last executing test programs: 20.146328677s ago: executing program 4 (id=2156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8f, 0x1, 0xa9, 0x9, 0x5, 0xfffe, 0x2, 0x100]}}]}]}]}, 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r1, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x63}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x28, r1, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x63}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f0000008200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3d}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/201, 0xc9}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/223, 0xed}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f0000003d80)=""/4100, 0x1004}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000ac0)=""/240, 0xf0}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x12002, 0x0) (async) recvmmsg(r3, &(0x7f0000008200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3d}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/201, 0xc9}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000540)=""/223, 0xed}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f0000003d80)=""/4100, 0x1004}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000ac0)=""/240, 0xf0}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x12002, 0x0) 19.419306382s ago: executing program 3 (id=2171): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xe, &(0x7f0000000040)=@raw=[@exit, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xffffff13}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}], &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x2}, 0x94) 19.312695356s ago: executing program 3 (id=2173): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0xa, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff, [0x0, 0xbe4]}}) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r2, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) 18.929102554s ago: executing program 1 (id=2175): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010"], 0x50}}, 0x0) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, 0x0, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c0400070080000700", 0x33a) 18.864621935s ago: executing program 4 (id=2176): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value={0x0, 0x1}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002800038024000080040002800400078004000180080003"], 0xe8}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x4, 0x3}}, 0x26) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x25, &(0x7f0000000280)={0x0, 0x0, 0xffff}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwritev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) r8 = getpid() syz_open_procfs$namespace(r8, &(0x7f00000000c0)='ns/user\x00') r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r13, @ANYBLOB="0000520006000500010000000800", @ANYRES32=r12], 0x2c}, 0x1, 0x0, 0x0, 0xc0c5}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) 18.863858179s ago: executing program 0 (id=2177): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x40, 0x7, 0x4, 0x7, {{0x7, 0x4, 0x0, 0x7, 0x1c, 0x64, 0x0, 0x8, 0x2f, 0x0, @loopback, @local, {[@lsrr={0x83, 0x7, 0x8a, [@multicast1]}]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffec3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) 18.862016306s ago: executing program 0 (id=2178): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x29, 0x8, 0x5, 0x24, @empty, @private2, 0x10, 0x8000, 0x4, 0x109}}) sendto$packet(r0, &(0x7f0000000000)="5808594dddeaa64cb639a1a914e85b442c53c1cd747551a0f7daf74bd6e7246a6b60fc1d022bb55b2c3fb3ff9b", 0x2d, 0x8000000, &(0x7f0000000100)={0x11, 0x15, r1, 0x1, 0x9, 0x6, @local}, 0x14) socketpair(0x1d, 0x80000, 0x1, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1410, 0x0, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40) close(r2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb7f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0xa, 0x8, 0x1, 0x2, 0x8}, @generic={0x8, 0x5, 0x1, 0x5, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x7f, 0x0, 0x0, 0x41100, 0x1, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x8, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000500)={r2, r5}) r6 = socket(0x25, 0x1, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@ifindex=r1, 0x3, 0x1, 0x2, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = accept$alg(r6, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, &(0x7f00000006c0)='&\'\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@fallback=r9, r0, 0x1e, 0x20, 0x0, @void, @void, @void, @value=r10, r8}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)) sendmsg$AUDIT_GET(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x3e8, 0x20, 0x70bd2d, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004004) close(r6) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'gretap0\x00', r1, 0x8000, 0x0, 0x4, 0x6, {{0xe, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x2f, 0x0, @empty, @local, {[@ssrr={0x89, 0xf, 0x28, [@remote, @empty, @empty]}, @timestamp_addr={0x44, 0x14, 0x86, 0x1, 0x5, [{@multicast1, 0x4}, {@remote, 0x5}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x70, r11, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c010}, 0x28000004) unshare(0x22020000) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000b00)) r14 = socket$nl_crypto(0x10, 0x3, 0x15) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r15) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r16, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040041) close(r14) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x48, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8004) 18.753754318s ago: executing program 1 (id=2180): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYBLOB="0000000000000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2341, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='rcu_utilization\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$alg(r1, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb13456f46", 0x5}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081) close(r1) 18.642669899s ago: executing program 0 (id=2181): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_PRIORITY={0x6, 0x6, 0xffff5c04}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 18.571888264s ago: executing program 4 (id=2182): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed85000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)="51ed2c616e45833486a66b06a2d210bd934779687cea0e140645f09e58da6cc867ac5c8cc6fbc5903df3358e3fb3d6f0662f890bc2a5b1f2143f0e1ab36c6a6024b34edd640400511c", &(0x7f00000004c0), 0x1000, r0}, 0x38) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) (async) r2 = socket$kcm(0x10, 0x3, 0x10) (async) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) (async) socket$netlink(0x10, 0x3, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x5, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40040) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2], [0x200]}}) (async) close(r3) sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)="911646939d2e55fdd0516716115519bd9d84c4818134359397b9566d05c9c55321a8312839b563345aee6f2bc9ffd61a10c7a0839c4e18cc4b933fc05df0badf9910ab2d6fbca7392b5b10efd5c6f567eb7555c8a2bdbf224d304cfbe422f500a25cba9cd4b39d40d4a83b1d56beb1f7b9d3d30e5fec20ae6cd97db3b6446b7a306392dc273b97fa3f92c141d7ad1254e1a0abd99e0a35277a1726548a6afbac74de3e15f910f7233c95b4b4ca5e7e57dab38d1b72d83eae9eee56f804dbc0c7d7e7372a1050ca246236597cd2d466c8093a20c367981478b45027490847a695", 0xe0}, {&(0x7f0000000440)="4c061dcf7c7c307de7e14f2c6cfab89e327d0823842868070c5db632a86580a007c47f41068cb9e3c2d00bd304a7c8d4c5ca51edb09ca183edd7089af708", 0x3e}, {&(0x7f0000000540)="ed2edc723bf718c59d8ab5463e52535a93229c83ee2ff7613f23aadf260a6abfec0327280cbe67431bd877f9f7abfca89ebba6809fe8b6c5e9003dae2e1a1005b2af62683f3f2841fdc95371d9f44ae7e843f921755b4fa724f991c1b44c1a4c77dcd62e1f141e6e510f1fd7429710fc3c6dd05c8a7ca7004ff1617ebf00045e287c6f7c64cb34908911ca7651c00bf2856ab86750ae505fc176719c2cae512c1f18954455f1b51f", 0xa8}, {&(0x7f0000000480)="6d2664da6cb95004a114c865e287957917bb587f3b762cb8843bfd779747f5dfe57ad463b7f2a5887cca18941ff1", 0x2e}, {&(0x7f0000000600)="2328e6695eb862898694b1f556b6d6c570fba0228008eeb5e981803a2fd69b159ec8ada2c02a88c82fe1fe3ab66b6ce4084cbb03006c1fb57b6bc5a59f2111ca7d73e7ca7e63abcba4e46af9bbad6cc6cf0918ce953610a7c63e7e28690bb9090f3d3e99d7f3b976d106fec81b03bdda32f39b9139e843fa2196ad2e0b", 0x7d}], 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="30000100008000000000000000000080a6fa13a28955d0b79a89a921c25fd57c5e0ceeb9e8eec57fb800000000000000"], 0x30}, 0x200000e0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000001340)=',', 0x1, 0x0, &(0x7f0000001400)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) 18.476823114s ago: executing program 0 (id=2183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback, @remote}, &(0x7f0000000240)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@private, @private, 0x0}, &(0x7f0000000300)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x93, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xeb, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xac, r1, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0xac}}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000c00)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180, 0x4e000}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback, @remote}, &(0x7f0000000240)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000002c0)={@private, @private}, &(0x7f0000000300)=0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x93, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xeb, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xac, r1, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0xac}}, 0x4800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000c00)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180, 0x4e000}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x0) (async) 18.247579867s ago: executing program 3 (id=2184): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000a80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}], 0x1, 0x8000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x6000001f}) (fail_nth: 49) 18.192604935s ago: executing program 0 (id=2185): r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000007000085000000060000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x1fffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc, 0x0, 0x6}, 0x10) recvfrom$packet(r4, &(0x7f0000000080)=""/80, 0x50, 0x100, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000080)='U', 0x1080}], 0x29a, 0x0, 0x3e80}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) close(r1) 18.191404548s ago: executing program 1 (id=2186): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x9, 0x2, 0x0, r0}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x4}, &(0x7f00000000c0)=0x9c) 17.792356866s ago: executing program 1 (id=2187): r0 = socket(0x28, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x0) 17.741012354s ago: executing program 3 (id=2188): socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x13, 0xffffffffffffffff, 0x0) listen(r0, 0x3) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000003a7"], 0x20}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005000000000005000400000000000c000780080012400000ffff0d000000000000000000001c000000000000"], 0x54}}, 0x0) r3 = socket(0x2, 0x5, 0x0) connect$inet(r3, 0x0, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000a200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800020d8}, 0x94) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bind$can_raw(r5, &(0x7f0000000080)={0x1d, r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x6c}}, 0x800) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c0003801800010067"], 0x70}}, 0x24040884) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10, 0x0, 0x5}, 0x18) 17.652356228s ago: executing program 1 (id=2189): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x28, r0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2a}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x28}}, 0x40050) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500000000000000", @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000103ffc7ffff0200000000000000", @ANYRES32=0x0, @ANYBLOB="4100000000000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c00028006000100020000"], 0x50}}, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) (async) sendto$inet6(r2, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) close(0x3) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x2}]}}}]}, 0x3c}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 17.649271065s ago: executing program 4 (id=2190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x2c, r3, 0x1, 0x0, 0xfffffffc, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x2c, r3, 0x1, 0x0, 0xfffffffc, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4) (async) 17.648545708s ago: executing program 3 (id=2191): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0204e40b0500000000007000fddbdf2503001700ff80000002004e24640101000000000000000000"], 0x28}}, 0x40800) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$nl_route_sched(r3, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0xffe2, 0x7}, {0x0, 0xfff0}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) 17.572088014s ago: executing program 1 (id=2193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) (rerun: 32) close(r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=@allocspi={0x108, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x0, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x101, 0x0, 0x0, 0x800}, {0x4, 0x6, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x94}, 0x0, 0x4ad}, [@XFRMA_IF_ID={0x8}, @replay_thresh={0x8, 0xb, 0xc01b}]}, 0x108}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) (async, rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x2, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000) (rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 17.496760638s ago: executing program 4 (id=2194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$kcm(0x29, 0x2, 0x0) (rerun: 64) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x119, 0x487, 0x0, &(0x7f0000000000)) (async) syz_emit_ethernet(0xd1, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8c0c00", 0x9b, 0x6, 0x1, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x10}, {"f9839803e891931ce9a0cf1934487772dba66f038e06b5ee19afd9f6d78e9ebde5e03e7d0d519e47a8a3f666d5ba521393b35ca66bce264b0cc791d569ed3100a817d472ac630b1858b32227a4f2e67d7a786583dc3cd1326ccaa6c4ef339d9abb3fe4fc590aec8ca242f8362350dd6c4888d4449c1ea383b27aecd86c3c3b4f4801055fec67f9"}}}}}}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0) 17.495976662s ago: executing program 0 (id=2195): unshare(0x22020600) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e615500140004800800014000000001080002"], 0xbc}}, 0x0) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0xf, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20008854) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r2 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 64) write$cgroup_subtree(r2, 0x0, 0xfe33) (async) recvmsg(r2, 0x0, 0x40000000) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x500}, 0x57) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) nanosleep(&(0x7f0000000340), 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="c0fba3f0c67497c6e350f409efe4", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000011300000000000000000000000a140000001100010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (rerun: 32) 17.43887444s ago: executing program 3 (id=2197): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r4, 0x201, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x29000}, 0x8000) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x1, 0x80000000, 0x0, 0x40, 0xc7, 0x3, 0x9, 0x8}}) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x20000000) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000000c0)=0x100, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001a00010000400000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000700000007000000000000000000000014000100000000000000c7"], 0x44}}, 0x4000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r9 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b80)=ANY=[], 0x5dc}}, 0x8800) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r9) 17.299979808s ago: executing program 2 (id=2198): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @long}, 0x14, &(0x7f0000000100)={&(0x7f0000001bc0)="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", 0x1042}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000810) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0xfffffffffffffd7f}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17", 0x3}], 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x7ffffffe, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x5, 0x0, 0x208000000010001, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 17.248295906s ago: executing program 4 (id=2199): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000540)='cpuhp_enter\x00', r0, 0x0, 0x400000003}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x1, 0x8) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000028c0)=@newtfilter={0xac, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x2}, @TCA_U32_SEL={0x74, 0x5, {0x6, 0x1, 0x6, 0x5, 0xc9f0, 0x5, 0x2, 0xb4, [{0x6140ba75, 0x1, 0x0, 0x8}, {0x7, 0x2, 0x1, 0x10001}, {0xde, 0xffffffff, 0x2, 0x20b}, {0x4, 0x3, 0x0, 0xfffffff9}, {0x40, 0x7, 0x28, 0x9}, {0x9, 0x1f, 0x3ff, 0x200}]}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) (async) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r7, 0x4000000, r8}, 0x10) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 16.105765211s ago: executing program 2 (id=2200): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000100)=@ethtool_dump={0x3f, 0x3c5, 0x6}}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) 16.069013806s ago: executing program 2 (id=2201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x40}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000001c0)={0xfb, 0x7}, 0x2) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x400, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 