2, 0x25dfdbfc, {0x1c}}, 0x14}}, 0x4000000) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000005d40)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x3, 0x0, 0x0, {{0xbf, 0x9, 0x800}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x6, 0xa, {{0x3d, 0x4, 0x0, 0x2, 0xf4, 0x65, 0x0, 0x80, 0x6, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x68, 0x3, [{0x6, 0x6, "ce4eaf6d"}, {0x1, 0xe, "fb87067a6ab0790d0df69484"}, {0x2, 0xd, "c05b0af82d2ef746841093"}, {0x2, 0x6, "9bdcf42e"}, {0x5, 0xf, "deed244fa4516f83d0c2dbf057"}, {0x7, 0x8, "97b88397be68"}, {0x1, 0xd, "e8ed8db487d8d87b1bc0ad"}, {0x5, 0xc, "9de655f55cb5f523e968"}, {0x7, 0x2}, {0x5, 0x9, "0fbcc62d1838fb"}]}, @cipso={0x86, 0x73, 0x3, [{0x7, 0xb, "9280aee896ba09032a"}, {0x6, 0xe, "7cadbda5d63170d8793d387f"}, {0x1, 0xe, "9b27c46cfcfaabed8b00b237"}, {0x7, 0x9, "c9b18678cbfaeb"}, {0x5, 0x3, 'q'}, {0x5, 0xb, "a2d9dbc6dca4561b35"}, {0x6, 0x10, "a50c7573584bc924645005cbbddb"}, {0x0, 0xe, "b388a46965a364d81f048af4"}, {0x0, 0x2}, {0x6, 0xf, "2c04ec600b660deceef6fdba56"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r12}, @IFLA_HSR_SLAVE2={0x8, 0x2, r12}]}}}]}, 0x40}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x806a, 0x28, {{0xd, 0x4, 0x1, 0x3a, 0x34, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_addr={0x44, 0x1c, 0x53, 0x1, 0xc, [{@loopback, 0x70e}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x9}]}]}}}}}) (async) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) (async) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r18 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r17, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r18, r15, 0x25, 0x2, @val=@tcx}, 0x1c) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x168, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x44}, 0x20000941) r19 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11000009}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa2c806554a5bb67b, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r19}, 0x10) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r1, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x10}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r20, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) 17.538558695s ago: executing program 3 (id=1876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0x202}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0x7}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40800) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x84, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x20}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x3, 0x5, {{0x1e, 0x4, 0x2, 0x7, 0x78, 0x65, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@generic={0x44, 0x9, "f48df522502f2a"}, @generic={0x7, 0x12, "8f25b485c960c1887e090968a7a165ad"}, @end, @timestamp={0x44, 0x1c, 0x76, 0x0, 0x2, [0x80, 0x0, 0x99a4, 0x0, 0x0, 0x1]}, @end, @generic={0x83, 0x11, "10038896f2b8259aa5325ec7e66ac2"}, @ssrr={0x89, 0xb, 0xdd, [@empty, @loopback]}, @generic={0x44, 0xf, "5b367e178c566a5d1e903c150d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000400)={@loopback, 0x0}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r13 = socket$unix(0x1, 0x1, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x2, 0x8, 0x4a, @private1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x80, 0x8000, 0x2, 0x181}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000006c0)={@multicast2, @empty, 0x0}, &(0x7f0000000700)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000740)={'ip_vti0\x00', 0x0, 0x8000, 0x40, 0x5, 0xfffffffc, {{0x4a, 0x4, 0x3, 0x2f, 0x128, 0x68, 0x0, 0x21, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x98, 0x1, 0x9, [{@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x7fff}]}, @timestamp={0x44, 0x10, 0xd1, 0x0, 0x1, [0xffffff00, 0x9, 0x2]}, @timestamp_prespec={0x44, 0x2c, 0xcb, 0x3, 0x4, [{@remote, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@multicast1, 0x5}, {@private=0xa010100, 0x9}, {@loopback, 0x10000}]}, @rr={0x7, 0xb, 0x74, [@private=0xa010101, @local]}, @timestamp_prespec={0x44, 0x44, 0xa2, 0x3, 0x1, [{@empty, 0x6}, {@remote, 0x2000000}, {@rand_addr=0x64010100, 0x3}, {@private=0xa010100, 0x800}, {@loopback, 0x6}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fffffff}, {@rand_addr=0x64010101, 0xc15}]}, @rr={0x7, 0x1f, 0x20, [@dev={0xac, 0x14, 0x14, 0x35}, @loopback, @multicast1, @remote, @multicast2, @multicast2, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x24, 0x72, 0x3, 0x4, [{@loopback, 0xff}, {@loopback, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1dd2bddd}]}, @noop, @noop, @lsrr={0x83, 0x27, 0x48, [@dev={0xac, 0x14, 0x14, 0xc}, @remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @empty, @remote, @broadcast, @private=0xa010100]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1f0, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4c001}, 0x4000) 17.53784258s ago: executing program 2 (id=1877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x7d, &(0x7f0000001080)={r4, 0x7}, &(0x7f00000010c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x7d, &(0x7f0000001080)={r4, 0x7}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x81}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={r4, 0x3f, 0x2, 0xc, 0x40, 0x2d, 0x1, 0xf7f9, {r5, @in6={{0xa, 0x4e24, 0x9, @private0, 0x601}}, 0x81, 0xa48, 0x2, 0x2, 0x6}}, &(0x7f0000000280)=0xb0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x4000b}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) 17.285159425s ago: executing program 0 (id=1878): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r0}, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000008, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000240)=0x2, 0x4) syz_init_net_socket$ax25(0x3, 0x3, 0x7) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000080), 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, 0x0) close(r2) 17.179102727s ago: executing program 0 (id=1879): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1804000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5352c89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73249d45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd49453b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6841cfb5}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x114, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x9c, 0xa8, @random="28f37fad818a2c6394bce0b0e07726079e49f8f1ddbb72215858c0dfed0689590748e7cf1f9633b5451186e93cd5a4eaf1e3ebc9ff58090d079aed5e8d298e77a973c6254394609875d15f146aea944f4927becc95af83f995ed1941eae5c5ee9572e22aad723ddd1e92c77356e5c938b28b6a8a53aca75ff387f8933fc40018b3106a5ee577c2940718fa4817d2a38a3a53cfcd8e0f34ce"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffffb}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000410}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.178338264s ago: executing program 3 (id=1880): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, 0x0, &(0x7f0000000040)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e24, 0xbc9f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x2, 0x0}}, 0xff}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000300)={r7, 0x25bc, 0x5, 0x8, 0x1, 0x3}, &(0x7f0000000780)=0x14) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7, 0x0, 0x20, 0x0, @in={0x2, 0x0, @empty}}]}, 0x28}, 0x1, 0x7}, 0x0) r8 = socket(0xa, 0x3, 0x3a) connect$qrtr(r8, &(0x7f0000000200)={0x2a, 0xffffffff00000007, 0x25d4283d975b53f0}, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_delrule={0x50, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x10, 0x7, 0x4, 0x0, 0x0, 0x3, 0x10010}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, r12}}]}, 0x50}}, 0x4850) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newpolicy={0x264, 0x13, 0x8, 0x70bd25, 0x25dfdbfd, {{@in6=@empty, @in6=@mcast1, 0x4e24, 0x4, 0x4e24, 0x0, 0xf, 0x20, 0x20, 0x32, r2, r12}, {0x1, 0xb, 0x5, 0x7c75, 0x8, 0x9, 0x8, 0xffff}, {0x5, 0x1, 0x1ff, 0x5531}, 0xc, 0x6e6bb7, 0x2, 0x1, 0x2, 0x1}, [@tfcpad={0x8, 0x16, 0x7}, @srcaddr={0x14, 0xd, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @policy_type={0xa}, @tmpl={0x184, 0x5, [{{@in=@multicast1, 0x4d5, 0x2b}, 0xa, @in=@broadcast, 0x0, 0x4, 0x2, 0x6, 0x10000, 0x800, 0x8}, {{@in6=@mcast2, 0x4d4, 0x6c}, 0x2, @in=@private=0xa010100, 0x34ff, 0x1, 0x3, 0x5, 0x5, 0x120, 0x4}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x3c}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x4, 0x3, 0x1, 0x1, 0x7fffffff, 0x7}, {{@in6=@private1, 0x4d5, 0xf4}, 0xa, @in=@broadcast, 0x3504, 0x4, 0x3, 0x0, 0x7ff, 0x4}, {{@in6=@mcast2, 0x4d4, 0xff}, 0x2, @in=@remote, 0x3505, 0x3, 0x0, 0xe9, 0xffffff01, 0x395, 0x6}, {{@in=@loopback, 0x4d6, 0x6c}, 0x2, @in6=@remote, 0x3504, 0x0, 0x3, 0x18, 0x5, 0x1ff, 0x1}]}]}, 0x264}}, 0x810) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="a37371b422bac21d8900556a8c3332d201cdfca2fc0e93472c1bfb7a243f60101510db1350c82e963477c4b0f79d7151f4ad71489a2016b2ae409d910f09e297ec6a682ffeb0c7a1a4baa7dc808435c0e322a292d4beca3641380d1608c42a9ef63e7a85faedcf", @ANYRESOCT=r9, @ANYRESOCT=r9, @ANYRES64=r1], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x800000, 0x0, 0x0, 0xb, 0x1}]}}, &(0x7f0000001b80)=""/4076, 0x26, 0xfec, 0xa}, 0x28) 17.137067772s ago: executing program 0 (id=1881): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000", @ANYRES16, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32, @ANYBLOB="040013000600120004000000060010"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f00004a1000/0x3000)=nil, 0x3000, 0x300000c, 0x11, r3, 0x631ea000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r9, 0xb4807000) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r10}, 0xa, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}, 0x1, 0x0, 0x0, 0x24000001}, 0x44001) socket$inet6_mptcp(0xa, 0x1, 0x106) 17.004319917s ago: executing program 0 (id=1882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, 0x0, 0x0, 0x0) shutdown(r8, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.937773509s ago: executing program 3 (id=1883): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a00", @ANYRES32=0x0, @ANYBLOB="0000000000b47d619900000000000014000100fc000000000000000000000000000001000000000000000000"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r1, 0x6e566000) sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000005900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000e00000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x1, 0x8}, 0x28) socket$tipc(0x1e, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$int_out(r5, 0x5460, &(0x7f0000000080)) unshare(0x2a020400) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 16.564207389s ago: executing program 3 (id=1884): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x2e, 0x61, 0x2e, 0x20]}}, 0x0, 0x32, 0x0, 0x1, 0x7}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)='%', 0x0, 0x7fffffff, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r2, 0x1, 0x38, 0x0, &(0x7f0000001700)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="2498945ddd7957e426403f54f650c8602890a4a42866531bcb93b233a388d930f9a200641aff33eb649a354c8df4c3356d2b8a401a1f64a63b4d9dae7a2fcfb96f3326332a2812d097f578d1ea1e7fc052e379cc0988b9c63d07beaa75cf54a543b841aa660e79836902ffc8dbe45acfd2e00b52c946c49eff2288d5a539856c181ab6c174591d34df46eed3b634ca127acd190cf640dd8002bff49c893cf8f77638f6701326da0df8bfd34d1ee5ea", @ANYBLOB="0100000000000000300001000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x4c01c) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 15.655123609s ago: executing program 3 (id=1885): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006009000000000000000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc500000000c0a010100000000000000000a0000060900020073797a3100faff000900010073797a310000000024000380100000800c00018006000100d10300000c000080080003400000000204000080140000001100010000000000000000000100000a"], 0xb4}}, 0x40) close(r2) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xfc0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000180)={r5, 0x1, 0x6, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8427000000000000140003006e657464657673696d3000000000000008002900449d00001800168014000180100006"], 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x4804) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8848, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) close(0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) 5.534277937s ago: executing program 33 (id=1853): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x0, @dev}, 0x8, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f0000000280)=0x5cf8, 0x4) writev(r6, &(0x7f00000003c0)=[{&(0x7f00000001c0)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}}, 0x44840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x44000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) 2.022877535s ago: executing program 34 (id=1877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x7d, &(0x7f0000001080)={r4, 0x7}, &(0x7f00000010c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x7d, &(0x7f0000001080)={r4, 0x7}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x81}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={r4, 0x3f, 0x2, 0xc, 0x40, 0x2d, 0x1, 0xf7f9, {r5, @in6={{0xa, 0x4e24, 0x9, @private0, 0x601}}, 0x81, 0xa48, 0x2, 0x2, 0x6}}, &(0x7f0000000280)=0xb0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x4000b}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) 1.019223311s ago: executing program 35 (id=1882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, 0x0, 0x0, 0x0) shutdown(r8, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 36 (id=1885): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006009000000000000000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc500000000c0a010100000000000000000a0000060900020073797a3100faff000900010073797a310000000024000380100000800c00018006000100d10300000c000080080003400000000204000080140000001100010000000000000000000100000a"], 0xb4}}, 0x40) close(r2) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xfc0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000180)={r5, 0x1, 0x6, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8427000000000000140003006e657464657673696d3000000000000008002900449d00001800168014000180100006"], 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x4804) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8848, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) close(0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) kernel console output (not intermixed with test programs): ttributes in process `syz.1.617'. [ 137.947018][ T8356] veth0_vlan: left promiscuous mode [ 139.426555][ T8404] tipc: Enabling of bearer rejected, failed to enable media [ 139.491942][ T8408] __nla_validate_parse: 1 callbacks suppressed [ 139.491962][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.639'. [ 139.666110][ T8419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.641'. [ 139.676338][ T8418] netlink: 'syz.0.640': attribute type 10 has an invalid length. [ 139.806080][ T8429] netlink: 36 bytes leftover after parsing attributes in process `syz.3.644'. [ 140.298039][ T8464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.650'. [ 140.341514][ T8467] netlink: 'syz.4.652': attribute type 1 has an invalid length. [ 140.375950][ T8453] vlan2: entered allmulticast mode [ 140.466237][ T8467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.522802][ T8470] bond1: (slave gretap1): making interface the new active one [ 140.534133][ T8470] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 140.852918][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 140.888735][ T8493] veth1_macvtap: left promiscuous mode [ 141.014769][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 141.236649][ T8500] dummy0: left allmulticast mode [ 141.271134][ T8500] bridge0: port 3(dummy0) entered disabled state [ 141.294198][ T8500] bridge_slave_1: left allmulticast mode [ 141.301477][ T8500] bridge_slave_1: left promiscuous mode [ 141.308319][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.332162][ T8500] bridge_slave_0: left promiscuous mode [ 141.351542][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.937934][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 142.054984][ T8549] netlink: 200 bytes leftover after parsing attributes in process `syz.1.670'. [ 142.150629][ T8554] netlink: 'syz.0.671': attribute type 13 has an invalid length. [ 142.173942][ T8554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.394111][ T8550] infiniband syz1: set active [ 142.402274][ T8550] infiniband syz1: added bond0 [ 142.439012][ T8561] vlan2: entered allmulticast mode [ 142.463325][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 142.478384][ T8550] RDS/IB: syz1: added [ 142.791729][ T8575] xt_HMARK: spi-set and port-set can't be combined [ 143.370662][ T8590] netlink: 'syz.2.684': attribute type 13 has an invalid length. [ 143.399217][ T8590] netlink: 'syz.2.684': attribute type 17 has an invalid length. [ 143.449201][ T8590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.500441][ T8593] vlan2: entered allmulticast mode [ 143.605240][ T8590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.640715][ T8596] netlink: 'syz.4.687': attribute type 13 has an invalid length. [ 143.660242][ T8596] netlink: 'syz.4.687': attribute type 17 has an invalid length. [ 143.704499][ T8590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.729323][ T8596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.057867][ T8606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.691'. [ 144.218818][ T8612] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 144.331128][ T8594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.502081][ T8621] __nla_validate_parse: 1 callbacks suppressed [ 144.502099][ T8621] netlink: 28 bytes leftover after parsing attributes in process `syz.3.696'. [ 144.743282][ T8628] IPVS: Unknown mcast interface: bridge0 [ 144.852062][ T8633] vlan2: entered allmulticast mode [ 144.956131][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 