last executing test programs: 2m23.31646605s ago: executing program 1 (id=329): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000100039040200"/20, @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 2m23.186468213s ago: executing program 1 (id=332): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="c9f7b98600"/14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x8) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x0, 0xfffffffd, 0x40000006}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x8000}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m22.884801736s ago: executing program 1 (id=338): socket(0xa, 0x3, 0xff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0xc8, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}, @typed={0x4, 0x1e}, @typed={0x14, 0x97, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x14, 0x14e, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x80, 0x141, 0x0, 0x1, [@typed={0x14, 0x78, 0x0, 0x0, @ipv6=@mcast2}, @generic="ea978e249d408e25de67b3a35eedaa9e1fa9b63457ded26c7ce42abbc73547fdcba76d970537b6e9baeeb8be55c0c163e9ede9fdc3d214dd0e83fe04695a1993c1e40e9f", @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @typed={0x4, 0x5a}, @typed={0x8, 0x3d, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x4, 0x125}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_emit_ethernet(0x9f, &(0x7f0000000140)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x69, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x40}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xc001, {0x2, 0x6, "081331", 0x9, 0xff, 0xff, @loopback, @mcast2, [@srh={0x32, 0x4, 0x4, 0x2, 0x27, 0x8, 0x8, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}]}], "556b2e29f89852e4b724ab7a2456a65bf1"}}}}}}}, 0x0) 2m22.786464552s ago: executing program 1 (id=340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0x7, &(0x7f0000000240)=0x1) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x71bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r4}, &(0x7f00000012c0), &(0x7f0000001300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xd, &(0x7f0000000700)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xff8c) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000002100000026bd7000651289d44480fedbdf25021420000500000814000000080002007f00060008000d000400000008000200ac1e010108000100a41414bb52d3f4ba922e4fa8fbb224e910eded99671e05740e835a49d163fb522c52604d4ff15009b439c7bff180818d1f469bc5a2047b83bba8d9b0246bbc869a323ebe4f5a42f17f68a68605e0ff8c21a666c4ddff1c9ebcb7369daad9ef94647ec51ca9927142ea7265b1e8328ab4f13875266bdb8b54e3dffcdea96467189b376b2a864a655201199fdd98abc381c7a82243f5f93bd8f85441c8f37b921a0f"], 0x3c}}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r6 = socket(0x3, 0x5, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) (async) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000006c0)=0x5ac7, 0x4) (async) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000006c0)=0x5ac7, 0x4) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) 2m21.114972073s ago: executing program 1 (id=366): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000540)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="a0"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) (fail_nth: 2) 2m20.779125135s ago: executing program 1 (id=370): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x7, 0x0, 0x1}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) ioctl$int_in(r1, 0x5421, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) (fail_nth: 10) 2m5.69235812s ago: executing program 32 (id=370): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x7, 0x0, 0x1}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) ioctl$int_in(r1, 0x5421, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) (fail_nth: 10) 5.232411997s ago: executing program 0 (id=1742): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000500)={@local, @empty, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x6, 0x0, 0x2}}, {@llc={0x4, {@snap={0xaa, 0x1, "84", "955d15", 0x8884}}}}}, 0x0) 4.823318728s ago: executing program 0 (id=1748): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) unshare(0x22020600) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="03000000", @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff0000000000000000"], 0x44}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df25080001000000000009"], 0x24}, 0x1, 0x0, 0x0, 0x2400c000}, 0x40810) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(r3, r2, 0x80000001, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x80000001}, 0x8) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r6, 0x1000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x11) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa1e2fd22ecd4da32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$nfc_llcp(r0, 0x0, 0x0) 3.938803553s ago: executing program 2 (id=1752): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000640), &(0x7f0000000840)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 3.740068741s ago: executing program 0 (id=1754): syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x2}]}}}}}}}, 0x0) 3.566884801s ago: executing program 0 (id=1756): r0 = socket$nl_route(0x10, 0x3, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000500)="0f15ce0e2a894e2a", 0x8}], 0x6, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x298, 0x168, 0x0, 0x0, 0x298, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x200}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x11}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400002}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x58}}, 0x1020) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, 0x0, 0x40040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r5}, 0x14) setsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f00000004c0)=0x9, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000400), &(0x7f0000000440)=r7}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0800976b81bb6655ce6abe7ad599214a5805"], 0x164}}, 0x0) 3.101810247s ago: executing program 0 (id=1762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x48044) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) getsockopt$inet6_int(r4, 0x29, 0xc9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x400, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104, 0x30}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0x4}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x44}}, 0x440088c4) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f00000001c0)={{0x0, @loopback, 0x4e23, 0x3, 'sed\x00', 0x10, 0x7, 0x4e}, {@rand_addr=0x64010102, 0x4e22, 0x3, 0x3e, 0x1, 0xd8b3}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x48044) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) (async) getsockopt$inet6_int(r4, 0x29, 0xc9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x400, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104, 0x30}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0x4}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x44}}, 0x440088c4) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f00000001c0)={{0x0, @loopback, 0x4e23, 0x3, 'sed\x00', 0x10, 0x7, 0x4e}, {@rand_addr=0x64010102, 0x4e22, 0x3, 0x3e, 0x1, 0xd8b3}}, 0x44) (async) 2.534769063s ago: executing program 0 (id=1766): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) bind$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 2.235292912s ago: executing program 2 (id=1770): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={r2, 0xee, "39dde65adb41e33fe6277a4d903bd067fd7968e4b38fb5489e877ac111261859dd392f3d22d5d49f9e3aea1edba7f180d25e8b2afed8b710842428472d461c0c4c076b5b97e629bdd95cdb60312f1c4b74a72b67122c6fab4bbf66a301cda7b08384624ae04deefedb363ecfbbbf7f47cac24b388aa275e7a09548917709fca402099f8b878358e161ac6cb7ac593a24df96ff88d6a4efa7433c587a8f70705d5df317265c569410e2a0883a0e4fa7a29e8553393de60ad94499083089c4a509443a3c0c0268584cafa7501ec89cb16f9010df5d41a55bc3dc5a3ad16f1faf34a9168b663fe346152d8378593abf"}, &(0x7f0000000100)=0xf6) 2.163511122s ago: executing program 2 (id=1772): unshare(0x22020400) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40010102) 2.00235045s ago: executing program 2 (id=1775): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000), 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000002223631cba0f934e5d92e000ddc418181b196269845ea2d791b4bc13482f27f66ca1bbc099206ef11df6e2285cbb07288509b91d449ff5022e40b2a55647d3ec0b1bd51240a933a2a62bbacc8254968fa7b38421f100"/113, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r2, 0xffffffffffffc000) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c00038006000600801a0000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x0, 0x503, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x39}}}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x44810) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) listen(r1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290391200100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r6 = epoll_create(0xaa22) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000080)) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="080088ca0303ff7fc30909000900aaaaaaaaaa33aaaaaaaaaa3488"], 0x27) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="02030e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0xfc9c, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.412077835s ago: executing program 3 (id=1781): r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0x0, 0x12001, &(0x7f00000000c0)={0x2, 0x9, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet_sctp(0x2, 0x3, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xc, "56fcba71c3717101527f0ca6"}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r2, 0x7}, &(0x7f00000002c0)=0xc) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xe, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @multicast, @void, {@generic={0x8906}}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3c, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x2e, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}, {"9fc083237a37"}}}}}}, 0x0) 1.339225412s ago: executing program 3 (id=1783): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x7, 0x401}, @generic={0x5, 0x12, "97134cb6060000000b00000000000000"}, @md5sig={0x13, 0x12, "87bc7875c06531ac8010bbdf64bb797a"}, @exp_fastopen={0xfe, 0xb, 0xf989, "5d7d0438043979"}]}}}}}}}, 0x0) 1.262979671s ago: executing program 4 (id=1784): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept(r0, 0x0, 0x0) 1.215465577s ago: executing program 4 (id=1785): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, 0x1}, 0x54) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xfe6d, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) (fail_nth: 24) 971.895139ms ago: executing program 5 (id=1786): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000500)={@local, @empty, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x6, 0x0, 0x2}}, {@llc={0x4, {@snap={0xaa, 0x1, "84", "955d15", 0x8884}}}}}, 0x0) 961.411515ms ago: executing program 3 (id=1787): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=@newqdisc={0x44, 0x24, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0xf, 0x3}, {0x10, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x200}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_RATE={0x6, 0x5, {0xec, 0xc3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES16=r12], 0x54}, 0x1, 0x0, 0x0, 0x200004c1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000480)={'gretap0\x00', r11, 0x8000, 0x8, 0x7, 0x4, {{0x1c, 0x4, 0x2, 0x1, 0x70, 0x65, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@end, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xe, 0x0, [{0x1, 0x8, "da5eb404c09c"}]}, @timestamp_addr={0x44, 0xc, 0xf4, 0x1, 0x8, [{@private=0xa010101, 0x1}]}, @lsrr={0x83, 0x7, 0xe7, [@empty]}, @noop, @rr={0x7, 0x23, 0x7, [@broadcast, @multicast1, @loopback, @private=0xa010101, @local, @multicast1, @private=0xa010102, @empty]}, @generic={0x7, 0xf, "86c8ff09e7e527b9322432d4fe"}]}}}}}) sendmsg$inet(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="0c19e64485045a4a8a27b5349cc1c6cc95fca8948e574927e28db0a69f763f3cd8f5ccc9", 0x24}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f00000001c0)="8fb6f0b0f330584e37", 0x9}], 0x3, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x78, 0x0, 0x7, {[@rr={0x7, 0x13, 0x9a, [@loopback, @empty, @multicast1, @multicast2]}, @timestamp={0x44, 0x28, 0xd0, 0x0, 0x9, [0x6, 0x8, 0x10001, 0x1, 0x7, 0xfffffffa, 0x3ff, 0x9, 0x8]}, @timestamp={0x44, 0x2c, 0x44, 0x0, 0x4, [0x3, 0x9, 0x2, 0x8, 0xc, 0xacd, 0x6, 0xc72, 0x8, 0xa]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0xf8}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r16, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) 961.050971ms ago: executing program 4 (id=1788): ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@delsa={0x50, 0x12, 0x1, 0x0, 0x0, {@in=@multicast2, 0x4d5}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}, @extra_flags={0x8, 0x18, 0x3}]}, 0x50}}, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000240)={0x18, 0x4000000, {0x2, @multicast, 'bridge_slave_1\x00'}}) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 920.86782ms ago: executing program 4 (id=1789): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() r3 = socket$kcm(0x10, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x13}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000003}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x6) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000fbff00020073797a300000010008004100736977001400330073797a6b616c6c65ff01000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r9 = accept(r3, 0x0, &(0x7f0000000580)) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000680)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xffff, @bcast, @bpq0, 0x6, [@default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @bcast]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000300)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r10}, 0x4) r11 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d03d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1bf4c727f30db4778beff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d571366", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, 0x0, 0x0, 0x806}], 0x1, 0x0) recvmmsg(r11, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/32, 0x20}], 0x1}, 0x1}], 0x2, 0x2101, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r12) r13 = getpid() sendmsg$unix(r12, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r13, 0xee00, 0xee01}}}], 0x20, 0x8010}, 0x80) sendmmsg$unix(r1, &(0x7f00000017c0)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000003500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r13}}}], 0x58, 0x40004}}], 0x1, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/pid_for_children\x00') sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1402, 0x8, 0x70bd28, 0x9, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8001) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@gettaction={0x1c, 0x32, 0x2, 0x70bd21, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000) 892.867289ms ago: executing program 5 (id=1790): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x9, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x3, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 836.693906ms ago: executing program 2 (id=1791): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "34e141d7721d911a", "02c067b14b9706e5d42008bdea47fdde", "66cd0d6f", "2424f53a8586a944"}, 0x28) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x7) write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="010086ddde00120000000000000063b9e7a900000001fc020000000000000000000000000001ff02"], 0x36) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da25", 0xbf}, {&(0x7f0000000a40)="a768e2d00ec5757e8f5f433f84c63a269953b038d5817617556310f9ee538468ee62c0d68b6b9fe9ade83c789bd66faf569fc7fbddfc2f6e4275c1df15f3a83eaa316135a25fe4533b1ca0ef0e263cab2f2549bb9e6b5695cbd3dfb61276f7bdee6ed41c81fab79a89034ceb07d274f93dbc4f59593d761520ba31b64e0a2ab5e78fb3667f84e7e29131ec5d39d6eb916df6133993516eaf9ae557d97dc044a88fb00065cb052a6cce15", 0xaa}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8804d", 0xf7}], 0x3, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16", 0x4d}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9eb31c60880c389de6a8919a67", 0xbc}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27", 0xac}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c3b0fa44d9ca5ffbccfd95395", 0x57}, {&(0x7f0000000700)="9af11ddfb8ceb516a838dd3cedbe8ce91e02bfabade423d9a4d0ec122b7037a6bffa4c8dff825b4bb6af22c579faf7cd32f8fa2c632ee236967cf01e81fd58fa7de7dc69417ed5b34378c0cecc6e594591c035a1492419209e9b5aff174a1d1462bd1e5a8b80fbb1ce5c906a977485c7ae6af8991a8adedcede4e0eef2d587cf0504acfc212433c76b69460a6bd59788eff72bb7a32bdadca740aa47e60fc2210d5d4a9547afe26196f225cc9ddde32a2df9cccd74a4ba07a2ce22171a60f564119ed5d9dac59d865c6e1547e2c472e9bd574b1250286c316bd8bcc28407ca0e61b1c0e723", 0xe5}, {&(0x7f0000000fc0)="26166583e37c8b7d00ab5146a77c416387ef936b5c5d71546721b5fe2369b8b7009262933b2d3280235aff09fc6b0d14ad0d2336b4f21ed53375838ff7f6c567b372b0124a5f1bc6ca1eef4cfdfe8e97b9cadc99cc2a870d680138b4bfe181d8181ce0e924e85ef677049d765a870450b00b1adda0d57413a2acb1d18236df1ea69f", 0x82}], 0x3, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001", @ANYRES16=0x0], 0x6f4}}, 0x0) 647.975199ms ago: executing program 2 (id=1792): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f00000019c0)=ANY=[@ANYBLOB="18000000040000000000000000000000850000007b00000018010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000002ffffffb702000008000000b703000007030000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000002d00)="3159c43e8c0e463e", 0x8}, {0x0}], 0x2}}], 0x0, 0x0) 646.542827ms ago: executing program 4 (id=1793): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r4, 0x5}, 0x8) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000280)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) listen(r1, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x929002}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000f06c7b4139b0f37eeaa31cab204b3c28d050000000000000000000700000405000100070000000500010007000000050001000700002fcccb0006000b000300000006000b00ffff000006000b0004000000486d99944d31d7a390cba7091e153694cd0000000000001691882809d2eb18d04018f68994c2a1fd538b6f1e7ea39ab27c1df9ef87f1c076c91af83705360455d02d2fdbb9d06a58eafeedf1edccf11602005132d737e267d432130cd80b0383e24161a3b9f9a223735a80243e2165f07c9912b99ebe2b03f444e13b02f051bd1c9f6e422856732f5accd67a925b362cfbabc6b8ca6eb679852aed238dc0ce91f5524436eb58d082724ebac5dd970aacd47d30d88015974f6fb4c1aa608d5fda466f7869a76dbbab2d95eb"], 