last executing test programs: 5.61479348s ago: executing program 3 (id=1612): socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) write$ppp(r1, &(0x7f0000000000)="2fa86d703acb21ec5dac7bd3c75afba8a530c709697155e7c4341880dd33e1786a8c934a199f252289daf5e05b88e8d8caebee70fc21887fa09cc359c63af7e00cf9eaae15e85a7d81b25f883dec579ce47919b49d7d178e5f6a847107ec08f8de7e199714e17cd1a3bc5486eef87e9226c1d186c06042546ed3feb6bb1c6b08b07789588dc3d2ea4e944757b0cfd742af19e5d52cd74cdb259db00f4a6c54c1d5694e8935bff704832084a1e25df586b1880f884a05d4", 0xb7) 4.642639853s ago: executing program 3 (id=1619): socket$kcm(0x10, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003f40)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)='g', 0x1}], 0x1, 0x0, 0x0, 0x4008801}], 0x1, 0x20008084) accept4$ax25(r3, 0x0, 0x0, 0x80800) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000001b00), &(0x7f0000000000)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)={{0x14}, [@NFT_MSG_NEWTABLE={0x6c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x10, 0x6, "39edc26bd14e0c1a8c9d09b0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x25, 0x6, "a953aa1fd5cf7702450ba989e6ba6e6952a27ef6e9c15c64e5010000e29037b97d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xf3}]}, @NFT_MSG_DELRULE={0xa4, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xdada}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1b}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x1c4, 0x14, 0xa, 0x201, 0x0, 0x0, {0xfffffffffffffffb, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0xf0, 0x8, "4c5cec567116557c8fb5275ab5addbdf63573bd4f9fe2033def44d96c0af71ae833127e0ade7d0922969404892b3410942ebda571c9b9a8c0a8fc68edcb5bf6ca1a61b69ead0b4ad8ca91b477d0d15f1c4ffc20aa04ed5395cdbdeccf5585193abacef1309c7298dd3d4aca3867393e75a016634179e83ea7359d6d0eb2f56abbbea7351c6ed958e9fa5298106784bef70ea5c18621c03105f1e1837ee047f7673e2e35343c99d2298f7544932797a36aac99867282b6bac4a7f70a41c5554d5f1dcc6618b57b0a1f1b89d743d23ca15980089c3f6c6dc28aaa1189d8f48d377b47e376717a17cd5f22f0013"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x62, 0x8, "eb3f3535777175fcb11d71fdd7920eff4e60db44c7512a25c7a0497022e2e85dc3c9ec54aabdcdecac9cfcdfcf804b65563feebcb57bdd86b317d70e0a34960468dae1ccb5fc013224b0b07e1394a79fcd71cf63580e3163b3fe483fb7cf"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x11, 0x8, "08caa6cba6cc70e91292aea25d"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELTABLE={0x98, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x63, 0x6, "9ce9938f2fd431abc890f9b73f3a9b5e53a0ee2632734f80631a182c8781847a6d87e1f0d4a53d7b75ef98b64ad0f7c638b7f01febd1a1ca06994d33a7eebdd1bd1805f2de369cebc030e2b31b54f205bf360e8e18441fc89d3ad806cf60cc"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3d4}, 0x1, 0x0, 0x0, 0x8004}, 0x2404c944) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) close(0x3) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="110000007a00010600000000ffdbdf2507008f9e9dda0000b17904b479bf2e401e56808ec125a39c86ec5e929625e501e37ff03b667cdaef776e4477449897b7717a76386a3db439ce7ec2c34485220084d29d82249c3f4d37dc27a86b695a0feb9bb1fcfd112a37257c6e73961a984bd7ce364da29dc9a31445286876e6b3ac0a1f6de3719301dc7a872d658c80697894cd8d90336b1a20fe0c95230d8e536132b328c1d7b85f3f27293c6b0b33ce3f9a5e3c631793de307313e3a3d32ac8d525b1695ccd02d0c7ad70"], 0x18}], 0x1, 0x0, 0x0, 0x4004051}, 0x8044) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14c, 0x14c, 0xa, [@struct={0x1, 0x9, 0x0, 0x4, 0x1, 0x9, [{0x2}, {0xe, 0x1, 0x8}, {0xe, 0x5, 0x1}, {0x3, 0x5, 0x31684042}, {0x7, 0x5, 0xd34d}, {0xe, 0x2, 0x1}, {0xe, 0x0, 0x6}, {0xb, 0x5, 0xfffffffb}, {0x2, 0x5, 0x6}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0x4, 0x3}, {0xb, 0x5}, {0xc, 0x5}, {0x6, 0x3}, {0x6, 0x1}, {0x10}, {0xc, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x52, 0x0, 0x43, 0x2}, @volatile={0xc, 0x0, 0x0, 0x9, 0x2}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @union={0xf, 0x4, 0x0, 0x5, 0x0, 0xb5, [{0xa, 0x4, 0x1}, {0xffffffff, 0x1, 0x117c000}, {0x9, 0x2, 0x9}, {0xd, 0x5, 0x9}]}, @fwd={0x7}, @float={0xc, 0x0, 0x0, 0x10, 0x4}, @float={0x9, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x2e, 0x0, 0x30, 0x30, 0x5f, 0x2e, 0x0, 0x61]}}, &(0x7f0000000380)=""/69, 0x16e, 0x45, 0x0, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x3, 0x3, 0x0, 0xf8000000, 0xc08, r4, 0xb36b, '\x00', 0x0, r8, 0x0, 0x1, 0x5}, 0x50) socket$inet6(0xa, 0x2, 0x3a) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0xe) 3.319543641s ago: executing program 3 (id=1626): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r1, &(0x7f00000003c0)=""/123, 0x7b) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x14, 0x0, 0x8d61ddcfedb48df, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.251925736s ago: executing program 4 (id=1628): socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x5, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c69"], 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4b}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x81) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) r6 = epoll_create1(0x0) epoll_wait(r6, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x9d32f4b2e0c65377}) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x7, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.247533518s ago: executing program 2 (id=1629): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x1, 0x300) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x4908d13283d17e6b, 0x0, 0x6, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 3.108739235s ago: executing program 2 (id=1631): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r0}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000101010d0000000000000000020000030c00018005000340000400000c00198008000100060800000000010011010000428bc066ae407e177ef5600bb8d8337d8ee1a39240ee"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x48000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x80, 0x80, 0x7, 0x0, {{0x14, 0x4, 0x3, 0x9, 0x50, 0x65, 0x0, 0x7d, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x24, 0x1, [{0x6, 0xc, "42ff6a7c5c3375960152"}, {0x2, 0x3, 'o'}, {0x7, 0xb, "e9a7b4c8ee86fd2006"}, {0x0, 0x4, "ec0f"}]}, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x0, [{@private=0xa010100, 0x1}, {@loopback, 0x40}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000080a010100000000000000000200000909000145328a3b03ca4dbc994b0073797a300000000014000000050a0000000000000000000003000008140000001100010000000000000000000700000a"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x4, 0x7, 0x68, @mcast2, @private1, 0x80, 0x710, 0x6, 0x81}}) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.628288259s ago: executing program 0 (id=1634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 2.594088689s ago: executing program 1 (id=1635): syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r2, 0x0, 0x64094) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000a40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000cc0), r3) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x3c, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x3c, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x3a}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xc0b7, 0x8001}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20002000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x36, 0x1, 0x70bd25, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan1\x00'}) sendmsg$NL80211_CMD_DISCONNECT(r2, 0x0, 0x8810) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180300"/14, @ANYRES32=r7, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x44) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000001940)) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) socketpair(0x18, 0x2, 0x3, &(0x7f0000001ac0)) 2.529560204s ago: executing program 0 (id=1636): socket(0x28, 0x5, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000030000000000000804000000000000000000000100000000000000000000000a02000000000000616100"], 0x0, 0x52}, 0x28) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eab", 0x29}], 0x1}], 0x1, 0x40800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r2) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)=ANY=[@ANYBLOB="00040000", @ANYRES16=r3, @ANYBLOB="090326bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@length={{0x28}, {0x2, 0x0, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xea, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendmsg$kcm(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000d035fd85d9f87fdb6acc5f83a1632eab535848e4f9ddb6222ca975023c2a57f75dad707f6b2b50d722935716da481e92bd544064591af319c51a7fb020e82da0db6e5dee8eea9f95579c7b6d58", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007140)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x7b, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="180000000000000029000000360000003a00001763000000180000000000000029000000360000006c00000000000000"], 0x30}}], 0x1, 0x8010) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 2.479470744s ago: executing program 2 (id=1637): socket$kcm(0x10, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003f40)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)='g', 0x1}], 0x1, 0x0, 0x0, 0x4008801}], 0x1, 0x20008084) accept4$ax25(r3, 0x0, 0x0, 0x80800) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000001b00), &(0x7f0000000000)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)={{0x14}, [@NFT_MSG_NEWTABLE={0x6c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x10, 0x6, "39edc26bd14e0c1a8c9d09b0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x25, 0x6, "a953aa1fd5cf7702450ba989e6ba6e6952a27ef6e9c15c64e5010000e29037b97d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xf3}]}, @NFT_MSG_DELRULE={0xa4, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xdada}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1b}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x1c4, 0x14, 0xa, 0x201, 0x0, 0x0, {0xfffffffffffffffb, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0xf0, 0x8, "4c5cec567116557c8fb5275ab5addbdf63573bd4f9fe2033def44d96c0af71ae833127e0ade7d0922969404892b3410942ebda571c9b9a8c0a8fc68edcb5bf6ca1a61b69ead0b4ad8ca91b477d0d15f1c4ffc20aa04ed5395cdbdeccf5585193abacef1309c7298dd3d4aca3867393e75a016634179e83ea7359d6d0eb2f56abbbea7351c6ed958e9fa5298106784bef70ea5c18621c03105f1e1837ee047f7673e2e35343c99d2298f7544932797a36aac99867282b6bac4a7f70a41c5554d5f1dcc6618b57b0a1f1b89d743d23ca15980089c3f6c6dc28aaa1189d8f48d377b47e376717a17cd5f22f0013"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x62, 0x8, "eb3f3535777175fcb11d71fdd7920eff4e60db44c7512a25c7a0497022e2e85dc3c9ec54aabdcdecac9cfcdfcf804b65563feebcb57bdd86b317d70e0a34960468dae1ccb5fc013224b0b07e1394a79fcd71cf63580e3163b3fe483fb7cf"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x11, 0x8, "08caa6cba6cc70e91292aea25d"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELTABLE={0x98, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x63, 0x6, "9ce9938f2fd431abc890f9b73f3a9b5e53a0ee2632734f80631a182c8781847a6d87e1f0d4a53d7b75ef98b64ad0f7c638b7f01febd1a1ca06994d33a7eebdd1bd1805f2de369cebc030e2b31b54f205bf360e8e18441fc89d3ad806cf60cc"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3d4}, 0x1, 0x0, 0x0, 0x8004}, 0x2404c944) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) close(0x3) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="110000007a00010600000000ffdbdf2507008f9e9dda0000b17904b479bf2e401e56808ec125a39c86ec5e929625e501e37ff03b667cdaef776e4477449897b7717a76386a3db439ce7ec2c34485220084d29d82249c3f4d37dc27a86b695a0feb9bb1fcfd112a37257c6e73961a984bd7ce364da29dc9a31445286876e6b3ac0a1f6de3719301dc7a872d658c80697894cd8d90336b1a20fe0c95230d8e536132b328c1d7b85f3f27293c6b0b33ce3f9a5e3c631793de307313e3a3d32ac8d525b1695ccd02d0c7ad70"], 0x18}], 0x1, 0x0, 0x0, 0x4004051}, 0x8044) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14c, 0x14c, 0xa, [@struct={0x1, 0x9, 0x0, 0x4, 0x1, 0x9, [{0x2}, {0xe, 0x1, 0x8}, {0xe, 0x5, 0x1}, {0x3, 0x5, 0x31684042}, {0x7, 0x5, 0xd34d}, {0xe, 0x2, 0x1}, {0xe, 0x0, 0x6}, {0xb, 0x5, 0xfffffffb}, {0x2, 0x5, 0x6}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0x4, 0x3}, {0xb, 0x5}, {0xc, 0x5}, {0x6, 0x3}, {0x6, 0x1}, {0x10}, {0xc, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x52, 0x0, 0x43, 0x2}, @volatile={0xc, 0x0, 0x0, 0x9, 0x2}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @union={0xf, 0x4, 0x0, 0x5, 0x0, 0xb5, [{0xa, 0x4, 0x1}, {0xffffffff, 0x1, 0x117c000}, {0x9, 0x2, 0x9}, {0xd, 0x5, 0x9}]}, @fwd={0x7}, @float={0xc, 0x0, 0x0, 0x10, 0x4}, @float={0x9, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x2e, 0x0, 0x30, 0x30, 0x5f, 0x2e, 0x0, 0x61]}}, &(0x7f0000000380)=""/69, 0x16e, 0x45, 0x0, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x3, 0x3, 0x0, 0xf8000000, 0xc08, r4, 0xb36b, '\x00', 0x0, r8, 0x0, 0x1, 0x5}, 0x50) socket$inet6(0xa, 0x2, 0x3a) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0xe) 2.442255488s ago: executing program 3 (id=1638): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x9}, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4, 0x41}}}}}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1000000000000297, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x74cd, 0x41, 0xffffff80, 0x0, r1}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @prinfo={0x18, 0x84, 0x5, {0x20}}, @authinfo={0x18, 0x84, 0x6, {0x5}}], 0x90, 0x4048800}, 0x0) 2.292131203s ago: executing program 2 (id=1639): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0xe0}, 0x1, 0xfff0, 0x0, 0x20000051}, 0x0) 2.29018084s ago: executing program 1 (id=1640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 2.200963405s ago: executing program 4 (id=1641): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)}, 0x10022) 2.124178946s ago: executing program 2 (id=1642): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)}, 0x10022) 2.071715699s ago: executing program 0 (id=1643): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000007aa600ff000000000402be00"/31, @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {0xb}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) sendmsg$AUDIT_TRIM(r7, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f6, 0x200, 0x70bd27, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4804) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x64, 0x10, 0x8, 0x70bd25, 0x25cbdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {}, {0xe, 0x15}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0xa8, r2, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0xc, 0x2, 0x30, 0x18, 0xc, 0x24, 0x5, 0x1, 0xc, 0x36, 0xc, 0x3, 0xb, 0xc, 0x16, 0x16, 0x3]}, @NL80211_TXRATE_HT={0x48, 0x2, [{}, {0x0, 0xa}, {0x1, 0xa}, {0x4, 0xa}, {0x5, 0x8}, {0x6, 0x8}, {0x7}, {0x4}, {0x7, 0x8}, {0x1, 0x9}, {0x2, 0x7}, {0x0, 0x5}, {0x3, 0x9}, {0x6, 0x5}, {0x7, 0x5}, {0x3, 0x3}, {0x7, 0x2}, {0x6, 0x8}, {0x5}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x9}, {0x7, 0x2}, {0x4, 0x6}, {0x7, 0x5}, {0x0, 0x9}, {0x5, 0x1}, {0x1, 0x6}, {0x5, 0x2}, {0x5, 0x8}, {0x7, 0x9}, {0x4, 0x9}, {0x2, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x6, 0x1}, {0x5, 0x1}, {0x3, 0x7}, {0x4}, {0x6, 0x2}, {0x5, 0x8}, {0x7, 0x9}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x9}, {0x0, 0x5}, {0x2, 0x8}, {0x7, 0x1}, {0x6, 0x1}, {0x6, 0x5}, {0x7}, {0x4, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0xa}, {0x4, 0xa}, {0x4, 0x5}, {0x6, 0x5}, {0x3, 0x9}, {0x1, 0x4}, {0x7, 0x1f}, {0x6, 0x3}, {0x3, 0x7}, {0x6, 0x8}, {0x2, 0x4}, {}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff1, 0x3, 0x4, 0x5, 0x7, 0x3, 0x800, 0xfff8]}}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x198321, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) 1.440512733s ago: executing program 3 (id=1644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)={0xf8, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0xdc, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x7c, 0x3}}, @supported_rates={0x1, 0x6, [{0x2}, {0xc, 0x1}, {0x1}, {0x9}, {0x5}, {0x60, 0x1}]}, @fast_bss_trans={0x37, 0x8e, {0x2, 0x4, "5c971ba574a70c25675de45cb3ea7973", "2218a92fb5c291228a027de77f86979a3c14dc274f0b1e542024ab43092e31b8", "0f330fa6e14726fd5e32fcad4a030fa489c156975e302cf119880e3c876c1161", [{0x2, 0x18, "7448b0c3835fb893f18d40163098d545dc9d619fa9981b12"}, {0x4, 0x10, "b20b76e20d0e883e40aa74e9ec9deebe"}, {0x3, 0x4, "9a879b05"}, {0x1, 0x8, "63755551e18e0db1"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @preq={0x82, 0x36, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0xb, 0x9, 0x0, @broadcast, 0x8, @value, 0x9, 0xf357, 0x2, [{{0x1, 0x0, 0x1}, @broadcast, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x5}]}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 762.667876ms ago: executing program 2 (id=1645): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) listen(0xffffffffffffffff, 0x568) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x15, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca7193"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r6, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x34000}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0x9, 0x2, 0xd}}], 0x38, 0x4008000}, 0x28008841) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000140)) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af3fef8ffffff71a400fe000000007110100000000000e5000600000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 761.871069ms ago: executing program 4 (id=1646): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x0) 733.495741ms ago: executing program 3 (id=1647): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x800, @local, 0x9}]}, &(0x7f0000000480)=0x10) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000140)) 692.515742ms ago: executing program 0 (id=1648): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)=r0}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000101010d0000000000000000020000030c00018005000340000400000c00198008000100060800000000010011010000428bc066ae407e177ef5600bb8d8337d8ee1a39240ee"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x48000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x80, 0x80, 0x7, 0x0, {{0x14, 0x4, 0x3, 0x9, 0x50, 0x65, 0x0, 0x7d, 0x4, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x26, 0x1, [{0x7, 0x2}, {0x6, 0xc, "42ff6a7c5c3375960152"}, {0x2, 0x3, 'o'}, {0x7, 0xb, "e9a7b4c8ee86fd2006"}, {0x0, 0x4, "ec0f"}]}, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x0, [{@private=0xa010100, 0x1}, {@loopback, 0x40}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000080a010100000000000000000200000909000145328a3b03ca4dbc994b0073797a300000000014000000050a0000000000000000000003000008140000001100010000000000000000000700000a"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x4, 0x7, 0x68, @mcast2, @private1, 0x80, 0x710, 0x6, 0x81}}) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 690.859573ms ago: executing program 1 (id=1649): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5914, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xd}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7ff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x6, 0x101, 0xfffffffe}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x2, 0x2, 0xb}], 0x10, 0xffff}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x2e}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000340)=@raw=[@ldst={0x0, 0x3, 0x1, 0x5, 0x2, 0x80, 0x10}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x203, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1cec, 0x0, 0x0, 0x0, 0xfffffffa}], &(0x7f00000003c0)='GPL\x00', 0xaaf1, 0x0, 0x0, 0x41000, 0x40, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xb, 