145.008325][ T8638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.086695][ T8641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.705'. [ 145.322253][ T8652] pim6reg: entered allmulticast mode [ 145.343087][ T8653] pim6reg: left allmulticast mode [ 146.045230][ T8677] vlan2: entered allmulticast mode [ 146.739634][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 146.789409][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 146.945546][ T8720] netlink: 64 bytes leftover after parsing attributes in process `syz.0.725'. [ 146.970941][ T8724] macvlan2: entered promiscuous mode [ 146.989624][ T8724] syz_tun: entered promiscuous mode [ 147.012047][ T8724] team0: Port device macvlan2 added [ 147.161953][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.727'. [ 147.211788][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.727'. [ 147.661754][ T8760] netlink: 19 bytes leftover after parsing attributes in process `syz.4.734'. [ 147.739312][ T8760] macvlan1: entered promiscuous mode [ 147.753027][ T8760] macvlan1: left promiscuous mode [ 148.121844][ T8780] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 148.143465][ T8780] netlink: 228 bytes leftover after parsing attributes in process `syz.4.738'. [ 148.797997][ T8810] netlink: 'syz.2.743': attribute type 21 has an invalid length. [ 148.847830][ T8810] netlink: 'syz.2.743': attribute type 22 has an invalid length. [ 148.870697][ T8810] netlink: 'syz.2.743': attribute type 23 has an invalid length. [ 148.922556][ T8810] netlink: 'syz.2.743': attribute type 25 has an invalid length. [ 149.165043][ T8822] bond4: entered promiscuous mode [ 149.171580][ T8822] bond4: entered allmulticast mode [ 149.178898][ T8822] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.648397][ T8852] __nla_validate_parse: 5 callbacks suppressed [ 149.648416][ T8852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.753'. [ 149.815324][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.752'. [ 150.203317][ T8866] vlan2: entered allmulticast mode [ 150.511974][ T8882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.762'. [ 150.604700][ T8882] vlan1: entered allmulticast mode [ 150.610394][ T8882] dummy0: entered allmulticast mode [ 150.686265][ T8900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.765'. [ 151.284370][ T8930] vlan2: entered allmulticast mode [ 151.374041][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.774'. [ 151.798142][ T8952] netlink: 40 bytes leftover after parsing attributes in process `syz.0.778'. [ 152.280892][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'. [ 152.318975][ T8970] netlink: 'syz.3.783': attribute type 4 has an invalid length. [ 152.332346][ T8970] netlink: 15586 bytes leftover after parsing attributes in process `syz.3.783'. [ 152.470666][ T8969] bridge_slave_1: left allmulticast mode [ 152.476348][ T8969] bridge_slave_1: left promiscuous mode [ 152.503393][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.563321][ T8969] bridge_slave_0: left promiscuous mode [ 152.572822][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.706669][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.783'. [ 153.003953][ T8984] hsr_slave_0: left promiscuous mode [ 153.029504][ T8984] hsr_slave_1: left promiscuous mode [ 153.108436][ T8967] syzkaller1: entered promiscuous mode [ 153.118358][ T8967] syzkaller1: entered allmulticast mode [ 153.464428][ T8998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.785'. [ 153.522389][ T8998] netlink: 'syz.0.785': attribute type 4 has an invalid length. [ 155.060557][ T9054] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 155.456139][ T9072] __nla_validate_parse: 3 callbacks suppressed [ 155.456158][ T9072] netlink: 20 bytes leftover after parsing attributes in process `syz.1.800'. [ 155.842703][ T9090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.805'. [ 155.951404][ T9094] netlink: 'syz.1.804': attribute type 1 has an invalid length. [ 155.961377][ T9094] netlink: 140 bytes leftover after parsing attributes in process `syz.1.804'. [ 155.978209][ T9094] netlink: 96 bytes leftover after parsing attributes in process `syz.1.804'. [ 156.270130][ T9103] netlink: 40 bytes leftover after parsing attributes in process `syz.4.808'. [ 156.326527][ T9103] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.393257][ T9103] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.454867][ T9103] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.593718][ T9103] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.974250][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.985612][ T9114] netlink: 'syz.1.809': attribute type 8 has an invalid length. [ 157.123846][ T1341] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.198759][ T1341] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.287955][ T1341] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.412772][ T9124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.466059][ T9128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.813'. [ 157.468579][ T9124] netlink: 'syz.1.815': attribute type 4 has an invalid length. [ 157.504833][ T9132] netlink: 48 bytes leftover after parsing attributes in process `syz.0.816'. [ 157.706126][ T9132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.816'. [ 157.921724][ T9146] vlan2: entered allmulticast mode [ 157.947173][ T9146] bridge_slave_0: entered allmulticast mode [ 157.963303][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 158.114131][ T9156] netlink: 'syz.2.824': attribute type 6 has an invalid length. [ 158.149602][ T9160] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.825'. [ 158.271904][ T9162] veth0: entered promiscuous mode [ 158.286129][ T9162] veth0: entered allmulticast mode [ 159.467661][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 159.507842][ T9197] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 160.574963][ T9232] __nla_validate_parse: 2 callbacks suppressed [ 160.574981][ T9232] netlink: 40 bytes leftover after parsing attributes in process `syz.4.842'. [ 160.661264][ T9232] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.032703][ T9232] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.239279][ T9245] netlink: 'syz.1.841': attribute type 6 has an invalid length. [ 161.546087][ T9232] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.684610][ T9232] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.106806][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.123093][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.230222][ T1150] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.327435][ T1150] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.359260][ T9289] netlink: 'syz.3.852': attribute type 42 has an invalid length. [ 162.379147][ T9289] IPVS: length: 141 != 8 [ 162.398925][ T9289] netlink: 'syz.3.852': attribute type 42 has an invalid length. [ 162.624362][ T9301] netlink: 60 bytes leftover after parsing attributes in process `syz.3.854'. [ 163.075046][ T9332] netlink: 20 bytes leftover after parsing attributes in process `syz.3.860'. [ 163.098631][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.860'. [ 163.125158][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 163.343692][ T9341] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 163.542323][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 163.567820][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.866'. [ 163.624028][ T9356] pim6reg99999999: entered allmulticast mode [ 163.646630][ T9355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.865'. [ 163.704721][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.867'. [ 163.714432][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.867'. [ 164.226404][ T1160] nci: nci_ntf_packet: unknown ntf opcode 0x21 [ 164.450970][ T9377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.993245][ T9401] bond0: (slave vlan2): Opening slave failed [ 166.019636][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.030410][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.068374][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.096326][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.237961][ T9434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.347141][ T9430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.375849][ T9433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.612118][ T9462] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 168.058917][ T9520] netlink: 'syz.1.903': attribute type 10 has an invalid length. [ 168.098144][ T9520] netlink: 'syz.1.903': attribute type 10 has an invalid length. [ 168.155437][ T9520] team0: Port device dummy0 removed [ 168.204012][ T9520] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 169.293786][ T9556] __nla_validate_parse: 6 callbacks suppressed [ 169.293804][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 169.585792][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 169.774238][ T9577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.918'. [ 169.786236][ T9577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.918'. [ 170.052565][ T9592] netlink: 64 bytes leftover after parsing attributes in process `syz.3.920'. [ 170.175504][ T9598] tipc: Enabled bearer , priority 0 [ 170.204779][ T9599] vlan2: entered allmulticast mode [ 170.263152][ T9598] tipc: Disabling bearer [ 170.385669][ T9603] netlink: 'syz.0.925': attribute type 1 has an invalid length. [ 170.408133][ T9603] netlink: 244 bytes leftover after parsing attributes in process `syz.0.925'. [ 170.436554][ T9606] netlink: 'syz.0.925': attribute type 1 has an invalid length. [ 170.452523][ T9606] netlink: 244 bytes leftover after parsing attributes in process `syz.0.925'. [ 171.099166][ T9625] netlink: 248 bytes leftover after parsing attributes in process `syz.2.930'. [ 171.615903][ T9642] netlink: 'syz.0.935': attribute type 13 has an invalid length. [ 171.623767][ T9642] netlink: 'syz.0.935': attribute type 17 has an invalid length. [ 171.650583][ T9642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.792689][ T9648] netlink: 844 bytes leftover after parsing attributes in process `syz.1.937'. [ 171.929084][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 172.615328][ T9686] FAULT_INJECTION: forcing a failure. [ 172.615328][ T9686] name failslab, interval 1, probability 0, space 0, times 1 [ 172.634256][ T9686] CPU: 1 UID: 0 PID: 9686 Comm: syz.2.949 Not tainted syzkaller #0 PREEMPT(full) [ 172.634282][ T9686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 172.634298][ T9686] Call Trace: [ 172.634309][ T9686] [ 172.634318][ T9686] dump_stack_lvl+0x189/0x250 [ 172.634351][ T9686] ? __pfx____ratelimit+0x10/0x10 [ 172.634373][ T9686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.634394][ T9686] ? __pfx__printk+0x10/0x10 [ 172.634421][ T9686] ? __lock_acquire+0xab9/0xd20 [ 172.634460][ T9686] should_fail_ex+0x414/0x560 [ 172.634493][ T9686] should_failslab+0xa8/0x100 [ 172.634521][ T9686] kmem_cache_alloc_noprof+0x73/0x3c0 [ 172.634545][ T9686] ? skb_clone+0x212/0x3a0 [ 172.634580][ T9686] skb_clone+0x212/0x3a0 [ 172.634611][ T9686] __netlink_deliver_tap+0x404/0x850 [ 172.634653][ T9686] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.634677][ T9686] netlink_deliver_tap+0x19c/0x1b0 [ 172.634701][ T9686] netlink_unicast+0x7fa/0x9e0 [ 172.634731][ T9686] ? __pfx_netlink_unicast+0x10/0x10 [ 172.634754][ T9686] ? netlink_sendmsg+0x642/0xb30 [ 172.634774][ T9686] ? skb_put+0x11b/0x210 [ 172.634802][ T9686] netlink_sendmsg+0x805/0xb30 [ 172.634836][ T9686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.634863][ T9686] ? aa_sock_msg_perm+0xf1/0x1d0 [ 172.634894][ T9686] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.634913][ T9686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.634935][ T9686] __sock_sendmsg+0x21c/0x270 [ 172.634969][ T9686] ____sys_sendmsg+0x505/0x830 [ 172.635000][ T9686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.635037][ T9686] ? import_iovec+0x74/0xa0 [ 172.635065][ T9686] ___sys_sendmsg+0x21f/0x2a0 [ 172.635094][ T9686] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.635161][ T9686] ? __fget_files+0x2a/0x420 [ 172.635187][ T9686] ? __fget_files+0x3a0/0x420 [ 172.635228][ T9686] __x64_sys_sendmsg+0x19b/0x260 [ 172.635257][ T9686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.635294][ T9686] ? __pfx_ksys_write+0x10/0x10 [ 172.635316][ T9686] ? rcu_is_watching+0x15/0xb0 [ 172.635340][ T9686] ? do_syscall_64+0xbe/0x3b0 [ 172.635367][ T9686] do_syscall_64+0xfa/0x3b0 [ 172.635387][ T9686] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.635408][ T9686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.635427][ T9686] ? clear_bhb_loop+0x60/0xb0 [ 172.635451][ T9686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.635470][ T9686] RIP: 0033:0x7f76aad8eec9 [ 172.635492][ T9686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.635509][ T9686] RSP: 002b:00007f76abc90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.635532][ T9686] RAX: ffffffffffffffda RBX: 00007f76aafe5fa0 RCX: 00007f76aad8eec9 [ 172.635547][ T9686] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 172.635559][ T9686] RBP: 00007f76abc90090 R08: 0000000000000000 R09: 0000000000000000 [ 172.635571][ T9686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.635583][ T9686] R13: 00007f76aafe6038 R14: 00007f76aafe5fa0 R15: 00007fffae685698 [ 172.635617][ T9686] [ 172.948974][ T9684] vlan2: entered allmulticast mode [ 173.432585][ T9707] netlink: 'syz.0.957': attribute type 1 has an invalid length. [ 173.586666][ T9713] netlink: 'syz.4.959': attribute type 6 has an invalid length. [ 173.796443][ T9728] FAULT_INJECTION: forcing a failure. [ 173.796443][ T9728] name failslab, interval 1, probability 0, space 0, times 0 [ 173.821620][ T9728] CPU: 0 UID: 0 PID: 9728 Comm: syz.3.963 Not tainted syzkaller #0 PREEMPT(full) [ 173.821646][ T9728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 173.821660][ T9728] Call Trace: [ 173.821668][ T9728] [ 173.821676][ T9728] dump_stack_lvl+0x189/0x250 [ 173.821702][ T9728] ? __pfx____ratelimit+0x10/0x10 [ 173.821722][ T9728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.821744][ T9728] ? __pfx__printk+0x10/0x10 [ 173.821774][ T9728] ? __pfx___might_resched+0x10/0x10 [ 173.821801][ T9728] ? fs_reclaim_acquire+0x7d/0x100 [ 173.821835][ T9728] should_fail_ex+0x414/0x560 [ 173.821868][ T9728] should_failslab+0xa8/0x100 [ 173.821896][ T9728] __kmalloc_cache_noprof+0x70/0x3d0 [ 173.821919][ T9728] ? ip_set_create+0x348/0x1940 [ 173.821953][ T9728] ip_set_create+0x348/0x1940 [ 173.821992][ T9728] ? __mutex_lock+0x335/0x1350 [ 173.822018][ T9728] ? __pfx_ip_set_create+0x10/0x10 [ 173.822087][ T9728] nfnetlink_rcv_msg+0xb4a/0x1130 [ 173.822108][ T9728] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 173.822147][ T9728] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 173.822164][ T9728] ? __schedule+0x17ae/0x4cc0 [ 173.822210][ T9728] ? __pfx___schedule+0x10/0x10 [ 173.822250][ T9728] netlink_rcv_skb+0x205/0x470 [ 173.822272][ T9728] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 173.822299][ T9728] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 173.822329][ T9728] ? bpf_lsm_capable+0x9/0x20 [ 173.822350][ T9728] ? security_capable+0x7e/0x2e0 [ 173.822382][ T9728] nfnetlink_rcv+0x282/0x2590 [ 173.822403][ T9728] ? __dev_queue_xmit+0x27b/0x3b50 [ 173.822428][ T9728] ? __dev_queue_xmit+0x1d79/0x3b50 [ 173.822468][ T9728] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 173.822487][ T9728] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.822509][ T9728] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 173.822527][ T9728] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 173.822547][ T9728] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 173.822572][ T9728] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 173.822615][ T9728] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 173.822648][ T9728] ? rcu_is_watching+0x15/0xb0 [ 173.822669][ T9728] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 173.822696][ T9728] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 173.822719][ T9728] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.822747][ T9728] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.822776][ T9728] netlink_unicast+0x82f/0x9e0 [ 173.822803][ T9728] ? __pfx_netlink_unicast+0x10/0x10 [ 173.822824][ T9728] ? netlink_sendmsg+0x642/0xb30 [ 173.822844][ T9728] ? skb_put+0x11b/0x210 [ 173.822871][ T9728] netlink_sendmsg+0x805/0xb30 [ 173.822904][ T9728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.822931][ T9728] ? aa_sock_msg_perm+0xf1/0x1d0 [ 173.822963][ T9728] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.822982][ T9728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.823006][ T9728] __sock_sendmsg+0x21c/0x270 [ 173.823040][ T9728] ____sys_sendmsg+0x505/0x830 [ 173.823072][ T9728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.823108][ T9728] ? import_iovec+0x74/0xa0 [ 173.823136][ T9728] ___sys_sendmsg+0x21f/0x2a0 [ 173.823165][ T9728] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.823232][ T9728] ? __fget_files+0x2a/0x420 [ 173.823259][ T9728] ? __fget_files+0x3a0/0x420 [ 173.823307][ T9728] __x64_sys_sendmsg+0x19b/0x260 [ 173.823335][ T9728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.823372][ T9728] ? __pfx_ksys_write+0x10/0x10 [ 173.823394][ T9728] ? rcu_is_watching+0x15/0xb0 [ 173.823417][ T9728] ? do_syscall_64+0xbe/0x3b0 [ 173.823443][ T9728] do_syscall_64+0xfa/0x3b0 [ 173.823464][ T9728] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.823484][ T9728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.823503][ T9728] ? clear_bhb_loop+0x60/0xb0 [ 173.823526][ T9728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.823544][ T9728] RIP: 0033:0x7f038b18eec9 [ 173.823562][ T9728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.823578][ T9728] RSP: 002b:00007f038bf79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.823598][ T9728] RAX: ffffffffffffffda RBX: 00007f038b3e5fa0 RCX: 00007f038b18eec9 [ 173.823613][ T9728] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 173.823625][ T9728] RBP: 00007f038bf79090 R08: 0000000000000000 R09: 0000000000000000 [ 173.823637][ T9728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.823648][ T9728] R13: 00007f038b3e6038 R14: 00007f038b3e5fa0 R15: 00007ffea19ffc98 [ 173.823681][ T9728] [ 174.330978][ T9734] netlink: 'syz.4.966': attribute type 3 has an invalid length. [ 174.541689][ T9731] __nla_validate_parse: 2 callbacks suppressed [ 174.541708][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 174.561706][ T9745] netlink: 64 bytes leftover after parsing attributes in process `syz.3.965'. [ 175.061908][ T5874] block nbd0: Receive control failed (result -32) [ 175.473795][ T9776] netlink: 'syz.3.973': attribute type 1 has an invalid length. [ 175.546313][ T9776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.704834][ T9789] netlink: 'syz.0.981': attribute type 4 has an invalid length. [ 175.728936][ T9789] netlink: 'syz.0.981': attribute type 4 has an invalid length. [ 175.852062][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'. [ 175.863906][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'. [ 175.950101][ T9810] vlan2: entered allmulticast mode [ 175.983784][ T9812] netlink: 64 bytes leftover after parsing attributes in process `syz.3.984'. [ 176.105430][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 176.244590][ T9823] netlink: 32 bytes leftover after parsing attributes in process `syz.2.990'. [ 176.450143][ T9838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.996'. [ 176.525482][ T9844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.998'. [ 176.875941][ T9872] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1006'. [ 177.819477][ T9909] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 177.916915][ T9913] xfrm1: entered allmulticast mode [ 178.230380][ T9928] netlink: 'syz.1.1020': attribute type 1 has an invalid length. [ 179.957037][T10010] __nla_validate_parse: 11 callbacks suppressed [ 179.957056][T10010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1043'. [ 180.369093][T10039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1051'. [ 180.604385][T10053] syzkaller1: entered promiscuous mode [ 180.611663][T10053] syzkaller1: entered allmulticast mode [ 180.662121][T10060] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 180.671680][T10059] tipc: Enabling of bearer rejected, failed to enable media [ 180.736060][T10063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1058'. [ 180.768819][T10066] syzkaller0: entered promiscuous mode [ 180.774583][T10066] syzkaller0: entered allmulticast mode [ 180.831996][T10070] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1061'. [ 180.914004][T10074] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1062'. [ 180.926288][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 180.939852][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 181.032175][T10080] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1066'. [ 181.060154][T10082] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1064'. [ 181.072436][T10082] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1064'. [ 181.095214][T10084] 8021q: VLANs not supported on sit0 [ 181.453053][T10102] netlink: 'syz.1.1073': attribute type 8 has an invalid length. [ 181.790475][T10117] bridge_slave_1: left allmulticast mode [ 181.796194][T10117] bridge_slave_1: left promiscuous mode [ 181.828289][T10117] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.849121][T10117] bridge_slave_0: left promiscuous mode [ 181.857983][T10117] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.641082][T10157] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 185.014073][T10191] pimreg: entered allmulticast mode [ 185.087019][T10196] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 185.392398][T10201] __nla_validate_parse: 8 callbacks suppressed [ 185.392419][T10201] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1099'. [ 185.436954][T10201] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1099'. [ 185.942489][T10212] IPVS: Error connecting to the multicast addr [ 186.059959][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1103'. [ 186.195029][T10223] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1105'. [ 186.246484][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 186.279284][T10223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1105'. [ 186.317762][T10223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1105'. [ 186.378078][T10230] macsec1: entered promiscuous mode [ 186.401043][T10230] bridge0: entered promiscuous mode [ 186.482500][T10237] netlink: 'syz.0.1108': attribute type 10 has an invalid length. [ 186.500524][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1108'. [ 186.554238][T10240] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 186.795235][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 186.852884][T10255] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 186.883616][T10260] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 186.902217][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1114'. [ 187.970519][T10321] syz_tun: entered allmulticast mode [ 187.985454][T10321] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.009874][T10321] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 188.125999][T10325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.313477][T10331] syzkaller1: entered promiscuous mode [ 188.331438][T10331] syzkaller1: entered allmulticast mode [ 188.380981][T10317] syz_tun: left allmulticast mode [ 188.792197][T10367] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 188.819364][T10369] netlink: 'syz.4.1141': attribute type 13 has an invalid length. [ 188.832280][T10369] netlink: 'syz.4.1141': attribute type 17 has an invalid length. [ 188.958619][T10369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.976714][T10369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.426464][T10427] __nla_validate_parse: 8 callbacks suppressed [ 191.426484][T10427] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1157'. [ 191.474293][T10427] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.611796][T10427] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.706874][T10427] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.815344][T10427] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.877729][T10442] netlink: 'syz.1.1163': attribute type 1 has an invalid length. [ 191.885503][T10442] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1163'. [ 192.030638][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 192.266484][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.332414][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.355878][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.381235][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.682496][T10451] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1166'. [ 193.100251][T10471] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 193.513616][T10484] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1176'. [ 193.534110][T10484] ..1·: renamed from ..0· (while UP) [ 193.546641][T10484] A link change request failed with some changes committed already. Interface ..1· may have been left with an inconsistent configuration, please check. [ 193.706115][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 194.226883][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 194.529723][T10518] syz.3.1187 uses old SIOCAX25GETINFO [ 194.823848][T10524] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.847873][T10523] macvlan3: entered promiscuous mode [ 194.853196][T10523] macvlan3: entered allmulticast mode [ 194.861296][T10523] bond2: entered promiscuous mode [ 194.866887][T10523] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 194.876029][T10523] bond2: left promiscuous mode [ 195.352403][T10534] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.380153][T10539] netlink: 'syz.1.1193': attribute type 11 has an invalid length. [ 195.428696][T10534] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1193'. [ 195.780142][T10559] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1202'. [ 195.850531][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 195.974453][T10568] netlink: 'syz.2.1204': attribute type 23 has an invalid length. [ 196.265867][T10584] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 196.325130][T10585] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 196.840543][T10603] __nla_validate_parse: 2 callbacks suppressed [ 196.840564][T10603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1214'. [ 196.970083][T10609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1216'. [ 196.997776][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1216'. [ 197.410098][T10605] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.566253][T10605] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.693236][T10605] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.789327][T10623] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1222'. [ 197.803780][T10605] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.075738][ T6990] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.103197][T10630] FAULT_INJECTION: forcing a failure. [ 198.103197][T10630] name failslab, interval 1, probability 0, space 0, times 0 [ 198.123277][T10630] CPU: 0 UID: 0 PID: 10630 Comm: syz.0.1224 Not tainted syzkaller #0 PREEMPT(full) [ 198.123303][T10630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.123315][T10630] Call Trace: [ 198.123322][T10630] [ 198.123330][T10630] dump_stack_lvl+0x189/0x250 [ 198.123357][T10630] ? __pfx____ratelimit+0x10/0x10 [ 198.123379][T10630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.123401][T10630] ? __pfx__printk+0x10/0x10 [ 198.123432][T10630] ? __pfx___might_resched+0x10/0x10 [ 198.123460][T10630] ? fs_reclaim_acquire+0x7d/0x100 [ 198.123493][T10630] should_fail_ex+0x414/0x560 [ 198.123525][T10630] should_failslab+0xa8/0x100 [ 198.123554][T10630] __kmalloc_node_noprof+0xd1/0x4e0 [ 198.123578][T10630] ? qdisc_alloc+0x97/0xaa0 [ 198.123605][T10630] qdisc_alloc+0x97/0xaa0 [ 198.123635][T10630] qdisc_create+0x12c/0xea0 [ 198.123666][T10630] ? nla_strcmp+0x106/0x140 [ 198.123688][T10630] tc_modify_qdisc+0x1538/0x20e0 [ 198.123736][T10630] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 198.123797][T10630] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 198.123824][T10630] rtnetlink_rcv_msg+0x779/0xb70 [ 198.123851][T10630] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 198.123871][T10630] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 198.123890][T10630] ? ref_tracker_free+0x63a/0x7d0 [ 198.123919][T10630] ? __asan_memcpy+0x40/0x70 [ 198.123936][T10630] ? __pfx_ref_tracker_free+0x10/0x10 [ 198.123959][T10630] ? __skb_clone+0x63/0x7a0 [ 198.123995][T10630] netlink_rcv_skb+0x205/0x470 [ 198.124025][T10630] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 198.124048][T10630] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.124082][T10630] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.124111][T10630] netlink_unicast+0x82f/0x9e0 [ 198.124139][T10630] ? __pfx_netlink_unicast+0x10/0x10 [ 198.124160][T10630] ? netlink_sendmsg+0x642/0xb30 [ 198.124184][T10630] ? skb_put+0x11b/0x210 [ 198.124211][T10630] netlink_sendmsg+0x805/0xb30 [ 198.124244][T10630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.124270][T10630] ? aa_sock_msg_perm+0xf1/0x1d0 [ 198.124302][T10630] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.124321][T10630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.124345][T10630] __sock_sendmsg+0x21c/0x270 [ 198.124378][T10630] ____sys_sendmsg+0x505/0x830 [ 198.124410][T10630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.124445][T10630] ? import_iovec+0x74/0xa0 [ 198.124474][T10630] ___sys_sendmsg+0x21f/0x2a0 [ 198.124502][T10630] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.124568][T10630] ? __fget_files+0x2a/0x420 [ 198.124594][T10630] ? __fget_files+0x3a0/0x420 [ 198.124633][T10630] __x64_sys_sendmsg+0x19b/0x260 [ 198.124661][T10630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.124697][T10630] ? __pfx_ksys_write+0x10/0x10 [ 198.124718][T10630] ? rcu_is_watching+0x15/0xb0 [ 198.124742][T10630] ? do_syscall_64+0xbe/0x3b0 [ 198.124769][T10630] do_syscall_64+0xfa/0x3b0 [ 198.124789][T10630] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.124809][T10630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.124828][T10630] ? clear_bhb_loop+0x60/0xb0 [ 198.124851][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.124870][T10630] RIP: 0033:0x7ff64b18eec9 [ 198.124887][T10630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.124903][T10630] RSP: 002b:00007ff64c0d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.124924][T10630] RAX: ffffffffffffffda RBX: 00007ff64b3e5fa0 RCX: 00007ff64b18eec9 [ 198.124937][T10630] RDX: 0000000004000058 RSI: 0000200000001200 RDI: 0000000000000003 [ 198.124950][T10630] RBP: 00007ff64c0d3090 R08: 0000000000000000 R09: 0000000000000000 [ 198.124961][T10630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.124972][T10630] R13: 00007ff64b3e6038 R14: 00007ff64b3e5fa0 R15: 00007ffcb9aa6798 [ 198.125011][T10630] [ 198.595858][ T6990] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.606750][ T6990] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.649166][ T1341] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.968569][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 199.004690][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1231'. [ 199.018467][T10651] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1233'. [ 199.096900][T10655] lo: entered allmulticast mode [ 199.110477][T10655] lo: left allmulticast mode [ 199.162424][T10662] FAULT_INJECTION: forcing a failure. [ 199.162424][T10662] name failslab, interval 1, probability 0, space 0, times 0 [ 199.166346][T10637] syzkaller0: entered promiscuous mode [ 199.182365][T10637] syzkaller0: entered allmulticast mode [ 199.191548][T10662] CPU: 1 UID: 0 PID: 10662 Comm: syz.3.1235 Not tainted syzkaller #0 PREEMPT(full) [ 199.191574][T10662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.191585][T10662] Call Trace: [ 199.191594][T10662] [ 199.191602][T10662] dump_stack_lvl+0x189/0x250 [ 199.191629][T10662] ? __pfx____ratelimit+0x10/0x10 [ 199.191651][T10662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.191673][T10662] ? __pfx__printk+0x10/0x10 [ 199.191705][T10662] ? __pfx___might_resched+0x10/0x10 [ 199.191732][T10662] ? fs_reclaim_acquire+0x7d/0x100 [ 199.191766][T10662] should_fail_ex+0x414/0x560 [ 199.191799][T10662] should_failslab+0xa8/0x100 [ 199.191828][T10662] kmem_cache_alloc_noprof+0x73/0x3c0 [ 199.191852][T10662] ? vm_area_dup+0x2b/0x680 [ 199.191884][T10662] vm_area_dup+0x2b/0x680 [ 199.191916][T10662] __split_vma+0x1a9/0xa00 [ 199.191939][T10662] ? mas_next_slot+0xc20/0xcf0 [ 199.191972][T10662] ? __pfx___split_vma+0x10/0x10 [ 199.192007][T10662] ? mas_find+0xb0e/0xd30 [ 199.192034][T10662] vms_gather_munmap_vmas+0x4ce/0x12f0 [ 199.192078][T10662] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 199.192111][T10662] ? mas_find+0xa7d/0xd30 [ 199.192138][T10662] mmap_region+0x724/0x20c0 [ 199.192157][T10662] ? __lock_acquire+0xab9/0xd20 [ 199.192198][T10662] ? __lock_acquire+0xab9/0xd20 [ 199.192226][T10662] ? __pfx_mmap_region+0x10/0x10 [ 199.192319][T10662] ? aa_file_perm+0x13a/0x1550 [ 199.192339][T10662] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 199.192374][T10662] ? cap_mmap_addr+0xb0/0x100 [ 199.192399][T10662] ? bpf_lsm_mmap_addr+0x9/0x20 [ 199.192420][T10662] ? security_mmap_addr+0x71/0x270 [ 199.192447][T10662] ? shmem_mapping+0xd/0x50 [ 199.192465][T10662] ? memfd_check_seals_mmap+0xc5/0x200 [ 199.192489][T10662] do_mmap+0xc45/0x10d0 [ 199.192526][T10662] ? __pfx_do_mmap+0x10/0x10 [ 199.192546][T10662] ? down_write_killable+0x178/0x230 [ 199.192575][T10662] ? __pfx_down_write_killable+0x10/0x10 [ 199.192598][T10662] ? common_file_perm+0x1b5/0x230 [ 199.192636][T10662] vm_mmap_pgoff+0x2a6/0x4d0 [ 199.192669][T10662] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 199.192693][T10662] ? __fget_files+0x2a/0x420 [ 199.192726][T10662] ? __fget_files+0x3a0/0x420 [ 199.192751][T10662] ? __fget_files+0x2a/0x420 [ 199.192783][T10662] ksys_mmap_pgoff+0x51f/0x760 [ 199.192816][T10662] do_syscall_64+0xfa/0x3b0 [ 199.192837][T10662] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.192858][T10662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.192877][T10662] ? clear_bhb_loop+0x60/0xb0 [ 199.192902][T10662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.192920][T10662] RIP: 0033:0x7f038b18eec9 [ 199.192938][T10662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.192954][T10662] RSP: 002b:00007f038bf79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 199.192980][T10662] RAX: ffffffffffffffda RBX: 00007f038b3e5fa0 RCX: 00007f038b18eec9 [ 199.192994][T10662] RDX: 0000000001000001 RSI: 0000000000004000 RDI: 0000200000009000 [ 199.193007][T10662] RBP: 00007f038bf79090 R08: 0000000000000003 R09: 00000000ffffc000 [ 199.193020][T10662] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 199.193031][T10662] R13: 00007f038b3e6038 R14: 00007f038b3e5fa0 R15: 00007ffea19ffc98 [ 199.193065][T10662] [ 199.889608][T10681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1238'. [ 201.356958][T10681] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.445197][T10681] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.527620][T10743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.549554][ T5184] Bluetooth: hci2: command 0x0406 tx timeout [ 201.555626][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 201.561980][ T5865] Bluetooth: hci3: command 0x0406 tx timeout [ 201.579098][T10681] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.731989][T10681] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.959091][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.977298][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.030400][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.055386][T10757] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 