last executing test programs: 5.057581938s ago: executing program 3 (id=17302): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f0000010000000000000000200002000a00000000000000ff01000000000000000000000000000100000000e401617d8bdfd95b5682e87a71259eb4fe05ab58cfda596b624dfbc46f4cd61674f8e1faffa436a7b42876e34c5f817f7a879fe33f6dfe0ca643b06713b27f2193c647ddfd23c7ebc5f1ed3b6cd375a00ca7738c436601c07f741284e681c631"], 0x60}}, 0x0) 4.902462795s ago: executing program 3 (id=17303): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000100)={0x0, '\x00', 0x2}, 0x18) 4.686350843s ago: executing program 3 (id=17305): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x0, 0xc, 0x4, @empty, @remote, 0x40, 0x20, 0x3, 0x2}}) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltclass={0x58c, 0x29, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffe0, 0xd}, {0x9, 0xfff2}}, [@c_cbq={{0x8}, {0x438, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x2, 0x6, 0x101, 0x2, 0x7a}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0x10}, 0x2, 0x9}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0xc}, 0x1, 0x4de58fe0}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xbd0, 0xce, 0x3, 0x1, 0xfffffbab, 0x9, 0x10, 0x81, 0x6, 0xa, 0xfffffff7, 0x2, 0x81, 0x3, 0x400, 0x6, 0x101, 0x9, 0x4, 0xbdcc, 0xe93, 0x6, 0x40, 0x6, 0x7ff, 0xf, 0x3, 0xe, 0x3, 0x0, 0x496, 0x7fff, 0x0, 0x8000, 0xc, 0x5, 0x4, 0x9, 0xfff, 0x4, 0x1ff, 0x8, 0xfcb, 0x0, 0xf, 0x10001, 0x7, 0x9, 0xffffffff, 0x5a, 0x5, 0x75a4f57, 0x0, 0x3, 0x7, 0x5a30, 0xf6b, 0x9, 0x80000000, 0xfffffff5, 0x0, 0x1, 0x80000000, 0x80000000, 0x25, 0x9, 0x68, 0x8, 0x4, 0x2, 0x3, 0x7fff, 0x8000, 0x0, 0x3ff, 0xff, 0x101, 0x1000, 0x7f, 0xe7c, 0xffff, 0x4, 0x4, 0xcd48, 0x7, 0x6, 0x10000, 0x1, 0x2, 0x5, 0x4, 0x821, 0xfff, 0x101, 0x2, 0x8, 0x98, 0x8, 0xfffffffa, 0x0, 0x1, 0x5, 0x9b7, 0x6, 0xffffff81, 0x7, 0xc, 0x6, 0xfffffe01, 0x7, 0x8, 0x9, 0x1ff, 0x2, 0x0, 0x9, 0x8, 0xd, 0x5, 0x800, 0x7fff, 0x38, 0x25e, 0x8, 0x9, 0x7fff, 0x800, 0x0, 0x10001, 0x63, 0x1, 0x6, 0x101, 0x7, 0x1ff, 0x7, 0xc02, 0x5, 0xc31, 0x2, 0x1, 0x10001, 0x5, 0xff, 0x4, 0x81, 0x2a1, 0x3, 0xffffff34, 0xc2, 0x4, 0xffffffff, 0xe7e, 0x8, 0x2, 0xff, 0x7, 0x6, 0x7, 0x2, 0x66, 0x0, 0x4, 0x1928c22b, 0x0, 0x6, 0x1, 0x10000, 0x1, 0x663, 0x4, 0xfffffff2, 0x24b1, 0x2, 0x10000, 0x7555, 0x3, 0x3, 0x1, 0xbc0, 0xcb, 0xffffffff, 0xa80, 0x1, 0x4, 0x7, 0x217e74dd, 0x2, 0x4, 0x5, 0x8, 0x81, 0x10001, 0x8, 0x6, 0x48bb, 0xf, 0x1000, 0x9, 0x9, 0x5, 0x0, 0x9, 0x9, 0x10000, 0x30, 0x0, 0x5, 0x6bc9, 0xffffffff, 0xffffffff, 0xfffffff7, 0xf40, 0x2, 0x7, 0xdfc, 0x10000, 0x1, 0x69a, 0x4, 0xe4e0, 0x6, 0x5, 0x0, 0x101, 0x8, 0x8, 0x0, 0x8, 0x0, 0x9, 0x8000, 0x401, 0x7, 0x8000, 0x8000, 0x9, 0x4, 0x8, 0x7fff, 0x8, 0x100, 0x2, 0xe, 0xaf44, 0xffff9f16, 0x9, 0x6, 0x7, 0x22, 0x100, 0x1, 0x4, 0x0, 0x7, 0xfff]}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x2}}}, @c_atm={{0x8}, {0x50, 0x2, [@TCA_ATM_HDR={0x4}, @TCA_ATM_EXCESS={0x8, 0x4, {0x7, 0xa}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffe0, 0xfff1}}, @TCA_ATM_HDR={0x18, 0x3, "b550db52d2f5e2d70b39da07a75d737ede918cbc"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0xfff1}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x1, 0x3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xd, 0x10}}, @TCA_ATM_FD={0x8}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x6}}}, @c_atm={{0x8}, {0x98, 0x2, [@TCA_ATM_HDR={0x24, 0x3, "32e7ba5577b11ddb97912d9109b2c80a36a574ac464114134672bf9bdf14cd62"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0xfff1}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x1}}, @TCA_ATM_HDR={0x11, 0x3, "f53b50fbd69f10860bd4aaaf05"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xe, 0xe}}, @TCA_ATM_HDR={0x2b, 0x3, "896b98b3977ac8b2866bd24b8cdbc7adbdd398fb85f2b04d4261c70113193e45ea5971757016dd"}, @TCA_ATM_FD={0x8, 0x1, r8}, @TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0x2}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0xd}}]}}]}, 0x58c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) 3.296238215s ago: executing program 3 (id=17322): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xd, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0x7, 0x2, 0x3, 0x3, 0xfe, 0x5, 0x29, 0xfc, 0x0, 0x42, 0x28}, 0xe) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="80007f0a0a0002000180c2000003000004000e8008000f"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x48, r6, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000810) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x130, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x480c) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x7}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r10 = accept$alg(r8, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r10, 0x4018f50b, &(0x7f0000000600)={0x0, 0xfffffffffffffff9, 0x1}) 3.158628124s ago: executing program 1 (id=17323): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x41100}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000ffdbdf250600000008000300", @ANYRES32=r7, @ANYBLOB="081005000c000000"], 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000001740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001700)={&(0x7f00000001c0)={0x1528, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}, {0x8, 0x0, 0xd}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x14dc, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x79, 0x3, "ee07b7ce4dc716ecc0e6b2c92dd04f8ceca5faaebe6bb133c0e66697a08c32101cc634a0f0349313d20149338d147d7f0373d9629fe9db0e87958437ae503b8be1ace07db57476fd9b2f3fe1ac747510a0073e4eb3e9cfc3bdf338857af525fc62de7c1b5c46c5bc43178cd32001d6c5ea01f760a9"}, @NL80211_BAND_60GHZ={0xa5, 0x2, "c1d61301c8de1f70d2c35234c2cb8e37ceaa5c3115d89f01a0fc3232a6007f2f6676066276a2ca2e9f3aa1dedad5ca03df78e3a5525a5b6c7f31e0e2b6973ad8116366b22d445b93fb99dcb9e6308eb72ce76206c1fe2d522cf0c1e58d1db8511259c5db8253daa8b148911afecc58f1ca8152cd1c122c8377d62fb5f9ff86172985ad2863ad9a8924ebf8e6dea336130daf34c3e1b189e462655360178d1b28a0"}, @NL80211_BAND_2GHZ={0xa7, 0x0, "f25ed6be494e95858f71805816488500a7e5a3717bc95f3269efced6bfc20d2a2aeeda8d9361e05454f9ba2a1f8c2cd459befe9d08a4eb08d741a4622a78103a160e234e1adfdb29aaf942682372235d37206f84593f4624819e80c1615089d43bc362aa58355ccaf0e932be03fa84431b654bceff2c0139a542259a19d04f442c13ea63cd69d346c2e1a0a455f12e4994d29f3c88f06bd6b6c294dbf20ce79425be9e"}, @NL80211_BAND_6GHZ={0x9a, 0x3, "8f4a551a4359071a745201169173dc8a7a6aff8251eda0017b0cc721cb879065d3eb36f8a648015047d9c293c999d31710d5a23006502c9f605d497415fc293b9eaa429a6be5bb77582abfada96f86201dc6facce961bfef0401fb58c8630fcf76eebd0da09566e561116f4c8488c4edf7ebd997e64485d632093cdcda673eb5fd510e55683234bfb7bc3a441d984f1e779dac9f0e93"}, @NL80211_BAND_5GHZ={0x8e, 0x1, "c98a9dd20412f4ee161d0ae8d57ad482dbc642c14b867479403857fe285402982b408f570fb2fe4164c36236dbad3eb9dfcbe1019e3a6d4ae5a765c1d0dac1cc9b5b401b52b69aaabad78d92dffdba268b5c0ccc3dd7c6a0b7cfaa65f01964f9cc08f7a9d6c46aa0dc0edff4ce47df2f55f5c4aa6ca24c1df962c9d9dec687c3e220aaaa35d79c145af0"}, @NL80211_BAND_5GHZ={0x72, 0x1, "214bb6f6dcd94ead9a7076a08ae8b79d69949db390f37af48a62bdabd1413fff0c4fd43a9e055c70dfc778b71135e3a6dd3726b2087fcdbccb17b4ece0c5e7887681b421293cca40617b3d182ef32c6d19dd7a8f6f4ab9f5a912c7fcad61be36db607e673baa79710203bb58aab0"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "cdab608e5198784708fae52d18e4b33d32afbc809db91068be93c323176055b342a39cbdfe41df3da19acfccf85ea97e26e671c04f8fee51116941a09a341fdabbc95afa76b90123c06ee365b7a43282bfb4e013baf4ee9cb62e179901b407050ea6fb38c31507cad47572a33ff08a952a9825bb2ab049a357799f158c1fe6aedc2ba647a23c7e2f25acc6b3c41cc6ecd0cff16c639e1c022b617aa841680d9897802e3fdbe405493fc671a8083f4a5f476be587dc1f877b4a47e8e423f4e56485f3209fc9e7e1ec0a124c7519bac2a11d07021ea96b192ff9a8e7b21006e6880d6034708962cb85f1f086f606ecf48a64117ac046d5b22759f7d5d432059b1d117e45e556be7a13836a5e4c886e74c924c8784af010887c480353ae9028b4292cf0bd5d15049f717a2ee048acdc4e4d9f1b3a830183181147de76aa333614a6d0343bdaf2834ea60e4bad5e39e95297786869688d5b5ca8a9d6f9acf055763694b4a3f631c5dcc3168bb0f35f4476528c831f3b701b13301ed70e9ee3ce489a4828d98a7f8de7255196337ee06e2185e84a758bee07fe4e09e678610e053718a36a7aab44f131fcffe58705054d344b6f5d20e60f8549f562a4bf3db100e92124b20bc195bc1356c329773edae89f5207d111190292c0bfb392d52e95c465f878b91c5c0f97ac18dd381708fec6fcc2625b0dcfe10003566da88def8ba39f847ddf0505230380846999f7e123073f3a226eee25acce758b4867103c84af217c49f1844361a4fd6942308cc92f4549de66f6311ed9531ccd64a79cf925266cbd975811e496c87fc5730614520bb29e4f5149a63eddaedcf957b06595b1e5462042d8f7ba0006a364a28f031191a393a9e6503441b0412e9b57daaec753b4f7b8f629401d7c5059b4caeea406fc8d4d6e80b9e928196ddef98e9236cdb20048dc4e4344ec45ef2bbebded4c30064187f7cc847d359f338de82a177e89ba0c5342f16a95e4fb17501e6bd448fe2e3c9613b9496d3672df606bcf633f045ec0967c7dad19b35680c2e56c79459a4b5bb135c7692680fb2c99d87958e158710b5f9442919be8b3e649431dde51962ed503e7ef6366e224aa7fcbcb517d1ad6096bc52d420eb70c8ebb7f9e94dd2af647513e834b0f2eaf7bd3f61229e39ccf16cd573e9b66bb81a4d80dbdeb9ea2e619b0d0ce121957b949f0d9bd48da4658a6cfb0cd962ffdfd58c16063b5fded0425ae6ae8bb22e7cb8983ec68f53d943a45cdbf9aa4ae49454fb2a9c938225ba3a10297d331ac41a19562a0924199d83d10341da3bc93dcac6814ec453cf070b70597c045b7abd248a297d595b7993c857c771cab6f7baefb7cf7a373db0adecd305fe0c610a606000e476ff67a722ccd76d6de3c93d3ecc35904b10102e21f727f457fc6f33907bb54cfcbcce5db54a08274549f42156a712d2999bd015de6a6a557cef16377aa6efddcabe7dc1c029717f62899fb24fc9e380143f543905702755b72973e5b114acd4e6e1173c373ee5b3fcaf8a0a71fc55c93b12f2932e163ccd830b24b6a48bb85fb45b64bda2946869e2eb0d4183c5b3acd5972b42afe4d97e1f11ebbbbdbcc72e40ac773f1829d26a2f75c6dff848bc8f2c51cf4be6dda842333b5ccc3879d621c1750653148810f5f99efe415430a205ad5a7a694a48adb60856749fa718a88616b9daad2a255fd25da993c71acd9eb07396498c92ae018265e6de0b02bef2a174e7e22a25e93c5e95609062e235659c3115d9a806fb91be5569826bbed5aa253924438d0951fbb5b94c30be07ff6e7138db81916e295277a40d91d77b49eff1553b13c8b18f3fae84838874873c1be1c487f30db4a3e2d2bb071073297dbfea4d0a63447ee1899f1d920b0f2b1910cb3bae8570e0ecf9f9007341e20a24b5f340d091082a3ecc2601bc14d331e2e04c8182408e209fe4a6e8d9116b63de7da0598abf0cf0107b85d0e342d73c86987f2829fa59de8c9ef6526436b9caeff5fbe04efff918e83a7db62cf1c87442b7570da02ee08186232e02dac093ccf8cfbf9181d82edec4b5a8b2d1c9646f8c94ce8c4219b98d6c804680e95bb233c355cd76f2fa22d0370add8c0021b2af67ba2d3e186a07d4600955cbc87b648cfb8b8fa5653f672bd7fee3888132c0268556e8f98cf34a9879ab67ca14b6ede28218dbca84452569c5f0d4426af54cc733095a3882fbb1b594953daae58df8d4882082d12c2f25ca9c0150c684345f3f6f1dfb0a5d38853b96d5e19b8cc59b7ad0561d87fa0c4acae9143f43049498991cf74f9f20f67f729494390527f39f8a21c0aafb0f5400a7920f5720789b6125575e81dfbdb3b47d176622bf44d8f3ebd95b7f604f662188c4309b95dc6ea8b610b9210ed2d22e0f45a5cd88ead3a6442c927bb2725dc184f9e00619002c445970a5a556ccd48803a842c4caae9d871126aad57b038131d35fc6afcc47c943faf052722f464ed0f078793e18e8cc5a2c75897b92447b8e9ff565f2f4ca19df953ef138da1fde79bfd98e074a0d20e9d8df0b7da2d42a1d7fe85c09015ddbc1ab71328c721410d7d36b5856bb1066080bc9d48e421aad11aae1f32a9e4b58702e4a2451a8bad426115c4a56ca48eff334d984472f4dea41d7375c9f2dcc4acd8ad9419ef9199b7a642d60b83ce4dc1fd2791e4c8aa2f9a80eb23318cc9d9c7adb96038522fe0d18a49a74ca6e40ebb4dee5419b9c42f2329606b683c4ba44040d0ca4872de5c0470e82cd310ed7be68dd6c13fa019feafc5cdb7bb7799dce1589246923fe02f07e6169a0c8ef3a7b8012c710ff3005c9c4987f3e13b80d75da0db9a5d2ff656d5fbe72461903f3018433e0ec32b12f3f57c93af62f6b0aa130ace3cc971bc1350d14b32368ddb55dd6d864ee92bab23ead4e657240e9036190667dad97bfcc9da789f02edce26d101f95013eb97f6c36f11ede48d466ecc3056fb5e71296bc128181a447cef319afd56ba9d9c9b6d821f00e104fc2e7fd1916789bc28dc4229872bb82af16a3d4ba2d5fa3b51c233e3ef5305501a32332219352ebc346df7664af4c93efedfe5a867102fc28e4b14223c7a4b5eb3b4ea2a02b13ece04bf8c4c83dc97be852009a55cee4631a2c813a309b3012b21045a3605785d4aba32af80f5d80e11480df7d3d483759df64335203a81070c0c1417a9ba0e77148f0acf3ca46ec0ea1ed6880f151b3692906226586e623ef0debf562abb7a4ed11fb05934d4ead6ef87f1a3ea0e56d4f5f8f097992b9f704c93c78f9f9b7477e1a356f8f4a4245813a3cef769a82c71143189b30fe710750affb24abb10b1fe7836dffbe4d3769881c51bd2336ef8af9318957024ab276e7a73c890ce945045cd2a3e98551d1c99c1789c018d6e1e584097561fe30186b178bb0648fa6659e822037203416025088abccb3893a2d5d276a05518c980f913fce8e3956cab4cb374dd19f85783523ef1cb5843e95d504a8341f99e316af65260b061e4b67e0a8260203361ca494c890dafef511c342c09421365614a00e1fc3f9d11e7bf808ee4adf0262406ab832853b2f123d3f7a86291cd533af26604d928266a7bc850e6e57f056fbf2ac9578e1200cb3b3db7913b8e7239af09f9a1a1916621cd8543a19d6735d81f9f7f42397dda876f48a1c7e687d4a4b2943d2c173a4e23a6550a83c6ce4427df890ace35d69a3ee263fe4fc0c2a348d3f1606626fb7776c6e63d3c357805d4a9c0f5f65aa5074e1e6e3c1b9f2ff9d66282290474bdcf08d31a93d5f831bb9320fa5ba0899e46e1d749f4b66dd4bafa3673524e0996d02a9869ea9e3443a00c1640e19a3d90ec197d93c265e950104b9c185865563b204a29d451e60c73608323265c232143caeead878b7846d4225417511e4e9ca43fe2116b5162e93daf0acbac3eca1ffb1f83ba4fcfaf5172f805486180f7e2dc089c1b2685367767505aa0bdcffdc25e49300fd7b6971887481812c8ddcb82b0165b0240b515dcf6c021baa4e108b3e99f5df5a108b83f93aa6af95a20864e4692f230295618dc7692a3e15603fd173610d633bc70411557316a804eec49bf1396f1689edd4c21df73fd7ca7db3756aeec1b61d43d12322d699c6dd4606543ed6d96eebae2b3fc4285f1ca07a78117188cc7727b4704ea29ba6fa2070ad0ab8851919ce8faf32ea3b3b6de0ae9eacfcfb1a35d066299314cd91030c2685014b0587de812e40833148fa9a0b935f127ced821d798f2aa26a3ca7f6724ac0d9bdc4a12e913e0739a49462696787626d958707876b44023d98a92c7d44ba552c707deb5ef659b83242e8bf15dccb3bfe8ad354b867876cfb9b860ef8b0bb4215e73c02ee68de239f738bbaae35b1467d8319f6877366dbf57f05c226bbb85de4851fb871c7530ed662fbace71a5dd49d90037b5c627d2b8a9a9cacc95485adc263ea08b9f83a255c01bc7f09549a57a5cbfded12f203019da9319220676497cc9bcd0b9a0a476da796705893bec179ae21d74dcde8f81c93bd0e738860833bfbc653b331c7cfe0ed32f519af9add63fa746c734f49b38bab5d2eb86a73f7110e64645778a9b439712362182d125b8c2f51cff77eb242d83382cebf12ccabea9aff6d7ab3c6b6eebdbe236ea79c2c435ace2be225cddc94d4855437d99e8c680bdaa8208e2605275677996a908b6e6e3e2b4215c48b2cb84d335792709b5310afb08f85e1fd85f8243193b8315e82ed56428626db57106280e198dd3fb01aab10c1814b1d4c89956fd07fb27cfaa86a5da68d4b6d6ec25815f5f35022ff19cc026e19d53dc4b5e491ffa046b8a65451d3b6f6eb063561abadd0933d9b97314282a731be112e5350d109bb5d3c6e87efd66691ac55ba95db66d23d2ffe35c7365e17410a50635a85d40cd74c88e89064af5cc3c6ff08dbd1466059ad1e9e5f795523d372fd2d2e7599a28d0682e8277c7bed261a64cc7ae75c47cd28f57328bfbb062b2ed31ced829c6bd1eb5f9d44cd5c13cbe4a27847059159652d9f183936fbefe745b0a57d0f8f1fb0b228783d396506e4ee00f44fa83c2408ac66b7006fb933b31096e2cbafe9862df1ae13ea658d9d32acff7128286260d98a2a7c1f6cab2af3b4b8196e5a0715440234c722884097c918a6515ec73e18fcecf7375fd4dadb91dc41c726f4ab0eb5092cee3b1856e5b2d23cc521b170280e98f763e86a491fc9e543e459012f398b31735cedbed5acadb92177fa48cfd6cbe218e4cc7c74e61f0373b8b96c4e528f243a4c1a64c66182ad6cdd8ee52070a9a0a10e9662c899658dbf292e27e2f2df62f1b8f605355310f675003ebc2edb34ad6de78ff41848e8b014bc3a127dcca050e7c6ecc6d19243f917db39713faadf5a4be2c93083bfd6fdbc62592438866314b87c7c33bb5853269f6431185cbdd82b362f893b9dc96e6d87c53dc0cbae3c35cec2432fc1793b31c2d9cb0f22b83540be49fe8554fb17f673b65fd5e695cf712656cf7a2ac70d197284be32df6b5d2d90c13f3e52e8c8573eab88a53ec7739d6855a58e001ce166676e7f6437f2a135a4700eeac8e66ba4cfb2bd45e303d03ff78a513ebccf36a53c5446e9e2c816cae18e07fe7056e7bb05ab1d6a193f8948dcc14f1a22f2318c724600df5231b2a22354182cc2e036b06222b220d4d0c75246f5607a29bf746bc320d4dbf876306afa32fb78bc67012214c8510fb5ea28711bf5d7565aa9f53e7aba9790f4aaecae96befd4ade22aca45c7"}, @NL80211_BAND_2GHZ={0x7a, 0x0, "842ec47789d4776c5f68843af84823381a307e5d1679edb5053bde9cacae9b45b136d9bf528c3e3c32a02ac8a1888d731a8e7720e25eca81e5ea05c576b049394ddf3075aa910efba6ebabbe13f4bb36e996f9dcb5a021cbdceef943d52901d7595cdfa943547c6d95b8e43c4c94773ea4468c55ec1c"}, @NL80211_BAND_60GHZ={0xe9, 0x2, "8fa55e44f499ed59c77fb936b25e7eb2fa6bc9e0abc16e6fc59a073febe9aae5dff36ca4b8214164896396f8e1c54724b73162c80702c9629e5b4ce7343994aabde074adf905e6c7f0285b2637583d42248e379bec62f5fa989e3a4b8502c31f41583a7a3c7d7e1d1155a2022aa1f1120e681cc3155e8624c3c79ad68e72416d5f373df26faa113c3ac60d00981eb57919e27a78866d95f0001f2d535ff24b0269253e5253a990d1b2478855050826a08a60f9722429351a43e0174088f64152a56b8e9bef895ae539079e5cfe988218c023a6eef87a7338b0a801e9c2cc7dee477a2506bd"}]}]}, 0x1528}, 0x1, 0x0, 0x0, 0x880}, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)={0x30, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x30}}, 0x0) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 2.676951355s ago: executing program 1 (id=17325): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="8088578be8e285f65eaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 2.566284695s ago: executing program 1 (id=17327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a01040000000000000000380000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e0001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.527104305s ago: executing program 1 (id=17328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000b1c000/0x3000)=nil, 0x3000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x1000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r2, 0x5c2a7000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, 0xffffffffffffffff, 0xac9d4000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2f0000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e621a63f1}, 0x4000010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a01010000000000000000010002000900010073797a30000000000900030073797a300000000028010000030a05000000000000000000010000050c00024000000000000000010900010073797a3000"], 0x1a4}}, 0x0) socket$kcm(0xa, 0x3, 0x87) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x3, 0x7, 0xd, 0x7fc0000000000003, 0x1, 0x1004, 0x2000000000000007, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0xfffffffffffffcba, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1608060001080006"], 0x0) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.492660817s ago: executing program 2 (id=17329): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)='\x00\x00\x00\x00', 0x4}], 0x1}, 0x40810) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000001b00010326bd7000fcdbdf250a010101000000000000000000000000ac1414aa0000000000000000000000004e2400004f2000450200c02032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b2035d39b3b7409a890000b889e702fd6f0e00000065784391b078bb964755517a849e8f000000000000ff010000000000000200000000000000000000000000002880000000000000000400000000001f0006000000000000000500006d00000000000000000000000102940000000000000000000000000c001500bf000000090000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x1, 0x8070bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x4000000) 2.339160257s ago: executing program 2 (id=17330): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockname(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5b5ace103c07041}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.246239758s ago: executing program 4 (id=17333): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r7 = socket$inet(0x2, 0x80000, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltclass={0x58c, 0x29, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffe0, 0xd}, {0x9, 0xfff2}}, [@c_cbq={{0x8}, {0x438, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x2, 0x6, 0x101, 0x2, 0x7a}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x7, 0x10}, 0x2, 0x9}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0xc}, 0x1, 0x4de58fe0}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xbd0, 0xce, 0x3, 0x1, 0xfffffbab, 0x9, 0x10, 0x81, 0x6, 0xa, 0xfffffff7, 0x2, 0x81, 0x3, 0x400, 0x6, 0x101, 0x9, 0x4, 0xbdcc, 0xe93, 0x6, 0x40, 0x6, 0x7ff, 0xf, 0x3, 0xe, 0x3, 0x0, 0x496, 0x7fff, 0x0, 0x8000, 0xc, 0x5, 0x4, 0x9, 0xfff, 0x4, 0x1ff, 0x8, 0xfcb, 0x0, 0xf, 0x10001, 0x7, 0x9, 0xffffffff, 0x5a, 0x5, 0x75a4f57, 0x0, 0x3, 0x7, 0x5a30, 0xf6b, 0x9, 0x80000000, 0xfffffff5, 0x0, 0x1, 0x80000000, 0x80000000, 0x25, 0x9, 0x68, 0x8, 0x4, 0x2, 0x3, 0x7fff, 0x8000, 0x0, 0x3ff, 0xff, 0x101, 0x1000, 0x7f, 0xe7c, 0xffff, 0x4, 0x4, 0xcd48, 0x7, 0x6, 0x10000, 0x1, 0x2, 0x5, 0x4, 0x821, 0xfff, 0x101, 0x2, 0x8, 0x98, 0x8, 0xfffffffa, 0x0, 0x1, 0x5, 0x9b7, 0x6, 0xffffff81, 0x7, 0xc, 0x6, 0xfffffe01, 0x7, 0x8, 0x9, 0x1ff, 0x2, 0x0, 0x9, 0x8, 0xd, 0x5, 0x800, 0x7fff, 0x38, 0x25e, 0x8, 0x9, 0x7fff, 0x800, 0x0, 0x10001, 0x63, 0x1, 0x6, 0x101, 0x7, 0x1ff, 0x7, 0xc02, 0x5, 0xc31, 0x2, 0x1, 0x10001, 0x5, 0xff, 0x4, 0x81, 0x2a1, 0x3, 0xffffff34, 0xc2, 0x4, 0xffffffff, 0xe7e, 0x8, 0x2, 0xff, 0x7, 0x6, 0x7, 0x2, 0x66, 0x0, 0x4, 0x1928c22b, 0x0, 0x6, 0x1, 0x10000, 0x1, 0x663, 0x4, 0xfffffff2, 0x24b1, 0x2, 0x10000, 0x7555, 0x3, 0x3, 0x1, 0xbc0, 0xcb, 0xffffffff, 0xa80, 0x1, 0x4, 0x7, 0x217e74dd, 0x2, 0x4, 0x5, 0x8, 0x81, 0x10001, 0x8, 0x6, 0x48bb, 0xf, 0x1000, 0x9, 0x9, 0x5, 0x0, 0x9, 0x9, 0x10000, 0x30, 0x0, 0x5, 0x6bc9, 0xffffffff, 0xffffffff, 0xfffffff7, 0xf40, 0x2, 0x7, 0xdfc, 0x10000, 0x1, 0x69a, 0x4, 0xe4e0, 0x6, 0x5, 0x0, 0x101, 0x8, 0x8, 0x0, 0x8, 0x0, 0x9, 0x8000, 0x401, 0x7, 0x8000, 0x8000, 0x9, 0x4, 0x8, 0x7fff, 0x8, 0x100, 0x2, 0xe, 0xaf44, 0xffff9f16, 0x9, 0x6, 0x7, 0x22, 0x100, 0x1, 0x4, 0x0, 0x7, 0xfff]}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x2}}}, @c_atm={{0x8}, {0x50, 0x2, [@TCA_ATM_HDR={0x4}, @TCA_ATM_EXCESS={0x8, 0x4, {0x7, 0xa}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffe0, 0xfff1}}, @TCA_ATM_HDR={0x18, 0x3, "b550db52d2f5e2d70b39da07a75d737ede918cbc"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0xfff1}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x1, 0x3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xd, 0x10}}, @TCA_ATM_FD={0x8, 0x1, r7}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x6}}}, @c_atm={{0x8}, {0x98, 0x2, [@TCA_ATM_HDR={0x24, 0x3, "32e7ba5577b11ddb97912d9109b2c80a36a574ac464114134672bf9bdf14cd62"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0xfff1}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x1}}, @TCA_ATM_HDR={0x11, 0x3, "f53b50fbd69f10860bd4aaaf05"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xe, 0xe}}, @TCA_ATM_HDR={0x2b, 0x3, "896b98b3977ac8b2866bd24b8cdbc7adbdd398fb85f2b04d4261c70113193e45ea5971757016dd"}, @TCA_ATM_FD={0x8, 0x1, r8}, @TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0x2}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0xd}}]}}]}, 0x58c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) 2.244931005s ago: executing program 2 (id=17334): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100200}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x2b, 0x80801, 0x1) listen(r4, 0x9) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000007c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0x10, 0x0, [{0x0, 0x4, "b29a"}, {0x0, 0x6, "ff8f5896"}]}, @generic={0x44, 0x11, "77bf39dad417f1bc03a7c2d4017b8a"}, @cipso={0x86, 0x8, 0x2, [{0x6, 0x2}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) connect$pptp(r5, &(0x7f00000000c0)={0x18, 0x2, {0x3, @private=0xa010102}}, 0x1e) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r4) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r9, 0x4003e}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="a2", 0x5dc}], 0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611898000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 2.068765233s ago: executing program 2 (id=17336): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040002aaaaaaaaaa14ac1414bbaaaaaaaaaa1cac15474f35257cf789ac22f552241414bb"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000120001032cbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="6b8a00003015010008001d0080"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x4, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in=@empty, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) sendto$inet6(r2, &(0x7f0000000380)="b87c7580e3ef3321ff685cb29ca202a037638bbfdfd678f8d0e17d9401ed70caed80f42bd8e3b6a0dcc62b9fd49efc99314992eb43c28bc35cf0833e93a46302e70e0adb81dae83622b6a519e5da15a1a06fb27f000000e575dd6cbb3c20a040290f2632b6fc0a471d9811bc0ead9693a919e1d504ce0923b29ad862e65dfaafb5f8ea09bc2df96aa517a69271cc08f5799372e23dbc03a519cf1e3b631ecb643dac5c80cd34cd8de82143298251e1441f2e7273de0bf13c2d2c4615743c88f368bfbab9d21807bd42f2da60593ef5c946f5d5d95472031fdacf7136c8d0636ac88a5d1c9f756648", 