0x30b3d3d8, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x2, 0x4, 0xd, 0x6}, {0x2, 0x1, 0x6}, {0x0, 0x3, 0x4, 0x2}, {0x0, 0x4, 0xc, 0x3}, {0x3, 0x3, 0xa}, {0x2, 0x2, 0x2, 0x6}], 0x10, 0x666e}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x98, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_CARRIER_CHANGES={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x6}, @IFLA_LINKMODE={0x5, 0x11, 0x8}, @IFLA_IFALIASn={0x4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x27c}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FD={0x8, 0x1, r9}]}, @IFLA_WEIGHT={0x8, 0xf, 0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 419.769446ms ago: executing program 4 (id=1650): socket$kcm(0x10, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003f40)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)='g', 0x1}], 0x1, 0x0, 0x0, 0x4008801}], 0x1, 0x20008084) accept4$ax25(r3, 0x0, 0x0, 0x80800) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000001b00), &(0x7f0000000000)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)={{0x14}, [@NFT_MSG_NEWTABLE={0x6c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x10, 0x6, "39edc26bd14e0c1a8c9d09b0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x25, 0x6, "a953aa1fd5cf7702450ba989e6ba6e6952a27ef6e9c15c64e5010000e29037b97d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xf3}]}, @NFT_MSG_DELRULE={0xa4, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xdada}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1b}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x1c4, 0x14, 0xa, 0x201, 0x0, 0x0, {0xfffffffffffffffb, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0xf0, 0x8, "4c5cec567116557c8fb5275ab5addbdf63573bd4f9fe2033def44d96c0af71ae833127e0ade7d0922969404892b3410942ebda571c9b9a8c0a8fc68edcb5bf6ca1a61b69ead0b4ad8ca91b477d0d15f1c4ffc20aa04ed5395cdbdeccf5585193abacef1309c7298dd3d4aca3867393e75a016634179e83ea7359d6d0eb2f56abbbea7351c6ed958e9fa5298106784bef70ea5c18621c03105f1e1837ee047f7673e2e35343c99d2298f7544932797a36aac99867282b6bac4a7f70a41c5554d5f1dcc6618b57b0a1f1b89d743d23ca15980089c3f6c6dc28aaa1189d8f48d377b47e376717a17cd5f22f0013"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x62, 0x8, "eb3f3535777175fcb11d71fdd7920eff4e60db44c7512a25c7a0497022e2e85dc3c9ec54aabdcdecac9cfcdfcf804b65563feebcb57bdd86b317d70e0a34960468dae1ccb5fc013224b0b07e1394a79fcd71cf63580e3163b3fe483fb7cf"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x11, 0x8, "08caa6cba6cc70e91292aea25d"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELTABLE={0x98, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x63, 0x6, "9ce9938f2fd431abc890f9b73f3a9b5e53a0ee2632734f80631a182c8781847a6d87e1f0d4a53d7b75ef98b64ad0f7c638b7f01febd1a1ca06994d33a7eebdd1bd1805f2de369cebc030e2b31b54f205bf360e8e18441fc89d3ad806cf60cc"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3d4}, 0x1, 0x0, 0x0, 0x8004}, 0x2404c944) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) close(0x3) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="110000007a00010600000000ffdbdf2507008f9e9dda0000b17904b479bf2e401e56808ec125a39c86ec5e929625e501e37ff03b667cdaef776e4477449897b7717a76386a3db439ce7ec2c34485220084d29d82249c3f4d37dc27a86b695a0feb9bb1fcfd112a37257c6e73961a984bd7ce364da29dc9a31445286876e6b3ac0a1f6de3719301dc7a872d658c80697894cd8d90336b1a20fe0c95230d8e536132b328c1d7b85f3f27293c6b0b33ce3f9a5e3c631793de307313e3a3d32ac8d525b1695ccd02d0c7ad70"], 0x18}], 0x1, 0x0, 0x0, 0x4004051}, 0x8044) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14c, 0x14c, 0xa, [@struct={0x1, 0x9, 0x0, 0x4, 0x1, 0x9, [{0x2}, {0xe, 0x1, 0x8}, {0xe, 0x5, 0x1}, {0x3, 0x5, 0x31684042}, {0x7, 0x5, 0xd34d}, {0xe, 0x2, 0x1}, {0xe, 0x0, 0x6}, {0xb, 0x5, 0xfffffffb}, {0x2, 0x5, 0x6}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0x4, 0x3}, {0xb, 0x5}, {0xc, 0x5}, {0x6, 0x3}, {0x6, 0x1}, {0x10}, {0xc, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x52, 0x0, 0x43, 0x2}, @volatile={0xc, 0x0, 0x0, 0x9, 0x2}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @union={0xf, 0x4, 0x0, 0x5, 0x0, 0xb5, [{0xa, 0x4, 0x1}, {0xffffffff, 0x1, 0x117c000}, {0x9, 0x2, 0x9}, {0xd, 0x5, 0x9}]}, @fwd={0x7}, @float={0xc, 0x0, 0x0, 0x10, 0x4}, @float={0x9, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x2e, 0x0, 0x30, 0x30, 0x5f, 0x2e, 0x0, 0x61]}}, &(0x7f0000000380)=""/69, 0x16e, 0x45, 0x0, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x3, 0x3, 0x0, 0xf8000000, 0xc08, r4, 0xb36b, '\x00', 0x0, r8, 0x0, 0x1, 0x5}, 0x50) socket$inet6(0xa, 0x2, 0x3a) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0xe) 360.694143ms ago: executing program 4 (id=1651): syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r2, 0x0, 0x64094) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000a40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000cc0), r3) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x3c, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x3c, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x3a}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xc0b7, 0x8001}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20002000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x36, 0x1, 0x70bd25, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wlan1\x00'}) sendmsg$NL80211_CMD_DISCONNECT(r2, 0x0, 0x8810) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006", @ANYRES32=r7, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x44) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000001940)) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) socketpair(0x18, 0x2, 0x3, &(0x7f0000001ac0)) 352.075087ms ago: executing program 1 (id=1652): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x1, 0x2, 0x1, 0x7}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f00000012c0)=""/4095, 0xfff, 0x102, 0x0, 0x0) sendto(r3, &(0x7f00000007c0)='[', 0x1, 0x8001, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000005380)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000001080), &(0x7f0000001100)=0x68) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wpan4\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 273.261044ms ago: executing program 0 (id=1653): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5914, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xd}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7ff, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x6, 0x101, 0xfffffffe}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x2, 0x2, 0xb}], 0x10, 0xffff}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x2e}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000340), &(0x7f00000003c0)='GPL\x00', 0xaaf1, 0x0, 0x0, 0x41000, 0x40, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xb, 0x30b3d3d8, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x2, 0x4, 0xd, 0x6}, {0x2, 0x1, 0x6}, {0x0, 0x3, 0x4, 0x2}, {0x0, 0x4, 0xc, 0x3}, {0x3, 0x3, 0xa}, {0x2, 0x2, 0x2, 0x6}], 0x10, 0x666e}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x98, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_CARRIER_CHANGES={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x6}, @IFLA_LINKMODE={0x5, 0x11, 0x8}, @IFLA_IFALIASn={0x4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x27c}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FD={0x8, 0x1, r9}]}, @IFLA_WEIGHT={0x8, 0xf, 0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 207.882968ms ago: executing program 1 (id=1654): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x48818}, 0x4000000) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x7f00) 118.308673ms ago: executing program 4 (id=1655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet(0x2, 0x4, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, 0x0, 0x800) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x3d, 0x107, 0x0, 0x7, {0x1, 0x7c}}, 0x14}}, 0x4010) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025008000190004000400ad000200000000000006040000000000", 0x36}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1}, 0x10) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x80) r7 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) close(r6) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfdef) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) 103.383337ms ago: executing program 1 (id=1656): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) read(r1, &(0x7f00000003c0)=""/123, 0x7b) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x14, 0x0, 0x8d61ddcfedb48df, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 0 (id=1657): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x8, 0x2}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x128, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x98}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x11, 0xfffe}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4048010}, 0x4000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000003dd0a00000000000073013f00000000009500000000000000b38a595efa0578208e8354bb546620e3690771f5bf003326913779cfaf84efb8b3f976c934b37c6aab214e75d6019bf1582d07e5b5351fb88008465255c682"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x6b, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r4, &(0x7f0000003500)=[{0x0, 0x12}, {&(0x7f0000000080)='C', 0x1}], 0x2) r5 = epoll_create(0x3ff) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000280)={0x2000000}) ppoll(0x0, 0x0, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="740fb737cb09010800000000000000000100f6030c00048008000140000000000800064000000000080005400000001c1c0002000c0002800500010001000000080000000000000000010640000000010900010073797a31000000000900010073797a300017c0374f97f4cde500000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x20000050}, 0x2404c884) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000100)) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c000500ff03bb32a8772efb0c0002"], 0x3c}}, 0x20000000) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000005c0), r8) sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="48a7c6d347bd923f7557d183010000", @ANYRES16=r11, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x8000845}, 0x8080) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160004000000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000000000000082000000002b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000096cd4c7d212ca3702bb6000000aa00"], 0xf8}, 0x1, 0x0, 0x0, 0x4025}, 0x0) kernel console output (not intermixed with test programs): 0000246 R12: 0000000000000001 [ 134.229650][ T7400] R13: 00007f6029c16038 R14: 00007f6029c15fa0 R15: 00007ffee813c1c8 [ 134.229676][ T7400] [ 134.520216][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 134.602120][ T7415] netlink: 'syz.0.440': attribute type 1 has an invalid length. [ 134.651312][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'. [ 134.673226][ T7415] bond1: entered promiscuous mode [ 134.687369][ T7415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.825022][ T7428] syzkaller0: entered promiscuous mode [ 134.830763][ T7428] syzkaller0: entered allmulticast mode [ 134.964719][ T7432] netlink: 'syz.0.444': attribute type 10 has an invalid length. [ 135.005612][ T7432] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.033033][ T7432] bond0: (slave team0): Enslaving as an active interface with an up link [ 135.179168][ T7444] netlink: 60 bytes leftover after parsing attributes in process `syz.1.448'. [ 135.224593][ T7444] dummy0: entered promiscuous mode [ 135.241329][ T7444] dummy0: entered allmulticast mode [ 135.265544][ T7451] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.449'. [ 135.364209][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 135.525351][ T7461] netlink: 240 bytes leftover after parsing attributes in process `syz.0.454'. [ 135.571156][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 135.585560][ T7465] netlink: 'syz.3.456': attribute type 3 has an invalid length. [ 135.649828][ T7463] team1: entered promiscuous mode [ 135.690467][ T7463] team1: entered allmulticast mode [ 135.722033][ T7463] 8021q: adding VLAN 0 to HW filter on device team1 [ 135.864601][ T7468] team2: entered promiscuous mode [ 135.934885][ T7468] team2: entered allmulticast mode [ 136.020438][ T7468] 8021q: adding VLAN 0 to HW filter on device team2 [ 136.215536][ T7502] xt_connbytes: Forcing CT accounting to be enabled [ 136.384661][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.401129][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.734031][ T7491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.742526][ T7491] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.752015][ T7491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.874882][ T7489] syzkaller0: entered promiscuous mode [ 136.883891][ T7489] syzkaller0: entered allmulticast mode [ 137.957006][ T206] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.965820][ T206] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.974599][ T206] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.984174][ T206] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.136039][ T206] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.145780][ T206] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.186221][ T206] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.194608][ T206] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.245644][ T7542] xt_l2tp: v2 doesn't support IP mode [ 138.489551][ T7560] validate_nla: 4 callbacks suppressed [ 138.489579][ T7560] netlink: 'syz.0.478': attribute type 4 has an invalid length. [ 138.556699][ T7563] netlink: 'syz.0.478': attribute type 4 has an invalid length. [ 138.822795][ T7575] __nla_validate_parse: 6 callbacks suppressed [ 138.822813][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'. [ 138.952688][ T7582] netlink: 'syz.4.481': attribute type 8 has an invalid length. [ 138.963391][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 139.138771][ T7593] xt_hashlimit: size too large, truncated to 1048576 [ 139.208771][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 139.219628][ T7590] gre0 speed is unknown, defaulting to 1000 [ 139.296262][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'. [ 139.334030][ T7600] netlink: 'syz.2.488': attribute type 4 has an invalid length. [ 139.582649][ T7606] netlink: 'syz.3.489': attribute type 1 has an invalid length. [ 139.642670][ T7608] sctp: [Deprecated]: syz.0.490 (pid 7608) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.642670][ T7608] Use struct sctp_sack_info instead [ 139.725400][ T7610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.491'. [ 139.851458][ T7610] bond2 (unregistering): Released all slaves [ 140.081957][ T7625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.495'. [ 140.094693][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 140.288529][ T7634] FAULT_INJECTION: forcing a failure. [ 140.288529][ T7634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.338561][ T7634] CPU: 0 UID: 0 PID: 7634 Comm: syz.0.499 Not tainted syzkaller #0 PREEMPT(full) [ 140.338589][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 140.338600][ T7634] Call Trace: [ 140.338607][ T7634] [ 140.338614][ T7634] dump_stack_lvl+0xe8/0x150 [ 140.338644][ T7634] should_fail_ex+0x412/0x560 [ 140.338675][ T7634] _copy_from_user+0x2d/0xb0 [ 140.338698][ T7634] ___sys_sendmsg+0x1c6/0x360 [ 140.338728][ T7634] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.338780][ T7634] ? __fget_files+0x2a/0x420 [ 140.338793][ T7634] ? __fget_files+0x3a0/0x420 [ 140.338816][ T7634] __x64_sys_sendmsg+0x1bd/0x2a0 [ 140.338842][ T7634] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.338872][ T7634] ? __pfx_ksys_write+0x10/0x10 [ 140.338901][ T7634] do_syscall_64+0x14d/0xf80 [ 140.338916][ T7634] ? trace_irq_disable+0x3b/0x150 [ 140.338931][ T7634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.338947][ T7634] ? clear_bhb_loop+0x40/0x90 [ 140.338968][ T7634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.338984][ T7634] RIP: 0033:0x7f464439c819 [ 140.338999][ T7634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.339012][ T7634] RSP: 002b:00007f46451fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.339030][ T7634] RAX: ffffffffffffffda RBX: 00007f4644615fa0 RCX: 00007f464439c819 [ 140.339042][ T7634] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 140.339053][ T7634] RBP: 00007f46451fc090 R08: 0000000000000000 R09: 0000000000000000 [ 140.339063][ T7634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.339073][ T7634] R13: 00007f4644616038 R14: 00007f4644615fa0 R15: 00007ffc0cbc13a8 [ 140.339101][ T7634] [ 140.598909][ T7640] netlink: 'syz.1.503': attribute type 7 has an invalid length. [ 140.725053][ T7649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.506'. [ 140.744404][ T7640] netlink: 'syz.1.503': attribute type 7 has an invalid length. [ 140.769714][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'. [ 141.146455][ T7669] FAULT_INJECTION: forcing a failure. [ 141.146455][ T7669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.160005][ T7669] CPU: 1 UID: 0 PID: 7669 Comm: syz.3.511 Not tainted syzkaller #0 PREEMPT(full) [ 141.160025][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 141.160034][ T7669] Call Trace: [ 141.160040][ T7669] [ 141.160046][ T7669] dump_stack_lvl+0xe8/0x150 [ 141.160068][ T7669] should_fail_ex+0x412/0x560 [ 141.160093][ T7669] _copy_to_user+0x31/0xb0 [ 141.160111][ T7669] simple_read_from_buffer+0xe1/0x170 [ 141.160134][ T7669] proc_fail_nth_read+0x1bb/0x230 [ 141.160155][ T7669] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.160176][ T7669] ? rw_verify_area+0x2a6/0x4d0 [ 141.160190][ T7669] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.160210][ T7669] vfs_read+0x20c/0xa70 [ 141.160223][ T7669] ? fdget_pos+0x246/0x320 [ 141.160238][ T7669] ? __pfx___mutex_lock+0x10/0x10 [ 141.160252][ T7669] ? __pfx_vfs_read+0x10/0x10 [ 141.160268][ T7669] ? __fget_files+0x2a/0x420 [ 141.160283][ T7669] ? __fget_files+0x3a0/0x420 [ 141.160293][ T7669] ? __fget_files+0x2a/0x420 [ 141.160311][ T7669] ksys_read+0x150/0x270 [ 141.160327][ T7669] ? __pfx_ksys_read+0x10/0x10 [ 141.160349][ T7669] do_syscall_64+0x14d/0xf80 [ 141.160371][ T7669] ? trace_irq_disable+0x3b/0x150 [ 141.160383][ T7669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.160396][ T7669] ? clear_bhb_loop+0x40/0x90 [ 141.160412][ T7669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.160429][ T7669] RIP: 0033:0x7faf7435d04e [ 141.160444][ T7669] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 141.160455][ T7669] RSP: 002b:00007faf75284fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.160470][ T7669] RAX: ffffffffffffffda RBX: 00007faf752856c0 RCX: 00007faf7435d04e [ 141.160479][ T7669] RDX: 000000000000000f RSI: 00007faf752850a0 RDI: 0000000000000012 [ 141.160488][ T7669] RBP: 00007faf75285090 R08: 0000000000000000 R09: 0000000000000000 [ 141.160496][ T7669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.160504][ T7669] R13: 00007faf74616038 R14: 00007faf74615fa0 R15: 00007ffde6822148 [ 141.160525][ T7669] [ 141.423661][ T7672] IPVS: nq: FWM 3 0x00000003 - no destination available [ 141.709323][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 142.102845][ T7703] tipc: Started in network mode [ 142.135651][ T7703] tipc: Node identity ac14140f, cluster identity 4711 [ 142.188941][ T7703] tipc: New replicast peer: 255.255.255.255 [ 142.212962][ T7703] tipc: Enabled bearer , priority 10 [ 142.318064][ T7716] bond2: invalid ARP target 0.0.0.0 specified for addition [ 142.325513][ T7716] bond2: option arp_ip_target: invalid value (0) [ 142.342253][ T7716] bond2 (unregistering): Released all slaves [ 142.698293][ T7739] rdma_rxe: rxe_newlink: failed to add gre0 [ 142.847345][ T7739] dummy0: left promiscuous mode [ 142.871328][ T7739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.255049][ T7774] netlink: 'syz.2.547': attribute type 1 has an invalid length. [ 143.264828][ T7775] erspan0: entered promiscuous mode [ 143.282535][ T7775] macvtap1: entered promiscuous mode [ 143.300335][ T7775] macvtap1: entered allmulticast mode [ 143.311469][ T7775] erspan0: entered allmulticast mode [ 143.337565][ T796] tipc: Node number set to 2886997007 [ 143.678662][ T7794] rdma_rxe: rxe_newlink: failed to add gre0 [ 143.769508][ T7801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.092265][ T7809] netlink: 'syz.4.558': attribute type 2 has an invalid length. [ 144.116550][ T7809] netlink: 'syz.4.558': attribute type 9 has an invalid length. [ 144.125449][ T7809] __nla_validate_parse: 7 callbacks suppressed [ 144.125464][ T7809] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.558'. [ 144.167766][ T7818] xt_connbytes: Forcing CT accounting to be enabled [ 144.204443][ T7822] Unsupported ieee802154 address type: 0 [ 144.253016][ T7824] netlink: 'syz.1.565': attribute type 2 has an invalid length. [ 144.271839][ T7824] !