202.064171][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'. [ 202.118954][T10761] vlan2: entered allmulticast mode [ 202.156039][T10763] FAULT_INJECTION: forcing a failure. [ 202.156039][T10763] name failslab, interval 1, probability 0, space 0, times 0 [ 202.172537][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.172543][T10763] CPU: 0 UID: 0 PID: 10763 Comm: syz.1.1249 Not tainted syzkaller #0 PREEMPT(full) [ 202.172565][T10763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.172575][T10763] Call Trace: [ 202.172582][T10763] [ 202.172589][T10763] dump_stack_lvl+0x189/0x250 [ 202.172611][T10763] ? __pfx____ratelimit+0x10/0x10 [ 202.172632][T10763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.172658][T10763] ? __pfx__printk+0x10/0x10 [ 202.172688][T10763] ? __pfx___might_resched+0x10/0x10 [ 202.172720][T10763] should_fail_ex+0x414/0x560 [ 202.172752][T10763] should_failslab+0xa8/0x100 [ 202.172781][T10763] kmem_cache_alloc_noprof+0x73/0x3c0 [ 202.172804][T10763] ? mas_alloc_nodes+0x2e9/0x8e0 [ 202.172828][T10763] mas_alloc_nodes+0x2e9/0x8e0 [ 202.172855][T10763] mas_preallocate+0x3ad/0x6f0 [ 202.172881][T10763] ? __pfx_mas_preallocate+0x10/0x10 [ 202.172919][T10763] ? __mas_set_range+0x12f/0x3c0 [ 202.172946][T10763] __split_vma+0x2fa/0xa00 [ 202.172978][T10763] ? __pfx___split_vma+0x10/0x10 [ 202.173011][T10763] ? mas_find+0xb0e/0xd30 [ 202.173036][T10763] vms_gather_munmap_vmas+0x4ce/0x12f0 [ 202.173076][T10763] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 202.173108][T10763] ? mas_find+0xa7d/0xd30 [ 202.173133][T10763] mmap_region+0x724/0x20c0 [ 202.173155][T10763] ? __lock_acquire+0xab9/0xd20 [ 202.173194][T10763] ? __lock_acquire+0xab9/0xd20 [ 202.173222][T10763] ? __pfx_mmap_region+0x10/0x10 [ 202.173308][T10763] ? aa_file_perm+0x13a/0x1550 [ 202.173328][T10763] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 202.173360][T10763] ? cap_mmap_addr+0xb0/0x100 [ 202.173385][T10763] ? bpf_lsm_mmap_addr+0x9/0x20 [ 202.173405][T10763] ? security_mmap_addr+0x71/0x270 [ 202.173430][T10763] ? shmem_mapping+0xd/0x50 [ 202.173447][T10763] ? memfd_check_seals_mmap+0xc5/0x200 [ 202.173469][T10763] do_mmap+0xc45/0x10d0 [ 202.173505][T10763] ? __pfx_do_mmap+0x10/0x10 [ 202.173523][T10763] ? down_write_killable+0x178/0x230 [ 202.173551][T10763] ? __pfx_down_write_killable+0x10/0x10 [ 202.173573][T10763] ? common_file_perm+0x1b5/0x230 [ 202.173610][T10763] vm_mmap_pgoff+0x2a6/0x4d0 [ 202.173639][T10763] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 202.173661][T10763] ? __fget_files+0x2a/0x420 [ 202.173693][T10763] ? __fget_files+0x3a0/0x420 [ 202.173717][T10763] ? __fget_files+0x2a/0x420 [ 202.173748][T10763] ksys_mmap_pgoff+0x51f/0x760 [ 202.173779][T10763] do_syscall_64+0xfa/0x3b0 [ 202.173817][T10763] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.173836][T10763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.173855][T10763] ? clear_bhb_loop+0x60/0xb0 [ 202.173878][T10763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.173896][T10763] RIP: 0033:0x7fc3b0f8eec9 [ 202.173920][T10763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.173936][T10763] RSP: 002b:00007fc3b1e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 202.173955][T10763] RAX: ffffffffffffffda RBX: 00007fc3b11e5fa0 RCX: 00007fc3b0f8eec9 [ 202.173968][T10763] RDX: 0000000001000001 RSI: 0000000000004000 RDI: 0000200000009000 [ 202.173981][T10763] RBP: 00007fc3b1e98090 R08: 0000000000000003 R09: 00000000ffffc000 [ 202.173993][T10763] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 202.174004][T10763] R13: 00007fc3b11e6038 R14: 00007fc3b11e5fa0 R15: 00007fff72c67988 [ 202.174034][T10763] [ 202.880022][T10783] tipc: Enabled bearer , priority 0 [ 203.010515][T10783] syzkaller0: entered promiscuous mode [ 203.032576][T10783] syzkaller0: entered allmulticast mode [ 203.054375][T10792] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 203.063388][T10793] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 203.098246][T10783] tipc: Resetting bearer [ 203.115984][T10781] tipc: Resetting bearer [ 203.168771][T10795] IPVS: Scheduler module ip_vs_sip not found [ 203.186943][T10781] tipc: Disabling bearer [ 203.212183][T10797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1258'. [ 203.249967][T10797] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1258'. [ 203.399664][T10800] IPVS: length: 141 != 8 [ 203.789706][T10808] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1262'. [ 204.293938][T10841] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 204.386837][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'. [ 204.407361][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1268'. [ 204.416521][T10843] netlink: 'syz.0.1268': attribute type 18 has an invalid length. [ 204.440672][T10844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1268'. [ 205.276272][T10856] netlink: 'syz.2.1270': attribute type 4 has an invalid length. [ 205.603712][T10862] FAULT_INJECTION: forcing a failure. [ 205.603712][T10862] name failslab, interval 1, probability 0, space 0, times 0 [ 205.625155][T10862] CPU: 1 UID: 0 PID: 10862 Comm: syz.4.1272 Not tainted syzkaller #0 PREEMPT(full) [ 205.625181][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 205.625192][T10862] Call Trace: [ 205.625201][T10862] [ 205.625209][T10862] dump_stack_lvl+0x189/0x250 [ 205.625236][T10862] ? __pfx____ratelimit+0x10/0x10 [ 205.625258][T10862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.625280][T10862] ? __pfx__printk+0x10/0x10 [ 205.625312][T10862] ? __pfx___might_resched+0x10/0x10 [ 205.625338][T10862] ? fs_reclaim_acquire+0x7d/0x100 [ 205.625372][T10862] should_fail_ex+0x414/0x560 [ 205.625403][T10862] should_failslab+0xa8/0x100 [ 205.625431][T10862] kmem_cache_alloc_noprof+0x73/0x3c0 [ 205.625454][T10862] ? vm_area_alloc+0x24/0x140 [ 205.625484][T10862] vm_area_alloc+0x24/0x140 [ 205.625513][T10862] mmap_region+0xdc7/0x20c0 [ 205.625533][T10862] ? __lock_acquire+0xab9/0xd20 [ 205.625573][T10862] ? __lock_acquire+0xab9/0xd20 [ 205.625608][T10862] ? __pfx_mmap_region+0x10/0x10 [ 205.625698][T10862] ? aa_file_perm+0x13a/0x1550 [ 205.625719][T10862] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 205.625757][T10862] ? bpf_lsm_mmap_addr+0x9/0x20 [ 205.625777][T10862] ? security_mmap_addr+0x71/0x270 [ 205.625805][T10862] ? shmem_mapping+0xd/0x50 [ 205.625823][T10862] ? memfd_check_seals_mmap+0xc5/0x200 [ 205.625846][T10862] do_mmap+0xc45/0x10d0 [ 205.625884][T10862] ? __pfx_do_mmap+0x10/0x10 [ 205.625903][T10862] ? down_write_killable+0x178/0x230 [ 205.625932][T10862] ? __pfx_down_write_killable+0x10/0x10 [ 205.625955][T10862] ? common_file_perm+0x1b5/0x230 [ 205.625993][T10862] vm_mmap_pgoff+0x2a6/0x4d0 [ 205.626023][T10862] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 205.626047][T10862] ? __fget_files+0x2a/0x420 [ 205.626080][T10862] ? __fget_files+0x3a0/0x420 [ 205.626106][T10862] ? __fget_files+0x2a/0x420 [ 205.626138][T10862] ksys_mmap_pgoff+0x51f/0x760 [ 205.626170][T10862] do_syscall_64+0xfa/0x3b0 [ 205.626191][T10862] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.626211][T10862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.626230][T10862] ? clear_bhb_loop+0x60/0xb0 [ 205.626254][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.626272][T10862] RIP: 0033:0x7fa29438eec9 [ 205.626290][T10862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.626306][T10862] RSP: 002b:00007fa29528c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 205.626326][T10862] RAX: ffffffffffffffda RBX: 00007fa2945e5fa0 RCX: 00007fa29438eec9 [ 205.626339][T10862] RDX: 0000000001000001 RSI: 0000000000004000 RDI: 0000200000009000 [ 205.626352][T10862] RBP: 00007fa29528c090 R08: 0000000000000003 R09: 00000000ffffc000 [ 205.626364][T10862] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 205.626376][T10862] R13: 00007fa2945e6038 R14: 00007fa2945e5fa0 R15: 00007ffd162da228 [ 205.626409][T10862] [ 206.304142][T10888] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1279'. [ 206.386354][T10892] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 207.376016][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 207.437678][T10923] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 207.632111][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'. [ 207.710032][T10931] netlink: 'syz.3.1291': attribute type 4 has an invalid length. [ 207.784683][T10934] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1292'. [ 208.018674][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 208.207565][T10952] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1297'. [ 208.269170][T10955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1299'. [ 208.592423][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1303'. [ 208.652585][T10968] netlink: 'syz.2.1304': attribute type 1 has an invalid length. [ 208.713227][T10968] bond2: entered promiscuous mode [ 208.720363][T10968] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.951389][T10701] IPVS: starting estimator thread 0... [ 208.971025][T10985] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1306'. [ 209.040356][T10984] IPVS: using max 33 ests per chain, 79200 per kthread [ 209.148545][T10978] syz.2.1307 (10978) used greatest stack depth: 17864 bytes left [ 209.338164][T10996] netlink: 'syz.2.1312': attribute type 1 has an invalid length. [ 209.359738][T11001] FAULT_INJECTION: forcing a failure. [ 209.359738][T11001] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 209.377261][T10996] netlink: 'syz.2.1312': attribute type 3 has an invalid length. [ 209.395553][T10996] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1312'. [ 209.420105][T11001] CPU: 0 UID: 0 PID: 11001 Comm: syz.0.1315 Not tainted syzkaller #0 PREEMPT(full) [ 209.420128][T11001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 209.420139][T11001] Call Trace: [ 209.420146][T11001] [ 209.420153][T11001] dump_stack_lvl+0x189/0x250 [ 209.420179][T11001] ? __pfx____ratelimit+0x10/0x10 [ 209.420199][T11001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.420218][T11001] ? __pfx__printk+0x10/0x10 [ 209.420254][T11001] should_fail_ex+0x414/0x560 [ 209.420287][T11001] _copy_to_user+0x31/0xb0 [ 209.420320][T11001] simple_read_from_buffer+0xe1/0x170 [ 209.420352][T11001] proc_fail_nth_read+0x1b3/0x220 [ 209.420377][T11001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.420402][T11001] ? rw_verify_area+0x2a6/0x4d0 [ 209.420424][T11001] ? __lock_acquire+0xab9/0xd20 [ 209.420449][T11001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.420471][T11001] vfs_read+0x200/0xa30 [ 209.420494][T11001] ? fdget_pos+0x247/0x320 [ 209.420527][T11001] ? __pfx___mutex_lock+0x10/0x10 [ 209.420550][T11001] ? __pfx_vfs_read+0x10/0x10 [ 209.420575][T11001] ? __fget_files+0x2a/0x420 [ 209.420606][T11001] ? __fget_files+0x3a0/0x420 [ 209.420630][T11001] ? __fget_files+0x2a/0x420 [ 209.420667][T11001] ksys_read+0x145/0x250 [ 209.420694][T11001] ? __pfx_ksys_read+0x10/0x10 [ 209.420724][T11001] ? do_syscall_64+0xbe/0x3b0 [ 209.420751][T11001] do_syscall_64+0xfa/0x3b0 [ 209.420772][T11001] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.420792][T11001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.420812][T11001] ? clear_bhb_loop+0x60/0xb0 [ 209.420836][T11001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.420855][T11001] RIP: 0033:0x7ff64b18d8dc [ 209.420876][T11001] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.420892][T11001] RSP: 002b:00007ff64c0d3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.420913][T11001] RAX: ffffffffffffffda RBX: 00007ff64b3e5fa0 RCX: 00007ff64b18d8dc [ 209.420928][T11001] RDX: 000000000000000f RSI: 00007ff64c0d30a0 RDI: 0000000000000004 [ 209.420940][T11001] RBP: 00007ff64c0d3090 R08: 0000000000000000 R09: 00000000ffffc000 [ 209.420952][T11001] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000002 [ 209.420964][T11001] R13: 00007ff64b3e6038 R14: 00007ff64b3e5fa0 R15: 00007ffcb9aa6798 [ 209.420997][T11001] [ 210.025602][T11014] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 210.132760][T11019] vlan2: entered allmulticast mode [ 210.695960][T11030] veth0: entered promiscuous mode [ 210.811624][T11027] veth0: left promiscuous mode [ 211.162635][T11035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1325'. [ 211.973159][T11051] netlink: 'syz.1.1328': attribute type 32 has an invalid length. [ 212.272956][T11056] vlan2: entered allmulticast mode [ 212.390657][T11060] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.425810][T11060] macvlan3: entered promiscuous mode [ 212.439664][T11060] macvlan3: entered allmulticast mode [ 212.446756][T11060] bond3: entered promiscuous mode [ 212.452622][T11060] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 212.463318][T11060] bond3: left promiscuous mode [ 212.470001][T11064] __nla_validate_parse: 1 callbacks suppressed [ 212.470018][T11064] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1332'. [ 212.626827][T11064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.639982][T11064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.653284][T11064] bond0 (unregistering): Released all slaves [ 212.682404][T11066] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 212.735159][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 213.127565][T11084] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 213.938894][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1347'. [ 214.018733][T11118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1347'. [ 214.065007][T11120] tipc: Enabling of bearer rejected, failed to enable media [ 214.081662][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1349'. [ 214.137100][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1350'. [ 215.520889][T11138] veth4: entered allmulticast mode [ 215.729189][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1359'. [ 215.748787][T11154] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1360'. [ 215.769864][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1358'. [ 216.516232][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1362'. [ 216.630421][T11166] bridge0 (unregistering): left promiscuous mode [ 217.267150][T11194] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 217.401466][T11203] netlink: 'syz.1.1372': attribute type 1 has an invalid length. [ 217.521086][T11203] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.650332][T11205] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.675057][T11205] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 217.748810][T11205] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 218.504512][T11224] __nla_validate_parse: 2 callbacks suppressed [ 218.504820][T11224] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1377'. [ 219.189177][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'. [ 219.394377][T11245] ip6tnl2: entered promiscuous mode [ 219.409972][T11245] ip6tnl2: entered allmulticast mode [ 220.365665][T11274] vlan2: entered allmulticast mode [ 220.662808][T11284] netlink: 'syz.3.1395': attribute type 15 has an invalid length. [ 220.955337][T11293] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1396'. [ 221.036067][T11298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1398'. [ 221.959529][T11324] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1405'. [ 221.986679][T11325] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1405'. [ 222.080638][T11325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1405'. [ 222.317058][T11333] tipc: Enabled bearer , priority 0 [ 222.348611][T11333] syzkaller0: entered promiscuous mode [ 222.381218][T11333] syzkaller0: entered allmulticast mode [ 222.450163][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 222.471991][T11333] tipc: Resetting bearer [ 222.480769][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 222.490847][T11347] ipvlan1: entered promiscuous mode [ 222.515529][T11332] tipc: Resetting bearer [ 222.572043][T11332] tipc: Disabling bearer [ 222.642194][T11348] ipvlan1 (unregistering): left promiscuous mode [ 222.826708][T11352] vlan2: entered allmulticast mode [ 222.972604][T11360] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1416'. [ 223.005112][T11361] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 223.535396][T11382] __nla_validate_parse: 3 callbacks suppressed [ 223.535415][T11382] netlink: 700 bytes leftover after parsing attributes in process `syz.2.1422'. [ 223.554284][T11382] netlink: 700 bytes leftover after parsing attributes in process `syz.2.1422'. [ 223.821409][T11396] vlan0: entered allmulticast mode [ 223.845014][T11395] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1427'. [ 223.931064][T11398] tipc: Started in network mode [ 223.936070][T11398] tipc: Node identity 080211, cluster identity 4711 [ 223.943223][T11398] tipc: Enabled bearer , priority 0 [ 224.096434][T11409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1431'. [ 224.437413][T11426] netlink: 'syz.0.1436': attribute type 10 has an invalid length. [ 224.560788][T11426] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 224.572118][T11427] netlink: 'syz.2.1435': attribute type 3 has an invalid length. [ 224.587761][T11427] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1435'. [ 224.695695][T11438] tipc: Enabling of bearer rejected, already enabled [ 224.762590][T11441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1441'. [ 224.777759][T11441] bond1: option mode: unable to set because the bond device is up [ 225.057643][T10688] tipc: Node number set to 134353152 [ 225.402812][T10701] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 225.412148][T10701] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 225.431918][T10701] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 225.668075][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1449'. [ 225.791091][T11476] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1449'. [ 226.018515][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1452'. [ 226.092353][T11494] lo: entered allmulticast mode [ 226.171302][T11494] dvmrp8: entered allmulticast mode [ 