last executing test programs: 13.918550085s ago: executing program 4 (id=1170): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 7.639085019s ago: executing program 0 (id=1194): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c4, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x80}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0xb}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x11, 0x4}, {0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf83e}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0xc}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0xe}, {0x5}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000001}, 0x81) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x274, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x711d}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8eee}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x274}}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x90, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bd62f4cbb42d7b99d556e12166ae1e98163b34d0502a547a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x885}, 0x4000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x2, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffaf}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40805) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=@bridge_delvlan={0x3c, 0x71, 0x1, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xa}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008014}, 0x4000000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a80), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004050}, 0x10) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000b80)={'nicvf0\x00', {0x2, 0x4e20, @broadcast}}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', r4, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x17, 0x3, 0x4, 0x0, 0x41086, r7, 0xfffffb15, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000cc0), 0x200000, 0x0) ioctl$PPPIOCDISCONN(r9, 0x7439) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000d40)=[@in6={0xa, 0x4e24, 0x70000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, @in6={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0x800}, @in6={0xa, 0x4e24, 0x9, @mcast1}, @in6={0xa, 0x4e23, 0x680a, @loopback, 0x6}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @loopback}], 0x90) getsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f80)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x6, '\x00', r4, r11, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x9, 0x5, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x10}]}, &(0x7f0000000ec0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000f00)=""/4096, 0x41000, 0x8, '\x00', r4, @fallback=0x2d, r10, 0x8, &(0x7f0000001f00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001f40)={0x5, 0x3, 0x7, 0x7f}, 0x10, 0x0, r10, 0x5, &(0x7f0000002000)=[r12, r11], &(0x7f0000002040)=[{0x1, 0x2, 0xf, 0x3}, {0x1, 0x1, 0xe, 0xa}, {0x4, 0x3, 0x2, 0x7}, {0x4, 0x2, 0x5, 0x2}, {0x1, 0x4, 0x3, 0x9}], 0x10, 0x2}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000026c0)={r11, 0x20, &(0x7f0000002680)={&(0x7f0000002480)=""/194, 0xc2, 0x0, &(0x7f0000002580)=""/202, 0xca}}, 0x10) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xc, 0xd927, 0x0, 0xe, 0x1a9f4, r10, 0x4, '\x00', r4, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0x0, @value=r11, @void, @value=r6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0x4, 0x40, &(0x7f0000002180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffff5a7}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@alu={0x4, 0x0, 0xc, 0x8, 0x0, 0x18, 0xffffffffffffffec}, @call={0x85, 0x0, 0x0, 0x8e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @exit, @map_idx_val={0x18, 0x1a, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002380)='syzkaller\x00', 0xccdd, 0x4d, &(0x7f00000023c0)=""/77, 0x41100, 0x0, '\x00', r4, @fallback=0xf, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002440)={0x3, 0x5, 0x0, 0xd6e2}, 0x10, r13, 0xffffffffffffffff, 0x7, &(0x7f0000002780)=[r8, r7, r12, r14], &(0x7f00000027c0)=[{0x5, 0x4, 0x3, 0x7}, {0x4, 0x1, 0xe, 0xc}, {0x1, 0x1, 0x0, 0x3}, {0x3, 0x3, 0x1, 0x8}, {0x3, 0x4, 0x3, 0x9}, {0x0, 0x1, 0x8, 0x2}, {0x5, 0x2, 0xf, 0x7}]}, 0x94) sendto$inet6(r10, &(0x7f0000002900)="243d47d22e7101c50967962b436a89fc824c4a2291ed18fdc50bfc77a6bc969d41a7ab2c753eb118cabe9aef5a6ef157", 0x30, 0x0, &(0x7f0000002940)={0xa, 0x4e23, 0x3, @remote, 0x200}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x342, &(0x7f0000002980)={@local, @broadcast, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x4}, {0x8}, {0x800}], @ipv6=@udp={0x4, 0x6, "670df7", 0x2f4, 0x11, 0xff, @loopback, @remote, {[@dstopts={0x3b, 0x21, '\x00', [@jumbo={0xc2, 0x4, 0xa4}, @ra={0x5, 0x2, 0xa90e}, @generic={0x0, 0xf0, "b116442869321c42aee0229c49666f0a6110b0df0b2015df307885b4d61c1b513ab1dc4af9645783cd682d153de425146cfffd22dac9b74d2ea933b0d7d1882adcb5a86cc790e0e3cf0406f537749251b5e7bae0deb8e299b5dc7d3e231118a58c69f362f09fb7a4fbefb664995dcdf0a39e0486eb40400723d4de227a4ad673bd5d301852e86d295949babc7c4f47c85399e0252df454fd4309f92ff77d26395797867a9199c35c0170b6f0c8fe436825a82d87872094014adae9126b251cf5e2de8a4662779fbd64b48954f152e828d62fc5b9175ad636eff41ee6e4713b722bf98358b2c726b03e6e8e441bcbcdd5"}, @hao={0xc9, 0x10, @loopback}]}, @routing={0x5c, 0x2, 0x0, 0x4, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @dstopts={0x6c, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x1}]}, @routing={0x0, 0x10, 0x0, 0x6, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1c}, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x1a}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1]}, @srh={0x1, 0x6, 0x4, 0x3, 0x10, 0x40, 0x5, [@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @private2]}, @hopopts={0x3c, 0x4, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0xfffa, [0xffffffff, 0x1, 0x9]}}]}, @routing={0xc, 0x8, 0x2, 0x5, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @fragment={0x84, 0x0, 0x2, 0x1, 0x0, 0x0, 0x67}], {0x4e20, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "1a0f98b08822f9c60a9229c54c5fa0997d53d03e743ede1ed2240b1866a803ad", "39eb59edd6cb125fd27377e696766890", {"a1c535b20be54067a16b4012ad9d6bb3", "ed529bb2f9e351db0ac81da63e90bf23"}}}}}}}}}, &(0x7f0000002d00)={0x0, 0x2, [0x78f, 0xbc2, 0xa96, 0xf6c]}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 7.232296203s ago: executing program 0 (id=1197): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x400, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0xffff, 0x3}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x101, "b93b079db356595d6366e49ed76eb3b4"}}}]}, 0x48}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r5 = socket(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000110010002bbd7000ffdbdf250700000055f3b2f99f0b2ea69869c9c961a2973404b9ec4d4ff79632204ccc2ae0ef174c1151f6fb16fd8130dec3f126489f88330638a500b5e49d797d422b2692a063b525f43e1b12b8b25708e615e5ea3de7c8e1aecdf5737c5c465fb057a12237189dc5125c9fcd378c0188ff9eea433466e22be18902617779d88e5a3939d653a9179d1445c47071da36a24142bb6f7cf0ae08049078bb7098de36eea8d384e5473685edd30f6a38eeabc2326148aaee28588402478c48592cf812109d7e71", @ANYRES32=0x0, @ANYBLOB="08000000000000000800250002000000"], 0x28}, 0x1, 0xba01}, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a3409777777"], 0xa) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) socket(0x14, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000340)={"7dd5e346400872a77c8a6cdb8f819651", 0x0, 0x0, {0x6, 0x800}, {0x4, 0x7}, 0x430de40e, [0x8, 0x4d14, 0x528, 0x0, 0x40, 0x9, 0x4, 0x5, 0xf7f, 0x6, 0x6, 0x0, 0x6, 0x7, 0x80, 0x401]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000001300)={{r6}, r8, 0x18, @inherit={0x60, &(0x7f0000000440)={0x1, 0x3, 0xc00000000000000, 0x101, {0x4, 0x2, 0x8, 0x800, 0x7}, [0x4, 0x1, 0x2]}}, @name="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"}) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r7) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="0600e93e", @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8010) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x401, 0x44000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611069000000000063013000000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x24, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040020}, 0x44010) sendmmsg(r11, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) 6.9928981s ago: executing program 0 (id=1199): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x7d, &(0x7f0000000440)=@sack_info={r4, 0x104, 0x7f}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$pptp(0x18, 0x1, 0x2) close(0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2a0, 0x2e8, 0x2e8, 0x2a0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xff000000, 0xff000000], [0xff, 0x0, 0xffffffff], 'bond_slave_1\x00', 'veth0_vlan\x00', {}, {}, 0x87, 0x3, 0x4, 0x50}, 0x0, 0xf8, 0x160, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@hl={{0x28}, {0x2, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x6, 0x8, 0x401, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc, 0x401, 0x1, 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 6.697783598s ago: executing program 0 (id=1201): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x50, 0x2, 0x76, 0xfff00000}, {0x40, 0x6, 0x44, 0x7}, {0x6, 0x25, 0x7, 0xf}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000)=0x7, 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r4) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000340)={{0xffffffff}, 0x100, './file0\x00'}) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x164, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x3, 0x10, 0x1, 0x1}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x164}}, 0x20000000) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x40048d5) 5.527066503s ago: executing program 4 (id=1209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffd}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) (rerun: 32) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x3, @mcast2, 0xfffffffd}}, 0x0, 0x0, 0x1a, 0x0, "02937ad901b89b7603825fb8c16246f5dce9ef89502cbec1e66187412f32818e47175de379a4a029f287ff47a3ef1b75d71c12f356741c47a983adc1e29a28bba02ddff1f097c679960d132eeb15c432"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x3) (async) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fe}, 0x1c, 0x0}}], 0x1, 0x20048000) 5.178021059s ago: executing program 4 (id=1211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x8, 0x8000, 0x0, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$bt_hci(r8, 0x0, 0x18, 0x0, &(0x7f0000000540)=0x3) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) 5.011973883s ago: executing program 0 (id=1213): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x9, 0x1, 0x10000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000800)=ANY=[], 0x88}}], 0x2, 0x2400c044) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r3, r5, 0x0, 0xbb57) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r7, &(0x7f0000000480), 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000002000ffdbdf2501000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54200"/70], 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x0, 0xfffffffc, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000140), 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) socket$nl_generic(0x10, 0x3, 0x10) 4.8514753s ago: executing program 4 (id=1216): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 4.602964469s ago: executing program 4 (id=1219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x78, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffff}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x34, 0x7, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021e00200001e0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000b4020380b0020080080003"], 0x364}}, 0x0) r1 = socket(0x1e, 0x80000, 0xc) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000200)={'geneve1\x00', 0x9}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x4004080) 4.223061584s ago: executing program 4 (id=1221): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) unshare(0x6a040000) (rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x4a, 0xfffffffffffffffc, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6040000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', r4, 0x40, 0x40, 0x7c, 0xfffffffc, {{0x6, 0x4, 0x1, 0x31, 0x18, 0x67, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1, {[@generic={0x89, 0x4, "a88c"}]}}}}}) (async) sendto$packet(r3, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 3.805967232s ago: executing program 2 (id=1223): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000001f00)=""/4090, 0x4}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) 3.741745047s ago: executing program 2 (id=1224): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x5, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x5, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="0ddac400000000000000bfb48c676fab22e2d076fb296526ae98655ee4c429d1f245f7b1cfa5447a76830be1d0cfd34ed8af4ddbcc0b787eb0619e69f27ab98c3754b47c0b61fc44", 0x48}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) recvmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @random="e5ca14805b90", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfeffffff00000000, 0x1ff0000aa}, @private2}}}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={r1, 0x7, 0xe2c, 0x8}) write$cgroup_subtree(r10, &(0x7f00000001c0)={[{0x2d, 'rlimit'}, {0x2b, 'cpuacct'}]}, 0x11) 3.537733799s ago: executing program 2 (id=1226): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000180)=0x1, 0x4) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000180)=0x1, 0x4) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000c000000180818000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000c000000180818000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) socket$inet(0xa, 0x801, 0x84) (async) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) socketpair(0xbd79f33636fd1dae, 0x3, 0x9, &(0x7f00000001c0)) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x670, 0x5, 0x3b0, 0x178, 0x0, 0xfeffffff, 0x178, 0xa8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x7}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x5, 0x5, 0x4, 0x4, 0x1], 0x6, 0x1}, {0x3, [0x1, 0x0, 0x0, 0xc, 0x2, 0x5], 0x4, 0x1}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="200028bd7000fedbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500740000000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd2c, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x2900}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.922850819s ago: executing program 1 (id=1234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x501}, 0x14}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a01040000000000000000020000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000002c0000001d0a010300000000000000000a0000000900010073797a31000000000c0010"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0x1c, 0x14, 0x0, 0x2, 0x0, 0x2, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000180)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=@raw=[@generic={0x0, 0x2, 0x8, 0x101, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x400}, @exit, @exit, @alu={0x4, 0x0, 0x1, 0x8, 0x5, 0x30, 0xffffffffffffffff}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @jmp={0x5, 0x0, 0x4, 0xb, 0xb, 0xffffffffffffffff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r3, r3, r3, r3, 0xffffffffffffffff, r3], 0x0, 0x10, 0xfffffffe}, 0x94) 1.350049748s ago: executing program 3 (id=1235): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000040000000000000000005f00000087ceebda00"/69], &(0x7f00000006c0)=""/171, 0x45, 0xab, 0x1}, 0x28) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x20, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100", 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket(0x11, 0x80805, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.347991183s ago: executing program 1 (id=1236): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x22, 0x0, 0x1}, {0x28, 0x0, 0x0, 0xfdfff034}, {0x6, 0x1, 0xa, 0x4}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 1.110281819s ago: executing program 3 (id=1237): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.021651461s ago: executing program 3 (id=1238): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b00"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000100bc0002", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000140000000000000001"], 0x38, 0x20048001}}], 0x2, 0x4004800) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) socketpair(0x18, 0x6, 0x4, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x1c4, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}]}]}]}, @NFT_MSG_NEWSET={0x148, 0x9, 0xa, 0x200, 0x0, 0x0, {0x1, 0x0, 0x8001}, [@NFTA_SET_USERDATA={0xdc, 0xd, 0x1, 0x0, "3772bfc83250ed496a749d29fb58b96ad7ee6d9d0609fd556d9f3022f780ff020b79c8d99043942075b9c9a6a820cef27619f7b78bf1d3d05c63b411a65fc207cb371d5cc8c1b053f8c89675991f547dbe7b53191d0bd44b710b4d7b494d065ed672ad8923d63ce9c355276a60deaf82aa9cbdd20e72fc1f31bc33f6cb6c0193949eb583d6232f1ce332da5669d6ec9e777d9b5a1ea3f046e6034c8304148c63b3be723f0f8b2e4ad5c7640dee71b5f992e3a6dc31287770825dad16e9dd8ca91b3caa6a0aedfd5fc7b0ff5b8ca6519ea8639640c710d641"}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1a}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xffe000000}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x2c8, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x294, 0x3, 0x0, 0x1, [{0x290, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x90, 0x6, 0x1, 0x0, "2739a28315ca05373d33d13d935430969267afbc3540d144e195268c04d23f3ea3ec1ce9d8aebaadf24d62991ccd89eb2851c98baa54d20077103678c69869921229b9cf806bbc5a4959d987021c528bd21e145124c9cf0731e2972bb610541044a08a916c8aa1aad0f9dd0ce3b60569382fc927f9b688d626127b70805d508712b7a1dd902c0b532fbe1a03"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x1a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf6, 0x1, "0f92f1f04e5d7bf8e59facdb94791202782c75621e17b16d3e994aa5ae327da9224f183082b8afbce78f76c32cdf4871af44c1b571e7e4962db69df83cb4f9876d78a24fd46361cf1644b19e9655a2f34e7bdd298c3526a3bc9a0c54f30ee747f62640e25c49506a1bb0aee0afa408251f95df1635e0423d3309a845d6d3342e195a0fcfe7bf16796e9dee3ecceeea5c1ce3fb4ed0e911c5b0834350db225b84e12f91ba662f130248d7bb44735018d2fbf5387139095d745aea6757925ca6473adc3416f0d58fdf4f290907b3c289dd3be30b2f4437c5bd4c646ab809c781648f213f2b6f98ce1684a5d04a1ee9b80e98df"}, @NFTA_DATA_VALUE={0xa6, 0x1, "35eed932b929d1b88b70f5310ce10e70ad0a13cb571a1dd58cef2bcd70917e80aa560f452f2152730e90d734c4718c397355a0b4cb4375a3569f0d29c161ba33b06eb91c157ae0753531e94e168dca1a56da287a1062588ae5c9274946f625d05f0fa54f5a2ff7e2cb3a1b5980dcd1cfa77b45f24d971caafb73ea85520aa5b1970915291b33e396ee4323201e99e5816baae8b028756320274cf1c7c5ace85dca46"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xe, 0x6, "acf3cfac628bf590fd7c"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x6, 0x0, 0x6}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x718}, 0x1, 0x0, 0x0, 0x2000c800}, 0x40000) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x20000000) socket$isdn(0x22, 0x2, 0x23) (async) r10 = socket$inet_sctp(0x2, 0x5, 0x84) r11 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) bind$ax25(r11, &(0x7f0000000080)={{0x3, @default}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null]}, 0x48) (async) connect$ax25(r11, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) (async) r12 = socket$kcm(0xa, 0x2, 0x0) (async) sendmsg$unix(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)="b975a7c1ef0a700cea39c86c32700e409d3971324a1068f220f424ca413ffa13a46c3e01c78d400ecd420863a493dbb0f89507022f133708a2246421fdd098ca9cc62a267bfea17be5199a2826e68f78c899cf595051719dfea2c76d70dbd5d066ad84ae088354ee5b3d87863bf2c37d186157e6487bfa71d057cdf370323697db08d5c28fd030a0cd349bdd2cc846874461e68e6d8166ce262cb56557335c4a1c89e650a85a6d6932ab328caab42eb2c5725054a1086b26df0d08f615b5d2b67068fba4835cee8a09ce1bf5bfe66d6b5dde338c0beac7", 0xd7}, {&(0x7f0000001080)="0ff75cd76d68c2d696155666b2670efb9b237ab9e5cdfe4562667e9b82cec07263bb8bb33048ae6a0ba7ba652a61011071a8f3e05748a42a0725429a607f511a5a1be04000e57561aafe6cbe6608a6eb379a6d97de073d66cef83578fcfa2ae2bce8d9dac5c4fe0f22d21d86ed5f82b287bcace39abf13e2bc4ff7db0d46cb3f48920bf120abd24976a128f8ccb68f4b3ae4186c4fbf56b9b72a5f9f8c6a1876706b1d2936e69d36fb3c68b325e221f8cd3013987f285ea1b4bd1f5a17b3e5536632f2c866522177", 0xc8}, {&(0x7f00000007c0)="fe2b1587ac569a13e8b8ac867a264df4e9d5fa4cb0c005ba47b65a286a7d98456a93ec209e5021d29dc2f3cc1c7e5d3734ea5637fd9ec7574bdcfe69da86046e96c11834719b612316398f1fff7da8aa0454ea4982d2545cf40d1f14f57210e63d23fd79", 0x64}, {&(0x7f0000001180)="b20d0da86fc20d186c3b6745b96df21d33540ef0436a79a588794a20c7c712a3660ad767e3bba28d0b038243bb125858a03ef8d0432642348c2905b53414b5e4a72c5623ee9659d9f26abca6b70dd0dc25c9ba5435baa4ac5a68e7f88094ab7b021932bde5447bc0b291eaecabb3167b23127ff42c94ba7eb7a0ad5aac20da15fef8da2f7ba5392b4f9fbbc807861aca01ac621bee88c830bcc1d6fccc7f7c8d1882412eecf1d15eccd59c2ab84e19c776e8b81f590a292ed048d83038d437fcf87dc4cebc7f51c5133fdc6444ed92c15309349efba2df0e2d68d5b88ad2", 0xde}], 0x4, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r9]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r5, r4, r2, 0xffffffffffffffff, r7]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x30, 0x1, 0x1, [r7, 0xffffffffffffffff, r5, r2, r6, r9, r10, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r7, r7, 0xffffffffffffffff, r3, r8]}}, @cred={{0x1c}}], 0x130, 0x48814}, 0x8000) (async) r13 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r13, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@rand_addr=0x64010100, 0x4e23, 0x10000, 0x44, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r12, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 961.874422ms ago: executing program 1 (id=1239): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00012abd7000ffdbdf25090000001c00068008000300ac1414aa08000300ac1414bb08000300ffffffff08000200080000000500050009000000"], 0x40}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0xc50, 0x0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x0, 0xdb4e, {{0x26, 0x4, 0x2, 0x18, 0x98, 0x67, 0x0, 0x5, 0x29, 0x0, @empty, @rand_addr=0x64010101, {[@cipso={0x86, 0x42, 0x3, [{0x0, 0x8, "baf3eb2dcfc6"}, {0x0, 0x4, "6dd8"}, {0x7, 0x9, "328c19ef832ed7"}, {0x7, 0x2}, {0x6, 0xd, "266237b5f7f1558a4e1b94"}, {0x5, 0x9, "a78d98e0264cff"}, {0x5, 0xf, "9adfc490784cef423dfe8b74dc"}]}, @cipso={0x86, 0x26, 0xffffffffffffffff, [{0x5, 0x6, "8b871396"}, {0x0, 0xa, "5eb5499bde5fbce9"}, {0x2, 0x2}, {0x1, 0xe, "ae969e77e1a5190dd510d2d0"}]}, @cipso={0x86, 0x1c, 0x0, [{0x2, 0xf, "57b480f21a06cdc1102a486fa8"}, {0x5, 0x3, "e7"}, {0x0, 0x4, "8e01"}]}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0x32848269, 0x18}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r8, 0x1000) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r8, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x2f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x62, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000540)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xa, 0x4, 0x11}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000640)=[r5, r7, r8], &(0x7f0000000680)=[{0x0, 0x3, 0x1, 0x3}, {0x0, 0x5, 0x9, 0xacca08c23125062b}, {0x3, 0x3, 0x5, 0x1}, {0x1, 0x4, 0xf, 0x9}, {0x1, 0x3, 0x2, 0x8}, {0x2, 0x3, 0x8}, {0x3, 0x4, 0xe, 0x5}, {0x0, 0x3, 0xe, 0x4}], 0x10, 0xff}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x2f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x62, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000540)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xa, 0x4, 0x11}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000640)=[r5, r7, r8], &(0x7f0000000680)=[{0x0, 0x3, 0x1, 0x3}, {0x0, 0x5, 0x9, 0xacca08c23125062b}, {0x3, 0x3, 0x5, 0x1}, {0x1, 0x4, 0xf, 0x9}, {0x1, 0x3, 0x2, 0x8}, {0x2, 0x3, 0x8}, {0x3, 0x4, 0xe, 0x5}, {0x0, 0x3, 0xe, 0x4}], 0x10, 0xff}, 0x94) 873.055259ms ago: executing program 1 (id=1240): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 793.723245ms ago: executing program 3 (id=1241): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 737.891917ms ago: executing program 2 (id=1242): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) accept(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r2, 0x301, 0x0, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x40006) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r5}, 0x10) r6 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, 0x5, 0xfffffffe}}) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0x78, 0x1e, 0x109, 0x102, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0x30, 0x11, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x78}, 0x1, 0x2b1e}, 0x2000c000) 730.048181ms ago: executing program 0 (id=1243): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x3, 0x9, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x40, 0x20, 0x8, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x80, 0x78a6, 0x6, 0x9, {{0x2a, 0x4, 0x3, 0x6, 0xa8, 0x64, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@generic={0x7, 0x9, "11554f7f038cb1"}, @timestamp_addr={0x44, 0xc, 0xbb, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3f}}]}, @rr={0x7, 0x1f, 0x5e, [@multicast2, @rand_addr=0x64010102, @rand_addr=0x64010101, @rand_addr=0x64010102, @multicast1, @remote, @multicast2]}, @ra={0x94, 0x4}, @generic={0x86, 0xe, "cb79b50d22647f61951ae4ad"}, @cipso={0x86, 0x1a, 0x2, [{0x0, 0x2}, {0x2, 0x12, "a9658da24687f1f4fa4e239b22beaed4"}]}, @rr={0x7, 0x7, 0x71, [@empty]}, @timestamp={0x44, 0x2c, 0x69, 0x0, 0x5, [0xfffffffb, 0x3, 0x0, 0x0, 0x3, 0x1, 0x6, 0xd89, 0x4d1, 0x6]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0xc8, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24040885}, 0x20000800) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x0, 0x7, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) 675.313434ms ago: executing program 1 (id=1244): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0), 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r6, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 533.926567ms ago: executing program 3 (id=1245): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r2}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x78, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0xd}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x3b}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x19}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001480)=@newsa={0x180, 0x10, 0x1, 0x70bd2b, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfffa, 0x2000, 0x1, 0x0, 0x20, 0x20, 0x29, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x4, 0x20}, {0x6, 0x4, 0x40000000, 0x4}, {}, 0x70bd25, 0x0, 0x2, 0x2, 0x1, 0x25}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'ctr-cast6-avx\x00'}}}]}, 0x180}}, 0x4810) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r6, 0x10e, 0xa, &(0x7f0000001080)=""/73, &(0x7f0000000300)=0x49) getpeername$netlink(r6, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES16=r3], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 312.368795ms ago: executing program 1 (id=1246): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtclass={0x48, 0x28, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1, 0xffe0}, {0xfff3, 0xe}, {0xb, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7f, 0x1}}, @tclass_kind_options=@c_mq={0x7}]}, 0x48}}, 0x4000010) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c0016000e"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c0016000e"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 306.606315ms ago: executing program 2 (id=1247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="780000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0503020000000000500012800e0001006970366772657461700000003c000280060018000200000005000b0002000000080014000900000006000f00ff01000008000c000e00000008000d000700000008000400ff"], 0x78}}, 0x0) 21.943218ms ago: executing program 3 (id=1248): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000030400000000fcffffff00000000b42d30a6c5b029acb73ce78920876fa752f1d1db5aa60dbdf47e043d048a3b09173f31c7084fb477019d604e42624cfba40cee84081851bd0adc4af6f61b418d4f51546554c2eda7a67f97a66ad1d6353fd4ec568422944d7cba508fa0448935598292c1e5e6473c8c241971659455d3611e35c164ebaa952035a6f439394c5e96573ce3350628", @ANYRES32=r2, @ANYBLOB="7fff000000000000"], 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 0s ago: executing program 2 (id=1249): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x70bd29, 0x0, {}, [@NHA_ID={0x8}, @NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5, 0x5, 0x40}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040801}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x50, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x409}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000007c0)={@in6={{0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x7ca}}, 0x0, 0x0, 0x4, 0x0, "bac6734d333dbaf9ee8fd4015af14438cfa1e6a78fe77ab965f89a84fb7a4a824ef2a166703f1a4b7efde3690af12b82f528c2bab28c2e5a8e607988197c4fb5c65609b0c614ba24c5eb5b95c8ae2f29"}, 0xd8) r5 = accept4(r1, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x128, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x5f, 0x115, "d919fad369e46d8d8f8a40dc518bc41c54f6c94061e73ce3b7d9741e144e7dc4a136d8114d0d8488c38320a9e21f7322bc329e71f5ca0b353afcdb8e402068d1b5ed917a1e80226d3207bedaeff78606f68959131820fb1ca6ec4a"}, @NL80211_ATTR_SAE_PASSWORD={0x77, 0x115, "cdfc04afd5e327b89e51722a9fceab29626f90b108291f077053a24ebfd9e79abffbfb9a5f4736e92cf58bba75b7eede8f1dd785179029157089db4a17a0ce4c4ed73644e4b7af0b8432c56c19557a7047df987014e6d148abc4d3beb8fb4a75e5930575f463089cd40c9b5d6ce37508d75784"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1000, 0x2, 0x0, 0x0, {0x1439, 0x9, 0x0, 0x101, 0x0, 0x1, 0x1, 0x3}, 0x801, 0x7ff}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4001}, 0x801) r7 = socket$inet(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f00000004c0)=ANY=[@ANYRESOCT], 0x27) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000004850000000c000000b70700000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): `syz.3.256'. [ 140.516253][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 140.528868][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 141.119437][ T7122] lo speed is unknown, defaulting to 1000 [ 141.538001][ T7137] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.776900][ T7147] netlink: 48 bytes leftover after parsing attributes in process `syz.0.261'. [ 142.529602][ T7160] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.559443][ T7160] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 142.691694][ T7160] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.704365][ T7160] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 142.801987][ T7160] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.835368][ T7160] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 142.845804][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.991564][ T7160] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.004162][ T7160] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 143.107352][ T7183] lo speed is unknown, defaulting to 1000 [ 143.469045][ T7189] bond2 (unregistering): Released all slaves [ 143.500434][ T7187] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.271'. [ 143.570282][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 143.590107][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 143.651816][ T7193] bridge_slave_0: invalid flags given to default FDB implementation [ 143.740357][ T6041] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 143.764668][ T6041] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 143.818680][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 143.831457][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 144.102008][ T1143] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 144.128236][ T1143] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 144.148771][ T7206] FAULT_INJECTION: forcing a failure. [ 144.148771][ T7206] name failslab, interval 1, probability 0, space 0, times 0 [ 144.182899][ T7206] CPU: 0 UID: 0 PID: 7206 Comm: syz.4.278 Not tainted syzkaller #0 PREEMPT(full) [ 144.182928][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 144.182941][ T7206] Call Trace: [ 144.182950][ T7206] [ 144.182959][ T7206] dump_stack_lvl+0x189/0x250 [ 144.182995][ T7206] ? __pfx____ratelimit+0x10/0x10 [ 144.183028][ T7206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.183057][ T7206] ? __pfx__printk+0x10/0x10 [ 144.183095][ T7206] should_fail_ex+0x414/0x560 [ 144.183134][ T7206] should_failslab+0xa8/0x100 [ 144.183157][ T7206] kmem_cache_alloc_noprof+0x74/0x6e0 [ 144.183188][ T7206] ? skb_clone+0x212/0x3a0 [ 144.183217][ T7206] skb_clone+0x212/0x3a0 [ 144.183244][ T7206] __netlink_deliver_tap+0x404/0x850 [ 144.183293][ T7206] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.183327][ T7206] netlink_deliver_tap+0x19c/0x1b0 [ 144.183362][ T7206] __netlink_sendskb+0x47/0x90 [ 144.183393][ T7206] netlink_dump+0xa84/0xe90 [ 144.183439][ T7206] ? __pfx_netlink_dump+0x10/0x10 [ 144.183468][ T7206] ? __netlink_lookup+0x7db/0x8a0 [ 144.183507][ T7206] ? netlink_lookup+0x30/0x200 [ 144.183537][ T7206] ? netlink_lookup+0x30/0x200 [ 144.183565][ T7206] ? netlink_lookup+0x30/0x200 [ 144.183602][ T7206] __netlink_dump_start+0x5cb/0x7e0 [ 144.183644][ T7206] rtnetlink_rcv_msg+0x9eb/0xb70 [ 144.183678][ T7206] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 144.183706][ T7206] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 144.183736][ T7206] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.183765][ T7206] ? ref_tracker_free+0x63a/0x7d0 [ 144.183783][ T7206] ? __pfx_rtnl_dumpit+0x10/0x10 [ 144.183813][ T7206] ? __pfx_rtm_dump_nexthop+0x10/0x10 [ 144.183840][ T7206] ? __skb_clone+0x63/0x7a0 [ 144.183873][ T7206] netlink_rcv_skb+0x208/0x470 [ 144.183911][ T7206] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 144.183944][ T7206] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 144.183990][ T7206] ? netlink_deliver_tap+0x2e/0x1b0 [ 144.184039][ T7206] netlink_unicast+0x82f/0x9e0 [ 144.184080][ T7206] ? __pfx_netlink_unicast+0x10/0x10 [ 144.184112][ T7206] ? netlink_sendmsg+0x642/0xb30 [ 144.184129][ T7206] ? skb_put+0x11b/0x210 [ 144.184166][ T7206] netlink_sendmsg+0x805/0xb30 [ 144.184197][ T7206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.184220][ T7206] ? aa_sock_msg_perm+0xf1/0x1d0 [ 144.184255][ T7206] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 144.184276][ T7206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.184297][ T7206] __sock_sendmsg+0x21c/0x270 [ 144.184328][ T7206] ____sys_sendmsg+0x505/0x830 [ 144.184356][ T7206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.184389][ T7206] ? import_iovec+0x74/0xa0 [ 144.184420][ T7206] ___sys_sendmsg+0x21f/0x2a0 [ 144.184445][ T7206] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.184509][ T7206] ? __fget_files+0x2a/0x420 [ 144.184528][ T7206] ? __fget_files+0x3a0/0x420 [ 144.184561][ T7206] __x64_sys_sendmsg+0x19b/0x260 [ 144.184586][ T7206] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.184620][ T7206] ? __pfx_ksys_write+0x10/0x10 [ 144.184655][ T7206] ? do_syscall_64+0xbe/0xfa0 [ 144.184685][ T7206] do_syscall_64+0xfa/0xfa0 [ 144.184709][ T7206] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.184734][ T7206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.184755][ T7206] ? clear_bhb_loop+0x60/0xb0 [ 144.184780][ T7206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.184801][ T7206] RIP: 0033:0x7fbc2378efc9 [ 144.184819][ T7206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.184837][ T7206] RSP: 002b:00007fbc246dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.184859][ T7206] RAX: ffffffffffffffda RBX: 00007fbc239e5fa0 RCX: 00007fbc2378efc9 [ 144.184875][ T7206] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 144.184888][ T7206] RBP: 00007fbc246dd090 R08: 0000000000000000 R09: 0000000000000000 [ 144.184900][ T7206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.184912][ T7206] R13: 00007fbc239e6038 R14: 00007fbc239e5fa0 R15: 00007ffedcf09018 [ 144.184948][ T7206] [ 144.773156][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 144.791910][ T7214] lo speed is unknown, defaulting to 1000 [ 144.880254][ T7226] netlink: 676 bytes leftover after parsing attributes in process `syz.2.282'. [ 144.919749][ T7226] netlink: 676 bytes leftover after parsing attributes in process `syz.2.282'. [ 145.334555][ T7238] lo speed is unknown, defaulting to 1000 [ 145.502934][ T7249] netlink: 'syz.3.287': attribute type 11 has an invalid length. [ 145.511233][ T7250] netlink: 'syz.3.287': attribute type 11 has an invalid length. [ 145.954491][ T7264] netlink: 104 bytes leftover after parsing attributes in process `syz.1.292'. [ 147.067091][ T7290] netlink: 'syz.1.296': attribute type 12 has an invalid length. [ 147.093106][ T7290] netlink: 'syz.1.296': attribute type 28 has an invalid length. [ 147.115463][ T7290] netlink: 148 bytes leftover after parsing attributes in process `syz.1.296'. [ 147.711476][ T7303] batman_adv: batadv0: Interface deactivated: gretap1 [ 147.900498][ T7303] ip6tnl2: left promiscuous mode [ 147.910157][ T7303] bond1: left promiscuous mode [ 147.916403][ T7303] bond1: left allmulticast mode [ 148.424898][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'. [ 148.547284][ T7312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.675160][ T7312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.703208][ T7317] team0: No ports can be present during mode change [ 148.728812][ T7314] lo speed is unknown, defaulting to 1000 [ 148.781579][ T7312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.928458][ T7312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.203855][ T6041] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.245936][ T6041] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.285473][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.318393][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.437541][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'. [ 149.680766][ T7330] ipt_ECN: cannot use operation on non-tcp rule [ 149.718464][ T7331] x_tables: duplicate underflow at hook 2 [ 149.817427][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 149.825690][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.261587][ T7334] lo speed is unknown, defaulting to 1000 [ 150.839264][ T7347] netlink: 52 bytes leftover after parsing attributes in process `syz.0.315'. [ 151.312335][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 151.322610][ T7359] netlink: 76 bytes leftover after parsing attributes in process `syz.0.319'. [ 151.362146][ T7355] lo speed is unknown, defaulting to 1000 [ 151.973862][ T7354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.401723][ T7380] netlink: 'syz.1.326': attribute type 1 has an invalid length. [ 