©9: entered promiscuous mode [ 144.283489][ T7824] netlink: 'syz.1.565': attribute type 2 has an invalid length. [ 144.305618][ T7824] !©9: left promiscuous mode [ 144.314781][ T7827] netlink: 10 bytes leftover after parsing attributes in process `syz.3.566'. [ 144.590698][ T7835] erspan0: entered promiscuous mode [ 144.597673][ T7835] macsec2: entered promiscuous mode [ 144.617172][ T7835] erspan0: left promiscuous mode [ 144.929109][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 146.311859][ T7882] FAULT_INJECTION: forcing a failure. [ 146.311859][ T7882] name failslab, interval 1, probability 0, space 0, times 0 [ 146.343790][ T7882] CPU: 0 UID: 0 PID: 7882 Comm: syz.0.583 Not tainted syzkaller #0 PREEMPT(full) [ 146.343815][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 146.343826][ T7882] Call Trace: [ 146.343837][ T7882] [ 146.343844][ T7882] dump_stack_lvl+0xe8/0x150 [ 146.343873][ T7882] should_fail_ex+0x412/0x560 [ 146.343905][ T7882] should_failslab+0xa8/0x100 [ 146.343929][ T7882] __kmalloc_noprof+0xe8/0x760 [ 146.343947][ T7882] ? __kasan_kmalloc+0x93/0xb0 [ 146.343966][ T7882] ? nla_strdup+0x9d/0x140 [ 146.343983][ T7882] ? __kmalloc_cache_noprof+0x31c/0x660 [ 146.344006][ T7882] nla_strdup+0x9d/0x140 [ 146.344027][ T7882] nf_tables_newtable+0x491/0x1910 [ 146.344051][ T7882] ? nfnl_pernet+0x21/0x240 [ 146.344086][ T7882] nfnetlink_rcv+0x1240/0x27b0 [ 146.344138][ T7882] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 146.344172][ T7882] ? ref_tracker_free+0x693/0x840 [ 146.344214][ T7882] ? __netlink_deliver_tap+0x807/0x850 [ 146.344235][ T7882] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.344271][ T7882] netlink_unicast+0x80f/0x9b0 [ 146.344298][ T7882] ? __pfx_netlink_unicast+0x10/0x10 [ 146.344316][ T7882] ? netlink_sendmsg+0x650/0xb40 [ 146.344334][ T7882] ? skb_put+0x11b/0x210 [ 146.344359][ T7882] netlink_sendmsg+0x813/0xb40 [ 146.344389][ T7882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.344412][ T7882] ? aa_sock_msg_perm+0xf1/0x1b0 [ 146.344439][ T7882] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 146.344462][ T7882] ____sys_sendmsg+0x972/0x9f0 [ 146.344494][ T7882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.344524][ T7882] ? import_iovec+0x73/0xa0 [ 146.344547][ T7882] ___sys_sendmsg+0x2a5/0x360 [ 146.344574][ T7882] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.344637][ T7882] ? __fget_files+0x2a/0x420 [ 146.344653][ T7882] ? __fget_files+0x3a0/0x420 [ 146.344677][ T7882] __x64_sys_sendmsg+0x1bd/0x2a0 [ 146.344703][ T7882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 146.344735][ T7882] ? __pfx_ksys_write+0x10/0x10 [ 146.344765][ T7882] do_syscall_64+0x14d/0xf80 [ 146.344782][ T7882] ? trace_irq_disable+0x3b/0x150 [ 146.344797][ T7882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.344814][ T7882] ? clear_bhb_loop+0x40/0x90 [ 146.344834][ T7882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.344850][ T7882] RIP: 0033:0x7f464439c819 [ 146.344867][ T7882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.344880][ T7882] RSP: 002b:00007f46451fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.344899][ T7882] RAX: ffffffffffffffda RBX: 00007f4644615fa0 RCX: 00007f464439c819 [ 146.344912][ T7882] RDX: 0000000024000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 146.344924][ T7882] RBP: 00007f46451fc090 R08: 0000000000000000 R09: 0000000000000000 [ 146.344935][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.344945][ T7882] R13: 00007f4644616038 R14: 00007f4644615fa0 R15: 00007ffc0cbc13a8 [ 146.344974][ T7882] [ 146.925107][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 146.934354][ T7898] netlink: 32 bytes leftover after parsing attributes in process `syz.1.590'. [ 146.964411][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 146.990175][ T7900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.591'. [ 147.217983][ T7907] netlink: 'syz.2.592': attribute type 1 has an invalid length. [ 147.244262][ T7907] netlink: 'syz.2.592': attribute type 2 has an invalid length. [ 147.267221][ T7907] netlink: 'syz.2.592': attribute type 1 has an invalid length. [ 147.285091][ T7907] netlink: 'syz.2.592': attribute type 2 has an invalid length. [ 147.373112][ T7924] netlink: 'syz.4.597': attribute type 4 has an invalid length. [ 147.797538][ T7947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.607'. [ 147.847314][ T7953] netlink: 48 bytes leftover after parsing attributes in process `syz.2.610'. [ 147.871043][ T7953] virt_wifi0: entered promiscuous mode [ 147.886108][ T7953] virt_wifi0: entered allmulticast mode [ 147.934918][ T7957] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 147.977348][ T7952] netlink: 'syz.1.608': attribute type 21 has an invalid length. [ 148.034441][ T7958] netlink: 124 bytes leftover after parsing attributes in process `syz.1.608'. [ 148.354013][ T7981] dummy0: entered promiscuous mode [ 148.363996][ T7981] macsec2: entered promiscuous mode [ 150.920572][ T7957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.155950][ T8000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.624'. [ 151.362159][ T8008] netlink: 56 bytes leftover after parsing attributes in process `syz.3.626'. [ 151.986583][ T8036] validate_nla: 1 callbacks suppressed [ 151.986599][ T8036] netlink: 'syz.4.634': attribute type 21 has an invalid length. [ 152.031568][ T8036] netlink: 128 bytes leftover after parsing attributes in process `syz.4.634'. [ 152.058666][ T8040] openvswitch: netlink: Actions may not be safe on all matching packets [ 152.069462][ T8036] netlink: 'syz.4.634': attribute type 4 has an invalid length. [ 152.090963][ T8036] netlink: 3 bytes leftover after parsing attributes in process `syz.4.634'. [ 152.550905][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 152.592304][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 152.837915][ T8076] rdma_rxe: rxe_newlink: failed to add gre0 [ 152.908720][ T8081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.217571][ T8097] netlink: 76 bytes leftover after parsing attributes in process `syz.1.654'. [ 153.228520][ T8097] netlink: 32 bytes leftover after parsing attributes in process `syz.1.654'. [ 153.352506][ T8101] IPVS: nq: FWM 3 0x00000003 - no destination available [ 153.511860][ T8109] rdma_rxe: rxe_newlink: failed to add gre0 [ 153.607381][ T8112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.809624][ T8124] gre0 speed is unknown, defaulting to 1000 [ 153.816149][ T8121] syzkaller0: entered promiscuous mode [ 153.821634][ T8121] syzkaller0: entered allmulticast mode [ 154.106601][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 154.165288][ T8133] netlink: 'syz.0.665': attribute type 4 has an invalid length. [ 154.244178][ T8142] netlink: 'syz.0.665': attribute type 4 has an invalid length. [ 154.717201][ T8165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.675'. [ 154.744030][ T8151] gre0 speed is unknown, defaulting to 1000 [ 155.120527][ T29] audit: type=1804 audit(1775195643.522:3): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.679" name="/newroot/142/cgroup.controllers" dev="tmpfs" ino=753 res=1 errno=0 [ 155.165305][ T29] audit: type=1800 audit(1775195643.562:4): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.679" name="cgroup.controllers" dev="tmpfs" ino=753 res=0 errno=0 [ 155.282941][ T29] audit: type=1800 audit(1775195643.572:5): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.679" name="cgroup.controllers" dev="tmpfs" ino=753 res=0 errno=0 [ 155.617674][ T8206] netlink: 'syz.1.686': attribute type 4 has an invalid length. [ 155.656698][ T8206] netlink: 'syz.1.686': attribute type 4 has an invalid length. [ 156.564636][ T8228] gre0 speed is unknown, defaulting to 1000 [ 157.225082][ T8236] gre0 speed is unknown, defaulting to 1000 [ 157.380808][ T8255] syzkaller1: entered promiscuous mode [ 157.387848][ T8255] syzkaller1: entered allmulticast mode [ 157.441007][ T8263] netlink: 'syz.0.699': attribute type 4 has an invalid length. [ 157.493859][ T8268] netlink: 'syz.0.699': attribute type 4 has an invalid length. [ 157.958505][ T8276] netlink: 'syz.3.703': attribute type 27 has an invalid length. [ 158.190372][ T8276] wg1: left promiscuous mode [ 158.195405][ T8276] wg1: left allmulticast mode [ 158.349198][ T8276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.398934][ T8276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.569899][ T8276] syzkaller0: left promiscuous mode [ 158.575564][ T8276] syzkaller0: left allmulticast mode [ 158.593981][ T8276] sit1: left promiscuous mode [ 158.683600][ T8278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.706914][ T8278] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.717948][ T8278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.745708][ T796] gre0 speed is unknown, defaulting to 1000 [ 158.762560][ T5911] syz0: Port: 1 Link DOWN [ 158.799922][ T1333] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.814927][ T796] gre0 speed is unknown, defaulting to 1000 [ 158.814953][ T1333] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.851063][ T1060] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.869754][ T5890] gre0 speed is unknown, defaulting to 1000 [ 158.875813][ T1060] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.961533][ T8320] FAULT_INJECTION: forcing a failure. [ 158.961533][ T8320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.979332][ T8291] gre0 speed is unknown, defaulting to 1000 [ 158.999449][ T8320] CPU: 1 UID: 0 PID: 8320 Comm: syz.3.711 Not tainted syzkaller #0 PREEMPT(full) [ 158.999473][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 158.999484][ T8320] Call Trace: [ 158.999491][ T8320] [ 158.999498][ T8320] dump_stack_lvl+0xe8/0x150 [ 158.999528][ T8320] should_fail_ex+0x412/0x560 [ 158.999567][ T8320] _copy_from_user+0x2d/0xb0 [ 158.999589][ T8320] __sys_bpf+0x229/0x950 [ 158.999609][ T8320] ? __pfx___sys_bpf+0x10/0x10 [ 158.999640][ T8320] ? ksys_write+0x242/0x270 [ 158.999662][ T8320] ? __pfx_ksys_write+0x10/0x10 [ 158.999688][ T8320] __x64_sys_bpf+0x7c/0x90 [ 158.999713][ T8320] do_syscall_64+0x14d/0xf80 [ 158.999728][ T8320] ? trace_irq_disable+0x3b/0x150 [ 158.999743][ T8320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.999760][ T8320] ? clear_bhb_loop+0x40/0x90 [ 158.999780][ T8320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.999799][ T8320] RIP: 0033:0x7faf7439c819 [ 158.999815][ T8320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.999828][ T8320] RSP: 002b:00007faf75285028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 158.999846][ T8320] RAX: ffffffffffffffda RBX: 00007faf74615fa0 RCX: 00007faf7439c819 [ 158.999859][ T8320] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 158.999870][ T8320] RBP: 00007faf75285090 R08: 0000000000000000 R09: 0000000000000000 [ 158.999880][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.999889][ T8320] R13: 00007faf74616038 R14: 00007faf74615fa0 R15: 00007ffde6822148 [ 158.999916][ T8320] [ 159.333866][ T8326] netlink: 'syz.3.713': attribute type 1 has an invalid length. [ 159.452966][ T8328] netlink: 'syz.0.712': attribute type 4 has an invalid length. [ 159.499580][ T8332] bond2: (slave geneve2): making interface the new active one [ 159.507702][ T8335] netlink: 'syz.0.712': attribute type 4 has an invalid length. [ 159.548246][ T8332] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 159.633879][ T1060] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 159.731522][ T1060] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 159.761570][ T1060] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 159.789777][ T8342] __nla_validate_parse: 1 callbacks suppressed [ 159.789793][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.716'. [ 159.821164][ T1060] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 159.933445][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.717'. [ 161.211231][ T8366] block nbd0: NBD_DISCONNECT [ 161.236108][ T8366] block nbd0: Send disconnect failed -32 [ 161.242346][ T8366] block nbd0: Send disconnect failed -32 [ 161.286189][ T8369] siw: device registration error -23 [ 161.436736][ T8375] netlink: 'syz.3.726': attribute type 3 has an invalid length. [ 161.593159][ T8388] netlink: 'syz.0.727': attribute type 4 has an invalid length. [ 161.640349][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 161.660417][ T8388] netlink: 'syz.0.727': attribute type 4 has an invalid length. [ 161.835213][ T8396] netlink: 'syz.2.729': attribute type 17 has an invalid length. [ 161.888738][ T8396] dummy0: entered promiscuous mode [ 161.893958][ T8396] macsec1: entered promiscuous mode [ 161.924073][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 162.124958][ T8408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.731'. [ 162.150322][ T8408] netlink: 224 bytes leftover after parsing attributes in process `syz.0.731'. [ 162.688679][ T8439] validate_nla: 3 callbacks suppressed [ 162.688698][ T8439] netlink: 'syz.3.741': attribute type 4 has an invalid length. [ 162.749288][ T8440] netlink: 'syz.3.741': attribute type 4 has an invalid length. [ 162.773396][ T8442] dummy0: entered promiscuous mode [ 162.779514][ T8442] macsec1: entered promiscuous mode [ 162.828954][ T8446] FAULT_INJECTION: forcing a failure. [ 162.828954][ T8446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.842749][ T8446] CPU: 1 UID: 0 PID: 8446 Comm: syz.0.744 Not tainted syzkaller #0 PREEMPT(full) [ 162.842765][ T8446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 162.842772][ T8446] Call Trace: [ 162.842784][ T8446] [ 162.842789][ T8446] dump_stack_lvl+0xe8/0x150 [ 162.842807][ T8446] should_fail_ex+0x412/0x560 [ 162.842826][ T8446] _copy_to_user+0x31/0xb0 [ 162.842839][ T8446] simple_read_from_buffer+0xe1/0x170 [ 162.842855][ T8446] proc_fail_nth_read+0x1bb/0x230 [ 162.842871][ T8446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.842886][ T8446] ? rw_verify_area+0x2a6/0x4d0 [ 162.842897][ T8446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.842912][ T8446] vfs_read+0x20c/0xa70 [ 162.842924][ T8446] ? move_addr_to_user+0x63/0x210 [ 162.842937][ T8446] ? __pfx_vfs_read+0x10/0x10 [ 162.842946][ T8446] ? move_addr_to_user+0x1d4/0x210 [ 162.842957][ T8446] ? move_addr_to_user+0x1d9/0x210 [ 162.842969][ T8446] ? __sys_getsockname+0x248/0x2d0 [ 162.842982][ T8446] ? __pfx___sys_getsockname+0x10/0x10 [ 162.842997][ T8446] ksys_read+0x150/0x270 [ 162.843008][ T8446] ? __pfx_ksys_read+0x10/0x10 [ 162.843023][ T8446] do_syscall_64+0x14d/0xf80 [ 162.843036][ T8446] ? trace_irq_disable+0x3b/0x150 [ 162.843044][ T8446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.843054][ T8446] ? clear_bhb_loop+0x40/0x90 [ 162.843066][ T8446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.843076][ T8446] RIP: 0033:0x7f464435d04e [ 162.843086][ T8446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 162.843095][ T8446] RSP: 002b:00007f46451fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.843107][ T8446] RAX: ffffffffffffffda RBX: 00007f46451fc6c0 RCX: 00007f464435d04e [ 162.843114][ T8446] RDX: 000000000000000f RSI: 00007f46451fc0a0 RDI: 0000000000000005 [ 162.843120][ T8446] RBP: 00007f46451fc090 R08: 0000000000000000 R09: 0000000000000000 [ 162.843125][ T8446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.843131][ T8446] R13: 00007f4644616038 R14: 00007f4644615fa0 R15: 00007ffc0cbc13a8 [ 162.843146][ T8446] [ 164.385913][ T8482] tipc: Enabling of bearer rejected, failed to enable media [ 164.674724][ T8492] syzkaller0: entered promiscuous mode [ 164.693661][ T8492] syzkaller0: entered allmulticast mode [ 164.798472][ T8494] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 164.850619][ T1333] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 164.941094][ T8505] rdma_rxe: rxe_newlink: failed to add gre0 [ 164.980989][ T8508] rdma_rxe: rxe_newlink: failed to add gre0 [ 165.000930][ T8508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.041733][ T8510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.301003][ T8524] netlink: 'syz.1.774': attribute type 3 has an invalid length. [ 165.471455][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.774'. [ 165.593364][ T8496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.945104][ T8560] netlink: 56 bytes leftover after parsing attributes in process `syz.2.782'. [ 166.653610][ T8590] gre0 speed is unknown, defaulting to 1000 [ 166.771788][ T8599] tipc: Enabling of bearer rejected, failed to enable media [ 167.014221][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 167.039415][ T8612] : entered promiscuous mode [ 167.057999][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 167.068004][ T8612] openvswitch: : Dropping previously announced user features [ 167.260827][ T8621] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.799'. [ 167.283512][ T8619] bond0: entered promiscuous mode [ 167.289514][ T8619] bond_slave_0: entered promiscuous mode [ 167.295289][ T8619] bond_slave_1: entered promiscuous mode [ 167.301453][ T8619] bridge0: entered promiscuous mode [ 167.308589][ T8619] batadv0: entered promiscuous mode [ 167.319867][ T8619] debugfs: 'hsr1' already exists in 'hsr' [ 167.326366][ T8619] Cannot create hsr debugfs directory [ 167.756451][ T8637] FAULT_INJECTION: forcing a failure. [ 167.756451][ T8637] name failslab, interval 1, probability 0, space 0, times 0 [ 167.776224][ T8637] CPU: 1 UID: 0 PID: 8637 Comm: syz.1.806 Not tainted syzkaller #0 PREEMPT(full) [ 167.776250][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.776261][ T8637] Call Trace: [ 167.776269][ T8637] [ 167.776276][ T8637] dump_stack_lvl+0xe8/0x150 [ 167.776306][ T8637] should_fail_ex+0x412/0x560 [ 167.776338][ T8637] should_failslab+0xa8/0x100 [ 167.776371][ T8637] __kvmalloc_node_noprof+0x178/0x8a0 [ 167.776393][ T8637] ? traverse+0xde/0x580 [ 167.776422][ T8637] traverse+0xde/0x580 [ 167.776455][ T8637] seq_read_iter+0xd08/0xe10 [ 167.776476][ T8637] ? __pfx_aa_file_perm+0x10/0x10 [ 167.776497][ T8637] ? kstrtoull+0x12f/0x1d0 [ 167.776532][ T8637] do_iter_readv_writev+0x619/0x8c0 [ 167.776556][ T8637] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 167.776586][ T8637] ? rw_verify_area+0x2a6/0x4d0 [ 167.776609][ T8637] vfs_readv+0x288/0x840 [ 167.776640][ T8637] ? __pfx_vfs_readv+0x10/0x10 [ 167.776678][ T8637] ? __fget_files+0x2a/0x420 [ 167.776698][ T8637] ? __fget_files+0x3a0/0x420 [ 167.776712][ T8637] ? __fget_files+0x2a/0x420 [ 167.776737][ T8637] __x64_sys_preadv+0x19f/0x2a0 [ 167.776761][ T8637] ? __pfx___x64_sys_preadv+0x10/0x10 [ 167.776794][ T8637] do_syscall_64+0x14d/0xf80 [ 167.776810][ T8637] ? trace_irq_disable+0x3b/0x150 [ 167.776826][ T8637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.776843][ T8637] ? clear_bhb_loop+0x40/0x90 [ 167.776864][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.776881][ T8637] RIP: 0033:0x7f602999c819 [ 167.776898][ T8637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.776913][ T8637] RSP: 002b:00007f602a86b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 167.776931][ T8637] RAX: ffffffffffffffda RBX: 00007f6029c15fa0 RCX: 00007f602999c819 [ 167.776944][ T8637] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000004 [ 167.776955][ T8637] RBP: 00007f602a86b090 R08: 00000000000006c8 R09: 0000000000000000 [ 167.776966][ T8637] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 167.776976][ T8637] R13: 00007f6029c16038 R14: 00007f6029c15fa0 R15: 00007ffee813c1c8 [ 167.777006][ T8637] [ 168.123098][ T8649] netem: change failed [ 168.150827][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 168.353078][ T8667] netlink: 'syz.3.815': attribute type 3 has an invalid length. [ 168.567443][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.815'. [ 168.851565][ T8699] veth0_to_bridge: entered promiscuous mode [ 168.870264][ T8698] veth0_to_bridge: left promiscuous mode [ 169.170748][ T8714] block nbd0: not configured, cannot reconfigure [ 169.619550][ T8737] netlink: 'syz.0.832': attribute type 1 has an invalid length. [ 169.627511][ T8737] netlink: 224 bytes leftover after parsing attributes in process `syz.0.832'. [ 169.993189][ T8755] FAULT_INJECTION: forcing a failure. [ 169.993189][ T8755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.008213][ T8755] CPU: 1 UID: 0 PID: 8755 Comm: syz.3.837 Not tainted syzkaller #0 PREEMPT(full) [ 170.008237][ T8755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 170.008246][ T8755] Call Trace: [ 170.008253][ T8755] [ 170.008260][ T8755] dump_stack_lvl+0xe8/0x150 [ 170.008290][ T8755] should_fail_ex+0x412/0x560 [ 170.008318][ T8755] _copy_to_user+0x31/0xb0 [ 170.008340][ T8755] simple_read_from_buffer+0xe1/0x170 [ 170.008370][ T8755] proc_fail_nth_read+0x1bb/0x230 [ 170.008403][ T8755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 170.008430][ T8755] ? rw_verify_area+0x2a6/0x4d0 [ 170.008448][ T8755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 170.008473][ T8755] vfs_read+0x20c/0xa70 [ 170.008490][ T8755] ? fdget_pos+0x246/0x320 [ 170.008509][ T8755] ? __pfx___mutex_lock+0x10/0x10 [ 170.008526][ T8755] ? __pfx_vfs_read+0x10/0x10 [ 170.008547][ T8755] ? __fget_files+0x2a/0x420 [ 170.008567][ T8755] ? __fget_files+0x3a0/0x420 [ 170.008581][ T8755] ? __fget_files+0x2a/0x420 [ 170.008605][ T8755] ksys_read+0x150/0x270 [ 170.008628][ T8755] ? __pfx_ksys_read+0x10/0x10 [ 170.008657][ T8755] do_syscall_64+0x14d/0xf80 [ 170.008673][ T8755] ? trace_irq_disable+0x3b/0x150 [ 170.008687][ T8755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.008703][ T8755] ? clear_bhb_loop+0x40/0x90 [ 170.008725][ T8755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.008742][ T8755] RIP: 0033:0x7faf7435d04e [ 170.008758][ T8755] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 170.008772][ T8755] RSP: 002b:00007faf75284fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 170.008793][ T8755] RAX: ffffffffffffffda RBX: 00007faf752856c0 RCX: 00007faf7435d04e [ 170.008806][ T8755] RDX: 000000000000000f RSI: 00007faf752850a0 RDI: 0000000000000004 [ 170.008817][ T8755] RBP: 00007faf75285090 R08: 0000000000000000 R09: 0000000000000000 [ 170.008827][ T8755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.008836][ T8755] R13: 00007faf74616038 R14: 00007faf74615fa0 R15: 00007ffde6822148 [ 170.008864][ T8755] [ 170.054150][ T8752] netlink: 'syz.0.836': attribute type 4 has an invalid length. [ 170.200294][ T8759] netlink: 'syz.2.839': attribute type 33 has an invalid length. [ 170.256355][ T8759] netlink: 152 bytes leftover after parsing attributes in process `syz.2.839'. [ 170.430719][ T8770] netlink: 'syz.1.843': attribute type 1 has an invalid length. [ 170.456164][ T8770] netlink: 224 bytes leftover after parsing attributes in process `syz.1.843'. [ 170.959516][ T8798] No such timeout policy "syz0" [ 171.007570][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.853'. [ 171.025571][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.853'. [ 171.323243][ T8814] Bluetooth: MGMT ver 1.23 [ 171.576955][ T8830] netlink: 52 bytes leftover after parsing attributes in process `syz.1.861'. [ 171.951281][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.864'. [ 172.871048][ T8878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.876'. [ 172.889452][ T8879] netlink: 56 bytes leftover after parsing attributes in process `syz.1.874'. [ 173.119235][ T8888] netlink: 180 bytes leftover after parsing attributes in process `syz.4.877'. [ 173.297968][ T8884] netlink: 180 bytes leftover after parsing attributes in process `syz.2.879'. [ 173.365170][ T8891] gretap1: left promiscuous mode [ 173.394113][ T8891] ip6gre1: left promiscuous mode [ 173.414179][ T8891] ip6gre1: left allmulticast mode [ 173.424412][ T8891] bond1: left promiscuous mode [ 173.453326][ T8891] macsec1: left promiscuous mode [ 173.942959][ T8914] FAULT_INJECTION: forcing a failure. [ 173.942959][ T8914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.977123][ T8914] CPU: 0 UID: 0 PID: 8914 Comm: syz.4.886 Not tainted syzkaller #0 PREEMPT(full) [ 173.977148][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 173.977158][ T8914] Call Trace: [ 173.977164][ T8914] [ 173.977171][ T8914] dump_stack_lvl+0xe8/0x150 [ 173.977201][ T8914] should_fail_ex+0x412/0x560 [ 173.977233][ T8914] _copy_from_user+0x2d/0xb0 [ 173.977253][ T8914] inet_ioctl+0x2f8/0x560 [ 173.977280][ T8914] ? __pfx_inet_ioctl+0x10/0x10 [ 173.977321][ T8914] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 173.977346][ T8914] sock_do_ioctl+0x101/0x320 [ 173.977365][ T8914] ? __pfx_sock_do_ioctl+0x10/0x10 [ 173.977380][ T8914] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 173.977410][ T8914] sock_ioctl+0x5c6/0x7f0 [ 173.977429][ T8914] ? __pfx_sock_ioctl+0x10/0x10 [ 173.977446][ T8914] ? __fget_files+0x2a/0x420 [ 173.977461][ T8914] ? __fget_files+0x3a0/0x420 [ 173.977475][ T8914] ? __fget_files+0x2a/0x420 [ 173.977493][ T8914] ? bpf_lsm_file_ioctl+0x9/0x20 [ 173.977516][ T8914] ? __pfx_sock_ioctl+0x10/0x10 [ 173.977532][ T8914] __se_sys_ioctl+0xfc/0x170 [ 173.977553][ T8914] do_syscall_64+0x14d/0xf80 [ 173.977569][ T8914] ? trace_irq_disable+0x3b/0x150 [ 173.977582][ T8914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.977597][ T8914] ? clear_bhb_loop+0x40/0x90 [ 173.977642][ T8914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.977658][ T8914] RIP: 0033:0x7f27f899c819 [ 173.977674][ T8914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.977689][ T8914] RSP: 002b:00007f27f9923028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.977708][ T8914] RAX: ffffffffffffffda RBX: 00007f27f8c15fa0 RCX: 00007f27f899c819 [ 173.977721][ T8914] RDX: 0000200000000080 RSI: 000000000000890c RDI: 0000000000000003 [ 173.977731][ T8914] RBP: 00007f27f9923090 R08: 0000000000000000 R09: 0000000000000000 [ 173.977742][ T8914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.977752][ T8914] R13: 00007f27f8c16038 R14: 00007f27f8c15fa0 R15: 00007ffd6a3ce1d8 [ 173.977778][ T8914] [ 174.296561][ T8919] rdma_op ffff888056f841f0 conn xmit_rdma 0000000000000000 [ 174.385349][ T8924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.889'. [ 174.518453][ T8926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.761426][ T8942] netlink: 'syz.0.895': attribute type 1 has an invalid length. [ 174.800709][ T8944] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 174.819946][ T8944] syzkaller0: entered promiscuous mode [ 174.826464][ T8944] syzkaller0: entered allmulticast mode [ 174.851164][ T8949] syzkaller0: entered promiscuous mode [ 174.856869][ T8949] syzkaller0: entered allmulticast mode [ 174.869910][ T8952] rdma_op ffff888030b5f9f0 conn xmit_rdma 0000000000000000 [ 175.012691][ T8959] netlink: 'syz.0.901': attribute type 1 has an invalid length. [ 175.020653][ T8959] netlink: 224 bytes leftover after parsing attributes in process `syz.0.901'. [ 175.856485][ T9004] syzkaller0: entered promiscuous mode [ 175.867261][ T9004] syzkaller0: entered allmulticast mode [ 175.960972][ T9016] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 176.741536][ T9035] __nla_validate_parse: 7 callbacks suppressed [ 176.741552][ T9035] netlink: 11 bytes leftover after parsing attributes in process `syz.3.918'. [ 176.757474][ T9035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.918'. [ 177.509516][ T9042] netlink: 'syz.0.921': attribute type 1 has an invalid length. [ 177.855828][ T9064] netlink: 180 bytes leftover after parsing attributes in process `syz.0.927'. [ 177.892851][ T9066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.928'. [ 178.103909][ T9072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.929'. [ 178.141437][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'. [ 178.473738][ T9083] netlink: 'syz.1.933': attribute type 1 has an invalid length. [ 178.644977][ T9092] FAULT_INJECTION: forcing a failure. [ 178.644977][ T9092] name failslab, interval 1, probability 0, space 0, times 0 [ 178.685584][ T9092] CPU: 1 UID: 0 PID: 9092 Comm: syz.1.936 Not tainted syzkaller #0 PREEMPT(full) [ 178.685608][ T9092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 178.685618][ T9092] Call Trace: [ 178.685626][ T9092] [ 178.685634][ T9092] dump_stack_lvl+0xe8/0x150 [ 178.685662][ T9092] should_fail_ex+0x412/0x560 [ 178.685690][ T9092] should_failslab+0xa8/0x100 [ 178.685711][ T9092] ? skb_clone+0x212/0x3a0 [ 178.685735][ T9092] kmem_cache_alloc_noprof+0x87/0x650 [ 178.685753][ T9092] ? __netlink_lookup+0xc6/0x8b0 [ 178.685782][ T9092] skb_clone+0x212/0x3a0 [ 178.685810][ T9092] __netlink_deliver_tap+0x404/0x850 [ 178.685842][ T9092] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.685864][ T9092] netlink_deliver_tap+0x19c/0x1b0 [ 178.685886][ T9092] netlink_unicast+0x7e3/0x9b0 [ 178.685911][ T9092] ? __pfx_netlink_unicast+0x10/0x10 [ 178.685927][ T9092] ? netlink_sendmsg+0x650/0xb40 [ 178.685945][ T9092] ? skb_put+0x11b/0x210 [ 178.685971][ T9092] netlink_sendmsg+0x813/0xb40 [ 178.685996][ T9092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.686018][ T9092] ? aa_sock_msg_perm+0xf1/0x1b0 [ 178.686044][ T9092] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.686065][ T9092] ____sys_sendmsg+0x972/0x9f0 [ 178.686094][ T9092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.686124][ T9092] ? import_iovec+0x73/0xa0 [ 178.686145][ T9092] ___sys_sendmsg+0x2a5/0x360 [ 178.686173][ T9092] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.686235][ T9092] ? __fget_files+0x2a/0x420 [ 178.686250][ T9092] ? __fget_files+0x3a0/0x420 [ 178.686274][ T9092] __x64_sys_sendmsg+0x1bd/0x2a0 [ 178.686299][ T9092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.686327][ T9092] ? __pfx_ksys_write+0x10/0x10 [ 178.686354][ T9092] do_syscall_64+0x14d/0xf80 [ 178.686368][ T9092] ? trace_irq_disable+0x3b/0x150 [ 178.686382][ T9092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.686396][ T9092] ? clear_bhb_loop+0x40/0x90 [ 178.686416][ T9092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.686431][ T9092] RIP: 0033:0x7f602999c819 [ 178.686446][ T9092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.686460][ T9092] RSP: 002b:00007f602a86b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.686477][ T9092] RAX: ffffffffffffffda RBX: 00007f6029c15fa0 RCX: 00007f602999c819 [ 178.686488][ T9092] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 178.686499][ T9092] RBP: 00007f602a86b090 R08: 0000000000000000 R09: 0000000000000000 [ 178.686509][ T9092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.686518][ T9092] R13: 00007f6029c16038 R14: 00007f6029c15fa0 R15: 00007ffee813c1c8 [ 178.686544][ T9092] [ 178.956443][ T9096] netlink: 'syz.3.935': attribute type 4 has an invalid length. [ 179.434800][ T9110] 8021q: VLANs not supported on sit0 [ 179.632456][ T9121] netlink: 'syz.3.948': attribute type 1 has an invalid length. [ 179.643396][ T9121] netlink: 224 bytes leftover after parsing attributes in process `syz.3.948'. [ 179.722595][ T9129] netlink: 56 bytes leftover after parsing attributes in process `syz.0.947'. [ 179.742115][ T9131] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 179.810295][ T9135] FAULT_INJECTION: forcing a failure. [ 179.810295][ T9135] name failslab, interval 1, probability 0, space 0, times 0 [ 179.862855][ T9135] CPU: 0 UID: 0 PID: 9135 Comm: syz.3.950 Not tainted syzkaller #0 PREEMPT(full) [ 179.862880][ T9135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 179.862891][ T9135] Call Trace: [ 179.862899][ T9135] [ 179.862907][ T9135] dump_stack_lvl+0xe8/0x150 [ 179.862936][ T9135] should_fail_ex+0x412/0x560 [ 179.862969][ T9135] should_failslab+0xa8/0x100 [ 179.862993][ T9135] __kmalloc_cache_noprof+0x88/0x660 [ 179.863014][ T9135] ? sctp_add_bind_addr+0x8c/0x370 [ 179.863046][ T9135] sctp_add_bind_addr+0x8c/0x370 [ 179.863076][ T9135] sctp_copy_local_addr_list+0x314/0x4f0 [ 179.863106][ T9135] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 179.863133][ T9135] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 179.863161][ T9135] ? sctp_v6_is_any+0x64/0x80 [ 179.863180][ T9135] ? sctp_copy_one_addr+0x93/0x360 [ 179.863209][ T9135] sctp_bind_addr_copy+0xb3/0x3c0 [ 179.863236][ T9135] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 179.863279][ T9135] sctp_connect_new_asoc+0x2ff/0x6b0 [ 179.863302][ T9135] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 179.863327][ T9135] ? __local_bh_enable_ip+0xd0/0x130 [ 179.863349][ T9135] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 179.863370][ T9135] ? security_sctp_bind_connect+0x7e/0x2c0 [ 179.863397][ T9135] sctp_sendmsg+0x1528/0x2c10 [ 179.863432][ T9135] ? __pfx_sctp_sendmsg+0x10/0x10 [ 179.863455][ T9135] ? aa_sk_perm+0x6d5/0x900 [ 179.863488][ T9135] ? __pfx_aa_sk_perm+0x10/0x10 [ 179.863516][ T9135] ? sock_rps_record_flow+0x19/0x350 [ 179.863543][ T9135] ? inet_sendmsg+0x2f4/0x370 [ 179.863569][ T9135] ____sys_sendmsg+0x80a/0x9f0 [ 179.863603][ T9135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.863636][ T9135] ? import_iovec+0x73/0xa0 [ 179.863661][ T9135] ___sys_sendmsg+0x2a5/0x360 [ 179.863690][ T9135] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.863719][ T9135] ? kstrtouint+0x6e/0xe0 [ 179.863770][ T9135] ? __fget_files+0x2a/0x420 [ 179.863786][ T9135] ? __fget_files+0x3a0/0x420 [ 179.863812][ T9135] __sys_sendmmsg+0x27c/0x4e0 [ 179.863841][ T9135] ? __pfx___sys_sendmmsg+0x10/0x10 [ 179.863863][ T9135] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 179.863907][ T9135] ? ksys_write+0x242/0x270 [ 179.863930][ T9135] ? __pfx_ksys_write+0x10/0x10 [ 179.863957][ T9135] __x64_sys_sendmmsg+0xa0/0xc0 [ 179.863983][ T9135] do_syscall_64+0x14d/0xf80 [ 179.864000][ T9135] ? trace_irq_disable+0x3b/0x150 [ 179.864012][ T9135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.864027][ T9135] ? clear_bhb_loop+0x40/0x90 [ 179.864048][ T9135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.864066][ T9135] RIP: 0033:0x7faf7439c819 [ 179.864082][ T9135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.864097][ T9135] RSP: 002b:00007faf75285028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 179.864117][ T9135] RAX: ffffffffffffffda RBX: 00007faf74615fa0 RCX: 00007faf7439c819 [ 179.864129][ T9135] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 179.864140][ T9135] RBP: 00007faf75285090 R08: 0000000000000000 R09: 0000000000000000 [ 179.864151][ T9135] R10: 00000000000c88c4 R11: 0000000000000246 R12: 0000000000000002 [ 179.864161][ T9135] R13: 00007faf74616038 R14: 00007faf74615fa0 R15: 00007ffde6822148 [ 179.864191][ T9135] [ 180.497765][ T9148] sctp: [Deprecated]: syz.3.954 (pid 9148) Use of int in maxseg socket option. [ 180.497765][ T9148] Use struct sctp_assoc_value instead [ 180.545640][ T9154] rdma_rxe: rxe_newlink: failed to add gre0 [ 180.677172][ T9161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.801770][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 181.259370][ T9191] netlink: 56 bytes leftover after parsing attributes in process `syz.1.966'. [ 181.730525][ T9209] rdma_rxe: rxe_newlink: failed to add gre0 [ 181.829793][ T9209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.844297][ T9209] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.854386][ T9209] dummy0: left promiscuous mode [ 181.869620][ T9209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.903381][ T9221] sctp: [Deprecated]: syz.2.977 (pid 9221) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.903381][ T9221] Use struct sctp_sack_info instead [ 181.964331][ T9223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.978'. [ 182.174100][ T9235] bond2: entered promiscuous mode [ 182.189756][ T9235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.255793][ T9236] delete_channel: no stack [ 182.289689][ T9241] netlink: 216 bytes leftover after parsing attributes in process `syz.0.985'. [ 182.299073][ T9241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.985'. [ 182.312211][ T9243] netlink: 56 bytes leftover after parsing attributes in process `syz.3.986'. [ 182.333743][ T9241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.985'. [ 182.485833][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 182.693063][ T9266] rdma_rxe: rxe_newlink: failed to add gre0 [ 182.743348][ T9266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.824569][ T9268] FAULT_INJECTION: forcing a failure. [ 182.824569][ T9268] name failslab, interval 1, probability 0, space 0, times 0 [ 182.868386][ T9268] CPU: 0 UID: 0 PID: 9268 Comm: syz.4.992 Not tainted syzkaller #0 PREEMPT(full) [ 182.868412][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 182.868423][ T9268] Call Trace: [ 182.868430][ T9268] [ 182.868438][ T9268] dump_stack_lvl+0xe8/0x150 [ 182.868468][ T9268] should_fail_ex+0x412/0x560 [ 182.868498][ T9268] should_failslab+0xa8/0x100 [ 182.868523][ T9268] __kmalloc_cache_noprof+0x88/0x660 [ 182.868542][ T9268] ? lockdep_hardirqs_on+0x7a/0x110 [ 182.868569][ T9268] ? __request_module+0x2d0/0x660 [ 182.868597][ T9268] __request_module+0x2d0/0x660 [ 182.868626][ T9268] ? __pfx___request_module+0x10/0x10 [ 182.868661][ T9268] ? security_capable+0x7e/0x2c0 [ 182.868689][ T9268] ? dev_load+0x21/0x1f0 [ 182.868709][ T9268] dev_load+0x190/0x1f0 [ 182.868730][ T9268] dev_ioctl+0x79f/0x1150 [ 182.868752][ T9268] sock_do_ioctl+0x23e/0x320 [ 182.868772][ T9268] ? __pfx_sock_do_ioctl+0x10/0x10 [ 182.868786][ T9268] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 182.868815][ T9268] sock_ioctl+0x5c6/0x7f0 [ 182.868832][ T9268] ? __pfx_sock_ioctl+0x10/0x10 [ 182.868848][ T9268] ? __fget_files+0x2a/0x420 [ 182.868862][ T9268] ? __fget_files+0x3a0/0x420 [ 182.868877][ T9268] ? __fget_files+0x2a/0x420 [ 182.868902][ T9268] ? bpf_lsm_file_ioctl+0x9/0x20 [ 182.868922][ T9268] ? __pfx_sock_ioctl+0x10/0x10 [ 182.868939][ T9268] __se_sys_ioctl+0xfc/0x170 [ 182.868961][ T9268] do_syscall_64+0x14d/0xf80 [ 182.868976][ T9268] ? trace_irq_disable+0x3b/0x150 [ 182.868990][ T9268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.869006][ T9268] ? clear_bhb_loop+0x40/0x90 [ 182.869027][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.869044][ T9268] RIP: 0033:0x7f27f899c819 [ 182.869061][ T9268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.869075][ T9268] RSP: 002b:00007f27f9923028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.869094][ T9268] RAX: ffffffffffffffda RBX: 00007f27f8c15fa0 RCX: 00007f27f899c819 [ 182.869106][ T9268] RDX: 0000200000000240 RSI: 0000000000008914 RDI: 0000000000000003 [ 182.869116][ T9268] RBP: 00007f27f9923090 R08: 0000000000000000 R09: 0000000000000000 [ 182.869127][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.869137][ T9268] R13: 00007f27f8c16038 R14: 00007f27f8c15fa0 R15: 00007ffd6a3ce1d8 [ 182.869164][ T9268] [ 183.213177][ T9265] netlink: 36 bytes leftover after parsing attributes in process `syz.2.991'. [ 183.222689][ T9265] netlink: 36 bytes leftover after parsing attributes in process `syz.2.991'. [ 183.340389][ T9276] syzkaller0: entered promiscuous mode [ 183.347026][ T9276] syzkaller0: entered allmulticast mode [ 183.389594][ T9283] netlink: 'syz.4.996': attribute type 4 has an invalid length. [ 184.468079][ T9302] syzkaller0: left allmulticast mode [ 184.652414][ T9310] sctp: [Deprecated]: syz.1.1000 (pid 9310) Use of int in max_burst socket option. [ 184.652414][ T9310] Use struct sctp_assoc_value instead [ 184.673947][ T9311] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1002'. [ 184.759148][ T9307] netlink: 'syz.1.1000': attribute type 14 has an invalid length. [ 185.170894][ T9339] syzkaller0: entered promiscuous mode [ 185.176564][ T9339] syzkaller0: entered allmulticast mode [ 185.273036][ T9349] netlink: 'syz.2.1014': attribute type 4 has an invalid length. [ 185.620527][ T9365] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1021'. [ 185.831870][ T9377] syzkaller1: entered promiscuous mode [ 185.842675][ T9377] syzkaller1: entered allmulticast mode [ 186.023279][ T9388] netlink: 'syz.1.1029': attribute type 4 has an invalid length. [ 186.488541][ T9411] tipc: Enabled bearer , priority 0 [ 186.496522][ T9411] syzkaller0: entered promiscuous mode [ 186.502366][ T9411] syzkaller0: entered allmulticast mode [ 186.680366][ T9411] tipc: Resetting bearer [ 186.701191][ T9419] rdma_rxe: rxe_newlink: failed to add gre0 [ 186.713548][ T9406] tipc: Resetting bearer [ 186.735543][ T9406] tipc: Disabling bearer [ 186.829578][ T9426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.867016][ T9430] netlink: 'syz.0.1041': attribute type 3 has an invalid length. [ 186.993568][ T9439] __nla_validate_parse: 1 callbacks suppressed [ 186.993594][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'. [ 187.051492][ T9442] netlink: 'syz.1.1042': attribute type 4 has an invalid length. [ 187.604422][ T9476] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 187.620745][ T9477] netlink: 'syz.3.1050': attribute type 1 has an invalid length. [ 187.634567][ T9476] bond3 (unregistering): Released all slaves [ 187.636293][ T9477] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1050'. [ 187.985167][ T9498] netlink: 'syz.0.1056': attribute type 1 has an invalid length. [ 188.161219][ T9503] netlink: 'syz.4.1058': attribute type 3 has an invalid length. [ 188.177260][ T9503] netlink: 'syz.4.1058': attribute type 3 has an invalid length. [ 188.374585][ T9518] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1062'. [ 188.436244][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'. [ 188.575505][ T9532] netlink: 'syz.0.1065': attribute type 1 has an invalid length. [ 188.607542][ T9532] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1065'. [ 188.865873][ T9546] netlink: 'syz.0.1069': attribute type 1 has an invalid length. [ 188.972819][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1068'. [ 189.016992][ T9555] netlink: 'syz.1.1070': attribute type 3 has an invalid length. [ 189.060644][ T9563] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 189.093223][ T9564] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1071'. [ 189.146255][ T9564] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1071'. [ 189.237517][ T9572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1073'. [ 189.294297][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1070'. [ 189.748079][ T9597] macvlan0: entered promiscuous mode [ 189.936269][ T9607] netlink: 'syz.3.1081': attribute type 4 has an invalid length. [ 189.959644][ T9609] FAULT_INJECTION: forcing a failure. [ 189.959644][ T9609] name failslab, interval 1, probability 0, space 0, times 0 [ 189.972343][ T9609] CPU: 1 UID: 0 PID: 9609 Comm: syz.4.1082 Not tainted syzkaller #0 PREEMPT(full) [ 189.972365][ T9609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 189.972376][ T9609] Call Trace: [ 189.972384][ T9609] [ 189.972391][ T9609] dump_stack_lvl+0xe8/0x150 [ 189.972417][ T9609] should_fail_ex+0x412/0x560 [ 189.972441][ T9609] should_failslab+0xa8/0x100 [ 189.972460][ T9609] kmem_cache_alloc_bulk_noprof+0x8d/0x7e0 [ 189.972477][ T9609] ? pfn_valid+0x125/0x4c0 [ 189.972500][ T9609] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 189.972528][ T9609] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 189.972550][ T9609] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 189.972580][ T9609] ? 0xffffffffa0201a4c [ 189.972609][ T9609] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 189.972632][ T9609] ? _copy_from_user+0x94/0xb0 [ 189.972647][ T9609] ? bpf_test_init+0x113/0x150 [ 189.972660][ T9609] ? xdp_convert_md_to_buff+0x5b/0x330 [ 189.972677][ T9609] bpf_prog_test_run_xdp+0x81c/0x1160 [ 189.972702][ T9609] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 189.972720][ T9609] ? __fget_files+0x2a/0x420 [ 189.972735][ T9609] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 189.972751][ T9609] bpf_prog_test_run+0x2c7/0x340 [ 189.972768][ T9609] __sys_bpf+0x643/0x950 [ 189.972782][ T9609] ? __pfx___sys_bpf+0x10/0x10 [ 189.972805][ T9609] ? ksys_write+0x242/0x270 [ 189.972821][ T9609] ? __pfx_ksys_write+0x10/0x10 [ 189.972841][ T9609] __x64_sys_bpf+0x7c/0x90 [ 189.972859][ T9609] do_syscall_64+0x14d/0xf80 [ 189.972872][ T9609] ? trace_irq_disable+0x3b/0x150 [ 189.972883][ T9609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.972896][ T9609] ? clear_bhb_loop+0x40/0x90 [ 189.972912][ T9609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.972925][ T9609] RIP: 0033:0x7f27f899c819 [ 189.972936][ T9609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.972948][ T9609] RSP: 002b:00007f27f9923028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.972968][ T9609] RAX: ffffffffffffffda RBX: 00007f27f8c15fa0 RCX: 00007f27f899c819 [ 189.972977][ T9609] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 189.972986][ T9609] RBP: 00007f27f9923090 R08: 0000000000000000 R09: 0000000000000000 [ 189.972994][ T9609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.973001][ T9609] R13: 00007f27f8c16038 R14: 00007f27f8c15fa0 R15: 00007ffd6a3ce1d8 [ 189.973023][ T9609] [ 190.470320][ T9620] rdma_rxe: rxe_newlink: failed to add gre0 [ 190.561243][ T9624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.849667][ T9641] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 190.903808][ T9641] bond3 (unregistering): Released all slaves [ 193.232709][ T9612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.328354][ T9656] __nla_validate_parse: 2 callbacks suppressed [ 193.328374][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1093'. [ 193.496629][ T9660] netlink: 'syz.1.1094': attribute type 2 has an invalid length. [ 193.504391][ T9660] netlink: 'syz.1.1094': attribute type 1 has an invalid length. [ 193.558524][ T9660] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1094'. [ 193.669342][ T9671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1098'. [ 193.744512][ T9677] netlink: 'syz.0.1099': attribute type 1 has an invalid length. [ 193.754536][ T9674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1100'. [ 193.846313][ T9684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1099'. [ 194.180424][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.487519][ T9701] xt_hashlimit: size too large, truncated to 1048576 [ 194.776955][ T9716] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1110'. [ 194.807735][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'. [ 195.298618][ T9720] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1111'. [ 195.309108][ T9732] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 195.311523][ T9730] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 195.401533][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1109'. [ 195.638477][ T9739] nbd: socks must be embedded in a SOCK_ITEM attr [ 195.646677][ T9739] block nbd0: shutting down sockets [ 195.745762][ T9749] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 196.027208][ T9761] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1123'. [ 196.409536][ T9767] netlink: 'syz.2.1127': attribute type 4 has an invalid length. [ 196.757710][ T9788] netlink: 'syz.4.1132': attribute type 30 has an invalid length. [ 196.776654][ T9788] bond0: option arp_missed_max: invalid value (0) [ 196.788840][ T9788] bond0: option arp_missed_max: allowed values 1 - 255 [ 196.894144][ T9799] openvswitch: netlink: Actions may not be safe on all matching packets [ 197.015843][ T9807] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 197.089085][ T9813] rdma_rxe: rxe_newlink: failed to add gre0 [ 197.095010][ T9815] rdma_rxe: rxe_newlink: failed to add gre0 [ 197.176710][ T9822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.200468][ T9821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.897124][ T9861] FAULT_INJECTION: forcing a failure. [ 197.897124][ T9861] name failslab, interval 1, probability 0, space 0, times 0 [ 197.932250][ T9861] CPU: 0 UID: 0 PID: 9861 Comm: syz.1.1152 Not tainted syzkaller #0 PREEMPT(full) [ 197.932275][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 197.932285][ T9861] Call Trace: [ 197.932292][ T9861] [ 197.932300][ T9861] dump_stack_lvl+0xe8/0x150 [ 197.932330][ T9861] should_fail_ex+0x412/0x560 [ 197.932370][ T9861] should_failslab+0xa8/0x100 [ 197.932392][ T9861] ? skb_clone+0x212/0x3a0 [ 197.932416][ T9861] kmem_cache_alloc_noprof+0x87/0x650 [ 197.932445][ T9861] skb_clone+0x212/0x3a0 [ 197.932472][ T9861] __netlink_deliver_tap+0x404/0x850 [ 197.932506][ T9861] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.932529][ T9861] netlink_deliver_tap+0x19c/0x1b0 [ 197.932551][ T9861] __netlink_sendskb+0x47/0x90 [ 197.932570][ T9861] netlink_dump+0xa6f/0xe80 [ 197.932602][ T9861] ? __pfx_netlink_dump+0x10/0x10 [ 197.932620][ T9861] ? __kasan_kmalloc+0x93/0xb0 [ 197.932658][ T9861] ? netlink_lookup+0x30/0x200 [ 197.932676][ T9861] ? netlink_lookup+0x30/0x200 [ 197.932701][ T9861] __netlink_dump_start+0x5cb/0x7e0 [ 197.932729][ T9861] inet_diag_handler_cmd+0x1e0/0x2c0 [ 197.932755][ T9861] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 197.932774][ T9861] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 197.932794][ T9861] ? __pfx_inet_diag_dump+0x10/0x10 [ 197.932813][ T9861] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 197.932837][ T9861] ? sock_diag_lock_handler+0x19/0x290 [ 197.932856][ T9861] ? sock_diag_lock_handler+0x19/0x290 [ 197.932882][ T9861] sock_diag_rcv_msg+0x4cc/0x600 [ 197.932907][ T9861] netlink_rcv_skb+0x232/0x4b0 [ 197.932929][ T9861] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 197.932951][ T9861] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.932994][ T9861] netlink_unicast+0x80f/0x9b0 [ 197.933021][ T9861] ? __pfx_netlink_unicast+0x10/0x10 [ 197.933042][ T9861] ? netlink_sendmsg+0x650/0xb40 [ 197.933061][ T9861] ? skb_put+0x11b/0x210 [ 197.933086][ T9861] netlink_sendmsg+0x813/0xb40 [ 197.933116][ T9861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.933141][ T9861] ? aa_sock_msg_perm+0xf1/0x1b0 [ 197.933169][ T9861] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.933193][ T9861] ____sys_sendmsg+0x972/0x9f0 [ 197.933228][ T9861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.933261][ T9861] ? import_iovec+0x73/0xa0 [ 197.933286][ T9861] ___sys_sendmsg+0x2a5/0x360 [ 197.933314][ T9861] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.933375][ T9861] ? __fget_files+0x2a/0x420 [ 197.933389][ T9861] ? __fget_files+0x3a0/0x420 [ 197.933414][ T9861] __x64_sys_sendmsg+0x1bd/0x2a0 [ 197.933437][ T9861] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.933470][ T9861] ? __pfx_ksys_write+0x10/0x10 [ 197.933500][ T9861] do_syscall_64+0x14d/0xf80 [ 197.933516][ T9861] ? trace_irq_disable+0x3b/0x150 [ 197.933531][ T9861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.933548][ T9861] ? clear_bhb_loop+0x40/0x90 [ 197.933569][ T9861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.933585][ T9861] RIP: 0033:0x7f602999c819 [ 197.933602][ T9861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.933616][ T9861] RSP: 002b:00007f602a86b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.933635][ T9861] RAX: ffffffffffffffda RBX: 00007f6029c15fa0 RCX: 00007f602999c819 [ 197.933647][ T9861] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 197.933657][ T9861] RBP: 00007f602a86b090 R08: 0000000000000000 R09: 0000000000000000 [ 197.933667][ T9861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.933677][ T9861] R13: 00007f6029c16038 R14: 00007f6029c15fa0 R15: 00007ffee813c1c8 [ 197.933706][ T9861] [ 198.292131][ T9825] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.299187][ T9825] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 198.316273][ T9867] syz1: rxe_newlink: already configured on gre0 [ 198.458125][ T9825] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.468423][ T9825] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 198.651886][ T9870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.682788][ T9876] rdma_rxe: rxe_newlink: failed to add gre0 [ 198.683562][ T9825] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.705433][ T9825] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 198.737133][ T9825] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 198.749616][ T9825] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 198.869742][ T9881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.303123][ T9905] veth0_virt_wifi: entered allmulticast mode [ 199.309681][ T9905] veth0_virt_wifi: left allmulticast mode [ 199.491397][ T9915] openvswitch: netlink: IP tunnel dst address not specified [ 199.492662][ T9918] __nla_validate_parse: 4 callbacks suppressed [ 199.492677][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1165'. [ 199.697243][ T9927] FAULT_INJECTION: forcing a failure. [ 199.697243][ T9927] name failslab, interval 1, probability 0, space 0, times 0 [ 199.697518][ T9924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1167'. [ 199.736412][ T9933] rdma_rxe: rxe_newlink: failed to add gre0 [ 199.746055][ T9927] CPU: 0 UID: 0 PID: 9927 Comm: syz.0.1168 Not tainted syzkaller #0 PREEMPT(full) [ 199.746078][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 199.746087][ T9927] Call Trace: [ 199.746094][ T9927] [ 199.746101][ T9927] dump_stack_lvl+0xe8/0x150 [ 199.746129][ T9927] should_fail_ex+0x412/0x560 [ 199.746159][ T9927] should_failslab+0xa8/0x100 [ 199.746180][ T9927] ? skb_clone+0x212/0x3a0 [ 199.746204][ T9927] kmem_cache_alloc_noprof+0x87/0x650 [ 199.746223][ T9927] ? __netlink_lookup+0xc6/0x8b0 [ 199.746250][ T9927] skb_clone+0x212/0x3a0 [ 199.746276][ T9927] __netlink_deliver_tap+0x404/0x850 [ 199.746307][ T9927] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.746329][ T9927] netlink_deliver_tap+0x19c/0x1b0 [ 199.746350][ T9927] netlink_unicast+0x7e3/0x9b0 [ 199.746376][ T9927] ? __pfx_netlink_unicast+0x10/0x10 [ 199.746396][ T9927] ? netlink_sendmsg+0x650/0xb40 [ 199.746414][ T9927] ? skb_put+0x11b/0x210 [ 199.746438][ T9927] netlink_sendmsg+0x813/0xb40 [ 199.746464][ T9927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.746487][ T9927] ? aa_sock_msg_perm+0xf1/0x1b0 [ 199.746512][ T9927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.746536][ T9927] ____sys_sendmsg+0x972/0x9f0 [ 199.746570][ T9927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.746604][ T9927] ? import_iovec+0x73/0xa0 [ 199.746628][ T9927] ___sys_sendmsg+0x2a5/0x360 [ 199.746657][ T9927] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.746706][ T9927] ? __fget_files+0x2a/0x420 [ 199.746721][ T9927] ? __fget_files+0x3a0/0x420 [ 199.746746][ T9927] __x64_sys_sendmsg+0x1bd/0x2a0 [ 199.746773][ T9927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.746806][ T9927] ? __pfx_ksys_write+0x10/0x10 [ 199.746836][ T9927] do_syscall_64+0x14d/0xf80 [ 199.746852][ T9927] ? trace_irq_disable+0x3b/0x150 [ 199.746867][ T9927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.746884][ T9927] ? clear_bhb_loop+0x40/0x90 [ 199.746913][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.746930][ T9927] RIP: 0033:0x7f464439c819 [ 199.746947][ T9927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.746961][ T9927] RSP: 002b:00007f46451fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.746980][ T9927] RAX: ffffffffffffffda RBX: 00007f4644615fa0 RCX: 00007f464439c819 [ 199.746993][ T9927] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 000000000000000a [ 199.747004][ T9927] RBP: 00007f46451fc090 R08: 0000000000000000 R09: 0000000000000000 [ 199.747015][ T9927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.747025][ T9927] R13: 00007f4644616038 R14: 00007f4644615fa0 R15: 00007ffc0cbc13a8 [ 199.747054][ T9927] [ 200.068672][ T9936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.205503][ T9939] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1170'. [ 200.321291][ T9956] syzkaller0: entered promiscuous mode [ 200.328308][ T9956] syzkaller0: entered allmulticast mode [ 200.361011][ T9960] netlink: 'syz.0.1172': attribute type 4 has an invalid length. [ 200.561750][ T9969] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1175'. [ 200.737050][ T9972] netlink: 'syz.2.1177': attribute type 1 has an invalid length. [ 200.839263][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 200.872137][ T9972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1177'. [ 201.271159][T10001] tipc: Enabled bearer , priority 0 [ 201.392435][T10001] syzkaller0: entered promiscuous mode [ 201.403249][T10001] syzkaller0: entered allmulticast mode [ 201.414693][T10001] tipc: Resetting bearer [ 201.424293][T10006] tipc: Started in network mode [ 201.433788][T10006] tipc: Node identity e295478386ea, cluster identity 4711 [ 201.444188][T10006] tipc: Enabled bearer , priority 0 [ 201.451270][T10009] syzkaller0: entered allmulticast mode [ 201.468814][T10002] tipc: Resetting bearer [ 201.487196][ T9999] tipc: Resetting bearer [ 201.553162][T10020] netlink: 'syz.1.1186': attribute type 4 has an invalid length. [ 202.890241][ T9999] tipc: Disabling bearer [ 202.921968][T10000] tipc: Resetting bearer [ 202.939643][ T6809] tipc: Resetting bearer [ 202.955181][ T8308] tipc: Node number set to 1686062979 [ 203.130276][T10051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'. [ 203.252676][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 203.311335][T10070] syzkaller1: entered promiscuous mode [ 203.316930][T10070] syzkaller1: entered allmulticast mode [ 203.415076][T10059] hsr_slave_1 (unregistering): left promiscuous mode [ 203.473957][T10075] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1197'. [ 203.535675][T10075] tipc: Resetting bearer [ 203.564499][T10075] tipc: Resetting bearer [ 204.353863][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1203'. [ 204.562884][T10124] FAULT_INJECTION: forcing a failure. [ 204.562884][T10124] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 204.620951][T10124] CPU: 0 UID: 0 PID: 10124 Comm: syz.3.1207 Not tainted syzkaller #0 PREEMPT(full) [ 204.620977][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 