16.033723411s ago: executing program 2 (id=2202): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xfffffe01, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, 0x0, 0x0, 0x4000040) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7, 0x8, 0x6, 0x668, {{0x27, 0x4, 0x0, 0x8, 0x9c, 0x67, 0x0, 0x1, 0x4, 0x0, @empty, @remote, {[@noop, @timestamp={0x44, 0x24, 0x8e, 0x0, 0x6, [0x4, 0xf2eb, 0x1, 0x5, 0xb, 0x9, 0x400, 0x401]}, @timestamp={0x44, 0xc, 0x66, 0x0, 0x6, [0xc, 0xfff]}, @noop, @cipso={0x86, 0x1e, 0x2, [{0x7, 0xa, "cb516183d0d13e26"}, {0x2, 0xe, "fe10654ded645607af1a71ea"}]}, @generic={0x88, 0xc, "3b75baee9a7852e0cda3"}, @rr={0x7, 0x23, 0xee, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0x3c, [@private=0xa010100]}]}}}}}) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) (async) splice(r5, 0x0, r6, &(0x7f00000002c0), 0x6, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000540)=""/113, 0x71, 0x0, &(0x7f00000005c0)=""/38, 0x26}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x19, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x3, 0x3, 0x3, 0xa, 0xb, 0x8, 0x10}, @map_fd={0x18, 0x2, 0x1, 0x0, r2}, @cb_func={0x18, 0x8}, @jmp={0x5, 0x1, 0xa, 0x1, 0x8, 0xffffffffffffffc0, 0xffffffffffffffff}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x40, 0x17, &(0x7f0000000340)=""/23, 0x41000, 0x4, '\x00', r4, @cgroup_device=0x6, r5, 0x8, &(0x7f0000000480)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xa, 0x0, 0xd}, 0x10, r7, r0, 0x4, 0x0, &(0x7f0000000700)=[{0x0, 0x3, 0x5}, {0x3, 0x3, 0x1}, {0x4, 0x3, 0x1, 0x3}, {0x5, 0x4, 0x4, 0x5}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.960597985s ago: executing program 2 (id=2203): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0014"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x14, r6, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004065}, 0x40800) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="f5af24bd7000000000000dec000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x160, 0x1, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_NAT_SRC={0x64, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @CTA_TUPLE_REPLY={0xc0, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x24, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000040}, 0x8041) (rerun: 64) 15.957245881s ago: executing program 2 (id=2204): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080), 0x50) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r3, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r4 = socket(0x18, 0x3, 0x7) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000001940)=[{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000580)="fe093007a036b825dbc02c3f6a3312e7", 0x10}], 0x1, 0x0, 0x0, 0x40010}], 0x1, 0x8001) recvmmsg(r6, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) socket(0x22, 0x2, 0x4) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@nested={0x4, 0x7}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.012595351s ago: executing program 32 (id=2195): unshare(0x22020600) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e615500140004800800014000000001080002"], 0xbc}}, 0x0) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0xf, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20008854) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r2 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 64) write$cgroup_subtree(r2, 0x0, 0xfe33) (async) recvmsg(r2, 0x0, 0x40000000) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x500}, 0x57) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) nanosleep(&(0x7f0000000340), 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="c0fba3f0c67497c6e350f409efe4", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000011300000000000000000000000a140000001100010000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (rerun: 32) 1.97406262s ago: executing program 33 (id=2193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) (rerun: 32) close(r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=@allocspi={0x108, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x0, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x101, 0x0, 0x0, 0x800}, {0x4, 0x6, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x94}, 0x0, 0x4ad}, [@XFRMA_IF_ID={0x8}, @replay_thresh={0x8, 0xb, 0xc01b}]}, 0x108}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) (async, rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x2, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000) (rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 1.912431054s ago: executing program 34 (id=2197): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r4, 0x201, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x29000}, 0x8000) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x1, 0x80000000, 0x0, 0x40, 0xc7, 0x3, 0x9, 0x8}}) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x20000000) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f00000000c0)=0x100, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001a00010000400000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000700000007000000000000000000000014000100000000000000c7"], 0x44}}, 0x4000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r9 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b80)=ANY=[], 0x5dc}}, 0x8800) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r9) 1.846624274s ago: executing program 35 (id=2199): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000540)='cpuhp_enter\x00', r0, 0x0, 0x400000003}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x1, 0x8) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000028c0)=@newtfilter={0xac, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x2}, @TCA_U32_SEL={0x74, 0x5, {0x6, 0x1, 0x6, 0x5, 0xc9f0, 0x5, 0x2, 0xb4, [{0x6140ba75, 0x1, 0x0, 0x8}, {0x7, 0x2, 0x1, 0x10001}, {0xde, 0xffffffff, 0x2, 0x20b}, {0x4, 0x3, 0x0, 0xfffffff9}, {0x40, 0x7, 0x28, 0x9}, {0x9, 0x1f, 0x3ff, 0x200}]}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) (async) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r7, 0x4000000, r8}, 0x10) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 0s ago: executing program 36 (id=2204): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080), 0x50) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r3, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r4 = socket(0x18, 0x3, 0x7) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000001940)=[{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000580)="fe093007a036b825dbc02c3f6a3312e7", 0x10}], 0x1, 0x0, 0x0, 0x40010}], 0x1, 0x8001) recvmmsg(r6, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) socket(0x22, 0x2, 0x4) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@nested={0x4, 0x7}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r9, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) kernel console output (not intermixed with test programs): 2][T10306] openvswitch: netlink: Flow key attr not present in new flow. [ 136.353854][T10311] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 136.358465][T10312] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 136.372578][T10312] gretap1: entered promiscuous mode [ 136.640004][T10337] tipc: Enabled bearer , priority 10 [ 136.732820][T10341] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1215'. [ 136.989590][T10345] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 137.347920][T10360] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 137.422748][T10367] tipc: Enabled bearer , priority 0 [ 137.435426][T10368] syzkaller0: entered promiscuous mode [ 137.449399][T10368] syzkaller0: entered allmulticast mode [ 137.467089][T10369] tipc: Resetting bearer [ 137.522203][T10366] tipc: Resetting bearer [ 137.550187][T10366] tipc: Disabling bearer [ 137.754416][ T5968] tipc: Node number set to 1553903593 [ 137.960437][T10391] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 138.007905][T10396] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.234947][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.235465][ T5862] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 138.301239][T10411] tipc: Enabling of bearer rejected, failed to enable media [ 138.832680][T10429] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 138.863124][T10429] gretap1: left promiscuous mode [ 138.871007][ T8425] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.893171][ T8425] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.940986][ T8425] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.942245][T10459] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 138.956027][T10459] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 139.028637][T10442] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 139.035087][ T8425] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.268127][T10472] netlink: 'syz.1.1249': attribute type 8 has an invalid length. [ 139.423032][T10482] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.015248][T10514] __nla_validate_parse: 11 callbacks suppressed [ 140.015267][T10514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1262'. [ 140.047001][T10514] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1262'. [ 140.099297][T10521] netlink: 'syz.3.1262': attribute type 2 has an invalid length. [ 140.110763][T10514] veth0_to_bridge: entered promiscuous mode [ 140.117827][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 140.140459][T10512] veth0_to_bridge: left promiscuous mode [ 140.199648][T10528] vlan0: entered promiscuous mode [ 140.587747][T10580] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 140.701866][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1283'. [ 140.736475][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 140.759218][T10600] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1281'. [ 140.922498][T10610] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1286'. [ 141.258509][T10627] netlink: 'syz.2.1291': attribute type 11 has an invalid length. [ 141.384882][T10639] syzkaller1: entered promiscuous mode [ 141.390600][T10639] syzkaller1: entered allmulticast mode [ 141.684667][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1300'. [ 141.974755][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1303'. [ 142.109121][T10688] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1306'. [ 142.129361][T10687] : renamed from bond_slave_0 [ 142.477928][T10717] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 142.614508][T10724] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 143.076108][ T8422] bond0: (slave team0): link status definitely down, disabling slave [ 143.085646][ T8422] bond0: now running without any active interface! [ 143.537222][T10794] netlink: 'syz.4.1340': attribute type 1 has an invalid length. [ 143.778006][T10807] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 144.200287][T10829] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 144.200793][T10828] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.210053][T10829] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 144.408309][T10839] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 144.661808][T10845] geneve0: entered promiscuous mode [ 144.669031][ T8427] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 144.686038][ T8427] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 144.713353][ T8427] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 144.731999][ T8427] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 144.875913][T10859] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 144.906843][T10863] netlink: 'syz.2.1364': attribute type 13 has an invalid length. [ 144.925369][T10863] netlink: 'syz.2.1364': attribute type 17 has an invalid length. [ 145.507374][T10863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.776087][T10871] __nla_validate_parse: 19 callbacks suppressed [ 145.776108][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'. [ 146.888157][T10930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1384'. [ 146.994964][ T30] audit: type=1800 audit(1755864418.138:3): pid=10945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1389" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1687 res=0 errno=0 [ 147.020905][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1390'. [ 147.026006][T10945] ipvlan2: entered promiscuous mode [ 147.035368][ T30] audit: type=1800 audit(1755864418.158:4): pid=10945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1389" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1687 res=0 errno=0 [ 147.038825][T10945] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 147.156534][T10957] netlink: 16390 bytes leftover after parsing attributes in process `syz.4.1392'. [ 147.232454][T10962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1394'. [ 147.243885][T10962] netlink: 'syz.4.1394': attribute type 7 has an invalid length. [ 147.251846][T10962] netlink: 'syz.4.1394': attribute type 8 has an invalid length. [ 147.265397][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1394'. [ 147.371863][T10960] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1393'. [ 147.381267][T10960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1393'. [ 147.391291][T10960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1393'. [ 147.440625][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1396'. [ 147.576743][T10979] tipc: Started in network mode [ 147.581912][T10979] tipc: Node identity 86749e1991ab, cluster identity 4711 [ 147.589329][T10979] tipc: Enabled bearer , priority 0 [ 147.795426][T10997] syz_tun: entered allmulticast mode [ 147.830954][T10998] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 147.946771][T11007] tipc: Enabled bearer , priority 0 [ 147.956650][T11007] syzkaller0: entered promiscuous mode [ 147.962149][T11007] syzkaller0: entered allmulticast mode [ 147.984239][T11007] tipc: Resetting bearer [ 148.006580][T11006] tipc: Resetting bearer [ 148.019871][T11006] tipc: Disabling bearer [ 148.139146][T11014] team0: Port device bridge0 added [ 148.553043][T11044] veth5: entered promiscuous mode [ 148.580331][T11042] sctp: [Deprecated]: syz.0.1417 (pid 11042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.580331][T11042] Use struct sctp_sack_info instead [ 148.714048][ T5929] tipc: Node number set to 400530969 [ 148.878291][T11075] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 149.018650][T11085] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 149.192971][T11089] syzkaller1: entered allmulticast mode [ 149.202873][T11089] syzkaller1: left allmulticast mode [ 149.239303][T11091] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 149.415650][T11093] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 149.525613][T11103] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 149.711866][T11117] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 149.789554][T11127] netlink: 'syz.4.1443': attribute type 10 has an invalid length. [ 149.830443][T11127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.850508][T11127] batadv0: entered promiscuous mode [ 149.866794][T11127] Ã: (slave batadv0): Enslaving as an active interface with an up link [ 149.875573][T11131] FAULT_INJECTION: forcing a failure. [ 149.875573][T11131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.890809][T11131] CPU: 1 UID: 0 PID: 11131 Comm: syz.2.1442 Not tainted syzkaller #0 PREEMPT(full) [ 149.890833][T11131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.890844][T11131] Call Trace: [ 149.890851][T11131] [ 149.890857][T11131] dump_stack_lvl+0x189/0x250 [ 149.890881][T11131] ? __pfx____ratelimit+0x10/0x10 [ 149.890904][T11131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.890922][T11131] ? __pfx__printk+0x10/0x10 [ 149.890941][T11131] ? __might_fault+0xb0/0x130 [ 149.890966][T11131] ? rcu_is_watching+0x15/0xb0 [ 149.890984][T11131] should_fail_ex+0x414/0x560 [ 149.891005][T11131] _copy_from_user+0x2d/0xb0 [ 149.891023][T11131] kstrtouint_from_user+0xc4/0x170 [ 149.891045][T11131] ? __might_fault+0xb0/0x130 [ 149.891065][T11131] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 149.891103][T11131] ? vfs_write+0x211/0xb30 [ 149.891122][T11131] ? rcu_is_watching+0x15/0xb0 [ 149.891140][T11131] proc_fail_nth_write+0x88/0x200 [ 149.891158][T11131] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 149.891175][T11131] ? security_file_permission+0x75/0x290 [ 149.891196][T11131] ? preempt_count_add+0x91/0x1a0 [ 149.891220][T11131] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 149.891237][T11131] vfs_write+0x27e/0xb30 [ 149.891259][T11131] ? __pfx_vfs_write+0x10/0x10 [ 149.891284][T11131] ? __fget_files+0x3a0/0x420 [ 149.891297][T11131] ? __fget_files+0x2a/0x420 [ 149.891311][T11131] ksys_write+0x145/0x250 [ 149.891329][T11131] ? __pfx_ksys_write+0x10/0x10 [ 149.891350][T11131] ? rcu_is_watching+0x15/0xb0 [ 149.891365][T11131] do_syscall_64+0xfa/0x3b0 [ 149.891381][T11131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.891398][T11131] ? clear_bhb_loop+0x60/0xb0 [ 149.891416][T11131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.891431][T11131] RIP: 0033:0x7f00fcd8d69f [ 149.891447][T11131] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 149.891463][T11131] RSP: 002b:00007f00faff6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 149.891480][T11131] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f00fcd8d69f [ 149.891490][T11131] RDX: 0000000000000001 RSI: 00007f00faff60a0 RDI: 0000000000000006 [ 149.891500][T11131] RBP: 00007f00faff6090 R08: 0000000000000000 R09: 0000000000000000 [ 149.891511][T11131] R10: 0000000000002123 R11: 0000000000000293 R12: 0000000000000001 [ 149.891522][T11131] R13: 00007f00fcfb6218 R14: 00007f00fcfb6180 R15: 00007ffd89702848 [ 149.891541][T11131] [ 149.897040][T11132] netlink: 'syz.4.1443': attribute type 10 has an invalid length. [ 150.195018][T11132] batadv0: entered allmulticast mode [ 150.206760][T11132] Ã: (slave batadv0): Releasing backup interface [ 150.226943][T11132] bridge0: port 1(batadv0) entered blocking state [ 150.233469][T11132] bridge0: port 1(batadv0) entered disabled state [ 150.274022][ T8415] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 150.283437][ T8415] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 150.422269][T11154] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 150.552037][T11160] netlink: 