0xe8, 0x2000c851, &(0x7f0000000080)={0xa, 0x4e24, 0xfffffffd, @loopback, 0x5}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.970612167s ago: executing program 0 (id=17337): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0xff, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0xef, 0x0, 0x1}, 0x8000) 1.836261851s ago: executing program 0 (id=17338): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfca2}) sendfile(r2, r1, 0x0, 0xf03a0005) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000240)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000e00b704000000000000850000003300000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x40046, 0x10821}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) 1.679045418s ago: executing program 0 (id=17339): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x26020480) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r13) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r14 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r14, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r15) bind$inet6(r15, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.502789729s ago: executing program 3 (id=17340): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x30, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x9}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, 0x0, 0x0, 0x9000000}, 0x4004000) 1.480675828s ago: executing program 4 (id=17341): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000e80)={@broadcast, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x6, 0x6, "fa2cc6", 0x10, 0x21, 0x0, @local, @loopback, {[], {{0x4e20, 0x4e24, 0x4, 0x1, 0x1, 0x0, 0x0, 0x9, 0x5, "8302a9", 0x9, "d2e1d0"}}}}}}}, 0x0) 1.330773358s ago: executing program 1 (id=17342): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004000001000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xfe5, &(0x7f0000001840)=""/4069, 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004000001000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xfe5, &(0x7f0000001840)=""/4069, 0x0, 0x2}, 0x94) pipe(&(0x7f0000000180)) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) r1 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x2, 0x10, 0x7, 0x6, 0x2, 0x81}) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x700000a, 0x6e073, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x700000a, 0x6e073, 0xffffffffffffffff, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000b000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="c0fbedd8c1c20fb9b8209a08efe4", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb0800040009", @ANYRES32=r2], 0x58}}, 0x4000) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x0, 0x0, 0x2}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000022000107000000000000000c00000000"], 0x14}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) 1.30506429s ago: executing program 4 (id=17343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x23}}, 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404000a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x2d8, 0x0, 0x700001b, 0x148, 0x160, 0x148, 0x160, 0x206, 0x240, 0x240, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x118, 0x160, 0x0, {0x390, 0x8f00}, [@common=@unspec=@physdev={{0x68}, {'veth0_macvtap\x00', {0xff}, 'pimreg0\x00', {0xff}, 0x2, 0x4}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x0, 0x1], 0x1, 0x6}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc, 0x8, 0x7, '\x00', {0x3}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "190b"}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = socket(0x1, 0x803, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x2, '\x00', {0x7, 0x6, "0f0d29", 0x7, 0x33, 0x0, @private1, @empty}}}}}}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000214010028bd7000fedbdf2505005400fce70000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x80d0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x6, 0x7}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000280)={r7, @in={{0x2, 0x4e22, @remote}}, [0x7fff, 0x3, 0x8, 0xb2, 0x2, 0x2347, 0x9, 0x596, 0x9, 0x7, 0x7, 0x100006, 0x1, 0x8000000000000000, 0xfffffffffffffff9]}, &(0x7f0000000200)=0x100) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r8, 0x11}, 0xa) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000007140100", @ANYRES32=r6], 0x30}}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x74, r10, 0x200, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1}, {0x639}, @broadcast, @broadcast, @from_mac=@broadcast, {0xb, 0x6}}, @tdls_setup_resp={0xc, 0x1, 0x25, 0x9, @void, @void, @val={0x2d, 0x1a, {0x1, 0x2, 0x1, 0x0, {0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x6, 0x3}}, @val={0x65, 0x12, {@from_mac=@device_b, @broadcast, @device_b}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.300357706s ago: executing program 3 (id=17344): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000480)={'dummy0\x00', @broadcast}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, &(0x7f0000000300)='skcipher\x00', 0x0, 0x0, 0x3, 0x0, 0x0}, 0x5, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740), 0x0, 0x10}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', &(0x7f0000000940)="ef95e112ba061e6e66d16a", 0xb, 0x2}, {0x1, 0x3, 0x0, &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2ca", 0x75, 0x20}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x32}, {0x1, 0x80000001, 0x0, &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9", 0x65, 0xa}]}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000340), &(0x7f0000000540)=0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(xtea)\x00'}, 0x58) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000001400)={0x3d80, r7, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x7d}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7352a737, 0x47}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x2de8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x7}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x2dd0, 0x4, 0x0, 0x1, [{0x1318, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x58, 0x1, "2a54cd45809dafedfc6afd7e9ff4b7e98c791250c62a399fe14bb0a1ff3d9aef0014eeea7ae1805838f628462821ef57306602681d1ac157d5991b0298e1cc5b6b11c81b1b082bb101b629cf4bcf16f69cb2698e"}, @NL80211_PKTPAT_PATTERN={0x59, 0x2, "83bc175afd7e15e2a41b866d04e9f017f480be7987743f586b13a31e0ed420623e5d49e0fc480cab7c723d68b35ec9a0a50b3241226326751cb88d2dea6b2afe79449a0912b5644e24dd83edaccd8e6660b28b1a29"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_MASK={0xb4, 0x1, "c5c550eec24626e29a04f309fa616b06f0e2bd67016bebcd94323767366e7d236f34472229eefbf4accfaba444b7e235837cced7a397e76bf7036a31518235022b52e5f95c23370e47f313bc4f1637d82c9951961e8f6521bd5042109268aa3fa3f786405af368c5348e8067ce76be9595c9fdc990b599107d0cb2c6e15b5bbcc289475aa15b1296b935d861bd0c3ab33c0ab4fe7bf558dccc3378896a5fd9a53ebe3abe40113cda0cba19d9e5f903b1"}, @NL80211_PKTPAT_MASK={0xdf, 0x1, "edb9c291d99e40fc07b079866c7375cf3bda9acd6871a5530b14ecabb61fe3748841dc0b7935ea0f20060463424970e0cb86ad60dfb6084fbd0e72c3e196adb637adeb97f367386fed534b211533f596ad65baeb9044d4c5ac4d006113282e7d15688b5f966c66d5645db1fa2d56fab90b6f3644f05b20f3f7b927209c5d829e6c8ad7af5a7f6619aabcfb2a350d77d25d733bb30c9bffa7645b8fb5ae5e3995449f0ab2b0fb0cf869adb62dc69d58d244ff280ad9d8339d2f1c508b868da9c2fb3564841603e055efcd0a3766241120f6895a892b1b79e835129e"}, @NL80211_PKTPAT_MASK={0xc6, 0x1, "6fe3790bb4277f076f0fcaf9f49c692b9abd02d3dba0a9e135939a9d79b3bfaefe2ce58096261bc6e408fd618944570deed835ebc8263fda7deaca66eeedfb21453a25632f13c154eaf34b46cc09fbe6d9f797fc0a6d1ce5ade954ababfe9710e4a908f0f7e7b199c3db0b5a21044f339a5ec6297092a0cb771562f5921d8ed1c52c87dd041711360700ea13d406cf209ebc90b0f7aa3e0628473fe354c291ea7568980b2dc8233414e5e1cabad23322f3704f593d646e00f9250d3cba691a3d8b7f"}]}, {0x1298, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xa7, 0x1, "70a56077dfa3fdbcab5c78fe5a8f7394c708439fd93160721047b1c19e5198aeb07ba5b7a80410285abbc28a7249d80e09bcf88cee8cc5ba7d9eafea6164849ad34485880a62f6355bca5f58330960611783028ae8ea001265434ae8842c1adbf86d1c85e28dad4d4f0de5b15bad05c7f23fdd688afb8afbcd2481fb9d06322407490091da7a1386203b4e7590f4a749c1c162d7b20c6f20666a46c1236c2312ecbc3b"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffffffed}, @NL80211_PKTPAT_MASK={0xd, 0x1, "f62c3765696c9a5044"}, @NL80211_PKTPAT_PATTERN={0x5c, 0x2, "696b9394f88257222623b3b70af6488f10fdaa36c59b07ca440a8c8a8954348d1897d5474f147d8531a6d7c67877710ae00d8a64b691ad52c24b1a3a4032501780f8770f3c96168533578a3307d2edbbc8033e3a6a2281c1"}, @NL80211_PKTPAT_MASK={0x93, 0x1, "8114b3d61d22bb92033e6ae9bfeef5304ee82f8f575e908e74667e859d7ee686db196bc7a19961ba24020a791612e3d369892492bc13f24253340c0e61cffdb9e9c801b3f2c4d9450372673910b3a785ba6851ea66a3b02da4fcb2bb93132ad8123667c31426a675b55a949a3d7e5372810c6f755386c7aea043be855aee9be62bedfc95b5df4bc00f4b7b55be0a9d"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_PATTERN={0xe0, 0x2, "e605718d6ff8e33b25163b3e317913c3baedc3344de318c67a92c57ca5a17a5d3ee9feb521b0df42b6bd136834f8eab315792b90342088524eff07bd38227debe7ecdb340023f22d90c4cf803f96187709689c5e18c44bf0d932e6b62797d4402ca2c7df61d475765c5fbce65b9dfb31495545497f201914a0da6a72f0d70bd1b3e553dbaa4c16f40b8783d899b5ec5ceff258a9b393d7b9b5351d675cf675d98a8489eead1343592ab0312169eec78b79db0ef23e8e9376d456bb31954b2abfce8a702b4b8fa6debc3569b1013ae644c372c5267691898338e31190"}]}, {0x1cc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x9d, 0x1, "692738f165e907567dfd82712a17b205ce438e366aa718a47a0230de36e5f512591c939216acbc03b6c6993eda5c79e2c98b1f1e32f844d5b15d6a365b76a243086dce2745a20199bd0f833a778dd97ad26344c5676de30d123e3d4a81bffd310025f08c75a9714898fe3740a51e11bf56078bb67271d3ca3e3e8d4b28aa30b1f7e06e5841a11a6a9f0d89801a0c62c3623064155a7199030e"}, @NL80211_PKTPAT_MASK={0xd5, 0x1, "4b94bc573fa98c6164c580d9c0a02f69514c9f7da49c64bdc79875d0a82275d50abfcdb31624a2782470949ffed5b7cb1bde21d5957b426e8fe10df5a064a1ebf1a45ba3a6b5589b2ab4458231efecf6eb592c2e17bb25fa45485a1479cf6dc1e4c7da6beaa08cab2e2aa68bfec3c7fd7117f681c8cc4bef768157fc98588f1b579999dd310516c494a0f9249fc3de74e5d10016bda205ca923f288f65d1c850a6cbe5bacdf2079b3ee66454a110e397023cac68812a5b21050dd78266ae166729ed2bb076ebdda788791a30c20105e5b0"}, @NL80211_PKTPAT_PATTERN={0x3f, 0x2, "d428247f04a8cd1417f4fb7b1dc7f4a3ebe68df82b5080768d4977717234d5e74394c8ddf788363cbc420518ee787d8e6983b723276e6c4f18599e"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xcd00}]}, {0x2d0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_MASK={0x3d, 0x1, "4c649c3667dd368c41923a80917bd6e06ac12b623ae9e4c2040545350e18a52fa7fc682bd60c99390cdf64b4b2ef55dbe6a1384d6d22830098"}, @NL80211_PKTPAT_MASK={0x101, 0x1, "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"}, @NL80211_PKTPAT_MASK={0x60, 0x1, "71e06fe2f78dbf655192342bc921f3b5a7b300ccb88cb962a0d722f658c51ac4f79b98ac7688c20a7113a4f1fec61735d6a07481c1f9c647f2a5f2a669e8890bea7b6bc24c2c21b395ee6a59091999b718873afef5d494f8ab3d6b19"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10b}, @NL80211_PKTPAT_PATTERN={0xe6, 0x2, "98221caf49bb451bdde940e3c797bcfefc7eb37f238ea756edc3c63ae88d575b775f0098993f6a5f25f6421fc8c313f8dc8ed727b2c6857c38a4ba56c0c9338ce91595f3b76fae121bf67c20171d6ddc964fc7e230ba26ebfa5a2581d28879aadf33323f1c6e7da48063a2739ec7297d7b7eb75275538d3082ff065f6fcd696c999212407173cc4a14ce3a7dbc80c1495859a1948b1d6b58d16a630faa2e2c12825b163adee7a91b18885865ea5e7f65168590eb0f913658fa1ef4e33252f9d6c286462631857c6f7a8d07407f2c4a20a5c28061acac0dbbcdd92bfba4944781508a"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x401}, @NL80211_PKTPAT_MASK={0x25, 0x1, "4ee22d74abda369fd69f5f26a15211ab2e290ab3375a478621bde3100393d2eb92"}]}, {0x12c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x67, 0x1, "363afdafd2804ed4afd6013017c790074778c56c04e877cf92a2e8604f6be1ed33f5c597de1e1fd32f28a0b1a5201b70deceb5af74c08e5a5e66c552e80171d74c87ac67850e84c035021ecc7a75c0d192c0f246232a61c7e490373a36a93c2c769eaa"}, @NL80211_PKTPAT_PATTERN={0x8f, 0x2, "6344bf284ae5b5542e05e75c8780e99ede4c64945ea9aec5eeec9136e08ea65f23cb013475f7e56927d14c96270342f51e954c19f249a72545363f7073ad3d82d130466b1544be3468d4c5da894da36440adc63beb8c1f1aa55415cd98a82cb122f8417a36354bbb4163f5adfca2c739967c824a1b30f74a0a89d0e0c902e2f92d37939940adc2557e676d"}, @NL80211_PKTPAT_MASK={0x2d, 0x1, "bf1d52f73562d40ec9ab08c13315c6d5c4797d931c690aa02386babdfcba96fc0323e3adb6fa615192"}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x5c, 0x2, "faa84c078d9ef78dde47c00fc9e05580efce83a1c166d8cb240a4a9f7a44af92ccc808944a842a1b053113688cf0e192b55e4d28ed385247bcc4a03143b52e7c567200406e7a3855477c9546089be9797e0bafe8e1181a7d"}]}, {0x1f4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xe}, @NL80211_PKTPAT_PATTERN={0xd1, 0x2, "4b1e2627b6477f5f1307047ed64372bf9a9ef8ef8d9010d1a3c0b4f6c2e901cab354304dcb841227a00166d71bfac06faf547b00b8a80ce164feaeb76124c6980af362a58ae06377cec3bf0be7da897155af04dab0068f77b0200f60cbd89319522756877c7200bc2c40edb4fcd44e3e26a44d24927761acf5b38c2b696ddf2281a39da57838b1b08bf0ae4812149ba859e1cdc2a7ccf7623d7cb3ae064be55ca8be1753f85acfee5a9f4926b7e8faf86a1167773dd2de863593526b6c691e1452b0e5260930fe4391fa56ab6a"}, @NL80211_PKTPAT_PATTERN={0xb, 0x2, "a823bda6c6ee5a"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfc000000}, @NL80211_PKTPAT_PATTERN={0xd, 0x2, "95efea7d9e908dda0c"}, @NL80211_PKTPAT_MASK={0xe6, 0x1, "44518cc14ec8090a4addd9474beb17989be787da4052592b2fdf9d2802f6d4d5a22bba06ae7b21e07fc58375640e727c7b3280d9402c885eed5704999fbc13e9d9aa676dfacdf6348f450884ea640c28d79c6f498b491a5ae60f2ad0a706a1c9f624582cd5adef91820e085b654a98936bcc3ba76990f11b7701a0398eebede039b1b29207010a8024d4961f021bc31dd3dac4f3f314819daaeada4e3124db2be9f39f1601ec0d5c7db0e84513933b585701bbb04d55c876ecef799f24b887635fac9fa6ed4fe09c149e8230f4d8cb2e7943723a9f6718b413a82470dded8da0b55f"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x6a4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xe8, 0x12, 0x0, 0x1, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0xc7, 0x2a, [@chsw_timing={0x68, 0x4, {0x7, 0x1}}, @mesh_id={0x72, 0x6}, @random={0x0, 0xb3, "6bb825512b152cfa7529b47727fb5ac97d00f7ebfb86e169ba594706ad2c479b4a98fff39d4f71830f7f0a4f4ca08fd5cf088a33de1f1cce5d924e99302981e96b46ff9156873429cf9562e5536c10d30eb97ae55ef0de63486bf7c83671c10fe8e367ed99e1bd93f705b0c2e2499a2f29f67d68a7b43e3cc2b7d38c8585744ba3e129b6dcf08216c622fb6e28554402973aeac3d4c90278dc8e427c72c13eb8c6c905acf6d60e4c9ca0db0b05817ea5b19776"}]}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x5b4, 0x4, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}, @NL80211_PKTPAT_MASK={0x5a, 0x1, "805b730bfc84a591cb029cd1eaf65a1299a5d3de234b1f992e958605b47803b69fc53f36e2c81b036b9ac880339ee00b9cb206299d8fe95ddcab8f4375ce0ba0fa9f21b6e05f7349c3e910bdbfaf70ba21ff7c830cec"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x81}, @NL80211_PKTPAT_PATTERN={0x48, 0x2, "2a10c04b1889542d25e7dac1e7a1261a66f95d20b7bd7e78cd5184e03f1ba2bd108ee3a4f176e1aad7e174e28036f618dec91f90d0c9e4203b0b61cbfbcc4198004eb861"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xf008}, @NL80211_PKTPAT_PATTERN={0x15, 0x2, "b99baf561c5145aa20da341c58c4b5b37e"}]}, {0x1ac, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10000}, @NL80211_PKTPAT_MASK={0xd0, 0x1, "a4b3a93e5da869154ea62100df9ba180c074b5494b6ba5e737472dc04aa07675f2a6eaa443e797586d69d089ad6deaa55f3ef429ebb10a60ee6e49ca12c4bfbee61cea646117aaa3efa6db4a814a4cf74466f7f976111aab03caba3d45b4593ac93930f8d5ec299853eda0118ccecd277e800ebd025abbedb6fc0fbbaa216d1eb7ee7273d9997b1c437fa79807689fe33905e32a519e4b1d933e3e99d11e67bb168e92ef214f16c1d7c558a572f99dbd3d059147b7e90b040d59689edd05a15e75da6c317df9478478d7d776"}, @NL80211_PKTPAT_PATTERN={0xcf, 0x2, "ef6a9009845d386b3c87e096bf9d8c1e68fe7421e65b5cd47541e31d99c16251d601a80f5decee279a06ea8c04bf63c7152c466e73b9d70097e12b3f22e3b00ba142201b3b601bfe68034a7acbca773edd5dfd89a8679e0bd4b346beec1a561c5cc694c6fd5e7a68d7f8dff16f82df4901c9f2ed29e6ef30eabc8c507d8587ebc9e03b6f644644cab1e1ccffeffe8fbad79dab6b34e13b182a8166898124f88489787a2b6d850c5fe924b61e9ad0c4506a041714f361c0941f5bdb445002a4bda2ea769039415c796270b4"}]}, {0x1fc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x3e, 0x1, "fd23bcdccd822efa124b5a0460fac14ab5e38da6b718bcbd86cefbc541b7710b0a80906554e1851e5296b7dbed1cee584fcf5ef9e9cddc07cfa3"}, @NL80211_PKTPAT_PATTERN={0xcd, 0x2, "cf76c1c069acc87181852e4583646e7f07121a53ee0f35a27a017ef3931236f202de640845decc01e63f99bd2d0b0f8d038aa0e5b71c36a0eede7d4d39436ed49c4d553e70ee18fe5e009693e274fc532e44b0c470639cda3d5f003c37fbb11ec2132de65429909bbcb1ae9f91d9635932b59aea67cf871d2139302a2688a485b2ed65cb917d6d80b0724404220950536b2868d97522dcfe74cae229cc5f1184daefdce89692a1c3fa0eb97955b52275e2cf0a5f32209a02361f8e210302213328e738c4e3bb000218"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0xe0, 0x1, "68c44b7b53d94d24599da3839e3386e6e33b06dcb8c79c735fc107904b0f764ea3d540092ab587970b9bcf76f701526dbf40d586a060d2dfbf5d0eb45b91881383880f171d66d27b2f56cc6bbfc5e8acf3df8093c5ab7c1d3bff5b4603e54b7f2b77c0accb3a27539405db6117f61ff38c9ab9cee7de43c7cb0c0889dc1e07aeb58b7d699408045a57af02baf2a88dfd5d3d8f3502e446589d0ce9ae34d1e12e4fff83c6dae6ff4d1c30324c7c16a7f16acd2dda724a42c405a0b15669150b4838f7ee50a102acb1b8f276fc1c1f340ef6549026a9be935d70fe42c7"}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x70, 0x2, "43df096413bac6eb829d208922e86f5d73676877f3991990e2aafe91d378405f1bc7074357f26060ab03006149d5f3cd05baa965fc8ca7555220b6a88c70e0d0dc90d4205526eb2654c6514892e2f3a145c0d8671531e6ac0b27a76bfb0f08abbe0ddde219ea82debf8326ce"}]}, {0xb4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x77, 0x2, "22d881a533c1da45d47d1d8827bb90c09be46b69d1c12e9c99e8287fa26364d54be5d326c32f0fc9027c7f0d9741cec8f389e6792f3bb9c2ecf87683616aca55a901dd2f775fbb83c9141b395a7b71f2f4129de2158f9940f4e5f68d51a7d11803994d47e0494a7a14b5b9166152f5efc7572d"}, @NL80211_PKTPAT_PATTERN={0x36, 0x2, "16fe00dffca23b6c7fbb0f4c5655cd5ea46fb11f832b291bfe5724bdd552e4a25ccf9d12befffd229572a0bf59ba4d0ff702"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x384, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xf4, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xe3, 0x6, "89949842e42339f7161bc56105c696f25172a42ab4580cc156fd70d7b4e6f6c278e8c09fd915a2ac0d3f480eafbf9bd1c64ba5c1140c04ba2847724935edc53c81b9d49683a6a8be65e0399e930c71f07c492e4bdbd012320e3f11cb58512180331a72da5bd69e52936799b5b02ad45b3e6aa5f6295a7b9d69013e53d728be74a6da2ed5891b91aed00ff7f2812e46315639b5c274d73f91c859d63b657a1b388a922d08e90f238cd9e299173258577d842269dcd20dcf05e39524a1218a367155b0e2b694e3fa7d194cdc8b58b1a4fd0dbe093260fbfc2ca723409c2ccaa2"}]}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x50, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x78}}, @NL80211_ATTR_IE={0x3d, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0xe9, 0x40}}, @random_vendor={0xdd, 0x1d, "da63d80aa2982175b707bb8991473c02f27fe6e7b6613dd8f8c9750d6c"}, @link_id={0x65, 0x12, {@random="c59d9f553702", @device_b, @broadcast}}]}]}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x220, 0x4, 0x0, 0x1, [{0x144, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6f}, @NL80211_PKTPAT_MASK={0xcf, 0x1, "ef50daa5b9bfa1f8619c36e192e93cc7fe4cce5911c9765e5843a8638a8872d54da39adbedf70253cee24a5008f16319aed86414c6f032d05bf448351e4fe78e1a01bad3c07a386096c12af479075f556cccde57882ffb267298df4136bc819012c02ffb939f5d0e1461116725b96749e251671c5a8eba749f0140866fe7cbf48dd748db6503e599480babde8a54d54f92a1e7cfd2b4017b1503d0f9f00c44794041a788b9b5838186127c693b9a6c683d14527781ce9a834f685aa81d75e95c99c0499708b6d200a3b261"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3ff}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfffff27f}, @NL80211_PKTPAT_MASK={0x57, 0x1, "ae44c47bd5f42e86dbb5bd0fcb193a09b963b5f004410e13675a2daf2ddee2989c7cc242463681193f912bd294794f4248a02001171b317d4938efc817885da546708b52e77455e1c4f7cdd7b54dc853d8f120"}]}, {0xd8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0xd3, 0x2, "babd1a8c4bf85e4a7472260f4c8ea79501960453f1449239ec6b888e9b9e23170d4ba4d365046139177221fcac4b4ac2289c886c31a03bf3003cebc0a060d68a863760c844a5e5d6ab1009552bfe2df8bd1c98c994c525f7ba16ac87f48faea5d80514fc7841abf43a8d380e1bea2e75cec430974a0defea5570c704baf91bea422f156eba2f9eb4f1dfecc3a49529a941357f229d35e65f8978bb361f3e3104ecde404631b2ebc8441153e47b8b52f0f9c9b8f38aeda65bf54e74983412e800a772f373b1b0608f17025d2242be05"}]}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x29c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x28c, 0x4, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x2b, 0x2, "72e5f1895bbbb7197515927dfd76d04339534a3522a64abc962ec63d156027346054a38e66ef28"}]}, {0x258, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x38, 0x2, "e084a9fc160d67ebc18a486fa0472738b92bef564f7cf143e56456999905749d7bb807bcbd8dda0426929f2456e5d1ee72f67c2e"}, @NL80211_PKTPAT_PATTERN={0x1d, 0x2, "6b1854d2e737d5d32b87955883e2b0bb1d4bcf4be6c1142bd2"}, @NL80211_PKTPAT_MASK={0xa7, 0x1, "bdb9aa5621167679fca4b570fbb50d9cbdd47a9bec718ead27cfc72d481371b45fc84dd7060e04b9ed59564a01acdcd4888b932522130ca57c4a3e060657e1f562b7b2ac86896acf41f643db0b587e04015ef7e28b550e6fa277a8c0b4040599dc684dffaf2590e3e55f04eb4f4ed17ef736c5386cad202e0b8dd96ce51f04d74044c9986ba440aceeabed10abbb5b8429fad72a25fe211cece6b2e5e991f2174806ce"}, @NL80211_PKTPAT_PATTERN={0x9a, 0x2, "eb2e86f13f4156a0726b77a381819285ca198868f5dc41a34e3f3d77fc75010d04e177c52edb0287f144a3b0d42f5a954553b51bd74e764ca2ebb3fe7ad384764a6d731df7a60988a706b777e9f58279a7908bf6919a54d2b7ca961a0e0f5d9c9804e5344f75528e7d5a0a2cac9dadd9c5e85a56d1611ea512ff79c8e52eaa46f0638d5240cd8760e6bddd85ace609cdead297f6f6e6"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1ff}, @NL80211_PKTPAT_PATTERN={0xb0, 0x2, "52bc6771acc871cc99e5b0b0727ac04a5ef0c4038d0b359643efc514dda6148d7e5412878c30b4116f242c90b7d71893e3d1dbb2508a5ca6eae6fe17c7124114534cd979dc816b4bb2a0615c9d713ad35ee24b3c9530dfce9820f93a3663b56870d66539df53ec06893db12c991c00c4060682a4a52d09395f282e35629812af45557ea91864e9e2678a68bf98913b446d7f856815e6ea287990b8ec9d71b10615b4620212e75fce7712dc3a"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2a4, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xf0, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x800}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x7, 0x3}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x93, 0x6, "c4bc81ba34547f2a1ad8a6a1875966f26415ac0da3190cf1c00b94690c66bd93c33eeac93e9a21ab28875d07326b60f0fe9ae2be13b6f35df117c8ec46a2ea8e9a346dffc87a779263b3ed1b6e6400d4649701223425051e1ef436760aff850066ec3b8ca9e43d68f6ef3ed5bdda2ec7ea3e4e7110c8b9ee3b694e45d82364e805e4d0ebe8429d7be7ee7ebb3dcbba"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0x1e, 0x8, {0xfad1, 0xfffffb01, "77786a54ecc06d6757b08d130806145f429d"}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x35f, 0xffffff39, 0xffff7fff}}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x2, 0x8, 0xf19}}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x58, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_SSIDS={0x4c, 0x2d, 0x0, 0x1, [{0x8, 0x0, @random="ae24bc9b"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x10, 0x0, @random="c78ff930b279ba3ffb61c5e0"}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}]}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xa8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @private=0xa010100}, @NL80211_WOWLAN_TCP_DST_PORT={0x6}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x900}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x76, 