152.769548][ T7396] netlink: 'syz.4.329': attribute type 4 has an invalid length. [ 152.881078][ T7394] lo speed is unknown, defaulting to 1000 [ 152.892079][ T7398] netlink: 64 bytes leftover after parsing attributes in process `syz.3.330'. [ 152.918684][ T7398] team0: No ports can be present during mode change [ 153.261908][ T7407] raw_sendmsg: syz.3.333 forgot to set AF_INET. Fix it! [ 154.370731][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 154.422558][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 154.502808][ T7420] lo speed is unknown, defaulting to 1000 [ 154.570294][ T7427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.337'. [ 155.166278][ T7436] lo speed is unknown, defaulting to 1000 [ 155.389702][ T7441] pim6reg: entered allmulticast mode [ 155.632966][ T7441] pim6reg: left allmulticast mode [ 156.131138][ T7435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.428953][ T7450] tipc: Enabling of bearer rejected, failed to enable media [ 157.602554][ T7478] bond1: Removing last ns target with arp_interval on [ 158.108903][ T7507] netlink: 60 bytes leftover after parsing attributes in process `syz.1.359'. [ 158.160142][ T7507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.359'. [ 158.172924][ T7509] bridge0: port 3(veth0_to_bridge) entered blocking state [ 158.195761][ T7509] bridge0: port 3(veth0_to_bridge) entered disabled state [ 158.203363][ T7509] veth0_to_bridge: entered allmulticast mode [ 158.225683][ T7509] veth0_to_bridge: entered promiscuous mode [ 158.244180][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 158.263205][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 158.303554][ T7516] ip6_vti0 speed is unknown, defaulting to 1000 [ 158.338205][ T7519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.362'. [ 158.402326][ T7514] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 158.515897][ T7516] ip6_vti0 speed is unknown, defaulting to 1000 [ 158.551330][ T7516] ip6_vti0 speed is unknown, defaulting to 1000 [ 159.151832][ T7552] netlink: 168 bytes leftover after parsing attributes in process `syz.2.372'. [ 159.472599][ T7516] infiniband óyz2: set down [ 159.477941][ T5894] ip6_vti0 speed is unknown, defaulting to 1000 [ 159.529063][ T7567] lo speed is unknown, defaulting to 1000 [ 159.535515][ T7516] infiniband óyz2: added ip6_vti0 [ 159.541551][ T7516] óyz2: rxe_create_cq: returned err = -12 [ 159.588422][ T7516] infiniband óyz2: Couldn't create ib_mad CQ [ 159.591219][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.377'. [ 159.616463][ T7516] infiniband óyz2: Couldn't open port 1 [ 159.720099][ T7573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.379'. [ 159.903711][ T7573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.379'. [ 159.927896][ T7516] RDS/IB: óyz2: added [ 159.932114][ T7516] smc: adding ib device óyz2 with port count 1 [ 159.945701][ T7562] lo speed is unknown, defaulting to 1000 [ 159.945716][ T7567] ip6_vti0 speed is unknown, defaulting to 1000 [ 159.959546][ T7516] smc: ib device óyz2 port 1 has no pnetid [ 160.006206][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 160.713469][ T7516] ip6_vti0 speed is unknown, defaulting to 1000 [ 160.788317][ T7591] macvlan2: entered promiscuous mode [ 161.690326][ T7611] lec:lec_atm_close: lec0: Shut down! [ 161.826715][ T7562] ip6_vti0 speed is unknown, defaulting to 1000 [ 161.846347][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.391'. [ 162.296040][ T7516] ip6_vti0 speed is unknown, defaulting to 1000 [ 162.608174][ T25] block nbd1: Possible stuck request ffff888024dee000: control (read@0,1024B). Runtime 60 seconds [ 162.619309][ T25] block nbd1: Possible stuck request ffff888024dee1c0: control (read@1024,1024B). Runtime 60 seconds [ 162.630926][ T25] block nbd1: Possible stuck request ffff888024dee380: control (read@2048,1024B). Runtime 60 seconds [ 162.642225][ T25] block nbd1: Possible stuck request ffff888024dee540: control (read@3072,1024B). Runtime 60 seconds [ 163.100473][ T7516] ip6_vti0 speed is unknown, defaulting to 1000 [ 163.473938][ T7642] @0Ù: renamed from bond_slave_1 (while UP) [ 163.809351][ T7650] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.999730][ T7516] ip6_vti0 speed is unknown, defaulting to 1000 [ 164.719550][ T7516] ip6_vti0 speed is unknown, defaulting to 1000 [ 165.184919][ T7516] ip6_vti0 speed is unknown, defaulting to 1000 [ 165.347915][ T7664] __nla_validate_parse: 1 callbacks suppressed [ 165.347934][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 165.494526][ T7516] ip6_vti0 speed is unknown, defaulting to 1000 [ 165.828259][ T7613] lo speed is unknown, defaulting to 1000 [ 166.779460][ T7656] lo speed is unknown, defaulting to 1000 [ 167.675428][ T7694] netlink: 'syz.3.410': attribute type 11 has an invalid length. [ 167.697956][ T7694] netlink: 'syz.3.410': attribute type 11 has an invalid length. [ 167.712039][ T7694] netlink: 224 bytes leftover after parsing attributes in process `syz.3.410'. [ 167.822189][ T7687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.934353][ T7697] tipc: Started in network mode [ 167.946163][ T7697] tipc: Node identity ea9b73349165, cluster identity 4711 [ 167.953830][ T7697] tipc: Enabled bearer , priority 0 [ 167.962427][ T7697] syzkaller0: entered promiscuous mode [ 167.968880][ T7697] syzkaller0: entered allmulticast mode [ 168.086457][ T7697] tipc: Resetting bearer [ 168.325090][ T7696] tipc: Resetting bearer [ 168.359421][ T7696] tipc: Disabling bearer [ 168.591911][ T7706] lo speed is unknown, defaulting to 1000 [ 168.766063][ T7710] team0 (unregistering): Port device team_slave_0 removed [ 168.775873][ T7710] team0 (unregistering): Port device team_slave_1 removed [ 168.885349][ T7706] ip6_vti0 speed is unknown, defaulting to 1000 [ 169.072912][ T7715] netlink: 112 bytes leftover after parsing attributes in process `syz.4.416'. [ 169.296659][ T7729] netlink: 'syz.1.420': attribute type 21 has an invalid length. [ 169.376450][ T7729] netlink: 156 bytes leftover after parsing attributes in process `syz.1.420'. [ 169.539789][ T7741] sctp: [Deprecated]: syz.4.422 (pid 7741) Use of int in max_burst socket option. [ 169.539789][ T7741] Use struct sctp_assoc_value instead [ 169.990287][ T7766] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 170.001780][ T7770] netlink: 'syz.4.426': attribute type 11 has an invalid length. [ 170.050604][ T7766] bond1 (unregistering): Released all slaves [ 170.200282][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'. [ 170.293259][ T7782] netlink: 'syz.0.430': attribute type 39 has an invalid length. [ 170.646513][ T7793] dvmrp1: entered allmulticast mode [ 171.028818][ T7810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.439'. [ 171.326421][ T7815] lo speed is unknown, defaulting to 1000 [ 171.593254][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.442'. [ 172.295137][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.450'. [ 172.330043][ T7860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.451'. [ 172.342341][ T7862] netlink: 56 bytes leftover after parsing attributes in process `syz.4.450'. [ 172.350127][ T7815] ip6_vti0 speed is unknown, defaulting to 1000 [ 172.354006][ T7844] lo speed is unknown, defaulting to 1000 [ 172.984345][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'. [ 173.021276][ T7875] Bluetooth: MGMT ver 1.23 [ 173.075431][ T7864] lo speed is unknown, defaulting to 1000 [ 173.090011][ T7844] ip6_vti0 speed is unknown, defaulting to 1000 [ 173.544110][ T7885] lo speed is unknown, defaulting to 1000 [ 173.770720][ T7885] ip6_vti0 speed is unknown, defaulting to 1000 [ 173.949581][ T7864] ip6_vti0 speed is unknown, defaulting to 1000 [ 174.404052][ T7895] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 174.418620][ T7897] netlink: 60 bytes leftover after parsing attributes in process `syz.0.462'. [ 174.432959][ T7895] bond2 (unregistering): Released all slaves [ 174.441973][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 174.459988][ T7897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.462'. [ 174.469905][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 174.948682][ T7901] netlink: 'syz.2.463': attribute type 1 has an invalid length. [ 175.770593][ T7918] tipc: Started in network mode [ 175.775909][ T7918] tipc: Node identity 7ab55f5011ea, cluster identity 4711 [ 175.813272][ T7918] tipc: Enabled bearer , priority 0 [ 175.823347][ T7914] syzkaller0: entered promiscuous mode [ 175.829431][ T7914] syzkaller0: entered allmulticast mode [ 175.905474][ T7914] syzkaller0: mtu greater than device maximum [ 175.938905][ T7913] tipc: Resetting bearer [ 176.014894][ T7913] tipc: Disabling bearer [ 176.051308][ T7925] __nla_validate_parse: 4 callbacks suppressed [ 176.051329][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 176.404325][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.472'. [ 176.505842][ T7938] lo speed is unknown, defaulting to 1000 [ 176.915601][ T7938] ip6_vti0 speed is unknown, defaulting to 1000 [ 180.814062][ T5197] udevd[5197]: worker [5887] /devices/virtual/block/nbd1 is taking a long time [ 192.687559][ T25] block nbd1: Possible stuck request ffff888024dee000: control (read@0,1024B). Runtime 90 seconds [ 192.703587][ T25] block nbd1: Possible stuck request ffff888024dee1c0: control (read@1024,1024B). Runtime 90 seconds [ 192.716283][ T25] block nbd1: Possible stuck request ffff888024dee380: control (read@2048,1024B). Runtime 90 seconds [ 192.728697][ T25] block nbd1: Possible stuck request ffff888024dee540: control (read@3072,1024B). Runtime 90 seconds [ 199.738727][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.745114][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.176068][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 217.182819][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 217.188944][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.189138][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 217.197584][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 222.767447][ T25] block nbd1: Possible stuck request ffff888024dee000: control (read@0,1024B). Runtime 120 seconds [ 222.779095][ T25] block nbd1: Possible stuck request ffff888024dee1c0: control (read@1024,1024B). Runtime 120 seconds [ 222.791540][ T25] block nbd1: Possible stuck request ffff888024dee380: control (read@2048,1024B). Runtime 120 seconds [ 222.802936][ T25] block nbd1: Possible stuck request ffff888024dee540: control (read@3072,1024B). Runtime 120 seconds [ 252.849891][ T25] block nbd1: Possible stuck request ffff888024dee000: control (read@0,1024B). Runtime 150 seconds [ 252.860923][ T25] block nbd1: Possible stuck request ffff888024dee1c0: control (read@1024,1024B). Runtime 150 seconds [ 252.872320][ T25] block nbd1: Possible stuck request ffff888024dee380: control (read@2048,1024B). Runtime 150 seconds [ 252.883486][ T25] block nbd1: Possible stuck request ffff888024dee540: control (read@3072,1024B). Runtime 150 seconds [ 261.170546][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.177384][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 282.951352][ T25] block nbd1: Possible stuck request ffff888024dee000: control (read@0,1024B). Runtime 180 seconds [ 282.962383][ T25] block nbd1: Possible stuck request ffff888024dee1c0: control (read@1024,1024B). Runtime 180 seconds [ 282.973479][ T25] block nbd1: Possible stuck request ffff888024dee380: control (read@2048,1024B). Runtime 180 seconds [ 282.985308][ T25] block nbd1: Possible stuck request ffff888024dee540: control (read@3072,1024B). Runtime 180 seconds [ 283.369625][ T5197] udevd[5197]: worker [5887] /devices/virtual/block/nbd1 timeout; kill it [ 283.380120][ T5197] udevd[5197]: seq 11178 '/devices/virtual/block/nbd1' killed [ 304.805659][ T7955] netlink: 'syz.2.479': attribute type 1 has an invalid length. [ 304.832415][ T7958] tap0: tun_chr_ioctl cmd 1074025677 [ 304.844455][ T7958] tap0: linktype set to 804 [ 304.873314][ T7962] lo speed is unknown, defaulting to 1000 [ 305.288757][ T7962] ip6_vti0 speed is unknown, defaulting to 1000 [ 305.305827][ T7981] netlink: 60 bytes leftover after parsing attributes in process `syz.3.484'. [ 305.340647][ T7978] netlink: 60 bytes leftover after parsing attributes in process `syz.3.484'. [ 305.483827][ T7986] netlink: 56 bytes leftover after parsing attributes in process `syz.3.487'. [ 305.637315][ T7984] lo speed is unknown, defaulting to 1000 [ 305.837414][ T7991] netlink: 48 bytes leftover after parsing attributes in process `syz.2.488'. [ 306.096133][ T7989] lo speed is unknown, defaulting to 1000 [ 306.133313][ T7984] ip6_vti0 speed is unknown, defaulting to 1000 [ 306.561488][ T7993] lo speed is unknown, defaulting to 1000 [ 306.809820][ T8004] netlink: 'syz.0.491': attribute type 54 has an invalid length. [ 306.888381][ T7997] lo speed is unknown, defaulting to 1000 [ 307.322213][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 307.460058][ T7997] ip6_vti0 speed is unknown, defaulting to 1000 [ 307.705087][ T7993] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.158395][ T7989] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.417881][ T8025] lo speed is unknown, defaulting to 1000 [ 308.798075][ T8031] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 309.223823][ T8039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.258577][ T8042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.286570][ T8041] bridge_slave_0: left allmulticast mode [ 309.293171][ T8041] bridge_slave_0: left promiscuous mode [ 309.302951][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.367042][ T8041] bridge_slave_1: left allmulticast mode [ 309.388476][ T8041] bridge_slave_1: left promiscuous mode [ 309.398840][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.473294][ T8041] bond0: (slave bond_slave_0): Releasing backup interface [ 309.541164][ T8041] bond0: (slave bond_slave_1): Releasing backup interface [ 309.588971][ T8041] team0: Port device team_slave_0 removed [ 309.600855][ T8041] team0: Port device team_slave_1 removed [ 309.608964][ T8041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.617873][ T8041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.629339][ T8041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.639606][ T8041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.652272][ T8041] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 309.689362][ T8051] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 309.697693][ T8025] ip6_vti0 speed is unknown, defaulting to 1000 [ 309.989715][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 310.647963][ T8075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.510'. [ 311.020631][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 311.056918][ T8088] netlink: 36 bytes leftover after parsing attributes in process `syz.3.512'. [ 311.120032][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 311.850626][ T8095] lo speed is unknown, defaulting to 1000 [ 312.150440][ T8102] veth0: entered promiscuous mode [ 312.405904][ T8104] syzkaller0: left promiscuous mode [ 312.411383][ T8104] syzkaller0: left allmulticast mode [ 312.712520][ T8118] netlink: 36 bytes leftover after parsing attributes in process `syz.4.521'. [ 312.788423][ T8121] netlink: 36 bytes leftover after parsing attributes in process `syz.4.521'. [ 312.798280][ T43] IPVS: starting estimator thread 0... [ 312.915322][ T8122] IPVS: using max 31 ests per chain, 74400 per kthread [ 312.937041][ T8102] veth0: left promiscuous mode [ 312.981160][ T8127] netlink: 'syz.0.523': attribute type 11 has an invalid length. [ 313.012783][ T25] block nbd1: Possible stuck request ffff888024dee000: control (read@0,1024B). Runtime 210 seconds [ 313.024856][ T25] block nbd1: Possible stuck request ffff888024dee1c0: control (read@1024,1024B). Runtime 210 seconds [ 313.037285][ T25] block nbd1: Possible stuck request ffff888024dee380: control (read@2048,1024B). Runtime 210 seconds [ 313.045513][ T8127] netlink: 228 bytes leftover after parsing attributes in process `syz.0.523'. [ 313.050390][ T25] block nbd1: Possible stuck request ffff888024dee540: control (read@3072,1024B). Runtime 210 seconds [ 313.176965][ T8101] lo speed is unknown, defaulting to 1000 [ 313.199445][ T8095] ip6_vti0 speed is unknown, defaulting to 1000 [ 313.579009][ T8139] netlink: 'syz.0.526': attribute type 10 has an invalid length. [ 313.602076][ T8139] team0: Failed to send options change via netlink (err -105) [ 313.612336][ T8139] team0: Port device dummy0 added [ 313.621700][ T8139] netlink: 'syz.0.526': attribute type 10 has an invalid length. [ 313.632917][ T8139] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 313.650356][ T8139] team0: Failed to send options change via netlink (err -105) [ 313.665578][ T8139] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 313.684110][ T8139] team0: Port device dummy0 removed [ 313.700354][ T8139] dummy0: entered promiscuous mode [ 313.735674][ T8139] dummy0: entered allmulticast mode [ 313.743276][ T8139] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 313.782949][ T8118] lo speed is unknown, defaulting to 1000 [ 313.896367][ T8101] ip6_vti0 speed is unknown, defaulting to 1000 [ 314.469394][ T8108] lo speed is unknown, defaulting to 1000 [ 314.514132][ T8166] bridge0: entered promiscuous mode [ 314.766660][ T8172] netlink: 300 bytes leftover after parsing attributes in process `syz.2.534'. [ 314.797181][ T8172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.534'. [ 314.897368][ T8118] ip6_vti0 speed is unknown, defaulting to 1000 [ 315.300084][ T8190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.539'. [ 315.316931][ T8190] netlink: 'syz.0.539': attribute type 4 has an invalid length. [ 315.383210][ T8193] team0: Device gtp1 is of different type [ 315.634950][ T8108] ip6_vti0 speed is unknown, defaulting to 1000 [ 315.948162][ T8210] __nla_validate_parse: 2 callbacks suppressed [ 315.948182][ T8210] netlink: 36 bytes leftover after parsing attributes in process `syz.3.545'. [ 315.968295][ T8210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.545'. [ 315.985098][ T8210] netlink: 36 bytes leftover after parsing attributes in process `syz.3.545'. [ 315.995106][ T8210] netlink: 36 bytes leftover after parsing attributes in process `syz.3.545'. [ 316.134912][ T8223] netlink: 'syz.2.551': attribute type 8 has an invalid length. [ 316.153470][ T8223] sch_fq: defrate 0 ignored. [ 316.220938][ T8223] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 316.234921][ T8223] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 316.419252][ T8223] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 316.433872][ T8223] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 316.627829][ T8223] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 316.642224][ T8223] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 316.812034][ T8223] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 316.835645][ T8223] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 317.291460][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 317.313780][ T50] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.317446][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.555'. [ 317.557335][ T8242] FAULT_INJECTION: forcing a failure. [ 317.557335][ T8242] name failslab, interval 1, probability 0, space 0, times 0 [ 317.572306][ T8242] CPU: 1 UID: 0 PID: 8242 Comm: syz.0.557 Not tainted syzkaller #0 PREEMPT(full) [ 317.572335][ T8242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.572354][ T8242] Call Trace: [ 317.572363][ T8242] [ 317.572372][ T8242] dump_stack_lvl+0x189/0x250 [ 317.572421][ T8242] ? __pfx____ratelimit+0x10/0x10 [ 317.572447][ T8242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.572477][ T8242] ? __pfx__printk+0x10/0x10 [ 317.572516][ T8242] should_fail_ex+0x414/0x560 [ 317.572555][ T8242] should_failslab+0xa8/0x100 [ 317.572580][ T8242] __kmalloc_cache_noprof+0x6f/0x6f0 [ 317.572611][ T8242] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 317.572637][ T8242] ? sctp_add_bind_addr+0x8c/0x370 [ 317.572682][ T8242] sctp_add_bind_addr+0x8c/0x370 [ 317.572724][ T8242] sctp_copy_local_addr_list+0x30b/0x4e0 [ 317.572755][ T8242] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 317.572782][ T8242] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 317.572813][ T8242] ? sctp_v4_is_any+0x35/0x60 [ 317.572840][ T8242] ? sctp_copy_one_addr+0x93/0x360 [ 317.572870][ T8242] sctp_bind_addr_copy+0xb3/0x3c0 [ 317.572898][ T8242] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 317.572925][ T8242] sctp_connect_new_asoc+0x2e0/0x690 [ 317.572962][ T8242] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 317.572992][ T8242] ? __local_bh_enable_ip+0x12d/0x1c0 [ 317.573024][ T8242] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 317.573048][ T8242] ? security_sctp_bind_connect+0x7e/0x2e0 [ 317.573077][ T8242] sctp_sendmsg+0x155c/0x2810 [ 317.573122][ T8242] ? __pfx_sctp_sendmsg+0x10/0x10 [ 317.573158][ T8242] ? aa_sk_perm+0x81e/0x950 [ 317.573187][ T8242] ? __lock_acquire+0xab9/0xd20 [ 317.573211][ T8242] ? __pfx_aa_sk_perm+0x10/0x10 [ 317.573245][ T8242] ? sock_rps_record_flow+0x19/0x410 [ 317.573280][ T8242] ? inet_sendmsg+0x2f4/0x370 [ 317.573317][ T8242] __sock_sendmsg+0x19c/0x270 [ 317.573349][ T8242] ____sys_sendmsg+0x52d/0x830 [ 317.573378][ T8242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.573411][ T8242] ? import_iovec+0x74/0xa0 [ 317.573443][ T8242] ___sys_sendmsg+0x21f/0x2a0 [ 317.573468][ T8242] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.573533][ T8242] ? __fget_files+0x2a/0x420 [ 317.573553][ T8242] ? __fget_files+0x3a0/0x420 [ 317.573586][ T8242] __sys_sendmmsg+0x227/0x430 [ 317.573615][ T8242] ? __pfx___sys_sendmmsg+0x10/0x10 [ 317.573657][ T8242] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 317.573707][ T8242] ? ksys_write+0x22a/0x250 [ 317.573741][ T8242] ? __pfx_ksys_write+0x10/0x10 [ 317.573779][ T8242] __x64_sys_sendmmsg+0xa0/0xc0 [ 317.573804][ T8242] do_syscall_64+0xfa/0xfa0 [ 317.573829][ T8242] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.573855][ T8242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.573876][ T8242] ? clear_bhb_loop+0x60/0xb0 [ 317.573903][ T8242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.573924][ T8242] RIP: 0033:0x7f6c3d78efc9 [ 317.573952][ T8242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.573970][ T8242] RSP: 002b:00007f6c3e54a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 317.574001][ T8242] RAX: ffffffffffffffda RBX: 00007f6c3d9e5fa0 RCX: 00007f6c3d78efc9 [ 317.574017][ T8242] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 317.574030][ T8242] RBP: 00007f6c3e54a090 R08: 0000000000000000 R09: 0000000000000000 [ 317.574043][ T8242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.574055][ T8242] R13: 00007f6c3d9e6038 R14: 00007f6c3d9e5fa0 R15: 00007ffeda912f08 [ 317.574092][ T8242] [ 317.985937][ T5949] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 317.994369][ T5949] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 318.131315][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 318.203288][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 318.258109][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 318.305401][ T36] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 318.585955][ T8244] lo speed is unknown, defaulting to 1000 [ 318.692225][ T8255] bond2 (unregistering): Released all slaves [ 318.736080][ T8266] netlink: 'syz.4.564': attribute type 9 has an invalid length. [ 318.821450][ T8265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.565'. [ 318.838581][ T8265] netlink: 7 bytes leftover after parsing attributes in process `syz.2.565'. [ 319.494460][ T8244] ip6_vti0 speed is unknown, defaulting to 1000 [ 319.983984][ T8309] syzkaller0: entered promiscuous mode [ 319.999108][ T8309] syzkaller0: entered allmulticast mode [ 320.016554][ T8305] tipc: Enabled bearer , priority 0 [ 320.025024][ T8310] netlink: 'syz.4.578': attribute type 4 has an invalid length. [ 320.111695][ T8309] tipc: Resetting bearer [ 320.132448][ T8317] netlink: 'syz.4.578': attribute type 4 has an invalid length. [ 320.155511][ T8309] tipc: Disabling bearer [ 320.253644][ T8319] tipc: Enabled bearer , priority 0 [ 320.306353][ T8319] syzkaller0: entered promiscuous mode [ 320.312178][ T8319] syzkaller0: entered allmulticast mode [ 320.344456][ T8326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.582'. [ 320.372568][ T8319] tipc: Resetting bearer [ 320.385753][ T8319] tipc: Resetting bearer [ 320.417005][ T8319] tipc: Disabling bearer [ 320.432559][ T8328] IPVS: set_ctl: invalid protocol: 161 224.0.0.2:20003 [ 320.450468][ T8328] netlink: 'syz.1.583': attribute type 13 has an invalid length. [ 320.462050][ T8328] netlink: 14589 bytes leftover after parsing attributes in process `syz.1.583'. [ 320.771646][ T8339] netlink: 'syz.0.584': attribute type 12 has an invalid length. [ 320.814258][ T8339] netlink: 'syz.0.584': attribute type 4 has an invalid length. [ 321.244418][ T8353] wlan0 speed is unknown, defaulting to 1000 [ 321.293733][ T8353] wlan0 speed is unknown, defaulting to 1000 [ 321.336822][ T8353] wlan0 speed is unknown, defaulting to 1000 [ 321.377425][ T8353] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 321.419584][ T8353] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 321.621885][ T8353] wlan0 speed is unknown, defaulting to 1000 [ 321.653399][ T8353] wlan0 speed is unknown, defaulting to 1000 [ 321.687233][ T8353] wlan0 speed is unknown, defaulting to 1000 [ 321.715965][ T8353] wlan0 speed is unknown, defaulting to 1000 [ 321.763447][ T8353] wlan0 speed is unknown, defaulting to 1000 [ 321.809722][ T8367] FAULT_INJECTION: forcing a failure. [ 321.809722][ T8367] name failslab, interval 1, probability 0, space 0, times 0 [ 321.856819][ T8367] CPU: 0 UID: 0 PID: 8367 Comm: syz.0.593 Not tainted syzkaller #0 PREEMPT(full) [ 321.856848][ T8367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.856861][ T8367] Call Trace: [ 321.856869][ T8367] [ 321.856878][ T8367] dump_stack_lvl+0x189/0x250 [ 321.856914][ T8367] ? __pfx____ratelimit+0x10/0x10 [ 321.856939][ T8367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.856969][ T8367] ? __pfx__printk+0x10/0x10 [ 321.856998][ T8367] ? __pfx___might_resched+0x10/0x10 [ 321.857020][ T8367] ? fs_reclaim_acquire+0x7d/0x100 [ 321.857059][ T8367] should_fail_ex+0x414/0x560 [ 321.857098][ T8367] should_failslab+0xa8/0x100 [ 321.857121][ T8367] __kmalloc_noprof+0xcb/0x7f0 [ 321.857151][ T8367] ? stack_depot_save_flags+0x40/0x860 [ 321.857181][ T8367] ? fib6_info_alloc+0x30/0xf0 [ 321.857213][ T8367] fib6_info_alloc+0x30/0xf0 [ 321.857248][ T8367] ip6_route_info_create+0x142/0x860 [ 321.857278][ T8367] ? bpf_lsm_capable+0x9/0x20 [ 321.857310][ T8367] ip6_route_add+0x49/0x1b0 [ 321.857341][ T8367] ipv6_route_ioctl+0x35c/0x480 [ 321.857378][ T8367] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 321.857444][ T8367] inet6_ioctl+0x219/0x280 [ 321.857466][ T8367] ? __pfx_inet6_ioctl+0x10/0x10 [ 321.857498][ T8367] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 321.857535][ T8367] sock_do_ioctl+0xdc/0x300 [ 321.857569][ T8367] ? __pfx_sock_do_ioctl+0x10/0x10 [ 321.857614][ T8367] sock_ioctl+0x576/0x790 [ 321.857642][ T8367] ? __pfx_sock_ioctl+0x10/0x10 [ 321.857671][ T8367] ? __fget_files+0x3a0/0x420 [ 321.857691][ T8367] ? __fget_files+0x2a/0x420 [ 321.857715][ T8367] ? bpf_lsm_file_ioctl+0x9/0x20 [ 321.857739][ T8367] ? __pfx_sock_ioctl+0x10/0x10 [ 321.857764][ T8367] __se_sys_ioctl+0xfc/0x170 [ 321.857795][ T8367] do_syscall_64+0xfa/0xfa0 [ 321.857820][ T8367] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.857846][ T8367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.857867][ T8367] ? clear_bhb_loop+0x60/0xb0 [ 321.857894][ T8367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.857915][ T8367] RIP: 0033:0x7f6c3d78efc9 [ 321.857934][ T8367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.857951][ T8367] RSP: 002b:00007f6c3e54a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.857974][ T8367] RAX: ffffffffffffffda RBX: 00007f6c3d9e5fa0 RCX: 00007f6c3d78efc9 [ 321.857990][ T8367] RDX: 0000200000000600 RSI: 000000000000890b RDI: 0000000000000003 [ 321.858003][ T8367] RBP: 00007f6c3e54a090 R08: 0000000000000000 R09: 0000000000000000 [ 321.858016][ T8367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.858029][ T8367] R13: 00007f6c3d9e6038 R14: 00007f6c3d9e5fa0 R15: 00007ffeda912f08 [ 321.858065][ T8367] [ 322.609462][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.616943][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.672040][ T8389] netlink: 'syz.4.599': attribute type 3 has an invalid length. [ 322.722634][ T8387] lo speed is unknown, defaulting to 1000 [ 322.937676][ T8397] team_slave_0: entered promiscuous mode [ 322.944084][ T8397] team_slave_1: entered promiscuous mode [ 322.995423][ T8397] vlan2: entered promiscuous mode [ 323.001227][ T8397] team0: entered promiscuous mode [ 323.171340][ T8387] ip6_vti0 speed is unknown, defaulting to 1000 [ 323.641275][ T8416] sctp: [Deprecated]: syz.0.607 (pid 8416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.641275][ T8416] Use struct sctp_sack_info instead [ 323.702751][ T8387] wlan0 speed is unknown, defaulting to 1000 [ 323.867915][ T8386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.923469][ T8421] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 324.557243][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.635851][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 325.432064][ T8467] FAULT_INJECTION: forcing a failure. [ 325.432064][ T8467] name failslab, interval 1, probability 0, space 0, times 0 [ 325.480133][ T8467] CPU: 1 UID: 0 PID: 8467 Comm: syz.0.621 Not tainted syzkaller #0 PREEMPT(full) [ 325.480163][ T8467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.480176][ T8467] Call Trace: [ 325.480185][ T8467] [ 325.480194][ T8467] dump_stack_lvl+0x189/0x250 [ 325.480230][ T8467] ? __pfx____ratelimit+0x10/0x10 [ 325.480255][ T8467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.480285][ T8467] ? __pfx__printk+0x10/0x10 [ 325.480324][ T8467] should_fail_ex+0x414/0x560 [ 325.480362][ T8467] should_failslab+0xa8/0x100 [ 325.480386][ T8467] __kmalloc_cache_noprof+0x6f/0x6f0 [ 325.480417][ T8467] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 325.480442][ T8467] ? sctp_add_bind_addr+0x8c/0x370 [ 325.480475][ T8467] sctp_add_bind_addr+0x8c/0x370 [ 325.480506][ T8467] sctp_copy_local_addr_list+0x30b/0x4e0 [ 325.480536][ T8467] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 325.480563][ T8467] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 325.480604][ T8467] ? sctp_v4_is_any+0x35/0x60 [ 325.480630][ T8467] ? sctp_copy_one_addr+0x93/0x360 [ 325.480659][ T8467] sctp_bind_addr_copy+0xb3/0x3c0 [ 325.480686][ T8467] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 325.480713][ T8467] sctp_connect_new_asoc+0x2e0/0x690 [ 325.480749][ T8467] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 325.480780][ T8467] ? __local_bh_enable_ip+0x12d/0x1c0 [ 325.480811][ T8467] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 325.480834][ T8467] ? security_sctp_bind_connect+0x7e/0x2e0 [ 325.480872][ T8467] sctp_sendmsg+0x155c/0x2810 [ 325.480917][ T8467] ? __pfx_sctp_sendmsg+0x10/0x10 [ 325.480953][ T8467] ? aa_sk_perm+0x81e/0x950 [ 325.480981][ T8467] ? __lock_acquire+0xab9/0xd20 [ 325.481005][ T8467] ? __pfx_aa_sk_perm+0x10/0x10 [ 325.481038][ T8467] ? sock_rps_record_flow+0x19/0x410 [ 325.481073][ T8467] ? inet_sendmsg+0x2f4/0x370 [ 325.481109][ T8467] __sock_sendmsg+0x19c/0x270 [ 325.481153][ T8467] ____sys_sendmsg+0x52d/0x830 [ 325.481182][ T8467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.481215][ T8467] ? import_iovec+0x74/0xa0 [ 325.481247][ T8467] ___sys_sendmsg+0x21f/0x2a0 [ 325.481272][ T8467] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.481341][ T8467] ? __fget_files+0x2a/0x420 [ 325.481361][ T8467] ? __fget_files+0x3a0/0x420 [ 325.481393][ T8467] __sys_sendmmsg+0x227/0x430 [ 325.481423][ T8467] ? __pfx___sys_sendmmsg+0x10/0x10 [ 325.481456][ T8467] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 325.481511][ T8467] ? ksys_write+0x22a/0x250 [ 325.481544][ T8467] ? __pfx_ksys_write+0x10/0x10 [ 325.481580][ T8467] __x64_sys_sendmmsg+0xa0/0xc0 [ 325.481611][ T8467] do_syscall_64+0xfa/0xfa0 [ 325.481635][ T8467] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.481660][ T8467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.481682][ T8467] ? clear_bhb_loop+0x60/0xb0 [ 325.481708][ T8467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.481729][ T8467] RIP: 0033:0x7f6c3d78efc9 [ 325.481750][ T8467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.481768][ T8467] RSP: 002b:00007f6c3e54a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 325.481791][ T8467] RAX: ffffffffffffffda RBX: 00007f6c3d9e5fa0 RCX: 00007f6c3d78efc9 [ 325.481806][ T8467] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 325.481819][ T8467] RBP: 00007f6c3e54a090 R08: 0000000000000000 R09: 0000000000000000 [ 325.481832][ T8467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.481844][ T8467] R13: 00007f6c3d9e6038 R14: 00007f6c3d9e5fa0 R15: 00007ffeda912f08 [ 325.481887][ T8467] [ 326.100843][ T8471] netlink: 84 bytes leftover after parsing attributes in process `syz.3.623'. [ 326.325852][ T8481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.626'. [ 326.500087][ T8485] netlink: 'syz.4.628': attribute type 1 has an invalid length. [ 326.569272][ T8485] bond1: entered promiscuous mode [ 326.574658][ T8485] bond1: entered allmulticast mode [ 326.694102][ T8487] bond1: (slave ip6gretap3): making interface the new active one [ 326.702303][ T8487] ip6gretap3: entered promiscuous mode [ 326.708806][ T8487] ip6gretap3: entered allmulticast mode [ 326.717307][ T8487] bond1: (slave ip6gretap3): Enslaving as an active interface with an up link [ 326.836324][ T8485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.628'. [ 326.874867][ T8485] bond1: left promiscuous mode [ 326.890097][ T8485] ip6gretap3: left promiscuous mode [ 326.914772][ T8485] bond1: left allmulticast mode [ 326.930118][ T8485] ip6gretap3: left allmulticast mode [ 326.947279][ T8485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.343628][ T8501] lo speed is unknown, defaulting to 1000 [ 327.446659][ T8511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.637'. [ 327.480883][ T8511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.637'. [ 327.809300][ T8501] ip6_vti0 speed is unknown, defaulting to 1000 [ 328.205924][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'. [ 328.485305][ T8530] veth0_to_bridge: left allmulticast mode [ 328.495411][ T8530] veth0_to_bridge: left promiscuous mode [ 328.501756][ T8530] bridge0: port 3(veth0_to_bridge) entered disabled state [ 329.302559][ T8534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.644'. [ 329.311872][ T8534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.644'. [ 330.025993][ T8530] bridge_slave_1: left allmulticast mode [ 330.033516][ T8530] bridge_slave_1: left promiscuous mode [ 330.058855][ T8530] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.090537][ T8530] bridge_slave_0: left promiscuous mode [ 330.106494][ T8530] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.228634][ T8540] netlink: 36 bytes leftover after parsing attributes in process `syz.4.645'. [ 330.322587][ T8501] wlan0 speed is unknown, defaulting to 1000 [ 330.332469][ T8534] dummy0: entered promiscuous mode [ 330.340571][ T8534] team0: entered promiscuous mode [ 330.348057][ T8534] debugfs: 'hsr1' already exists in 'hsr' [ 330.354031][ T8534] Cannot create hsr debugfs directory [ 330.369618][ T8534] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 330.936847][ T8556] dvmrp8: entered allmulticast mode [ 331.018364][ T8549] lo speed is unknown, defaulting to 1000 [ 331.558592][ T8555] dvmrp8: left allmulticast mode [ 331.686665][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 331.709851][ T7948] block nbd0: Receive control failed (result -22) [ 331.745486][ T8571] nbd0: detected capacity change from 0 to 32 [ 331.762566][ T7761] block nbd0: Dead connection, failed to find a fallback [ 331.785194][ T7761] block nbd0: shutting down sockets [ 331.791025][ T7761] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.832402][ T7761] Buffer I/O error on dev nbd0, logical block 0, async page read [ 331.855493][ T7761] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.884247][ T7761] Buffer I/O error on dev nbd0, logical block 0, async page read [ 331.904606][ T8580] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 331.906911][ T7761] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.981330][ T7761] Buffer I/O error on dev nbd0, logical block 0, async page read [ 332.015631][ T7761] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.035482][ T7761] Buffer I/O error on dev nbd0, logical block 0, async page read [ 332.044722][ T7761] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.093775][ T7761] Buffer I/O error on dev nbd0, logical block 0, async page read [ 332.115752][ T7761] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.135923][ T7761] Buffer I/O error on dev nbd0, logical block 0, async page read [ 332.155741][ T7761] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.186533][ T7761] Buffer I/O error on dev nbd0, logical block 0, async page read [ 332.205366][ T7761] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.219416][ T8589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.656'. [ 332.246304][ T8589] netlink: 68 bytes leftover after parsing attributes in process `syz.3.656'. [ 332.255983][ T7761] Buffer I/O error on dev nbd0, logical block 0, async page read [ 332.264324][ T7761] ldm_validate_partition_table(): Disk read failed. [ 332.296509][ T7761] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.325280][ T7761] Buffer I/O error on dev nbd0, logical block 0, async page read [ 332.338910][ T7761] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.369646][ T7761] Buffer I/O error on dev nbd0, logical block 0, async page read [ 332.394061][ T7761] Dev nbd0: unable to read RDB block 0 [ 332.410725][ T7761] nbd0: unable to read partition table [ 332.430332][ T7761] ldm_validate_partition_table(): Disk read failed. [ 332.439757][ T7761] Dev nbd0: unable to read RDB block 0 [ 332.449880][ T7761] nbd0: unable to read partition table [ 332.688168][ T8557] lo speed is unknown, defaulting to 1000 [ 332.707114][ T8549] ip6_vti0 speed is unknown, defaulting to 1000 [ 332.916431][ T8610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.271892][ T8583] lo speed is unknown, defaulting to 1000 [ 333.340065][ T8626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.666'. [ 333.363743][ T8626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.391206][ T8557] ip6_vti0 speed is unknown, defaulting to 1000 [ 333.417003][ T8549] wlan0 speed is unknown, defaulting to 1000 [ 333.520238][ T8632] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 333.529737][ T8632] netlink: 'syz.0.669': attribute type 3 has an invalid length. [ 