226.278734][T11501] netlink: 'syz.2.1454': attribute type 23 has an invalid length. [ 226.391429][T11506] netlink: 'syz.1.1455': attribute type 10 has an invalid length. [ 226.436359][T11506] bond0: (slave wlan1): Opening slave failed [ 226.637786][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'. [ 226.791153][T11493] lo: left allmulticast mode [ 226.817117][T11493] dvmrp8: left allmulticast mode [ 226.901341][T11514] netlink: 'syz.3.1459': attribute type 1 has an invalid length. [ 227.434446][T11534] vlan3: entered allmulticast mode [ 227.763189][T11548] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 228.015879][T11563] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 228.962864][T11587] netlink: 'syz.0.1476': attribute type 1 has an invalid length. [ 228.983447][T11587] __nla_validate_parse: 2 callbacks suppressed [ 228.983466][T11587] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1476'. [ 229.014018][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1475'. [ 229.052420][T11585] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1475'. [ 229.088707][T11585] 0ŞXą¦Ŕ: renamed from caif0 [ 229.113270][T11585] 0ŞXą¦Ŕ: entered allmulticast mode [ 229.120898][T11585] A link change request failed with some changes committed already. Interface 60ŞXą¦Ŕ may have been left with an inconsistent configuration, please check. [ 229.380064][T11593] tipc: Enabled bearer , priority 0 [ 229.460903][T11595] syzkaller0: entered promiscuous mode [ 229.466410][T11595] syzkaller0: entered allmulticast mode [ 229.505965][T11593] tipc: Resetting bearer [ 229.609344][T11592] tipc: Resetting bearer [ 229.648279][T11592] tipc: Disabling bearer [ 229.800844][T11605] tipc: Enabled bearer , priority 0 [ 229.826348][T11605] syzkaller0: entered promiscuous mode [ 229.841563][T11605] syzkaller0: entered allmulticast mode [ 229.872407][T11605] tipc: Resetting bearer [ 229.906758][T11604] tipc: Resetting bearer [ 230.016591][T11604] tipc: Disabling bearer [ 230.318308][T11625] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 231.147538][T11654] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.210608][T11658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1492'. [ 231.267125][T11654] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.323059][T11662] FAULT_INJECTION: forcing a failure. [ 231.323059][T11662] name failslab, interval 1, probability 0, space 0, times 0 [ 231.338980][T11654] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.376241][T11662] CPU: 1 UID: 0 PID: 11662 Comm: syz.3.1496 Not tainted syzkaller #0 PREEMPT(full) [ 231.376288][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 231.376300][T11662] Call Trace: [ 231.376309][T11662] [ 231.376318][T11662] dump_stack_lvl+0x189/0x250 [ 231.376347][T11662] ? __pfx____ratelimit+0x10/0x10 [ 231.376369][T11662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.376391][T11662] ? __pfx__printk+0x10/0x10 [ 231.376424][T11662] ? __pfx___might_resched+0x10/0x10 [ 231.376451][T11662] ? fs_reclaim_acquire+0x7d/0x100 [ 231.376485][T11662] should_fail_ex+0x414/0x560 [ 231.376517][T11662] ? __pfx_sock_alloc_inode+0x10/0x10 [ 231.376536][T11662] should_failslab+0xa8/0x100 [ 231.376563][T11662] ? __pfx_sock_alloc_inode+0x10/0x10 [ 231.376580][T11662] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 231.376605][T11662] ? sock_alloc_inode+0x28/0xc0 [ 231.376627][T11662] ? __pfx_sock_alloc_inode+0x10/0x10 [ 231.376644][T11662] sock_alloc_inode+0x28/0xc0 [ 231.376661][T11662] alloc_inode+0x6a/0x1b0 [ 231.376690][T11662] __sock_create+0x12d/0x9f0 [ 231.376725][T11662] mptcp_subflow_create_socket+0xf0/0x7d0 [ 231.376759][T11662] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 231.376797][T11662] __mptcp_nmpc_sk+0x148/0x760 [ 231.376823][T11662] ? __local_bh_enable_ip+0x12d/0x1c0 [ 231.376851][T11662] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 231.376886][T11662] mptcp_bind+0xab/0x1d0 [ 231.376910][T11662] __sys_bind+0x2c3/0x3e0 [ 231.376932][T11662] ? __pfx___sys_bind+0x10/0x10 [ 231.376964][T11662] ? __pfx_ksys_write+0x10/0x10 [ 231.376985][T11662] ? rcu_is_watching+0x15/0xb0 [ 231.377010][T11662] __x64_sys_bind+0x7a/0x90 [ 231.377030][T11662] do_syscall_64+0xfa/0x3b0 [ 231.377051][T11662] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.377071][T11662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.377095][T11662] ? clear_bhb_loop+0x60/0xb0 [ 231.377115][T11662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.377131][T11662] RIP: 0033:0x7f038b18eec9 [ 231.377147][T11662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.377164][T11662] RSP: 002b:00007f038bf79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 231.377183][T11662] RAX: ffffffffffffffda RBX: 00007f038b3e5fa0 RCX: 00007f038b18eec9 [ 231.377197][T11662] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 231.377207][T11662] RBP: 00007f038bf79090 R08: 0000000000000000 R09: 0000000000000000 [ 231.377219][T11662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.377230][T11662] R13: 00007f038b3e6038 R14: 00007f038b3e5fa0 R15: 00007ffea19ffc98 [ 231.377257][T11662] [ 231.665054][T11662] socket: no more sockets [ 231.699406][T11654] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.769106][T11674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1498'. [ 232.051447][ T6990] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.098865][ T6985] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.147563][T10715] IPVS: starting estimator thread 0... [ 232.202198][ T6990] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.246542][T11700] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 232.260807][T11693] IPVS: using max 33 ests per chain, 79200 per kthread [ 232.311785][ T1341] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.053528][T11722] vlan2: entered allmulticast mode [ 234.912800][T11761] netlink: 'syz.2.1516': attribute type 1 has an invalid length. [ 234.995285][T11764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1516'. [ 235.278442][T11764] bond0: (slave dummy0): Releasing backup interface [ 235.292997][T11764] dummy0 (unregistering): left promiscuous mode [ 236.097079][T11798] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 236.436354][T11806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.341059][T11844] pimreg: entered allmulticast mode [ 237.372479][T11844] pimreg: left allmulticast mode [ 237.477614][T11846] tipc: Enabled bearer , priority 0 [ 237.546271][T11848] syzkaller0: entered promiscuous mode [ 237.552356][T11848] syzkaller0: entered allmulticast mode [ 238.131028][T11841] tipc: Resetting bearer [ 238.178323][T11841] tipc: Disabling bearer [ 239.060258][T11899] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 239.123270][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'. [ 239.172493][T11902] bridge_slave_1: left allmulticast mode [ 239.181686][T11902] bridge_slave_1: left promiscuous mode [ 239.215383][T11902] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.270321][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'. [ 239.315515][T11902] bridge_slave_0: left promiscuous mode [ 239.343449][T11902] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.626550][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1537'. [ 239.637480][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1537'. [ 240.381111][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1545'. [ 241.073874][T11973] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 241.298021][T11973] netlink: 'syz.1.1550': attribute type 46 has an invalid length. [ 241.704871][T11999] netlink: 'syz.3.1554': attribute type 13 has an invalid length. [ 241.990669][T11999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.040589][T12008] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1557'. [ 242.133247][T12003] syz_tun: entered allmulticast mode [ 242.180183][T12004] dvmrp8: entered allmulticast mode [ 242.204016][ T1341] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.237014][ T1341] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.282999][T12008] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.336421][ T1341] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.351071][ T1341] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.379062][T12008] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.466277][T12008] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.528555][T11997] syz_tun: left allmulticast mode [ 242.534329][T11997] dvmrp8: left allmulticast mode [ 242.589820][T12008] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.742152][ T6985] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.782449][ T6985] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.820881][ T6985] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.884886][ T1160] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.142979][T12046] netlink: 'syz.3.1565': attribute type 27 has an invalid length. [ 243.164872][T12037] netlink: 'syz.2.1567': attribute type 13 has an invalid length. [ 243.261449][T12046] dummy0: left promiscuous mode [ 243.279870][T12046] 0ŞXą¦Ŕ: left allmulticast mode [ 243.325665][T12052] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1569'. [ 243.342796][T12046] macvlan2: left promiscuous mode [ 243.368843][T12046] vlan1: left allmulticast mode [ 243.383879][T12046] dummy0: left allmulticast mode [ 243.591958][T12065] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1574'. [ 243.796747][T12076] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 244.068194][T12080] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 244.143504][T12080] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 244.370528][T12100] netlink: 'syz.2.1583': attribute type 1 has an invalid length. [ 244.404826][T12100] 8021q: adding VLAN 0 to HW filter on device bond3 [ 244.433437][T12100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.443730][T12100] bond3: (slave batadv0): making interface the new active one [ 244.453872][T12100] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 244.722977][T12118] netlink: 'syz.2.1589': attribute type 1 has an invalid length. [ 244.865264][T12118] bond4: entered promiscuous mode [ 244.874034][T12118] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.901731][T12125] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.910514][T12125] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 244.923962][T12125] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 244.938853][T12131] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1592'. [ 244.954355][T12125] bond4: (slave wireguard0): making interface the new active one [ 244.973937][T12125] wireguard0: entered promiscuous mode [ 244.993274][T12118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.000576][T12118] IPv6: NLM_F_CREATE should be set when creating new route [ 245.007825][T12118] IPv6: NLM_F_CREATE should be set when creating new route [ 245.016759][T12125] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 245.032207][T12118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.616539][T12147] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 245.753701][T12155] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1598'. [ 246.088452][T12172] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1602'. [ 246.129635][T12172] macsec1: entered promiscuous mode [ 246.145316][T12176] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1605'. [ 246.157627][T12172] macsec1: entered allmulticast mode [ 246.287922][T12178] bridge0: entered allmulticast mode [ 246.430858][T12187] tipc: Enabled bearer , priority 0 [ 246.468693][T12187] syzkaller0: entered promiscuous mode [ 246.474195][T12187] syzkaller0: entered allmulticast mode [ 246.569526][T12187] tipc: Resetting bearer [ 246.618663][T12186] tipc: Resetting bearer [ 246.659320][T12186] tipc: Disabling bearer [ 246.689101][T12207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.710710][T12202] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1615'. [ 246.897675][T12213] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1617'. [ 246.908340][T12213] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1617'. [ 247.389734][T12224] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1621'. [ 247.409777][T12224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1621'. [ 247.420563][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'. [ 247.505343][T12226] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 247.714141][T12244] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 247.730652][T12245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'. [ 247.783480][T12245] bond4: entered promiscuous mode [ 247.795998][T12245] 8021q: adding VLAN 0 to HW filter on device bond4 [ 248.230313][T12254] bond5: entered promiscuous mode [ 248.246602][T12254] bond5: entered allmulticast mode [ 248.270288][T12254] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.354183][T12254] tipc: Enabled bearer , priority 0 [ 248.374252][T12254] syzkaller0: entered promiscuous mode [ 248.389917][T12254] syzkaller0: entered allmulticast mode [ 248.427012][T12254] sch_tbf: burst 127 is lower than device macvlan0 mtu (1514) ! [ 248.464450][T12254] tipc: Resetting bearer [ 248.934467][T12253] tipc: Resetting bearer [ 248.979258][T12253] tipc: Disabling bearer [ 249.484686][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 249.745016][T12288] netlink: 'syz.0.1637': attribute type 1 has an invalid length. [ 249.881331][T12296] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.991818][T12307] tipc: Resetting bearer [ 250.006843][T12312] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 250.026223][T12306] tipc: Enabling of bearer rejected, already enabled [ 250.129802][T12306] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 250.353746][T12321] vlan2: entered allmulticast mode [ 250.900780][T12340] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 250.908031][T12340] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 251.011801][T12341] __nla_validate_parse: 3 callbacks suppressed [ 251.011821][T12341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1651'. [ 251.170564][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1649'. [ 251.251432][T12352] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1649'. [ 251.456237][T12355] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.558545][T12355] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.615006][T12355] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.721609][T12355] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.970679][T12361] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 252.136302][ T6990] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.317247][ T1160] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.410981][ T1160] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.440288][ T1160] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.483554][T12371] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1660'. [ 252.950557][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'. [ 252.966720][T12390] netlink: 'syz.3.1667': attribute type 1 has an invalid length. [ 252.985963][T12392] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1668'. [ 253.016273][T12390] netlink: 'syz.3.1667': attribute type 46 has an invalid length. [ 254.590414][T12427] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1677'. [ 255.286893][T12451] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1684'. [ 256.183196][T12472] veth0: entered promiscuous mode [ 256.202654][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1688'. [ 256.335164][T12472] veth0 (unregistering): left promiscuous mode [ 256.524200][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1690'. [ 256.561209][T12485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1690'. [ 256.667578][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'. [ 257.164524][T12497] bond1: option mode: unable to set because the bond device is up [ 257.299324][T12502] geneve2: entered promiscuous mode [ 257.306094][ T1160] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.314646][ T1160] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.326681][ T1160] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.351260][ T1160] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.477040][T12514] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1696'. [ 257.640765][T12516] FAULT_INJECTION: forcing a failure. [ 257.640765][T12516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.677544][T12516] CPU: 0 UID: 0 PID: 12516 Comm: syz.0.1698 Not tainted syzkaller #0 PREEMPT(full) [ 257.677571][T12516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 257.677594][T12516] Call Trace: [ 257.677602][T12516] [ 257.677611][T12516] dump_stack_lvl+0x189/0x250 [ 257.677635][T12516] ? __pfx____ratelimit+0x10/0x10 [ 257.677656][T12516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.677676][T12516] ? __pfx__printk+0x10/0x10 [ 257.677697][T12516] ? __might_fault+0xb0/0x130 [ 257.677731][T12516] should_fail_ex+0x414/0x560 [ 257.677760][T12516] _copy_from_user+0x2d/0xb0 [ 257.677784][T12516] ___sys_sendmsg+0x158/0x2a0 [ 257.677811][T12516] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.677872][T12516] ? __fget_files+0x2a/0x420 [ 257.677906][T12516] ? __fget_files+0x3a0/0x420 [ 257.677943][T12516] __x64_sys_sendmsg+0x19b/0x260 [ 257.677972][T12516] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.678005][T12516] ? __pfx_ksys_write+0x10/0x10 [ 257.678026][T12516] ? rcu_is_watching+0x15/0xb0 [ 257.678048][T12516] ? do_syscall_64+0xbe/0x3b0 [ 257.678073][T12516] do_syscall_64+0xfa/0x3b0 [ 257.678090][T12516] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.678110][T12516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.678129][T12516] ? clear_bhb_loop+0x60/0xb0 [ 257.678150][T12516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.678168][T12516] RIP: 0033:0x7ff64b18eec9 [ 257.678183][T12516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.678201][T12516] RSP: 002b:00007ff64c0d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.678222][T12516] RAX: ffffffffffffffda