'syz.4.1452': attribute type 1 has an invalid length. [ 150.580353][T11164] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 150.657979][T11164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.363012][T11218] syzkaller0: entered promiscuous mode [ 151.369778][T11218] syzkaller0: entered allmulticast mode [ 151.551263][T11229] netlink: 'syz.4.1470': attribute type 32 has an invalid length. [ 151.559332][T11229] __nla_validate_parse: 21 callbacks suppressed [ 151.559349][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1470'. [ 151.577756][T11229] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 151.632454][T11231] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1470'. [ 151.977579][T11237] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1472'. [ 151.979487][T11240] siw: device registration error -23 [ 151.991028][T11236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1471'. [ 152.164975][T11260] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 152.180763][T11253] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 152.327200][T11270] netlink: 'syz.2.1481': attribute type 29 has an invalid length. [ 152.361316][T11270] netlink: 'syz.2.1481': attribute type 29 has an invalid length. [ 152.374480][T11270] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1481'. [ 152.385372][T11270] unsupported nla_type 58 [ 152.985623][T11254] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 153.051151][T11286] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 153.095517][T11288] netlink: 'syz.3.1487': attribute type 12 has an invalid length. [ 153.310403][T11298] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 153.523195][T11303] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1491'. [ 153.538927][T11317] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 154.073283][T11339] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 154.299898][T11351] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1502'. [ 154.624572][T11371] netlink: 'syz.2.1506': attribute type 22 has an invalid length. [ 155.344664][T11418] tipc: Enabled bearer , priority 0 [ 155.394840][T11424] syzkaller0: entered promiscuous mode [ 155.416205][T11424] syzkaller0: entered allmulticast mode [ 155.479124][T11418] tipc: Resetting bearer [ 155.535004][T11417] tipc: Resetting bearer [ 155.588778][T11417] tipc: Disabling bearer [ 155.594396][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 155.608912][T11433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1516'. [ 155.619001][T11433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1516'. [ 155.632553][T11434] FAULT_INJECTION: forcing a failure. [ 155.632553][T11434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.646738][T11434] CPU: 1 UID: 0 PID: 11434 Comm: syz.4.1515 Not tainted syzkaller #0 PREEMPT(full) [ 155.646763][T11434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.646772][T11434] Call Trace: [ 155.646779][T11434] [ 155.646786][T11434] dump_stack_lvl+0x189/0x250 [ 155.646811][T11434] ? __pfx____ratelimit+0x10/0x10 [ 155.646835][T11434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.646854][T11434] ? __pfx__printk+0x10/0x10 [ 155.646875][T11434] ? __might_fault+0xb0/0x130 [ 155.646900][T11434] ? rcu_is_watching+0x15/0xb0 [ 155.646919][T11434] should_fail_ex+0x414/0x560 [ 155.646943][T11434] _copy_from_user+0x2d/0xb0 [ 155.646961][T11434] __x64_sys_epoll_ctl+0x126/0x1a0 [ 155.646988][T11434] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 155.647014][T11434] ? rcu_is_watching+0x15/0xb0 [ 155.647031][T11434] do_syscall_64+0xfa/0x3b0 [ 155.647048][T11434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.647064][T11434] ? clear_bhb_loop+0x60/0xb0 [ 155.647083][T11434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.647100][T11434] RIP: 0033:0x7f3418b8ebe9 [ 155.647115][T11434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.647130][T11434] RSP: 002b:00007f3419930038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 155.647150][T11434] RAX: ffffffffffffffda RBX: 00007f3418db6090 RCX: 00007f3418b8ebe9 [ 155.647163][T11434] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 155.647173][T11434] RBP: 00007f3419930090 R08: 0000000000000000 R09: 0000000000000000 [ 155.647184][T11434] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 155.647196][T11434] R13: 00007f3418db6128 R14: 00007f3418db6090 R15: 00007ffc058e9e78 [ 155.647215][T11434] [ 156.232121][T11463] tipc: Cannot configure node identity twice [ 156.438857][T11479] FAULT_INJECTION: forcing a failure. [ 156.438857][T11479] name failslab, interval 1, probability 0, space 0, times 0 [ 156.452794][T11479] CPU: 0 UID: 0 PID: 11479 Comm: syz.0.1531 Not tainted syzkaller #0 PREEMPT(full) [ 156.452824][T11479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.452835][T11479] Call Trace: [ 156.452841][T11479] [ 156.452848][T11479] dump_stack_lvl+0x189/0x250 [ 156.452873][T11479] ? __pfx____ratelimit+0x10/0x10 [ 156.452897][T11479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.452916][T11479] ? __pfx__printk+0x10/0x10 [ 156.452941][T11479] ? __pfx___might_resched+0x10/0x10 [ 156.452958][T11479] ? lock_acquire+0x5f/0x360 [ 156.452982][T11479] should_fail_ex+0x414/0x560 [ 156.453007][T11479] should_failslab+0xa8/0x100 [ 156.453030][T11479] kmem_cache_alloc_noprof+0x73/0x3c0 [ 156.453052][T11479] ? ep_insert+0x272/0x19e0 [ 156.453076][T11479] ep_insert+0x272/0x19e0 [ 156.453099][T11479] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 156.453119][T11479] ? security_file_permission+0x75/0x290 [ 156.453141][T11479] ? rcu_is_watching+0x15/0xb0 [ 156.453160][T11479] ? __pfx_ep_insert+0x10/0x10 [ 156.453181][T11479] ? __pfx___mutex_lock+0x10/0x10 [ 156.453208][T11479] ? __fget_files+0x2a/0x420 [ 156.453227][T11479] ? __fget_files+0x3a0/0x420 [ 156.453239][T11479] ? __fget_files+0x2a/0x420 [ 156.453257][T11479] do_epoll_ctl+0x7f4/0xe80 [ 156.453283][T11479] __x64_sys_epoll_ctl+0x163/0x1a0 [ 156.453307][T11479] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 156.453333][T11479] ? rcu_is_watching+0x15/0xb0 [ 156.453351][T11479] do_syscall_64+0xfa/0x3b0 [ 156.453366][T11479] ? rcu_is_watching+0x15/0xb0 [ 156.453382][T11479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.453399][T11479] ? clear_bhb_loop+0x60/0xb0 [ 156.453418][T11479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.453455][T11479] RIP: 0033:0x7f1e23b8ebe9 [ 156.453471][T11479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.453486][T11479] RSP: 002b:00007f1e2498c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 156.453506][T11479] RAX: ffffffffffffffda RBX: 00007f1e23db5fa0 RCX: 00007f1e23b8ebe9 [ 156.453519][T11479] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 156.453530][T11479] RBP: 00007f1e2498c090 R08: 0000000000000000 R09: 0000000000000000 [ 156.453541][T11479] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 156.453553][T11479] R13: 00007f1e23db6038 R14: 00007f1e23db5fa0 R15: 00007ffc12f25418 [ 156.453574][T11479] [ 156.703339][T11480] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 156.729464][T11480] bond0: (slave wlan1): Releasing backup interface [ 156.766405][T11480] netlink: 'syz.3.1530': attribute type 10 has an invalid length. [ 156.776328][T11480] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 156.792322][T11480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.808673][T11480] bond0: (slave wlan1): Opening slave failed [ 156.846997][T11491] __nla_validate_parse: 2 callbacks suppressed [ 156.847016][T11491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1534'. [ 156.877160][T11491] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1534'. [ 156.932122][T10439] IPVS: starting estimator thread 0... [ 156.992857][T11502] netlink: 'syz.1.1538': attribute type 5 has an invalid length. [ 157.085242][T11495] IPVS: using max 41 ests per chain, 98400 per kthread [ 157.092665][T11514] FAULT_INJECTION: forcing a failure. [ 157.092665][T11514] name failslab, interval 1, probability 0, space 0, times 0 [ 157.110276][T11514] CPU: 1 UID: 0 PID: 11514 Comm: syz.0.1543 Not tainted syzkaller #0 PREEMPT(full) [ 157.110304][T11514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.110314][T11514] Call Trace: [ 157.110321][T11514] [ 157.110329][T11514] dump_stack_lvl+0x189/0x250 [ 157.110354][T11514] ? __pfx____ratelimit+0x10/0x10 [ 157.110378][T11514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.110398][T11514] ? __pfx__printk+0x10/0x10 [ 157.110422][T11514] ? __pfx___might_resched+0x10/0x10 [ 157.110438][T11514] ? lock_acquire+0x5f/0x360 [ 157.110461][T11514] should_fail_ex+0x414/0x560 [ 157.110485][T11514] should_failslab+0xa8/0x100 [ 157.110509][T11514] kmem_cache_alloc_noprof+0x73/0x3c0 [ 157.110531][T11514] ? ep_insert+0x51a/0x19e0 [ 157.110554][T11514] ep_insert+0x51a/0x19e0 [ 157.110582][T11514] ? __pfx_ep_insert+0x10/0x10 [ 157.110603][T11514] ? __pfx___mutex_lock+0x10/0x10 [ 157.110629][T11514] ? __fget_files+0x2a/0x420 [ 157.110644][T11514] ? __fget_files+0x3a0/0x420 [ 157.110658][T11514] ? __fget_files+0x2a/0x420 [ 157.110675][T11514] do_epoll_ctl+0x7f4/0xe80 [ 157.110698][T11514] __x64_sys_epoll_ctl+0x163/0x1a0 [ 157.110721][T11514] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 157.110742][T11514] ? rcu_is_watching+0x15/0xb0 [ 157.110761][T11514] ? rcu_is_watching+0x15/0xb0 [ 157.110777][T11514] do_syscall_64+0xfa/0x3b0 [ 157.110793][T11514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.110820][T11514] ? clear_bhb_loop+0x60/0xb0 [ 157.110839][T11514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.110856][T11514] RIP: 0033:0x7f1e23b8ebe9 [ 157.110869][T11514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.110884][T11514] RSP: 002b:00007f1e2498c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 157.110901][T11514] RAX: ffffffffffffffda RBX: 00007f1e23db5fa0 RCX: 00007f1e23b8ebe9 [ 157.110915][T11514] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 157.110925][T11514] RBP: 00007f1e2498c090 R08: 0000000000000000 R09: 0000000000000000 [ 157.110935][T11514] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 157.110946][T11514] R13: 00007f1e23db6038 R14: 00007f1e23db5fa0 R15: 00007ffc12f25418 [ 157.110966][T11514] [ 157.117926][T11518] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1544'. [ 157.371321][T11520] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 157.429969][T11536] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1548'. [ 157.471334][T11540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.481281][T11540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1550'. [ 157.529843][T11549] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1553'. [ 157.677814][T11558] tipc: New replicast peer: 255.255.255.255 [ 157.687104][T11558] tipc: Enabled bearer , priority 6 [ 157.729861][T11562] Unsupported ieee802154 address type: 0 [ 157.744657][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1554'. [ 157.765569][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'. [ 157.774962][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1554'. [ 157.792334][T11562] batadv2: entered promiscuous mode [ 157.947355][T11525] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 158.150418][T11581] IPv6: Can't replace route, no match found [ 158.159008][T11581] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1561'. [ 158.172111][T11580] netlink: 'syz.4.1562': attribute type 2 has an invalid length. [ 158.181341][T11580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.526575][T11604] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 158.547053][T11616] netlink: zone id is out of range [ 158.552549][T11616] netlink: zone id is out of range [ 158.572176][T11616] netlink: set zone limit has 4 unknown bytes [ 158.582452][T11616] netlink: del zone limit has 4 unknown bytes [ 158.605889][T11621] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 158.629419][T11621] bond6: entered promiscuous mode [ 158.634906][T11621] bond6: entered allmulticast mode [ 158.640399][T11621] 8021q: adding VLAN 0 to HW filter on device bond6 [ 158.651363][T11621] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 158.669080][T11621] bond7: entered promiscuous mode [ 158.674480][T11621] bond7: entered allmulticast mode [ 158.679967][T11621] 8021q: adding VLAN 0 to HW filter on device bond7 [ 158.687612][T11621] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 158.713422][T11621] bond8: entered promiscuous mode [ 158.718951][T11621] bond8: entered allmulticast mode [ 158.724784][T11621] 8021q: adding VLAN 0 to HW filter on device bond8 [ 158.735971][T11621] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 158.758212][T11621] bond9: entered promiscuous mode [ 158.763282][T11621] bond9: entered allmulticast mode [ 158.769145][T11621] 8021q: adding VLAN 0 to HW filter on device bond9 [ 158.790547][T11621] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 158.809606][T11639] netlink: 'syz.3.1579': attribute type 5 has an invalid length. [ 158.829576][T11621] bond10: entered promiscuous mode [ 158.835141][T11621] bond10: entered allmulticast mode [ 158.840786][T11621] 8021q: adding VLAN 0 to HW filter on device bond10 [ 158.849009][T11621] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 158.871012][T11645] netlink: 'syz.3.1579': attribute type 4 has an invalid length. [ 158.881447][T11621] bond11: entered promiscuous mode [ 158.886867][T11621] bond11: entered allmulticast mode [ 158.892650][T11621] 8021q: adding VLAN 0 to HW filter on device bond11 [ 158.904047][T11639] geneve3: entered promiscuous mode [ 158.909277][T11639] geneve3: entered allmulticast mode [ 158.916347][T11645] Ã: renamed from bond0 [ 158.921766][T11621] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 158.965595][T11621] bond12: entered promiscuous mode [ 158.970938][T11621] bond12: entered allmulticast mode [ 158.976776][T11621] 8021q: adding VLAN 0 to HW filter on device bond12 [ 158.982780][T11653] openvswitch: netlink: Missing valid actions attribute. [ 158.987310][T11621] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 158.992807][T11653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.028872][T11621] bond13: entered promiscuous mode [ 159.034448][T11621] bond13: entered allmulticast mode [ 159.039979][T11621] 8021q: adding VLAN 0 to HW filter on device bond13 [ 159.047580][T11400] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 159.056387][T11400] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 159.068179][T11621] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 159.101780][T11621] bond14: entered promiscuous mode [ 159.107310][T11621] bond14: entered allmulticast mode [ 159.113441][T11621] 8021q: adding VLAN 0 to HW filter on device bond14 [ 159.125456][T11621] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 159.154607][T11621] bond15: entered promiscuous mode [ 159.160191][T11621] bond15: entered allmulticast mode [ 159.165864][T11621] 8021q: adding VLAN 0 to HW filter on device bond15 [ 159.173261][T11400] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 159.182293][T11400] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 159.208452][T11621] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 159.268451][T11621] bond16: entered promiscuous mode [ 159.274048][ T5862] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.286005][T11621] bond16: entered allmulticast mode [ 159.291529][T11621] 8021q: adding VLAN 0 to HW filter on device bond16 [ 159.299226][T11621] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 159.325620][T11621] bond17: entered promiscuous mode [ 159.331093][T11621] bond17: entered allmulticast mode [ 159.337391][T11621] 8021q: adding VLAN 0 to HW filter on device bond17 [ 159.345483][T11621] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 159.374122][T11621] bond18: entered promiscuous mode [ 159.379466][T11621] bond18: entered allmulticast mode [ 159.385045][T11621] 8021q: adding VLAN 0 to HW filter on device bond18 [ 159.395642][T11682] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 159.395697][T11680] IPVS: stopping backup sync thread 11682 ... [ 159.413410][T11621] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 159.436548][T11621] bond19: entered promiscuous mode [ 159.441704][T11621] bond19: entered allmulticast mode [ 159.447422][T11621] 8021q: adding VLAN 0 to HW filter on device bond19 [ 159.692960][T11710] netlink: 'syz.0.1595': attribute type 17 has an invalid length. [ 159.957543][T11734] tipc: Enabling of bearer rejected, failed to enable media [ 160.113683][T11754] tipc: Enabling of bearer rejected, already enabled [ 160.290513][T11769] gtp1: entered promiscuous mode [ 160.296049][T11769] gtp1: entered allmulticast mode [ 160.384794][T11763] netlink: 'syz.0.1608': attribute type 1 has an invalid length. [ 160.404085][T11763] nbd: error processing sock list [ 160.412971][T11763] block nbd0: shutting down sockets [ 160.741713][T11808] bridge0: port 1(batadv0) entered disabled state [ 160.793485][T11810] netlink: 'syz.4.1621': attribute type 1 has an invalid length. [ 161.009213][T11812] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 161.107456][T11815] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 161.394142][T11826] tipc: Enabled bearer , priority 0 [ 161.416153][T11826] syzkaller0: entered promiscuous mode [ 161.421866][T11826] syzkaller0: entered allmulticast mode [ 161.444324][T11826] tipc: Resetting bearer [ 161.456592][T11825] tipc: Resetting bearer [ 161.489262][T11825] tipc: Disabling bearer [ 161.739177][T11849] vlan2: entered promiscuous mode [ 161.745284][T11849] macvtap0: entered promiscuous mode [ 162.019152][T11849] __nla_validate_parse: 32 callbacks suppressed [ 162.019171][T11849] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1632'. [ 162.462358][T11841] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 162.469112][T11841] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 162.489003][T11841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 162.513999][T11841] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 162.545382][T11841] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 162.556960][T11841] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 162.569784][T11841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 162.577810][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1651'. [ 162.585196][T11841] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 