last executing test programs: 4m20.668755156s ago: executing program 3 (id=9998): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001500010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000000000000000330000000200000000000000000000000000ffffac1414aa000000000000fdff00000000000000000000000020010000000000000000000000000000000004d26c000000000000000000000000000000000000000000000100000000000000000c0000000000000000000000ac1e0101000000000000000000000000000004d26c0000"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 4m20.537238771s ago: executing program 3 (id=9999): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0xff00, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x59, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0) 4m20.253524648s ago: executing program 3 (id=10003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r3, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x3, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r4, 0x4) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) socket$inet6(0xa, 0x5, 0x0) socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x2000400c) listen(r5, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) bpf$MAP_CREATE(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) close(0x4) 4m18.674161724s ago: executing program 3 (id=10019): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/195, 0xc3}], 0x1}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000100), 0x4) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010800000000fedbdf250b00000008000300", @ANYRES32=r8, @ANYBLOB="0a0006000802110000010000200050"], 0x48}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010800000000fedbdf250b00000008000300", @ANYRES32=r8, @ANYBLOB="0a0006000802110000010000200050"], 0x48}}, 0x0) 4m18.324535473s ago: executing program 3 (id=10025): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x3) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @empty, 0x1}, 0x1c) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0xa7ba) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_PEER_REMOVE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[], 0x38}}, 0x0) (async) listen(r10, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 4m17.365890443s ago: executing program 3 (id=10032): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac141400060003004c"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r5 = socket(0x15, 0x5, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r5, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="04002bbd7000fedbdf250200000005000400020000000900010073797a32000000000900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8000) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 4m2.240487522s ago: executing program 32 (id=10032): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac141400060003004c"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r5 = socket(0x15, 0x5, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r5, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="04002bbd7000fedbdf250200000005000400020000000900010073797a32000000000900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8000) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 2m46.258161047s ago: executing program 2 (id=10928): socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x8000000, 0x2, 0x0, 0x1, 0x6, 0x200}, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfffe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) 2m45.954865157s ago: executing program 2 (id=10933): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m45.670092019s ago: executing program 2 (id=10938): syz_emit_ethernet(0x36, &(0x7f0000000200)={@multicast, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x9}, &(0x7f0000000480)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x7d, &(0x7f00000004c0)={r4, @in={{0x2, 0x1, @multicast1}}, 0x5, 0x400}, 0x90) sendmsg$inet_sctp(r0, &(0x7f00000005c0)={&(0x7f0000000300)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)="f0531af600709d0d568cb229baae1c09f8664a97e8b301e3c5df47ce40d728dd5ee5f44bd3b53c48c75caf4a3aee025fdf2e7e3dee4c0708d40d78204f5d481ab6b79a17818e54a40ee2a96b5d33f7ce3935f7f44faf874441c6ee44147ee79a11e67c29e62bd13605454f9acbadf9bfca81747c8fe4595939abb9e73a30c34b8a7bdad5334392564583b9c8d7740124d53c81c110c5bc98d0429aa3c6", 0x9d}], 0x1, &(0x7f00000004c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x43}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x2, 0x10001, 0x10000, r1}}, @authinfo={0x18, 0x84, 0x6, {0xc}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x8002, 0x8000, 0x1000, r4}}, @authinfo={0x18}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @dstaddrv6={0x20, 0x84, 0x8, @private0}], 0xc8, 0x24000800}, 0x4000810) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r6, 0x0, 0xf3a, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000ff0000007d069faaaaaaaaaabb0800262300280065000009069078e0000011ac1414384e234e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5040ff8b90780002"], 0x3a) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r9, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x185}, 0x4000) 2m42.492002628s ago: executing program 2 (id=10959): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000d000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {0x0}], 0x2}, 0x40}], 0x1, 0x102, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86b", 0xf) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYBLOB="400001801400020070696d3672656730", @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x44}}, 0x80) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000a80)=0x8, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 2m41.530947467s ago: executing program 2 (id=10963): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x0, 0x1, 0xfffffff7, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, 0xffffffffffffffff, 0x3, 0x0, @val=@netkit={@void, @value=r0, @void, @void, r1}}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000d8b", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf250c000000180001801400020076657468315f746f5f687372000000001800038014000380100001800b00020064766d7270310000"], 0x44}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x810, r0, 0x4f738000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x4000054) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 2m41.263632198s ago: executing program 2 (id=10965): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x40400) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x108) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m25.582544901s ago: executing program 33 (id=10965): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x40400) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x108) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 3.178011963s ago: executing program 5 (id=11967): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="280000000000000017010000020000000d000000262f188c369dcd1800"], 0x28}], 0x1, 0x40800) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x703, 0x44, 0x80000000}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x850}, 0x2400c000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000004000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c0800034000e5ff140900010073797a3000000000090002007305003200000000140000001100010000000000000000000100000a"], 0x94}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, r8, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r9) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00042cbd7000ffdbdf250300000c00050026008000000000000c00020002000000000000000af10900626f6e64300000000c00040002000000000000000c00060000000000000000000c00050000010000000000000c002400ffffffffffffffff09000a0073797a3200000000007b7e47032546e2654f492f2b9381ebab7984f5f4c22d53e3dae2ba8784d2f15324fa50654742d721669fcff1be10a92d551fd10ee2c072f3474956a455ee0c894369802e854e757842cc7b670021d52d716b640b04ed1cfaae4129ba632210c8a731437b7d627356a3f8be15e21ab558dcff7d412d02cfc9afa48b678f846467e81505aa834e828264fd6bc59588962fa33f1d377dff2dce0daca3a5600d88b40a1dd7833da9157442581706fd219336d7e4ba4824a473e44c5887fb00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x801}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000b80)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x6, 0x0, 0x2000000000000001, 0x0, 0x80000000], 0x1, 0x0, 0x0, [{}]}, 0x88) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)}], 0x1) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="f4000900062b3325fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000240)="42e9", 0x2}, {&(0x7f00000002c0)="8b3306", 0x3}], 0x3}, 0x0) 2.803216724s ago: executing program 5 (id=11970): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) ppoll(&(0x7f0000000600)=[{0xffffffffffffffff, 0x1000, 0x300}, {}, {0xffffffffffffffff, 0x8001}, {r2, 0x8260}, {r1, 0x505a}, {0xffffffffffffffff, 0x1044}], 0x6, &(0x7f0000000640)={0x0, 0x3938700}, &(0x7f0000000740)={[0x2]}, 0x8) 2.613979634s ago: executing program 0 (id=11973): connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x40) 2.537256002s ago: executing program 4 (id=11974): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x1f}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.403910802s ago: executing program 5 (id=11975): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x300, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x6b, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, &(0x7f00000005c0)="bad330fb", 0x4, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @remote}, 0x14) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f00000001c0)={0x64c, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x65, 0x4, "00f164b9744e247431260d2a5187c81300c85b9a386745e8493248f7e1980e7c31109c11a1c75f8287500259e646dd7bdda8b39d222b7385ffe2b7a2b3eb2f1dea6b05ee4ee80d00d501b57ac25555d5ec6109808f057594e32366209c1cf399dc"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdd, 0x4, "34e98005f2f517e5ead82b14a9f2df83059313970c7fdf02749cdd7172d522b75cec11cf3fef68543b8658781dbb2715807780b29e8256c7f337fdac07d5c1e58847618be3564e4d4741710d11a00fdafda76373d186cda471c0508825807434f62d314f990044d9cb6ea60601bfab07d8faf81e5c5785e6ca212372f8ed6456ecf78f9c50ba8a4f615c278835ef1273b59943444a6df41a67698316a389d67a3669e7ca8c2765bca26275fecb917e4adb238fa1c81a504c66b283d52ed9d102a440d902b30558e4a678873e68f1c1ca48ca948f2261b26ae3"}, @ETHTOOL_A_BITSET_MASK={0xd4, 0x5, "1a56d148ccdb502927d3df3d408bc3dd09b39110dfa13902c0f418605092227b3b2709cee42b895aef455991b1411f249412c8ab336a8ba3af143732482b3899b84f7d2a670b8261ebfb38ba03cd487a6e9d9f938c8ae4cdde5500327b8cce44fd6f91f6de9351dac125fb528ffba56691cb24b48d894c596778f1eec974b61641b5eeb05772132fbc85724c68b115b42287bf9685ea5401954c33d40f789443f5d4b809f2b3ff6dc42ee088c039d02a3bd8f48cf605d7e3b81ab924b16219bac3cb569d1ec01fdce3ac8c133a26852d"}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')$/}-\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffeffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4146}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x11e5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%\x9a\'*\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\-+/@^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')%&[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x12c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe9, 0x4, "e3ca52201c6d2bf84a3aedab0f2f8354ddbe9dad3838054dac41743ee3450ac40ec0d56e7e66ea8e880cfc3db43a37fafd311eeb4b7665fc38458f1149c553e28c76ced4d217b8f0545975441b26391a2e17eae947565bc51afc66e4a8a455e7c89162267f94322650457b73ec31d1540b88990030913f383d11dc1366b107b8416bb0a22418ba4331ff3c4e1f38c0109d19556333fdf84ecced5d4ebb8835fc8b80d737c709bca5bc9d1de9543beb68b3a9a61b863c82d44a49c0f065c54f6ebc41e2018d8fc0f4e0c5f7fc94881fee0fdd3abb8212c07542073b3288fb776f0db6898089"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_MASK={0x27, 0x5, "2e0978fd075e68dedab68ad66520aa9d7c0ab7d0145fbb80ef8a9b027db62b50e1c1af"}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x85, 0x5, "b05e41121df173e57a148c2b7c9377ee9e015377014d70e93d1ff5c1d1a142fdaae7cef2a381a6af5bb25beb2bcd38a61714aca1af07331503a3b1e8111a16a26b33caf5055e252113ac1ea015cad165be2bb0f1b77c80369e28af5a1fe3c0857dbcb49706cc01de4aaaede9fd412381108f258488722cd85d8f9778a3aca4afa2"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x98, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x4}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe18}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x49fc}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x44, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x35, 0x5, "3dda0301771659e6f89ed859c7dba0c4d7916342acc0038c64db658545fa2c4b951170fa3264712e5453649aae1d89a2bd"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x64c}, 0x1, 0x0, 0x0, 0x60008005}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) 2.368967341s ago: executing program 0 (id=11977): socket$inet(0x2, 0x2, 0x73) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x8080) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @multicast, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0x1, 0x4e, 'C', "650c89ed15e61fc07a1673abc627f8e7fa5211fb9a3298577b82a0781b80a46c7c0c3c9512c85a99028dc65a4dc21a5be7"}}}}}, &(0x7f0000000300)={0x1, 0x3, [0x315, 0xd85, 0x523, 0x94f]}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008b000000000000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000400048500000086000000bf09000000000000550901000000010395000000000000001daa0600000000002500f4ff9a456adf45000200060000000700000003000000b702000003000000850000002a000000b70000000040000095"], &(0x7f00000010c0)='syzkaller\x00', 0xb, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r5 = socket(0x10, 0x803, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r6, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="46cc36fd4a409a657ed7060900000000081c0012800900766c006e000000000c000280060001000100000000000000", @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x6c0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r7, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.317990638s ago: executing program 4 (id=11978): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0x40000000}, 0x0) 2.131685762s ago: executing program 4 (id=11979): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd2d, 0x25dfdbfa, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x101, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x8001, 0x6, 0xa5f5, 0x4}, 0xfa, 0x0, 0x1, 0x1, 0x6, 0xe, 0xf, 0x6, 0x7, 0x3, {0x8001, 0x4, 0x800, 0x2, 0x8, 0xc85}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES8=r5, @ANYBLOB="683d80010000091004000c"], 0x2c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@multicast1, @initdev, 0x0}, &(0x7f0000000480)=0xc) r10 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000150001002cbd7000ffdbdf25023880fe", @ANYRES32=r11, @ANYBLOB="a745e89e3ad1b2a15e324546"], 0x20}}, 0x20008004) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', r6, 0x8000, 0x1, 0x100, 0x0, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x67, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x94, 0x0, 0xd, [0x1, 0x4, 0x0]}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000580)={@rand_addr, 0x0}, &(0x7f00000005c0)=0x14) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r15, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r15], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f0000001f40)={0xc60, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x1f8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x9, 0x8}, {0x0, 0xff, 0x7f, 0x6}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x110, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x311fd6b6}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r6}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e9de345}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r6}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r6}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0xc60}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x3, 0xe, 0x9, 0x3, 0x1, 0xe, 0x8, 0x18, 0x4, 0x7f, 0x3, 0x3e}, 0xe) close(0x3) 1.961177704s ago: executing program 5 (id=11980): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) 1.824447129s ago: executing program 1 (id=11981): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000140)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000000) 1.748546074s ago: executing program 1 (id=11982): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000d000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {0x0}], 0x2}, 0x40}], 0x1, 0x102, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86b", 0xf) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYBLOB="400001801400020070696d3672656730", @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x44}}, 0x80) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000a80)=0x8, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 1.619452771s ago: executing program 5 (id=11983): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000d000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x40}], 0x1, 0x102, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86b", 0xf) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYBLOB="400001801400020070696d3672656730", @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x44}}, 0x80) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000a80)=0x8, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 1.581484176s ago: executing program 6 (id=11984): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 19) 1.483324191s ago: executing program 4 (id=11985): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x4, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0xfffffdce) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) recvmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448c9, 0x0) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f0000000040)="0200", 0xffffffffffffff2c) sendto$inet6(r8, &(0x7f0000000800)="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", 0x5a3, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r10, 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.047298138s ago: executing program 6 (id=11986): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x3}}, @fwd={0x4}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x61, 0x61, 0x0, 0x61]}}, 0x0, 0x4e, 0x0, 0x0, 0x100000}, 0x28) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8000000180081064e81f782db44b904021d080006007c09e8f655810a001500090014260b3cfc1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4", 0x55}], 0x1}, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0xf0) unshare(0x22020600) (async) socket(0x11, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000180008e72dbd7000feffffff1c140000fe00000100200075"], 0x1c}}, 0x4800) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='vlan0\x00', 0x10) (async) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40000001, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1.045466689s ago: executing program 0 (id=11987): connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x40) 997.650558ms ago: executing program 0 (id=11988): socket$inet6(0xa, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000001880)=""/4112, 0x1010}, {&(0x7f0000001680)=""/99, 0x63}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f0000000500)=""/56, 0x38}], 0x5}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8000d3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xdbc}, {{0x0, 0x0, 0x0}, 0xa9}, {{0x0, 0x0, 0x0}, 0xd9f}], 0x8, 0x2030, 0x0) 862.375536ms ago: executing program 0 (id=11989): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x6, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x101200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f0000000280)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "b7a34d", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}}}}}, 0x0) 774.097549ms ago: executing program 6 (id=11990): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x1a6, [{0x4, 0x3}]}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x61, 0x61, 0x5f, 0x5f]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) setsockopt(0xffffffffffffffff, 0x8000, 0xffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x9, 0xbd3df14ad987a58c, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf250100000008000700e00000010e0001006e65742f6c326161700000000800020005420000080008"], 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000400)={r2, &(0x7f0000000200)='\x00', 0x121002, &(0x7f0000000240)={@align=0x7, {0xfffa, 0x7, 0x4, 0x7fffffffffffffff}}, 0x65, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000340)=0x1}) sendmsg$can_bcm(r6, &(0x7f00000006c0)={&(0x7f0000000440), 0x10, &(0x7f0000000680)={&(0x7f0000000480)={0x7, 0x500, 0x49, {}, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "d9ebf31fd4ef0364a49cb6fbe260ed3526f7e2de81ff7dcc365fd63d31f5b4f7a4db7db84ecf4a2c6b26cb5015b21221702be877965b84b7740a26fa07eb6933"}}, 0x80}, 0x1, 0x0, 0x0, 0x4008008}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@deltaction={0x0, 0x31, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}, {0x0, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x6}}, {0x0, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}, {0x0, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}, {0x0, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x750}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000884) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r13, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 699.429177ms ago: executing program 1 (id=11991): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x98, 0x98, 0x98, 0x98, 0x98, 0x130, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'batadv0\x00', {0x100, 0x401, 0x14, 0x3, 0x9, 0x7, 0xaad, 0x78, 0x20}, {0x9}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11, 0x3}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) 696.730645ms ago: executing program 4 (id=11992): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000140)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000000) 607.450618ms ago: executing program 5 (id=11993): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000d000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c233016", 0xc}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x40}], 0x1, 0x102, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYBLOB="400001801400020070696d3672656730", @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x44}}, 0x80) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000a80)=0x8, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 558.711803ms ago: executing program 0 (id=11994): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000d000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c233016", 0xc}], 0x1, &(0x7f0000001040), 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86b", 0xf) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYBLOB="400001801400020070696d3672656730", @ANYBLOB="1400"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x44}}, 0x80) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000a80)=0x8, 0x4) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 527.496234ms ago: executing program 1 (id=11995): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x400000000000000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, 0x0, 0x0, 0x4060019}, 0x20000041) 483.791319ms ago: executing program 6 (id=11996): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x400) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x1000) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) (async) write$nci(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="71050406030501200501a5"], 0x11) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) connect$unix(r3, &(0x7f0000000440)=@file={0x1}, 0x6e) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0) (async, rerun: 64) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) (async, rerun: 64) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r8, 0x10000}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xdc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xc8, 0x1, [@m_gact={0x30, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mpls={0x94, 0x16, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x43080}, @TCA_MPLS_TTL={0x5, 0x7, 0xfd}, @TCA_MPLS_LABEL={0x8, 0x5, 0x21974}, @TCA_MPLS_TTL={0x5, 0x7, 0x7f}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x101, 0x10000000, 0xff, 0x1}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5}]}, {0x4}, {0xc, 0x7, {0xd9e7636c32155d9b, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xdc}}, 0x0) 383.838534ms ago: executing program 4 (id=11997): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x4}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x8000, 0x10, 0x2, 0x400, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x7f, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000841}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000201051b00ea57aa27e7c7a2cc38d6a77d567cb90000000000000003000003"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) r8 = socket$inet(0x2, 0x2, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000003c0)={r2, 0x6, 0x9, 0x4}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000400), 0x1) sendmsg$inet(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x202, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000140)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="58000000000000000000000002"], 0x58}, 0x4840) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x15a, 0x2}, &(0x7f0000000100)=0x8) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)="5d4edff5cbba669a9eccc75331c4ead6a7584577a723bc8e190d1c6753d67b559904040412dbd01c83bb26084b441af949b8662c80b38cd28ecf2e04903aa97859641ab92e95abdfe0ac5c5c10d2ac3f18523f4c4e033bad8673b87cd4ce9d15f2db249282547303400fff2c3f6bb5dfa05f", 0x72}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'bond_slave_1\x00', {0x4}, 0xa3}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) 334.795497ms ago: executing program 1 (id=11998): connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x40) 199.572323ms ago: executing program 6 (id=11999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x30, r1, 0x5, 0x70bd2c, 0x0, {{0x2e, 0x0, 0x500}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 159.813582ms ago: executing program 1 (id=12000): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca60c10}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 12) write$tun(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000f9ffffffff07000f"], 0x24}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) 0s ago: executing program 6 (id=12001): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000d000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {0x0}], 0x2}, 0x40}], 0x1, 0x102, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86b", 0xf) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYBLOB="400001801400020070696d3672656730", @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x44}}, 0x80) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000a80)=0x8, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) kernel console output (not intermixed with test programs): yz.1.11279'. [ 1702.356857][T14645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11283'. [ 1702.527063][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11286'. [ 1702.574469][T14651] xfrm0 speed is unknown, defaulting to 1000 [ 1703.335751][T14669] netlink: 'syz.0.11288': attribute type 1 has an invalid length. [ 1703.390482][T14669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11288'. [ 1703.885234][T14651] lo speed is unknown, defaulting to 1000 [ 1704.600842][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11297'. [ 1704.737171][T14704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11298'. [ 1704.782341][T14704] FAULT_INJECTION: forcing a failure. [ 1704.782341][T14704] name failslab, interval 1, probability 0, space 0, times 0 [ 1704.812315][T14704] CPU: 1 UID: 0 PID: 14704 Comm: syz.0.11298 Not tainted syzkaller #0 PREEMPT(full) [ 1704.812345][T14704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1704.812360][T14704] Call Trace: [ 1704.812369][T14704] [ 1704.812379][T14704] dump_stack_lvl+0xe8/0x150 [ 1704.812414][T14704] should_fail_ex+0x412/0x560 [ 1704.812444][T14704] should_failslab+0xa8/0x100 [ 1704.812470][T14704] __kmalloc_noprof+0xe8/0x760 [ 1704.812502][T14704] ? fib6_info_alloc+0x30/0xf0 [ 1704.812536][T14704] fib6_info_alloc+0x30/0xf0 [ 1704.812564][T14704] ip6_route_info_create+0x142/0x860 [ 1704.812604][T14704] ip6_route_add+0x49/0x1b0 [ 1704.812637][T14704] inet6_rtm_newroute+0x268/0x19e0 [ 1704.812673][T14704] ? __lock_acquire+0x6b5/0x2cf0 [ 1704.812705][T14704] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1704.812742][T14704] ? __pfx___schedule+0x10/0x10 [ 1704.812818][T14704] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1704.812843][T14704] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1704.812871][T14704] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1704.812893][T14704] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1704.812914][T14704] ? ref_tracker_free+0x693/0x840 [ 1704.812943][T14704] ? __pfx_ref_tracker_free+0x10/0x10 [ 1704.812981][T14704] netlink_rcv_skb+0x232/0x4b0 [ 1704.813009][T14704] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1704.813033][T14704] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1704.813074][T14704] ? netlink_deliver_tap+0x2e/0x1b0 [ 1704.813100][T14704] ? netlink_deliver_tap+0x2e/0x1b0 [ 1704.813132][T14704] netlink_unicast+0x75c/0x8e0 [ 1704.813168][T14704] netlink_sendmsg+0x813/0xb40 [ 1704.813205][T14704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1704.813236][T14704] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1704.813281][T14704] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1704.813315][T14704] ____sys_sendmsg+0x972/0x9f0 [ 1704.813342][T14704] ? __might_fault+0xaf/0x130 [ 1704.813379][T14704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1704.813416][T14704] ? import_iovec+0x73/0xa0 [ 1704.813447][T14704] ___sys_sendmsg+0x2a5/0x360 [ 1704.813472][T14704] ? __lock_acquire+0x6b5/0x2cf0 [ 1704.813502][T14704] ? __pfx____sys_sendmsg+0x10/0x10 [ 1704.813566][T14704] ? __fget_files+0x2a/0x420 [ 1704.813593][T14704] ? __fget_files+0x3a0/0x420 [ 1704.813633][T14704] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1704.813664][T14704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1704.813702][T14704] ? __pfx_ksys_write+0x10/0x10 [ 1704.813746][T14704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.813772][T14704] do_syscall_64+0x174/0x580 [ 1704.813796][T14704] ? trace_irq_disable+0x3b/0x140 [ 1704.813831][T14704] ? clear_bhb_loop+0x40/0x90 [ 1704.813858][T14704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.813882][T14704] RIP: 0033:0x7f8630b9ce59 [ 1704.813904][T14704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1704.813924][T14704] RSP: 002b:00007f8631a4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1704.813948][T14704] RAX: ffffffffffffffda RBX: 00007f8630e15fa0 RCX: 00007f8630b9ce59 [ 1704.813966][T14704] RDX: 0000000000004090 RSI: 0000200000000180 RDI: 0000000000000003 [ 1704.813981][T14704] RBP: 00007f8631a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.813996][T14704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.814010][T14704] R13: 00007f8630e16038 R14: 00007f8630e15fa0 R15: 00007fff590fc4a8 [ 1704.814047][T14704] [ 1705.852367][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11302'. [ 1706.167729][T14739] bridge5: port 1(veth17) entered blocking state [ 1706.188957][T14739] bridge5: port 1(veth17) entered disabled state [ 1706.206562][T14739] veth17: entered allmulticast mode [ 1706.230295][T14739] veth17: entered promiscuous mode [ 1706.281799][T14741] bridge2: port 2(veth0_to_bond) entered disabled state [ 1706.319506][T14741] veth0_to_bond: left allmulticast mode [ 1706.337098][T14741] veth0_to_bond: left promiscuous mode [ 1706.355034][T14741] bridge2: port 2(veth0_to_bond) entered disabled state [ 1706.382260][T14741] bridge5: port 2(veth0_to_bond) entered blocking state [ 1706.390363][T14741] bridge5: port 2(veth0_to_bond) entered disabled state [ 1706.398684][T14741] veth0_to_bond: entered allmulticast mode [ 1706.411312][T14741] veth0_to_bond: entered promiscuous mode [ 1706.642599][T14753] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11306'. [ 1707.080725][T14765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.088502][T14765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.126974][T14765] bridge0: entered allmulticast mode [ 1707.213814][T14765] bridge_slave_1: left allmulticast mode [ 1707.241205][T14765] bridge_slave_1: left promiscuous mode [ 1707.260974][T14765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.332510][T14765] bridge_slave_0: left allmulticast mode [ 1707.363118][T14765] bridge_slave_0: left promiscuous mode [ 1707.378646][T14765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.395043][T14782] netlink: 232 bytes leftover after parsing attributes in process `syz.1.11316'. [ 1707.535534][T14790] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.11317'. [ 1707.570884][T14788] vti0: entered promiscuous mode [ 1707.589013][T14790] netlink: ct family unspecified [ 1707.599492][T14788] vti0: entered allmulticast mode [ 1707.726376][T14795] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11318'. [ 1707.751449][T14795] netlink: 'syz.5.11318': attribute type 2 has an invalid length. [ 1707.764169][T14795] netlink: 'syz.5.11318': attribute type 2 has an invalid length. [ 1707.814320][T14800] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11319'. [ 1707.855650][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11320'. [ 1708.024794][T14801] bond11: option broadcast_neighbor: invalid value (30) [ 1708.073053][T14801] bond11 (unregistering): Released all slaves [ 1708.165793][T14821] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11324'. [ 1708.274706][T14808] syzkaller0: entered promiscuous mode [ 1708.284902][T14808] syzkaller0: entered allmulticast mode [ 1708.488991][T14838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1708.573167][T14841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11327'. [ 1708.594104][T14841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11327'. [ 1709.209838][T14854] netlink: 'syz.1.11333': attribute type 4 has an invalid length. [ 1709.291717][T14855] netlink: 'syz.1.11333': attribute type 4 has an invalid length. [ 1709.868997][T14884] netlink: 'syz.5.11343': attribute type 1 has an invalid length. [ 1709.935975][T14887] netlink: 'syz.4.11344': attribute type 1 has an invalid length. [ 1709.959405][T14887] netlink: 'syz.4.11344': attribute type 11 has an invalid length. [ 1709.986082][ T29] audit: type=1800 audit(1780668659.773:72): pid=14888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11343" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1049 res=0 errno=0 [ 1710.101199][T14892] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1710.476964][T14901] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1710.503073][T11474] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1710.994510][T14920] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 1711.298711][T14930] netlink: 'syz.4.11355': attribute type 1 has an invalid length. [ 1711.388588][T14930] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1711.523920][T11477] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1711.559967][T14936] __nla_validate_parse: 10 callbacks suppressed [ 1711.559988][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11357'. [ 1711.608664][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11357'. [ 1711.635570][T14940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11357'. [ 1711.655952][T14936] netlink: 'syz.1.11357': attribute type 6 has an invalid length. [ 1711.704157][T14936] netlink: 'syz.1.11357': attribute type 5 has an invalid length. [ 1711.798329][ T7547] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1711.837001][ T7547] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1711.909424][ T7547] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1711.970925][ T7547] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1712.254116][T14947] bridge0: left promiscuous mode [ 1712.260811][T14947] bridge0: left allmulticast mode [ 1712.279170][T14947] batman_adv: batadv0: Interface deactivated: dummy0 [ 1712.342228][T14947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1712.354406][T14947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1712.381259][T14947] geneve3: left promiscuous mode [ 1712.390422][T14947] bond3: left promiscuous mode [ 1712.397361][T14947] bond3: left allmulticast mode [ 1712.402576][T14947] ip6gre1: left promiscuous mode [ 1712.407573][T14947] ip6gre1: left allmulticast mode [ 1712.413202][T14947] macvlan2: left promiscuous mode [ 1712.418252][T14947] macvlan2: left allmulticast mode [ 1712.426931][T14947] bond5: left allmulticast mode [ 1712.436855][T14947] ipip0: left promiscuous mode [ 1712.458706][T14947] veth9: left promiscuous mode [ 1712.726179][T14981] FAULT_INJECTION: forcing a failure. [ 1712.726179][T14981] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.758865][T14981] CPU: 0 UID: 0 PID: 14981 Comm: syz.1.11366 Not tainted syzkaller #0 PREEMPT(full) [ 1712.758896][T14981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1712.758910][T14981] Call Trace: [ 1712.758919][T14981] [ 1712.758930][T14981] dump_stack_lvl+0xe8/0x150 [ 1712.758966][T14981] should_fail_ex+0x412/0x560 [ 1712.758999][T14981] should_failslab+0xa8/0x100 [ 1712.759026][T14981] __kmalloc_cache_noprof+0x88/0x660 [ 1712.759059][T14981] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1712.759085][T14981] ? sctp_add_bind_addr+0x8c/0x370 [ 1712.759128][T14981] sctp_add_bind_addr+0x8c/0x370 [ 1712.759168][T14981] sctp_copy_local_addr_list+0x314/0x4f0 [ 1712.759208][T14981] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1712.759244][T14981] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1712.759283][T14981] ? sctp_v6_is_any+0x64/0x80 [ 1712.759307][T14981] ? sctp_copy_one_addr+0x93/0x360 [ 1712.759345][T14981] sctp_bind_addr_copy+0xb3/0x3c0 [ 1712.759385][T14981] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1712.759420][T14981] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1712.759452][T14981] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1712.759497][T14981] ? __local_bh_enable_ip+0xd0/0x130 [ 1712.759521][T14981] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1712.759554][T14981] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1712.759589][T14981] sctp_sendmsg+0x1576/0x2c50 [ 1712.759634][T14981] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1712.759665][T14981] ? aa_sk_perm+0x6d5/0x900 [ 1712.759695][T14981] ? __might_fault+0xaf/0x130 [ 1712.759733][T14981] ? __pfx_aa_sk_perm+0x10/0x10 [ 1712.759769][T14981] ? sock_rps_record_flow+0x19/0x350 [ 1712.759805][T14981] ? __pfx_inet_sendmsg+0x10/0x10 [ 1712.759840][T14981] ? inet_sendmsg+0x2f4/0x370 [ 1712.759874][T14981] ? __pfx_inet_sendmsg+0x10/0x10 [ 1712.759911][T14981] __sys_sendto+0x5de/0x710 [ 1712.759940][T14981] ? __pfx___sys_sendto+0x10/0x10 [ 1712.759961][T14981] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1712.760005][T14981] ? __fget_files+0x3a0/0x420 [ 1712.760046][T14981] ? ksys_write+0x242/0x270 [ 1712.760083][T14981] ? __pfx_ksys_write+0x10/0x10 [ 1712.760124][T14981] __x64_sys_sendto+0xde/0x100 [ 1712.760148][T14981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.760175][T14981] do_syscall_64+0x174/0x580 [ 1712.760199][T14981] ? trace_irq_disable+0x3b/0x140 [ 1712.760240][T14981] ? clear_bhb_loop+0x40/0x90 [ 1712.760268][T14981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.760292][T14981] RIP: 0033:0x7fc7dd99ce59 [ 1712.760314][T14981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1712.760334][T14981] RSP: 002b:00007fc7de868028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1712.760359][T14981] RAX: ffffffffffffffda RBX: 00007fc7ddc15fa0 RCX: 00007fc7dd99ce59 [ 1712.760376][T14981] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1712.760390][T14981] RBP: 00007fc7de868090 R08: 0000200000000080 R09: 000000000000001c [ 1712.760406][T14981] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 1712.760419][T14981] R13: 00007fc7ddc16038 R14: 00007fc7ddc15fa0 R15: 00007ffdfbf32158 [ 1712.760458][T14981] [ 1713.321509][T14995] netlink: 'syz.5.11369': attribute type 1 has an invalid length. [ 1713.422574][T14995] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1713.505976][T15003] xt_NFQUEUE: number of total queues is 0 [ 1713.568337][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11370'. [ 1713.598741][T15004] netlink: 348 bytes leftover after parsing attributes in process `syz.1.11370'. [ 1713.682938][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11372'. [ 1713.704090][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11370'. [ 1713.745849][T15004] netlink: 348 bytes leftover after parsing attributes in process `syz.1.11370'. [ 1713.812136][T15011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11370'. [ 1713.813600][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11370'. [ 1714.351437][T15025] xfrm0 speed is unknown, defaulting to 1000 [ 1714.809089][T15025] lo speed is unknown, defaulting to 1000 [ 1714.982094][T15050] netlink: 'syz.1.11384': attribute type 1 has an invalid length. [ 1715.034030][T15050] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1715.983437][T15081] netlink: 'syz.5.11396': attribute type 1 has an invalid length. [ 1716.217491][T15081] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1716.510127][T15095] FAULT_INJECTION: forcing a failure. [ 1716.510127][T15095] name failslab, interval 1, probability 0, space 0, times 0 [ 1716.553473][T15095] CPU: 1 UID: 0 PID: 15095 Comm: syz.5.11401 Not tainted syzkaller #0 PREEMPT(full) [ 1716.553505][T15095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1716.553520][T15095] Call Trace: [ 1716.553529][T15095] [ 1716.553539][T15095] dump_stack_lvl+0xe8/0x150 [ 1716.553572][T15095] should_fail_ex+0x412/0x560 [ 1716.553604][T15095] should_failslab+0xa8/0x100 [ 1716.553629][T15095] __kmalloc_cache_noprof+0x88/0x660 [ 1716.553662][T15095] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1716.553684][T15095] ? sctp_add_bind_addr+0x8c/0x370 [ 1716.553726][T15095] sctp_add_bind_addr+0x8c/0x370 [ 1716.553776][T15095] sctp_copy_local_addr_list+0x314/0x4f0 [ 1716.553820][T15095] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1716.553856][T15095] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1716.553894][T15095] ? sctp_v6_is_any+0x64/0x80 [ 1716.553918][T15095] ? sctp_copy_one_addr+0x93/0x360 [ 1716.553957][T15095] sctp_bind_addr_copy+0xb3/0x3c0 [ 1716.553993][T15095] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1716.554029][T15095] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1716.554061][T15095] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1716.554097][T15095] ? __local_bh_enable_ip+0xd0/0x130 [ 1716.554119][T15095] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1716.554151][T15095] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1716.554184][T15095] sctp_sendmsg+0x1576/0x2c50 [ 1716.554229][T15095] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1716.554260][T15095] ? aa_sk_perm+0x6d5/0x900 [ 1716.554303][T15095] ? __pfx_aa_sk_perm+0x10/0x10 [ 1716.554361][T15095] ? sock_rps_record_flow+0x19/0x350 [ 1716.554400][T15095] ? inet_sendmsg+0x2f4/0x370 [ 1716.554440][T15095] ____sys_sendmsg+0x80a/0x9f0 [ 1716.554479][T15095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1716.554517][T15095] ? import_iovec+0x73/0xa0 [ 1716.554551][T15095] ___sys_sendmsg+0x2a5/0x360 [ 1716.554576][T15095] ? __lock_acquire+0x6b5/0x2cf0 [ 1716.554607][T15095] ? __pfx____sys_sendmsg+0x10/0x10 [ 1716.554641][T15095] ? kstrtouint+0x6e/0xe0 [ 1716.554708][T15095] ? __fget_files+0x2a/0x420 [ 1716.554734][T15095] ? __fget_files+0x3a0/0x420 [ 1716.554783][T15095] __sys_sendmmsg+0x27c/0x4e0 [ 1716.554817][T15095] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1716.554842][T15095] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1716.554901][T15095] ? ksys_write+0x242/0x270 [ 1716.554938][T15095] ? __pfx_ksys_write+0x10/0x10 [ 1716.554979][T15095] __x64_sys_sendmmsg+0xa0/0xc0 [ 1716.555007][T15095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.555031][T15095] do_syscall_64+0x174/0x580 [ 1716.555055][T15095] ? trace_irq_disable+0x3b/0x140 [ 1716.555089][T15095] ? clear_bhb_loop+0x40/0x90 [ 1716.555118][T15095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.555140][T15095] RIP: 0033:0x7fd29c99ce59 [ 1716.555161][T15095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1716.555181][T15095] RSP: 002b:00007fd29d927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1716.555205][T15095] RAX: ffffffffffffffda RBX: 00007fd29cc15fa0 RCX: 00007fd29c99ce59 [ 1716.555222][T15095] RDX: 0000000000000001 RSI: 00002000000022c0 RDI: 0000000000000004 [ 1716.555235][T15095] RBP: 00007fd29d927090 R08: 0000000000000000 R09: 0000000000000000 [ 1716.555249][T15095] R10: 0000000024040040 R11: 0000000000000246 R12: 0000000000000002 [ 1716.555263][T15095] R13: 00007fd29cc16038 R14: 00007fd29cc15fa0 R15: 00007ffc754109e8 [ 1716.555303][T15095] [ 1716.634332][T17128] Bluetooth: hci6: command 0x0405 tx timeout [ 1717.127089][T15102] netlink: 'syz.0.11406': attribute type 1 has an invalid length. [ 1717.144240][T15102] netlink: 'syz.0.11406': attribute type 2 has an invalid length. [ 1717.503505][T15119] netlink: 'syz.4.11411': attribute type 1 has an invalid length. [ 1717.550727][T15119] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1717.706966][T15134] __nla_validate_parse: 8 callbacks suppressed [ 1717.706986][T15134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11415'. [ 1717.730154][T15135] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1717.946777][T15143] sctp: [Deprecated]: syz.0.11418 (pid 15143) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1717.946777][T15143] Use struct sctp_sack_info instead [ 1718.051645][T15138] xfrm0 speed is unknown, defaulting to 1000 [ 1718.132022][T15149] netlink: 'syz.4.11421': attribute type 3 has an invalid length. [ 1718.148480][T15152] netlink: 'syz.4.11421': attribute type 3 has an invalid length. [ 1718.222736][T15155] FAULT_INJECTION: forcing a failure. [ 1718.222736][T15155] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.262738][T15155] CPU: 1 UID: 0 PID: 15155 Comm: syz.0.11420 Not tainted syzkaller #0 PREEMPT(full) [ 1718.262771][T15155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1718.262785][T15155] Call Trace: [ 1718.262795][T15155] [ 1718.262805][T15155] dump_stack_lvl+0xe8/0x150 [ 1718.262837][T15155] should_fail_ex+0x412/0x560 [ 1718.262869][T15155] should_failslab+0xa8/0x100 [ 1718.262895][T15155] __kmalloc_cache_noprof+0x88/0x660 [ 1718.262928][T15155] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1718.262952][T15155] ? sctp_add_bind_addr+0x8c/0x370 [ 1718.262993][T15155] sctp_add_bind_addr+0x8c/0x370 [ 1718.263035][T15155] sctp_copy_local_addr_list+0x314/0x4f0 [ 1718.263075][T15155] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1718.263111][T15155] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1718.263156][T15155] ? sctp_v6_is_any+0x64/0x80 [ 1718.263181][T15155] ? sctp_copy_one_addr+0x93/0x360 [ 1718.263220][T15155] sctp_bind_addr_copy+0xb3/0x3c0 [ 1718.263256][T15155] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1718.263292][T15155] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1718.263324][T15155] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1718.263362][T15155] ? __local_bh_enable_ip+0xd0/0x130 [ 1718.263384][T15155] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1718.263417][T15155] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1718.263450][T15155] sctp_sendmsg+0x1576/0x2c50 [ 1718.263474][T15155] ? unwind_next_frame+0xa6/0x2550 [ 1718.263520][T15155] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1718.263550][T15155] ? aa_sk_perm+0x6d5/0x900 [ 1718.263592][T15155] ? __pfx_aa_sk_perm+0x10/0x10 [ 1718.263628][T15155] ? sock_rps_record_flow+0x19/0x350 [ 1718.263667][T15155] ? inet_sendmsg+0x2f4/0x370 [ 1718.263705][T15155] ____sys_sendmsg+0x80a/0x9f0 [ 1718.263744][T15155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1718.263783][T15155] ? import_iovec+0x73/0xa0 [ 1718.263816][T15155] ___sys_sendmsg+0x2a5/0x360 [ 1718.263842][T15155] ? __lock_acquire+0x6b5/0x2cf0 [ 1718.263871][T15155] ? __pfx____sys_sendmsg+0x10/0x10 [ 1718.263942][T15155] ? __fget_files+0x2a/0x420 [ 1718.263969][T15155] ? __fget_files+0x3a0/0x420 [ 1718.264010][T15155] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1718.264041][T15155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1718.264080][T15155] ? __pfx_ksys_write+0x10/0x10 [ 1718.264132][T15155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.264158][T15155] do_syscall_64+0x174/0x580 [ 1718.264184][T15155] ? trace_irq_disable+0x3b/0x140 [ 1718.264218][T15155] ? clear_bhb_loop+0x40/0x90 [ 1718.264247][T15155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.264269][T15155] RIP: 0033:0x7f8630b9ce59 [ 1718.264290][T15155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1718.264310][T15155] RSP: 002b:00007f8631a29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1718.264346][T15155] RAX: ffffffffffffffda RBX: 00007f8630e16090 RCX: 00007f8630b9ce59 [ 1718.264362][T15155] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1718.264378][T15155] RBP: 00007f8631a29090 R08: 0000000000000000 R09: 0000000000000000 [ 1718.264392][T15155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1718.264406][T15155] R13: 00007f8630e16128 R14: 00007f8630e16090 R15: 00007fff590fc4a8 [ 1718.264445][T15155] [ 1718.762866][T15159] netlink: 'syz.4.11422': attribute type 14 has an invalid length. [ 1718.985034][T15168] netlink: 'syz.1.11424': attribute type 1 has an invalid length. [ 1719.293793][T15168] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1719.368667][T15138] lo speed is unknown, defaulting to 1000 [ 1719.770382][T15200] tipc: Enabled bearer , priority 0 [ 1719.824366][T15205] syzkaller0: entered promiscuous mode [ 1719.849239][T15205] syzkaller0: entered allmulticast mode [ 1720.480443][T15213] tipc: Resetting bearer [ 1720.509957][T15220] syzkaller0: entered promiscuous mode [ 1720.519418][T15220] syzkaller0: entered allmulticast mode [ 1720.527801][T15223] tipc: Enabled bearer , priority 0 [ 1720.537286][T15198] tipc: Resetting bearer [ 1720.555148][T15212] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1720.562848][T15212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1720.617987][T15198] tipc: Disabling bearer [ 1720.650832][T15227] netlink: 'syz.4.11433': attribute type 1 has an invalid length. [ 1720.744452][T15207] tipc: Resetting bearer [ 1720.827499][T15207] tipc: Disabling bearer [ 1721.128860][T15227] bond10: (slave bridge9): making interface the new active one [ 1721.159816][T15227] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 1721.199930][T15235] macvlan3: entered promiscuous mode [ 1721.217746][T15235] macvlan3: entered allmulticast mode [ 1721.233431][T15235] bond10: entered promiscuous mode [ 1721.248830][T15235] bridge9: entered promiscuous mode [ 1721.263473][T15235] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1721.288269][T15235] bond10: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1721.324280][T15235] bond10: left promiscuous mode [ 1721.339438][T15235] bridge9: left promiscuous mode [ 1721.383559][T15238] vlan3: entered promiscuous mode [ 1721.666462][T15249] netlink: 'syz.0.11439': attribute type 1 has an invalid length. [ 1721.735791][T15247] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1721.782359][T15247] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1721.823567][T15249] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1722.067466][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11441'. [ 1722.349146][T15271] netlink: 'syz.0.11444': attribute type 13 has an invalid length. [ 1722.365471][T15271] netlink: 'syz.0.11444': attribute type 17 has an invalid length. [ 1723.814959][T15304] x_tables: duplicate underflow at hook 2 [ 1724.581105][T15270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1724.659798][T15270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1725.602474][T15270] bond5: left allmulticast mode [ 1725.607462][T15270] bond5: left promiscuous mode [ 1725.693843][T15271] lo: left promiscuous mode [ 1725.701403][T15271] tunl0: left promiscuous mode [ 1725.708853][T15271] gre0: left promiscuous mode [ 1725.723282][T15271] batman_adv: batadv0: Interface activated: vlan2 [ 1725.738088][T15271] erspan0: left promiscuous mode [ 1725.751898][T15271] ip_vti0: left promiscuous mode [ 1725.760423][T15271] ip6_vti0: left promiscuous mode [ 1725.769040][T15271] sit0: left promiscuous mode [ 1725.784753][T15271] ip6tnl0: left promiscuous mode [ 1725.792310][T15271] ip6gre0: left promiscuous mode [ 1725.801253][T15271] syz_tun: left promiscuous mode [ 1725.816045][T15271] ip6gretap0: left promiscuous mode [ 1725.833387][T15271] bridge0: left promiscuous mode [ 1725.840053][T15271] vcan0: left promiscuous mode [ 1725.848963][T15271] bond0: left promiscuous mode [ 1725.855587][T15271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1725.863978][T15271] team0: left promiscuous mode [ 1725.869814][T15271] 8021q: adding VLAN 0 to HW filter on device team0 [ 1725.878469][T15271] nlmon0: left promiscuous mode [ 1725.886009][T15271] batadv0: left promiscuous mode [ 1725.892269][T15271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1725.900495][T15271] vxcan0: left promiscuous mode [ 1725.907123][T15271] vxcan1: left promiscuous mode [ 1725.915805][T15271] veth0: left promiscuous mode [ 1725.922169][T15271] veth1: left promiscuous mode [ 1725.929597][T15271] wg0: left promiscuous mode [ 1725.936745][T15271] wg1: left promiscuous mode [ 1725.943763][T15271] wg2: left promiscuous mode [ 1725.950324][T15271] veth0_to_bridge: left promiscuous mode [ 1725.958742][T15271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.965975][T15271] bridge0: port 1(bridge_slave_0) entered listening state [ 1725.974218][T15271] veth1_to_bridge: left promiscuous mode [ 1725.982353][T15271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.989595][T15271] bridge0: port 2(bridge_slave_1) entered listening state [ 1726.004612][T15271] bond_slave_0: left promiscuous mode [ 1726.011339][T15271] veth1_to_bond: left promiscuous mode [ 1726.019449][T15271] bond_slave_1: left promiscuous mode [ 1726.026709][T15271] veth0_to_team: left promiscuous mode [ 1726.034979][T15271] team_slave_0: left promiscuous mode [ 1726.042751][T15271] veth1_to_team: left promiscuous mode [ 1726.049631][T15271] team_slave_1: left promiscuous mode [ 1726.058487][T15271] veth0_to_batadv: left promiscuous mode [ 1726.065630][T15271] batadv_slave_0: left promiscuous mode [ 1726.073618][T15271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1726.081480][T15271] veth1_to_batadv: left promiscuous mode [ 1726.088640][T15271] batadv_slave_1: left promiscuous mode [ 1726.095727][T15271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1726.105370][T15271] xfrm0: left promiscuous mode [ 1726.111907][T15271] veth0_to_hsr: left promiscuous mode [ 1726.121538][T15271] veth1_to_hsr: left promiscuous mode [ 1726.130157][T15271] hsr0: left promiscuous mode [ 1726.137370][T15271] veth1_virt_wifi: left promiscuous mode [ 1726.144898][T15271] veth0_virt_wifi: left promiscuous mode [ 1726.156580][T15271] virt_wifi0: left promiscuous mode [ 1726.173729][T15271] veth1_vlan: left promiscuous mode [ 1726.185775][T15271] vlan0: left promiscuous mode [ 1726.191996][T15271] veth1_vlan: entered promiscuous mode [ 1726.205227][T15271] veth1_macvtap: left promiscuous mode [ 1726.212149][T15271] veth0_macvtap: left promiscuous mode [ 1726.221088][T15271] veth0_macvtap: entered promiscuous mode [ 1726.237029][T15271] veth1_macvtap: entered promiscuous mode [ 1726.250843][T15271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1726.263723][T15271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1726.277008][T15271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1726.290203][T15271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1726.308417][T15271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1726.329042][T15271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1726.346717][T15271] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1726.362916][T15271] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1726.371146][T15271] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1726.379581][T15271] bond5: entered allmulticast mode [ 1726.385492][T15271] bond5: entered promiscuous mode [ 1726.390727][T15271] macvlan2: left promiscuous mode [ 1726.396199][T15271] bond5: left promiscuous mode [ 1726.401184][T15271] macvlan2: left allmulticast mode [ 1726.406415][T15271] bond5: left allmulticast mode [ 1726.411698][T15271] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1726.421143][T15271] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1726.431049][T15271] veth13: left promiscuous mode [ 1726.443057][T15271] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1726.453997][T15271] geneve3: left promiscuous mode [ 1726.460994][T15271] bond8: left allmulticast mode [ 1726.466688][T15271] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1726.476197][T15271] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1726.484874][T15271] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1726.502258][T15271] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1726.558921][ T7547] bridge5: port 2(veth0_to_bond) entered blocking state [ 1726.566096][ T7547] bridge5: port 2(veth0_to_bond) entered forwarding state [ 1726.578830][ T7547] bridge1: port 1(veth3) entered blocking state [ 1726.585337][ T7547] bridge1: port 1(veth3) entered forwarding state [ 1726.595612][ T7547] bridge2: port 1(veth5) entered blocking state [ 1726.602003][ T7547] bridge2: port 1(veth5) entered forwarding state [ 1726.610592][ T7547] bridge2: port 3(veth7) entered blocking state [ 1726.617086][ T7547] bridge2: port 3(veth7) entered forwarding state [ 1726.625827][ T7547] bridge3: port 1(veth9) entered blocking state [ 1726.632182][ T7547] bridge3: port 1(veth9) entered forwarding state [ 1726.642197][ T7547] bridge3: port 2(veth11) entered blocking state [ 1726.648808][ T7547] bridge3: port 2(veth11) entered forwarding state [ 1726.664888][ T7547] bridge5: port 1(veth17) entered blocking state [ 1726.671482][ T7547] bridge5: port 1(veth17) entered forwarding state [ 1726.683323][T15993] lo speed is unknown, defaulting to 1000 [ 1726.692892][T15281] tipc: Enabled bearer , priority 0 [ 1726.700070][T15282] syzkaller0: entered promiscuous mode [ 1726.707478][T15282] syzkaller0: entered