last executing test programs: 3.963229593s ago: executing program 3 (id=2109): unshare(0x6a040000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, &(0x7f0000000040)) 3.080205026s ago: executing program 1 (id=2116): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x404}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000001000000040000002b011002ff00030004"], 0x28}, 0x4004004) 3.07979021s ago: executing program 1 (id=2117): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x0) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="00006003ffffffff35ffaaaaaaaaaa0208004500002040000000032f907800001fe1e0000001a063d0ede8"], 0x2e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="8e", 0x1}, {&(0x7f0000000540)="32ec6b3f693d244e1b53efcf597ce37cb0c3c61ce4584d0c676a95d6ecfeff768225dce05728a452cc7aeb47ea203952ae85692502d1c849c087d93ef9d59fb421ee3b1d5c31af3d2376ae7afe231384ca11f9a2f64ad059be6a4329a22c1a0a9e50f811e78cb13b4659dbfbca3e3f387c8612df50904483f5ede736334ad929f51bcc2d784ea671bffd3a46d447408af118e2fbca60aac9a52212b5dc62f1006bfbe5b28cc9ce898d6f22d861bfd4ce09914eec649ba49ea750b8180dd925a32cedb1612f223ff235e00d5246b8227063ea9267335866751a9fb0c14053bde638e92c77f8edeaf4d1c9e068e956", 0xee}], 0x2}, 0x0) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010004b0400000000010000007a000000", @ANYRES32=0x0, @ANYBLOB="129c000000000000280012800b0001006272696467650000180002800a0014000180c20000030000b371f2487d36adcc30152a0600090000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$FIOCLEX(r3, 0x5451) 2.740017293s ago: executing program 3 (id=2121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="370525bd7000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c0001d7ff469900040000006f0000000831e11be5436ee783002201"], 0x38}, 0x1, 0x0, 0x0, 0x44814}, 0x4040000) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002bbd7000fddbdf253e0000000c0099000800000026000000a812cdc034b24982195236e80d6c22d6a9493b4bcd027ff5341199843419102d56201d563f2484109eda144e4f8a423c8cfad31ff2bed5a08926a661db6b4798386b8572c8a9abfe7000fd25ba620676780bfd8cf64052ad94cabae4252f4fe5c42b1386617afc17e00f843a9f6453d85d57df9bf0b2e99a5c3f0d5a26bf3974a1e3f8ec9266f588b6f701c1d9aa7739"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x23aa42d5601349b9) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x1001}], 0x1, 0x0, 0x0, 0x300}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000b00)="9b174c71ddc0ff70da89cebb1985e5aa6e2218ad71a09310e007e786c1eb3485db015be60d4a00474a8973fc08d7a6274de654cbd1a787e0946198bd6eeb78c4f684b110d1dd5d2260844e6abdca4819b84c32fa99588cd0993a204b8ecde4ce3614cc78454beef9db6202c267272cdc91eed07bb8f27993f4af613c6ae67162bc9d0f537a0e0f60af0c4a21b01e4aa656fdc7260a86613c5d1ffce2f5319cb34054a895b9be7a4b812fbb7c83fb999fb4c8f41ac5e100519c4c125fd68949f7ef053401acd65051e963b108d9ac8d302aa3d27d2a39e9142584a1388c4c300a76bd28cecc47e95c65d5f0775a55c68d5c8640faded3723e32b1d01a26021567e853d1d85382b3700b3e9e6d26673ddc63f5f2464c1ca3ccf82eb8d21eb31572e286cff03c9e347df61270ca628e3c302a4bb4e8ca5d9da18227928eeaa0c3fe37cac8bb1a8b10b47427ec3f24a5f497ae1d5d5998fa0052040b8c3e32a5b89e266f0b53ba2689708e3ef62ea793382e2a3e0e027fe5d23003b874a00272c5f704f5694289f07360814f1eb16fd8a3b61c2f3c53c42a6eedb76977e35defa4f7a5d8af33e187ea35ac1e7300c4fed435385b8d98a4edb7b54545593dd1b260d70a9be726c3805715e73ebb6f3e480e97f8694efbf5e2b54e7fdbded3ab4cd7f84aab807264e275d4872a1382466765c91031ce05a9e5f529a7399f5f58c6e6d381864b0982f8df5a503fa5e064b0d70ec5de908e51d47a24ea0a8f4549f0bcdb37f7107033a38040248815a1afaeca241bcb6836dfd64ed07113bc6a484840430540a9cabcac3a18dbd49c11383b58106d583f451cbb6949d07f9f5503c6938faefb8f3b1a976adbdbd3c6a6c4184f26c03f1d7cf34e36697775c4b81adb19142f86241c4c802c1dba77b57d78a99913dd58c13aea10d107c1190d8c9ce89c993ace3f0d31214cce7206d435aea6085c44d7d2488c6d588370cd6a01cda8cd0b4905d3d3e392e793184708c164fd8ef1c5db16a0183c144bc4487a2555afabca3507bdc80a0442645bcafd8ff1f5f32ef512d18af9c51ed2f4830c08b3e21aa51db8c787c32430765963b5225af1659a9c76a111eb83497ca6639e7c69aea8c613f9df3d64a12563889b1268f2d721e67f09753aa91db8a6c4c5c0a1eddfb941e2439a357ec833b3a5618a17c00ed59dc9453a889e2eea6cc9aceec2144ea241643f3093c7d02b74886eecc5bd40a3f684a142db57bd64630a94a5e55ada8a31ad8f2f5a1b28cb2d7ce83f2746560c445fe46fef79ea21af454c059f1e3ca7d1dda514dcc5fbc4462fae593132907f4bb79828d807327450daff4506db66442ecc4f2a8d6f16dde6c166fb119506d6f749580753b8b6c3eb4c8de80b3329f592e72e1da0918b9d959be3faeafdf966c7fa715b82f278f2facdd2ad5a7e96ed9806a545b312e3fbcbf16883d10688185200ab506b757bda75bcb2a086d5bbc97035849c6492429831bb61d2dcc47746a03061f5d51f19efa53f676fbeb4c9cf6c92007cd91d1ef13fd0d748070952a9ca72b048441a74f1daec44c0e3dda6e25623154fbd807d883aab6f8c5373ec5c6720f5cd826742f5167e17b435b6791cdaee9511757fd8fd88eb2035559425ffa6fc16c60f3069f83d403853886f879a118409ae2b9bb402fd83e15e3eda764d152a1dea31972e4494c6cf045cf8c6202e4746d34270720e4f24a0a6091f2a8d046deacc1edba580555b861f16edaf1a067d6e7554d3e4d37d62010b60b4cd3dd2eba96908b063935eafa86f96d29a92a1953a7f8da43f476501a1085c0087f3316fd9eed2206b676b985b6a5179d3936157d47e34fe5d0ff3bdc573058463ad8e4b4c24b5a1a68d5c7a3587288c6f427ba8ed2affd9627e4a6f3cf660b3a8f8c57e638b759f3cf1e6c2dde0fbea23f8c7823a380c684beb4a3da2671bd443407eccc5273a40cafa2f9e4aebf6011bb27060ff3232238da67db2917fa60cd8609ce363d0ba92377ec24eacc222354d66e1ea964b44d7631d9e9ecb50139644246457bf914c5a8520cca972a3738c7cb7b1555bb0b201c3a3cc03b295c19d9bbda5cf8a222bffd5d518e4ca8600e3aa5b3a939d44e746a7d3fc3e9bad656df9f37aeaec5eef3ef49318ca68a1299d5c9f1a78ff852e0375a9c30d08daa22752e64a3abd1286c0188f216446a8e3c244b6bf809a665de9fe5229d2946dff5750cbdcba5f2836ebc1485b80a5d0a72e79f694bd69edb5413e3c293f74208421f3373ced03701d77cc5d4b1d1d9675f7a040fe6ac4169d599b07e34e46aee6840275f972d3a5ad8843c0a8fdde283cd69eb37602692ab97dd8fbb5907027af6e48bce2d255d5514b1332e5e521503470dc44f29c603dedd984764e9a96b4cb75de17d99133da66b9c83e0ae35fae2dba789a4879a77c12cae3c0cc3b36c5175fe9e3d7a622dd17f4f6da22e3b7e84b3aba75ab3be000a103fd5ec139191f1a25e25058505aac74513fe4143591231cec070a77839918f9a341f217f929a77ca0ea72c93763301d5d470a6f921165d26848802d910d0083f9ce68b4c20a50c70e504823a94cb842036954adaff1aa5aae7156484b2fb3fb1bbe3fab5d8b0685746c4ce13e26719e18d59debd1af0bf31fb494cd766c91145cbf315eed267996fcead1b0d859973709c0079f3fb89728ba1764cdcef008a30b97377d6d71e3ada0832cffc3271ecc5f0a3476eb1899b31fb0c465d0fc55aeb3ca5da121db8103dc68a2c35628d5dd29cb6a392b7a929eee6da59a13c94043b1a4137cac4a7b8371fbf7670da1e2bcddc5125e16262cc733125944d7d95500a49a748cb4635ef5249b57590f0c9b92d881c0ac6dfb3c54688cc33bef9c9e84d86edd83e085a5ba60106b623715e6737fc40d9b899d9d34f9589cc724e81531e101140d2227d2036d25ee50b8b3380058cee74c7e490b33716a8adcc1ee33ffe9d66592495c571854a2eb4135a91ff2f0afd70914feb4a3e21486c4e0c3557413c298aaf4ab51324505ffce8b88f3512cece196a5950a3cdab2aa524a3eb680365bead934acb7ef7885f41f2cf627f36553f2b7233e1812269618ea68b1dd600a9c3474ea0b9cbaa657ecb169401acd7b10157bbfb75179a41d660d876dc52f7831aeb880d96116a16466186eb877c887724c115ad58651212472fad0385a5f95d87aa3cf3ed69a0feff52b9aac2aa013d78059ad0498ced2688df4b94df974174fd05a4321c7b2338065556fca02584c1779c0e38fb35f33fb58e509b327b0573f9048d24fb5fd1ddd3043ea01000a28bb23f8c50b730dbde3d12930b8553bfeb68f20669d633016c2c2db366e62853ecdeb9b246d79441f5f1a6fda4ea3c233e2c6d033bb7b558d55ddbe2711e1b2bb1e322bbb597eba7bc63390dc8b0cec2094a1a3a1f55d188c23d6549e0380b9e98b0999cbdf076661cfce3f4fe0f242b2a4ff4f4329c48d7e72785610d94ff535a8870523f5febc6f3b25621efa54778cac6f03a1384e4d6376cd3f661ea5cff07fd1ed7118021b2d06313408765c8360bef0ba823e8226d54e243522ef04ba6aca4e66bb68f1f64bd354c628f05bde6b7179a1352f087536742be41c8f2a23408189fcd4d6c0b51fd91a781fb00eb3fc6093250a5e13255a2b636686eb700476699ea76fff16e80f7622071c3f02a4a59d47d85c230097a9153de035cc4b2ebdbe63fd1ca2f2ccbcdafeb277d5f23bf41b51cb21c928da558ac15184c0c22286417e506ed0ef74ad291d02a63d43c2b3d02c55528e5cebe06917eb44148c64bb07e01fecac29cf8217009742d2026a8f4f1e53f623f75b084c1004e96ed2e2f289ad134ef8cda7a10537581a654d63b8ce527bb1752844c26e0ab0eb124b81646d431498ab7528ff0ec9187d1c9edb2ada59059a28077aa121255e2b306ac1d6527613f89b50a9bded388ce7ff500f569e3e39715822984e3785be0642bdd7ef80ec385986a8ad929d81b351e2bfa255ee3a0ad635ec621a86f18931977995254871eefb91b0354acc25349fe14b05ddf10d6de5469a26d805a1bcb446e0157c25f6f4ddf4f1d2003609f72d2f41627e8e18a61ee354254c212f6e7c792d3f526ddb345bd5285bd5ae6fca04ab711962178a509f23cd0c51dd6c0803a6476b7dd7c8f260c69c1acfb29348a499508a1b4a2846bc50dc3f9145f23706a55740387bea42c06f6716ba22bceb538c3006c5b85ae0cfc94d5afc7fc35e6afb170981eaf90ed52f30a30bf5ffe63cf7fe6c150511e409f6c4014cd663671bfed58866347325e5a28f684a7061743e1d731c65d6a2b93dbc29ce1c3544496536f586b7dea4622e701592d47399a4b85bba4a835e848e71a7d40c2460dce7d1f6b1af2226dcab22d8511a684bbbfa008d1ad9541502f42c7db885836e024724a39bb5d02c57c9d5d73de5fa2dcbc9ad10254b87f5c72c23e66a28462b1b2586585381e4088aed7ddf9974ff679a4f1e8a2d2aa0e693e6936efa83863914f6b675b0e78300bef950b50bdd8373e58847064bed08c4b02415605d452f0c92c814efc80e487f4845e9af1d991a90f7690df9e14c5c89470c0ce949bca17c7340ab15aeb7474309c9b1bf3efa8419816a9badbecbd9ae3f4c9d321b100d22e143fbc85bb973f624fe9033c546194d6ea53a1e6865d884876948dcfe97b55a754ae3100065a513eaf1b10a63cbd3538e5eaeb399ad540a5a55d757b4d701de2384b604dc1fb7c7731c3ae6d0d41aed785a0470d2dc897c2c77d42a52f33c8ea9e62a6a4ef12bca29fb8f7d277672bcfae94674b2f2530e65c822f8708b1c7febd10c6ae714cc732d20b2cb93fcc5c8df6d0746fba8701f1260236942b3fbf0f1cce69720527312d58e7743a3444fac6db4d7027b8dd8906ea440eadce4e224309acf281cc712ffb88d1907325d7c3903c0f85552469c612666293ed569ba4afe74e33b3833b937bea2e134451f6a114778ec1d2f10ced194a8ec7fcc90d7f1218511e3193ba3a2a09f12394debc2a06a85dd4c5277049c3de14e6c73578c0b84744b925fa1e1c3c748d9b0f3b8ba7245c9d61416c51e00f4b9bafe65604a97b2f85ac6bd1b984e19308508fabfcc00c5607cb470f224c9ab7d13fee81daa7d559458d9f93910fda2111964939d649e03e7049d86b4c7ce8366b8b84b43abb70560203bfa6ad1f8719438378b44feb623a32dc6b46b7350019fc887d7b85ca1afb064b9f51ecf4dca35387584abffb6eaf159007074687606010c30c827b252f4915773b74bba305a437b7dcfd611aeedddabf474a3bdda2bdb73832f7989975e8a194bd7364e274ea346c3b2d4d155991cff1065d91a4c1e5110dbb8cb587f07fded9c05b2118dcbe55ef85d4f04bd7a698b5dd021ff53c6b5006f7f7cf755697e75a55b9bf64ce126916c058de88475926e2cdebb2a28cfd331226d94352eb2f1de85cb5d0927c9a579f9f9ea7acb014da6189296cad89ab662a11807e2ae44c029d76ee4e849c73bb0d945016a18238fb3c13fd1bd9766eaee17fb49f8d9e8e6f804032cc7b1bf34701c841f973a16b413bae94f742b4d49ebed0e8c23223bd9a80ae56c32e76d3c85985bf2a5d5fbb32136957e9afcc49f608b68c139a99d145ba8f19c3e9171967e33a63be4ac3c3b060a650b5a1ff87c3ceb08ec55fc80f94892094017eafbdea7077ff541680566d014f447556187710c8876adc4c2217fb41f63d8ebefda9694b41f0878c633", 0xfff}, {&(0x7f0000000180)="dd43", 0x2}, {&(0x7f0000000840)="9eb6399ab8e0d7f90852a0fcb88781ea3f3698ac1a78aaf4fcdf5ca9c32d4af3dee42866aaf58b41d488516634c12142482aaabab4780c8cc710f304235823de14ddd6ee6101e2eb5d16787e6073fd113f3aa4977f6a2ea6fa1343aacb33893c548eca109e1f43b903d6930764a1ad51ee9821975abf4de249292610684ae7a4c4edbc6eb2bfdf2cfecffb61496f4c9e1105dc379b6d14d5a486e0c8854b155852eba8fa431d3826ddddfc7f5691d0e59da588b56b73d8f1302bde6ce7c4b183c2b8d95f030c1b7cc91815665b95257d220ad0fa6b53dc34b102686e76c7b8b79e24d171bc61", 0xe6}], 0x3}, 0x40b1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x1}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001c80)={r12, 0xfffffffb}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=r13, @ANYBLOB="0e80010077"], 0x9) r14 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r14, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000400)={0x7, 'dvmrp1\x00', {0x2}, 0x80}) 2.663692269s ago: executing program 4 (id=2122): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt(r3, 0x952, 0x0, &(0x7f0000001780)="1eee2160ca9ec36dacbdc2da4ae1fd0538fdd7b8c571d8079431e77b27b946f19b70f66f39b6bcad5b04afec10b7ae4f51346a666c0f6dda9141f606af752481cad1ef848861d459a26cfdc78cb83d808ac628140faa12f2c9627cc2591d7f7974fcfbb7351d538fa81f0c59d3f4eb7d04f88fa76c7c93b2d7538d56fe3c3f9628c70e80bc3e6e1edf90555f2e57f98b809b4b1793a1b365420060e9ef3e5682bf1b200a9f570e365e3f740bb80eaf97087a06de9a8d59ef0bcb311f484b4e2f32361a563c14dc0720c1860d39eab79d82a3325aff929667523a10b77760ae72945e96c33ae8b0013f451d89f0830c16bea751462780c1b2fdc3e6bb54469321ed23f72489a8826f384e1ca43a8a4b3239cf06072cbfe16afa9c56acf035fcd779cbbebc31996efe01faf716d790c901353d694c5846fd596c2b80442215187a40cb9ab15ae8620a5506ecad97228007964873a6a8aaceed3c2ac41eb7002f726d9e166c3683e83b15ebd105c498ce8fbe757790c1ec8158067568a1435b526769931350ed4b41bb51010449bd70dd3a6b8579bca1757352e30521b3532e6d8c0ce9f85e5762a2a33bae2ffcab2c8dbfd3641e0e09156692e1bb9a62e6197ab2aaad6f41a2349756cb890ac149ff8552c8ec34e0f6c73be40ce06ff74c3efb322975fdfca301429c72a6768e9e2839de3fabac5c2af79fc42864bb15659fef043db06326fb8bb2206bbb49a59321a76055d209ccea70cbee673886fec1bed246c911c1c3e952e70e557a93258b9f1c4756e71252fd5c36a0d3924c5c7ca84f24075cb494fb45be09fb52d15cbcffb3b5aeacaf94bd36c6b0ed0c0b41b0e4419ef6b7a93d446b177aaaff050e00b405686f4557dbde0e8b7d6dfc67f8be0b896a00b4e4b1477d99dd5db5617959f2aaa49bd4fa805f5b26d3fc4807b4bfe2f2a70c5a09011d76cf16bee1ccad6c91aff75235fe07096a546b05b87188192ba601bccf1b542c5ca50eb1ee156d56d1967eaa3954dcbd36e76eaa58df09fe8996ad1ad66cf01f64e51b74623f9e4e46c97ccd758d909d5767849cd38f65cdf4abf8f95fb54bb4392efd049d7073231537f87e438ffdb3557bbdec9cdb92f1e150da966f2845e0c677ecb0ed45bfe8795c54e9fc6cc0567fba3a4966310a863a11b0a5ecaa4d3bad5d75e5f11c3ddf89bf0dcc58a3dc15bdf8bccce10e26a25020a1d9a5d0393c3fa5feff09b046ccfc177a6dfcbed5fd25d5111600abf644fc8c7f342d0288744c0d8d7864133e89880dbfa869003df845d70508ddf9838e726ceb6f35855469c1657bdae9f69fd640ea88f08000b1acec630c4182ff84ae9b041c9669a1358bf2a66957d7bd3620e8ba64773460dd40aeb5ab831a8f58c9a839ff12be894227fff1386faea29d79dbc4013393930e6692b6c920961593cdbcd3d666c6d3e5f240faa233cbd03a915ab37e5d186ebf601acc10b89fff568c9ec7e1a5ee8531324aac4646f75e2491773419c6ca501f0c1caa83cc1fe492fde4ab85c9e6f810c2981b2de0bff5cf33bf18515c5148d545da7286daa00681ddcf8dfcbd307f9e67c7dd64781687a1474ab07673e271baa9082e0d37850872059e43e18c2fc0a828e4342b8baa2637966044e2674780ffe5abece11fc4c18fe6d8ad151b5dfefc83b64ed258d939b68242271a971eca438a2f725288e62ba78317dee04099bd441cc3660d0b46910039b4047462ed457f44176f1366bed07b41aa53ba185ce5a75bda8b1261e593e84b744cd4d40c3fe99d4ed2ee81776262806b82d15c3c95b18435a974aaed4381257cb3250b65cedd4f46ac005ba554ea65385b704d786c9a1c05287dfecd0d5528231c721bfaca426819b9569e26005cae28254ef033bb6f83f1371fe50cbe33d9c76179fa567796672a1db8006f25c2c4deb812b0129dfc0f74d777234a142a9614c70c404c2e32f3e285ca0053a87983982447e69c28528020f4defa7d45f0ec61f22cddf8ef1627e21f7e91bdb5ac71a711e9ce1294bcad4221d2d23b02a118a5e5796dbe3913b97c731bb36600db07a3e300c068570683302e725c392cf7a39b924cddff6ebb6af2d47d0db73dd5fdc53338a26476bacc51a4e87879fd59034f69fb231999deec32e094ef5b69215ab85fbc0a5960a8ab03caadd7771639a26af472515cee419de741eaf7a972f21d2999498fad9b59cff5b003d818db74d2209cd3a4ad55ad48d1b1ac978d26d6fe61232f30a53df2415952290441c37a37732958e28341210239bb58b5fba08befac9dc83fce3b6ad662cd5183d0aab71c785d152a1ed1fd17db84901723a0a1c85ef66dfac57e607da028ccc15e783af0b7b1eb1236bb346e2ba4c1fedf1042d598e7bc13d508b2af420f003e868de86b8af86d3b17e7da9620c8fb73d9bddf70a6a2a3a9ec5da0db97e0eb313a074725b71956e33223000fb13d66f764ab3196e77c1e7b9ea796a09f1e602734eed33541a89b8023645b65b933c4ac3909e332b064855822151c943b04386e2812eb6482d3f7dbd49cebd81e555293031e9a51804a350b0fa10b0503f44c3188aaaba6229efb37d42cdf713f0916c2a8941d1e26dab42f8a55b187d4e413922b76714b4b35f73b708eda401447d3a167a343e5ba4485957734c557abae6546f97cc507a3d2a82d0dab8bb1826328f6d7ba10ef78e8aa8e97b9ee034059825e2479c9c5e5d01268c508e67937f6c7f2c2bb26621605a11ecda53f26a54b8acdbd12ea093611e2138b6c70dcccfa106f634951c6249ca97fd914f64e6e98ec46870354f338b3e3f0d71f51836161e03ed9b38adf49fefff30b84a421049038e43c559893891359176bb5ce79bf1eb01ddce0607b462b77ad15df129d868b0500aeda2289172ad2439136cf980856b79f6e04198f4782936033db1f1c0790b28bbffbc235e3cd28347aca0cfeda8002036e5ea871da5a4060ae8ef93115278190c001986c8821fecec86842e36768d36efb4cd02aaa0840519c193add0ac11f4bb7a145adda2d95e283b9d2ad9996a60fb8eb9aefa0ed6155c9677a8161863b40d14c8d308b4c8c58e44401bfb5edf10f84fb772ae81401b7a5b84a40cb60fb08b53cf2998b6fe72560efa878e1fe00856d480296a7fe51b04ff543d2a91d7ee11a1b66ca2339c6c751d72bd2d2ffaf0fe729cbb2eaa6ada96e389df1ab2d233fb613a44190351136ae40f2cfc6c58f17f47f2a307a46272f201e641189bf5c36aac44cea74b4678e94ef76326682ffdebd8d4bc82cbbd4bfa032116678f387f2a7b529d1a99e66c68334ebd1596d881737f191a9b20149c7dc116aac1c3aa836f24194e91975db63c409f3b364dad4ba99a33348d10d7a20e4e4fd7ee7a0d7fc81e7b053fda2e315ee88f158335c54226952f2c6f80f38a5848fbed5a1e5c72fb96391bc8d9c243682a9d8b98a7849e3d4ee6bb30a407b16ae95ccd6a4c87f1c85f646c360e050714680f85f889f0162acf922adde11045f5a264753274744fa023350a569502c5e5cdba6c535d213569c2a0bdfb2cec75e803fda6c2b545dd388b0eeb083fc0f73b255b1d5e7731fe5fbdd76ba473254dedced67981a50934c2ade8961425c59b29c90fa300c9a2fc080fc8b70861d3340a38b3de5cb53c886e11281847b10abacdff1b572c8593261a6319573d0a891714a2755ef629151c56dcf841abd0b18b47cab8b2acacc58841653bdda159122f043d6a77a3f6ada8295bb2d4b73a4500c56b37d05d49f4045009a76f8d6910216f00ea4f8e8e6e8141d2c88d5932144b36f908d9956a4e9368d61d46b17cefcd2c47cdaeee00c0909e56c5bf3d5090e437ff178343f77367a685620f1cba032ec8b805e0320a8eab904f1a7fcda74f488192cd3e0eace56fce59c23f192cba5f5c6d75c084c7112e4a22a5a962b3f27aca282ff8f591c64e1cf00dad7c584b4b52bfc967d36e27bd521ee77022a2f57b4ce846648961bd500952d753060930da9a7df63a44e8b7b49dce6c6aeaa4de58418cf5d0fe47a63afafadc46b2a29b91ae47de360a0eb99e8754a7326a8e1df40b13df71cb5f1a946449800ff61e43b39d2e1bc14ea26030349633d318e7d20b7dfb9090dfc3e489810e08459074764f13e6819f6f85c92e7fb296c1f963c57864adcdffd6670fd1f05afd63ad7dce820c4da3daad3fedadc78214beee0f232c0dcb82f3fc9b5c6a2ad19b52c015029f2287c6f60d41674b86219a91d93afb620747cd8926075cb540bf6b7a00c13197817d80275c6b1fd0f607759b18db701289f9e91e7819554e7d20ede65d7a656d5416f59a358d938ead815c33ab715f6fa35245c1e1d374527ce449b55132e8eb1db15d88e8fda15d734e5d2df808cf269844da5997761e11874e7c6797d72ab66c3f23b8964424eeb609e5e47673a9c6b709652cad4bfd194c6eb05bb58fdc0bb2e19d5126c483dd425cef9425bba96d7c9cd12c9ae19e784ffd4d4c44ec2bec3421d9ed560c4c52aab9264ff6ab3f443e3f4dbe1502abd3819909d3cc828aea2ada0cb428fb8366bee8aca9346f09165cb4f0407762c83f12f35fc617f02e3769783326ea9a4385b5eda6529d1525c80a6a6814300155b7452d8127fae96c5a72e1975c178488ae98193cb4bc150c68909a5715919afe88a7134e2707f898ac5a4798d72f38a9f3a532e01b36ee6ead5c7b9a3981b8f53a141f8068fdbe902817b94287dc608f14919754075c908b7a7ddaff5c25ce6d7fb7457d665aa2682b841e156f10a89468442ce7ef1b8a41e4ee8c38295a5c9241dec3a7523cc1befc868061488ad4f94f3823ded2feaafb28f3f95616b2d4249d3019bff59d569643eb72c7260552a63c36ac6837e123346d692a02d834fc47475d86ffe8f2923cdd8c0c6557bcdea1333838db7451ea76860dfa5bc803339ff7a03ee892b77812964468864ef2e7a2fcc556d668bde9fbac22fa1912eadf13c483ce2346c7135439be8bf9c79a092fc579ebff8a8bc061c10830e16dc3176678f9857cea328aa718b63464f4557f48c60acbd23c363b24a667ed4b85627b92d4c53095b030498d91351361a78ae8f47b5bbeb15993e910976fe532688f2915cfd40d1154d89e381ce7fe024bb7459f63772cd08641cab4e2157d2c8d7875f701992203455980f7a5fbe4166da6edeb3fc33b0752d39c31625edc42431c0f37763371e93015e79618da41823f14643197db8d47a7fe6c7d3e98c5cc5e9c23742d7aa313f00f1be990ac9ce2991c59eb0d41336b766c9c68f3e6f1391293a9e7fd91e89480f43de639679b5b729c8710e2449fd31e5e60e59f2315852130815fe2fa02932b54d9d62fcdfce76f1f3721ce7dba1e29e1f6579278fc4a0eda45ecb15e83bfbc0d06aa8c9b14e50a69467e1561963ea1493ba0f3dda684ec671dbe6bb95a91fa2c64628e1e9b04262fa5f158b27b8322c5560187fb9d37a1a8d0a049a8ecd6bc42f0438389074159ed17c7add910c1dd79e4f6c8a74f1393e6b5ce4686c553e88eda671f39be444bb612799c44794d4a23c82e4411961d98169c27ff5f4393f50163b4591b91541eb39b13d91d978945d0915203f3c9adb80d81e3f8ed58f3924a6698014cae24ed07308bb84a62822f8a5100d82cd4b64cf5ae9bc9c0f885a8482b88ff744839b3f79cf9202170cb832bff56da32cda21e46b114410c04857064e4b4c101fa4b8a73d6cd969f623a844e99473f59d0c52c6b668e7f457d9300cc2ed3e", 0x1000) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) epoll_create1(0x0) epoll_create(0x7) epoll_create(0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000280012800b00010067656e657665000018000280140007000000000000000000000000000000000108000a00", @ANYRES32=r4, @ANYBLOB="504715380c13345faf45810fdacfd1c4369133f7bd91258f19a13b380defc7543b6c758e73eccea297d83b1596367834da8810b1783be009d37ee220b243e5e09e347c96af7d62eec51d408be4a01f61564fdace55b15cddf356d0f58bd7e792b9d52fe4214ea5da7ebb072070cbc43426d3ad0ee6ef4d84b5944798de7cbc69b45c32f033c920ab0d17ab208312bb4fcc6728858ffde4"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.583370183s ago: executing program 0 (id=2124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0xc, &(0x7f0000001cc0)=ANY=[@ANYRES16=r2, @ANYRESHEX=r1, @ANYBLOB="5e3b3a62b78a0125156283eb6408ce5199de865061ad33a074bb2378c7e655acda488a436812238b2c46f1e79c67d9a665de225065a679400d44885bdb0fa878a596002e1ece890d43b654a5f4e66c44e1e2929ff8e340fe229e5459917e380c0936491e03f974b6d3b269cc93fb20e2f5c2ae22d05e6c056fe855e5ac9fa2994167b42ae846a1b57b8a4e75f3709b81889fa33bbbf094b3b1b6bce33f5bf72c2d83ffe938c10915befc6950e00c16d6938ad313bf31ac928afc67f7daa1eafbe15994970ea2", @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r3, r2}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b000000fe0000000000000000", @ANYRES32=r1, @ANYBLOB="0300"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="05000000030000000100"/28], 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000500)={r0, &(0x7f0000000380)='GPL\x00', 0x22c403, &(0x7f00000003c0)={@align=0xfffffffffffffff8, {0x249, 0xfffb, 0x1b, 0x8}}, 