333.829772][ T8641] netlink: 'syz.3.671': attribute type 11 has an invalid length. [ 333.848280][ T8641] netlink: 224 bytes leftover after parsing attributes in process `syz.3.671'. [ 333.999496][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 334.029746][ T8637] netlink: 28 bytes leftover after parsing attributes in process `syz.3.671'. [ 334.061484][ T8557] wlan0 speed is unknown, defaulting to 1000 [ 334.078998][ T8583] ip6_vti0 speed is unknown, defaulting to 1000 [ 334.758612][ T8662] GUP no longer grows the stack in syz.3.676 (8662): 200000003000-20000000a000 (200000001000) [ 334.772391][ T8662] CPU: 1 UID: 0 PID: 8662 Comm: syz.3.676 Not tainted syzkaller #0 PREEMPT(full) [ 334.772422][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 334.772435][ T8662] Call Trace: [ 334.772443][ T8662] [ 334.772452][ T8662] dump_stack_lvl+0x189/0x250 [ 334.772492][ T8662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.772521][ T8662] ? __pfx__printk+0x10/0x10 [ 334.772540][ T8662] ? find_vma+0xe7/0x160 [ 334.772584][ T8662] __get_user_pages+0x2470/0x2a00 [ 334.772650][ T8662] ? __gup_longterm_locked+0xc63/0x1660 [ 334.772679][ T8662] ? down_read_killable+0x1d1/0x350 [ 334.772714][ T8662] __gup_longterm_locked+0xde4/0x1660 [ 334.772754][ T8662] ? sanity_check_pinned_pages+0x123a/0x1300 [ 334.772803][ T8662] gup_fast_fallback+0x1d65/0x22d0 [ 334.772831][ T8662] ? is_bpf_text_address+0x26/0x2b0 [ 334.772896][ T8662] ? __pfx_gup_fast_fallback+0x10/0x10 [ 334.772923][ T8662] ? stack_trace_save+0x9c/0xe0 [ 334.772956][ T8662] ? stack_depot_save_flags+0x40/0x860 [ 334.772989][ T8662] ? __page_table_check_zero+0x1/0x530 [ 334.773027][ T8662] ? pin_user_pages_fast+0x4d/0xb0 [ 334.773057][ T8662] iov_iter_extract_pages+0x35f/0x5e0 [ 334.773096][ T8662] extract_iter_to_sg+0xe46/0x24e0 [ 334.773137][ T8662] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 334.773183][ T8662] ? __asan_memset+0x22/0x50 [ 334.773214][ T8662] af_alg_get_rsgl+0x436/0x810 [ 334.773264][ T8662] aead_recvmsg+0x4d5/0x13b0 [ 334.773304][ T8662] ? aa_sk_perm+0x81e/0x950 [ 334.773347][ T8662] ? __pfx_aead_recvmsg+0x10/0x10 [ 334.773381][ T8662] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 334.773403][ T8662] ? __pfx_aead_recvmsg+0x10/0x10 [ 334.773435][ T8662] sock_recvmsg_nosec+0x186/0x1c0 [ 334.773470][ T8662] ____sys_recvmsg+0x3aa/0x460 [ 334.773504][ T8662] ? __pfx_____sys_recvmsg+0x10/0x10 [ 334.773546][ T8662] ? import_iovec+0x74/0xa0 [ 334.773578][ T8662] ___sys_recvmsg+0x1b5/0x510 [ 334.773608][ T8662] ? __pfx____sys_recvmsg+0x10/0x10 [ 334.773679][ T8662] ? __might_fault+0xb0/0x130 [ 334.773714][ T8662] do_recvmmsg+0x307/0x770 [ 334.773749][ T8662] ? __pfx_do_recvmmsg+0x10/0x10 [ 334.773787][ T8662] ? __pfx_do_futex+0x10/0x10 [ 334.773839][ T8662] __x64_sys_recvmmsg+0x190/0x240 [ 334.773866][ T8662] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 334.773895][ T8662] ? do_syscall_64+0xbe/0xfa0 [ 334.773926][ T8662] do_syscall_64+0xfa/0xfa0 [ 334.773951][ T8662] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.773977][ T8662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.773999][ T8662] ? clear_bhb_loop+0x60/0xb0 [ 334.774026][ T8662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.774048][ T8662] RIP: 0033:0x7eff92f8efc9 [ 334.774069][ T8662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.774087][ T8662] RSP: 002b:00007eff93f06038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 334.774111][ T8662] RAX: ffffffffffffffda RBX: 00007eff931e5fa0 RCX: 00007eff92f8efc9 [ 334.774126][ T8662] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000a [ 334.774139][ T8662] RBP: 00007eff93011f91 R08: 0000000000000000 R09: 0000000000000000 [ 334.774152][ T8662] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 334.774164][ T8662] R13: 00007eff931e6038 R14: 00007eff931e5fa0 R15: 00007ffd2ec6c268 [ 334.774202][ T8662] [ 334.811757][ T8583] wlan0 speed is unknown, defaulting to 1000 [ 335.390902][ T8669] lo speed is unknown, defaulting to 1000 [ 336.022012][ T8669] ip6_vti0 speed is unknown, defaulting to 1000 [ 336.072358][ T8664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.421081][ T8669] wlan0 speed is unknown, defaulting to 1000 [ 336.437913][ T8688] lo speed is unknown, defaulting to 1000 [ 336.869727][ T8703] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 336.903902][ T8703] netlink: 72 bytes leftover after parsing attributes in process `syz.1.685'. [ 337.089095][ T8702] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 337.168431][ T8688] ip6_vti0 speed is unknown, defaulting to 1000 [ 337.280182][ T8712] netlink: 'syz.1.689': attribute type 4 has an invalid length. [ 337.293121][ T8712] netlink: 'syz.1.689': attribute type 4 has an invalid length. [ 337.430712][ T8715] netlink: 'syz.1.689': attribute type 13 has an invalid length. [ 339.066440][ T8688] wlan0 speed is unknown, defaulting to 1000 [ 339.085278][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.117078][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.191256][ T50] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.293042][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.388395][ T8756] netlink: 'syz.2.696': attribute type 1 has an invalid length. [ 340.488841][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 340.498394][ T8735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.693'. [ 340.815855][ T8751] lo speed is unknown, defaulting to 1000 [ 340.835875][ T8754] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 340.844674][ T8754] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 340.895962][ T8754] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 341.647854][ T8751] ip6_vti0 speed is unknown, defaulting to 1000 [ 341.788207][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.704'. [ 341.867004][ T8781] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 342.152542][ T8785] ip6tnl1: entered promiscuous mode [ 342.176636][ T8785] ip6tnl1: entered allmulticast mode [ 342.329480][ T8791] netlink: 44 bytes leftover after parsing attributes in process `syz.4.707'. [ 342.335802][ T8751] wlan0 speed is unknown, defaulting to 1000 [ 342.355774][ T8789] netlink: 'syz.4.707': attribute type 1 has an invalid length. [ 342.376575][ T8791] gretap1: entered allmulticast mode [ 342.781582][ T8797] lo speed is unknown, defaulting to 1000 [ 342.969531][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 343.022746][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 343.092383][ T25] block nbd1: Possible stuck request ffff888024dee000: control (read@0,1024B). Runtime 240 seconds [ 343.104094][ T25] block nbd1: Possible stuck request ffff888024dee1c0: control (read@1024,1024B). Runtime 240 seconds [ 343.111619][ T8804] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 343.116468][ T25] block nbd1: Possible stuck request ffff888024dee380: control (read@2048,1024B). Runtime 240 seconds [ 343.116510][ T25] block nbd1: Possible stuck request ffff888024dee540: control (read@3072,1024B). Runtime 240 seconds [ 343.160272][ T8802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.189382][ T8802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.225446][ T8729] lo speed is unknown, defaulting to 1000 [ 343.231399][ T8729] syz2: Port: 1 Link ACTIVE [ 343.253209][ T5908] ip6_vti0 speed is unknown, defaulting to 1000 [ 343.259707][ T5908] óyz2: Port: 1 Link ACTIVE [ 343.261616][ T9] lo speed is unknown, defaulting to 1000 [ 343.284107][ T5921] ip6_vti0 speed is unknown, defaulting to 1000 [ 343.325017][ T8804] netlink: 224 bytes leftover after parsing attributes in process `syz.3.710'. [ 343.416282][ T8807] bond0: (slave dummy0): Releasing backup interface [ 343.460859][ T8807] dummy0: left promiscuous mode [ 343.467874][ T8807] dummy0: left allmulticast mode [ 343.491271][ T8807] veth0_to_bridge: left allmulticast mode [ 343.506308][ T8807] veth0_to_bridge: left promiscuous mode [ 343.513870][ T8807] bridge0: port 1(veth0_to_bridge) entered disabled state [ 343.536570][ T8809] netlink: 'syz.0.711': attribute type 10 has an invalid length. [ 343.572657][ T8807] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 343.799819][ T8809] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 343.821051][ T8809] bond0: (slave wlan1): Opening slave failed [ 343.829766][ T8797] ip6_vti0 speed is unknown, defaulting to 1000 [ 344.500464][ T8797] wlan0 speed is unknown, defaulting to 1000 [ 344.792137][ T8849] SET target dimension over the limit! [ 344.819133][ T8840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.720'. [ 345.143748][ T8840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.153791][ T8840] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.166620][ T8840] caif0: left promiscuous mode [ 345.171523][ T8840] caif0: left allmulticast mode [ 345.177028][ T8840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.193705][ T8851] netlink: 36 bytes leftover after parsing attributes in process `syz.2.723'. [ 345.209438][ T8842] lo speed is unknown, defaulting to 1000 [ 345.338657][ T8870] FAULT_INJECTION: forcing a failure. [ 345.338657][ T8870] name failslab, interval 1, probability 0, space 0, times 0 [ 345.391256][ T8870] CPU: 0 UID: 0 PID: 8870 Comm: syz.3.728 Not tainted syzkaller #0 PREEMPT(full) [ 345.391287][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.391300][ T8870] Call Trace: [ 345.391308][ T8870] [ 345.391318][ T8870] dump_stack_lvl+0x189/0x250 [ 345.391352][ T8870] ? __pfx____ratelimit+0x10/0x10 [ 345.391378][ T8870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.391407][ T8870] ? __pfx__printk+0x10/0x10 [ 345.391447][ T8870] should_fail_ex+0x414/0x560 [ 345.391487][ T8870] should_failslab+0xa8/0x100 [ 345.391512][ T8870] __kmalloc_cache_noprof+0x6f/0x6f0 [ 345.391544][ T8870] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 345.391568][ T8870] ? sctp_add_bind_addr+0x8c/0x370 [ 345.391591][ T8870] ? sctp_add_bind_addr+0xb0/0x370 [ 345.391622][ T8870] sctp_add_bind_addr+0x8c/0x370 [ 345.391672][ T8870] sctp_copy_local_addr_list+0x30b/0x4e0 [ 345.391702][ T8870] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 345.391729][ T8870] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 345.391759][ T8870] ? sctp_v4_is_any+0x35/0x60 [ 345.391786][ T8870] ? sctp_copy_one_addr+0x93/0x360 [ 345.391816][ T8870] sctp_bind_addr_copy+0xb3/0x3c0 [ 345.391843][ T8870] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 345.391870][ T8870] sctp_connect_new_asoc+0x2e0/0x690 [ 345.391907][ T8870] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 345.391936][ T8870] ? __local_bh_enable_ip+0x12d/0x1c0 [ 345.391968][ T8870] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 345.391991][ T8870] ? security_sctp_bind_connect+0x7e/0x2e0 [ 345.392019][ T8870] sctp_sendmsg+0x155c/0x2810 [ 345.392065][ T8870] ? __pfx_sctp_sendmsg+0x10/0x10 [ 345.392099][ T8870] ? aa_sk_perm+0x81e/0x950 [ 345.392128][ T8870] ? __lock_acquire+0xab9/0xd20 [ 345.392153][ T8870] ? __pfx_aa_sk_perm+0x10/0x10 [ 345.392186][ T8870] ? sock_rps_record_flow+0x19/0x410 [ 345.392220][ T8870] ? inet_sendmsg+0x2f4/0x370 [ 345.392255][ T8870] __sock_sendmsg+0x19c/0x270 [ 345.392287][ T8870] ____sys_sendmsg+0x52d/0x830 [ 345.392316][ T8870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.392349][ T8870] ? import_iovec+0x74/0xa0 [ 345.392381][ T8870] ___sys_sendmsg+0x21f/0x2a0 [ 345.392406][ T8870] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.392471][ T8870] ? __fget_files+0x2a/0x420 [ 345.392490][ T8870] ? __fget_files+0x3a0/0x420 [ 345.392523][ T8870] __sys_sendmmsg+0x227/0x430 [ 345.392551][ T8870] ? __pfx___sys_sendmmsg+0x10/0x10 [ 345.392585][ T8870] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 345.392636][ T8870] ? ksys_write+0x22a/0x250 [ 345.392678][ T8870] ? __pfx_ksys_write+0x10/0x10 [ 345.392715][ T8870] __x64_sys_sendmmsg+0xa0/0xc0 [ 345.392740][ T8870] do_syscall_64+0xfa/0xfa0 [ 345.392764][ T8870] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.392789][ T8870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.392810][ T8870] ? clear_bhb_loop+0x60/0xb0 [ 345.392836][ T8870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.392857][ T8870] RIP: 0033:0x7eff92f8efc9 [ 345.392876][ T8870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.392893][ T8870] RSP: 002b:00007eff93f06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 345.392917][ T8870] RAX: ffffffffffffffda RBX: 00007eff931e5fa0 RCX: 00007eff92f8efc9 [ 345.392932][ T8870] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 345.392945][ T8870] RBP: 00007eff93f06090 R08: 0000000000000000 R09: 0000000000000000 [ 345.392958][ T8870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 345.392970][ T8870] R13: 00007eff931e6038 R14: 00007eff931e5fa0 R15: 00007ffd2ec6c268 [ 345.393007][ T8870] [ 345.856462][ T8842] ip6_vti0 speed is unknown, defaulting to 1000 [ 346.058721][ T8730] IPVS: starting estimator thread 0... [ 346.205493][ T8887] IPVS: using max 27 ests per chain, 64800 per kthread [ 346.341604][ T8899] tipc: Enabled bearer , priority 0 [ 346.456179][ T8898] tipc: Disabling bearer [ 346.514424][ T8871] lo speed is unknown, defaulting to 1000 [ 346.526350][ T8842] wlan0 speed is unknown, defaulting to 1000 [ 346.710247][ T8905] netlink: 36 bytes leftover after parsing attributes in process `syz.0.735'. [ 347.199998][ T8911] batadv1: entered promiscuous mode [ 347.222524][ T8911] batadv1: entered allmulticast mode [ 347.339411][ T8912] batadv1: entered promiscuous mode [ 347.344776][ T8912] batadv1: entered allmulticast mode [ 347.849140][ T8886] lo speed is unknown, defaulting to 1000 [ 347.964221][ T8930] FAULT_INJECTION: forcing a failure. [ 347.964221][ T8930] name failslab, interval 1, probability 0, space 0, times 0 [ 348.009249][ T8930] CPU: 1 UID: 0 PID: 8930 Comm: syz.4.740 Not tainted syzkaller #0 PREEMPT(full) [ 348.009282][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 348.009296][ T8930] Call Trace: [ 348.009305][ T8930] [ 348.009315][ T8930] dump_stack_lvl+0x189/0x250 [ 348.009352][ T8930] ? __pfx____ratelimit+0x10/0x10 [ 348.009388][ T8930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.009418][ T8930] ? __pfx__printk+0x10/0x10 [ 348.009458][ T8930] should_fail_ex+0x414/0x560 [ 348.009497][ T8930] should_failslab+0xa8/0x100 [ 348.009522][ T8930] __kmalloc_cache_noprof+0x6f/0x6f0 [ 348.009554][ T8930] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 348.009579][ T8930] ? sctp_add_bind_addr+0x8c/0x370 [ 348.009612][ T8930] sctp_add_bind_addr+0x8c/0x370 [ 348.009644][ T8930] sctp_copy_local_addr_list+0x30b/0x4e0 [ 348.009675][ T8930] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 348.009701][ T8930] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 348.009733][ T8930] ? sctp_v4_is_any+0x35/0x60 [ 348.009759][ T8930] ? sctp_copy_one_addr+0x93/0x360 [ 348.009790][ T8930] sctp_bind_addr_copy+0xb3/0x3c0 [ 348.009818][ T8930] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 348.009845][ T8930] sctp_connect_new_asoc+0x2e0/0x690 [ 348.009881][ T8930] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 348.009911][ T8930] ? __local_bh_enable_ip+0x12d/0x1c0 [ 348.009943][ T8930] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 348.009966][ T8930] ? security_sctp_bind_connect+0x7e/0x2e0 [ 348.009996][ T8930] sctp_sendmsg+0x155c/0x2810 [ 348.010042][ T8930] ? __pfx_sctp_sendmsg+0x10/0x10 [ 348.010078][ T8930] ? aa_sk_perm+0x81e/0x950 [ 348.010108][ T8930] ? __lock_acquire+0xab9/0xd20 [ 348.010133][ T8930] ? __pfx_aa_sk_perm+0x10/0x10 [ 348.010166][ T8930] ? sock_rps_record_flow+0x19/0x410 [ 348.010202][ T8930] ? inet_sendmsg+0x2f4/0x370 [ 348.010239][ T8930] __sock_sendmsg+0x19c/0x270 [ 348.010272][ T8930] ____sys_sendmsg+0x52d/0x830 [ 348.010301][ T8930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.010334][ T8930] ? import_iovec+0x74/0xa0 [ 348.010366][ T8930] ___sys_sendmsg+0x21f/0x2a0 [ 348.010400][ T8930] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.010466][ T8930] ? __fget_files+0x2a/0x420 [ 348.010486][ T8930] ? __fget_files+0x3a0/0x420 [ 348.010518][ T8930] __sys_sendmmsg+0x227/0x430 [ 348.010548][ T8930] ? __pfx___sys_sendmmsg+0x10/0x10 [ 348.010595][ T8930] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 348.010644][ T8930] ? ksys_write+0x22a/0x250 [ 348.010678][ T8930] ? __pfx_ksys_write+0x10/0x10 [ 348.010716][ T8930] __x64_sys_sendmmsg+0xa0/0xc0 [ 348.010741][ T8930] do_syscall_64+0xfa/0xfa0 [ 348.010766][ T8930] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.010792][ T8930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.010813][ T8930] ? clear_bhb_loop+0x60/0xb0 [ 348.010841][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.010863][ T8930] RIP: 0033:0x7fbc2378efc9 [ 348.010883][ T8930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.010901][ T8930] RSP: 002b:00007fbc246dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 348.010924][ T8930] RAX: ffffffffffffffda RBX: 00007fbc239e5fa0 RCX: 00007fbc2378efc9 [ 348.010940][ T8930] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 348.010953][ T8930] RBP: 00007fbc246dd090 R08: 0000000000000000 R09: 0000000000000000 [ 348.010966][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 348.010978][ T8930] R13: 00007fbc239e6038 R14: 00007fbc239e5fa0 R15: 00007ffedcf09018 [ 348.011015][ T8930] [ 348.521155][ T8886] ip6_vti0 speed is unknown, defaulting to 1000 [ 348.750384][ T8923] lo speed is unknown, defaulting to 1000 [ 348.758337][ T8886] wlan0 speed is unknown, defaulting to 1000 [ 348.824399][ T8871] ip6_vti0 speed is unknown, defaulting to 1000 [ 349.333235][ T8888] lo speed is unknown, defaulting to 1000 [ 349.654914][ T8871] wlan0 speed is unknown, defaulting to 1000 [ 349.790315][ T8923] ip6_vti0 speed is unknown, defaulting to 1000 [ 350.079367][ T8943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.744'. [ 350.107849][ T8943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.744'. [ 350.468723][ T8888] ip6_vti0 speed is unknown, defaulting to 1000 [ 350.799949][ T8888] wlan0 speed is unknown, defaulting to 1000 [ 351.002593][ T8956] lo speed is unknown, defaulting to 1000 [ 351.009517][ T8923] wlan0 speed is unknown, defaulting to 1000 [ 351.040415][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 351.740444][ T8956] ip6_vti0 speed is unknown, defaulting to 1000 [ 351.927460][ T8973] lo speed is unknown, defaulting to 1000 [ 352.129666][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 352.627440][ T8973] ip6_vti0 speed is unknown, defaulting to 1000 [ 352.636709][ T8956] wlan0 speed is unknown, defaulting to 1000 [ 352.756562][ T8994] netlink: 240 bytes leftover after parsing attributes in process `syz.2.751'. [ 353.106136][ T8999] netlink: 'syz.3.753': attribute type 4 has an invalid length. [ 353.256818][ T8973] wlan0 speed is unknown, defaulting to 1000 [ 354.739261][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'. [ 354.771676][ T9038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.760'. [ 354.865457][ T9041] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 355.358454][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.770'. [ 355.565953][ T30] audit: type=1800 audit(1761391745.208:2): pid=9070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.770" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 355.566566][ T9070] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 355.624135][ T9070] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 355.645542][ T9070] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 355.781286][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.775'. [ 355.917817][ T9092] lo speed is