last executing test programs: 10.37384238s ago: executing program 1 (id=9061): socket(0x2a, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (fail_nth: 5) 9.852777351s ago: executing program 1 (id=9067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="b3", 0x1}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000840000000000000006030000000006"], 0x18, 0x40}, 0x6008045) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 9.677390559s ago: executing program 1 (id=9071): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000140)="f9ffffff", 0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000780000000000019078ac1e0001ac1414aa05009078e00000e04700fffc0000000000110002ac1414aaac1414aa07030089079d00000000443c0003e000000100000000e000000200000000ac1e000100000000ac1414aa000000000000000000000000ac141400000000000000dcd461170c310000000000fe0d0aea691e5ef717efce25d1f3340e29bfa1d84e4ab26385c835"], 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbf8, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8864}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030040000000000000000000094000100fffffdff95"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) sendmsg$nl_xfrm(r2, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x200}, 0x10) r7 = socket$igmp6(0xa, 0x3, 0x2) socket$rds(0x15, 0x5, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', r5, 0x2f, 0x8, 0xd5, 0x8000, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x80, 0x8000, 0x1, 0x4}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)={0x2d0, r8, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x2f, 0x5, "a9ab22f5bd0eb03f80cf3a5a16d266c6570801919d358bd2ce4316f0bce22aac88b796fddada6900356e2b"}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1a, 0x5, "64c695af8cef3003cc658b39146ac59fee89307afc67"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x19c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'raw\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xaa, 0x5, "b90f540ad48d9ea4b2a9fdba897c8dc0dadd3b63fdddd67d5bbb5f6ad2d57dcab46fd0b4ded95e012dcdd1df7ecfb5b5fd0876ab26ee9262ae2f66077ed6790a3db14421ef4f4b4f0def459ee540b2dd6f3a794272a3d880e0bf33cc8539d5ffed1143276304a13b19dbc268e096106756e7315ea5f5e0252882c7d939dbd3fb63b3fffada5b4d8bda68e71fea42d0cc9709ff64145ccc7a7c990a5b2897885cf57a4244c860"}, @ETHTOOL_A_BITSET_VALUE={0x88, 0x4, "097aef1371eac015f7b57e3f218767d3aa40caa2ef5d809710ab57db3f36c784481600ff85690f267010b90228d6e12891a8e240ec0f108907e60eac008bfdb33b2207545ffa2b1879a8cf56bb2a878168d2a34b817a573e0245e060f57d76aca6848e3575befa18f1cb546a04b44816ff9ecc1b4e4e1ca9d495c97d2ac92e4f1a7baea3"}, @ETHTOOL_A_BITSET_MASK={0x3f, 0x5, "afba2b57a40a70ca82b1820dedcef529c58c50b74687dc3ad6630bcb5d9b0b81877cfcf231f0028fd8eaa36dca48196dab41d6009f61b5b95bb2e8"}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4048081}, 0xc811) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x6, 0x5c, 0x5, {0x9}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0}, 0x48814) 9.287293332s ago: executing program 1 (id=9076): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="0080000000000000004588000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x16}, 0x50) 9.132420129s ago: executing program 1 (id=9079): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f0000000480)=""/181, 0xb5}], 0x2, &(0x7f0000000540)=""/94, 0x5e}, 0x7ff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/229, 0xe5}, 0xfffffffd}], 0x2, 0x10000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000880)={@local, @multicast1}, &(0x7f00000008c0)=0xc) 2.196768573s ago: executing program 3 (id=9149): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\a'], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.988181738s ago: executing program 2 (id=9152): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000900)={0x6, 0x0, 0x6, 0x4, 0xe0, 0x8, 0x1}, 0xc) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000004f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x6, @local, 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000002bc0)='\b', 0x1}], 0x1}}], 0x1, 0x240c80c0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000), 0x2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r4}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000500)=ANY=[@ANYBLOB="180000006a0001002abd7000000000000000000016"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000002c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 1.951090106s ago: executing program 3 (id=9153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x1b9, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb4ef1adb02bd281003e0086dd61cc667a017f110100000000000000000000ffff7f00000100000000000000000000000000000000060a014000000000fc020000000000000000000000000001fe880000000000000000000000000101fc010000000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000003a08000000000000c20400000020072800000000080305000600000000000000f8ffffffffffffff000000ff010000000600000000000000010100c910fe88000000000000000000000000000100000084005438680000003a0404020610040000000000000000000000ffffe0000001ff0100000000000000000000000000015c00a6b8660000004e224e22009f90784649fb1b3bf472d8bcbda383aab8cb709a01da52eec068ba792ff883605034235616ff94d1deb5b15bc1fc56a9261fc0e7194f09c91d7fea45a19d94dbee151a143e5154795e20c3ad5f9e612dd748a727b826292c85f10d9dfc296579a532b643af97b68d448a9e87d7652cc836262077f9631fc04e93b6ed5d20e123d2428b0e500a1e03775b30a74b8e19e8bb3fcce9d4732ef3806d"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x805}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000d40)=[{0x0}, {&(0x7f0000000a80)=""/8, 0x8}], 0x2}, 0x3}], 0x1, 0x2000, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) close(0x3) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES16=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300)=r5, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_buf(r6, 0x1, 0x2b, &(0x7f0000000440)=""/255, &(0x7f0000000200)=0xff) 1.707505881s ago: executing program 3 (id=9155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x9, 0x2, 0x0, r1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbda40153a6c45c4cdd000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.653803398s ago: executing program 0 (id=9156): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) ppoll(&(0x7f0000000140)=[{r0, 0x2400}], 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 1.608281106s ago: executing program 2 (id=9157): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r3, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028014000300ff0100000000000000000000000000010500090004"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x0, 0x3}, [@IFLA_MTU={0x8, 0x4, 0xfff1}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="00010104000000000000000002000000240001801400018008000100e000000108000200000000200c00028005000100000000e5050001fa47000000140001800800017a6500000108000200e000000208000b400000000506001240000300"/108], 0x6c}}, 0x0) socket(0x22, 0x2, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 1.479176097s ago: executing program 0 (id=9158): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) 1.474508945s ago: executing program 3 (id=9159): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(nhpoly1305-avx2)\x00'}, 0x4e) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4a20, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xfffff63d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x30}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002c80), &(0x7f0000002d80)=0x8) 1.395425079s ago: executing program 4 (id=9160): sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x40801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x240, 0xffffffff, 0x1a0, 0x0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca45c14}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) 1.276509141s ago: executing program 0 (id=9161): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xa, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x3}, {0x9, 0x4}, {0x5, 0x1}, {0xc, 0x5}, {0x3, 0x2}]}]}, {0x0, [0x7f, 0x2e, 0x2e, 0x5f, 0x2e, 0x0, 0x2e, 0x0]}}, &(0x7f0000000080)=""/32, 0x56, 0x20, 0x1, 0x111, 0x10000}, 0x28) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000bf00000095"], &(0x7f00000001c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x13, '\x00', r1, 0x0, r0}, 0x94) 1.256270871s ago: executing program 4 (id=9162): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\a'], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.184222137s ago: executing program 2 (id=9163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80000000, 0x0, 0x20, 0x80, 0xffffffff}, 0x0, 0x0, 0x4, 0x6, 0x2e, 0x14, 0x0, 0x0, 0x4, 0x0, {0x0, 0x3, 0x4000008, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x2c}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100039042abd70000000000000000000", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x18d1}, 0x4000020) r5 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000180)={r6, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14) syz_emit_ethernet(0x74, &(0x7f00000001c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @local, @void, {@llc_tr={0x11, {@snap={0x0, 0x0, 'y', "532988", 0x88fb, "063dffdebe1d3791ddae1842123ac45c872a78bf6aaf0269d33647e36a2a68951080cb27f99b5dc7ee44397949614cd8c908c55746e56900c88f381e2273611b89e4713a6ee669694bfbfcf415877e328e68256872eb5cba35ef1f972a16"}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x30, 0x0, [{@multicast1}, {@broadcast}, {@initdev}]}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) shutdown(r8, 0x1) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r11, 0x0) getsockopt$inet_buf(r10, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006420000402907800000000e000000211009078e00000020000000200000004000000000d3ae7da3e49bababa0bb22d2956be58d027631f46f0aa867658fea5b2be811f28d1c945bfae50c5e4af2dae51f7929e0ba342685208e11fed85848beed29d654896c9bfdbb1b9abc34752334a1fa42b49ee0e1c1fc06bee73fa57b2a72ba55800d1f5e087bc447fcf15d24de4b19a90360ae17205a67ad345f072660aecafdb07e1ebe2dce57e6bbf8b2ec80e32b5c1386c935cff180cad8d617058bcc52b48fb2afefb7dfd0f2f45391234d6e68e25d00bc239c819f74f361a19c055"], 0x0) unshare(0x6010000) 1.055306735s ago: executing program 0 (id=9164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x1b9, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb4ef1adb02bd281003e0086dd61cc667a017f110100000000000000000000ffff7f00000100000000000000000000000000000000060a014000000000fc020000000000000000000000000001fe880000000000000000000000000101fc010000000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000003a08000000000000c20400000020072800000000080305000600000000000000f8ffffffffffffff000000ff010000000600000000000000010100c910fe88000000000000000000000000000100000084005438680000003a0404020610040000000000000000000000ffffe0000001ff0100000000000000000000000000015c00a6b8660000004e224e22009f90784649fb1b3bf472d8bcbda383aab8cb709a01da52eec068ba792ff883605034235616ff94d1deb5b15bc1fc56a9261fc0e7194f09c91d7fea45a19d94dbee151a143e5154795e20c3ad5f9e612dd748a727b826292c85f10d9dfc296579a532b643af97b68d448a9e87d7652cc836262077f9631fc04e93b6ed5d20e123d2428b0e500a1e03775b30a74b8e19e8bb3fcce9d4732ef3806d"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x805}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000d40)=[{0x0}, {&(0x7f0000000a80)=""/8, 0x8}], 0x2}, 0x3}], 0x1, 0x2000, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) close(0x3) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES16=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300)=r4, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_buf(r5, 0x1, 0x2b, &(0x7f0000000440)=""/255, &(0x7f0000000200)=0xff) 1.003536974s ago: executing program 4 (id=9165): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000020000103000000000000000002000004"], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}, @IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x7f}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0xed}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 879.501189ms ago: executing program 2 (id=9166): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x0, 0xf0, 0x1e0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0xfc}, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe3, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x4, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 853.3481ms ago: executing program 0 (id=9167): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0xf1083515c78ec8fd}, 0x20000840) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04ba030000000000000000edaa650b5ad598a8742ce5d3fcbfd1450f079af7f4052bd741134fe32e2c7f498fb22ca51c9eda556a5cf13e74b932ecfd2be0f175f6ce50aadcc45de43645a6475e1c12db4f3ad3735dd08ba009d30ccb26ed4a4200430884"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4004800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842c", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x24008094) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000015}, 0x80) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x92}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000091401000da87000ffdbdf250800810000000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x2000014}, 0x48000) 808.168653ms ago: executing program 2 (id=9168): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0xb0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{}, 0x5, 0x0, 0x4, 0x0, "000000cef4949800"}, 0x10}, 0x2, 0x0, 0x0, 0x40080}, 0x4048845) r3 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x8001, 0x4e22, 0x175, 0xa, 0x0, 0x0, 0x0, r2, r3}, {0x1, 0x7fff, 0x1, 0x4, 0xf, 0x624, 0x4, 0x1}, {0x8001, 0x3, 0x8000000000000000, 0xe}, 0x8, 0x6e6bc0, 0x1, 0x0, 0x2, 0x3}, {{@in=@remote, 0x4d6, 0x33}, 0x2, @in6=@private0, 0x0, 0x0, 0x2, 0x40, 0x5}}, 0xe8) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r7, @ANYBLOB="c300050000000000300012800b000100697036746e6c0000200002800500090004000000140003000000000000000000000000ff"], 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x0) ioctl$PPPIOCSMRU(r6, 0x40047452, &(0x7f00000001c0)=0x800) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000)) 655.715447ms ago: executing program 4 (id=9169): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000640)={0x6, 0x1}, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000001c98000000000000bf980000000000004c080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000300)={0x0, 0x2710}, 0x10) sendto$inet6(r2, &(0x7f0000000240)='B', 0x1, 0x81, &(0x7f0000000600)={0xa, 0x4e24, 0x8, @local, 0x5}, 0x1c) 565.386263ms ago: executing program 4 (id=9170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000) 484.066992ms ago: executing program 4 (id=9171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, 0x0, 0x0, 0x8010}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 435.769755ms ago: executing program 3 (id=9172): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008110200ac1414000c00028005000100000000002c00018006"], 0x88}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x4c, 0x12, 0x800, 0x70bd2b, 0x25dfdbfe, {0xf, 0x4, 0x3, 0xe, {0x4e21, 0x4e22, [0x5, 0x4f, 0x0, 0x4], [0x2, 0x5, 0x10001, 0x1], 0x0, [0x6, 0x101]}, 0x3ff, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000814) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000fe800000000000000000000000000029ac1414bb00000000000000000000000000000bc5ffff20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000080000000000000000000000000000000000000000000000000000000000000001000000000000000900000000000000800000000000000000000000000000000000000000000000010000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ac14143b0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000002b00000000000000fe800000000000000000000000000000000000000003000000080000000000000000001020010000000000000000000000000001000004d43200000000000000000000000000000000000000000000000000800003000000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000023500000200010000000000bf0a000000000000fe8000000000000000000000000000aa000004d42b"], 0x23c}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r11) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r12, 0x1, 0x70bd28, 0x30000, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="46003300d0ff2e0373b4516ae80108021100000050505050505000440f010041010072061303030303032d1a0010050c00000000000000010008000f000000060006000000810000"], 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 320.654475ms ago: executing program 2 (id=9173): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff2000a600ff84000aac141440e0", 0x0, 0x11, 0x6000cfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0xc201}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xe) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) write$tun(r3, &(0x7f0000003240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100040000000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32=r6], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x105, 0x80000000, 0x4, 0x4, 0x3}, 0x1, 0x7}, [{0x5b, 0x8, 0x40, 0x98e2, 0x9, 0x6}, {0x7, 0xc11d, 0x8000006, 0x0, 0x54c83b4b, 0x2}, {0x4, 0x8, 0x7, 0x8, 0x6, 0x40}, {0x6, 0x7ff, 0x10001, 0x6, 0x8000, 0x3}, {0x17, 0x1, 0xb, 0x4, 0x0, 0x3}, {0x0, 0x7, 0x10001, 0x2, 0x6, 0x81}, {0x0, 0x48c081f1, 0x3, 0x0, 0x0, 0x6}, {0x2, 0xfff, 0x2, 0x0, 0x3, 0x7f}, {0x0, 0x9e, 0x3, 0x7, 0x8, 0x1}, {0xaa, 0x6, 0x8, 0x6, 0x5, 0x2}, {0x0, 0x5, 0x7, 0xec9, 0xaa12, 0x4}, {0xff, 0x5, 0x4, 0x10, 0xfff, 0x80000001}, {0x0, 0x9, 0x10000, 0x0, 0x6487875c, 0xc}, {0x6, 0xd, 0x8, 0xea, 0x2, 0x9}, {0xfffffffc, 0x0, 0x7, 0x6, 0x7fff, 0x5}, {0x4, 0x1, 0x8, 0x9, 0x0, 0x8}, {0x2, 0x4689, 0x4, 0xca6, 0x7c2, 0x5}, {0x0, 0x81, 0x8, 0x10000, 0x7, 0x8001}, {0x4, 0x3, 0x7, 0xafb9, 0x8000, 0x10000}, {0x1000, 0xb, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x5, 0x4, 0x5, 0x6, 0x6}, {0x8, 0x9, 0x81, 0x1, 0x7, 0xbbb}, {0x9, 0x6, 0x1000, 0x8, 0x2, 0x1}, {0x2, 0x3, 0x70, 0x4, 0x4, 0x3}, {0x3, 0x8, 0x6, 0x7, 0x3a555fb9, 0x101}, {0x101, 0x20000000, 0x2, 0x5, 0x9, 0x10}, {0x5, 0x6, 0x0, 0x1, 0x9, 0x5}, {0x7fffffff, 0x1000, 0x1, 0x81, 0x1ff4}, {0x58ab449b, 0x7, 0x9, 0x80000001, 0xff, 0xa697}, {0xfffffffb, 0x8f, 0x6941, 0x6, 0x6, 0x7}, {0x4d2, 0x26, 0xe8c, 0xffff, 0x3391, 0x10001}, {0xfbde, 0x80000001, 0x9, 0x101, 0x2, 0x7fff}, {0x7fffffff, 0x8, 0x8, 0x2, 0x1, 0x9}, {0x90f1, 0x3, 0x7, 0x6, 0x8, 0x1ff}, {0x3, 0x10, 0x8, 0x6, 0x6, 0x2}, {0x8, 0x5, 0x1c05, 0x986a, 0xd, 0x8}, {0x8000, 0x5, 0x5, 0x2, 0x1, 0x7}, {0x3ff, 0x2, 0x6a, 0x5, 0x9, 0x3}, {0x1, 0x5, 0x0, 0x7fffffff, 0x8, 0xc72}, {0x3b5f774a, 0x1, 0x0, 0x10001, 0x77, 0x2}, {0x6, 0x4, 0x4, 0x0, 0xffffffff, 0x8}, {0x6, 0x7b4, 0x6, 0x4, 0xe, 0x4}, {0x6, 0x6, 0xcc5f, 0x3c88, 0x1000, 0xce}, {0x6, 0x1ff, 0x8, 0x200000, 0x2, 0x2}, {0x2, 0x1, 0x3ff, 0x0, 0x7, 0x8001}, {0x1ff, 0x2, 0x5, 0x4, 0xf, 0xa}, {0x7f, 0x200, 0x9000, 0x9, 0x2, 0x81}, {0xb12, 0x8, 0x9, 0x8, 0x5, 0x2}, {0x8, 0x7, 0x2, 0x7, 0x2, 0x5}, {0x6, 0x5, 0xffff, 0x5b46, 0x0, 0x5}, {0x401, 0x1, 0xe, 0x1205478f, 0x9, 0x6}, {0x10001, 0x7fff, 0x1, 0x3, 0x7ff, 0xc}, {0xb304, 0x0, 0x8, 0x400, 0x1, 0x3}, {0x5, 0x5, 0x8, 0x9, 0x3ff, 0x83}, {0x1ff, 0x4, 0x5, 0x80000000, 0x81, 0x6}, {0x9, 0x0, 0x5caa, 0x7fff, 0x1, 0x7fffffff}, {0xf, 0x10000, 0xffff, 0x100, 0x80, 0x3e}, {0x2, 0x8, 0x6, 0xe911, 0x7, 0x8}, {0x7, 0x3, 0x10000, 0xd, 0x5, 0x6}, {0x8, 0x7fffffff, 0x10000, 0x3, 0x3, 0x1fc28}, {0x53a, 0xffffffff, 0x4, 0x408, 0xe, 0x7fff}, {0xffff, 0x8, 0xff, 0x2, 0x0, 0xe00}, {0x2, 0x0, 0x4, 0xd, 0x9, 0x3}, {0x4, 0x0, 0x81, 0x0, 0x7, 0x3}, {0x3, 0x9b1f, 0x3, 0xdc5e, 0x4, 0x6}, {0x58, 0x7, 0x1, 0xffffff00, 0x3, 0x6}, {0x7fff, 0x0, 0xff, 0x7, 0xf2, 0x2}, {0x96f2, 0x2, 0x5, 0x8, 0x9b, 0x1}, {0x9, 0x143, 0x0, 0xd, 0x6, 0x7}, {0x2, 0x380, 0x8353, 0xa3, 0x1}, {0x80, 0x8, 0x2, 0x8, 0xe8b, 0x6}, {0x1, 0x4, 0x3, 0x67b2, 0x9, 0x7}, {0x777e, 0x4, 0x1, 0xfffffff7, 0x8, 0x9}, {0x10, 0xf76, 0xfffffff9, 0x2, 0x4, 0x4}, {0x3, 0x0, 0x9, 0x6, 0x8000, 0x9}, {0x3, 0x4, 0x8001, 0x4, 0x0, 0x1}, {0x0, 0x3caf, 0xfe, 0x101, 0x3, 0x6}, {0x4, 0xfffffff9, 0x0, 0x7, 0x9, 0xfffffff7}, {0x2, 0xffffffff, 0x75, 0x7, 0x0, 0x7}, {0xfffffff8, 0x7, 0x4, 0x81, 0x7, 0x81cd}, {0x76c0, 0x8, 0x80000000, 0x8a2, 0x7, 0x3}, {0x1ff, 0x2, 0x9, 0xc, 0xa, 0x8}, {0xffff8001, 0x2, 0x415, 0x6, 0x2, 0x2}, {0x0, 0x8, 0x3, 0x8, 0x5, 0x2}, {0x7, 0x4, 0x7, 0xfffffb37, 0x0, 0x4}, {0x70, 0xffffffff, 0x4, 0x9, 0x200, 0x4}, {0x1, 0x6, 0x2, 0x3, 0x7, 