RBX: 00007ff64b3e5fa0 RCX: 00007ff64b18eec9 [ 257.678235][T12516] RDX: 0000000004000000 RSI: 0000200000001040 RDI: 0000000000000003 [ 257.678247][T12516] RBP: 00007ff64c0d3090 R08: 0000000000000000 R09: 0000000000000000 [ 257.678258][T12516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.678269][T12516] R13: 00007ff64b3e6038 R14: 00007ff64b3e5fa0 R15: 00007ffcb9aa6798 [ 257.678299][T12516] [ 257.708722][T12518] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1699'. [ 257.835088][T12520] netlink: 'syz.0.1700': attribute type 1 has an invalid length. [ 257.854018][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1699'. [ 257.907922][T12520] netlink: 17231 bytes leftover after parsing attributes in process `syz.0.1700'. [ 257.935326][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1699'. [ 258.207723][T12525] tunl0: Caught tx_queue_len zero misconfig [ 258.430554][T12528] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1703'. [ 258.502018][T12528] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.608515][T12528] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.693112][T12528] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.796554][T12528] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.899567][T12546] tipc: Enabled bearer , priority 0 [ 258.920951][T12546] syzkaller0: entered promiscuous mode [ 258.926452][T12546] syzkaller0: entered allmulticast mode [ 258.962359][ T1160] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.996304][T12546] tipc: Resetting bearer [ 259.014868][ T1160] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.026288][T12544] tipc: Resetting bearer [ 259.056003][T12544] tipc: Disabling bearer [ 259.114628][ T1160] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.153489][T12556] netlink: 'syz.0.1713': attribute type 10 has an invalid length. [ 259.189995][ T1160] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.218037][T12556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.255504][T12556] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 259.668296][T12578] vlan3: entered allmulticast mode [ 260.531067][T12587] netlink: 'syz.1.1722': attribute type 4 has an invalid length. [ 260.539537][T12587] netlink: 'syz.1.1722': attribute type 4 has an invalid length. [ 260.655634][T12596] FAULT_INJECTION: forcing a failure. [ 260.655634][T12596] name failslab, interval 1, probability 0, space 0, times 0 [ 260.668363][T12596] CPU: 0 UID: 0 PID: 12596 Comm: syz.1.1724 Not tainted syzkaller #0 PREEMPT(full) [ 260.668421][T12596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 260.668433][T12596] Call Trace: [ 260.668440][T12596] [ 260.668448][T12596] dump_stack_lvl+0x189/0x250 [ 260.668475][T12596] ? __pfx____ratelimit+0x10/0x10 [ 260.668496][T12596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.668515][T12596] ? __pfx__printk+0x10/0x10 [ 260.668542][T12596] ? __lock_acquire+0xab9/0xd20 [ 260.668570][T12596] should_fail_ex+0x414/0x560 [ 260.668601][T12596] should_failslab+0xa8/0x100 [ 260.668626][T12596] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 260.668654][T12596] ? pfn_valid+0x125/0x4d0 [ 260.668675][T12596] ? pfn_valid+0x125/0x4d0 [ 260.668695][T12596] ? bpf_xdp_adjust_tail+0x1ae/0x220 [ 260.668724][T12596] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 260.668760][T12596] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 260.668795][T12596] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 260.668817][T12596] ? bpf_dispatcher_xdp+0x800/0x1000 [ 260.668837][T12596] ? bpf_dispatcher_xdp+0x800/0x1000 [ 260.668903][T12596] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 260.668935][T12596] ? _copy_from_user+0x94/0xb0 [ 260.668960][T12596] ? bpf_test_init+0x113/0x150 [ 260.668979][T12596] ? xdp_convert_md_to_buff+0x5b/0x330 [ 260.669001][T12596] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 260.669037][T12596] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 260.669066][T12596] ? __fget_files+0x2a/0x420 [ 260.669100][T12596] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 260.669121][T12596] bpf_prog_test_run+0x2c4/0x340 [ 260.669149][T12596] __sys_bpf+0x581/0x870 [ 260.669175][T12596] ? __pfx___sys_bpf+0x10/0x10 [ 260.669213][T12596] ? ksys_write+0x22a/0x250 [ 260.669239][T12596] ? __pfx_ksys_write+0x10/0x10 [ 260.669259][T12596] ? rcu_is_watching+0x15/0xb0 [ 260.669286][T12596] __x64_sys_bpf+0x7c/0x90 [ 260.669307][T12596] do_syscall_64+0xfa/0x3b0 [ 260.669329][T12596] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.669349][T12596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.669377][T12596] ? clear_bhb_loop+0x60/0xb0 [ 260.669401][T12596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.669420][T12596] RIP: 0033:0x7fc3b0f8eec9 [ 260.669437][T12596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.669454][T12596] RSP: 002b:00007fc3b1e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.669473][T12596] RAX: ffffffffffffffda RBX: 00007fc3b11e5fa0 RCX: 00007fc3b0f8eec9 [ 260.669488][T12596] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 260.669501][T12596] RBP: 00007fc3b1e98090 R08: 0000000000000000 R09: 0000000000000000 [ 260.669514][T12596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.669526][T12596] R13: 00007fc3b11e6038 R14: 00007fc3b11e5fa0 R15: 00007fff72c67988 [ 260.669558][T12596] [ 261.110648][T12599] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.168916][T12599] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.245408][T12599] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.295309][T12599] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.413560][ T1160] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.430066][ T1160] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.447423][ T1160] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.463706][ T1160] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.516370][T12613] __nla_validate_parse: 3 callbacks suppressed [ 261.516391][T12613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1730'. [ 262.146578][T12625] FAULT_INJECTION: forcing a failure. [ 262.146578][T12625] name failslab, interval 1, probability 0, space 0, times 0 [ 262.159268][T12625] CPU: 1 UID: 0 PID: 12625 Comm: syz.1.1735 Not tainted syzkaller #0 PREEMPT(full) [ 262.159293][T12625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 262.159305][T12625] Call Trace: [ 262.159312][T12625] [ 262.159320][T12625] dump_stack_lvl+0x189/0x250 [ 262.159346][T12625] ? __pfx____ratelimit+0x10/0x10 [ 262.159365][T12625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.159384][T12625] ? __pfx__printk+0x10/0x10 [ 262.159414][T12625] ? __lock_acquire+0xab9/0xd20 [ 262.159443][T12625] should_fail_ex+0x414/0x560 [ 262.159475][T12625] should_failslab+0xa8/0x100 [ 262.159503][T12625] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 262.159540][T12625] ? pfn_valid+0x125/0x4d0 [ 262.159563][T12625] ? pfn_valid+0x125/0x4d0 [ 262.159582][T12625] ? bpf_xdp_adjust_tail+0x1ae/0x220 [ 262.159613][T12625] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 262.159647][T12625] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 262.159682][T12625] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 262.159703][T12625] ? bpf_dispatcher_xdp+0x800/0x1000 [ 262.159723][T12625] ? bpf_dispatcher_xdp+0x800/0x1000 [ 262.159789][T12625] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 262.159821][T12625] ? _copy_from_user+0x94/0xb0 [ 262.159845][T12625] ? bpf_test_init+0x113/0x150 [ 262.159864][T12625] ? xdp_convert_md_to_buff+0x5b/0x330 [ 262.159889][T12625] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 262.159928][T12625] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 262.159955][T12625] ? __fget_files+0x2a/0x420 [ 262.159988][T12625] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 262.160012][T12625] bpf_prog_test_run+0x2c4/0x340 [ 262.160042][T12625] __sys_bpf+0x581/0x870 [ 262.160068][T12625] ? __pfx___sys_bpf+0x10/0x10 [ 262.160105][T12625] ? ksys_write+0x22a/0x250 [ 262.160131][T12625] ? __pfx_ksys_write+0x10/0x10 [ 262.160153][T12625] ? rcu_is_watching+0x15/0xb0 [ 262.160179][T12625] __x64_sys_bpf+0x7c/0x90 [ 262.160201][T12625] do_syscall_64+0xfa/0x3b0 [ 262.160222][T12625] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.160242][T12625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.160262][T12625] ? clear_bhb_loop+0x60/0xb0 [ 262.160284][T12625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.160303][T12625] RIP: 0033:0x7fc3b0f8eec9 [ 262.160320][T12625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.160337][T12625] RSP: 002b:00007fc3b1e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.160357][T12625] RAX: ffffffffffffffda RBX: 00007fc3b11e5fa0 RCX: 00007fc3b0f8eec9 [ 262.160372][T12625] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 262.160385][T12625] RBP: 00007fc3b1e98090 R08: 0000000000000000 R09: 0000000000000000 [ 262.160396][T12625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.160408][T12625] R13: 00007fc3b11e6038 R14: 00007fc3b11e5fa0 R15: 00007fff72c67988 [ 262.160439][T12625] [ 262.864110][T12629] FAULT_INJECTION: forcing a failure. [ 262.864110][T12629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.877494][T12629] CPU: 0 UID: 0 PID: 12629 Comm: syz.1.1737 Not tainted syzkaller #0 PREEMPT(full) [ 262.877520][T12629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 262.877533][T12629] Call Trace: [ 262.877540][T12629] [ 262.877548][T12629] dump_stack_lvl+0x189/0x250 [ 262.877575][T12629] ? __pfx____ratelimit+0x10/0x10 [ 262.877597][T12629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.877618][T12629] ? __pfx__printk+0x10/0x10 [ 262.877643][T12629] ? __might_fault+0xb0/0x130 [ 262.877680][T12629] should_fail_ex+0x414/0x560 [ 262.877712][T12629] _copy_from_iter+0x1de/0x1790 [ 262.877742][T12629] ? rcu_is_watching+0x15/0xb0 [ 262.877761][T12629] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 262.877788][T12629] ? __pfx__copy_from_iter+0x10/0x10 [ 262.877811][T12629] ? __build_skb_around+0x257/0x3e0 [ 262.877838][T12629] ? netlink_sendmsg+0x642/0xb30 [ 262.877867][T12629] ? skb_put+0x11b/0x210 [ 262.877894][T12629] netlink_sendmsg+0x6b2/0xb30 [ 262.877926][T12629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.877953][T12629] ? aa_sock_msg_perm+0xf1/0x1d0 [ 262.877984][T12629] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.878003][T12629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.878027][T12629] __sock_sendmsg+0x21c/0x270 [ 262.878060][T12629] ____sys_sendmsg+0x505/0x830 [ 262.878091][T12629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.878126][T12629] ? import_iovec+0x74/0xa0 [ 262.878154][T12629] ___sys_sendmsg+0x21f/0x2a0 [ 262.878290][T12629] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.878381][T12629] ? __fget_files+0x2a/0x420 [ 262.878409][T12629] ? __fget_files+0x3a0/0x420 [ 262.878444][T12629] __x64_sys_sendmsg+0x19b/0x260 [ 262.878472][T12629] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.878507][T12629] ? __pfx_ksys_write+0x10/0x10 [ 262.878529][T12629] ? rcu_is_watching+0x15/0xb0 [ 262.878552][T12629] ? do_syscall_64+0xbe/0x3b0 [ 262.878579][T12629] do_syscall_64+0xfa/0x3b0 [ 262.878599][T12629] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.878620][T12629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.878639][T12629] ? clear_bhb_loop+0x60/0xb0 [ 262.878663][T12629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.878682][T12629] RIP: 0033:0x7fc3b0f8eec9 [ 262.878700][T12629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.878718][T12629] RSP: 002b:00007fc3b1e98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.878738][T12629] RAX: ffffffffffffffda RBX: 00007fc3b11e5fa0 RCX: 00007fc3b0f8eec9 [ 262.878753][T12629] RDX: 0000000004000000 RSI: 0000200000001040 RDI: 0000000000000003 [ 262.878766][T12629] RBP: 00007fc3b1e98090 R08: 0000000000000000 R09: 0000000000000000 [ 262.878777][T12629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.878789][T12629] R13: 00007fc3b11e6038 R14: 00007fc3b11e5fa0 R15: 00007fff72c67988 [ 262.878821][T12629] [ 263.600433][T12638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1741'. [ 263.696954][T12640] tipc: Enabled bearer , priority 0 [ 263.705369][T12640] syzkaller0: entered promiscuous mode [ 263.717845][T12640] syzkaller0: entered allmulticast mode [ 263.918124][T12655] FAULT_INJECTION: forcing a failure. [ 263.918124][T12655] name failslab, interval 1, probability 0, space 0, times 0 [ 263.930846][T12655] CPU: 0 UID: 0 PID: 12655 Comm: syz.2.1746 Not tainted syzkaller #0 PREEMPT(full) [ 263.930873][T12655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 263.930883][T12655] Call Trace: [ 263.930891][T12655] [ 263.930899][T12655] dump_stack_lvl+0x189/0x250 [ 263.930926][T12655] ? __pfx____ratelimit+0x10/0x10 [ 263.930964][T12655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.930986][T12655] ? __pfx__printk+0x10/0x10 [ 263.931017][T12655] ? __lock_acquire+0xab9/0xd20 [ 263.931049][T12655] should_fail_ex+0x414/0x560 [ 263.931089][T12655] should_failslab+0xa8/0x100 [ 263.931118][T12655] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 263.931146][T12655] ? pfn_valid+0x125/0x4d0 [ 263.931168][T12655] ? pfn_valid+0x125/0x4d0 [ 263.931188][T12655] ? bpf_xdp_adjust_tail+0x1ae/0x220 [ 263.931218][T12655] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 263.931254][T12655] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 263.931287][T12655] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 263.931308][T12655] ? bpf_dispatcher_xdp+0x800/0x1000 [ 263.931327][T12655] ? bpf_dispatcher_xdp+0x800/0x1000 [ 263.931395][T12655] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 263.931431][T12655] ? _copy_from_user+0x94/0xb0 [ 263.931455][T12655] ? bpf_test_init+0x113/0x150 [ 263.931473][T12655] ? xdp_convert_md_to_buff+0x5b/0x330 [ 263.931498][T12655] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 263.931538][T12655] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 263.931566][T12655] ? __fget_files+0x2a/0x420 [ 263.931600][T12655] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 263.931623][T12655] bpf_prog_test_run+0x2c4/0x340 [ 263.931654][T12655] __sys_bpf+0x581/0x870 [ 263.931677][T12655] ? __pfx___sys_bpf+0x10/0x10 [ 263.931711][T12655] ? ksys_write+0x22a/0x250 [ 263.931736][T12655] ? __pfx_ksys_write+0x10/0x10 [ 263.931757][T12655] ? rcu_is_watching+0x15/0xb0 [ 263.931781][T12655] __x64_sys_bpf+0x7c/0x90 [ 263.931802][T12655] do_syscall_64+0xfa/0x3b0 [ 263.931823][T12655] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.931843][T12655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.931863][T12655] ? clear_bhb_loop+0x60/0xb0 [ 263.931886][T12655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.931905][T12655] RIP: 0033:0x7f76aad8eec9 [ 263.931922][T12655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.931937][T12655] RSP: 002b:00007f76abc90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.931958][T12655] RAX: ffffffffffffffda RBX: 00007f76aafe5fa0 RCX: 00007f76aad8eec9 [ 263.931972][T12655] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 263.931985][T12655] RBP: 00007f76abc90090 R08: 0000000000000000 R09: 0000000000000000 [ 263.931997][T12655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.932009][T12655] R13: 00007f76aafe6038 R14: 00007f76aafe5fa0 R15: 00007fffae685698 [ 263.932041][T12655] [ 264.247506][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1747'. [ 264.256683][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1747'. [ 264.265786][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1747'. [ 264.811331][T12670] netlink: 'syz.2.1750': attribute type 1 has an invalid length. [ 264.848732][T12670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1750'. [ 264.889287][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1749'. [ 264.957898][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'. [ 265.516522][T12689] tipc: Enabling of bearer rejected, already enabled [ 265.565799][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1754'. [ 265.990173][T12705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1760'. [ 266.010055][T12705] netlink: 'syz.3.1760': attribute type 2 has an invalid length. [ 268.266248][T12734] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1767'. [ 268.578896][T12739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1768'. [ 268.614354][T12739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1768'. [ 268.644898][T12739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1768'. [ 268.690759][T12745] FAULT_INJECTION: forcing a failure. [ 268.690759][T12745] name failslab, interval 1, probability 0, space 0, times 0 [ 268.703436][T12745] CPU: 0 UID: 0 PID: 12745 Comm: syz.0.1771 Not tainted syzkaller #0 PREEMPT(full) [ 268.703462][T12745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.703475][T12745] Call Trace: [ 268.703482][T12745] [ 268.703491][T12745] dump_stack_lvl+0x189/0x250 [ 268.703518][T12745] ? __pfx____ratelimit+0x10/0x10 [ 268.703539][T12745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.703561][T12745] ? __pfx__printk+0x10/0x10 [ 268.703592][T12745] ? __lock_acquire+0xab9/0xd20 [ 268.703623][T12745] should_fail_ex+0x414/0x560 [ 268.703655][T12745] should_failslab+0xa8/0x100 [ 268.703684][T12745] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 268.703714][T12745] ? pfn_valid+0x125/0x4d0 [ 268.703737][T12745] ? pfn_valid+0x125/0x4d0 [ 268.703757][T12745] ? bpf_xdp_adjust_tail+0x1ae/0x220 [ 268.703787][T12745] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 268.703823][T12745] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 268.703859][T12745] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 268.703881][T12745] ? bpf_dispatcher_xdp+0x800/0x1000 [ 268.703906][T12745] ? bpf_dispatcher_xdp+0x800/0x1000 [ 268.703974][T12745] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 268.704005][T12745] ? _copy_from_user+0x94/0xb0 [ 268.704029][T12745] ? bpf_test_init+0x113/0x150 [ 268.704048][T12745] ? xdp_convert_md_to_buff+0x5b/0x330 [ 268.704072][T12745] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 