162.597319][T11927] team0: Port device bridge0 removed [ 162.608614][T11927] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1652'. [ 162.617939][T11927] team0: Mode changed to "broadcast" [ 162.624315][T11841] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 162.625117][T11927] tipc: Enabled bearer , priority 0 [ 162.637292][T11841] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 162.868045][T11947] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1659'. [ 162.877852][T11951] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1659'. [ 162.986577][T11958] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 163.231961][T11968] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1663'. [ 163.393348][T11975] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 163.450751][T11980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1666'. [ 163.641134][T11985] unknown channel width for channel at 909000KHz? [ 163.673486][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 163.682606][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1670'. [ 163.715470][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 163.725991][T11993] netlink: 'syz.0.1669': attribute type 12 has an invalid length. [ 163.741745][T11405] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.750960][T10439] tipc: Node number set to 88318632 [ 163.758276][T11993] netlink: 'syz.0.1669': attribute type 12 has an invalid length. [ 163.766747][T11405] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.779038][T11405] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.787699][T11405] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.013253][T12019] netlink: 'syz.0.1679': attribute type 2 has an invalid length. [ 164.027456][T12019] netlink: 'syz.0.1679': attribute type 1 has an invalid length. [ 164.219647][T12029] ip6tnl1: entered promiscuous mode [ 165.095429][T12071] tipc: Resetting bearer [ 165.106465][T11404] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.125300][T11404] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 165.135078][T11404] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.144147][T11404] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 165.152992][T11404] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.162065][T11404] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 165.171046][T11404] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.180233][T11404] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 165.206771][T12077] netlink: 'syz.2.1693': attribute type 10 has an invalid length. [ 165.370756][T12091] bridge5: port 1(veth5) entered blocking state [ 165.378469][T12091] bridge5: port 1(veth5) entered disabled state [ 165.385889][T12091] veth5: entered allmulticast mode [ 165.391767][T12091] veth5: entered promiscuous mode [ 165.401036][T12090] bridge5: port 2(veth0_to_bond) entered blocking state [ 165.408137][T12090] bridge5: port 2(veth0_to_bond) entered disabled state [ 165.415343][T12090] veth0_to_bond: entered allmulticast mode [ 165.421843][T12090] veth0_to_bond: entered promiscuous mode [ 165.450549][T12095] tipc: Enabled bearer , priority 0 [ 165.458357][T12095] syzkaller0: entered promiscuous mode [ 165.464561][T12095] syzkaller0: entered allmulticast mode [ 165.477143][T12095] tipc: Resetting bearer [ 165.484952][T12094] tipc: Resetting bearer [ 165.492945][T12094] tipc: Disabling bearer [ 165.748220][T12129] netlink: 'syz.3.1709': attribute type 11 has an invalid length. [ 165.873350][T12138] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 165.949385][T12143] syz_tun: entered allmulticast mode [ 166.054050][T12142] syz_tun: left allmulticast mode [ 166.389645][T12172] netlink: 'syz.3.1717': attribute type 1 has an invalid length. [ 166.580914][T12185] netlink: 'syz.3.1721': attribute type 1 has an invalid length. [ 166.592434][T12185] netlink: 'syz.3.1721': attribute type 4 has an invalid length. [ 166.628049][T12185] 8021q: adding VLAN 0 to HW filter on device à [ 166.638857][T12185] net_ratelimit: 1 callbacks suppressed [ 166.638916][T12185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.694135][T10456] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 166.800804][T11408] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 166.893214][T12197] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.912654][T12191] ªªªªªª: renamed from wg2 (while UP) [ 166.967507][T12197] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.031815][T12197] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.048755][T12210] __nla_validate_parse: 43 callbacks suppressed [ 167.048774][T12210] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1730'. [ 167.065681][T10454] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 167.113439][T12197] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.137123][T12215] netlink: 'syz.1.1732': attribute type 1 has an invalid length. [ 167.157611][T12215] geneve2: entered promiscuous mode [ 167.227771][T11399] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.246496][T11405] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.270234][T11405] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.273040][T12224] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1734'. [ 167.302079][T11399] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.361889][T12233] veth0_vlan: left promiscuous mode [ 167.382039][T12233] veth0_vlan: entered promiscuous mode [ 167.392410][T12233] team0: Device veth0_vlan failed to register rx_handler [ 167.406088][T12235] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1738'. [ 167.432952][T12227] tipc: Enabling of bearer rejected, failed to enable media [ 167.495632][T12244] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.512692][T12244] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.613477][T12258] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1744'. [ 167.615874][T12253] 8021q: adding VLAN 0 to HW filter on device bond20 [ 167.634968][T12255] bond20: (slave batadv3): Opening slave failed [ 167.818126][T12278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1749'. [ 167.828859][T12278] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1749'. [ 167.855355][T11404] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 167.872742][T11404] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 167.910744][T12292] sctp: [Deprecated]: syz.0.1753 (pid 12292) Use of int in maxseg socket option. [ 167.910744][T12292] Use struct sctp_assoc_value instead [ 167.926446][T12288] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1751'. [ 168.070056][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 168.082051][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 168.163019][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1758'. [ 168.178863][T12313] macsec1: entered promiscuous mode [ 168.185343][T12313] macvlan1: entered promiscuous mode [ 168.192113][T12313] macvlan1: left promiscuous mode [ 168.444170][ T5915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 168.620423][T12336] tipc: Enabling of bearer rejected, already enabled [ 168.675429][T12337] tipc: Enabling of bearer rejected, already enabled [ 169.532547][T12366] à (unregistering): Released all slaves [ 170.005713][T12399] tipc: Enabled bearer , priority 0 [ 170.024884][T12399] syzkaller0: entered promiscuous mode [ 170.030425][T12399] syzkaller0: entered allmulticast mode [ 170.061042][T12399] tipc: Resetting bearer [ 170.082097][T12405] bridge4: entered allmulticast mode [ 170.088984][T12398] tipc: Resetting bearer [ 170.107060][T12398] tipc: Disabling bearer [ 170.338404][T12430] tipc: Enabled bearer , priority 6 [ 170.418308][T12436] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa:0:20:0, load rds_tcp or rds_rdma? [ 170.448843][T12436] gretap2: entered promiscuous mode [ 170.511003][T12448] validate_nla: 5 callbacks suppressed [ 170.511022][T12448] netlink: 'syz.1.1801': attribute type 10 has an invalid length. [ 170.536407][T12448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.546107][T12448] Ã: (slave batadv0): Enslaving as an active interface with an up link [ 170.558560][T12433] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 170.652774][T12457] syzkaller1: entered allmulticast mode [ 170.680544][T12459] Unsupported ieee802154 address type: 0 [ 170.687839][T12459] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 170.699703][T12459] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 170.929604][T12469] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 171.659062][T12500] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 171.745682][T12503] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 171.804145][T12508] netlink: 'syz.3.1819': attribute type 1 has an invalid length. [ 171.859364][T12508] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 171.874359][T12508] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 171.912008][T12508] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 171.932457][T12514] netlink: 'syz.2.1821': attribute type 11 has an invalid length. [ 172.143357][T12529] __nla_validate_parse: 46 callbacks suppressed [ 172.143375][T12529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1826'. [ 172.211171][T12537] netlink: zone id is out of range [ 172.236587][T12537] netlink: zone id is out of range [ 172.243291][T12537] netlink: zone id is out of range [ 172.248652][T12537] netlink: zone id is out of range [ 172.253784][T12537] netlink: zone id is out of range [ 172.260795][T12537] netlink: zone id is out of range [ 172.277979][T12537] netlink: set zone limit has 4 unknown bytes [ 172.314112][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 172.361032][T12549] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1830'. [ 172.559499][T12555] syzkaller1: entered promiscuous mode [ 172.565965][T12555] syzkaller1: entered allmulticast mode [ 172.820209][T12579] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 172.951638][T12586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1841'. [ 173.114102][T12598] sctp: [Deprecated]: syz.1.1846 (pid 12598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.114102][T12598] Use struct sctp_sack_info instead [ 173.186721][T12603] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 173.675409][T12617] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1850'. [ 174.016532][T12628] tipc: Enabled bearer , priority 0 [ 174.077998][T12627] tipc: Disabling bearer [ 174.224434][T12631] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 174.631298][T12657] netlink: 'syz.2.1860': attribute type 5 has an invalid length. [ 174.639595][T12657] netlink: 'syz.2.1860': attribute type 7 has an invalid length. [ 174.666563][T12657] : entered promiscuous mode [ 174.991529][T12670] tipc: Enabled bearer , priority 0 [ 175.032130][T12670] tipc: Disabling bearer [ 175.044392][T12677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1866'. [ 175.204784][T12694] sctp: [Deprecated]: syz.2.1869 (pid 12694) Use of int in max_burst socket option. [ 175.204784][T12694] Use struct sctp_assoc_value instead [ 175.253266][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 175.302700][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1869'. [ 175.312352][T12694] netlink: 'syz.2.1869': attribute type 18 has an invalid length. [ 175.360894][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1871'. [ 175.458651][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1871'. [ 175.583511][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1871'. [ 175.634799][T12717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.742479][T12722] openvswitch: netlink: Message has 20 unknown bytes. [ 175.767504][T12720] pim6reg: entered allmulticast mode [ 176.453463][T12777] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 177.026212][T12809] syzkaller1: entered promiscuous mode [ 177.048111][T12809] syzkaller1: entered allmulticast mode [ 177.202472][T12814] __nla_validate_parse: 8 callbacks suppressed [ 177.202493][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1907'. [ 177.317881][T12820] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1910'. [ 177.479678][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 177.493617][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'. [ 177.544740][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1912'. [ 177.554020][T12831] netlink: 'syz.2.1912': attribute type 19 has an invalid length. [ 177.613274][T12836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1914'. [ 177.695318][T12836] net_ratelimit: 1 callbacks suppressed [ 177.695337][T12836] openvswitch: netlink: Message has 16 unknown bytes. [ 177.724894][T12836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1914'. [ 177.768810][T12836] IPv6: sit2: Disabled Multicast RS [ 177.780748][T12836] sit2: entered allmulticast mode [ 177.824634][T12843] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 177.899100][T12850] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1919'. [ 177.927387][T12850] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1919'. [ 178.301335][T12852] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 178.481806][T12880] netlink: 'syz.4.1923': attribute type 2 has an invalid length. [ 178.955418][T12906] sock: sock_timestamping_bind_phc: sock not bind to device [ 179.032947][T12868] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 179.236100][T12918] FAULT_INJECTION: forcing a failure. [ 179.236100][T12918] name failslab, interval 1, probability 0, space 0, times 0 [ 179.254034][T12918] CPU: 1 UID: 0 PID: 12918 Comm: syz.3.1931 Not tainted syzkaller #0 PREEMPT(full) [ 179.254060][T12918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.254071][T12918] Call Trace: [ 179.254078][T12918] [ 179.254085][T12918] dump_stack_lvl+0x189/0x250 [ 179.254111][T12918] ? __pfx____ratelimit+0x10/0x10 [ 179.254134][T12918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.254161][T12918] ? __pfx__printk+0x10/0x10 [ 179.254185][T12918] ? fs_reclaim_acquire+0x7d/0x100 [ 179.254208][T12918] ? __pfx___might_resched+0x10/0x10 [ 179.254225][T12918] ? lock_acquire+0x5f/0x360 [ 179.254249][T12918] should_fail_ex+0x414/0x560 [ 179.254272][T12918] should_failslab+0xa8/0x100 [ 179.254296][T12918] __kmalloc_cache_noprof+0x70/0x3d0 [ 179.254317][T12918] ? wakeup_source_register+0x5b/0x380 [ 179.254337][T12918] wakeup_source_register+0x5b/0x380 [ 179.254355][T12918] ep_insert+0xff3/0x19e0 [ 179.254384][T12918] ? __pfx_ep_insert+0x10/0x10 [ 179.254412][T12918] ? bpf_lsm_capable+0x9/0x20 [ 179.254437][T12918] do_epoll_ctl+0x7f4/0xe80 [ 179.254461][T12918] __x64_sys_epoll_ctl+0x163/0x1a0 [ 179.254490][T12918] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 179.254512][T12918] ? rcu_is_watching+0x15/0xb0 [ 179.254530][T12918] ? rcu_is_watching+0x15/0xb0 [ 179.254548][T12918] do_syscall_64+0xfa/0x3b0 [ 179.254564][T12918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.254581][T12918] ? clear_bhb_loop+0x60/0xb0 [ 179.254600][T12918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.254616][T12918] RIP: 0033:0x7f3b1db8ebe9 [ 179.254632][T12918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.254647][T12918] RSP: 002b:00007f3b1ea51038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 179.254667][T12918] RAX: ffffffffffffffda RBX: 00007f3b1ddb5fa0 RCX: 00007f3b1db8ebe9 [ 179.254680][T12918] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 179.254690][T12918] RBP: 00007f3b1ea51090 R08: 0000000000000000 R09: 0000000000000000 [ 179.254701][T12918] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 179.254712][T12918] R13: 00007f3b1ddb6038 R14: 00007f3b1ddb5fa0 R15: 00007ffd22015838 [ 179.254733][T12918] [ 179.538618][T12926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1934'. [ 179.566669][T12886] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 179.673594][T12931] netlink: 'syz.3.1936': attribute type 17 has an invalid length. [ 179.682135][T12931] netlink: 'syz.3.1936': attribute type 27 has an invalid length. [ 180.074716][T12953] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 180.630840][T12961] FAULT_INJECTION: forcing a failure. [ 180.630840][T12961] name failslab, interval 1, probability 0, space 0, times 0 [ 180.648806][T12961] CPU: 1 UID: 0 PID: 12961 Comm: syz.3.1943 Not tainted syzkaller #0 PREEMPT(full) [ 180.648833][T12961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.648843][T12961] Call Trace: [ 180.648855][T12961] [ 180.648862][T12961] dump_stack_lvl+0x189/0x250 [ 180.648887][T12961] ? __pfx____ratelimit+0x10/0x10 [ 180.648911][T12961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.648931][T12961] ? __pfx__printk+0x10/0x10 [ 180.648955][T12961] ? __pfx___might_resched+0x10/0x10 [ 180.648972][T12961] ? lock_acquire+0x5f/0x360 [ 180.648996][T12961] should_fail_ex+0x414/0x560 [ 180.649020][T12961] should_failslab+0xa8/0x100 [ 180.649043][T12961] __kmalloc_cache_noprof+0x70/0x3d0 [ 180.649066][T12961] ? wakeup_source_sysfs_add+0x57/0x280 [ 180.649088][T12961] wakeup_source_sysfs_add+0x57/0x280 [ 180.649109][T12961] wakeup_source_register+0x18a/0x380 [ 180.649134][T12961] ep_insert+0xff3/0x19e0 [ 180.649164][T12961] ? __pfx_ep_insert+0x10/0x10 [ 180.649192][T12961] ? bpf_lsm_capable+0x9/0x20 [ 180.649218][T12961] do_epoll_ctl+0x7f4/0xe80 [ 180.649245][T12961] __x64_sys_epoll_ctl+0x163/0x1a0 [ 180.649270][T12961] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 180.649292][T12961] ? rcu_is_watching+0x15/0xb0 [ 180.649312][T12961] ? rcu_is_watching+0x15/0xb0 [ 180.649330][T12961] do_syscall_64+0xfa/0x3b0 [ 180.649346][T12961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.649363][T12961] ? clear_bhb_loop+0x60/0xb0 [ 180.649382][T12961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.649400][T12961] RIP: 0033:0x7f3b1db8ebe9 [ 180.649415][T12961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.649431][T12961] RSP: 002b:00007f3b1ea51038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 180.649450][T12961] RAX: ffffffffffffffda RBX: 00007f3b1ddb5fa0 RCX: 00007f3b1db8ebe9 [ 180.649463][T12961] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 180.649474][T12961] RBP: 00007f3b1ea51090 R08: 0000000000000000 R09: 0000000000000000 [ 180.649485][T12961] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 180.649497][T12961] R13: 00007f3b1ddb6038 R14: 00007f3b1ddb5fa0 R15: 00007ffd22015838 [ 180.649518][T12961] [ 