0x200000, &(0x7f0000000400)={@_ha_fsid}, &(0x7f00000004c0)=0x10000}) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1}, &(0x7f0000000640), &(0x7f0000000680)=r0}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000010c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000001b40)={{0xffffffffffffffff, &(0x7f0000000740)='GPL\x00', 0x28102, &(0x7f0000000780)={@_ha_fsid={[0x2, 0x1]}, {0x6, 0x4, 0x7fffffff, 0x9}}, 0x8, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f00000008c0)=0x1}, 0x3, &(0x7f0000001ac0)=[{0x1, 0xfffffff9, &(0x7f0000000900)='GPL\x00', &(0x7f0000000940)="e7d61835bec308ff2e7e7778db5e77127a91ab95959df27ced165076687ca8f1cbbbe98ada9c500a3868a3ea337e6a7072da22f1ddfced22dec116860410f88f17173486d61f59295c79a3669417527dbc3b5d28aadcb36de0ee929b29745d5fe37118ce2d38fa46d0b0443a4a06d410ebf11c8a53d666e882f614c1b30ce6b439ac44de96705faf1b0affd4eedaa58a2dfc4aa051cbd9bad8d865fb5a", 0x9d, 0x10}, {0x2, 0x8, &(0x7f0000000a00)='\x00', &(0x7f0000000a40)="e8353bcb561e9158394691d442d22dd77d8dcda5538b35e4a63c76e7375e9b2e1ffe3899e4b615b38b879c526e60fcc581a5", 0x32, 0x2c}, {0x3, 0xd5, &(0x7f0000000a80)='*{}{$){\x00', &(0x7f0000000ac0)="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", 0x1000}]}) ioctl$XFS_IOC_GETBMAPX(r5, 0xc0205838, &(0x7f0000000100)={0x1, 0x7, 0x3, 0x7, 0xd, 0x0, 0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001bc0)={0x1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001c00)={0x1}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400def9b1f652d8b6c900001000010000000000000000000000000a24000000060a0904000000000000000002000000040004800900020073797a32000000001400000011000100"], 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000802) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000001c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r9 = accept4(r8, 0x0, 0x0, 0x800) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, &(0x7f00000003c0)=ANY=[], 0x50, 0x40488c2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000018000000000000000000000850000006300000095000000000000000419a78ee8d717b618661dd84873751e0b6c3adad6c884d956271446757b583ed947272bccd0e3fce596720cbcd51b7dc569212f46cf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.017047015s ago: executing program 0 (id=2125): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000440), 0x10) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001800010000100000002000000200000000000009000000000680150006000000200016801c000280170002006e65745f7072696f2e69667072696f6d61700000"], 0x44}}, 0x44890) 1.997208617s ago: executing program 4 (id=2126): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), 0xfffffffffffffffe, 0x9, r2}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a4000000000090002007379"], 0x40c}}, 0x40000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000180)=0xc, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000052000100000070d3c64d00000ae1"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[], 0x0) syz_extract_tcp_res(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118aa000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.86403994s ago: executing program 0 (id=2127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fddbdf2505000000280001800d0001007564703a73797a3257"], 0x3c}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040940) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="89000000120081ae08060cdc030000fe7f03446b00000fff0001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31005a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000500)="11d6cb557c8496a2fe10bfa9b50ee0", 0xf}, {&(0x7f00000006c0)="77e727abca", 0x5}], 0x3}, 0x4000000) setsockopt$inet6_tcp_int(r2, 0x6, 0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x1, &(0x7f0000000100), 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x44841}, 0x2000c850) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffd, 0xa9, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800008000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x4d4, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x1}]}]}, 0xfc}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x2}, 0x1c) ppoll(&(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000040), &(0x7f0000000080)={[0x9]}, 0x8) clock_gettime(0x2, &(0x7f0000000200)={0x0, 0x0}) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000180)={r11, r12/1000+10000}, 0x10) 1.863887056s ago: executing program 2 (id=2128): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000040)) (fail_nth: 1) 1.74627649s ago: executing program 1 (id=2129): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x5a0b0000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004400), 0x400000000000203, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000380)={r3, &(0x7f0000000200)='\'\x00', 0x2, &(0x7f0000000240)={@_ha_fsid={[0x200, 0x8]}, {0x0, 0x7ff, 0x8, 0x200000000000000}}, 0x1, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x4}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r6}) 1.500544559s ago: executing program 3 (id=2130): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000f0ffffff7a0a00fe1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2be2da69ac9e9c5e88278d39239501b465102ad16d651ea8bb8cee35527c1ad42ac6a565e449929ccb4469bdd6824b64e13579b7188566e735200000000000000000094e05bcda1e96e4c33ccf6d74046e45bafe9d512c43a3e485dedad9a38b34f7fcd00fafcc25dc36716f0e21e0632425b7a1c1a6bc15c3fc07d914c88103411d8d2b77b72a796fd3aaa7ea493c7bc43e63b2b0d05ad5682121682096b224933fa20255d58a680cc2ec200"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3000000}, 0x50) 1.431809315s ago: executing program 2 (id=2131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r0, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRESDEC=r0, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24004044) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x5}, 0x8) 1.43129127s ago: executing program 3 (id=2132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x0, 0x4003c, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000500), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cfa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000}, 0x10, r1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) (async) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) (async) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYRES8], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 1.365201868s ago: executing program 2 (id=2133): unshare(0x20000400) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x0, 0xf7fb, 0x2002, 0xa, 0x80, 0x140, 0x87, 0x0, 0xffffffffffffffff}, {0x0, 0x401, 0x0, 0xb, 0x8, 0x2, 0x0, 0x20000000000000}, {0x81, 0x9, 0x83}, 0x0, 0xffffffff, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0x4}]}, 0xbc}}, 0x4080) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0xffffffff, 0xd7c7, 0x401}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000780)=[{0x10, 0x29, 0x3e}], 0x10}}], 0x1, 0x4000000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000800)={0x2, 0x6e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001780)="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", 0x35b}, {&(0x7f0000000440)="e0e99ce86197666ec528ba68c0defd06062fba4b3c06992749fa10311cfb4326d701289490b6d9e2402cb2e38f51a4c9b11351c03d4764844edd60cce0c6b66ccdc22b44365e9091e2be3f62db0e06f5436130f3c5034bdb98af372086a09e6658eb634eb6cb7802d0f7a5083fae12b69f1a36a8a8a02f09fa7c27281f3e168b1c845d88b897576641d4f94cd0", 0x8d}, {&(0x7f0000000540)="16f0552ef6a84aebe40f9dcb437a8bc22f8c5fe9398b9f5d2b65218cf898f05e89ae02ab4f16de08671f04db60d8189bdefdc3189b8f1ecece7b1bc5d8fece2e7cc168fdffb56ac79f67a0da40e8a501fc0a85036d43189cdff284e772a2c4cf453370c81295dfd53227b7662b4b4c78108db2", 0x73}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000cc0)="af4fcbc69fc8236193a5db61cdc0290ad092e969dff4bc0b0fa752cf3ed6e756c7f331f97aed1b89911d0cec759d81b076677b50f213e6a9196fcdcefd4c562141ef3cefe4b0f75f8586d98ff9f18edc0113a54b4d2983bd7ef97f6478d2dd4921d5438d9517c2452ae54dc4d3e07310769420b1565fab3f29d44d7a667689cbbd2a119dba5b9ea31708fbaf5bb1c7d35ebf2c32f2cef0d0d63b45b8441da5d3754ceae1c80779ffae1f6085bdcd9f2554a00a86cd2d03ffba1fbdacd09527f06ab8fac7145c0f6d9cdf7a736ffd50f0a86cfdc1602a5cfdc5c551d286352d90d22403582069ff1df1e5b5d1dd3c6925167ffccca5a3815a5278f789e7099265d29750f137fbe07c5facbc258e5cf17db702cfb0c775aa08edf7fc9986", 0x11d}, {&(0x7f0000000980)="bbac16fcc4d7f544650412d99d848131e90c3ddb46328254d612a7137dc0fef685c549edea047466f98e315c404278f30041195c9258323be608bc4f3bd7fffb49f496ff336b01064dbda605139f2f216ee4bb009da26bc8b9290bbd3e6e9bf79d62123a72d33f70e6266109cf777dce8b918ea73612fc05d067f822c4006712d8430f698dd7a12f125f17da6d0c0fc5bfec9e243bd269dfce6877fe1529c1cc59e1cb7f50b311986abf05a0ea27cd6877e2b641e23047937ae413a3e174d879479206240ed9f29c702bbdb8aa2748", 0xcf}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000002c0)="03a2c677", 0x4}], 0x1}}], 0x4, 0x24008844) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x32000800, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)=@mpls_getnetconf={0x1c, 0x52, 0x7f3fe5b586e78e85, 0x70bd2d, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004012) 1.333355038s ago: executing program 4 (id=2134): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x1) sendmsg$rds(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0xd, 0x0, 0x0) pipe(&(0x7f00000000c0)) ioctl$sock_inet_SIOCSARP(r1, 0x8935, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) (fail_nth: 2) 1.247605026s ago: executing program 0 (id=2135): syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000480)=@assoc_value={r3, 0x2}, 0x8) 715.927493ms ago: executing program 3 (id=2136): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt(r3, 0x952, 0x0, &(0x7f0000001780)="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", 0x1000) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) epoll_create1(0x0) epoll_create(0x7) epoll_create(0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000280012800b00010067656e657665000018000280140007000000000000000000000000000000000108000a00", @ANYRES32=r4, @ANYBLOB="504715380c13345faf45810fdacfd1c4369133f7bd91258f19a13b380defc7543b6c758e73eccea297d83b1596367834da8810b1783be009d37ee220b243e5e09e347c96af7d62eec51d408be4a01f61564fdace55b15cddf356d0f58bd7e792b9d52fe4214ea5da7ebb072070cbc43426d3ad0ee6ef4d84b5944798de7cbc69b45c32f033c920ab0d17ab208312bb4fcc6728858ffde4"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 715.377338ms ago: executing program 2 (id=2137): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x18}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x20044040) 666.780732ms ago: executing program 2 (id=2138): epoll_create1(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0c009900fb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) unshare(0x60600) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, &(0x7f0000000040)) 638.41032ms ago: executing program 4 (id=2139): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 555.773709ms ago: executing program 1 (id=2140): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 455.780385ms ago: executing program 4 (id=2141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES64], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r1, @ANYRES64=r4, @ANYRES32=r2, @ANYRES8=r4], 0x10e0}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYRESDEC=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000050000000200000000000084050000000061cd425e"], 0x0, 0x29, 0x0, 0x1, 0x3687}, 0x28) r8 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000002480)={r5, &(0x7f0000002380)='\x00', 0x2, &(0x7f00000023c0)={@_ha_fsid={[0x800, 0x6]}, {0xfd11, 0xfff8, 0x5, 0x3}}, 0x7fffffff, &(0x7f0000002400)={@_ha_fsid}, &(0x7f0000002440)=0x401}) getsockname$packet(r9, &(0x7f00000024c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002500)=0x14) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000f315177ce2e1000000000038c92a3a2012bdd037a334dd7d27dc5edb2ca429e801619b8295fe2aac44704322aac31b4dcf806c09ef836ef6200f305cb6b1542c688c3f997f6aaca9c5c08996fb70333f651524393835fe498725308e5b85f438361a5db1c0e4e1f9e595895ea3af1411868379de8a5ad2c28f8b53b385705d4ad05bb629e1daeaa2024342d35bff38ba374844", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000af9100000000000037010000f8ffffffb702000008000000b70300000400000056000000060000003c32000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000a14010001000080fbdfdf25080015000300000008000300020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4c0d0) sendmsg$inet(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a0038001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x0, 0xd, 0x7, 0x0, 0xa75a6dd90d176421, 0xffffffffffffffff}]}, &(0x7f0000000380)='GPL\x00', 0x400, 0x41, &(0x7f00000005c0)=""/65, 0x41000, 0x2, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r9, r3, r11, r3, r9, 0x1, r3, r11, r3], 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$EXT4_IOC_GETFSUUID(r7, 0x8008662c, &(0x7f0000002340)) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r12, 0x0, 0x26, &(0x7f0000000080), 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800100000feffff108500000007984c0f67"], &(0x7f0000000000)='GPL\x00', 0x4000, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r14 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r14, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r14, 0x1, 0x9, &(0x7f0000000080), 0x4) r15 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r13, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) unshare(0x22020400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r15, 0x0, 0x0}, 0x10) 435.26811ms ago: executing program 2 (id=2142): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x1, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xa00, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x100000000000000, 0x0, 0x7fffffff}, 0x0, 0x0) 357.759637ms ago: executing program 3 (id=2143): socket(0x21, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x22, 0x0, &(0x7f00000008c0)="f6f4e9a1000000000000000d0800c32a8bc678bbd404fcd535fdc8a75167efec52a9", 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r5, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r5, 0x8) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000004540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004500)={&(0x7f0000003400)={0x10f0, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc, 0x5f}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x106c, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x64, 0x1, "0c4d8d90cdd0b132e9a100089d90d3a8c61d5e8d0600abcf0bb23ba69ccf15e0b33dd54f9592f187682067ba5253b4ae423fdd21929e27e9b9e465e5fd5cdf793fc6f0cc4fa1a14b5e6342f55eff5a360f98334c4904e4d8e08bb7ba76cd91ee"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xd8}, {0x8}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0xff}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x7e5}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x19a}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x10f0}, 0x1, 0x0, 0x0, 0x80}, 0x800c0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x2, 0x4) r7 = socket$inet(0x2, 0x3, 0x2) r8 = epoll_create1(0x80000) epoll_wait(r8, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x2000001c}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x81}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048890) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r9, 0x4048587b, &(0x7f0000001340)={{r9, &(0x7f0000000000)='()\x16\x00', 0x80442, &(0x7f00000000c0)={@align=0x7, {0x4, 0x70, 0x0, 0x68c}}, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x3}, 0x2, &(0x7f0000001300)=[{0x2, 0x7fff, &(0x7f00000001c0)='\x00', &(0x7f0000000200)="0fc03fb14b8d80964fef30fae08e277dde96c157898c37a87ee2817d0d44207b2fcd32cff0faedd1504f28aceb8b61380ddb2f9830b0df5ea19d65fa504a78863838c264f563b13decc59efd61f1e4aa215caf0a92ff6b04d0ac0de74e4e8fbcc227f11ee968ab89dadcef3f3ae0c66aedc43306003edb52f59ffac6aa08defed611fbde8e6614a02dd6ab31db94798a60cbbb73cb", 0x95, 0x20}, {0x2, 0x45, &(0x7f00000002c0)=',\x00', &(0x7f0000000300)="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", 0x1000, 0x16}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) write$6lowpan_control(r10, &(0x7f00000013c0)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) 273.634692ms ago: executing program 1 (id=2144): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x8) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000010401030000bb81000000005400000905000100010000000500010004"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYRES32=r6], 0x164}, 0x1, 0x0, 0x0, 0x819}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000004c0)="00ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 152.147734ms ago: executing program 0 (id=2145): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff73, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x1142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @fd=r0}]}]}]}, 0x34}, 0x1, 0x0, 0x8000000, 0x4048051}, 0xc000) 129.314442ms ago: executing program 4 (id=2146): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000000c0), 0x0}, 0x20) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x4}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={r9, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x84) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, r8, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8050}, 0x4000000) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r10, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x93c}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x12e1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40004) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x800) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x8c}}, 0x0) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0xf74}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x54}}, 0x4000) 103.732397ms ago: executing program 0 (id=2147): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fff}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x14, 0x2, 0x4) getpeername(r1, &(0x7f00000002c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000380)=0x80) sendmsg$kcm(r2, 0x0, 0x801) ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000340)={@broadcast, @empty, 0x0}, &(0x7f00000003c0)=0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x41}}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', r3}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x8937, &(0x7f00000000c0)={'erspan0\x00', @ifru_flags=0x2}) 0s ago: executing program 1 (id=2148): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x18}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x20044040) kernel console output (not intermixed with test programs): [ 222.821970][T10326] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.822791][T10331] netlink: 'syz.3.1387': attribute type 17 has an invalid length. [ 222.829707][T10326] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.874354][T10337] FAULT_INJECTION: forcing a failure. [ 222.874354][T10337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.897325][T10337] CPU: 0 UID: 0 PID: 10337 Comm: syz.0.1390 Not tainted syzkaller #0 PREEMPT(full) [ 222.897350][T10337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.897360][T10337] Call Trace: [ 222.897366][T10337] [ 222.897373][T10337] dump_stack_lvl+0xe8/0x150 [ 222.897397][T10337] should_fail_ex+0x412/0x560 [ 222.897418][T10337] _copy_from_user+0x2d/0xb0 [ 222.897436][T10337] ___sys_sendmsg+0x1c6/0x360 [ 222.897453][T10337] ? __lock_acquire+0x6b5/0x2cf0 [ 222.897473][T10337] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.897518][T10337] ? __fget_files+0x2a/0x420 [ 222.897536][T10337] ? __fget_files+0x3a0/0x420 [ 222.897559][T10337] __x64_sys_sendmsg+0x1bd/0x2a0 [ 222.897579][T10337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.897604][T10337] ? __pfx_ksys_write+0x10/0x10 [ 222.897632][T10337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.897650][T10337] do_syscall_64+0x174/0x580 [ 222.897666][T10337] ? trace_irq_disable+0x3b/0x140 [ 222.897687][T10337] ? clear_bhb_loop+0x40/0x90 [ 222.897708][T10337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.897723][T10337] RIP: 0033:0x7faed799ce59 [ 222.897740][T10337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.897753][T10337] RSP: 002b:00007faed8868028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.897771][T10337] RAX: ffffffffffffffda RBX: 00007faed7c15fa0 RCX: 00007faed799ce59 [ 222.897782][T10337] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000004 [ 222.897792][T10337] RBP: 00007faed8868090 R08: 0000000000000000 R09: 0000000000000000 [ 222.897801][T10337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.897810][T10337] R13: 00007faed7c16038 R14: 00007faed7c15fa0 R15: 00007fff7e97b418 [ 222.897837][T10337] [ 223.182046][T10326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.184429][T10344] netlink: 'syz.0.1392': attribute type 30 has an invalid length. [ 223.345726][T10328] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 223.400669][T10331] ip6gretap0: left promiscuous mode [ 223.462075][T10331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.470978][T10331] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.484966][T10331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.521126][T10352] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 223.612297][T10331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.623086][T10331] batadv_slave_1: left