0x44}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r7, 0x0, 0x0) bind$llc(r7, &(0x7f0000000140)={0x1a, 0x320, 0x9, 0x9, 0x2, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x13}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfffc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x1}]}}]}, 0x38}}, 0x0) 553.078826ms ago: executing program 5 (id=1794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000304004000000000000000000400", @ANYBLOB="00a3000000000000200012800c0001006d6163766c616e00100002800a"], 0x40}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (async) unshare(0x2040400) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x177304b1}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x800c054) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0xa, 0x15, 0x363d, 0x2}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r6, &(0x7f0000001940), 0x0}, 0x20) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x9, [@volatile={0x9, 0x0, 0x0, 0x9, 0x2}, @float={0xd, 0x0, 0x0, 0x10, 0x8}, @fwd={0x3}, @union={0xe, 0x3, 0x0, 0x5, 0x1, 0x5, [{0xe, 0x1, 0x2}, {0x5, 0x4, 0x9}, {0x2, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x3}}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x29, 0x3}, @func={0xb, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x3}]}, {0x0, [0x7b104c90e104aa28, 0x61, 0x5f, 0x30, 0x5f, 0x71, 0x0]}}, &(0x7f0000000140)=""/125, 0xb9, 0x7d, 0x1}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x7b50, '\x00', 0x0, r7, 0x5, 0x4, 0x3}, 0x50) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r4, r5, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) recvmmsg(r8, 0x0, 0x0, 0x10000, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000068000100"], 0x40}}, 0x4000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000040000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c00020018001780140001"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="58000000028498d219de865dfc000000000000000900020073797a010000000005000400000000000c000300686173681a697000140007800500150000000000feff11400000000c050005000a0000000500010006000000"], 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 466.668443ms ago: executing program 3 (id=1795): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept(r0, 0x0, 0x0) 383.547739ms ago: executing program 5 (id=1796): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000000240), 0x0, 0x40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty, 0x4}}, 0x8, 0x1, 0xfffffe01, 0x0, 0xb3550aa4ba878386, 0x2, 0x2}, 0x9c) 336.5241ms ago: executing program 3 (id=1797): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @broadcast}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 296.015292ms ago: executing program 5 (id=1798): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180069424a12965a600050000060001000200000008000300ac1414aa0800060001000000849a1688ee6a26d73f604e01d404fc2132a4e0a959a1a90d98d3da21"], 0x38}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x9, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000c80)={0x34, r7, 0x1, 0x170bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x40040) r8 = openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r8, 0x0, 0x9) r9 = epoll_create1(0x0) r10 = socket(0x25, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000000)={0x20000010}) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000640)=0x7ff, 0x4) sendmsg$nl_xfrm(r10, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=@flushsa={0x1a8, 0x1c, 0x4, 0x70bd2b, 0x25dfdbfd, {0xff}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d3, 0x2b}, 0x2, @in6=@private2, 0x3501, 0x0, 0x3, 0x26, 0x3, 0xaf71, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0xff}, 0x8, @in=@multicast1, 0x3505, 0x1, 0x0, 0x1a, 0xff, 0x8, 0xa1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d6, 0x2b}, 0x2, @in6=@mcast1, 0x3505, 0x3, 0x2, 0x8, 0x7, 0x1000, 0x2}]}, @encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @policy_type={0xa, 0x10, {0x1}}, @replay_thresh={0x8, 0xb, 0x8}, @sec_ctx={0x18, 0x8, {0x14, 0x8, 0x1, 0xe, 0xc, "b7f3bc55b3b9fdbc3016b43f"}}, @lastused={0xc, 0xf, 0x1}, @sec_ctx={0xe, 0x8, {0xa, 0x8, 0x0, 0x4, 0x2, "da78"}}, @replay_thresh={0x8, 0xb, 0x8}, @algo_aead={0x5a, 0x12, {{'pcrypt(morus1280-avx2)\x00'}, 0x70, 0xc0, "e1601879e7a8dcfde651d75e8b27"}}]}, 0x1a8}}, 0x22000000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) unshare(0x20000400) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x6, 0x9, 0x9, 0x8ed, r0, 0x81b, '\x00', 0x0, r0, 0x1, 0x3, 0x4, 0xd}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r12, &(0x7f0000000080), 0x0}, 0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 91.037222ms ago: executing program 3 (id=1799): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)) (async) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000c40)=@deltaction={0xa0, 0x31, 0x8, 0x70bd2b, 0x35dfdbfe, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xa, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x83, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8011}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000c40)=@deltaction={0xa0, 0x31, 0x8, 0x70bd2b, 0x35dfdbfe, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xa, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x83, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8011}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x400}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x400}) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_tcp_int(r5, 0x6, 0x2, 0x0, &(0x7f0000000180)) unshare(0x22020400) sendmsg$qrtr(r0, &(0x7f0000000b40)={&(0x7f00000004c0)={0x2a, 0x2, 0xfffffffe}, 0xc, &(0x7f0000000a00)=[{&(0x7f0000000500)="dd3935033d097db717bc9bf0b6ad076594f6ac7cd8953649de92b4c842b4f747f5e90dd0f6d83b5f6701036b173f99b36c8dd8e1987605b5f4d81ca4cd935fab8b9d27888ed542941c7a776d3d74cd1ef93afbf0355395d6c688a0a6f6bde38071e5796c8fa9571aa1bd", 0x6a}, {&(0x7f0000000700)="e8d67516b2dce8bc831b30dfbe9590f6e1c7060834c9fb57f70b973be788494fd1ec66561982fdf0d15365eee830cf0807d3fa700514e1cd200cd739c4083e5166887999c65e1a7e11fa7e3f360645a6f03a5a35b46ddfedaf3696e8f320d8c13b4d79609195e2dd1b17f2be25a464602e58829d470762ec1a8ae660534af48ce98be8c7082e0368bd57f3fee9263ca1b5477134c6d271086d425cfe3725", 0x9e}, {&(0x7f00000005c0)="e84492438c6a", 0x6}, {&(0x7f00000007c0)="4099a27fb5eb3de2affd424db1a1bb308a32dcb3eb0c30c063c3d31052c70aaac4d8362a9a1db523d770eb0077d90f8ac0e1132f343dbe744e60c9652cbefb64bf52f364776221e5ea5e", 0x4a}, {&(0x7f0000000600)="8f29fe1b", 0x4}, {&(0x7f0000000840)="7a64ed0f4ea4260f7ba5055719de8025b62f728ffc3e10a07664d76cad8620866c98054c96ae14e04b27d3d50b6d5767ce92ac5f548f414a179e4768ca086d3b264fc5389edfaec93882ac021896b36252d377cd3e3f35f2efaee475a805902cfeee5c83d1ba487b71e76c02c418674acaeb3b0453c0a27fa2c497ecc240330e915748d8c227edde97d7333f801a43fc7024e0bb6bd2cdae94db79ce8742dfca0fe9b1e45b707fd435c45e47e941b8eec23848329b0cd6373369bc19367a296afb14c4ad3af7a07eeb4d034df21edf3ba3d724b12e668b6f4950b01af6af27a052a08950e84758a2a1113fcb22946ef4b9b018285287", 0xf6}, {&(0x7f0000000940)="363cb37b7ceee31b2569867ae10a685f99c572ddadf340382e5c350537b1f70554e164be1ae1eb3cf5c826fb8a17f239ec698d6086a3c554fff7b0d834d69d6f216a68f185e5c5a4435fca598f8a31806b341e2e53a81431e43246aa84591a59e2dac7a3d5c882013ba9ece4f11c1eae73ca1455669a2023e0b6628c068344d269f2043daca0b1999bd7a25b6d439f707418fcdbaa710316982b4249c73ccfabb7e3", 0xa2}], 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="b8000000000000000201000009000000d6f75fc2e5fbf42fdc6191affd85c1922da1b9154f80afd75b1e8ecb296c464b81ff036b05d8e9ad4569d4c78d620d7936948ed806a7a418e0d6634108e7fa84ae19c9aa0e549cca5aba7400c0995cbb951400c516807c4c1efca4ce58071884bc2ebc0a1aca50a5b960de4c69eebff9d94804bf0fffa53df4447b09f219a097e78b8ecb4876296e73b5d70213744611a199025b6b8529bae5e900"/184], 0xb8}, 0x38) (async) sendmsg$qrtr(r0, &(0x7f0000000b40)={&(0x7f00000004c0)={0x2a, 0x2, 0xfffffffe}, 0xc, &(0x7f0000000a00)=[{&(0x7f0000000500)="dd3935033d097db717bc9bf0b6ad076594f6ac7cd8953649de92b4c842b4f747f5e90dd0f6d83b5f6701036b173f99b36c8dd8e1987605b5f4d81ca4cd935fab8b9d27888ed542941c7a776d3d74cd1ef93afbf0355395d6c688a0a6f6bde38071e5796c8fa9571aa1bd", 0x6a}, {&(0x7f0000000700)="e8d67516b2dce8bc831b30dfbe9590f6e1c7060834c9fb57f70b973be788494fd1ec66561982fdf0d15365eee830cf0807d3fa700514e1cd200cd739c4083e5166887999c65e1a7e11fa7e3f360645a6f03a5a35b46ddfedaf3696e8f320d8c13b4d79609195e2dd1b17f2be25a464602e58829d470762ec1a8ae660534af48ce98be8c7082e0368bd57f3fee9263ca1b5477134c6d271086d425cfe3725", 0x9e}, {&(0x7f00000005c0)="e84492438c6a", 0x6}, {&(0x7f00000007c0)="4099a27fb5eb3de2affd424db1a1bb308a32dcb3eb0c30c063c3d31052c70aaac4d8362a9a1db523d770eb0077d90f8ac0e1132f343dbe744e60c9652cbefb64bf52f364776221e5ea5e", 0x4a}, {&(0x7f0000000600)="8f29fe1b", 0x4}, {&(0x7f0000000840)="7a64ed0f4ea4260f7ba5055719de8025b62f728ffc3e10a07664d76cad8620866c98054c96ae14e04b27d3d50b6d5767ce92ac5f548f414a179e4768ca086d3b264fc5389edfaec93882ac021896b36252d377cd3e3f35f2efaee475a805902cfeee5c83d1ba487b71e76c02c418674acaeb3b0453c0a27fa2c497ecc240330e915748d8c227edde97d7333f801a43fc7024e0bb6bd2cdae94db79ce8742dfca0fe9b1e45b707fd435c45e47e941b8eec23848329b0cd6373369bc19367a296afb14c4ad3af7a07eeb4d034df21edf3ba3d724b12e668b6f4950b01af6af27a052a08950e84758a2a1113fcb22946ef4b9b018285287", 0xf6}, {&(0x7f0000000940)="363cb37b7ceee31b2569867ae10a685f99c572ddadf340382e5c350537b1f70554e164be1ae1eb3cf5c826fb8a17f239ec698d6086a3c554fff7b0d834d69d6f216a68f185e5c5a4435fca598f8a31806b341e2e53a81431e43246aa84591a59e2dac7a3d5c882013ba9ece4f11c1eae73ca1455669a2023e0b6628c068344d269f2043daca0b1999bd7a25b6d439f707418fcdbaa710316982b4249c73ccfabb7e3", 0xa2}], 0x7, &(0x7f0000000a80)=ANY=[@ANYBLOB="b8000000000000000201000009000000d6f75fc2e5fbf42fdc6191affd85c1922da1b9154f80afd75b1e8ecb296c464b81ff036b05d8e9ad4569d4c78d620d7936948ed806a7a418e0d6634108e7fa84ae19c9aa0e549cca5aba7400c0995cbb951400c516807c4c1efca4ce58071884bc2ebc0a1aca50a5b960de4c69eebff9d94804bf0fffa53df4447b09f219a097e78b8ecb4876296e73b5d70213744611a199025b6b8529bae5e900"/184], 0xb8}, 0x38) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000380)={{0xa, 0x4e23, 0x7e3dd389, @loopback, 0xfffffffe}, {0xa, 0x4e20, 0x7ff, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x6, {[0xfffffffb, 0x5, 0x6, 0x2, 0x97, 0x0, 0x1, 0x856]}}, 0x5c) socket(0x28, 0x5, 0x0) (async) r6 = socket(0x28, 0x5, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000903000000797a30000000000900020073797a3200000000430000001c0a05000000000000000010020000060c00034000000000000000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000903000000797a30000000000900020073797a3200000000430000001c0a05000000000000000010020000060c00034000000000000000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) pwrite64(r9, 0x0, 0x0, 0x0) 90.518514ms ago: executing program 4 (id=1800): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000500)={@local, @empty, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x6, 0x0, 0x2}}, {@llc={0x4, {@snap={0xaa, 0x1, "84", "955d15", 0x8884}}}}}, 0x0) 0s ago: executing program 5 (id=1801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) r1 = socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'wlan0\x00', 0x4000}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) epoll_create1(0x80000) r6 = socket(0x2b, 0x805, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)) epoll_create1(0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'bond_slave_1\x00', 0x20}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x1ec, 0x24, 0xf0b, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @TCA_STAB={0x1c0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x3, 0x5, 0x9, 0x2, 0xb, 0x5, 0x5}}, {0xe, 0x2, [0x5, 0x22, 0x5, 0xe92, 0x8]}}, {{0x1c, 0x1, {0x7, 0x65, 0x3, 0x6, 0x2, 0x0, 0x10000, 0x5}}, {0xe, 0x2, [0x9, 0x400, 0x1, 0x8, 0x7]}}, {{0x1c, 0x1, {0x7, 0x9, 0x3ff, 0x7fffffff, 0x0, 0xdb4, 0x8, 0x9}}, {0x16, 0x2, [0x3, 0x4, 0xf35, 0x4, 0xe4, 0x4, 0x73e2, 0x6, 0x9]}}, {{0x1c, 0x1, {0xb, 0x51, 0xff01, 0xda, 0x1, 0x8, 0x2, 0x9}}, {0x16, 0x2, [0x200, 0x9, 0x8, 0xfff8, 0x6, 0xffc0, 0x81, 0x3, 0x8000]}}, {{0x1c, 0x1, {0x2, 0x0, 0x1, 0xf, 0x0, 0x3ff, 0xc6a, 0xa}}, {0x18, 0x2, [0x4, 0x1161, 0x4, 0x57, 0x4, 0x200, 0x9, 0xff, 0x61c0, 0xd2]}}, {{0x1c, 0x1, {0x5e, 0xb7, 0x3, 0xbee, 0x0, 0xffffffff, 0x8, 0x3}}, {0xa, 0x2, [0x6, 0x7ff, 0x7]}}, {{0x1c, 0x1, {0xff, 0x76, 0x7fff, 0xe733, 0x2, 0xfffffffd, 0xd, 0x2}}, {0x8, 0x2, [0x5, 0x2]}}, {{0x1c, 0x1, {0x3, 0xb0, 0x8, 0xec9f, 0x1, 0x3ff, 0x8, 0x2}}, {0x8, 0x2, [0x3, 0x3]}}, {{0x1c, 0x1, {0xa, 0x6, 0x2, 0x1fb, 0x1, 0x9, 0xee, 0x9}}, {0x16, 0x2, [0x0, 0x1ff, 0x7, 0x4, 0x3, 0x3, 0x6, 0x0, 0x4]}}, {{0x1c, 0x1, {0x0, 0x80, 0x1, 0x3, 0x0, 0xc, 0xfffffff6, 0x2}}, {0x8, 0x2, [0x800, 0x1]}}]}]}, 0x1ec}}, 0x20000000) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) kernel console output (not intermixed with test programs): 27] macvtap1: left allmulticast mode [ 138.297357][ T7827] bridge0: left allmulticast mode [ 138.304104][ T7827] bridge0: left promiscuous mode [ 138.449538][ T7813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.475986][ T7813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.563501][ T7813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.586708][ T7813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.724955][ T7833] netlink: set zone limit has 4 unknown bytes [ 138.874423][ T7623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.932266][ T6801] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.950610][ T6801] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.040454][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.053017][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.061934][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.071207][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.095192][ T7623] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.112858][ T6801] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.123833][ T6801] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.199603][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.206773][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.288626][ T6801] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.295901][ T6801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.397577][ T7855] ip6t_srh: unknown srh invflags BA61 [ 139.405965][ T52] Bluetooth: hci5: command tx timeout [ 139.696878][ T7623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.095570][ T7623] veth0_vlan: entered promiscuous mode [ 140.113772][ T7623] veth1_vlan: entered promiscuous mode [ 140.179129][ T7623] veth0_macvtap: entered promiscuous mode [ 140.207991][ T7623] veth1_macvtap: entered promiscuous mode [ 140.231506][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 140.270468][ T7623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.300602][ T7623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.329586][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.353267][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.383560][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.418551][ T7905] lo speed is unknown, defaulting to 1000 [ 140.444802][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.618955][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.645100][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.857016][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.884166][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.202022][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 141.485908][ T52] Bluetooth: hci5: command tx timeout [ 141.640262][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 141.660602][ T7945] syzkaller0: entered promiscuous mode [ 141.667327][ T7945] syzkaller0: entered allmulticast mode [ 141.902825][ T7957] syzkaller0: entered promiscuous mode [ 141.916524][ T7957] syzkaller0: entered allmulticast mode [ 141.977303][ T7962] netlink: 76 bytes leftover after parsing attributes in process `syz.0.569'. [ 142.648268][ T7999] netlink: 'syz.2.578': attribute type 2 has an invalid length. [ 142.814255][ T7992] syzkaller0: entered promiscuous mode [ 142.831783][ T7992] syzkaller0: entered allmulticast mode [ 142.832312][ T7999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.578'. [ 142.972132][ T8009] syzkaller0: entered promiscuous mode [ 142.985157][ T8009] syzkaller0: entered allmulticast mode [ 143.137225][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'. [ 144.437561][ T8030] netlink: 104 bytes leftover after parsing attributes in process `syz.3.588'. [ 144.471889][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.2.587'. [ 144.527901][ T8028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'. [ 144.603843][ T8036] FAULT_INJECTION: forcing a failure. [ 144.603843][ T8036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.618650][ T8036] CPU: 0 UID: 0 PID: 8036 Comm: syz.0.591 Not tainted syzkaller #0 PREEMPT(full) [ 144.618675][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 144.618685][ T8036] Call Trace: [ 144.618692][ T8036] [ 144.618699][ T8036] dump_stack_lvl+0xe8/0x150 [ 144.618725][ T8036] should_fail_ex+0x412/0x560 [ 144.618749][ T8036] _copy_from_user+0x2d/0xb0 [ 144.618773][ T8036] ___sys_sendmsg+0x1c6/0x360 [ 144.618793][ T8036] ? __lock_acquire+0x6b5/0x2cf0 [ 144.618818][ T8036] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.618872][ T8036] ? __fget_files+0x2a/0x420 [ 144.618890][ T8036] ? __fget_files+0x3a0/0x420 [ 144.618916][ T8036] __x64_sys_sendmsg+0x1bd/0x2a0 [ 144.618940][ T8036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.618970][ T8036] ? __pfx_ksys_write+0x10/0x10 [ 144.619002][ T8036] do_syscall_64+0xe2/0xf80 [ 144.619030][ T8036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.619046][ T8036] ? trace_irq_disable+0x37/0x100 [ 144.619062][ T8036] ? clear_bhb_loop+0x60/0xb0 [ 144.619081][ T8036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.619097][ T8036] RIP: 0033:0x7fe44359aeb9 [ 144.619113][ T8036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.619126][ T8036] RSP: 002b:00007fe4417f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.619144][ T8036] RAX: ffffffffffffffda RBX: 00007fe443815fa0 RCX: 00007fe44359aeb9 [ 144.619156][ T8036] RDX: 0000000000001004 RSI: 0000200000000100 RDI: 0000000000000009 [ 144.619167][ T8036] RBP: 00007fe4417f6090 R08: 0000000000000000 R09: 0000000000000000 [ 144.619177][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.619186][ T8036] R13: 00007fe443816038 R14: 00007fe443815fa0 R15: 00007ffde05f6df8 [ 144.619210][ T8036] [ 144.620237][ T8036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.591'. [ 144.644127][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 144.652121][ T8036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.591'. [ 146.371808][ T8073] xt_hashlimit: size too large, truncated to 1048576 [ 146.384381][ T8067] lo speed is unknown, defaulting to 1000 [ 146.434990][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 146.502880][ T8075] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.767317][ T8075] bridge_slave_0 (unregistering): left allmulticast mode [ 146.791737][ T8075] bridge_slave_0 (unregistering): left promiscuous mode [ 146.805960][ T8075] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.374883][ T8110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.613'. [ 147.389959][ T8110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.613'. [ 148.628653][ T8123] netlink: 'syz.4.615': attribute type 1 has an invalid length. [ 148.640095][ T10] IPVS: starting estimator thread 0... [ 148.735369][ T8117] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 148.788530][ T8124] IPVS: using max 28 ests per chain, 67200 per kthread [ 149.235196][ T8146] lo speed is unknown, defaulting to 1000 [ 149.338927][ T8156] netlink: 56 bytes leftover after parsing attributes in process `syz.5.628'. [ 149.439906][ T8157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.627'. [ 149.478432][ T8157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.627'. [ 150.101127][ T8196] xt_l2tp: v2 doesn't support IP mode [ 150.136801][ T8196] FAULT_INJECTION: forcing a failure. [ 150.136801][ T8196] name failslab, interval 1, probability 0, space 0, times 0 [ 150.166540][ T8196] CPU: 1 UID: 0 PID: 8196 Comm: syz.5.640 Not tainted syzkaller #0 PREEMPT(full) [ 150.166568][ T8196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 150.166577][ T8196] Call Trace: [ 150.166583][ T8196] [ 150.166590][ T8196] dump_stack_lvl+0xe8/0x150 [ 150.166613][ T8196] should_fail_ex+0x412/0x560 [ 150.166637][ T8196] should_failslab+0xa8/0x100 [ 150.166657][ T8196] __kvmalloc_node_noprof+0x166/0x8d0 [ 150.166676][ T8196] ? rhashtable_init_noprof+0x52e/0xa70 [ 150.166693][ T8196] ? rhashtable_init_noprof+0x12d/0xa70 [ 150.166724][ T8196] rhashtable_init_noprof+0x52e/0xa70 [ 150.166747][ T8196] ipc_init_ids+0x7b/0x1f0 [ 150.166763][ T8196] msg_init_ns+0x121/0x180 [ 150.166785][ T8196] copy_ipcs+0x49b/0x6c0 [ 150.166807][ T8196] create_new_namespaces+0x210/0x6a0 [ 150.166831][ T8196] ? bpf_lsm_capable+0x9/0x20 [ 150.166850][ T8196] ? security_capable+0x7e/0x2c0 [ 150.166873][ T8196] unshare_nsproxy_namespaces+0x11a/0x160 [ 150.166898][ T8196] ksys_unshare+0x4f4/0x900 [ 150.166925][ T8196] ? __pfx_ksys_unshare+0x10/0x10 [ 150.166943][ T8196] ? __pfx_ksys_write+0x10/0x10 [ 150.166973][ T8196] __x64_sys_unshare+0x38/0x50 [ 150.166989][ T8196] do_syscall_64+0xe2/0xf80 [ 150.167007][ T8196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.167022][ T8196] ? trace_irq_disable+0x37/0x100 [ 150.167036][ T8196] ? clear_bhb_loop+0x60/0xb0 [ 150.167053][ T8196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.167067][ T8196] RIP: 0033:0x7f418ff9aeb9 [ 150.167082][ T8196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.167093][ T8196] RSP: 002b:00007f4190e4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 150.167112][ T8196] RAX: ffffffffffffffda RBX: 00007f4190215fa0 RCX: 00007f418ff9aeb9 [ 150.167123][ T8196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 150.167133][ T8196] RBP: 00007f4190e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 150.167143][ T8196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.167152][ T8196] R13: 00007f4190216038 R14: 00007f4190215fa0 R15: 00007ffda101be18 [ 150.167176][ T8196] [ 150.460678][ T8196] lo speed is unknown, defaulting to 1000 [ 150.547274][ T8208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.644'. [ 150.686507][ T8208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.644'. [ 151.051336][ T30] audit: type=1107 audit(1770091231.264:2): pid=8223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 151.053230][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 151.079537][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 151.094932][ T8230] netlink: 'syz.3.652': attribute type 21 has an invalid length. [ 151.190638][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 151.201230][ T8224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.250728][ T30] audit: type=1107 audit(1770091231.464:3): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 151.265999][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.653'. [ 151.338785][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.653'. [ 151.379670][ T8237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.712253][ T8265] team_slave_0: entered promiscuous mode [ 151.718298][ T8265] team_slave_1: entered promiscuous mode [ 151.730563][ T8265] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 151.864013][ T8269] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 151.908132][ T8269] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 151.974965][ T8269] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 152.211199][ T8286] netlink: 'syz.4.665': attribute type 10 has an invalid length. [ 152.219565][ T8286] veth0_vlan: left promiscuous mode [ 152.226703][ T8286] veth0_vlan: entered promiscuous mode [ 152.234948][ T8286] team0: Device veth0_vlan failed to register rx_handler [ 154.554347][ T8253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.758930][ T8316] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 155.111395][ T8335] __nla_validate_parse: 4 callbacks suppressed [ 155.111415][ T8335] netlink: 36 bytes leftover after parsing attributes in process `syz.2.681'. [ 155.152258][ T8335] netlink: 'syz.2.681': attribute type 1 has an invalid length. [ 155.179325][ T8335] netlink: 224 bytes leftover after parsing attributes in process `syz.2.681'. [ 155.911155][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.695'. [ 156.325478][ T8386] bond1: option mode: invalid value (254) [ 156.333252][ T8386] bond1 (unregistering): Released all slaves [ 158.303561][ T8347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.494007][ T8403] netlink: 16 bytes leftover after parsing attributes in process `syz.5.703'. [ 158.654107][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'. [ 158.661229][ T8414] lo speed is unknown, defaulting to 1000 [ 158.793736][ T10] IPVS: starting estimator thread 0... [ 158.816365][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.710'. [ 158.898151][ T8422] IPVS: using max 29 ests per chain, 69600 per kthread [ 158.952697][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.713'. [ 158.986908][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.713'. [ 159.300942][ T8443] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 159.358728][ T8443] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 159.361662][ T8446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.720'. [ 159.489712][ T8416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.547045][ T5881] IPVS: starting estimator thread 0... [ 159.563851][ T8416] nr0: entered promiscuous mode [ 159.570327][ T8416] nr0: entered allmulticast mode [ 159.582855][ T8454] netlink: 'syz.5.721': attribute type 11 has an invalid length. [ 159.629712][ T8454] netlink: 203340 bytes leftover after parsing attributes in process `syz.5.721'. [ 159.645971][ T8453] IPVS: using max 27 ests per chain, 64800 per kthread [ 159.743251][ T8451] lo speed is unknown, defaulting to 1000 [ 160.047181][ T8456] netlink: 'syz.3.723': attribute type 30 has an invalid length. [ 160.110779][ T8456] bond3: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 160.129238][ T8456] bond3 (unregistering): Released all slaves [ 160.289886][ T8472] __nla_validate_parse: 2 callbacks suppressed [ 160.289907][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.725'. [ 160.345656][ T8472] openvswitch: netlink: Flow actions attr not present in new flow. [ 160.908768][ T8486] netlink: 52 bytes leftover after parsing attributes in process `syz.3.732'. [ 161.022802][ T8490] netlink: 72 bytes leftover after parsing attributes in process `syz.0.734'. [ 161.111992][ T8492] FAULT_INJECTION: forcing a failure. [ 161.111992][ T8492] name failslab, interval 1, probability 0, space 0, times 0 [ 161.145606][ T8492] CPU: 1 UID: 0 PID: 8492 Comm: syz.0.735 Not tainted syzkaller #0 PREEMPT(full) [ 161.145630][ T8492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 161.145639][ T8492] Call Trace: [ 161.145646][ T8492] [ 161.145653][ T8492] dump_stack_lvl+0xe8/0x150 [ 161.145678][ T8492] should_fail_ex+0x412/0x560 [ 161.145701][ T8492] should_failslab+0xa8/0x100 [ 161.145720][ T8492] __kmalloc_cache_noprof+0x83/0x6e0 [ 161.145742][ T8492] ? tipc_conn_alloc+0x57/0x4a0 [ 161.145766][ T8492] tipc_conn_alloc+0x57/0x4a0 [ 161.145789][ T8492] tipc_topsrv_kern_subscr+0xf8/0x250 [ 161.145806][ T8492] ? tipc_own_addr+0x45/0x2a0 [ 161.145826][ T8492] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 161.145848][ T8492] ? tipc_own_addr+0x45/0x2a0 [ 161.145871][ T8492] ? __asan_memset+0x22/0x50 [ 161.145893][ T8492] tipc_group_create+0x364/0x500 [ 161.145920][ T8492] tipc_sk_join+0x256/0x6a0 [ 161.145937][ T8492] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 161.145958][ T8492] ? __pfx_tipc_sk_join+0x10/0x10 [ 161.145979][ T8492] ? __local_bh_enable_ip+0xd0/0x130 [ 161.145998][ T8492] tipc_setsockopt+0x73e/0x990 [ 161.146020][ T8492] ? __pfx_tipc_setsockopt+0x10/0x10 [ 161.146038][ T8492] ? __fget_files+0x2a/0x420 [ 161.146052][ T8492] ? aa_sock_opt_perm+0xff/0x1a0 [ 161.146074][ T8492] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 161.146089][ T8492] ? __pfx_tipc_setsockopt+0x10/0x10 [ 161.146107][ T8492] do_sock_setsockopt+0x17c/0x1b0 [ 161.146131][ T8492] __x64_sys_setsockopt+0x13d/0x1b0 [ 161.146155][ T8492] do_syscall_64+0xe2/0xf80 [ 161.146174][ T8492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.146188][ T8492] ? trace_irq_disable+0x37/0x100 [ 161.146203][ T8492] ? clear_bhb_loop+0x60/0xb0 [ 161.146221][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.146236][ T8492] RIP: 0033:0x7fe44359aeb9 [ 161.146252][ T8492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.146264][ T8492] RSP: 002b:00007fe4417f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 161.146282][ T8492] RAX: ffffffffffffffda RBX: 00007fe443815fa0 RCX: 00007fe44359aeb9 [ 161.146293][ T8492] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 161.146303][ T8492] RBP: 00007fe4417f6090 R08: 0000000000000010 R09: 0000000000000000 [ 161.146312][ T8492] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 161.146322][ T8492] R13: 00007fe443816038 R14: 00007fe443815fa0 R15: 00007ffde05f6df8 [ 161.146349][ T8492] [ 161.650037][ T25] block nbd1: Possible stuck request ffff888025748000: control (read@0,1024B). Runtime 60 seconds [ 161.708134][ T8498] netlink: 64 bytes leftover after parsing attributes in process `syz.0.736'. [ 162.451792][ T8488] netlink: 'syz.2.733': attribute type 6 has an invalid length. [ 162.992466][ T8528] netlink: 52 bytes leftover after parsing attributes in process `syz.4.748'. [ 163.142944][ T8535] netlink: 'syz.3.750': attribute type 21 has an invalid length. [ 163.295514][ T8549] FAULT_INJECTION: forcing a failure. [ 163.295514][ T8549] name failslab, interval 1, probability 0, space 0, times 0 [ 163.337321][ T8549] CPU: 0 UID: 0 PID: 8549 Comm: syz.2.755 Not tainted syzkaller #0 PREEMPT(full) [ 163.337346][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 163.337356][ T8549] Call Trace: [ 163.337363][ T8549] [ 163.337371][ T8549] dump_stack_lvl+0xe8/0x150 [ 163.337398][ T8549] should_fail_ex+0x412/0x560 [ 163.337421][ T8549] should_failslab+0xa8/0x100 [ 163.337442][ T8549] __kmalloc_cache_noprof+0x83/0x6e0 [ 163.337460][ T8549] ? sctp_add_bind_addr+0x8c/0x370 [ 163.337482][ T8549] sctp_add_bind_addr+0x8c/0x370 [ 163.337501][ T8549] sctp_copy_local_addr_list+0x314/0x4f0 [ 163.337524][ T8549] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 163.337541][ T8549] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 163.337563][ T8549] ? sctp_v4_is_any+0x35/0x60 [ 163.337581][ T8549] ? sctp_copy_one_addr+0x93/0x360 [ 163.337602][ T8549] sctp_bind_addr_copy+0xb3/0x3c0 [ 163.337620][ T8549] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 163.337639][ T8549] sctp_connect_new_asoc+0x2ff/0x6b0 [ 163.337662][ T8549] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 163.337688][ T8549] ? __local_bh_enable_ip+0xd0/0x130 [ 163.337702][ T8549] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 163.337719][ T8549] ? security_sctp_bind_connect+0x7e/0x2c0 [ 163.337740][ T8549] sctp_sendmsg+0x1528/0x2c10 [ 163.337777][ T8549] ? __pfx_sctp_sendmsg+0x10/0x10 [ 163.337796][ T8549] ? aa_sk_perm+0x15a/0x960 [ 163.337817][ T8549] ? aa_sk_perm+0x82d/0x960 [ 163.337844][ T8549] ? __pfx_aa_sk_perm+0x10/0x10 [ 163.337865][ T8549] ? sock_rps_record_flow+0x19/0x400 [ 163.337892][ T8549] ? inet_sendmsg+0x2f4/0x370 [ 163.337919][ T8549] ____sys_sendmsg+0x894/0xad0 [ 163.337949][ T8549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.337980][ T8549] ? import_iovec+0x73/0xa0 [ 163.338004][ T8549] ___sys_sendmsg+0x2a5/0x360 [ 163.338025][ T8549] ? __lock_acquire+0x6b5/0x2cf0 [ 163.338051][ T8549] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.338078][ T8549] ? kstrtouint+0x6e/0xe0 [ 163.338123][ T8549] ? __fget_files+0x2a/0x420 [ 163.338140][ T8549] ? __fget_files+0x3a0/0x420 [ 163.338167][ T8549] __sys_sendmmsg+0x27c/0x4e0 [ 163.338193][ T8549] ? __pfx___sys_sendmmsg+0x10/0x10 [ 163.338212][ T8549] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 163.338267][ T8549] ? ksys_write+0x242/0x270 [ 163.338292][ T8549] ? __pfx_ksys_write+0x10/0x10 [ 163.338319][ T8549] __x64_sys_sendmmsg+0xa0/0xc0 [ 163.338341][ T8549] do_syscall_64+0xe2/0xf80 [ 163.338359][ T8549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.338374][ T8549] ? trace_irq_disable+0x37/0x100 [ 163.338390][ T8549] ? clear_bhb_loop+0x60/0xb0 [ 163.338411][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.338427][ T8549] RIP: 0033:0x7f081839aeb9 [ 163.338444][ T8549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.338457][ T8549] RSP: 002b:00007f0819219028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 163.338476][ T8549] RAX: ffffffffffffffda RBX: 00007f0818615fa0 RCX: 00007f081839aeb9 [ 163.338488][ T8549] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000004 [ 163.338498][ T8549] RBP: 00007f0819219090 R08: 0000000000000000 R09: 0000000000000000 [ 163.338509][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.338519][ T8549] R13: 00007f0818616038 R14: 00007f0818615fa0 R15: 00007ffcc6f300a8 [ 163.338547][ T8549] [ 163.854755][ T30] audit: type=1800 audit(1770091244.064:4): pid=8565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.761" name="memory.events" dev="tmpfs" ino=854 res=0 errno=0 [ 163.893262][ T8565] syzkaller0: entered promiscuous mode [ 163.899071][ T8565] syzkaller0: entered allmulticast mode [ 163.910420][ T30] audit: type=1804 audit(1770091244.124:5): pid=8565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.761" name="/newroot/163/memory.events" dev="tmpfs" ino=854 res=1 errno=0 [ 164.485603][ T8586] lo speed is unknown, defaulting to 1000 [ 164.872501][ T8596] sctp: [Deprecated]: syz.3.772 (pid 8596) Use of int in max_burst socket option. [ 164.872501][ T8596] Use struct sctp_assoc_value instead [ 165.009500][ T8596] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.772'. [ 165.099992][ T8604] syzkaller0: entered promiscuous mode [ 165.105931][ T8604] syzkaller0: entered allmulticast mode [ 165.520555][ T8617] openvswitch: netlink: IP tunnel TTL not specified. [ 165.626189][ T8621] netlink: 'syz.5.780': attribute type 11 has an invalid length. [ 165.736048][ T8621] lo speed is unknown, defaulting to 1000 [ 165.752657][ T8621] lo speed is unknown, defaulting to 1000 [ 165.772476][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.782'. [ 165.817058][ T8621] lo speed is unknown, defaulting to 1000 [ 165.879581][ T8621] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 165.919129][ T8629] netem: incorrect gi model size [ 165.950861][ T8629] netem: change failed [ 165.975527][ T8621] lo speed is unknown, defaulting to 1000 [ 166.000464][ T8621] lo speed is unknown, defaulting to 1000 [ 166.039242][ T8621] lo speed is unknown, defaulting to 1000 [ 166.065117][ T8621] lo speed is unknown, defaulting to 1000 [ 166.081380][ T8635] netlink: 44 bytes leftover after parsing attributes in process `syz.4.786'. [ 166.093021][ T8621] lo speed is unknown, defaulting to 1000 [ 166.103540][ T8621] lo speed is unknown, defaulting to 1000 [ 166.391483][ T8649] FAULT_INJECTION: forcing a failure. [ 166.391483][ T8649] name failslab, interval 1, probability 0, space 0, times 0 [ 166.443636][ T8649] CPU: 1 UID: 0 PID: 8649 Comm: syz.5.792 Not tainted syzkaller #0 PREEMPT(full) [ 166.443662][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 166.443672][ T8649] Call Trace: [ 166.443679][ T8649] [ 166.443687][ T8649] dump_stack_lvl+0xe8/0x150 [ 166.443712][ T8649] should_fail_ex+0x412/0x560 [ 166.443745][ T8649] should_failslab+0xa8/0x100 [ 166.443765][ T8649] __kmalloc_noprof+0xde/0x7e0 [ 166.443782][ T8649] ? tomoyo_encode+0x28b/0x550 [ 166.443806][ T8649] tomoyo_encode+0x28b/0x550 [ 166.443832][ T8649] tomoyo_realpath_from_path+0x58d/0x5d0 [ 166.443854][ T8649] ? tomoyo_domain+0xd7/0x130 [ 166.443879][ T8649] ? tomoyo_path_number_perm+0x219/0x630 [ 166.443897][ T8649] tomoyo_path_number_perm+0x246/0x630 [ 166.443916][ T8649] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 166.443933][ T8649] ? __lock_acquire+0x6b5/0x2cf0 [ 166.443966][ T8649] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 166.444004][ T8649] ? __fget_files+0x2a/0x420 [ 166.444024][ T8649] ? __fget_files+0x2a/0x420 [ 166.444038][ T8649] ? __fget_files+0x3a0/0x420 [ 166.444054][ T8649] ? __fget_files+0x2a/0x420 [ 166.444075][ T8649] security_file_ioctl+0xc3/0x2a0 [ 166.444094][ T8649] __se_sys_ioctl+0x47/0x170 [ 166.444118][ T8649] do_syscall_64+0xe2/0xf80 [ 166.444136][ T8649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.444151][ T8649] ? trace_irq_disable+0x37/0x100 [ 166.444167][ T8649] ? clear_bhb_loop+0x60/0xb0 [ 166.444186][ T8649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.444201][ T8649] RIP: 0033:0x7f418ff9aeb9 [ 166.444217][ T8649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.444231][ T8649] RSP: 002b:00007f4190e4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.444250][ T8649] RAX: ffffffffffffffda RBX: 00007f4190215fa0 RCX: 00007f418ff9aeb9 [ 166.444262][ T8649] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 166.444273][ T8649] RBP: 00007f4190e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 166.444284][ T8649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.444293][ T8649] R13: 00007f4190216038 R14: 00007f4190215fa0 R15: 00007ffda101be18 [ 166.444324][ T8649] [ 166.444342][ T8649] ERROR: Out of memory at tomoyo_realpath_from_path. [ 166.855230][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.795'. [ 166.952518][ T8643] dvmrp0: entered allmulticast mode [ 167.224393][ T8672] lo speed is unknown, defaulting to 1000 [ 167.247339][ T8674] netlink: 60 bytes leftover after parsing attributes in process `syz.5.798'. [ 167.306993][ T8678] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 167.367699][ T8678] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.612152][ T8678] bond3: (slave veth3): Enslaving as an active interface with a down link [ 167.732280][ T8684] bond3: (slave veth5): Enslaving as an active interface with a down link [ 167.747982][ T8685] bond3: entered allmulticast mode [ 168.257565][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.806'. [ 168.263795][ T8672] lo speed is unknown, defaulting to 1000 [ 168.268054][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 168.289868][ T8703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.382355][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 168.685227][ T8713] lo speed is unknown, defaulting to 1000 [ 168.816381][ T8718] netlink: 28 bytes leftover after parsing attributes in process `syz.5.810'. [ 169.167762][ T8726] netlink: 'syz.3.814': attribute type 3 has an invalid length. [ 169.173403][ T8694] netlink: 988 bytes leftover after parsing attributes in process `syz.4.797'. [ 169.194312][ T8726] netlink: 3 bytes leftover after parsing attributes in process `syz.3.814'. [ 169.225139][ T8726] sctp: [Deprecated]: syz.3.814 (pid 8726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.225139][ T8726] Use struct sctp_sack_info instead [ 169.294117][ T8729] sctp: [Deprecated]: syz.3.814 (pid 8729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.294117][ T8729] Use struct sctp_sack_info instead [ 169.357067][ T8726] xt_hashlimit: size too large, truncated to 1048576 [ 169.402985][ T8713] lo speed is unknown, defaulting to 1000 [ 169.555500][ T8733] lo speed is unknown, defaulting to 1000 [ 169.698692][ T8737] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 170.074370][ T8750] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 170.150545][ T8733] lo speed is unknown, defaulting to 1000 [ 170.472032][ T8757] netlink: 'syz.0.824': attribute type 16 has an invalid length. [ 170.480011][ T8757] netlink: 'syz.0.824': attribute type 17 has an invalid length. [ 170.518863][ T8757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.169994][ T8782] __nla_validate_parse: 5 callbacks suppressed [ 171.170011][ T8782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.832'. [ 171.239605][ T8782] netlink: 7 bytes leftover after parsing attributes in process `syz.4.832'. [ 171.404155][ T8790] netlink: 256 bytes leftover after parsing attributes in process `syz.2.835'. [ 172.030775][ T8829] netlink: 20 bytes leftover after parsing attributes in process `syz.5.853'. [ 172.057145][ T8829] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 172.403522][ T8840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.411187][ T8840] IPv6: NLM_F_CREATE should be set when creating new route [ 172.589401][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'. [ 172.654208][ T8850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.715551][ T8854] netlink: 56 bytes leftover after parsing attributes in process `syz.0.861'. [ 173.205753][ T8868] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.221650][ T8868] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.236230][ T8876] netlink: 'syz.5.867': attribute type 16 has an invalid length. [ 173.247885][ T8876] netlink: 'syz.5.867': attribute type 17 has an invalid length. [ 173.288824][ T5888] lo speed is unknown, defaulting to 1000 [ 173.315200][ T8876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.499414][ T8887] bond0: entered promiscuous mode [ 173.507055][ T8887] bond_slave_0: entered promiscuous mode [ 173.516861][ T8887] bond_slave_1: entered promiscuous mode [ 173.517980][ T8883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.871'. [ 173.532598][ T8887] batadv0: entered promiscuous mode [ 173.560449][ T8887] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 173.570327][ T8887] bond0: left promiscuous mode [ 173.575288][ T8887] bond_slave_0: left promiscuous mode [ 173.584062][ T8887] bond_slave_1: left promiscuous mode [ 173.616255][ T8887] batadv0: left promiscuous mode [ 173.694273][ T8901] netlink: 'syz.4.875': attribute type 8 has an invalid length. [ 173.736725][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 173.753067][ T8901] bond0: entered promiscuous mode [ 173.765672][ T8901] bridge_slave_1: entered promiscuous mode [ 173.773932][ T8901] gretap0: entered promiscuous mode [ 173.780819][ T8901] ip6gretap0: entered promiscuous mode [ 173.796113][ T8901] debugfs: 'hsr0' already exists in 'hsr' [ 173.804103][ T8901] Cannot create hsr debugfs directory [ 173.807147][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 173.810756][ T8901] hsr0: entered promiscuous mode [ 173.927416][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.880'. [ 174.003527][ T8907] macvtap1: entered promiscuous mode [ 174.025198][ T8907] macvtap1: entered allmulticast mode [ 174.033575][ T8907] dummy0: entered promiscuous mode [ 174.039679][ T8907] dummy0: entered allmulticast mode [ 174.052205][ T8907] team0: Device macvtap1 failed to register rx_handler [ 174.061174][ T8907] dummy0: left allmulticast mode [ 174.066689][ T8907] dummy0: left promiscuous mode [ 174.200784][ T8920] xt_CT: No such helper "snmp_trap" [ 174.221948][ T8923] sit0: Caught tx_queue_len zero misconfig [ 174.790834][ T8956] netlink: 'syz.2.896': attribute type 1 has an invalid length. [ 174.915601][ T8956] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 174.927476][ T8956] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 174.961491][ T8959] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 174.992147][ T8967] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 175.048463][ T8968] netlink: zone id is out of range [ 175.053619][ T8968] netlink: zone id is out of range [ 175.072738][ T8968] netlink: zone id is out of range [ 175.080468][ T8968] netlink: zone id is out of range [ 175.083956][ T8956] macvlan2: entered promiscuous mode [ 175.098712][ T8968] netlink: zone id is out of range [ 175.107759][ T8968] netlink: zone id is out of range [ 175.112997][ T8968] netlink: zone id is out of range [ 175.113734][ T8956] macvlan2: entered allmulticast mode [ 175.120901][ T8968] netlink: zone id is out of range [ 175.132118][ T8956] bond1: entered promiscuous mode [ 175.146287][ T8956] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.181496][ T8956] bond1: left promiscuous mode [ 175.295127][ T8977] Bluetooth: MGMT ver 1.23 [ 175.299910][ T8977] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 175.623144][ T8997] syzkaller0: entered promiscuous mode [ 175.632371][ T8997] syzkaller0: entered allmulticast mode [ 176.190520][ T9024] xt_bpf: check failed: parse error [ 176.327759][ T9033] netlink: 'syz.0.924': attribute type 8 has an invalid length. [ 176.337904][ T9033] __nla_validate_parse: 10 callbacks suppressed [ 176.337928][ T9033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.924'. [ 176.378307][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 176.672826][ T9054] FAULT_INJECTION: forcing a failure. [ 176.672826][ T9054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.687225][ T9054] CPU: 1 UID: 0 PID: 9054 Comm: syz.2.931 Not tainted syzkaller #0 PREEMPT(full) [ 176.687251][ T9054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 176.687261][ T9054] Call Trace: [ 176.687268][ T9054] [ 176.687275][ T9054] dump_stack_lvl+0xe8/0x150 [ 176.687299][ T9054] should_fail_ex+0x412/0x560 [ 176.687323][ T9054] _copy_from_user+0x2d/0xb0 [ 176.687346][ T9054] __copy_msghdr+0x3c5/0x5b0 [ 176.687370][ T9054] ___sys_sendmsg+0x213/0x360 [ 176.687388][ T9054] ? __lock_acquire+0x6b5/0x2cf0 [ 176.687412][ T9054] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.687457][ T9054] ? __fget_files+0x2a/0x420 [ 176.687472][ T9054] ? __fget_files+0x3a0/0x420 [ 176.687495][ T9054] __x64_sys_sendmsg+0x1bd/0x2a0 [ 176.687516][ T9054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.687543][ T9054] ? __pfx_ksys_write+0x10/0x10 [ 176.687572][ T9054] do_syscall_64+0xe2/0xf80 [ 176.687590][ T9054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.687605][ T9054] ? trace_irq_disable+0x37/0x100 [ 176.687621][ T9054] ? clear_bhb_loop+0x60/0xb0 [ 176.687641][ T9054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.687666][ T9054] RIP: 0033:0x7f081839aeb9 [ 176.687681][ T9054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.687696][ T9054] RSP: 002b:00007f0819219028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.687713][ T9054] RAX: ffffffffffffffda RBX: 00007f0818615fa0 RCX: 00007f081839aeb9 [ 176.687725][ T9054] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 176.687735][ T9054] RBP: 00007f0819219090 R08: 0000000000000000 R09: 0000000000000000 [ 176.687744][ T9054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.687754][ T9054] R13: 00007f0818616038 R14: 00007f0818615fa0 R15: 00007ffcc6f300a8 [ 176.687780][ T9054] [ 177.080973][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.5.932'. [ 177.465467][ T9084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.941'. [ 177.483891][ T9084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.941'. [ 177.765684][ T9091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.940'. [ 178.174526][ T9093] netlink: 'syz.0.942': attribute type 1 has an invalid length. [ 178.182509][ T9093] netlink: 224 bytes leftover after parsing attributes in process `syz.0.942'. [ 178.193677][ T9093] IPVS: set_ctl: invalid protocol: 2 100.1.1.0:20004 [ 178.795990][ T9096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.912000][ T9096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.039582][ T9097] erspan0: entered promiscuous mode [ 179.072577][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'. [ 179.118003][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'. [ 179.310724][ T9114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.318013][ T9114] IPv6: NLM_F_CREATE should be set when creating new route [ 179.378888][ T52] block nbd3: Receive control failed (result -32) [ 179.485139][ T9128] netlink: 7 bytes leftover after parsing attributes in process `syz.3.955'. [ 179.648539][ T9123] syzkaller0: entered promiscuous mode [ 179.655324][ T9123] syzkaller0: entered allmulticast mode [ 179.691647][ T9141] batman_adv: batadv0: Adding interface: dummy0 [ 179.698376][ T9141] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.736166][ T9141] batman_adv: batadv0: Interface activated: dummy0 [ 180.070580][ T9160] netlink: 'syz.0.961': attribute type 4 has an invalid length. [ 180.078834][ T9160] netlink: 'syz.0.961': attribute type 1 has an invalid length. [ 181.236502][ T9154] ip6tnl2: entered promiscuous mode [ 181.241739][ T9154] ip6tnl2: entered allmulticast mode [ 181.409454][ T9169] __nla_validate_parse: 4 callbacks suppressed [ 181.409473][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.967'. [ 181.465143][ T9171] netlink: 64 bytes leftover after parsing attributes in process `syz.4.967'. [ 181.486645][ C0] net_ratelimit: 3 callbacks suppressed [ 181.486664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.523769][ T9160] lo speed is unknown, defaulting to 1000 [ 181.976604][ T9194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.972'. [ 182.310554][ T9160] lo speed is unknown, defaulting to 1000 [ 182.414600][ T9203] syzkaller1: entered promiscuous mode [ 182.435335][ T9203] syzkaller1: entered allmulticast mode [ 182.745422][ T9222] geneve2: entered promiscuous mode [ 182.790003][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.816740][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.857629][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.889433][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.464251][ T9256] lo speed is unknown, defaulting to 1000 [ 183.776056][ T9266] dummy0: entered promiscuous mode [ 183.791914][ T9266] vlan1: entered promiscuous mode [ 183.837446][ T9256] lo speed is unknown, defaulting to 1000 [ 183.895558][ T9268] tipc: Started in network mode [ 183.900763][ T9268] tipc: Node identity 9eb5e05b5612, cluster identity 4711 [ 183.916174][ T9268] tipc: Enabled bearer , priority 0 [ 183.950810][ T9271] syzkaller0: entered promiscuous mode [ 183.964396][ T9271] syzkaller0: entered allmulticast mode [ 184.071679][ T9268] tipc: Resetting bearer [ 184.151603][ T9278] netlink: 'syz.4.994': attribute type 1 has an invalid length. [ 184.282732][ T9267] tipc: Resetting bearer [ 184.346425][ T9267] tipc: Disabling bearer [ 184.430711][ T9293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.473943][ T9278] bond1: entered promiscuous mode [ 184.486369][ T9278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.562952][ T9282] bond1: (slave veth3): making interface the new active one [ 184.571400][ T9282] veth3: entered promiscuous mode [ 184.579914][ T9282] bond1: (slave veth3): Enslaving as an active interface with an up link [ 184.809088][ T9305] FAULT_INJECTION: forcing a failure. [ 184.809088][ T9305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.866665][ T9305] CPU: 1 UID: 0 PID: 9305 Comm: syz.4.1001 Not tainted syzkaller #0 PREEMPT(full) [ 184.866689][ T9305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 184.866700][ T9305] Call Trace: [ 184.866707][ T9305] [ 184.866714][ T9305] dump_stack_lvl+0xe8/0x150 [ 184.866741][ T9305] should_fail_ex+0x412/0x560 [ 184.866765][ T9305] _copy_from_user+0x2d/0xb0 [ 184.866789][ T9305] do_tcp_setsockopt+0x4f3/0x2060 [ 184.866813][ T9305] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 184.866835][ T9305] ? __pfx_aa_sk_perm+0x10/0x10 [ 184.866857][ T9305] ? __fget_files+0x2a/0x420 [ 184.866873][ T9305] ? aa_sock_opt_perm+0xff/0x1a0 [ 184.866894][ T9305] ? sock_common_setsockopt+0x36/0xc0 [ 184.866911][ T9305] ? tcp_setsockopt+0x3d/0xe0 [ 184.866933][ T9305] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 184.866953][ T9305] do_sock_setsockopt+0x17c/0x1b0 [ 184.866978][ T9305] __x64_sys_setsockopt+0x13d/0x1b0 [ 184.867002][ T9305] do_syscall_64+0xe2/0xf80 [ 184.867026][ T9305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.867048][ T9305] ? trace_irq_disable+0x37/0x100 [ 184.867065][ T9305] ? clear_bhb_loop+0x60/0xb0 [ 184.867084][ T9305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.867101][ T9305] RIP: 0033:0x7f63d759aeb9 [ 184.867117][ T9305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.867131][ T9305] RSP: 002b:00007f63d836f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.867150][ T9305] RAX: ffffffffffffffda RBX: 00007f63d7815fa0 RCX: 00007f63d759aeb9 [ 184.867162][ T9305] RDX: 0000000000000007 RSI: 0000000000000006 RDI: 0000000000000003 [ 184.867173][ T9305] RBP: 00007f63d836f090 R08: 0000000000000004 R09: 0000000000000000 [ 184.867183][ T9305] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 184.867194][ T9305] R13: 00007f63d7816038 R14: 00007f63d7815fa0 R15: 00007ffd732aab88 [ 184.867222][ T9305] [ 185.342337][ T9320] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1006'. [ 185.389840][ T9320] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1006'. [ 185.472956][ T9310] syzkaller0: entered promiscuous mode [ 185.478671][ T9310] syzkaller0: entered allmulticast mode [ 185.488580][ T9312] lo speed is unknown, defaulting to 1000 [ 187.385457][ T9312] lo speed is unknown, defaulting to 1000 [ 187.612145][ T9341] syzkaller0: entered promiscuous mode [ 187.638973][ T9341] syzkaller0: entered allmulticast mode [ 187.905489][ T9345] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1011'. [ 187.922347][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1011'. [ 187.985559][ T9348] syzkaller0: entered promiscuous mode [ 187.991955][ T9348] syzkaller0: entered allmulticast mode [ 188.007068][ T9348] macsec1: entered promiscuous mode [ 188.224971][ T9316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 188.543969][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.551808][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.571998][ T9367] bridge0: entered allmulticast mode [ 188.656937][ T9372] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1020'. [ 188.675607][ T9372] block nbd0: reconnected socket [ 188.696279][ T52] block nbd0: Receive control failed (result -32) [ 188.698500][ T9375] bridge_slave_1: left allmulticast mode [ 188.715988][ T9375] bridge_slave_1: left promiscuous mode [ 188.723277][ T9375] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.804637][ T9375] bridge_slave_0: left allmulticast mode [ 188.815226][ T9375] bridge_slave_0: left promiscuous mode [ 188.826596][ T9379] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1021'. [ 188.843022][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1022'. [ 188.854168][ T9375] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.862301][ T9379] block nbd0: reconnected socket [ 188.892109][ T52] block nbd0: Receive control failed (result -32) [ 189.082073][ T9373] lo speed is unknown, defaulting to 1000 [ 189.088591][ T9384] bond0: Caught tx_queue_len zero misconfig [ 189.273405][ T9389] syzkaller0: entered promiscuous mode [ 189.280510][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 189.296340][ T9389] syzkaller0: entered allmulticast mode [ 189.347742][ T9397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.099440][ T9373] lo speed is unknown, defaulting to 1000 [ 191.115419][ T9417] tipc: Enabling of bearer rejected, failed to enable media [ 191.418220][ T9446] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 191.504230][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1032'. [ 191.547553][ T9463] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1037'. [ 191.661485][ T9466] batadv_slave_1: entered promiscuous mode [ 191.673831][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1038'. [ 191.728569][ T25] block nbd1: Possible stuck request ffff888025748000: control (read@0,1024B). Runtime 90 seconds [ 191.731782][ T9465] batadv_slave_1: left promiscuous mode [ 191.873476][ T9473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1041'. [ 191.959647][ T9474] tipc: Enabled bearer , priority 0 [ 191.967805][ T9474] syzkaller0: entered promiscuous mode [ 191.985499][ T9474] syzkaller0: entered allmulticast mode [ 192.053355][ T9474] tipc: Resetting bearer [ 192.094099][ T9471] tipc: Resetting bearer [ 192.159513][ T9471] tipc: Disabling bearer [ 192.377986][ T9494] geneve2: entered promiscuous mode [ 192.874170][ T9525] FAULT_INJECTION: forcing a failure. [ 192.874170][ T9525] name failslab, interval 1, probability 0, space 0, times 0 [ 192.911425][ T9525] CPU: 1 UID: 0 PID: 9525 Comm: syz.0.1058 Not tainted syzkaller #0 PREEMPT(full) [ 192.911450][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 192.911466][ T9525] Call Trace: [ 192.911473][ T9525] [ 192.911481][ T9525] dump_stack_lvl+0xe8/0x150 [ 192.911508][ T9525] should_fail_ex+0x412/0x560 [ 192.911533][ T9525] should_failslab+0xa8/0x100 [ 192.911553][ T9525] __kmalloc_cache_noprof+0x83/0x6e0 [ 192.911569][ T9525] ? __memcg_slab_post_alloc_hook+0x6af/0x8d0 [ 192.911592][ T9525] ? alloc_mnt_ns+0xb3/0x2c0 [ 192.911614][ T9525] alloc_mnt_ns+0xb3/0x2c0 [ 192.911634][ T9525] copy_mnt_ns+0x1b0/0x990 [ 192.911651][ T9525] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 192.911671][ T9525] ? kmem_cache_alloc_noprof+0x3bd/0x6e0 [ 192.911694][ T9525] ? create_new_namespaces+0x33/0x6a0 [ 192.911720][ T9525] create_new_namespaces+0xcf/0x6a0 [ 192.911745][ T9525] ? bpf_lsm_capable+0x9/0x20 [ 192.911765][ T9525] ? security_capable+0x7e/0x2c0 [ 192.911791][ T9525] unshare_nsproxy_namespaces+0x11a/0x160 [ 192.911816][ T9525] ksys_unshare+0x4f4/0x900 [ 192.911844][ T9525] ? __pfx_ksys_unshare+0x10/0x10 [ 192.911863][ T9525] ? __pfx_ksys_write+0x10/0x10 [ 192.911894][ T9525] __x64_sys_unshare+0x38/0x50 [ 192.911912][ T9525] do_syscall_64+0xe2/0xf80 [ 192.911933][ T9525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.911947][ T9525] ? trace_irq_disable+0x37/0x100 [ 192.911963][ T9525] ? clear_bhb_loop+0x60/0xb0 [ 192.911983][ T9525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.912000][ T9525] RIP: 0033:0x7fe44359aeb9 [ 192.912016][ T9525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.912030][ T9525] RSP: 002b:00007fe4417d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 192.912049][ T9525] RAX: ffffffffffffffda RBX: 00007fe443816090 RCX: 00007fe44359aeb9 [ 192.912062][ T9525] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 192.912072][ T9525] RBP: 00007fe4417d5090 R08: 0000000000000000 R09: 0000000000000000 [ 192.912084][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.912094][ T9525] R13: 00007fe443816128 R14: 00007fe443816090 R15: 00007ffde05f6df8 [ 192.912123][ T9525] [ 193.283417][ T9533] netlink: 'syz.5.1063': attribute type 1 has an invalid length. [ 193.291332][ T9533] __nla_validate_parse: 3 callbacks suppressed [ 193.291349][ T9533] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1063'. [ 193.334152][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1063'. [ 193.526290][ T9549] xt_bpf: check failed: parse error [ 194.162203][ T9572] wg2: entered promiscuous mode [ 194.167151][ T9572] wg2: entered allmulticast mode [ 194.185529][ T9572] tipc: Enabling of bearer rejected, failed to enable media [ 194.293726][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.365833][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 196.371983][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 196.377841][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 196.383973][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 196.435195][ T9582] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1077'. [ 196.479441][ T9582] block nbd0: reconnected socket [ 196.499681][ T52] block nbd0: Receive control failed (result -32) [ 196.529765][ T9590] sctp: [Deprecated]: syz.5.1078 (pid 9590) Use of int in maxseg socket option. [ 196.529765][ T9590] Use struct sctp_assoc_value instead [ 196.709130][ T9598] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1078'. [ 196.999393][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1079'. [ 197.049086][ T9614] sctp: [Deprecated]: syz.0.1085 (pid 9614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.049086][ T9614] Use struct sctp_sack_info instead [ 197.294176][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1078'. [ 197.642318][ T9645] FAULT_INJECTION: forcing a failure. [ 197.642318][ T9645] name failslab, interval 1, probability 0, space 0, times 0 [ 197.678522][ T9645] CPU: 1 UID: 0 PID: 9645 Comm: syz.5.1093 Not tainted syzkaller #0 PREEMPT(full) [ 197.678547][ T9645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 197.678557][ T9645] Call Trace: [ 197.678565][ T9645] [ 197.678573][ T9645] dump_stack_lvl+0xe8/0x150 [ 197.678599][ T9645] should_fail_ex+0x412/0x560 [ 197.678624][ T9645] should_failslab+0xa8/0x100 [ 197.678646][ T9645] kmem_cache_alloc_noprof+0x87/0x6e0 [ 197.678669][ T9645] ? security_file_alloc+0x34/0x310 [ 197.678690][ T9645] security_file_alloc+0x34/0x310 [ 197.678709][ T9645] init_file+0x93/0x2f0 [ 197.678731][ T9645] alloc_empty_file+0x6e/0x1d0 [ 197.678751][ T9645] alloc_file_pseudo+0x155/0x240 [ 197.678772][ T9645] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 197.678789][ T9645] ? do_raw_spin_unlock+0xf5/0x210 [ 197.678810][ T9645] ? _raw_spin_unlock+0x28/0x50 [ 197.678835][ T9645] sock_alloc_file+0xb8/0x2e0 [ 197.678851][ T9645] ? __sys_socket+0x12b/0x1b0 [ 197.678869][ T9645] __sys_socket+0x13c/0x1b0 [ 197.678890][ T9645] __x64_sys_socket+0x7a/0x90 [ 197.678909][ T9645] do_syscall_64+0xe2/0xf80 [ 197.678929][ T9645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.678945][ T9645] ? trace_irq_disable+0x37/0x100 [ 197.678962][ T9645] ? clear_bhb_loop+0x60/0xb0 [ 197.678982][ T9645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.678998][ T9645] RIP: 0033:0x7f418ff9c747 [ 197.679014][ T9645] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.679028][ T9645] RSP: 002b:00007f4190e4df38 EFLAGS: 00000293 ORIG_RAX: 0000000000000029 [ 197.679047][ T9645] RAX: ffffffffffffffda RBX: 00007f4190215fa0 RCX: 00007f418ff9c747 [ 197.679058][ T9645] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 197.679068][ T9645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.679077][ T9645] R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000006 [ 197.679087][ T9645] R13: 00007f4190216038 R14: 0000200000000040 R15: 0000200000000080 [ 197.679114][ T9645] [ 198.050714][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'. [ 198.161848][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1100'. [ 198.392679][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1104'. [ 198.510975][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 198.696115][ T9681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1106'. [ 198.758656][ T9678] lo speed is unknown, defaulting to 1000 [ 199.144375][ T52] block nbd4: Receive control failed (result -32) [ 199.259951][ T9704] FAULT_INJECTION: forcing a failure. [ 199.259951][ T9704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.274179][ T9704] CPU: 1 UID: 0 PID: 9704 Comm: syz.0.1113 Not tainted syzkaller #0 PREEMPT(full) [ 199.274204][ T9704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 199.274214][ T9704] Call Trace: [ 199.274221][ T9704] [ 199.274229][ T9704] dump_stack_lvl+0xe8/0x150 [ 199.274259][ T9704] should_fail_ex+0x412/0x560 [ 199.274283][ T9704] _copy_from_user+0x2d/0xb0 [ 199.274307][ T9704] ___sys_sendmsg+0x1c6/0x360 [ 199.274327][ T9704] ? __lock_acquire+0x6b5/0x2cf0 [ 199.274353][ T9704] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.274372][ T9704] ? __lock_acquire+0x6b5/0x2cf0 [ 199.274397][ T9704] ? kstrtouint+0x6e/0xe0 [ 199.274454][ T9704] __sys_sendmmsg+0x27c/0x4e0 [ 199.274480][ T9704] ? __pfx___sys_sendmmsg+0x10/0x10 [ 199.274499][ T9704] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 199.274549][ T9704] ? ksys_write+0x242/0x270 [ 199.274574][ T9704] ? __pfx_ksys_write+0x10/0x10 [ 199.274601][ T9704] __x64_sys_sendmmsg+0xa0/0xc0 [ 199.274625][ T9704] do_syscall_64+0xe2/0xf80 [ 199.274644][ T9704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.274660][ T9704] ? trace_irq_disable+0x37/0x100 [ 199.274675][ T9704] ? clear_bhb_loop+0x60/0xb0 [ 199.274700][ T9704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.274716][ T9704] RIP: 0033:0x7fe44359aeb9 [ 199.274733][ T9704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.274746][ T9704] RSP: 002b:00007fe4417f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 199.274766][ T9704] RAX: ffffffffffffffda RBX: 00007fe443815fa0 RCX: 00007fe44359aeb9 [ 199.274779][ T9704] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 199.274790][ T9704] RBP: 00007fe4417f6090 R08: 0000000000000000 R09: 0000000000000000 [ 199.274801][ T9704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.274811][ T9704] R13: 00007fe443816038 R14: 00007fe443815fa0 R15: 00007ffde05f6df8 [ 199.274840][ T9704] [ 199.830610][ T9705] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:17 [ 199.962055][ T9678] lo speed is unknown, defaulting to 1000 [ 200.104411][ T9698] mpoa:mpoad_close: () going down [ 200.231639][ T9725] netlink: 'syz.2.1117': attribute type 1 has an invalid length. [ 200.232384][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1118'. [ 200.295941][ T9722] netlink: 'syz.2.1117': attribute type 4 has an invalid length. [ 200.336136][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1117'. [ 200.381747][ T9726] bond2: entered promiscuous mode [ 200.404838][ T9726] bond2: entered allmulticast mode [ 200.414727][ T9730] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1119'. [ 200.438327][ T9726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.459147][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1120'. [ 200.662428][ T9717] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:21 [ 200.748537][ T9715] mpoa:mpoad_close: () going down [ 200.832067][ T9715] lo speed is unknown, defaulting to 1000 [ 201.046562][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1127'. [ 201.106432][ T9754] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1129'. [ 201.194111][ T9715] lo speed is unknown, defaulting to 1000 [ 201.254141][ T9758] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1130'. [ 201.632190][ T9773] vlan2: entered promiscuous mode [ 201.657983][ T9773] ip6gretap0: entered promiscuous mode [ 202.040656][ T9791] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 202.116040][ T9781] atomic_op ffff888023aa6198 conn xmit_atomic 0000000000000000 [ 202.264116][ T9796] lo speed is unknown, defaulting to 1000 [ 202.278646][ T9805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.378726][ T9810] netlink: 'syz.5.1143': attribute type 21 has an invalid length. [ 202.387519][ T9810] netlink: 'syz.5.1143': attribute type 1 has an invalid length. [ 202.591810][ T9818] syzkaller0: entered promiscuous mode [ 202.598108][ T9818] syzkaller0: entered allmulticast mode [ 202.631504][ T9796] lo speed is unknown, defaulting to 1000 [ 202.631504][ T9805] lo speed is unknown, defaulting to 1000 [ 203.001657][ T9830] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 203.220654][ T9805] lo speed is unknown, defaulting to 1000 [ 203.791263][ T9837] lo speed is unknown, defaulting to 1000 [ 203.941489][ T9873] FAULT_INJECTION: forcing a failure. [ 203.941489][ T9873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.964423][ T9873] CPU: 0 UID: 0 PID: 9873 Comm: syz.4.1165 Not tainted syzkaller #0 PREEMPT(full) [ 203.964446][ T9873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 203.964457][ T9873] Call Trace: [ 203.964463][ T9873] [ 203.964471][ T9873] dump_stack_lvl+0xe8/0x150 [ 203.964497][ T9873] should_fail_ex+0x412/0x560 [ 203.964521][ T9873] _copy_to_user+0x31/0xb0 [ 203.964546][ T9873] simple_read_from_buffer+0xe1/0x170 [ 203.964568][ T9873] proc_fail_nth_read+0x1bb/0x230 [ 203.964593][ T9873] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.964617][ T9873] ? rw_verify_area+0x2a6/0x4d0 [ 203.964638][ T9873] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.964660][ T9873] vfs_read+0x20c/0xa70 [ 203.964680][ T9873] ? fdget_pos+0x246/0x320 [ 203.964701][ T9873] ? __pfx___mutex_lock+0x10/0x10 [ 203.964722][ T9873] ? __pfx_vfs_read+0x10/0x10 [ 203.964744][ T9873] ? __fget_files+0x2a/0x420 [ 203.964764][ T9873] ? __fget_files+0x3a0/0x420 [ 203.964779][ T9873] ? __fget_files+0x2a/0x420 [ 203.964803][ T9873] ksys_read+0x150/0x270 [ 203.964825][ T9873] ? __pfx_ksys_read+0x10/0x10 [ 203.964855][ T9873] do_syscall_64+0xe2/0xf80 [ 203.964873][ T9873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.964888][ T9873] ? trace_irq_disable+0x37/0x100 [ 203.964903][ T9873] ? clear_bhb_loop+0x60/0xb0 [ 203.964922][ T9873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.964937][ T9873] RIP: 0033:0x7f63d755b78e [ 203.964952][ T9873] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.964965][ T9873] RSP: 002b:00007f63d836efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 203.964983][ T9873] RAX: ffffffffffffffda RBX: 00007f63d836f6c0 RCX: 00007f63d755b78e [ 203.964995][ T9873] RDX: 000000000000000f RSI: 00007f63d836f0a0 RDI: 0000000000000004 [ 203.965005][ T9873] RBP: 00007f63d836f090 R08: 0000000000000000 R09: 0000000000000000 [ 203.965015][ T9873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.965025][ T9873] R13: 00007f63d7816038 R14: 00007f63d7815fa0 R15: 00007ffd732aab88 [ 203.965055][ T9873] [ 204.133774][ T9837] lo speed is unknown, defaulting to 1000 [ 204.523438][ T9888] tipc: Enabled bearer , priority 0 [ 204.579401][ T9888] syzkaller0: entered promiscuous mode [ 204.590654][ T9888] syzkaller0: entered allmulticast mode [ 204.711946][ T9887] tipc: Resetting bearer [ 204.750994][ T5902] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 204.824716][ T9887] tipc: Disabling bearer [ 204.990986][ T9912] fido_id[9912]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 205.163342][ T9907] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 205.199920][ T9907] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 205.256420][ T9907] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 205.257929][ T9920] __nla_validate_parse: 12 callbacks suppressed [ 205.257946][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1175'. [ 205.482815][ T9920] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.580597][ T9926] macvlan2: entered promiscuous mode [ 205.612656][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1178'. [ 205.860037][ T9939] bond4: option min_links: invalid value (18446744073709551612) [ 205.882366][ T9939] bond4: option min_links: allowed values 0 - 2147483647 [ 205.915053][ T9939] bond4 (unregistering): Released all slaves [ 205.965393][ T52] block nbd5: Receive control failed (result -32) [ 206.044524][ T9947] syzkaller0: entered promiscuous mode [ 206.056090][ T9947] syzkaller0: entered allmulticast mode [ 206.159519][ T9944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.186688][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1181'. [ 206.316978][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 206.336500][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 206.360637][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'. [ 206.393396][ T9962] macvtap1: entered promiscuous mode [ 206.401176][ T9962] team0: entered promiscuous mode [ 206.406832][ T9962] macvtap1: entered allmulticast mode [ 206.416094][ T9962] team0: entered allmulticast mode [ 206.422093][ T9962] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 206.435276][ T9964] team0: left allmulticast mode [ 206.444427][ T9964] team0: left promiscuous mode [ 206.630967][ T9968] syzkaller1: entered promiscuous mode [ 206.643734][ T9968] syzkaller1: entered allmulticast mode [ 206.801851][ T9980] FAULT_INJECTION: forcing a failure. [ 206.801851][ T9980] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 206.840436][ T9980] CPU: 1 UID: 0 PID: 9980 Comm: syz.4.1190 Not tainted syzkaller #0 PREEMPT(full) [ 206.840461][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 206.840478][ T9980] Call Trace: [ 206.840485][ T9980] [ 206.840493][ T9980] dump_stack_lvl+0xe8/0x150 [ 206.840520][ T9980] should_fail_ex+0x412/0x560 [ 206.840545][ T9980] prepare_alloc_pages+0x22a/0x650 [ 206.840574][ T9980] __alloc_frozen_pages_noprof+0x12f/0x380 [ 206.840596][ T9980] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 206.840617][ T9980] ? __pfx_policy_nodemask+0x10/0x10 [ 206.840644][ T9980] alloc_pages_mpol+0x232/0x4a0 [ 206.840667][ T9980] alloc_pages_noprof+0xa8/0x190 [ 206.840687][ T9980] bpf_prog_test_run_skb+0x1352/0x1d50 [ 206.840727][ T9980] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 206.840744][ T9980] bpf_prog_test_run+0x2c7/0x340 [ 206.840766][ T9980] __sys_bpf+0x5cb/0x920 [ 206.840783][ T9980] ? __pfx___sys_bpf+0x10/0x10 [ 206.840812][ T9980] ? ksys_write+0x242/0x270 [ 206.840836][ T9980] ? __pfx_ksys_write+0x10/0x10 [ 206.840864][ T9980] __x64_sys_bpf+0x7c/0x90 [ 206.840887][ T9980] do_syscall_64+0xe2/0xf80 [ 206.840907][ T9980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.840921][ T9980] ? trace_irq_disable+0x37/0x100 [ 206.840937][ T9980] ? clear_bhb_loop+0x60/0xb0 [ 206.840957][ T9980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.840971][ T9980] RIP: 0033:0x7f63d759aeb9 [ 206.840984][ T9980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.840997][ T9980] RSP: 002b:00007f63d836f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.841016][ T9980] RAX: ffffffffffffffda RBX: 00007f63d7815fa0 RCX: 00007f63d759aeb9 [ 206.841026][ T9980] RDX: 0000000000000048 RSI: 0000200000000540 RDI: 000000000000000a [ 206.841036][ T9980] RBP: 00007f63d836f090 R08: 0000000000000000 R09: 0000000000000000 [ 206.841045][ T9980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.841054][ T9980] R13: 00007f63d7816038 R14: 00007f63d7815fa0 R15: 00007ffd732aab88 [ 206.841081][ T9980] [ 206.849912][ T9982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1191'. [ 207.078331][ T39] hid-generic 0005:0006:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 207.107971][ T9990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1191'. [ 207.218981][ T9997] netlink: 'syz.3.1196': attribute type 1 has an invalid length. [ 207.312067][ T9997] vlan2: entered allmulticast mode [ 207.329746][ T9997] veth0_to_bond: entered allmulticast mode [ 207.367845][T10005] netlink: 'syz.5.1199': attribute type 1 has an invalid length. [ 