0x80000000}, {0xea, 0xb1, 0x0, 0xc, 0x6, 0x6}, {0x130cf172, 0x0, 0x8, 0x0, 0x7, 0x99}, {0x9, 0x7, 0x7fffffff, 0x6, 0x200, 0x7}, {0xa3, 0xffffffff, 0x3ff, 0x4, 0x8, 0xe}, {0x7, 0x5, 0x3f5, 0x1, 0x6, 0x3}, {0x200, 0x0, 0x144d, 0x100, 0x6, 0x7}, {0x10000, 0x3ff, 0x0, 0x8b0d, 0x2, 0x3}, {0x3, 0x8, 0x3ff, 0xffffff83, 0xa0bb}, {0x5, 0x2, 0x9, 0x1, 0x8000, 0x18000000}, {0x1, 0xb1, 0x78d, 0x9, 0xe2e}, {0xe121, 0x800, 0xffff2014, 0x100, 0x200, 0x2}, {0x609, 0x7, 0x7, 0xfffffbff, 0x6, 0x6f}, {0x3, 0x0, 0x7ff, 0x0, 0x7, 0x10001}, {0x10000, 0x401, 0x5, 0x2, 0x8, 0x5}, {0x8000, 0xe, 0x9, 0x3, 0xc5f, 0x8}, {0x3, 0x30000000, 0x9, 0x9, 0x8}, {0x62872137, 0xc24, 0x101, 0xffffff12, 0x1000, 0x100}, {0xfffffffb, 0xf, 0x10, 0x1, 0x0, 0x4}, {0x2, 0x0, 0xb, 0x306c, 0xff, 0x10000}, {0x10000, 0x3, 0x5, 0xa, 0x3, 0xa}, {0x3, 0x300000, 0x6, 0xd28b, 0x8, 0x1000}, {0x59, 0x3, 0x5, 0x3, 0x80000001, 0x7}, {0x7ceb, 0x9, 0x7, 0x261, 0x8, 0x7ff}, {0x40, 0x4, 0x6, 0x1, 0x7, 0x6}, {0x4, 0x4, 0x9, 0x1000, 0x4, 0xd}, {0x4c, 0x1, 0x3, 0x2, 0x2, 0x7}, {0x2f, 0x1, 0x6, 0x7fffffff, 0xffffffff, 0xfffff954}, {0x3, 0x6, 0x0, 0x5, 0x7, 0x4}, {0x8001, 0x4, 0xffffffff, 0xa2b, 0x5d, 0x8}, {0x40, 0xe, 0xe, 0x1, 0x97f, 0x2d00}, {0x3e3, 0x6, 0x1, 0x7, 0xfffffffa, 0xa0}, {0x5, 0x9, 0x3aa, 0xd, 0x7ffff7ff, 0xa}, {0x7ff, 0x3, 0x4, 0x5, 0x80, 0x7}, {0xb51, 0x7, 0xffff, 0x9, 0xffff, 0x2}, {0x10001, 0x6, 0x7, 0x1, 0x5, 0x6}, {0x0, 0x1, 0x0, 0x4, 0x40, 0x1}, {0x800000, 0x7, 0x0, 0x8, 0x6, 0x8}, {0xcb, 0x7, 0x7, 0x0, 0xfffffffc, 0x1}, {0x7, 0xc, 0x9, 0x2, 0x40, 0x1}, {0xccb7, 0x1, 0x800, 0x0, 0x6, 0x229c}, {0x4, 0x5, 0x6, 0x8, 0x2, 0xdf1}], [{0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0xb}, {0x8dfb4a42dae2f56d}, {0x3, 0x1}, {0x2}, {0x3}, {}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x5c96fd0c102cb707}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2}, {}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x3}, {0x1}, {0x5}, {0x3}, {0x4}, {0x4, 0x1}, {0x4}, {0x5}, {0x861c20290662cc64}, {0x4}, {0x2}, {0x5, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x18, 0x6, 0x6, 0x1, 'pptp\x00', 'syz1\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xff80, 0x10, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004014) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@dev, @in6=@mcast2}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) 232.617612ms ago: executing program 0 (id=9174): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, '\x00', "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 135.077404ms ago: executing program 1 (id=9093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006117d00000000000a6070000000013009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0x9}, {0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x400) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x303}, "d579f7bf7a8547e5", "d38800000000d9e119e8021a6cf000", "7eb09414", "976f2a244e5025c9"}, 0x28) sendto$inet6(r4, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080), 0x4) close(r4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10001, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x82e, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @null, 0x40005, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) socket$nl_route(0x10, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') 0s ago: executing program 3 (id=9175): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000040)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000180)="98bd80d1b51fac3cd42404000000000000003395f2ad", 0x16}}, 0x94) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000d00), &(0x7f0000000d80)=0x68) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r4, &(0x7f00000000c0)=""/53, 0x35, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'bond0\x00', &(0x7f00000002c0)=@ethtool_perm_addr={0x4b, 0x29, "4b721b782a17a7b6a00d960a64048655bcb0b0e6aceb1791b0551fdb8a571f6b3c1cb52ecdf3e8721b"}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x8, [{0x6, 0x1, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0]}}, &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x20) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2}, 0x18) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, r9, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x3a, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x4, 0xa0, 0x1, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xa8}}}}}}, 0x0) sendmmsg(r0, &(0x7f0000006880)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000040)="e18a8929034659b3992d62158c46f4786d34529e370a13963a368f52896fc9cccaa977e36b6c81fc61a8981b061d8b79dabe016902d413e947", 0x39}, {&(0x7f0000000180)="7a3f6404a8c371fec2151e1fe81b1935a25b4617a601c5d753589781c6904b3e0b0e75d2a6032edb6fee7a2c45261d602594c05fe2c3e0958e330203d11727275c25b3bd27f01eb9767d7da5ff24a68c821a4ee2", 0x54}, {&(0x7f0000000200)="b8f0c62348a319c81df37dc1bea05656944919afcb09cfd258261bd88036152d8701c86dc11c0afd3c5589d5354d95197749c2a84f97b0c5c38d7d1280285a", 0x3f}, {&(0x7f0000000300)="cd27f823e5515496448efc376244a03872f61b6641928a6db1635088c1fd07b8c1702d1c8f0791d6b7e80ab0fbc4d067a0bc901be6ce0b322b162dc43706a0f744388bd5008fb2dfdf70278445", 0x4d}, {&(0x7f0000000380)="169f7131476617489e479c0b542e77cf50a78de147e0286503c4d526fc5a984b02ed4780db33c7df71270487124a399bff956e7b1471b3b465fce5cd79ef8a93e664ce9af124fce361de809331cd76e87763bc7a4610ac0e7a", 0x59}, {&(0x7f0000000dc0)="c3fd5b189cfbb8695cd3334f2fbd36e612f297d0d71739cc9f11923251c7f7118048e70f568fef1023a6e39116090a2fee1c013cdb3e58bb65511dc8a2f51b708962351c18418e89b3dc7e763471ef31e0041ac6ce5861bb25e25854792fadc014ade7c7c9dfdf3905122278250c532bf9a6f6c96728e5bd238b", 0x7a}, {&(0x7f0000000480)="0cda9232a7e0aa3db06ef361db622383763767b066d10c6147d294caf97301cb9de6ba26e866039423831aea27e26a2991319ce6b007ed69a8b0a47c0964732b2a2ce0d354fdb4611b8b58f8843544cd1ff3e9970e0d3b4936127ddd647b6b68ab088e113c4e80f4b22e9cde2afdfaa8dd6a1a20172794a77d9e052a43ad6cac2ea92a0b1439e26a74c465136117c999f4e4a07c2dff2f2b85438c68b04e73b33465fa5711b5aceef7ff54e5d5b4ee78686df8d6579b3fa6d856805c62b1f107e9b00d5dc98befb707847e", 0xcb}], 0x7, &(0x7f0000000280)=[{0x28, 0x1, 0x9, "a6b0db38a32af298e0509a7b974474578562"}], 0x28}}, {{&(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e23, @private=0xa010102}, 0x3, 0x1, 0x2, 0x4}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000680)="b4b1df835a8d86f1144bc64064c635342a8c46696c3ebd27f925c993e087e87ae3840ef136067615d77bb3eeddda0cbf258e381a5f895aed2cd7cfefae6775adf7da52f84ce897a78295704095b23392b87f882e2b910add6bd062afd986703d3418aee66c428c4cb34939fe5882e48a8af8560b453bc61a8d6f1be0fa1478021c72061fc02f8fc09ab8bc784491acb4415d7214", 0x94}, {&(0x7f0000000740)="19ea5e36e7e761eb81a3757347a4584512d0877de1dbd4b203527382ca8f85d3f1bc6a7c9bdcab378d64d7846f7ae32a686060d8abd2e76a52af7d40f797f4e4b53a996d4468e6dcf43dda22a79fe5b41ba944139bc682cacb4fd1ed9706ad44547654bccd52f6d6c0eaa68880556f14665de8eaa5d29bee7fec166d0465b3e10021c10cdbed4c8eff13", 0x8a}, {&(0x7f0000000800)="7b8fb7e3334c50c33ad7504fa2c842327d9c674222b20ee696bd84496f938199f6c1addd63643f7f568074d7f5c96e1cf1c0e9624468509628fcb5c7b63c9a73560efb336f9c6c4960e074", 0x4b}, {&(0x7f0000000880)="bc2befd0b6b776e0290d52563745a616504e907b8093398159b2ef074fc2392ef0e3833b9bf86ba346ceb59211a1676ff9503fc49333f7557856ff0ff592fe427b9e8b52c4f24079b188f615b71d7717d9952ca64e6de5a10bf9c8dcdb6313a863ed1fc857dd9dc65b30bc88935949afd226cd4be35c1ea892439c032683cc935a7f0950d6bb0459527164517281d2d350c65c7d60cc554d330dec435ff5dcfd4d385b8e123e58f5c83a3f4d3332f3449cd0b5c926845be5e10ba88bfb79119703c76e812ef1c7e0f6d2512ae8c982d57dd2ad2f1ca18e66a1cea13e669c483c0d723727", 0xe4}, {&(0x7f0000000980)="2832c1a706152989d54cc9aa78b2feae0ba8b45d5e30e054fca507b11335f45839304dd0485b575ef4d6f33166e68e3329ce07e75e155cd4de30b0d8ea68ad6b0971071a65b5479c8b273dcc1ae21d8edbe4dc80e825ca21f09e25e249a1ff035a0552dd704c2aaaad29e7e0179e783b7a77090adaa04115ce231ed1f3c0dbdc0082050d41def8d619c7231daf89f295593fa0c2693d", 0x96}], 0x5, &(0x7f0000000ac0)=ANY=[]}}, {{&(0x7f0000000c80)=@xdp={0x2c, 0x4, r2, 0x2a}, 0x80, &(0x7f0000002240), 0x0, &(0x7f0000002300)=[{0x60, 0x118, 0xfffffffe, "a667d39e6004a3a217cc0fc0e37673c34b679ed22913dcbc950750a351e2ac88cb5ee443327cffbfc841ff5cec21704c65d6d938899686746f0e83359a70152669b9b4a0a0489b2fe77c9e7c42495641"}, {0x1010, 0x6, 0x7e0, "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"}, {0x100, 0x116, 0x10, "ec49e972efad88168431468f0c07493ec0131f074954a00734a6ce571b6631f6f3c78ac0c7c2b5ecf8fc8847d56ff0a0a1c211ca413cbb280b0c35cc94cae3d13248ce80d369b32d3f86288cd80e022788e3e6b717bd1f60c892064aeb4689b23b87d04518f8180ab9e1bc4e3714759712244912ff176e7f8765425da58b352b32a0ae570cab6d66ba71f6c38fb620382559cf8f9be772639a14deaa161ad7951c234c8a7acfeaa23739b38107994994e06716070b6360794b635284e8adc5283f29eb61a4c489299683077edff58c79baf8f801656e3e37c245691c487ac1285d31aff0e97a3a67a92653791aca0090"}, {0x110, 0x10e, 0x7, "149482d18b813e144414376a40592aeccb7ef6b5dca1c3c1243d1be22a618602b2e2a577e0bb30f7cf4421952212430f6c7ab27af0e6ef6c6db39b4e926f75e5873c3491551b2c47ea9bac238ab56c971895cec641e4e8d72a6e0123012ed60e74fc87961ddaa1e749cf7e4cd0f455677dd565477bc3015983e939f2b442931f9f6ad67adbc5e95399579fc8e90d1f2665ee37c47e90860ddd38e7bf59bf6a5e3d7b29c0a656b9a6519693433c3d7419836c6ca1c4433b6c6669cdd91ac9ab53a71a952ed2c1cf8c7b7f5b9fc59784c7f0c0fc6eae2f00f46940cfcc2ebca4fbd851b5055d2de7bb3c15b50398b3236ba18df084391b40ac0a8d6881caa3f0"}, {0x30, 0x118, 0x23f23061, "77fd593ec39536832ae47adf230ae146674cab7b15df1194b557b3200b"}], 0x12b0}}, {{&(0x7f00000035c0)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003640)="23379dd11d01ea1ccad10928eb2218afd14cd2bd10999066", 0x18}, {&(0x7f0000003680)="e0e25a0b8586dacbbbdca286811d25b62d2ed249", 0x14}], 0x2}}, {{0x0, 0x0, &(0x7f0000004bc0)=[{&(0x7f00000049c0)="9733ace4275be209af5d54c2e48c5a162b0f003acd8bbe62d32f9f00354573b713cd1c01d7b2e575cd544bdd621d63d1c88c39af3ff0cafde67c0ba44e383a7c6991857dae16f800aafb845164768639cea0d3", 0x53}, {&(0x7f0000004a40)="867ab337c3ef89f31c98eb5041e6605042f6dc9ac5dfc43f06cc492a3d2bc18198c316197d73b3849c91533f9206e4f97d10057684afe88722aeb4e396f045488fe823ccca00371577bfab981b4a706550644a", 0x53}, {&(0x7f0000004ac0)}, {&(0x7f0000004b00)="241a8766e6385d6020214fb88f80f218403d8d16ee2d98217c097a0967990d64c778563f35c39abf7b3c8b4e8734a3351464a7c262fa563f8f7d9123aecd0a6c8aca5cd249b366e54b29d6ced712dcffbd9f7bf13b0858782a8a9118b120d0f55ad31e2436cfe451c8760e83ee290a819dd776e5a103510404d79dc2f650fda6820bd0df4e3bcf5d60274e6244c25772799e8073c0e14d19195155fa603b3759b9b6dc6aee5ad6", 0xa7}], 0x4}}, {{&(0x7f0000004c00)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80, &(0x7f0000005040), 0x0, &(0x7f0000005080)=[{0xd0, 0x3a, 0x1, "b3168490ea0ec3073c78162935fe3cf6c750734253e9ba68d990559fe6264cbc7257e2e87036a209096f6e9ee3173dc6852b105dbdf47c6424aacbd83c7fd0bdabd480eecdc47e656e2672e6abdbba7e511e92148043e1434fd9b7635d07fda67220822de912ef50c1c749227c85c18ee03c7e6986933672c5b6db8477811126b3bbea8ffaf54d9fe67a7badc396eff8411eed60afb77641c078a2c4c4912e619d7f9dc86c74cd70491a302ffae2fe30d1a027ff5765412c26ba90ebb7cedd"}, {0xd0, 0x113, 0x8, "4a1cefaf513beddb471be674d3c6068e1d811edba11dbbe755f574a9383078545dafd7ad17b380730619dff38245c3d510c077723cdf2fbe8fc99c8ac1314280ec66d617eca887d20cf5b5c95d1fcad1a3c286659bc1eb19ca5f68b6dcf9399255d12e15d1d073e76bcc7031922fd8cbaba70251a4a316d65d841fa0f310dff0597da90cfe45b4fd7f8a7706853656f2846fbf1a7262c436b60a43ff7c3e9eb860297920ec0b50efb9168bbe309fe5fa944b466af259f81bdf01c0"}, {0x70, 0x10f, 0x9, "3a6d9fe83891e17876461ddaa441e86546dde1ede2574dcceb8972124e5f0c09275b73544e73fb7e36052267e3e50a9a0b31875aa57694a6fc379578fc329c315f26847fdcbf30b068be6a75b92b5d6536b27dee8d7e4110e0e4033d9c"}, {0x110, 0x107, 0x193, "4271559212c7b1c2cb36e0c0d995232bbfa13c83a241c43a64a4bb47cfbc476f432131b2f5b5551342e5c325552cd9bd85ba461650aa84f355427692ebda36305aa6447168ba8bdcc0fc221017b87b953e038aeac2da4620dfccf2be830b4da675848e06c9f2c2192129564f420406139e58efaee736e129a4dc7c29aa58f91c0a7ebb8ea130ec933e93ceee1b379d8b6cb4ce7454044848dca74be2719a750ef42c8de538f171df659e141559f9886cd1968fd1e35a947cc8675d051062db81b3313bbfbcc19e9d33ccf138bf0f6466bfe680ad760fd8a2d175d5a68f89fa6766192431f496a053aa3a6daae87e45641937c62186adbb7850"}, {0xc0, 0x116, 0xe996, "39ea34998e482c616987d2e571c3de5483cd592f08a5195c1030c200eb3662e2d498825a0a95d277928b33d182eee3919d2e285997ec5bbbf73ea495e8330b91dae8c9ecaec2632e93df31535c25e92e91f5a0efa555db8d8c56b576c7caf198d5e97b56b3f0c58b3a0c4c9c7bae51c5ce0fd7f3b36f0cd5aad524be8b6fd24fab890c935923e3eb4eee39938d5f1417585faec4601df40348336f0672176adba6ccfc473ff2518bce8c9d"}], 0x3e0}}, {{&(0x7f00000066c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(ccm-aes-ce)\x00'}, 0x80, &(0x7f0000006780)=[{&(0x7f0000006740)}], 0x1, &(0x7f00000067c0)=ANY=[@ANYBLOB], 0xb0}}], 0x7, 0x20004000) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000400), 0x4) kernel console output (not intermixed with test programs): sctp_copy_local_addr_list+0xa4/0x4f0 [ 740.574794][T29448] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 740.574820][T29448] ? sctp_association_new+0x1894/0x25e0 [ 740.574844][T29448] ? sctp_v6_is_any+0x64/0x80 [ 740.574874][T29448] ? sctp_copy_one_addr+0x93/0x360 [ 740.574901][T29448] sctp_bind_addr_copy+0xb3/0x3c0 [ 740.574919][T29448] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 740.574937][T29448] sctp_connect_new_asoc+0x2ff/0x6b0 [ 740.574953][T29448] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 740.574970][T29448] ? __local_bh_enable_ip+0xd0/0x130 [ 740.574986][T29448] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 740.575002][T29448] ? security_sctp_bind_connect+0x7e/0x2c0 [ 740.575019][T29448] sctp_sendmsg+0x1528/0x2c10 [ 740.575041][T29448] ? __pfx_sctp_sendmsg+0x10/0x10 [ 740.575056][T29448] ? aa_sk_perm+0x6d5/0x900 [ 740.575081][T29448] ? __pfx_aa_sk_perm+0x10/0x10 [ 740.575111][T29448] ? sock_rps_record_flow+0x19/0x350 [ 740.575137][T29448] ? __pfx_inet_sendmsg+0x10/0x10 [ 740.575159][T29448] ? inet_sendmsg+0x2f4/0x370 [ 740.575174][T29448] ? __pfx_inet_sendmsg+0x10/0x10 [ 740.575189][T29448] __sys_sendto+0x5de/0x710 [ 740.575207][T29448] ? __pfx___sys_sendto+0x10/0x10 [ 740.575220][T29448] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 740.575246][T29448] ? __fget_files+0x3a0/0x420 [ 740.575271][T29448] ? ksys_write+0x242/0x270 [ 740.575287][T29448] ? __pfx_ksys_write+0x10/0x10 [ 740.575316][T29448] __x64_sys_sendto+0xde/0x100 [ 740.575343][T29448] do_syscall_64+0x14d/0xf80 [ 740.575371][T29448] ? trace_irq_disable+0x3b/0x150 [ 740.575383][T29448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.575396][T29448] ? clear_bhb_loop+0x40/0x90 [ 740.575411][T29448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.575423][T29448] RIP: 0033:0x7f1172b9c819 [ 740.575437][T29448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.575448][T29448] RSP: 002b:00007f1170df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 740.575463][T29448] RAX: ffffffffffffffda RBX: 00007f1172e15fa0 RCX: 00007f1172b9c819 [ 740.575472][T29448] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000003 [ 740.575480][T29448] RBP: 00007f1170df6090 R08: 0000200000000140 R09: 000000000000001c [ 740.575488][T29448] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 740.575496][T29448] R13: 00007f1172e16038 R14: 00007f1172e15fa0 R15: 00007ffffdb485e8 [ 740.575519][T29448] [ 741.316712][T29470] vlan3: entered promiscuous mode [ 741.587379][T29483] FAULT_INJECTION: forcing a failure. [ 741.587379][T29483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.634529][T29483] CPU: 1 UID: 0 PID: 29483 Comm: syz.0.8320 Not tainted syzkaller #0 PREEMPT(full) [ 741.634561][T29483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 741.634573][T29483] Call Trace: [ 741.634582][T29483] [ 741.634591][T29483] dump_stack_lvl+0xe8/0x150 [ 741.634626][T29483] should_fail_ex+0x412/0x560 [ 741.634660][T29483] _copy_to_user+0x31/0xb0 [ 741.634686][T29483] bpf_test_finish+0x22c/0x6b0 [ 741.634712][T29483] ? trace_kmem_cache_alloc+0x29/0xf0 [ 741.634733][T29483] ? slab_build_skb+0x52/0x410 [ 741.634756][T29483] ? __pfx_bpf_test_finish+0x10/0x10 [ 741.634775][T29483] ? eth_type_trans+0x43b/0x6d0 [ 741.634810][T29483] bpf_prog_test_run_skb+0x10c6/0x1c90 [ 741.634845][T29483] ? __fget_files+0x2a/0x420 [ 741.634870][T29483] ? __fget_files+0x3a0/0x420 [ 741.634894][T29483] ? __fget_files+0x2a/0x420 [ 741.634921][T29483] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 741.634941][T29483] bpf_prog_test_run+0x2c7/0x340 [ 741.634966][T29483] __sys_bpf+0x643/0x950 [ 741.634987][T29483] ? __pfx___sys_bpf+0x10/0x10 [ 741.635023][T29483] ? ksys_write+0x242/0x270 [ 741.635049][T29483] ? __pfx_ksys_write+0x10/0x10 [ 741.635080][T29483] __x64_sys_bpf+0x7c/0x90 [ 741.635111][T29483] do_syscall_64+0x14d/0xf80 [ 741.635139][T29483] ? trace_irq_disable+0x3b/0x150 [ 741.635157][T29483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.635161][T29487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 741.635178][T29483] ? clear_bhb_loop+0x40/0x90 [ 741.635204][T29483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.635222][T29483] RIP: 0033:0x7feddaf9c819 [ 741.635240][T29483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.635256][T29483] RSP: 002b:00007feddbd96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 741.635278][T29483] RAX: ffffffffffffffda RBX: 00007feddb215fa0 RCX: 00007feddaf9c819 [ 741.635292][T29483] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 741.635310][T29483] RBP: 00007feddbd96090 R08: 0000000000000000 R09: 0000000000000000 [ 741.635322][T29483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.635334][T29483] R13: 00007feddb216038 R14: 00007feddb215fa0 R15: 00007ffd59d5bf88 [ 741.635364][T29483] [ 741.816093][T29505] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 742.037740][T29512] FAULT_INJECTION: forcing a failure. [ 742.037740][T29512] name failslab, interval 1, probability 0, space 0, times 0 [ 742.081605][T29512] CPU: 0 UID: 0 PID: 29512 Comm: syz.3.8326 Not tainted syzkaller #0 PREEMPT(full) [ 742.081636][T29512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 742.081654][T29512] Call Trace: [ 742.081662][T29512] [ 742.081671][T29512] dump_stack_lvl+0xe8/0x150 [ 742.081706][T29512] should_fail_ex+0x412/0x560 [ 742.081740][T29512] should_failslab+0xa8/0x100 [ 742.081777][T29512] __kmalloc_cache_noprof+0x88/0x660 [ 742.081803][T29512] ? sctp_add_bind_addr+0x8c/0x370 [ 742.081839][T29512] sctp_add_bind_addr+0x8c/0x370 [ 742.081874][T29512] sctp_copy_local_addr_list+0x314/0x4f0 [ 742.081908][T29512] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 742.081938][T29512] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 742.081970][T29512] ? sctp_v6_is_any+0x64/0x80 [ 742.082002][T29512] ? sctp_copy_one_addr+0x93/0x360 [ 742.082036][T29512] sctp_bind_addr_copy+0xb3/0x3c0 [ 742.082067][T29512] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 742.082098][T29512] sctp_connect_new_asoc+0x2ff/0x6b0 [ 742.082124][T29512] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 742.082155][T29512] ? __local_bh_enable_ip+0xd0/0x130 [ 742.082181][T29512] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 742.082206][T29512] ? security_sctp_bind_connect+0x7e/0x2c0 [ 742.082235][T29512] sctp_sendmsg+0x1528/0x2c10 [ 742.082274][T29512] ? __pfx_sctp_sendmsg+0x10/0x10 [ 742.082299][T29512] ? aa_sk_perm+0x6d5/0x900 [ 742.082325][T29512] ? irqentry_exit+0x59e/0x620 [ 742.082365][T29512] ? __pfx_aa_sk_perm+0x10/0x10 [ 742.082398][T29512] ? sock_rps_record_flow+0x19/0x350 [ 742.082424][T29512] ? __pfx_inet_sendmsg+0x10/0x10 [ 742.082451][T29512] ? inet_sendmsg+0x2f4/0x370 [ 742.082477][T29512] ? __pfx_inet_sendmsg+0x10/0x10 [ 742.082504][T29512] __sys_sendto+0x5de/0x710 [ 742.082533][T29512] ? __pfx___sys_sendto+0x10/0x10 [ 742.082555][T29512] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 742.082601][T29512] ? __fget_files+0x3a0/0x420 [ 742.082644][T29512] ? ksys_write+0x242/0x270 [ 742.082670][T29512] ? __pfx_ksys_write+0x10/0x10 [ 742.082700][T29512] __x64_sys_sendto+0xde/0x100 [ 742.082729][T29512] do_syscall_64+0x14d/0xf80 [ 742.082767][T29512] ? trace_irq_disable+0x3b/0x150 [ 742.082785][T29512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.082805][T29512] ? clear_bhb_loop+0x40/0x90 [ 742.082831][T29512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.082851][T29512] RIP: 0033:0x7f38ccb9c819 [ 