allmulticast mode [ 1726.737397][T15285] tipc: Resetting bearer [ 1726.747016][T11476] lo speed is unknown, defaulting to 1000 [ 1726.776157][ T7539] bond10: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 1726.825523][ T7539] bond10: (slave veth15): making interface the new active one [ 1726.858482][ T7539] bond10: active interface up! [ 1726.887063][T15993] lo speed is unknown, defaulting to 1000 [ 1726.897187][T15285] tipc: Resetting bearer [ 1726.932232][T15285] tipc: Disabling bearer [ 1726.967000][ T7542] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1727.741436][T15332] netlink: 'syz.0.11458': attribute type 1 has an invalid length. [ 1727.778008][ T4951] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1727.796541][ T4951] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1727.807732][ T4951] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1727.822486][ T4951] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1727.839496][ T4951] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1727.942293][T15332] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1728.311965][T15343] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11460'. [ 1728.346267][T15343] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11460'. [ 1728.368863][T15343] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11460'. [ 1728.414330][T15343] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1728.651855][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e492c00: rx timeout, send abort [ 1728.828413][T15355] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 1728.890593][T15362] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1728.904676][T15333] xfrm0 speed is unknown, defaulting to 1000 [ 1728.911071][T15362] xt_hashlimit: size too large, truncated to 1048576 [ 1728.920915][T15360] tipc: Enabled bearer , priority 0 [ 1728.947616][T15360] syzkaller0: entered promiscuous mode [ 1728.965844][T15363] netlink: 'syz.4.11465': attribute type 1 has an invalid length. [ 1728.972931][T15360] syzkaller0: entered allmulticast mode [ 1728.991713][T15363] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11465'. [ 1729.090660][T15360] tipc: Resetting bearer [ 1729.150976][T15359] tipc: Resetting bearer [ 1729.152030][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e490000: rx timeout, send abort [ 1729.165481][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e492c00: abort rx timeout. Force session deactivation [ 1729.297852][T15359] tipc: Disabling bearer [ 1729.574838][T15368] xfrm0 speed is unknown, defaulting to 1000 [ 1729.585019][T15333] lo speed is unknown, defaulting to 1000 [ 1729.665156][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e490000: abort rx timeout. Force session deactivation [ 1729.850798][T15382] netlink: 256 bytes leftover after parsing attributes in process `syz.0.11469'. [ 1729.902215][T15382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.913273][T17128] Bluetooth: hci7: command tx timeout [ 1729.956958][T15382] bridge_slave_0 (unregistering): left allmulticast mode [ 1729.968625][T15382] bridge_slave_0 (unregistering): left promiscuous mode [ 1729.977009][T15382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.140531][T15368] lo speed is unknown, defaulting to 1000 [ 1730.397222][ T1316] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1731.033735][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1731.048056][T15333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.081287][T15333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.124983][T15333] bridge_slave_0: entered allmulticast mode [ 1731.167864][T15333] bridge_slave_0: entered promiscuous mode [ 1731.203761][T15333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.222690][T15333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.236014][T15333] bridge_slave_1: entered allmulticast mode [ 1731.264873][T15333] bridge_slave_1: entered promiscuous mode [ 1731.389284][T15333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1731.424218][T15333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1731.459862][T15414] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11477'. [ 1731.498017][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11477'. [ 1731.548952][T15333] team0: Port device team_slave_0 added [ 1731.577253][T15333] team0: Port device team_slave_1 added [ 1731.646602][T15333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1731.662191][T15333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1731.691880][T15333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1731.716240][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11477'. [ 1731.740320][T15333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1731.757423][T15333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1731.820292][T15333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1731.951773][T15333] hsr_slave_0: entered promiscuous mode [ 1731.960564][T15333] hsr_slave_1: entered promiscuous mode [ 1731.969226][T15333] debugfs: 'hsr0' already exists in 'hsr' [ 1731.975240][T15333] Cannot create hsr debugfs directory [ 1731.995511][T17128] Bluetooth: hci7: command tx timeout [ 1732.196686][T15333] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1732.208451][T15333] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.301339][T15333] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1732.311754][T15333] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.451767][T15333] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1732.471983][T15333] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.541991][T15333] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1732.553682][T15333] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.830597][T15333] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1732.862162][T15333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1732.887302][T15333] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1732.900049][T15333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1732.927900][T15333] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1732.952875][T15333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1732.979073][T15333] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1733.017472][T15333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1733.166458][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11486'. [ 1733.249416][T15333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1733.299271][T15333] 8021q: adding VLAN 0 to HW filter on device team0 [ 1733.330236][ T7545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.337558][ T7545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1733.395678][ T7545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.402946][ T7545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1734.078757][T17128] Bluetooth: hci7: command tx timeout [ 1734.115853][T15464] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.11490'. [ 1734.220752][T15465] xfrm0 speed is unknown, defaulting to 1000 [ 1734.420574][T15479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1734.612682][T15333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1734.661705][T15487] FAULT_INJECTION: forcing a failure. [ 1734.661705][T15487] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1734.696867][T15487] CPU: 0 UID: 0 PID: 15487 Comm: syz.6.11496 Not tainted syzkaller #0 PREEMPT(full) [ 1734.696899][T15487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1734.696913][T15487] Call Trace: [ 1734.696922][T15487] [ 1734.696932][T15487] dump_stack_lvl+0xe8/0x150 [ 1734.696964][T15487] should_fail_ex+0x412/0x560 [ 1734.696995][T15487] prepare_alloc_pages+0x22a/0x650 [ 1734.697040][T15487] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1734.697066][T15487] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1734.697122][T15487] __alloc_pages_noprof+0x10/0x100 [ 1734.697162][T15487] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 1734.697204][T15487] ? __kmalloc_noprof+0x37d/0x760 [ 1734.697236][T15487] ? copy_splice_read+0x16f/0xaa0 [ 1734.697263][T15487] ? __kmalloc_noprof+0x1b8/0x760 [ 1734.697300][T15487] copy_splice_read+0x19f/0xaa0 [ 1734.697336][T15487] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1734.697371][T15487] ? __pfx_copy_splice_read+0x10/0x10 [ 1734.697409][T15487] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1734.697442][T15487] ? file_end_write+0x156/0x250 [ 1734.697486][T15487] ? direct_splice_actor+0x10c/0x160 [ 1734.697519][T15487] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 1734.697550][T15487] splice_direct_to_actor+0x4a0/0xc70 [ 1734.697592][T15487] ? __pfx_direct_splice_actor+0x10/0x10 [ 1734.697632][T15487] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1734.697676][T15487] do_splice_direct+0x195/0x290 [ 1734.697709][T15487] ? __pfx_do_splice_direct+0x10/0x10 [ 1734.697740][T15487] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1734.697790][T15487] ? rw_verify_area+0x255/0x4d0 [ 1734.697828][T15487] do_sendfile+0x535/0x7d0 [ 1734.697855][T15487] ? __pfx_vfs_write+0x10/0x10 [ 1734.697893][T15487] ? __pfx_do_sendfile+0x10/0x10 [ 1734.697919][T15487] ? __fget_files+0x3a0/0x420 [ 1734.697959][T15487] __se_sys_sendfile64+0x144/0x1a0 [ 1734.697988][T15487] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1734.698024][T15487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.698050][T15487] do_syscall_64+0x174/0x580 [ 1734.698074][T15487] ? trace_irq_disable+0x3b/0x140 [ 1734.698108][T15487] ? clear_bhb_loop+0x40/0x90 [ 1734.698134][T15487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.698156][T15487] RIP: 0033:0x7fd536d9ce59 [ 1734.698176][T15487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1734.698194][T15487] RSP: 002b:00007fd537c92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1734.698218][T15487] RAX: ffffffffffffffda RBX: 00007fd537015fa0 RCX: 00007fd536d9ce59 [ 1734.698235][T15487] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008 [ 1734.698249][T15487] RBP: 00007fd537c92090 R08: 0000000000000000 R09: 0000000000000000 [ 1734.698262][T15487] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000003 [ 1734.698276][T15487] R13: 00007fd537016038 R14: 00007fd537015fa0 R15: 00007fffbb0f2b08 [ 1734.698313][T15487] [ 1734.700543][T15333] veth0_vlan: entered promiscuous mode [ 1735.050205][T15333] veth1_vlan: entered promiscuous mode [ 1735.141647][T15333] veth0_macvtap: entered promiscuous mode [ 1735.160790][T15333] veth1_macvtap: entered promiscuous mode [ 1735.198853][T15491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11498'. [ 1735.232350][T15333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1735.250257][T15465] lo speed is unknown, defaulting to 1000 [ 1735.285019][T15333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1735.338123][ T7547] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.387638][ T7547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.405749][T15495] FAULT_INJECTION: forcing a failure. [ 1735.405749][T15495] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.431127][T15497] openvswitch: netlink: Key type 70 is out of range max 32 [ 1735.439198][T15495] CPU: 0 UID: 0 PID: 15495 Comm: syz.5.11500 Not tainted syzkaller #0 PREEMPT(full) [ 1735.439227][T15495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1735.439241][T15495] Call Trace: [ 1735.439250][T15495] [ 1735.439260][T15495] dump_stack_lvl+0xe8/0x150 [ 1735.439292][T15495] should_fail_ex+0x412/0x560 [ 1735.439323][T15495] should_failslab+0xa8/0x100 [ 1735.439346][T15495] ? skb_clone+0x212/0x3a0 [ 1735.439373][T15495] kmem_cache_alloc_noprof+0x87/0x650 [ 1735.439406][T15495] ? __netlink_lookup+0xc6/0x8b0 [ 1735.439441][T15495] skb_clone+0x212/0x3a0 [ 1735.439472][T15495] __netlink_deliver_tap+0x404/0x850 [ 1735.439513][T15495] ? netlink_deliver_tap+0x2e/0x1b0 [ 1735.439553][T15495] netlink_deliver_tap+0x19c/0x1b0 [ 1735.439582][T15495] netlink_unicast+0x730/0x8e0 [ 1735.439619][T15495] netlink_sendmsg+0x813/0xb40 [ 1735.439657][T15495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1735.439689][T15495] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1735.439725][T15495] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1735.439761][T15495] ____sys_sendmsg+0x972/0x9f0 [ 1735.439788][T15495] ? __might_fault+0xaf/0x130 [ 1735.439826][T15495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1735.439863][T15495] ? import_iovec+0x73/0xa0 [ 1735.439896][T15495] ___sys_sendmsg+0x2a5/0x360 [ 1735.439922][T15495] ? __lock_acquire+0x6b5/0x2cf0 [ 1735.439951][T15495] ? __pfx____sys_sendmsg+0x10/0x10 [ 1735.440024][T15495] ? __fget_files+0x2a/0x420 [ 1735.440052][T15495] ? __fget_files+0x3a0/0x420 [ 1735.440093][T15495] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1735.440124][T15495] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1735.440161][T15495] ? __pfx_ksys_write+0x10/0x10 [ 1735.440204][T15495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.440228][T15495] do_syscall_64+0x174/0x580 [ 1735.440253][T15495] ? trace_irq_disable+0x3b/0x140 [ 1735.440286][T15495] ? clear_bhb_loop+0x40/0x90 [ 1735.440313][T15495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.440335][T15495] RIP: 0033:0x7fd29c99ce59 [ 1735.440356][T15495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1735.440376][T15495] RSP: 002b:00007fd29d927028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1735.440400][T15495] RAX: ffffffffffffffda RBX: 00007fd29cc15fa0 RCX: 00007fd29c99ce59 [ 1735.440418][T15495] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000003 [ 1735.440432][T15495] RBP: 00007fd29d927090 R08: 0000000000000000 R09: 0000000000000000 [ 1735.440447][T15495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.440460][T15495] R13: 00007fd29cc16038 R14: 00007fd29cc15fa0 R15: 00007ffc754109e8 [ 1735.440498][T15495] [ 1735.469864][ T7547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.750976][ T7547] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.846265][T15500] FAULT_INJECTION: forcing a failure. [ 1735.846265][T15500] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.891522][T15500] CPU: 1 UID: 0 PID: 15500 Comm: syz.6.11502 Not tainted syzkaller #0 PREEMPT(full) [ 1735.891548][T15500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1735.891565][T15500] Call Trace: [ 1735.891573][T15500] [ 1735.891582][T15500] dump_stack_lvl+0xe8/0x150 [ 1735.891612][T15500] should_fail_ex+0x412/0x560 [ 1735.891639][T15500] should_failslab+0xa8/0x100 [ 1735.891664][T15500] __kmalloc_cache_noprof+0x88/0x660 [ 1735.891693][T15500] ? sctp_v6_cmp_addr+0x15/0xd0 [ 1735.891714][T15500] ? sctp_add_bind_addr+0x8c/0x370 [ 1735.891751][T15500] sctp_add_bind_addr+0x8c/0x370 [ 1735.891786][T15500] sctp_copy_local_addr_list+0x314/0x4f0 [ 1735.891824][T15500] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1735.891855][T15500] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1735.891888][T15500] ? sctp_v6_is_any+0x64/0x80 [ 1735.891908][T15500] ? sctp_copy_one_addr+0x93/0x360 [ 1735.891943][T15500] sctp_bind_addr_copy+0xb3/0x3c0 [ 1735.891974][T15500] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1735.892009][T15500] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1735.892036][T15500] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1735.892065][T15500] ? __local_bh_enable_ip+0xd0/0x130 [ 1735.892085][T15500] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1735.892125][T15500] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1735.892153][T15500] sctp_sendmsg+0x1576/0x2c50 [ 1735.892189][T15500] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1735.892215][T15500] ? aa_sk_perm+0x6d5/0x900 [ 1735.892252][T15500] ? __pfx_aa_sk_perm+0x10/0x10 [ 1735.892281][T15500] ? sock_rps_record_flow+0x19/0x350 [ 1735.892314][T15500] ? inet_sendmsg+0x2f4/0x370 [ 1735.892350][T15500] ____sys_sendmsg+0x80a/0x9f0 [ 1735.892382][T15500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1735.892413][T15500] ? import_iovec+0x73/0xa0 [ 1735.892441][T15500] ___sys_sendmsg+0x2a5/0x360 [ 1735.892462][T15500] ? __lock_acquire+0x6b5/0x2cf0 [ 1735.892487][T15500] ? __pfx____sys_sendmsg+0x10/0x10 [ 1735.892515][T15500] ? kstrtouint+0x6e/0xe0 [ 1735.892569][T15500] ? __fget_files+0x2a/0x420 [ 1735.892592][T15500] ? __fget_files+0x3a0/0x420 [ 1735.892628][T15500] __sys_sendmmsg+0x27c/0x4e0 [ 1735.892657][T15500] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1735.892680][T15500] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1735.892755][T15500] ? ksys_write+0x242/0x270 [ 1735.892792][T15500] ? __pfx_ksys_write+0x10/0x10 [ 1735.892833][T15500] __x64_sys_sendmmsg+0xa0/0xc0 [ 1735.892860][T15500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.892884][T15500] do_syscall_64+0x174/0x580 [ 1735.892908][T15500] ? trace_irq_disable+0x3b/0x140 [ 1735.892942][T15500] ? clear_bhb_loop+0x40/0x90 [ 1735.892970][T15500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1735.892992][T15500] RIP: 0033:0x7fd536d9ce59 [ 1735.893013][T15500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1735.893032][T15500] RSP: 002b:00007fd537c92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1735.893055][T15500] RAX: ffffffffffffffda RBX: 00007fd537015fa0 RCX: 00007fd536d9ce59 [ 1735.893073][T15500] RDX: 0000000000000001 RSI: 00002000000022c0 RDI: 0000000000000004 [ 1735.893087][T15500] RBP: 00007fd537c92090 R08: 0000000000000000 R09: 0000000000000000 [ 1735.893109][T15500] R10: 0000000024040040 R11: 0000000000000246 R12: 0000000000000002 [ 1735.893123][T15500] R13: 00007fd537016038 R14: 00007fd537015fa0 R15: 00007fffbb0f2b08 [ 1735.893159][T15500] [ 1736.165179][T17128] Bluetooth: hci7: command tx timeout [ 1736.463111][T15509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1736.484739][ T7539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.506040][ T7539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.630506][ T7547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.648178][ T7547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.660552][T15516] mac80211_hwsim hwsim178 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1736.683197][T15516] netlink: 88 bytes leftover after parsing attributes in process `syz.6.11509'. [ 1736.776760][T15516] ip6tnl1: entered promiscuous mode [ 1736.875947][T15526] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.11456'. [ 1736.910025][T15526] netlink: Unknown conntrack attr (type=2304, max=9) [ 1736.984835][T15530] FAULT_INJECTION: forcing a failure. [ 1736.984835][T15530] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.014952][T15530] CPU: 0 UID: 0 PID: 15530 Comm: syz.6.11512 Not tainted syzkaller #0 PREEMPT(full) [ 1737.014984][T15530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1737.014999][T15530] Call Trace: [ 1737.015009][T15530] [ 1737.015018][T15530] dump_stack_lvl+0xe8/0x150 [ 1737.015051][T15530] should_fail_ex+0x412/0x560 [ 1737.015082][T15530] should_failslab+0xa8/0x100 [ 1737.015108][T15530] __kmalloc_cache_noprof+0x88/0x660 [ 1737.015142][T15530] ? sctp_add_bind_addr+0x8c/0x370 [ 1737.015176][T15530] ? __pfx_sctp_get_port_local+0x10/0x10 [ 1737.015209][T15530] sctp_add_bind_addr+0x8c/0x370 [ 1737.015242][T15530] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 1737.015274][T15530] sctp_do_bind+0x5b2/0x9d0 [ 1737.015316][T15530] sctp_connect_new_asoc+0x270/0x6b0 [ 1737.015347][T15530] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1737.015383][T15530] ? __local_bh_enable_ip+0xd0/0x130 [ 1737.015406][T15530] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1737.015439][T15530] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1737.015473][T15530] sctp_sendmsg+0x1576/0x2c50 [ 1737.015497][T15530] ? unwind_next_frame+0xa6/0x2550 [ 1737.015542][T15530] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1737.015573][T15530] ? aa_sk_perm+0x6d5/0x900 [ 1737.015615][T15530] ? __pfx_aa_sk_perm+0x10/0x10 [ 1737.015651][T15530] ? sock_rps_record_flow+0x19/0x350 [ 1737.015690][T15530] ? inet_sendmsg+0x2f4/0x370 [ 1737.015730][T15530] ____sys_sendmsg+0x80a/0x9f0 [ 1737.015769][T15530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1737.015804][T15530] ? import_iovec+0x73/0xa0 [ 1737.015834][T15530] ___sys_sendmsg+0x2a5/0x360 [ 1737.015858][T15530] ? __lock_acquire+0x6b5/0x2cf0 [ 1737.015887][T15530] ? __pfx____sys_sendmsg+0x10/0x10 [ 1737.015965][T15530] ? __fget_files+0x2a/0x420 [ 1737.015992][T15530] ? __fget_files+0x3a0/0x420 [ 1737.016031][T15530] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1737.016062][T15530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1737.016098][T15530] ? __pfx_ksys_write+0x10/0x10 [ 1737.016141][T15530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.016166][T15530] do_syscall_64+0x174/0x580 [ 1737.016194][T15530] ? clear_bhb_loop+0x40/0x90 [ 1737.016221][T15530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.016244][T15530] RIP: 0033:0x7fd536d9ce59 [ 1737.016265][T15530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.016284][T15530] RSP: 002b:00007fd537c92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1737.016308][T15530] RAX: ffffffffffffffda RBX: 00007fd537015fa0 RCX: 00007fd536d9ce59 [ 1737.016325][T15530] RDX: 0000000000040085 RSI: 0000200000001dc0 RDI: 0000000000000003 [ 1737.016340][T15530] RBP: 00007fd537c92090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.016355][T15530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.016369][T15530] R13: 00007fd537016038 R14: 00007fd537015fa0 R15: 00007fffbb0f2b08 [ 1737.016406][T15530] [ 1738.068618][T15554] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.11518'. [ 1738.106793][T15556] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11519'. [ 1738.143479][T15556] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11519'. [ 1738.329845][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11521'. [ 1738.357056][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11521'. [ 1738.679810][T15575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11523'. [ 1738.736167][T15575] hsr_slave_0: left promiscuous mode [ 1738.777385][T15575] hsr_slave_1: left promiscuous mode [ 1738.917853][T15580] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1739.038737][T15591] netlink: 'syz.0.11532': attribute type 15 has an invalid length. [ 1739.215885][T15588] xfrm0 speed is unknown, defaulting to 1000 [ 1739.355099][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1739.428138][T15603] __nla_validate_parse: 3 callbacks suppressed [ 1739.428174][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11535'. [ 1739.454602][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11535'. [ 1739.529082][ T7538] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1739.542029][ T7538] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1739.572321][ T7538] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1739.604973][ T7538] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1739.683722][T15588] lo speed is unknown, defaulting to 1000 [ 1739.695703][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11537'. [ 1739.983992][T15619] netlink: 'syz.0.11540': attribute type 3 has an invalid length. [ 1740.003543][T15617] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11539'. [ 1740.039862][T15617] vlan2: entered promiscuous mode [ 1740.068040][T15617] geneve1: entered promiscuous mode [ 1740.074661][T15617] vlan2: entered allmulticast mode [ 1740.080295][T15617] geneve1: entered allmulticast mode [ 1740.293043][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11543'. [ 1740.537843][T15629] bridge5: port 2(veth0_to_bond) entered disabled state [ 1740.560330][T15629] veth0_to_bond: left allmulticast mode [ 1740.576105][T15629] veth0_to_bond: left promiscuous mode [ 1740.595956][T15629] bridge5: port 2(veth0_to_bond) entered disabled state [ 1741.067974][T15642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11547'. [ 1741.160248][T15645] netlink: 'syz.0.11548': attribute type 8 has an invalid length. [ 1741.273113][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1741.905761][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11560'. [ 1742.041677][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11560'. [ 1742.439428][T15695] xfrm0 speed is unknown, defaulting to 1000 [ 1743.250718][T15695] lo speed is unknown, defaulting to 1000 [ 1743.324766][T15727] netlink: 296 bytes leftover after parsing attributes in process `syz.5.11576'. [ 1743.477336][T15733] netlink: 'syz.4.11578': attribute type 14 has an invalid length. [ 1743.602158][T15737] netlink: 'syz.4.11581': attribute type 23 has an invalid length. [ 1743.610585][T15737] FAULT_INJECTION: forcing a failure. [ 1743.610585][T15737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1743.638884][T15737] CPU: 1 UID: 0 PID: 15737 Comm: syz.4.11581 Not tainted syzkaller #0 PREEMPT(full) [ 1743.638915][T15737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1743.638929][T15737] Call Trace: [ 1743.638939][T15737] [ 1743.638949][T15737] dump_stack_lvl+0xe8/0x150 [ 1743.638981][T15737] should_fail_ex+0x412/0x560 [ 1743.639012][T15737] _copy_from_user+0x2d/0xb0 [ 1743.639043][T15737] ___sys_sendmsg+0x1c6/0x360 [ 1743.639069][T15737] ? __lock_acquire+0x6b5/0x2cf0 [ 1743.639098][T15737] ? __pfx____sys_sendmsg+0x10/0x10 [ 1743.639121][T15737] ? __lock_acquire+0x6b5/0x2cf0 [ 1743.639149][T15737] ? kstrtouint+0x6e/0xe0 [ 1743.639225][T15737] __sys_sendmmsg+0x27c/0x4e0 [ 1743.639258][T15737] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1743.639283][T15737] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1743.639340][T15737] ? ksys_write+0x242/0x270 [ 1743.639376][T15737] ? __pfx_ksys_write+0x10/0x10 [ 1743.639417][T15737] __x64_sys_sendmmsg+0xa0/0xc0 [ 1743.639444][T15737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.639468][T15737] do_syscall_64+0x174/0x580 [ 1743.639492][T15737] ? trace_irq_disable+0x3b/0x140 [ 1743.639538][T15737] ? clear_bhb_loop+0x40/0x90 [ 1743.639566][T15737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.639589][T15737] RIP: 0033:0x7ff158b9ce59 [ 1743.639609][T15737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.639628][T15737] RSP: 002b:00007ff159a7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1743.639653][T15737] RAX: ffffffffffffffda RBX: 00007ff158e15fa0 RCX: 00007ff158b9ce59 [ 1743.639670][T15737] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1743.639687][T15737] RBP: 00007ff159a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 1743.639700][T15737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.639714][T15737] R13: 00007ff158e16038 R14: 00007ff158e15fa0 R15: 00007ffd991195f8 [ 1743.639753][T15737] [ 1744.164870][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11583'. [ 1744.180458][T15748] macvtap1: entered promiscuous mode [ 1744.199049][T15748] bridge0: entered promiscuous mode [ 1744.206184][T15748] bridge0: port 1(macvtap1) entered blocking state [ 1744.213497][T15748] bridge0: port 1(macvtap1) entered disabled state [ 1744.229575][T15748] macvtap1: entered allmulticast mode [ 1744.238192][T15748] bridge0: entered allmulticast mode [ 1744.276168][T15748] macvtap1: left allmulticast mode [ 1744.309068][T15748] bridge0: left allmulticast mode [ 1744.430970][T27205] bridge0: left promiscuous mode [ 1744.784839][T15765] FAULT_INJECTION: forcing a failure. [ 1744.784839][T15765] name failslab, interval 1, probability 0, space 0, times 0 [ 1744.820334][T15765] CPU: 0 UID: 0 PID: 15765 Comm: syz.5.11591 Not tainted syzkaller #0 PREEMPT(full) [ 1744.820367][T15765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1744.820381][T15765] Call Trace: [ 1744.820391][T15765] [ 1744.820401][T15765] dump_stack_lvl+0xe8/0x150 [ 1744.820434][T15765] should_fail_ex+0x412/0x560 [ 1744.820466][T15765] should_failslab+0xa8/0x100 [ 1744.820493][T15765] __kmalloc_cache_noprof+0x88/0x660 [ 1744.820528][T15765] ? qdisc_get_rtab+0x211/0x470 [ 1744.820647][T15765] qdisc_get_rtab+0x211/0x470 [ 1744.820676][T15765] ? tbf_change+0x266/0x16d0 [ 1744.820776][T15765] tbf_change+0x278/0x16d0 [ 1744.820812][T15765] ? __lock_acquire+0x6b5/0x2cf0 [ 1744.820844][T15765] ? __lock_acquire+0x6b5/0x2cf0 [ 1744.820870][T15765] ? __pfx_tbf_change+0x10/0x10 [ 1744.820906][T15765] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1744.820931][T15765] ? lockdep_hardirqs_on+0x7a/0x110 [ 1744.820963][T15765] ? do_raw_spin_lock+0x12b/0x2f0 [ 1744.821013][T15765] ? ktime_get+0x45/0x220 [ 1744.821050][T15765] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1744.821087][T15765] ? ktime_get+0x45/0x220 [ 1744.821118][T15765] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1744.821154][T15765] ? ktime_get+0x1f5/0x220 [ 1744.821192][T15765] ? __pfx_tbf_init+0x10/0x10 [ 1744.821223][T15765] qdisc_create+0x7c4/0xf20 [ 1744.821261][T15765] ? lockdep_rtnl_is_held+0x26/0x40 [ 1744.821298][T15765] tc_modify_qdisc+0x16f0/0x2290 [ 1744.821330][T15765] ? rcu_is_watching+0x15/0xb0 [ 1744.821371][T15765] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1744.821405][T15765] ? __dev_queue_xmit+0x2b6/0x3950 [ 1744.821462][T15765] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1744.821495][T15765] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1744.821523][T15765] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1744.821545][T15765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1744.821565][T15765] ? ref_tracker_free+0x693/0x840 [ 1744.821594][T15765] ? __pfx_ref_tracker_free+0x10/0x10 [ 1744.821633][T15765] netlink_rcv_skb+0x232/0x4b0 [ 1744.821660][T15765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1744.821686][T15765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1744.821727][T15765] ? netlink_deliver_tap+0x2e/0x1b0 [ 1744.821763][T15765] ? netlink_deliver_tap+0x2e/0x1b0 [ 1744.821796][T15765] netlink_unicast+0x75c/0x8e0 [ 1744.821832][T15765] netlink_sendmsg+0x813/0xb40 [ 1744.821870][T15765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1744.821902][T15765] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1744.821939][T15765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1744.821974][T15765] ____sys_sendmsg+0x972/0x9f0 [ 1744.822001][T15765] ? __might_fault+0xaf/0x130 [ 1744.822038][T15765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1744.822076][T15765] ? import_iovec+0x73/0xa0 [ 1744.822106][T15765] ___sys_sendmsg+0x2a5/0x360 [ 1744.822130][T15765] ? __lock_acquire+0x6b5/0x2cf0 [ 1744.822158][T15765] ? __pfx____sys_sendmsg+0x10/0x10 [ 1744.822223][T15765] ? __fget_files+0x2a/0x420 [ 1744.822249][T15765] ? __fget_files+0x3a0/0x420 [ 1744.822289][T15765] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1744.822319][T15765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1744.822356][T15765] ? __pfx_ksys_write+0x10/0x10 [ 1744.822399][T15765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1744.822425][T15765] do_syscall_64+0x174/0x580 [ 1744.822449][T15765] ? trace_irq_disable+0x3b/0x140 [ 1744.822483][T15765] ? clear_bhb_loop+0x40/0x90 [ 1744.822512][T15765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1744.822535][T15765] RIP: 0033:0x7fd29c99ce59 [ 1744.822558][T15765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1744.822578][T15765] RSP: 002b:00007fd29d927028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1744.822602][T15765] RAX: ffffffffffffffda RBX: 00007fd29cc15fa0 RCX: 00007fd29c99ce59 [ 1744.822619][T15765] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000003 [ 1744.822634][T15765] RBP: 00007fd29d927090 R08: 0000000000000000 R09: 0000000000000000 [ 1744.822649][T15765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1744.822662][T15765] R13: 00007fd29cc16038 R14: 00007fd29cc15fa0 R15: 00007ffc754109e8 [ 1744.822701][T15765] [ 1745.312771][T15765] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1746.505419][T15793] __nla_validate_parse: 1 callbacks suppressed [ 1746.505441][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11601'. [ 1746.671145][T15798] xt_l2tp: invalid flags combination: 8 [ 1747.427956][T15808] netlink: 'syz.1.11607': attribute type 58 has an invalid length. [ 1747.440072][T15808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11607'. [ 1747.772149][T15821] netlink: 89 bytes leftover after parsing attributes in process `syz.6.11613'. [ 1747.816836][T15825] bond0: Error: CAN devices cannot be enslaved [ 1747.877250][T15817] FAULT_INJECTION: forcing a failure. [ 1747.877250][T15817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1747.913124][T15817] CPU: 0 UID: 0 PID: 15817 Comm: syz.1.11611 Not tainted syzkaller #0 PREEMPT(full) [ 1747.913156][T15817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1747.913171][T15817] Call Trace: [ 1747.913180][T15817] [ 1747.913190][T15817] dump_stack_lvl+0xe8/0x150 [ 1747.913223][T15817] should_fail_ex+0x412/0x560 [ 1747.913254][T15817] _copy_from_user+0x2d/0xb0 [ 1747.913283][T15817] do_sys_poll+0x2a3/0x10e0 [ 1747.913327][T15817] ? __lock_acquire+0x6b5/0x2cf0 [ 1747.913353][T15817] ? __pfx_do_sys_poll+0x10/0x10 [ 1747.913387][T15817] ? aa_file_perm+0x192/0x15e0 [ 1747.913485][T15817] ? cgroup1_freezing+0x20/0x350 [ 1747.913548][T15817] ? cgroup1_freezing+0x20/0x350 [ 1747.913573][T15817] ? cgroup1_freezing+0x20/0x350 [ 1747.913601][T15817] ? cgroup1_freezing+0x29a/0x350 [ 1747.913654][T15817] ? set_user_sigmask+0x160/0x1c0 [ 1747.913678][T15817] ? __pfx_set_user_sigmask+0x10/0x10 [ 1747.913715][T15817] __se_sys_ppoll+0x209/0x2b0 [ 1747.913748][T15817] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1747.913775][T15817] ? __pfx_ksys_write+0x10/0x10 [ 1747.913815][T15817] ? __x64_sys_ppoll+0x20/0xc0 [ 1747.913840][T15817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.913866][T15817] do_syscall_64+0x174/0x580 [ 1747.913891][T15817] ? trace_irq_disable+0x3b/0x140 [ 1747.913924][T15817] ? clear_bhb_loop+0x40/0x90 [ 1747.913952][T15817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.913976][T15817] RIP: 0033:0x7ff5b699ce59 [ 1747.914006][T15817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1747.914026][T15817] RSP: 002b:00007ff5b77b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1747.914050][T15817] RAX: ffffffffffffffda RBX: 00007ff5b6c15fa0 RCX: 00007ff5b699ce59 [ 1747.914068][T15817] RDX: 0000200000000640 RSI: 0000000000000006 RDI: 0000200000000600 [ 1747.914083][T15817] RBP: 00007ff5b77b4090 R08: 0000000000000008 R09: 0000000000000000 [ 1747.914097][T15817] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 1747.914115][T15817] R13: 00007ff5b6c16038 R14: 00007ff5b6c15fa0 R15: 00007ffef5749e98 [ 1747.914152][T15817] [ 1748.150875][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11614'. [ 1748.308929][T15833] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1748.323404][T15833] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1748.441293][T15846] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.11618'. [ 1748.467805][T15846] netlink: 'syz.6.11618': attribute type 1 has an invalid length. [ 1748.491392][T15846] netlink: 96 bytes leftover after parsing attributes in process `syz.6.11618'. [ 1748.529102][T15846] netlink: 1 bytes leftover after parsing attributes in process `syz.6.11618'. [ 1748.547844][T15846] netlink: 658 bytes leftover after parsing attributes in process `syz.6.11618'. [ 1748.617804][T15836] xfrm0 speed is unknown, defaulting to 1000 [ 1749.337974][T15889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11629'. [ 1749.526310][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11629'. [ 1749.541702][T15836] lo speed is unknown, defaulting to 1000 [ 1749.685121][T15902] tipc: Enabled bearer , priority 0 [ 1749.706232][T15902] syzkaller0: entered promiscuous mode [ 1749.723100][T15902] syzkaller0: entered allmulticast mode [ 1749.813218][T15902] tipc: Resetting bearer [ 1749.856115][T15901] tipc: Resetting bearer [ 1749.861574][T15911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1749.875216][T15909] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1749.938825][T15901] tipc: Disabling bearer [ 1750.158609][T15920] FAULT_INJECTION: forcing a failure. [ 1750.158609][T15920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1750.192708][T15920] CPU: 0 UID: 0 PID: 15920 Comm: syz.4.11643 Not tainted syzkaller #0 PREEMPT(full) [ 1750.192739][T15920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1750.192754][T15920] Call Trace: [ 1750.192763][T15920] [ 1750.192773][T15920] dump_stack_lvl+0xe8/0x150 [ 1750.192805][T15920] should_fail_ex+0x412/0x560 [ 1750.192835][T15920] _copy_from_user+0x2d/0xb0 [ 1750.192864][T15920] kstrtouint_from_user+0xd6/0x180 [ 1750.192886][T15920] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1750.192928][T15920] proc_fail_nth_write+0x8e/0x210 [ 1750.192959][T15920] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1750.192996][T15920] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1750.193028][T15920] vfs_write+0x29a/0xb90 [ 1750.193072][T15920] ? __pfx_vfs_write+0x10/0x10 [ 1750.193106][T15920] ? __fget_files+0x2a/0x420 [ 1750.193140][T15920] ? __fget_files+0x3a0/0x420 [ 1750.193166][T15920] ? __fget_files+0x2a/0x420 [ 1750.193204][T15920] ksys_write+0x150/0x270 [ 1750.193239][T15920] ? __pfx_ksys_write+0x10/0x10 [ 1750.193283][T15920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.193307][T15920] do_syscall_64+0x174/0x580 [ 1750.193332][T15920] ? trace_irq_disable+0x3b/0x140 [ 1750.193491][T15920] ? clear_bhb_loop+0x40/0x90 [ 1750.193524][T15920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.193547][T15920] RIP: 0033:0x7ff158b5d68e [ 1750.193568][T15920] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1750.193588][T15920] RSP: 002b:00007ff159a7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1750.193611][T15920] RAX: ffffffffffffffda RBX: 00007ff159a7b6c0 RCX: 00007ff158b5d68e [ 1750.193627][T15920] RDX: 0000000000000001 RSI: 00007ff159a7b0a0 RDI: 000000000000000a [ 1750.193641][T15920] RBP: 00007ff159a7b090 R08: 0000000000000000 R09: 0000000000000000 [ 1750.193655][T15920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1750.193667][T15920] R13: 00007ff158e16038 R14: 00007ff158e15fa0 R15: 00007ffd991195f8 [ 1750.193704][T15920] [ 1750.894386][T15943] tipc: Enabled bearer , priority 0 [ 1750.916459][T15943] syzkaller0: entered promiscuous mode [ 1750.932827][T15943] syzkaller0: entered allmulticast mode [ 1750.960411][T15943] tipc: Resetting bearer [ 1751.009708][T15942] tipc: Resetting bearer [ 1751.061019][T15942] tipc: Disabling bearer [ 1751.374703][T15960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1751.702312][T15969] __nla_validate_parse: 1 callbacks suppressed [ 1751.702333][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11663'. [ 1751.766097][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11663'. [ 1751.868622][T15974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11665'. [ 1752.118319][T15984] tipc: Enabled bearer , priority 0 [ 1752.140169][T15984] syzkaller0: entered promiscuous mode [ 1752.157546][T15984] syzkaller0: entered allmulticast mode [ 1752.387118][T15995] tipc: Resetting bearer [ 1752.756115][T15997] bridge1: entered promiscuous mode [ 1752.788569][T15997] bridge1: entered allmulticast mode [ 1752.871457][T15997] team0: Port device bridge1 added [ 1753.031233][T15983] tipc: Resetting bearer [ 1753.250956][T15983] tipc: Disabling bearer [ 1753.431931][T15976] tipc: Node number set to 522242101 [ 1753.459819][T16012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11677'. [ 