promiscuous mode [ 223.629249][T10331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.641242][T10331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.680087][T10331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.704811][T10331] veth1_vlan: left promiscuous mode [ 223.711423][T10331] veth0_vlan: left promiscuous mode [ 223.717643][T10331] veth0_vlan: entered promiscuous mode [ 223.726099][T10331] veth1_vlan: entered promiscuous mode [ 223.736239][T10331] veth1_macvtap: left promiscuous mode [ 223.742914][T10331] veth0_macvtap: left promiscuous mode [ 223.767101][T10331] veth0_macvtap: entered promiscuous mode [ 223.782952][T10331] veth1_macvtap: entered promiscuous mode [ 223.794290][T10331] virt_wifi0: entered promiscuous mode [ 223.800098][T10331] virt_wifi0: entered allmulticast mode [ 223.805891][T10331] macsec1: left promiscuous mode [ 223.811039][T10331] macsec1: left allmulticast mode [ 223.816074][T10331] virt_wifi0: left allmulticast mode [ 223.825781][T10331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.835303][T10331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.846027][T10331] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.855685][T10331] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 223.951007][T10331] ip6gretap0: entered promiscuous mode [ 223.959743][T10331] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.970192][T10331] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.984769][T10331] 8021q: adding VLAN 0 to HW filter on device bond6 [ 223.996410][T10331] 8021q: adding VLAN 0 to HW filter on device bond7 [ 224.009554][T10331] 8021q: adding VLAN 0 to HW filter on device eth0 [ 224.030162][T10331] 8021q: adding VLAN 0 to HW filter on device eth1 [ 224.046532][T10331] 8021q: adding VLAN 0 to HW filter on device eth2 [ 224.065548][T10331] 8021q: adding VLAN 0 to HW filter on device eth3 [ 224.081678][T10331] ip6erspan0: left allmulticast mode [ 224.098046][T10331] xfrm1: left allmulticast mode [ 224.104629][T10331] geneve3: left promiscuous mode [ 224.110160][T10331] geneve3: left allmulticast mode [ 224.117521][T10331] gtp1: left promiscuous mode [ 224.122526][T10331] gtp1: left allmulticast mode [ 224.132419][T10341] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.204566][ T143] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 224.230942][ T3368] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.263578][ T3368] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.318567][ T3368] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.398748][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.406031][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.565609][T10355] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 224.573415][ T3368] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.957686][T10391] __nla_validate_parse: 5 callbacks suppressed [ 224.957705][T10391] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1405'. [ 225.055802][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'. [ 225.163344][T10402] bridge4: port 1(dummy0) entered blocking state [ 225.189493][T10402] bridge4: port 1(dummy0) entered disabled state [ 225.196076][T10402] dummy0: entered allmulticast mode [ 225.203268][T10402] dummy0: entered promiscuous mode [ 225.212459][T10394] validate_nla: 2 callbacks suppressed [ 225.212479][T10394] netlink: 'syz.3.1406': attribute type 10 has an invalid length. [ 225.225789][T10394] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1406'. [ 225.279633][T10394] bridge4: port 1(dummy0) entered blocking state [ 225.286414][T10394] bridge4: port 1(dummy0) entered forwarding state [ 225.303498][T10394] dummy0: left allmulticast mode [ 225.348089][T10394] bridge4: port 1(dummy0) entered disabled state [ 225.395520][T10406] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1408'. [ 225.508441][T10412] netlink: 'syz.1.1411': attribute type 1 has an invalid length. [ 225.547775][T10412] 8021q: adding VLAN 0 to HW filter on device bond11 [ 225.804882][T10427] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1416'. [ 225.813895][T10427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1416'. [ 225.885741][T10433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1419'. [ 225.920390][T10431] FAULT_INJECTION: forcing a failure. [ 225.920390][T10431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.939270][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 225.966095][T10431] CPU: 0 UID: 0 PID: 10431 Comm: syz.2.1418 Not tainted syzkaller #0 PREEMPT(full) [ 225.966120][T10431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.966130][T10431] Call Trace: [ 225.966137][T10431] [ 225.966145][T10431] dump_stack_lvl+0xe8/0x150 [ 225.966170][T10431] should_fail_ex+0x412/0x560 [ 225.966193][T10431] _copy_to_user+0x31/0xb0 [ 225.966214][T10431] simple_read_from_buffer+0xe1/0x170 [ 225.966240][T10431] proc_fail_nth_read+0x1bb/0x230 [ 225.966264][T10431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.966286][T10431] ? rw_verify_area+0x2a6/0x4d0 [ 225.966307][T10431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.966327][T10431] vfs_read+0x20c/0xa70 [ 225.966353][T10431] ? __pfx___mutex_lock+0x10/0x10 [ 225.966372][T10431] ? __pfx_vfs_read+0x10/0x10 [ 225.966394][T10431] ? __fget_files+0x2a/0x420 [ 225.966417][T10431] ? __fget_files+0x3a0/0x420 [ 225.966434][T10431] ? __fget_files+0x2a/0x420 [ 225.966461][T10431] ksys_read+0x150/0x270 [ 225.966485][T10431] ? __pfx_ksys_read+0x10/0x10 [ 225.966513][T10431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.966531][T10431] do_syscall_64+0x174/0x580 [ 225.966547][T10431] ? trace_irq_disable+0x3b/0x140 [ 225.966568][T10431] ? clear_bhb_loop+0x40/0x90 [ 225.966587][T10431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.966604][T10431] RIP: 0033:0x7fec4315d68e [ 225.966620][T10431] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.966637][T10431] RSP: 002b:00007fec43ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.966655][T10431] RAX: ffffffffffffffda RBX: 00007fec43ff66c0 RCX: 00007fec4315d68e [ 225.966666][T10431] RDX: 000000000000000f RSI: 00007fec43ff60a0 RDI: 0000000000000004 [ 225.966677][T10431] RBP: 00007fec43ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 225.966687][T10431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.966696][T10431] R13: 00007fec43416038 R14: 00007fec43415fa0 R15: 00007ffcd2b47608 [ 225.966723][T10431] [ 226.390654][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1424'. [ 226.613766][T10460] netlink: 'syz.1.1426': attribute type 1 has an invalid length. [ 226.817223][T10460] 8021q: adding VLAN 0 to HW filter on device bond12 [ 227.225026][T10489] xt_NFQUEUE: number of total queues is 0 [ 227.424113][T10498] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1437'. [ 227.975599][T10526] netlink: 'syz.0.1442': attribute type 1 has an invalid length. [ 228.041986][T10526] 8021q: adding VLAN 0 to HW filter on device bond5 [ 228.156180][ T5295] veth0_vlan: left promiscuous mode [ 228.188015][ T5295] veth0_vlan: entered promiscuous mode [ 228.415097][T10548] tipc: Enabled bearer , priority 0 [ 228.430904][T10548] syzkaller0: entered promiscuous mode [ 228.444296][T10548] syzkaller0: entered allmulticast mode [ 228.702073][T10558] tipc: Resetting bearer [ 228.833365][T10546] tipc: Resetting bearer [ 229.079286][T10546] tipc: Disabling bearer [ 229.173969][T10573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.578123][T10603] netlink: 'syz.1.1457': attribute type 1 has an invalid length. [ 229.731006][T10603] 8021q: adding VLAN 0 to HW filter on device bond13 [ 229.950718][T10619] __nla_validate_parse: 1 callbacks suppressed [ 229.950737][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 229.999446][T10623] net_ratelimit: 705 callbacks suppressed [ 229.999478][T10623] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 230.013361][T10623] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 230.119480][T10623] netlink: 'syz.3.1464': attribute type 5 has an invalid length. [ 230.319244][T10629] netlink: 'syz.3.1467': attribute type 1 has an invalid length. [ 230.371337][T10629] 8021q: adding VLAN 0 to HW filter on device bond8 [ 230.388097][T10629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1467'. [ 230.413299][T10629] bond8 (unregistering): Released all slaves [ 230.493895][T10637] tipc: Enabled bearer , priority 0 [ 230.531983][T10637] syzkaller0: entered promiscuous mode [ 230.537509][T10637] syzkaller0: entered allmulticast mode [ 230.587606][T10640] netlink: 'syz.2.1471': attribute type 1 has an invalid length. [ 230.645652][T10645] FAULT_INJECTION: forcing a failure. [ 230.645652][T10645] name failslab, interval 1, probability 0, space 0, times 0 [ 230.675304][T10645] CPU: 1 UID: 0 PID: 10645 Comm: syz.3.1472 Not tainted syzkaller #0 PREEMPT(full) [ 230.675348][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.675369][T10645] Call Trace: [ 230.675375][T10645] [ 230.675382][T10645] dump_stack_lvl+0xe8/0x150 [ 230.675407][T10645] should_fail_ex+0x412/0x560 [ 230.675429][T10645] should_failslab+0xa8/0x100 [ 230.675445][T10645] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 230.675467][T10645] ? trace_kmalloc+0x2a/0xf0 [ 230.675485][T10645] ? page_pool_create_percpu+0x76/0xc80 [ 230.675512][T10645] page_pool_create_percpu+0x76/0xc80 [ 230.675532][T10645] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 230.675558][T10645] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 230.675576][T10645] ? arch_stack_walk+0xfb/0x150 [ 230.675610][T10645] ? __pfx_stack_trace_save+0x10/0x10 [ 230.675634][T10645] ? stack_depot_save_flags+0x33/0x810 [ 230.675657][T10645] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 230.675674][T10645] ? bpf_test_init+0x9f/0x150 [ 230.675689][T10645] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 230.675714][T10645] ? bpf_prog_test_run+0x2c7/0x340 [ 230.675729][T10645] ? __sys_bpf+0x643/0x950 [ 230.675747][T10645] ? __x64_sys_bpf+0x7c/0x90 [ 230.675787][T10645] ? __might_fault+0xaf/0x130 [ 230.675807][T10645] ? __might_fault+0xaf/0x130 [ 230.675829][T10645] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 230.675857][T10645] ? _copy_from_user+0x94/0xb0 [ 230.675874][T10645] ? bpf_test_init+0x113/0x150 [ 230.675888][T10645] ? xdp_convert_md_to_buff+0x5b/0x330 [ 230.675907][T10645] bpf_prog_test_run_xdp+0x81c/0x1160 [ 230.675938][T10645] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 230.675961][T10645] ? __fget_files+0x2a/0x420 [ 230.675980][T10645] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 230.675996][T10645] bpf_prog_test_run+0x2c7/0x340 [ 230.676012][T10645] __sys_bpf+0x643/0x950 [ 230.676034][T10645] ? __pfx___sys_bpf+0x10/0x10 [ 230.676066][T10645] ? ksys_write+0x242/0x270 [ 230.676088][T10645] ? __pfx_ksys_write+0x10/0x10 [ 230.676112][T10645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.676129][T10645] __x64_sys_bpf+0x7c/0x90 [ 230.676148][T10645] do_syscall_64+0x174/0x580 [ 230.676165][T10645] ? trace_irq_disable+0x3b/0x140 [ 230.676186][T10645] ? clear_bhb_loop+0x40/0x90 [ 230.676204][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.676217][T10645] RIP: 0033:0x7ff92d39ce59 [ 230.676231][T10645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.676245][T10645] RSP: 002b:00007ff92b5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.676261][T10645] RAX: ffffffffffffffda RBX: 00007ff92d615fa0 RCX: 00007ff92d39ce59 [ 230.676272][T10645] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 230.676281][T10645] RBP: 00007ff92b5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 230.676291][T10645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.676300][T10645] R13: 00007ff92d616038 R14: 00007ff92d615fa0 R15: 00007ffe443d6558 [ 230.676324][T10645] [ 230.680117][T10640] 8021q: adding VLAN 0 to HW filter on device bond10 [ 230.999695][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 231.015377][T10637] tipc: Resetting bearer [ 231.290056][T10636] tipc: Resetting bearer [ 231.343603][T10636] tipc: Disabling bearer [ 231.819153][T10673] syzkaller1: entered promiscuous mode [ 231.824693][T10673] syzkaller1: entered allmulticast mode [ 232.188481][T10691] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20004 [ 232.195373][T10693] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 232.226902][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1488'. [ 232.297423][T10696] FAULT_INJECTION: forcing a failure. [ 232.297423][T10696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.331501][T10696] CPU: 0 UID: 0 PID: 10696 Comm: syz.2.1489 Not tainted syzkaller #0 PREEMPT(full) [ 232.331525][T10696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.331535][T10696] Call Trace: [ 232.331541][T10696] [ 232.331548][T10696] dump_stack_lvl+0xe8/0x150 [ 232.331574][T10696] should_fail_ex+0x412/0x560 [ 232.331596][T10696] _copy_from_iter+0x1d3/0x1670 [ 232.331622][T10696] ? __pfx__copy_from_iter+0x10/0x10 [ 232.331646][T10696] ? aa_sk_perm+0x6d5/0x900 [ 232.331665][T10696] ? skb_put+0x11b/0x210 [ 232.331694][T10696] hci_sock_sendmsg+0x426/0xf40 [ 232.331716][T10696] ? __pfx_aa_sk_perm+0x10/0x10 [ 232.331738][T10696] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 232.331758][T10696] ? aa_sock_msg_perm+0xf1/0x1b0 [ 232.331780][T10696] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.331802][T10696] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 232.331820][T10696] sock_write_iter+0x49b/0x4f0 [ 232.331841][T10696] ? __pfx_sock_write_iter+0x10/0x10 [ 232.331869][T10696] ? bpf_lsm_file_permission+0x9/0x20 [ 232.331888][T10696] ? security_file_permission+0x75/0x260 [ 232.331915][T10696] vfs_write+0x61d/0xb90 [ 232.331944][T10696] ? __pfx_vfs_write+0x10/0x10 [ 232.331973][T10696] ? __fget_files+0x2a/0x420 [ 232.331999][T10696] ksys_write+0x150/0x270 [ 232.332022][T10696] ? __pfx_ksys_write+0x10/0x10 [ 232.332050][T10696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.332068][T10696] do_syscall_64+0x174/0x580 [ 232.332084][T10696] ? trace_irq_disable+0x3b/0x140 [ 232.332105][T10696] ? clear_bhb_loop+0x40/0x90 [ 232.332125][T10696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.332141][T10696] RIP: 0033:0x7fec4319ce59 [ 232.332157][T10696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.332171][T10696] RSP: 002b:00007fec43ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.332188][T10696] RAX: ffffffffffffffda RBX: 00007fec43415fa0 RCX: 00007fec4319ce59 [ 232.332199][T10696] RDX: 0000000000000006 RSI: 00002000000000c0 RDI: 0000000000000004 [ 232.332209][T10696] RBP: 00007fec43ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 232.332219][T10696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.332228][T10696] R13: 00007fec43416038 R14: 00007fec43415fa0 R15: 00007ffcd2b47608 [ 232.332255][T10696] [ 232.702763][T10701] netlink: 'syz.2.1489': attribute type 21 has an invalid length. [ 232.710727][T10701] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1489'. [ 232.962676][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1492'. [ 232.971612][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1492'. [ 233.089177][T10707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.138235][T10707] bond7: (slave bond0): making interface the new active one [ 233.147093][T10707] bond7: (slave bond0): Enslaving as an active interface with an up link [ 233.286228][T10713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1495'. [ 233.523393][T10717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1493'. [ 233.635399][T10724] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1498'. [ 234.315020][T10751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.324210][T10751] IPv6: NLM_F_CREATE should be set when creating new route [ 234.331667][T10751] IPv6: NLM_F_CREATE should be set when creating new route [ 234.338938][T10751] IPv6: NLM_F_CREATE should be set when creating new route [ 234.600396][T10766] FAULT_INJECTION: forcing a failure. [ 234.600396][T10766] name failslab, interval 1, probability 0, space 0, times 0 [ 234.613410][T10766] CPU: 0 UID: 0 PID: 10766 Comm: syz.3.1514 Not tainted syzkaller #0 PREEMPT(full) [ 234.613435][T10766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 234.613454][T10766] Call Trace: [ 234.613461][T10766] [ 234.613468][T10766] dump_stack_lvl+0xe8/0x150 [ 234.613494][T10766] should_fail_ex+0x412/0x560 [ 234.613516][T10766] should_failslab+0xa8/0x100 [ 234.613534][T10766] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 234.613557][T10766] ? __alloc_skb+0x186/0x7d0 [ 234.613573][T10766] ? __alloc_skb+0x1d0/0x7d0 [ 234.613586][T10766] ? __local_bh_enable_ip+0xd0/0x130 [ 234.613608][T10766] __alloc_skb+0x1d0/0x7d0 [ 234.613630][T10766] netlink_sendmsg+0x5d4/0xb40 [ 234.613657][T10766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.613679][T10766] ? aa_sock_msg_perm+0xf1/0x1b0 [ 234.613703][T10766] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 234.613726][T10766] ____sys_sendmsg+0x972/0x9f0 [ 234.613746][T10766] ? __might_fault+0xaf/0x130 [ 234.613770][T10766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.613796][T10766] ? import_iovec+0x73/0xa0 [ 234.613819][T10766] ___sys_sendmsg+0x2a5/0x360 [ 234.613835][T10766] ? __lock_acquire+0x6b5/0x2cf0 [ 234.613857][T10766] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.613905][T10766] ? __fget_files+0x2a/0x420 [ 234.613923][T10766] ? __fget_files+0x3a0/0x420 [ 234.613950][T10766] __x64_sys_sendmsg+0x1bd/0x2a0 [ 234.613971][T10766] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.613997][T10766] ? __pfx_ksys_write+0x10/0x10 [ 234.614026][T10766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.614044][T10766] do_syscall_64+0x174/0x580 [ 234.614059][T10766] ? trace_irq_disable+0x3b/0x140 [ 234.614080][T10766] ? clear_bhb_loop+0x40/0x90 [ 234.614100][T10766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.614115][T10766] RIP: 0033:0x7ff92d39ce59 [ 234.614131][T10766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.614145][T10766] RSP: 002b:00007ff92b5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.614162][T10766] RAX: ffffffffffffffda RBX: 00007ff92d615fa0 RCX: 00007ff92d39ce59 [ 234.614174][T10766] RDX: 0000000004000004 RSI: 0000200000000640 RDI: 0000000000000003 [ 234.614184][T10766] RBP: 00007ff92b5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 234.614194][T10766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.614203][T10766] R13: 00007ff92d616038 R14: 00007ff92d615fa0 R15: 00007ffe443d6558 [ 234.614230][T10766] [ 235.360952][T10792] FAULT_INJECTION: forcing a failure. [ 235.360952][T10792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.374039][T10792] CPU: 1 UID: 0 PID: 10792 Comm: syz.4.1522 Not tainted syzkaller #0 PREEMPT(full) [ 235.374062][T10792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.374072][T10792] Call Trace: [ 235.374079][T10792] [ 235.374086][T10792] dump_stack_lvl+0xe8/0x150 [ 235.374110][T10792] should_fail_ex+0x412/0x560 [ 235.374133][T10792] _copy_to_user+0x31/0xb0 [ 235.374155][T10792] simple_read_from_buffer+0xe1/0x170 [ 235.374179][T10792] proc_fail_nth_read+0x1bb/0x230 [ 235.374203][T10792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.374225][T10792] ? rw_verify_area+0x2a6/0x4d0 [ 235.374246][T10792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.374267][T10792] vfs_read+0x20c/0xa70 [ 235.374288][T10792] ? __pfx_do_recvmmsg+0x10/0x10 [ 235.374313][T10792] ? __pfx_vfs_read+0x10/0x10 [ 235.374345][T10792] ? do_sys_openat2+0x14c/0x200 [ 235.374361][T10792] ? kmem_cache_free+0x182/0x650 [ 235.374380][T10792] ? fd_install+0x94/0x3d0 [ 235.374411][T10792] ksys_read+0x150/0x270 [ 235.374433][T10792] ? __pfx_ksys_read+0x10/0x10 [ 235.374458][T10792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.374474][T10792] do_syscall_64+0x174/0x580 [ 235.374490][T10792] ? trace_irq_disable+0x3b/0x140 [ 235.374512][T10792] ? clear_bhb_loop+0x40/0x90 [ 235.374531][T10792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.374547][T10792] RIP: 0033:0x7efe10f5d68e [ 235.374563][T10792] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.374577][T10792] RSP: 002b:00007efe0f1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.374594][T10792] RAX: ffffffffffffffda RBX: 00007efe0f1f66c0 RCX: 00007efe10f5d68e [ 235.374605][T10792] RDX: 000000000000000f RSI: 00007efe0f1f60a0 RDI: 0000000000000005 [ 235.374615][T10792] RBP: 00007efe0f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 235.374625][T10792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.374634][T10792] R13: 00007efe11216038 R14: 00007efe11215fa0 R15: 00007ffdfcc42d58 [ 235.374661][T10792] [ 235.964379][T10811] syzkaller0: entered promiscuous mode [ 235.969955][T10811] syzkaller0: entered allmulticast mode [ 236.105786][ C1] tc action pedit 'at' offset 2061 out of bounds [ 236.112470][ C1] tc action pedit 'at' offset 2061 out of bounds [ 236.118823][ C1] tc action pedit 'at' offset 2061 out of bounds [ 236.125259][ C1] tc action pedit 'at' offset 2061 out of bounds [ 236.131606][ C1] tc action pedit 'at' offset 2061 out of bounds [ 236.137963][ C1] tc action pedit 'at' offset 2061 out of bounds [ 236.144359][ C1] tc action pedit 'at' offset 2061 out of bounds [ 236.150711][ C1] tc action pedit 'at' offset 2061 out of bounds [ 236.157060][ C1] tc action pedit 'at' offset 2061 out of bounds [ 236.163425][ C1] tc action pedit 'at' offset 2061 out of bounds [ 236.169857][ C1] TC_ACT_REPEAT abuse ? [ 236.312711][T10821] __nla_validate_parse: 