742.082871][T29512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.082890][T29512] RSP: 002b:00007f38cdb40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 742.082913][T29512] RAX: ffffffffffffffda RBX: 00007f38cce15fa0 RCX: 00007f38ccb9c819 [ 742.082928][T29512] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 742.082941][T29512] RBP: 00007f38cdb40090 R08: 000020000005ffe4 R09: 000000000000001c [ 742.082956][T29512] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 742.082968][T29512] R13: 00007f38cce16038 R14: 00007f38cce15fa0 R15: 00007ffec67f6228 [ 742.083002][T29512] [ 742.435069][T29517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8327'. [ 742.647292][T29527] FAULT_INJECTION: forcing a failure. [ 742.647292][T29527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.660526][T29527] CPU: 0 UID: 0 PID: 29527 Comm: syz.0.8332 Not tainted syzkaller #0 PREEMPT(full) [ 742.660554][T29527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 742.660567][T29527] Call Trace: [ 742.660575][T29527] [ 742.660584][T29527] dump_stack_lvl+0xe8/0x150 [ 742.660629][T29527] should_fail_ex+0x412/0x560 [ 742.660665][T29527] _copy_to_user+0x31/0xb0 [ 742.660691][T29527] simple_read_from_buffer+0xe1/0x170 [ 742.660727][T29527] proc_fail_nth_read+0x1bb/0x230 [ 742.660761][T29527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 742.660792][T29527] ? rw_verify_area+0x2a6/0x4d0 [ 742.660813][T29527] ? __fget_files+0x2a/0x420 [ 742.660838][T29527] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 742.660867][T29527] vfs_read+0x20c/0xa70 [ 742.660888][T29527] ? fdget_pos+0x246/0x320 [ 742.660913][T29527] ? __pfx___mutex_lock+0x10/0x10 [ 742.660945][T29527] ? __pfx_vfs_read+0x10/0x10 [ 742.660971][T29527] ? __fget_files+0x2a/0x420 [ 742.661006][T29527] ? __fget_files+0x3a0/0x420 [ 742.661035][T29527] ? __fget_files+0x2a/0x420 [ 742.661076][T29527] ksys_read+0x150/0x270 [ 742.661102][T29527] ? __pfx_ksys_read+0x10/0x10 [ 742.661140][T29527] do_syscall_64+0x14d/0xf80 [ 742.661168][T29527] ? trace_irq_disable+0x3b/0x150 [ 742.661187][T29527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.661208][T29527] ? clear_bhb_loop+0x40/0x90 [ 742.661234][T29527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.661256][T29527] RIP: 0033:0x7feddaf5d04e [ 742.661277][T29527] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 742.661296][T29527] RSP: 002b:00007feddbd95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 742.661320][T29527] RAX: ffffffffffffffda RBX: 00007feddbd966c0 RCX: 00007feddaf5d04e [ 742.661336][T29527] RDX: 000000000000000f RSI: 00007feddbd960a0 RDI: 0000000000000004 [ 742.661349][T29527] RBP: 00007feddbd96090 R08: 0000000000000000 R09: 0000000000000000 [ 742.661363][T29527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 742.661376][T29527] R13: 00007feddb216038 R14: 00007feddb215fa0 R15: 00007ffd59d5bf88 [ 742.661411][T29527] [ 743.209658][T29548] netlink: 'syz.1.8338': attribute type 10 has an invalid length. [ 743.246652][T29548] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 743.811153][T29579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8347'. [ 744.062559][T29581] sctp: [Deprecated]: syz.0.8349 (pid 29581) Use of struct sctp_assoc_value in delayed_ack socket option. [ 744.062559][T29581] Use struct sctp_sack_info instead [ 744.125146][ T35] wlan1: Trigger new scan to find an IBSS to join [ 744.240697][T29591] netlink: 'syz.0.8353': attribute type 1 has an invalid length. [ 744.264871][T29591] netlink: 'syz.0.8353': attribute type 2 has an invalid length. [ 744.274728][T29591] netlink: 'syz.0.8353': attribute type 1 has an invalid length. [ 744.284779][T29591] netlink: 'syz.0.8353': attribute type 2 has an invalid length. [ 744.696752][T29611] dummy0: Caught tx_queue_len zero misconfig [ 744.733653][T29612] syzkaller1: entered promiscuous mode [ 744.746268][ T6255] lec:lec_start_xmit: lec0:No lecd attached [ 744.753050][T29612] syzkaller1: entered allmulticast mode [ 744.776609][T29612] IPVS: sh: FWM 3 0x00000003 - no destination available [ 744.982349][T29631] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 745.049103][ T13] wlan1: Creating new IBSS network, BSSID 86:c8:c3:14:74:ad [ 745.311714][T29649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.370519][T29650] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8368'. [ 745.424937][T29650] netlink: 'syz.2.8368': attribute type 1 has an invalid length. [ 745.432738][T29650] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8368'. [ 745.680238][T29666] FAULT_INJECTION: forcing a failure. [ 745.680238][T29666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.708528][T29666] CPU: 1 UID: 0 PID: 29666 Comm: syz.4.8370 Not tainted syzkaller #0 PREEMPT(full) [ 745.708570][T29666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 745.708583][T29666] Call Trace: [ 745.708592][T29666] [ 745.708602][T29666] dump_stack_lvl+0xe8/0x150 [ 745.708638][T29666] should_fail_ex+0x412/0x560 [ 745.708674][T29666] _copy_from_iter+0x1d3/0x1670 [ 745.708711][T29666] ? rcu_is_watching+0x15/0xb0 [ 745.708747][T29666] ? __pfx__copy_from_iter+0x10/0x10 [ 745.708788][T29666] ? netlink_sendmsg+0x650/0xb40 [ 745.708810][T29666] ? skb_put+0x11b/0x210 [ 745.708839][T29666] netlink_sendmsg+0x6c0/0xb40 [ 745.708873][T29666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.708900][T29666] ? aa_sock_msg_perm+0xf1/0x1b0 [ 745.708933][T29666] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 745.708961][T29666] ____sys_sendmsg+0x972/0x9f0 [ 745.708997][T29666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.709034][T29666] ? import_iovec+0x73/0xa0 [ 745.709061][T29666] ___sys_sendmsg+0x2a5/0x360 [ 745.709095][T29666] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.709161][T29666] ? __fget_files+0x2a/0x420 [ 745.709191][T29666] ? __fget_files+0x3a0/0x420 [ 745.709233][T29666] __x64_sys_sendmsg+0x1bd/0x2a0 [ 745.709264][T29666] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 745.709302][T29666] ? __pfx_ksys_write+0x10/0x10 [ 745.709338][T29666] do_syscall_64+0x14d/0xf80 [ 745.709366][T29666] ? trace_irq_disable+0x3b/0x150 [ 745.709384][T29666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.709405][T29666] ? clear_bhb_loop+0x40/0x90 [ 745.709431][T29666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.709451][T29666] RIP: 0033:0x7f1172b9c819 [ 745.709476][T29666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.709495][T29666] RSP: 002b:00007f1170df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.709519][T29666] RAX: ffffffffffffffda RBX: 00007f1172e15fa0 RCX: 00007f1172b9c819 [ 745.709534][T29666] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 745.709556][T29666] RBP: 00007f1170df6090 R08: 0000000000000000 R09: 0000000000000000 [ 745.709569][T29666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.709582][T29666] R13: 00007f1172e16038 R14: 00007f1172e15fa0 R15: 00007ffffdb485e8 [ 745.709616][T29666] [ 746.217645][T29682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8376'. [ 746.233915][T29683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8374'. [ 746.523255][T29697] lo speed is unknown, defaulting to 1000 [ 746.532931][T29699] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 746.543994][T29699] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 746.613891][T29702] syzkaller0: entered promiscuous mode [ 746.623096][T29702] syzkaller0: entered allmulticast mode [ 746.830450][T29717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8387'. [ 746.843138][T29717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8387'. [ 747.081780][T29722] lo speed is unknown, defaulting to 1000 [ 747.156809][T29733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8392'. [ 747.489377][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.505047][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.577450][T29742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.678301][T24477] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 747.690099][T24477] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 747.702152][T24477] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 747.704083][T29748] syzkaller1: entered promiscuous mode [ 747.724875][T29748] syzkaller1: entered allmulticast mode [ 747.731773][T24477] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 747.740754][T24477] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 747.803282][T29750] netlink: 296 bytes leftover after parsing attributes in process `syz.4.8399'. [ 747.807707][T29743] lo speed is unknown, defaulting to 1000 [ 748.067743][T29765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8404'. [ 748.108363][T29765] hsr_slave_0: left promiscuous mode [ 748.115672][T29765] hsr_slave_1: left promiscuous mode [ 748.150238][T29756] lo speed is unknown, defaulting to 1000 [ 748.618716][T29743] chnl_net:caif_netlink_parms(): no params data found [ 748.726565][T29794] netlink: 'syz.2.8411': attribute type 13 has an invalid length. [ 748.983185][T29794] __nla_validate_parse: 1 callbacks suppressed [ 748.983206][T29794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8411'. [ 749.204613][T29743] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.230581][T29743] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.255726][T29743] bridge_slave_0: entered allmulticast mode [ 749.278384][T29743] bridge_slave_0: entered promiscuous mode [ 749.292745][T29743] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.300499][T29743] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.311176][T29743] bridge_slave_1: entered allmulticast mode [ 749.319825][T29743] bridge_slave_1: entered promiscuous mode [ 749.437438][T29743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.498572][T29743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.594771][T29836] ip6gretap1: entered allmulticast mode [ 749.614276][T29743] team0: Port device team_slave_0 added [ 749.674223][T29743] team0: Port device team_slave_1 added [ 749.769179][T29743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.798412][T29743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.827463][ T5832] Bluetooth: hci4: command tx timeout [ 749.854057][T29743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.871240][T29743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.878389][T29743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.906419][T29743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.008576][T29857] netlink: 'syz.4.8427': attribute type 3 has an invalid length. [ 750.009818][T29833] syzkaller0: entered promiscuous mode [ 750.021980][T29833] syzkaller0: entered allmulticast mode [ 750.124449][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5380 ms [ 750.132569][ C1] lec:lec_tx_timeout: lec0 [ 750.137752][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 750.267413][T29869] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8428'. [ 751.885867][ T5832] Bluetooth: hci4: command tx timeout [ 751.893555][T29743] hsr_slave_0: entered promiscuous mode [ 751.904292][T29743] hsr_slave_1: entered promiscuous mode [ 751.935586][T29743] debugfs: 'hsr0' already exists in 'hsr' [ 751.952947][T29743] Cannot create hsr debugfs directory [ 751.972895][T29868] lo speed is unknown, defaulting to 1000 [ 752.059625][T29877] IPv6: addrconf: prefix option has invalid lifetime [ 752.085413][T29877] IPv6: addrconf: prefix option has invalid lifetime [ 752.283364][T29887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8436'. [ 752.447133][T29889] lo speed is unknown, defaulting to 1000 [ 753.593008][T29743] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 753.658830][T29743] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 753.660824][T29927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8446'. [ 753.716894][T29743] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 753.756143][T29743] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 753.825180][T29931] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8448'. [ 753.945265][T29945] nbd5: detected capacity change from 0 to 63 [ 753.977782][T24477] Bluetooth: hci4: command tx timeout [ 754.008153][T29743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.011427][T29952] netlink: 'syz.4.8453': attribute type 28 has an invalid length. [ 754.032324][T29743] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.046417][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.053573][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.090818][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.098099][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.301175][T29963] ipip0: entered promiscuous mode [ 754.418548][T29743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.499945][T29743] veth0_vlan: entered promiscuous mode [ 754.532678][T29743] veth1_vlan: entered promiscuous mode [ 754.592338][T29743] veth0_macvtap: entered promiscuous mode [ 754.606938][T29743] veth1_macvtap: entered promiscuous mode [ 754.637911][T29743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.657107][T29743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.694500][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.737851][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.757732][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.779608][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.144423][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 755.152558][ C1] lec:lec_tx_timeout: lec0 [ 756.045002][T24477] Bluetooth: hci4: command tx timeout [ 756.860432][T29945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 756.910417][ T5832] block nbd5: Receive control failed (result -104) [ 757.046051][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.064689][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.077841][T29988] netlink: 36615 bytes leftover after parsing attributes in process `syz.3.8461'. [ 757.152308][T21765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.186084][T21765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.191604][T29996] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8465'. [ 757.216232][T29996] IPv6: sit2: Disabled Multicast RS [ 757.222902][T29996] sit2: entered allmulticast mode [ 757.548893][T30013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8470'. [ 757.563313][T30013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8470'. [ 757.577957][T30009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8469'. [ 757.581905][T30013] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 757.593912][T30009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8469'. [ 757.628435][T30013] x_tables: duplicate underflow at hook 3 [ 757.855890][T30025] netlink: 'syz.3.8474': attribute type 13 has an invalid length. [ 757.863741][T30025] netlink: 'syz.3.8474': attribute type 17 has an invalid length. [ 757.966303][T30025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.060314][T30025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 758.623184][T30044] tipc: Started in network mode [ 758.630626][T30044] tipc: Node identity 03000000000000000002, cluster identity 4711 [ 758.700917][T30052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8483'. [ 758.710702][T30053] netlink: 'syz.3.8483': attribute type 13 has an invalid length. [ 758.722495][T30053] netlink: 'syz.3.8483': attribute type 17 has an invalid length. [ 758.737977][T30053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 758.776910][T30057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8484'. [ 758.793489][T30057] ip6gre1: entered promiscuous mode [ 758.799540][T30057] ip6gre1: entered allmulticast mode [ 758.816805][T30059] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode [ 758.871882][T30062] xt_hashlimit: size too large, truncated to 1048576 [ 758.908815][T30059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.947886][T30067] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8486'. [ 759.106699][T30071] FAULT_INJECTION: forcing a failure. [ 759.106699][T30071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.120738][T30071] CPU: 0 UID: 0 PID: 30071 Comm: syz.1.8488 Not tainted syzkaller #0 PREEMPT(full) [ 759.120768][T30071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 759.120781][T30071] Call Trace: [ 759.120789][T30071] [ 759.120797][T30071] dump_stack_lvl+0xe8/0x150 [ 759.120831][T30071] should_fail_ex+0x412/0x560 [ 759.120865][T30071] _copy_from_iter+0x1d3/0x1670 [ 759.120901][T30071] ? rcu_is_watching+0x15/0xb0 [ 759.120935][T30071] ? __pfx__copy_from_iter+0x10/0x10 [ 759.120975][T30071] ? netlink_sendmsg+0x650/0xb40 [ 759.120996][T30071] ? skb_put+0x11b/0x210 [ 759.121026][T30071] netlink_sendmsg+0x6c0/0xb40 [ 759.121059][T30071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.121087][T30071] ? aa_sock_msg_perm+0xf1/0x1b0 [ 759.121120][T30071] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 759.121148][T30071] ____sys_sendmsg+0x972/0x9f0 [ 759.121192][T30071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 759.121229][T30071] ? import_iovec+0x73/0xa0 [ 759.121255][T30071] ___sys_sendmsg+0x2a5/0x360 [ 759.121289][T30071] ? __pfx____sys_sendmsg+0x10/0x10 [ 759.121354][T30071] ? __fget_files+0x2a/0x420 [ 759.121382][T30071] ? __fget_files+0x3a0/0x420 [ 759.121423][T30071] __x64_sys_sendmsg+0x1bd/0x2a0 [ 759.121461][T30071] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 759.121498][T30071] ? __pfx_ksys_write+0x10/0x10 [ 759.121535][T30071] do_syscall_64+0x14d/0xf80 [ 759.121563][T30071] ? trace_irq_disable+0x3b/0x150 [ 759.121581][T30071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.121602][T30071] ? clear_bhb_loop+0x40/0x90 [ 759.121629][T30071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.121649][T30071] RIP: 0033:0x7f3a8759c819 [ 759.121671][T30071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.121689][T30071] RSP: 002b:00007f3a8852b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.121712][T30071] RAX: ffffffffffffffda RBX: 00007f3a87815fa0 RCX: 00007f3a8759c819 [ 759.121727][T30071] RDX: 0000000000028000 RSI: 0000200000000080 RDI: 0000000000000003 [ 759.121740][T30071] RBP: 00007f3a8852b090 R08: 0000000000000000 R09: 0000000000000000 [ 759.121755][T30071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.121778][T30071] R13: 00007f3a87816038 R14: 00007f3a87815fa0 R15: 00007ffda5825c28 [ 759.121812][T30071] [ 759.519283][T30079] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 759.637207][T30091] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8494'. [ 760.232469][T30127] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 760.689751][T30151] FAULT_INJECTION: forcing a failure. [ 760.689751][T30151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.734518][T30151] CPU: 1 UID: 0 PID: 30151 Comm: syz.1.8516 Not tainted syzkaller #0 PREEMPT(full) [ 760.734561][T30151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 760.734574][T30151] Call Trace: [ 760.734583][T30151] [ 760.734592][T30151] dump_stack_lvl+0xe8/0x150 [ 760.734627][T30151] should_fail_ex+0x412/0x560 [ 760.734662][T30151] _copy_from_user+0x2d/0xb0 [ 760.734686][T30151] ___sys_sendmsg+0x1c6/0x360 [ 760.734719][T30151] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.734781][T30151] ? __fget_files+0x2a/0x420 [ 760.734811][T30151] ? __fget_files+0x3a0/0x420 [ 760.734850][T30151] __x64_sys_sendmsg+0x1bd/0x2a0 [ 760.734886][T30151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 760.734921][T30151] ? __pfx_ksys_write+0x10/0x10 [ 760.734955][T30151] do_syscall_64+0x14d/0xf80 [ 760.734982][T30151] ? trace_irq_disable+0x3b/0x150 [ 760.735000][T30151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.735021][T30151] ? clear_bhb_loop+0x40/0x90 [ 760.735046][T30151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.735066][T30151] RIP: 0033:0x7f3a8759c819 [ 760.735088][T30151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.735107][T30151] RSP: 002b:00007f3a8852b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.735131][T30151] RAX: ffffffffffffffda RBX: 00007f3a87815fa0 RCX: 00007f3a8759c819 [ 760.735146][T30151] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 760.735159][T30151] RBP: 00007f3a8852b090 R08: 0000000000000000 R09: 0000000000000000 [ 760.735171][T30151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.735184][T30151] R13: 00007f3a87816038 R14: 00007f3a87815fa0 