1753.566532][T16012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11677'. [ 1753.655362][T16015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1753.677776][T16019] openvswitch: netlink: IP tunnel TTL not specified. [ 1753.701818][T16018] netlink: 'syz.0.11679': attribute type 1 has an invalid length. [ 1753.889940][T16024] IPv6: Can't replace route, no match found [ 1753.911272][T16024] IPv6: Can't replace route, no match found [ 1754.018461][T16036] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1754.142200][T16041] netlink: 'syz.4.11687': attribute type 32 has an invalid length. [ 1754.283487][T16047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11689'. [ 1754.563291][T16057] xfrm0 speed is unknown, defaulting to 1000 [ 1754.603492][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11693'. [ 1754.655028][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11693'. [ 1754.712872][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1754.780195][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11695'. [ 1755.148594][T16073] syzkaller0: entered promiscuous mode [ 1755.163938][T16073] syzkaller0: entered allmulticast mode [ 1755.181216][T16077] sctp: [Deprecated]: syz.0.11699 (pid 16077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1755.181216][T16077] Use struct sctp_sack_info instead [ 1755.496688][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11692'. [ 1755.634218][ T29] audit: type=1804 audit(1780668705.423:73): pid=16089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.11702" name="/newroot/581/memory.events" dev="tmpfs" ino=2988 res=1 errno=0 [ 1755.672492][ T29] audit: type=1800 audit(1780668705.423:74): pid=16089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11702" name="memory.events" dev="tmpfs" ino=2988 res=0 errno=0 [ 1756.652568][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1756.659938][ C1] bridge0: topology change detected, propagating [ 1760.365714][T16085] geneve2: entered promiscuous mode [ 1760.373563][T16065] xfrm0 speed is unknown, defaulting to 1000 [ 1760.427372][T16088] geneve2: entered promiscuous mode [ 1760.496305][T16057] lo speed is unknown, defaulting to 1000 [ 1760.727563][T16104] __nla_validate_parse: 1 callbacks suppressed [ 1760.727586][T16104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11707'. [ 1760.763518][T16104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11707'. [ 1761.254325][T16065] lo speed is unknown, defaulting to 1000 [ 1761.845361][T16127] tipc: Enabled bearer , priority 0 [ 1761.876103][T16127] syzkaller0: entered promiscuous mode [ 1761.900716][T16127] syzkaller0: entered allmulticast mode [ 1761.928972][T16127] tipc: Resetting bearer [ 1761.952191][T16125] tipc: Resetting bearer [ 1762.066063][T16125] tipc: Disabling bearer [ 1762.164875][T16134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11717'. [ 1762.224602][T16136] netlink: 'syz.4.11718': attribute type 1 has an invalid length. [ 1762.710626][T16142] macvlan3: entered promiscuous mode [ 1762.719617][T16142] macvlan3: entered allmulticast mode [ 1762.732105][T16142] bond11: entered promiscuous mode [ 1762.738636][T16142] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1762.777786][T16142] bond11: left promiscuous mode [ 1763.192823][T16111] Bluetooth: hci4: command 0x0406 tx timeout [ 1763.350819][T16151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11720'. [ 1763.421077][T16153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11720'. [ 1764.336468][T16167] netlink: 'syz.4.11723': attribute type 32 has an invalid length. [ 1764.383350][T16161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1764.424082][T16161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1764.673138][T16161] ip6tnl1: left promiscuous mode [ 1764.678664][T16161] geneve2: left promiscuous mode [ 1764.697651][ T7542] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.707777][T16176] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.11727'. [ 1764.739235][ T7542] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.761098][ T7542] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.784294][ T7542] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1764.944790][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11729'. [ 1765.161688][T16187] xfrm0 speed is unknown, defaulting to 1000 [ 1765.387987][T16197] : entered promiscuous mode [ 1765.459417][T16190] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 1766.356925][T16201] xfrm0 speed is unknown, defaulting to 1000 [ 1766.372275][T16187] lo speed is unknown, defaulting to 1000 [ 1766.439120][T16222] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.11740'. [ 1766.519356][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11732'. [ 1766.830433][T16235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11743'. [ 1766.967733][T16235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11743'. [ 1767.468990][T16201] lo speed is unknown, defaulting to 1000 [ 1768.067625][T16256] tipc: Enabled bearer , priority 0 [ 1768.086281][T16256] syzkaller0: entered promiscuous mode [ 1768.101919][T16256] syzkaller0: entered allmulticast mode [ 1768.133133][T16256] tipc: Resetting bearer [ 1768.178830][T16255] tipc: Resetting bearer [ 1768.260787][T16255] tipc: Disabling bearer [ 1768.380632][T16263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1768.627942][T16271] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.11751'. [ 1768.846856][T16277] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11754'. [ 1769.078236][T16281] IPv6: Can't replace route, no match found [ 1769.101922][T16281] IPv6: Can't replace route, no match found [ 1769.467439][T16297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11759'. [ 1769.727556][T16111] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1769.738972][T16111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1769.753737][T16111] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1769.765247][T16111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1769.778084][T16111] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1770.595935][T16312] xfrm0 speed is unknown, defaulting to 1000 [ 1770.648037][T16318] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.11763'. [ 1771.215453][T16329] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11766'. [ 1771.502230][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11768'. [ 1771.585323][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11768'. [ 1771.842750][T17128] Bluetooth: hci1: command tx timeout [ 1772.070096][T16300] xfrm0 speed is unknown, defaulting to 1000 [ 1772.077220][T16312] lo speed is unknown, defaulting to 1000 [ 1772.459200][T16347] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.11773'. [ 1772.930866][T16357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11776'. [ 1773.011091][T16300] lo speed is unknown, defaulting to 1000 [ 1773.026177][T16355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11776'. [ 1773.082035][T16355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11776'. [ 1773.470966][ T7542] bridge_slave_1: left allmulticast mode [ 1773.498843][ T7542] bridge_slave_1: left promiscuous mode [ 1773.529095][ T7542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.590827][ T7542] veth7: left allmulticast mode [ 1773.611169][ T7542] veth7: left promiscuous mode [ 1773.634178][ T7542] bridge2: port 2(veth7) entered disabled state [ 1773.695462][ T7542] veth5: left allmulticast mode [ 1773.719176][ T7542] veth5: left promiscuous mode [ 1773.744299][ T7542] bridge2: port 1(veth5) entered disabled state [ 1773.912728][T17128] Bluetooth: hci1: command tx timeout [ 1775.197989][ T7542] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1775.252527][ T7542] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1775.296825][ T7542] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1775.361998][ T7542] bond10 (unregistering): (slave bridge9): Releasing active interface [ 1775.402507][ T7542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1775.413884][ T7542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1775.424183][ T7542] bond0 (unregistering): Released all slaves [ 1775.439767][ T7542] bond1 (unregistering): Released all slaves [ 1775.464488][ T7542] bond2 (unregistering): Released all slaves [ 1775.486669][ T7542] team0: Port device bond3 removed [ 1775.495507][ T7542] bond3 (unregistering): Released all slaves [ 1775.520610][ T7542] team0: Port device macvlan2 removed [ 1775.536621][ T7542] bond4 (unregistering): Released all slaves [ 1775.559629][ T7542] bond5 (unregistering): Released all slaves [ 1775.575319][ T7542] bond6 (unregistering): Released all slaves [ 1775.598562][ T7542] bond7 (unregistering): Released all slaves [ 1775.620751][ T7542] bond8 (unregistering): Released all slaves [ 1775.644977][ T7542] bond9 (unregistering): Released all slaves [ 1775.662241][ T7542] bond10 (unregistering): Released all slaves [ 1775.680569][ T7542] bond11 (unregistering): Released all slaves [ 1775.728970][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1776.005697][T17128] Bluetooth: hci1: command tx timeout [ 1776.299727][ T7542] tipc: Disabling bearer [ 1776.313746][ T7542] tipc: Left network mode [ 1777.075179][T16452] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11796'. [ 1777.151598][T16452] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11796'. [ 1777.746703][T16478] tipc: Failed to remove unknown binding: 66,1,1/522242101:4164366640/4164366642 [ 1778.074224][T17128] Bluetooth: hci1: command tx timeout [ 1778.402179][T16486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11803'. [ 1778.947408][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1779.278794][T16300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.287211][T16300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.299962][T16300] bridge_slave_0: entered allmulticast mode [ 1779.334732][T16300] bridge_slave_0: entered promiscuous mode [ 1779.415937][T16300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1779.441727][T16300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1779.460774][T16300] bridge_slave_1: entered allmulticast mode [ 1779.489997][T16300] bridge_slave_1: entered promiscuous mode [ 1779.749010][T16520] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11811'. [ 1779.788997][T16300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1779.881330][T16300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.188025][T16300] team0: Port device team_slave_0 added [ 1780.269788][T16536] netlink: 'syz.0.11813': attribute type 1 has an invalid length. [ 1780.370066][T16536] netlink: 'syz.0.11813': attribute type 2 has an invalid length. [ 1780.405181][T16544] FAULT_INJECTION: forcing a failure. [ 1780.405181][T16544] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.432893][T16536] netlink: 'syz.0.11813': attribute type 3 has an invalid length. [ 1780.485251][T16544] CPU: 0 UID: 0 PID: 16544 Comm: syz.6.11817 Not tainted syzkaller #0 PREEMPT(full) [ 1780.485283][T16544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1780.485297][T16544] Call Trace: [ 1780.485306][T16544] [ 1780.485316][T16544] dump_stack_lvl+0xe8/0x150 [ 1780.485349][T16544] should_fail_ex+0x412/0x560 [ 1780.485380][T16544] should_failslab+0xa8/0x100 [ 1780.485407][T16544] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1780.485441][T16544] ? __alloc_skb+0x1d0/0x7d0 [ 1780.485462][T16544] ? __local_bh_enable_ip+0xd0/0x130 [ 1780.485493][T16544] __alloc_skb+0x1d0/0x7d0 [ 1780.485526][T16544] sctp_packet_transmit+0x290/0x2ac0 [ 1780.485576][T16544] ? __sctp_packet_append_chunk+0x912/0xd00 [ 1780.485621][T16544] ? sctp_packet_append_chunk+0x9b4/0x1010 [ 1780.485660][T16544] sctp_packet_singleton+0x234/0x340 [ 1780.485696][T16544] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 1780.485739][T16544] ? sctp_outq_select_transport+0x462/0x570 [ 1780.485772][T16544] ? sctp_transport_burst_limited+0x19c/0x280 [ 1780.485813][T16544] sctp_outq_flush+0x50d/0x31b0 [ 1780.485861][T16544] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1780.485886][T16544] ? __pfx_sctp_outq_flush+0x10/0x10 [ 1780.485924][T16544] ? sctp_outq_tail+0x612/0x920 [ 1780.485953][T16544] ? sctp_outq_uncork+0x4d/0xa0 [ 1780.485993][T16544] sctp_do_sm+0x54c7/0x5cf0 [ 1780.486032][T16544] ? ___sys_sendmsg+0x2a5/0x360 [ 1780.486056][T16544] ? __sys_sendmmsg+0x27c/0x4e0 [ 1780.486079][T16544] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1780.486103][T16544] ? do_syscall_64+0x174/0x580 [ 1780.486133][T16544] ? __pfx_sctp_do_sm+0x10/0x10 [ 1780.486207][T16544] ? __sk_mem_raise_allocated+0x88f/0x1290 [ 1780.486237][T16544] ? __genradix_ptr+0x1e1/0x220 [ 1780.486275][T16544] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 1780.486308][T16544] sctp_sendmsg_to_asoc+0x143d/0x1900 [ 1780.486334][T16544] ? __asan_memcpy+0x40/0x70 [ 1780.486372][T16544] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 1780.486416][T16544] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1780.486443][T16544] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1780.486480][T16544] ? __local_bh_enable_ip+0xd0/0x130 [ 1780.486501][T16544] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1780.486533][T16544] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1780.486566][T16544] sctp_sendmsg+0x1b85/0x2c50 [ 1780.486611][T16544] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1780.486641][T16544] ? aa_sk_perm+0x6d5/0x900 [ 1780.486683][T16544] ? __pfx_aa_sk_perm+0x10/0x10 [ 1780.486720][T16544] ? sock_rps_record_flow+0x19/0x350 [ 1780.486758][T16544] ? inet_sendmsg+0x2f4/0x370 [ 1780.486798][T16544] ____sys_sendmsg+0x80a/0x9f0 [ 1780.486835][T16544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1780.486874][T16544] ? import_iovec+0x73/0xa0 [ 1780.486905][T16544] ___sys_sendmsg+0x2a5/0x360 [ 1780.486929][T16544] ? __lock_acquire+0x6b5/0x2cf0 [ 1780.486957][T16544] ? __pfx____sys_sendmsg+0x10/0x10 [ 1780.486995][T16544] ? kstrtouint+0x6e/0xe0 [ 1780.487058][T16544] ? __fget_files+0x2a/0x420 [ 1780.487084][T16544] ? __fget_files+0x3a0/0x420 [ 1780.487130][T16544] __sys_sendmmsg+0x27c/0x4e0 [ 1780.487162][T16544] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1780.487187][T16544] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1780.487252][T16544] ? ksys_write+0x242/0x270 [ 1780.487288][T16544] ? __pfx_ksys_write+0x10/0x10 [ 1780.487329][T16544] __x64_sys_sendmmsg+0xa0/0xc0 [ 1780.487356][T16544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.487380][T16544] do_syscall_64+0x174/0x580 [ 1780.487403][T16544] ? trace_irq_disable+0x3b/0x140 [ 1780.487437][T16544] ? clear_bhb_loop+0x40/0x90 [ 1780.487487][T16544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.487511][T16544] RIP: 0033:0x7fd536d9ce59 [ 1780.487532][T16544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1780.487551][T16544] RSP: 002b:00007fd537c92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1780.487574][T16544] RAX: ffffffffffffffda RBX: 00007fd537015fa0 RCX: 00007fd536d9ce59 [ 1780.487591][T16544] RDX: 0000000000000001 RSI: 00002000000022c0 RDI: 0000000000000004 [ 1780.487605][T16544] RBP: 00007fd537c92090 R08: 0000000000000000 R09: 0000000000000000 [ 1780.487619][T16544] R10: 0000000024040040 R11: 0000000000000246 R12: 0000000000000002 [ 1780.487633][T16544] R13: 00007fd537016038 R14: 00007fd537015fa0 R15: 00007fffbb0f2b08 [ 1780.487670][T16544] [ 1781.072126][T16300] team0: Port device team_slave_1 added [ 1781.259714][T16539] syzkaller0: entered promiscuous mode [ 1781.288891][T16558] sctp: [Deprecated]: syz.5.11818 (pid 16558) Use of int in max_burst socket option. [ 1781.288891][T16558] Use struct sctp_assoc_value instead [ 1781.373438][T16539] syzkaller0: entered allmulticast mode [ 1781.680891][ T7542] hsr_slave_0: left promiscuous mode [ 1781.729963][ T7542] hsr_slave_1: left promiscuous mode [ 1781.779384][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11822'. [ 1781.795409][ T7542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.830352][ T7542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.873891][ T7542] batman_adv: batadv0: Removing interface: dummy0 [ 1782.144640][T16583] netlink: 'syz.5.11826': attribute type 1 has an invalid length. [ 1782.262771][T16584] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11826'. [ 1782.287525][ T7542] team0 (unregistering): Port device veth1_to_hsr removed [ 1782.330354][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11824'. [ 1782.360900][ T7542] team0 (unregistering): Port device team_slave_1 removed [ 1782.381613][ T7542] team0 (unregistering): Port device team_slave_0 removed [ 1782.599182][T16300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1782.606412][T16300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1782.663069][T16300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1782.680033][T16568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11822'. [ 1782.691938][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1782.700459][T16580] tipc: New replicast peer: 255.255.255.255 [ 1782.707960][T16580] tipc: Enabled bearer , priority 19 [ 1782.716648][T16582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11826'. [ 1782.760477][T16583] bond7: entered promiscuous mode [ 1782.766384][T16583] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1782.846832][T16584] bond7: entered allmulticast mode [ 1782.880639][T16593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11828'. [ 1782.896639][T16587] bond7: (slave bridge3): making interface the new active one [ 1782.905763][T16587] bridge3: entered promiscuous mode [ 1782.911266][T16587] bridge3: entered allmulticast mode [ 1782.918800][T16587] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 1782.932777][T16300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1782.981433][T16300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1783.016782][T16300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1783.068333][T16576] xfrm0 speed is unknown, defaulting to 1000 [ 1783.507167][ T29] audit: type=1800 audit(1780668733.283:75): pid=16600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11829" name="memory.events" dev="tmpfs" ino=1572 res=0 errno=0 [ 1783.639808][T16300] hsr_slave_0: entered promiscuous mode [ 1783.659855][T16300] hsr_slave_1: entered promiscuous mode [ 1783.692188][T16608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11833'. [ 1783.704169][T16300] debugfs: 'hsr0' already exists in 'hsr' [ 1783.725928][T16300] Cannot create hsr debugfs directory [ 1783.754146][T11474] tipc: Node number set to 1442856954 [ 1783.864143][T16609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.062173][ T7542] IPVS: stop unused estimator thread 0... [ 1784.078183][T16613] syzkaller0: entered promiscuous mode [ 1784.094306][T16613] syzkaller0: entered allmulticast mode [ 1784.115802][T16576] lo speed is unknown, defaulting to 1000 [ 1784.155195][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1784.341080][T16634] netlink: 'syz.0.11836': attribute type 1 has an invalid length. [ 1784.540401][T16629] netlink: 'syz.0.11836': attribute type 4 has an invalid length. [ 1784.679511][T16641] Dead loop on virtual device ip6_vti0 (net 2345), fix it urgently! [ 1784.688264][T16641] Dead loop on virtual device ip6_vti0 (net 2345), fix it urgently! [ 1784.696866][T16641] Dead loop on virtual device ip6_vti0 (net 2345), fix it urgently! [ 1784.705439][T16641] Dead loop on virtual device ip6_vti0 (net 2345), fix it urgently! [ 1784.714045][T16641] Dead loop on virtual device ip6_vti0 (net 2345), fix it urgently! [ 1784.724634][T16641] Dead loop on virtual device ip6_vti0 (net 2345), fix it urgently! [ 