0x6, "fb0fcb46f3dd7bab4e723285203d5956b728404d2f99c0673afc81823d3624a66003c8e7a25860b0959d1653f41879f974937bd14f96f01c456dfa381e4304c9ac5c96ef36c803fb9880075737326e15e9a4284aa2b9a4ece06ce2a1270e9979008a97d49fb55462f721d51e4d178fda802c"}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x98, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x20, 0xa, "f5e3b8ef9ade3dfec8fbe9f41ffa423303b3b15d27b47487a5bc4f54"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x68, 0x6, "c62e964eaaa92b82db35bd37d8116ae05f43336c711f64d3590fdacabbb162aed3c7adc13c8d27d5b8760f064cfdc6f0b466b6a05a109c29d2757e63cc841530e02c526c9d2a998b37dca691a20e93442cbc3b729069c52d452feba3541907466918540b"}]}]}]}, 0x3d80}, 0x1, 0x0, 0x0, 0x80}, 0x44001) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$rds(0x15, 0x5, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.296650555s ago: executing program 0 (id=17345): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0, @ANYBLOB="4b76f3b6"], 0x40c}}, 0x4000000) 1.21878852s ago: executing program 2 (id=17346): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c010200"/23, @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a38001280110001006272696467655f736c617665000000002000058004001800050006000100000005000a000000000005001e0000000000140003006272696467655f736c6176655f300000"], 0x6c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000900000000000000000000000902"], 0x0, 0x3e}, 0x28) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) 1.088421557s ago: executing program 0 (id=17347): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x0, {{0x2, 0x4e20, @empty}}}, 0x88) close(0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmsg$unix(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000000280)=""/194, 0x120}], 0x2}, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="dac354544b1d23b40b555e2d1e16dc98", @ANYRES16=r7, @ANYBLOB="31830000000000000000190400000c00018008000300", @ANYRES32=0x0, @ANYRES64=r2, @ANYRES64=r2], 0x20}}, 0x20008000) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, 0x0, 0x40) r8 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r8, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x24) ioctl$int_in(r0, 0x5421, &(0x7f0000000440)=0x8a) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000000, 0x4010, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r9, 0xa2ec9000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x40a8011, 0xffffffffffffffff, 0xeae3f000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) connect$rxrpc(r3, &(0x7f0000000400)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2, 0x6}}, 0x24) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000099c10095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c47140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c98402218d58a49cfd06d9b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3, 0xc}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r11, r1}, 0x14) 1.088098775s ago: executing program 4 (id=17348): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x488f0}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x0, 0x0, 0x0, 0x800, 0x8}, 0x20) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 1.078282749s ago: executing program 2 (id=17349): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xbfffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0xc0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8c, 0x2, [@TCA_MATCHALL_ACT={0x88, 0x2, [@m_gact={0x84, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x10001, 0x3, 0x9, 0x4}}]}, {0x3d, 0x6, "82bb6267b9cce38fc07bd8da1c63cdfa5be3509c181bc1a27be98ec3bdcd67d925391470aa2998fd9590f9be1c76048a392d8f042a7de18cf8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x33, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f0000006600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/16, 0x10}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0xffffffff, @mcast1}, 0x1c) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) 858.645422ms ago: executing program 4 (id=17350): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x40}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 13) 853.24728ms ago: executing program 0 (id=17351): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRES16=r1], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xfbfffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x10}, 0x40c0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$rds(r8, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240048c1}, 0x4004084) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x9, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) unshare(0x2c060000) 438.516532ms ago: executing program 4 (id=17352): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x20000001}, 0x20008000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf0ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000001c0)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61122400000000006113340000000000bf10000000000000150002006f3007783d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000003000000140300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$packet(0x11, 0x2, 0x300) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000006, 0x110, r8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f00000001c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x6b, &(0x7f0000000580)=ANY=[@ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 0s ago: executing program 1 (id=17354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x98, r1, 0x5, 0x0, 0x0, {{0xf, 0x0, 0x300}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0xfffffffffffffffe, @random=0x4, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0x3, 0x7, 0x5, 0x3}}, @void, @void, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x0, 0x1, 0x84, 0x2}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x100}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x1e, 0xf, [@link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7b, 0xaf, 0x11}}]}]]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): 643] [ 1464.918589][T21643] dump_stack_lvl+0xe8/0x150 [ 1464.918624][T21643] should_fail_ex+0x412/0x560 [ 1464.918660][T21643] _copy_from_iter+0x1d3/0x1670 [ 1464.918696][T21643] ? rcu_is_watching+0x15/0xb0 [ 1464.918732][T21643] ? __pfx__copy_from_iter+0x10/0x10 [ 1464.918773][T21643] ? netlink_sendmsg+0x650/0xb40 [ 1464.918795][T21643] ? skb_put+0x11b/0x210 [ 1464.918823][T21643] netlink_sendmsg+0x6c0/0xb40 [ 1464.918857][T21643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1464.918885][T21643] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1464.918918][T21643] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1464.918941][T21643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1464.918965][T21643] __sys_sendto+0x672/0x710 [ 1464.918992][T21643] ? __pfx___sys_sendto+0x10/0x10 [ 1464.919057][T21643] ? fd_install+0x94/0x3d0 [ 1464.919085][T21643] ? fd_install+0x306/0x3d0 [ 1464.919123][T21643] __x64_sys_sendto+0xde/0x100 [ 1464.919153][T21643] do_syscall_64+0x14d/0xf80 [ 1464.919182][T21643] ? trace_irq_disable+0x3b/0x150 [ 1464.919199][T21643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.919220][T21643] ? clear_bhb_loop+0x40/0x90 [ 1464.919245][T21643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.919266][T21643] RIP: 0033:0x7fe9b855d04e [ 1464.919286][T21643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1464.919304][T21643] RSP: 002b:00007fe9b94fae58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1464.919326][T21643] RAX: ffffffffffffffda RBX: 00007fe9b94fc6c0 RCX: 00007fe9b855d04e [ 1464.919342][T21643] RDX: 0000000000000028 RSI: 00007fe9b94fafe0 RDI: 0000000000000004 [ 1464.919355][T21643] RBP: 0000000000000000 R08: 00007fe9b94faed4 R09: 000000000000000c [ 1464.919368][T21643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1464.919381][T21643] R13: 00007fe9b94faf28 R14: 00007fe9b94fafe0 R15: 0000000000000000 [ 1464.919419][T21643] [ 1465.546963][T21667] FAULT_INJECTION: forcing a failure. [ 1465.546963][T21667] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1465.561029][T21667] CPU: 0 UID: 0 PID: 21667 Comm: syz.2.16646 Not tainted syzkaller #0 PREEMPT(full) [ 1465.561049][T21667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1465.561058][T21667] Call Trace: [ 1465.561063][T21667] [ 1465.561069][T21667] dump_stack_lvl+0xe8/0x150 [ 1465.561093][T21667] should_fail_ex+0x412/0x560 [ 1465.561115][T21667] prepare_alloc_pages+0x22a/0x650 [ 1465.561137][T21667] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1465.561155][T21667] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1465.561174][T21667] ? __pfx_policy_nodemask+0x10/0x10 [ 1465.561192][T21667] ? __lock_acquire+0x6b5/0x2cf0 [ 1465.561211][T21667] alloc_pages_mpol+0x232/0x4a0 [ 1465.561231][T21667] vma_alloc_folio_noprof+0xea/0x210 [ 1465.561249][T21667] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1465.561282][T21667] do_pte_missing+0x1656/0x3490 [ 1465.561326][T21667] handle_mm_fault+0x1bec/0x3310 [ 1465.561370][T21667] ? handle_mm_fault+0xee/0x3310 [ 1465.561394][T21667] ? __pfx_handle_mm_fault+0x10/0x10 [ 1465.561414][T21667] ? follow_page_pte+0x841/0x1450 [ 1465.561432][T21667] ? __pfx_follow_page_pte+0x10/0x10 [ 1465.561458][T21667] __get_user_pages+0x165b/0x29d0 [ 1465.561533][T21667] __gup_longterm_locked+0xdcf/0x1630 [ 1465.561561][T21667] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 1465.561585][T21667] gup_fast_fallback+0x1d82/0x22e0 [ 1465.561624][T21667] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1465.561643][T21667] ? is_valid_gup_args+0x11f/0x200 [ 1465.561663][T21667] ? pin_user_pages_fast+0x4d/0xb0 [ 1465.561682][T21667] rds_info_getsockopt+0x20e/0x4a0 [ 1465.561704][T21667] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 1465.561722][T21667] ? __might_fault+0xaf/0x130 [ 1465.561737][T21667] ? rds_getsockopt+0x2a9/0x500 [ 1465.561750][T21667] ? __pfx_rds_getsockopt+0x10/0x10 [ 1465.561765][T21667] do_sock_getsockopt+0x2d3/0x3f0 [ 1465.561783][T21667] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1465.561799][T21667] ? __fget_files+0x3a0/0x420 [ 1465.561817][T21667] ? __fget_files+0x2a/0x420 [ 1465.561839][T21667] __x64_sys_getsockopt+0x1a4/0x240 [ 1465.561861][T21667] do_syscall_64+0x14d/0xf80 [ 1465.561878][T21667] ? trace_irq_disable+0x3b/0x150 [ 1465.561889][T21667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.561902][T21667] ? clear_bhb_loop+0x40/0x90 [ 1465.561917][T21667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.561930][T21667] RIP: 0033:0x7f9ebf39c819 [ 1465.561943][T21667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1465.561954][T21667] RSP: 002b:00007f9ec01b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1465.561969][T21667] RAX: ffffffffffffffda RBX: 00007f9ebf615fa0 RCX: 00007f9ebf39c819 [ 1465.561979][T21667] RDX: 000000000000271e RSI: 0000200000000114 RDI: 0000000000000005 [ 1465.561987][T21667] RBP: 00007f9ec01b1090 R08: 0000200000000040 R09: 0000000000000000 [ 1465.561995][T21667] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 1465.562003][T21667] R13: 00007f9ebf616038 R14: 00007f9ebf615fa0 R15: 00007ffdb5a41988 [ 1465.562023][T21667] [ 1466.145610][T21674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16648'. [ 1466.255450][T21682] netlink: 120 bytes leftover after parsing attributes in process `syz.2.16650'. [ 1466.293835][T21682] netlink: 'syz.2.16650': attribute type 1 has an invalid length. [ 1466.308617][T21682] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16650'. [ 1466.336697][T21687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16653'. [ 1466.498015][T21700] macvtap1: entered promiscuous mode [ 1466.509109][T21700] syz_tun: entered promiscuous mode [ 1466.517624][T21700] syz_tun: left promiscuous mode [ 1466.550272][T21701] batadv_slave_0: entered promiscuous mode [ 1466.879212][T21712] netlink: 804 bytes leftover after parsing attributes in process `syz.3.16658'. [ 1467.180046][T21690] batadv_slave_0: left promiscuous mode [ 1467.441383][T21743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16667'. [ 1467.491313][T21747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16669'. [ 1467.537354][T21747] Cannot find add_set index 0 as target [ 1468.261049][T21782] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1468.283762][T21782] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1468.400049][T21790] lo speed is unknown, defaulting to 1000 [ 1468.415493][T21793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16681'. [ 1468.509996][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16681'. [ 1468.546217][T21800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16682'. [ 1468.758573][T21803] mac80211_hwsim hwsim105 wlan1: entered allmulticast mode [ 1468.925821][T21816] netlink: 'syz.1.16688': attribute type 2 has an invalid length. [ 1468.966198][T21816] 5nè‹Ò: entered promiscuous mode [ 1468.996274][T12108] hid-generic 0005:9C3F:0006.000B: item fetching failed at offset 0/4 [ 1469.014569][T12108] hid-generic 0005:9C3F:0006.000B: probe with driver hid-generic failed with error -22 [ 1469.075194][T21821] tipc: Started in network mode [ 1469.080379][T21821] tipc: Node identity ca6c50fe564b, cluster identity 4711 [ 1469.089063][T21821] tipc: Enabled bearer , priority 0 [ 1469.106453][T21821] syzkaller0: entered promiscuous mode [ 1469.112734][T21821] syzkaller0: entered allmulticast mode [ 1469.138349][T21826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1469.162323][T21821] tipc: Resetting bearer [ 1469.168990][T21821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.180108][T21821] lo: Caught tx_queue_len zero misconfig [ 1469.186674][T21821] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1469.303466][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.443423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.583525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1469.847787][T21817] tipc: Resetting bearer [ 1469.904446][T21817] tipc: Disabling bearer [ 1470.134619][T21863] FAULT_INJECTION: forcing a failure. [ 1470.134619][T21863] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1470.163492][T21863] CPU: 1 UID: 0 PID: 21863 Comm: syz.4.16701 Not tainted syzkaller #0 PREEMPT(full) [ 1470.163524][T21863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1470.163538][T21863] Call Trace: [ 1470.163547][T21863] [ 1470.163556][T21863] dump_stack_lvl+0xe8/0x150 [ 1470.163591][T21863] should_fail_ex+0x412/0x560 [ 1470.163627][T21863] get_futex_key+0x1ac/0x1690 [ 1470.163667][T21863] ? __pfx_get_futex_key+0x10/0x10 [ 1470.163692][T21863] ? __lock_acquire+0x6b5/0x2cf0 [ 1470.163730][T21863] futex_wake+0x114/0x580 [ 1470.163760][T21863] ? __lock_acquire+0x6b5/0x2cf0 [ 1470.163790][T21863] ? __pfx_futex_wake+0x10/0x10 [ 1470.163827][T21863] ? exit_mm_release+0x1a/0x30 [ 1470.163863][T21863] do_futex+0x395/0x420 [ 1470.163896][T21863] ? __pfx_do_futex+0x10/0x10 [ 1470.163927][T21863] ? __might_fault+0xaf/0x130 [ 1470.163952][T21863] mm_release+0x103/0x290 [ 1470.163982][T21863] exit_mm+0x51/0x220 [ 1470.164001][T21863] ? unwind_deferred_task_exit+0x67/0xa0 [ 1470.164034][T21863] do_exit+0x6a2/0x23c0 [ 1470.164066][T21863] ? __pfx_do_exit+0x10/0x10 [ 1470.164091][T21863] ? do_raw_spin_lock+0x12b/0x2f0 [ 1470.164124][T21863] do_group_exit+0x21b/0x2d0 [ 1470.164145][T21863] ? _raw_spin_unlock_irq+0x23/0x50 [ 1470.164177][T21863] get_signal+0x1284/0x1330 [ 1470.164237][T21863] arch_do_signal_or_restart+0xbc/0x830 [ 1470.164267][T21863] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1470.164313][T21863] exit_to_user_mode_loop+0x86/0x480 [ 1470.164335][T21863] ? rcu_is_watching+0x15/0xb0 [ 1470.164368][T21863] do_syscall_64+0x32d/0xf80 [ 1470.164395][T21863] ? trace_irq_disable+0x3b/0x150 [ 1470.164412][T21863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.164433][T21863] ? clear_bhb_loop+0x40/0x90 [ 1470.164459][T21863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.164479][T21863] RIP: 0033:0x7fe86739c819 [ 1470.164500][T21863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1470.164518][T21863] RSP: 002b:00007fe8655d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1470.164541][T21863] RAX: fffffffffffffdfe RBX: 00007fe867616180 RCX: 00007fe86739c819 [ 1470.164557][T21863] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000980 [ 1470.164570][T21863] RBP: 00007fe8655d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1470.164582][T21863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1470.164595][T21863] R13: 00007fe867616218 R14: 00007fe867616180 R15: 00007ffd0f843938 [ 1470.164630][T21863] [ 1470.206610][T21870] FAULT_INJECTION: forcing a failure. [ 1470.206610][T21870] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.463325][T21870] CPU: 1 UID: 0 PID: 21870 Comm: syz.2.16703 Not tainted syzkaller #0 PREEMPT(full) [ 1470.463356][T21870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1470.463369][T21870] Call Trace: [ 1470.463378][T21870] [ 1470.463385][T21870] dump_stack_lvl+0xe8/0x150 [ 1470.463416][T21870] should_fail_ex+0x412/0x560 [ 1470.463453][T21870] should_failslab+0xa8/0x100 [ 1470.463483][T21870] __kmalloc_cache_noprof+0x88/0x660 [ 1470.463520][T21870] ? nsim_fib_event_nb+0x190/0x1210 [ 1470.463551][T21870] nsim_fib_event_nb+0x190/0x1210 [ 1470.463574][T21870] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 1470.463609][T21870] notifier_call_chain+0x1be/0x400 [ 1470.463644][T21870] ? atomic_notifier_call_chain+0x26/0x180 [ 1470.463676][T21870] atomic_notifier_call_chain+0xda/0x180 [ 1470.463707][T21870] call_fib_notifiers+0x31/0x60 [ 1470.463733][T21870] call_fib_entry_notifiers+0x158/0x200 [ 1470.463768][T21870] ? __pfx_call_fib_entry_notifiers+0x10/0x10 [ 1470.463806][T21870] ? lockdep_rtnl_is_held+0x26/0x40 [ 1470.463842][T21870] fib_table_delete+0xa6b/0xd60 [ 1470.463894][T21870] fib_magic+0x456/0x510 [ 1470.463924][T21870] ? __pfx_fib_magic+0x10/0x10 [ 1470.463967][T21870] ? fib_del_ifaddr+0x2fa/0x1460 [ 1470.463996][T21870] fib_del_ifaddr+0x1085/0x1460 [ 1470.464031][T21870] ? preempt_schedule_notrace+0x57/0x90 [ 1470.464058][T21870] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1470.464080][T21870] ? fib_del_ifaddr+0x2fa/0x1460 [ 1470.464107][T21870] fib_inetaddr_event+0xbb/0x190 [ 1470.464136][T21870] notifier_call_chain+0x1be/0x400 [ 1470.464173][T21870] blocking_notifier_call_chain+0x6a/0x90 [ 1470.464194][T21870] __inet_del_ifa+0x840/0xfe0 [ 1470.464231][T21870] inet_rtm_deladdr+0x68d/0x790 [ 1470.464262][T21870] ? __pfx_inet_rtm_deladdr+0x10/0x10 [ 1470.464302][T21870] ? __pfx_inet_rtm_deladdr+0x10/0x10 [ 1470.464322][T21870] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1470.464348][T21870] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1470.464367][T21870] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1470.464393][T21870] ? __lock_acquire+0x6b5/0x2cf0 [ 1470.464431][T21870] netlink_rcv_skb+0x232/0x4b0 [ 1470.464455][T21870] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1470.464479][T21870] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1470.464524][T21870] ? netlink_deliver_tap+0x2e/0x1b0 [ 1470.464557][T21870] netlink_unicast+0x80f/0x9b0 [ 1470.464599][T21870] ? __pfx_netlink_unicast+0x10/0x10 [ 1470.464632][T21870] ? netlink_sendmsg+0x650/0xb40 [ 1470.464652][T21870] ? skb_put+0x11b/0x210 [ 1470.464682][T21870] netlink_sendmsg+0x813/0xb40 [ 1470.464717][T21870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1470.464745][T21870] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1470.464779][T21870] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1470.464807][T21870] ____sys_sendmsg+0x972/0x9f0 [ 1470.464840][T21870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1470.464873][T21870] ? import_iovec+0x73/0xa0 [ 1470.464896][T21870] ___sys_sendmsg+0x2a5/0x360 [ 1470.464929][T21870] ? __pfx____sys_sendmsg+0x10/0x10 [ 1470.464997][T21870] ? __fget_files+0x2a/0x420 [ 1470.465027][T21870] ? __fget_files+0x3a0/0x420 [ 1470.465069][T21870] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1470.465100][T21870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1470.465141][T21870] ? __pfx_ksys_write+0x10/0x10 [ 1470.465182][T21870] do_syscall_64+0x14d/0xf80 [ 1470.465210][T21870] ? trace_irq_disable+0x3b/0x150 [ 1470.465229][T21870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.465250][T21870] ? clear_bhb_loop+0x40/0x90 [ 1470.465277][T21870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.465298][T21870] RIP: 0033:0x7f9ebf39c819 [ 1470.465320][T21870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1470.465338][T21870] RSP: 002b:00007f9ec01b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1470.465362][T21870] RAX: ffffffffffffffda RBX: 00007f9ebf615fa0 RCX: 00007f9ebf39c819 [ 1470.465378][T21870] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1470.465391][T21870] RBP: 00007f9ec01b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1470.465404][T21870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1470.465418][T21870] R13: 00007f9ebf616038 R14: 00007f9ebf615fa0 R15: 00007ffdb5a41988 [ 1470.465451][T21870] [ 1471.168173][T21881] __nla_validate_parse: 5 callbacks suppressed [ 1471.168197][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16706'. [ 1471.516474][T21893] netlink: 'syz.1.16710': attribute type 16 has an invalid length. [ 1471.525829][T21893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16710'. [ 1471.527136][T21887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16711'. [ 1471.555007][T21892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16709'. [ 1471.764556][T21911] netlink: 'syz.4.16712': attribute type 142 has an invalid length. [ 1471.794907][T21908] ip6tnl0: Caught tx_queue_len zero misconfig [ 1471.802112][T21908] netlink: 280 bytes leftover after parsing attributes in process `syz.3.16713'. [ 1471.880431][T21911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16712'. [ 1472.031221][T21918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16714'. [ 1472.101182][T21918] netlink: 'syz.1.16714': attribute type 1 has an invalid length. [ 1472.108417][T21923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16715'. [ 1472.109859][T21918] netlink: 92 bytes leftover after parsing attributes in process `syz.1.16714'. [ 1472.179372][T21925] netlink: 'syz.0.16717': attribute type 10 has an invalid length. [ 1472.241014][T21925] netlink: 'syz.0.16717': attribute type 10 has an invalid length. [ 1472.291703][T21925] dummy0: entered promiscuous mode [ 1472.302633][T21925] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1472.370943][T21931] syzkaller0: entered promiscuous mode [ 1472.384339][T21931] syzkaller0: entered allmulticast mode [ 1472.667158][T21945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16725'. [ 1473.125298][T21977] netlink: 'syz.1.16732': attribute type 1 has an invalid length. [ 1473.164758][T21977] netlink: 'syz.1.16732': attribute type 2 has an invalid length. [ 1473.172749][T21977] netlink: 'syz.1.16732': attribute type 1 has an invalid length. [ 1473.245406][T21977] netlink: 'syz.1.16732': attribute type 3 has an invalid length. [ 1473.379769][T21978] lo speed is unknown, defaulting to 1000 [ 1474.123423][T22010] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1474.145947][T22010] bridge3: entered allmulticast mode [ 1474.638642][T22034] FAULT_INJECTION: forcing a failure. [ 1474.638642][T22034] name failslab, interval 1, probability 0, space 0, times 0 [ 1474.651742][T22034] CPU: 1 UID: 0 PID: 22034 Comm: syz.4.16751 Not tainted syzkaller #0 PREEMPT(full) [ 1474.651771][T22034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1474.651784][T22034] Call Trace: [ 1474.651793][T22034] [ 1474.651802][T22034] dump_stack_lvl+0xe8/0x150 [ 