R15: 00007ffda5825c28 [ 760.735217][T30151] [ 761.365511][T30159] netlink: 'syz.0.8517': attribute type 13 has an invalid length. [ 761.430540][T30170] netlink: 'syz.4.8520': attribute type 1 has an invalid length. [ 761.493192][T30159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 761.675770][T30181] xt_hashlimit: size too large, truncated to 1048576 [ 762.372847][T30211] __nla_validate_parse: 6 callbacks suppressed [ 762.372868][T30211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8534'. [ 764.448501][T30233] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8541'. [ 764.497378][T30233] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 764.580470][T30240] atomic_op ffff888034e72998 conn xmit_atomic 0000000000000000 [ 764.703169][T30242] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8543'. [ 764.733373][T30242] netlink: 'syz.3.8543': attribute type 1 has an invalid length. [ 764.742265][T30242] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8543'. [ 764.784660][T30252] netlink: 'syz.0.8546': attribute type 2 has an invalid length. [ 764.792766][T30252] netlink: 'syz.0.8546': attribute type 2 has an invalid length. [ 764.811036][T30257] netlink: 'syz.1.8545': attribute type 1 has an invalid length. [ 764.824787][T30252] netlink: 'syz.0.8546': attribute type 2 has an invalid length. [ 764.833836][T30252] netlink: 'syz.0.8546': attribute type 2 has an invalid length. [ 764.842075][T30252] netlink: 'syz.0.8546': attribute type 2 has an invalid length. [ 764.852604][T30252] netlink: 'syz.0.8546': attribute type 2 has an invalid length. [ 764.861030][T30252] netlink: 'syz.0.8546': attribute type 2 has an invalid length. [ 764.948802][T17384] IPVS: starting estimator thread 0... [ 765.045086][T30266] IPVS: using max 23 ests per chain, 55200 per kthread [ 765.649898][T30304] netlink: 160 bytes leftover after parsing attributes in process `syz.3.8563'. [ 765.756159][T30314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8561'. [ 765.934098][T30323] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 765.936456][T30320] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.955718][T30320] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 766.046735][T30322] lo speed is unknown, defaulting to 1000 [ 766.088963][T30325] netlink: 'syz.3.8567': attribute type 1 has an invalid length. [ 766.097372][T30325] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8567'. [ 766.273492][T30331] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8570'. [ 766.283051][T30331] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8570'. [ 766.663834][T30351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8578'. [ 768.463384][T30407] IPVS: Scheduler module ip_vs_ not found [ 768.559679][T30422] block nbd6: Unsupported socket: should be TCP or UNIX. [ 768.670336][T30431] FAULT_INJECTION: forcing a failure. [ 768.670336][T30431] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 768.689402][T30431] CPU: 1 UID: 0 PID: 30431 Comm: syz.0.8596 Not tainted syzkaller #0 PREEMPT(full) [ 768.689434][T30431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 768.689459][T30431] Call Trace: [ 768.689468][T30431] [ 768.689477][T30431] dump_stack_lvl+0xe8/0x150 [ 768.689514][T30431] should_fail_ex+0x412/0x560 [ 768.689550][T30431] prepare_alloc_pages+0x22a/0x650 [ 768.689585][T30431] __alloc_frozen_pages_noprof+0x12f/0x380 [ 768.689617][T30431] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 768.689648][T30431] ? __pfx_policy_nodemask+0x10/0x10 [ 768.689680][T30431] ? __lock_acquire+0x6b5/0x2cf0 [ 768.689711][T30431] alloc_pages_mpol+0x232/0x4a0 [ 768.689745][T30431] vma_alloc_folio_noprof+0xea/0x210 [ 768.689776][T30431] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 768.689817][T30431] do_pte_missing+0x1656/0x3490 [ 768.689862][T30431] handle_mm_fault+0x1bec/0x3310 [ 768.689910][T30431] ? handle_mm_fault+0xee/0x3310 [ 768.689949][T30431] ? __pfx_handle_mm_fault+0x10/0x10 [ 768.689980][T30431] ? follow_page_pte+0x841/0x1450 [ 768.690011][T30431] ? __pfx_follow_page_pte+0x10/0x10 [ 768.690045][T30431] __get_user_pages+0x165b/0x29d0 [ 768.690111][T30431] __gup_longterm_locked+0xdcf/0x1630 [ 768.690158][T30431] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 768.690196][T30431] gup_fast_fallback+0x1d82/0x22e0 [ 768.690260][T30431] ? __pfx_gup_fast_fallback+0x10/0x10 [ 768.690294][T30431] ? is_valid_gup_args+0x11f/0x200 [ 768.690326][T30431] ? pin_user_pages_fast+0x4d/0xb0 [ 768.690358][T30431] rds_info_getsockopt+0x20e/0x4a0 [ 768.690393][T30431] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 768.690423][T30431] ? __might_fault+0xaf/0x130 [ 768.690455][T30431] ? rds_getsockopt+0x2a9/0x500 [ 768.690477][T30431] ? __pfx_rds_getsockopt+0x10/0x10 [ 768.690501][T30431] do_sock_getsockopt+0x2d3/0x3f0 [ 768.690532][T30431] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 768.690559][T30431] ? __fget_files+0x3a0/0x420 [ 768.690588][T30431] ? __fget_files+0x2a/0x420 [ 768.690625][T30431] __x64_sys_getsockopt+0x1a4/0x240 [ 768.690662][T30431] do_syscall_64+0x14d/0xf80 [ 768.690690][T30431] ? trace_irq_disable+0x3b/0x150 [ 768.690708][T30431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.690729][T30431] ? clear_bhb_loop+0x40/0x90 [ 768.690755][T30431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.690775][T30431] RIP: 0033:0x7f88c0b9c819 [ 768.690796][T30431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.690816][T30431] RSP: 002b:00007f88c1acd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 768.690840][T30431] RAX: ffffffffffffffda RBX: 00007f88c0e15fa0 RCX: 00007f88c0b9c819 [ 768.690856][T30431] RDX: 000000000000271e RSI: 0000200000000114 RDI: 0000000000000005 [ 768.690868][T30431] RBP: 00007f88c1acd090 R08: 0000200000000040 R09: 0000000000000000 [ 768.690880][T30431] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 768.690892][T30431] R13: 00007f88c0e16038 R14: 00007f88c0e15fa0 R15: 00007ffd6aba6368 [ 768.690929][T30431] [ 769.066256][T30439] FAULT_INJECTION: forcing a failure. [ 769.066256][T30439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.079975][T30439] CPU: 1 UID: 0 PID: 30439 Comm: syz.2.8598 Not tainted syzkaller #0 PREEMPT(full) [ 769.080004][T30439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 769.080017][T30439] Call Trace: [ 769.080025][T30439] [ 769.080034][T30439] dump_stack_lvl+0xe8/0x150 [ 769.080068][T30439] should_fail_ex+0x412/0x560 [ 769.080104][T30439] _copy_to_user+0x31/0xb0 [ 769.080129][T30439] simple_read_from_buffer+0xe1/0x170 [ 769.080165][T30439] proc_fail_nth_read+0x1bb/0x230 [ 769.080197][T30439] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 769.080231][T30439] ? rw_verify_area+0x2a6/0x4d0 [ 769.080253][T30439] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 769.080284][T30439] vfs_read+0x20c/0xa70 [ 769.080305][T30439] ? fdget_pos+0x246/0x320 [ 769.080330][T30439] ? __pfx___mutex_lock+0x10/0x10 [ 769.080362][T30439] ? __pfx_vfs_read+0x10/0x10 [ 769.080385][T30439] ? __fget_files+0x2a/0x420 [ 769.080421][T30439] ? __fget_files+0x3a0/0x420 [ 769.080448][T30439] ? __fget_files+0x2a/0x420 [ 769.080488][T30439] ksys_read+0x150/0x270 [ 769.080523][T30439] ? __pfx_ksys_read+0x10/0x10 [ 769.080560][T30439] do_syscall_64+0x14d/0xf80 [ 769.080588][T30439] ? trace_irq_disable+0x3b/0x150 [ 769.080606][T30439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.080628][T30439] ? clear_bhb_loop+0x40/0x90 [ 769.080653][T30439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.080672][T30439] RIP: 0033:0x7fb6c6b5d04e [ 769.080693][T30439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 769.080710][T30439] RSP: 002b:00007fb6c7a26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 769.080734][T30439] RAX: ffffffffffffffda RBX: 00007fb6c7a276c0 RCX: 00007fb6c6b5d04e [ 769.080750][T30439] RDX: 000000000000000f RSI: 00007fb6c7a270a0 RDI: 0000000000000004 [ 769.080762][T30439] RBP: 00007fb6c7a27090 R08: 0000000000000000 R09: 0000000000000000 [ 769.080774][T30439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.080787][T30439] R13: 00007fb6c6e16038 R14: 00007fb6c6e15fa0 R15: 00007fff97170138 [ 769.080824][T30439] [ 769.529826][T30444] __nla_validate_parse: 1 callbacks suppressed [ 769.529849][T30444] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8600'. [ 769.601406][T30437] lo speed is unknown, defaulting to 1000 [ 769.607723][T30444] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8600'. [ 769.712208][T30433] netlink: 29 bytes leftover after parsing attributes in process `syz.1.8595'. [ 770.229260][T30469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8607'. [ 770.238686][T30469] block nbd6: Unsupported socket: should be TCP or UNIX. [ 770.309108][T30472] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 770.682098][T30485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8611'. [ 770.877083][T30493] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20002 [ 771.150238][T30507] netlink: 120 bytes leftover after parsing attributes in process `syz.4.8619'. [ 771.160453][T30507] validate_nla: 2 callbacks suppressed [ 771.160476][T30507] netlink: 'syz.4.8619': attribute type 1 has an invalid length. [ 771.177409][T30507] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8619'. [ 771.366128][T30512] bond0: (slave wlan1): Releasing backup interface [ 771.373873][T30512] mac80211_hwsim hwsim35 wlan1 (unregistering): left promiscuous mode [ 771.738393][T30522] IPv6: addrconf: prefix option has invalid lifetime [ 771.967094][T30533] FAULT_INJECTION: forcing a failure. [ 771.967094][T30533] name failslab, interval 1, probability 0, space 0, times 0 [ 771.994486][T30533] CPU: 0 UID: 0 PID: 30533 Comm: syz.2.8630 Not tainted syzkaller #0 PREEMPT(full) [ 771.994517][T30533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 771.994529][T30533] Call Trace: [ 771.994539][T30533] [ 771.994548][T30533] dump_stack_lvl+0xe8/0x150 [ 771.994584][T30533] should_fail_ex+0x412/0x560 [ 771.994619][T30533] should_failslab+0xa8/0x100 [ 771.994649][T30533] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 771.994675][T30533] ? __alloc_skb+0x1d0/0x7d0 [ 771.994698][T30533] ? __local_bh_enable_ip+0xd0/0x130 [ 771.994730][T30533] __alloc_skb+0x1d0/0x7d0 [ 771.994769][T30533] inet_ifmcaddr_notify+0x7e/0x150 [ 771.994805][T30533] ____ip_mc_inc_group+0x9a8/0xdd0 [ 771.994844][T30533] ip_mc_up+0x115/0x2e0 [ 771.994873][T30533] inetdev_event+0xff6/0x1610 [ 771.994902][T30533] ? __pfx_inetdev_event+0x10/0x10 [ 771.994936][T30533] notifier_call_chain+0x1be/0x400 [ 771.994976][T30533] __dev_notify_flags+0x1a9/0x310 [ 771.995004][T30533] ? __pfx___dev_notify_flags+0x10/0x10 [ 771.995027][T30533] ? __dev_change_flags+0x4c6/0x690 [ 771.995057][T30533] ? __pfx___dev_change_flags+0x10/0x10 [ 771.995088][T30533] ? is_bpf_text_address+0x26/0x2b0 [ 771.995115][T30533] netif_change_flags+0xe8/0x1a0 [ 771.995145][T30533] do_setlink+0xf82/0x4590 [ 771.995174][T30533] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 771.995210][T30533] ? __pfx_do_setlink+0x10/0x10 [ 771.995236][T30533] ? __lock_acquire+0x6b5/0x2cf0 [ 771.995288][T30533] ? __mutex_trylock_common+0x158/0x260 [ 771.995325][T30533] ? __pfx___mutex_trylock_common+0x10/0x10 [ 771.995357][T30533] ? rcu_is_watching+0x15/0xb0 [ 771.995385][T30533] ? trace_contention_end+0x3d/0x150 [ 771.995406][T30533] ? __mutex_lock+0x319/0x1300 [ 771.995434][T30533] ? __pfx___nla_validate_parse+0x10/0x10 [ 771.995463][T30533] ? rtnl_newlink+0x8a1/0x1be0 [ 771.995488][T30533] ? __pfx___mutex_lock+0x10/0x10 [ 771.995529][T30533] ? ns_capable+0x89/0xe0 [ 771.995562][T30533] rtnl_newlink+0x147a/0x1be0 [ 771.995598][T30533] ? __pfx_rtnl_newlink+0x10/0x10 [ 771.995631][T30533] ? __lock_acquire+0x6b5/0x2cf0 [ 771.995671][T30533] ? __lock_acquire+0x6b5/0x2cf0 [ 771.995701][T30533] ? __lock_acquire+0x6b5/0x2cf0 [ 771.995747][T30533] ? unwind_next_frame+0xa5/0x23c0 [ 771.995805][T30533] ? __lock_acquire+0x6b5/0x2cf0 [ 771.995834][T30533] ? is_bpf_text_address+0x26/0x2b0 [ 771.995859][T30533] ? kernel_text_address+0xa5/0xe0 [ 771.995913][T30533] ? __pfx_rtnl_newlink+0x10/0x10 [ 771.995936][T30533] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 771.995963][T30533] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 771.995985][T30533] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 771.996012][T30533] ? __lock_acquire+0x6b5/0x2cf0 [ 771.996048][T30533] netlink_rcv_skb+0x232/0x4b0 [ 771.996073][T30533] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 771.996096][T30533] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 771.996131][T30533] ? netlink_deliver_tap+0x2e/0x1b0 [ 771.996160][T30533] netlink_unicast+0x80f/0x9b0 [ 771.996199][T30533] ? __pfx_netlink_unicast+0x10/0x10 [ 771.996230][T30533] ? netlink_sendmsg+0x650/0xb40 [ 771.996251][T30533] ? skb_put+0x11b/0x210 [ 771.996279][T30533] netlink_sendmsg+0x813/0xb40 [ 771.996311][T30533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.996339][T30533] ? aa_sock_msg_perm+0xf1/0x1b0 [ 771.996371][T30533] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 771.996400][T30533] ____sys_sendmsg+0x972/0x9f0 [ 771.996439][T30533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 771.996476][T30533] ? import_iovec+0x73/0xa0 [ 771.996502][T30533] ___sys_sendmsg+0x2a5/0x360 [ 771.996535][T30533] ? __pfx____sys_sendmsg+0x10/0x10 [ 771.996602][T30533] ? __fget_files+0x2a/0x420 [ 771.996632][T30533] ? __fget_files+0x3a0/0x420 [ 771.996674][T30533] __x64_sys_sendmsg+0x1bd/0x2a0 [ 771.996706][T30533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 771.996754][T30533] ? __pfx_ksys_write+0x10/0x10 [ 771.996792][T30533] do_syscall_64+0x14d/0xf80 [ 771.996821][T30533] ? trace_irq_disable+0x3b/0x150 [ 771.996839][T30533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.996860][T30533] ? clear_bhb_loop+0x40/0x90 [ 771.996887][T30533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.996908][T30533] RIP: 0033:0x7fb6c6b9c819 [ 771.996930][T30533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.996949][T30533] RSP: 002b:00007fb6c7a27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.996972][T30533] RAX: ffffffffffffffda RBX: 00007fb6c6e15fa0 RCX: 00007fb6c6b9c819 [ 771.996987][T30533] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 771.997000][T30533] RBP: 00007fb6c7a27090 R08: 0000000000000000 R09: 0000000000000000 [ 771.997013][T30533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 771.997026][T30533] R13: 00007fb6c6e16038 R14: 00007fb6c6e15fa0 R15: 00007fff97170138 [ 771.997061][T30533] [ 772.498746][T30533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 772.521563][ T5892] lo speed is unknown, defaulting to 1000 [ 772.530668][ T5892] syz2: Port: 1 Link ACTIVE [ 772.543010][T30535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8631'. [ 772.638229][T30544] netlink: 6 bytes leftover after parsing attributes in process `syz.4.8634'. [ 772.647511][T30544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.773514][T30554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8638'. [ 773.295031][T30577] netlink: 'syz.1.8644': attribute type 1 has an invalid length. [ 773.556615][T30585] atomic_op ffff888076c58198 conn xmit_atomic 0000000000000000 [ 773.922634][T30598] FAULT_INJECTION: forcing a failure. [ 773.922634][T30598] name failslab, interval 1, probability 0, space 0, times 0 [ 773.937928][T30598] CPU: 0 UID: 0 PID: 30598 Comm: syz.4.8651 Not tainted syzkaller #0 PREEMPT(full) [ 773.937958][T30598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 773.937972][T30598] Call Trace: [ 773.937982][T30598] [ 773.937991][T30598] dump_stack_lvl+0xe8/0x150 [ 773.938027][T30598] should_fail_ex+0x412/0x560 [ 773.938063][T30598] should_failslab+0xa8/0x100 [ 773.938092][T30598] __kmalloc_cache_noprof+0x88/0x660 [ 773.938117][T30598] ? netdevice_event+0x3cb/0x8f0 [ 773.938145][T30598] netdevice_event+0x3cb/0x8f0 [ 773.938170][T30598] ? __up_read+0x291/0x6b0 [ 773.938190][T30598] ? __pfx_netdevice_event+0x10/0x10 [ 773.938211][T30598] ? __pfx_del_netdev_ips+0x10/0x10 [ 773.938229][T30598] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 773.938249][T30598] ? __pfx_add_default_gids+0x10/0x10 [ 773.938265][T30598] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 773.938285][T30598] ? __pfx_add_netdev_ips+0x10/0x10 [ 773.938304][T30598] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 773.938329][T30598] ? cfg802154_netdev_notifier_call+0x136/0x8f0 [ 773.938362][T30598] notifier_call_chain+0x1be/0x400 [ 773.938402][T30598] call_netdevice_notifiers+0x90/0xd0 [ 773.938423][T30598] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 773.938455][T30598] ipvlan_device_event+0x5d7/0xa50 [ 773.938500][T30598] ? __pfx_ipvlan_device_event+0x10/0x10 [ 773.938531][T30598] ? igmp_netdev_event+0x7c/0x750 [ 773.938556][T30598] ? ipmr_device_event+0x1d0/0x200 [ 773.938586][T30598] notifier_call_chain+0x1be/0x400 [ 773.938627][T30598] netif_set_mac_address+0x39f/0x4e0 [ 773.938661][T30598] ? __pfx_netif_set_mac_address+0x10/0x10 [ 773.938689][T30598] ? down_write+0x16d/0x200 [ 773.938727][T30598] dev_set_mac_address_user+0x137/0x270 [ 773.938756][T30598] dev_ioctl+0x7b4/0x1150 [ 773.938785][T30598] sock_do_ioctl+0x23e/0x320 [ 773.938818][T30598] ? __pfx_sock_do_ioctl+0x10/0x10 [ 773.938845][T30598] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 773.938893][T30598] sock_ioctl+0x5c6/0x7f0 [ 773.938932][T30598] ? __pfx_sock_ioctl+0x10/0x10 [ 773.938961][T30598] ? __fget_files+0x2a/0x420 [ 773.938989][T30598] ? __fget_files+0x3a0/0x420 [ 773.939016][T30598] ? __fget_files+0x2a/0x420 [ 773.939048][T30598] ? bpf_lsm_file_ioctl+0x9/0x20 [ 773.939074][T30598] ? __pfx_sock_ioctl+0x10/0x10 [ 773.939103][T30598] __se_sys_ioctl+0xfc/0x170 [ 773.939130][T30598] do_syscall_64+0x14d/0xf80 [ 773.939157][T30598] ? trace_irq_disable+0x3b/0x150 [ 773.939174][T30598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.939196][T30598] ? clear_bhb_loop+0x40/0x90 [ 773.939221][T30598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.939241][T30598] RIP: 0033:0x7f1172b9c819 [ 773.939262][T30598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.939280][T30598] RSP: 002b:00007f1170df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 773.939304][T30598] RAX: ffffffffffffffda RBX: 00007f1172e15fa0 RCX: 00007f1172b9c819 [ 773.939319][T30598] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000006 [ 773.939332][T30598] RBP: 00007f1170df6090 R08: 0000000000000000 R09: 0000000000000000 [ 773.939345][T30598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 773.939357][T30598] R13: 00007f1172e16038 R14: 00007f1172e15fa0 R15: 00007ffffdb485e8 [ 773.939392][T30598] [ 774.519004][T30604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.586826][T30623] __nla_validate_parse: 8 callbacks suppressed [ 774.586849][T30623] netlink: 656 bytes leftover after parsing attributes in process `syz.2.8658'. [ 774.678676][T30604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.783859][T30604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.897005][T30636] IPVS: sh: FWM 3 0x00000003 - no destination available [ 774.899997][T30604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.049038][T30640] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8665'. [ 775.074847][T30640] netlink: 'syz.2.8665': attribute type 1 has an invalid length. [ 775.099714][T30640] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8665'. [ 775.156951][T21769] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.192451][T21769] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.246263][T21769] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.255107][T30651] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8668'. [ 775.277655][ T160] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.495305][T30661] FAULT_INJECTION: forcing a failure. [ 775.495305][T30661] name failslab, interval 1, probability 0, space 0, times 0 [ 775.521978][T30661] CPU: 0 UID: 0 PID: 30661 Comm: syz.0.8672 Not tainted syzkaller #0 PREEMPT(full) [ 775.522010][T30661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 775.522023][T30661] Call Trace: [ 775.522032][T30661] [ 775.522042][T30661] dump_stack_lvl+0xe8/0x150 [ 775.522078][T30661] should_fail_ex+0x412/0x560 [ 775.522116][T30661] should_failslab+0xa8/0x100 [ 775.522143][T30661] ? vm_area_dup+0x2b/0x680 [ 