207.397723][T10005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.416059][T10005] bond1: (slave ip6gretap1): making interface the new active one [ 207.425195][T10005] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 207.448259][T10005] FAULT_INJECTION: forcing a failure. [ 207.448259][T10005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.491713][T10005] CPU: 1 UID: 0 PID: 10005 Comm: syz.5.1199 Not tainted syzkaller #0 PREEMPT(full) [ 207.491739][T10005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 207.491749][T10005] Call Trace: [ 207.491756][T10005] [ 207.491764][T10005] dump_stack_lvl+0xe8/0x150 [ 207.491791][T10005] should_fail_ex+0x412/0x560 [ 207.491815][T10005] _copy_from_iter+0x1d3/0x1670 [ 207.491845][T10005] ? rcu_is_watching+0x15/0xb0 [ 207.491863][T10005] ? __pfx__copy_from_iter+0x10/0x10 [ 207.491881][T10005] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 207.491913][T10005] ? netlink_sendmsg+0x650/0xb40 [ 207.491930][T10005] ? skb_put+0x11b/0x210 [ 207.491954][T10005] netlink_sendmsg+0x6c0/0xb40 [ 207.491981][T10005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.492004][T10005] ? aa_sock_msg_perm+0xf1/0x1b0 [ 207.492025][T10005] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.492045][T10005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.492063][T10005] ____sys_sendmsg+0xa68/0xad0 [ 207.492085][T10005] ? __might_fault+0xaf/0x130 [ 207.492113][T10005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.492142][T10005] ? import_iovec+0x73/0xa0 [ 207.492168][T10005] ___sys_sendmsg+0x2a5/0x360 [ 207.492187][T10005] ? __lock_acquire+0x6b5/0x2cf0 [ 207.492212][T10005] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.492265][T10005] ? __fget_files+0x2a/0x420 [ 207.492282][T10005] ? __fget_files+0x3a0/0x420 [ 207.492309][T10005] __x64_sys_sendmsg+0x1bd/0x2a0 [ 207.492332][T10005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.492358][T10005] ? __pfx_ksys_write+0x10/0x10 [ 207.492388][T10005] do_syscall_64+0xe2/0xf80 [ 207.492407][T10005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.492422][T10005] ? trace_irq_disable+0x37/0x100 [ 207.492436][T10005] ? clear_bhb_loop+0x60/0xb0 [ 207.492453][T10005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.492468][T10005] RIP: 0033:0x7f418ff9aeb9 [ 207.492483][T10005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.492497][T10005] RSP: 002b:00007f4190e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.492515][T10005] RAX: ffffffffffffffda RBX: 00007f4190215fa0 RCX: 00007f418ff9aeb9 [ 207.492528][T10005] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 207.492539][T10005] RBP: 00007f4190e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 207.492550][T10005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.492560][T10005] R13: 00007f4190216038 R14: 00007f4190215fa0 R15: 00007ffda101be18 [ 207.492589][T10005] [ 207.778038][T10011] netlink: 'syz.2.1202': attribute type 10 has an invalid length. [ 207.791997][T10011] team0: Device vxcan1 is of different type [ 207.928029][T10023] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1206'. [ 208.052360][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1208'. [ 208.769723][T10044] FAULT_INJECTION: forcing a failure. [ 208.769723][T10044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.783410][T10044] CPU: 0 UID: 0 PID: 10044 Comm: syz.3.1212 Not tainted syzkaller #0 PREEMPT(full) [ 208.783427][T10044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 208.783433][T10044] Call Trace: [ 208.783438][T10044] [ 208.783442][T10044] dump_stack_lvl+0xe8/0x150 [ 208.783459][T10044] should_fail_ex+0x412/0x560 [ 208.783474][T10044] _copy_from_iter+0x1d3/0x1670 [ 208.783498][T10044] ? rcu_is_watching+0x15/0xb0 [ 208.783508][T10044] ? __pfx__copy_from_iter+0x10/0x10 [ 208.783520][T10044] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 208.783539][T10044] ? netlink_sendmsg+0x650/0xb40 [ 208.783551][T10044] ? skb_put+0x11b/0x210 [ 208.783565][T10044] netlink_sendmsg+0x6c0/0xb40 [ 208.783580][T10044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.783593][T10044] ? aa_sock_msg_perm+0xf1/0x1b0 [ 208.783606][T10044] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 208.783617][T10044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.783628][T10044] ____sys_sendmsg+0xa68/0xad0 [ 208.783641][T10044] ? __might_fault+0xaf/0x130 [ 208.783658][T10044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.783675][T10044] ? import_iovec+0x73/0xa0 [ 208.783691][T10044] ___sys_sendmsg+0x2a5/0x360 [ 208.783703][T10044] ? __lock_acquire+0x6b5/0x2cf0 [ 208.783718][T10044] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.783755][T10044] ? __fget_files+0x2a/0x420 [ 208.783770][T10044] ? __fget_files+0x3a0/0x420 [ 208.783795][T10044] __x64_sys_sendmsg+0x1bd/0x2a0 [ 208.783815][T10044] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.783842][T10044] ? __pfx_ksys_write+0x10/0x10 [ 208.783871][T10044] do_syscall_64+0xe2/0xf80 [ 208.783890][T10044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.783904][T10044] ? trace_irq_disable+0x37/0x100 [ 208.783918][T10044] ? clear_bhb_loop+0x60/0xb0 [ 208.783936][T10044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.783953][T10044] RIP: 0033:0x7f470ed9aeb9 [ 208.783969][T10044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.783981][T10044] RSP: 002b:00007f470fbf5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.783997][T10044] RAX: ffffffffffffffda RBX: 00007f470f015fa0 RCX: 00007f470ed9aeb9 [ 208.784008][T10044] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 208.784017][T10044] RBP: 00007f470fbf5090 R08: 0000000000000000 R09: 0000000000000000 [ 208.784027][T10044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.784036][T10044] R13: 00007f470f016038 R14: 00007f470f015fa0 R15: 00007ffc0f4b1f28 [ 208.784063][T10044] [ 209.123193][T10048] bridge_slave_1: left allmulticast mode [ 209.129791][T10048] bridge_slave_1: left promiscuous mode [ 209.135506][T10048] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.146447][T10048] bond0: (slave bond_slave_0): Releasing backup interface [ 209.158206][T10048] bond0: (slave bond_slave_1): Releasing backup interface [ 209.174850][T10048] team0: Port device team_slave_0 removed [ 209.183994][T10048] team0: Port device team_slave_1 removed [ 209.190636][T10048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.198922][T10048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.208453][T10048] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.664488][T10071] netlink: 'syz.3.1219': attribute type 10 has an invalid length. [ 210.804506][T10013] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.235896][T10102] netlink: 'syz.4.1229': attribute type 3 has an invalid length. [ 211.281026][T10102] netlink: 'syz.4.1229': attribute type 3 has an invalid length. [ 211.418195][T10115] __nla_validate_parse: 2 callbacks suppressed [ 211.418214][T10115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1234'. [ 211.466502][T10115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1234'. [ 211.484141][T10117] netlink: 'syz.3.1235': attribute type 10 has an invalid length. [ 211.504189][T10117] netlink: 'syz.3.1235': attribute type 10 has an invalid length. [ 211.598888][T10125] lo speed is unknown, defaulting to 1000 [ 211.653992][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1236'. [ 211.739427][T10133] team0: Device gtp0 is of different type [ 211.805630][T10134] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1241'. [ 211.997814][T10125] lo speed is unknown, defaulting to 1000 [ 212.388534][T10169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1248'. [ 212.973344][T10188] lo speed is unknown, defaulting to 1000 [ 213.098662][T10199] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1259'. [ 213.315639][T10210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1263'. [ 213.409712][T10212] netlink: 'syz.3.1264': attribute type 13 has an invalid length. [ 213.432814][T10212] gretap0: refused to change device tx_queue_len [ 213.453665][T10212] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 213.659606][T10221] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1267'. [ 213.755952][T10188] lo speed is unknown, defaulting to 1000 [ 213.896395][ T52] Bluetooth: hci5: link tx timeout [ 213.903964][ T52] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.452780][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1281'. [ 214.481849][T10261] FAULT_INJECTION: forcing a failure. [ 214.481849][T10261] name failslab, interval 1, probability 0, space 0, times 0 [ 214.520581][T10261] CPU: 1 UID: 0 PID: 10261 Comm: syz.3.1281 Not tainted syzkaller #0 PREEMPT(full) [ 214.520605][T10261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 214.520615][T10261] Call Trace: [ 214.520623][T10261] [ 214.520630][T10261] dump_stack_lvl+0xe8/0x150 [ 214.520654][T10261] should_fail_ex+0x412/0x560 [ 214.520678][T10261] should_failslab+0xa8/0x100 [ 214.520698][T10261] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 214.520722][T10261] ? __alloc_skb+0x1d0/0x7d0 [ 214.520750][T10261] __alloc_skb+0x1d0/0x7d0 [ 214.520769][T10261] ? queue_delayed_work_on+0x12f/0x1e0 [ 214.520789][T10261] rtmsg_ifa+0xf8/0x1f0 [ 214.520814][T10261] __inet_insert_ifa+0x9d5/0xbc0 [ 214.520848][T10261] ? __pfx___inet_insert_ifa+0x10/0x10 [ 214.520880][T10261] inet_rtm_newaddr+0x10d8/0x1ad0 [ 214.520910][T10261] ? __local_bh_enable_ip+0xd0/0x130 [ 214.520926][T10261] ? __dev_queue_xmit+0x274/0x3850 [ 214.520947][T10261] ? __dev_queue_xmit+0x274/0x3850 [ 214.520972][T10261] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 214.521008][T10261] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 214.521028][T10261] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 214.521051][T10261] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 214.521069][T10261] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.521086][T10261] ? ref_tracker_free+0x693/0x840 [ 214.521103][T10261] ? __copy_skb_header+0xa3/0x4a0 [ 214.521126][T10261] ? __pfx_ref_tracker_free+0x10/0x10 [ 214.521153][T10261] netlink_rcv_skb+0x232/0x4b0 [ 214.521173][T10261] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.521193][T10261] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.521223][T10261] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.521248][T10261] netlink_unicast+0x80f/0x9b0 [ 214.521274][T10261] ? __pfx_netlink_unicast+0x10/0x10 [ 214.521293][T10261] ? netlink_sendmsg+0x650/0xb40 [ 214.521308][T10261] ? skb_put+0x11b/0x210 [ 214.521332][T10261] netlink_sendmsg+0x813/0xb40 [ 214.521360][T10261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.521383][T10261] ? aa_sock_msg_perm+0xf1/0x1b0 [ 214.521404][T10261] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.521425][T10261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.521441][T10261] ____sys_sendmsg+0xa68/0xad0 [ 214.521462][T10261] ? __might_fault+0xaf/0x130 [ 214.521490][T10261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.521520][T10261] ? import_iovec+0x73/0xa0 [ 214.521546][T10261] ___sys_sendmsg+0x2a5/0x360 [ 214.521566][T10261] ? __lock_acquire+0x6b5/0x2cf0 [ 214.521590][T10261] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.521643][T10261] ? __fget_files+0x2a/0x420 [ 214.521657][T10261] ? __fget_files+0x3a0/0x420 [ 214.521683][T10261] __x64_sys_sendmsg+0x1bd/0x2a0 [ 214.521707][T10261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.521738][T10261] ? __pfx_ksys_write+0x10/0x10 [ 214.521772][T10261] do_syscall_64+0xe2/0xf80 [ 214.521792][T10261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.521809][T10261] ? clear_bhb_loop+0x60/0xb0 [ 214.521829][T10261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.521845][T10261] RIP: 0033:0x7f470ed9aeb9 [ 214.521862][T10261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.521876][T10261] RSP: 002b:00007f470fbf5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.521902][T10261] RAX: ffffffffffffffda RBX: 00007f470f015fa0 RCX: 00007f470ed9aeb9 [ 214.521915][T10261] RDX: 0000000020008084 RSI: 0000200000000200 RDI: 0000000000000005 [ 214.521926][T10261] RBP: 00007f470fbf5090 R08: 0000000000000000 R09: 0000000000000000 [ 214.521935][T10261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.521944][T10261] R13: 00007f470f016038 R14: 00007f470f015fa0 R15: 00007ffc0f4b1f28 [ 214.521972][T10261] [ 215.148293][ T52] block nbd6: Receive control failed (result -32) [ 215.168562][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1286'. [ 215.405966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.949911][T10311] syzkaller0: entered promiscuous mode [ 215.955479][T10311] syzkaller0: entered allmulticast mode [ 215.970302][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 216.292061][T10330] syzkaller0: entered promiscuous mode [ 216.311747][T10330] syzkaller0: entered allmulticast mode [ 216.491923][T10341] __nla_validate_parse: 3 callbacks suppressed [ 216.491939][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 216.543345][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 216.553396][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 216.565070][T10346] FAULT_INJECTION: forcing a failure. [ 216.565070][T10346] name failslab, interval 1, probability 0, space 0, times 0 [ 216.581345][T10346] CPU: 1 UID: 0 PID: 10346 Comm: syz.3.1311 Not tainted syzkaller #0 PREEMPT(full) [ 216.581376][T10346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 216.581386][T10346] Call Trace: [ 216.581394][T10346] [ 216.581402][T10346] dump_stack_lvl+0xe8/0x150 [ 216.581429][T10346] should_fail_ex+0x412/0x560 [ 216.581454][T10346] should_failslab+0xa8/0x100 [ 216.581475][T10346] __kmalloc_noprof+0xde/0x7e0 [ 216.581491][T10346] ? sctp_auth_set_key+0x299/0x930 [ 216.581594][T10346] sctp_auth_set_key+0x299/0x930 [ 216.581629][T10346] sctp_setsockopt_auth_key+0x399/0x640 [ 216.581699][T10346] sctp_setsockopt+0x52d/0x12c0 [ 216.581722][T10346] ? sock_common_setsockopt+0x36/0xc0 [ 216.581741][T10346] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 216.581762][T10346] do_sock_setsockopt+0x17c/0x1b0 [ 216.581789][T10346] __x64_sys_setsockopt+0x13d/0x1b0 [ 216.581816][T10346] do_syscall_64+0xe2/0xf80 [ 216.581837][T10346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.581854][T10346] ? clear_bhb_loop+0x60/0xb0 [ 216.581875][T10346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.581892][T10346] RIP: 0033:0x7f470ed9aeb9 [ 216.581908][T10346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.581956][T10346] RSP: 002b:00007f470fbf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 216.581976][T10346] RAX: ffffffffffffffda RBX: 00007f470f015fa0 RCX: 00007f470ed9aeb9 [ 216.581987][T10346] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000003 [ 216.581997][T10346] RBP: 00007f470fbf5090 R08: 0000000000000009 R09: 0000000000000000 [ 216.582008][T10346] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 216.582017][T10346] R13: 00007f470f016038 R14: 00007f470f015fa0 R15: 00007ffc0f4b1f28 [ 216.582044][T10346] [ 216.776963][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 216.785997][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 217.306434][T10366] xt_bpf: check failed: parse error [ 217.318316][T10372] smc: net device wlan0 applied user defined pnetid SYZ0 [ 217.325620][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1322'. [ 217.328859][T10371] ip6tnl0: Caught tx_queue_len zero misconfig [ 217.410601][T10371] syzkaller1: entered promiscuous mode [ 217.419713][T10371] syzkaller1: entered allmulticast mode [ 217.893278][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1328'. [ 217.938769][T10394] netlink: set zone limit has 4 unknown bytes [ 217.967181][T10400] FAULT_INJECTION: forcing a failure. [ 217.967181][T10400] name failslab, interval 1, probability 0, space 0, times 0 [ 217.996271][T10400] CPU: 1 UID: 0 PID: 10400 Comm: syz.0.1330 Not tainted syzkaller #0 PREEMPT(full) [ 217.996297][T10400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 217.996308][T10400] Call Trace: [ 217.996315][T10400] [ 217.996322][T10400] dump_stack_lvl+0xe8/0x150 [ 217.996348][T10400] should_fail_ex+0x412/0x560 [ 217.996373][T10400] should_failslab+0xa8/0x100 [ 217.996395][T10400] __kmalloc_cache_noprof+0x83/0x6e0 [ 217.996411][T10400] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 217.996431][T10400] ? nft_trans_table_add+0x56/0x430 [ 217.996457][T10400] nft_trans_table_add+0x56/0x430 [ 217.996483][T10400] nf_tables_newtable+0xce3/0x1910 [ 217.996525][T10400] nfnetlink_rcv+0x1240/0x27b0 [ 217.996577][T10400] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 217.996617][T10400] ? ref_tracker_free+0x693/0x840 [ 217.996664][T10400] ? __netlink_deliver_tap+0x807/0x850 [ 217.996683][T10400] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.996719][T10400] netlink_unicast+0x80f/0x9b0 [ 217.996745][T10400] ? __pfx_netlink_unicast+0x10/0x10 [ 217.996765][T10400] ? netlink_sendmsg+0x650/0xb40 [ 217.996781][T10400] ? skb_put+0x11b/0x210 [ 217.996806][T10400] netlink_sendmsg+0x813/0xb40 [ 217.996835][T10400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.996857][T10400] ? aa_sock_msg_perm+0xf1/0x1b0 [ 217.996879][T10400] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.996899][T10400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.996918][T10400] ____sys_sendmsg+0xa68/0xad0 [ 217.996942][T10400] ? __might_fault+0xaf/0x130 [ 217.996971][T10400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.997001][T10400] ? import_iovec+0x73/0xa0 [ 217.997027][T10400] ___sys_sendmsg+0x2a5/0x360 [ 217.997047][T10400] ? __lock_acquire+0x6b5/0x2cf0 [ 217.997073][T10400] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.997130][T10400] ? __fget_files+0x2a/0x420 [ 217.997147][T10400] ? __fget_files+0x3a0/0x420 [ 217.997175][T10400] __x64_sys_sendmsg+0x1bd/0x2a0 [ 217.997199][T10400] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.997230][T10400] ? __pfx_ksys_write+0x10/0x10 [ 217.997283][T10400] do_syscall_64+0xe2/0xf80 [ 217.997303][T10400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.997320][T10400] ? trace_irq_disable+0x37/0x100 [ 217.997335][T10400] ? clear_bhb_loop+0x60/0xb0 [ 217.997355][T10400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.997372][T10400] RIP: 0033:0x7fe44359aeb9 [ 217.997388][T10400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.997402][T10400] RSP: 002b:00007fe4417f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.997421][T10400] RAX: ffffffffffffffda RBX: 00007fe443815fa0 RCX: 00007fe44359aeb9 [ 217.997434][T10400] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 