268.704112][T12745] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 268.704140][T12745] ? __fget_files+0x2a/0x420 [ 268.704173][T12745] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 268.704196][T12745] bpf_prog_test_run+0x2c4/0x340 [ 268.704226][T12745] __sys_bpf+0x581/0x870 [ 268.704252][T12745] ? __pfx___sys_bpf+0x10/0x10 [ 268.704290][T12745] ? ksys_write+0x22a/0x250 [ 268.704317][T12745] ? __pfx_ksys_write+0x10/0x10 [ 268.704338][T12745] ? rcu_is_watching+0x15/0xb0 [ 268.704365][T12745] __x64_sys_bpf+0x7c/0x90 [ 268.704387][T12745] do_syscall_64+0xfa/0x3b0 [ 268.704408][T12745] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.704428][T12745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.704447][T12745] ? clear_bhb_loop+0x60/0xb0 [ 268.704471][T12745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.704489][T12745] RIP: 0033:0x7ff64b18eec9 [ 268.704507][T12745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.704524][T12745] RSP: 002b:00007ff64c0d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.704545][T12745] RAX: ffffffffffffffda RBX: 00007ff64b3e5fa0 RCX: 00007ff64b18eec9 [ 268.704560][T12745] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 268.704572][T12745] RBP: 00007ff64c0d3090 R08: 0000000000000000 R09: 0000000000000000 [ 268.704584][T12745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 268.704595][T12745] R13: 00007ff64b3e6038 R14: 00007ff64b3e5fa0 R15: 00007ffcb9aa6798 [ 268.704627][T12745] [ 268.718216][T12747] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1770'. [ 269.024985][T12750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.171492][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 269.320226][T12771] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1776'. [ 269.854777][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1779'. [ 269.873896][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 269.929708][T12783] netlink: 'syz.2.1779': attribute type 5 has an invalid length. [ 269.967372][T12783] netlink: 'syz.2.1779': attribute type 6 has an invalid length. [ 270.485135][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1780'. [ 270.957392][T12798] vlan3: entered allmulticast mode [ 271.203358][T12802] pim6reg: entered allmulticast mode [ 271.497679][T12802] pim6reg: left allmulticast mode [ 271.669989][T12808] netlink: 'syz.0.1786': attribute type 4 has an invalid length. [ 271.692130][T12808] netlink: 'syz.0.1786': attribute type 4 has an invalid length. [ 271.734573][T12808] ip6gretap2: entered allmulticast mode [ 272.272639][T12837] tipc: Enabled bearer , priority 0 [ 272.310457][T12839] netlink: 'syz.3.1793': attribute type 6 has an invalid length. [ 272.402864][T12837] tipc: Disabling bearer [ 272.539478][T12847] FAULT_INJECTION: forcing a failure. [ 272.539478][T12847] name failslab, interval 1, probability 0, space 0, times 0 [ 272.552191][T12847] CPU: 1 UID: 0 PID: 12847 Comm: syz.1.1796 Not tainted syzkaller #0 PREEMPT(full) [ 272.552218][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.552230][T12847] Call Trace: [ 272.552238][T12847] [ 272.552247][T12847] dump_stack_lvl+0x189/0x250 [ 272.552274][T12847] ? __pfx____ratelimit+0x10/0x10 [ 272.552296][T12847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.552325][T12847] ? __pfx__printk+0x10/0x10 [ 272.552357][T12847] ? __lock_acquire+0xab9/0xd20 [ 272.552389][T12847] should_fail_ex+0x414/0x560 [ 272.552421][T12847] should_failslab+0xa8/0x100 [ 272.552449][T12847] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 272.552478][T12847] ? pfn_valid+0x125/0x4d0 [ 272.552501][T12847] ? pfn_valid+0x125/0x4d0 [ 272.552521][T12847] ? bpf_xdp_adjust_tail+0x1ae/0x220 [ 272.552552][T12847] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 272.552587][T12847] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 272.552622][T12847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 272.552644][T12847] ? 0xffffffffa02057c0 [ 272.552663][T12847] ? 0xffffffffa02057c0 [ 272.552731][T12847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 272.552763][T12847] ? _copy_from_user+0x94/0xb0 [ 272.552787][T12847] ? bpf_test_init+0x113/0x150 [ 272.552806][T12847] ? xdp_convert_md_to_buff+0x5b/0x330 [ 272.552832][T12847] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 272.552872][T12847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 272.552900][T12847] ? __fget_files+0x2a/0x420 [ 272.552932][T12847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 272.552955][T12847] bpf_prog_test_run+0x2c4/0x340 [ 272.552986][T12847] __sys_bpf+0x581/0x870 [ 272.553012][T12847] ? __pfx___sys_bpf+0x10/0x10 [ 272.553049][T12847] ? ksys_write+0x22a/0x250 [ 272.553074][T12847] ? __pfx_ksys_write+0x10/0x10 [ 272.553094][T12847] ? rcu_is_watching+0x15/0xb0 [ 272.553121][T12847] __x64_sys_bpf+0x7c/0x90 [ 272.553144][T12847] do_syscall_64+0xfa/0x3b0 [ 272.553165][T12847] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.553186][T12847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.553205][T12847] ? clear_bhb_loop+0x60/0xb0 [ 272.553230][T12847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.553249][T12847] RIP: 0033:0x7fc3b0f8eec9 [ 272.553265][T12847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.553283][T12847] RSP: 002b:00007fc3b1e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.553311][T12847] RAX: ffffffffffffffda RBX: 00007fc3b11e5fa0 RCX: 00007fc3b0f8eec9 [ 272.553326][T12847] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 272.553338][T12847] RBP: 00007fc3b1e98090 R08: 0000000000000000 R09: 0000000000000000 [ 272.553351][T12847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.553363][T12847] R13: 00007fc3b11e6038 R14: 00007fc3b11e5fa0 R15: 00007fff72c67988 [ 272.553395][T12847] [ 273.368091][T12860] netlink: 'syz.0.1800': attribute type 1 has an invalid length. [ 273.412254][T12860] __nla_validate_parse: 2 callbacks suppressed [ 273.412275][T12860] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1800'. [ 273.569008][T12865] tipc: Enabled bearer , priority 0 [ 273.588548][T12865] syzkaller0: entered promiscuous mode [ 273.594050][T12865] syzkaller0: entered allmulticast mode [ 273.635968][T12865] FAULT_INJECTION: forcing a failure. [ 273.635968][T12865] name failslab, interval 1, probability 0, space 0, times 0 [ 273.648764][T12865] CPU: 0 UID: 0 PID: 12865 Comm: syz.1.1801 Not tainted syzkaller #0 PREEMPT(full) [ 273.648791][T12865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 273.648803][T12865] Call Trace: [ 273.648811][T12865] [ 273.648819][T12865] dump_stack_lvl+0x189/0x250 [ 273.648846][T12865] ? __pfx____ratelimit+0x10/0x10 [ 273.648868][T12865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.648890][T12865] ? __pfx__printk+0x10/0x10 [ 273.648922][T12865] ? __pfx___might_resched+0x10/0x10 [ 273.648950][T12865] ? fs_reclaim_acquire+0x7d/0x100 [ 273.648984][T12865] should_fail_ex+0x414/0x560 [ 273.649018][T12865] should_failslab+0xa8/0x100 [ 273.649047][T12865] __kmalloc_noprof+0xcb/0x4f0 [ 273.649069][T12865] ? kfree+0x4d/0x440 [ 273.649089][T12865] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 273.649114][T12865] tomoyo_realpath_from_path+0xe3/0x5d0 [ 273.649136][T12865] ? tomoyo_domain+0xd9/0x130 [ 273.649163][T12865] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 273.649190][T12865] tomoyo_path_number_perm+0x1e8/0x5a0 [ 273.649227][T12865] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 273.649273][T12865] ? __lock_acquire+0xab9/0xd20 [ 273.649323][T12865] ? __fget_files+0x2a/0x420 [ 273.649353][T12865] ? __fget_files+0x2a/0x420 [ 273.649379][T12865] ? __fget_files+0x3a0/0x420 [ 273.649405][T12865] ? __fget_files+0x2a/0x420 [ 273.649437][T12865] security_file_ioctl+0xcb/0x2d0 [ 273.649464][T12865] __se_sys_ioctl+0x47/0x170 [ 273.649489][T12865] do_syscall_64+0xfa/0x3b0 [ 273.649510][T12865] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.649530][T12865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.649550][T12865] ? clear_bhb_loop+0x60/0xb0 [ 273.649575][T12865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.649593][T12865] RIP: 0033:0x7fc3b0f8eec9 [ 273.649611][T12865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.649628][T12865] RSP: 002b:00007fc3b1e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.649648][T12865] RAX: ffffffffffffffda RBX: 00007fc3b11e5fa0 RCX: 00007fc3b0f8eec9 [ 273.649663][T12865] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 273.649676][T12865] RBP: 00007fc3b1e98090 R08: 0000000000000000 R09: 0000000000000000 [ 273.649688][T12865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.649699][T12865] R13: 00007fc3b11e6038 R14: 00007fc3b11e5fa0 R15: 00007fff72c67988 [ 273.649733][T12865] [ 273.649741][T12865] ERROR: Out of memory at tomoyo_realpath_from_path. [ 274.010215][T12865] tipc: Resetting bearer [ 274.047762][T12864] tipc: Resetting bearer [ 274.116785][T12864] tipc: Disabling bearer [ 274.151421][T12870] vlan4: entered allmulticast mode [ 274.301528][T12881] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1805'. [ 274.424656][T12884] FAULT_INJECTION: forcing a failure. [ 274.424656][T12884] name failslab, interval 1, probability 0, space 0, times 0 [ 274.437381][T12884] CPU: 1 UID: 0 PID: 12884 Comm: syz.0.1807 Not tainted syzkaller #0 PREEMPT(full) [ 274.437408][T12884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 274.437421][T12884] Call Trace: [ 274.437428][T12884] [ 274.437437][T12884] dump_stack_lvl+0x189/0x250 [ 274.437465][T12884] ? __pfx____ratelimit+0x10/0x10 [ 274.437487][T12884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.437509][T12884] ? __pfx__printk+0x10/0x10 [ 274.437539][T12884] ? __lock_acquire+0xab9/0xd20 [ 274.437571][T12884] should_fail_ex+0x414/0x560 [ 274.437604][T12884] should_failslab+0xa8/0x100 [ 274.437634][T12884] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 274.437664][T12884] ? pfn_valid+0x125/0x4d0 [ 274.437686][T12884] ? pfn_valid+0x125/0x4d0 [ 274.437705][T12884] ? bpf_xdp_adjust_tail+0x1ae/0x220 [ 274.437736][T12884] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 274.437772][T12884] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 274.437807][T12884] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 274.437830][T12884] ? 0xffffffffa02057c0 [ 274.437848][T12884] ? 0xffffffffa02057c0 [ 274.437916][T12884] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 274.437948][T12884] ? _copy_from_user+0x94/0xb0 [ 274.437973][T12884] ? bpf_test_init+0x113/0x150 [ 274.437992][T12884] ? xdp_convert_md_to_buff+0x5b/0x330 [ 274.438018][T12884] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 274.438058][T12884] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 274.438085][T12884] ? __fget_files+0x2a/0x420 [ 274.438132][T12884] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 274.438156][T12884] bpf_prog_test_run+0x2c4/0x340 [ 274.438187][T12884] __sys_bpf+0x581/0x870 [ 274.438214][T12884] ? __pfx___sys_bpf+0x10/0x10 [ 274.438251][T12884] ? ksys_write+0x22a/0x250 [ 274.438278][T12884] ? __pfx_ksys_write+0x10/0x10 [ 274.438299][T12884] ? rcu_is_watching+0x15/0xb0 [ 274.438326][T12884] __x64_sys_bpf+0x7c/0x90 [ 274.438348][T12884] do_syscall_64+0xfa/0x3b0 [ 274.438370][T12884] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.438391][T12884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.438411][T12884] ? clear_bhb_loop+0x60/0xb0 [ 274.438435][T12884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.438454][T12884] RIP: 0033:0x7ff64b18eec9 [ 274.438471][T12884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.438489][T12884] RSP: 002b:00007ff64c0d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.438509][T12884] RAX: ffffffffffffffda RBX: 00007ff64b3e5fa0 RCX: 00007ff64b18eec9 [ 274.438524][T12884] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 274.438537][T12884] RBP: 00007ff64c0d3090 R08: 0000000000000000 R09: 0000000000000000 [ 274.438550][T12884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.438562][T12884] R13: 00007ff64b3e6038 R14: 00007ff64b3e5fa0 R15: 00007ffcb9aa6798 [ 274.438594][T12884] [ 274.764279][T12888] tipc: Enabled bearer , priority 0 [ 274.774057][T12888] syzkaller0: entered promiscuous mode [ 274.784120][T12888] syzkaller0: entered allmulticast mode [ 275.008373][T12889] tipc: Resetting bearer [ 275.064851][T12887] tipc: Resetting bearer [ 275.116375][T12887] tipc: Disabling bearer [ 275.215772][T12906] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 275.372317][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1817'. [ 275.410697][T12910] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.428747][T12910] bond6: (slave macvlan0): Enslaving as an active interface with an up link [ 275.464414][T12918] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1819'. [ 275.594634][T12924] netlink: 'syz.0.1822': attribute type 5 has an invalid length. [ 275.612902][T12924] ip6gre1: entered allmulticast mode [ 275.613093][T12926] FAULT_INJECTION: forcing a failure. [ 275.613093][T12926] name failslab, interval 1, probability 0, space 0, times 0 [ 275.630947][T12926] CPU: 1 UID: 0 PID: 12926 Comm: syz.3.1823 Not tainted syzkaller #0 PREEMPT(full) [ 275.630973][T12926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.630985][T12926] Call Trace: [ 275.630993][T12926] [ 275.631000][T12926] dump_stack_lvl+0x189/0x250 [ 275.631034][T12926] ? __pfx____ratelimit+0x10/0x10 [ 275.631056][T12926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.631077][T12926] ? __pfx__printk+0x10/0x10 [ 275.631108][T12926] ? __lock_acquire+0xab9/0xd20 [ 275.631139][T12926] should_fail_ex+0x414/0x560 [ 275.631170][T12926] should_failslab+0xa8/0x100 [ 275.631198][T12926] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 275.631226][T12926] ? pfn_valid+0x125/0x4d0 [ 275.631249][T12926] ? pfn_valid+0x125/0x4d0 [ 275.631267][T12926] ? bpf_xdp_adjust_tail+0x1ae/0x220 [ 275.631304][T12926] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 275.631338][T12926] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 275.631373][T12926] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 275.631395][T12926] ? 0xffffffffa02057c0 [ 275.631413][T12926] ? 0xffffffffa02057c0 [ 275.631479][T12926] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 275.631511][T12926] ? _copy_from_user+0x94/0xb0 [ 275.631534][T12926] ? bpf_test_init+0x113/0x150 [ 275.631553][T12926] ? xdp_convert_md_to_buff+0x5b/0x330 [ 275.631578][T12926] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 275.631619][T12926] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 275.631654][T12926] ? __fget_files+0x2a/0x420 [ 275.631684][T12926] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 275.631705][T12926] bpf_prog_test_run+0x2c4/0x340 [ 275.631734][T12926] __sys_bpf+0x581/0x870 [ 275.631758][T12926] ? __pfx___sys_bpf+0x10/0x10 [ 275.631795][T12926] ? ksys_write+0x22a/0x250 [ 275.631823][T12926] ? __pfx_ksys_write+0x10/0x10 [ 275.631844][T12926] ? rcu_is_watching+0x15/0xb0 [ 275.631869][T12926] __x64_sys_bpf+0x7c/0x90 [ 275.631891][T12926] do_syscall_64+0xfa/0x3b0 [ 275.631911][T12926] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.631932][T12926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.631952][T12926] ? clear_bhb_loop+0x60/0xb0 [ 275.631983][T12926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.632003][T12926] RIP: 0033:0x7f038b18eec9 [ 275.632026][T12926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.632042][T12926] RSP: 002b:00007f038bf79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.632064][T12926] RAX: ffffffffffffffda RBX: 00007f038b3e5fa0 RCX: 00007f038b18eec9 [ 275.632079][T12926] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 275.632091][T12926] RBP: 00007f038bf79090 R08: 0000000000000000 R09: 0000000000000000 [ 275.632104][T12926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.632115][T12926] R13: 00007f038b3e6038 R14: 00007f038b3e5fa0 R15: 00007ffea19ffc98 [ 275.632147][T12926] [ 275.930223][T12893] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 276.038995][ T30] audit: type=1107 audit(1759042243.789:4): pid=12931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 276.067681][T12937] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1827'. [ 276.125674][T12939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1828'. [ 276.138275][T12942] tipc: Enabled bearer , priority 0 [ 276.146327][T12942] syzkaller0: entered promiscuous mode [ 276.152212][T12942] syzkaller0: entered allmulticast mode [ 276.329877][T12944] ..1·: left allmulticast mode [ 276.334707][T12944] hsr_slave_0: left allmulticast mode [ 276.340736][T12944] hsr_slave_1: left allmulticast mode [ 276.381047][T12944] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 276.389043][T12944] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 276.436871][T12944] bond2: left promiscuous mode [ 276.442600][T12944] ip6tnl2: left promiscuous mode [ 276.447790][T12944] ip6tnl2: left allmulticast mode [ 276.462984][T12944] bond4: left promiscuous mode [ 276.468418][T12944] wireguard0: left promiscuous mode [ 276.483644][T12948] tipc: Resetting bearer [ 276.492144][T10710] syz0: Port: 1 Link DOWN [ 276.492169][ T1160] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.493776][ T1160] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.537787][ T1160] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.554192][T12941] tipc: Resetting bearer [ 276.590206][T12941] tipc: Disabling bearer [ 276.600678][ T1160] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.621257][T12957] tipc: Enabled bearer , priority 0 [ 276.630260][T12957] syzkaller0: entered promiscuous mode [ 276.638114][T12957] syzkaller0: entered allmulticast mode [ 276.677066][T12957] tipc: Resetting bearer [ 276.688122][T12955] tipc: Resetting bearer [ 276.745542][T12955] tipc: Disabling bearer [ 277.066854][T12972] vlan4: entered allmulticast mode [ 277.149242][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 277.189723][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1843'. [ 277.222357][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1843'. [ 277.283709][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'. [ 