204.620988][T10124] Call Trace: [ 204.620995][T10124] [ 204.621002][T10124] dump_stack_lvl+0xe8/0x150 [ 204.621032][T10124] should_fail_ex+0x412/0x560 [ 204.621065][T10124] prepare_alloc_pages+0x22a/0x650 [ 204.621095][T10124] __alloc_frozen_pages_noprof+0x12f/0x380 [ 204.621121][T10124] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 204.621148][T10124] ? __pfx_policy_nodemask+0x10/0x10 [ 204.621173][T10124] ? filemap_map_pages+0x185/0x2050 [ 204.621199][T10124] alloc_pages_mpol+0x232/0x4a0 [ 204.621238][T10124] vma_alloc_folio_noprof+0xea/0x210 [ 204.621264][T10124] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 204.621298][T10124] do_wp_page+0x1204/0x5a00 [ 204.621352][T10124] ? __pfx_do_wp_page+0x10/0x10 [ 204.621375][T10124] ? do_raw_spin_lock+0x12b/0x2f0 [ 204.621397][T10124] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 204.621426][T10124] handle_mm_fault+0x1520/0x3310 [ 204.621465][T10124] ? handle_mm_fault+0xee/0x3310 [ 204.621498][T10124] ? __pfx_handle_mm_fault+0x10/0x10 [ 204.621522][T10124] ? lock_vma_under_rcu+0x45a/0x500 [ 204.621567][T10124] do_user_addr_fault+0xa73/0x1340 [ 204.621596][T10124] ? rcu_is_watching+0x15/0xb0 [ 204.621621][T10124] ? trace_page_fault_user+0x84/0x210 [ 204.621646][T10124] exc_page_fault+0x6a/0xc0 [ 204.621674][T10124] asm_exc_page_fault+0x26/0x30 [ 204.621692][T10124] RIP: 0033:0x7faf7435c605 [ 204.621709][T10124] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 204.621723][T10124] RSP: 002b:00007faf75283de0 EFLAGS: 00010293 [ 204.621739][T10124] RAX: 0000000000000008 RBX: 00007faf75147e20 RCX: 0000000000000000 [ 204.621751][T10124] RDX: 0000000000000000 RSI: 00007faf7444fd33 RDI: 00007faf75147e20 [ 204.621763][T10124] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 204.621774][T10124] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faf7444fa4b [ 204.621785][T10124] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007faf7444fd33 [ 204.621814][T10124] [ 204.622964][T10124] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 205.128054][T10142] netlink: 'syz.3.1213': attribute type 1 has an invalid length. [ 205.135817][T10142] __nla_validate_parse: 1 callbacks suppressed [ 205.135832][T10142] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1213'. [ 205.368084][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'. [ 205.377138][T10129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1210'. [ 205.388261][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'. [ 205.446348][T10129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1210'. [ 205.490088][T10164] sctp: [Deprecated]: syz.3.1221 (pid 10164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.490088][T10164] Use struct sctp_sack_info instead [ 205.511960][T10169] netlink: 'syz.2.1220': attribute type 2 has an invalid length. [ 205.533877][T10169] netlink: 'syz.2.1220': attribute type 1 has an invalid length. [ 205.627472][T10174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1222'. [ 206.014153][T10190] gre0 speed is unknown, defaulting to 1000 [ 206.224380][T10201] netlink: 'syz.3.1228': attribute type 4 has an invalid length. [ 206.607081][T10221] netlink: 'syz.2.1231': attribute type 1 has an invalid length. [ 206.615169][T10221] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1231'. [ 206.809934][T10228] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1234'. [ 207.014850][T10239] FAULT_INJECTION: forcing a failure. [ 207.014850][T10239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.096212][T10239] CPU: 0 UID: 0 PID: 10239 Comm: syz.2.1238 Not tainted syzkaller #0 PREEMPT(full) [ 207.096236][T10239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 207.096245][T10239] Call Trace: [ 207.096252][T10239] [ 207.096259][T10239] dump_stack_lvl+0xe8/0x150 [ 207.096286][T10239] should_fail_ex+0x412/0x560 [ 207.096316][T10239] _copy_to_user+0x31/0xb0 [ 207.096339][T10239] simple_read_from_buffer+0xe1/0x170 [ 207.096367][T10239] proc_fail_nth_read+0x1bb/0x230 [ 207.096394][T10239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.096422][T10239] ? rw_verify_area+0x2a6/0x4d0 [ 207.096438][T10239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.096462][T10239] vfs_read+0x20c/0xa70 [ 207.096483][T10239] ? rds_setsockopt+0x153/0xd90 [ 207.096506][T10239] ? __pfx_vfs_read+0x10/0x10 [ 207.096523][T10239] ? __pfx_rds_setsockopt+0x10/0x10 [ 207.096544][T10239] ? fd_install+0x94/0x3d0 [ 207.096567][T10239] ? __pfx_aa_sk_perm+0x10/0x10 [ 207.096599][T10239] ksys_read+0x150/0x270 [ 207.096617][T10239] ? __pfx_ksys_read+0x10/0x10 [ 207.096646][T10239] do_syscall_64+0x14d/0xf80 [ 207.096663][T10239] ? trace_irq_disable+0x3b/0x150 [ 207.096678][T10239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.096696][T10239] ? clear_bhb_loop+0x40/0x90 [ 207.096716][T10239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.096732][T10239] RIP: 0033:0x7fa85995d04e [ 207.096748][T10239] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 207.096762][T10239] RSP: 002b:00007fa85a799fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 207.096780][T10239] RAX: ffffffffffffffda RBX: 00007fa85a79a6c0 RCX: 00007fa85995d04e [ 207.096793][T10239] RDX: 000000000000000f RSI: 00007fa85a79a0a0 RDI: 0000000000000004 [ 207.096805][T10239] RBP: 00007fa85a79a090 R08: 0000000000000000 R09: 0000000000000000 [ 207.096815][T10239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.096825][T10239] R13: 00007fa859c16038 R14: 00007fa859c15fa0 R15: 00007ffd5e79a928 [ 207.096852][T10239] [ 207.328897][T10247] netlink: 'syz.0.1241': attribute type 4 has an invalid length. [ 207.336732][T10247] netlink: 'syz.0.1241': attribute type 1 has an invalid length. [ 207.344486][T10247] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1241'. [ 207.359845][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1241'. [ 207.533386][T10257] rdma_rxe: rxe_newlink: failed to add gre0 [ 207.681456][T10267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.525156][T10310] tipc: Resetting bearer [ 209.285483][T10347] netlink: 'syz.4.1263': attribute type 1 has an invalid length. [ 210.132999][T10384] siw: device registration error -23 [ 210.195859][T10385] syzkaller1: entered promiscuous mode [ 210.205640][T10385] syzkaller1: entered allmulticast mode [ 210.848128][T10401] __nla_validate_parse: 5 callbacks suppressed [ 210.848146][T10401] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1276'. [ 210.988681][T10403] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1277'. [ 210.998021][T10407] netlink: 'syz.0.1279': attribute type 1 has an invalid length. [ 210.998063][T10407] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1279'. [ 211.168068][T10409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1280'. [ 211.437314][T10417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1284'. [ 211.454786][T10417] FAULT_INJECTION: forcing a failure. [ 211.454786][T10417] name failslab, interval 1, probability 0, space 0, times 0 [ 211.486398][T10417] CPU: 1 UID: 0 PID: 10417 Comm: syz.4.1284 Not tainted syzkaller #0 PREEMPT(full) [ 211.486424][T10417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 211.486435][T10417] Call Trace: [ 211.486442][T10417] [ 211.486449][T10417] dump_stack_lvl+0xe8/0x150 [ 211.486498][T10417] should_fail_ex+0x412/0x560 [ 211.486531][T10417] should_failslab+0xa8/0x100 [ 211.486556][T10417] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 211.486578][T10417] ? __lock_acquire+0x6b5/0x2cf0 [ 211.486601][T10417] ? __kernfs_new_node+0xa9/0x8e0 [ 211.486631][T10417] kstrdup+0x42/0x100 [ 211.486661][T10417] __kernfs_new_node+0xa9/0x8e0 [ 211.486676][T10417] ? arch_stack_walk+0xfb/0x150 [ 211.486704][T10417] ? __lock_acquire+0x6b5/0x2cf0 [ 211.486726][T10417] ? __pfx___kernfs_new_node+0x10/0x10 [ 211.486744][T10417] ? kernfs_root+0x1c/0x230 [ 211.486776][T10417] ? kernfs_root+0x1c/0x230 [ 211.486800][T10417] ? kernfs_root+0x1c/0x230 [ 211.486822][T10417] ? kernfs_root+0x1c/0x230 [ 211.486855][T10417] kernfs_new_node+0x102/0x210 [ 211.486887][T10417] kernfs_create_dir_ns+0x44/0x130 [ 211.486908][T10417] sysfs_create_dir_ns+0x12f/0x2a0 [ 211.486937][T10417] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 211.486965][T10417] ? do_raw_spin_unlock+0xf5/0x210 [ 211.486988][T10417] kobject_add_internal+0x62b/0xd00 [ 211.487018][T10417] kobject_add+0x163/0x240 [ 211.487043][T10417] ? __pfx_kobject_add+0x10/0x10 [ 211.487062][T10417] ? do_raw_spin_unlock+0xf5/0x210 [ 211.487085][T10417] ? get_device_parent+0x366/0x3a0 [ 211.487113][T10417] device_add+0x408/0xb70 [ 211.487140][T10417] device_create+0x269/0x300 [ 211.487167][T10417] ? timer_init_key+0x161/0x2f0 [ 211.487191][T10417] ? __pfx_device_create+0x10/0x10 [ 211.487216][T10417] ? ieee80211_alloc_hw_nm+0x191d/0x1fa0 [ 211.487243][T10417] mac80211_hwsim_new_radio+0x427/0x5ba0 [ 211.487279][T10417] ? _printk+0xdd/0x130 [ 211.487302][T10417] ? __pfx__printk+0x10/0x10 [ 211.487321][T10417] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 211.487349][T10417] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 211.487374][T10417] ? do_trace_netlink_extack+0x80/0x200 [ 211.487410][T10417] hwsim_new_radio_nl+0xf6a/0x1c00 [ 211.487457][T10417] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 211.487491][T10417] ? rcu_is_watching+0x15/0xb0 [ 211.487516][T10417] ? trace_kmalloc+0x2a/0x110 [ 211.487541][T10417] ? __nla_parse+0x40/0x60 [ 211.487565][T10417] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 211.487589][T10417] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 211.487630][T10417] genl_family_rcv_msg_doit+0x22a/0x330 [ 211.487663][T10417] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 211.487702][T10417] ? bpf_lsm_capable+0x9/0x20 [ 211.487726][T10417] ? security_capable+0x7e/0x2c0 [ 211.487758][T10417] genl_rcv_msg+0x61c/0x7a0 [ 211.487789][T10417] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.487813][T10417] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 211.487838][T10417] ? __lock_acquire+0x6b5/0x2cf0 [ 211.487871][T10417] netlink_rcv_skb+0x232/0x4b0 [ 211.487893][T10417] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.487919][T10417] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.487957][T10417] ? down_read+0x272/0x2e0 [ 211.487974][T10417] ? genl_rcv+0xd/0x40 [ 211.487999][T10417] genl_rcv+0x28/0x40 [ 211.488022][T10417] netlink_unicast+0x80f/0x9b0 [ 211.488049][T10417] ? __pfx_netlink_unicast+0x10/0x10 [ 211.488070][T10417] ? netlink_sendmsg+0x650/0xb40 [ 211.488089][T10417] ? skb_put+0x11b/0x210 [ 211.488116][T10417] netlink_sendmsg+0x813/0xb40 [ 211.488146][T10417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.488171][T10417] ? aa_sock_msg_perm+0xf1/0x1b0 [ 211.488199][T10417] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.488222][T10417] ____sys_sendmsg+0x972/0x9f0 [ 211.488251][T10417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.488279][T10417] ? import_iovec+0x73/0xa0 [ 211.488300][T10417] ___sys_sendmsg+0x2a5/0x360 [ 211.488324][T10417] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.488375][T10417] ? __fget_files+0x2a/0x420 [ 211.488390][T10417] ? __fget_files+0x3a0/0x420 [ 211.488415][T10417] __x64_sys_sendmsg+0x1bd/0x2a0 [ 211.488442][T10417] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.488477][T10417] ? __pfx_ksys_write+0x10/0x10 [ 211.488509][T10417] do_syscall_64+0x14d/0xf80 [ 211.488525][T10417] ? trace_irq_disable+0x3b/0x150 [ 211.488541][T10417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.488558][T10417] ? clear_bhb_loop+0x40/0x90 [ 211.488580][T10417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.488598][T10417] RIP: 0033:0x7f27f899c819 [ 211.488623][T10417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.488638][T10417] RSP: 002b:00007f27f9923028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.488657][T10417] RAX: ffffffffffffffda RBX: 00007f27f8c15fa0 RCX: 00007f27f899c819 [ 211.488671][T10417] RDX: 0000000000080000 RSI: 0000200000000100 RDI: 0000000000000006 [ 211.488683][T10417] RBP: 00007f27f9923090 R08: 0000000000000000 R09: 0000000000000000 [ 211.488694][T10417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.488704][T10417] R13: 00007f27f8c16038 R14: 00007f27f8c15fa0 R15: 00007ffd6a3ce1d8 [ 211.488735][T10417] [ 211.526167][T10417] kobject: kobject_add_internal failed for hwsim20 (error: -12 parent: mac80211_hwsim) [ 211.802358][T10429] netlink: 'syz.0.1287': attribute type 1 has an invalid length. [ 211.873735][T10420] netlink: 'syz.2.1285': attribute type 4 has an invalid length. [ 211.936354][T10429] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1287'. [ 211.957565][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 212.350790][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 212.580348][T10454] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1295'. [ 212.580881][T10451] gtp0: entered promiscuous mode [ 212.605691][T10455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1296'. [ 212.621517][T10451] gtp0: entered allmulticast mode [ 212.691368][T10458] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 212.708293][T10458] bond2 (unregistering): Released all slaves [ 214.005030][T10509] netlink: 'syz.0.1312': attribute type 7 has an invalid length. [ 214.183341][T10515] syzkaller0: entered promiscuous mode [ 214.189670][T10515] syzkaller0: entered allmulticast mode [ 214.259841][T10519] netlink: 'syz.0.1314': attribute type 4 has an invalid length. [ 214.465832][T10530] rdma_rxe: rxe_newlink: failed to add gre0 [ 214.555687][T10533] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.589236][T10538] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 214.910790][T10555] syzkaller0: entered promiscuous mode [ 214.916378][T10555] syzkaller0: entered allmulticast mode [ 215.204879][T10563] gre0 speed is unknown, defaulting to 1000 [ 215.818247][T10574] FAULT_INJECTION: forcing a failure. [ 215.818247][T10574] name failslab, interval 1, probability 0, space 0, times 0 [ 215.860531][T10574] CPU: 1 UID: 0 PID: 10574 Comm: syz.3.1331 Not tainted syzkaller #0 PREEMPT(full) [ 215.860556][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 215.860566][T10574] Call Trace: [ 215.860574][T10574] [ 215.860580][T10574] dump_stack_lvl+0xe8/0x150 [ 215.860609][T10574] should_fail_ex+0x412/0x560 [ 215.860640][T10574] should_failslab+0xa8/0x100 [ 215.860665][T10574] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 215.860687][T10574] ? htable_create+0x316/0x7a0 [ 215.860708][T10574] ? hashlimit_pernet+0x23/0x240 [ 215.860727][T10574] ? htable_create+0x101/0x7a0 [ 215.860752][T10574] kstrdup+0x42/0x100 [ 215.860774][T10574] htable_create+0x316/0x7a0 [ 215.860804][T10574] hashlimit_mt_check_common+0x719/0xa10 [ 215.860833][T10574] xt_check_match+0x4f1/0xc50 [ 215.860862][T10574] ? __pfx_xt_check_match+0x10/0x10 [ 215.860897][T10574] ? xt_find_match+0x1f7/0x250 [ 215.860924][T10574] translate_table+0x1547/0x20b0 [ 215.860960][T10574] ? __pfx_translate_table+0x10/0x10 [ 215.860997][T10574] ? _copy_from_user+0x94/0xb0 [ 215.861021][T10574] do_ip6t_set_ctl+0x9fe/0xe10 [ 215.861042][T10574] ? rcu_is_watching+0x15/0xb0 [ 215.861065][T10574] ? trace_contention_end+0x3d/0x150 [ 215.861082][T10574] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 215.861115][T10574] ? __pfx___mutex_lock+0x10/0x10 [ 215.861133][T10574] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.861175][T10574] nf_setsockopt+0x26f/0x290 [ 215.861208][T10574] rawv6_setsockopt+0x276/0x5f0 [ 215.861232][T10574] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 215.861251][T10574] ? aa_sock_opt_perm+0xff/0x1a0 [ 215.861268][T10574] ? sock_common_setsockopt+0x36/0xc0 [ 215.861287][T10574] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 215.861308][T10574] do_sock_setsockopt+0x17c/0x1b0 [ 215.861333][T10574] __x64_sys_setsockopt+0x13d/0x1b0 [ 215.861360][T10574] do_syscall_64+0x14d/0xf80 [ 215.861376][T10574] ? trace_irq_disable+0x3b/0x150 [ 215.861391][T10574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.861408][T10574] ? clear_bhb_loop+0x40/0x90 [ 215.861428][T10574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.861445][T10574] RIP: 0033:0x7faf7439c819 [ 215.861462][T10574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.861477][T10574] RSP: 002b:00007faf75285028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 215.861496][T10574] RAX: ffffffffffffffda RBX: 00007faf74615fa0 RCX: 00007faf7439c819 [ 215.861508][T10574] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 215.861518][T10574] RBP: 00007faf75285090 R08: 0000000000000528 R09: 0000000000000000 [ 215.861528][T10574] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000002 [ 215.861538][T10574] R13: 00007faf74616038 R14: 00007faf74615fa0 R15: 00007ffde6822148 [ 215.861561][T10574] [ 216.167019][T10561] gre0 speed is unknown, defaulting to 1000 [ 216.333750][T10583] __nla_validate_parse: 7 callbacks suppressed [ 216.333769][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1334'. [ 216.367723][T10585] syz1: rxe_newlink: already configured on gre0 [ 216.530196][T10590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.123659][T10611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1342'. [ 217.268639][T10615] netlink: 'syz.4.1341': attribute type 1 has an invalid length. [ 217.277364][T10615] netlink: 'syz.4.1341': attribute type 2 has an invalid length. [ 217.294435][T10615] netlink: 'syz.4.1341': attribute type 1 has an invalid length. [ 217.517229][T10621] pimreg: tun_chr_ioctl cmd 3223385353 [ 217.572846][T10621] 5nè‹Ò: entered promiscuous mode [ 217.632427][T10629] netlink: 'syz.3.1345': attribute type 4 has an invalid length. [ 217.847329][T10637] netlink: 'syz.1.1349': attribute type 1 has an invalid length. [ 217.855168][T10637] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1349'. [ 218.088880][T10641] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 218.181734][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1353'. [ 218.279717][T10652] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 218.618690][T10672] syzkaller0: entered promiscuous mode [ 218.624637][T10672] syzkaller0: entered allmulticast mode [ 218.693124][T10679] netlink: 'syz.0.1362': attribute type 1 has an invalid length. [ 218.808423][T10683] netlink: 'syz.1.1363': attribute type 1 has an invalid length. [ 218.816559][T10683] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1363'. [ 218.990513][T10689] netlink: 'syz.0.1362': attribute type 11 has an invalid length. [ 219.336851][T10700] netlink: 'syz.1.1369': attribute type 2 has an invalid length. [ 219.347956][T10700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1369'. [ 220.218562][T10679] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 220.301340][T10706] syz1: rxe_newlink: already configured on gre0 [ 220.432344][T10706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.474438][T10714] netlink: 'syz.4.1374': attribute type 1 has an invalid length. [ 220.482445][T10714] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1374'. [ 220.588830][T10723] rdma_rxe: rxe_newlink: failed to add gre0 [ 220.685512][T10729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.701353][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1379'. [ 220.886350][T10740] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1382'. [ 220.899793][T10743] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.027076][T10751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1387'. [ 221.047650][T10747] syzkaller0: entered promiscuous mode [ 221.053292][T10747] syzkaller0: entered allmulticast mode [ 221.420042][T10766] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1389'. [ 222.458510][T10758] tipc: Resetting bearer [ 