181.007395][T12969] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 181.443202][T13007] FAULT_INJECTION: forcing a failure. [ 181.443202][T13007] name failslab, interval 1, probability 0, space 0, times 0 [ 181.492666][T13007] CPU: 0 UID: 0 PID: 13007 Comm: syz.2.1955 Not tainted syzkaller #0 PREEMPT(full) [ 181.492697][T13007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.492708][T13007] Call Trace: [ 181.492714][T13007] [ 181.492722][T13007] dump_stack_lvl+0x189/0x250 [ 181.492747][T13007] ? __pfx____ratelimit+0x10/0x10 [ 181.492771][T13007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.492790][T13007] ? __pfx__printk+0x10/0x10 [ 181.492814][T13007] ? __pfx___might_resched+0x10/0x10 [ 181.492830][T13007] ? lock_acquire+0x5f/0x360 [ 181.492854][T13007] should_fail_ex+0x414/0x560 [ 181.492878][T13007] should_failslab+0xa8/0x100 [ 181.492902][T13007] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 181.492926][T13007] ? wakeup_source_register+0x77/0x380 [ 181.492945][T13007] kstrdup+0x42/0x100 [ 181.492964][T13007] wakeup_source_register+0x77/0x380 [ 181.492983][T13007] ep_insert+0xff3/0x19e0 [ 181.493012][T13007] ? __pfx_ep_insert+0x10/0x10 [ 181.493041][T13007] ? bpf_lsm_capable+0x9/0x20 [ 181.493082][T13007] do_epoll_ctl+0x7f4/0xe80 [ 181.493108][T13007] __x64_sys_epoll_ctl+0x163/0x1a0 [ 181.493133][T13007] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 181.493155][T13007] ? rcu_is_watching+0x15/0xb0 [ 181.493175][T13007] ? rcu_is_watching+0x15/0xb0 [ 181.493192][T13007] do_syscall_64+0xfa/0x3b0 [ 181.493209][T13007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.493226][T13007] ? clear_bhb_loop+0x60/0xb0 [ 181.493245][T13007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.493262][T13007] RIP: 0033:0x7f00fcd8ebe9 [ 181.493278][T13007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.493293][T13007] RSP: 002b:00007f00fdb35038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 181.493313][T13007] RAX: ffffffffffffffda RBX: 00007f00fcfb5fa0 RCX: 00007f00fcd8ebe9 [ 181.493326][T13007] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 181.493337][T13007] RBP: 00007f00fdb35090 R08: 0000000000000000 R09: 0000000000000000 [ 181.493348][T13007] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 181.493359][T13007] R13: 00007f00fcfb6038 R14: 00007f00fcfb5fa0 R15: 00007ffd89702848 [ 181.493380][T13007] [ 181.543933][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 182.238562][T13020] 0ªX¹¦À: left allmulticast mode [ 182.244004][T13020] batadv0: left promiscuous mode [ 182.249096][T13020] batadv0: left allmulticast mode [ 182.673076][T13020] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 182.707245][T13020] bridge1: left promiscuous mode [ 182.713337][T13020] bridge1: left allmulticast mode [ 182.727206][T13020] geneve2: left promiscuous mode [ 182.735486][T13020] bond2: left promiscuous mode [ 182.740280][T13020] bond2: left allmulticast mode [ 182.754357][T13020] gretap1: left promiscuous mode [ 182.772463][T13020] veth5: left promiscuous mode [ 182.780486][T13020] ip6tnl1: left promiscuous mode [ 182.788646][T12970] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 182.840511][T13026] tipc: Resetting bearer [ 182.913071][T13026] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 182.947763][T11404] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.003255][T11404] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.023780][T13018] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 183.030535][T11404] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.060647][T11404] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.206249][T13012] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 183.857204][T13060] FAULT_INJECTION: forcing a failure. [ 183.857204][T13060] name failslab, interval 1, probability 0, space 0, times 0 [ 183.879099][T13060] CPU: 1 UID: 0 PID: 13060 Comm: syz.4.1970 Not tainted syzkaller #0 PREEMPT(full) [ 183.879127][T13060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.879137][T13060] Call Trace: [ 183.879143][T13060] [ 183.879151][T13060] dump_stack_lvl+0x189/0x250 [ 183.879176][T13060] ? __pfx____ratelimit+0x10/0x10 [ 183.879199][T13060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.879219][T13060] ? __pfx__printk+0x10/0x10 [ 183.879239][T13060] ? unwind_next_frame+0xa5/0x2390 [ 183.879260][T13060] ? __pfx___might_resched+0x10/0x10 [ 183.879277][T13060] ? lock_acquire+0x5f/0x360 [ 183.879301][T13060] should_fail_ex+0x414/0x560 [ 183.879325][T13060] should_failslab+0xa8/0x100 [ 183.879349][T13060] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 183.879372][T13060] ? __kernfs_new_node+0x9c/0x7e0 [ 183.879391][T13060] ? is_bpf_text_address+0x292/0x2b0 [ 183.879416][T13060] kstrdup+0x42/0x100 [ 183.879434][T13060] __kernfs_new_node+0x9c/0x7e0 [ 183.879452][T13060] ? unwind_get_return_address+0x4d/0x90 [ 183.879470][T13060] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 183.879491][T13060] ? arch_stack_walk+0xfc/0x150 [ 183.879512][T13060] ? __pfx___kernfs_new_node+0x10/0x10 [ 183.879530][T13060] ? kernfs_root+0x1c/0x230 [ 183.879547][T13060] ? rcu_is_watching+0x15/0xb0 [ 183.879563][T13060] ? kernfs_root+0x1c/0x230 [ 183.879591][T13060] ? rcu_is_watching+0x15/0xb0 [ 183.879606][T13060] ? kernfs_root+0x1c/0x230 [ 183.879623][T13060] ? lock_release+0x4b/0x3e0 [ 183.879645][T13060] ? kernfs_root+0x1c/0x230 [ 183.879662][T13060] ? kernfs_root+0x1c/0x230 [ 183.879681][T13060] kernfs_new_node+0x102/0x210 [ 183.879703][T13060] kernfs_create_dir_ns+0x44/0x130 [ 183.879724][T13060] sysfs_create_dir_ns+0x123/0x280 [ 183.879743][T13060] ? rcu_is_watching+0x15/0xb0 [ 183.879759][T13060] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 183.879777][T13060] ? do_raw_spin_unlock+0x122/0x240 [ 183.879799][T13060] kobject_add_internal+0x59f/0xb40 [ 183.879821][T13060] kobject_add+0x155/0x220 [ 183.879838][T13060] ? __pfx_kobject_add+0x10/0x10 [ 183.879854][T13060] ? do_raw_spin_unlock+0x122/0x240 [ 183.879876][T13060] ? get_device_parent+0x366/0x3a0 [ 183.879894][T13060] device_add+0x408/0xb50 [ 183.879910][T13060] ? device_initialize+0x24b/0x440 [ 183.879928][T13060] wakeup_source_sysfs_add+0x1af/0x280 [ 183.879948][T13060] wakeup_source_register+0x18a/0x380 [ 183.879975][T13060] ep_insert+0xff3/0x19e0 [ 183.880004][T13060] ? __pfx_ep_insert+0x10/0x10 [ 183.880032][T13060] ? bpf_lsm_capable+0x9/0x20 [ 183.880061][T13060] do_epoll_ctl+0x7f4/0xe80 [ 183.880088][T13060] __x64_sys_epoll_ctl+0x163/0x1a0 [ 183.880113][T13060] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 183.880136][T13060] ? rcu_is_watching+0x15/0xb0 [ 183.880153][T13060] do_syscall_64+0xfa/0x3b0 [ 183.880168][T13060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.880184][T13060] ? clear_bhb_loop+0x60/0xb0 [ 183.880200][T13060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.880215][T13060] RIP: 0033:0x7f3418b8ebe9 [ 183.880230][T13060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.880243][T13060] RSP: 002b:00007f3419951038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 183.880260][T13060] RAX: ffffffffffffffda RBX: 00007f3418db5fa0 RCX: 00007f3418b8ebe9 [ 183.880273][T13060] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 183.880289][T13060] RBP: 00007f3419951090 R08: 0000000000000000 R09: 0000000000000000 [ 183.880301][T13060] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 183.880312][T13060] R13: 00007f3418db6038 R14: 00007f3418db5fa0 R15: 00007ffc058e9e78 [ 183.880332][T13060] [ 183.880488][T13060] kobject: kobject_add_internal failed for wakeup13 (error: -12 parent: wakeup) [ 184.364602][T13071] ipvlan3: entered promiscuous mode [ 184.502394][T13078] __nla_validate_parse: 6 callbacks suppressed [ 184.502414][T13078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1974'. [ 184.547594][T13078] openvswitch: netlink: Message has 24 unknown bytes. [ 184.555571][T13078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.676431][T13087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'. [ 184.687606][T13087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1978'. [ 184.830230][T13087] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1978'. [ 184.954803][T13099] FAULT_INJECTION: forcing a failure. [ 184.954803][T13099] name failslab, interval 1, probability 0, space 0, times 0 [ 184.978716][T13097] openvswitch: netlink: Message has 8 unknown bytes. [ 184.988506][T13099] CPU: 1 UID: 0 PID: 13099 Comm: syz.4.1983 Not tainted syzkaller #0 PREEMPT(full) [ 184.988532][T13099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.988543][T13099] Call Trace: [ 184.988550][T13099] [ 184.988558][T13099] dump_stack_lvl+0x189/0x250 [ 184.988582][T13099] ? __pfx____ratelimit+0x10/0x10 [ 184.988606][T13099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.988625][T13099] ? __pfx__printk+0x10/0x10 [ 184.988647][T13099] ? rcu_is_watching+0x15/0xb0 [ 184.988666][T13099] ? __pfx___might_resched+0x10/0x10 [ 184.988682][T13099] ? lock_acquire+0x5f/0x360 [ 184.988707][T13099] should_fail_ex+0x414/0x560 [ 184.988736][T13099] should_failslab+0xa8/0x100 [ 184.988777][T13099] kmem_cache_alloc_noprof+0x73/0x3c0 [ 184.988799][T13099] ? __kernfs_new_node+0xd7/0x7e0 [ 184.988820][T13099] __kernfs_new_node+0xd7/0x7e0 [ 184.988839][T13099] ? up_write+0x1c4/0x420 [ 184.988857][T13099] ? kernfs_activate_one+0x238/0x370 [ 184.988878][T13099] ? __pfx___kernfs_new_node+0x10/0x10 [ 184.988897][T13099] ? rcu_is_watching+0x15/0xb0 [ 184.988913][T13099] ? kernfs_root+0x1c/0x230 [ 184.988931][T13099] ? rcu_is_watching+0x15/0xb0 [ 184.988947][T13099] ? kernfs_root+0x1c/0x230 [ 184.988964][T13099] ? lock_release+0x4b/0x3e0 [ 184.988986][T13099] ? sysfs_create_dir_ns+0x123/0x280 [ 184.989003][T13099] ? kernfs_root+0x1c/0x230 [ 184.989020][T13099] ? kernfs_root+0x1c/0x230 [ 184.989040][T13099] kernfs_new_node+0x102/0x210 [ 184.989061][T13099] __kernfs_create_file+0x4b/0x2e0 [ 184.989085][T13099] sysfs_add_file_mode_ns+0x238/0x300 [ 184.989113][T13099] sysfs_create_file_ns+0x128/0x1a0 [ 184.989137][T13099] ? __pfx___up_read+0x10/0x10 [ 184.989155][T13099] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 184.989181][T13099] ? __dev_fwnode+0x50/0x80 [ 184.989198][T13099] ? device_create_file+0xf4/0x1c0 [ 184.989216][T13099] device_add+0x440/0xb50 [ 184.989232][T13099] ? device_initialize+0x24b/0x440 [ 184.989250][T13099] wakeup_source_sysfs_add+0x1af/0x280 [ 184.989271][T13099] wakeup_source_register+0x18a/0x380 [ 184.989291][T13099] ep_insert+0xff3/0x19e0 [ 184.989320][T13099] ? __pfx_ep_insert+0x10/0x10 [ 184.989348][T13099] ? bpf_lsm_capable+0x9/0x20 [ 184.989374][T13099] do_epoll_ctl+0x7f4/0xe80 [ 184.989401][T13099] __x64_sys_epoll_ctl+0x163/0x1a0 [ 184.989426][T13099] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 184.989448][T13099] ? rcu_is_watching+0x15/0xb0 [ 184.989467][T13099] ? rcu_is_watching+0x15/0xb0 [ 184.989485][T13099] do_syscall_64+0xfa/0x3b0 [ 184.989502][T13099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.989520][T13099] ? clear_bhb_loop+0x60/0xb0 [ 184.989539][T13099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.989556][T13099] RIP: 0033:0x7f3418b8ebe9 [ 184.989572][T13099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.989588][T13099] RSP: 002b:00007f3419951038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 184.989607][T13099] RAX: ffffffffffffffda RBX: 00007f3418db5fa0 RCX: 00007f3418b8ebe9 [ 184.989621][T13099] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 184.989631][T13099] RBP: 00007f3419951090 R08: 0000000000000000 R09: 0000000000000000 [ 184.989643][T13099] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 184.989654][T13099] R13: 00007f3418db6038 R14: 00007f3418db5fa0 R15: 00007ffc058e9e78 [ 184.989674][T13099] [ 185.437103][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'. [ 185.466468][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'. [ 185.494281][T11399] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.502669][T11399] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.511241][T11399] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.519534][T11399] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.533368][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'. [ 185.543389][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'. [ 185.582380][T13122] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 185.673392][T13134] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1995'. [ 185.708787][T13127] tipc: Enabled bearer , priority 0 [ 185.721120][T13127] syzkaller0: entered promiscuous mode [ 185.732336][T13127] syzkaller0: entered allmulticast mode [ 185.749854][T13130] netlink: 'syz.2.1992': attribute type 4 has an invalid length. [ 185.793944][T13126] tipc: Resetting bearer [ 185.818000][T13144] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1997'. [ 185.835353][T13126] tipc: Disabling bearer [ 185.921593][T13151] FAULT_INJECTION: forcing a failure. [ 185.921593][T13151] name failslab, interval 1, probability 0, space 0, times 0 [ 185.941619][T13151] CPU: 0 UID: 0 PID: 13151 Comm: syz.4.2000 Not tainted syzkaller #0 PREEMPT(full) [ 185.941646][T13151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.941657][T13151] Call Trace: [ 185.941664][T13151] [ 185.941671][T13151] dump_stack_lvl+0x189/0x250 [ 185.941704][T13151] ? __pfx____ratelimit+0x10/0x10 [ 185.941734][T13151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.941753][T13151] ? __pfx__printk+0x10/0x10 [ 185.941776][T13151] ? rcu_is_watching+0x15/0xb0 [ 185.941794][T13151] ? __pfx___might_resched+0x10/0x10 [ 185.941811][T13151] ? lock_acquire+0x5f/0x360 [ 185.941835][T13151] should_fail_ex+0x414/0x560 [ 185.941859][T13151] should_failslab+0xa8/0x100 [ 185.941883][T13151] kmem_cache_alloc_noprof+0x73/0x3c0 [ 185.941904][T13151] ? __kernfs_new_node+0xd7/0x7e0 [ 185.941927][T13151] __kernfs_new_node+0xd7/0x7e0 [ 185.941950][T13151] ? up_write+0x1c4/0x420 [ 185.941968][T13151] ? kernfs_activate_one+0x238/0x370 [ 185.941990][T13151] ? __pfx___kernfs_new_node+0x10/0x10 [ 185.942008][T13151] ? rcu_is_watching+0x15/0xb0 [ 185.942024][T13151] ? kernfs_root+0x1c/0x230 [ 185.942042][T13151] ? rcu_is_watching+0x15/0xb0 [ 185.942057][T13151] ? kernfs_root+0x1c/0x230 [ 185.942074][T13151] ? lock_release+0x4b/0x3e0 [ 185.942105][T13151] ? sysfs_create_dir_ns+0x123/0x280 [ 185.942123][T13151] ? kernfs_root+0x1c/0x230 [ 185.942139][T13151] ? kernfs_root+0x1c/0x230 [ 185.942159][T13151] kernfs_new_node+0x102/0x210 [ 185.942180][T13151] __kernfs_create_file+0x4b/0x2e0 [ 185.942204][T13151] sysfs_add_file_mode_ns+0x238/0x300 [ 185.942233][T13151] sysfs_create_file_ns+0x128/0x1a0 [ 185.942256][T13151] ? __pfx___up_read+0x10/0x10 [ 185.942274][T13151] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 185.942299][T13151] ? __dev_fwnode+0x50/0x80 [ 185.942316][T13151] ? device_create_file+0xf4/0x1c0 [ 185.942333][T13151] device_add+0x440/0xb50 [ 185.942349][T13151] ? device_initialize+0x24b/0x440 [ 185.942366][T13151] wakeup_source_sysfs_add+0x1af/0x280 [ 185.942387][T13151] wakeup_source_register+0x18a/0x380 [ 185.942406][T13151] ep_insert+0xff3/0x19e0 [ 185.942445][T13151] ? __pfx_ep_insert+0x10/0x10 [ 185.942473][T13151] ? bpf_lsm_capable+0x9/0x20 [ 185.942499][T13151] do_epoll_ctl+0x7f4/0xe80 [ 185.942526][T13151] __x64_sys_epoll_ctl+0x163/0x1a0 [ 185.942550][T13151] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 185.942573][T13151] ? rcu_is_watching+0x15/0xb0 [ 185.942592][T13151] ? rcu_is_watching+0x15/0xb0 [ 185.942610][T13151] do_syscall_64+0xfa/0x3b0 [ 185.942627][T13151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.942644][T13151] ? clear_bhb_loop+0x60/0xb0 [ 185.942666][T13151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.942683][T13151] RIP: 0033:0x7f3418b8ebe9 [ 185.942703][T13151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.942719][T13151] RSP: 002b:00007f3419951038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 185.942739][T13151] RAX: ffffffffffffffda RBX: 00007f3418db5fa0 RCX: 00007f3418b8ebe9 [ 185.942752][T13151] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 185.942763][T13151] RBP: 00007f3419951090 R08: 0000000000000000 R09: 0000000000000000 [ 185.942773][T13151] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 185.942785][T13151] R13: 00007f3418db6038 R14: 00007f3418db5fa0 R15: 00007ffc058e9e78 [ 185.942805][T13151] [ 186.385924][T13166] veth9: entered promiscuous mode [ 186.736594][T13205] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 186.778481][T13216] FAULT_INJECTION: forcing a failure. [ 186.778481][T13216] name failslab, interval 1, probability 0, space 0, times 0 [ 186.848278][T13219] netlink: 'syz.4.2019': attribute type 16 has an invalid length. [ 186.853824][T13216] CPU: 1 UID: 0 PID: 13216 Comm: syz.3.2018 Not tainted syzkaller #0 PREEMPT(full) [ 186.853849][T13216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.853860][T13216] Call Trace: [ 186.853867][T13216] [ 186.853874][T13216] dump_stack_lvl+0x189/0x250 [ 186.853898][T13216] ? __pfx____ratelimit+0x10/0x10 [ 186.853922][T13216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.853941][T13216] ? __pfx__printk+0x10/0x10 [ 186.853963][T13216] ? __pfx___might_resched+0x10/0x10 [ 186.853980][T13216] ? lock_acquire+0x5f/0x360 [ 186.854003][T13216] should_fail_ex+0x414/0x560 [ 186.854027][T13216] should_failslab+0xa8/0x100 [ 186.854050][T13216] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 186.854073][T13216] ? __kernfs_new_node+0x9c/0x7e0 [ 186.854095][T13216] kstrdup+0x42/0x100 [ 186.854112][T13216] __kernfs_new_node+0x9c/0x7e0 [ 186.854130][T13216] ? lock_acquire+0x5f/0x360 [ 186.854151][T13216] ? lock_release+0x4b/0x3e0 [ 186.854174][T13216] ? __pfx___kernfs_new_node+0x10/0x10 [ 186.854192][T13216] ? kernfs_root+0x1c/0x230 [ 186.854210][T13216] ? rcu_is_watching+0x15/0xb0 [ 186.854224][T13216] ? kernfs_root+0x1c/0x230 [ 186.854241][T13216] ? lock_release+0x4b/0x3e0 [ 186.854264][T13216] ? kernfs_root+0x1c/0x230 [ 186.854283][T13216] kernfs_new_node+0x102/0x210 [ 186.854304][T13216] kernfs_create_link+0xa7/0x200 [ 186.854327][T13216] sysfs_do_create_link_sd+0x83/0x110 [ 186.854353][T13216] device_add_class_symlinks+0x1cf/0x240 [ 186.854374][T13216] device_add+0x475/0xb50 [ 186.854389][T13216] ? device_initialize+0x24b/0x440 [ 186.854406][T13216] wakeup_source_sysfs_add+0x1af/0x280 [ 186.854426][T13216] wakeup_source_register+0x18a/0x380 [ 186.854447][T13216] ep_insert+0xff3/0x19e0 [ 186.854477][T13216] ? __pfx_ep_insert+0x10/0x10 [ 186.854504][T13216] ? bpf_lsm_capable+0x9/0x20 [ 186.854529][T13216] do_epoll_ctl+0x7f4/0xe80 [ 186.854554][T13216] __x64_sys_epoll_ctl+0x163/0x1a0 [ 186.854578][T13216] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 186.854599][T13216] ? rcu_is_watching+0x15/0xb0 [ 186.854617][T13216] ? rcu_is_watching+0x15/0xb0 [ 186.854634][T13216] do_syscall_64+0xfa/0x3b0 [ 186.854650][T13216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.854666][T13216] ? clear_bhb_loop+0x60/0xb0 [ 186.854684][T13216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.854700][T13216] RIP: 0033:0x7f3b1db8ebe9 [ 186.854714][T13216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.854729][T13216] RSP: 002b:00007f3b1ea51038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 186.854747][T13216] RAX: ffffffffffffffda RBX: 00007f3b1ddb5fa0 RCX: 00007f3b1db8ebe9 [ 186.854760][T13216] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 186.854770][T13216] RBP: 00007f3b1ea51090 R08: 0000000000000000 R09: 0000000000000000 [ 186.854781][T13216] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 186.854792][T13216] R13: 00007f3b1ddb6038 R14: 00007f3b1ddb5fa0 R15: 00007ffd22015838 [ 186.854812][T13216] [ 186.942275][T13218] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 187.336331][T13236] veth9: entered promiscuous mode [ 187.505652][T13261] FAULT_INJECTION: forcing a failure. [ 187.505652][T13261] name failslab, interval 1, probability 0, space 0, times 0 [ 187.519102][T13261] CPU: 0 UID: 0 PID: 13261 Comm: syz.0.2033 Not tainted syzkaller #0 PREEMPT(full) [ 187.519127][T13261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.519136][T13261] Call Trace: [ 187.519144][T13261] [ 187.519150][T13261] dump_stack_lvl+0x189/0x250 [ 187.519175][T13261] ? __pfx____ratelimit+0x10/0x10 [ 187.519199][T13261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.519219][T13261] ? __pfx__printk+0x10/0x10 [ 187.519242][T13261] ? __pfx___might_resched+0x10/0x10 [ 187.519259][T13261] ? lock_acquire+0x5f/0x360 [ 187.519282][T13261] should_fail_ex+0x414/0x560 [ 187.519306][T13261] should_failslab+0xa8/0x100 [ 187.519330][T13261] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 187.519354][T13261] ? __kernfs_new_node+0x9c/0x7e0 [ 187.519377][T13261] kstrdup+0x42/0x100 [ 187.519394][T13261] __kernfs_new_node+0x9c/0x7e0 [ 187.519414][T13261] ? lock_acquire+0x5f/0x360 [ 187.519436][T13261] ? lock_release+0x4b/0x3e0 [ 187.519460][T13261] ? __pfx___kernfs_new_node+0x10/0x10 [ 187.519479][T13261] ? kernfs_root+0x1c/0x230 [ 187.519497][T13261] ? rcu_is_watching+0x15/0xb0 [ 187.519512][T13261] ? kernfs_root+0x1c/0x230 [ 187.519529][T13261] ? lock_release+0x4b/0x3e0 [ 187.519553][T13261] ? kernfs_root+0x1c/0x230 [ 187.519573][T13261] kernfs_new_node+0x102/0x210 [ 187.519593][T13261] kernfs_create_link+0xa7/0x200 [ 187.519625][T13261] sysfs_do_create_link_sd+0x83/0x110 [ 187.519645][T13261] device_add_class_symlinks+0x1cf/0x240 [ 187.519664][T13261] device_add+0x475/0xb50 [ 187.519680][T13261] ? device_initialize+0x24b/0x440 [ 187.519698][T13261] wakeup_source_sysfs_add+0x1af/0x280 [ 187.519719][T13261] wakeup_source_register+0x18a/0x380 [ 187.519738][T13261] ep_insert+0xff3/0x19e0 [ 187.519767][T13261] ? __pfx_ep_insert+0x10/0x10 [ 187.519794][T13261] ? bpf_lsm_capable+0x9/0x20 [ 187.519817][T13261] do_epoll_ctl+0x7f4/0xe80 [ 187.519839][T13261] __x64_sys_epoll_ctl+0x163/0x1a0 [ 187.519863][T13261] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 187.519884][T13261] ? rcu_is_watching+0x15/0xb0 [ 187.519903][T13261] ? rcu_is_watching+0x15/0xb0 [ 187.519922][T13261] do_syscall_64+0xfa/0x3b0 [ 187.519937][T13261] ? rcu_is_watching+0x15/0xb0 [ 187.519953][T13261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.519970][T13261] ? clear_bhb_loop+0x60/0xb0 [ 187.519989][T13261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.520007][T13261] RIP: 0033:0x7f1e23b8ebe9 [ 187.520023][T13261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.520038][T13261] RSP: 002b:00007f1e2498c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 187.520058][T13261] RAX: ffffffffffffffda RBX: 00007f1e23db5fa0 RCX: 00007f1e23b8ebe9 [ 187.520071][T13261] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 187.520082][T13261] RBP: 00007f1e2498c090 R08: 0000000000000000 R09: 0000000000000000 [ 187.520093][T13261] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 187.520104][T13261] R13: 00007f1e23db6038 R14: 00007f1e23db5fa0 R15: 00007ffc12f25418 [ 187.520125][T13261] [ 188.386423][T13293] vlan2: entered promiscuous mode [ 188.433391][T13295] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 188.439851][T13295] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 188.670907][T13323] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 188.687980][ T5929] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 188.699691][T13325] FAULT_INJECTION: forcing a failure. [ 188.699691][T13325] name failslab, interval 1, probability 0, space 0, times 0 [ 188.713110][T13325] CPU: 0 UID: 0 PID: 13325 Comm: syz.0.2048 Not tainted syzkaller #0 PREEMPT(full) [ 188.713136][T13325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.713146][T13325] Call Trace: [ 188.713153][T13325] [ 188.713159][T13325] dump_stack_lvl+0x189/0x250 [ 188.713182][T13325] ? __pfx____ratelimit+0x10/0x10 [ 188.713205][T13325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.713224][T13325] ? __pfx__printk+0x10/0x10 [ 188.713257][T13325] ? __pfx___might_resched+0x10/0x10 [ 188.713274][T13325] ? lock_acquire+0x5f/0x360 [ 188.713297][T13325] should_fail_ex+0x414/0x560 [ 188.713321][T13325] should_failslab+0xa8/0x100 [ 188.713345][T13325] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 188.713369][T13325] ? __kernfs_new_node+0x9c/0x7e0 [ 188.713390][T13325] kstrdup+0x42/0x100 [ 188.713408][T13325] __kernfs_new_node+0x9c/0x7e0 [ 188.713427][T13325] ? lock_acquire+0x5f/0x360 [ 188.713448][T13325] ? lock_release+0x4b/0x3e0 [ 188.713471][T13325] ? __pfx___kernfs_new_node+0x10/0x10 [ 188.713491][T13325] ? kernfs_root+0x1c/0x230 [ 188.713508][T13325] ? rcu_is_watching+0x15/0xb0 [ 188.713524][T13325] ? kernfs_root+0x1c/0x230 [ 188.713541][T13325] ? lock_release+0x4b/0x3e0 [ 188.713564][T13325] ? kernfs_root+0x1c/0x230 [ 188.713584][T13325] kernfs_new_node+0x102/0x210 [ 188.713604][T13325] kernfs_create_link+0xa7/0x200 [ 188.713628][T13325] sysfs_do_create_link_sd+0x83/0x110 [ 188.713647][T13325] device_add_class_symlinks+0x1cf/0x240 [ 188.713666][T13325] device_add+0x475/0xb50 [ 188.713681][T13325] ? device_initialize+0x24b/0x440 [ 188.713700][T13325] wakeup_source_sysfs_add+0x1af/0x280 [ 188.713720][T13325] wakeup_source_register+0x18a/0x380 [ 188.713738][T13325] ep_insert+0xff3/0x19e0 [ 188.713766][T13325] ? __pfx_ep_insert+0x10/0x10 [ 188.713792][T13325] ? bpf_lsm_capable+0x9/0x20 [ 188.713816][T13325] do_epoll_ctl+0x7f4/0xe80 [ 188.713841][T13325] __x64_sys_epoll_ctl+0x163/0x1a0 [ 188.713865][T13325] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 188.713888][T13325] ? rcu_is_watching+0x15/0xb0 [ 188.713906][T13325] ? rcu_is_watching+0x15/0xb0 [ 188.713924][T13325] do_syscall_64+0xfa/0x3b0 [ 188.713940][T13325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.713958][T13325] ? clear_bhb_loop+0x60/0xb0 [ 188.713977][T13325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.713993][T13325] RIP: 0033:0x7f1e23b8ebe9 [ 188.714009][T13325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.714024][T13325] RSP: 002b:00007f1e2498c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 188.714043][T13325] RAX: ffffffffffffffda RBX: 00007f1e23db5fa0 RCX: 00007f1e23b8ebe9 [ 188.714056][T13325] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 188.714066][T13325] RBP: 00007f1e2498c090 R08: 0000000000000000 R09: 0000000000000000 [ 188.714078][T13325] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 188.714089][T13325] R13: 00007f1e23db6038 R14: 00007f1e23db5fa0 R15: 00007ffc12f25418 [ 188.714110][T13325] [ 189.024530][ T5929] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 189.162979][T13339] 8021q: adding VLAN 0 to HW filter on device bond22 [ 189.180807][T13339] bond0: (slave bond22): Enslaving as an active interface with an up link [ 189.191302][T13331] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 189.290179][T13350] netlink: 'syz.4.2056': attribute type 7 has an invalid length. [ 189.513020][T13378] FAULT_INJECTION: forcing a failure. [ 189.513020][T13378] name failslab, interval 1, probability 0, space 0, times 0 [ 189.530084][T13378] CPU: 1 UID: 0 PID: 13378 Comm: syz.0.2062 Not tainted syzkaller #0 PREEMPT(full) [ 189.530108][T13378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.530118][T13378] Call Trace: [ 189.530125][T13378] [ 189.530132][T13378] dump_stack_lvl+0x189/0x250 [ 189.530165][T13378] ? __pfx____ratelimit+0x10/0x10 [ 189.530188][T13378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.530207][T13378] ? __pfx__printk+0x10/0x10 [ 189.530229][T13378] ? __pfx___might_resched+0x10/0x10 [ 189.530246][T13378] ? lock_acquire+0x5f/0x360 [ 189.530270][T13378] should_fail_ex+0x414/0x560 [ 189.530293][T13378] should_failslab+0xa8/0x100 [ 189.530316][T13378] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 189.530338][T13378] ? __kernfs_new_node+0x9c/0x7e0 [ 189.530359][T13378] kstrdup+0x42/0x100 [ 189.530376][T13378] __kernfs_new_node+0x9c/0x7e0 [ 189.530395][T13378] ? lock_acquire+0x5f/0x360 [ 189.530416][T13378] ? lock_release+0x4b/0x3e0 [ 189.530439][T13378] ? __pfx___kernfs_new_node+0x10/0x10 [ 189.530458][T13378] ? kernfs_root+0x1c/0x230 [ 189.530476][T13378] ? rcu_is_watching+0x15/0xb0 [ 189.530492][T13378] ? kernfs_root+0x1c/0x230 [ 189.530516][T13378] ? lock_release+0x4b/0x3e0 [ 189.530540][T13378] ? kernfs_root+0x1c/0x230 [ 189.530559][T13378] kernfs_new_node+0x102/0x210 [ 189.530581][T13378] kernfs_create_link+0xa7/0x200 [ 189.530605][T13378] sysfs_do_create_link_sd+0x83/0x110 [ 189.530623][T13378] device_add_class_symlinks+0x1cf/0x240 [ 189.530642][T13378] device_add+0x475/0xb50 [ 189.530657][T13378] ? device_initialize+0x24b/0x440 [ 189.530674][T13378] wakeup_source_sysfs_add+0x1af/0x280 [ 189.530695][T13378] wakeup_source_register+0x18a/0x380 [ 189.530712][T13378] ep_insert+0xff3/0x19e0 [ 189.530739][T13378] ? __pfx_ep_insert+0x10/0x10 [ 189.530765][T13378] ? bpf_lsm_capable+0x9/0x20 [ 189.530790][T13378] do_epoll_ctl+0x7f4/0xe80 [ 189.530816][T13378] __x64_sys_epoll_ctl+0x163/0x1a0 [ 189.530841][T13378] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 189.530862][T13378] ? rcu_is_watching+0x15/0xb0 [ 189.530881][T13378] ? rcu_is_watching+0x15/0xb0 [ 189.530898][T13378] do_syscall_64+0xfa/0x3b0 [ 189.530914][T13378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.530930][T13378] ? clear_bhb_loop+0x60/0xb0 [ 189.530948][T13378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.530965][T13378] RIP: 0033:0x7f1e23b8ebe9 [ 189.530980][T13378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.530995][T13378] RSP: 002b:00007f1e2498c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 189.531032][T13378] RAX: ffffffffffffffda RBX: 00007f1e23db5fa0 RCX: 00007f1e23b8ebe9 [ 189.531045][T13378] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 189.531056][T13378] RBP: 00007f1e2498c090 R08: 0000000000000000 R09: 0000000000000000 [ 189.531066][T13378] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 189.531077][T13378] R13: 00007f1e23db6038 R14: 00007f1e23db5fa0 R15: 00007ffc12f25418 [ 189.531096][T13378] [ 189.541521][T13377] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 189.687840][T13386] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 189.855199][T13391] bond0: (slave dummy0): Releasing backup interface [ 189.898102][T13391] bridge_slave_0: left allmulticast mode [ 189.904152][T13391] bridge_slave_0: left promiscuous mode [ 189.909929][T13391] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.926304][T13391] bridge_slave_1: left allmulticast mode [ 189.946622][T13391] bridge_slave_1: left promiscuous mode [ 189.976379][T13391] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.987566][T13391] veth0_to_bond: left allmulticast mode [ 189.998807][T13391] veth0_to_bond: left promiscuous mode [ 190.006099][T13391] bridge5: port 2(veth0_to_bond) entered disabled state [ 190.017358][T13391] bond0: (slave bond_slave_0): Releasing backup interface [ 190.029446][T13391] bond0: (slave bond_slave_1): Releasing backup interface [ 190.042469][T13391] team0: Port device team_slave_0 removed [ 190.052846][T13391] team0: Port device team_slave_1 removed [ 190.059917][T13391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.070190][T13391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.085596][T13391] bond1: (slave bridge2): Releasing backup interface [ 190.095039][T13391] bond2: (slave bond3): Releasing backup interface [ 190.101704][T13391] bond2: (slave bond3): the permanent HWaddr of slave - d6:3b:cf:93:ae:68 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 190.119949][T13391] bond2: (slave gretap1): making interface the new active one [ 190.136027][T13391] bond2: (slave gretap1): Releasing backup interface [ 190.155558][T13391] veth5: left allmulticast mode [ 190.160527][T13391] veth5: left promiscuous mode [ 190.161195][T13412] netlink: 'syz.4.2071': attribute type 1 has an invalid length. [ 190.165660][T13391] bridge5: port 1(veth5) entered disabled state [ 190.183608][T13391] bond0: (slave bond22): Releasing backup interface [ 190.213493][T13413] __nla_validate_parse: 13 callbacks suppressed [ 190.213511][T13413] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2071'. [ 190.243231][T13394] A link change request failed with some changes committed already. Interface bond20 may have been left with an inconsistent configuration, please check. [ 190.275826][T13413] batadv1: entered promiscuous mode [ 190.281059][T13413] batadv1: entered allmulticast mode [ 190.312652][T13408] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 190.495554][T13426] netlink: 'syz.0.2076': attribute type 1 has an invalid length. [ 190.583481][T13426] 8021q: adding VLAN 0 to HW filter on device bond7 [ 190.591658][T13430] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2075'. [ 190.665813][T13433] FAULT_INJECTION: forcing a failure. [ 190.665813][T13433] name failslab, interval 1, probability 0, space 0, times 0 [ 190.688263][T13433] CPU: 1 UID: 0 PID: 13433 Comm: syz.0.2077 Not tainted syzkaller #0 PREEMPT(full) [ 190.688289][T13433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.688301][T13433] Call Trace: [ 190.688307][T13433] [ 190.688315][T13433] dump_stack_lvl+0x189/0x250 [ 190.688339][T13433] ? __pfx____ratelimit+0x10/0x10 [ 190.688363][T13433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.688382][T13433] ? __pfx__printk+0x10/0x10 [ 190.688407][T13433] ? __pfx___might_resched+0x10/0x10 [ 190.688423][T13433] ? lock_acquire+0x5f/0x360 [ 190.688451][T13433] should_fail_ex+0x414/0x560 [ 190.688475][T13433] should_failslab+0xa8/0x100 [ 190.688498][T13433] kmem_cache_alloc_noprof+0x73/0x3c0 [ 190.688519][T13433] ? __kernfs_new_node+0xd7/0x7e0 [ 190.688538][T13433] ? kasan_save_track+0x4f/0x80 [ 190.688557][T13433] __kernfs_new_node+0xd7/0x7e0 [ 190.688574][T13433] ? device_add+0x475/0xb50 [ 190.688588][T13433] ? wakeup_source_sysfs_add+0x1af/0x280 [ 190.688605][T13433] ? wakeup_source_register+0x18a/0x380 [ 190.688619][T13433] ? ep_insert+0xff3/0x19e0 [ 190.688639][T13433] ? do_epoll_ctl+0x7f4/0xe80 [ 190.688657][T13433] ? __x64_sys_epoll_ctl+0x163/0x1a0 [ 190.688678][T13433] ? do_syscall_64+0xfa/0x3b0 [ 190.688695][T13433] ? __pfx___kernfs_new_node+0x10/0x10 [ 190.688712][T13433] ? rcu_is_watching+0x15/0xb0 [ 190.688729][T13433] ? kernfs_root+0x1c/0x230 [ 190.688746][T13433] ? rcu_is_watching+0x15/0xb0 [ 190.688761][T13433] ? kernfs_root+0x1c/0x230 [ 190.688777][T13433] ? lock_release+0x4b/0x3e0 [ 190.688800][T13433] ? kernfs_root+0x1c/0x230 [ 190.688816][T13433] ? kernfs_root+0x1c/0x230 [ 190.688835][T13433] kernfs_new_node+0x102/0x210 [ 190.688856][T13433] __kernfs_create_file+0x4b/0x2e0 [ 190.688880][T13433] sysfs_add_file_mode_ns+0x238/0x300 [ 190.688907][T13433] internal_create_group+0x66d/0x1110 [ 190.688933][T13433] ? __pfx_internal_create_group+0x10/0x10 [ 190.688951][T13433] ? down_write+0x162/0x1f0 [ 190.688971][T13433] sysfs_create_groups+0x59/0x120 [ 190.688990][T13433] device_add_attrs+0x1c4/0x5a0 [ 190.689009][T13433] ? __pfx_device_add_attrs+0x10/0x10 [ 190.689024][T13433] ? kobject_put+0x43f/0x480 [ 190.689042][T13433] ? device_add_class_symlinks+0x21f/0x240 [ 190.689061][T13433] device_add+0x496/0xb50 [ 190.689076][T13433] ? device_initialize+0x24b/0x440 [ 190.689094][T13433] wakeup_source_sysfs_add+0x1af/0x280 [ 190.689122][T13433] wakeup_source_register+0x18a/0x380 [ 190.689141][T13433] ep_insert+0xff3/0x19e0 [ 190.689169][T13433] ? __pfx_ep_insert+0x10/0x10 [ 190.689196][T13433] ? bpf_lsm_capable+0x9/0x20 [ 190.689222][T13433] do_epoll_ctl+0x7f4/0xe80 [ 190.689248][T13433] __x64_sys_epoll_ctl+0x163/0x1a0 [ 190.689272][T13433] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 190.689294][T13433] ? rcu_is_watching+0x15/0xb0 [ 190.689313][T13433] ? rcu_is_watching+0x15/0xb0 [ 190.689330][T13433] do_syscall_64+0xfa/0x3b0 [ 190.689346][T13433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.689363][T13433] ? clear_bhb_loop+0x60/0xb0 [ 190.689382][T13433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.689399][T13433] RIP: 0033:0x7f1e23b8ebe9 [ 190.689413][T13433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.689429][T13433] RSP: 002b:00007f1e2498c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 190.689448][T13433] RAX: ffffffffffffffda RBX: 00007f1e23db5fa0 RCX: 00007f1e23b8ebe9 [ 190.689462][T13433] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 190.689472][T13433] RBP: 00007f1e2498c090 R08: 0000000000000000 R09: 0000000000000000 [ 190.689483][T13433] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 190.689495][T13433] R13: 00007f1e23db6038 R14: 00007f1e23db5fa0 R15: 00007ffc12f25418 [ 190.689515][T13433] [ 191.127988][T13435] syzkaller0: entered promiscuous mode [ 191.133493][T13435] syzkaller0: entered allmulticast mode [ 191.381917][T13451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.438445][T13451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2083'. [ 