277.399005][T12989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1846'. [ 277.623744][T12997] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 277.635016][T12997] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 277.793671][T13011] netlink: 'syz.1.1853': attribute type 4 has an invalid length. [ 278.689348][T13031] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa:0:20:0, load rds_tcp or rds_rdma? [ 278.715747][T13032] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa:0:20:0, load rds_tcp or rds_rdma? [ 278.810742][T13031] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 278.978348][ T30] audit: type=1800 audit(1759042246.719:5): pid=13029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1857" name="cgroup.controllers" dev="tmpfs" ino=2003 res=0 errno=0 [ 279.752825][T13049] __nla_validate_parse: 4 callbacks suppressed [ 279.752844][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'. [ 279.831642][T13052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1865'. [ 279.868960][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 279.944373][T13054] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1866'. [ 279.956972][T13037] lec:lec_atm_close: lec0: Shut down! [ 280.087861][T13060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1868'. [ 280.266062][T13060] netlink: 'syz.2.1868': attribute type 10 has an invalid length. [ 280.275991][T13060] bond0: (slave wlan1): Opening slave failed [ 280.432273][T13070] dvmrp8: entered allmulticast mode [ 280.822862][T13094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1876'. [ 280.868002][T13069] dvmrp8: left allmulticast mode [ 281.427276][T13120] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1883'. [ 281.440082][T13123] tipc: Enabling of bearer rejected, failed to enable media [ 281.843764][T13133] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1884'. [ 349.947408][ T5874] Bluetooth: hci4: command 0x0405 tx timeout [ 418.267428][ T31] INFO: task kworker/0:23:10688 blocked for more than 143 seconds. [ 418.275382][ T31] Not tainted syzkaller #0 [ 418.280403][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.289325][ T31] task:kworker/0:23 state:D stack:25752 pid:10688 tgid:10688 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 418.301413][ T31] Workqueue: events rfkill_sync_work [ 418.306750][ T31] Call Trace: [ 418.310168][ T31] [ 418.313107][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 418.317763][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 418.324209][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 418.330155][ T31] ? __pfx___schedule+0x10/0x10 [ 418.335050][ T31] ? schedule+0x91/0x360 [ 418.339774][ T31] schedule+0x165/0x360 [ 418.343948][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.385366][ T31] __mutex_lock+0x7e6/0x1350 [ 418.390506][ T31] ? __mutex_lock+0x5bb/0x1350 [ 418.395307][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 418.400879][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.405926][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.417430][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 418.423372][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 418.430078][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 418.435828][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 418.441220][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 418.447718][ T31] rfkill_set_block+0x1cf/0x440 [ 418.452595][ T31] rfkill_sync_work+0x114/0x200 [ 418.457544][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 418.463273][ T31] process_scheduled_works+0xae1/0x17b0 [ 418.468861][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 418.474849][ T31] worker_thread+0x8a0/0xda0 [ 418.479466][ T31] kthread+0x70e/0x8a0 [ 418.483520][ T31] ? __pfx_worker_thread+0x10/0x10 [ 418.488664][ T31] ? __pfx_kthread+0x10/0x10 [ 418.493238][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.498500][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.503692][ T31] ? __pfx_kthread+0x10/0x10 [ 418.508598][ T31] ret_from_fork+0x439/0x7d0 [ 418.513208][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 418.518413][ T31] ? __switch_to_asm+0x39/0x70 [ 418.523168][ T31] ? __switch_to_asm+0x33/0x70 [ 418.527953][ T31] ? __pfx_kthread+0x10/0x10 [ 418.532528][ T31] ret_from_fork_asm+0x1a/0x30 [ 418.537368][ T31] [ 418.540402][ T31] INFO: task kworker/0:37:10715 blocked for more than 143 seconds. [ 418.548369][ T31] Not tainted syzkaller #0 [ 418.553300][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.562050][ T31] task:kworker/0:37 state:D stack:25344 pid:10715 tgid:10715 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 418.574127][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 418.580863][ T31] Call Trace: [ 418.584136][ T31] [ 418.587051][ T31] __schedule+0x1798/0x4cc0 [ 418.591935][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 418.597530][ T31] ? __pfx___schedule+0x10/0x10 [ 418.602375][ T31] ? schedule+0x91/0x360 [ 418.606698][ T31] schedule+0x165/0x360 [ 418.610939][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.616405][ T31] __mutex_lock+0x7e6/0x1350 [ 418.621142][ T31] ? __mutex_lock+0x5bb/0x1350 [ 418.625912][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 418.632610][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.637672][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 418.643393][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 418.649212][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 418.655302][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 418.661208][ T31] process_scheduled_works+0xae1/0x17b0 [ 418.666786][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 418.672945][ T31] worker_thread+0x8a0/0xda0 [ 418.677580][ T31] kthread+0x70e/0x8a0 [ 418.681638][ T31] ? __pfx_worker_thread+0x10/0x10 [ 418.686727][ T31] ? __pfx_kthread+0x10/0x10 [ 418.691538][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.696739][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.701982][ T31] ? __pfx_kthread+0x10/0x10 [ 418.706584][ T31] ret_from_fork+0x439/0x7d0 [ 418.711227][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 418.716356][ T31] ? __switch_to_asm+0x39/0x70 [ 418.721296][ T31] ? __switch_to_asm+0x33/0x70 [ 418.726052][ T31] ? __pfx_kthread+0x10/0x10 [ 418.730663][ T31] ret_from_fork_asm+0x1a/0x30 [ 418.735424][ T31] [ 418.738586][ T31] INFO: task syz.4.1742:12639 blocked for more than 143 seconds. [ 418.746308][ T31] Not tainted syzkaller #0 [ 418.753597][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.762300][ T31] task:syz.4.1742 state:D stack:25096 pid:12639 tgid:12639 ppid:5871 task_flags:0x400040 flags:0x00004004 [ 418.774258][ T31] Call Trace: [ 418.777845][ T31] [ 418.780789][ T31] __schedule+0x1798/0x4cc0 [ 418.785311][ T31] ? validate_chain+0x897/0x2140 [ 418.790294][ T31] ? __lock_acquire+0xab9/0xd20 [ 418.795160][ T31] ? __pfx___schedule+0x10/0x10 [ 418.800041][ T31] ? schedule+0x91/0x360 [ 418.804266][ T31] schedule+0x165/0x360 [ 418.808573][ T31] schedule_timeout+0x9a/0x270 [ 418.813411][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 418.818805][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.823985][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.829190][ T31] ? wait_for_completion+0x267/0x5d0 [ 418.834457][ T31] wait_for_completion+0x2bf/0x5d0 [ 418.839744][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 418.845366][ T31] ? __flush_work+0xd2/0xbc0 [ 418.850076][ T31] ? __flush_work+0xd2/0xbc0 [ 418.854655][ T31] __flush_work+0x9b9/0xbc0 [ 418.859184][ T31] ? __flush_work+0xd2/0xbc0 [ 418.863759][ T31] ? __pfx___flush_work+0x10/0x10 [ 418.868945][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 418.874229][ T31] ? __pfx___cancel_work+0x10/0x10 [ 418.879353][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 418.885087][ T31] __cancel_work_sync+0xbe/0x110 [ 418.890161][ T31] rfkill_unregister+0x92/0x220 [ 418.895031][ T31] nfc_unregister_device+0x96/0x2a0 [ 418.900454][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 418.906184][ T31] virtual_ncidev_close+0x56/0x90 [ 418.911298][ T31] __fput+0x44c/0xa70 [ 418.915286][ T31] task_work_run+0x1d1/0x260 [ 418.919897][ T31] ? __pfx_task_work_run+0x10/0x10 [ 418.924993][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 418.930620][ T31] exit_to_user_mode_loop+0xec/0x110 [ 418.935889][ T31] do_syscall_64+0x2bd/0x3b0 [ 418.940513][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.945708][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.951788][ T31] ? clear_bhb_loop+0x60/0xb0 [ 418.956450][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.962582][ T31] RIP: 0033:0x7fa29438eec9 [ 418.966981][ T31] RSP: 002b:00007ffd162da388 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 418.975396][ T31] RAX: 0000000000000000 RBX: 00007fa2945e7da0 RCX: 00007fa29438eec9 [ 418.983386][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 418.991499][ T31] RBP: 00007fa2945e7da0 R08: 0000000000024bf8 R09: 0000001e162da67f [ 418.999486][ T31] R10: 00007fa2945e7cb0 R11: 0000000000000246 R12: 00000000000408e3 [ 419.007486][ T31] R13: 00007fa2945e6090 R14: ffffffffffffffff R15: 00007ffd162da4a0 [ 419.015478][ T31] [ 419.018687][ T31] [ 419.018687][ T31] Showing all locks held in the system: [ 419.026394][ T31] 1 lock held by khungtaskd/31: [ 419.031289][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 419.041222][ T31] 2 locks held by getty/5625: [ 419.045875][ T31] #0: ffff888033e070a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 419.055757][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 419.065874][ T31] 2 locks held by kworker/u8:14/6990: [ 419.071365][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 419.083168][ T31] #1: ffffc9000c847bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 419.095926][ T31] 4 locks held by kworker/0:23/10688: [ 419.101325][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 419.112449][ T31] #1: ffffc9000c687bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 419.124827][ T31] #2: ffffffff8f80a828 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 419.134855][ T31] #3: ffff88807656d100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 419.144670][ T31] 3 locks held by kworker/0:37/10715: [ 419.150511][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 419.161510][ T31] #1: ffffc90005c87bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 419.175337][ T31] #2: ffffffff8f80a828 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 419.186814][ T31] 1 lock held by syz.4.1742/12639: [ 419.191934][ T31] #0: ffff88807656d100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 419.201886][ T31] 3 locks held by syz.1.1853/13003: [ 419.207114][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.215591][ T31] #1: ffff88807e76a100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 419.225240][ T31] #2: ffffffff8f80a828 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 419.235317][ T31] 1 lock held by syz-executor/13042: [ 419.240639][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.249133][ T31] 1 lock held by syz.2.1877/13095: [ 419.254220][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.262881][ T31] 1 lock held by syz.0.1882/13118: [ 419.268028][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.276497][ T31] 1 lock held by syz.0.1882/13121: [ 419.281639][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.290334][ T31] 1 lock held by syz.0.1882/13123: [ 419.295421][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.303888][ T31] 1 lock held by syz.3.1885/13135: [ 419.309009][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.317694][ T31] 1 lock held by syz.3.1885/13136: [ 419.322781][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.331229][ T31] 1 lock held by syz-executor/13140: [ 419.336487][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.344940][ T31] 1 lock held by syz-executor/13142: [ 419.350364][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.358855][ T31] 1 lock held by syz-executor/13144: [ 419.364132][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.372585][ T31] 1 lock held by syz-executor/13146: [ 419.377991][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.386417][ T31] 1 lock held by syz-executor/13150: [ 419.391726][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.400310][ T31] 1 lock held by syz-executor/13152: [ 419.405591][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.414206][ T31] 1 lock held by syz-executor/13154: [ 419.419517][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.427980][ T31] 1 lock held by syz-executor/13156: [ 419.433247][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.441997][ T31] 1 lock held by syz-executor/13158: [ 419.447301][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.455723][ T31] 1 lock held by syz-executor/13162: [ 419.461035][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.470023][ T31] 1 lock held by syz-executor/13164: [ 419.475322][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.483798][ T31] 1 lock held by syz-executor/13166: [ 419.489088][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.497685][ T31] 1 lock held by syz-executor/13168: [ 419.502956][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 419.511532][ T31] [ 419.513851][ T31] ============================================= [ 419.513851][ T31] [ 419.522336][ T31] NMI backtrace for cpu 0 [ 419.522351][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 419.522363][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 419.522370][ T31] Call Trace: [ 419.522374][ T31] [ 419.522380][ T31] dump_stack_lvl+0x189/0x250 [ 419.522398][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.522409][ T31] ? __pfx__printk+0x10/0x10 [ 419.522428][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 419.522446][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 419.522461][ T31] ? __pfx__printk+0x10/0x10 [ 419.522476][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 419.522492][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 419.522509][ T31] watchdog+0xf93/0xfe0 [ 419.522525][ T31] ? watchdog+0x1de/0xfe0 [ 419.522540][ T31] kthread+0x70e/0x8a0 [ 419.522554][ T31] ? __pfx_watchdog+0x10/0x10 [ 419.522566][ T31] ? __pfx_kthread+0x10/0x10 [ 419.522579][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.522589][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.522599][ T31] ? __pfx_kthread+0x10/0x10 [ 419.522611][ T31] ret_from_fork+0x439/0x7d0 [ 419.522622][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 419.522634][ T31] ? __switch_to_asm+0x39/0x70 [ 419.522645][ T31] ? __switch_to_asm+0x33/0x70 [ 419.522656][ T31] ? __pfx_kthread+0x10/0x10 [ 419.522668][ T31] ret_from_fork_asm+0x1a/0x30 [ 419.522687][ T31] [ 419.522691][ T31] Sending NMI from CPU 0 to CPUs 1: [ 419.668329][ C1] NMI backtrace for cpu 1 [ 419.668345][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 419.668364][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 419.668374][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 419.668398][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 59 14 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 419.668413][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 419.668428][ C1] RAX: 5263c5c4fd303a00 RBX: ffffffff81968528 RCX: 5263c5c4fd303a00 [ 419.668441][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b1ac6 RDI: ffffffff8be33f80 [ 419.668453][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 419.668465][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa30630 [ 419.668477][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 419.668489][ C1] FS: 0000000000000000(0000) GS:ffff888125d39000(0000) knlGS:0000000000000000 [ 419.668502][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.668514][ C1] CR2: 000055797c08efb0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 419.668529][ C1] Call Trace: [ 419.668536][ C1] [ 419.668542][ C1] default_idle+0x13/0x20 [ 419.668562][ C1] default_idle_call+0x74/0xb0 [ 419.668584][ C1] do_idle+0x1e8/0x510 [ 419.668607][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 419.668626][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.668643][ C1] ? __pfx_do_idle+0x10/0x10 [ 419.668672][ C1] ? do_idle+0x4ed/0x510 [ 419.668697][ C1] cpu_startup_entry+0x44/0x60 [ 419.668720][ C1] start_secondary+0x101/0x110 [ 419.668742][ C1] common_startup_64+0x13e/0x147 [ 419.668770][ C1] [ 419.669357][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 419.850553][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 419.859652][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 419.869696][ T31] Call Trace: [ 419.872963][ T31] [ 419.875969][ T31] dump_stack_lvl+0x99/0x250 [ 419.880551][ T31] ? __asan_memcpy+0x40/0x70 [ 419.885131][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.890367][ T31] ? __pfx__printk+0x10/0x10 [ 419.894958][ T31] vpanic+0x281/0x750 [ 419.898934][ T31] ? __pfx_vpanic+0x10/0x10 [ 419.903426][ T31] ? preempt_schedule+0xae/0xc0 [ 419.908267][ T31] ? preempt_schedule_common+0x83/0xd0 [ 419.913720][ T31] panic+0xb9/0xc0 [ 419.917433][ T31] ? __pfx_panic+0x10/0x10 [ 419.921842][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 419.927214][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 419.933368][ T31] watchdog+0xfd2/0xfe0 [ 419.937555][ T31] ? watchdog+0x1de/0xfe0 [ 419.941970][ T31] kthread+0x70e/0x8a0 [ 419.946054][ T31] ? __pfx_watchdog+0x10/0x10 [ 419.950722][ T31] ? __pfx_kthread+0x10/0x10 [ 419.955304][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.960575][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.965759][ T31] ? __pfx_kthread+0x10/0x10 [ 419.970340][ T31] ret_from_fork+0x439/0x7d0 [ 419.974919][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 419.980029][ T31] ? __switch_to_asm+0x39/0x70 [ 419.984785][ T31] ? __switch_to_asm+0x33/0x70 [ 419.989537][ T31] ? __pfx_kthread+0x10/0x10 [ 419.994118][ T31] ret_from_fork_asm+0x1a/0x30 [ 419.998884][ T31] [ 420.002213][ T31] Kernel Offset: disabled [ 420.006555][ T31] Rebooting in 86400 seconds..