1474.651838][T22034] should_fail_ex+0x412/0x560 [ 1474.651875][T22034] should_failslab+0xa8/0x100 [ 1474.651905][T22034] __kmalloc_cache_noprof+0x88/0x660 [ 1474.651931][T22034] ? sctp_add_bind_addr+0x8c/0x370 [ 1474.651965][T22034] sctp_add_bind_addr+0x8c/0x370 [ 1474.651999][T22034] sctp_copy_local_addr_list+0x314/0x4f0 [ 1474.652032][T22034] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1474.652061][T22034] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1474.652092][T22034] ? sctp_v6_is_any+0x64/0x80 [ 1474.652121][T22034] ? sctp_copy_one_addr+0x93/0x360 [ 1474.652154][T22034] sctp_bind_addr_copy+0xb3/0x3c0 [ 1474.652185][T22034] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1474.652216][T22034] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1474.652244][T22034] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1474.652274][T22034] ? __local_bh_enable_ip+0xd0/0x130 [ 1474.652299][T22034] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1474.652325][T22034] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1474.652355][T22034] sctp_sendmsg+0x1528/0x2c10 [ 1474.652394][T22034] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1474.652421][T22034] ? aa_sk_perm+0x6d5/0x900 [ 1474.652460][T22034] ? __pfx_aa_sk_perm+0x10/0x10 [ 1474.652494][T22034] ? sock_rps_record_flow+0x19/0x350 [ 1474.652528][T22034] ? __pfx_inet_sendmsg+0x10/0x10 [ 1474.652556][T22034] ? inet_sendmsg+0x2f4/0x370 [ 1474.652581][T22034] ? __pfx_inet_sendmsg+0x10/0x10 [ 1474.652613][T22034] __sys_sendto+0x5de/0x710 [ 1474.652642][T22034] ? __pfx___sys_sendto+0x10/0x10 [ 1474.652664][T22034] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1474.652711][T22034] ? __fget_files+0x3a0/0x420 [ 1474.652755][T22034] ? ksys_write+0x242/0x270 [ 1474.652782][T22034] ? __pfx_ksys_write+0x10/0x10 [ 1474.652810][T22034] __x64_sys_sendto+0xde/0x100 [ 1474.652839][T22034] do_syscall_64+0x14d/0xf80 [ 1474.652867][T22034] ? trace_irq_disable+0x3b/0x150 [ 1474.652884][T22034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.652905][T22034] ? clear_bhb_loop+0x40/0x90 [ 1474.652929][T22034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.652949][T22034] RIP: 0033:0x7fe86739c819 [ 1474.652970][T22034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1474.652988][T22034] RSP: 002b:00007fe868171028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1474.653011][T22034] RAX: ffffffffffffffda RBX: 00007fe867615fa0 RCX: 00007fe86739c819 [ 1474.653026][T22034] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 1474.653039][T22034] RBP: 00007fe868171090 R08: 000020000005ffe4 R09: 000000000000001c [ 1474.653052][T22034] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 1474.653064][T22034] R13: 00007fe867616038 R14: 00007fe867615fa0 R15: 00007ffd0f843938 [ 1474.653100][T22034] [ 1474.964260][T22032] FAULT_INJECTION: forcing a failure. [ 1474.964260][T22032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1474.978598][T22032] CPU: 0 UID: 0 PID: 22032 Comm: syz.2.16749 Not tainted syzkaller #0 PREEMPT(full) [ 1474.978627][T22032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1474.978639][T22032] Call Trace: [ 1474.978649][T22032] [ 1474.978658][T22032] dump_stack_lvl+0xe8/0x150 [ 1474.978693][T22032] should_fail_ex+0x412/0x560 [ 1474.978729][T22032] _copy_from_user+0x2d/0xb0 [ 1474.978754][T22032] ___sys_recvmsg+0x175/0x590 [ 1474.978789][T22032] ? __pfx____sys_recvmsg+0x10/0x10 [ 1474.978844][T22032] ? __fget_files+0x3a0/0x420 [ 1474.978888][T22032] do_recvmmsg+0x334/0x800 [ 1474.978925][T22032] ? __pfx_do_recvmmsg+0x10/0x10 [ 1474.978965][T22032] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1474.979015][T22032] __x64_sys_recvmmsg+0x198/0x250 [ 1474.979047][T22032] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1474.979089][T22032] do_syscall_64+0x14d/0xf80 [ 1474.979117][T22032] ? trace_irq_disable+0x3b/0x150 [ 1474.979136][T22032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.979157][T22032] ? clear_bhb_loop+0x40/0x90 [ 1474.979182][T22032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.979204][T22032] RIP: 0033:0x7f9ebf39c819 [ 1474.979233][T22032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1474.979256][T22032] RSP: 002b:00007f9ec0190028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1474.979279][T22032] RAX: ffffffffffffffda RBX: 00007f9ebf616090 RCX: 00007f9ebf39c819 [ 1474.979352][T22032] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 0000000000000003 [ 1474.979370][T22032] RBP: 00007f9ec0190090 R08: 0000000000000000 R09: 0000000000000000 [ 1474.979383][T22032] R10: 0000000040010022 R11: 0000000000000246 R12: 0000000000000001 [ 1474.979396][T22032] R13: 00007f9ebf616128 R14: 00007f9ebf616090 R15: 00007ffdb5a41988 [ 1474.979471][T22032] [ 1476.271993][T22078] tipc: Started in network mode [ 1476.302177][T22078] tipc: Node identity , cluster identity 4711 [ 1476.322400][T22078] tipc: Failed to set node id, please configure manually [ 1476.342732][T22078] tipc: Enabling of bearer rejected, failed to enable media [ 1476.540599][T22084] __nla_validate_parse: 11 callbacks suppressed [ 1476.540624][T22084] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16764'. [ 1476.700287][T22091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16767'. [ 1476.726942][T22091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16767'. [ 1476.745966][T22091] netlink: 'syz.3.16767': attribute type 11 has an invalid length. [ 1476.756886][T22091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16767'. [ 1476.809451][T22093] netlink: 'syz.1.16768': attribute type 1 has an invalid length. [ 1477.051807][T22108] FAULT_INJECTION: forcing a failure. [ 1477.051807][T22108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1477.127976][T22108] CPU: 0 UID: 0 PID: 22108 Comm: syz.1.16771 Not tainted syzkaller #0 PREEMPT(full) [ 1477.128008][T22108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1477.128020][T22108] Call Trace: [ 1477.128029][T22108] [ 1477.128039][T22108] dump_stack_lvl+0xe8/0x150 [ 1477.128075][T22108] should_fail_ex+0x412/0x560 [ 1477.128111][T22108] _copy_to_user+0x31/0xb0 [ 1477.128137][T22108] simple_read_from_buffer+0xe1/0x170 [ 1477.128173][T22108] proc_fail_nth_read+0x1bb/0x230 [ 1477.128208][T22108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1477.128240][T22108] ? rw_verify_area+0x2a6/0x4d0 [ 1477.128264][T22108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1477.128296][T22108] vfs_read+0x20c/0xa70 [ 1477.128317][T22108] ? fdget_pos+0x246/0x320 [ 1477.128342][T22108] ? __pfx___mutex_lock+0x10/0x10 [ 1477.128374][T22108] ? __pfx_vfs_read+0x10/0x10 [ 1477.128399][T22108] ? __fget_files+0x2a/0x420 [ 1477.128434][T22108] ? __fget_files+0x3a0/0x420 [ 1477.128461][T22108] ? __fget_files+0x2a/0x420 [ 1477.128508][T22108] ksys_read+0x150/0x270 [ 1477.128535][T22108] ? __pfx_ksys_read+0x10/0x10 [ 1477.128570][T22108] do_syscall_64+0x14d/0xf80 [ 1477.128597][T22108] ? trace_irq_disable+0x3b/0x150 [ 1477.128614][T22108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.128635][T22108] ? clear_bhb_loop+0x40/0x90 [ 1477.128660][T22108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.128679][T22108] RIP: 0033:0x7f327a95d04e [ 1477.128698][T22108] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1477.128767][T22108] RSP: 002b:00007f327b840fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1477.128800][T22108] RAX: ffffffffffffffda RBX: 00007f327b8416c0 RCX: 00007f327a95d04e [ 1477.128814][T22108] RDX: 000000000000000f RSI: 00007f327b8410a0 RDI: 0000000000000004 [ 1477.128824][T22108] RBP: 00007f327b841090 R08: 0000000000000000 R09: 0000000000000000 [ 1477.128834][T22108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1477.128856][T22108] R13: 00007f327ac16128 R14: 00007f327ac16090 R15: 00007ffd9b801b68 [ 1477.128899][T22108] [ 1477.424151][T22115] netlink: 'syz.2.16773': attribute type 2 has an invalid length. [ 1477.451655][T22113] netlink: 264 bytes leftover after parsing attributes in process `syz.3.16770'. [ 1477.472023][T22115] netlink: 'syz.2.16773': attribute type 1 has an invalid length. [ 1477.512727][T22115] netlink: 108 bytes leftover after parsing attributes in process `syz.2.16773'. [ 1477.874061][T22127] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16777'. [ 1477.939715][T22134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16780'. [ 1478.020954][T22138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16781'. [ 1478.056824][T22140] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1478.148823][T22141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16782'. [ 1478.167813][T22140] bond8: (slave lo): Enslaving as an active interface with an up link [ 1478.193848][T22140] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1478.547612][T22159] syzkaller0: entered promiscuous mode [ 1478.603036][T22159] syzkaller0: entered allmulticast mode [ 1478.618060][T22162] 0: reclassify loop, rule prio 0, protocol 800 [ 1478.679234][T22164] No such timeout policy "syz0" [ 1478.873614][T22164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1479.248957][T22190] netlink: 'syz.1.16793': attribute type 72 has an invalid length. [ 1479.345146][T22196] syzkaller1: entered promiscuous mode [ 1479.350894][T22196] syzkaller1: entered allmulticast mode [ 1479.501249][T22200] netlink: 'syz.1.16797': attribute type 10 has an invalid length. [ 1479.937205][T22220] tipc: Enabling of bearer rejected, failed to enable media [ 1480.363463][T22234] netlink: 'syz.4.16806': attribute type 72 has an invalid length. [ 1482.100964][T22303] FAULT_INJECTION: forcing a failure. [ 1482.100964][T22303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1482.169999][T22303] CPU: 1 UID: 0 PID: 22303 Comm: syz.1.16829 Not tainted syzkaller #0 PREEMPT(full) [ 1482.170031][T22303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1482.170043][T22303] Call Trace: [ 1482.170052][T22303] [ 1482.170080][T22303] dump_stack_lvl+0xe8/0x150 [ 1482.170115][T22303] should_fail_ex+0x412/0x560 [ 1482.170148][T22303] _copy_to_user+0x31/0xb0 [ 1482.170172][T22303] simple_read_from_buffer+0xe1/0x170 [ 1482.170206][T22303] proc_fail_nth_read+0x1bb/0x230 [ 1482.170240][T22303] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1482.170281][T22303] ? rw_verify_area+0x2a6/0x4d0 [ 1482.170303][T22303] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1482.170333][T22303] vfs_read+0x20c/0xa70 [ 1482.170363][T22303] ? __pfx_vfs_read+0x10/0x10 [ 1482.170381][T22303] ? aa_sk_perm+0x6d5/0x900 [ 1482.170415][T22303] ? j1939_sk_setsockopt+0x350/0xc50 [ 1482.170460][T22303] ksys_read+0x150/0x270 [ 1482.170485][T22303] ? __pfx_ksys_read+0x10/0x10 [ 1482.170518][T22303] do_syscall_64+0x14d/0xf80 [ 1482.170546][T22303] ? trace_irq_disable+0x3b/0x150 [ 1482.170563][T22303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.170584][T22303] ? clear_bhb_loop+0x40/0x90 [ 1482.170608][T22303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.170628][T22303] RIP: 0033:0x7f327a95d04e [ 1482.170647][T22303] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1482.170665][T22303] RSP: 002b:00007f327b861fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1482.170687][T22303] RAX: ffffffffffffffda RBX: 00007f327b8626c0 RCX: 00007f327a95d04e [ 1482.170702][T22303] RDX: 000000000000000f RSI: 00007f327b8620a0 RDI: 0000000000000004 [ 1482.170714][T22303] RBP: 00007f327b862090 R08: 0000000000000000 R09: 0000000000000000 [ 1482.170727][T22303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1482.170739][T22303] R13: 00007f327ac16038 R14: 00007f327ac15fa0 R15: 00007ffd9b801b68 [ 1482.170774][T22303] [ 1483.160719][T22329] __nla_validate_parse: 11 callbacks suppressed [ 1483.160742][T22329] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.16838'. [ 1483.493960][T22335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16839'. [ 1483.504080][T22335] netlink: 23 bytes leftover after parsing attributes in process `syz.1.16839'. [ 1483.615786][ T8953] block nbd64: Receive control failed (result -32) [ 1483.998290][T22346] FAULT_INJECTION: forcing a failure. [ 1483.998290][T22346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1484.073640][T22346] CPU: 0 UID: 0 PID: 22346 Comm: syz.0.16842 Not tainted syzkaller #0 PREEMPT(full) [ 1484.073671][T22346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1484.073684][T22346] Call Trace: [ 1484.073693][T22346] [ 1484.073702][T22346] dump_stack_lvl+0xe8/0x150 [ 1484.073738][T22346] should_fail_ex+0x412/0x560 [ 1484.073774][T22346] _copy_from_user+0x2d/0xb0 [ 1484.073800][T22346] copy_from_sockptr+0x48/0x70 [ 1484.073833][T22346] ip6_mroute_setsockopt+0x574/0xf90 [ 1484.073875][T22346] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 1484.073942][T22346] do_ipv6_setsockopt+0x37f/0x3150 [ 1484.073977][T22346] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1484.074001][T22346] ? kstrtouint+0x6e/0xe0 [ 1484.074029][T22346] ? aa_label_sk_perm+0x532/0x6e0 [ 1484.074068][T22346] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1484.074096][T22346] ? get_pid_task+0x20/0x1f0 [ 1484.074117][T22346] ? get_pid_task+0x20/0x1f0 [ 1484.074134][T22346] ? get_pid_task+0x20/0x1f0 [ 1484.074169][T22346] ? __lock_acquire+0x6b5/0x2cf0 [ 1484.074227][T22346] ? aa_sk_perm+0x6d5/0x900 [ 1484.074260][T22346] ipv6_setsockopt+0x59/0x170 [ 1484.074289][T22346] rawv6_setsockopt+0x276/0x5f0 [ 1484.074317][T22346] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1484.074339][T22346] ? aa_sock_opt_perm+0xff/0x1a0 [ 1484.074371][T22346] ? sock_common_setsockopt+0x36/0xc0 [ 1484.074395][T22346] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1484.074418][T22346] do_sock_setsockopt+0x17c/0x1b0 [ 1484.074450][T22346] __x64_sys_setsockopt+0x13d/0x1b0 [ 1484.074482][T22346] do_syscall_64+0x14d/0xf80 [ 1484.074510][T22346] ? trace_irq_disable+0x3b/0x150 [ 1484.074528][T22346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.074549][T22346] ? clear_bhb_loop+0x40/0x90 [ 1484.074575][T22346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.074595][T22346] RIP: 0033:0x7fe9b859c819 [ 1484.074618][T22346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1484.074637][T22346] RSP: 002b:00007fe9b94fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1484.074661][T22346] RAX: ffffffffffffffda RBX: 00007fe9b8815fa0 RCX: 00007fe9b859c819 [ 1484.074677][T22346] RDX: 00000000000000d0 RSI: 0000000000000029 RDI: 0000000000000003 [ 1484.074690][T22346] RBP: 00007fe9b94fc090 R08: 0000000000000004 R09: 0000000000000000 [ 1484.074703][T22346] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1484.074717][T22346] R13: 00007fe9b8816038 R14: 00007fe9b8815fa0 R15: 00007ffc19ef3c78 [ 1484.074749][T22346] [ 1484.878620][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1484.894209][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1484.966623][T22361] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.16849'. [ 1485.464114][T22374] xt_hashlimit: size too large, truncated to 1048576 [ 1486.311639][T22391] FAULT_INJECTION: forcing a failure. [ 1486.311639][T22391] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.353907][T22391] CPU: 0 UID: 0 PID: 22391 Comm: syz.0.16856 Not tainted syzkaller #0 PREEMPT(full) [ 1486.353937][T22391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1486.353950][T22391] Call Trace: [ 1486.353959][T22391] [ 1486.353969][T22391] dump_stack_lvl+0xe8/0x150 [ 1486.354004][T22391] should_fail_ex+0x412/0x560 [ 1486.354041][T22391] should_failslab+0xa8/0x100 [ 1486.354071][T22391] __kmalloc_noprof+0xe8/0x760 [ 1486.354096][T22391] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1486.354118][T22391] ? sock_kmalloc+0xd6/0x160 [ 1486.354152][T22391] sock_kmalloc+0xd6/0x160 [ 1486.354183][T22391] af_alg_alloc_areq+0x99/0x200 [ 1486.354220][T22391] aead_recvmsg+0x469/0x1460 [ 1486.354256][T22391] ? __lock_acquire+0x6b5/0x2cf0 [ 1486.354294][T22391] ? __pfx_aead_recvmsg+0x10/0x10 [ 1486.354318][T22391] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1486.354351][T22391] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1486.354376][T22391] ? security_socket_recvmsg+0x7e/0x2c0 [ 1486.354399][T22391] ? __pfx_aead_recvmsg+0x10/0x10 [ 1486.354423][T22391] sock_recvmsg+0x172/0x1b0 [ 1486.354450][T22391] ____sys_recvmsg+0x1e6/0x4a0 [ 1486.354490][T22391] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1486.354545][T22391] ? import_iovec+0x73/0xa0 [ 1486.354573][T22391] ___sys_recvmsg+0x215/0x590 [ 1486.354599][T22391] ? get_pid_task+0x20/0x1f0 [ 1486.354626][T22391] ? __pfx____sys_recvmsg+0x10/0x10 [ 1486.354684][T22391] ? __fget_files+0x3a0/0x420 [ 1486.354729][T22391] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1486.354761][T22391] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1486.354801][T22391] ? __pfx_ksys_write+0x10/0x10 [ 1486.354839][T22391] do_syscall_64+0x14d/0xf80 [ 1486.354869][T22391] ? trace_irq_disable+0x3b/0x150 [ 1486.354888][T22391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.354909][T22391] ? clear_bhb_loop+0x40/0x90 [ 1486.354937][T22391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.354958][T22391] RIP: 0033:0x7fe9b859c819 [ 1486.354980][T22391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1486.354999][T22391] RSP: 002b:00007fe9b94fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1486.355023][T22391] RAX: ffffffffffffffda RBX: 00007fe9b8815fa0 RCX: 00007fe9b859c819 [ 1486.355039][T22391] RDX: 0000000000010002 RSI: 0000200000001600 RDI: 0000000000000004 [ 1486.355053][T22391] RBP: 00007fe9b94fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1486.355067][T22391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1486.355079][T22391] R13: 00007fe9b8816038 R14: 00007fe9b8815fa0 R15: 00007ffc19ef3c78 [ 1486.355116][T22391] [ 1486.745954][T22402] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1486.761629][T22399] FAULT_INJECTION: forcing a failure. [ 1486.761629][T22399] name failslab, interval 1, probability 0, space 0, times 0 [ 1486.775863][T22402] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1486.786303][T22402] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1486.806194][T22402] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1486.818460][T22399] CPU: 0 UID: 0 PID: 22399 Comm: syz.4.16861 Not tainted syzkaller #0 PREEMPT(full) [ 1486.818488][T22399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1486.818510][T22399] Call Trace: [ 1486.818519][T22399] [ 1486.818528][T22399] dump_stack_lvl+0xe8/0x150 [ 1486.818563][T22399] should_fail_ex+0x412/0x560 [ 1486.818600][T22399] should_failslab+0xa8/0x100 [ 1486.818629][T22399] __kvmalloc_node_noprof+0x178/0x8a0 [ 1486.818656][T22399] ? nf_hook_entries_grow+0x288/0x720 [ 1486.818686][T22399] ? __pfx___mutex_lock+0x10/0x10 [ 1486.818721][T22399] nf_hook_entries_grow+0x288/0x720 [ 1486.818765][T22399] __nf_register_net_hook+0x2c9/0x930 [ 1486.818804][T22399] nf_register_net_hook+0xb2/0x190 [ 1486.818833][T22399] nf_register_net_hooks+0x44/0x1b0 [ 1486.818862][T22399] nf_defrag_ipv6_enable+0x87/0x120 [ 1486.818892][T22399] nf_ct_netns_do_get+0x1e7/0x5c0 [ 1486.818924][T22399] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 1486.818948][T22399] ? __mutex_trylock_common+0x158/0x260 [ 1486.818983][T22399] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1486.819017][T22399] ? nf_ct_netns_get+0xe9/0x320 [ 1486.819046][T22399] xt_ct_tg_check+0xf9/0xa90 [ 1486.819079][T22399] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 1486.819104][T22399] ? xt_find_target+0x1f3/0x240 [ 1486.819138][T22399] xt_check_target+0x3b5/0xa90 [ 1486.819169][T22399] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1486.819201][T22399] ? __pfx_xt_check_target+0x10/0x10 [ 1486.819246][T22399] ? xt_find_target+0x1f3/0x240 [ 1486.819280][T22399] translate_table+0x184f/0x20b0 [ 1486.819330][T22399] ? __pfx_translate_table+0x10/0x10 [ 1486.819382][T22399] ? _copy_from_user+0x94/0xb0 [ 1486.819412][T22399] do_ip6t_set_ctl+0x9fe/0xe10 [ 1486.819437][T22399] ? rcu_is_watching+0x15/0xb0 [ 1486.819473][T22399] ? trace_contention_end+0x3d/0x150 [ 1486.819503][T22399] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1486.819549][T22399] ? __pfx___mutex_lock+0x10/0x10 [ 1486.819580][T22399] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1486.819620][T22399] ? __pfx_aa_sk_perm+0x10/0x10 [ 1486.819659][T22399] nf_setsockopt+0x26f/0x290 [ 1486.819690][T22399] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1486.819715][T22399] do_sock_setsockopt+0x17c/0x1b0 [ 1486.819748][T22399] __x64_sys_setsockopt+0x13d/0x1b0 [ 1486.819782][T22399] do_syscall_64+0x14d/0xf80 [ 1486.819811][T22399] ? trace_irq_disable+0x3b/0x150 [ 1486.819830][T22399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.819852][T22399] ? clear_bhb_loop+0x40/0x90 [ 1486.819879][T22399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.819900][T22399] RIP: 0033:0x7fe86739c819 [ 1486.819921][T22399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1486.819940][T22399] RSP: 002b:00007fe868171028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1486.819963][T22399] RAX: ffffffffffffffda RBX: 00007fe867615fa0 RCX: 00007fe86739c819 [ 1486.819978][T22399] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 1486.819992][T22399] RBP: 00007fe868171090 R08: 0000000000001420 R09: 0000000000000000 [ 1486.820005][T22399] R10: 0000200000002880 R11: 0000000000000246 R12: 0000000000000001 [ 1486.820018][T22399] R13: 00007fe867616038 R14: 00007fe867615fa0 R15: 00007ffd0f843938 [ 1486.820056][T22399] [ 1487.214373][T22403] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1487.229475][T22404] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1487.603834][T22430] lo speed is unknown, defaulting to 1000 [ 1487.649125][T22426] netlink: 830 bytes leftover after parsing attributes in process `syz.3.16867'. [ 1487.741550][T22442] FAULT_INJECTION: forcing a failure. [ 1487.741550][T22442] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.754665][T22442] CPU: 1 UID: 0 PID: 22442 Comm: syz.2.16870 Not tainted syzkaller #0 PREEMPT(full) [ 1487.754695][T22442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1487.754709][T22442] Call Trace: [ 1487.754718][T22442] [ 1487.754726][T22442] dump_stack_lvl+0xe8/0x150 [ 1487.754761][T22442] should_fail_ex+0x412/0x560 [ 1487.754795][T22442] should_failslab+0xa8/0x100 [ 1487.754821][T22442] ? skb_clone+0x212/0x3a0 [ 1487.754848][T22442] kmem_cache_alloc_noprof+0x87/0x650 [ 1487.754872][T22442] ? __bpf_redirect+0x9b4/0x12a0 [ 1487.754898][T22442] skb_clone+0x212/0x3a0 [ 1487.754929][T22442] bpf_clone_redirect+0x16a/0x4b0 [ 1487.754960][T22442] ? bpf_test_run+0x1d1/0x830 [ 1487.754982][T22442] bpf_prog_cfa4bf6e1e03aea2+0x5f/0x68 [ 1487.755006][T22442] ? __lock_acquire+0x6b5/0x2cf0 [ 1487.755057][T22442] ? ktime_get+0x45/0x200 [ 1487.755081][T22442] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1487.755102][T22442] ? lockdep_hardirqs_on+0x7a/0x110 [ 1487.755129][T22442] ? ktime_get+0x45/0x200 [ 1487.755146][T22442] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1487.755166][T22442] ? bpf_test_run+0x1d1/0x830 [ 1487.755200][T22442] ? bpf_test_timer_continue+0x10c/0x320 [ 1487.755227][T22442] bpf_test_run+0x354/0x830 [ 1487.755271][T22442] ? __pfx_bpf_test_run+0x10/0x10 [ 1487.755302][T22442] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1487.755321][T22442] ? slab_build_skb+0x52/0x410 [ 1487.755344][T22442] ? __kasan_krealloc+0xeb/0x110 [ 1487.755368][T22442] ? eth_type_trans+0x35e/0x6d0 [ 1487.755401][T22442] ? convert___skb_to_skb+0x3d/0x5b0 [ 1487.755425][T22442] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1487.755460][T22442] ? __fget_files+0x2a/0x420 [ 1487.755495][T22442] ? __fget_files+0x3a0/0x420 [ 1487.755521][T22442] ? __fget_files+0x2a/0x420 [ 1487.755554][T22442] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1487.755576][T22442] bpf_prog_test_run+0x2c7/0x340 [ 1487.755602][T22442] __sys_bpf+0x643/0x950 [ 1487.755623][T22442] ? __pfx___sys_bpf+0x10/0x10 [ 1487.755660][T22442] ? ksys_write+0x242/0x270 [ 1487.755684][T22442] ? __pfx_ksys_write+0x10/0x10 [ 1487.755715][T22442] __x64_sys_bpf+0x7c/0x90 [ 1487.755743][T22442] do_syscall_64+0x14d/0xf80 [ 1487.755769][T22442] ? trace_irq_disable+0x3b/0x150 [ 1487.755788][T22442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.755808][T22442] ? clear_bhb_loop+0x40/0x90 [ 1487.755834][T22442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.755854][T22442] RIP: 0033:0x7f9ebf39c819 [ 1487.755874][T22442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.755891][T22442] RSP: 002b:00007f9ec01b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1487.755913][T22442] RAX: ffffffffffffffda RBX: 00007f9ebf615fa0 RCX: 00007f9ebf39c819 [ 1487.755928][T22442] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1487.755941][T22442] RBP: 00007f9ec01b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.755954][T22442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1487.755965][T22442] R13: 00007f9ebf616038 R14: 00007f9ebf615fa0 R15: 00007ffdb5a41988 [ 1487.756000][T22442] [ 1488.351539][T22449] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16872'. [ 1488.471063][T22456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16874'. [ 1488.734096][T22466] netlink: 52 bytes leftover after parsing attributes in process `syz.0.16879'. [ 1489.208728][T22490] FAULT_INJECTION: forcing a failure. [ 1489.208728][T22490] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.253674][T22490] CPU: 1 UID: 0 PID: 22490 Comm: syz.2.16886 Not tainted syzkaller #0 PREEMPT(full) [ 1489.253704][T22490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1489.253716][T22490] Call Trace: [ 1489.253724][T22490] [ 1489.253732][T22490] dump_stack_lvl+0xe8/0x150 [ 1489.253764][T22490] should_fail_ex+0x412/0x560 [ 1489.253796][T22490] should_failslab+0xa8/0x100 [ 1489.253824][T22490] __kmalloc_cache_noprof+0x88/0x660 [ 1489.253849][T22490] ? sctp_add_bind_addr+0x8c/0x370 [ 1489.253885][T22490] sctp_add_bind_addr+0x8c/0x370 [ 1489.253919][T22490] sctp_copy_local_addr_list+0x314/0x4f0 [ 1489.253952][T22490] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1489.253981][T22490] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1489.254008][T22490] ? sctp_association_new+0x1894/0x25e0 [ 1489.254037][T22490] ? sctp_v4_is_any+0x35/0x60 [ 1489.254065][T22490] ? sctp_copy_one_addr+0x93/0x360 [ 1489.254097][T22490] sctp_bind_addr_copy+0xb3/0x3c0 [ 1489.254128][T22490] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1489.254160][T22490] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1489.254188][T22490] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1489.254212][T22490] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1489.254235][T22490] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1489.254255][T22490] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1489.254278][T22490] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1489.254302][T22490] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1489.254332][T22490] sctp_sendmsg+0x1528/0x2c10 [ 1489.254372][T22490] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1489.254399][T22490] ? aa_sk_perm+0x6d5/0x900 [ 1489.254437][T22490] ? __pfx_aa_sk_perm+0x10/0x10 [ 1489.254470][T22490] ? sock_rps_record_flow+0x19/0x350 [ 1489.254495][T22490] ? __pfx_inet_sendmsg+0x10/0x10 [ 1489.254522][T22490] ? inet_sendmsg+0x2f4/0x370 [ 1489.254555][T22490] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1489.254577][T22490] ? __pfx_inet_sendmsg+0x10/0x10 [ 1489.254604][T22490] __sys_sendto+0x5de/0x710 [ 1489.254634][T22490] ? __pfx___sys_sendto+0x10/0x10 [ 1489.254657][T22490] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1489.254704][T22490] ? __fget_files+0x3a0/0x420 [ 1489.254749][T22490] ? ksys_write+0x242/0x270 [ 1489.254774][T22490] ? __pfx_ksys_write+0x10/0x10 [ 1489.254804][T22490] __x64_sys_sendto+0xde/0x100 [ 1489.254834][T22490] do_syscall_64+0x14d/0xf80 [ 1489.254862][T22490] ? trace_irq_disable+0x3b/0x150 [ 1489.254881][T22490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.254900][T22490] ? clear_bhb_loop+0x40/0x90 [ 1489.254926][T22490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.254945][T22490] RIP: 0033:0x7f9ebf39c819 [ 1489.254968][T22490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1489.254985][T22490] RSP: 002b:00007f9ec01b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1489.255008][T22490] RAX: ffffffffffffffda RBX: 00007f9ebf615fa0 RCX: 00007f9ebf39c819 [ 1489.255023][T22490] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1489.255037][T22490] RBP: 00007f9ec01b1090 R08: 0000200000000240 R09: 000000000000001c [ 1489.255051][T22490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1489.255064][T22490] R13: 00007f9ebf616038 R14: 00007f9ebf615fa0 R15: 00007ffdb5a41988 [ 1489.255100][T22490] [ 1489.952516][T22518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16896'. [ 1490.090665][T22526] netlink: 'syz.0.16897': attribute type 1 has an invalid length. [ 1490.119604][T22526] bond10: entered promiscuous mode [ 1490.139323][T22526] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1490.188222][T22526] bond10: (slave bridge4): making interface the new active one [ 1490.196612][T22526] bridge4: entered promiscuous mode [ 1490.203661][T22526] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 1490.232836][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 1490.241001][ C0] lec:lec_tx_timeout: lec0 [ 1490.391684][T22543] netlink: 'syz.1.16900': attribute type 2 has an invalid length. [ 1490.434439][T22543] !: entered promiscuous mode [ 1490.455661][T22546] FAULT_INJECTION: forcing a failure. [ 1490.455661][T22546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1490.479864][T22546] CPU: 1 UID: 0 PID: 22546 Comm: syz.0.16903 Not tainted syzkaller #0 PREEMPT(full) [ 1490.479895][T22546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1490.479908][T22546] Call Trace: [ 1490.479916][T22546] [ 1490.479926][T22546] dump_stack_lvl+0xe8/0x150 [ 1490.479961][T22546] should_fail_ex+0x412/0x560 [ 1490.479997][T22546] _copy_to_user+0x31/0xb0 [ 1490.480022][T22546] simple_read_from_buffer+0xe1/0x170 [ 1490.480058][T22546] proc_fail_nth_read+0x1bb/0x230 [ 1490.480090][T22546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1490.480122][T22546] ? rw_verify_area+0x2a6/0x4d0 [ 1490.480144][T22546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1490.480175][T22546] vfs_read+0x20c/0xa70 [ 1490.480202][T22546] ? fdget_pos+0x246/0x320 [ 1490.480226][T22546] ? __pfx___mutex_lock+0x10/0x10 [ 1490.480256][T22546] ? __pfx_vfs_read+0x10/0x10 [ 1490.480281][T22546] ? __fget_files+0x2a/0x420 [ 1490.480326][T22546] ? __fget_files+0x3a0/0x420 [ 1490.480354][T22546] ? __fget_files+0x2a/0x420 [ 1490.480393][T22546] ksys_read+0x150/0x270 [ 1490.480420][T22546] ? __pfx_ksys_read+0x10/0x10 [ 1490.480456][T22546] do_syscall_64+0x14d/0xf80 [ 1490.480483][T22546] ? trace_irq_disable+0x3b/0x150 [ 1490.480500][T22546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.480521][T22546] ? clear_bhb_loop+0x40/0x90 [ 1490.480546][T22546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.480567][T22546] RIP: 0033:0x7fe9b855d04e [ 1490.480587][T22546] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1490.480605][T22546] RSP: 002b:00007fe9b94fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1490.480628][T22546] RAX: ffffffffffffffda RBX: 00007fe9b94fc6c0 RCX: 00007fe9b855d04e [ 1490.480644][T22546] RDX: 000000000000000f RSI: 00007fe9b94fc0a0 RDI: 0000000000000009 [ 1490.480657][T22546] RBP: 00007fe9b94fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.480670][T22546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1490.480682][T22546] R13: 00007fe9b8816038 R14: 00007fe9b8815fa0 R15: 00007ffc19ef3c78 [ 1490.480719][T22546] [ 1490.836314][T22550] tunl0: Caught tx_queue_len zero misconfig [ 1490.916656][T27803] lec:lec_start_xmit: lec0:No lecd attached [ 1491.082268][T22562] sctp: [Deprecated]: syz.1.16908 (pid 22562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1491.082268][T22562] Use struct sctp_sack_info instead [ 1491.427446][T22587] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1491.575511][T22600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16915'. [ 1492.002344][T22625] netlink: 'syz.1.16927': attribute type 13 has an invalid length. [ 1492.011213][T22625] netlink: 'syz.1.16927': attribute type 17 has an invalid length. [ 1492.031463][T22626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16928'. [ 1492.118524][T22625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1493.158299][T22671] IPVS: Scheduler module ip_vs_ not found [ 1493.331142][T22685] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16941'. [ 1493.775250][T22694] ip6erspan0: entered promiscuous mode [ 1493.787805][T22694] ip6erspan0: entered allmulticast mode [ 1493.824705][T22696] FAULT_INJECTION: forcing a failure. [ 1493.824705][T22696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1493.850428][T22696] CPU: 0 UID: 0 PID: 22696 Comm: syz.4.16945 Not tainted syzkaller #0 PREEMPT(full) [ 1493.850458][T22696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1493.850471][T22696] Call Trace: [ 1493.850479][T22696] [ 1493.850487][T22696] dump_stack_lvl+0xe8/0x150 [ 1493.850523][T22696] should_fail_ex+0x412/0x560 [ 1493.850558][T22696] _copy_from_user+0x2d/0xb0 [ 1493.850582][T22696] kstrtouint_from_user+0xd6/0x180 [ 1493.850614][T22696] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1493.850665][T22696] proc_fail_nth_write+0x8e/0x210 [ 1493.850695][T22696] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1493.850730][T22696] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1493.850761][T22696] vfs_write+0x29a/0xb90 [ 1493.850794][T22696] ? __pfx_vfs_write+0x10/0x10 [ 1493.850819][T22696] ? __fget_files+0x2a/0x420 [ 1493.850852][T22696] ? __fget_files+0x3a0/0x420 [ 1493.850880][T22696] ? __fget_files+0x2a/0x420 [ 1493.850919][T22696] ksys_write+0x150/0x270 [ 1493.850946][T22696] ? __pfx_ksys_write+0x10/0x10 [ 1493.850982][T22696] do_syscall_64+0x14d/0xf80 [ 1493.851010][T22696] ? trace_irq_disable+0x3b/0x150 [ 1493.851029][T22696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.851050][T22696] ? clear_bhb_loop+0x40/0x90 [ 1493.851074][T22696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.851094][T22696] RIP: 0033:0x7fe86735d04e [ 1493.851116][T22696] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1493.851135][T22696] RSP: 002b:00007fe868170fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1493.851158][T22696] RAX: ffffffffffffffda RBX: 00007fe8681716c0 RCX: 00007fe86735d04e [ 1493.851173][T22696] RDX: 0000000000000001 RSI: 00007fe8681710a0 RDI: 0000000000000006 [ 1493.851186][T22696] RBP: 00007fe868171090 R08: 0000000000000000 R09: 0000000000000000 [ 1493.851198][T22696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.851210][T22696] R13: 00007fe867616038 R14: 00007fe867615fa0 R15: 00007ffd0f843938 [ 1493.851246][T22696] [ 1494.195197][T22707] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16948'. [ 1495.393906][T22734] netlink: 'syz.3.16959': attribute type 13 has an invalid length. [ 1496.105545][T22764] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16965'. [ 1496.232832][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5320 ms [ 1496.240987][ C0] lec:lec_tx_timeout: lec0 [ 1496.756550][T22788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16970'. [ 1496.763417][T22786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16972'. [ 1496.851602][T22794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16974'. [ 1497.241766][T22815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16978'. [ 1497.512636][T22823] netlink: 'syz.2.16980': attribute type 10 has an invalid length. [ 1497.636399][T22834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16982'. [ 1497.738596][T22834] block nbd15: Unsupported socket: should be TCP or UNIX. [ 1497.759889][T22837] xt_socket: unknown flags 0xfc [ 1497.814005][T22837] xt_hashlimit: size too large, truncated to 1048576 [ 1497.891512][T22847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16985'. [ 1498.468356][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16986'. [ 1498.594727][T22859] pim6reg: entered allmulticast mode [ 1498.609490][T22857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1499.577223][T22899] FAULT_INJECTION: forcing a failure. [ 1499.577223][T22899] name failslab, interval 1, probability 0, space 0, times 0 [ 1499.591402][T22899] CPU: 0 UID: 0 PID: 22899 Comm: syz.1.16999 Not tainted syzkaller #0 PREEMPT(full) [ 1499.591432][T22899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1499.591445][T22899] Call Trace: [ 1499.591454][T22899] [ 1499.591463][T22899] dump_stack_lvl+0xe8/0x150 [ 1499.591500][T22899] should_fail_ex+0x412/0x560 [ 1499.591533][T22899] ? alloc_inode+0x6a/0x1b0 [ 1499.591562][T22899] should_failslab+0xa8/0x100 [ 1499.591593][T22899] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1499.591617][T22899] ? simple_start_creating+0xcc/0x110 [ 1499.591647][T22899] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1499.591671][T22899] alloc_inode+0x6a/0x1b0 [ 1499.591702][T22899] new_inode+0x22/0x170 [ 1499.591739][T22899] __debugfs_create_file+0xb8/0x400 [ 1499.591767][T22899] debugfs_create_file_full+0x3f/0x60 [ 1499.591795][T22899] ref_tracker_dir_debugfs+0x197/0x360 [ 1499.591817][T22899] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1499.591873][T22899] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 1499.591898][T22899] ? alloc_netdev_mqs+0xa6/0x11b0 [ 1499.591933][T22899] ? __raw_spin_lock_init+0x45/0x100 [ 1499.591960][T22899] alloc_netdev_mqs+0x272/0x11b0 [ 1499.591988][T22899] ? __pfx_ieee80211_if_setup+0x10/0x10 [ 1499.592021][T22899] ieee80211_if_add+0x482/0x13a0 [ 1499.592053][T22899] ? trace_kmalloc+0x2a/0x110 [ 1499.592081][T22899] ieee80211_add_iface+0xbb/0x5e0 [ 1499.592108][T22899] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 1499.592134][T22899] ? __alloc_skb+0x4e5/0x7d0 [ 1499.592165][T22899] nl80211_new_interface+0x80a/0x11f0 [ 1499.592206][T22899] ? __pfx_nl80211_new_interface+0x10/0x10 [ 1499.592252][T22899] genl_family_rcv_msg_doit+0x22a/0x330 [ 1499.592306][T22899] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1499.592352][T22899] ? bpf_lsm_capable+0x9/0x20 [ 1499.592380][T22899] ? security_capable+0x7e/0x2c0 [ 1499.592418][T22899] genl_rcv_msg+0x61c/0x7a0 [ 1499.592456][T22899] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1499.592482][T22899] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1499.592506][T22899] ? __pfx_nl80211_new_interface+0x10/0x10 [ 1499.592530][T22899] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1499.592555][T22899] ? __lock_acquire+0x6b5/0x2cf0 [ 1499.592598][T22899] netlink_rcv_skb+0x232/0x4b0 [ 1499.592624][T22899] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1499.592655][T22899] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1499.592702][T22899] ? down_read+0x272/0x2e0 [ 1499.592722][T22899] ? genl_rcv+0xd/0x40 [ 1499.592751][T22899] genl_rcv+0x28/0x40 [ 1499.592776][T22899] netlink_unicast+0x80f/0x9b0 [ 1499.592818][T22899] ? __pfx_netlink_unicast+0x10/0x10 [ 1499.592853][T22899] ? netlink_sendmsg+0x650/0xb40 [ 1499.592874][T22899] ? skb_put+0x11b/0x210 [ 1499.592903][T22899] netlink_sendmsg+0x813/0xb40 [ 1499.592938][T22899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1499.592966][T22899] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1499.592997][T22899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1499.593024][T22899] ____sys_sendmsg+0x972/0x9f0 [ 1499.593063][T22899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1499.593102][T22899] ? import_iovec+0x73/0xa0 [ 1499.593131][T22899] ___sys_sendmsg+0x2a5/0x360 [ 1499.593164][T22899] ? __pfx____sys_sendmsg+0x10/0x10 [ 1499.593238][T22899] ? __fget_files+0x2a/0x420 [ 1499.593267][T22899] ? __fget_files+0x3a0/0x420 [ 1499.593319][T22899] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1499.593351][T22899] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1499.593391][T22899] ? __pfx_ksys_write+0x10/0x10 [ 1499.593431][T22899] do_syscall_64+0x14d/0xf80 [ 1499.593458][T22899] ? trace_irq_disable+0x3b/0x150 [ 1499.593476][T22899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.593498][T22899] ? clear_bhb_loop+0x40/0x90 [ 1499.593524][T22899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.593544][T22899] RIP: 0033:0x7f327a99c819 [ 1499.593566][T22899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1499.593584][T22899] RSP: 002b:00007f327b862028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1499.593606][T22899] RAX: ffffffffffffffda RBX: 00007f327ac15fa0 RCX: 00007f327a99c819 [ 1499.593621][T22899] RDX: 0000000024044884 RSI: 0000200000000300 RDI: 0000000000000003 [ 1499.593634][T22899] RBP: 00007f327b862090 R08: 0000000000000000 R09: 0000000000000000 [ 1499.593647][T22899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1499.593659][T22899] R13: 00007f327ac16038 R14: 00007f327ac15fa0 R15: 00007ffd9b801b68 [ 1499.593698][T22899] [ 1500.032989][T22899] debugfs: out of free dentries, can not create file 'netdev@ffff888055b70620' [ 1501.229088][T22928] syzkaller1: entered promiscuous mode [ 1501.263635][T22928] syzkaller1: entered allmulticast mode [ 1501.570627][T22935] FAULT_INJECTION: forcing a failure. [ 1501.570627][T22935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1501.643601][T22935] CPU: 1 UID: 0 PID: 22935 Comm: syz.1.17009 Not tainted syzkaller #0 PREEMPT(full) [ 1501.643632][T22935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1501.643645][T22935] Call Trace: [ 1501.643654][T22935] [ 1501.643663][T22935] dump_stack_lvl+0xe8/0x150 [ 1501.643699][T22935] should_fail_ex+0x412/0x560 [ 1501.643734][T22935] _copy_from_iter+0x1d3/0x1670 [ 1501.643766][T22935] ? unwind_next_frame+0xa5/0x23c0 [ 1501.643803][T22935] ? __lock_acquire+0x6b5/0x2cf0 [ 1501.643829][T22935] ? __pfx__copy_from_iter+0x10/0x10 [ 1501.643873][T22935] tun_get_user+0x275/0x3dd0 [ 1501.643909][T22935] ? aa_file_perm+0x192/0x15e0 [ 1501.643936][T22935] ? aa_file_perm+0x50e/0x15e0 [ 1501.643954][T22935] ? __pfx_tun_get_user+0x10/0x10 [ 1501.643973][T22935] ? aa_file_perm+0x192/0x15e0 [ 1501.643999][T22935] ? __lock_acquire+0x6b5/0x2cf0 [ 1501.644033][T22935] ? ref_tracker_alloc+0x35c/0x4c0 [ 1501.644065][T22935] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1501.644101][T22935] ? tun_get+0x1c/0x2f0 [ 1501.644129][T22935] ? tun_get+0x1c/0x2f0 [ 1501.644150][T22935] ? tun_get+0x1c/0x2f0 [ 1501.644177][T22935] tun_chr_write_iter+0x113/0x200 [ 1501.644213][T22935] vfs_write+0x61d/0xb90 [ 1501.644244][T22935] ? __pfx_vfs_write+0x10/0x10 [ 1501.644277][T22935] ? __fget_files+0x2a/0x420 [ 1501.644314][T22935] ksys_write+0x150/0x270 [ 1501.644339][T22935] ? __pfx_ksys_write+0x10/0x10 [ 1501.644371][T22935] do_syscall_64+0x14d/0xf80 [ 1501.644399][T22935] ? trace_irq_disable+0x3b/0x150 [ 1501.644416][T22935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.644435][T22935] ? clear_bhb_loop+0x40/0x90 [ 1501.644459][T22935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.644479][T22935] RIP: 0033:0x7f327a99c819 [ 1501.644499][T22935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1501.644517][T22935] RSP: 002b:00007f327b862028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1501.644540][T22935] RAX: ffffffffffffffda RBX: 00007f327ac15fa0 RCX: 00007f327a99c819 [ 1501.644554][T22935] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 1501.644567][T22935] RBP: 00007f327b862090 R08: 0000000000000000 R09: 0000000000000000 [ 1501.644579][T22935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1501.644590][T22935] R13: 00007f327ac16038 R14: 00007f327ac15fa0 R15: 00007ffd9b801b68 [ 1501.644624][T22935] [ 1501.919596][T22946] netlink: 'syz.3.17012': attribute type 5 has an invalid length. [ 1501.934749][T22946] netlink: 'syz.3.17012': attribute type 1 has an invalid length. [ 1502.221739][T22953] netlink: 72 bytes leftover after parsing attributes in process `syz.2.17013'. [ 1502.232180][T22947] bond4: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 1502.266449][T22951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17012'. [ 1502.331514][T22946] veth11: entered promiscuous mode [ 1502.344209][T22946] bond4: (slave veth11): Enslaving as a backup interface with a down link [ 1502.356418][T13505] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1502.357282][T22951] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1502.473642][T13500] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1502.769856][T22966] FAULT_INJECTION: forcing a failure. [ 1502.769856][T22966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1502.813685][T22966] CPU: 0 UID: 0 PID: 22966 Comm: syz.3.17018 Not tainted syzkaller #0 PREEMPT(full) [ 1502.813717][T22966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1502.813730][T22966] Call Trace: [ 1502.813739][T22966] [ 1502.813748][T22966] dump_stack_lvl+0xe8/0x150 [ 1502.813785][T22966] should_fail_ex+0x412/0x560 [ 1502.813822][T22966] _copy_to_user+0x31/0xb0 [ 1502.813850][T22966] simple_read_from_buffer+0xe1/0x170 [ 1502.813887][T22966] proc_fail_nth_read+0x1bb/0x230 [ 1502.813921][T22966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1502.813955][T22966] ? rw_verify_area+0x2a6/0x4d0 [ 1502.813978][T22966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1502.814010][T22966] vfs_read+0x20c/0xa70 [ 1502.814032][T22966] ? fdget_pos+0x246/0x320 [ 1502.814058][T22966] ? __pfx___mutex_lock+0x10/0x10 [ 1502.814090][T22966] ? __pfx_vfs_read+0x10/0x10 [ 1502.814116][T22966] ? __fget_files+0x2a/0x420 [ 1502.814152][T22966] ? __fget_files+0x3a0/0x420 [ 1502.814182][T22966] ? __fget_files+0x2a/0x420 [ 1502.814222][T22966] ksys_read+0x150/0x270 [ 1502.814248][T22966] ? __pfx_ksys_read+0x10/0x10 [ 1502.814286][T22966] do_syscall_64+0x14d/0xf80 [ 1502.814315][T22966] ? trace_irq_disable+0x3b/0x150 [ 1502.814334][T22966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.814355][T22966] ? clear_bhb_loop+0x40/0x90 [ 1502.814381][T22966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.814401][T22966] RIP: 0033:0x7fde16d5d04e [ 1502.814431][T22966] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1502.814449][T22966] RSP: 002b:00007fde17c6ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1502.814473][T22966] RAX: ffffffffffffffda RBX: 00007fde17c706c0 RCX: 00007fde16d5d04e [ 1502.814488][T22966] RDX: 000000000000000f RSI: 00007fde17c700a0 RDI: 0000000000000004 [ 1502.814502][T22966] RBP: 00007fde17c70090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.814515][T22966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1502.814528][T22966] R13: 00007fde17016128 R14: 00007fde17016090 R15: 00007ffc39cc9558 [ 1502.814564][T22966] [ 1503.043545][T22982] netlink: 264 bytes leftover after parsing attributes in process `syz.1.17024'. [ 1503.328981][T22986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17025'. [ 1503.372520][T22991] netlink: 'syz.3.17027': attribute type 1 has an invalid length. [ 1503.391898][T22991] nbd: error processing sock list [ 1503.430344][T22993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17025'. [ 1503.778126][T23011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17031'. [ 1503.808703][T23011] netlink: 'syz.0.17031': attribute type 30 has an invalid length. [ 1503.828942][T23011] netlink: 'syz.0.17031': attribute type 3 has an invalid length. [ 1503.840195][T23013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17032'. [ 1504.131151][T23032] FAULT_INJECTION: forcing a failure. [ 