217.997446][T10400] RBP: 00007fe4417f6090 R08: 0000000000000000 R09: 0000000000000000 [ 217.997456][T10400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.997467][T10400] R13: 00007fe443816038 R14: 00007fe443815fa0 R15: 00007ffde05f6df8 [ 217.997497][T10400] [ 218.506504][T10415] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1333'. [ 218.558473][T10410] syzkaller0: entered promiscuous mode [ 218.564151][T10410] syzkaller0: entered allmulticast mode [ 219.773822][T10444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1340'. [ 220.440737][T10453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1345'. [ 220.556828][T10458] syzkaller1: entered promiscuous mode [ 220.562353][T10458] syzkaller1: entered allmulticast mode [ 220.801503][T10472] lo speed is unknown, defaulting to 1000 [ 220.947559][T10477] netlink: 'syz.3.1353': attribute type 3 has an invalid length. [ 220.980576][T10477] netlink: 'syz.3.1353': attribute type 3 has an invalid length. [ 221.295174][T10497] netlink: 'syz.0.1362': attribute type 10 has an invalid length. [ 221.358112][T10472] lo speed is unknown, defaulting to 1000 [ 221.430273][T10504] netlink: 'syz.0.1365': attribute type 2 has an invalid length. [ 221.439925][T10504] netlink: 'syz.0.1365': attribute type 5 has an invalid length. [ 221.672084][ T24] hid-generic 0005:0006:5508.0003: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 221.707417][T10519] __nla_validate_parse: 4 callbacks suppressed [ 221.707438][T10519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1366'. [ 221.807507][ T25] block nbd1: Possible stuck request ffff888025748000: control (read@0,1024B). Runtime 120 seconds [ 222.442762][T10544] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1377'. [ 222.477272][T10546] lo speed is unknown, defaulting to 1000 [ 222.761897][T10546] lo speed is unknown, defaulting to 1000 [ 222.944360][T10559] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1385'. [ 222.985866][T10559] openvswitch: netlink: Flow key attr not present in new flow. [ 223.092825][T10566] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 223.126437][T10562] syzkaller0: entered promiscuous mode [ 223.132498][T10562] syzkaller0: entered allmulticast mode [ 223.613445][T10588] gretap1: entered promiscuous mode [ 223.638920][T10578] lo speed is unknown, defaulting to 1000 [ 223.851003][T10605] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1400'. [ 224.139358][T10616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.140424][T10578] lo speed is unknown, defaulting to 1000 [ 224.479194][T10626] syzkaller0: entered promiscuous mode [ 224.484716][T10626] syzkaller0: entered allmulticast mode [ 224.635067][T10636] netlink: 'syz.0.1410': attribute type 5 has an invalid length. [ 225.175954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.276167][T10656] syzkaller0: entered promiscuous mode [ 225.290634][T10656] syzkaller0: entered allmulticast mode [ 225.325871][T10658] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1420'. [ 225.466927][T10663] erspan0: left promiscuous mode [ 225.517629][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.560615][T10663] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 225.588095][T10663] ip6tnl2: left promiscuous mode [ 225.593421][T10663] ip6tnl2: left allmulticast mode [ 225.813169][T10681] netlink: 'syz.5.1423': attribute type 23 has an invalid length. [ 226.072377][T10690] lo speed is unknown, defaulting to 1000 [ 226.205983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.378586][ T5888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.433287][T10712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1431'. [ 226.483381][T10717] FAULT_INJECTION: forcing a failure. [ 226.483381][T10717] name failslab, interval 1, probability 0, space 0, times 0 [ 226.502491][T10718] sctp: [Deprecated]: syz.3.1431 (pid 10718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.502491][T10718] Use struct sctp_sack_info instead [ 226.524614][T10717] CPU: 0 UID: 0 PID: 10717 Comm: syz.0.1433 Not tainted syzkaller #0 PREEMPT(full) [ 226.524639][T10717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 226.524649][T10717] Call Trace: [ 226.524655][T10717] [ 226.524663][T10717] dump_stack_lvl+0xe8/0x150 [ 226.524689][T10717] should_fail_ex+0x412/0x560 [ 226.524713][T10717] should_failslab+0xa8/0x100 [ 226.524733][T10717] __kmalloc_cache_noprof+0x83/0x6e0 [ 226.524752][T10717] ? sctp_datamsg_from_user+0x88/0xef0 [ 226.524776][T10717] sctp_datamsg_from_user+0x88/0xef0 [ 226.524795][T10717] ? __sk_mem_raise_allocated+0x290/0x1270 [ 226.524818][T10717] ? __genradix_ptr+0x1e1/0x220 [ 226.524842][T10717] ? sctp_primitive_ASSOCIATE+0x95/0xc0 [ 226.524869][T10717] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 226.524890][T10717] ? __asan_memcpy+0x40/0x70 [ 226.524918][T10717] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 226.524953][T10717] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 226.524975][T10717] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 226.524998][T10717] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 226.525020][T10717] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 226.525040][T10717] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 226.525062][T10717] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 226.525080][T10717] ? security_sctp_bind_connect+0x7e/0x2c0 [ 226.525101][T10717] sctp_sendmsg+0x1b3d/0x2c10 [ 226.525137][T10717] ? __pfx_sctp_sendmsg+0x10/0x10 [ 226.525157][T10717] ? aa_sk_perm+0x15a/0x960 [ 226.525177][T10717] ? aa_sk_perm+0x82d/0x960 [ 226.525194][T10717] ? __might_fault+0xaf/0x130 [ 226.525222][T10717] ? __pfx_aa_sk_perm+0x10/0x10 [ 226.525243][T10717] ? sock_rps_record_flow+0x19/0x400 [ 226.525269][T10717] ? inet_sendmsg+0x2f4/0x370 [ 226.525290][T10717] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.525310][T10717] __sys_sendto+0x627/0x7a0 [ 226.525334][T10717] ? __pfx___sys_sendto+0x10/0x10 [ 226.525351][T10717] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 226.525385][T10717] ? __fget_files+0x3a0/0x420 [ 226.525414][T10717] ? ksys_write+0x242/0x270 [ 226.525438][T10717] ? __pfx_ksys_write+0x10/0x10 [ 226.525465][T10717] __x64_sys_sendto+0xde/0x100 [ 226.525495][T10717] do_syscall_64+0xe2/0xf80 [ 226.525514][T10717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.525533][T10717] ? trace_irq_disable+0x37/0x100 [ 226.525549][T10717] ? clear_bhb_loop+0x60/0xb0 [ 226.525569][T10717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.525586][T10717] RIP: 0033:0x7fe44359aeb9 [ 226.525606][T10717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.525620][T10717] RSP: 002b:00007fe4417f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 226.525638][T10717] RAX: ffffffffffffffda RBX: 00007fe443815fa0 RCX: 00007fe44359aeb9 [ 226.525651][T10717] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 226.525660][T10717] RBP: 00007fe4417f6090 R08: 0000200000000200 R09: 000000000000001c [ 226.525670][T10717] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 226.525681][T10717] R13: 00007fe443816038 R14: 00007fe443815fa0 R15: 00007ffde05f6df8 [ 226.525711][T10717] [ 226.615967][T10712] sctp: [Deprecated]: syz.3.1431 (pid 10712) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.615967][T10712] Use struct sctp_sack_info instead [ 226.668026][T10690] lo speed is unknown, defaulting to 1000 [ 226.795395][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1438'. [ 226.915264][T10726] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 226.935484][T10726] team0: Port device batadv1 added [ 227.210168][ T3594] tipc: Subscription rejected, illegal request [ 227.741679][T10742] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1441'. [ 227.818771][T10744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1442'. [ 227.829921][T10744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1442'. [ 228.279382][T10766] batman_adv: batadv0: Adding interface: dummy0 [ 228.286190][T10766] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.313711][T10770] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1454'. [ 228.328645][T10772] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1451'. [ 228.341735][T10772] unsupported nlmsg_type 40 [ 228.346033][T10766] batman_adv: batadv0: Interface activated: dummy0 [ 228.487709][T10784] syzkaller0: entered promiscuous mode [ 228.493415][T10784] syzkaller0: entered allmulticast mode [ 228.577707][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'. [ 228.602467][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'. [ 228.664598][T10793] FAULT_INJECTION: forcing a failure. [ 228.664598][T10793] name failslab, interval 1, probability 0, space 0, times 0 [ 228.709125][T10793] CPU: 0 UID: 0 PID: 10793 Comm: syz.3.1461 Not tainted syzkaller #0 PREEMPT(full) [ 228.709156][T10793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 228.709165][T10793] Call Trace: [ 228.709172][T10793] [ 228.709180][T10793] dump_stack_lvl+0xe8/0x150 [ 228.709205][T10793] should_fail_ex+0x412/0x560 [ 228.709230][T10793] should_failslab+0xa8/0x100 [ 228.709250][T10793] kmem_cache_alloc_noprof+0x87/0x6e0 [ 228.709275][T10793] ? sk_prot_alloc+0x57/0x210 [ 228.709300][T10793] sk_prot_alloc+0x57/0x210 [ 228.709318][T10793] ? sk_alloc+0x27/0x390 [ 228.709339][T10793] sk_alloc+0x3a/0x390 [ 228.709363][T10793] inet_create+0x7a0/0x1000 [ 228.709380][T10793] ? inet_create+0x9c/0x1000 [ 228.709401][T10793] __sock_create+0x4b2/0x9d0 [ 228.709428][T10793] udp_sock_create4+0xca/0x480 [ 228.709463][T10793] ? __pfx_udp_sock_create4+0x10/0x10 [ 228.709499][T10793] fou_nl_add_doit+0x199/0xa60 [ 228.709523][T10793] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 228.709560][T10793] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 228.709589][T10793] genl_family_rcv_msg_doit+0x22a/0x330 [ 228.709615][T10793] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 228.709647][T10793] ? bpf_lsm_capable+0x9/0x20 [ 228.709666][T10793] ? security_capable+0x7e/0x2c0 [ 228.709689][T10793] genl_rcv_msg+0x61c/0x7a0 [ 228.709717][T10793] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.709736][T10793] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 228.709757][T10793] ? __pfx_ref_tracker_free+0x10/0x10 [ 228.709782][T10793] netlink_rcv_skb+0x232/0x4b0 [ 228.709801][T10793] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.709823][T10793] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.709839][T10793] ? genl_rcv+0x19/0x40 [ 228.709875][T10793] ? down_read+0x272/0x2e0 [ 228.709895][T10793] ? genl_rcv+0xd/0x40 [ 228.709916][T10793] genl_rcv+0x28/0x40 [ 228.709936][T10793] netlink_unicast+0x80f/0x9b0 [ 228.709962][T10793] ? __pfx_netlink_unicast+0x10/0x10 [ 228.709982][T10793] ? netlink_sendmsg+0x650/0xb40 [ 228.709999][T10793] ? skb_put+0x11b/0x210 [ 228.710022][T10793] netlink_sendmsg+0x813/0xb40 [ 228.710049][T10793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.710071][T10793] ? aa_sock_msg_perm+0xf1/0x1b0 [ 228.710093][T10793] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.710112][T10793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.710129][T10793] ____sys_sendmsg+0xa68/0xad0 [ 228.710151][T10793] ? __might_fault+0xaf/0x130 [ 228.710180][T10793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.710210][T10793] ? import_iovec+0x73/0xa0 [ 228.710236][T10793] ___sys_sendmsg+0x2a5/0x360 [ 228.710256][T10793] ? __lock_acquire+0x6b5/0x2cf0 [ 228.710282][T10793] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.710336][T10793] ? __fget_files+0x2a/0x420 [ 228.710353][T10793] ? __fget_files+0x3a0/0x420 [ 228.710378][T10793] __x64_sys_sendmsg+0x1bd/0x2a0 [ 228.710401][T10793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.710431][T10793] ? __pfx_ksys_write+0x10/0x10 [ 228.710472][T10793] do_syscall_64+0xe2/0xf80 [ 228.710491][T10793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.710507][T10793] ? trace_irq_disable+0x37/0x100 [ 228.710522][T10793] ? clear_bhb_loop+0x60/0xb0 [ 228.710542][T10793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.710557][T10793] RIP: 0033:0x7f470ed9aeb9 [ 228.710573][T10793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.710587][T10793] RSP: 002b:00007f470fbf5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.710607][T10793] RAX: ffffffffffffffda RBX: 00007f470f015fa0 RCX: 00007f470ed9aeb9 [ 228.710620][T10793] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000005 [ 228.710630][T10793] RBP: 00007f470fbf5090 R08: 0000000000000000 R09: 0000000000000000 [ 228.710639][T10793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.710648][T10793] R13: 00007f470f016038 R14: 00007f470f015fa0 R15: 00007ffc0f4b1f28 [ 228.710676][T10793] [ 229.672655][T10827] netlink: 'syz.5.1474': attribute type 21 has an invalid length. [ 229.681646][T10827] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1474'. [ 229.701154][T10828] netlink: 'syz.2.1471': attribute type 83 has an invalid length. [ 229.712138][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 229.742689][T10827] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 229.759477][T10827] macvtap1: entered promiscuous mode [ 229.879630][T10823] syzkaller0: entered promiscuous mode [ 229.885160][T10823] syzkaller0: entered allmulticast mode [ 229.894586][T10834] netlink: 'syz.3.1475': attribute type 10 has an invalid length. [ 229.906147][T10834] netlink: 'syz.3.1475': attribute type 10 has an invalid length. [ 231.659301][T10861] FAULT_INJECTION: forcing a failure. [ 231.659301][T10861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.689875][T10861] CPU: 1 UID: 0 PID: 10861 Comm: syz.5.1484 Not tainted syzkaller #0 PREEMPT(full) [ 231.689901][T10861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 231.689912][T10861] Call Trace: [ 231.689919][T10861] [ 231.689927][T10861] dump_stack_lvl+0xe8/0x150 [ 231.689953][T10861] should_fail_ex+0x412/0x560 [ 231.689993][T10861] _copy_to_user+0x31/0xb0 [ 231.690023][T10861] bpf_test_finish+0x53c/0x6b0 [ 231.690051][T10861] ? __pfx_bpf_test_finish+0x10/0x10 [ 231.690082][T10861] ? rep_movs_alternative+0x4a/0x90 [ 231.690109][T10861] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 231.690145][T10861] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 231.690168][T10861] ? __fget_files+0x2a/0x420 [ 231.690190][T10861] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 231.690210][T10861] bpf_prog_test_run+0x2c7/0x340 [ 231.690233][T10861] __sys_bpf+0x5cb/0x920 [ 231.690256][T10861] ? __pfx___sys_bpf+0x10/0x10 [ 231.690283][T10861] ? ksys_write+0x242/0x270 [ 231.690307][T10861] ? __pfx_ksys_write+0x10/0x10 [ 231.690336][T10861] __x64_sys_bpf+0x7c/0x90 [ 231.690359][T10861] do_syscall_64+0xe2/0xf80 [ 231.690378][T10861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.690394][T10861] ? trace_irq_disable+0x37/0x100 [ 231.690410][T10861] ? clear_bhb_loop+0x60/0xb0 [ 231.690430][T10861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.690446][T10861] RIP: 0033:0x7f418ff9aeb9 [ 231.690462][T10861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.690476][T10861] RSP: 002b:00007f4190e4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.690495][T10861] RAX: ffffffffffffffda RBX: 00007f4190215fa0 RCX: 00007f418ff9aeb9 [ 231.690508][T10861] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 231.690519][T10861] RBP: 00007f4190e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 231.690529][T10861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.690539][T10861] R13: 00007f4190216038 R14: 00007f4190215fa0 R15: 00007ffda101be18 [ 231.690565][T10861] [ 232.123129][T10879] __nla_validate_parse: 2 callbacks suppressed [ 232.123149][T10879] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1492'. [ 232.156266][T10879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1492'. [ 232.544585][ T5902] IPVS: starting estimator thread 0... [ 232.590330][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1497'. [ 232.595612][T10901] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1500'. [ 232.624986][T10901] nbd: socks must be embedded in a SOCK_ITEM attr [ 232.663267][T10897] IPVS: using max 31 ests per chain, 74400 per kthread [ 232.805483][T10912] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1504'. [ 232.978676][T10921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1502'. [ 233.285218][T10933] syzkaller0: entered promiscuous mode [ 233.293579][T10933] syzkaller0: entered allmulticast mode [ 233.423245][T10937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1517'. [ 233.431365][T10940] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1518'. [ 233.441747][T10937] netlink: 'syz.2.1517': attribute type 7 has an invalid length. [ 233.453100][T10937] netlink: 'syz.2.1517': attribute type 8 has an invalid length. [ 233.473360][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1517'. [ 233.544548][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'. [ 233.554646][T10945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.561951][T10945] IPv6: NLM_F_CREATE should be set when creating new route [ 233.811933][T10954] Bluetooth: MGMT ver 1.23 [ 233.834254][T10953] batadv_slave_0: entered promiscuous mode [ 233.903280][T10953] batman_adv: batadv0: Adding interface: macsec1 [ 233.919959][T10953] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.006377][T10953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.018144][T10953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.029931][T10953] batman_adv: batadv0: Interface activated: macsec1 [ 234.066688][T10954] vlan2: entered promiscuous mode [ 234.577903][T10996] netlink: 'syz.4.1538': attribute type 1 has an invalid length. [ 234.718497][T11003] FAULT_INJECTION: forcing a failure. [ 234.718497][T11003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.772920][T11003] CPU: 1 UID: 0 PID: 11003 Comm: syz.5.1541 Not tainted syzkaller #0 PREEMPT(full) [ 234.772943][T11003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 234.772953][T11003] Call Trace: [ 234.772961][T11003] [ 234.772969][T11003] dump_stack_lvl+0xe8/0x150 [ 234.772994][T11003] should_fail_ex+0x412/0x560 [ 234.773018][T11003] _copy_to_user+0x31/0xb0 [ 234.773043][T11003] simple_read_from_buffer+0xe1/0x170 [ 234.773067][T11003] proc_fail_nth_read+0x1bb/0x230 [ 234.773093][T11003] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.773117][T11003] ? rw_verify_area+0x2a6/0x4d0 [ 234.773138][T11003] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.773161][T11003] vfs_read+0x20c/0xa70 [ 234.773189][T11003] ? __pfx_vfs_read+0x10/0x10 [ 234.773214][T11003] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 234.773236][T11003] ? __pfx_aa_sk_perm+0x10/0x10 [ 