1784.749072][T16634] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1784.848033][T16638] bond13: (slave geneve4): making interface the new active one [ 1784.911469][T16638] bond13: (slave geneve4): Enslaving as an active interface with an up link [ 1785.140015][ T5296] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1785.545745][T16672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11841'. [ 1786.212814][T16661] xfrm0 speed is unknown, defaulting to 1000 [ 1786.684888][T16697] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:19999 [ 1786.722699][T16697] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1786.767201][T16697] netlink: 64 bytes leftover after parsing attributes in process `syz.5.11845'. [ 1787.275660][T16661] lo speed is unknown, defaulting to 1000 [ 1787.416511][T16710] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11847'. [ 1787.500132][T16713] xfrm0 speed is unknown, defaulting to 1000 [ 1787.675562][T16720] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11848'. [ 1788.427627][T16300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1788.481154][T16300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1788.515737][T16300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1788.568541][T16300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1788.715666][T16300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1788.746077][T16300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1788.765956][T16300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1788.813032][T16300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1789.175454][T16759] IPv6: Can't replace route, no match found [ 1789.193433][T16759] IPv6: Can't replace route, no match found [ 1789.622067][T16300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1789.699744][T16300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1789.730819][ T7538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.738109][ T7538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1789.831973][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.839239][ T7537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1789.955484][T16713] lo speed is unknown, defaulting to 1000 [ 1790.289554][T16782] xfrm0 speed is unknown, defaulting to 1000 [ 1790.308015][T16789] tipc: New replicast peer: 255.255.255.255 [ 1790.328559][T16789] tipc: Enabled bearer , priority 19 [ 1790.368366][T16789] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11858'. [ 1790.392172][T16789] netlink: 'syz.6.11858': attribute type 1 has an invalid length. [ 1790.629945][T16793] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11858'. [ 1790.742287][T16789] bond1: entered promiscuous mode [ 1790.768567][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11857'. [ 1790.778504][T16789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1790.841360][T16797] bond1: (slave bridge1): making interface the new active one [ 1790.850939][T16797] bridge1: entered promiscuous mode [ 1790.858573][T16797] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1790.897887][T16793] bond1: entered allmulticast mode [ 1790.916703][T16793] bridge1: entered allmulticast mode [ 1791.568692][T15988] tipc: Node number set to 647344852 [ 1791.591788][T16782] lo speed is unknown, defaulting to 1000 [ 1791.835891][ T1316] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1791.929599][T16300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1792.256136][T16828] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11861'. [ 1792.402696][T16827] xt_NFQUEUE: number of total queues is 0 [ 1792.417870][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11861'. [ 1792.528153][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11860'. [ 1792.601430][T16836] netlink: 348 bytes leftover after parsing attributes in process `syz.0.11860'. [ 1792.647558][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11860'. [ 1792.698039][T16836] netlink: 348 bytes leftover after parsing attributes in process `syz.0.11860'. [ 1792.746293][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11860'. [ 1792.848165][T16837] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11860'. [ 1792.999883][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11860'. [ 1793.056618][T16836] netlink: 348 bytes leftover after parsing attributes in process `syz.0.11860'. [ 1793.130568][T16836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11860'. [ 1793.164697][T16836] netlink: 348 bytes leftover after parsing attributes in process `syz.0.11860'. [ 1793.427555][T16854] IPv6: Can't replace route, no match found [ 1793.501760][T16300] veth0_vlan: entered promiscuous mode [ 1793.517705][T16300] veth1_vlan: entered promiscuous mode [ 1793.525925][T16854] IPv6: Can't replace route, no match found [ 1793.608789][T16300] veth0_macvtap: entered promiscuous mode [ 1793.638412][T16300] veth1_macvtap: entered promiscuous mode [ 1793.733393][T16300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1793.799891][T16300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1793.869392][ T7537] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.910445][ T7537] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.982087][ T7537] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.023676][ T7537] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.383968][T16869] netlink: 'syz.6.11865': attribute type 1 has an invalid length. [ 1795.109727][T16869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1795.558355][T16870] bond2: (slave geneve3): making interface the new active one [ 1795.625699][T16870] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1795.904047][ T7539] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.022147][T16877] syzkaller0: entered promiscuous mode [ 1796.028190][ T7549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.028216][ T7549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.058652][T16877] syzkaller0: entered allmulticast mode [ 1796.202075][ T7539] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.420496][ T7539] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.465551][ T7539] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.826516][ T7547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.872680][ T7547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1797.225901][T16918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1797.477713][T16900] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 1797.576463][T16925] __nla_validate_parse: 1 callbacks suppressed [ 1797.576489][T16925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11872'. [ 1797.652164][T16927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11873'. [ 1798.247622][T16945] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11876'. [ 1798.568416][T16953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.767791][T16961] nbd: nbd0 already in use [ 1798.789127][T16961] block nbd0: NBD_DISCONNECT [ 1798.819402][T16961] block nbd0: Send disconnect failed -32 [ 1798.874765][T16961] block nbd0: shutting down sockets [ 1799.208016][T16958] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.561929][T16956] macsec1: entered promiscuous mode [ 1799.674288][ T7547] bridge_slave_1: left allmulticast mode [ 1799.731831][ T7547] bridge_slave_1: left promiscuous mode [ 1799.745592][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.779676][ T7547] bridge_slave_0: left allmulticast mode [ 1799.799372][ T7547] bridge_slave_0: left promiscuous mode [ 1799.816742][ T7547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.916501][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11883'. [ 1800.245334][ T7549] smc: removing ib device syz0 [ 1800.346884][ T7549] smbdirect: ib_dev[syz0] removed [ 1800.560974][ T7547] bond7 (unregistering): (slave gretap1): Releasing active interface [ 1800.675251][ T7547] bond10 (unregistering): (slave geneve2): Releasing active interface [ 1801.019195][ T7547] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 1801.070634][ T7547] bond0 (unregistering): (slave 45): Releasing backup interface [ 1801.099505][ T7547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.124003][ T7547] bond0 (unregistering): Released all slaves [ 1801.162086][ T7547] bond1 (unregistering): Released all slaves [ 1801.212025][ T7547] bond2 (unregistering): Released all slaves [ 1801.302598][ T7547] bond3 (unregistering): (slave macvlan0): Releasing active interface [ 1801.346585][ T7547] bond3 (unregistering): Released all slaves [ 1801.417711][ T7547] bond4 (unregistering): Released all slaves [ 1801.501089][ T7547] bond5 (unregistering): Released all slaves [ 1801.571916][ T7547] bond6 (unregistering): Released all slaves [ 1801.635315][ T7547] bond7 (unregistering): Released all slaves [ 1801.790088][ T7547] bond8 (unregistering): Released all slaves [ 1801.862157][ T7547] bond9 (unregistering): Released all slaves [ 1801.957255][ T7547] bond10 (unregistering): Released all slaves [ 1802.488238][T16958] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.282335][T16966] lo speed is unknown, defaulting to 1000 [ 1803.301713][T16984] : renamed from veth0_to_bond [ 1803.509114][T16958] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.696215][T17003] FAULT_INJECTION: forcing a failure. [ 1803.696215][T17003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1803.746864][T17003] CPU: 1 UID: 0 PID: 17003 Comm: syz.5.11888 Not tainted syzkaller #0 PREEMPT(full) [ 1803.746897][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1803.746912][T17003] Call Trace: [ 1803.746921][T17003] [ 1803.746932][T17003] dump_stack_lvl+0xe8/0x150 [ 1803.746963][T17003] should_fail_ex+0x412/0x560 [ 1803.746993][T17003] _copy_to_user+0x31/0xb0 [ 1803.747022][T17003] simple_read_from_buffer+0xe1/0x170 [ 1803.747084][T17003] proc_fail_nth_read+0x1bb/0x230 [ 1803.747125][T17003] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1803.747182][T17003] ? rw_verify_area+0x2a6/0x4d0 [ 1803.747214][T17003] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1803.747247][T17003] vfs_read+0x20c/0xa70 [ 1803.747286][T17003] ? __pfx___mutex_lock+0x10/0x10 [ 1803.747316][T17003] ? __pfx_vfs_read+0x10/0x10 [ 1803.747350][T17003] ? __fget_files+0x2a/0x420 [ 1803.747384][T17003] ? __fget_files+0x3a0/0x420 [ 1803.747412][T17003] ? __fget_files+0x2a/0x420 [ 1803.747450][T17003] ksys_read+0x150/0x270 [ 1803.747486][T17003] ? __pfx_ksys_read+0x10/0x10 [ 1803.747529][T17003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.747554][T17003] do_syscall_64+0x174/0x580 [ 1803.747578][T17003] ? trace_irq_disable+0x3b/0x140 [ 1803.747613][T17003] ? clear_bhb_loop+0x40/0x90 [ 1803.747642][T17003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.747665][T17003] RIP: 0033:0x7fd29c95d68e [ 1803.747686][T17003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1803.747706][T17003] RSP: 002b:00007fd29d926fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1803.747729][T17003] RAX: ffffffffffffffda RBX: 00007fd29d9276c0 RCX: 00007fd29c95d68e [ 1803.747746][T17003] RDX: 000000000000000f RSI: 00007fd29d9270a0 RDI: 0000000000000004 [ 1803.747761][T17003] RBP: 00007fd29d927090 R08: 0000000000000000 R09: 0000000000000000 [ 1803.747775][T17003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1803.747788][T17003] R13: 00007fd29cc16038 R14: 00007fd29cc15fa0 R15: 00007ffc754109e8 [ 1803.747827][T17003] [ 1804.504784][T17005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11887'. [ 1804.698799][T16958] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.849289][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11891'. [ 1806.998364][T17035] netlink: 16166 bytes leftover after parsing attributes in process `syz.6.11895'. [ 1807.068999][T17008] lo speed is unknown, defaulting to 1000 [ 1807.354153][T17037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11897'. [ 1808.572929][T17045] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1808.603231][ T3340] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.803315][ T7538] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.081686][ T7538] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.199880][ T7538] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.747103][T17064] netlink: 'syz.6.11906': attribute type 13 has an invalid length. [ 1809.790619][T17064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11906'. [ 1810.573316][ T7547] tipc: Disabling bearer [ 1810.583163][ T7547] tipc: Left network mode [ 1810.676698][T17076] mac80211_hwsim hwsim170 wlan0: left promiscuous mode [ 1810.716052][T17076] mac80211_hwsim hwsim170 wlan0: left allmulticast mode [ 1810.784402][T17076] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1811.286351][T17084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11912'. [ 1811.320272][T17084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11912'. [ 1811.875255][T17098] FAULT_INJECTION: forcing a failure. [ 1811.875255][T17098] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.941746][T17098] CPU: 1 UID: 0 PID: 17098 Comm: syz.6.11916 Not tainted syzkaller #0 PREEMPT(full) [ 1811.941779][T17098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1811.941794][T17098] Call Trace: [ 1811.941803][T17098] [ 1811.941813][T17098] dump_stack_lvl+0xe8/0x150 [ 1811.941846][T17098] should_fail_ex+0x412/0x560 [ 1811.941877][T17098] should_failslab+0xa8/0x100 [ 1811.941912][T17098] __kmalloc_cache_noprof+0x88/0x660 [ 1811.941946][T17098] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1811.941982][T17098] ? sctp_add_bind_addr+0x8c/0x370 [ 1811.942024][T17098] sctp_add_bind_addr+0x8c/0x370 [ 1811.942070][T17098] sctp_copy_local_addr_list+0x314/0x4f0 [ 1811.942109][T17098] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1811.942145][T17098] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1811.942183][T17098] ? sctp_v6_is_any+0x64/0x80 [ 1811.942209][T17098] ? sctp_copy_one_addr+0x93/0x360 [ 1811.942247][T17098] sctp_bind_addr_copy+0xb3/0x3c0 [ 1811.942283][T17098] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1811.942320][T17098] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1811.942354][T17098] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1811.942387][T17098] ? __local_bh_enable_ip+0xd0/0x130 [ 1811.942410][T17098] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1811.942442][T17098] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1811.942485][T17098] sctp_sendmsg+0x1576/0x2c50 [ 1811.942508][T17098] ? unwind_next_frame+0xa6/0x2550 [ 1811.942550][T17098] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1811.942579][T17098] ? aa_sk_perm+0x6d5/0x900 [ 1811.942618][T17098] ? __pfx_aa_sk_perm+0x10/0x10 [ 1811.942654][T17098] ? sock_rps_record_flow+0x19/0x350 [ 1811.942692][T17098] ? inet_sendmsg+0x2f4/0x370 [ 1811.942732][T17098] ____sys_sendmsg+0x80a/0x9f0 [ 1811.942771][T17098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1811.942809][T17098] ? import_iovec+0x73/0xa0 [ 1811.942842][T17098] ___sys_sendmsg+0x2a5/0x360 [ 1811.942867][T17098] ? __lock_acquire+0x6b5/0x2cf0 [ 1811.942897][T17098] ? __pfx____sys_sendmsg+0x10/0x10 [ 1811.942993][T17098] ? __fget_files+0x2a/0x420 [ 1811.943021][T17098] ? __fget_files+0x3a0/0x420 [ 1811.943061][T17098] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1811.943091][T17098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1811.943131][T17098] ? __pfx_ksys_write+0x10/0x10 [ 1811.943174][T17098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.943200][T17098] do_syscall_64+0x174/0x580 [ 1811.943225][T17098] ? trace_irq_disable+0x3b/0x140 [ 1811.943259][T17098] ? clear_bhb_loop+0x40/0x90 [ 1811.943287][T17098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.943309][T17098] RIP: 0033:0x7fd536d9ce59 [ 1811.943330][T17098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1811.943349][T17098] RSP: 002b:00007fd537c71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1811.943374][T17098] RAX: ffffffffffffffda RBX: 00007fd537016090 RCX: 00007fd536d9ce59 [ 1811.943391][T17098] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1811.943405][T17098] RBP: 00007fd537c71090 R08: 0000000000000000 R09: 0000000000000000 [ 1811.943421][T17098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1811.943435][T17098] R13: 00007fd537016128 R14: 00007fd537016090 R15: 00007fffbb0f2b08 [ 1811.943473][T17098] [ 1812.327471][T17100] netlink: 'syz.5.11918': attribute type 2 has an invalid length. [ 1813.295336][T17127] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11923'. [ 1813.336735][T17127] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11923'. [ 1813.392335][T17131] netlink: 'syz.4.11923': attribute type 5 has an invalid length. [ 1813.400758][ T29] audit: type=1800 audit(1780668763.183:76): pid=17129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11922" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1717 res=0 errno=0 [ 1813.559328][T17134] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11925'. [ 1813.825263][ T7547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1813.859837][ T7547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1814.544911][ T7547] ` (unregistering): Port device team_slave_1 removed [ 1814.580413][ T7547] ` (unregistering): Port device team_slave_0 removed [ 1814.851893][T17141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.861644][T17156] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11931'. [ 1815.052886][T17153] lo speed is unknown, defaulting to 1000 [ 1815.398522][T17166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11935'. [ 1815.434542][T17163] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1815.698117][T17173] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1815.714443][ T7547] IPVS: stop unused estimator thread 0... [ 1815.897861][T17180] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11938'. [ 1815.925375][T17180] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11938'. [ 1816.296514][T17186] lo speed is unknown, defaulting to 1000 [ 1816.797562][T17203] netlink: 'syz.5.11946': attribute type 1 has an invalid length. [ 1816.810241][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11947'. [ 1816.856674][T17203] netlink: 'syz.5.11946': attribute type 2 has an invalid length. [ 1816.947895][T17203] netlink: 'syz.5.11946': attribute type 3 has an invalid length. [ 1817.288963][T17208] syzkaller0: entered promiscuous mode [ 1817.298175][T17208] syzkaller0: entered allmulticast mode [ 1817.326836][T17213] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11950'. [ 1817.346535][T27223] IPVS: starting estimator thread 0... [ 1817.453317][T17216] IPVS: using max 26 ests per chain, 62400 per kthread [ 1817.464606][T17210] lo speed is unknown, defaulting to 1000 [ 1817.671130][T17225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11954'. [ 1818.001044][T17237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11952'. [ 1818.050897][T17225] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1818.185881][T17229] macvlan0: entered promiscuous mode [ 1818.209789][T17229] macvlan0: entered allmulticast mode [ 1818.236494][T17229] bond14: entered allmulticast mode [ 1818.267331][T17229] bond14: entered promiscuous mode [ 1818.286273][T17229] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1818.347151][T17229] team0: Port device macvlan0 added [ 1819.807552][T17260] veth3: entered allmulticast mode [ 1820.677948][T17294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11967'. [ 1820.895879][T17298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1821.340737][T17314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11976'. [ 1821.414778][T17322] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1821.421995][T27205] IPVS: starting estimator thread 0... [ 