1504.131151][T23032] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.143941][T23032] CPU: 1 UID: 0 PID: 23032 Comm: syz.2.17037 Not tainted syzkaller #0 PREEMPT(full) [ 1504.143970][T23032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1504.143983][T23032] Call Trace: [ 1504.143992][T23032] [ 1504.144001][T23032] dump_stack_lvl+0xe8/0x150 [ 1504.144037][T23032] should_fail_ex+0x412/0x560 [ 1504.144074][T23032] should_failslab+0xa8/0x100 [ 1504.144102][T23032] ? skb_clone+0x212/0x3a0 [ 1504.144131][T23032] kmem_cache_alloc_noprof+0x87/0x650 [ 1504.144155][T23032] ? __bpf_redirect+0xcb4/0x12a0 [ 1504.144182][T23032] skb_clone+0x212/0x3a0 [ 1504.144215][T23032] bpf_clone_redirect+0x16a/0x4b0 [ 1504.144238][T23032] ? bpf_test_run+0x1d1/0x830 [ 1504.144267][T23032] ? bpf_test_run+0x1d1/0x830 [ 1504.144290][T23032] bpf_prog_c03e980fa1fae53b+0x22/0x2a [ 1504.144313][T23032] bpf_test_run+0x354/0x830 [ 1504.144360][T23032] ? __pfx_bpf_test_run+0x10/0x10 [ 1504.144394][T23032] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1504.144423][T23032] ? slab_build_skb+0x52/0x410 [ 1504.144444][T23032] ? csum_partial+0x239/0x2c0 [ 1504.144484][T23032] ? convert___skb_to_skb+0x3d/0x5b0 [ 1504.144511][T23032] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1504.144549][T23032] ? __fget_files+0x2a/0x420 [ 1504.144579][T23032] ? __fget_files+0x3a0/0x420 [ 1504.144607][T23032] ? __fget_files+0x2a/0x420 [ 1504.144643][T23032] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1504.144667][T23032] bpf_prog_test_run+0x2c7/0x340 [ 1504.144695][T23032] __sys_bpf+0x643/0x950 [ 1504.144719][T23032] ? __pfx___sys_bpf+0x10/0x10 [ 1504.144758][T23032] ? ksys_write+0x242/0x270 [ 1504.144783][T23032] ? __pfx_ksys_write+0x10/0x10 [ 1504.144814][T23032] __x64_sys_bpf+0x7c/0x90 [ 1504.144845][T23032] do_syscall_64+0x14d/0xf80 [ 1504.144873][T23032] ? trace_irq_disable+0x3b/0x150 [ 1504.144891][T23032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.144912][T23032] ? clear_bhb_loop+0x40/0x90 [ 1504.144938][T23032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.144959][T23032] RIP: 0033:0x7f9ebf39c819 [ 1504.144980][T23032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1504.144998][T23032] RSP: 002b:00007f9ec0190028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1504.145022][T23032] RAX: ffffffffffffffda RBX: 00007f9ebf616090 RCX: 00007f9ebf39c819 [ 1504.145037][T23032] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1504.145052][T23032] RBP: 00007f9ec0190090 R08: 0000000000000000 R09: 0000000000000000 [ 1504.145065][T23032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1504.145079][T23032] R13: 00007f9ebf616128 R14: 00007f9ebf616090 R15: 00007ffdb5a41988 [ 1504.145113][T23032] [ 1504.807098][T23051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17045'. [ 1504.820389][T23051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17045'. [ 1504.828412][T23055] netlink: 'syz.3.17044': attribute type 10 has an invalid length. [ 1504.908289][T23055] mac80211_hwsim hwsim103 wlan1: entered promiscuous mode [ 1504.923681][T23055] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1504.979770][T23063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17047'. [ 1504.998069][T23063] ip6gre1: entered promiscuous mode [ 1505.003691][T23063] ip6gre1: entered allmulticast mode [ 1505.087423][T23071] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1505.217035][T23077] netlink: 'syz.1.17053': attribute type 10 has an invalid length. [ 1505.636570][T13500] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1505.646117][T13500] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1505.663573][T12108] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1505.843432][T23107] FAULT_INJECTION: forcing a failure. [ 1505.843432][T23107] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.856179][T23107] CPU: 0 UID: 0 PID: 23107 Comm: syz.0.17062 Not tainted syzkaller #0 PREEMPT(full) [ 1505.856208][T23107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1505.856221][T23107] Call Trace: [ 1505.856231][T23107] [ 1505.856240][T23107] dump_stack_lvl+0xe8/0x150 [ 1505.856274][T23107] should_fail_ex+0x412/0x560 [ 1505.856311][T23107] should_failslab+0xa8/0x100 [ 1505.856337][T23107] ? skb_clone+0x212/0x3a0 [ 1505.856364][T23107] kmem_cache_alloc_noprof+0x87/0x650 [ 1505.856390][T23107] ? __bpf_redirect+0xcb4/0x12a0 [ 1505.856417][T23107] skb_clone+0x212/0x3a0 [ 1505.856448][T23107] bpf_clone_redirect+0x16a/0x4b0 [ 1505.856482][T23107] ? bpf_test_run+0x1d1/0x830 [ 1505.856507][T23107] bpf_prog_9299a0b1a05450b6+0x5f/0x68 [ 1505.856540][T23107] ? __lock_acquire+0x6b5/0x2cf0 [ 1505.856593][T23107] ? ktime_get+0x45/0x200 [ 1505.856617][T23107] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1505.856640][T23107] ? lockdep_hardirqs_on+0x7a/0x110 [ 1505.856668][T23107] ? ktime_get+0x45/0x200 [ 1505.856685][T23107] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1505.856706][T23107] ? bpf_test_run+0x1d1/0x830 [ 1505.856732][T23107] ? bpf_test_timer_continue+0x10c/0x320 [ 1505.856761][T23107] bpf_test_run+0x354/0x830 [ 1505.856808][T23107] ? __pfx_bpf_test_run+0x10/0x10 [ 1505.856841][T23107] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1505.856862][T23107] ? slab_build_skb+0x52/0x410 [ 1505.856887][T23107] ? __kasan_krealloc+0xeb/0x110 [ 1505.856913][T23107] ? eth_type_trans+0x35e/0x6d0 [ 1505.856947][T23107] ? convert___skb_to_skb+0x3d/0x5b0 [ 1505.856973][T23107] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1505.857008][T23107] ? __fget_files+0x2a/0x420 [ 1505.857037][T23107] ? __fget_files+0x3a0/0x420 [ 1505.857064][T23107] ? __fget_files+0x2a/0x420 [ 1505.857098][T23107] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1505.857121][T23107] bpf_prog_test_run+0x2c7/0x340 [ 1505.857148][T23107] __sys_bpf+0x643/0x950 [ 1505.857171][T23107] ? __pfx___sys_bpf+0x10/0x10 [ 1505.857208][T23107] ? ksys_write+0x242/0x270 [ 1505.857232][T23107] ? __pfx_ksys_write+0x10/0x10 [ 1505.857262][T23107] __x64_sys_bpf+0x7c/0x90 [ 1505.857290][T23107] do_syscall_64+0x14d/0xf80 [ 1505.857318][T23107] ? trace_irq_disable+0x3b/0x150 [ 1505.857336][T23107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.857357][T23107] ? clear_bhb_loop+0x40/0x90 [ 1505.857380][T23107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.857400][T23107] RIP: 0033:0x7fe9b859c819 [ 1505.857420][T23107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.857438][T23107] RSP: 002b:00007fe9b94fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1505.857460][T23107] RAX: ffffffffffffffda RBX: 00007fe9b8815fa0 RCX: 00007fe9b859c819 [ 1505.857475][T23107] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1505.857489][T23107] RBP: 00007fe9b94fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.857500][T23107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1505.857510][T23107] R13: 00007fe9b8816038 R14: 00007fe9b8815fa0 R15: 00007ffc19ef3c78 [ 1505.857554][T23107] [ 1505.953506][T23103] xt_CT: No such helper "snmp_trap" [ 1506.253603][T10000] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1506.278734][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1506.291697][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1506.302463][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1506.313549][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1506.321726][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1506.564356][T10000] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1506.749562][ T8953] Bluetooth: hci5: link tx timeout [ 1506.756942][ T8953] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1506.878938][T23129] sch_tbf: burst 32852 is lower than device lo mtu (11337746) ! [ 1506.921787][ T8953] Bluetooth: hci5: link tx timeout [ 1506.927413][ T8953] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1506.945706][ T8953] Bluetooth: hci5: link tx timeout [ 1506.951024][ T8953] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1507.035481][ T8953] Bluetooth: hci5: link tx timeout [ 1507.041059][ T8953] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1507.098727][T23113] chnl_net:caif_netlink_parms(): no params data found [ 1507.150273][ T8953] Bluetooth: hci5: link tx timeout [ 1507.155650][ T8953] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1507.260584][T23113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.268501][T23113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.275492][T13498] wlan1: Trigger new scan to find an IBSS to join [ 1507.276611][T23113] bridge_slave_0: entered allmulticast mode [ 1507.305633][T23113] bridge_slave_0: entered promiscuous mode [ 1507.319527][T23113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.333502][T23113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.341529][T23113] bridge_slave_1: entered allmulticast mode [ 1507.350664][T23113] bridge_slave_1: entered promiscuous mode [ 1507.438538][T23113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1507.462297][T23153] FAULT_INJECTION: forcing a failure. [ 1507.462297][T23153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1507.462355][T23155] lo: Caught tx_queue_len zero misconfig [ 1507.489358][T23153] CPU: 0 UID: 0 PID: 23153 Comm: syz.0.17074 Not tainted syzkaller #0 PREEMPT(full) [ 1507.489390][T23153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1507.489403][T23153] Call Trace: [ 1507.489413][T23153] [ 1507.489422][T23153] dump_stack_lvl+0xe8/0x150 [ 1507.489468][T23153] should_fail_ex+0x412/0x560 [ 1507.489506][T23153] _copy_to_user+0x31/0xb0 [ 1507.489533][T23153] simple_read_from_buffer+0xe1/0x170 [ 1507.489569][T23153] proc_fail_nth_read+0x1bb/0x230 [ 1507.489602][T23153] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1507.489634][T23153] ? rw_verify_area+0x2a6/0x4d0 [ 1507.489656][T23153] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1507.489687][T23153] vfs_read+0x20c/0xa70 [ 1507.489706][T23153] ? fdget_pos+0x246/0x320 [ 1507.489732][T23153] ? __pfx___mutex_lock+0x10/0x10 [ 1507.489762][T23153] ? __pfx_vfs_read+0x10/0x10 [ 1507.489788][T23153] ? __fget_files+0x2a/0x420 [ 1507.489824][T23153] ? __fget_files+0x3a0/0x420 [ 1507.489851][T23153] ? __fget_files+0x2a/0x420 [ 1507.489892][T23153] ksys_read+0x150/0x270 [ 1507.489919][T23153] ? __pfx_ksys_read+0x10/0x10 [ 1507.489956][T23153] do_syscall_64+0x14d/0xf80 [ 1507.489985][T23153] ? trace_irq_disable+0x3b/0x150 [ 1507.490003][T23153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.490056][T23153] ? clear_bhb_loop+0x40/0x90 [ 1507.490082][T23153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.490102][T23153] RIP: 0033:0x7fe9b855d04e [ 1507.490123][T23153] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1507.490140][T23153] RSP: 002b:00007fe9b94fbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1507.490164][T23153] RAX: ffffffffffffffda RBX: 00007fe9b94fc6c0 RCX: 00007fe9b855d04e [ 1507.490179][T23153] RDX: 000000000000000f RSI: 00007fe9b94fc0a0 RDI: 0000000000000004 [ 1507.490192][T23153] RBP: 00007fe9b94fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.490205][T23153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.490219][T23153] R13: 00007fe9b8816038 R14: 00007fe9b8815fa0 R15: 00007ffc19ef3c78 [ 1507.490256][T23153] [ 1507.709646][T23155] __nla_validate_parse: 5 callbacks suppressed [ 1507.709669][T23155] netlink: 64 bytes leftover after parsing attributes in process `syz.3.17075'. [ 1507.741063][T23158] FAULT_INJECTION: forcing a failure. [ 1507.741063][T23158] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.754765][T23158] CPU: 0 UID: 0 PID: 23158 Comm: syz.4.17076 Not tainted syzkaller #0 PREEMPT(full) [ 1507.754796][T23158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1507.754810][T23158] Call Trace: [ 1507.754818][T23158] [ 1507.754828][T23158] dump_stack_lvl+0xe8/0x150 [ 1507.754864][T23158] should_fail_ex+0x412/0x560 [ 1507.754902][T23158] should_failslab+0xa8/0x100 [ 1507.754932][T23158] __kmalloc_cache_noprof+0x88/0x660 [ 1507.754959][T23158] ? sctp_add_bind_addr+0x8c/0x370 [ 1507.754995][T23158] sctp_add_bind_addr+0x8c/0x370 [ 1507.755029][T23158] sctp_copy_local_addr_list+0x314/0x4f0 [ 1507.755063][T23158] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1507.755093][T23158] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1507.755126][T23158] ? sctp_v6_is_any+0x64/0x80 [ 1507.755159][T23158] ? sctp_copy_one_addr+0x93/0x360 [ 1507.755192][T23158] sctp_bind_addr_copy+0xb3/0x3c0 [ 1507.755223][T23158] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1507.755256][T23158] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1507.755283][T23158] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1507.755314][T23158] ? __local_bh_enable_ip+0xd0/0x130 [ 1507.755340][T23158] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1507.755365][T23158] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1507.755396][T23158] sctp_sendmsg+0x1528/0x2c10 [ 1507.755447][T23158] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1507.755474][T23158] ? aa_sk_perm+0x6d5/0x900 [ 1507.755513][T23158] ? __pfx_aa_sk_perm+0x10/0x10 [ 1507.755546][T23158] ? sock_rps_record_flow+0x19/0x350 [ 1507.755576][T23158] ? inet_sendmsg+0x2f4/0x370 [ 1507.755607][T23158] ____sys_sendmsg+0x80a/0x9f0 [ 1507.755647][T23158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1507.755686][T23158] ? import_iovec+0x73/0xa0 [ 1507.755714][T23158] ___sys_sendmsg+0x2a5/0x360 [ 1507.755750][T23158] ? __pfx____sys_sendmsg+0x10/0x10 [ 1507.755821][T23158] ? __fget_files+0x2a/0x420 [ 1507.755852][T23158] ? __fget_files+0x3a0/0x420 [ 1507.755895][T23158] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1507.755927][T23158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1507.755968][T23158] ? __pfx_ksys_write+0x10/0x10 [ 1507.756007][T23158] do_syscall_64+0x14d/0xf80 [ 1507.756036][T23158] ? trace_irq_disable+0x3b/0x150 [ 1507.756053][T23158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.756075][T23158] ? clear_bhb_loop+0x40/0x90 [ 1507.756103][T23158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.756124][T23158] RIP: 0033:0x7fe86739c819 [ 1507.756146][T23158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1507.756163][T23158] RSP: 002b:00007fe868171028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1507.756185][T23158] RAX: ffffffffffffffda RBX: 00007fe867615fa0 RCX: 00007fe86739c819 [ 1507.756201][T23158] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 1507.756216][T23158] RBP: 00007fe868171090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.756229][T23158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1507.756242][T23158] R13: 00007fe867616038 R14: 00007fe867615fa0 R15: 00007ffd0f843938 [ 1507.756280][T23158] [ 1508.160560][T23113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1508.201944][ T8953] Bluetooth: hci5: link tx timeout [ 1508.208057][ T8953] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1508.230529][T23113] team0: Port device team_slave_0 added [ 1508.240765][T23167] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.17078'. [ 1508.254502][T23113] team0: Port device team_slave_1 added [ 1508.302376][T23113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1508.310103][T23113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1508.337923][T23113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1508.393134][ T8953] Bluetooth: hci4: command tx timeout [ 1508.405046][T23113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1508.426256][T23113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1508.509420][T23113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1508.694008][T23191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17084'. [ 1508.731112][T23113] hsr_slave_0: entered promiscuous mode [ 1508.758207][T23113] hsr_slave_1: entered promiscuous mode [ 1508.786291][ T8953] Bluetooth: hci5: link tx timeout [ 1508.791578][ T8953] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1508.802543][ T8953] Bluetooth: hci5: command 0x0405 tx timeout [ 1508.811560][T23113] debugfs: 'hsr0' already exists in 'hsr' [ 1508.818222][T23113] Cannot create hsr debugfs directory [ 1509.576884][T23219] FAULT_INJECTION: forcing a failure. [ 1509.576884][T23219] name failslab, interval 1, probability 0, space 0, times 0 [ 1509.590075][T23219] CPU: 1 UID: 0 PID: 23219 Comm: syz.3.17092 Not tainted syzkaller #0 PREEMPT(full) [ 1509.590096][T23219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1509.590104][T23219] Call Trace: [ 1509.590111][T23219] [ 1509.590119][T23219] dump_stack_lvl+0xe8/0x150 [ 1509.590142][T23219] should_fail_ex+0x412/0x560 [ 1509.590164][T23219] should_failslab+0xa8/0x100 [ 1509.590182][T23219] __kmalloc_noprof+0xe8/0x760 [ 1509.590198][T23219] ? ___neigh_create+0x6d5/0x2280 [ 1509.590214][T23219] ___neigh_create+0x6d5/0x2280 [ 1509.590233][T23219] ? rcu_is_watching+0x15/0xb0 [ 1509.590265][T23219] ip_neigh_gw4+0x289/0x3b0 [ 1509.590285][T23219] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 1509.590300][T23219] ? ip_frag_next+0x32f/0xa60 [ 1509.590314][T23219] ? ip_fast_csum+0x1ee/0x2b0 [ 1509.590331][T23219] ? ip_finish_output2+0x3c2/0x1070 [ 1509.590346][T23219] ip_finish_output2+0x4e5/0x1070 [ 1509.590365][T23219] ? ip_options_fragment+0x1b1/0x2a0 [ 1509.590378][T23219] ? ip_do_fragment+0x7e0/0x1770 [ 1509.590395][T23219] ip_do_fragment+0x87c/0x1770 [ 1509.590414][T23219] ? ip_skb_dst_mtu+0x109/0xa50 [ 1509.590431][T23219] ? __pfx_ip_finish_output2+0x10/0x10 [ 1509.590446][T23219] ? ip_skb_dst_mtu+0x80b/0xa50 [ 1509.590460][T23219] ? ip_skb_dst_mtu+0x109/0xa50 [ 1509.590480][T23219] ip_output+0x29f/0x450 [ 1509.590496][T23219] ? ip_output+0x5b/0x450 [ 1509.590514][T23219] iptunnel_xmit+0x616/0xca0 [ 1509.590541][T23219] ip_tunnel_xmit+0x193a/0x1f20 [ 1509.590570][T23219] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1509.590589][T23219] ? __pfx_gre_build_header+0x10/0x10 [ 1509.590602][T23219] ? iptunnel_handle_offloads+0x2fd/0x630 [ 1509.590624][T23219] ipgre_xmit+0x8e6/0xc60 [ 1509.590643][T23219] ? __pfx_ipgre_xmit+0x10/0x10 [ 1509.590663][T23219] dev_hard_start_xmit+0x2d8/0x870 [ 1509.590690][T23219] __dev_queue_xmit+0x1557/0x3870 [ 1509.590706][T23219] ? bpf_test_run+0x354/0x830 [ 1509.590721][T23219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.590738][T23219] ? __dev_queue_xmit+0x28b/0x3870 [ 1509.590761][T23219] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1509.590802][T23219] __bpf_redirect+0x9a6/0x12a0 [ 1509.590822][T23219] bpf_clone_redirect+0x313/0x4b0 [ 1509.590842][T23219] ? bpf_test_run+0x1d1/0x830 [ 1509.590855][T23219] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 1509.590869][T23219] ? __lock_acquire+0x6b5/0x2cf0 [ 1509.590898][T23219] ? ktime_get+0x45/0x200 [ 1509.590913][T23219] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1509.590926][T23219] ? lockdep_hardirqs_on+0x7a/0x110 [ 1509.590943][T23219] ? ktime_get+0x45/0x200 [ 1509.590954][T23219] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1509.590966][T23219] ? read_tsc+0x9/0x20 [ 1509.590979][T23219] ? ktime_get+0x1d2/0x200 [ 1509.590996][T23219] bpf_test_run+0x354/0x830 [ 1509.591023][T23219] ? __pfx_bpf_test_run+0x10/0x10 [ 1509.591042][T23219] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1509.591056][T23219] ? slab_build_skb+0x52/0x410 [ 1509.591081][T23219] ? __kasan_krealloc+0xeb/0x110 [ 1509.591106][T23219] ? eth_type_trans+0x35e/0x6d0 [ 1509.591141][T23219] ? convert___skb_to_skb+0x3d/0x5b0 [ 1509.591167][T23219] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1509.591194][T23219] ? __fget_files+0x2a/0x420 [ 1509.591211][T23219] ? __fget_files+0x3a0/0x420 [ 1509.591228][T23219] ? __fget_files+0x2a/0x420 [ 1509.591248][T23219] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1509.591269][T23219] bpf_prog_test_run+0x2c7/0x340 [ 1509.591285][T23219] __sys_bpf+0x643/0x950 [ 1509.591298][T23219] ? __pfx___sys_bpf+0x10/0x10 [ 1509.591320][T23219] ? ksys_write+0x242/0x270 [ 1509.591336][T23219] ? __pfx_ksys_write+0x10/0x10 [ 1509.591355][T23219] __x64_sys_bpf+0x7c/0x90 [ 1509.591373][T23219] do_syscall_64+0x14d/0xf80 [ 1509.591391][T23219] ? trace_irq_disable+0x3b/0x150 [ 1509.591402][T23219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.591414][T23219] ? clear_bhb_loop+0x40/0x90 [ 1509.591429][T23219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.591443][T23219] RIP: 0033:0x7fde16d9c819 [ 1509.591456][T23219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1509.591467][T23219] RSP: 002b:00007fde17c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1509.591481][T23219] RAX: ffffffffffffffda RBX: 00007fde17015fa0 RCX: 00007fde16d9c819 [ 1509.591491][T23219] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1509.591499][T23219] RBP: 00007fde17c91090 R08: 0000000000000000 R09: 0000000000000000 [ 1509.591508][T23219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1509.591517][T23219] R13: 00007fde17016038 R14: 00007fde17015fa0 R15: 00007ffc39cc9558 [ 1509.591537][T23219] [ 1510.073206][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1510.331648][T23113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1510.412423][T23113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1510.429061][T23113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1510.460066][T23113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1510.538399][ T5843] Bluetooth: hci4: command tx timeout [ 1510.552173][T23226] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1510.665249][T23238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17098'. [ 1510.678334][T23238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17098'. [ 1510.788681][T23113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.844565][T23113] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.870453][T13498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.877699][T13498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.914076][T23249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17102'. [ 1510.937024][T13498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.944222][T13498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1511.275790][ T1157] wlan1: Trigger new scan to find an IBSS to join [ 1511.401089][T23113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1511.491108][T23275] delete_channel: no stack [ 1511.645046][T23113] veth0_vlan: entered promiscuous mode [ 1511.671865][T23113] veth1_vlan: entered promiscuous mode [ 1511.799853][T23113] veth0_macvtap: entered promiscuous mode [ 1511.815232][T23113] veth1_macvtap: entered promiscuous mode [ 1511.859387][T23113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1511.891218][T23113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1511.927513][T13498] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.946565][T13498] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.972720][T13498] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.983760][T13498] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.062553][T23297] netlink: 'syz.4.17117': attribute type 10 has an invalid length. [ 1512.117337][T23297] mac80211_hwsim hwsim105 wlan1: left allmulticast mode [ 1512.210773][T13500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.274914][T13500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.368515][T23308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1512.382699][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.418131][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.484130][T17978] IPVS: starting estimator thread 0... [ 1512.556111][ T5843] Bluetooth: hci4: command tx timeout [ 1512.573850][T23311] IPVS: using max 30 ests per chain, 72000 per kthread [ 1512.575724][T23316] FAULT_INJECTION: forcing a failure. [ 1512.575724][T23316] name failslab, interval 1, probability 0, space 0, times 0 [ 1512.607638][T23316] CPU: 0 UID: 0 PID: 23316 Comm: syz.3.17124 Not tainted syzkaller #0 PREEMPT(full) [ 1512.607667][T23316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1512.607679][T23316] Call Trace: [ 1512.607687][T23316] [ 1512.607695][T23316] dump_stack_lvl+0xe8/0x150 [ 1512.607730][T23316] should_fail_ex+0x412/0x560 [ 1512.607764][T23316] should_failslab+0xa8/0x100 [ 1512.607794][T23316] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1512.607820][T23316] ? kasprintf+0xe2/0x140 [ 1512.607849][T23316] kvasprintf+0xeb/0x1a0 [ 1512.607871][T23316] ? nf_tables_newset+0x1393/0x2580 [ 1512.607899][T23316] ? nfnetlink_rcv+0x1240/0x27b0 [ 1512.607917][T23316] ? netlink_unicast+0x80f/0x9b0 [ 1512.607950][T23316] ? __pfx_kvasprintf+0x10/0x10 [ 1512.607972][T23316] ? do_syscall_64+0x14d/0xf80 [ 1512.608018][T23316] kasprintf+0xe2/0x140 [ 1512.608048][T23316] ? __pfx_kasprintf+0x10/0x10 [ 1512.608086][T23316] nf_tables_set_alloc_name+0x109/0x710 [ 1512.608111][T23316] ? trace_kmalloc+0x2a/0x110 [ 1512.608138][T23316] ? __kmalloc_noprof+0x37d/0x760 [ 1512.608161][T23316] ? __pfx_nf_tables_set_alloc_name+0x10/0x10 [ 1512.608192][T23316] ? nla_strdup+0xb8/0x140 [ 1512.608225][T23316] nf_tables_newset+0x13b4/0x2580 [ 1512.608276][T23316] ? __pfx_nf_tables_newset+0x10/0x10 [ 1512.608328][T23316] ? __nla_parse+0x40/0x60 [ 1512.608355][T23316] nfnetlink_rcv+0x1240/0x27b0 [ 1512.608412][T23316] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1512.608452][T23316] ? ref_tracker_free+0x693/0x840 [ 1512.608504][T23316] ? __netlink_deliver_tap+0x807/0x850 [ 1512.608528][T23316] ? netlink_deliver_tap+0x2e/0x1b0 [ 1512.608571][T23316] netlink_unicast+0x80f/0x9b0 [ 1512.608613][T23316] ? __pfx_netlink_unicast+0x10/0x10 [ 1512.608646][T23316] ? netlink_sendmsg+0x650/0xb40 [ 1512.608668][T23316] ? skb_put+0x11b/0x210 [ 1512.608696][T23316] netlink_sendmsg+0x813/0xb40 [ 1512.608731][T23316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1512.608760][T23316] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1512.608792][T23316] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1512.608820][T23316] ____sys_sendmsg+0x972/0x9f0 [ 1512.608858][T23316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1512.608896][T23316] ? import_iovec+0x73/0xa0 [ 1512.608923][T23316] ___sys_sendmsg+0x2a5/0x360 [ 1512.608957][T23316] ? __pfx____sys_sendmsg+0x10/0x10 [ 1512.609025][T23316] ? __fget_files+0x2a/0x420 [ 1512.609056][T23316] ? __fget_files+0x3a0/0x420 [ 1512.609099][T23316] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1512.609131][T23316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1512.609170][T23316] ? __pfx_ksys_write+0x10/0x10 [ 1512.609217][T23316] do_syscall_64+0x14d/0xf80 [ 1512.609245][T23316] ? trace_irq_disable+0x3b/0x150 [ 1512.609263][T23316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.609284][T23316] ? clear_bhb_loop+0x40/0x90 [ 1512.609310][T23316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.609330][T23316] RIP: 0033:0x7fde16d9c819 [ 1512.609351][T23316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1512.609368][T23316] RSP: 002b:00007fde17c91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1512.609392][T23316] RAX: ffffffffffffffda RBX: 00007fde17015fa0 RCX: 00007fde16d9c819 [ 1512.609407][T23316] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1512.609421][T23316] RBP: 00007fde17c91090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.609433][T23316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1512.609443][T23316] R13: 00007fde17016038 R14: 00007fde17015fa0 R15: 00007ffc39cc9558 [ 1512.609476][T23316] [ 1513.250939][T23336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17130'. [ 1513.302732][T23336] netlink: 'syz.1.17130': attribute type 21 has an invalid length. [ 1513.311918][T23336] IPv6: NLM_F_CREATE should be specified when creating new route [ 1513.313298][T23339] netlink: 120 bytes leftover after parsing attributes in process `syz.0.17131'. [ 1513.320451][T23336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1513.336310][T23336] IPv6: NLM_F_CREATE should be set when creating new route [ 1513.343700][T23336] IPv6: NLM_F_CREATE should be set when creating new route [ 1513.351031][T23336] IPv6: NLM_F_CREATE should be set when creating new route [ 1513.403848][T23339] netlink: 'syz.0.17131': attribute type 1 has an invalid length. [ 1513.430543][T23342] netlink: 'syz.1.17130': attribute type 21 has an invalid length. [ 1513.443598][T23339] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17131'. [ 1513.476387][T23342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1513.706097][T23358] tipc: Enabling of bearer rejected, failed to enable media [ 1513.911651][T23365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17138'. [ 1513.930209][T23367] netlink: 6 bytes leftover after parsing attributes in process `syz.3.17139'. [ 1513.940676][T23367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1513.948206][T23365] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17138'. [ 1513.967836][T23369] netlink: 10 bytes leftover after parsing attributes in process `syz.2.17138'. [ 1514.041061][T23371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17140'. [ 1514.239927][ T49] wlan1: Trigger new scan to find an IBSS to join [ 1514.385115][T23390] netlink: 'syz.2.17145': attribute type 13 has an invalid length. [ 1514.389693][T23387] tipc: Started in network mode [ 1514.400280][T23390] netlink: 'syz.2.17145': attribute type 17 has an invalid length. [ 1514.412480][T23387] tipc: Node identity , cluster identity 4711 [ 1514.426883][T23387] tipc: Failed to set node id, please configure manually [ 1514.434622][T23387] tipc: Enabling of bearer rejected, failed to enable media [ 1514.587371][T23390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1514.606193][T23390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1514.633847][ T8953] Bluetooth: hci4: command tx timeout [ 1514.810094][T23405] netlink: 120 bytes leftover after parsing attributes in process `syz.0.17154'. [ 1514.829682][T23405] netlink: 'syz.0.17154': attribute type 1 has an invalid length. [ 1514.839160][T23405] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17154'. [ 1515.018196][T23415] sock: sock_timestamping_bind_phc: sock not bind to device [ 1515.045773][T23417] Bluetooth: MGMT ver 1.23 [ 1515.180144][T13500] wlan1: Creating new IBSS network, BSSID 62:f2:89:51:2e:9e [ 1515.191564][ T29] IPVS: starting estimator thread 0... [ 1515.283427][T23425] IPVS: using max 29 ests per chain, 69600 per kthread [ 1515.479362][T23436] netlink: 'syz.4.17166': attribute type 2 has an invalid length. [ 1516.168219][T23457] openvswitch: netlink: Message has 1 unknown bytes. [ 1516.206670][T23457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1516.559919][T23472] Cannot find set identified by id 65534 to match [ 1516.716439][ T8953] Bluetooth: hci4: command 0x0405 tx timeout [ 1516.792582][T23483] FAULT_INJECTION: forcing a failure. [ 1516.792582][T23483] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.833646][T23483] CPU: 0 UID: 0 PID: 23483 Comm: syz.1.17181 Not tainted syzkaller #0 PREEMPT(full) [ 1516.833677][T23483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1516.833690][T23483] Call Trace: [ 1516.833700][T23483] [ 1516.833709][T23483] dump_stack_lvl+0xe8/0x150 [ 1516.833745][T23483] should_fail_ex+0x412/0x560 [ 1516.833781][T23483] should_failslab+0xa8/0x100 [ 1516.833807][T23483] ? skb_clone+0x212/0x3a0 [ 1516.833834][T23483] kmem_cache_alloc_noprof+0x87/0x650 [ 1516.833862][T23483] ? __netlink_lookup+0xc6/0x8b0 [ 1516.833895][T23483] skb_clone+0x212/0x3a0 [ 1516.833926][T23483] __netlink_deliver_tap+0x404/0x850 [ 1516.833964][T23483] ? netlink_deliver_tap+0x2e/0x1b0 [ 1516.833988][T23483] netlink_deliver_tap+0x19c/0x1b0 [ 1516.834013][T23483] netlink_unicast+0x7e3/0x9b0 [ 1516.834056][T23483] ? __pfx_netlink_unicast+0x10/0x10 [ 1516.834090][T23483] ? netlink_sendmsg+0x650/0xb40 [ 1516.834110][T23483] ? skb_put+0x11b/0x210 [ 1516.834140][T23483] netlink_sendmsg+0x813/0xb40 [ 1516.834173][T23483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.834201][T23483] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1516.834234][T23483] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1516.834263][T23483] ____sys_sendmsg+0x972/0x9f0 [ 1516.834302][T23483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1516.834340][T23483] ? import_iovec+0x73/0xa0 [ 1516.834368][T23483] ___sys_sendmsg+0x2a5/0x360 [ 1516.834402][T23483] ? __pfx____sys_sendmsg+0x10/0x10 [ 1516.834481][T23483] ? __fget_files+0x2a/0x420 [ 1516.834509][T23483] ? __fget_files+0x3a0/0x420 [ 1516.834552][T23483] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1516.834582][T23483] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1516.834620][T23483] ? __pfx_ksys_write+0x10/0x10 [ 1516.834655][T23483] do_syscall_64+0x14d/0xf80 [ 1516.834683][T23483] ? trace_irq_disable+0x3b/0x150 [ 1516.834699][T23483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.834720][T23483] ? clear_bhb_loop+0x40/0x90 [ 1516.834745][T23483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.834766][T23483] RIP: 0033:0x7fef0919c819 [ 1516.834785][T23483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.834802][T23483] RSP: 002b:00007fef0a11a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1516.834823][T23483] RAX: ffffffffffffffda RBX: 00007fef09415fa0 RCX: 00007fef0919c819 [ 1516.834837][T23483] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1516.834850][T23483] RBP: 00007fef0a11a090 R08: 0000000000000000 R09: 0000000000000000 [ 1516.834863][T23483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.834875][T23483] R13: 00007fef09416038 R14: 00007fef09415fa0 R15: 00007fff0ee47bc8 [ 1516.834909][T23483] [ 1517.376213][T23490] syzkaller1: entered promiscuous mode [ 1517.394454][T23490] syzkaller1: entered allmulticast mode [ 1517.788201][T23517] netlink: 'syz.3.17195': attribute type 3 has an invalid length. [ 1518.167581][T23539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1518.195280][T23539] netlink: 'syz.0.17203': attribute type 1 has an invalid length. [ 1518.260721][T23543] __nla_validate_parse: 14 callbacks suppressed [ 1518.260741][T23543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17203'. [ 1518.325623][T23544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17202'. [ 1518.568372][T23557] netlink: 'syz.4.17205': attribute type 10 has an invalid length. [ 1518.620421][T23554] netlink: 72 bytes leftover after parsing attributes in process `syz.0.17206'. [ 1518.640075][T23554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17206'. [ 1518.660510][T23554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17206'. [ 1519.288941][T23589] xt_hashlimit: max too large, truncated to 1048576 [ 1519.296497][T23589] xt_hashlimit: overflow, try lower: 2/0 [ 1519.328203][T23591] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1519.433199][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1520.156584][T23626] FAULT_INJECTION: forcing a failure. [ 1520.156584][T23626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1520.170966][T23626] CPU: 0 UID: 0 PID: 23626 Comm: syz.3.17220 Not tainted syzkaller #0 PREEMPT(full) [ 1520.170997][T23626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1520.171009][T23626] Call Trace: [ 1520.171018][T23626] [ 1520.171027][T23626] dump_stack_lvl+0xe8/0x150 [ 1520.171062][T23626] should_fail_ex+0x412/0x560 [ 1520.171096][T23626] _copy_to_user+0x31/0xb0 [ 1520.171123][T23626] bpf_test_finish+0x53c/0x6b0 [ 1520.171153][T23626] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1520.171178][T23626] ? __pfx_bpf_test_finish+0x10/0x10 [ 1520.171206][T23626] ? _copy_from_user+0x94/0xb0 [ 1520.171229][T23626] ? bpf_test_init+0x113/0x150 [ 1520.171264][T23626] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1520.171305][T23626] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1520.171334][T23626] ? __fget_files+0x2a/0x420 [ 1520.171371][T23626] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1520.171396][T23626] bpf_prog_test_run+0x2c7/0x340 [ 1520.171424][T23626] __sys_bpf+0x643/0x950 [ 1520.171447][T23626] ? __pfx___sys_bpf+0x10/0x10 [ 1520.171483][T23626] ? ksys_write+0x242/0x270 [ 1520.171509][T23626] ? __pfx_ksys_write+0x10/0x10 [ 1520.171540][T23626] __x64_sys_bpf+0x7c/0x90 [ 1520.171567][T23626] do_syscall_64+0x14d/0xf80 [ 1520.171596][T23626] ? trace_irq_disable+0x3b/0x150 [ 1520.171614][T23626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.171635][T23626] ? clear_bhb_loop+0x40/0x90 [ 1520.171661][T23626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.171682][T23626] RIP: 0033:0x7fde16d9c819 [ 1520.171702][T23626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1520.171721][T23626] RSP: 002b:00007fde17c91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1520.171745][T23626] RAX: ffffffffffffffda RBX: 00007fde17015fa0 RCX: 00007fde16d9c819 [ 1520.171761][T23626] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 000000000000000a [ 1520.171775][T23626] RBP: 00007fde17c91090 R08: 0000000000000000 R09: 0000000000000000 [ 1520.171789][T23626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1520.171802][T23626] R13: 00007fde17016038 R14: 00007fde17015fa0 R15: 00007ffc39cc9558 [ 1520.171838][T23626] [ 1520.755484][T23641] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1521.177457][T23660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17231'. [ 1521.472505][ T8953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1521.482620][ T8953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1521.496492][ T8953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1521.507182][ T8953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1521.522099][ T8953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1522.132699][T23686] gretap1: entered promiscuous mode [ 1522.154567][T23686] batman_adv: batadv0: Adding interface: gretap1 [ 1522.160969][T23686] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1522.190555][T23686] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1522.337768][T23692] bond7: (slave lo): Releasing backup interface [ 1522.359350][T23692] bond7: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1522.388881][T23692] bridge_slave_0: left allmulticast mode [ 1522.396669][T23700] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1522.398016][T23692] bridge_slave_0: left promiscuous mode [ 1522.415729][T23692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.437039][T23692] bridge_slave_1: left allmulticast mode [ 1522.449899][T23692] bridge_slave_1: left promiscuous mode [ 1522.456505][T23692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.474550][T23692] bond0: (slave bond_slave_0): Releasing backup interface [ 1522.496483][T23703] netlink: 'syz.1.17243': attribute type 12 has an invalid length. [ 1522.505379][T23703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17243'. [ 1522.515627][T23692] bond0: (slave bond_slave_1): Releasing backup interface [ 1522.525951][T23692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.534785][T23692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.544062][T23692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1522.565802][T23703] bond0: option primary_reselect: invalid value (152) [ 1522.725164][T23708] tipc: Enabling of bearer rejected, failed to enable media [ 1522.778404][T23672] chnl_net:caif_netlink_parms(): no params data found [ 1522.966840][T23722] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 1523.176574][T23737] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1523.208477][T23738] FAULT_INJECTION: forcing a failure. [ 1523.208477][T23738] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.221321][T23738] CPU: 0 UID: 0 PID: 23738 Comm: syz.2.17251 Not tainted syzkaller #0 PREEMPT(full) [ 1523.221350][T23738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1523.221364][T23738] Call Trace: [ 1523.221373][T23738] [ 1523.221382][T23738] dump_stack_lvl+0xe8/0x150 [ 1523.221418][T23738] should_fail_ex+0x412/0x560 [ 1523.221455][T23738] should_failslab+0xa8/0x100 [ 1523.221481][T23738] ? skb_clone+0x212/0x3a0 [ 1523.221509][T23738] kmem_cache_alloc_noprof+0x87/0x650 [ 1523.221533][T23738] ? __bpf_redirect+0x9b4/0x12a0 [ 1523.221561][T23738] skb_clone+0x212/0x3a0 [ 1523.221593][T23738] bpf_clone_redirect+0x16a/0x4b0 [ 1523.221615][T23738] ? bpf_test_run+0x1d1/0x830 [ 1523.221645][T23738] ? bpf_test_run+0x1d1/0x830 [ 1523.221668][T23738] bpf_prog_fb05b10b115b215f+0x22/0x2a [ 1523.221691][T23738] bpf_test_run+0x354/0x830 [ 1523.221739][T23738] ? __pfx_bpf_test_run+0x10/0x10 [ 1523.221772][T23738] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1523.221792][T23738] ? slab_build_skb+0x52/0x410 [ 1523.221813][T23738] ? csum_partial+0x239/0x2c0 [ 1523.221853][T23738] ? convert___skb_to_skb+0x3d/0x5b0 [ 1523.221879][T23738] bpf_prog_test_run_skb+0xd22/0x1c90 [ 1523.221916][T23738] ? __fget_files+0x2a/0x420 [ 1523.221945][T23738] ? __fget_files+0x3a0/0x420 [ 1523.221973][T23738] ? __fget_files+0x2a/0x420 [ 1523.222010][T23738] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1523.222033][T23738] bpf_prog_test_run+0x2c7/0x340 [ 1523.222060][T23738] __sys_bpf+0x643/0x950 [ 1523.222084][T23738] ? __pfx___sys_bpf+0x10/0x10 [ 1523.222131][T23738] ? ksys_write+0x242/0x270 [ 1523.222157][T23738] ? __pfx_ksys_write+0x10/0x10 [ 1523.222190][T23738] __x64_sys_bpf+0x7c/0x90 [ 1523.222220][T23738] do_syscall_64+0x14d/0xf80 [ 1523.222250][T23738] ? trace_irq_disable+0x3b/0x150 [ 1523.222269][T23738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.222290][T23738] ? clear_bhb_loop+0x40/0x90 [ 1523.222316][T23738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.222337][T23738] RIP: 0033:0x7f9ebf39c819 [ 1523.222357][T23738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.222374][T23738] RSP: 002b:00007f9ec0190028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1523.222397][T23738] RAX: ffffffffffffffda RBX: 00007f9ebf616090 RCX: 00007f9ebf39c819 [ 1523.222413][T23738] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1523.222428][T23738] RBP: 00007f9ec0190090 R08: 0000000000000000 R09: 0000000000000000 [ 1523.222441][T23738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1523.222455][T23738] R13: 00007f9ebf616128 R14: 00007f9ebf616090 R15: 00007ffdb5a41988 [ 1523.222490][T23738] [ 1523.586552][T23672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.595000][ T5843] Bluetooth: hci2: command tx timeout [ 1523.606282][T23672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.614571][T23672] bridge_slave_0: entered allmulticast mode [ 1523.623515][T23672] bridge_slave_0: entered promiscuous mode [ 1523.634219][T23672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.641752][T23672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.650132][T23672] bridge_slave_1: entered allmulticast mode [ 1523.659264][T23672] bridge_slave_1: entered promiscuous mode [ 1523.730830][T23672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.746886][T23672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.848335][T23672] team0: Port device team_slave_0 added [ 1523.858710][T23672] team0: Port device team_slave_1 added [ 1523.961192][T23672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1523.969438][T23672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1523.996898][T23672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1524.011547][T23672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1524.020215][T23672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1524.050862][T23672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1524.080362][T23755] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1524.097350][T23753] tipc: Enabling of bearer rejected, failed to enable media [ 1524.236760][T23672] hsr_slave_0: entered promiscuous mode [ 1524.257550][T23672] hsr_slave_1: entered promiscuous mode [ 1524.276126][T23672] debugfs: 'hsr0' already exists in 'hsr' [ 1524.288743][T23672] Cannot create hsr debugfs directory [ 1524.551877][T23772] netlink: 'syz.4.17264': attribute type 10 has an invalid length. [ 1524.578906][T23770] mac80211_hwsim hwsim107 syzkaller0: entered promiscuous mode [ 1524.590727][T23770] mac80211_hwsim hwsim107 syzkaller0: entered allmulticast mode [ 1525.109812][T23789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17269'. [ 1525.250494][T23791] tipc: Enabling of bearer rejected, failed to enable media [ 1525.674603][ T5843] Bluetooth: hci2: command tx timeout [ 1525.751109][T23672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1525.781310][T23672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1525.798158][T23672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1525.840034][T23672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1525.879468][T23805] netlink: 'syz.3.17276': attribute type 1 has an invalid length. [ 1525.953859][T23815] netlink: 108 bytes leftover after parsing attributes in process `syz.1.17277'. [ 1525.962233][T23807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17276'. [ 1526.175524][T23672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.207717][T23672] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.240863][T13505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.248128][T13505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1526.311444][T13505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.318715][T13505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1526.365315][T23831] syzkaller0: entered promiscuous mode [ 1526.371831][T23831] syzkaller0: entered allmulticast mode [ 1526.771697][T23851] xt_hashlimit: size too large, truncated to 1048576 [ 1526.939458][T23672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1527.036755][T23672] veth0_vlan: entered promiscuous mode [ 1527.066016][T23672] veth1_vlan: entered promiscuous mode [ 1527.157218][T23672] veth0_macvtap: entered promiscuous mode [ 1527.174871][T23672] veth1_macvtap: entered promiscuous mode [ 1527.209302][T23672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1527.237452][T23672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1527.272735][ T107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.344921][ T107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.413666][ T1157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.427739][ T1157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.586833][ T107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.599198][ T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1527.750719][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.754256][ T5843] Bluetooth: hci2: command tx timeout [ 1527.798189][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.079844][T23893] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17300'. [ 1528.105231][T23893] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17300'. [ 1528.367322][T23901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1528.506701][T23901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1528.560262][T23908] netlink: 'syz.1.17308': attribute type 13 has an invalid length. [ 1528.603687][T23908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1528.658649][T23901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1528.777154][ T29] IPVS: starting estimator thread 0... [ 1528.821449][T23901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1528.895721][T23919] IPVS: using max 23 ests per chain, 55200 per kthread [ 1529.219867][T13500] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1529.282229][T13500] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1529.423823][T23947] netlink: 136 bytes leftover after parsing attributes in process `syz.4.17318'. [ 1529.453275][T23947] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1529.484735][T13503] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1529.510488][T13503] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1529.579608][T23953] openvswitch: netlink: Message has 509 unknown bytes. [ 1529.681432][T23958] bridge_slave_0: invalid flags given to default FDB implementation [ 1529.778799][T23960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17323'. [ 1529.834064][ T5843] Bluetooth: hci2: command tx timeout [ 1529.905381][T23957] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17321'. [ 1529.920071][T23957] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17321'. [ 1529.973704][T23958] nbd15: detected capacity change from 0 to 127 [ 1530.000686][ T5843] block nbd15: Receive control failed (result -104) [ 1530.013303][ T8953] block nbd15: Receive control failed (result -32) [ 1530.199378][T23972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17325'. [ 1530.356782][T23978] netlink: 'syz.0.17326': attribute type 2 has an invalid length. [ 1530.446401][T23981] netlink: 3 bytes leftover after parsing attributes in process `syz.1.17328'. [ 1530.482650][T23981] netlink: 252 bytes leftover after parsing attributes in process `syz.1.17328'. [ 1530.531206][T23985] netlink: 'syz.2.17330': attribute type 8 has an invalid length. [ 1530.649032][T23990] netlink: 136 bytes leftover after parsing attributes in process `syz.0.17332'. [ 1530.659660][T23990] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1530.939020][T24006] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1530.953609][T24006] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1531.306234][T24014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1531.334058][T24014] syzkaller0: entered promiscuous mode [ 1531.342466][T24014] syzkaller0: entered allmulticast mode [ 1531.600403][T24022] netlink: 136 bytes leftover after parsing attributes in process `syz.0.17345'. [ 1531.610909][T24022] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1531.662368][T24027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17343'. [ 1532.039867][T24043] FAULT_INJECTION: forcing a failure. [ 1532.039867][T24043] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.066436][T24043] CPU: 0 UID: 0 PID: 24043 Comm: syz.4.17350 Not tainted syzkaller #0 PREEMPT(full) [ 1532.066469][T24043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1532.066481][T24043] Call Trace: [ 1532.066490][T24043] [ 1532.066499][T24043] dump_stack_lvl+0xe8/0x150 [ 1532.066534][T24043] should_fail_ex+0x412/0x560 [ 1532.066569][T24043] should_failslab+0xa8/0x100 [ 1532.066599][T24043] __kmalloc_cache_noprof+0x88/0x660 [ 1532.066624][T24043] ? sctp_add_bind_addr+0x8c/0x370 [ 1532.066661][T24043] sctp_add_bind_addr+0x8c/0x370 [ 1532.066695][T24043] sctp_copy_local_addr_list+0x314/0x4f0 [ 1532.066729][T24043] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1532.066758][T24043] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1532.066790][T24043] ? sctp_v6_is_any+0x64/0x80 [ 1532.066822][T24043] ? sctp_copy_one_addr+0x93/0x360 [ 1532.066861][T24043] sctp_bind_addr_copy+0xb3/0x3c0 [ 1532.066890][T24043] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1532.066919][T24043] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1532.066946][T24043] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1532.066976][T24043] ? __local_bh_enable_ip+0xd0/0x130 [ 1532.067001][T24043] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1532.067025][T24043] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1532.067056][T24043] sctp_sendmsg+0x1528/0x2c10 [ 1532.067093][T24043] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1532.067128][T24043] ? aa_sk_perm+0x6d5/0x900 [ 1532.067165][T24043] ? __pfx_aa_sk_perm+0x10/0x10 [ 1532.067194][T24043] ? sock_rps_record_flow+0x19/0x350 [ 1532.067219][T24043] ? __pfx_inet_sendmsg+0x10/0x10 [ 1532.067245][T24043] ? inet_sendmsg+0x2f4/0x370 [ 1532.067271][T24043] ? __pfx_inet_sendmsg+0x10/0x10 [ 1532.067296][T24043] __sys_sendto+0x5de/0x710 [ 1532.067326][T24043] ? __pfx___sys_sendto+0x10/0x10 [ 1532.067347][T24043] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1532.067392][T24043] ? __fget_files+0x3a0/0x420 [ 1532.067436][T24043] ? ksys_write+0x242/0x270 [ 1532.067462][T24043] ? __pfx_ksys_write+0x10/0x10 [ 1532.067493][T24043] __x64_sys_sendto+0xde/0x100 [ 1532.067522][T24043] do_syscall_64+0x14d/0xf80 [ 1532.067549][T24043] ? trace_irq_disable+0x3b/0x150 [ 1532.067566][T24043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.067588][T24043] ? clear_bhb_loop+0x40/0x90 [ 1532.067615][T24043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.067636][T24043] RIP: 0033:0x7fe86739c819 [ 1532.067658][T24043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1532.067676][T24043] RSP: 002b:00007fe868171028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1532.067700][T24043] RAX: ffffffffffffffda RBX: 00007fe867615fa0 RCX: 00007fe86739c819 [ 1532.067715][T24043] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004 [ 1532.067728][T24043] RBP: 00007fe868171090 R08: 000020000005ffe4 R09: 000000000000001c [ 1532.067742][T24043] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 1532.067754][T24043] R13: 00007fe867616038 R14: 00007fe867615fa0 R15: 00007ffd0f843938 [ 1532.067790][T24043] [ 1532.522715][T24053] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1532.988767][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1532.999671][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1533.010897][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1533.025495][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1533.037782][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1533.050913][ T5843] [ 1533.053304][ T5843] ====================================================== [ 1533.060354][ T5843] WARNING: possible circular locking dependency detected [ 1533.067589][ T5843] syzkaller #0 Not tainted [ 1533.072075][ T5843] ------------------------------------------------------ [ 1533.079125][ T5843] kworker/u9:8/5843 is trying to acquire lock: [ 1533.085397][ T5843] ffff88801badda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x46c/0x540 [ 1533.096057][ T5843] [ 1533.096057][ T5843] but task is already holding lock: [ 1533.103522][ T5843] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 1533.113243][ T5843] [ 1533.113243][ T5843] which lock already depends on the new lock. [ 1533.113243][ T5843] [ 1533.123665][ T5843] [ 1533.123665][ T5843] the existing dependency chain (in reverse order) is: [ 1533.132860][ T5843] [ 1533.132860][ T5843] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 1533.141067][ T5843] down_write+0x96/0x200 [ 1533.145890][ T5843] kernfs_add_one+0x41/0x5c0 [ 1533.151078][ T5843] kernfs_create_dir_ns+0xde/0x130 [ 1533.156816][ T5843] internal_create_group+0x425/0x1180 [ 1533.162751][ T5843] cpuhp_invoke_callback+0x445/0x860 [ 1533.168602][ T5843] cpuhp_issue_call+0x430/0x7a0 [ 1533.173995][ T5843] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 1533.180594][ T5843] __cpuhp_setup_state+0x3f/0x60 [ 1533.186065][ T5843] do_one_initcall+0x250/0x8d0 [ 1533.191369][ T5843] do_initcall_level+0x104/0x190 [ 1533.196904][ T5843] do_initcalls+0x59/0xa0 [ 1533.201943][ T5843] kernel_init_freeable+0x2a6/0x3e0 [ 1533.207670][ T5843] kernel_init+0x1d/0x1d0 [ 1533.212533][ T5843] ret_from_fork+0x51e/0xb90 [ 1533.217652][ T5843] ret_from_fork_asm+0x1a/0x30 [ 1533.222963][ T5843] [ 1533.222963][ T5843] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1533.230814][ T5843] [ 1533.230814][ T5843] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 1533.238662][ T5843] cpus_read_lock+0x42/0x160 [ 1533.243793][ T5843] static_key_slow_inc+0x12/0x30 [ 1533.249355][ T5843] setup_udp_tunnel_sock+0x2fd/0x510 [ 1533.255180][ T5843] l2tp_tunnel_register+0xda0/0x1460 [ 1533.260994][ T5843] pppol2tp_connect+0x8b7/0x17c0 [ 1533.266550][ T5843] __sys_connect+0x312/0x450 [ 1533.271851][ T5843] __x64_sys_connect+0x7a/0x90 [ 1533.277202][ T5843] do_syscall_64+0x14d/0xf80 [ 1533.282427][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.288871][ T5843] [ 1533.288871][ T5843] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1533.296648][ T5843] lock_sock_nested+0x41/0x100 [ 1533.302219][ T5843] inet_shutdown+0x6a/0x390 [ 1533.307367][ T5843] nbd_mark_nsock_dead+0x2e9/0x560 [ 1533.313223][ T5843] recv_work+0x1c7f/0x1d90 [ 1533.318216][ T5843] process_scheduled_works+0xb6e/0x18c0 [ 1533.324418][ T5843] worker_thread+0xa53/0xfc0 [ 1533.329690][ T5843] kthread+0x388/0x470 [ 1533.334316][ T5843] ret_from_fork+0x51e/0xb90 [ 1533.339563][ T5843] ret_from_fork_asm+0x1a/0x30 [ 1533.344885][ T5843] [ 1533.344885][ T5843] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1533.352671][ T5843] __mutex_lock+0x19f/0x1300 [ 1533.357923][ T5843] nbd_queue_rq+0x37b/0x1100 [ 1533.363147][ T5843] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1533.369263][ T5843] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1533.376593][ T5843] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1533.383234][ T5843] blk_mq_run_hw_queue+0x348/0x4f0 [ 1533.388903][ T5843] blk_mq_dispatch_list+0xd16/0xe10 [ 1533.394748][ T5843] blk_mq_flush_plug_list+0x48d/0x570 [ 1533.400674][ T5843] __blk_flush_plug+0x3ed/0x4d0 [ 1533.406087][ T5843] __submit_bio+0x28d/0x580 [ 1533.411150][ T5843] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1533.417358][ T5843] block_read_full_folio+0x599/0x830 [ 1533.423234][ T5843] filemap_read_folio+0x137/0x3b0 [ 1533.428817][ T5843] do_read_cache_folio+0x358/0x590 [ 1533.434577][ T5843] read_part_sector+0xb6/0x2b0 [ 1533.439903][ T5843] adfspart_check_ICS+0xa5/0xa40 [ 1533.445398][ T5843] bdev_disk_changed+0x7ba/0x1550 [ 1533.450976][ T5843] blkdev_get_whole+0x380/0x510 [ 1533.456435][ T5843] bdev_open+0x31e/0xd30 [ 1533.461377][ T5843] blkdev_open+0x470/0x610 [ 1533.466395][ T5843] do_dentry_open+0x785/0x14e0 [ 1533.471732][ T5843] vfs_open+0x3b/0x340 [ 1533.476357][ T5843] path_openat+0x2e08/0x3860 [ 1533.481506][ T5843] do_file_open+0x23e/0x4a0 [ 1533.486669][ T5843] do_sys_openat2+0x113/0x200 [ 1533.491992][ T5843] __x64_sys_openat+0x138/0x170 [ 1533.497415][ T5843] do_syscall_64+0x14d/0xf80 [ 1533.502594][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.509138][ T5843] [ 1533.509138][ T5843] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1533.516486][ T5843] __mutex_lock+0x19f/0x1300 [ 1533.521744][ T5843] nbd_queue_rq+0xc6/0x1100 [ 1533.526793][ T5843] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1533.533183][ T5843] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1533.540179][ T5843] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1533.546804][ T5843] blk_mq_run_hw_queue+0x348/0x4f0 [ 1533.552469][ T5843] blk_mq_dispatch_list+0xd16/0xe10 [ 1533.558422][ T5843] blk_mq_flush_plug_list+0x48d/0x570 [ 1533.564467][ T5843] __blk_flush_plug+0x3ed/0x4d0 [ 1533.569888][ T5843] __submit_bio+0x28d/0x580 [ 1533.575084][ T5843] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1533.581411][ T5843] block_read_full_folio+0x599/0x830 [ 1533.587347][ T5843] filemap_read_folio+0x137/0x3b0 [ 1533.592943][ T5843] do_read_cache_folio+0x358/0x590 [ 1533.598631][ T5843] read_part_sector+0xb6/0x2b0 [ 1533.603954][ T5843] adfspart_check_ICS+0xa5/0xa40 [ 1533.609463][ T5843] bdev_disk_changed+0x7ba/0x1550 [ 1533.615028][ T5843] blkdev_get_whole+0x380/0x510 [ 1533.620448][ T5843] bdev_open+0x31e/0xd30 [ 1533.625254][ T5843] blkdev_open+0x470/0x610 [ 1533.630241][ T5843] do_dentry_open+0x785/0x14e0 [ 1533.635741][ T5843] vfs_open+0x3b/0x340 [ 1533.640405][ T5843] path_openat+0x2e08/0x3860 [ 1533.645552][ T5843] do_file_open+0x23e/0x4a0 [ 1533.650609][ T5843] do_sys_openat2+0x113/0x200 [ 1533.655955][ T5843] __x64_sys_openat+0x138/0x170 [ 1533.661628][ T5843] do_syscall_64+0x14d/0xf80 [ 1533.666887][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.673423][ T5843] [ 1533.673423][ T5843] -> #4 (set->srcu){.+.+}-{0:0}: [ 1533.680766][ T5843] __synchronize_srcu+0xca/0x300 [ 1533.686256][ T5843] elevator_switch+0x1e8/0x7a0 [ 1533.691689][ T5843] elevator_change+0x2cc/0x450 [ 1533.697021][ T5843] elevator_set_default+0x36c/0x430 [ 1533.702900][ T5843] blk_register_queue+0x366/0x430 [ 1533.708507][ T5843] __add_disk+0x677/0xd50 [ 1533.713618][ T5843] add_disk_fwnode+0xfb/0x480 [ 1533.718915][ T5843] nbd_dev_add+0x72c/0xb50 [ 1533.723903][ T5843] nbd_init+0x168/0x1f0 [ 1533.728632][ T5843] do_one_initcall+0x250/0x8d0 [ 1533.733965][ T5843] do_initcall_level+0x104/0x190 [ 1533.739480][ T5843] do_initcalls+0x59/0xa0 [ 1533.744364][ T5843] kernel_init_freeable+0x2a6/0x3e0 [ 1533.750123][ T5843] kernel_init+0x1d/0x1d0 [ 1533.755091][ T5843] ret_from_fork+0x51e/0xb90 [ 1533.760249][ T5843] ret_from_fork_asm+0x1a/0x30 [ 1533.765763][ T5843] [ 1533.765763][ T5843] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1533.773638][ T5843] __mutex_lock+0x19f/0x1300 [ 1533.778793][ T5843] elevator_change+0x1b3/0x450 [ 1533.784131][ T5843] elevator_set_none+0xb5/0x140 [ 1533.789532][ T5843] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1533.796030][ T5843] nbd_start_device+0x17f/0xb10 [ 1533.801446][ T5843] nbd_genl_connect+0x165b/0x1cf0 [ 1533.807051][ T5843] genl_family_rcv_msg_doit+0x22a/0x330 [ 1533.813181][ T5843] genl_rcv_msg+0x61c/0x7a0 [ 1533.818258][ T5843] netlink_rcv_skb+0x232/0x4b0 [ 1533.823664][ T5843] genl_rcv+0x28/0x40 [ 1533.828214][ T5843] netlink_unicast+0x80f/0x9b0 [ 1533.833554][ T5843] netlink_sendmsg+0x813/0xb40 [ 1533.838872][ T5843] ____sys_sendmsg+0x972/0x9f0 [ 1533.844199][ T5843] ___sys_sendmsg+0x2a5/0x360 [ 1533.849436][ T5843] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1533.854950][ T5843] do_syscall_64+0x14d/0xf80 [ 1533.860194][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.866645][ T5843] [ 1533.866645][ T5843] -> #2 (&q->q_usage_counter(io)#70){++++}-{0:0}: [ 1533.875479][ T5843] blk_alloc_queue+0x546/0x680 [ 1533.880809][ T5843] __blk_mq_alloc_disk+0x197/0x390 [ 1533.886483][ T5843] nbd_dev_add+0x499/0xb50 [ 1533.891453][ T5843] nbd_genl_connect+0x962/0x1cf0 [ 1533.896955][ T5843] genl_family_rcv_msg_doit+0x22a/0x330 [ 1533.903065][ T5843] genl_rcv_msg+0x61c/0x7a0 [ 1533.908155][ T5843] netlink_rcv_skb+0x232/0x4b0 [ 1533.913577][ T5843] genl_rcv+0x28/0x40 [ 1533.918138][ T5843] netlink_unicast+0x80f/0x9b0 [ 1533.923568][ T5843] netlink_sendmsg+0x813/0xb40 [ 1533.928889][ T5843] ____sys_sendmsg+0x972/0x9f0 [ 1533.934210][ T5843] ___sys_sendmsg+0x2a5/0x360 [ 1533.939636][ T5843] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1533.945169][ T5843] do_syscall_64+0x14d/0xf80 [ 1533.950336][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.956810][ T5843] [ 1533.956810][ T5843] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1533.964081][ T5843] fs_reclaim_acquire+0x71/0x100 [ 1533.969777][ T5843] kmem_cache_alloc_noprof+0x40/0x650 [ 1533.976090][ T5843] __kernfs_iattrs+0xdf/0x340 [ 1533.981421][ T5843] kernfs_iop_setattr+0xea/0x3f0 [ 1533.986901][ T5843] notify_change+0xc1a/0xf40 [ 1533.992024][ T5843] do_truncate+0x1c2/0x250 [ 1533.996968][ T5843] path_openat+0x2f89/0x3860 [ 1534.002180][ T5843] do_file_open+0x23e/0x4a0 [ 1534.007220][ T5843] do_sys_openat2+0x113/0x200 [ 1534.012431][ T5843] __x64_sys_openat+0x138/0x170 [ 1534.017935][ T5843] do_syscall_64+0x14d/0xf80 [ 1534.023207][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.029633][ T5843] [ 1534.029633][ T5843] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1534.038160][ T5843] __lock_acquire+0x15a5/0x2cf0 [ 1534.043629][ T5843] lock_acquire+0xf0/0x2e0 [ 1534.048573][ T5843] down_write+0x96/0x200 [ 1534.053352][ T5843] kernfs_link_sibling+0x46c/0x540 [ 1534.059020][ T5843] kernfs_add_one+0x1ca/0x5c0 [ 1534.064237][ T5843] kernfs_create_dir_ns+0xde/0x130 [ 1534.069884][ T5843] sysfs_create_dir_ns+0x12f/0x2a0 [ 1534.075548][ T5843] kobject_add_internal+0x62b/0xd00 [ 1534.081288][ T5843] kobject_add+0x163/0x240 [ 1534.086248][ T5843] device_add+0x408/0xb70 [ 1534.091211][ T5843] hci_conn_add_sysfs+0xd5/0x210 [ 1534.096674][ T5843] hci_conn_complete_evt+0x77a/0x11d0 [ 1534.102579][ T5843] hci_event_packet+0x805/0x12c0 [ 1534.108043][ T5843] hci_rx_work+0x3ee/0x1030 [ 1534.113085][ T5843] process_scheduled_works+0xb6e/0x18c0 [ 1534.119185][ T5843] worker_thread+0xa53/0xfc0 [ 1534.124393][ T5843] kthread+0x388/0x470 [ 1534.128986][ T5843] ret_from_fork+0x51e/0xb90 [ 1534.134125][ T5843] ret_from_fork_asm+0x1a/0x30 [ 1534.139426][ T5843] [ 1534.139426][ T5843] other info that might help us debug this: [ 1534.139426][ T5843] [ 1534.149658][ T5843] Chain exists of: [ 1534.149658][ T5843] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1534.149658][ T5843] [ 1534.164229][ T5843] Possible unsafe locking scenario: [ 1534.164229][ T5843] [ 1534.171694][ T5843] CPU0 CPU1 [ 1534.177056][ T5843] ---- ---- [ 1534.182456][ T5843] lock(&root->kernfs_rwsem); [ 1534.187335][ T5843] lock(cpuhp_state_mutex); [ 1534.194458][ T5843] lock(&root->kernfs_rwsem); [ 1534.201851][ T5843] lock(&root->kernfs_iattr_rwsem); [ 1534.207146][ T5843] [ 1534.207146][ T5843] *** DEADLOCK *** [ 1534.207146][ T5843] [ 1534.215383][ T5843] 4 locks held by kworker/u9:8/5843: [ 1534.220678][ T5843] #0: ffff888068327148 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1534.231780][ T5843] #1: ffffc90004377c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1534.243806][ T5843] #2: ffff8880752e40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xbb/0x11d0 [ 1534.253743][ T5843] #3: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 1534.263608][ T5843] [ 1534.263608][ T5843] stack backtrace: [ 1534.269506][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT(full) [ 1534.269525][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1534.269537][ T5843] Workqueue: hci0 hci_rx_work [ 1534.269558][ T5843] Call Trace: [ 1534.269565][ T5843] [ 1534.269573][ T5843] dump_stack_lvl+0xe8/0x150 [ 1534.269597][ T5843] print_circular_bug+0x2e1/0x300 [ 1534.269625][ T5843] check_noncircular+0x12e/0x150 [ 1534.269651][ T5843] __lock_acquire+0x15a5/0x2cf0 [ 1534.269676][ T5843] ? __lock_acquire+0x6b5/0x2cf0 [ 1534.269701][ T5843] lock_acquire+0xf0/0x2e0 [ 1534.269721][ T5843] ? kernfs_link_sibling+0x46c/0x540 [ 1534.269749][ T5843] down_write+0x96/0x200 [ 1534.269765][ T5843] ? kernfs_link_sibling+0x46c/0x540 [ 1534.269789][ T5843] ? __pfx_down_write+0x10/0x10 [ 1534.269805][ T5843] ? kernfs_root+0x1c/0x230 [ 1534.269827][ T5843] ? kernfs_root+0x1c/0x230 [ 1534.269850][ T5843] ? kernfs_root+0x1ea/0x230 [ 1534.269873][ T5843] kernfs_link_sibling+0x46c/0x540 [ 1534.269902][ T5843] kernfs_add_one+0x1ca/0x5c0 [ 1534.269928][ T5843] kernfs_create_dir_ns+0xde/0x130 [ 1534.269944][ T5843] sysfs_create_dir_ns+0x12f/0x2a0 [ 1534.269968][ T5843] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1534.270005][ T5843] ? do_raw_spin_unlock+0xf5/0x210 [ 1534.270024][ T5843] kobject_add_internal+0x62b/0xd00 [ 1534.270045][ T5843] kobject_add+0x163/0x240 [ 1534.270063][ T5843] ? __pfx_kobject_add+0x10/0x10 [ 1534.270078][ T5843] ? _raw_spin_unlock+0x28/0x50 [ 1534.270100][ T5843] ? get_device_parent+0x366/0x3a0 [ 1534.270129][ T5843] device_add+0x408/0xb70 [ 1534.270150][ T5843] hci_conn_add_sysfs+0xd5/0x210 [ 1534.270169][ T5843] hci_conn_complete_evt+0x77a/0x11d0 [ 1534.270191][ T5843] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1534.270213][ T5843] hci_event_packet+0x805/0x12c0 [ 1534.270233][ T5843] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1534.270251][ T5843] ? __pfx_hci_event_packet+0x10/0x10 [ 1534.270271][ T5843] ? kcov_remote_start+0x49a/0x7a0 [ 1534.270297][ T5843] ? hci_send_to_monitor+0xe2/0x590 [ 1534.270322][ T5843] hci_rx_work+0x3ee/0x1030 [ 1534.270342][ T5843] ? process_scheduled_works+0xa8d/0x18c0 [ 1534.270364][ T5843] process_scheduled_works+0xb6e/0x18c0 [ 1534.270398][ T5843] ? __pfx_process_scheduled_works+0x10/0x10 [ 1534.270423][ T5843] ? assign_work+0x3d5/0x5e0 [ 1534.270445][ T5843] worker_thread+0xa53/0xfc0 [ 1534.270478][ T5843] kthread+0x388/0x470 [ 1534.270494][ T5843] ? __pfx_worker_thread+0x10/0x10 [ 1534.270515][ T5843] ? __pfx_kthread+0x10/0x10 [ 1534.270530][ T5843] ret_from_fork+0x51e/0xb90 [ 1534.270553][ T5843] ? __pfx_ret_from_fork+0x10/0x10 [ 1534.270573][ T5843] ? __switch_to+0xc7d/0x1450 [ 1534.270593][ T5843] ? __pfx_kthread+0x10/0x10 [ 1534.270608][ T5843] ret_from_fork_asm+0x1a/0x30 [ 1534.270638][ T5843] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1535.516918][ T8227] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.615909][ T8227] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.688048][ T8227] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.718403][ T8227] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.830539][ T8227] bridge_slave_1: left allmulticast mode [ 1535.842092][ T8227] bridge_slave_1: left promiscuous mode [ 1535.852428][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.861848][ T8227] bridge_slave_0: left allmulticast mode [ 1535.867949][ T8227] bridge_slave_0: left promiscuous mode [ 1535.876606][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.056177][ T8227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1536.067871][ T8227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1536.078325][ T8227] bond0 (unregistering): Released all slaves [ 1536.286886][ T8227] hsr_slave_0: left promiscuous mode [ 1536.296863][ T8227] hsr_slave_1: left promiscuous mode [ 1536.303668][ T8227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1536.311085][ T8227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1536.327448][ T8227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1536.335466][ T8227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1536.353008][ T8227] veth1_macvtap: left promiscuous mode [ 1536.358630][ T8227] veth0_macvtap: left promiscuous mode [ 1536.365760][ T8227] veth1_vlan: left promiscuous mode [ 1536.371042][ T8227] veth0_vlan: left promiscuous mode [ 1536.560528][ T8227] team0 (unregistering): Port device team_slave_1 removed [ 1536.572308][ T8227] team0 (unregistering): Port device team_slave_0 removed [ 1536.890780][ T8227] IPVS: stop unused estimator thread 0... [ 1536.995166][ T8227] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.050443][ T8227] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.088918][ T8227] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.133944][ T8227] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.238700][ T8227] bridge_slave_1: left allmulticast mode [ 1537.245781][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.256049][ T8227] bridge_slave_0: left allmulticast mode [ 1537.261737][ T8227] bridge_slave_0: left promiscuous mode [ 1537.274876][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.390499][ T8227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1537.404382][ T8227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1537.415569][ T8227] bond0 (unregistering): Released all slaves [ 1537.634055][ T8227] hsr_slave_0: left promiscuous mode [ 1537.640228][ T8227] hsr_slave_1: left promiscuous mode [ 1537.648212][ T8227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1537.657640][ T8227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1537.666630][ T8227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1537.680042][ T8227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1537.693777][ T8227] veth1_macvtap: left promiscuous mode [ 1537.699393][ T8227] veth0_macvtap: left promiscuous mode [ 1537.705766][ T8227] veth1_vlan: left promiscuous mode [ 1537.711057][ T8227] veth0_vlan: left promiscuous mode [ 1537.892639][ T8227] team0 (unregistering): Port device team_slave_1 removed [ 1537.919690][ T8227] team0 (unregistering): Port device team_slave_0 removed [ 1538.280581][ T8227] IPVS: stop unused estimator thread 0... [ 1538.632972][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!