1 callbacks suppressed [ 236.312732][T10821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1532'. [ 236.357780][T10821] bond0: (slave team0): Releasing backup interface [ 236.376028][T10821] bridge_slave_0: left allmulticast mode [ 236.381961][T10821] bridge_slave_0: left promiscuous mode [ 236.387986][T10821] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.399403][T10821] bridge_slave_1: left allmulticast mode [ 236.405105][T10821] bridge_slave_1: left promiscuous mode [ 236.410907][T10821] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.425048][T10821] bond0: (slave bond_slave_0): Releasing backup interface [ 236.462265][T10821] bond0: (slave bond_slave_1): Releasing backup interface [ 236.490584][T10821] team0: Port device team_slave_0 removed [ 236.506792][T10821] team0: Port device team_slave_1 removed [ 236.515134][T10821] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 240.833922][T10842] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1538'. [ 240.842934][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1538'. [ 240.887117][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1538'. [ 240.949610][T10857] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 240.956096][T10857] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 241.092663][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 241.104170][T10867] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1544'. [ 241.183482][T10870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1547'. [ 241.293201][T10876] syzkaller0: entered promiscuous mode [ 241.298742][T10876] syzkaller0: entered allmulticast mode [ 241.768291][T10891] vlan0: entered promiscuous mode [ 241.932015][T10895] FAULT_INJECTION: forcing a failure. [ 241.932015][T10895] name failslab, interval 1, probability 0, space 0, times 0 [ 242.012010][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1552'. [ 242.023460][T10895] CPU: 0 UID: 0 PID: 10895 Comm: syz.3.1553 Not tainted syzkaller #0 PREEMPT(full) [ 242.023494][T10895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.023504][T10895] Call Trace: [ 242.023511][T10895] [ 242.023519][T10895] dump_stack_lvl+0xe8/0x150 [ 242.023546][T10895] should_fail_ex+0x412/0x560 [ 242.023570][T10895] should_failslab+0xa8/0x100 [ 242.023589][T10895] __kmalloc_noprof+0xe8/0x760 [ 242.023614][T10895] ? cfg80211_conn_scan+0x1cb/0xd30 [ 242.023638][T10895] cfg80211_conn_scan+0x1cb/0xd30 [ 242.023663][T10895] ? cfg80211_connect+0x179e/0x2150 [ 242.023688][T10895] cfg80211_connect+0x1890/0x2150 [ 242.023722][T10895] ? nl80211_crypto_settings+0xe00/0x1380 [ 242.023752][T10895] nl80211_connect+0x16b8/0x1bd0 [ 242.023778][T10895] ? trace_contention_end+0x3d/0x140 [ 242.023800][T10895] ? __pfx_nl80211_connect+0x10/0x10 [ 242.023814][T10895] ? __mutex_lock+0x319/0x1550 [ 242.023881][T10895] genl_family_rcv_msg_doit+0x22a/0x330 [ 242.023911][T10895] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 242.023945][T10895] ? bpf_lsm_capable+0x9/0x20 [ 242.023960][T10895] ? security_capable+0x7e/0x2c0 [ 242.023988][T10895] genl_rcv_msg+0x61c/0x7a0 [ 242.024014][T10895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.024034][T10895] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 242.024051][T10895] ? __pfx_nl80211_connect+0x10/0x10 [ 242.024065][T10895] ? __pfx_nl80211_post_doit+0x10/0x10 [ 242.024084][T10895] ? __pfx_ref_tracker_free+0x10/0x10 [ 242.024100][T10895] ? __asan_memcpy+0x40/0x70 [ 242.024119][T10895] ? __skb_clone+0x63/0x7a0 [ 242.024146][T10895] netlink_rcv_skb+0x232/0x4b0 [ 242.024165][T10895] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.024188][T10895] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.024222][T10895] ? down_read+0x270/0x2e0 [ 242.024237][T10895] ? genl_rcv+0xd/0x40 [ 242.024259][T10895] genl_rcv+0x28/0x40 [ 242.024277][T10895] netlink_unicast+0x75c/0x8e0 [ 242.024306][T10895] netlink_sendmsg+0x813/0xb40 [ 242.024333][T10895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.024355][T10895] ? aa_sock_msg_perm+0xf1/0x1b0 [ 242.024379][T10895] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 242.024402][T10895] ____sys_sendmsg+0x972/0x9f0 [ 242.024421][T10895] ? __might_fault+0xaf/0x130 [ 242.024447][T10895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.024475][T10895] ? import_iovec+0x73/0xa0 [ 242.024506][T10895] ___sys_sendmsg+0x2a5/0x360 [ 242.024523][T10895] ? __lock_acquire+0x6b5/0x2cf0 [ 242.024545][T10895] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.024599][T10895] ? __fget_files+0x2a/0x420 [ 242.024618][T10895] ? __fget_files+0x3a0/0x420 [ 242.024647][T10895] __x64_sys_sendmsg+0x1bd/0x2a0 [ 242.024668][T10895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.024696][T10895] ? __pfx_ksys_write+0x10/0x10 [ 242.024727][T10895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.024745][T10895] do_syscall_64+0x174/0x580 [ 242.024764][T10895] ? clear_bhb_loop+0x40/0x90 [ 242.024785][T10895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.024800][T10895] RIP: 0033:0x7ff92d39ce59 [ 242.024818][T10895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.024831][T10895] RSP: 002b:00007ff92b5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.024849][T10895] RAX: ffffffffffffffda RBX: 00007ff92d615fa0 RCX: 00007ff92d39ce59 [ 242.024859][T10895] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 242.024870][T10895] RBP: 00007ff92b5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 242.024879][T10895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.024888][T10895] R13: 00007ff92d616038 R14: 00007ff92d615fa0 R15: 00007ffe443d6558 [ 242.024916][T10895] [ 242.715524][ T51] block nbd1: Receive control failed (result -1) [ 243.223812][T10938] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 243.394596][T10938] 8021q: adding VLAN 0 to HW filter on device bond8 [ 243.818593][T10959] wlan0: mtu less than device minimum [ 244.649476][T10988] netlink: 'syz.1.1575': attribute type 1 has an invalid length. [ 244.821300][T10988] 8021q: adding VLAN 0 to HW filter on device bond14 [ 245.150732][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1583'. [ 245.176662][T11013] xt_hashlimit: size too large, truncated to 1048576 [ 245.486868][T11027] netlink: 'syz.1.1589': attribute type 1 has an invalid length. [ 245.532426][T11027] 8021q: adding VLAN 0 to HW filter on device bond15 [ 245.610381][T11035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1592'. [ 245.620104][T11035] FAULT_INJECTION: forcing a failure. [ 245.620104][T11035] name failslab, interval 1, probability 0, space 0, times 0 [ 245.636707][T11035] CPU: 1 UID: 0 PID: 11035 Comm: syz.3.1592 Not tainted syzkaller #0 PREEMPT(full) [ 245.636734][T11035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.636743][T11035] Call Trace: [ 245.636751][T11035] [ 245.636758][T11035] dump_stack_lvl+0xe8/0x150 [ 245.636784][T11035] should_fail_ex+0x412/0x560 [ 245.636805][T11035] should_failslab+0xa8/0x100 [ 245.636824][T11035] __kmalloc_cache_noprof+0x88/0x660 [ 245.636843][T11035] ? __asan_memset+0x22/0x50 [ 245.636861][T11035] ? alloc_netdev_mqs+0xbf0/0x1210 [ 245.636879][T11035] ? __xdp_rxq_info_reg+0x171/0x280 [ 245.636899][T11035] alloc_netdev_mqs+0xbf0/0x1210 [ 245.636921][T11035] rtnl_create_link+0x31f/0xd70 [ 245.636947][T11035] rtnl_newlink_create+0x277/0xb70 [ 245.636964][T11035] ? __pfx___nla_validate_parse+0x10/0x10 [ 245.636990][T11035] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 245.637010][T11035] ? __pfx___mutex_lock+0x10/0x10 [ 245.637036][T11035] ? ns_capable+0x89/0xe0 [ 245.637056][T11035] rtnl_newlink+0x166a/0x1bb0 [ 245.637086][T11035] ? __pfx_rtnl_newlink+0x10/0x10 [ 245.637099][T11035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.637152][T11035] ? kasan_quarantine_put+0xbb/0x1f0 [ 245.637182][T11035] ? lockdep_hardirqs_on+0x7a/0x110 [ 245.637200][T11035] ? nlmon_xmit+0xb0/0x100 [ 245.637215][T11035] ? kmem_cache_free+0x182/0x650 [ 245.637247][T11035] ? __lock_acquire+0x6b5/0x2cf0 [ 245.637268][T11035] ? __dev_queue_xmit+0x2b6/0x3950 [ 245.637290][T11035] ? __local_bh_enable_ip+0xd0/0x130 [ 245.637307][T11035] ? lockdep_hardirqs_on+0x7a/0x110 [ 245.637321][T11035] ? __dev_queue_xmit+0x2b6/0x3950 [ 245.637337][T11035] ? __local_bh_enable_ip+0xd0/0x130 [ 245.637352][T11035] ? __dev_queue_xmit+0x2b6/0x3950 [ 245.637376][T11035] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 245.637406][T11035] ? __pfx_rtnl_newlink+0x10/0x10 [ 245.637421][T11035] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 245.637441][T11035] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 245.637455][T11035] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 245.637467][T11035] ? ref_tracker_free+0x693/0x840 [ 245.637488][T11035] ? __pfx_ref_tracker_free+0x10/0x10 [ 245.637502][T11035] ? __asan_memcpy+0x40/0x70 [ 245.637519][T11035] ? __skb_clone+0x63/0x7a0 [ 245.637544][T11035] netlink_rcv_skb+0x232/0x4b0 [ 245.637563][T11035] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 245.637578][T11035] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 245.637607][T11035] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.637624][T11035] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.637647][T11035] netlink_unicast+0x75c/0x8e0 [ 245.637674][T11035] netlink_sendmsg+0x813/0xb40 [ 245.637698][T11035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.637719][T11035] ? aa_sock_msg_perm+0xf1/0x1b0 [ 245.637742][T11035] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.637766][T11035] ____sys_sendmsg+0x972/0x9f0 [ 245.637784][T11035] ? __might_fault+0xaf/0x130 [ 245.637810][T11035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.637835][T11035] ? import_iovec+0x73/0xa0 [ 245.637856][T11035] ___sys_sendmsg+0x2a5/0x360 [ 245.637872][T11035] ? __lock_acquire+0x6b5/0x2cf0 [ 245.637893][T11035] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.637945][T11035] ? __fget_files+0x2a/0x420 [ 245.637963][T11035] ? __fget_files+0x3a0/0x420 [ 245.637991][T11035] __x64_sys_sendmsg+0x1bd/0x2a0 [ 245.638012][T11035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.638039][T11035] ? __pfx_ksys_write+0x10/0x10 [ 245.638070][T11035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.638087][T11035] do_syscall_64+0x174/0x580 [ 245.638103][T11035] ? trace_irq_disable+0x3b/0x140 [ 245.638126][T11035] ? clear_bhb_loop+0x40/0x90 [ 245.638146][T11035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.638161][T11035] RIP: 0033:0x7ff92d39ce59 [ 245.638184][T11035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.638198][T11035] RSP: 002b:00007ff92b5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.638215][T11035] RAX: ffffffffffffffda RBX: 00007ff92d615fa0 RCX: 00007ff92d39ce59 [ 245.638227][T11035] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000010 [ 245.638237][T11035] RBP: 00007ff92b5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 245.638247][T11035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.638256][T11035] R13: 00007ff92d616038 R14: 00007ff92d615fa0 R15: 00007ffe443d6558 [ 245.638283][T11035] [ 246.116952][T11038] sctp: [Deprecated]: syz.1.1593 (pid 11038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.116952][T11038] Use struct sctp_sack_info instead [ 246.308039][T11038] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20004 [ 246.368103][T11048] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1596'. [ 246.491819][T11058] FAULT_INJECTION: forcing a failure. [ 246.491819][T11058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.504907][T11058] CPU: 1 UID: 0 PID: 11058 Comm: syz.1.1601 Not tainted syzkaller #0 PREEMPT(full) [ 246.504931][T11058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.504942][T11058] Call Trace: [ 246.504949][T11058] [ 246.504956][T11058] dump_stack_lvl+0xe8/0x150 [ 246.504983][T11058] should_fail_ex+0x412/0x560 [ 246.505007][T11058] _copy_from_user+0x2d/0xb0 [ 246.505027][T11058] __sys_bpf+0x229/0x950 [ 246.505052][T11058] ? __pfx___sys_bpf+0x10/0x10 [ 246.505087][T11058] ? ksys_write+0x242/0x270 [ 246.505112][T11058] ? __pfx_ksys_write+0x10/0x10 [ 246.505152][T11058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.505170][T11058] __x64_sys_bpf+0x7c/0x90 [ 246.505192][T11058] do_syscall_64+0x174/0x580 [ 246.505209][T11058] ? trace_irq_disable+0x3b/0x140 [ 246.505231][T11058] ? clear_bhb_loop+0x40/0x90 [ 246.505251][T11058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.505267][T11058] RIP: 0033:0x7fb47ed9ce59 [ 246.505283][T11058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.505296][T11058] RSP: 002b:00007fb47fc1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.505313][T11058] RAX: ffffffffffffffda RBX: 00007fb47f015fa0 RCX: 00007fb47ed9ce59 [ 246.505324][T11058] RDX: 0000000000000028 RSI: 00002000000003c0 RDI: 0000000000000012 [ 246.505333][T11058] RBP: 00007fb47fc1d090 R08: 0000000000000000 R09: 0000000000000000 [ 246.505341][T11058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.505349][T11058] R13: 00007fb47f016038 R14: 00007fb47f015fa0 R15: 00007ffda059ceb8 [ 246.505370][T11058] [ 246.858595][T11063] syz_tun: entered allmulticast mode [ 246.870483][T11052] pim6reg: entered allmulticast mode [ 247.093021][T11074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1605'. [ 247.507689][T11088] netlink: 'syz.4.1605': attribute type 1 has an invalid length. [ 247.533009][T11088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1605'. [ 247.557917][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1605'. [ 251.070342][T11111] netlink: 180568 bytes leftover after parsing attributes in process `syz.4.1614'. [ 251.122368][T11114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1615'. [ 251.161002][ T30] audit: type=1800 audit(1780324892.288:7): pid=11114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1615" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1742 res=0 errno=0 [ 252.446866][T11155] netlink: 'syz.1.1623': attribute type 1 has an invalid length. [ 252.532235][T11155] bond16: entered promiscuous mode [ 252.566481][T11155] 8021q: adding VLAN 0 to HW filter on device bond16 [ 252.727866][T11167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1626'. [ 252.736950][T11167] FAULT_INJECTION: forcing a failure. [ 252.736950][T11167] name failslab, interval 1, probability 0, space 0, times 0 [ 252.761957][T11167] CPU: 1 UID: 0 PID: 11167 Comm: syz.1.1626 Not tainted syzkaller #0 PREEMPT(full) [ 252.761983][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.762001][T11167] Call Trace: [ 252.762008][T11167] [ 252.762016][T11167] dump_stack_lvl+0xe8/0x150 [ 252.762042][T11167] should_fail_ex+0x412/0x560 [ 252.762065][T11167] should_failslab+0xa8/0x100 [ 252.762081][T11167] ? skb_clone+0x212/0x3a0 [ 252.762100][T11167] kmem_cache_alloc_noprof+0x87/0x650 [ 252.762129][T11167] skb_clone+0x212/0x3a0 [ 252.762151][T11167] __netlink_deliver_tap+0x404/0x850 [ 252.762182][T11167] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.762202][T11167] netlink_deliver_tap+0x19c/0x1b0 [ 252.762221][T11167] netlink_sendskb+0x68/0x140 [ 252.762240][T11167] netlink_rcv_skb+0x2b6/0x4b0 [ 252.762259][T11167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.762280][T11167] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.762314][T11167] ? down_read+0x270/0x2e0 [ 252.762331][T11167] ? genl_rcv+0xd/0x40 [ 252.762352][T11167] genl_rcv+0x28/0x40 [ 252.762371][T11167] netlink_unicast+0x75c/0x8e0 [ 252.762398][T11167] netlink_sendmsg+0x813/0xb40 [ 252.762425][T11167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.762447][T11167] ? aa_sock_msg_perm+0xf1/0x1b0 [ 252.762469][T11167] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.762492][T11167] ____sys_sendmsg+0x972/0x9f0 [ 252.762511][T11167] ? __might_fault+0xaf/0x130 [ 252.762537][T11167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.762564][T11167] ? import_iovec+0x73/0xa0 [ 252.762586][T11167] ___sys_sendmsg+0x2a5/0x360 [ 252.762603][T11167] ? __lock_acquire+0x6b5/0x2cf0 [ 252.762625][T11167] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.762677][T11167] ? __fget_files+0x2a/0x420 [ 252.762695][T11167] ? __fget_files+0x3a0/0x420 [ 252.762723][T11167] __x64_sys_sendmsg+0x1bd/0x2a0 [ 252.762744][T11167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.762770][T11167] ? __pfx_ksys_write+0x10/0x10 [ 252.762801][T11167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.762819][T11167] do_syscall_64+0x174/0x580 [ 252.762834][T11167] ? trace_irq_disable+0x3b/0x140 [ 252.762856][T11167] ? clear_bhb_loop+0x40/0x90 [ 252.762876][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.762891][T11167] RIP: 0033:0x7fb47ed9ce59 [ 252.762908][T11167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.762922][T11167] RSP: 002b:00007fb47fc1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.762939][T11167] RAX: ffffffffffffffda RBX: 00007fb47f015fa0 RCX: 00007fb47ed9ce59 [ 252.762950][T11167] RDX: 0000000004004004 RSI: 0000200000000380 RDI: 0000000000000004 [ 252.762960][T11167] RBP: 00007fb47fc1d090 R08: 0000000000000000 R09: 0000000000000000 [ 252.762969][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.762978][T11167] R13: 00007fb47f016038 R14: 00007fb47f015fa0 R15: 00007ffda059ceb8 [ 252.763012][T11167] [ 252.810195][T11171] FAULT_INJECTION: forcing a failure. [ 252.810195][T11171] name failslab, interval 1, probability 0, space 0, times 0 [ 252.932752][T11177] netlink: 'syz.0.1629': attribute type 1 has an invalid length. [ 252.936013][T11171] CPU: 1 UID: 0 PID: 11171 Comm: syz.3.1627 Not tainted syzkaller #0 PREEMPT(full) [ 252.936040][T11171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.936050][T11171] Call Trace: [ 252.936057][T11171] [ 252.936064][T11171] dump_stack_lvl+0xe8/0x150 [ 252.936089][T11171] should_fail_ex+0x412/0x560 [ 252.936111][T11171] should_failslab+0xa8/0x100 [ 252.936127][T11171] ? skb_clone+0x212/0x3a0 [ 252.936147][T11171] kmem_cache_alloc_noprof+0x87/0x650 [ 252.936168][T11171] ? __netlink_lookup+0xc6/0x8b0 [ 252.936192][T11171] skb_clone+0x212/0x3a0 [ 252.936213][T11171] __netlink_deliver_tap+0x404/0x850 [ 252.936241][T11171] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.936260][T11171] netlink_deliver_tap+0x19c/0x1b0 [ 252.936278][T11171] netlink_unicast+0x730/0x8e0 [ 252.936304][T11171] netlink_sendmsg+0x813/0xb40 [ 252.936330][T11171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.936352][T11171] ? aa_sock_msg_perm+0xf1/0x1b0 [ 252.936374][T11171] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.936398][T11171] ____sys_sendmsg+0x972/0x9f0 [ 252.936416][T11171] ? __might_fault+0xaf/0x130 [ 252.936442][T11171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.936468][T11171] ? import_iovec+0x73/0xa0 [ 252.936489][T11171] ___sys_sendmsg+0x2a5/0x360 [ 252.936505][T11171] ? __lock_acquire+0x6b5/0x2cf0 [ 252.936527][T11171] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.936577][T11171] ? __fget_files+0x2a/0x420 [ 252.936594][T11171] ? __fget_files+0x3a0/0x420 [ 252.936621][T11171] __x64_sys_sendmsg+0x1bd/0x2a0 [ 252.936641][T11171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.936667][T11171] ? __pfx_ksys_write+0x10/0x10 [ 252.936695][T11171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.936712][T11171] do_syscall_64+0x174/0x580 [ 252.936729][T11171] ? trace_irq_disable+0x3b/0x140 [ 252.936751][T11171] ? clear_bhb_loop+0x40/0x90 [ 252.936770][T11171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.936785][T11171] RIP: 0033:0x7ff92d39ce59 [ 252.936802][T11171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.936815][T11171] RSP: 002b:00007ff92b5d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.936833][T11171] RAX: ffffffffffffffda RBX: 00007ff92d616090 RCX: 00007ff92d39ce59 [ 252.936844][T11171] RDX: 00000000240000d2 RSI: 0000200000000200 RDI: 0000000000000004 [ 252.936854][T11171] RBP: 00007ff92b5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 252.936863][T11171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.936872][T11171] R13: 00007ff92d616128 R14: 00007ff92d616090 R15: 00007ffe443d6558 [ 252.936898][T11171] [ 253.489769][T11186] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1631'. [ 253.499782][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1631'. [ 253.502744][T11177] bond6: entered promiscuous mode [ 253.514059][T11186] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1631'. [ 253.515042][T11189] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1633'. [ 253.522925][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1631'. [ 253.535965][T11177] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.575557][T11186] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1631'. [ 253.807478][T11206] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 253.846002][T11206] ipip0: entered promiscuous mode [ 254.133188][T11219] xt_TPROXY: Can be used only with -p tcp or -p udp [ 254.689395][T11244] FAULT_INJECTION: forcing a failure. [ 254.689395][T11244] name failslab, interval 1, probability 0, space 0, times 0 [ 254.746227][T11244] CPU: 0 UID: 0 PID: 11244 Comm: syz.4.1652 Not tainted syzkaller #0 PREEMPT(full) [ 254.746254][T11244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 254.746264][T11244] Call Trace: [ 254.746271][T11244] [ 254.746279][T11244] dump_stack_lvl+0xe8/0x150 [ 254.746305][T11244] should_fail_ex+0x412/0x560 [ 254.746329][T11244] should_failslab+0xa8/0x100 [ 254.746348][T11244] __kmalloc_cache_noprof+0x88/0x660 [ 254.746371][T11244] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 