775.522167][T30661] kmem_cache_alloc_noprof+0x87/0x650 [ 775.522188][T30661] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 775.522212][T30661] ? arch_stack_walk+0xfb/0x150 [ 775.522248][T30661] vm_area_dup+0x2b/0x680 [ 775.522277][T30661] __split_vma+0x1dc/0xa40 [ 775.522322][T30661] ? __pfx___split_vma+0x10/0x10 [ 775.522363][T30661] ? mas_find+0xb0e/0xd30 [ 775.522400][T30661] vms_gather_munmap_vmas+0x4fa/0x1370 [ 775.522460][T30661] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 775.522500][T30661] ? mas_find+0xa7d/0xd30 [ 775.522536][T30661] mmap_region+0x85b/0x2240 [ 775.522569][T30661] ? __lock_acquire+0x6b5/0x2cf0 [ 775.522600][T30661] ? __lock_acquire+0x6b5/0x2cf0 [ 775.522631][T30661] ? __pfx_mmap_region+0x10/0x10 [ 775.522665][T30661] ? unwind_next_frame+0xa5/0x23c0 [ 775.522765][T30661] ? security_file_alloc+0x34/0x310 [ 775.522792][T30661] ? kasan_save_track+0x4f/0x80 [ 775.522837][T30661] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 775.522865][T30661] ? __lock_acquire+0x6b5/0x2cf0 [ 775.522894][T30661] ? aa_file_perm+0x192/0x15e0 [ 775.522919][T30661] ? mm_get_unmapped_area_vmflags+0xd9/0x110 [ 775.522939][T30661] ? cap_mmap_addr+0xaf/0x100 [ 775.522972][T30661] ? bpf_lsm_mmap_addr+0x9/0x50 [ 775.522997][T30661] ? security_mmap_addr+0x71/0x240 [ 775.523025][T30661] ? shmem_mapping+0xd/0x50 [ 775.523051][T30661] ? memfd_check_seals_mmap+0x165/0x200 [ 775.523086][T30661] do_mmap+0xc39/0x10c0 [ 775.523131][T30661] ? __pfx_do_mmap+0x10/0x10 [ 775.523158][T30661] ? down_write_killable+0x180/0x240 [ 775.523183][T30661] ? __pfx_down_write_killable+0x10/0x10 [ 775.523205][T30661] ? apparmor_mmap_file+0x2da/0x3e0 [ 775.523237][T30661] vm_mmap_pgoff+0x2c9/0x4f0 [ 775.523276][T30661] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 775.523303][T30661] ? rcu_is_watching+0x15/0xb0 [ 775.523332][T30661] ? hugetlbfs_get_inode+0x448/0x690 [ 775.523367][T30661] ? hugetlb_file_setup+0x42c/0x630 [ 775.523395][T30661] ksys_mmap_pgoff+0x586/0x760 [ 775.523443][T30661] do_syscall_64+0x14d/0xf80 [ 775.523472][T30661] ? trace_irq_disable+0x3b/0x150 [ 775.523490][T30661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.523512][T30661] ? clear_bhb_loop+0x40/0x90 [ 775.523538][T30661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.523559][T30661] RIP: 0033:0x7f88c0b9c819 [ 775.523580][T30661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.523599][T30661] RSP: 002b:00007f88c1acd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 775.523624][T30661] RAX: ffffffffffffffda RBX: 00007f88c0e15fa0 RCX: 00007f88c0b9c819 [ 775.523639][T30661] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000000000 [ 775.523654][T30661] RBP: 00007f88c1acd090 R08: ffffffffffffffff R09: 0000000000000000 [ 775.523668][T30661] R10: 0000000000041071 R11: 0000000000000246 R12: 0000000000000001 [ 775.523681][T30661] R13: 00007f88c0e16038 R14: 00007f88c0e15fa0 R15: 00007ffd6aba6368 [ 775.523716][T30661] [ 775.919204][T30660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.176982][T30682] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8677'. [ 777.417977][T30717] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8689'. [ 777.427379][T30717] netlink: 'syz.1.8689': attribute type 1 has an invalid length. [ 777.436335][T30717] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8689'. [ 777.567374][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 778.356098][T30700] mac80211_hwsim hwsim50 syzkaller0: entered promiscuous mode [ 778.363935][T30700] mac80211_hwsim hwsim50 syzkaller0: entered allmulticast mode [ 778.399462][T30715] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 778.959878][T30752] FAULT_INJECTION: forcing a failure. [ 778.959878][T30752] name failslab, interval 1, probability 0, space 0, times 0 [ 778.985011][T30752] CPU: 1 UID: 0 PID: 30752 Comm: syz.0.8702 Not tainted syzkaller #0 PREEMPT(full) [ 778.985041][T30752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 778.985054][T30752] Call Trace: [ 778.985063][T30752] [ 778.985072][T30752] dump_stack_lvl+0xe8/0x150 [ 778.985108][T30752] should_fail_ex+0x412/0x560 [ 778.985143][T30752] should_failslab+0xa8/0x100 [ 778.985171][T30752] __kmalloc_cache_noprof+0x88/0x660 [ 778.985196][T30752] ? sctp_add_bind_addr+0x8c/0x370 [ 778.985230][T30752] sctp_add_bind_addr+0x8c/0x370 [ 778.985264][T30752] sctp_copy_local_addr_list+0x314/0x4f0 [ 778.985296][T30752] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 778.985325][T30752] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 778.985356][T30752] ? sctp_v6_is_any+0x64/0x80 [ 778.985388][T30752] ? sctp_copy_one_addr+0x93/0x360 [ 778.985421][T30752] sctp_bind_addr_copy+0xb3/0x3c0 [ 778.985462][T30752] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 778.985493][T30752] sctp_connect_new_asoc+0x2ff/0x6b0 [ 778.985520][T30752] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 778.985545][T30752] ? __ipv6_addr_type+0x14d/0x2f0 [ 778.985571][T30752] ? sctp_inet6_send_verify+0x6e/0x300 [ 778.985598][T30752] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 778.985625][T30752] __sctp_connect+0x5cb/0xdc0 [ 778.985661][T30752] ? __pfx___sctp_connect+0x10/0x10 [ 778.985682][T30752] ? security_sctp_bind_connect+0x7e/0x2c0 [ 778.985711][T30752] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 778.985742][T30752] sctp_getsockopt_connectx3+0x227/0x360 [ 778.985775][T30752] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 778.985809][T30752] ? sctp_getsockopt+0x12f/0xb90 [ 778.985832][T30752] ? __local_bh_enable_ip+0xd0/0x130 [ 778.985864][T30752] sctp_getsockopt+0x984/0xb90 [ 778.985884][T30752] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 778.985910][T30752] do_sock_getsockopt+0x2d3/0x3f0 [ 778.985940][T30752] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 778.985983][T30752] ? ksys_write+0x1fc/0x270 [ 778.986013][T30752] __x64_sys_getsockopt+0x1a4/0x240 [ 778.986051][T30752] do_syscall_64+0x14d/0xf80 [ 778.986081][T30752] ? trace_irq_disable+0x3b/0x150 [ 778.986099][T30752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.986120][T30752] ? clear_bhb_loop+0x40/0x90 [ 778.986147][T30752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.986168][T30752] RIP: 0033:0x7f88c0b9c819 [ 778.986189][T30752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.986207][T30752] RSP: 002b:00007f88c1acd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 778.986232][T30752] RAX: ffffffffffffffda RBX: 00007f88c0e15fa0 RCX: 00007f88c0b9c819 [ 778.986248][T30752] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 778.986261][T30752] RBP: 00007f88c1acd090 R08: 0000200000000180 R09: 0000000000000000 [ 778.986274][T30752] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 778.986287][T30752] R13: 00007f88c0e16038 R14: 00007f88c0e15fa0 R15: 00007ffd6aba6368 [ 778.986323][T30752] [ 779.330039][T30742] bond8: invalid ARP target 0.0.0.0 specified for addition [ 779.339381][T30742] bond8: option arp_ip_target: invalid value (0) [ 779.348249][T30742] bond8 (unregistering): Released all slaves [ 779.373172][T30761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8703'. [ 779.624129][T30768] netlink: 'syz.2.8705': attribute type 1 has an invalid length. [ 779.757442][T30776] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 779.767295][T30780] netlink: 'syz.1.8708': attribute type 2 has an invalid length. [ 779.809691][T30768] veth7: entered promiscuous mode [ 779.818825][T30768] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 779.830313][T30780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8708'. [ 779.833068][T30782] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 779.840058][T30780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8708'. [ 779.857504][T30782] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 779.866094][T30768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8705'. [ 779.881648][T30768] 8021q: adding VLAN 0 to HW filter on device bond3 [ 779.883062][ T131] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 780.015548][ T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 780.313406][T30804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.681854][T30828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8720'. [ 781.009138][T30842] syzkaller1: entered promiscuous mode [ 781.017981][T30842] syzkaller1: entered allmulticast mode [ 781.160192][T30851] FAULT_INJECTION: forcing a failure. [ 781.160192][T30851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 781.224850][T30851] CPU: 0 UID: 0 PID: 30851 Comm: syz.2.8729 Not tainted syzkaller #0 PREEMPT(full) [ 781.224889][T30851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 781.224903][T30851] Call Trace: [ 781.224911][T30851] [ 781.224921][T30851] dump_stack_lvl+0xe8/0x150 [ 781.224956][T30851] should_fail_ex+0x412/0x560 [ 781.224992][T30851] _copy_from_user+0x2d/0xb0 [ 781.225017][T30851] alg_setkey+0xb8/0x190 [ 781.225041][T30851] alg_setsockopt+0x3da/0x4a0 [ 781.225073][T30851] ? __pfx_alg_setsockopt+0x10/0x10 [ 781.225106][T30851] do_sock_setsockopt+0x17c/0x1b0 [ 781.225139][T30851] __x64_sys_setsockopt+0x13d/0x1b0 [ 781.225172][T30851] do_syscall_64+0x14d/0xf80 [ 781.225201][T30851] ? trace_irq_disable+0x3b/0x150 [ 781.225220][T30851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.225241][T30851] ? clear_bhb_loop+0x40/0x90 [ 781.225267][T30851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.225287][T30851] RIP: 0033:0x7fb6c6b9c819 [ 781.225308][T30851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.225327][T30851] RSP: 002b:00007fb6c7a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 781.225351][T30851] RAX: ffffffffffffffda RBX: 00007fb6c6e15fa0 RCX: 00007fb6c6b9c819 [ 781.225367][T30851] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 781.225380][T30851] RBP: 00007fb6c7a27090 R08: 0000000000000011 R09: 0000000000000000 [ 781.225394][T30851] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 781.225407][T30851] R13: 00007fb6c6e16038 R14: 00007fb6c6e15fa0 R15: 00007fff97170138 [ 781.225441][T30851] [ 781.655344][T30861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8733'. [ 781.671663][T30861] netlink: 'syz.2.8733': attribute type 30 has an invalid length. [ 781.690717][T30861] netlink: 'syz.2.8733': attribute type 3 has an invalid length. [ 781.865229][T30871] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 782.029075][T30876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8740'. [ 782.038668][T30878] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 782.079915][T30880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8742'. [ 782.110007][T30880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8742'. [ 782.118386][T30883] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 782.132227][T30881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8742'. [ 782.145155][T30881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8742'. [ 782.787427][T30919] netlink: 'syz.0.8755': attribute type 13 has an invalid length. [ 782.807596][T30919] netlink: 'syz.0.8755': attribute type 17 has an invalid length. [ 782.858111][T30910] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.866071][T30910] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.903089][T30927] syz.3.8759 uses old SIOCAX25GETINFO [ 782.983105][T30910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.997078][T30910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.090612][T30915] FAULT_INJECTION: forcing a failure. [ 783.090612][T30915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.103977][T30915] CPU: 0 UID: 0 PID: 30915 Comm: syz.4.8756 Not tainted syzkaller #0 PREEMPT(full) [ 783.104006][T30915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 783.104018][T30915] Call Trace: [ 783.104027][T30915] [ 783.104036][T30915] dump_stack_lvl+0xe8/0x150 [ 783.104070][T30915] should_fail_ex+0x412/0x560 [ 783.104106][T30915] _copy_to_user+0x31/0xb0 [ 783.104130][T30915] simple_read_from_buffer+0xe1/0x170 [ 783.104166][T30915] proc_fail_nth_read+0x1bb/0x230 [ 783.104198][T30915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 783.104230][T30915] ? rw_verify_area+0x2a6/0x4d0 [ 783.104252][T30915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 783.104282][T30915] vfs_read+0x20c/0xa70 [ 783.104302][T30915] ? fdget_pos+0x246/0x320 [ 783.104332][T30915] ? __pfx___mutex_lock+0x10/0x10 [ 783.104364][T30915] ? __pfx_vfs_read+0x10/0x10 [ 783.104399][T30915] ? __fget_files+0x2a/0x420 [ 783.104433][T30915] ? __fget_files+0x3a0/0x420 [ 783.104461][T30915] ? __fget_files+0x2a/0x420 [ 783.104499][T30915] ksys_read+0x150/0x270 [ 783.104524][T30915] ? __pfx_ksys_read+0x10/0x10 [ 783.104556][T30915] do_syscall_64+0x14d/0xf80 [ 783.104583][T30915] ? trace_irq_disable+0x3b/0x150 [ 783.104601][T30915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.104622][T30915] ? clear_bhb_loop+0x40/0x90 [ 783.104646][T30915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.104665][T30915] RIP: 0033:0x7f1172b5d04e [ 783.104685][T30915] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 783.104703][T30915] RSP: 002b:00007f1170df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 783.104725][T30915] RAX: ffffffffffffffda RBX: 00007f1170df66c0 RCX: 00007f1172b5d04e [ 783.104742][T30915] RDX: 000000000000000f RSI: 00007f1170df60a0 RDI: 0000000000000004 [ 783.104754][T30915] RBP: 00007f1170df6090 R08: 0000000000000000 R09: 0000000000000000 [ 783.104768][T30915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.104781][T30915] R13: 00007f1172e16038 R14: 00007f1172e15fa0 R15: 00007ffffdb485e8 [ 783.104816][T30915] [ 783.419599][T30919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.436614][T30919] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.515907][T30919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 783.563051][T21765] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.614642][T21765] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.623095][T21765] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.658243][T21765] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.915724][T30949] IPv6: sit1: Disabled Multicast RS [ 784.004906][ T5159] block nbd5: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 30 seconds [ 784.018421][ T5159] block nbd5: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 30 seconds [ 784.031283][ T5159] block nbd5: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 30 seconds [ 784.042531][ T5159] block nbd5: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 30 seconds [ 784.120563][T30945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.892634][T30979] __nla_validate_parse: 4 callbacks suppressed [ 784.892657][T30979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8775'. [ 784.947251][T30973] ip6t_rpfilter: unknown options [ 784.960201][T30981] mac80211_hwsim hwsim50 syzkaller0: left promiscuous mode [ 784.975839][T30981] mac80211_hwsim hwsim50 syzkaller0: left allmulticast mode [ 785.002219][T30981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.032963][T30979] sit0: entered allmulticast mode [ 785.382758][T31005] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8786'. [ 785.437739][T31005] 8021q: VLANs not supported on nlmon0 [ 786.105396][T31046] nlmon0: Caught tx_queue_len zero misconfig [ 786.260169][T31058] FAULT_INJECTION: forcing a failure. [ 786.260169][T31058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.274004][T31058] CPU: 0 UID: 0 PID: 31058 Comm: syz.2.8802 Not tainted syzkaller #0 PREEMPT(full) [ 786.274034][T31058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 786.274047][T31058] Call Trace: [ 786.274054][T31058] [ 786.274064][T31058] dump_stack_lvl+0xe8/0x150 [ 786.274099][T31058] should_fail_ex+0x412/0x560 [ 786.274134][T31058] _copy_from_iter+0x1d3/0x1670 [ 786.274170][T31058] ? rcu_is_watching+0x15/0xb0 [ 786.274206][T31058] ? __pfx__copy_from_iter+0x10/0x10 [ 786.274245][T31058] ? netlink_sendmsg+0x650/0xb40 [ 786.274267][T31058] ? skb_put+0x11b/0x210 [ 786.274295][T31058] netlink_sendmsg+0x6c0/0xb40 [ 786.274333][T31058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 786.274372][T31058] ? aa_sock_msg_perm+0xf1/0x1b0 [ 786.274404][T31058] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 786.274432][T31058] ____sys_sendmsg+0x972/0x9f0 [ 786.274467][T31058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 786.274504][T31058] ? import_iovec+0x73/0xa0 [ 786.274531][T31058] ___sys_sendmsg+0x2a5/0x360 [ 786.274566][T31058] ? __pfx____sys_sendmsg+0x10/0x10 [ 786.274630][T31058] ? __fget_files+0x2a/0x420 [ 786.274660][T31058] ? __fget_files+0x3a0/0x420 [ 786.274702][T31058] __x64_sys_sendmsg+0x1bd/0x2a0 [ 786.274732][T31058] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 786.274770][T31058] ? __pfx_ksys_write+0x10/0x10 [ 786.274807][T31058] do_syscall_64+0x14d/0xf80 [ 786.274836][T31058] ? trace_irq_disable+0x3b/0x150 [ 786.274853][T31058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.274875][T31058] ? clear_bhb_loop+0x40/0x90 [ 786.274901][T31058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.274922][T31058] RIP: 0033:0x7fb6c6b9c819 [ 786.274943][T31058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.274962][T31058] RSP: 002b:00007fb6c7a27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.274985][T31058] RAX: ffffffffffffffda RBX: 00007fb6c6e15fa0 RCX: 00007fb6c6b9c819 [ 786.275001][T31058] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 786.275014][T31058] RBP: 00007fb6c7a27090 R08: 0000000000000000 R09: 0000000000000000 [ 786.275027][T31058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.275039][T31058] R13: 00007fb6c6e16038 R14: 00007fb6c6e15fa0 R15: 00007fff97170138 [ 786.275072][T31058] [ 786.645077][T31066] bridge2: entered promiscuous mode [ 786.671623][T31066] bridge2: entered allmulticast mode [ 787.006689][T31083] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8810'. [ 787.084296][T31083] netlink: 'syz.3.8810': attribute type 1 has an invalid length. [ 787.092831][T31083] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8810'. [ 788.203637][T31139] netlink: 120 bytes leftover after parsing attributes in process `syz.1.8828'. [ 788.491637][T21769] bridge_slave_1: left allmulticast mode [ 788.504420][T21769] bridge_slave_1: left promiscuous mode [ 788.510543][T21769] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.531960][T21769] bridge_slave_0: left allmulticast mode [ 788.540034][T21769] bridge_slave_0: left promiscuous mode [ 788.548013][T21769] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.649710][T21769] bond0 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 788.663052][T21769] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 788.724923][T31170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8836'. [ 788.879916][T21769] bond0 (unregistering): Released all slaves [ 788.899747][T21769] bond1 (unregistering): Released all slaves [ 789.023298][T31173] pimreg7744: entered allmulticast mode [ 789.079579][T21769] !