191.448819][T13453] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 191.571821][T13466] netlink: 'syz.3.2087': attribute type 4 has an invalid length. [ 191.642160][T13470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2088'. [ 191.659633][T13470] unsupported nlmsg_type 40 [ 191.708358][T13473] FAULT_INJECTION: forcing a failure. [ 191.708358][T13473] name failslab, interval 1, probability 0, space 0, times 0 [ 191.743828][T13473] CPU: 1 UID: 0 PID: 13473 Comm: syz.0.2089 Not tainted syzkaller #0 PREEMPT(full) [ 191.743855][T13473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.743865][T13473] Call Trace: [ 191.743872][T13473] [ 191.743879][T13473] dump_stack_lvl+0x189/0x250 [ 191.743903][T13473] ? __pfx____ratelimit+0x10/0x10 [ 191.743927][T13473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.743946][T13473] ? __pfx__printk+0x10/0x10 [ 191.743968][T13473] ? idr_alloc_u32+0x1b7/0x2d0 [ 191.743989][T13473] ? __pfx___might_resched+0x10/0x10 [ 191.744004][T13473] ? lock_acquire+0x5f/0x360 [ 191.744027][T13473] should_fail_ex+0x414/0x560 [ 191.744050][T13473] should_failslab+0xa8/0x100 [ 191.744073][T13473] kmem_cache_alloc_noprof+0x73/0x3c0 [ 191.744093][T13473] ? __kernfs_new_node+0xd7/0x7e0 [ 191.744110][T13473] ? lock_acquire+0x5f/0x360 [ 191.744132][T13473] __kernfs_new_node+0xd7/0x7e0 [ 191.744151][T13473] ? lock_acquire+0x5f/0x360 [ 191.744172][T13473] ? __pfx___kernfs_new_node+0x10/0x10 [ 191.744188][T13473] ? rcu_is_watching+0x15/0xb0 [ 191.744204][T13473] ? kernfs_root+0x1c/0x230 [ 191.744220][T13473] ? rcu_is_watching+0x15/0xb0 [ 191.744235][T13473] ? kernfs_root+0x1c/0x230 [ 191.744252][T13473] ? lock_release+0x4b/0x3e0 [ 191.744284][T13473] ? kernfs_root+0x1c/0x230 [ 191.744300][T13473] ? kernfs_root+0x1c/0x230 [ 191.744319][T13473] kernfs_new_node+0x102/0x210 [ 191.744341][T13473] __kernfs_create_file+0x4b/0x2e0 [ 191.744364][T13473] sysfs_add_file_mode_ns+0x238/0x300 [ 191.744392][T13473] internal_create_group+0x66d/0x1110 [ 191.744417][T13473] ? __pfx_internal_create_group+0x10/0x10 [ 191.744437][T13473] ? down_write+0x162/0x1f0 [ 191.744457][T13473] sysfs_create_groups+0x59/0x120 [ 191.744476][T13473] device_add_attrs+0x1c4/0x5a0 [ 191.744493][T13473] ? __pfx_device_add_attrs+0x10/0x10 [ 191.744507][T13473] ? kobject_put+0x43f/0x480 [ 191.744523][T13473] ? device_add_class_symlinks+0x21f/0x240 [ 191.744539][T13473] device_add+0x496/0xb50 [ 191.744553][T13473] ? device_initialize+0x24b/0x440 [ 191.744567][T13473] wakeup_source_sysfs_add+0x1af/0x280 [ 191.744587][T13473] wakeup_source_register+0x18a/0x380 [ 191.744605][T13473] ep_insert+0xff3/0x19e0 [ 191.744634][T13473] ? __pfx_ep_insert+0x10/0x10 [ 191.744661][T13473] ? bpf_lsm_capable+0x9/0x20 [ 191.744686][T13473] do_epoll_ctl+0x7f4/0xe80 [ 191.744712][T13473] __x64_sys_epoll_ctl+0x163/0x1a0 [ 191.744736][T13473] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 191.744758][T13473] ? rcu_is_watching+0x15/0xb0 [ 191.744776][T13473] ? rcu_is_watching+0x15/0xb0 [ 191.744794][T13473] do_syscall_64+0xfa/0x3b0 [ 191.744809][T13473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.744827][T13473] ? clear_bhb_loop+0x60/0xb0 [ 191.744846][T13473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.744863][T13473] RIP: 0033:0x7f1e23b8ebe9 [ 191.744879][T13473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.744893][T13473] RSP: 002b:00007f1e2498c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 191.744912][T13473] RAX: ffffffffffffffda RBX: 00007f1e23db5fa0 RCX: 00007f1e23b8ebe9 [ 191.744926][T13473] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 191.744936][T13473] RBP: 00007f1e2498c090 R08: 0000000000000000 R09: 0000000000000000 [ 191.744947][T13473] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 191.744958][T13473] R13: 00007f1e23db6038 R14: 00007f1e23db5fa0 R15: 00007ffc12f25418 [ 191.744978][T13473] [ 192.392961][T13498] netlink: 'syz.3.2092': attribute type 10 has an invalid length. [ 192.403857][T13498] netlink: 'syz.3.2092': attribute type 10 has an invalid length. [ 192.653521][T13521] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2105'. [ 192.681810][T13521] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2105'. [ 192.761325][T13530] FAULT_INJECTION: forcing a failure. [ 192.761325][T13530] name failslab, interval 1, probability 0, space 0, times 0 [ 192.803835][T13530] CPU: 0 UID: 0 PID: 13530 Comm: syz.4.2106 Not tainted syzkaller #0 PREEMPT(full) [ 192.803862][T13530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.803873][T13530] Call Trace: [ 192.803879][T13530] [ 192.803887][T13530] dump_stack_lvl+0x189/0x250 [ 192.803920][T13530] ? __pfx____ratelimit+0x10/0x10 [ 192.803944][T13530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.803964][T13530] ? __pfx__printk+0x10/0x10 [ 192.803986][T13530] ? idr_alloc_u32+0x1b7/0x2d0 [ 192.804010][T13530] ? __pfx___might_resched+0x10/0x10 [ 192.804026][T13530] ? lock_acquire+0x5f/0x360 [ 192.804050][T13530] should_fail_ex+0x414/0x560 [ 192.804073][T13530] should_failslab+0xa8/0x100 [ 192.804097][T13530] kmem_cache_alloc_noprof+0x73/0x3c0 [ 192.804118][T13530] ? __kernfs_new_node+0xd7/0x7e0 [ 192.804136][T13530] ? lock_acquire+0x5f/0x360 [ 192.804158][T13530] __kernfs_new_node+0xd7/0x7e0 [ 192.804178][T13530] ? lock_acquire+0x5f/0x360 [ 192.804201][T13530] ? __pfx___kernfs_new_node+0x10/0x10 [ 192.804218][T13530] ? rcu_is_watching+0x15/0xb0 [ 192.804234][T13530] ? kernfs_root+0x1c/0x230 [ 192.804253][T13530] ? rcu_is_watching+0x15/0xb0 [ 192.804268][T13530] ? kernfs_root+0x1c/0x230 [ 192.804285][T13530] ? lock_release+0x4b/0x3e0 [ 192.804308][T13530] ? kernfs_root+0x1c/0x230 [ 192.804323][T13530] ? kernfs_root+0x1c/0x230 [ 192.804341][T13530] kernfs_new_node+0x102/0x210 [ 192.804362][T13530] __kernfs_create_file+0x4b/0x2e0 [ 192.804385][T13530] sysfs_add_file_mode_ns+0x238/0x300 [ 192.804414][T13530] internal_create_group+0x66d/0x1110 [ 192.804439][T13530] ? __pfx_internal_create_group+0x10/0x10 [ 192.804457][T13530] ? down_write+0x162/0x1f0 [ 192.804476][T13530] sysfs_create_groups+0x59/0x120 [ 192.804495][T13530] device_add_attrs+0x1c4/0x5a0 [ 192.804515][T13530] ? __pfx_device_add_attrs+0x10/0x10 [ 192.804529][T13530] ? kobject_put+0x43f/0x480 [ 192.804547][T13530] ? device_add_class_symlinks+0x21f/0x240 [ 192.804564][T13530] device_add+0x496/0xb50 [ 192.804580][T13530] ? device_initialize+0x24b/0x440 [ 192.804597][T13530] wakeup_source_sysfs_add+0x1af/0x280 [ 192.804617][T13530] wakeup_source_register+0x18a/0x380 [ 192.804636][T13530] ep_insert+0xff3/0x19e0 [ 192.804664][T13530] ? __pfx_ep_insert+0x10/0x10 [ 192.804689][T13530] ? bpf_lsm_capable+0x9/0x20 [ 192.804714][T13530] do_epoll_ctl+0x7f4/0xe80 [ 192.804738][T13530] __x64_sys_epoll_ctl+0x163/0x1a0 [ 192.804762][T13530] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 192.804783][T13530] ? rcu_is_watching+0x15/0xb0 [ 192.804801][T13530] ? rcu_is_watching+0x15/0xb0 [ 192.804821][T13530] do_syscall_64+0xfa/0x3b0 [ 192.804837][T13530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.804853][T13530] ? clear_bhb_loop+0x60/0xb0 [ 192.804870][T13530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.804887][T13530] RIP: 0033:0x7f3418b8ebe9 [ 192.804903][T13530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.804925][T13530] RSP: 002b:00007f3419951038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 192.804943][T13530] RAX: ffffffffffffffda RBX: 00007f3418db5fa0 RCX: 00007f3418b8ebe9 [ 192.804955][T13530] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 192.804966][T13530] RBP: 00007f3419951090 R08: 0000000000000000 R09: 0000000000000000 [ 192.804976][T13530] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 192.804988][T13530] R13: 00007f3418db6038 R14: 00007f3418db5fa0 R15: 00007ffc058e9e78 [ 192.805009][T13530] [ 193.269250][T13543] netlink: 'syz.2.2111': attribute type 27 has an invalid length. [ 193.278459][T13542] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2109'. [ 193.319260][T13548] openvswitch: netlink: Key type 119 is out of range max 32 [ 193.537285][T13554] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 193.545617][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2118'. [ 193.758358][T13570] ÿ: renamed from bond_slave_0 [ 194.318730][ T1306] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 194.328088][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.337792][T13587] tipc: Enabled bearer , priority 0 [ 194.345282][T13587] syzkaller0: entered promiscuous mode [ 194.381939][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2115'. [ 194.388374][T13591] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2126'. [ 194.391668][T13587] syzkaller0: entered allmulticast mode [ 194.410739][T13563] netlink: 'syz.0.2115': attribute type 13 has an invalid length. [ 194.418712][T13563] netlink: 'syz.0.2115': attribute type 17 has an invalid length. [ 194.429948][T13591] bond0 (unregistering): Released all slaves [ 194.565758][T13563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.603318][T13605] netlink: 'syz.2.2130': attribute type 1 has an invalid length. [ 194.609638][T13585] syzkaller1: entered promiscuous mode [ 194.618075][T13585] syzkaller1: entered allmulticast mode [ 194.627470][T10446] syz1: Port: 1 Link ACTIVE [ 194.628545][T13602] tipc: Resetting bearer [ 194.657897][T13608] vlan2: entered allmulticast mode [ 194.663032][T13608] hsr0: entered allmulticast mode [ 194.668477][T13608] hsr_slave_0: entered allmulticast mode [ 194.674908][T13608] hsr_slave_1: entered allmulticast mode [ 194.691082][T13586] tipc: Resetting bearer [ 194.701551][T13586] tipc: Disabling bearer [ 194.714655][T13606] veth9: entered promiscuous mode [ 194.721490][T13606] bond0: (slave veth9): Enslaving as a backup interface with a down link [ 194.895786][T13627] FAULT_INJECTION: forcing a failure. [ 194.895786][T13627] name failslab, interval 1, probability 0, space 0, times 0 [ 194.976415][T13627] CPU: 0 UID: 0 PID: 13627 Comm: syz.1.2136 Not tainted syzkaller #0 PREEMPT(full) [ 194.976441][T13627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.976451][T13627] Call Trace: [ 194.976457][T13627] [ 194.976465][T13627] dump_stack_lvl+0x189/0x250 [ 194.976489][T13627] ? __pfx____ratelimit+0x10/0x10 [ 194.976511][T13627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.976530][T13627] ? __pfx__printk+0x10/0x10 [ 194.976552][T13627] ? idr_alloc_u32+0x1b7/0x2d0 [ 194.976575][T13627] ? __pfx___might_resched+0x10/0x10 [ 194.976591][T13627] ? lock_acquire+0x5f/0x360 [ 194.976615][T13627] should_fail_ex+0x414/0x560 [ 194.976638][T13627] should_failslab+0xa8/0x100 [ 194.976662][T13627] kmem_cache_alloc_noprof+0x73/0x3c0 [ 194.976683][T13627] ? __kernfs_new_node+0xd7/0x7e0 [ 194.976701][T13627] ? lock_acquire+0x5f/0x360 [ 194.976725][T13627] __kernfs_new_node+0xd7/0x7e0 [ 194.976744][T13627] ? lock_acquire+0x5f/0x360 [ 194.976768][T13627] ? __pfx___kernfs_new_node+0x10/0x10 [ 194.976786][T13627] ? rcu_is_watching+0x15/0xb0 [ 194.976802][T13627] ? kernfs_root+0x1c/0x230 [ 194.976819][T13627] ? rcu_is_watching+0x15/0xb0 [ 194.976831][T13627] ? kernfs_root+0x1c/0x230 [ 194.976844][T13627] ? lock_release+0x4b/0x3e0 [ 194.976866][T13627] ? kernfs_root+0x1c/0x230 [ 194.976882][T13627] ? kernfs_root+0x1c/0x230 [ 194.976902][T13627] kernfs_new_node+0x102/0x210 [ 194.976923][T13627] __kernfs_create_file+0x4b/0x2e0 [ 194.976947][T13627] sysfs_add_file_mode_ns+0x238/0x300 [ 194.976975][T13627] internal_create_group+0x66d/0x1110 [ 194.977000][T13627] ? __pfx_internal_create_group+0x10/0x10 [ 194.977019][T13627] ? down_write+0x162/0x1f0 [ 194.977039][T13627] sysfs_create_groups+0x59/0x120 [ 194.977059][T13627] device_add_attrs+0x1c4/0x5a0 [ 194.977098][T13627] ? __pfx_device_add_attrs+0x10/0x10 [ 194.977114][T13627] ? kobject_put+0x43f/0x480 [ 194.977133][T13627] ? device_add_class_symlinks+0x21f/0x240 [ 194.977152][T13627] device_add+0x496/0xb50 [ 194.977168][T13627] ? device_initialize+0x24b/0x440 [ 194.977186][T13627] wakeup_source_sysfs_add+0x1af/0x280 [ 194.977207][T13627] wakeup_source_register+0x18a/0x380 [ 194.977226][T13627] ep_insert+0xff3/0x19e0 [ 194.977256][T13627] ? __pfx_ep_insert+0x10/0x10 [ 194.977282][T13627] ? bpf_lsm_capable+0x9/0x20 [ 194.977307][T13627] do_epoll_ctl+0x7f4/0xe80 [ 194.977330][T13627] __x64_sys_epoll_ctl+0x163/0x1a0 [ 194.977361][T13627] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 194.977380][T13627] ? rcu_is_watching+0x15/0xb0 [ 194.977394][T13627] ? rcu_is_watching+0x15/0xb0 [ 194.977408][T13627] do_syscall_64+0xfa/0x3b0 [ 194.977420][T13627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.977434][T13627] ? clear_bhb_loop+0x60/0xb0 [ 194.977449][T13627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.977464][T13627] RIP: 0033:0x7f4d64f8ebe9 [ 194.977477][T13627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.977489][T13627] RSP: 002b:00007f4d65d3a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 194.977504][T13627] RAX: ffffffffffffffda RBX: 00007f4d651b5fa0 RCX: 00007f4d64f8ebe9 [ 194.977514][T13627] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 194.977522][T13627] RBP: 00007f4d65d3a090 R08: 0000000000000000 R09: 0000000000000000 [ 194.977531][T13627] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 194.977539][T13627] R13: 00007f4d651b6038 R14: 00007f4d651b5fa0 R15: 00007ffd83773cd8 [ 194.977555][T13627] [ 195.522231][T13643] syzkaller0: entered promiscuous mode [ 195.527863][T13643] syzkaller0: entered allmulticast mode [ 195.806549][T13672] netlink: 'syz.0.2148': attribute type 1 has an invalid length. [ 195.815535][T13672] __nla_validate_parse: 6 callbacks suppressed [ 195.815554][T13672] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2148'. [ 195.931194][T13684] netlink: 'syz.4.2153': attribute type 1 has an invalid length. [ 195.949156][T13690] FAULT_INJECTION: forcing a failure. [ 195.949156][T13690] name failslab, interval 1, probability 0, space 0, times 0 [ 195.960892][T13684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2153'. [ 195.973341][T13690] CPU: 0 UID: 0 PID: 13690 Comm: syz.0.2152 Not tainted syzkaller #0 PREEMPT(full) [ 195.973367][T13690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.973378][T13690] Call Trace: [ 195.973385][T13690] [ 195.973392][T13690] dump_stack_lvl+0x189/0x250 [ 195.973417][T13690] ? __pfx____ratelimit+0x10/0x10 [ 195.973441][T13690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.973461][T13690] ? __pfx__printk+0x10/0x10 [ 195.973483][T13690] ? idr_alloc_u32+0x1b7/0x2d0 [ 195.973507][T13690] ? __pfx___might_resched+0x10/0x10 [ 195.973524][T13690] ? lock_acquire+0x5f/0x360 [ 195.973548][T13690] should_fail_ex+0x414/0x560 [ 195.973573][T13690] should_failslab+0xa8/0x100 [ 195.973597][T13690] kmem_cache_alloc_noprof+0x73/0x3c0 [ 195.973618][T13690] ? __kernfs_new_node+0xd7/0x7e0 [ 195.973637][T13690] ? lock_acquire+0x5f/0x360 [ 195.973661][T13690] __kernfs_new_node+0xd7/0x7e0 [ 195.973684][T13690] ? lock_acquire+0x5f/0x360 [ 195.973706][T13690] ? __pfx___kernfs_new_node+0x10/0x10 [ 195.973722][T13690] ? rcu_is_watching+0x15/0xb0 [ 195.973737][T13690] ? kernfs_root+0x1c/0x230 [ 195.973755][T13690] ? rcu_is_watching+0x15/0xb0 [ 195.973770][T13690] ? kernfs_root+0x1c/0x230 [ 195.973784][T13690] ? lock_release+0x4b/0x3e0 [ 195.973807][T13690] ? kernfs_root+0x1c/0x230 [ 195.973823][T13690] ? kernfs_root+0x1c/0x230 [ 195.973840][T13690] kernfs_new_node+0x102/0x210 [ 195.973860][T13690] __kernfs_create_file+0x4b/0x2e0 [ 195.973884][T13690] sysfs_add_file_mode_ns+0x238/0x300 [ 195.973912][T13690] internal_create_group+0x66d/0x1110 [ 195.973939][T13690] ? __pfx_internal_create_group+0x10/0x10 [ 195.973958][T13690] ? down_write+0x162/0x1f0 [ 195.973980][T13690] sysfs_create_groups+0x59/0x120 [ 195.973999][T13690] device_add_attrs+0x1c4/0x5a0 [ 195.974020][T13690] ? __pfx_device_add_attrs+0x10/0x10 [ 195.974042][T13690] ? kobject_put+0x43f/0x480 [ 195.974060][T13690] ? device_add_class_symlinks+0x21f/0x240 [ 195.974078][T13690] device_add+0x496/0xb50 [ 195.974093][T13690] ? device_initialize+0x24b/0x440 [ 195.974111][T13690] wakeup_source_sysfs_add+0x1af/0x280 [ 195.974132][T13690] wakeup_source_register+0x18a/0x380 [ 195.974151][T13690] ep_insert+0xff3/0x19e0 [ 195.974181][T13690] ? __pfx_ep_insert+0x10/0x10 [ 195.974208][T13690] ? bpf_lsm_capable+0x9/0x20 [ 195.974235][T13690] do_epoll_ctl+0x7f4/0xe80 [ 195.974262][T13690] __x64_sys_epoll_ctl+0x163/0x1a0 [ 195.974286][T13690] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 195.974308][T13690] ? rcu_is_watching+0x15/0xb0 [ 195.974327][T13690] ? rcu_is_watching+0x15/0xb0 [ 195.974345][T13690] do_syscall_64+0xfa/0x3b0 [ 195.974362][T13690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.974379][T13690] ? clear_bhb_loop+0x60/0xb0 [ 195.974398][T13690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.974415][T13690] RIP: 0033:0x7f1e23b8ebe9 [ 195.974431][T13690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.974446][T13690] RSP: 002b:00007f1e2498c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 195.974466][T13690] RAX: ffffffffffffffda RBX: 00007f1e23db5fa0 RCX: 00007f1e23b8ebe9 [ 195.974479][T13690] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 195.974490][T13690] RBP: 00007f1e2498c090 R08: 0000000000000000 R09: 0000000000000000 [ 195.974501][T13690] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 195.974513][T13690] R13: 00007f1e23db6038 R14: 00007f1e23db5fa0 R15: 00007ffc12f25418 [ 195.974535][T13690] [ 196.439749][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 196.442284][T13708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2159'. [ 196.450412][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2161'. [ 196.481292][T13717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2162'. [ 196.491647][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'. [ 196.501263][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2160'. [ 196.513610][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2160'. [ 196.526847][T13721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2163'. [ 196.564669][T13723] 0ªX¹¦À speed is unknown, defaulting to 1000 [ 196.811841][T13742] FAULT_INJECTION: forcing a failure. [ 196.811841][T13742] name failslab, interval 1, probability 0, space 0, times 0 [ 196.843861][T13742] CPU: 0 UID: 0 PID: 13742 Comm: syz.0.2172 Not tainted syzkaller #0 PREEMPT(full) [ 