234.773263][T11003] ksys_read+0x150/0x270 [ 234.773287][T11003] ? __pfx_ksys_read+0x10/0x10 [ 234.773317][T11003] do_syscall_64+0xe2/0xf80 [ 234.773337][T11003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.773353][T11003] ? trace_irq_disable+0x37/0x100 [ 234.773369][T11003] ? clear_bhb_loop+0x60/0xb0 [ 234.773389][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.773406][T11003] RIP: 0033:0x7f418ff5b78e [ 234.773421][T11003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 234.773436][T11003] RSP: 002b:00007f4190e4efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.773454][T11003] RAX: ffffffffffffffda RBX: 00007f4190e4f6c0 RCX: 00007f418ff5b78e [ 234.773467][T11003] RDX: 000000000000000f RSI: 00007f4190e4f0a0 RDI: 0000000000000004 [ 234.773477][T11003] RBP: 00007f4190e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 234.773487][T11003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.773496][T11003] R13: 00007f4190216038 R14: 00007f4190215fa0 R15: 00007ffda101be18 [ 234.773525][T11003] [ 235.728603][T11036] team0: Device gtp0 is of different type [ 236.362497][T11046] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.453918][T11051] lo speed is unknown, defaulting to 1000 [ 236.481969][ T30] audit: type=1107 audit(1770091316.694:6): pid=11059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ϭq' [ 236.489924][T11058] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 236.804920][T11073] netlink: 'syz.5.1568': attribute type 3 has an invalid length. [ 236.828269][T11073] netlink: 'syz.5.1568': attribute type 1 has an invalid length. [ 237.208068][T11095] __nla_validate_parse: 27 callbacks suppressed [ 237.208087][T11095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1577'. [ 237.233798][T11095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1577'. [ 237.241146][T11093] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1576'. [ 237.300293][T11093] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1576'. [ 237.421648][T11102] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 237.463164][T11096] netlink: 'syz.0.1559': attribute type 4 has an invalid length. [ 237.463862][T11102] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 237.484630][T11105] FAULT_INJECTION: forcing a failure. [ 237.484630][T11105] name failslab, interval 1, probability 0, space 0, times 0 [ 237.509547][T11102] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 237.509559][T11107] smc: net device wlan0 erased user defined pnetid SYZ0 [ 237.535918][T11105] CPU: 1 UID: 0 PID: 11105 Comm: syz.4.1580 Not tainted syzkaller #0 PREEMPT(full) [ 237.535942][T11105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 237.535952][T11105] Call Trace: [ 237.535959][T11105] [ 237.535966][T11105] dump_stack_lvl+0xe8/0x150 [ 237.535993][T11105] should_fail_ex+0x412/0x560 [ 237.536018][T11105] should_failslab+0xa8/0x100 [ 237.536040][T11105] __kmalloc_cache_noprof+0x83/0x6e0 [ 237.536059][T11105] ? sctp_add_bind_addr+0x8c/0x370 [ 237.536084][T11105] sctp_add_bind_addr+0x8c/0x370 [ 237.536107][T11105] sctp_copy_local_addr_list+0x314/0x4f0 [ 237.536131][T11105] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 237.536151][T11105] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 237.536173][T11105] ? sctp_v6_is_any+0x64/0x80 [ 237.536194][T11105] ? sctp_copy_one_addr+0x93/0x360 [ 237.536217][T11105] sctp_bind_addr_copy+0xb3/0x3c0 [ 237.536237][T11105] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 237.536259][T11105] sctp_connect_new_asoc+0x2ff/0x6b0 [ 237.536284][T11105] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 237.536321][T11105] ? sctp_get_af_specific+0x29/0x80 [ 237.536338][T11105] ? sctp_inet6_send_verify+0x80/0x300 [ 237.536355][T11105] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 237.536381][T11105] __sctp_connect+0x5cb/0xdc0 [ 237.536413][T11105] ? __pfx___sctp_connect+0x10/0x10 [ 237.536433][T11105] ? security_sctp_bind_connect+0x7e/0x2c0 [ 237.536453][T11105] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 237.536473][T11105] sctp_getsockopt_connectx3+0x227/0x360 [ 237.536492][T11105] ? lock_sock_nested+0x6a/0x100 [ 237.536512][T11105] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 237.536540][T11105] ? __local_bh_enable_ip+0xd0/0x130 [ 237.536562][T11105] sctp_getsockopt+0x984/0xb90 [ 237.536582][T11105] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 237.536601][T11105] do_sock_getsockopt+0x2d3/0x3f0 [ 237.536626][T11105] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 237.536647][T11105] ? __fget_files+0x3a0/0x420 [ 237.536664][T11105] ? __fget_files+0x2a/0x420 [ 237.536689][T11105] __x64_sys_getsockopt+0x1a4/0x240 [ 237.536720][T11105] do_syscall_64+0xe2/0xf80 [ 237.536739][T11105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.536755][T11105] ? trace_irq_disable+0x37/0x100 [ 237.536770][T11105] ? clear_bhb_loop+0x60/0xb0 [ 237.536791][T11105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.536807][T11105] RIP: 0033:0x7f63d759aeb9 [ 237.536824][T11105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.536837][T11105] RSP: 002b:00007f63d836f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 237.536856][T11105] RAX: ffffffffffffffda RBX: 00007f63d7815fa0 RCX: 00007f63d759aeb9 [ 237.536869][T11105] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000006 [ 237.536879][T11105] RBP: 00007f63d836f090 R08: 0000200000000180 R09: 0000000000000000 [ 237.536891][T11105] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.536902][T11105] R13: 00007f63d7816038 R14: 00007f63d7815fa0 R15: 00007ffd732aab88 [ 237.536930][T11105] [ 237.547005][T11051] lo speed is unknown, defaulting to 1000 [ 237.556231][T11082] lo speed is unknown, defaulting to 1000 [ 237.777501][T11111] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1582'. [ 238.075607][T11117] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1584'. [ 238.111261][T11082] lo speed is unknown, defaulting to 1000 [ 238.786950][T11134] netlink: 'syz.2.1592': attribute type 9 has an invalid length. [ 238.846498][T11131] delete_channel: no stack [ 238.877208][T11135] lo speed is unknown, defaulting to 1000 [ 238.897298][T11137] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1593'. [ 239.055369][T11135] lo speed is unknown, defaulting to 1000 [ 240.150413][T11151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.181563][T11149] lo speed is unknown, defaulting to 1000 [ 240.556196][T11178] syzkaller0: entered promiscuous mode [ 240.571980][T11178] syzkaller0: entered allmulticast mode [ 240.583153][T11180] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1605'. [ 240.590781][T11149] lo speed is unknown, defaulting to 1000 [ 240.763564][T11185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.880969][T11187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.893310][T11189] lo speed is unknown, defaulting to 1000 [ 241.165935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.277128][T11189] lo speed is unknown, defaulting to 1000 [ 241.747370][T11210] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1615'. [ 241.963512][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 242.162371][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'. [ 242.205942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.333683][T11231] __nla_validate_parse: 1 callbacks suppressed [ 242.333702][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1624'. [ 242.401915][T11231] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1624'. [ 242.540634][T11238] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1627'. [ 242.717289][T11244] tap0: tun_chr_ioctl cmd 35111 [ 242.869898][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1631'. [ 243.733814][T11259] lo speed is unknown, defaulting to 1000 [ 244.075755][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'. [ 244.085267][T11302] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1640'. [ 244.125271][T11291] lo speed is unknown, defaulting to 1000 [ 244.136302][T11259] lo speed is unknown, defaulting to 1000 [ 244.343936][T11308] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1641'. [ 244.483936][T11290] lo speed is unknown, defaulting to 1000 [ 244.778791][T11290] lo speed is unknown, defaulting to 1000 [ 244.783582][T11321] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1644'. [ 244.901702][T11291] lo speed is unknown, defaulting to 1000 [ 245.383856][T11340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1646'. [ 245.506876][T11343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1647'. [ 246.322540][T11385] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 246.359788][T11381] lo speed is unknown, defaulting to 1000 [ 246.432394][T11385] : renamed from bond_slave_0 (while UP) [ 246.778899][T11381] lo speed is unknown, defaulting to 1000 [ 246.798691][T11400] xt_bpf: check failed: parse error [ 247.477613][T11427] bond1: option mode: invalid value (254) [ 247.505320][T11427] bond1 (unregistering): Released all slaves [ 247.544786][T11422] netlink: 'syz.0.1671': attribute type 1 has an invalid length. [ 247.571199][T11422] __nla_validate_parse: 4 callbacks suppressed [ 247.571218][T11422] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1671'. [ 248.054818][T11452] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1678'. [ 248.113674][T11458] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1681'. [ 248.214258][T11464] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1683'. [ 248.226733][T11464] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1683'. [ 248.284815][T11466] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1682'. [ 248.370727][T11469] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1684'. [ 248.416877][T11469] syzkaller1: entered promiscuous mode [ 248.430753][T11469] syzkaller1: entered allmulticast mode [ 248.578365][T11482] lo speed is unknown, defaulting to 1000 [ 248.635339][T11478] geneve0: entered promiscuous mode [ 248.653315][T11478] geneve0: entered allmulticast mode [ 248.781546][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1687'. [ 249.213739][T11504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 249.269637][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1692'. [ 249.311407][T11504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.320417][T11482] lo speed is unknown, defaulting to 1000 [ 250.541217][T11560] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.781116][T11566] lo speed is unknown, defaulting to 1000 [ 251.075554][T11566] lo speed is unknown, defaulting to 1000 [ 251.662503][T11613] netlink: 'syz.2.1717': attribute type 1 has an invalid length. [ 251.699202][T11613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.769503][T11613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.776792][T11613] IPv6: NLM_F_CREATE should be set when creating new route [ 251.892637][ T25] block nbd1: Possible stuck request ffff888025748000: control (read@0,1024B). Runtime 150 seconds [ 252.121720][T11634] ipt_ECN: cannot use operation on non-tcp rule [ 252.322515][T11644] lo speed is unknown, defaulting to 1000 [ 252.327230][T11641] netlink: 'syz.4.1723': attribute type 9 has an invalid length. [ 252.460463][T11641] netlink: 'syz.4.1723': attribute type 6 has an invalid length. [ 252.711628][T11669] __nla_validate_parse: 6 callbacks suppressed [ 252.711646][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1734'. [ 252.742151][T11669] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1734'. [ 253.034584][T11644] lo speed is unknown, defaulting to 1000 [ 253.208242][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1744'. [ 253.371398][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1746'. [ 254.492667][T11753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1751'. [ 254.558540][T11753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1751'. [ 254.925334][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 255.294780][T11795] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1762'. [ 255.594779][T11795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1762'. [ 255.646767][T11798] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 255.741982][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.237816][T11833] syzkaller0: entered promiscuous mode [ 256.247795][T11833] syzkaller0: entered allmulticast mode [ 256.409046][T11843] FAULT_INJECTION: forcing a failure. [ 256.409046][T11843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.423212][T11843] CPU: 1 UID: 0 PID: 11843 Comm: syz.5.1776 Not tainted syzkaller #0 PREEMPT(full) [ 256.423236][T11843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 256.423261][T11843] Call Trace: [ 256.423269][T11843] [ 256.423276][T11843] dump_stack_lvl+0xe8/0x150 [ 256.423301][T11843] should_fail_ex+0x412/0x560 [ 256.423333][T11843] core_sys_select+0x8dd/0xc30 [ 256.423365][T11843] ? __pfx_core_sys_select+0x10/0x10 [ 256.423409][T11843] ? __pfx_set_user_sigmask+0x10/0x10 [ 256.423440][T11843] __se_sys_pselect6+0x267/0x320 [ 256.423462][T11843] ? __pfx___se_sys_pselect6+0x10/0x10 [ 256.423479][T11843] ? __pfx_ksys_write+0x10/0x10 [ 256.423505][T11843] ? __x64_sys_pselect6+0x21/0xf0 [ 256.423525][T11843] do_syscall_64+0xe2/0xf80 [ 256.423544][T11843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.423560][T11843] ? trace_irq_disable+0x37/0x100 [ 256.423575][T11843] ? clear_bhb_loop+0x60/0xb0 [ 256.423595][T11843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.423611][T11843] RIP: 0033:0x7f418ff9aeb9 [ 256.423626][T11843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.423640][T11843] RSP: 002b:00007f4190e4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 256.423658][T11843] RAX: ffffffffffffffda RBX: 00007f4190215fa0 RCX: 00007f418ff9aeb9 [ 256.423670][T11843] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000040 [ 256.423681][T11843] RBP: 00007f4190e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 256.423692][T11843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.423701][T11843] R13: 00007f4190216038 R14: 00007f4190215fa0 R15: 00007ffda101be18 [ 256.423727][T11843] [ 256.437307][T11844] netlink: 'syz.2.1775': attribute type 2 has an invalid length. [ 256.518582][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1777'. [ 256.645400][T11844] 9: entered promiscuous mode [ 257.124437][T11870] FAULT_INJECTION: forcing a failure. [ 257.124437][T11870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.141839][T11870] CPU: 1 UID: 0 PID: 11870 Comm: syz.4.1785 Not tainted syzkaller #0 PREEMPT(full) [ 257.141865][T11870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 257.141876][T11870] Call Trace: [ 257.141883][T11870] [ 257.141890][T11870] dump_stack_lvl+0xe8/0x150 [ 257.141918][T11870] should_fail_ex+0x412/0x560 [ 257.141943][T11870] _copy_from_user+0x2d/0xb0 [ 257.141967][T11870] bpf_prog_test_run_skb+0x144a/0x1d50 [ 257.142009][T11870] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 257.142029][T11870] bpf_prog_test_run+0x2c7/0x340 [ 257.142051][T11870] __sys_bpf+0x5cb/0x920 [ 257.142070][T11870] ? __pfx___sys_bpf+0x10/0x10 [ 257.142102][T11870] ? ksys_write+0x242/0x270 [ 257.142126][T11870] ? __pfx_ksys_write+0x10/0x10 [ 257.142154][T11870] __x64_sys_bpf+0x7c/0x90 [ 257.142176][T11870] do_syscall_64+0xe2/0xf80 [ 257.142196][T11870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.142212][T11870] ? trace_irq_disable+0x37/0x100 [ 257.142227][T11870] ? clear_bhb_loop+0x60/0xb0 [ 257.142244][T11870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.142259][T11870] RIP: 0033:0x7f63d759aeb9 [ 257.142275][T11870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.142287][T11870] RSP: 002b:00007f63d836f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 257.142304][T11870] RAX: ffffffffffffffda RBX: 00007f63d7815fa0 RCX: 00007f63d759aeb9 [ 257.142315][T11870] RDX: 0000000000000048 RSI: 0000200000000540 RDI: 000000000000000a [ 257.142325][T11870] RBP: 00007f63d836f090 R08: 0000000000000000 R09: 0000000000000000 [ 257.142335][T11870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.142345][T11870] R13: 00007f63d7816038 R14: 00007f63d7815fa0 R15: 00007ffd732aab88 [ 257.142376][T11870] [ 258.129845][T11908] __nla_validate_parse: 4 callbacks suppressed [ 258.129865][T11908] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1798'. [ 258.328180][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1799'. [ 258.376565][T11912] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1799'. [ 258.395937][ T7231] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3 [ 258.413211][T11916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1799'. [ 258.413616][ T7231] ref_tracker: netdev@ffff8880217ac620 has 1/2 users at [ 258.413616][ T7231] dst_init+0xd9/0x480 [ 258.413616][ T7231] dst_alloc+0x12a/0x170 [ 258.413616][ T7231] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 258.413616][ T7231] ip_route_output_key_hash+0x18d/0x2a0 [ 258.413616][ T7231] ip_route_output_flow+0x2a/0x150 [ 258.413616][ T7231] geneve_link_config+0x1a5/0x660 [ 258.413616][ T7231] geneve_newlink+0x1ed/0x260 [ 258.413616][ T7231] rtnl_newlink_create+0x329/0xb70 [ 258.413616][ T7231] rtnl_newlink+0x1666/0x1be0 [ 258.413616][ T7231] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 258.413616][ T7231] netlink_rcv_skb+0x232/0x4b0 [ 258.413616][ T7231] netlink_unicast+0x80f/0x9b0 [ 258.413616][ T7231] netlink_sendmsg+0x813/0xb40 [ 258.413616][ T7231] __sys_sendto+0x709/0x7a0 [ 258.413616][ T7231] __x64_sys_sendto+0xde/0x100 [ 258.413616][ T7231] do_syscall_64+0xe2/0xf80 [ 258.413616][ T7231] [ 258.446597][T11916] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1799'. [ 258.512359][ T7231] ref_tracker: netdev@ffff8880217ac620 has 1/2 users at [ 258.512359][ T7231] fib_check_nh+0xd64/0x1b40 [ 258.512359][ T7231] fib_create_info+0x2085/0x31f0 [ 258.512359][ T7231] fib_table_insert+0xc8/0x1b50 [ 258.512359][ T7231] fib_magic+0x434/0x510 [ 258.512359][ T7231] fib_add_ifaddr+0x38d/0x5f0 [ 258.512359][ T7231] fib_netdev_event+0x382/0x490 [ 258.512359][ T7231] notifier_call_chain+0x19d/0x3a0 [ 258.512359][ T7231] __dev_notify_flags+0x1a9/0x310 [ 258.512359][ T7231] netif_change_flags+0xe8/0x1a0 [ 258.512359][ T7231] do_setlink+0xf82/0x4590 [ 258.512359][ T7231] rtnl_newlink+0x15a9/0x1be0 [ 258.512359][ T7231] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 258.512359][ T7231] netlink_rcv_skb+0x232/0x4b0 [ 258.512359][ T7231] netlink_unicast+0x80f/0x9b0 [ 258.512359][ T7231] netlink_sendmsg+0x813/0xb40 [ 258.512359][ T7231] __sys_sendto+0x709/0x7a0 [ 258.512359][ T7231] [ 261.980641][ T5191] udevd[5191]: worker [5820] /devices/virtual/block/nbd1 is taking a long time