©9: left promiscuous mode [ 789.119592][T31178] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8839'. [ 789.192674][T21769] : left promiscuous mode [ 789.296093][T31187] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8843'. [ 789.309602][T31187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8843'. [ 789.561569][T31198] netlink: 'syz.0.8848': attribute type 12 has an invalid length. [ 789.577509][T31168] pimreg7744: left allmulticast mode [ 789.609366][T31201] nbd: must specify at least one socket [ 789.616297][T31195] lo speed is unknown, defaulting to 1000 [ 790.016978][T31217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8854'. [ 790.029766][T31217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8854'. [ 790.076049][T31220] IPVS: sh: FWM 3 0x00000003 - no destination available [ 790.095938][T21769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.135977][T21769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.462276][T21769] team0 (unregistering): Port device team_slave_1 removed [ 790.483768][T21769] team0 (unregistering): Port device team_slave_0 removed [ 790.672132][T31224] lo speed is unknown, defaulting to 1000 [ 790.836894][T31245] openvswitch: netlink: Message has 1 unknown bytes. [ 790.856588][T31245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.857181][T31246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8862'. [ 790.948389][T31251] veth0: Caught tx_queue_len zero misconfig [ 791.033488][T31246] netlink: 'syz.3.8862': attribute type 1 has an invalid length. [ 791.164061][T31246] 8021q: adding VLAN 0 to HW filter on device bond8 [ 791.234979][T31246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8862'. [ 791.259431][T31264] bond8: (slave gretap1): making interface the new active one [ 791.271825][T31264] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 791.378183][T31246] bond8 (unregistering): (slave gretap1): Releasing active interface [ 791.433099][T31246] bond8 (unregistering): Released all slaves [ 791.504215][T31270] tipc: Enabling of bearer rejected, failed to enable media [ 792.158909][T31300] gretap2: entered promiscuous mode [ 792.189576][T31300] batman_adv: batadv0: Adding interface: gretap2 [ 792.215113][T31300] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 792.339627][T31300] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 792.623440][T31304] IPVS: Scheduler module ip_vs_ not found [ 792.649422][T31308] IPVS: length: 24 != 16106127384 [ 792.899895][T31321] tipc: Enabled bearer , priority 0 [ 793.134307][T31321] syzkaller0: entered promiscuous mode [ 793.153562][T31330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.164140][T31321] syzkaller0: entered allmulticast mode [ 793.175566][T31321] tipc: Resetting bearer [ 793.286626][T31337] netlink: 'syz.1.8884': attribute type 62 has an invalid length. [ 793.370371][T31327] tipc: Resetting bearer [ 793.698555][T31343] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8885'. [ 793.707642][T31343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8885'. [ 793.716980][T31343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8885'. [ 793.724530][ T5832] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 793.728522][T24477] Bluetooth: hci2: command 0x0405 tx timeout [ 793.817012][T31346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8886'. [ 793.826237][T31346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8886'. [ 793.879937][T31348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8886'. [ 795.132909][T31351] netlink: 'syz.4.8887': attribute type 1 has an invalid length. [ 795.258284][T31353] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.8887'. [ 795.593514][T31327] tipc: Disabling bearer [ 795.634230][T18494] tipc: Node number set to 50462720 [ 795.700997][T31351] bond8: entered promiscuous mode [ 795.708274][T31351] 8021q: adding VLAN 0 to HW filter on device bond8 [ 795.736313][T31352] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 795.757382][T31352] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 795.800139][T31352] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 795.853422][T31356] netlink: 'syz.0.8889': attribute type 4 has an invalid length. [ 796.035497][T31370] netlink: 'syz.1.8892': attribute type 13 has an invalid length. [ 796.043396][T31370] netlink: 'syz.1.8892': attribute type 17 has an invalid length. [ 796.192894][T31370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 796.311658][T31380] syzkaller1: entered promiscuous mode [ 796.323702][T31380] syzkaller1: entered allmulticast mode [ 796.465179][T31392] FAULT_INJECTION: forcing a failure. [ 796.465179][T31392] name failslab, interval 1, probability 0, space 0, times 0 [ 796.478663][T31392] CPU: 0 UID: 0 PID: 31392 Comm: syz.1.8899 Not tainted syzkaller #0 PREEMPT(full) [ 796.478694][T31392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 796.478707][T31392] Call Trace: [ 796.478716][T31392] [ 796.478725][T31392] dump_stack_lvl+0xe8/0x150 [ 796.478760][T31392] should_fail_ex+0x412/0x560 [ 796.478795][T31392] should_failslab+0xa8/0x100 [ 796.478825][T31392] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 796.478849][T31392] ? __alloc_skb+0x186/0x7d0 [ 796.478872][T31392] ? __alloc_skb+0x1d0/0x7d0 [ 796.478892][T31392] ? __local_bh_enable_ip+0xd0/0x130 [ 796.478924][T31392] __alloc_skb+0x1d0/0x7d0 [ 796.478954][T31392] alloc_skb_with_frags+0xca/0x890 [ 796.478995][T31392] sock_alloc_send_pskb+0x878/0x990 [ 796.479043][T31392] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 796.479082][T31392] ? iov_iter_advance+0x8b/0x1c0 [ 796.479105][T31392] tun_get_user+0x92d/0x3dd0 [ 796.479140][T31392] ? aa_file_perm+0x192/0x15e0 [ 796.479165][T31392] ? aa_file_perm+0x50e/0x15e0 [ 796.479185][T31392] ? __pfx_tun_get_user+0x10/0x10 [ 796.479205][T31392] ? aa_file_perm+0x192/0x15e0 [ 796.479231][T31392] ? __lock_acquire+0x6b5/0x2cf0 [ 796.479270][T31392] ? ref_tracker_alloc+0x35c/0x4c0 [ 796.479302][T31392] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 796.479338][T31392] ? tun_get+0x1c/0x2f0 [ 796.479374][T31392] ? tun_get+0x1c/0x2f0 [ 796.479394][T31392] ? tun_get+0x1c/0x2f0 [ 796.479420][T31392] tun_chr_write_iter+0x113/0x200 [ 796.479446][T31392] vfs_write+0x61d/0xb90 [ 796.479476][T31392] ? __pfx_vfs_write+0x10/0x10 [ 796.479509][T31392] ? __fget_files+0x2a/0x420 [ 796.479548][T31392] ksys_write+0x150/0x270 [ 796.479575][T31392] ? __pfx_ksys_write+0x10/0x10 [ 796.479616][T31392] do_syscall_64+0x14d/0xf80 [ 796.479645][T31392] ? trace_irq_disable+0x3b/0x150 [ 796.479663][T31392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.479683][T31392] ? clear_bhb_loop+0x40/0x90 [ 796.479709][T31392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.479728][T31392] RIP: 0033:0x7f3a8759c819 [ 796.479749][T31392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.479768][T31392] RSP: 002b:00007f3a8852b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 796.479791][T31392] RAX: ffffffffffffffda RBX: 00007f3a87815fa0 RCX: 00007f3a8759c819 [ 796.479807][T31392] RDX: 0000000000000fce RSI: 0000200000001400 RDI: 0000000000000003 [ 796.479821][T31392] RBP: 00007f3a8852b090 R08: 0000000000000000 R09: 0000000000000000 [ 796.479835][T31392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.479848][T31392] R13: 00007f3a87816038 R14: 00007f3a87815fa0 R15: 00007ffda5825c28 [ 796.479883][T31392] [ 797.000596][T31408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8905'. [ 797.025748][T31408] n: the hash_elasticity option has been deprecated and is always 16 [ 797.033892][T31408] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 797.342310][T31421] netlink: 'syz.1.8911': attribute type 1 has an invalid length. [ 797.365373][T31421] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8911'. [ 797.407184][T31423] bond8: option xmit_hash_policy: invalid value (10) [ 797.426097][T31427] IPVS: sh: FWM 3 0x00000003 - no destination available [ 797.434873][T31423] bond8 (unregistering): Released all slaves [ 797.496962][T31421] bond10: entered promiscuous mode [ 797.662259][T31438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 797.890247][T31455] netlink: 'syz.0.8923': attribute type 11 has an invalid length. [ 798.150501][T31455] netlink: 488 bytes leftover after parsing attributes in process `syz.0.8923'. [ 798.254959][T31455] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.8923'. [ 798.372158][T31473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8926'. [ 798.667842][T31484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8930'. [ 798.780467][T31487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8930'. [ 798.867172][T31490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8930'. [ 798.983797][T21769] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.993267][ T5913] lo speed is unknown, defaulting to 1000 [ 799.000714][T21769] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.010008][ T5913] syz2: Port: 1 Link DOWN [ 799.035469][T21769] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.045268][T21769] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.179195][T31504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8936'. [ 799.303886][T31510] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 799.593986][T31525] xt_hashlimit: size too large, truncated to 1048576 [ 800.022535][T31551] bridge2: entered allmulticast mode [ 800.485683][T31576] __nla_validate_parse: 3 callbacks suppressed [ 800.485707][T31576] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8961'. [ 800.503220][T31576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8961'. [ 800.513743][T31576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8961'. [ 800.594001][T31580] FAULT_INJECTION: forcing a failure. [ 800.594001][T31580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.608431][T31580] CPU: 0 UID: 0 PID: 31580 Comm: syz.0.8963 Not tainted syzkaller #0 PREEMPT(full) [ 800.608461][T31580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 800.608474][T31580] Call Trace: [ 800.608483][T31580] [ 800.608492][T31580] dump_stack_lvl+0xe8/0x150 [ 800.608528][T31580] should_fail_ex+0x412/0x560 [ 800.608564][T31580] _copy_from_user+0x2d/0xb0 [ 800.608589][T31580] kstrtouint_from_user+0xd6/0x180 [ 800.608659][T31580] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 800.608709][T31580] proc_fail_nth_write+0x8e/0x210 [ 800.608740][T31580] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 800.608777][T31580] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 800.608809][T31580] vfs_write+0x29a/0xb90 [ 800.608843][T31580] ? __pfx_vfs_write+0x10/0x10 [ 800.608869][T31580] ? __fget_files+0x2a/0x420 [ 800.608905][T31580] ? __fget_files+0x3a0/0x420 [ 800.608934][T31580] ? __fget_files+0x2a/0x420 [ 800.608974][T31580] ksys_write+0x150/0x270 [ 800.608999][T31580] ? __pfx_ksys_write+0x10/0x10 [ 800.609035][T31580] do_syscall_64+0x14d/0xf80 [ 800.609064][T31580] ? trace_irq_disable+0x3b/0x150 [ 800.609082][T31580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.609104][T31580] ? clear_bhb_loop+0x40/0x90 [ 800.609130][T31580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.609151][T31580] RIP: 0033:0x7f88c0b5d04e [ 800.609173][T31580] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 800.609192][T31580] RSP: 002b:00007f88c1accfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 800.609215][T31580] RAX: ffffffffffffffda RBX: 00007f88c1acd6c0 RCX: 00007f88c0b5d04e [ 800.609231][T31580] RDX: 0000000000000001 RSI: 00007f88c1acd0a0 RDI: 0000000000000006 [ 800.609244][T31580] RBP: 00007f88c1acd090 R08: 0000000000000000 R09: 0000000000000000 [ 800.609256][T31580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.609269][T31580] R13: 00007f88c0e16038 R14: 00007f88c0e15fa0 R15: 00007ffd6aba6368 [ 800.609304][T31580] [ 800.631516][T31583] FAULT_INJECTION: forcing a failure. [ 800.631516][T31583] name failslab, interval 1, probability 0, space 0, times 0 [ 800.655086][T31584] vlan3: entered promiscuous mode [ 800.656544][T31583] CPU: 1 UID: 0 PID: 31583 Comm: syz.3.8965 Not tainted syzkaller #0 PREEMPT(full) [ 800.656570][T31583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 800.656582][T31583] Call Trace: [ 800.656590][T31583] [ 800.656598][T31583] dump_stack_lvl+0xe8/0x150 [ 800.656629][T31583] should_fail_ex+0x412/0x560 [ 800.656662][T31583] should_failslab+0xa8/0x100 [ 800.656689][T31583] __kmalloc_cache_noprof+0x88/0x660 [ 800.656712][T31583] ? sctp_add_bind_addr+0x8c/0x370 [ 800.656743][T31583] sctp_add_bind_addr+0x8c/0x370 [ 800.656773][T31583] sctp_copy_local_addr_list+0x314/0x4f0 [ 800.656803][T31583] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 800.656829][T31583] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 800.656858][T31583] ? sctp_v6_is_any+0x64/0x80 [ 800.656886][T31583] ? sctp_copy_one_addr+0x93/0x360 [ 800.656915][T31583] sctp_bind_addr_copy+0xb3/0x3c0 [ 800.656942][T31583] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 800.656969][T31583] sctp_connect_new_asoc+0x2ff/0x6b0 [ 800.656993][T31583] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 800.657016][T31583] ? __ipv6_addr_type+0x14d/0x2f0 [ 800.657040][T31583] ? sctp_inet6_send_verify+0x6e/0x300 [ 800.657064][T31583] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 800.657087][T31583] __sctp_connect+0x5cb/0xdc0 [ 800.657119][T31583] ? __pfx___sctp_connect+0x10/0x10 [ 800.657138][T31583] ? security_sctp_bind_connect+0x7e/0x2c0 [ 800.657165][T31583] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 800.657193][T31583] sctp_getsockopt_connectx3+0x227/0x360 [ 800.657223][T31583] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 800.657253][T31583] ? sctp_getsockopt+0x12f/0xb90 [ 800.657275][T31583] ? __local_bh_enable_ip+0xd0/0x130 [ 800.657304][T31583] sctp_getsockopt+0x984/0xb90 [ 800.657322][T31583] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 800.657354][T31583] do_sock_getsockopt+0x2d3/0x3f0 [ 800.657381][T31583] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 800.657409][T31583] ? ksys_write+0x1fc/0x270 [ 800.657435][T31583] __x64_sys_getsockopt+0x1a4/0x240 [ 800.657468][T31583] do_syscall_64+0x14d/0xf80 [ 800.657494][T31583] ? trace_irq_disable+0x3b/0x150 [ 800.657510][T31583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.657529][T31583] ? clear_bhb_loop+0x40/0x90 [ 800.657552][T31583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.657576][T31583] RIP: 0033:0x7f38ccb9c819 [ 800.657595][T31583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.657612][T31583] RSP: 002b:00007f38cdb40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 800.657634][T31583] RAX: ffffffffffffffda RBX: 00007f38cce15fa0 RCX: 00007f38ccb9c819 [ 800.657648][T31583] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 800.657659][T31583] RBP: 00007f38cdb40090 R08: 0000200000000180 R09: 0000000000000000 [ 800.657671][T31583] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 800.657683][T31583] R13: 00007f38cce16038 R14: 00007f38cce15fa0 R15: 00007ffec67f6228 [ 800.657714][T31583] [ 801.621496][T31613] raw_sendmsg: syz.2.8975 forgot to set AF_INET. Fix it! [ 801.623404][T31622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8978'. [ 801.670595][T31618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8977'. [ 801.694997][T31618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8977'. [ 801.706120][T31618] netlink: 'syz.0.8977': attribute type 4 has an invalid length. [ 801.773821][T31629] tipc: Enabled bearer , priority 0 [ 801.795713][T31629] syzkaller0: mtu less than device minimum [ 801.820630][T31621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.907195][T31636] IPv6: Can't replace route, no match found [ 802.011984][T31640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8983'. [ 802.081150][T31648] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8984'. [ 802.353002][T31660] FAULT_INJECTION: forcing a failure. [ 802.353002][T31660] name failslab, interval 1, probability 0, space 0, times 0 [ 802.365783][T31660] CPU: 1 UID: 0 PID: 31660 Comm: syz.2.8990 Not tainted syzkaller #0 PREEMPT(full) [ 802.365813][T31660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 802.365826][T31660] Call Trace: [ 802.365835][T31660] [ 802.365844][T31660] dump_stack_lvl+0xe8/0x150 [ 802.365879][T31660] should_fail_ex+0x412/0x560 [ 802.365914][T31660] should_failslab+0xa8/0x100 [ 802.365940][T31660] ? skb_clone+0x212/0x3a0 [ 802.365966][T31660] kmem_cache_alloc_noprof+0x87/0x650 [ 802.365990][T31660] ? __bpf_redirect+0xcb4/0x12a0 [ 802.366015][T31660] skb_clone+0x212/0x3a0 [ 802.366044][T31660] bpf_clone_redirect+0x16a/0x4b0 [ 802.366075][T31660] ? bpf_test_run+0x1d1/0x830 [ 802.366096][T31660] bpf_prog_9299a0b1a05450b6+0x5f/0x68 [ 802.366119][T31660] ? __lock_acquire+0x6b5/0x2cf0 [ 802.366166][T31660] ? ktime_get+0x45/0x200 [ 802.366189][T31660] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 802.366211][T31660] ? lockdep_hardirqs_on+0x7a/0x110 [ 802.366238][T31660] ? ktime_get+0x45/0x200 [ 802.366254][T31660] ? seqcount_lockdep_reader_access+0xea/0x100 [ 802.366273][T31660] ? bpf_test_run+0x1d1/0x830 [ 802.366295][T31660] ? bpf_test_timer_continue+0x10c/0x320 [ 802.366321][T31660] bpf_test_run+0x354/0x830 [ 802.366364][T31660] ? __pfx_bpf_test_run+0x10/0x10 [ 802.366396][T31660] ? trace_kmem_cache_alloc+0x29/0xf0 [ 802.366415][T31660] ? slab_build_skb+0x52/0x410 [ 802.366438][T31660] ? __kasan_krealloc+0xeb/0x110 [ 802.366464][T31660] ? eth_type_trans+0x35e/0x6d0 [ 802.366496][T31660] ? convert___skb_to_skb+0x3d/0x5b0 [ 802.366523][T31660] bpf_prog_test_run_skb+0xd22/0x1c90 [ 802.366559][T31660] ? __fget_files+0x2a/0x420 [ 802.366599][T31660] ? __fget_files+0x3a0/0x420 [ 802.366626][T31660] ? __fget_files+0x2a/0x420 [ 802.366659][T31660] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 802.366682][T31660] bpf_prog_test_run+0x2c7/0x340 [ 802.366709][T31660] __sys_bpf+0x643/0x950 [ 802.366731][T31660] ? __pfx___sys_bpf+0x10/0x10 [ 802.366767][T31660] ? ksys_write+0x242/0x270 [ 802.366793][T31660] ? __pfx_ksys_write+0x10/0x10 [ 802.366825][T31660] __x64_sys_bpf+0x7c/0x90 [ 802.366856][T31660] do_syscall_64+0x14d/0xf80 [ 802.366884][T31660] ? trace_irq_disable+0x3b/0x150 [ 802.366901][T31660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.366922][T31660] ? clear_bhb_loop+0x40/0x90 [ 802.366961][T31660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.366981][T31660] RIP: 0033:0x7fb6c6b9c819 [ 802.367001][T31660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.367020][T31660] RSP: 002b:00007fb6c7a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 802.367044][T31660] RAX: ffffffffffffffda RBX: 00007fb6c6e15fa0 RCX: 00007fb6c6b9c819 [ 802.367059][T31660] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 802.367073][T31660] RBP: 00007fb6c7a27090 R08: 0000000000000000 R09: 0000000000000000 [ 802.367086][T31660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 802.367098][T31660] R13: 00007fb6c6e16038 R14: 00007fb6c6e15fa0 R15: 00007fff97170138 [ 802.367132][T31660] [ 802.447219][T31668] FAULT_INJECTION: forcing a failure. [ 802.447219][T31668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.714753][T31668] CPU: 1 UID: 0 PID: 31668 Comm: syz.3.8991 Not tainted syzkaller #0 PREEMPT(full) [ 802.714783][T31668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 802.714795][T31668] Call Trace: [ 802.714803][T31668] [ 802.714812][T31668] dump_stack_lvl+0xe8/0x150 [ 802.714847][T31668] should_fail_ex+0x412/0x560 [ 802.714882][T31668] _copy_from_iter+0x1d3/0x1670 [ 802.714915][T31668] ? unwind_next_frame+0xa5/0x23c0 [ 802.714951][T31668] ? __lock_acquire+0x6b5/0x2cf0 [ 802.714979][T31668] ? __pfx__copy_from_iter+0x10/0x10 [ 802.715026][T31668] tun_get_user+0x516/0x3dd0 [ 802.715062][T31668] ? aa_file_perm+0x192/0x15e0 [ 802.715088][T31668] ? aa_file_perm+0x50e/0x15e0 [ 802.715106][T31668] ? __pfx_tun_get_user+0x10/0x10 [ 802.715127][T31668] ? aa_file_perm+0x192/0x15e0 [ 802.715152][T31668] ? __lock_acquire+0x6b5/0x2cf0 [ 802.715188][T31668] ? ref_tracker_alloc+0x35c/0x4c0 [ 802.715222][T31668] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 802.715260][T31668] ? tun_get+0x1c/0x2f0 [ 802.715289][T31668] ? tun_get+0x1c/0x2f0 [ 802.715312][T31668] ? tun_get+0x1c/0x2f0 [ 802.715340][T31668] tun_chr_write_iter+0x113/0x200 [ 802.715362][T31668] vfs_write+0x61d/0xb90 [ 802.715389][T31668] ? __pfx_vfs_write+0x10/0x10 [ 802.715419][T31668] ? __fget_files+0x2a/0x420 [ 802.715460][T31668] ksys_write+0x150/0x270 [ 802.715486][T31668] ? __pfx_ksys_write+0x10/0x10 [ 802.715522][T31668] do_syscall_64+0x14d/0xf80 [ 802.715551][T31668] ? trace_irq_disable+0x3b/0x150 [ 802.715569][T31668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.715600][T31668] ? clear_bhb_loop+0x40/0x90 [ 802.715626][T31668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.715646][T31668] RIP: 0033:0x7f38ccb9c819 [ 802.715668][T31668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.715686][T31668] RSP: 002b:00007f38cdb1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 802.715710][T31668] RAX: ffffffffffffffda RBX: 00007f38cce16090 RCX: 00007f38ccb9c819 [ 802.715725][T31668] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 802.715738][T31668] RBP: 00007f38cdb1f090 R08: 0000000000000000 R09: 0000000000000000 [ 802.715752][T31668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.715764][T31668] R13: 00007f38cce16128 R14: 00007f38cce16090 R15: 00007ffec67f6228 [ 802.715798][T31668] [ 803.025857][T31670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8994'. [ 803.125234][T31682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8992'. [ 805.724806][T31717] __nla_validate_parse: 1 callbacks suppressed [ 805.724830][T31717] netlink: 136 bytes