222.579942][T10783] rdma_rxe: rxe_newlink: failed to add gre0 [ 222.689502][T10792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.712370][T10796] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1397'. [ 222.797829][T10798] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1396'. [ 223.220895][T10804] validate_nla: 1 callbacks suppressed [ 223.220913][T10804] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 223.234877][T10804] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1400'. [ 223.302641][T10807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 223.371482][T10812] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1402'. [ 223.381348][T10812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1402'. [ 223.616424][T10823] vlan0: entered allmulticast mode [ 223.621808][T10823] macvtap0: entered allmulticast mode [ 223.711836][T10833] 8021q: VLANs not supported on ip6gre0 [ 223.974793][T10851] netlink: 'syz.2.1414': attribute type 1 has an invalid length. [ 223.988367][T10850] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1411'. [ 223.999620][T10851] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1414'. [ 224.721270][T10891] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1423'. [ 224.931344][T10909] rdma_rxe: rxe_newlink: failed to add gre0 [ 225.029188][T10915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.233729][T10923] team0: Port device team_slave_0 removed [ 225.585749][T10935] netlink: 'syz.3.1436': attribute type 4 has an invalid length. [ 225.869937][T10950] rdma_rxe: rxe_newlink: failed to add gre0 [ 225.889500][T10950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.911219][T10953] netlink: 'syz.2.1442': attribute type 2 has an invalid length. [ 226.213865][T10972] gretap1: entered promiscuous mode [ 226.262819][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057d45000: rx timeout, send abort [ 226.471819][T10975] __nla_validate_parse: 4 callbacks suppressed [ 226.471838][T10975] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1450'. [ 226.548660][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1452'. [ 226.560121][T10979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1452'. [ 226.763632][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057d44800: rx timeout, send abort [ 226.772162][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057d45000: abort rx timeout. Force session deactivation [ 226.940541][T10987] rdma_rxe: rxe_newlink: failed to add gre0 [ 226.979648][T10987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.011724][T10994] xt_connbytes: Forcing CT accounting to be enabled [ 227.113039][T10995] ip6gre1: entered promiscuous mode [ 227.146025][T10995] ip6gre1: entered allmulticast mode [ 227.165680][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.199874][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.207659][ T8308] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.245920][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1459'. [ 227.271925][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057d44800: abort rx timeout. Force session deactivation [ 227.291627][T11009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1459'. [ 227.343950][T11015] netlink: 'syz.4.1461': attribute type 4 has an invalid length. [ 227.561381][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1464'. [ 227.717785][ T8308] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.926366][ T8308] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.071494][T11032] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1468'. [ 228.276952][T11035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1469'. [ 228.738377][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1474'. [ 228.880892][T11058] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1476'. [ 228.896753][T11056] netlink: 'syz.1.1475': attribute type 1 has an invalid length. [ 228.973444][T11056] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.004626][T11062] bond3: (slave veth3): Enslaving as an active interface with a down link [ 229.058466][T11056] bond3: (slave veth5): Enslaving as an active interface with a down link [ 229.233109][T11056] bond3: entered allmulticast mode [ 229.519328][T11078] netlink: 'syz.1.1480': attribute type 4 has an invalid length. [ 229.692918][T11084] rdma_rxe: rxe_newlink: failed to add gre0 [ 229.725479][T11084] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.982905][T11130] netlink: 'syz.2.1493': attribute type 4 has an invalid length. [ 231.112427][T11133] rdma_rxe: rxe_newlink: failed to add gre0 [ 231.126157][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.192119][T11138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.578047][T11152] __nla_validate_parse: 4 callbacks suppressed [ 231.578067][T11152] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1501'. [ 231.704957][T11157] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1502'. [ 232.080223][T11171] netlink: 'syz.1.1507': attribute type 4 has an invalid length. [ 232.269014][T11178] rdma_rxe: rxe_newlink: failed to add gre0 [ 232.461749][T11182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.637720][T11192] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1513'. [ 232.671152][T11192] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1513'. [ 232.957720][T11206] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1519'. [ 233.059140][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'. [ 233.099765][T11218] FAULT_INJECTION: forcing a failure. [ 233.099765][T11218] name failslab, interval 1, probability 0, space 0, times 0 [ 233.135077][T11218] CPU: 0 UID: 0 PID: 11218 Comm: syz.4.1521 Not tainted syzkaller #0 PREEMPT(full) [ 233.135102][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 233.135113][T11218] Call Trace: [ 233.135120][T11218] [ 233.135127][T11218] dump_stack_lvl+0xe8/0x150 [ 233.135157][T11218] should_fail_ex+0x412/0x560 [ 233.135189][T11218] should_failslab+0xa8/0x100 [ 233.135211][T11218] ? skb_clone+0x212/0x3a0 [ 233.135235][T11218] kmem_cache_alloc_noprof+0x87/0x650 [ 233.135253][T11218] ? apparmor_capable+0x126/0x170 [ 233.135280][T11218] skb_clone+0x212/0x3a0 [ 233.135301][T11218] ? nfnetlink_rcv+0x4b0/0x27b0 [ 233.135320][T11218] nfnetlink_rcv+0x4e2/0x27b0 [ 233.135349][T11218] ? lockdep_hardirqs_on+0x7a/0x110 [ 233.135375][T11218] ? __dev_queue_xmit+0x28b/0x3870 [ 233.135398][T11218] ? __local_bh_enable_ip+0xd0/0x130 [ 233.135419][T11218] ? __dev_queue_xmit+0x1efe/0x3870 [ 233.135440][T11218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.135467][T11218] ? __dev_queue_xmit+0x28b/0x3870 [ 233.135492][T11218] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 233.135525][T11218] ? ref_tracker_free+0x693/0x840 [ 233.135541][T11218] ? __copy_skb_header+0xa3/0x4a0 [ 233.135572][T11218] ? __pfx_ref_tracker_free+0x10/0x10 [ 233.135602][T11218] ? skb_clone+0x246/0x3a0 [ 233.135628][T11218] ? __netlink_deliver_tap+0x807/0x850 [ 233.135648][T11218] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.135684][T11218] netlink_unicast+0x80f/0x9b0 [ 233.135710][T11218] ? __pfx_netlink_unicast+0x10/0x10 [ 233.135730][T11218] ? netlink_sendmsg+0x650/0xb40 [ 233.135748][T11218] ? skb_put+0x11b/0x210 [ 233.135773][T11218] netlink_sendmsg+0x813/0xb40 [ 233.135802][T11218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.135826][T11218] ? aa_sock_msg_perm+0xf1/0x1b0 [ 233.135854][T11218] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.135877][T11218] ____sys_sendmsg+0x972/0x9f0 [ 233.135910][T11218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.135942][T11218] ? import_iovec+0x73/0xa0 [ 233.135970][T11218] ___sys_sendmsg+0x2a5/0x360 [ 233.135994][T11218] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.136051][T11218] ? __fget_files+0x2a/0x420 [ 233.136066][T11218] ? __fget_files+0x3a0/0x420 [ 233.136092][T11218] __x64_sys_sendmsg+0x1bd/0x2a0 [ 233.136119][T11218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.136151][T11218] ? __pfx_ksys_write+0x10/0x10 [ 233.136182][T11218] do_syscall_64+0x14d/0xf80 [ 233.136199][T11218] ? trace_irq_disable+0x3b/0x150 [ 233.136214][T11218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.136231][T11218] ? clear_bhb_loop+0x40/0x90 [ 233.136252][T11218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.136270][T11218] RIP: 0033:0x7f27f899c819 [ 233.136287][T11218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.136301][T11218] RSP: 002b:00007f27f9923028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.136321][T11218] RAX: ffffffffffffffda RBX: 00007f27f8c15fa0 RCX: 00007f27f899c819 [ 233.136334][T11218] RDX: 000000002404c944 RSI: 0000200000000180 RDI: 0000000000000003 [ 233.136345][T11218] RBP: 00007f27f9923090 R08: 0000000000000000 R09: 0000000000000000 [ 233.136356][T11218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.136366][T11218] R13: 00007f27f8c16038 R14: 00007f27f8c15fa0 R15: 00007ffd6a3ce1d8 [ 233.136395][T11218] [ 233.633609][T11223] netlink: 'syz.1.1523': attribute type 4 has an invalid length. [ 233.762021][T11233] rdma_rxe: rxe_newlink: failed to add gre0 [ 233.922228][T11235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.033024][T11244] netlink: 'syz.1.1528': attribute type 3 has an invalid length. [ 234.315214][T11252] syzkaller0: entered promiscuous mode [ 234.348985][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'. [ 234.362109][T11252] syzkaller0: entered allmulticast mode [ 234.415148][T11256] syzkaller0: entered promiscuous mode [ 234.421584][T11256] syzkaller0: entered allmulticast mode [ 234.468454][T11256] FAULT_INJECTION: forcing a failure. [ 234.468454][T11256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.469083][T11266] FAULT_INJECTION: forcing a failure. [ 234.469083][T11266] name failslab, interval 1, probability 0, space 0, times 0 [ 234.482589][T11256] CPU: 1 UID: 0 PID: 11256 Comm: syz.0.1531 Not tainted syzkaller #0 PREEMPT(full) [ 234.482612][T11256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 234.482622][T11256] Call Trace: [ 234.482629][T11256] [ 234.482636][T11256] dump_stack_lvl+0xe8/0x150 [ 234.482665][T11256] should_fail_ex+0x412/0x560 [ 234.482694][T11256] _copy_to_user+0x31/0xb0 [ 234.482716][T11256] simple_read_from_buffer+0xe1/0x170 [ 234.482744][T11256] proc_fail_nth_read+0x1bb/0x230 [ 234.482772][T11256] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.482798][T11256] ? rw_verify_area+0x2a6/0x4d0 [ 234.482816][T11256] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.482841][T11256] vfs_read+0x20c/0xa70 [ 234.482857][T11256] ? fdget_pos+0x246/0x320 [ 234.482876][T11256] ? __pfx___mutex_lock+0x10/0x10 [ 234.482894][T11256] ? __pfx_vfs_read+0x10/0x10 [ 234.482913][T11256] ? __fget_files+0x2a/0x420 [ 234.482932][T11256] ? __fget_files+0x3a0/0x420 [ 234.482946][T11256] ? __fget_files+0x2a/0x420 [ 234.482968][T11256] ksys_read+0x150/0x270 [ 234.482988][T11256] ? __pfx_ksys_read+0x10/0x10 [ 234.483016][T11256] do_syscall_64+0x14d/0xf80 [ 234.483032][T11256] ? trace_irq_disable+0x3b/0x150 [ 234.483046][T11256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.483062][T11256] ? clear_bhb_loop+0x40/0x90 [ 234.483083][T11256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.483099][T11256] RIP: 0033:0x7f464435d04e [ 234.483114][T11256] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 234.483128][T11256] RSP: 002b:00007f46451fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.483146][T11256] RAX: ffffffffffffffda RBX: 00007f46451fc6c0 RCX: 00007f464435d04e [ 234.483158][T11256] RDX: 000000000000000f RSI: 00007f46451fc0a0 RDI: 0000000000000009 [ 234.483168][T11256] RBP: 00007f46451fc090 R08: 0000000000000000 R09: 0000000000000000 [ 234.483178][T11256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.483188][T11256] R13: 00007f4644616038 R14: 00007f4644615fa0 R15: 00007ffc0cbc13a8 [ 234.483214][T11256] [ 234.710691][T11266] CPU: 1 UID: 0 PID: 11266 Comm: syz.2.1532 Not tainted syzkaller #0 PREEMPT(full) [ 234.710723][T11266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 234.710732][T11266] Call Trace: [ 234.710739][T11266] [ 234.710747][T11266] dump_stack_lvl+0xe8/0x150 [ 234.710775][T11266] should_fail_ex+0x412/0x560 [ 234.710806][T11266] should_failslab+0xa8/0x100 [ 234.710831][T11266] __kmalloc_cache_noprof+0x88/0x660 [ 234.710850][T11266] ? sctp_add_bind_addr+0x8c/0x370 [ 234.710879][T11266] sctp_add_bind_addr+0x8c/0x370 [ 234.710904][T11266] sctp_copy_local_addr_list+0x314/0x4f0 [ 234.710932][T11266] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 234.710958][T11266] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 234.710989][T11266] ? sctp_v4_is_any+0x35/0x60 [ 234.711004][T11266] ? sctp_copy_one_addr+0x93/0x360 [ 234.711029][T11266] sctp_bind_addr_copy+0xb3/0x3c0 [ 234.711052][T11266] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 234.711076][T11266] sctp_connect_new_asoc+0x2ff/0x6b0 [ 234.711099][T11266] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 234.711120][T11266] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 234.711148][T11266] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 234.711167][T11266] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 234.711187][T11266] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 234.711207][T11266] ? security_sctp_bind_connect+0x7e/0x2c0 [ 234.711233][T11266] sctp_sendmsg+0x1528/0x2c10 [ 234.711266][T11266] ? __pfx_sctp_sendmsg+0x10/0x10 [ 234.711288][T11266] ? aa_sk_perm+0x6d5/0x900 [ 234.711319][T11266] ? __pfx_aa_sk_perm+0x10/0x10 [ 234.711346][T11266] ? sock_rps_record_flow+0x19/0x350 [ 234.711366][T11266] ? __pfx_inet_sendmsg+0x10/0x10 [ 234.711387][T11266] ? inet_sendmsg+0x2f4/0x370 [ 234.711404][T11266] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 234.711419][T11266] ? __pfx_inet_sendmsg+0x10/0x10 [ 234.711436][T11266] __sys_sendto+0x5de/0x710 [ 234.711456][T11266] ? __pfx___sys_sendto+0x10/0x10 [ 234.711471][T11266] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 234.711498][T11266] ? __fget_files+0x3a0/0x420 [ 234.711522][T11266] ? ksys_write+0x242/0x270 [ 234.711540][T11266] ? __pfx_ksys_write+0x10/0x10 [ 234.711554][T11266] __x64_sys_sendto+0xde/0x100 [ 234.711568][T11266] do_syscall_64+0x14d/0xf80 [ 234.711578][T11266] ? trace_irq_disable+0x3b/0x150 [ 234.711586][T11266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.711596][T11266] ? clear_bhb_loop+0x40/0x90 [ 234.711608][T11266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.711618][T11266] RIP: 0033:0x7fa85999c819 [ 234.711628][T11266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.711636][T11266] RSP: 002b:00007fa85a79a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 234.711648][T11266] RAX: ffffffffffffffda RBX: 00007fa859c15fa0 RCX: 00007fa85999c819 [ 234.711655][T11266] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 234.711662][T11266] RBP: 00007fa85a79a090 R08: 0000200000000040 R09: 0000000000000010 [ 234.711668][T11266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.711674][T11266] R13: 00007fa859c16038 R14: 00007fa859c15fa0 R15: 00007ffd5e79a928 [ 234.711689][T11266] [ 235.170833][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1536'. [ 235.415705][ T5836] block nbd0: Receive control failed (result -1) [ 236.011360][T11285] FAULT_INJECTION: forcing a failure. [ 236.011360][T11285] name failslab, interval 1, probability 0, space 0, times 0 [ 236.026634][T11285] CPU: 0 UID: 0 PID: 11285 Comm: syz.2.1537 Not tainted syzkaller #0 PREEMPT(full) [ 236.026657][T11285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 236.026676][T11285] Call Trace: [ 236.026684][T11285] [ 236.026692][T11285] dump_stack_lvl+0xe8/0x150 [ 236.026722][T11285] should_fail_ex+0x412/0x560 [ 236.026753][T11285] should_failslab+0xa8/0x100 [ 236.026776][T11285] ? skb_clone+0x212/0x3a0 [ 236.026800][T11285] kmem_cache_alloc_noprof+0x87/0x650 [ 236.026819][T11285] ? lock_acquire+0xf0/0x2e0 [ 236.026849][T11285] skb_clone+0x212/0x3a0 [ 236.026871][T11285] ? dev_queue_xmit_nit+0x268/0xad0 [ 236.026897][T11285] dev_queue_xmit_nit+0x29a/0xad0 [ 236.026919][T11285] ? dev_queue_xmit_nit+0x2d/0xad0 [ 236.026951][T11285] dev_hard_start_xmit+0x1cf/0x870 [ 236.026992][T11285] __dev_queue_xmit+0x1557/0x3870 [ 236.027016][T11285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.027052][T11285] ? __dev_queue_xmit+0x28b/0x3870 [ 236.027088][T11285] ? __pfx___dev_queue_xmit+0x10/0x10 [ 236.027121][T11285] ? __copy_skb_header+0xa3/0x4a0 [ 236.027146][T11285] ? __asan_memcpy+0x40/0x70 [ 236.027181][T11285] ? skb_clone+0x246/0x3a0 [ 236.027208][T11285] __netlink_deliver_tap+0x5ad/0x850 [ 236.027243][T11285] ? netlink_deliver_tap+0x2e/0x1b0 [ 236.027265][T11285] netlink_deliver_tap+0x19c/0x1b0 [ 236.027286][T11285] netlink_unicast+0x7e3/0x9b0 [ 236.027314][T11285] ? __pfx_netlink_unicast+0x10/0x10 [ 236.027335][T11285] ? netlink_sendmsg+0x650/0xb40 [ 236.027354][T11285] ? skb_put+0x11b/0x210 [ 236.027379][T11285] netlink_sendmsg+0x813/0xb40 [ 236.027410][T11285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.027434][T11285] ? aa_sock_msg_perm+0xf1/0x1b0 [ 236.027462][T11285] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 236.027487][T11285] ____sys_sendmsg+0x972/0x9f0 [ 236.027520][T11285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.027554][T11285] ? import_iovec+0x73/0xa0 [ 236.027578][T11285] ___sys_sendmsg+0x2a5/0x360 [ 236.027608][T11285] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.027668][T11285] ? __fget_files+0x2a/0x420 [ 236.027683][T11285] ? __fget_files+0x3a0/0x420 [ 236.027710][T11285] __x64_sys_sendmsg+0x1bd/0x2a0 [ 236.027737][T11285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.027771][T11285] ? __pfx_ksys_write+0x10/0x10 [ 236.027803][T11285] do_syscall_64+0x14d/0xf80 [ 236.027820][T11285] ? trace_irq_disable+0x3b/0x150 [ 236.027835][T11285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.027852][T11285] ? clear_bhb_loop+0x40/0x90 [ 236.027875][T11285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.027892][T11285] RIP: 0033:0x7fa85999c819 [ 236.027909][T11285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.027923][T11285] RSP: 002b:00007fa85a79a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.027943][T11285] RAX: ffffffffffffffda RBX: 00007fa859c15fa0 RCX: 00007fa85999c819 [ 236.027956][T11285] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 236.027966][T11285] RBP: 00007fa85a79a090 R08: 0000000000000000 R09: 0000000000000000 [ 236.027977][T11285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.027987][T11285] R13: 00007fa859c16038 R14: 00007fa859c15fa0 R15: 00007ffd5e79a928 [ 236.028018][T11285] [ 237.270946][T11307] netlink: 'syz.4.1540': attribute type 4 has an invalid length. [ 238.026910][T11285] vlan2: entered allmulticast mode [ 238.032060][T11285] macvtap0: entered allmulticast mode [ 238.039309][T11285] veth0_macvtap: entered allmulticast mode [ 238.100142][T11312] syz1: rxe_newlink: already configured on gre0 [ 238.164909][T11317] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1543'. [ 238.206646][T11318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.465183][T11332] FAULT_INJECTION: forcing a failure. [ 238.465183][T11332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.526149][T11332] CPU: 1 UID: 0 PID: 11332 Comm: syz.4.1548 Not tainted syzkaller #0 PREEMPT(full) [ 238.526171][T11332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 238.526181][T11332] Call Trace: [ 238.526188][T11332] [ 238.526195][T11332] dump_stack_lvl+0xe8/0x150 [ 238.526220][T11332] should_fail_ex+0x412/0x560 [ 238.526248][T11332] _copy_to_user+0x31/0xb0 [ 238.526270][T11332] bpf_test_finish+0x22c/0x6b0 [ 238.526296][T11332] ? __pfx____migrate_enable+0x10/0x10 [ 