1821.428841][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 1821.452096][T17325] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1821.461169][T17325] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1821.541892][T17329] netlink: 'syz.0.11977': attribute type 1 has an invalid length. [ 1821.562788][T17323] IPVS: using max 38 ests per chain, 91200 per kthread [ 1821.814376][T17329] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1821.880060][T17327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11979'. [ 1821.915148][T17327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11979'. [ 1822.135678][T17348] FAULT_INJECTION: forcing a failure. [ 1822.135678][T17348] name failslab, interval 1, probability 0, space 0, times 0 [ 1822.169583][T17348] CPU: 0 UID: 0 PID: 17348 Comm: syz.6.11984 Not tainted syzkaller #0 PREEMPT(full) [ 1822.169614][T17348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1822.169628][T17348] Call Trace: [ 1822.169637][T17348] [ 1822.169648][T17348] dump_stack_lvl+0xe8/0x150 [ 1822.169680][T17348] should_fail_ex+0x412/0x560 [ 1822.169711][T17348] should_failslab+0xa8/0x100 [ 1822.169736][T17348] __kmalloc_cache_noprof+0x88/0x660 [ 1822.169768][T17348] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1822.169802][T17348] ? sctp_add_bind_addr+0x8c/0x370 [ 1822.169843][T17348] sctp_add_bind_addr+0x8c/0x370 [ 1822.169882][T17348] sctp_copy_local_addr_list+0x314/0x4f0 [ 1822.169919][T17348] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1822.169954][T17348] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1822.169993][T17348] ? sctp_v6_is_any+0x64/0x80 [ 1822.170017][T17348] ? sctp_copy_one_addr+0x93/0x360 [ 1822.170055][T17348] sctp_bind_addr_copy+0xb3/0x3c0 [ 1822.170099][T17348] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1822.170134][T17348] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1822.170164][T17348] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1822.170198][T17348] ? __local_bh_enable_ip+0xd0/0x130 [ 1822.170220][T17348] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1822.170252][T17348] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1822.170284][T17348] sctp_sendmsg+0x1576/0x2c50 [ 1822.170328][T17348] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1822.170357][T17348] ? aa_sk_perm+0x6d5/0x900 [ 1822.170386][T17348] ? __might_fault+0xaf/0x130 [ 1822.170424][T17348] ? __pfx_aa_sk_perm+0x10/0x10 [ 1822.170458][T17348] ? sock_rps_record_flow+0x19/0x350 [ 1822.170491][T17348] ? __pfx_inet_sendmsg+0x10/0x10 [ 1822.170524][T17348] ? inet_sendmsg+0x2f4/0x370 [ 1822.170558][T17348] ? __pfx_inet_sendmsg+0x10/0x10 [ 1822.170592][T17348] __sys_sendto+0x5de/0x710 [ 1822.170620][T17348] ? __pfx___sys_sendto+0x10/0x10 [ 1822.170640][T17348] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1822.170680][T17348] ? __fget_files+0x3a0/0x420 [ 1822.170721][T17348] ? ksys_write+0x242/0x270 [ 1822.170758][T17348] ? __pfx_ksys_write+0x10/0x10 [ 1822.170797][T17348] __x64_sys_sendto+0xde/0x100 [ 1822.170821][T17348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.170845][T17348] do_syscall_64+0x174/0x580 [ 1822.170868][T17348] ? trace_irq_disable+0x3b/0x140 [ 1822.170901][T17348] ? clear_bhb_loop+0x40/0x90 [ 1822.170929][T17348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.170950][T17348] RIP: 0033:0x7fd536d9ce59 [ 1822.170974][T17348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1822.170993][T17348] RSP: 002b:00007fd537c92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1822.171015][T17348] RAX: ffffffffffffffda RBX: 00007fd537015fa0 RCX: 00007fd536d9ce59 [ 1822.171032][T17348] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 1822.171046][T17348] RBP: 00007fd537c92090 R08: 000020000005ffe4 R09: 000000000000001c [ 1822.171062][T17348] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 1822.171085][T17348] R13: 00007fd537016038 R14: 00007fd537015fa0 R15: 00007fffbb0f2b08 [ 1822.171123][T17348] [ 1822.707089][T17360] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11985'. [ 1822.865910][T17363] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11990'. [ 1823.231736][T17378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11995'. [ 1823.241729][T17378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11995'. [ 1823.607354][T17394] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12000'. [ 1823.629029][T17394] FAULT_INJECTION: forcing a failure. [ 1823.629029][T17394] name failslab, interval 1, probability 0, space 0, times 0 [ 1823.644174][T17394] CPU: 1 UID: 0 PID: 17394 Comm: syz.1.12000 Not tainted syzkaller #0 PREEMPT(full) [ 1823.644206][T17394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1823.644220][T17394] Call Trace: [ 1823.644229][T17394] [ 1823.644239][T17394] dump_stack_lvl+0xe8/0x150 [ 1823.644272][T17394] should_fail_ex+0x412/0x560 [ 1823.644301][T17394] should_failslab+0xa8/0x100 [ 1823.644327][T17394] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1823.644359][T17394] ? __alloc_skb+0x186/0x7d0 [ 1823.644381][T17394] ? __alloc_skb+0x1d0/0x7d0 [ 1823.644401][T17394] ? __local_bh_enable_ip+0xd0/0x130 [ 1823.644430][T17394] __alloc_skb+0x1d0/0x7d0 [ 1823.644452][T17394] ? netlink_ack_tlv_len+0x6c/0x210 [ 1823.644482][T17394] netlink_ack+0x146/0xa50 [ 1823.644505][T17394] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1823.644526][T17394] ? ref_tracker_free+0x693/0x840 [ 1823.644556][T17394] ? __pfx_ref_tracker_free+0x10/0x10 [ 1823.644594][T17394] netlink_rcv_skb+0x2b6/0x4b0 [ 1823.644621][T17394] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1823.644647][T17394] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1823.644688][T17394] ? netlink_deliver_tap+0x2e/0x1b0 [ 1823.644714][T17394] ? netlink_deliver_tap+0x2e/0x1b0 [ 1823.644747][T17394] netlink_unicast+0x75c/0x8e0 [ 1823.644784][T17394] netlink_sendmsg+0x813/0xb40 [ 1823.644828][T17394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1823.644856][T17394] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1823.644890][T17394] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1823.644922][T17394] ____sys_sendmsg+0x972/0x9f0 [ 1823.644946][T17394] ? __might_fault+0xaf/0x130 [ 1823.644980][T17394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1823.645013][T17394] ? import_iovec+0x73/0xa0 [ 1823.645050][T17394] ___sys_sendmsg+0x2a5/0x360 [ 1823.645075][T17394] ? __lock_acquire+0x6b5/0x2cf0 [ 1823.645105][T17394] ? __pfx____sys_sendmsg+0x10/0x10 [ 1823.645129][T17394] ? __lock_acquire+0x6b5/0x2cf0 [ 1823.645158][T17394] ? kstrtouint+0x6e/0xe0 [ 1823.645239][T17394] __sys_sendmmsg+0x27c/0x4e0 [ 1823.645274][T17394] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1823.645299][T17394] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1823.645353][T17394] ? ksys_write+0x242/0x270 [ 1823.645389][T17394] ? __pfx_ksys_write+0x10/0x10 [ 1823.645429][T17394] __x64_sys_sendmmsg+0xa0/0xc0 [ 1823.645455][T17394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.645480][T17394] do_syscall_64+0x174/0x580 [ 1823.645527][T17394] ? trace_irq_disable+0x3b/0x140 [ 1823.645561][T17394] ? clear_bhb_loop+0x40/0x90 [ 1823.645588][T17394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.645611][T17394] RIP: 0033:0x7ff5b699ce59 [ 1823.645633][T17394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1823.645653][T17394] RSP: 002b:00007ff5b77b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1823.645677][T17394] RAX: ffffffffffffffda RBX: 00007ff5b6c15fa0 RCX: 00007ff5b699ce59 [ 1823.645695][T17394] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1823.645710][T17394] RBP: 00007ff5b77b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1823.645725][T17394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1823.645738][T17394] R13: 00007ff5b6c16038 R14: 00007ff5b6c15fa0 R15: 00007ffef5749e98 [ 1823.645773][T17394] [ 1823.647132][T17394] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12000'. [ 1823.835515][ T30] INFO: task syz.2.10965:13631 blocked for more than 143 seconds. [ 1824.164407][ T30] Not tainted syzkaller #0 [ 1824.185373][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1824.208899][ T30] task:syz.2.10965 state:D stack:26736 pid:13631 tgid:13630 ppid:8375 task_flags:0x400140 flags:0x00080002 [ 1824.233989][ T30] Call Trace: [ 1824.242617][ T30] [ 1824.245670][ T30] __schedule+0x1821/0x5740 [ 1824.250236][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1824.263993][ T30] ? __pfx___schedule+0x10/0x10 [ 1824.272511][ T30] ? schedule+0x90/0x360 [ 1824.282533][ T30] schedule+0x164/0x360 [ 1824.292452][ T30] schedule_preempt_disabled+0x13/0x30 [ 1824.299496][ T30] __mutex_lock+0x7f7/0x1550 [ 1824.312461][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1824.319546][ T30] ? __mutex_lock+0x608/0x1550 [ 1824.332540][ T30] ? nfsd_nl_listener_set_doit+0x141/0x1670 [ 1824.342576][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1824.352454][ T30] ? __asan_memset+0x22/0x50 [ 1824.362617][ T30] ? __nla_validate_parse+0x2480/0x2dc0 [ 1824.372466][ T30] nfsd_nl_listener_set_doit+0x141/0x1670 [ 1824.382576][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1824.392780][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1824.412466][ T30] ? __nla_parse+0x40/0x60 [ 1824.417012][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1824.432590][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1824.440632][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1824.452481][ T30] ? __asan_memcpy+0x40/0x70 [ 1824.464367][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1824.470830][ T30] ? bpf_lsm_capable+0x9/0x20 [ 1824.486028][ T30] ? security_capable+0x7e/0x2c0 [ 1824.503760][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1824.519020][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1824.531306][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1824.538135][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1824.543486][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1824.548848][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1824.554820][ T30] ? down_read+0x270/0x2e0 [ 1824.559462][ T30] ? genl_rcv+0xd/0x40 [ 1824.566378][ T30] genl_rcv+0x28/0x40 [ 1824.570589][ T30] netlink_unicast+0x75c/0x8e0 [ 1824.579281][ T30] netlink_sendmsg+0x813/0xb40 [ 1824.596041][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1824.614141][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1824.629429][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1824.648091][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1824.662596][ T30] ? __might_fault+0xaf/0x130 [ 1824.671170][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1824.678937][ T30] ? import_iovec+0x73/0xa0 [ 1824.684348][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1824.689365][ T30] ? try_to_wake_up+0x7f2/0x1380 [ 1824.694603][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1824.700120][ T30] ? futex_wait+0x2a2/0x390 [ 1824.705079][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1824.710343][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1824.715499][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1824.721322][ T30] ? rcu_is_watching+0x15/0xb0 [ 1824.739106][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.751095][ T30] do_syscall_64+0x174/0x580 [ 1824.767150][ T30] ? trace_irq_disable+0x3b/0x140 [ 1824.781360][ T30] ? clear_bhb_loop+0x40/0x90 [ 1824.792437][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.801121][ T30] RIP: 0033:0x7fb6d3b9ce59 [ 1824.806421][ T30] RSP: 002b:00007fb6d4b43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1824.816136][ T30] RAX: ffffffffffffffda RBX: 00007fb6d3e15fa0 RCX: 00007fb6d3b9ce59 [ 1824.824302][ T30] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1824.832980][ T30] RBP: 00007fb6d3c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1824.841045][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1824.849184][ T30] R13: 00007fb6d3e16038 R14: 00007fb6d3e15fa0 R15: 00007ffc2c2a85f8 [ 1824.859610][ T30] [ 1824.862987][ T30] [ 1824.862987][ T30] Showing all locks held in the system: [ 1824.870839][ T30] 1 lock held by khungtaskd/30: [ 1824.880967][ T30] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1824.939640][ T30] 2 locks held by getty/5392: [ 1824.944653][ T30] #0: ffff8880363710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1824.963336][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1825.003411][ T30] 3 locks held by kworker/u8:14/7540: [ 1825.017564][ T30] 2 locks held by syz.3.10032/10555: [ 1825.033603][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1825.052433][ T30] #1: ffffffff8ec8b2c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1825.082584][ T30] 2 locks held by syz.2.10965/13631: [ 1825.089610][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1825.110434][ T30] #1: ffffffff8ec8b2c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1825.156180][ T30] [ 1825.160102][ T30] ============================================= [ 1825.160102][ T30] [ 1825.178068][ T30] NMI backtrace for cpu 1 [ 1825.178090][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1825.178113][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1825.178127][ T30] Call Trace: [ 1825.178137][ T30] [ 1825.178147][ T30] dump_stack_lvl+0xe8/0x150 [ 1825.178179][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1825.178298][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1825.178325][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1825.178361][ T30] sys_info+0x135/0x170 [ 1825.178420][ T30] watchdog+0xfd3/0x1030 [ 1825.178462][ T30] ? watchdog+0x1c9/0x1030 [ 1825.178502][ T30] kthread+0x389/0x470 [ 1825.178532][ T30] ? __pfx_watchdog+0x10/0x10 [ 1825.178562][ T30] ? __pfx_kthread+0x10/0x10 [ 1825.178592][ T30] ret_from_fork+0x514/0xb70 [ 1825.178621][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1825.178644][ T30] ? __switch_to+0xc79/0x1410 [ 1825.178689][ T30] ? __pfx_kthread+0x10/0x10 [ 1825.178720][ T30] ret_from_fork_asm+0x1a/0x30 [ 1825.178765][ T30] [ 1825.178774][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1825.297049][ C0] NMI backtrace for cpu 0 [ 1825.297069][ C0] CPU: 0 UID: 0 PID: 17386 Comm: syz.4.11997 Not tainted syzkaller #0 PREEMPT(full) [ 1825.297090][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1825.297102][ C0] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 1825.297132][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 3c 42 86 00 48 c7 c3 d8 89 3a 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d d9 82 8e 11 74 11 83 e0 04 c1 e8 02 5b [ 1825.297148][ C0] RSP: 0018:ffffc90003946cc0 EFLAGS: 00000802 [ 1825.297172][ C0] RAX: 0000000000000000 RBX: ffff8880b86339d8 RCX: 0000000080000002 [ 1825.297186][ C0] RDX: 0000000000000000 RSI: ffffffff8c28b9c0 RDI: ffffffff8c28b980 [ 1825.297199][ C0] RBP: ffffffff8238b665 R08: 0000000000000000 R09: 0000000000000000 [ 1825.297211][ C0] R10: dffffc0000000000 R11: fffff940000d5b49 R12: 0000000000000002 [ 1825.297230][ C0] R13: ffffffff8e95cc20 R14: ffffffff8e26b790 R15: dffffc0000000000 [ 1825.297245][ C0] FS: 0000000000000000(0000) GS:ffff88812528b000(0000) knlGS:0000000000000000 [ 1825.297260][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1825.297272][ C0] CR2: 000020000036c030 CR3: 0000000074d3c000 CR4: 00000000003526f0 [ 1825.297289][ C0] Call Trace: [ 1825.297297][ C0] [ 1825.297307][ C0] lock_acquire+0x5f/0x350 [ 1825.297332][ C0] ? mod_memcg_lruvec_state+0xd5/0x270 [ 1825.297356][ C0] mod_memcg_lruvec_state+0xf5/0x270 [ 1825.297375][ C0] ? mod_memcg_lruvec_state+0xd5/0x270 [ 1825.297394][ C0] ? mod_memcg_lruvec_state+0xd5/0x270 [ 1825.297416][ C0] lru_gen_update_size+0x801/0xd10 [ 1825.297443][ C0] lru_gen_del_folio+0x31c/0x540 [ 1825.297466][ C0] ? __pfx_lru_gen_del_folio+0x10/0x10 [ 1825.297492][ C0] __page_cache_release+0x5bd/0xd60 [ 1825.297515][ C0] folios_put_refs+0x775/0xb40 [ 1825.297542][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1825.297563][ C0] ? free_swap_cache+0x109/0x300 [ 1825.297587][ C0] free_pages_and_swap_cache+0x41d/0x490 [ 1825.297614][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1825.297636][ C0] ? __schedule+0x1837/0x5740 [ 1825.297690][ C0] tlb_flush_mmu+0x6d3/0xa30 [ 1825.297719][ C0] ? __zap_vma_range+0x3db7/0x4b70 [ 1825.297739][ C0] __zap_vma_range+0x3de2/0x4b70 [ 1825.297789][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 1825.297813][ C0] ? mas_find+0xb0e/0xd30 [ 1825.297831][ C0] ? unmap_vmas+0x1c5/0x570 [ 1825.297850][ C0] unmap_vmas+0x3ac/0x570 [ 1825.297873][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1825.297906][ C0] exit_mmap+0x280/0x9e0 [ 1825.297932][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1825.297964][ C0] ? uprobe_clear_state+0x53/0x3f0 [ 1825.297998][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1825.298029][ C0] ? uprobe_clear_state+0x2bc/0x3f0 [ 1825.298059][ C0] __mmput+0x118/0x430 [ 1825.298078][ C0] exit_mm+0x1f6/0x2d0 [ 1825.298104][ C0] do_exit+0x6a2/0x22c0 [ 1825.298134][ C0] ? __pfx_do_exit+0x10/0x10 [ 1825.298165][ C0] ? cgroup1_freezing+0x20/0x350 [ 1825.298188][ C0] ? cgroup1_freezing+0x20/0x350 [ 1825.298217][ C0] do_group_exit+0x21b/0x2d0 [ 1825.298241][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1825.298261][ C0] get_signal+0x1284/0x1330 [ 1825.298292][ C0] arch_do_signal_or_restart+0xbc/0x840 [ 1825.298324][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1825.298357][ C0] ? __x64_sys_recvmmsg+0x198/0x250 [ 1825.298388][ C0] exit_to_user_mode_loop+0xa9/0x680 [ 1825.298405][ C0] ? rcu_is_watching+0x15/0xb0 [ 1825.298428][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.298448][ C0] do_syscall_64+0x353/0x580 [ 1825.298467][ C0] ? trace_irq_disable+0x3b/0x140 [ 1825.298495][ C0] ? clear_bhb_loop+0x40/0x90 [ 1825.298517][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.298535][ C0] RIP: 0033:0x7f121899ce59 [ 1825.298551][ C0] Code: Unable to access opcode bytes at 0x7f121899ce2f. [ 1825.298560][ C0] RSP: 002b:00007f12197de028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1825.298579][ C0] RAX: 000000000000f000 RBX: 00007f1218c15fa0 RCX: 00007f121899ce59 [ 1825.298592][ C0] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000007 [ 1825.298605][ C0] RBP: 00007f1218a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1825.298617][ C0] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000000 [ 1825.298628][ C0] R13: 00007f1218c16038 R14: 00007f1218c15fa0 R15: 00007ffe2497ff78 [ 1825.298654][ C0] [ 1825.740971][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1825.747913][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1825.757064][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1825.767198][ T30] Call Trace: [ 1825.770690][ T30] [ 1825.773662][ T30] vpanic+0x56c/0xa60 [ 1825.777689][ T30] ? __pfx___schedule+0x10/0x10 [ 1825.782630][ T30] ? __pfx_vpanic+0x10/0x10 [ 1825.787179][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1825.793433][ T30] panic+0xc5/0xd0 [ 1825.797199][ T30] ? __pfx_panic+0x10/0x10 [ 1825.801658][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1825.807126][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1825.813425][ T30] watchdog+0x102c/0x1030 [ 1825.817811][ T30] ? watchdog+0x1c9/0x1030 [ 1825.822280][ T30] kthread+0x389/0x470 [ 1825.826432][ T30] ? __pfx_watchdog+0x10/0x10 [ 1825.831154][ T30] ? __pfx_kthread+0x10/0x10 [ 1825.835796][ T30] ret_from_fork+0x514/0xb70 [ 1825.840431][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1825.845587][ T30] ? __switch_to+0xc79/0x1410 [ 1825.850314][ T30] ? __pfx_kthread+0x10/0x10 [ 1825.854944][ T30] ret_from_fork_asm+0x1a/0x30 [ 1825.859760][ T30] [ 1825.863426][ T30] Kernel Offset: disabled [ 1825.867770][ T30] Rebooting in 86400 seconds..