leftover after parsing attributes in process `syz.3.9008'. [ 805.740829][T31717] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 805.762869][T31725] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 806.212471][T31747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.321062][T31747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 806.377627][T31744] gretap2: entered promiscuous mode [ 806.401030][T31744] batman_adv: batadv0: Adding interface: gretap2 [ 806.423753][T31744] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 806.479602][T31744] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 806.589848][T31766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9022'. [ 806.766400][T31768] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 807.146010][T31784] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9029'. [ 807.159508][T31784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9029'. [ 807.169301][T31784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9029'. [ 807.208671][T31787] syzkaller0: entered promiscuous mode [ 807.235142][T31787] syzkaller0: entered allmulticast mode [ 807.704683][T31809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9035'. [ 807.736504][T31777] delete_channel: no stack [ 807.744947][T31809] FAULT_INJECTION: forcing a failure. [ 807.744947][T31809] name failslab, interval 1, probability 0, space 0, times 0 [ 807.789666][T31809] CPU: 0 UID: 0 PID: 31809 Comm: syz.1.9035 Not tainted syzkaller #0 PREEMPT(full) [ 807.789697][T31809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 807.789710][T31809] Call Trace: [ 807.789719][T31809] [ 807.789729][T31809] dump_stack_lvl+0xe8/0x150 [ 807.789765][T31809] should_fail_ex+0x412/0x560 [ 807.789802][T31809] should_failslab+0xa8/0x100 [ 807.789832][T31809] __kmalloc_cache_noprof+0x88/0x660 [ 807.789858][T31809] ? __hw_addr_add_ex+0x1dc/0x650 [ 807.789890][T31809] __hw_addr_add_ex+0x1dc/0x650 [ 807.789919][T31809] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 807.789956][T31809] dev_addr_init+0x15e/0x240 [ 807.789989][T31809] ? __pfx_dev_addr_init+0x10/0x10 [ 807.790019][T31809] ? alloc_netdev_mqs+0xa6/0x11b0 [ 807.790058][T31809] alloc_netdev_mqs+0x2b1/0x11b0 [ 807.790085][T31809] ? __pfx_macvlan_setup+0x10/0x10 [ 807.790119][T31809] rtnl_create_link+0x31f/0xd70 [ 807.790156][T31809] rtnl_newlink_create+0x277/0xb70 [ 807.790182][T31809] ? __pfx___nla_validate_parse+0x10/0x10 [ 807.790215][T31809] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 807.790246][T31809] ? __pfx___mutex_lock+0x10/0x10 [ 807.790288][T31809] ? ns_capable+0x89/0xe0 [ 807.790319][T31809] rtnl_newlink+0x1666/0x1be0 [ 807.790360][T31809] ? __pfx_rtnl_newlink+0x10/0x10 [ 807.790380][T31809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.790443][T31809] ? kasan_quarantine_put+0xbb/0x1f0 [ 807.790465][T31809] ? lockdep_hardirqs_on+0x7a/0x110 [ 807.790498][T31809] ? kmem_cache_free+0x187/0x630 [ 807.790520][T31809] ? nlmon_xmit+0xb0/0x100 [ 807.790559][T31809] ? __lock_acquire+0x6b5/0x2cf0 [ 807.790591][T31809] ? __local_bh_enable_ip+0xd0/0x130 [ 807.790618][T31809] ? lockdep_hardirqs_on+0x7a/0x110 [ 807.790653][T31809] ? __dev_queue_xmit+0x28b/0x3870 [ 807.790681][T31809] ? __local_bh_enable_ip+0xd0/0x130 [ 807.790705][T31809] ? __dev_queue_xmit+0x28b/0x3870 [ 807.790763][T31809] ? __pfx_rtnl_newlink+0x10/0x10 [ 807.790786][T31809] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 807.790814][T31809] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 807.790836][T31809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 807.790857][T31809] ? ref_tracker_free+0x693/0x840 [ 807.790875][T31809] ? __copy_skb_header+0xa3/0x4a0 [ 807.790905][T31809] ? __pfx_ref_tracker_free+0x10/0x10 [ 807.790938][T31809] netlink_rcv_skb+0x232/0x4b0 [ 807.790964][T31809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 807.790990][T31809] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 807.791026][T31809] ? netlink_deliver_tap+0x2e/0x1b0 [ 807.791059][T31809] netlink_unicast+0x80f/0x9b0 [ 807.791101][T31809] ? __pfx_netlink_unicast+0x10/0x10 [ 807.791136][T31809] ? netlink_sendmsg+0x650/0xb40 [ 807.791157][T31809] ? skb_put+0x11b/0x210 [ 807.791186][T31809] netlink_sendmsg+0x813/0xb40 [ 807.791220][T31809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.791248][T31809] ? aa_sock_msg_perm+0xf1/0x1b0 [ 807.791281][T31809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 807.791330][T31809] ____sys_sendmsg+0x972/0x9f0 [ 807.791370][T31809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.791407][T31809] ? import_iovec+0x73/0xa0 [ 807.791435][T31809] ___sys_sendmsg+0x2a5/0x360 [ 807.791469][T31809] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.791540][T31809] ? __fget_files+0x2a/0x420 [ 807.791570][T31809] ? __fget_files+0x3a0/0x420 [ 807.791611][T31809] __x64_sys_sendmsg+0x1bd/0x2a0 [ 807.791649][T31809] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 807.791686][T31809] ? rcu_is_watching+0x15/0xb0 [ 807.791729][T31809] do_syscall_64+0x14d/0xf80 [ 807.791756][T31809] ? trace_irq_disable+0x3b/0x150 [ 807.791774][T31809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.791794][T31809] ? clear_bhb_loop+0x40/0x90 [ 807.791821][T31809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.791840][T31809] RIP: 0033:0x7f3a8759c819 [ 807.791861][T31809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.791879][T31809] RSP: 002b:00007f3a8852b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.791903][T31809] RAX: ffffffffffffffda RBX: 00007f3a87815fa0 RCX: 00007f3a8759c819 [ 807.791919][T31809] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 807.791932][T31809] RBP: 00007f3a8852b090 R08: 0000000000000000 R09: 0000000000000000 [ 807.791946][T31809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 807.791958][T31809] R13: 00007f3a87816038 R14: 00007f3a87815fa0 R15: 00007ffda5825c28 [ 807.791994][T31809] [ 808.336339][T31819] mac80211_hwsim hwsim35 syzkaller0: Caught tx_queue_len zero misconfig [ 808.549520][ T6255] lec:lec_start_xmit: lec0:No lecd attached [ 808.851306][T31844] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9046'. [ 808.860865][T31844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9046'. [ 808.883697][T31844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9046'. [ 808.929154][ T1302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.939921][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 809.001945][T31849] netlink: 'syz.3.9050': attribute type 5 has an invalid length. [ 809.011733][T31849] netlink: 6 bytes leftover after parsing attributes in process `syz.3.9050'. [ 809.019473][T31853] netlink: 'syz.2.9051': attribute type 28 has an invalid length. [ 809.026201][T31849] netlink: 'syz.3.9050': attribute type 3 has an invalid length. [ 809.037519][T31849] netlink: 'syz.3.9050': attribute type 1 has an invalid length. [ 809.251657][T31866] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 809.361973][T31858] mac80211_hwsim hwsim50 syzkaller0: entered promiscuous mode [ 809.398641][T31858] mac80211_hwsim hwsim50 syzkaller0: entered allmulticast mode [ 809.659393][T31896] FAULT_INJECTION: forcing a failure. [ 809.659393][T31896] name failslab, interval 1, probability 0, space 0, times 0 [ 809.688098][T31896] CPU: 0 UID: 0 PID: 31896 Comm: syz.1.9061 Not tainted syzkaller #0 PREEMPT(full) [ 809.688131][T31896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 809.688144][T31896] Call Trace: [ 809.688153][T31896] [ 809.688163][T31896] dump_stack_lvl+0xe8/0x150 [ 809.688199][T31896] should_fail_ex+0x412/0x560 [ 809.688236][T31896] should_failslab+0xa8/0x100 [ 809.688262][T31896] ? skb_clone+0x212/0x3a0 [ 809.688290][T31896] kmem_cache_alloc_noprof+0x87/0x650 [ 809.688312][T31896] ? __netlink_lookup+0xc6/0x8b0 [ 809.688345][T31896] skb_clone+0x212/0x3a0 [ 809.688377][T31896] __netlink_deliver_tap+0x404/0x850 [ 809.688415][T31896] ? netlink_deliver_tap+0x2e/0x1b0 [ 809.688438][T31896] netlink_deliver_tap+0x19c/0x1b0 [ 809.688463][T31896] netlink_unicast+0x7e3/0x9b0 [ 809.688504][T31896] ? __pfx_netlink_unicast+0x10/0x10 [ 809.688537][T31896] ? netlink_sendmsg+0x650/0xb40 [ 809.688566][T31896] ? skb_put+0x11b/0x210 [ 809.688595][T31896] netlink_sendmsg+0x813/0xb40 [ 809.688630][T31896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.688657][T31896] ? aa_sock_msg_perm+0xf1/0x1b0 [ 809.688691][T31896] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 809.688719][T31896] ____sys_sendmsg+0x972/0x9f0 [ 809.688758][T31896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.688796][T31896] ? import_iovec+0x73/0xa0 [ 809.688823][T31896] ___sys_sendmsg+0x2a5/0x360 [ 809.688857][T31896] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.688925][T31896] ? __fget_files+0x2a/0x420 [ 809.688955][T31896] ? __fget_files+0x3a0/0x420 [ 809.688997][T31896] __x64_sys_sendmsg+0x1bd/0x2a0 [ 809.689028][T31896] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 809.689067][T31896] ? __pfx_ksys_write+0x10/0x10 [ 809.689110][T31896] do_syscall_64+0x14d/0xf80 [ 809.689138][T31896] ? trace_irq_disable+0x3b/0x150 [ 809.689157][T31896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.689178][T31896] ? clear_bhb_loop+0x40/0x90 [ 809.689204][T31896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.689225][T31896] RIP: 0033:0x7f3a8759c819 [ 809.689246][T31896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.689265][T31896] RSP: 002b:00007f3a8850a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.689289][T31896] RAX: ffffffffffffffda RBX: 00007f3a87816090 RCX: 00007f3a8759c819 [ 809.689304][T31896] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 809.689318][T31896] RBP: 00007f3a8850a090 R08: 0000000000000000 R09: 0000000000000000 [ 809.689331][T31896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.689344][T31896] R13: 00007f3a87816128 R14: 00007f3a87816090 R15: 00007ffda5825c28 [ 809.689379][T31896] [ 810.153395][T31908] netlink: 'syz.0.9065': attribute type 5 has an invalid length. [ 810.198602][T31908] netlink: 'syz.0.9065': attribute type 3 has an invalid length. [ 810.211396][T31908] netlink: 'syz.0.9065': attribute type 1 has an invalid length. [ 810.478422][T31918] xt_hashlimit: size too large, truncated to 1048576 [ 810.485714][T31918] xt_hashlimit: invalid interval [ 811.110901][T31961] __nla_validate_parse: 2 callbacks suppressed [ 811.110927][T31961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9082'. [ 811.401803][T31972] netlink: 120 bytes leftover after parsing attributes in process `syz.3.9086'. [ 811.429306][T31972] netlink: 'syz.3.9086': attribute type 1 has an invalid length. [ 811.450001][T31972] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9086'. [ 811.461361][T31979] FAULT_INJECTION: forcing a failure. [ 811.461361][T31979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 811.476908][T31979] CPU: 1 UID: 0 PID: 31979 Comm: syz.2.9090 Not tainted syzkaller #0 PREEMPT(full) [ 811.476938][T31979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 811.476951][T31979] Call Trace: [ 811.476960][T31979] [ 811.476969][T31979] dump_stack_lvl+0xe8/0x150 [ 811.477003][T31979] should_fail_ex+0x412/0x560 [ 811.477037][T31979] _copy_from_iter+0x1d3/0x1670 [ 811.477070][T31979] ? rcu_is_watching+0x15/0xb0 [ 811.477107][T31979] ? __pfx__copy_from_iter+0x10/0x10 [ 811.477144][T31979] ? netlink_sendmsg+0x650/0xb40 [ 811.477167][T31979] ? skb_put+0x11b/0x210 [ 811.477196][T31979] netlink_sendmsg+0x6c0/0xb40 [ 811.477229][T31979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.477257][T31979] ? aa_sock_msg_perm+0xf1/0x1b0 [ 811.477289][T31979] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 811.477327][T31979] ____sys_sendmsg+0x972/0x9f0 [ 811.477364][T31979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 811.477401][T31979] ? import_iovec+0x73/0xa0 [ 811.477428][T31979] ___sys_sendmsg+0x2a5/0x360 [ 811.477460][T31979] ? __pfx____sys_sendmsg+0x10/0x10 [ 811.477525][T31979] ? __fget_files+0x2a/0x420 [ 811.477555][T31979] ? __fget_files+0x3a0/0x420 [ 811.477597][T31979] __x64_sys_sendmsg+0x1bd/0x2a0 [ 811.477628][T31979] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 811.477671][T31979] ? __pfx_ksys_write+0x10/0x10 [ 811.477705][T31979] do_syscall_64+0x14d/0xf80 [ 811.477746][T31979] ? trace_irq_disable+0x3b/0x150 [ 811.477764][T31979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.477785][T31979] ? clear_bhb_loop+0x40/0x90 [ 811.477811][T31979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.477832][T31979] RIP: 0033:0x7fb6c6b9c819 [ 811.477852][T31979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.477871][T31979] RSP: 002b:00007fb6c7a27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.477894][T31979] RAX: ffffffffffffffda RBX: 00007fb6c6e15fa0 RCX: 00007fb6c6b9c819 [ 811.477910][T31979] RDX: 00000000000008c0 RSI: 0000200000000200 RDI: 0000000000000004 [ 811.477924][T31979] RBP: 00007fb6c7a27090 R08: 0000000000000000 R09: 0000000000000000 [ 811.477937][T31979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.477950][T31979] R13: 00007fb6c6e16038 R14: 00007fb6c6e15fa0 R15: 00007fff97170138 [ 811.477984][T31979] [ 811.774048][T31983] bond9: entered promiscuous mode [ 811.801856][T31983] 8021q: adding VLAN 0 to HW filter on device bond9 [ 811.890977][T31989] netlink: 'syz.0.9091': attribute type 1 has an invalid length. [ 811.947868][T31989] netlink: 248 bytes leftover after parsing attributes in process `syz.0.9091'. [ 811.973202][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 811.983453][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 811.996484][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 812.019253][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 812.027478][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 812.136240][T31992] lo speed is unknown, defaulting to 1000 [ 812.360509][T32013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9096'. [ 812.386765][T32014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9099'. [ 812.452124][T32018] x_tables: duplicate underflow at hook 3 [ 812.596312][T31992] chnl_net:caif_netlink_parms(): no params data found [ 812.709744][T32027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9101'. [ 812.796360][T32033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9101'. [ 812.826034][T32027] 8021q: adding VLAN 0 to HW filter on device bond8 [ 812.881109][T32032] pimreg: tun_chr_ioctl cmd 35108 [ 812.958446][T31992] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.983429][T32037] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9101'. [ 812.993710][T31992] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.041693][T31992] bridge_slave_0: entered allmulticast mode [ 813.060946][T31992] bridge_slave_0: entered promiscuous mode [ 813.094760][T31992] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.132874][T31992] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.155895][T31992] bridge_slave_1: entered allmulticast mode [ 813.195515][T31992] bridge_slave_1: entered promiscuous mode [ 813.262945][T32041] netlink: 136 bytes leftover after parsing attributes in process `syz.4.9104'. [ 813.321592][T32041] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 813.423325][T32039] bond4: (slave bond_slave_1): Device is not our slave [ 813.435973][T32039] bond4: option active_slave: invalid value (bond_slave_1) [ 813.449460][T32039] bond4 (unregistering): Released all slaves [ 813.501425][T31992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.570512][T31992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.660289][T31992] team0: Port device team_slave_0 added [ 813.671495][T31992] team0: Port device team_slave_1 added [ 813.678012][T32064] netlink: 'syz.2.9110': attribute type 8 has an invalid length. [ 813.689717][T32064] x_tables: duplicate underflow at hook 4 [ 813.781027][T31992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.796225][T31992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.823669][T31992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.843225][T31992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.856829][T31992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.883770][T31992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.907096][T32073] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 813.960077][T31992] hsr_slave_0: entered promiscuous mode [ 813.971988][T31992] hsr_slave_1: entered promiscuous mode [ 813.979210][T31992] debugfs: 'hsr0' already exists in 'hsr' [ 813.985523][T31992] Cannot create hsr debugfs directory [ 814.048460][ T5159] block nbd5: Possible stuck request ffff888027058000: control (read@0,1024B). Runtime 60 seconds [ 814.059692][ T5159] block nbd5: Possible stuck request ffff888027058200: control (read@1024,1024B). Runtime 60 seconds [ 814.070907][ T5159] block nbd5: Possible stuck request ffff888027058400: control (read@2048,1024B). Runtime 60 seconds [ 814.092647][T32075] xt_hashlimit: size too large, truncated to 1048576 [ 814.099990][ T5159] block nbd5: Possible stuck request ffff888027058600: control (read@3072,1024B). Runtime 60 seconds [ 814.124420][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 814.124999][ T5832] Bluetooth: hci0: command tx timeout [ 814.132462][ C1] lec:lec_tx_timeout: lec0 [ 814.132811][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 814.165211][T21765] bridge_slave_1: left allmulticast mode [ 814.177800][T21765] bridge_slave_1: left promiscuous mode [ 814.191016][T21765] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.208230][T21765] bridge_slave_0: left allmulticast mode [ 814.219009][T21765] bridge_slave_0: left promiscuous mode [ 814.225015][T21765] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.556649][T21765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.567434][T21765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.577974][T21765] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 814.590309][T21765] bond0 (unregistering): Released all slaves [ 814.606184][T21765] bond1 (unregistering): (slave lo): Releasing backup interface [ 814.617972][T21765] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 814.630446][T21765] bond1 (unregistering): Released all slaves [ 814.655271][T21765] bond2 (unregistering): Released all slaves [ 814.691670][T21765] bond3 (unregistering): (slave veth3): Releasing active interface [ 814.710970][T21765] bond3 (unregistering): Released all slaves [ 814.746008][T32085] tunl0: Caught tx_queue_len zero misconfig [ 814.978811][T21765] tipc: Disabling bearer [ 814.986759][T21765] tipc: Disabling bearer [ 814.999200][T21765] tipc: Left network mode [ 815.578479][T32117] netlink: 'syz.3.9129': attribute type 1 has an invalid length. [ 815.702689][T21765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.736428][T21765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.003759][T21765] team0 (unregistering): Port device team_slave_1 removed [ 816.020405][T21765] team0 (unregistering): Port device team_slave_0 removed [ 816.133309][T21765] team0 (unregistering): Port device dummy0 removed [ 816.171140][T32140] __nla_validate_parse: 6 callbacks suppressed [ 816.171162][T32140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9135'. [ 816.204498][ T5832] Bluetooth: hci0: command tx timeout [ 816.381438][T32132] lo speed is unknown, defaulting to 1000 [ 816.427313][T32144] FAULT_INJECTION: forcing a failure. [ 816.427313][T32144] name failslab, interval 1, probability 0, space 0, times 0 [ 816.467756][T32144] CPU: 0 UID: 0 PID: 32144 Comm: syz.0.9136 Not tainted syzkaller #0 PREEMPT(full) [ 816.467787][T32144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 816.467800][T32144] Call Trace: [ 816.467810][T32144] [ 816.467819][T32144] dump_stack_lvl+0xe8/0x150 [ 816.467855][T32144] should_fail_ex+0x412/0x560 [ 816.467891][T32144] should_failslab+0xa8/0x100 [ 816.467921][T32144] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 816.467948][T32144] ? __alloc_skb+0x1d0/0x7d0 [ 816.467970][T32144] ? __local_bh_enable_ip+0xd0/0x130 [ 816.468002][T32144] __alloc_skb+0x1d0/0x7d0 [ 816.468033][T32144] ctrl_getfamily+0x3d0/0x5c0 [ 816.468063][T32144] ? __pfx_ctrl_getfamily+0x10/0x10 [ 816.468090][T32144] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 816.468125][T32144] genl_family_rcv_msg_doit+0x22a/0x330 [ 816.468153][T32144] ? __asan_memcpy+0x40/0x70 [ 816.468176][T32144] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 816.468221][T32144] ? __lock_acquire+0x6b5/0x2cf0 [ 816.468254][T32144] genl_rcv_msg+0x61c/0x7a0 [ 816.468288][T32144] ? __pfx_genl_rcv_msg+0x10/0x10 [ 816.468315][T32144] ? __pfx_ctrl_getfamily+0x10/0x10 [ 816.468341][T32144] ? __lock_acquire+0x6b5/0x2cf0 [ 816.468377][T32144] netlink_rcv_skb+0x232/0x4b0 [ 816.468401][T32144] ? __pfx_genl_rcv_msg+0x10/0x10 [ 816.468429][T32144] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 816.468473][T32144] ? down_read+0x272/0x2e0 [ 816.468492][T32144] ? genl_rcv+0xd/0x40 [ 816.468520][T32144] genl_rcv+0x28/0x40 [ 816.468546][T32144] netlink_unicast+0x80f/0x9b0 [ 816.468586][T32144] ? __pfx_netlink_unicast+0x10/0x10 [ 816.468630][T32144] ? netlink_sendmsg+0x650/0xb40 [ 816.468652][T32144] ? skb_put+0x11b/0x210 [ 816.468688][T32144] netlink_sendmsg+0x813/0xb40 [ 816.468723][T32144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.468751][T32144] ? aa_sock_msg_perm+0xf1/0x1b0 [ 816.468784][T32144] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 816.468808][T32144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.468833][T32144] __sys_sendto+0x672/0x710 [ 816.468862][T32144] ? __pfx___sys_sendto+0x10/0x10 [ 816.468916][T32144] ? fd_install+0x94/0x3d0 [ 816.468945][T32144] ? fd_install+0x306/0x3d0 [ 816.468983][T32144] __x64_sys_sendto+0xde/0x100 [ 816.469013][T32144] do_syscall_64+0x14d/0xf80 [ 816.469041][T32144] ? trace_irq_disable+0x3b/0x150 [ 816.469059][T32144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.469080][T32144] ? clear_bhb_loop+0x40/0x90 [ 816.469106][T32144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.469126][T32144] RIP: 0033:0x7f88c0b5d04e [ 816.469147][T32144] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 816.469166][T32144] RSP: 002b:00007f88c1acbe58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 816.469190][T32144] RAX: ffffffffffffffda RBX: 00007f88c1acd6c0 RCX: 00007f88c0b5d04e [ 816.469206][T32144] RDX: 0000000000000028 RSI: 00007f88c1acbfe0 RDI: 0000000000000005 [ 816.469220][T32144] RBP: 0000000000000000 R08: 00007f88c1acbed4 R09: 000000000000000c [ 816.469234][T32144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 816.469247][T32144] R13: 00007f88c1acbf28 R14: 00007f88c1acbfe0 R15: 0000000000000000 [ 816.469283][T32144] [ 816.808738][T32143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.902933][T31992] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 817.132872][T32157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9140'. [ 817.150253][T31992] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 817.169481][T31992] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 817.199635][T32157] vlan3: entered promiscuous mode [ 817.205323][T32157] bridge0: entered promiscuous mode [ 817.213812][T21765] IPVS: stop unused estimator thread 0... [ 817.225694][T31992] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 817.459016][T31992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.513916][T31992] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.548413][T21765] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.555655][T21765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.591316][T21765] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.598557][T21765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.704175][T32178] openvswitch: netlink: IP tunnel TTL not specified. [ 817.946927][ T29] audit: type=1107 audit(1774973386.969:2): pid=32192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 818.024299][T32198] netlink: 'syz.2.9152': attribute type 16 has an invalid length. [ 818.032661][T32198] netlink: 'syz.2.9152': attribute type 17 has an invalid length. [ 818.033709][T32191] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9150'. [ 818.054787][T32191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9150'. [ 818.100699][T32198] batman_adv: batadv0: Interface activated: vlan2 [ 818.127173][T32198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.139744][T32198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 818.158770][T31124] lo speed is unknown, defaulting to 1000 [ 818.165165][T31124] syz2: Port: 1 Link ACTIVE [ 818.218586][T31992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.285298][ T5832] Bluetooth: hci0: command tx timeout [ 818.349455][T32210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9155'. [ 818.399609][T32216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9157'. [ 818.412063][T32215] netlink: 260 bytes leftover after parsing attributes in process `syz.0.9156'. [ 818.417401][T31992] veth0_vlan: entered promiscuous mode [ 818.505918][T31992] veth1_vlan: entered promiscuous mode [ 818.601544][T32226] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9159'. [ 818.616900][T31992] veth0_macvtap: entered promiscuous mode [ 818.647695][T31992] veth1_macvtap: entered promiscuous mode [ 818.723873][T31992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.787344][T31992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.812230][T32233] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9162'. [ 818.859053][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.884033][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.906880][T32239] ip6tnl0: Caught tx_queue_len zero misconfig [ 818.940409][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.033351][T32245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9165'. [ 819.065588][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.154683][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 819.162803][ C1] lec:lec_tx_timeout: lec0 [ 819.463115][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.503432][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.653586][T32270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.681899][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.691069][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.078577][T32281] [ 820.081006][T32281] ====================================================== [ 820.088052][T32281] WARNING: possible circular locking dependency detected [ 820.095101][T32281] syzkaller #0 Not tainted [ 820.099722][T32281] ------------------------------------------------------ [ 820.106849][T32281] syz.1.9093/32281 is trying to acquire lock: [ 820.112942][T32281] ffffffff8fd45318 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 820.122373][T32281] [ 820.122373][T32281] but task is already holding lock: [ 820.129846][T32281] ffff8880389a0b70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 820.139292][T32281] [ 820.139292][T32281] which lock already depends on the new lock. [ 820.139292][T32281] [ 820.149726][T32281] [ 820.149726][T32281] the existing dependency chain (in reverse order) is: [ 820.158856][T32281] [ 820.158856][T32281] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 820.166980][T32281] _raw_spin_lock_bh+0x36/0x50 [ 820.172306][T32281] nr_rt_device_down+0x153/0x860 [ 820.177804][T32281] nr_device_event+0x137/0x150 [ 820.183138][T32281] notifier_call_chain+0x1be/0x400 [ 820.188818][T32281] __dev_notify_flags+0x16d/0x310 [ 820.194404][T32281] netif_change_flags+0xe8/0x1a0 [ 820.199904][T32281] dev_change_flags+0x130/0x260 [ 820.205391][T32281] dev_ioctl+0x7b4/0x1150 [ 820.210273][T32281] sock_do_ioctl+0x23e/0x320 [ 820.215450][T32281] sock_ioctl+0x5c6/0x7f0 [ 820.220342][T32281] __se_sys_ioctl+0xfc/0x170 [ 820.225491][T32281] do_syscall_64+0x14d/0xf80 [ 820.230646][T32281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.237179][T32281] [ 820.237179][T32281] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 820.245038][T32281] _raw_spin_lock_bh+0x36/0x50 [ 820.250365][T32281] nr_rt_device_down+0xbe/0x860 [ 820.255780][T32281] nr_device_event+0x137/0x150 [ 820.261215][T32281] notifier_call_chain+0x1be/0x400 [ 820.266878][T32281] __dev_notify_flags+0x16d/0x310 [ 820.272434][T32281] netif_change_flags+0xe8/0x1a0 [ 820.277927][T32281] dev_change_flags+0x130/0x260 [ 820.283321][T32281] dev_ioctl+0x7b4/0x1150 [ 820.288211][T32281] sock_do_ioctl+0x23e/0x320 [ 820.293333][T32281] sock_ioctl+0x5c6/0x7f0 [ 820.298225][T32281] __se_sys_ioctl+0xfc/0x170 [ 820.303347][T32281] do_syscall_64+0x14d/0xf80 [ 820.308470][T32281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.314973][T32281] [ 820.314973][T32281] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 820.322899][T32281] __lock_acquire+0x15a5/0x2cf0 [ 820.328274][T32281] lock_acquire+0xf0/0x2e0 [ 820.333219][T32281] _raw_spin_lock_bh+0x36/0x50 [ 820.338509][T32281] nr_remove_neigh+0x25/0xe0 [ 820.343720][T32281] nr_add_node+0x1e41/0x2630 [ 820.348944][T32281] nr_rt_ioctl+0xe59/0xf90 [ 820.354007][T32281] sock_do_ioctl+0x101/0x320 [ 820.359155][T32281] sock_ioctl+0x5c6/0x7f0 [ 820.364029][T32281] __se_sys_ioctl+0xfc/0x170 [ 820.369254][T32281] do_syscall_64+0x14d/0xf80 [ 820.374416][T32281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.380928][T32281] [ 820.380928][T32281] other info that might help us debug this: [ 820.380928][T32281] [ 820.391262][T32281] Chain exists of: [ 820.391262][T32281] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 820.391262][T32281] [ 820.405330][T32281] Possible unsafe locking scenario: [ 820.405330][T32281] [ 820.412780][T32281] CPU0 CPU1 [ 820.418242][T32281] ---- ---- [ 820.423696][T32281] lock(&nr_node->node_lock); [ 820.428467][T32281] lock(nr_node_list_lock); [ 820.435588][T32281] lock(&nr_node->node_lock); [ 820.442873][T32281] lock(nr_neigh_list_lock); [ 820.447553][T32281] [ 820.447553][T32281] *** DEADLOCK *** [ 820.447553][T32281] [ 820.455903][T32281] 1 lock held by syz.1.9093/32281: [ 820.461027][T32281] #0: ffff8880389a0b70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 820.471163][T32281] [ 820.471163][T32281] stack backtrace: [ 820.477074][T32281] CPU: 0 UID: 0 PID: 32281 Comm: syz.1.9093 Not tainted syzkaller #0 PREEMPT(full) [ 820.477099][T32281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 820.477110][T32281] Call Trace: [ 820.477120][T32281] [ 820.477128][T32281] dump_stack_lvl+0xe8/0x150 [ 820.477156][T32281] print_circular_bug+0x2e1/0x300 [ 820.477186][T32281] check_noncircular+0x12e/0x150 [ 820.477216][T32281] __lock_acquire+0x15a5/0x2cf0 [ 820.477249][T32281] ? __lock_acquire+0x6b5/0x2cf0 [ 820.477275][T32281] lock_acquire+0xf0/0x2e0 [ 820.477299][T32281] ? nr_remove_neigh+0x25/0xe0 [ 820.477328][T32281] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 820.477350][T32281] ? nr_remove_neigh+0x25/0xe0 [ 820.477375][T32281] _raw_spin_lock_bh+0x36/0x50 [ 820.477401][T32281] ? nr_remove_neigh+0x25/0xe0 [ 820.477424][T32281] nr_remove_neigh+0x25/0xe0 [ 820.477450][T32281] nr_add_node+0x1e41/0x2630 [ 820.477477][T32281] ? nr_call_to_digi+0x126/0x1b0 [ 820.477501][T32281] nr_rt_ioctl+0xe59/0xf90 [ 820.477529][T32281] ? kasan_quarantine_put+0xbb/0x1f0 [ 820.477552][T32281] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 820.477580][T32281] ? apparmor_capable+0x126/0x170 [ 820.477616][T32281] ? capable+0x88/0xe0 [ 820.477644][T32281] ? nr_ioctl+0x1b1/0x3b0 [ 820.477664][T32281] sock_do_ioctl+0x101/0x320 [ 820.477695][T32281] ? __pfx_sock_do_ioctl+0x10/0x10 [ 820.477721][T32281] ? do_futex+0x395/0x420 [ 820.477751][T32281] sock_ioctl+0x5c6/0x7f0 [ 820.477780][T32281] ? __pfx_sock_ioctl+0x10/0x10 [ 820.477809][T32281] ? __fget_files+0x2a/0x420 [ 820.477837][T32281] ? __fget_files+0x3a0/0x420 [ 820.477863][T32281] ? __fget_files+0x2a/0x420 [ 820.477894][T32281] ? bpf_lsm_file_ioctl+0x9/0x20 [ 820.477916][T32281] ? __pfx_sock_ioctl+0x10/0x10 [ 820.477940][T32281] __se_sys_ioctl+0xfc/0x170 [ 820.477966][T32281] do_syscall_64+0x14d/0xf80 [ 820.477989][T32281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.478005][T32281] ? clear_bhb_loop+0x40/0x90 [ 820.478023][T32281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.478038][T32281] RIP: 0033:0x7f5e6ed9c819 [ 820.478054][T32281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.478068][T32281] RSP: 002b:00007f5e6fbc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.478088][T32281] RAX: ffffffffffffffda RBX: 00007f5e6f015fa0 RCX: 00007f5e6ed9c819 [ 820.478101][T32281] RDX: 00002000000001c0 RSI: 000000000000890b RDI: 000000000000000b [ 820.478112][T32281] RBP: 00007f5e6ee32c91 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 820.478122][T32281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.478132][T32281] R13: 00007f5e6f016038 R14: 00007f5e6f015fa0 R15: 00007ffe6725f128 [ 820.478150][T32281] [ 820.755937][ T5832] Bluetooth: hci0: command tx timeout [ 820.950596][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 820.963166][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 820.972309][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 820.980341][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 820.988403][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 821.130109][T32295] lo speed is unknown, defaulting to 1000 [ 821.586251][T32295] chnl_net:caif_netlink_parms(): no params data found [ 821.633299][T32295] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.640506][T32295] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.648489][T32295] bridge_slave_0: entered allmulticast mode [ 821.657236][T32295] bridge_slave_0: entered promiscuous mode [ 821.665784][T32295] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.672937][T32295] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.681384][T32295] bridge_slave_1: entered allmulticast mode [ 821.688450][T32295] bridge_slave_1: entered promiscuous mode [ 821.709343][T32295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.720411][T32295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.741844][T32295] team0: Port device team_slave_0 added [ 821.749045][T32295] team0: Port device team_slave_1 added [ 821.765421][T32295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.772402][T32295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.801561][T32295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.817868][T32295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.825121][T32295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.851672][T32295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.886153][T32295] hsr_slave_0: entered promiscuous mode [ 821.892360][T32295] hsr_slave_1: entered promiscuous mode [ 821.898911][T32295] debugfs: 'hsr0' already exists in 'hsr' [ 821.906161][T32295] Cannot create hsr debugfs directory [ 822.021981][ T12] bridge_slave_1: left allmulticast mode [ 822.029901][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.038569][ T12] bridge_slave_0: left allmulticast mode [ 822.044221][ T12] bridge_slave_0: left promiscuous mode [ 822.050683][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.152062][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.162053][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.171572][ T12] bond0 (unregistering): Released all slaves [ 822.430846][ T12] hsr_slave_0: left promiscuous mode [ 822.441173][ T12] hsr_slave_1: left promiscuous mode [ 822.451551][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.459962][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.567385][ T12] team0 (unregistering): Port device team_slave_1 removed [ 822.583425][ T12] team0 (unregistering): Port device team_slave_0 removed [ 822.703086][T32295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 822.715651][T32295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 822.726263][T32295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 822.738726][T32295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 822.882675][T32295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.922566][T32295] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.939865][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.947116][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.971462][ T12] IPVS: stop unused estimator thread 0... [ 822.980037][ T131] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.987234][ T131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.084757][ T5832] Bluetooth: hci5: command tx timeout [ 823.116674][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.183400][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.228460][T32295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.260915][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.299443][T32295] veth0_vlan: entered promiscuous mode [ 823.319202][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.337676][T32295] veth1_vlan: entered promiscuous mode [ 823.410711][T32295] veth0_macvtap: entered promiscuous mode [ 823.432376][T32295] veth1_macvtap: entered promiscuous mode [ 823.441745][ T12] bridge_slave_1: left allmulticast mode [ 823.447841][ T12] bridge_slave_1: left promiscuous mode [ 823.453836][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.463851][ T12] bridge_slave_0: left allmulticast mode [ 823.470669][ T12] bridge_slave_0: left promiscuous mode [ 823.477746][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.588548][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.599167][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.609166][ T12] bond0 (unregistering): Released all slaves [ 823.628706][T32295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.647581][T32295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.675231][T21769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.684184][T21769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.731650][T21769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.744739][T21769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.754860][T32295] ieee80211 phy61: Selected rate control algorithm 'minstrel_ht' [ 823.809303][T21769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.810784][T32295] ieee80211 phy62: Selected rate control algorithm 'minstrel_ht' [ 823.840417][T21769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.884290][ T12] hsr_slave_0: left promiscuous mode [ 823.893281][ T12] hsr_slave_1: left promiscuous mode [ 823.900159][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.909139][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.922114][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.930091][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.946781][ T12] veth1_macvtap: left promiscuous mode [ 823.955475][ T12] veth0_macvtap: left promiscuous mode [ 823.961156][ T12] veth1_vlan: left promiscuous mode [ 823.968805][ T12] veth0_vlan: left promiscuous mode [ 824.119271][ T12] team0 (unregistering): Port device team_slave_1 removed [ 824.130622][ T12] team0 (unregistering): Port device team_slave_0 removed [ 824.188909][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.197423][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.775969][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.958727][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.018830][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.058641][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.145809][ T13] bridge_slave_1: left allmulticast mode [ 827.151529][ T13] bridge_slave_1: left promiscuous mode [ 827.158558][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.167249][ T13] bridge_slave_0: left allmulticast mode [ 827.172909][ T13] bridge_slave_0: left promiscuous mode [ 827.178818][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.271164][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.281663][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.291968][ T13] bond0 (unregistering): Released all slaves [ 827.505901][ T13] hsr_slave_0: left promiscuous mode [ 827.513075][ T13] hsr_slave_1: left promiscuous mode [ 827.519507][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 827.530454][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.547338][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.555178][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.568923][ T13] veth1_macvtap: left promiscuous mode [ 827.574528][ T13] veth0_macvtap: left promiscuous mode [ 827.580170][ T13] veth1_vlan: left promiscuous mode [ 827.586332][ T13] veth0_vlan: left promiscuous mode [ 827.678682][ T13] team0 (unregistering): Port device team_slave_1 removed [ 827.689132][ T13] team0 (unregistering): Port device team_slave_0 removed