unknown, defaulting to 1000 [ 355.938540][ T9096] netlink: 20 bytes leftover after parsing attributes in process `syz.4.778'. [ 355.972973][ T9096] netlink: 32 bytes leftover after parsing attributes in process `syz.4.778'. [ 356.009961][ T9100] netlink: 332 bytes leftover after parsing attributes in process `syz.2.779'. [ 356.051376][ T9100] netlink: 'syz.2.779': attribute type 9 has an invalid length. [ 356.077778][ T9100] netlink: 108 bytes leftover after parsing attributes in process `syz.2.779'. [ 356.098715][ T9096] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 356.135577][ T9100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.779'. [ 356.258544][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 356.529411][ T9104] lo speed is unknown, defaulting to 1000 [ 356.597169][ T9092] ip6_vti0 speed is unknown, defaulting to 1000 [ 356.978569][ T9121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.784'. [ 357.004043][ T9121] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 357.151797][ T9104] ip6_vti0 speed is unknown, defaulting to 1000 [ 357.157659][ T9092] wlan0 speed is unknown, defaulting to 1000 [ 357.249061][ T9125] pim6reg1: entered promiscuous mode [ 357.254758][ T9125] pim6reg1: entered allmulticast mode [ 357.353224][ T9127] lo speed is unknown, defaulting to 1000 [ 357.633847][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 357.687275][ T9127] ip6_vti0 speed is unknown, defaulting to 1000 [ 357.803234][ T9130] netlink: 'syz.3.787': attribute type 21 has an invalid length. [ 357.934999][ T9104] wlan0 speed is unknown, defaulting to 1000 [ 357.960555][ T9127] wlan0 speed is unknown, defaulting to 1000 [ 357.995038][ T9132] nbd: socks must be embedded in a SOCK_ITEM attr [ 358.866311][ T9143] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 358.886665][ T9143] syzkaller1: Refused to change device type [ 358.922390][ T9141] RDS: rds_bind could not find a transport for fe80::22, load rds_tcp or rds_rdma? [ 359.722270][ T9164] siw: device registration error -23 [ 359.794413][ T9160] lo speed is unknown, defaulting to 1000 [ 360.192199][ T9160] ip6_vti0 speed is unknown, defaulting to 1000 [ 360.248539][ T9178] ksmbd: Unknown IPC event: 1, ignore. [ 360.386405][ T9181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.461113][ T9160] wlan0 speed is unknown, defaulting to 1000 [ 360.969526][ T9190] __nla_validate_parse: 5 callbacks suppressed [ 360.969608][ T9190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.802'. [ 361.249841][ T9192] netlink: 'syz.4.803': attribute type 4 has an invalid length. [ 361.274295][ T9192] netlink: 17 bytes leftover after parsing attributes in process `syz.4.803'. [ 361.366440][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'. [ 361.612046][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.808'. [ 362.160791][ T9224] lo speed is unknown, defaulting to 1000 [ 362.428127][ T9208] syz.0.808 (9208) used greatest stack depth: 17832 bytes left [ 362.438034][ T9240] netlink: 'syz.2.814': attribute type 5 has an invalid length. [ 362.569277][ T9240] ip6erspan0: entered promiscuous mode [ 362.607274][ T9227] lo speed is unknown, defaulting to 1000 [ 362.644648][ T9224] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.663660][ T9245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.818'. [ 362.783725][ T9247] dvmrp1: entered allmulticast mode [ 362.809139][ T9245] netlink: 'syz.0.818': attribute type 3 has an invalid length. [ 362.826453][ T9245] netlink: 'syz.0.818': attribute type 3 has an invalid length. [ 362.883895][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.818'. [ 363.300394][ T9269] openvswitch: netlink: Missing valid actions attribute. [ 363.332841][ T9269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.492341][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 363.885865][ T9224] wlan0 speed is unknown, defaulting to 1000 [ 363.990230][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'. [ 364.032724][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 364.046354][ T7948] Bluetooth: hci0: command 0x0c1a tx timeout [ 364.079017][ T30] audit: type=1800 audit(1761391753.728:3): pid=9289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.832" name="blkio.bfq.time_recursive" dev="tmpfs" ino=882 res=0 errno=0 [ 364.298519][ T9247] lo speed is unknown, defaulting to 1000 [ 364.298532][ T9227] ip6_vti0 speed is unknown, defaulting to 1000 [ 364.958016][ T9247] ip6_vti0 speed is unknown, defaulting to 1000 [ 364.958089][ T9227] wlan0 speed is unknown, defaulting to 1000 [ 365.044849][ T9317] netlink: 'syz.0.844': attribute type 1 has an invalid length. [ 365.760606][ T9335] netlink: 14 bytes leftover after parsing attributes in process `syz.1.850'. [ 366.202335][ T9335] bond0 (unregistering): Released all slaves [ 366.233547][ T9247] wlan0 speed is unknown, defaulting to 1000 [ 366.550249][ T9350] netlink: 'syz.1.853': attribute type 10 has an invalid length. [ 366.790210][ T9360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.856'. [ 366.986000][ T9371] syz_tun: entered allmulticast mode [ 367.240516][ T9381] syzkaller1: entered promiscuous mode [ 367.246531][ T9381] syzkaller1: entered allmulticast mode [ 367.642811][ T9381] syzkaller1: left promiscuous mode [ 367.671236][ T9381] syzkaller1: left allmulticast mode [ 367.699987][ T9] lo speed is unknown, defaulting to 1000 [ 367.715804][ T9] syz2: Port: 1 Link DOWN [ 367.788128][ T8729] ip6_vti0 speed is unknown, defaulting to 1000 [ 367.811652][ T8729] óyz2: Port: 1 Link DOWN [ 367.818044][ T9394] tipc: Enabled bearer , priority 0 [ 367.829588][ T980] ip6_vti0 speed is unknown, defaulting to 1000 [ 367.841218][ T9386] tipc: Resetting bearer [ 367.857800][ T9] lo speed is unknown, defaulting to 1000 [ 367.858233][ T9396] syzkaller0: entered promiscuous mode [ 367.881290][ T9396] syzkaller0: entered allmulticast mode [ 367.898973][ T9380] lo speed is unknown, defaulting to 1000 [ 368.174022][ T9385] tipc: Resetting bearer [ 368.203414][ T9385] tipc: Disabling bearer [ 368.280819][ T9395] lo speed is unknown, defaulting to 1000 [ 368.306196][ T9380] ip6_vti0 speed is unknown, defaulting to 1000 [ 369.188142][ T9445] C: renamed from lo (while UP) [ 369.211730][ T9445] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 369.477801][ T9380] wlan0 speed is unknown, defaulting to 1000 [ 369.486375][ T9395] ip6_vti0 speed is unknown, defaulting to 1000 [ 370.014001][ T9462] lo speed is unknown, defaulting to 1000 [ 370.369743][ T9462] ip6_vti0 speed is unknown, defaulting to 1000 [ 370.370430][ T9395] wlan0 speed is unknown, defaulting to 1000 [ 370.386086][ T9477] lo speed is unknown, defaulting to 1000 [ 370.642574][ T9458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.281806][ T9462] wlan0 speed is unknown, defaulting to 1000 [ 371.282058][ T9477] ip6_vti0 speed is unknown, defaulting to 1000 [ 371.982802][ T9501] tipc: New replicast peer: 172.20.20.187 [ 371.989454][ T9501] tipc: Enabled bearer , priority 10 [ 372.097337][ T9501] netlink: 'syz.0.887': attribute type 1 has an invalid length. [ 372.149351][ T9477] wlan0 speed is unknown, defaulting to 1000 [ 372.617368][ T9516] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 372.741091][ T9514] pimreg: entered allmulticast mode [ 373.082242][ T9509] lo speed is unknown, defaulting to 1000 [ 373.116470][ T8730] tipc: Node number set to 1801412432 [ 373.183729][ T25] block nbd1: Possible stuck request ffff888024dee000: control (read@0,1024B). Runtime 270 seconds [ 373.196023][ T25] block nbd1: Possible stuck request ffff888024dee1c0: control (read@1024,1024B). Runtime 270 seconds [ 373.208158][ T25] block nbd1: Possible stuck request ffff888024dee380: control (read@2048,1024B). Runtime 270 seconds [ 373.220225][ T25] block nbd1: Possible stuck request ffff888024dee540: control (read@3072,1024B). Runtime 270 seconds [ 374.502225][ T9546] FAULT_INJECTION: forcing a failure. [ 374.502225][ T9546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.536775][ T9546] CPU: 0 UID: 0 PID: 9546 Comm: syz.3.900 Not tainted syzkaller #0 PREEMPT(full) [ 374.536815][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.536834][ T9546] Call Trace: [ 374.536842][ T9546] [ 374.536852][ T9546] dump_stack_lvl+0x189/0x250 [ 374.536887][ T9546] ? __pfx____ratelimit+0x10/0x10 [ 374.536919][ T9546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.536949][ T9546] ? __pfx__printk+0x10/0x10 [ 374.536971][ T9546] ? __might_fault+0xb0/0x130 [ 374.537014][ T9546] should_fail_ex+0x414/0x560 [ 374.537051][ T9546] _copy_from_iter+0x1de/0x1790 [ 374.537087][ T9546] ? rcu_is_watching+0x15/0xb0 [ 374.537117][ T9546] ? kmalloc_reserve+0xbd/0x290 [ 374.537151][ T9546] ? __pfx__copy_from_iter+0x10/0x10 [ 374.537177][ T9546] ? __build_skb_around+0x262/0x3f0 [ 374.537213][ T9546] ? netlink_sendmsg+0x642/0xb30 [ 374.537231][ T9546] ? skb_put+0x11b/0x210 [ 374.537267][ T9546] netlink_sendmsg+0x6b2/0xb30 [ 374.537298][ T9546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.537321][ T9546] ? __lock_acquire+0xab9/0xd20 [ 374.537340][ T9546] ? aa_sock_msg_perm+0xf1/0x1d0 [ 374.537375][ T9546] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.537395][ T9546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.537417][ T9546] __sock_sendmsg+0x21c/0x270 [ 374.537449][ T9546] ____sys_sendmsg+0x505/0x830 [ 374.537477][ T9546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.537509][ T9546] ? import_iovec+0x74/0xa0 [ 374.537540][ T9546] ___sys_sendmsg+0x21f/0x2a0 [ 374.537566][ T9546] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.537625][ T9546] ? __fget_files+0x2a/0x420 [ 374.537644][ T9546] ? __fget_files+0x3a0/0x420 [ 374.537676][ T9546] __x64_sys_sendmsg+0x19b/0x260 [ 374.537710][ T9546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.537744][ T9546] ? __pfx_ksys_write+0x10/0x10 [ 374.537780][ T9546] ? do_syscall_64+0xbe/0xfa0 [ 374.537810][ T9546] do_syscall_64+0xfa/0xfa0 [ 374.537835][ T9546] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.537871][ T9546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.537892][ T9546] ? clear_bhb_loop+0x60/0xb0 [ 374.537919][ T9546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.537947][ T9546] RIP: 0033:0x7eff92f8efc9 [ 374.537966][ T9546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.537986][ T9546] RSP: 002b:00007eff93f06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.538010][ T9546] RAX: ffffffffffffffda RBX: 00007eff931e5fa0 RCX: 00007eff92f8efc9 [ 374.538025][ T9546] RDX: 0000000004004054 RSI: 0000200000000340 RDI: 0000000000000004 [ 374.538040][ T9546] RBP: 00007eff93f06090 R08: 0000000000000000 R09: 0000000000000000 [ 374.538054][ T9546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.538066][ T9546] R13: 00007eff931e6038 R14: 00007eff931e5fa0 R15: 00007ffd2ec6c268 [ 374.538103][ T9546] [ 374.918836][ T9509] ip6_vti0 speed is unknown, defaulting to 1000 [ 374.997042][ T9540] lo speed is unknown, defaulting to 1000 [ 375.269496][ T9562] x_tables: duplicate underflow at hook 4 [ 375.404450][ T9566] x_tables: unsorted underflow at hook 3 [ 375.511624][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'. [ 375.512513][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'. [ 375.817625][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 375.856308][ T9574] lo speed is unknown, defaulting to 1000 [ 375.878424][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.910'. [ 375.962833][ T9540] ip6_vti0 speed is unknown, defaulting to 1000 [ 375.981888][ T9509] wlan0 speed is unknown, defaulting to 1000 [ 376.167260][ T9581] dvmrp0: entered allmulticast mode [ 376.469715][ T9592] FAULT_INJECTION: forcing a failure. [ 376.469715][ T9592] name failslab, interval 1, probability 0, space 0, times 0 [ 376.488558][ T9592] CPU: 1 UID: 0 PID: 9592 Comm: syz.3.913 Not tainted syzkaller #0 PREEMPT(full) [ 376.488588][ T9592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 376.488602][ T9592] Call Trace: [ 376.488612][ T9592] [ 376.488621][ T9592] dump_stack_lvl+0x189/0x250 [ 376.488658][ T9592] ? __pfx____ratelimit+0x10/0x10 [ 376.488684][ T9592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.488715][ T9592] ? __pfx__printk+0x10/0x10 [ 376.488745][ T9592] ? __pfx___might_resched+0x10/0x10 [ 376.488767][ T9592] ? fs_reclaim_acquire+0x7d/0x100 [ 376.488807][ T9592] should_fail_ex+0x414/0x560 [ 376.488846][ T9592] should_failslab+0xa8/0x100 [ 376.488871][ T9592] __kmalloc_noprof+0xcb/0x7f0 [ 376.488902][ T9592] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 376.488939][ T9592] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 376.488975][ T9592] genl_family_rcv_msg_doit+0xb8/0x300 [ 376.489010][ T9592] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 376.489043][ T9592] ? __pfx_genl_get_cmd+0x10/0x10 [ 376.489066][ T9592] ? __pfx_nl80211_set_pmk+0x10/0x10 [ 376.489107][ T9592] ? stack_trace_save+0x9c/0xe0 [ 376.489143][ T9592] genl_rcv_msg+0x60e/0x790 [ 376.489177][ T9592] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.489202][ T9592] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 376.489220][ T9592] ? __pfx_nl80211_set_pmk+0x10/0x10 [ 376.489250][ T9592] ? __pfx_nl80211_post_doit+0x10/0x10 [ 376.489287][ T9592] netlink_rcv_skb+0x208/0x470 [ 376.489318][ T9592] ? __lock_acquire+0xab9/0xd20 [ 376.489339][ T9592] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.489363][ T9592] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.489411][ T9592] ? down_read+0x1ad/0x2e0 [ 376.489441][ T9592] genl_rcv+0x28/0x40 [ 376.489461][ T9592] netlink_unicast+0x82f/0x9e0 [ 376.489504][ T9592] ? __pfx_netlink_unicast+0x10/0x10 [ 376.489532][ T9592] ? netlink_sendmsg+0x642/0xb30 [ 376.489555][ T9592] netlink_sendmsg+0x805/0xb30 [ 376.489583][ T9592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.489604][ T9592] ? __lock_acquire+0xab9/0xd20 [ 376.489620][ T9592] ? aa_sock_msg_perm+0xf1/0x1d0 [ 376.489651][ T9592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.489669][ T9592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.489688][ T9592] __sock_sendmsg+0x21c/0x270 [ 376.489716][ T9592] ____sys_sendmsg+0x505/0x830 [ 376.490103][ T9592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.490143][ T9592] ? import_iovec+0x74/0xa0 [ 376.490171][ T9592] ___sys_sendmsg+0x21f/0x2a0 [ 376.490198][ T9592] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.490253][ T9592] ? __fget_files+0x2a/0x420 [ 376.490271][ T9592] ? __fget_files+0x3a0/0x420 [ 376.490299][ T9592] __x64_sys_sendmsg+0x19b/0x260 [ 376.490322][ T9592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.490352][ T9592] ? __pfx_ksys_write+0x10/0x10 [ 376.490387][ T9592] ? do_syscall_64+0xbe/0xfa0 [ 376.490418][ T9592] do_syscall_64+0xfa/0xfa0 [ 376.490441][ T9592] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.490475][ T9592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.490495][ T9592] ? clear_bhb_loop+0x60/0xb0 [ 376.490521][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.490541][ T9592] RIP: 0033:0x7eff92f8efc9 [ 376.490561][ T9592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.490581][ T9592] RSP: 002b:00007eff93f06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.490603][ T9592] RAX: ffffffffffffffda RBX: 00007eff931e5fa0 RCX: 00007eff92f8efc9 [ 376.490619][ T9592] RDX: 0000000004004054 RSI: 0000200000000340 RDI: 0000000000000004 [ 376.490633][ T9592] RBP: 00007eff93f06090 R08: 0000000000000000 R09: 0000000000000000 [ 376.490647][ T9592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.490657][ T9592] R13: 00007eff931e6038 R14: 00007eff931e5fa0 R15: 00007ffd2ec6c268 [ 376.490687][ T9592] [ 377.076519][ T9540] wlan0 speed is unknown, defaulting to 1000 [ 377.208303][ T9574] ip6_vti0 speed is unknown, defaulting to 1000 [ 377.233744][ T9597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.916'. [ 377.243344][ T9597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.916'. [ 377.486180][ T9603] netlink: 40 bytes leftover after parsing attributes in process `syz.3.917'. [ 377.511536][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 377.545276][ T9608] Cannot find del_set index 4 as target [ 377.577708][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'. [ 377.595269][ T9608] bridge2: entered promiscuous mode [ 377.600942][ T9608] bridge2: entered allmulticast mode [ 377.651080][ T9608] team0: Port device bridge2 added [ 377.713791][ T9608] netlink: 52 bytes leftover after parsing attributes in process `syz.0.918'. [ 377.738618][ T9574] wlan0 speed is unknown, defaulting to 1000 [ 379.602272][ T9653] gtp0: entered promiscuous mode [ 379.663394][ T9658] FAULT_INJECTION: forcing a failure. [ 379.663394][ T9658] name failslab, interval 1, probability 0, space 0, times 0 [ 379.726977][ T9658] CPU: 1 UID: 0 PID: 9658 Comm: syz.3.933 Not tainted syzkaller #0 PREEMPT(full) [ 379.727008][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 379.727021][ T9658] Call Trace: [ 379.727030][ T9658] [ 379.727039][ T9658] dump_stack_lvl+0x189/0x250 [ 379.727085][ T9658] ? __pfx____ratelimit+0x10/0x10 [ 379.727111][ T9658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.727142][ T9658] ? __pfx__printk+0x10/0x10 [ 379.727170][ T9658] ? __pfx___might_resched+0x10/0x10 [ 379.727194][ T9658] ? fs_reclaim_acquire+0x7d/0x100 [ 379.727234][ T9658] should_fail_ex+0x414/0x560 [ 379.727272][ T9658] should_failslab+0xa8/0x100 [ 379.727296][ T9658] kmem_cache_alloc_node_noprof+0x77/0x710 [ 379.727326][ T9658] ? __alloc_skb+0x112/0x2d0 [ 379.727364][ T9658] __alloc_skb+0x112/0x2d0 [ 379.727401][ T9658] sctp_packet_transmit+0x2cc/0x2bb0 [ 379.727441][ T9658] ? __sctp_packet_append_chunk+0x912/0xd00 [ 379.727493][ T9658] ? sctp_packet_append_chunk+0x9b4/0xfe0 [ 379.727537][ T9658] sctp_packet_singleton+0x233/0x330 [ 379.727566][ T9658] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 379.727601][ T9658] ? sctp_outq_select_transport+0x462/0x570 [ 379.727626][ T9658] ? sctp_transport_burst_limited+0x19c/0x280 [ 379.727658][ T9658] sctp_outq_flush+0x4f0/0x3140 [ 379.727681][ T9658] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 379.727714][ T9658] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 379.727738][ T9658] ? rcu_is_watching+0x15/0xb0 [ 379.727769][ T9658] ? __pfx_sctp_outq_flush+0x10/0x10 [ 379.727799][ T9658] ? sctp_outq_tail+0x612/0x8c0 [ 379.727822][ T9658] ? sctp_outq_uncork+0x4d/0xa0 [ 379.727847][ T9658] sctp_do_sm+0x5332/0x5a20 [ 379.727878][ T9658] ? ____sys_sendmsg+0x52d/0x830 [ 379.727898][ T9658] ? ___sys_sendmsg+0x21f/0x2a0 [ 379.727916][ T9658] ? __sys_sendmmsg+0x227/0x430 [ 379.727935][ T9658] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 379.727963][ T9658] ? __pfx_sctp_do_sm+0x10/0x10 [ 379.728038][ T9658] ? __sk_mem_raise_allocated+0x28d/0x1280 [ 379.728063][ T9658] ? __genradix_ptr+0x1e1/0x220 [ 379.728107][ T9658] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 379.728147][ T9658] sctp_sendmsg_to_asoc+0x1028/0x1810 [ 379.728177][ T9658] ? __asan_memcpy+0x40/0x70 [ 379.728215][ T9658] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 379.728265][ T9658] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 379.728297][ T9658] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 379.728328][ T9658] ? __local_bh_enable_ip+0x12d/0x1c0 [ 379.728354][ T9658] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 379.728374][ T9658] ? security_sctp_bind_connect+0x7e/0x2e0 [ 379.728398][ T9658] sctp_sendmsg+0x1941/0x2810 [ 379.728435][ T9658] ? __pfx_sctp_sendmsg+0x10/0x10 [ 379.728468][ T9658] ? aa_sk_perm+0x81e/0x950 [ 379.728497][ T9658] ? __lock_acquire+0xab9/0xd20 [ 379.728521][ T9658] ? __pfx_aa_sk_perm+0x10/0x10 [ 379.728555][ T9658] ? sock_rps_record_flow+0x19/0x410 [ 379.728591][ T9658] ? inet_sendmsg+0x2f4/0x370 [ 379.728627][ T9658] __sock_sendmsg+0x19c/0x270 [ 379.728659][ T9658] ____sys_sendmsg+0x52d/0x830 [ 379.728688][ T9658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.728721][ T9658] ? import_iovec+0x74/0xa0 [ 379.728753][ T9658] ___sys_sendmsg+0x21f/0x2a0 [ 379.728778][ T9658] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.728843][ T9658] ? __fget_files+0x2a/0x420 [ 379.728863][ T9658] ? __fget_files+0x3a0/0x420 [ 379.728896][ T9658] __sys_sendmmsg+0x227/0x430 [ 379.728925][ T9658] ? __pfx___sys_sendmmsg+0x10/0x10 [ 379.728959][ T9658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 379.729008][ T9658] ? ksys_write+0x22a/0x250 [ 379.729042][ T9658] ? __pfx_ksys_write+0x10/0x10 [ 379.729256][ T9658] __x64_sys_sendmmsg+0xa0/0xc0 [ 379.729283][ T9658] do_syscall_64+0xfa/0xfa0 [ 379.729308][ T9658] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.729341][ T9658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.729363][ T9658] ? clear_bhb_loop+0x60/0xb0 [ 379.729390][ T9658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.729411][ T9658] RIP: 0033:0x7eff92f8efc9 [ 379.729431][ T9658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.729450][ T9658] RSP: 002b:00007eff93f06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 379.729472][ T9658] RAX: ffffffffffffffda RBX: 00007eff931e5fa0 RCX: 00007eff92f8efc9 [ 379.729488][ T9658] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 379.729502][ T9658] RBP: 00007eff93f06090 R08: 0000000000000000 R09: 0000000000000000 [ 379.729516][ T9658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 379.729528][ T9658] R13: 00007eff931e6038 R14: 00007eff931e5fa0 R15: 00007ffd2ec6c268 [ 379.729563][ T9658] [ 380.642184][ T9689] __nla_validate_parse: 5 callbacks suppressed [ 380.642208][ T9689] netlink: 64 bytes leftover after parsing attributes in process `syz.3.941'. [ 380.741266][ T9695] netlink: 48 bytes leftover after parsing attributes in process `syz.1.943'. [ 380.794324][ T9697] syz.4.940 (9697) used obsolete PPPIOCDETACH ioctl [ 380.859588][ T9699] netlink: 48 bytes leftover after parsing attributes in process `syz.2.944'. [ 380.949131][ T9702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.945'. [ 380.973532][ T9702] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 380.975047][ T9702] block (null): Could not allocate knbd recv work queue. [ 381.036820][ T9702] nbd: failed to add new device [ 381.164001][ T9722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.949'. [ 381.312323][ T9726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.950'. [ 381.417930][ T9729] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 381.530120][ T9734] gretap1: entered allmulticast mode [ 381.760987][ T9739] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 381.834584][ T9739] batman_adv: batadv0: Adding interface: gretap1 [ 381.875267][ T9739] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.946143][ T9739] batman_adv: batadv0: Interface activated: gretap1 [ 382.038155][ T9739] netlink: 'syz.4.952': attribute type 1 has an invalid length. [ 382.412779][ T9763] netlink: 'syz.1.958': attribute type 13 has an invalid length. [ 383.469618][ T9797] syz.0.963 uses old SIOCAX25GETINFO [ 383.763789][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.968'. [ 383.841368][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.965'. [ 383.975895][ T9825] netlink: 'syz.1.971': attribute type 3 has an invalid length. [ 383.994104][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 384.044311][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.970'. [ 384.578649][ T9846] bond2: entered promiscuous mode [ 384.584764][ T9846] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.656265][ T9846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.664322][ T9846] IPv6: NLM_F_CREATE should be set when creating new route [ 384.671775][ T9846] IPv6: NLM_F_CREATE should be set when creating new route [ 384.691938][ T9846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 384.722784][ T9850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.736115][ T9850] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 384.774385][ T9850] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 384.794385][ T9863] netlink: 'syz.2.979': attribute type 2 has an invalid length. [ 384.859783][ T9860] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.871462][ T9860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.912955][ T9846] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 384.936106][ T9846] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 385.322944][ T9874] lo speed is unknown, defaulting to 1000 [ 385.446646][ T9877] netlink: 'syz.3.983': attribute type 1 has an invalid length. [ 385.670742][ T9888] netlink: 'syz.1.986': attribute type 4 has an invalid length. [ 385.709466][ T9888] __nla_validate_parse: 4 callbacks suppressed [ 385.709490][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'. [ 385.951299][ T9896] netlink: 'syz.3.985': attribute type 12 has an invalid length. [ 386.106324][ T9896] netlink: 'syz.3.985': attribute type 4 has an invalid length. [ 386.189994][ T9880] lo speed is unknown, defaulting to 1000 [ 386.190746][ T9874] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.740851][ T9883] lo speed is unknown, defaulting to 1000 [ 386.797689][ T9880] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.815626][ T9874] wlan0 speed is unknown, defaulting to 1000 [ 387.469340][ T9925] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 387.566240][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 387.619072][ T9883] ip6_vti0 speed is unknown, defaulting to 1000 [ 387.797875][ T9930] netlink: 224 bytes leftover after parsing attributes in process `syz.1.995'. [ 388.132337][ T9939] --map-set only usable from mangle table [ 388.264547][ T9880] wlan0 speed is unknown, defaulting to 1000 [ 388.378415][ T9883] wlan0 speed is unknown, defaulting to 1000 [ 388.409860][ T9953] pimreg3: entered allmulticast mode [ 390.566733][T10000] syzkaller1: entered promiscuous mode [ 390.573257][T10000] syzkaller1: entered allmulticast mode [ 390.589767][T10009] netlink: 'syz.1.1016': attribute type 1 has an invalid length. [ 390.701009][T10014] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 390.713433][T10014] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 390.736217][T10009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1016'. [ 390.824948][T10009] macvlan0: entered promiscuous mode [ 390.856966][T10009] macvlan0: entered allmulticast mode [ 390.876895][T10009] bond0: entered promiscuous mode [ 390.884717][T10020] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1019'. [ 390.897761][T10009] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 390.898272][T10018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1018'. [ 390.920011][T10021] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1016'. [ 390.946971][T10009] bond0: left promiscuous mode [ 391.058009][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 391.084535][T10018] lo speed is unknown, defaulting to 1000 [ 391.320004][T10018] ip6_vti0 speed is unknown, defaulting to 1000 [ 391.371632][T10031] netlink: 'syz.3.1021': attribute type 3 has an invalid length. [ 391.409966][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 391.469275][T10034] batman_adv: batadv0: Adding interface: vlan2 [ 391.516368][T10034] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.693461][T10039] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1022'. [ 391.706943][T10036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1021'. [ 391.715445][T10034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.720445][T10037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1022'. [ 391.750599][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1021'. [ 391.763330][T10034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.775883][T10034] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 391.940525][T10018] wlan0 speed is unknown, defaulting to 1000 [ 392.311659][T10057] lo speed is unknown, defaulting to 1000 [ 392.770265][T10057] ip6_vti0 speed is unknown, defaulting to 1000 [ 393.060429][T10076] lo speed is unknown, defaulting to 1000 [ 393.082146][T10057] wlan0 speed is unknown, defaulting to 1000 [ 393.744293][T10089] netlink: 'syz.4.1036': attribute type 27 has an invalid length. [ 393.851827][T10091] xt_nat: multiple ranges no longer supported [ 393.880050][T10091] ip6gretap0: entered promiscuous mode [ 393.891848][T10091] ip6gretap0: left promiscuous mode [ 394.006881][T10093] bridge0: port 3(netdevsim2) entered blocking state [ 394.024401][T10093] bridge0: port 3(netdevsim2) entered disabled state [ 394.047178][T10093] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 394.067302][T10093] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 394.077971][T10093] bridge0: port 3(netdevsim2) entered blocking state [ 394.085417][T10093] bridge0: port 3(netdevsim2) entered forwarding state [ 394.101101][T10076] ip6_vti0 speed is unknown, defaulting to 1000 [ 394.187154][T10096] bond3 (unregistering): Released all slaves [ 394.225444][T10102] IPVS: set_ctl: invalid protocol: 43 172.20.20.58:20002 [ 394.244663][T10097] netlink: 'syz.1.1039': attribute type 29 has an invalid length. [ 394.257305][T10099] netlink: 'syz.1.1039': attribute type 29 has an invalid length. [ 394.590403][T10110] lo speed is unknown, defaulting to 1000 [ 394.620514][T10076] wlan0 speed is unknown, defaulting to 1000 [ 395.720295][T10122] lo speed is unknown, defaulting to 1000 [ 396.009452][T10122] ip6_vti0 speed is unknown, defaulting to 1000 [ 396.010929][T10140] lo speed is unknown, defaulting to 1000 [ 396.468383][T10122] wlan0 speed is unknown, defaulting to 1000 [ 396.468491][T10110] ip6_vti0 speed is unknown, defaulting to 1000 [ 396.721909][T10140] ip6_vti0 speed is unknown, defaulting to 1000 [ 397.059114][T10110] wlan0 speed is unknown, defaulting to 1000 [ 397.078295][T10140] wlan0 speed is unknown, defaulting to 1000 [ 397.228986][T10147] bond0: Device is already in use. [ 399.012053][T10167] lo speed is unknown, defaulting to 1000 [ 399.138603][T10178] netlink: 'syz.0.1057': attribute type 13 has an invalid length. [ 399.214503][T10178] netlink: 'syz.0.1057': attribute type 17 has an invalid length. [ 399.474378][T10178] bridge0: left promiscuous mode [ 399.498545][T10186] __nla_validate_parse: 5 callbacks suppressed [ 399.498568][T10186] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1055'. [ 399.520100][T10178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.549981][T10167] ip6_vti0 speed is unknown, defaulting to 1000 [ 399.557316][T10172] lo speed is unknown, defaulting to 1000 [ 400.178631][T10167] wlan0 speed is unknown, defaulting to 1000 [ 400.233667][T10193] ip6gretap1: entered allmulticast mode [ 400.275335][T10172] ip6_vti0 speed is unknown, defaulting to 1000 [ 400.282035][T10175] lo speed is unknown, defaulting to 1000 [ 400.512095][T10199] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1061'. [ 400.857149][T10181] lo speed is unknown, defaulting to 1000 [ 401.246178][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 401.637262][T10172] wlan0 speed is unknown, defaulting to 1000 [ 401.821830][T10175] ip6_vti0 speed is unknown, defaulting to 1000 [ 402.267689][T10215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1064'. [ 402.398223][T10181] ip6_vti0 speed is unknown, defaulting to 1000 [ 402.679061][T10181] wlan0 speed is unknown, defaulting to 1000 [ 402.858377][T10175] wlan0 speed is unknown, defaulting to 1000 [ 403.107352][T10233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1067'. [ 403.248581][ T25] block nbd1: Possible stuck request ffff888024dee000: control (read@0,1024B). Runtime 300 seconds [ 403.261210][ T25] block nbd1: Possible stuck request ffff888024dee1c0: control (read@1024,1024B). Runtime 300 seconds [ 403.279896][ T25] block nbd1: Possible stuck request ffff888024dee380: control (read@2048,1024B). Runtime 300 seconds [ 403.292329][ T25] block nbd1: Possible stuck request ffff888024dee540: control (read@3072,1024B). Runtime 300 seconds [ 403.824785][T10244] netlink: 'syz.1.1069': attribute type 2 has an invalid length. [ 404.221784][ T5949] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 404.240335][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 404.271936][T10250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1071'. [ 404.659798][T10262] syzkaller0: entered promiscuous mode [ 404.671599][T10237] infiniband !yz!: set down [ 404.677202][T10262] syzkaller0: entered allmulticast mode [ 404.705239][T10237] infiniband !yz!: added team_slave_0 [ 404.711699][T10237] !yz!: rxe_create_cq: returned err = -12 [ 404.724521][T10237] infiniband !yz!: Couldn't create ib_mad CQ [ 404.731161][T10237] infiniband !yz!: Couldn't open port 1 [ 404.859581][T10237] RDS/IB: !yz!: added [ 404.864089][T10237] smc: adding ib device !yz! with port count 1 [ 404.885391][T10237] smc: ib device !yz! port 1 has no pnetid [ 405.200860][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 405.229639][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 405.576712][T10281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1080'. [ 406.052899][T10294] tipc: New replicast peer: 255.255.255.255 [ 406.062229][T10294] tipc: Enabled bearer , priority 10 [ 406.070744][T10294] netlink: 'syz.2.1082': attribute type 21 has an invalid length. [ 406.079478][T10294] netlink: 'syz.2.1082': attribute type 1 has an invalid length. [ 406.088060][T10294] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1082'. [ 406.541538][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 406.572139][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 406.919030][T10321] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1092'. [ 407.018547][T10326] unsupported nlmsg_type 40 [ 407.035004][T10324] pim6reg: entered allmulticast mode [ 407.187330][T10333] tipc: Enabled bearer , priority 0 [ 407.197051][T10333] syzkaller0: entered promiscuous mode [ 407.203056][T10333] syzkaller0: entered allmulticast mode [ 407.243426][T10330] tipc: Resetting bearer [ 407.289427][T10330] tipc: Disabling bearer [ 407.820269][T10349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1101'. [ 407.859404][T10336] team0 (unregistering): Port device team_slave_0 removed [ 407.878383][T10336] team0 (unregistering): Port device team_slave_1 removed [ 407.908353][T10323] pim6reg: left allmulticast mode [ 407.954485][ T30] audit: type=1800 audit(1761391797.598:4): pid=10351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1101" name="memory.events" dev="tmpfs" ino=1276 res=0 errno=0 [ 408.077310][T10356] netlink: 'syz.1.1103': attribute type 3 has an invalid length. [ 408.086265][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 408.241180][T10363] syzkaller1: tun_chr_ioctl cmd 21731 [ 408.272355][T10367] syzkaller1: tun_chr_ioctl cmd 21731 [ 408.521888][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1106'. [ 408.757335][T10383] netlink: 'syz.3.1111': attribute type 13 has an invalid length. [ 408.769063][T10383] netlink: 'syz.3.1111': attribute type 17 has an invalid length. [ 409.081104][T10383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.091384][T10383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 409.110234][ T5921] lo speed is unknown, defaulting to 1000 [ 409.117183][ T5921] syz2: Port: 1 Link ACTIVE [ 409.142940][ T8729] ip6_vti0 speed is unknown, defaulting to 1000 [ 409.150409][ T8729] óyz2: Port: 1 Link ACTIVE [ 409.156253][ T980] ip6_vti0 speed is unknown, defaulting to 1000 [ 409.164074][ T5921] lo speed is unknown, defaulting to 1000 [ 409.409702][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 410.490267][T10436] netlink: 'syz.3.1120': attribute type 1 has an invalid length. [ 410.499567][T10436] __nla_validate_parse: 6 callbacks suppressed [ 410.499587][T10436] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1120'. [ 410.535822][T10433] tipc: Enabling of bearer rejected, already enabled [ 410.602944][T10433] tipc: Resetting bearer [ 410.628711][T10421] lo speed is unknown, defaulting to 1000 [ 410.787357][ T8729] IPVS: starting estimator thread 0... [ 410.887034][T10445] IPVS: using max 24 ests per chain, 57600 per kthread [ 410.986924][T10421] ip6_vti0 speed is unknown, defaulting to 1000 [ 410.996222][T10441] lo speed is unknown, defaulting to 1000 [ 411.439194][T10421] wlan0 speed is unknown, defaulting to 1000 [ 411.453635][T10451] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 411.488817][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 411.654241][T10444] lo speed is unknown, defaulting to 1000 [ 411.656832][T10441] ip6_vti0 speed is unknown, defaulting to 1000 [ 411.879615][T10458] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 412.040854][T10463] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1125'. [ 412.076855][T10466] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 412.142937][T10468] veth1_to_hsr: entered promiscuous mode [ 412.168712][T10468] macvtap1: entered promiscuous mode [ 412.200397][T10468] macvtap1: entered allmulticast mode [ 412.263513][T10468] veth1_to_hsr: entered allmulticast mode [ 412.332637][T10470] macvtap2: entered promiscuous mode [ 412.339803][T10470] macvtap2: entered allmulticast mode [ 412.444126][T10468] macvtap2: entered promiscuous mode [ 412.453650][T10468] macvtap2: entered allmulticast mode [ 412.543910][T10470] macvtap2: entered promiscuous mode [ 412.568856][T10470] macvtap2: entered allmulticast mode [ 412.609497][T10441] wlan0 speed is unknown, defaulting to 1000 [ 412.621271][T10468] macvtap2: entered promiscuous mode [ 412.629422][T10468] macvtap2: entered allmulticast mode [ 412.648686][T10449] lo speed is unknown, defaulting to 1000 [ 412.648711][T10444] ip6_vti0 speed is unknown, defaulting to 1000 [ 412.703362][T10470] macvtap2: entered promiscuous mode [ 412.727590][T10470] macvtap2: entered allmulticast mode [ 412.911235][T10468] macvtap2: entered promiscuous mode [ 412.917689][T10468] macvtap2: entered allmulticast mode [ 412.966097][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 412.998221][T10470] macvtap2: entered promiscuous mode [ 413.003617][T10470] macvtap2: entered allmulticast mode [ 413.036899][T10484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1132'. [ 413.086692][T10485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1132'. [ 413.142368][T10483] team0: entered promiscuous mode [ 413.157496][T10483] team0: entered allmulticast mode [ 413.596976][T10501] netlink: 'syz.1.1136': attribute type 1 has an invalid length. [ 413.605203][T10501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1136'. [ 413.685559][T10490] lo speed is unknown, defaulting to 1000 [ 413.688867][T10449] ip6_vti0 speed is unknown, defaulting to 1000 [ 413.704645][T10444] wlan0 speed is unknown, defaulting to 1000 [ 413.909652][T10511] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 413.922531][T10511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.119642][T10518] netlink: 'syz.1.1140': attribute type 2 has an invalid length. [ 414.225576][T10502] lo speed is unknown, defaulting to 1000 [ 414.404743][T10526] openvswitch: netlink: Message has 1 unknown bytes. [ 414.412316][T10526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.435242][T10526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1142'. [ 414.898099][T10449] wlan0 speed is unknown, defaulting to 1000 [ 414.968442][T10490] ip6_vti0 speed is