254.746393][T11244] ? sctp_add_bind_addr+0x8c/0x370 [ 254.746420][T11244] sctp_add_bind_addr+0x8c/0x370 [ 254.746446][T11244] sctp_copy_local_addr_list+0x314/0x4f0 [ 254.746471][T11244] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 254.746493][T11244] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 254.746519][T11244] ? sctp_v4_is_any+0x35/0x60 [ 254.746534][T11244] ? sctp_copy_one_addr+0x93/0x360 [ 254.746559][T11244] sctp_bind_addr_copy+0xb3/0x3c0 [ 254.746582][T11244] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 254.746605][T11244] sctp_connect_new_asoc+0x2ff/0x6b0 [ 254.746628][T11244] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 254.746652][T11244] ? __local_bh_enable_ip+0xd0/0x130 [ 254.746668][T11244] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 254.746688][T11244] ? security_sctp_bind_connect+0x7e/0x2c0 [ 254.746712][T11244] sctp_sendmsg+0x1576/0x2c50 [ 254.746745][T11244] ? __pfx_sctp_sendmsg+0x10/0x10 [ 254.746767][T11244] ? aa_sk_perm+0x6d5/0x900 [ 254.746787][T11244] ? __might_fault+0xaf/0x130 [ 254.746821][T11244] ? __pfx_aa_sk_perm+0x10/0x10 [ 254.746845][T11244] ? sock_rps_record_flow+0x19/0x350 [ 254.746867][T11244] ? __pfx_inet_sendmsg+0x10/0x10 [ 254.746889][T11244] ? inet_sendmsg+0x2f4/0x370 [ 254.746910][T11244] ? __pfx_inet_sendmsg+0x10/0x10 [ 254.746933][T11244] __sys_sendto+0x5de/0x710 [ 254.746965][T11244] ? __pfx___sys_sendto+0x10/0x10 [ 254.746979][T11244] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 254.747011][T11244] ? __fget_files+0x3a0/0x420 [ 254.747042][T11244] ? ksys_write+0x242/0x270 [ 254.747067][T11244] ? __pfx_ksys_write+0x10/0x10 [ 254.747093][T11244] __x64_sys_sendto+0xde/0x100 [ 254.747110][T11244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.747128][T11244] do_syscall_64+0x174/0x580 [ 254.747145][T11244] ? trace_irq_disable+0x3b/0x140 [ 254.747168][T11244] ? clear_bhb_loop+0x40/0x90 [ 254.747188][T11244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.747209][T11244] RIP: 0033:0x7efe10f9ce59 [ 254.747225][T11244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.747239][T11244] RSP: 002b:00007efe0f1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 254.747258][T11244] RAX: ffffffffffffffda RBX: 00007efe11215fa0 RCX: 00007efe10f9ce59 [ 254.747269][T11244] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000004 [ 254.747280][T11244] RBP: 00007efe0f1f6090 R08: 0000200000000380 R09: 0000000000000010 [ 254.747291][T11244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.747301][T11244] R13: 00007efe11216038 R14: 00007efe11215fa0 R15: 00007ffdfcc42d58 [ 254.747329][T11244] [ 255.487770][T11246] syzkaller0: entered promiscuous mode [ 255.493295][T11246] syzkaller0: entered allmulticast mode [ 255.561332][T11246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1653'. [ 255.608188][T11255] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.821764][T11255] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 255.861122][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.867488][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.982160][T11265] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1659'. [ 255.996856][T11265] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1659'. [ 256.527539][T11289] lo speed is unknown, defaulting to 1000 [ 256.581812][T11289] lo speed is unknown, defaulting to 1000 [ 256.590403][T11289] lo speed is unknown, defaulting to 1000 [ 257.363809][T11289] infiniband syz0: set active [ 257.376978][ T5741] lo speed is unknown, defaulting to 1000 [ 257.413729][T11289] infiniband syz0: added lo [ 257.427237][T11289] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 257.446129][T11289] infiniband syz0: Couldn't open port 1 [ 257.461289][T11289] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 257.476611][T11289] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 257.516196][T11289] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 257.561521][T11289] RDS/IB: syz0: added [ 257.570818][T11289] smc: adding ib device syz0 with port count 1 [ 257.577673][T11289] smc: ib device syz0 port 1 has no pnetid [ 257.637519][ T5741] lo speed is unknown, defaulting to 1000 [ 257.648187][T11289] lo speed is unknown, defaulting to 1000 [ 261.394271][T11289] lo speed is unknown, defaulting to 1000 [ 264.418489][T11289] lo speed is unknown, defaulting to 1000 [ 264.641733][T11370] __nla_validate_parse: 2 callbacks suppressed [ 264.641752][T11370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1696'. [ 264.818572][T11289] lo speed is unknown, defaulting to 1000 [ 265.467621][T11289] lo speed is unknown, defaulting to 1000 [ 265.896220][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1703'. [ 265.970998][T11401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.987909][T11392] netlink: 'syz.1.1703': attribute type 10 has an invalid length. [ 265.995768][T11392] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1703'. [ 266.039525][T11404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1707'. [ 266.142058][T11408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.154431][T11408] batadv_slave_1: entered promiscuous mode [ 266.513985][T11420] netlink: 'syz.3.1714': attribute type 1 has an invalid length. [ 266.585136][T11420] 8021q: adding VLAN 0 to HW filter on device bond9 [ 267.016981][T11444] lo speed is unknown, defaulting to 1000 [ 267.182666][T11450] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 267.236389][T11451] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 267.496181][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'. [ 267.833302][T11471] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1732'. [ 267.928631][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1732'. [ 268.466380][T11484] netlink: 'syz.3.1739': attribute type 1 has an invalid length. [ 268.508186][T11484] 8021q: adding VLAN 0 to HW filter on device bond10 [ 268.555057][T11483] kthread_run failed with err -4 [ 268.585859][T11484] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1739'. [ 268.779120][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1744'. [ 268.814315][T11505] ip6tnl2: entered allmulticast mode [ 269.115373][T11520] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1748'. [ 269.162292][T11523] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 269.183103][T11523] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 269.310090][T11533] openvswitch: netlink: IP tunnel dst address not specified [ 269.543244][T11538] FAULT_INJECTION: forcing a failure. [ 269.543244][T11538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.565271][T11538] CPU: 1 UID: 0 PID: 11538 Comm: syz.0.1753 Not tainted syzkaller #0 PREEMPT(full) [ 269.565297][T11538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.565308][T11538] Call Trace: [ 269.565315][T11538] [ 269.565322][T11538] dump_stack_lvl+0xe8/0x150 [ 269.565348][T11538] should_fail_ex+0x412/0x560 [ 269.565372][T11538] _copy_from_user+0x2d/0xb0 [ 269.565392][T11538] __copy_msghdr+0x3c5/0x5b0 [ 269.565416][T11538] ___sys_sendmsg+0x213/0x360 [ 269.565433][T11538] ? __lock_acquire+0x6b5/0x2cf0 [ 269.565455][T11538] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.565506][T11538] ? __fget_files+0x2a/0x420 [ 269.565525][T11538] ? __fget_files+0x3a0/0x420 [ 269.565553][T11538] __x64_sys_sendmsg+0x1bd/0x2a0 [ 269.565573][T11538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.565600][T11538] ? __pfx_ksys_write+0x10/0x10 [ 269.565630][T11538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.565647][T11538] do_syscall_64+0x174/0x580 [ 269.565664][T11538] ? trace_irq_disable+0x3b/0x140 [ 269.565686][T11538] ? clear_bhb_loop+0x40/0x90 [ 269.565706][T11538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.565722][T11538] RIP: 0033:0x7faed799ce59 [ 269.565737][T11538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.565752][T11538] RSP: 002b:00007faed8868028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.565770][T11538] RAX: ffffffffffffffda RBX: 00007faed7c15fa0 RCX: 00007faed799ce59 [ 269.565782][T11538] RDX: 0000000000000800 RSI: 0000200000000380 RDI: 0000000000000004 [ 269.565793][T11538] RBP: 00007faed8868090 R08: 0000000000000000 R09: 0000000000000000 [ 269.565802][T11538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.565812][T11538] R13: 00007faed7c16038 R14: 00007faed7c15fa0 R15: 00007fff7e97b418 [ 269.565839][T11538] [ 270.237929][T11561] __nla_validate_parse: 2 callbacks suppressed [ 270.237947][T11561] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1761'. [ 270.386559][T11572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.720154][T11575] ipvlan1: entered promiscuous mode [ 270.725474][T11575] ipvlan1: entered allmulticast mode [ 270.730825][T11575] veth0_vlan: entered allmulticast mode [ 271.099133][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1773'. [ 271.347084][T11616] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1777'. [ 271.550462][T11614] tap0: tun_chr_ioctl cmd 1074025677 [ 271.572782][T11614] tap0: linktype set to 2 [ 271.804676][T11634] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 272.002167][T11638] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 272.211359][T11656] TCP: TCP_TX_DELAY enabled [ 272.267588][T11656] x_tables: duplicate underflow at hook 1 [ 272.403708][T11662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1787'. [ 272.581730][T11670] xt_TPROXY: Can be used only with -p tcp or -p udp [ 272.700558][T11677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1789'. [ 272.970917][T11685] FAULT_INJECTION: forcing a failure. [ 272.970917][T11685] name failslab, interval 1, probability 0, space 0, times 0 [ 273.001865][T11685] CPU: 1 UID: 0 PID: 11685 Comm: syz.0.1791 Not tainted syzkaller #0 PREEMPT(full) [ 273.001889][T11685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.001899][T11685] Call Trace: [ 273.001906][T11685] [ 273.001913][T11685] dump_stack_lvl+0xe8/0x150 [ 273.001938][T11685] should_fail_ex+0x412/0x560 [ 273.001962][T11685] should_failslab+0xa8/0x100 [ 273.001981][T11685] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 273.002004][T11685] ? init_rescuer+0x167/0x530 [ 273.002032][T11685] init_rescuer+0x167/0x530 [ 273.002054][T11685] ? __pfx___mutex_lock+0x10/0x10 [ 273.002073][T11685] ? __pfx_init_rescuer+0x10/0x10 [ 273.002102][T11685] ? wq_adjust_max_active+0x195/0x4b0 [ 273.002120][T11685] ? apply_wqattrs_commit+0x3a7/0x4e0 [ 273.002139][T11685] __alloc_workqueue+0x1b3b/0x1f50 [ 273.002172][T11685] alloc_workqueue_noprof+0xe3/0x210 [ 273.002197][T11685] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 273.002222][T11685] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 273.002248][T11685] nci_register_device+0x3ff/0xa00 [ 273.002273][T11685] ? __pfx_nci_register_device+0x10/0x10 [ 273.002292][T11685] ? __raw_spin_lock_init+0x45/0x100 [ 273.002314][T11685] ? __init_waitqueue_head+0xa9/0x150 [ 273.002338][T11685] virtual_ncidev_open+0x129/0x1a0 [ 273.002356][T11685] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 273.002369][T11685] misc_open+0x2d5/0x350 [ 273.002388][T11685] chrdev_open+0x4cd/0x5e0 [ 273.002406][T11685] ? __pfx_chrdev_open+0x10/0x10 [ 273.002423][T11685] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 273.002447][T11685] ? __pfx_chrdev_open+0x10/0x10 [ 273.002463][T11685] do_dentry_open+0x822/0x13a0 [ 273.002491][T11685] vfs_open+0x3b/0x340 [ 273.002505][T11685] ? path_openat+0x2df0/0x3860 [ 273.002525][T11685] path_openat+0x2e08/0x3860 [ 273.002560][T11685] ? __pfx_stack_trace_save+0x10/0x10 [ 273.002584][T11685] ? stack_depot_save_flags+0x33/0x810 [ 273.002610][T11685] ? __pfx_path_openat+0x10/0x10 [ 273.002629][T11685] ? __x64_sys_openat+0x138/0x170 [ 273.002650][T11685] ? __lock_acquire+0x6b5/0x2cf0 [ 273.002676][T11685] do_file_open+0x23e/0x4a0 [ 273.002702][T11685] ? __pfx_do_file_open+0x10/0x10 [ 273.002743][T11685] ? _raw_spin_unlock+0x28/0x50 [ 273.002762][T11685] ? alloc_fd+0x64b/0x6c0 [ 273.002798][T11685] do_sys_openat2+0x113/0x200 [ 273.002817][T11685] ? __pfx_do_sys_openat2+0x10/0x10 [ 273.002836][T11685] ? ksys_write+0x242/0x270 [ 273.002859][T11685] ? __pfx_ksys_write+0x10/0x10 [ 273.002883][T11685] __x64_sys_openat+0x138/0x170 [ 273.002903][T11685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.002919][T11685] do_syscall_64+0x174/0x580 [ 273.002937][T11685] ? trace_irq_disable+0x3b/0x140 [ 273.002958][T11685] ? clear_bhb_loop+0x40/0x90 [ 273.002979][T11685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.002994][T11685] RIP: 0033:0x7faed799ce59 [ 273.003010][T11685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.003023][T11685] RSP: 002b:00007faed8868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 273.003041][T11685] RAX: ffffffffffffffda RBX: 00007faed7c15fa0 RCX: 00007faed799ce59 [ 273.003052][T11685] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 273.003061][T11685] RBP: 00007faed8868090 R08: 0000000000000000 R09: 0000000000000000 [ 273.003070][T11685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.003080][T11685] R13: 00007faed7c16038 R14: 00007faed7c15fa0 R15: 00007fff7e97b418 [ 273.003109][T11685] [ 273.003117][T11685] workqueue: Failed to allocate a rescuer for wq "nfc3_nci_rx_wq" [ 273.670529][T11698] nftables ruleset with unbound set [ 273.738801][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1792'. [ 273.816350][T11703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1795'. [ 274.069551][T11704] xt_CT: No such helper "snmp_trap" [ 274.229133][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1799'. [ 274.977842][T11732] openvswitch: netlink: EtherType 80 is less than min 600 [ 275.313477][T11742] netlink: 'syz.4.1806': attribute type 1 has an invalid length. [ 275.347307][T11742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1806'. [ 275.721236][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 275.910914][T11768] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1812'. [ 275.946256][T11768] netlink: 'syz.3.1812': attribute type 1 has an invalid length. [ 276.481678][T11790] lo speed is unknown, defaulting to 1000 [ 276.487913][T11790] lo speed is unknown, defaulting to 1000 [ 276.494448][T11790] lo speed is unknown, defaulting to 1000 [ 276.502993][T11790] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 276.510112][T11774] tipc: Failed to remove unknown binding: 66,0,0/0:4047973707/4047973709 [ 276.540937][T11792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1820'. [ 276.592918][T11774] tipc: Failed to remove unknown binding: 66,0,0/0:4047973707/4047973708 [ 276.732328][T11790] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 276.783576][T11774] tipc: Failed to remove unknown binding: 66,0,0/0:4047973707/4047973709 [ 276.793845][T11774] tipc: Failed to remove unknown binding: 66,0,0/0:4047973707/4047973708 [ 276.804517][T11790] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 276.834325][T11790] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 277.036065][T11790] lo speed is unknown, defaulting to 1000 [ 277.062060][T11790] lo speed is unknown, defaulting to 1000 [ 277.069632][T11790] lo speed is unknown, defaulting to 1000 [ 277.077191][T11790] lo speed is unknown, defaulting to 1000 [ 277.136355][T11790] lo speed is unknown, defaulting to 1000 [ 277.223896][T11807] lo speed is unknown, defaulting to 1000 [ 277.357270][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'. [ 277.366193][T11825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1828'. [ 277.382543][T11825] geneve4: entered promiscuous mode [ 277.387801][T11825] geneve4: entered allmulticast mode [ 277.719501][T11841] tipc: Started in network mode [ 277.730773][T11841] tipc: Node identity b6ce7c04612d, cluster identity 4711 [ 277.745393][T11841] tipc: Enabled bearer , priority 0 [ 277.820769][T11845] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1839'. [ 277.986213][T11852] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1841'. [ 278.178989][T11860] FAULT_INJECTION: forcing a failure. [ 278.178989][T11860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.217664][T11860] CPU: 1 UID: 0 PID: 11860 Comm: syz.4.1846 Not tainted syzkaller #0 PREEMPT(full) [ 278.217690][T11860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.217700][T11860] Call Trace: [ 278.217707][T11860] [ 278.217714][T11860] dump_stack_lvl+0xe8/0x150 [ 278.217752][T11860] should_fail_ex+0x412/0x560 [ 278.217774][T11860] _copy_from_user+0x2d/0xb0 [ 278.217795][T11860] ___sys_sendmsg+0x1c6/0x360 [ 278.217812][T11860] ? __lock_acquire+0x6b5/0x2cf0 [ 278.217834][T11860] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.217881][T11860] ? __fget_files+0x2a/0x420 [ 278.217900][T11860] ? __fget_files+0x3a0/0x420 [ 278.217926][T11860] __x64_sys_sendmsg+0x1bd/0x2a0 [ 278.217947][T11860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.217971][T11860] ? __pfx_ksys_write+0x10/0x10 [ 278.218001][T11860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.218018][T11860] do_syscall_64+0x174/0x580 [ 278.218035][T11860] ? trace_irq_disable+0x3b/0x140 [ 278.218056][T11860] ? clear_bhb_loop+0x40/0x90 [ 278.218075][T11860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.218090][T11860] RIP: 0033:0x7efe10f9ce59 [ 278.218106][T11860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.218119][T11860] RSP: 002b:00007efe0f1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.218136][T11860] RAX: ffffffffffffffda RBX: 00007efe11215fa0 RCX: 00007efe10f9ce59 [ 278.218147][T11860] RDX: 0000000020040080 RSI: 0000200000000080 RDI: 0000000000000003 [ 278.218157][T11860] RBP: 00007efe0f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 278.218165][T11860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.218174][T11860] R13: 00007efe11216038 R14: 00007efe11215fa0 R15: 00007ffdfcc42d58 [ 278.218200][T11860] [ 278.532598][T11807] lo speed is unknown, defaulting to 1000 [ 278.560529][T11856] rdma_rxe: rxe_newlink: failed to add lo [ 278.750777][ T10] tipc: Node number set to 3622009860 [ 278.815637][T11881] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1853'. [ 278.922358][T11890] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1858'. [ 279.025614][T11892] xfrm0: Caught tx_queue_len zero misconfig [ 279.087661][ T51] block nbd2: Receive control failed (result -32) [ 279.287526][T11901] syz0: rxe_newlink: already configured on lo [ 279.343253][T11907] openvswitch: netlink: IP tunnel dst address not specified [ 279.360210][T11903] 8021q: adding VLAN 0 to HW filter on device bond12 [ 279.400760][T11907] openvswitch: netlink: IP tunnel dst address not specified [ 279.428870][T11905] 8021q: adding VLAN 0 to HW filter on device bond12 [ 279.497139][T11905] bond12: (slave vti0): The slave device specified does not support setting the MAC address [ 279.515578][T11905] bond12: (slave vti0): Error -95 calling set_mac_address [ 279.596367][T11903] bond12: (slave dummy0): Error -99 calling set_mac_address [ 279.635870][T11921] openvswitch: netlink: IPv4 tun info is not correct [ 279.879809][T11929] netlink: 'syz.2.1872': attribute type 1 has an invalid length. [ 279.970283][T11929] 8021q: adding VLAN 0 to HW filter on device bond13 [ 280.045541][T11937] tap0: tun_chr_ioctl cmd 1074025677 [ 280.050107][T11935] syz0: rxe_newlink: already configured on lo [ 280.054250][T11937] tap0: linktype set to 2 [ 280.577335][ T3322] tipc: Subscription rejected, illegal request [ 280.700952][T11956] __nla_validate_parse: 1 callbacks suppressed [ 280.700972][T11956] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1882'. [ 280.722693][T11958] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1882'. [ 280.849227][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1884'. [ 280.969121][T11972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1886'. [ 281.129669][T11978] syzkaller0: entered promiscuous mode [ 281.135198][T11978] syzkaller0: entered allmulticast mode [ 281.262365][T11982] netlink: 'syz.3.1890': attribute type 83 has an invalid length. [ 281.379771][T11987] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1892'. [ 281.572499][T11999] FAULT_INJECTION: forcing a failure. [ 281.572499][T11999] name failslab, interval 1, probability 0, space 0, times 0 [ 281.586568][T11999] CPU: 1 UID: 0 PID: 11999 Comm: syz.4.1895 Not tainted syzkaller #0 PREEMPT(full) [ 281.586590][T11999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 281.586600][T11999] Call Trace: [ 281.586606][T11999] [ 281.586613][T11999] dump_stack_lvl+0xe8/0x150 [ 281.586637][T11999] should_fail_ex+0x412/0x560 [ 281.586661][T11999] should_failslab+0xa8/0x100 [ 281.586678][T11999] ? skb_clone+0x212/0x3a0 [ 281.586696][T11999] kmem_cache_alloc_noprof+0x87/0x650 [ 281.586718][T11999] ? __bpf_redirect+0x9b4/0x12a0 [ 281.586743][T11999] skb_clone+0x212/0x3a0 [ 281.586764][T11999] bpf_clone_redirect+0x16a/0x4b0 [ 281.586793][T11999] ? bpf_test_run+0x1d1/0x830 [ 281.586810][T11999] bpf_prog_2f59963de350c2d2+0x5e/0x67 [ 281.586830][T11999] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 281.586853][T11999] ? arch_stack_walk+0xfb/0x150 [ 281.586880][T11999] ? ktime_get+0x45/0x220 [ 281.586908][T11999] ? ktime_get+0x45/0x220 [ 281.586931][T11999] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 281.586953][T11999] ? lockdep_hardirqs_on+0x7a/0x110 [ 281.586970][T11999] ? ktime_get+0x45/0x220 [ 281.586987][T11999] ? seqcount_lockdep_reader_access+0xea/0x100 [ 281.587007][T11999] ? bpf_test_run+0x1d1/0x830 [ 