196.843888][T13742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.843906][T13742] Call Trace: [ 196.843913][T13742] [ 196.843920][T13742] dump_stack_lvl+0x189/0x250 [ 196.843944][T13742] ? __pfx____ratelimit+0x10/0x10 [ 196.843968][T13742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.843988][T13742] ? __pfx__printk+0x10/0x10 [ 196.844010][T13742] ? rwsem_down_write_slowpath+0xdfd/0xfe0 [ 196.844030][T13742] ? __pfx___might_resched+0x10/0x10 [ 196.844047][T13742] ? lock_acquire+0x5f/0x360 [ 196.844071][T13742] should_fail_ex+0x414/0x560 [ 196.844095][T13742] should_failslab+0xa8/0x100 [ 196.844119][T13742] kmem_cache_alloc_noprof+0x73/0x3c0 [ 196.844141][T13742] ? __kernfs_new_node+0xd7/0x7e0 [ 196.844160][T13742] ? lock_acquire+0x5f/0x360 [ 196.844183][T13742] __kernfs_new_node+0xd7/0x7e0 [ 196.844203][T13742] ? lock_acquire+0x5f/0x360 [ 196.844227][T13742] ? __pfx___kernfs_new_node+0x10/0x10 [ 196.844243][T13742] ? rcu_is_watching+0x15/0xb0 [ 196.844260][T13742] ? kernfs_root+0x1c/0x230 [ 196.844277][T13742] ? rcu_is_watching+0x15/0xb0 [ 196.844292][T13742] ? kernfs_root+0x1c/0x230 [ 196.844309][T13742] ? lock_release+0x4b/0x3e0 [ 196.844333][T13742] ? kernfs_root+0x1c/0x230 [ 196.844349][T13742] ? kernfs_root+0x1c/0x230 [ 196.844369][T13742] kernfs_new_node+0x102/0x210 [ 196.844390][T13742] __kernfs_create_file+0x4b/0x2e0 [ 196.844414][T13742] sysfs_add_file_mode_ns+0x238/0x300 [ 196.844442][T13742] internal_create_group+0x66d/0x1110 [ 196.844467][T13742] ? __pfx_internal_create_group+0x10/0x10 [ 196.844486][T13742] ? down_write+0x162/0x1f0 [ 196.844506][T13742] sysfs_create_groups+0x59/0x120 [ 196.844526][T13742] device_add_attrs+0x1c4/0x5a0 [ 196.844546][T13742] ? __pfx_device_add_attrs+0x10/0x10 [ 196.844562][T13742] ? kobject_put+0x43f/0x480 [ 196.844581][T13742] ? device_add_class_symlinks+0x21f/0x240 [ 196.844600][T13742] device_add+0x496/0xb50 [ 196.844616][T13742] ? device_initialize+0x24b/0x440 [ 196.844633][T13742] wakeup_source_sysfs_add+0x1af/0x280 [ 196.844654][T13742] wakeup_source_register+0x18a/0x380 [ 196.844680][T13742] ep_insert+0xff3/0x19e0 [ 196.844710][T13742] ? __pfx_ep_insert+0x10/0x10 [ 196.844737][T13742] ? bpf_lsm_capable+0x9/0x20 [ 196.844762][T13742] do_epoll_ctl+0x7f4/0xe80 [ 196.844788][T13742] __x64_sys_epoll_ctl+0x163/0x1a0 [ 196.844812][T13742] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 196.844834][T13742] ? rcu_is_watching+0x15/0xb0 [ 196.844854][T13742] ? rcu_is_watching+0x15/0xb0 [ 196.844871][T13742] do_syscall_64+0xfa/0x3b0 [ 196.844886][T13742] ? rcu_is_watching+0x15/0xb0 [ 196.844909][T13742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.844926][T13742] ? clear_bhb_loop+0x60/0xb0 [ 196.844945][T13742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.844961][T13742] RIP: 0033:0x7f1e23b8ebe9 [ 196.844978][T13742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.844993][T13742] RSP: 002b:00007f1e2498c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 196.845012][T13742] RAX: ffffffffffffffda RBX: 00007f1e23db5fa0 RCX: 00007f1e23b8ebe9 [ 196.845025][T13742] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 196.845036][T13742] RBP: 00007f1e2498c090 R08: 0000000000000000 R09: 0000000000000000 [ 196.845047][T13742] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 196.845058][T13742] R13: 00007f1e23db6038 R14: 00007f1e23db5fa0 R15: 00007ffc12f25418 [ 196.845079][T13742] [ 197.598919][T13763] netlink: 'syz.0.2181': attribute type 6 has an invalid length. [ 197.826596][T13774] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 197.984156][T13780] FAULT_INJECTION: forcing a failure. [ 197.984156][T13780] name failslab, interval 1, probability 0, space 0, times 0 [ 198.018190][T13780] CPU: 0 UID: 0 PID: 13780 Comm: syz.3.2184 Not tainted syzkaller #0 PREEMPT(full) [ 198.018216][T13780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.018228][T13780] Call Trace: [ 198.018234][T13780] [ 198.018242][T13780] dump_stack_lvl+0x189/0x250 [ 198.018266][T13780] ? __pfx____ratelimit+0x10/0x10 [ 198.018290][T13780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.018308][T13780] ? __pfx__printk+0x10/0x10 [ 198.018331][T13780] ? rwsem_down_write_slowpath+0xdfd/0xfe0 [ 198.018351][T13780] ? __pfx___might_resched+0x10/0x10 [ 198.018368][T13780] ? lock_acquire+0x5f/0x360 [ 198.018392][T13780] should_fail_ex+0x414/0x560 [ 198.018415][T13780] should_failslab+0xa8/0x100 [ 198.018439][T13780] kmem_cache_alloc_noprof+0x73/0x3c0 [ 198.018460][T13780] ? __kernfs_new_node+0xd7/0x7e0 [ 198.018478][T13780] ? lock_acquire+0x5f/0x360 [ 198.018501][T13780] __kernfs_new_node+0xd7/0x7e0 [ 198.018520][T13780] ? lock_acquire+0x5f/0x360 [ 198.018544][T13780] ? __pfx___kernfs_new_node+0x10/0x10 [ 198.018563][T13780] ? rcu_is_watching+0x15/0xb0 [ 198.018579][T13780] ? kernfs_root+0x1c/0x230 [ 198.018597][T13780] ? rcu_is_watching+0x15/0xb0 [ 198.018612][T13780] ? kernfs_root+0x1c/0x230 [ 198.018628][T13780] ? lock_release+0x4b/0x3e0 [ 198.018651][T13780] ? kernfs_root+0x1c/0x230 [ 198.018667][T13780] ? kernfs_root+0x1c/0x230 [ 198.018686][T13780] kernfs_new_node+0x102/0x210 [ 198.018708][T13780] __kernfs_create_file+0x4b/0x2e0 [ 198.018731][T13780] sysfs_add_file_mode_ns+0x238/0x300 [ 198.018760][T13780] internal_create_group+0x66d/0x1110 [ 198.018795][T13780] ? __pfx_internal_create_group+0x10/0x10 [ 198.018814][T13780] ? down_write+0x162/0x1f0 [ 198.018834][T13780] sysfs_create_groups+0x59/0x120 [ 198.018854][T13780] device_add_attrs+0x1c4/0x5a0 [ 198.018873][T13780] ? __pfx_device_add_attrs+0x10/0x10 [ 198.018888][T13780] ? kobject_put+0x43f/0x480 [ 198.018906][T13780] ? device_add_class_symlinks+0x21f/0x240 [ 198.018925][T13780] device_add+0x496/0xb50 [ 198.018941][T13780] ? device_initialize+0x24b/0x440 [ 198.018959][T13780] wakeup_source_sysfs_add+0x1af/0x280 [ 198.018981][T13780] wakeup_source_register+0x18a/0x380 [ 198.019000][T13780] ep_insert+0xff3/0x19e0 [ 198.019028][T13780] ? __pfx_ep_insert+0x10/0x10 [ 198.019056][T13780] ? bpf_lsm_capable+0x9/0x20 [ 198.019081][T13780] do_epoll_ctl+0x7f4/0xe80 [ 198.019107][T13780] __x64_sys_epoll_ctl+0x163/0x1a0 [ 198.019129][T13780] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 198.019150][T13780] ? rcu_is_watching+0x15/0xb0 [ 198.019166][T13780] ? rcu_is_watching+0x15/0xb0 [ 198.019180][T13780] do_syscall_64+0xfa/0x3b0 [ 198.019196][T13780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.019212][T13780] ? clear_bhb_loop+0x60/0xb0 [ 198.019233][T13780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.019250][T13780] RIP: 0033:0x7f3b1db8ebe9 [ 198.019265][T13780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.019280][T13780] RSP: 002b:00007f3b1ea51038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 198.019299][T13780] RAX: ffffffffffffffda RBX: 00007f3b1ddb5fa0 RCX: 00007f3b1db8ebe9 [ 198.019312][T13780] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 198.019322][T13780] RBP: 00007f3b1ea51090 R08: 0000000000000000 R09: 0000000000000000 [ 198.019333][T13780] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000002 [ 198.019345][T13780] R13: 00007f3b1ddb6038 R14: 00007f3b1ddb5fa0 R15: 00007ffd22015838 [ 198.019365][T13780] [ 198.618456][T13801] dvmrp0: entered allmulticast mode [ 198.629190][T13807] tipc: Enabled bearer , priority 0 [ 198.636985][T13808] syzkaller0: entered promiscuous mode [ 198.642551][T13808] syzkaller0: entered allmulticast mode [ 198.855217][T13827] netlink: 'syz.3.2197': attribute type 3 has an invalid length. [ 199.435186][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 214.884434][ T5862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.891770][ T5862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.900467][ T5862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.908352][ T5862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.917748][ T5862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.975757][ T5861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.982997][ T5861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.990233][ T5861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.999250][ T5861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.006996][ T5861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.043897][ T5862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.051141][ T5862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.059757][ T5862] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.067639][ T5862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.076427][ T5862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.104232][ T5861] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 215.111458][ T5861] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 215.120049][ T5861] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 215.127987][ T5861] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 215.137002][ T5861] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 216.366875][ T5862] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 216.374149][ T5862] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 216.381317][ T5862] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 216.390342][ T5862] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 216.398047][ T5862] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 216.953866][ T5862] Bluetooth: hci5: command tx timeout [ 217.033778][ T5862] Bluetooth: hci6: command tx timeout [ 217.114739][ T5862] Bluetooth: hci7: command tx timeout [ 217.193758][ T5862] Bluetooth: hci8: command tx timeout [ 218.473813][ T5862] Bluetooth: hci9: command tx timeout [ 219.033939][ T5862] Bluetooth: hci5: command tx timeout [ 219.113826][ T5862] Bluetooth: hci6: command tx timeout [ 219.194271][ T5862] Bluetooth: hci7: command tx timeout [ 219.274119][ T5862] Bluetooth: hci8: command tx timeout [ 220.553796][ T5862] Bluetooth: hci9: command tx timeout [ 221.113763][ T5862] Bluetooth: hci5: command tx timeout [ 221.193969][ T5862] Bluetooth: hci6: command tx timeout [ 221.274284][ T5862] Bluetooth: hci7: command tx timeout [ 221.353775][ T5862] Bluetooth: hci8: command tx timeout [ 222.633921][ T5862] Bluetooth: hci9: command tx timeout [ 223.193796][ T5862] Bluetooth: hci5: command tx timeout [ 223.273901][ T5862] Bluetooth: hci6: command tx timeout [ 223.354514][ T5862] Bluetooth: hci7: command tx timeout [ 223.433753][ T5862] Bluetooth: hci8: command tx timeout [ 224.713834][ T5862] Bluetooth: hci9: command tx timeout [ 233.353860][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 275.262010][ T5861] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 275.270797][ T5861] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 275.278433][ T5861] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 275.289683][ T5861] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 275.297213][ T5861] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 275.320553][ T5862] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 275.330172][ T5862] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 275.337862][ T5862] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 275.346969][ T5862] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 275.355075][ T5862] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 275.382851][ T5861] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 275.391714][ T5861] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 275.399410][ T5861] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 275.408485][ T5861] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 275.415967][ T5861] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 275.443004][ T5861] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 275.451778][ T5861] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 275.459482][ T5861] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 275.468588][ T5861] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 275.476199][ T5861] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 276.688956][ T5862] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 276.697714][ T5862] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 276.705109][ T5862] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 276.712748][ T5862] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 276.722084][ T5862] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 277.353817][ T5862] Bluetooth: hci10: command tx timeout [ 277.434519][ T5861] Bluetooth: hci11: command tx timeout [ 277.440083][ T5862] Bluetooth: hci12: command tx timeout [ 277.513782][ T5862] Bluetooth: hci13: command tx timeout [ 278.793736][ T5862] Bluetooth: hci14: command tx timeout [ 279.433938][ T5862] Bluetooth: hci10: command tx timeout [ 279.514318][ T5862] Bluetooth: hci12: command tx timeout [ 279.519838][ T5862] Bluetooth: hci11: command tx timeout [ 279.593730][ T5862] Bluetooth: hci13: command tx timeout [ 280.873933][ T5862] Bluetooth: hci14: command tx timeout [ 281.513725][ T5862] Bluetooth: hci10: command tx timeout [ 281.594439][ T5861] Bluetooth: hci12: command tx timeout [ 281.599986][ T5862] Bluetooth: hci11: command tx timeout [ 281.673742][ T5862] Bluetooth: hci13: command tx timeout [ 282.953912][ T5862] Bluetooth: hci14: command tx timeout [ 283.593891][ T5862] Bluetooth: hci10: command tx timeout [ 283.674524][ T5861] Bluetooth: hci12: command tx timeout [ 283.680055][ T5862] Bluetooth: hci11: command tx timeout [ 283.753726][ T5862] Bluetooth: hci13: command tx timeout [ 285.033774][ T5862] Bluetooth: hci14: command tx timeout [ 301.833824][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 303.653668][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 303.660287][ C0] rcu: 0-....: (1 GPs behind) idle=4ad4/1/0x4000000000000000 softirq=73593/73594 fqs=5214 [ 303.670283][ C0] rcu: hardirqs softirqs csw/system [ 303.676692][ C0] rcu: number: 5262 0 0 [ 303.683084][ C0] rcu: cputime: 135 0 52344 ==> 52490(ms) [ 303.690868][ C0] rcu: (t=10500 jiffies g=36561 q=4188 ncpus=2) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 303.697185][ C0] CPU: 0 UID: 0 PID: 13807 Comm: syz.1.2193 Not tainted syzkaller #0 PREEMPT(full) [ 303.697199][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.697207][ C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0x83/0x90 [ 303.697226][ C0] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 04 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 303.697235][ C0] RSP: 0018:ffffc90003b4f0d8 EFLAGS: 00000293 [ 303.697244][ C0] RAX: ffffffff8a21d8f5 RBX: 0000000035010000 RCX: 0000000000000000 [ 303.697251][ C0] RDX: ffff888025a05a00 RSI: 000000002a040000 RDI: 0000000035010000 [ 303.697257][ C0] RBP: ffffc90003b4f230 R08: 0000000000000000 R09: 0000000000000000 [ 303.697263][ C0] R10: dffffc0000000000 R11: fffff52000769e0c R12: dffffc0000000000 [ 303.697269][ C0] R13: ffff88808707a200 R14: 000000002a040000 R15: ffffc90003b4f6a0 [ 303.697276][ C0] FS: 00007f4d65d3a6c0(0000) GS:ffff888125c1a000(0000) knlGS:0000000000000000 [ 303.697283][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.697289][ C0] CR2: 00007f4d631f5f98 CR3: 0000000032e60000 CR4: 00000000003526f0 [ 303.697298][ C0] Call Trace: [ 303.697303][ C0] [ 303.697307][ C0] xfrm_alloc_spi+0x3c5/0xf30 [ 303.697323][ C0] ? xfrm_alloc_spi+0x2a0/0xf30 [ 303.697335][ C0] ? __pfx_xfrm_alloc_spi+0x10/0x10 [ 303.697344][ C0] ? xfrm_find_acq+0x87/0xa0 [ 303.697355][ C0] xfrm_alloc_userspi+0x70b/0xc90 [ 303.697370][ C0] ? apparmor_capable+0x137/0x1b0 [ 303.697380][ C0] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 303.697391][ C0] ? __nla_parse+0x40/0x60 [ 303.697405][ C0] xfrm_user_rcv_msg+0x7a3/0xab0 [ 303.697416][ C0] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 303.697433][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 303.697444][ C0] ? kasan_save_track+0x4f/0x80 [ 303.697455][ C0] ? rcu_is_watching+0x15/0xb0 [ 303.697464][ C0] ? trace_contention_end+0x39/0x120 [ 303.697473][ C0] ? __mutex_lock+0x335/0x1350 [ 303.697488][ C0] netlink_rcv_skb+0x208/0x470 [ 303.697501][ C0] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 303.697512][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 303.697526][ C0] ? lock_release+0x4b/0x3e0 [ 303.697537][ C0] ? net_generic+0x1e/0x240 [ 303.697546][ C0] ? net_generic+0x1e/0x240 [ 303.697556][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.697568][ C0] xfrm_netlink_rcv+0x79/0x90 [ 303.697578][ C0] netlink_unicast+0x82f/0x9e0 [ 303.697591][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 303.697602][ C0] ? netlink_sendmsg+0x642/0xb30 [ 303.697614][ C0] ? skb_put+0x11b/0x210 [ 303.697623][ C0] netlink_sendmsg+0x805/0xb30 [ 303.697637][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.697649][ C0] ? futex_unqueue+0x22/0x240 [ 303.697659][ C0] ? aa_sock_msg_perm+0xf1/0x1d0 [ 303.697667][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 303.697677][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.697689][ C0] __sock_sendmsg+0x219/0x270 [ 303.697700][ C0] ____sys_sendmsg+0x505/0x830 [ 303.697711][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.697722][ C0] ? import_iovec+0x74/0xa0 [ 303.697733][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 303.697742][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.697753][ C0] ? futex_wait+0x285/0x360 [ 303.697771][ C0] ? __fget_files+0x2a/0x420 [ 303.697778][ C0] ? __fget_files+0x3a0/0x420 [ 303.697814][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 303.697824][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.697835][ C0] ? rcu_is_watching+0x15/0xb0 [ 303.697845][ C0] ? rcu_is_watching+0x15/0xb0 [ 303.697854][ C0] do_syscall_64+0xfa/0x3b0 [ 303.697862][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.697871][ C0] ? clear_bhb_loop+0x60/0xb0 [ 303.697881][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.697890][ C0] RIP: 0033:0x7f4d64f8ebe9 [ 303.697899][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.697907][ C0] RSP: 002b:00007f4d65d3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.697916][ C0] RAX: ffffffffffffffda RBX: 00007f4d651b5fa0 RCX: 00007f4d64f8ebe9 [ 303.697922][ C0] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000005 [ 303.697928][ C0] RBP: 00007f4d65011e19 R08: 0000000000000000 R09: 0000000000000000 [ 303.697933][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.697938][ C0] R13: 00007f4d651b6038 R14: 00007f4d651b5fa0 R15: 00007ffd83773cd8 [ 303.697948][ C0]