238.526323][T11332] ? __pfx_bpf_test_finish+0x10/0x10 [ 238.526346][T11332] ? preempt_schedule_common+0x82/0xd0 [ 238.526372][T11332] ? preempt_schedule_thunk+0x16/0x30 [ 238.526391][T11332] ? bpf_test_timer_leave+0x20b/0x290 [ 238.526417][T11332] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 238.526452][T11332] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 238.526476][T11332] ? __fget_files+0x2a/0x420 [ 238.526498][T11332] ? __fget_files+0x2a/0x420 [ 238.526518][T11332] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 238.526541][T11332] bpf_prog_test_run+0x2c7/0x340 [ 238.526561][T11332] __sys_bpf+0x643/0x950 [ 238.526578][T11332] ? __pfx___sys_bpf+0x10/0x10 [ 238.526607][T11332] ? ksys_write+0x242/0x270 [ 238.526627][T11332] ? __pfx_ksys_write+0x10/0x10 [ 238.526649][T11332] __x64_sys_bpf+0x7c/0x90 [ 238.526672][T11332] do_syscall_64+0x14d/0xf80 [ 238.526687][T11332] ? trace_irq_disable+0x3b/0x150 [ 238.526699][T11332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.526715][T11332] ? clear_bhb_loop+0x40/0x90 [ 238.526734][T11332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.526749][T11332] RIP: 0033:0x7f27f899c819 [ 238.526764][T11332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.526777][T11332] RSP: 002b:00007f27f9923028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.526796][T11332] RAX: ffffffffffffffda RBX: 00007f27f8c15fa0 RCX: 00007f27f899c819 [ 238.526808][T11332] RDX: 0000000000000024 RSI: 0000200000000180 RDI: 000000000000000a [ 238.526819][T11332] RBP: 00007f27f9923090 R08: 0000000000000000 R09: 0000000000000000 [ 238.526830][T11332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.526840][T11332] R13: 00007f27f8c16038 R14: 00007f27f8c15fa0 R15: 00007ffd6a3ce1d8 [ 238.526868][T11332] [ 239.010102][T11334] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1546'. [ 239.022333][T11338] netlink: 'syz.3.1549': attribute type 1 has an invalid length. [ 239.030504][T11338] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1549'. [ 239.388922][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'. [ 239.457574][T11363] netlink: 'syz.1.1558': attribute type 3 has an invalid length. [ 239.544597][T11375] netlink: 'syz.3.1560': attribute type 4 has an invalid length. [ 239.608331][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.643155][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 239.830960][T11391] syz1: rxe_newlink: already configured on gre0 [ 239.938046][T11395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.986905][T11398] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1563'. [ 240.014618][T11398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1563'. [ 240.309605][T11406] netlink: 'syz.0.1566': attribute type 1 has an invalid length. [ 240.326804][T11406] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1566'. [ 240.653468][T11417] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1570'. [ 240.663880][T11417] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1570'. [ 240.742192][T11423] netlink: 'syz.3.1573': attribute type 3 has an invalid length. [ 240.823870][T11434] netlink: 'syz.1.1571': attribute type 4 has an invalid length. [ 241.074970][T11444] rdma_rxe: rxe_newlink: failed to add gre0 [ 241.172774][T11450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.264568][T11455] netlink: 'syz.3.1579': attribute type 1 has an invalid length. [ 241.593771][T11476] netlink: 'syz.0.1585': attribute type 4 has an invalid length. [ 241.864321][T11484] netlink: 'syz.2.1587': attribute type 3 has an invalid length. [ 242.334935][T11507] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 242.455021][T11512] syz1: rxe_newlink: already configured on gre0 [ 242.556283][T11519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.790695][T11536] netlink: 'syz.3.1600': attribute type 4 has an invalid length. [ 242.811328][T11532] syzkaller0: entered promiscuous mode [ 242.817555][T11532] syzkaller0: entered allmulticast mode [ 243.299958][T11542] __nla_validate_parse: 14 callbacks suppressed [ 243.299979][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1602'. [ 244.384845][T11567] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1609'. [ 244.418660][T11564] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1607'. [ 244.451983][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1608'. [ 244.512402][T11573] rdma_rxe: rxe_newlink: failed to add gre0 [ 244.579029][T11580] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1613'. [ 244.610312][T11582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.634227][T11580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1613'. [ 245.161287][T11600] validate_nla: 2 callbacks suppressed [ 245.161305][T11600] netlink: 'syz.1.1617': attribute type 3 has an invalid length. [ 245.337548][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1617'. [ 245.430684][T11609] syzkaller0: entered promiscuous mode [ 245.458747][T11609] syzkaller0: entered allmulticast mode [ 245.678750][T11621] netlink: 'syz.1.1621': attribute type 4 has an invalid length. [ 245.741429][T11623] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1622'. [ 245.871079][T11630] netlink: 'syz.4.1624': attribute type 1 has an invalid length. [ 245.879970][T11630] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1624'. [ 246.908190][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1628'. [ 247.004075][T11647] netlink: 'syz.2.1631': attribute type 3 has an invalid length. [ 247.630526][T11677] netlink: 'syz.1.1635': attribute type 1 has an invalid length. [ 247.952434][T11690] syzkaller0: entered promiscuous mode [ 247.960114][T11690] syzkaller0: entered allmulticast mode [ 248.323484][T11707] __nla_validate_parse: 6 callbacks suppressed [ 248.323503][T11707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1643'. [ 249.269809][T11695] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1641'. [ 249.279664][T11697] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1642'. [ 249.423951][T11720] netlink: 'syz.0.1648': attribute type 3 has an invalid length. [ 249.474387][T11724] rdma_rxe: rxe_newlink: failed to add gre0 [ 249.551538][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 249.564149][T11731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.634161][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1648'. [ 249.815819][T11742] netlink: 'syz.4.1651': attribute type 1 has an invalid length. [ 249.836084][T11742] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1651'. [ 249.893699][T11747] rdma_rxe: rxe_newlink: failed to add gre0 [ 249.945304][T11749] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.000980][T11752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.114480][T11761] netlink: 'syz.4.1655': attribute type 4 has an invalid length. [ 250.133488][T11762] [ 250.135846][T11762] ====================================================== [ 250.142855][T11762] WARNING: possible circular locking dependency detected [ 250.149887][T11762] syzkaller #0 Not tainted [ 250.154292][T11762] ------------------------------------------------------ [ 250.161298][T11762] syz.0.1657/11762 is trying to acquire lock: [ 250.167373][T11762] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 250.176717][T11762] [ 250.176717][T11762] but task is already holding lock: [ 250.184100][T11762] ffffffff8f17cf48 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 250.193007][T11762] [ 250.193007][T11762] which lock already depends on the new lock. [ 250.193007][T11762] [ 250.203434][T11762] [ 250.203434][T11762] the existing dependency chain (in reverse order) is: [ 250.212455][T11762] [ 250.212455][T11762] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 250.219595][T11762] __mutex_lock+0x19f/0x1300 [ 250.224721][T11762] get_device_parent+0x16f/0x3a0 [ 250.230195][T11762] device_add+0x2e1/0xb70 [ 250.235055][T11762] device_create+0x269/0x300 [ 250.240181][T11762] msr_device_create+0x33/0x50 [ 250.245497][T11762] cpuhp_invoke_callback+0x445/0x860 [ 250.251304][T11762] cpuhp_thread_fun+0x36b/0x780 [ 250.256701][T11762] smpboot_thread_fn+0x541/0xa50 [ 250.262160][T11762] kthread+0x388/0x470 [ 250.266732][T11762] ret_from_fork+0x51e/0xb90 [ 250.271834][T11762] ret_from_fork_asm+0x1a/0x30 [ 250.277110][T11762] [ 250.277110][T11762] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 250.284654][T11762] cpuhp_thread_fun+0x127/0x780 [ 250.290029][T11762] smpboot_thread_fn+0x541/0xa50 [ 250.295480][T11762] kthread+0x388/0x470 [ 250.300055][T11762] ret_from_fork+0x51e/0xb90 [ 250.305155][T11762] ret_from_fork_asm+0x1a/0x30 [ 250.310520][T11762] [ 250.310520][T11762] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 250.318246][T11762] cpus_read_lock+0x42/0x160 [ 250.323352][T11762] static_key_slow_inc+0x12/0x30 [ 250.328800][T11762] tcp_md5_do_add+0x1d4/0x390 [ 250.333986][T11762] tcp_v6_parse_md5_keys+0x562/0x680 [ 250.339791][T11762] do_tcp_setsockopt+0x12ec/0x2060 [ 250.345415][T11762] do_sock_setsockopt+0x17c/0x1b0 [ 250.350967][T11762] __x64_sys_setsockopt+0x13d/0x1b0 [ 250.356674][T11762] do_syscall_64+0x14d/0xf80 [ 250.361777][T11762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.368171][T11762] [ 250.368171][T11762] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 250.375893][T11762] lock_sock_nested+0x41/0x100 [ 250.381249][T11762] inet_shutdown+0x6a/0x390 [ 250.386264][T11762] nbd_mark_nsock_dead+0x2e9/0x560 [ 250.391899][T11762] recv_work+0x1c7f/0x1d90 [ 250.396828][T11762] process_scheduled_works+0xb6e/0x18c0 [ 250.402886][T11762] worker_thread+0xa53/0xfc0 [ 250.408003][T11762] kthread+0x388/0x470 [ 250.412582][T11762] ret_from_fork+0x51e/0xb90 [ 250.417679][T11762] ret_from_fork_asm+0x1a/0x30 [ 250.422970][T11762] [ 250.422970][T11762] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 250.430602][T11762] __mutex_lock+0x19f/0x1300 [ 250.435700][T11762] nbd_queue_rq+0x37b/0x1100 [ 250.440798][T11762] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 250.446859][T11762] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 250.453710][T11762] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 250.460200][T11762] blk_mq_run_hw_queue+0x348/0x4f0 [ 250.465820][T11762] blk_mq_dispatch_list+0xd16/0xe10 [ 250.471527][T11762] blk_mq_flush_plug_list+0x48d/0x570 [ 250.477415][T11762] __blk_flush_plug+0x3ed/0x4d0 [ 250.482790][T11762] __submit_bio+0x28d/0x580 [ 250.487932][T11762] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 250.494077][T11762] block_read_full_folio+0x599/0x830 [ 250.499876][T11762] filemap_read_folio+0x137/0x3b0 [ 250.505413][T11762] do_read_cache_folio+0x358/0x590 [ 250.511034][T11762] read_part_sector+0xb6/0x2b0 [ 250.516305][T11762] adfspart_check_ICS+0xa5/0xa40 [ 250.521763][T11762] bdev_disk_changed+0x7ba/0x1550 [ 250.527312][T11762] blkdev_get_whole+0x380/0x510 [ 250.532786][T11762] bdev_open+0x31e/0xd30 [ 250.537547][T11762] blkdev_open+0x470/0x610 [ 250.542479][T11762] do_dentry_open+0x785/0x14e0 [ 250.547757][T11762] vfs_open+0x3b/0x340 [ 250.552339][T11762] path_openat+0x2e08/0x3860 [ 250.557434][T11762] do_file_open+0x23e/0x4a0 [ 250.562454][T11762] do_sys_openat2+0x113/0x200 [ 250.567643][T11762] __x64_sys_openat+0x138/0x170 [ 250.573005][T11762] do_syscall_64+0x14d/0xf80 [ 250.578223][T11762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.584666][T11762] [ 250.584666][T11762] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 250.591870][T11762] __mutex_lock+0x19f/0x1300 [ 250.596979][T11762] nbd_queue_rq+0xc6/0x1100 [ 250.601994][T11762] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 250.608057][T11762] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 250.614898][T11762] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 250.621392][T11762] blk_mq_run_hw_queue+0x348/0x4f0 [ 250.627010][T11762] blk_mq_dispatch_list+0xd16/0xe10 [ 250.632748][T11762] blk_mq_flush_plug_list+0x48d/0x570 [ 250.638637][T11762] __blk_flush_plug+0x3ed/0x4d0 [ 250.643999][T11762] __submit_bio+0x28d/0x580 [ 250.649013][T11762] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 250.655163][T11762] block_read_full_folio+0x599/0x830 [ 250.660978][T11762] filemap_read_folio+0x137/0x3b0 [ 250.666516][T11762] do_read_cache_folio+0x358/0x590 [ 250.672135][T11762] read_part_sector+0xb6/0x2b0 [ 250.677579][T11762] adfspart_check_ICS+0xa5/0xa40 [ 250.683023][T11762] bdev_disk_changed+0x7ba/0x1550 [ 250.688567][T11762] blkdev_get_whole+0x380/0x510 [ 250.693928][T11762] bdev_open+0x31e/0xd30 [ 250.698680][T11762] blkdev_open+0x470/0x610 [ 250.703612][T11762] do_dentry_open+0x785/0x14e0 [ 250.708887][T11762] vfs_open+0x3b/0x340 [ 250.713469][T11762] path_openat+0x2e08/0x3860 [ 250.718565][T11762] do_file_open+0x23e/0x4a0 [ 250.723577][T11762] do_sys_openat2+0x113/0x200 [ 250.728764][T11762] __x64_sys_openat+0x138/0x170 [ 250.734127][T11762] do_syscall_64+0x14d/0xf80 [ 250.739219][T11762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.745620][T11762] [ 250.745620][T11762] -> #3 (set->srcu){.+.+}-{0:0}: [ 250.752743][T11762] __synchronize_srcu+0xca/0x300 [ 250.758187][T11762] elevator_switch+0x1e8/0x7a0 [ 250.763457][T11762] elevator_change+0x2cc/0x450 [ 250.768730][T11762] elevator_set_default+0x36c/0x430 [ 250.774462][T11762] blk_register_queue+0x366/0x430 [ 250.780007][T11762] __add_disk+0x677/0xd50 [ 250.784850][T11762] add_disk_fwnode+0xfb/0x480 [ 250.790040][T11762] nbd_dev_add+0x72c/0xb50 [ 250.794973][T11762] nbd_init+0x168/0x1f0 [ 250.799643][T11762] do_one_initcall+0x250/0x8d0 [ 250.804952][T11762] do_initcall_level+0x104/0x190 [ 250.810399][T11762] do_initcalls+0x59/0xa0 [ 250.815238][T11762] kernel_init_freeable+0x2a6/0x3e0 [ 250.820941][T11762] kernel_init+0x1d/0x1d0 [ 250.825777][T11762] ret_from_fork+0x51e/0xb90 [ 250.830877][T11762] ret_from_fork_asm+0x1a/0x30 [ 250.836155][T11762] [ 250.836155][T11762] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 250.843971][T11762] __mutex_lock+0x19f/0x1300 [ 250.849081][T11762] elevator_change+0x1b3/0x450 [ 250.854355][T11762] elevator_set_none+0xb5/0x140 [ 250.859719][T11762] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 250.866042][T11762] nbd_start_device+0x17f/0xb10 [ 250.871404][T11762] nbd_genl_connect+0x165b/0x1cf0 [ 250.876941][T11762] genl_family_rcv_msg_doit+0x22a/0x330 [ 250.882995][T11762] genl_rcv_msg+0x61c/0x7a0 [ 250.888006][T11762] netlink_rcv_skb+0x232/0x4b0 [ 250.893275][T11762] genl_rcv+0x28/0x40 [ 250.897763][T11762] netlink_unicast+0x80f/0x9b0 [ 250.903031][T11762] netlink_sendmsg+0x813/0xb40 [ 250.908299][T11762] ____sys_sendmsg+0x972/0x9f0 [ 250.913581][T11762] ___sys_sendmsg+0x2a5/0x360 [ 250.918780][T11762] __x64_sys_sendmsg+0x1bd/0x2a0 [ 250.924239][T11762] do_syscall_64+0x14d/0xf80 [ 250.929346][T11762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.935749][T11762] [ 250.935749][T11762] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 250.944353][T11762] blk_alloc_queue+0x546/0x680 [ 250.949640][T11762] __blk_mq_alloc_disk+0x197/0x390 [ 250.955264][T11762] nbd_dev_add+0x499/0xb50 [ 250.960193][T11762] nbd_init+0x168/0x1f0 [ 250.964861][T11762] do_one_initcall+0x250/0x8d0 [ 250.970139][T11762] do_initcall_level+0x104/0x190 [ 250.975585][T11762] do_initcalls+0x59/0xa0 [ 250.980420][T11762] kernel_init_freeable+0x2a6/0x3e0 [ 250.986126][T11762] kernel_init+0x1d/0x1d0 [ 250.990961][T11762] ret_from_fork+0x51e/0xb90 [ 250.996058][T11762] ret_from_fork_asm+0x1a/0x30 [ 251.001334][T11762] [ 251.001334][T11762] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 251.008530][T11762] __lock_acquire+0x15a5/0x2cf0 [ 251.013976][T11762] lock_acquire+0xf0/0x2e0 [ 251.018897][T11762] fs_reclaim_acquire+0x71/0x100 [ 251.024343][T11762] __kmalloc_cache_noprof+0x40/0x660 [ 251.030132][T11762] get_device_parent+0x255/0x3a0 [ 251.035578][T11762] device_add+0x2e1/0xb70 [ 251.040415][T11762] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 251.046388][T11762] wakeup_source_register+0x18a/0x380 [ 251.052265][T11762] ep_insert+0xf34/0x1a40 [ 251.057104][T11762] do_epoll_ctl+0x7f4/0xe80 [ 251.062109][T11762] __x64_sys_epoll_ctl+0x165/0x1b0 [ 251.067723][T11762] do_syscall_64+0x14d/0xf80 [ 251.072818][T11762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.079211][T11762] [ 251.079211][T11762] other info that might help us debug this: [ 251.079211][T11762] [ 251.089417][T11762] Chain exists of: [ 251.089417][T11762] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 251.089417][T11762] [ 251.101433][T11762] Possible unsafe locking scenario: [ 251.101433][T11762] [ 251.108955][T11762] CPU0 CPU1 [ 251.114315][T11762] ---- ---- [ 251.119659][T11762] lock(gdp_mutex); [ 251.123541][T11762] lock(cpuhp_state-up); [ 251.130378][T11762] lock(gdp_mutex); [ 251.136776][T11762] lock(fs_reclaim); [ 251.140745][T11762] [ 251.140745][T11762] *** DEADLOCK *** [ 251.140745][T11762] [ 251.148870][T11762] 3 locks held by syz.0.1657/11762: [ 251.154048][T11762] #0: ffffffff8e8ef148 (epnested_mutex){+.+.}-{4:4}, at: epoll_mutex_lock+0x4d/0x60 [ 251.163523][T11762] #1: ffff88807a71d468 (&ep->mtx){+.+.}-{4:4}, at: epoll_mutex_lock+0x4d/0x60 [ 251.172468][T11762] #2: ffffffff8f17cf48 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 251.181766][T11762] [ 251.181766][T11762] stack backtrace: [ 251.187637][T11762] CPU: 0 UID: 0 PID: 11762 Comm: syz.0.1657 Not tainted syzkaller #0 PREEMPT(full) [ 251.187655][T11762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 251.187664][T11762] Call Trace: [ 251.187671][T11762] [ 251.187679][T11762] dump_stack_lvl+0xe8/0x150 [ 251.187701][T11762] print_circular_bug+0x2e1/0x300 [ 251.187725][T11762] check_noncircular+0x12e/0x150 [ 251.187749][T11762] __lock_acquire+0x15a5/0x2cf0 [ 251.187771][T11762] ? __lock_acquire+0x6b5/0x2cf0 [ 251.187793][T11762] lock_acquire+0xf0/0x2e0 [ 251.187811][T11762] ? __kmalloc_cache_noprof+0x40/0x660 [ 251.187830][T11762] fs_reclaim_acquire+0x71/0x100 [ 251.187848][T11762] ? __kmalloc_cache_noprof+0x40/0x660 [ 251.187864][T11762] __kmalloc_cache_noprof+0x40/0x660 [ 251.187880][T11762] ? get_device_parent+0x255/0x3a0 [ 251.187898][T11762] ? do_raw_spin_unlock+0xf5/0x210 [ 251.187915][T11762] get_device_parent+0x255/0x3a0 [ 251.187934][T11762] device_add+0x2e1/0xb70 [ 251.187952][T11762] ? device_initialize+0x26a/0x460 [ 251.187970][T11762] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 251.187993][T11762] wakeup_source_register+0x18a/0x380 [ 251.188013][T11762] ep_insert+0xf34/0x1a40 [ 251.188030][T11762] ? __pfx_ep_insert+0x10/0x10 [ 251.188047][T11762] ? ep_loop_check+0x50/0x1b0 [ 251.188061][T11762] do_epoll_ctl+0x7f4/0xe80 [ 251.188077][T11762] __x64_sys_epoll_ctl+0x165/0x1b0 [ 251.188092][T11762] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 251.188109][T11762] do_syscall_64+0x14d/0xf80 [ 251.188123][T11762] ? trace_irq_disable+0x3b/0x150 [ 251.188136][T11762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.188151][T11762] ? clear_bhb_loop+0x40/0x90 [ 251.188167][T11762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.188181][T11762] RIP: 0033:0x7f464439c819 [ 251.188196][T11762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.188210][T11762] RSP: 002b:00007f46451fc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 251.188225][T11762] RAX: ffffffffffffffda RBX: 00007f4644615fa0 RCX: 00007f464439c819 [ 251.188236][T11762] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000007 [ 251.188245][T11762] RBP: 00007f4644432c91 R08: 0000000000000000 R09: 0000000000000000 [ 251.188255][T11762] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 251.188264][T11762] R13: 00007f4644616038 R14: 00007f4644615fa0 R15: 00007ffc0cbc13a8 [ 251.188281][T11762] [ 255.607752][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.607902][ T1300] ieee802154 phy0 wpan0: encryption failed: -22