281.587027][T11999] ? bpf_test_timer_continue+0x10c/0x320 [ 281.587048][T11999] bpf_test_run+0x354/0x830 [ 281.587086][T11999] ? __pfx_bpf_test_run+0x10/0x10 [ 281.587120][T11999] ? eth_type_trans+0x348/0x7e0 [ 281.587144][T11999] ? skb_dst_set+0x72/0x140 [ 281.587162][T11999] bpf_prog_test_run_skb+0xe2c/0x2260 [ 281.587201][T11999] ? __fget_files+0x3a0/0x420 [ 281.587219][T11999] ? __fget_files+0x2a/0x420 [ 281.587237][T11999] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 281.587255][T11999] bpf_prog_test_run+0x2c7/0x340 [ 281.587276][T11999] __sys_bpf+0x643/0x950 [ 281.587299][T11999] ? __pfx___sys_bpf+0x10/0x10 [ 281.587334][T11999] ? ksys_write+0x242/0x270 [ 281.587358][T11999] ? __pfx_ksys_write+0x10/0x10 [ 281.587383][T11999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.587401][T11999] __x64_sys_bpf+0x7c/0x90 [ 281.587421][T11999] do_syscall_64+0x174/0x580 [ 281.587447][T11999] ? clear_bhb_loop+0x40/0x90 [ 281.587467][T11999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.587483][T11999] RIP: 0033:0x7efe10f9ce59 [ 281.587498][T11999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.587511][T11999] RSP: 002b:00007efe0f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.587528][T11999] RAX: ffffffffffffffda RBX: 00007efe11215fa0 RCX: 00007efe10f9ce59 [ 281.587539][T11999] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 281.587549][T11999] RBP: 00007efe0f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 281.587557][T11999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.587566][T11999] R13: 00007efe11216038 R14: 00007efe11215fa0 R15: 00007ffdfcc42d58 [ 281.587593][T11999] [ 282.003140][T12009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1899'. [ 282.055705][T12009] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 282.091478][T12009] bond11 (unregistering): Released all slaves [ 282.142368][T12013] netlink: 'syz.4.1900': attribute type 10 has an invalid length. [ 282.151170][T12013] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1900'. [ 282.391853][T12027] vlan2: entered allmulticast mode [ 282.401654][T12027] bond0: entered allmulticast mode [ 282.413674][T12027] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1906'. [ 282.564082][T12027] bond0 (unregistering): Released all slaves [ 282.664303][T12033] ipt_ECN: cannot use operation on non-tcp rule [ 282.983222][T12045] xt_hashlimit: size too large, truncated to 1048576 [ 283.091784][T12054] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1915'. [ 283.118773][T12054] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1915'. [ 283.188632][T12040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.201606][T12040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.309119][ T5639] Bluetooth: hci4: command 0x0405 tx timeout [ 283.503406][T12070] netlink: 'syz.1.1921': attribute type 21 has an invalid length. [ 283.597074][T12040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.609724][T12040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.661088][T12077] netlink: 'syz.2.1923': attribute type 10 has an invalid length. [ 283.778295][T12040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.788609][T12040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.964101][T12090] ipt_REJECT: ECHOREPLY no longer supported. [ 284.029880][T12040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.050409][T12040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.190292][T12099] netlink: 'syz.3.1932': attribute type 1 has an invalid length. [ 284.259260][T12099] bond11: (slave bridge7): Enslaving as a backup interface with an up link [ 284.326127][T12099] bond11: (slave bridge8): Enslaving as a backup interface with a down link [ 284.377810][T12103] wg1: entered allmulticast mode [ 284.384611][T12103] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 284.449918][T12109] bond0: entered promiscuous mode [ 284.455062][T12109] bond0: entered allmulticast mode [ 284.506885][T12109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.629966][T12116] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 284.767513][T12124] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 284.960264][ T143] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.983488][ T143] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.081218][ T143] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.102113][ T143] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.201729][ T6288] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.216666][ T6288] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.250236][ T6288] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.260035][ T6288] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.417599][T12041] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.427402][T12041] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.594901][T12161] dummy0: left promiscuous mode [ 285.610847][T12161] netlink: 'syz.3.1946': attribute type 10 has an invalid length. [ 285.634975][T12161] dummy0: entered promiscuous mode [ 285.769885][T12172] netlink: 'syz.4.1950': attribute type 1 has an invalid length. [ 285.980604][T12172] 8021q: adding VLAN 0 to HW filter on device bond8 [ 286.020449][T12182] bond8: (slave veth0_to_bond): making interface the new active one [ 286.029902][T12182] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 286.053925][T12186] macvlan2: entered promiscuous mode [ 286.059853][T12186] macvlan2: entered allmulticast mode [ 286.066211][T12186] bond8: entered promiscuous mode [ 286.072119][T12186] veth0_to_bond: entered promiscuous mode [ 286.081389][T12186] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 286.089242][T12186] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 286.124855][T12186] bond8: left promiscuous mode [ 286.131144][T12186] veth0_to_bond: left promiscuous mode [ 286.148206][T12041] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.158129][T12041] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.301904][T12192] __nla_validate_parse: 12 callbacks suppressed [ 286.301924][T12192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1955'. [ 286.319913][T12192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1955'. [ 286.342964][T12192] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1955'. [ 286.355285][T12192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1955'. [ 286.365065][T12192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1955'. [ 286.374407][T12192] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1955'. [ 286.431213][T12191] x_tables: ip_tables: ah match: only valid for protocol 51 [ 286.592540][T12041] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.602342][T12041] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.629216][T12207] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1957'. [ 286.977482][T12041] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.009837][T12041] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.061107][T12222] FAULT_INJECTION: forcing a failure. [ 287.061107][T12222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.075561][T12222] CPU: 0 UID: 0 PID: 12222 Comm: syz.1.1963 Not tainted syzkaller #0 PREEMPT(full) [ 287.075589][T12222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.075600][T12222] Call Trace: [ 287.075607][T12222] [ 287.075615][T12222] dump_stack_lvl+0xe8/0x150 [ 287.075641][T12222] should_fail_ex+0x412/0x560 [ 287.075665][T12222] _copy_from_iter+0x1d3/0x1670 [ 287.075688][T12222] ? sock_alloc_send_pskb+0x896/0x990 [ 287.075714][T12222] ? __pfx__copy_from_iter+0x10/0x10 [ 287.075740][T12222] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 287.075775][T12222] skb_copy_datagram_from_iter+0xf5/0x710 [ 287.075798][T12222] ? get_pid+0x52/0x80 [ 287.075821][T12222] ? skb_put+0x11b/0x210 [ 287.075841][T12222] unix_stream_sendmsg+0x5f3/0xe80 [ 287.075875][T12222] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 287.075899][T12222] ? aa_sock_msg_perm+0xda/0x1b0 [ 287.075925][T12222] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.075951][T12222] ____sys_sendmsg+0x972/0x9f0 [ 287.075969][T12222] ? __might_fault+0xaf/0x130 [ 287.075995][T12222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.076019][T12222] ? import_iovec+0x73/0xa0 [ 287.076041][T12222] ___sys_sendmsg+0x2a5/0x360 [ 287.076058][T12222] ? __lock_acquire+0x6b5/0x2cf0 [ 287.076083][T12222] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.076133][T12222] ? __fget_files+0x2a/0x420 [ 287.076151][T12222] ? __fget_files+0x3a0/0x420 [ 287.076178][T12222] __x64_sys_sendmsg+0x1bd/0x2a0 [ 287.076198][T12222] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.076225][T12222] ? __pfx_ksys_write+0x10/0x10 [ 287.076255][T12222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.076272][T12222] do_syscall_64+0x174/0x580 [ 287.076289][T12222] ? trace_irq_disable+0x3b/0x140 [ 287.076311][T12222] ? clear_bhb_loop+0x40/0x90 [ 287.076330][T12222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.076346][T12222] RIP: 0033:0x7fb47ed9ce59 [ 287.076363][T12222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.076376][T12222] RSP: 002b:00007fb47fc1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.076394][T12222] RAX: ffffffffffffffda RBX: 00007fb47f015fa0 RCX: 00007fb47ed9ce59 [ 287.076406][T12222] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 287.076417][T12222] RBP: 00007fb47fc1d090 R08: 0000000000000000 R09: 0000000000000000 [ 287.076427][T12222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 287.076436][T12222] R13: 00007fb47f016038 R14: 00007fb47f015fa0 R15: 00007ffda059ceb8 [ 287.076463][T12222] [ 287.561824][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1965'. [ 287.657429][T12227] lo speed is unknown, defaulting to 1000 [ 287.956185][T12247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1970'. [ 288.032097][T12227] lo speed is unknown, defaulting to 1000 [ 288.099772][T12252] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1971'. [ 288.363139][T12263] sock: sock_timestamping_bind_phc: sock not bind to device [ 288.704098][T12272] FAULT_INJECTION: forcing a failure. [ 288.704098][T12272] name failslab, interval 1, probability 0, space 0, times 0 [ 288.734631][T12272] CPU: 0 UID: 0 PID: 12272 Comm: syz.2.1978 Not tainted syzkaller #0 PREEMPT(full) [ 288.734657][T12272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 288.734666][T12272] Call Trace: [ 288.734672][T12272] [ 288.734680][T12272] dump_stack_lvl+0xe8/0x150 [ 288.734708][T12272] should_fail_ex+0x412/0x560 [ 288.734731][T12272] should_failslab+0xa8/0x100 [ 288.734750][T12272] __kmalloc_cache_noprof+0x88/0x660 [ 288.734771][T12272] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 288.734794][T12272] ? sctp_add_bind_addr+0x8c/0x370 [ 288.734820][T12272] sctp_add_bind_addr+0x8c/0x370 [ 288.734847][T12272] sctp_copy_local_addr_list+0x314/0x4f0 [ 288.734874][T12272] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 288.734896][T12272] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 288.734922][T12272] ? sctp_v4_is_any+0x35/0x60 [ 288.734936][T12272] ? sctp_copy_one_addr+0x93/0x360 [ 288.734961][T12272] sctp_bind_addr_copy+0xb3/0x3c0 [ 288.734984][T12272] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 288.735007][T12272] sctp_connect_new_asoc+0x2ff/0x6b0 [ 288.735029][T12272] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 288.735048][T12272] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 288.735066][T12272] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 288.735082][T12272] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 288.735101][T12272] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 288.735122][T12272] ? security_sctp_bind_connect+0x7e/0x2c0 [ 288.735145][T12272] sctp_sendmsg+0x1576/0x2c50 [ 288.735184][T12272] ? __pfx_sctp_sendmsg+0x10/0x10 [ 288.735205][T12272] ? aa_sk_perm+0x6d5/0x900 [ 288.735234][T12272] ? __pfx_aa_sk_perm+0x10/0x10 [ 288.735257][T12272] ? sock_rps_record_flow+0x19/0x350 [ 288.735282][T12272] ? inet_sendmsg+0x2f4/0x370 [ 288.735302][T12272] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.735325][T12272] ____sys_sendmsg+0x80a/0x9f0 [ 288.735352][T12272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.735379][T12272] ? import_iovec+0x73/0xa0 [ 288.735402][T12272] ___sys_sendmsg+0x2a5/0x360 [ 288.735419][T12272] ? __lock_acquire+0x6b5/0x2cf0 [ 288.735441][T12272] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.735464][T12272] ? kstrtouint+0x6e/0xe0 [ 288.735513][T12272] ? __fget_files+0x2a/0x420 [ 288.735532][T12272] ? __fget_files+0x3a0/0x420 [ 288.735561][T12272] __sys_sendmmsg+0x27c/0x4e0 [ 288.735586][T12272] ? __pfx___sys_sendmmsg+0x10/0x10 [ 288.735602][T12272] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 288.735646][T12272] ? ksys_write+0x242/0x270 [ 288.735670][T12272] ? __pfx_ksys_write+0x10/0x10 [ 288.735699][T12272] __x64_sys_sendmmsg+0xa0/0xc0 [ 288.735716][T12272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.735734][T12272] do_syscall_64+0x174/0x580 [ 288.735750][T12272] ? trace_irq_disable+0x3b/0x140 [ 288.735777][T12272] ? clear_bhb_loop+0x40/0x90 [ 288.735798][T12272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.735813][T12272] RIP: 0033:0x7fec4319ce59 [ 288.735829][T12272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.735843][T12272] RSP: 002b:00007fec43ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 288.735861][T12272] RAX: ffffffffffffffda RBX: 00007fec43415fa0 RCX: 00007fec4319ce59 [ 288.735873][T12272] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 288.735883][T12272] RBP: 00007fec43ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 288.735893][T12272] R10: 0000000020000014 R11: 0000000000000246 R12: 0000000000000002 [ 288.735903][T12272] R13: 00007fec43416038 R14: 00007fec43415fa0 R15: 00007ffcd2b47608 [ 288.735931][T12272] [ 289.577154][T12299] lo speed is unknown, defaulting to 1000 [ 289.828261][T12299] lo speed is unknown, defaulting to 1000 [ 289.884411][T12321] can: request_module (can-proto-0) failed. [ 290.298678][T12346] FAULT_INJECTION: forcing a failure. [ 290.298678][T12346] name failslab, interval 1, probability 0, space 0, times 0 [ 290.312905][T12346] CPU: 0 UID: 0 PID: 12346 Comm: syz.1.2002 Not tainted syzkaller #0 PREEMPT(full) [ 290.312925][T12346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 290.312931][T12346] Call Trace: [ 290.312937][T12346] [ 290.312943][T12346] dump_stack_lvl+0xe8/0x150 [ 290.312961][T12346] should_fail_ex+0x412/0x560 [ 290.312976][T12346] should_failslab+0xa8/0x100 [ 290.312990][T12346] ? dst_alloc+0x105/0x170 [ 290.313003][T12346] kmem_cache_alloc_noprof+0x87/0x650 [ 290.313016][T12346] ? __lock_acquire+0x6b5/0x2cf0 [ 290.313031][T12346] dst_alloc+0x105/0x170 [ 290.313045][T12346] ip_route_input_rcu+0x1432/0x3130 [ 290.313067][T12346] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 290.313082][T12346] ? __skb_flow_dissect+0x668e/0x6e80 [ 290.313101][T12346] ? unwind_next_frame+0xa6/0x2550 [ 290.313119][T12346] ? ip_route_input_noref+0xad/0x270 [ 290.313132][T12346] ? lock_acquire+0x106/0x350 [ 290.313141][T12346] ? ip_route_input_noref+0xad/0x270 [ 290.313155][T12346] ? ipt_do_table+0x13d2/0x1630 [ 290.313168][T12346] ? ip_route_input_noref+0xad/0x270 [ 290.313183][T12346] ip_route_input_noref+0x17c/0x270 [ 290.313198][T12346] ? __pfx_ip_route_input_noref+0x10/0x10 [ 290.313214][T12346] ? ipt_do_table+0x2b2/0x1630 [ 290.313224][T12346] ? __pfx_ipt_do_table+0x10/0x10 [ 290.313236][T12346] ip_rcv_finish_core+0x5af/0x1c00 [ 290.313253][T12346] ip_rcv_finish+0x14c/0x2a0 [ 290.313266][T12346] NF_HOOK+0x336/0x3c0 [ 290.313276][T12346] ? sock_wfree+0x26e/0x750 [ 290.313287][T12346] ? __pfx_ip_rcv_finish+0x10/0x10 [ 290.313298][T12346] ? NF_HOOK+0x9e/0x3c0 [ 290.313308][T12346] ? __pfx_NF_HOOK+0x10/0x10 [ 290.313320][T12346] ? __pfx_ip_rcv_finish+0x10/0x10 [ 290.313333][T12346] ? netif_receive_skb+0x102/0xbf0 [ 290.313347][T12346] ? __pfx_ip_rcv+0x10/0x10 [ 290.313357][T12346] netif_receive_skb+0x45b/0xbf0 [ 290.313373][T12346] ? __pfx_netif_receive_skb+0x10/0x10 [ 290.313392][T12346] ? tun_rx_batched+0x185/0x790 [ 290.313405][T12346] tun_rx_batched+0x1de/0x790 [ 290.313414][T12346] ? __build_skb+0x62/0x440 [ 290.313426][T12346] ? __pfx_tun_rx_batched+0x10/0x10 [ 290.313435][T12346] ? tun_get_user+0x2787/0x43e0 [ 290.313445][T12346] ? tun_get_user+0x2787/0x43e0 [ 290.313454][T12346] ? tun_get_user+0x2394/0x43e0 [ 290.313464][T12346] ? tun_get_user+0x2394/0x43e0 [ 290.313473][T12346] ? __local_bh_enable_ip+0xd0/0x130 [ 290.313485][T12346] tun_get_user+0x2bbc/0x43e0 [ 290.313496][T12346] ? tun_get_user+0x2787/0x43e0 [ 290.313513][T12346] ? aa_file_perm+0x50e/0x15e0 [ 290.313522][T12346] ? __pfx_tun_get_user+0x10/0x10 [ 290.313537][T12346] ? __lock_acquire+0x6b5/0x2cf0 [ 290.313554][T12346] ? ref_tracker_alloc+0x35c/0x4c0 [ 290.313567][T12346] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 290.313578][T12346] ? tun_get+0x1c/0x2f0 [ 290.313587][T12346] ? tun_get+0x1c/0x2f0 [ 290.313599][T12346] ? tun_get+0x1c/0x2f0 [ 290.313607][T12346] ? tun_get+0x1c/0x2f0 [ 290.313619][T12346] tun_chr_write_iter+0x113/0x200 [ 290.313630][T12346] vfs_write+0x61d/0xb90 [ 290.313649][T12346] ? __pfx_vfs_write+0x10/0x10 [ 290.313668][T12346] ? __fget_files+0x2a/0x420 [ 290.313684][T12346] ksys_write+0x150/0x270 [ 290.313699][T12346] ? __pfx_ksys_write+0x10/0x10 [ 290.313716][T12346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.313727][T12346] do_syscall_64+0x174/0x580 [ 290.313738][T12346] ? trace_irq_disable+0x3b/0x140 [ 290.313753][T12346] ? clear_bhb_loop+0x40/0x90 [ 290.313768][T12346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.313777][T12346] RIP: 0033:0x7fb47ed5d68e [ 290.313789][T12346] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 290.313797][T12346] RSP: 002b:00007fb47fc1cfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 290.313809][T12346] RAX: ffffffffffffffda RBX: 00007fb47fc1d6c0 RCX: 00007fb47ed5d68e [ 290.313816][T12346] RDX: 000000000000006a RSI: 00002000000001c0 RDI: 00000000000000c8 [ 290.313822][T12346] RBP: 00007fb47fc1d090 R08: 0000000000000000 R09: 0000000000000000 [ 290.313828][T12346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.313833][T12346] R13: 00007fb47f016038 R14: 00007fb47f015fa0 R15: 00007ffda059ceb8 [ 290.313848][T12346] [ 290.921150][T12355] netlink: 'syz.1.2006': attribute type 1 has an invalid length. [ 290.956222][T12355] 8021q: adding VLAN 0 to HW filter on device bond17 [ 290.975609][T12359] syzkaller0: entered promiscuous mode [ 290.981126][T12359] syzkaller0: entered allmulticast mode [ 291.036510][T12362] geneve1: entered promiscuous mode [ 291.478859][ T30] audit: type=1804 audit(1780324932.608:8): pid=12372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2013" name="/newroot/408/cgroup.controllers" dev="tmpfs" ino=2118 res=1 errno=0 [ 291.507527][T12371] __nla_validate_parse: 15 callbacks suppressed [ 291.507548][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2012'. [ 291.561625][ T30] audit: type=1800 audit(1780324932.608:9): pid=12372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2013" name="cgroup.controllers" dev="tmpfs" ino=2118 res=0 errno=0 [ 291.893490][T12384] netlink: 'syz.3.2018': attribute type 1 has an invalid length. [ 291.977149][T12384] 8021q: adding VLAN 0 to HW filter on device bond12 [ 292.049243][T12393] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2019'. [ 292.142780][T12398] netlink: 'syz.3.2023': attribute type 7 has an invalid length. [ 292.258360][T12398] : entered promiscuous mode [ 292.586131][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2026'. [ 292.667813][T12409] netlink: 'syz.2.2026': attribute type 10 has an invalid length. [ 292.681868][T12409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2026'. [ 293.319376][T12420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2030'. [ 293.520209][T12425] policy can only be matched on NF_INET_PRE_ROUTING [ 293.520263][T12425] unable to load match [ 293.554958][T12429] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 293.576095][T12429] 8021q: adding VLAN 0 to HW filter on device bond13 [ 293.632493][T12432] FAULT_INJECTION: forcing a failure. [ 293.632493][T12432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.674861][T12432] CPU: 1 UID: 0 PID: 12432 Comm: syz.3.2034 Not tainted syzkaller #0 PREEMPT(full) [ 293.674887][T12432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.674896][T12432] Call Trace: [ 293.674903][T12432] [ 293.674910][T12432] dump_stack_lvl+0xe8/0x150 [ 293.674933][T12432] should_fail_ex+0x412/0x560 [ 293.674954][T12432] _copy_to_user+0x31/0xb0 [ 293.674975][T12432] simple_read_from_buffer+0xe1/0x170 [ 293.675001][T12432] proc_fail_nth_read+0x1bb/0x230 [ 293.675024][T12432] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.675048][T12432] ? rw_verify_area+0x2a6/0x4d0 [ 293.675069][T12432] ? __fget_files+0x2a/0x420 [ 293.675086][T12432] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.675108][T12432] vfs_read+0x20c/0xa70 [ 293.675145][T12432] ? __pfx___mutex_lock+0x10/0x10 [ 293.675166][T12432] ? __pfx_vfs_read+0x10/0x10 [ 293.675188][T12432] ? __fget_files+0x2a/0x420 [ 293.675211][T12432] ? __fget_files+0x3a0/0x420 [ 293.675228][T12432] ? __fget_files+0x2a/0x420 [ 293.675254][T12432] ksys_read+0x150/0x270 [ 293.675278][T12432] ? __pfx_ksys_read+0x10/0x10 [ 293.675308][T12432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.675325][T12432] do_syscall_64+0x174/0x580 [ 