unknown, defaulting to 1000 [ 415.551885][T10550] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1148'. [ 415.562379][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1148'. [ 415.579618][T10550] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1148'. [ 415.590951][T10550] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1148'. [ 415.708060][T10553] netlink: 'syz.1.1149': attribute type 8 has an invalid length. [ 415.721682][T10502] ip6_vti0 speed is unknown, defaulting to 1000 [ 415.731602][T10490] wlan0 speed is unknown, defaulting to 1000 [ 415.919608][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 416.403639][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1152'. [ 416.532577][T10565] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1153'. [ 416.557000][T10565] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 416.557691][T10567] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1153'. [ 416.591881][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'. [ 416.665391][T10567] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 416.820926][T10502] wlan0 speed is unknown, defaulting to 1000 [ 417.168246][T10577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1157'. [ 418.409981][T10614] veth0_to_bridge: entered promiscuous mode [ 418.713257][T10609] veth0_to_bridge: left promiscuous mode [ 418.820260][T10620] lo speed is unknown, defaulting to 1000 [ 419.420210][T10620] ip6_vti0 speed is unknown, defaulting to 1000 [ 419.462873][T10638] netlink: 'syz.1.1175': attribute type 12 has an invalid length. [ 419.479153][T10642] netlink: 'syz.2.1177': attribute type 1 has an invalid length. [ 419.703337][T10644] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 419.719120][T10644] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 419.796198][T10648] nbd4: detected capacity change from 0 to 127 [ 419.827030][ T7948] block nbd4: Receive control failed (result -104) [ 419.835854][ T7761] block nbd4: Send control failed (result -32) [ 419.857492][ T7761] block nbd4: Request send failed, requeueing [ 419.884542][ T25] block nbd4: Dead connection, failed to find a fallback [ 419.903084][ T25] block nbd4: shutting down sockets [ 419.909280][ T25] blk_print_req_error: 27 callbacks suppressed [ 419.909301][ T25] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.925563][ T25] buffer_io_error: 27 callbacks suppressed [ 419.925585][ T25] Buffer I/O error on dev nbd4, logical block 2, async page read [ 419.940826][ T7761] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 419.950665][T10646] bond2: (slave bridge6): Enslaving as an active interface with a down link [ 419.952590][ T7761] Buffer I/O error on dev nbd4, logical block 3, async page read [ 420.063091][T10642] macvlan2: entered promiscuous mode [ 420.087366][T10642] macvlan2: entered allmulticast mode [ 420.108284][T10642] bond2: entered promiscuous mode [ 420.114652][T10642] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 420.126737][T10642] bond2: left promiscuous mode [ 420.367557][T10620] wlan0 speed is unknown, defaulting to 1000 [ 422.691964][T10670] syzkaller0: entered promiscuous mode [ 422.702236][T10670] syzkaller0: entered allmulticast mode [ 422.786210][T10664] lo speed is unknown, defaulting to 1000 [ 422.947333][T10682] tipc: Enabled bearer , priority 0 [ 422.957882][T10682] syzkaller0: entered promiscuous mode [ 422.964116][T10682] syzkaller0: entered allmulticast mode [ 423.158916][T10682] tipc: Resetting bearer [ 423.187330][T10682] __nla_validate_parse: 6 callbacks suppressed [ 423.187352][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'. [ 423.290013][T10681] tipc: Resetting bearer [ 423.497268][T10681] tipc: Disabling bearer [ 423.706930][T10690] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 423.729428][T10690] bond3 (unregistering): Released all slaves [ 423.761442][T10664] ip6_vti0 speed is unknown, defaulting to 1000 [ 424.024133][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1189'. [ 424.130758][T10701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.195238][T10664] wlan0 speed is unknown, defaulting to 1000 [ 425.727986][T10740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.779276][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 426.144282][T10755] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 426.173581][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1202'. [ 426.214757][T10746] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.280447][T10757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.407876][T10755] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1202'. [ 426.421304][T10755] netlink: 'syz.1.1202': attribute type 9 has an invalid length. [ 426.433384][T10755] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1202'. [ 426.445973][T10755] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1202'. [ 426.502696][T10746] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.641923][T10766] netlink: 'syz.1.1206': attribute type 2 has an invalid length. [ 426.668098][T10746] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.806337][T10746] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.827421][T10767] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1206'. [ 427.177579][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 427.209377][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.251450][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.411284][ T6035] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.437514][ T6035] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.668612][T10801] netlink: 'syz.0.1213': attribute type 13 has an invalid length. [ 427.684733][T10801] netlink: 'syz.0.1213': attribute type 17 has an invalid length. [ 427.757908][T10805] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1213'. [ 427.786349][T10801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.070574][T10801] lo speed is unknown, defaulting to 1000 [ 428.848934][T10834] lo speed is unknown, defaulting to 1000 [ 428.857746][T10801] ip6_vti0 speed is unknown, defaulting to 1000 [ 429.021917][T10850] __nla_validate_parse: 3 callbacks suppressed [ 429.021940][T10850] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1225'. [ 429.043183][T10850] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1225'. [ 429.054628][T10850] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 429.091868][T10854] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 429.110648][T10854] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 429.377128][T10801] wlan0 speed is unknown, defaulting to 1000 [ 429.400580][T10834] ip6_vti0 speed is unknown, defaulting to 1000 [ 429.716095][T10854] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 429.727689][T10854] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 429.787115][T10834] wlan0 speed is unknown, defaulting to 1000 [ 430.181558][T10854] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 430.195940][T10854] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 430.247278][T10868] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1230'. [ 430.529754][T10854] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 430.551013][T10854] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 430.573663][T10878] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1233'. [ 430.583594][T10877] smc: net device bond0 applied user defined pnetid SYZ2 [ 430.882927][T10878] smc: removing net device bond0 with user defined pnetid SYZ2 [ 430.902602][T10878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.923795][T10878] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 430.943466][T10878] bond0 (unregistering): Released all slaves [ 431.285007][ T5949] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 431.300940][ T5949] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 431.436891][ T5949] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 431.446388][ T5949] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 431.491219][ T6035] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 431.508920][ T6035] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 431.601307][ T5949] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 431.623117][ T5949] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 431.981618][T10905] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.028338][T10910] netlink: 'syz.2.1242': attribute type 9 has an invalid length. [ 432.068114][T10910] netlink: 'syz.2.1242': attribute type 6 has an invalid length. [ 432.124610][T10908] ip6gre1: entered promiscuous mode [ 432.133021][T10908] ip6gre1: entered allmulticast mode [ 432.142044][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'. [ 432.159823][T10914] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1245'. [ 432.248373][T10905] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.314835][ T6035] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.323431][ T6035] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.335391][ T5964] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.369433][T10905] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.380055][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 432.414496][T10918] netlink: 'syz.1.1246': attribute type 11 has an invalid length. [ 432.423994][T10917] ip6gretap0: entered promiscuous mode [ 432.424022][T10917] ip6gretap0: entered allmulticast mode [ 432.460995][T10918] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1246'. [ 432.483760][T10905] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.511007][T10921] netlink: 'syz.3.1248': attribute type 1 has an invalid length. [ 432.635955][ T5964] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.675992][T10921] smc: adding net device bond0 with user defined pnetid SYZ2 [ 432.696263][ T31] INFO: task udevd:5887 blocked for more than 143 seconds. [ 432.703989][ T31] Not tainted syzkaller #0 [ 432.715761][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.724882][ T31] task:udevd state:D stack:21896 pid:5887 tgid:5887 ppid:5197 task_flags:0x400140 flags:0x00080003 [ 432.739417][ T31] Call Trace: [ 432.743011][ T31] [ 432.747014][ T31] __schedule+0x1798/0x4cc0 [ 432.751051][T10922] 8021q: adding VLAN 0 to HW filter on device bond3 [ 432.752366][ T31] ? __pfx___schedule+0x10/0x10 [ 432.763799][T10922] bond0: (slave bond3): Enslaving as a backup interface with a down link [ 432.778968][T10919] netlink: 'syz.1.1246': attribute type 11 has an invalid length. [ 432.785003][ T31] ? schedule+0x91/0x360 [ 432.788332][T10919] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1246'. [ 432.791782][ T31] schedule+0x165/0x360 [ 432.836671][ T31] io_schedule+0x80/0xd0 [ 432.841466][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 432.847452][ T5964] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.890577][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 432.905249][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 432.911000][ T31] ? __filemap_get_folio+0x770/0xaf0 [ 432.920710][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 432.927580][ T31] do_read_cache_folio+0x1aa/0x590 [ 432.932923][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 432.939495][ T31] read_part_sector+0xb6/0x2b0 [ 432.944399][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 432.951006][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 432.958261][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 432.964468][ T31] bdev_disk_changed+0x75f/0x14b0 [ 432.969892][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 432.976306][ T31] ? wait_on_inode+0xc0/0x230 [ 432.981168][ T31] blkdev_get_whole+0x380/0x510 [ 432.986275][ T31] bdev_open+0x31e/0xd30 [ 432.990579][ T31] blkdev_open+0x457/0x600 [ 432.995324][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 433.000570][ T31] do_dentry_open+0x953/0x13f0 [ 433.006372][ T31] vfs_open+0x3b/0x340 [ 433.010757][ T31] ? path_openat+0x2ecd/0x3830 [ 433.015901][ T31] path_openat+0x2ee5/0x3830 [ 433.020936][ T31] ? __pfx_path_openat+0x10/0x10 [ 433.026250][ T31] do_filp_open+0x1fa/0x410 [ 433.030806][ T31] ? __lock_acquire+0xab9/0xd20 [ 433.035964][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 433.041272][ T31] ? _raw_spin_unlock+0x28/0x50 [ 433.046670][ T31] ? alloc_fd+0x64c/0x6c0 [ 433.051329][ T31] do_sys_openat2+0x121/0x1c0 [ 433.056222][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 433.061656][ T31] __x64_sys_openat+0x138/0x170 [ 433.066898][ T31] do_syscall_64+0xfa/0xfa0 [ 433.071845][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.078385][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 433.084762][ T31] ? clear_bhb_loop+0x60/0xb0 [ 433.089903][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.095982][ T31] RIP: 0033:0x7fbb006a7407 [ 433.100546][ T31] RSP: 002b:00007ffea63d7570 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 433.109200][ T31] RAX: ffffffffffffffda RBX: 00007fbb00e9f880 RCX: 00007fbb006a7407 [ 433.117343][ T31] RDX: 00000000000a0800 RSI: 000056180a234600 RDI: ffffffffffffff9c [ 433.125723][ T31] RBP: 000056180a233910 R08: 0000000000000000 R09: 0000000000000000 [ 433.133826][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000056180a258970 [ 433.142749][ T31] R13: 000056180a241190 R14: 0000000000000000 R15: 000056180a258970 [ 433.151852][ T31] [ 433.155066][ T31] [ 433.155066][ T31] Showing all locks held in the system: [ 433.164518][ T31] 3 locks held by kworker/u8:0/12: [ 433.170433][ T31] #0: ffff88814c703948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 433.184908][ T31] #1: ffffc90000117ba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 433.198538][ T31] #2: ffffffff8f2cb208 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 433.209452][ T31] 1 lock held by khungtaskd/31: [ 433.214597][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 433.225706][ T31] 3 locks held by kworker/0:2/980: [ 433.231291][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 433.242885][ T31] #1: ffffc900038e7ba0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 433.258187][ T31] #2: ffff88807dd89240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1f7/0x3b0 [ 433.269966][ T31] 2 locks held by getty/5594: [ 433.275007][ T31] #0: ffff88814d53a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 433.285969][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 433.296690][ T31] 1 lock held by udevd/5887: [ 433.301483][ T31] #0: ffff888024d91358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 433.311471][ T31] 1 lock held by kworker/1:6/5964: [ 433.317534][ T31] #0: ffff8880b893a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 433.328396][ T25] block nbd1: Possible stuck request ffff888024dee000: control (read@0,1024B). Runtime 330 seconds [ 433.330166][ T31] 4 locks held by kworker/u8:15/6041: [ 433.339466][ T25] block nbd1: Possible stuck request ffff888024dee1c0: control (read@1024,1024B). Runtime 330 seconds [ 433.339505][ T25] block nbd1: Possible stuck request ffff888024dee380: control (read@2048,1024B). Runtime 330 seconds [ 433.339535][ T25] block nbd1: Possible stuck request ffff888024dee540: control (read@3072,1024B). Runtime 330 seconds [ 433.382437][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 433.395077][ T31] #1: ffffc9000ade7ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 433.407292][ T31] #2: ffffffff8f2cb208 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 433.417247][ T31] #3: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 433.428632][ T31] 1 lock held by udevd/7761: [ 433.433343][ T31] #0: ffff888024d47358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 433.443967][ T31] 2 locks held by syz.4.1221/10834: [ 433.450284][ T31] #0: ffffffff8f2be270 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 433.460681][ T31] #1: ffffffff8df42c40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 433.471324][ T31] 4 locks held by syz.0.1243/10905: [ 433.477437][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 433.487279][ T31] #1: ffff88805c1420e8 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x240/0x3a0 [ 433.498474][ T31] #2: ffff88805c143250 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x24f/0x3a0 [ 433.511171][ T31] #3: ffffffff8f2cb208 (rtnl_mutex){+.+.}-{4:4}, at: unregister_nexthop_notifier+0x17/0x40 [ 433.522861][ T31] [ 433.525831][ T31] ============================================= [ 433.525831][ T31] [ 433.536150][ T31] NMI backtrace for cpu 0 [ 433.536171][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 433.536194][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 433.536207][ T31] Call Trace: [ 433.536215][ T31] [ 433.536224][ T31] dump_stack_lvl+0x189/0x250 [ 433.536262][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.536292][ T31] ? __pfx__printk+0x10/0x10 [ 433.536328][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 433.536366][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 433.536398][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.536433][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 433.536471][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 433.536507][ T31] watchdog+0xf60/0xfa0 [ 433.536534][ T31] ? watchdog+0x1e2/0xfa0 [ 433.536562][ T31] kthread+0x711/0x8a0 [ 433.536593][ T31] ? __pfx_watchdog+0x10/0x10 [ 433.536614][ T31] ? __pfx_kthread+0x10/0x10 [ 433.536645][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.536668][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.536691][ T31] ? __pfx_kthread+0x10/0x10 [ 433.536721][ T31] ret_from_fork+0x4bc/0x870 [ 433.536746][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 433.536785][ T31] ? __switch_to_asm+0x39/0x70 [ 433.536802][ T31] ? __switch_to_asm+0x33/0x70 [ 433.536819][ T31] ? __pfx_kthread+0x10/0x10 [ 433.536848][ T31] ret_from_fork_asm+0x1a/0x30 [ 433.536886][ T31] [ 433.536894][ T31] Sending NMI from CPU 0 to CPUs 1: [ 433.707443][ C1] NMI backtrace for cpu 1 [ 433.707463][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 433.707483][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 433.707495][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 433.707522][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 41 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 433.707538][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 433.707559][ C1] RAX: 9f94988e36f86000 RBX: ffffffff81967b87 RCX: 9f94988e36f86000 [ 433.707573][ C1] RDX: 0000000000000001 RSI: ffffffff8d70bb44 RDI: ffffffff8bbf0460 [ 433.707586][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 433.707599][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ccb70 [ 433.707612][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395cb58 [ 433.707625][ C1] FS: 0000000000000000(0000) GS:ffff888126240000(0000) knlGS:0000000000000000 [ 433.707639][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.707651][ C1] CR2: 00007f57d57b4198 CR3: 00000000236da000 CR4: 00000000003526f0 [ 433.707668][ C1] Call Trace: [ 433.707676][ C1] [ 433.707683][ C1] default_idle+0x13/0x20 [ 433.707708][ C1] default_idle_call+0x73/0xb0 [ 433.707735][ C1] do_idle+0x1e7/0x510 [ 433.707759][ C1] ? __pfx_do_idle+0x10/0x10 [ 433.707788][ C1] cpu_startup_entry+0x44/0x60 [ 433.707807][ C1] start_secondary+0x101/0x110 [ 433.707833][ C1] common_startup_64+0x13e/0x147 [ 433.707867][ C1] [ 433.901958][ T6032] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.923137][ T6032] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.941125][ T6032] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.969912][ T6041] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.205407][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!