293.675340][T12432] ? trace_irq_disable+0x3b/0x140 [ 293.675363][T12432] ? clear_bhb_loop+0x40/0x90 [ 293.675383][T12432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.675397][T12432] RIP: 0033:0x7ff92d35d68e [ 293.675414][T12432] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 293.675425][T12432] RSP: 002b:00007ff92b5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 293.675443][T12432] RAX: ffffffffffffffda RBX: 00007ff92b5f66c0 RCX: 00007ff92d35d68e [ 293.675454][T12432] RDX: 000000000000000f RSI: 00007ff92b5f60a0 RDI: 0000000000000006 [ 293.675462][T12432] RBP: 00007ff92b5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 293.675470][T12432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.675477][T12432] R13: 00007ff92d616038 R14: 00007ff92d615fa0 R15: 00007ffe443d6558 [ 293.675503][T12432] [ 293.719368][ T3368] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.963073][ T3368] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.105456][ T3368] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.113685][ T3368] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.124412][ T3368] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.132628][ T3368] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.156820][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.165042][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.170831][T12440] x_tables: duplicate underflow at hook 2 [ 294.184863][T12443] netlink: 'syz.4.2037': attribute type 10 has an invalid length. [ 294.223866][T12443] tap0: tun_chr_ioctl cmd 1074025677 [ 294.239990][T12443] tap0: linktype set to 773 [ 294.271239][T12445] netlink: 'syz.1.2038': attribute type 3 has an invalid length. [ 294.356470][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2039'. [ 294.382353][T12447] macvtap1: entered promiscuous mode [ 294.387895][T12447] bridge0: entered promiscuous mode [ 294.394326][T12447] bridge0: port 3(macvtap1) entered blocking state [ 294.401425][T12447] bridge0: port 3(macvtap1) entered disabled state [ 294.408351][T12447] macvtap1: entered allmulticast mode [ 294.413900][T12447] bridge0: entered allmulticast mode [ 294.422548][T12447] macvtap1: left allmulticast mode [ 294.430142][T12447] bridge0: left allmulticast mode [ 294.502455][ T5727] bridge0: left promiscuous mode [ 294.717865][T12458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2041'. [ 294.829276][T12463] netlink: 'syz.4.2041': attribute type 10 has an invalid length. [ 294.848736][T12463] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2041'. [ 294.918328][T12469] netlink: 'syz.0.2044': attribute type 1 has an invalid length. [ 295.040047][T12469] 8021q: adding VLAN 0 to HW filter on device bond7 [ 295.121160][ T51] block nbd3: Receive control failed (result -22) [ 295.200704][T12475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2045'. [ 295.407514][T12480] syzkaller0: left promiscuous mode [ 295.416333][T12480] syzkaller0: left allmulticast mode [ 295.596520][T12470] nbd3: detected capacity change from 0 to 32 [ 295.614014][T11399] block nbd3: Dead connection, failed to find a fallback [ 295.628047][T11399] block nbd3: shutting down sockets [ 295.635546][T11399] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.649259][T11399] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.657773][T11399] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.666865][T11399] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.674935][T11399] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.684003][T11399] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.691937][T11399] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.700998][T11399] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.709343][T11399] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.720192][T11399] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.728173][T11399] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.737234][T11399] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.745210][T11399] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.769305][T11399] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.777300][T11399] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.786362][T11399] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.794578][T11399] ldm_validate_partition_table(): Disk read failed. [ 295.801837][T11399] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.810916][T11399] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.818832][T11399] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.830684][T11399] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.838869][T11399] Dev nbd3: unable to read RDB block 0 [ 295.845072][T11399] nbd3: unable to read partition table [ 295.861567][T11399] ldm_validate_partition_table(): Disk read failed. [ 295.884642][T11399] Dev nbd3: unable to read RDB block 0 [ 295.890892][T11399] nbd3: unable to read partition table [ 296.370897][T12496] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2049'. [ 296.792382][T12511] netlink: 'syz.3.2055': attribute type 1 has an invalid length. [ 296.842656][T12511] 8021q: adding VLAN 0 to HW filter on device bond14 [ 297.338956][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2058'. [ 297.346186][T12528] FAULT_INJECTION: forcing a failure. [ 297.346186][T12528] name failslab, interval 1, probability 0, space 0, times 0 [ 297.364371][T12528] CPU: 0 UID: 0 PID: 12528 Comm: syz.0.2060 Not tainted syzkaller #0 PREEMPT(full) [ 297.364396][T12528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.364406][T12528] Call Trace: [ 297.364414][T12528] [ 297.364421][T12528] dump_stack_lvl+0xe8/0x150 [ 297.364448][T12528] should_fail_ex+0x412/0x560 [ 297.364473][T12528] should_failslab+0xa8/0x100 [ 297.364492][T12528] __kmalloc_noprof+0xe8/0x760 [ 297.364516][T12528] ? nfc_llcp_build_tlv+0xea/0x230 [ 297.364544][T12528] nfc_llcp_build_tlv+0xea/0x230 [ 297.364570][T12528] nfc_llcp_build_gb+0x14a/0x410 [ 297.364598][T12528] ? __pfx_nfc_llcp_build_gb+0x10/0x10 [ 297.364626][T12528] ? print_irq_inversion_bug+0x30/0x1e0 [ 297.364649][T12528] ? _raw_spin_unlock+0x28/0x50 [ 297.364675][T12528] nfc_llcp_general_bytes+0x3d/0x170 [ 297.364699][T12528] nfc_dep_link_up+0x16f/0x4d0 [ 297.364721][T12528] ? rcu_is_watching+0x15/0xb0 [ 297.364741][T12528] ? trace_kmalloc+0x2a/0xf0 [ 297.364765][T12528] ? __pfx_nfc_dep_link_up+0x10/0x10 [ 297.364783][T12528] ? nfc_get_device+0x85/0xd0 [ 297.364799][T12528] ? __pfx_nfc_get_device+0x10/0x10 [ 297.364819][T12528] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 297.364845][T12528] nfc_genl_dep_link_up+0x163/0x240 [ 297.364866][T12528] genl_family_rcv_msg_doit+0x22a/0x330 [ 297.364887][T12528] ? __asan_memcpy+0x40/0x70 [ 297.364911][T12528] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 297.364946][T12528] ? bpf_lsm_capable+0x9/0x20 [ 297.364961][T12528] ? security_capable+0x7e/0x2c0 [ 297.364989][T12528] genl_rcv_msg+0x61c/0x7a0 [ 297.365017][T12528] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.365037][T12528] ? __pfx_nfc_genl_dep_link_up+0x10/0x10 [ 297.365070][T12528] netlink_rcv_skb+0x232/0x4b0 [ 297.365091][T12528] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.365112][T12528] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.365151][T12528] ? down_read+0x270/0x2e0 [ 297.365167][T12528] ? genl_rcv+0xd/0x40 [ 297.365189][T12528] genl_rcv+0x28/0x40 [ 297.365208][T12528] netlink_unicast+0x75c/0x8e0 [ 297.365237][T12528] netlink_sendmsg+0x813/0xb40 [ 297.365272][T12528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.365294][T12528] ? aa_sock_msg_perm+0xf1/0x1b0 [ 297.365319][T12528] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.365344][T12528] ____sys_sendmsg+0x972/0x9f0 [ 297.365363][T12528] ? __might_fault+0xaf/0x130 [ 297.365391][T12528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.365420][T12528] ? import_iovec+0x73/0xa0 [ 297.365443][T12528] ___sys_sendmsg+0x2a5/0x360 [ 297.365459][T12528] ? __lock_acquire+0x6b5/0x2cf0 [ 297.365481][T12528] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.365537][T12528] ? __fget_files+0x2a/0x420 [ 297.365556][T12528] ? __fget_files+0x3a0/0x420 [ 297.365585][T12528] __x64_sys_sendmsg+0x1bd/0x2a0 [ 297.365606][T12528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.365635][T12528] ? __pfx_ksys_write+0x10/0x10 [ 297.365667][T12528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.365684][T12528] do_syscall_64+0x174/0x580 [ 297.365700][T12528] ? trace_irq_disable+0x3b/0x140 [ 297.365722][T12528] ? clear_bhb_loop+0x40/0x90 [ 297.365742][T12528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.365757][T12528] RIP: 0033:0x7faed799ce59 [ 297.365774][T12528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.365788][T12528] RSP: 002b:00007faed8868028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.365805][T12528] RAX: ffffffffffffffda RBX: 00007faed7c15fa0 RCX: 00007faed799ce59 [ 297.365816][T12528] RDX: 0000000000004000 RSI: 0000200000000dc0 RDI: 0000000000000004 [ 297.365826][T12528] RBP: 00007faed8868090 R08: 0000000000000000 R09: 0000000000000000 [ 297.365836][T12528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.365845][T12528] R13: 00007faed7c16038 R14: 00007faed7c15fa0 R15: 00007fff7e97b418 [ 297.365876][T12528] [ 297.430872][T12526] vlan3: entered promiscuous mode [ 298.094412][T12545] netlink: 'syz.1.2067': attribute type 1 has an invalid length. [ 298.202435][T12545] 8021q: adding VLAN 0 to HW filter on device bond18 [ 298.467254][T12553] rdma_rxe: rxe_newlink: failed to add lo [ 298.556187][T12555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'. [ 298.580622][T12555] vlan3: entered promiscuous mode [ 298.585721][T12555] team0: entered promiscuous mode [ 299.231928][T12563] xt_hashlimit: size too large, truncated to 1048576 [ 299.593193][T12579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2079'. [ 299.640745][T12579] FAULT_INJECTION: forcing a failure. [ 299.640745][T12579] name failslab, interval 1, probability 0, space 0, times 0 [ 299.653390][T12579] CPU: 1 UID: 0 PID: 12579 Comm: syz.4.2079 Not tainted syzkaller #0 PREEMPT(full) [ 299.653412][T12579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.653439][T12579] Call Trace: [ 299.653447][T12579] [ 299.653453][T12579] dump_stack_lvl+0xe8/0x150 [ 299.653484][T12579] should_fail_ex+0x412/0x560 [ 299.653507][T12579] should_failslab+0xa8/0x100 [ 299.653526][T12579] __kmalloc_cache_noprof+0x88/0x660 [ 299.653547][T12579] ? __asan_memset+0x22/0x50 [ 299.653566][T12579] ? alloc_netdev_mqs+0xbf0/0x1210 [ 299.653586][T12579] ? __xdp_rxq_info_reg+0x171/0x280 [ 299.653607][T12579] alloc_netdev_mqs+0xbf0/0x1210 [ 299.653633][T12579] rtnl_create_link+0x31f/0xd70 [ 299.653659][T12579] rtnl_newlink_create+0x277/0xb70 [ 299.653678][T12579] ? __pfx___nla_validate_parse+0x10/0x10 [ 299.653708][T12579] ? __mutex_lock+0x608/0x1550 [ 299.653728][T12579] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 299.653749][T12579] ? __pfx___mutex_lock+0x10/0x10 [ 299.653776][T12579] ? ns_capable+0x89/0xe0 [ 299.653797][T12579] rtnl_newlink+0x166a/0x1bb0 [ 299.653830][T12579] ? __pfx_rtnl_newlink+0x10/0x10 [ 299.653844][T12579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.653897][T12579] ? kasan_quarantine_put+0xbb/0x1f0 [ 299.653918][T12579] ? lockdep_hardirqs_on+0x7a/0x110 [ 299.653938][T12579] ? nlmon_xmit+0xb0/0x100 [ 299.653953][T12579] ? kmem_cache_free+0x182/0x650 [ 299.653984][T12579] ? __lock_acquire+0x6b5/0x2cf0 [ 299.654007][T12579] ? __dev_queue_xmit+0x2b6/0x3950 [ 299.654030][T12579] ? __local_bh_enable_ip+0xd0/0x130 [ 299.654046][T12579] ? lockdep_hardirqs_on+0x7a/0x110 [ 299.654062][T12579] ? __dev_queue_xmit+0x2b6/0x3950 [ 299.654079][T12579] ? __local_bh_enable_ip+0xd0/0x130 [ 299.654093][T12579] ? __dev_queue_xmit+0x2b6/0x3950 [ 299.654118][T12579] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 299.654148][T12579] ? __pfx_rtnl_newlink+0x10/0x10 [ 299.654164][T12579] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 299.654185][T12579] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 299.654201][T12579] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 299.654215][T12579] ? ref_tracker_free+0x693/0x840 [ 299.654236][T12579] ? __pfx_ref_tracker_free+0x10/0x10 [ 299.654265][T12579] netlink_rcv_skb+0x232/0x4b0 [ 299.654285][T12579] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 299.654304][T12579] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.654335][T12579] ? netlink_deliver_tap+0x2e/0x1b0 [ 299.654353][T12579] ? netlink_deliver_tap+0x2e/0x1b0 [ 299.654376][T12579] netlink_unicast+0x75c/0x8e0 [ 299.654404][T12579] netlink_sendmsg+0x813/0xb40 [ 299.654433][T12579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.654453][T12579] ? aa_sock_msg_perm+0xf1/0x1b0 [ 299.654484][T12579] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.654508][T12579] ____sys_sendmsg+0x972/0x9f0 [ 299.654527][T12579] ? __might_fault+0xaf/0x130 [ 299.654554][T12579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.654582][T12579] ? import_iovec+0x73/0xa0 [ 299.654605][T12579] ___sys_sendmsg+0x2a5/0x360 [ 299.654622][T12579] ? __lock_acquire+0x6b5/0x2cf0 [ 299.654643][T12579] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.654698][T12579] ? __fget_files+0x2a/0x420 [ 299.654716][T12579] ? __fget_files+0x3a0/0x420 [ 299.654745][T12579] __x64_sys_sendmsg+0x1bd/0x2a0 [ 299.654766][T12579] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.654794][T12579] ? __pfx_ksys_write+0x10/0x10 [ 299.654824][T12579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.654841][T12579] do_syscall_64+0x174/0x580 [ 299.654857][T12579] ? trace_irq_disable+0x3b/0x140 [ 299.654879][T12579] ? clear_bhb_loop+0x40/0x90 [ 299.654899][T12579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.654915][T12579] RIP: 0033:0x7efe10f9ce59 [ 299.654932][T12579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.654946][T12579] RSP: 002b:00007efe0f1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.654964][T12579] RAX: ffffffffffffffda RBX: 00007efe11215fa0 RCX: 00007efe10f9ce59 [ 299.654976][T12579] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000010 [ 299.654985][T12579] RBP: 00007efe0f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 299.654995][T12579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.655004][T12579] R13: 00007efe11216038 R14: 00007efe11215fa0 R15: 00007ffdfcc42d58 [ 299.655033][T12579] [ 300.256465][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 300.384683][T12594] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 300.400944][T12595] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2083'. [ 300.411139][T12594] bridge3: entered promiscuous mode [ 300.421757][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2077'. [ 300.433862][T12594] bridge3: entered allmulticast mode [ 300.464641][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 300.473548][T12600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2082'. [ 300.510483][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 300.535106][T12600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2082'. [ 300.681402][T12596] FAULT_INJECTION: forcing a failure. [ 300.681402][T12596] name failslab, interval 1, probability 0, space 0, times 0 [ 300.694056][T12596] CPU: 1 UID: 0 PID: 12596 Comm: syz.1.2084 Not tainted syzkaller #0 PREEMPT(full) [ 300.694079][T12596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 300.694087][T12596] Call Trace: [ 300.694093][T12596] [ 300.694100][T12596] dump_stack_lvl+0xe8/0x150 [ 300.694120][T12596] should_fail_ex+0x412/0x560 [ 300.694138][T12596] should_failslab+0xa8/0x100 [ 300.694152][T12596] ? skb_clone+0x212/0x3a0 [ 300.694166][T12596] kmem_cache_alloc_noprof+0x87/0x650 [ 300.694189][T12596] skb_clone+0x212/0x3a0 [ 300.694205][T12596] __netlink_deliver_tap+0x404/0x850 [ 300.694228][T12596] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.694242][T12596] netlink_deliver_tap+0x19c/0x1b0 [ 300.694256][T12596] netlink_sendskb+0x68/0x140 [ 300.694271][T12596] netlink_rcv_skb+0x2b6/0x4b0 [ 300.694285][T12596] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.694298][T12596] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.694320][T12596] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.694332][T12596] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.694349][T12596] netlink_unicast+0x75c/0x8e0 [ 300.694374][T12596] netlink_sendmsg+0x813/0xb40 [ 300.694394][T12596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.694409][T12596] ? aa_sock_msg_perm+0xf1/0x1b0 [ 300.694428][T12596] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.694447][T12596] ____sys_sendmsg+0x972/0x9f0 [ 300.694461][T12596] ? __might_fault+0xaf/0x130 [ 300.694482][T12596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.694502][T12596] ? import_iovec+0x73/0xa0 [ 300.694519][T12596] ___sys_sendmsg+0x2a5/0x360 [ 300.694532][T12596] ? __lock_acquire+0x6b5/0x2cf0 [ 300.694548][T12596] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.694586][T12596] ? __fget_files+0x2a/0x420 [ 300.694600][T12596] ? __fget_files+0x3a0/0x420 [ 300.694621][T12596] __x64_sys_sendmsg+0x1bd/0x2a0 [ 300.694636][T12596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.694656][T12596] ? __pfx_ksys_write+0x10/0x10 [ 300.694679][T12596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.694692][T12596] do_syscall_64+0x174/0x580 [ 300.694705][T12596] ? trace_irq_disable+0x3b/0x140 [ 300.694723][T12596] ? clear_bhb_loop+0x40/0x90 [ 300.694738][T12596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.694751][T12596] RIP: 0033:0x7fb47ed9ce59 [ 300.694763][T12596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.694774][T12596] RSP: 002b:00007fb47fc1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.694788][T12596] RAX: ffffffffffffffda RBX: 00007fb47f015fa0 RCX: 00007fb47ed9ce59 [ 300.694796][T12596] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000004 [ 300.694804][T12596] RBP: 00007fb47fc1d090 R08: 0000000000000000 R09: 0000000000000000 [ 300.694812][T12596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.694819][T12596] R13: 00007fb47f016038 R14: 00007fb47f015fa0 R15: 00007ffda059ceb8 [ 300.694838][T12596] [ 301.019085][T12609] syzkaller0: entered promiscuous mode [ 301.024604][T12609] syzkaller0: entered allmulticast mode [ 301.374138][T12624] netlink: 'syz.3.2093': attribute type 1 has an invalid length. [ 301.526907][T12624] 8021q: adding VLAN 0 to HW filter on device bond15 [ 301.645277][T12631] batman_adv: batadv0: Adding interface: dummy0 [ 301.673636][T12631] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.748722][T12631] batman_adv: batadv0: Interface activated: dummy0 [ 301.796826][T12635] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 301.855402][T12650] batadv0: mtu less than device minimum [ 301.863026][T12650] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.887188][T12650] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.898961][T12650] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.910669][T12650] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.922348][T12650] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.934040][T12650] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.945702][T12650] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.957365][T12650] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 302.222467][T12665] rdma_rxe: rxe_newlink: failed to add lo [ 302.252974][T12663] syzkaller0: entered promiscuous mode [ 302.282435][T12663] syzkaller0: entered allmulticast mode [ 302.481061][T12678] netlink: 'syz.0.2110': attribute type 1 has an invalid length. [ 302.561956][T12678] 8021q: adding VLAN 0 to HW filter on device bond8 [ 302.583338][T12673] lo speed is unknown, defaulting to 1000 [ 302.825837][T12673] lo speed is unknown, defaulting to 1000 [ 303.257429][T12701] __nla_validate_parse: 4 callbacks suppressed [ 303.257448][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2117'. [ 303.323556][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2117'. [ 303.406376][T12704] rdma_rxe: rxe_newlink: failed to add lo [ 303.654869][T12736] netlink: 'syz.4.2122': attribute type 1 has an invalid length. [ 303.769028][T12742] FAULT_INJECTION: forcing a failure. [ 303.769028][T12742] name failslab, interval 1, probability 0, space 0, times 0 [ 303.781701][T12742] CPU: 1 UID: 0 PID: 12742 Comm: syz.2.2123 Not tainted syzkaller #0 PREEMPT(full) [ 303.781725][T12742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 303.781734][T12742] Call Trace: [ 303.781741][T12742] [ 303.781748][T12742] dump_stack_lvl+0xe8/0x150 [ 303.781774][T12742] should_fail_ex+0x412/0x560 [ 303.781796][T12742] should_failslab+0xa8/0x100 [ 303.781814][T12742] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 303.781837][T12742] ? __alloc_skb+0x186/0x7d0 [ 303.781852][T12742] ? __alloc_skb+0x1d0/0x7d0 [ 303.781865][T12742] ? __local_bh_enable_ip+0xd0/0x130 [ 303.781885][T12742] __alloc_skb+0x1d0/0x7d0 [ 303.781906][T12742] netlink_sendmsg+0x5d4/0xb40 [ 303.781933][T12742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.781953][T12742] ? aa_sock_msg_perm+0xf1/0x1b0 [ 303.781975][T12742] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 303.781994][T12742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.782009][T12742] sock_write_iter+0x49b/0x4f0 [ 303.782032][T12742] ? __pfx_sock_write_iter+0x10/0x10 [ 303.782069][T12742] do_iter_readv_writev+0x619/0x8c0 [ 303.782094][T12742] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 303.782127][T12742] ? bpf_lsm_file_permission+0x9/0x20 [ 303.782148][T12742] ? security_file_permission+0x75/0x260 [ 303.782169][T12742] ? rw_verify_area+0x255/0x4d0 [ 303.782193][T12742] vfs_writev+0x33c/0x990 [ 303.782218][T12742] ? __pfx_vfs_writev+0x10/0x10 [ 303.782248][T12742] ? __fget_files+0x2a/0x420 [ 303.782269][T12742] ? __fget_files+0x3a0/0x420 [ 303.782285][T12742] ? __fget_files+0x2a/0x420 [ 303.782310][T12742] do_writev+0x154/0x2e0 [ 303.782330][T12742] ? __pfx_do_writev+0x10/0x10 [ 303.782355][T12742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.782373][T12742] do_syscall_64+0x174/0x580 [ 303.782389][T12742] ? trace_irq_disable+0x3b/0x140 [ 303.782411][T12742] ? clear_bhb_loop+0x40/0x90 [ 303.782430][T12742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.782445][T12742] RIP: 0033:0x7fec4319ce59 [ 303.782461][T12742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.782472][T12742] RSP: 002b:00007fec43fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 303.782488][T12742] RAX: ffffffffffffffda RBX: 00007fec43416090 RCX: 00007fec4319ce59 [ 303.782497][T12742] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000006 [ 303.782506][T12742] RBP: 00007fec43fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 303.782515][T12742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.782523][T12742] R13: 00007fec43416128 R14: 00007fec43416090 R15: 00007ffcd2b47608 [ 303.782544][T12742] [ 304.169612][T12736] 8021q: adding VLAN 0 to HW filter on device bond9 [ 304.286846][T12749] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2125'. [ 304.382102][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2126'. [ 304.405774][T12755] FAULT_INJECTION: forcing a failure. [ 304.405774][T12755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.432538][T12755] CPU: 1 UID: 0 PID: 12755 Comm: syz.2.2128 Not tainted syzkaller #0 PREEMPT(full) [ 304.432562][T12755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 304.432572][T12755] Call Trace: [ 304.432578][T12755] [ 304.432586][T12755] dump_stack_lvl+0xe8/0x150 [ 304.432611][T12755] should_fail_ex+0x412/0x560 [ 304.432634][T12755] _copy_from_user+0x2d/0xb0 [ 304.432654][T12755] do_sock_getsockopt+0x200/0x7e0 [ 304.432678][T12755] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 304.432710][T12755] ? __fget_files+0x3a0/0x420 [ 304.432728][T12755] ? __fget_files+0x2a/0x420 [ 304.432752][T12755] __x64_sys_getsockopt+0x1a4/0x240 [ 304.432774][T12755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.432791][T12755] do_syscall_64+0x174/0x580 [ 304.432808][T12755] ? trace_irq_disable+0x3b/0x140 [ 304.432829][T12755] ? clear_bhb_loop+0x40/0x90 [ 304.432847][T12755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.432862][T12755] RIP: 0033:0x7fec4319ce59 [ 304.432877][T12755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.432890][T12755] RSP: 002b:00007fec43ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 304.432907][T12755] RAX: ffffffffffffffda RBX: 00007fec43415fa0 RCX: 00007fec4319ce59 [ 304.432918][T12755] RDX: 0000000000000484 RSI: 0000000000000000 RDI: 0000000000000004 [ 304.432927][T12755] RBP: 00007fec43ff6090 R08: 0000200000000040 R09: 0000000000000000 [ 304.432938][T12755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.432947][T12755] R13: 00007fec43416038 R14: 00007fec43415fa0 R15: 00007ffcd2b47608 [ 304.432972][T12755] [ 304.789090][T12762] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2131'. [ 304.965584][T12766] xt_hashlimit: size too large, truncated to 1048576 [ 305.036484][T12775] FAULT_INJECTION: forcing a failure. [ 305.036484][T12775] name failslab, interval 1, probability 0, space 0, times 0 [ 305.121293][T12775] CPU: 1 UID: 0 PID: 12775 Comm: syz.4.2134 Not tainted syzkaller #0 PREEMPT(full) [ 305.121319][T12775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 305.121329][T12775] Call Trace: [ 305.121337][T12775] [ 305.121344][T12775] dump_stack_lvl+0xe8/0x150 [ 305.121370][T12775] should_fail_ex+0x412/0x560 [ 305.121394][T12775] should_failslab+0xa8/0x100 [ 305.121413][T12775] __kmalloc_noprof+0xe8/0x760 [ 305.121436][T12775] ? tomoyo_encode+0x28b/0x550 [ 305.121457][T12775] tomoyo_encode+0x28b/0x550 [ 305.121479][T12775] tomoyo_realpath_from_path+0x58d/0x5d0 [ 305.121496][T12775] ? tomoyo_domain+0xd7/0x130 [ 305.121518][T12775] ? tomoyo_path_number_perm+0x219/0x630 [ 305.121538][T12775] tomoyo_path_number_perm+0x246/0x630 [ 305.121561][T12775] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 305.121581][T12775] ? __lock_acquire+0x6b5/0x2cf0 [ 305.121613][T12775] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 305.121652][T12775] ? __fget_files+0x2a/0x420 [ 305.121674][T12775] ? __fget_files+0x2a/0x420 [ 305.121691][T12775] ? __fget_files+0x3a0/0x420 [ 305.121708][T12775] ? __fget_files+0x2a/0x420 [ 305.121729][T12775] security_file_ioctl+0xc3/0x2a0 [ 305.121752][T12775] __se_sys_ioctl+0x47/0x170 [ 305.121774][T12775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.121792][T12775] do_syscall_64+0x174/0x580 [ 305.121808][T12775] ? trace_irq_disable+0x3b/0x140 [ 305.121830][T12775] ? clear_bhb_loop+0x40/0x90 [ 305.121851][T12775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.121867][T12775] RIP: 0033:0x7efe10f9ce59 [ 305.121882][T12775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.121897][T12775] RSP: 002b:00007efe0f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.121914][T12775] RAX: ffffffffffffffda RBX: 00007efe11215fa0 RCX: 00007efe10f9ce59 [ 305.121926][T12775] RDX: 00002000000003c0 RSI: 0000000000008935 RDI: 0000000000000004 [ 305.121936][T12775] RBP: 00007efe0f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 305.121946][T12775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.121956][T12775] R13: 00007efe11216038 R14: 00007efe11215fa0 R15: 00007ffdfcc42d58 [ 305.121990][T12775] [ 305.122011][T12775] ERROR: Out of memory at tomoyo_realpath_from_path. [ 305.578298][T12784] netlink: 'syz.3.2136': attribute type 1 has an invalid length. [ 305.771989][T12784] 8021q: adding VLAN 0 to HW filter on device bond16 [ 305.800022][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 305.890734][T12793] netlink: 'syz.1.2140': attribute type 10 has an invalid length. [ 305.906934][T12793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2140'. [ 305.996918][T12800] netlink: 'syz.3.2143': attribute type 4 has an invalid length. [ 306.102651][T12800] netlink: 'syz.3.2143': attribute type 4 has an invalid length. [ 306.328007][T12800] [ 306.330405][T12800] ====================================================== [ 306.337433][T12800] WARNING: possible circular locking dependency detected [ 306.344475][T12800] syzkaller #0 Not tainted [ 306.348899][T12800] ------------------------------------------------------ [ 306.355932][T12800] syz.3.2143/12800 is trying to acquire lock: [ 306.362022][T12800] ffffffff8ea85600 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 306.371190][T12800] [ 306.371190][T12800] but task is already holding lock: [ 306.378582][T12800] ffff88803430b438 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 306.388080][T12800] [ 306.388080][T12800] which lock already depends on the new lock. [ 306.388080][T12800] [ 306.398476][T12800] [ 306.398476][T12800] the existing dependency chain (in reverse order) is: [ 306.407563][T12800] [ 306.407563][T12800] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 306.415109][T12800] __might_fault+0xcb/0x130 [ 306.420129][T12800] _copy_from_user+0x28/0xb0 [ 306.425232][T12800] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 306.431720][T12800] ip_generic_getfrag+0x149/0x2d0 [ 306.437255][T12800] __ip6_append_data+0x39cd/0x3f60 [ 306.442881][T12800] ip6_append_data+0x10f/0x280 [ 306.448164][T12800] rawv6_sendmsg+0x12d3/0x18e0 [ 306.453439][T12800] ____sys_sendmsg+0x80a/0x9f0 [ 306.458713][T12800] ___sys_sendmsg+0x2a5/0x360 [ 306.463929][T12800] __x64_sys_sendmsg+0x1bd/0x2a0 [ 306.469404][T12800] do_syscall_64+0x174/0x580 [ 306.474686][T12800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.481192][T12800] [ 306.481192][T12800] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 306.488915][T12800] lock_sock_nested+0x41/0x100 [ 306.494200][T12800] inet_shutdown+0x6a/0x390 [ 306.499214][T12800] nbd_mark_nsock_dead+0x2e9/0x560 [ 306.504841][T12800] recv_work+0x1c2e/0x1d40 [ 306.509760][T12800] process_scheduled_works+0xb5d/0x1860 [ 306.515826][T12800] worker_thread+0xa53/0xfc0 [ 306.520948][T12800] kthread+0x389/0x470 [ 306.525532][T12800] ret_from_fork+0x514/0xb70 [ 306.530637][T12800] ret_from_fork_asm+0x1a/0x30 [ 306.535914][T12800] [ 306.535914][T12800] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 306.543545][T12800] __mutex_lock+0x1a3/0x1550 [ 306.548643][T12800] nbd_queue_rq+0x37b/0x1100 [ 306.553752][T12800] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 306.559813][T12800] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 306.566650][T12800] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 306.573149][T12800] blk_mq_run_hw_queue+0x348/0x4f0 [ 306.578774][T12800] blk_mq_dispatch_list+0xd16/0xe10 [ 306.584503][T12800] blk_mq_flush_plug_list+0x48d/0x570 [ 306.590406][T12800] __blk_flush_plug+0x3ed/0x4d0 [ 306.595772][T12800] __submit_bio+0x28d/0x580 [ 306.600790][T12800] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 306.606943][T12800] block_read_full_folio+0x7b7/0x830 [ 306.612760][T12800] filemap_read_folio+0x137/0x3b0 [ 306.618302][T12800] do_read_cache_folio+0x358/0x590 [ 306.623932][T12800] read_part_sector+0xb6/0x2b0 [ 306.629224][T12800] adfspart_check_ICS+0xb1/0x960 [ 306.634692][T12800] bdev_disk_changed+0x817/0x1770 [ 306.640242][T12800] blkdev_get_whole+0x380/0x510 [ 306.645624][T12800] bdev_open+0x31e/0xd30 [ 306.650418][T12800] blkdev_open+0x470/0x610 [ 306.655358][T12800] do_dentry_open+0x822/0x13a0 [ 306.660637][T12800] vfs_open+0x3b/0x340 [ 306.665217][T12800] path_openat+0x2e08/0x3860 [ 306.670333][T12800] do_file_open+0x23e/0x4a0 [ 306.675380][T12800] do_sys_openat2+0x113/0x200 [ 306.680619][T12800] __x64_sys_openat+0x138/0x170 [ 306.685991][T12800] do_syscall_64+0x174/0x580 [ 306.691096][T12800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.697513][T12800] [ 306.697513][T12800] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 306.704757][T12800] __mutex_lock+0x1a3/0x1550 [ 306.709884][T12800] nbd_queue_rq+0xc6/0x1100 [ 306.714913][T12800] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 306.720989][T12800] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 306.727854][T12800] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 306.734365][T12800] blk_mq_run_hw_queue+0x348/0x4f0 [ 306.740013][T12800] blk_mq_dispatch_list+0xd16/0xe10 [ 306.745731][T12800] blk_mq_flush_plug_list+0x48d/0x570 [ 306.751630][T12800] __blk_flush_plug+0x3ed/0x4d0 [ 306.757005][T12800] __submit_bio+0x28d/0x580 [ 306.762035][T12800] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 306.768193][T12800] block_read_full_folio+0x7b7/0x830 [ 306.773999][T12800] filemap_read_folio+0x137/0x3b0 [ 306.779634][T12800] do_read_cache_folio+0x358/0x590 [ 306.785266][T12800] read_part_sector+0xb6/0x2b0 [ 306.790551][T12800] adfspart_check_ICS+0xb1/0x960 [ 306.796006][T12800] bdev_disk_changed+0x817/0x1770 [ 306.801550][T12800] blkdev_get_whole+0x380/0x510 [ 306.806919][T12800] bdev_open+0x31e/0xd30 [ 306.811681][T12800] blkdev_open+0x470/0x610 [ 306.816618][T12800] do_dentry_open+0x822/0x13a0 [ 306.821915][T12800] vfs_open+0x3b/0x340 [ 306.826515][T12800] path_openat+0x2e08/0x3860 [ 306.831721][T12800] do_file_open+0x23e/0x4a0 [ 306.836839][T12800] do_sys_openat2+0x113/0x200 [ 306.842037][T12800] __x64_sys_openat+0x138/0x170 [ 306.847401][T12800] do_syscall_64+0x174/0x580 [ 306.852509][T12800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.858919][T12800] [ 306.858919][T12800] -> #3 (set->srcu){.+.+}-{0:0}: [ 306.866060][T12800] __synchronize_srcu+0xca/0x300 [ 306.871524][T12800] elevator_switch+0x1e8/0x7a0 [ 306.876806][T12800] elevator_change+0x2cc/0x450 [ 306.882131][T12800] elevator_set_default+0x36c/0x430 [ 306.887854][T12800] blk_register_queue+0x3e9/0x4e0 [ 306.893399][T12800] __add_disk+0x677/0xd50 [ 306.898253][T12800] add_disk_fwnode+0xfb/0x480 [ 306.903445][T12800] nbd_dev_add+0x72c/0xb50 [ 306.908376][T12800] nbd_init+0x168/0x1f0 [ 306.913044][T12800] do_one_initcall+0x250/0x870 [ 306.918328][T12800] do_initcall_level+0x104/0x190 [ 306.923875][T12800] do_initcalls+0x59/0xa0 [ 306.928720][T12800] kernel_init_freeable+0x2a6/0x3e0 [ 306.934441][T12800] kernel_init+0x1d/0x1d0 [ 306.939290][T12800] ret_from_fork+0x514/0xb70 [ 306.945885][T12800] ret_from_fork_asm+0x1a/0x30 [ 306.951185][T12800] [ 306.951185][T12800] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 306.959011][T12800] __mutex_lock+0x1a3/0x1550 [ 306.965976][T12800] elevator_change+0x1b3/0x450 [ 306.971280][T12800] elevator_set_none+0xb5/0x140 [ 306.976664][T12800] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 306.982990][T12800] nbd_start_device+0x17f/0xb10 [ 306.988446][T12800] nbd_genl_connect+0x165b/0x1cf0 [ 306.993997][T12800] genl_family_rcv_msg_doit+0x22a/0x330 [ 307.000063][T12800] genl_rcv_msg+0x61c/0x7a0 [ 307.005089][T12800] netlink_rcv_skb+0x232/0x4b0 [ 307.010372][T12800] genl_rcv+0x28/0x40 [ 307.014878][T12800] netlink_unicast+0x75c/0x8e0 [ 307.020151][T12800] netlink_sendmsg+0x813/0xb40 [ 307.025431][T12800] ____sys_sendmsg+0x972/0x9f0 [ 307.030713][T12800] ___sys_sendmsg+0x2a5/0x360 [ 307.035906][T12800] __x64_sys_sendmsg+0x1bd/0x2a0 [ 307.041371][T12800] do_syscall_64+0x174/0x580 [ 307.046488][T12800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.052982][T12800] [ 307.052982][T12800] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 307.061585][T12800] blk_alloc_queue+0x546/0x680 [ 307.066867][T12800] __blk_mq_alloc_disk+0x197/0x390 [ 307.072495][T12800] nbd_dev_add+0x499/0xb50 [ 307.077469][T12800] nbd_init+0x168/0x1f0 [ 307.082140][T12800] do_one_initcall+0x250/0x870 [ 307.087422][T12800] do_initcall_level+0x104/0x190 [ 307.092886][T12800] do_initcalls+0x59/0xa0 [ 307.097745][T12800] kernel_init_freeable+0x2a6/0x3e0 [ 307.103467][T12800] kernel_init+0x1d/0x1d0 [ 307.108398][T12800] ret_from_fork+0x514/0xb70 [ 307.113592][T12800] ret_from_fork_asm+0x1a/0x30 [ 307.118875][T12800] [ 307.118875][T12800] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 307.126088][T12800] __lock_acquire+0x15a5/0x2cf0 [ 307.131460][T12800] lock_acquire+0x106/0x350 [ 307.136480][T12800] fs_reclaim_acquire+0x71/0x100 [ 307.141942][T12800] prepare_alloc_pages+0x152/0x650 [ 307.147575][T12800] __alloc_frozen_pages_noprof+0x12f/0x380 [ 307.153939][T12800] alloc_pages_mpol+0x235/0x490 [ 307.159308][T12800] folio_alloc_mpol_noprof+0x39/0x160 [ 307.165199][T12800] vma_alloc_folio_noprof+0xe1/0x1e0 [ 307.171009][T12800] do_pte_missing+0x159d/0x33f0 [ 307.176380][T12800] handle_mm_fault+0x1bf2/0x3170 [ 307.181832][T12800] do_user_addr_fault+0x75b/0x1340 [ 307.187492][T12800] exc_page_fault+0x6a/0xc0 [ 307.192510][T12800] asm_exc_page_fault+0x26/0x30 [ 307.197876][T12800] ep_try_send_events+0x79f/0xf10 [ 307.203465][T12800] do_epoll_wait+0x5cf/0xf60 [ 307.208578][T12800] __x64_sys_epoll_wait+0x1d7/0x230 [ 307.214394][T12800] do_syscall_64+0x174/0x580 [ 307.220040][T12800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.226462][T12800] [ 307.226462][T12800] other info that might help us debug this: [ 307.226462][T12800] [ 307.236682][T12800] Chain exists of: [ 307.236682][T12800] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 307.236682][T12800] [ 307.249299][T12800] Possible unsafe locking scenario: [ 307.249299][T12800] [ 307.256756][T12800] CPU0 CPU1 [ 307.262110][T12800] ---- ---- [ 307.267464][T12800] rlock(&mm->mmap_lock); [ 307.272054][T12800] lock(sk_lock-AF_INET6); [ 307.279085][T12800] lock(&mm->mmap_lock); [ 307.286020][T12800] lock(fs_reclaim); [ 307.289997][T12800] [ 307.289997][T12800] *** DEADLOCK *** [ 307.289997][T12800] [ 307.298129][T12800] 2 locks held by syz.3.2143/12800: [ 307.303318][T12800] #0: ffff888054c02c60 (&ep->mtx){+.+.}-{4:4}, at: ep_try_send_events+0x19d/0xf10 [ 307.312643][T12800] #1: ffff88803430b438 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 307.322567][T12800] [ 307.322567][T12800] stack backtrace: [ 307.328450][T12800] CPU: 0 UID: 0 PID: 12800 Comm: syz.3.2143 Not tainted syzkaller #0 PREEMPT(full) [ 307.328469][T12800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.328478][T12800] Call Trace: [ 307.328487][T12800] [ 307.328495][T12800] dump_stack_lvl+0xe8/0x150 [ 307.328516][T12800] print_circular_bug+0x2e1/0x300 [ 307.328535][T12800] check_noncircular+0x12e/0x150 [ 307.328554][T12800] __lock_acquire+0x15a5/0x2cf0 [ 307.328570][T12800] ? stack_depot_save_flags+0x290/0x810 [ 307.328585][T12800] ? lock_acquire+0x106/0x350 [ 307.328602][T12800] ? prepare_alloc_pages+0x152/0x650 [ 307.328622][T12800] lock_acquire+0x106/0x350 [ 307.328634][T12800] ? prepare_alloc_pages+0x152/0x650 [ 307.328654][T12800] ? rcu_is_watching+0x15/0xb0 [ 307.328670][T12800] fs_reclaim_acquire+0x71/0x100 [ 307.328689][T12800] ? prepare_alloc_pages+0x152/0x650 [ 307.328704][T12800] prepare_alloc_pages+0x152/0x650 [ 307.328726][T12800] __alloc_frozen_pages_noprof+0x12f/0x380 [ 307.328740][T12800] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 307.328768][T12800] ? __pfx_policy_nodemask+0x10/0x10 [ 307.328782][T12800] ? do_raw_spin_lock+0x12b/0x2f0 [ 307.328799][T12800] ? __lock_acquire+0x6b5/0x2cf0 [ 307.328815][T12800] alloc_pages_mpol+0x235/0x490 [ 307.328828][T12800] folio_alloc_mpol_noprof+0x39/0x160 [ 307.328843][T12800] vma_alloc_folio_noprof+0xe1/0x1e0 [ 307.328858][T12800] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 307.328871][T12800] ? __pte_offset_map+0x29/0x240 [ 307.328887][T12800] ? __pte_offset_map+0x29/0x240 [ 307.328903][T12800] do_pte_missing+0x159d/0x33f0 [ 307.328926][T12800] ? handle_mm_fault+0xf1/0x3170 [ 307.328944][T12800] handle_mm_fault+0x1bf2/0x3170 [ 307.328963][T12800] ? handle_mm_fault+0xf1/0x3170 [ 307.328982][T12800] ? __pfx_handle_mm_fault+0x10/0x10 [ 307.329003][T12800] ? lock_mm_and_find_vma+0xa7/0x340 [ 307.329022][T12800] do_user_addr_fault+0x75b/0x1340 [ 307.329043][T12800] exc_page_fault+0x6a/0xc0 [ 307.329057][T12800] asm_exc_page_fault+0x26/0x30 [ 307.329072][T12800] RIP: 0010:ep_try_send_events+0x79f/0xf10 [ 307.329091][T12800] Code: b6 04 28 84 c0 0f 85 d4 03 00 00 49 8b 07 48 ba 00 f0 ff ff ff 7f 00 00 48 8b 74 24 68 48 89 f1 48 39 d1 48 0f 47 ca 0f 01 cb <44> 89 31 48 89 41 04 0f 01 ca 48 83 c6 0c 44 8b 74 24 14 0f 84 13 [ 307.329102][T12800] RSP: 0018:ffffc9000d61fac0 EFLAGS: 00050283 [ 307.329116][T12800] RAX: 0000000000000000 RBX: ffff888087cc1858 RCX: 000020000000affb [ 307.329124][T12800] RDX: 00007ffffffff000 RSI: 000020000000affb RDI: ffff888087cc18b3 [ 307.329134][T12800] RBP: ffffc9000d61fbf0 R08: ffff888030ab781f R09: 1ffff11006156f03 [ 307.329144][T12800] R10: dffffc0000000000 R11: ffffed1006156f04 R12: 1ffff11010f98315 [ 307.329153][T12800] R13: dffffc0000000000 R14: 0000000000000004 R15: ffff888087cc18ac [ 307.329174][T12800] ? __pfx_ep_try_send_events+0x10/0x10 [ 307.329192][T12800] ? ktime_get+0x45/0x220 [ 307.329212][T12800] ? ktime_get+0x1f5/0x220 [ 307.329228][T12800] do_epoll_wait+0x5cf/0xf60 [ 307.329252][T12800] ? do_epoll_wait+0x7e1/0xf60 [ 307.329273][T12800] ? __pfx_do_epoll_wait+0x10/0x10 [ 307.329289][T12800] ? seqcount_lockdep_reader_access+0xea/0x100 [ 307.329308][T12800] ? __pfx_ep_autoremove_wake_function+0x10/0x10 [ 307.329332][T12800] __x64_sys_epoll_wait+0x1d7/0x230 [ 307.329355][T12800] ? __pfx___x64_sys_epoll_wait+0x10/0x10 [ 307.329378][T12800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.329390][T12800] do_syscall_64+0x174/0x580 [ 307.329405][T12800] ? trace_irq_disable+0x3b/0x140 [ 307.329422][T12800] ? clear_bhb_loop+0x40/0x90 [ 307.329438][T12800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.329451][T12800] RIP: 0033:0x7ff92d39ce59 [ 307.329465][T12800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.329475][T12800] RSP: 002b:00007ff92b5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 307.329486][T12800] RAX: ffffffffffffffda RBX: 00007ff92d615fa0 RCX: 00007ff92d39ce59 [ 307.329497][T12800] RDX: 0000000000000001 RSI: 000020000000affb RDI: 000000000000000b [ 307.329506][T12800] RBP: 00007ff92d432d6f R08: 0000000000000000 R09: 0000000000000000 [ 307.329513][T12800] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000000 [ 307.329521][T12800] R13: 00007ff92d616038 R14: 00007ff92d615fa0 R15: 00007ffe443d6558 [ 307.329538][T12800] [ 307.983258][T12820] netlink: 'syz.4.2146': attribute type 1 has an invalid length. [ 308.066771][T12810] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.074933][T12810] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.512175][T12810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.541456][T12810] batadv_slave_1: left promiscuous mode [ 308.610174][T12810] veth0_vlan: left promiscuous mode [ 308.717108][T12810] ipip0: left promiscuous mode [ 308.727659][T12810] bridge3: left promiscuous mode [ 308.732921][T12810] bridge3: left allmulticast mode [ 308.752095][ T24] lo speed is unknown, defaulting to 1000 [ 308.778562][ T24] syz0: Port: 1 Link DOWN [ 308.784210][T12820] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 308.808537][T12823] gretap1: entered allmulticast mode [ 308.837935][ T5779] lo speed is unknown, defaulting to 1000