last executing test programs: 2.998226711s ago: executing program 0 (id=2252): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001c000380180000800c00010b3a0001000d00000008000340"], 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xf0b, 0x70bd31, 0xfffffffd, {0x0, 0x0, 0x12, r4, {0x0, 0x7}, {0xf, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x0, 0x3, 0xe, 0x2, 0xff}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x8, 0x9, 0x6}}]}, @TCA_NETEM_DELAY_DIST={0x6, 0x2, "80d3"}]}}}]}, 0x6c}}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3201818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r8, 0x0, 0x0, 0x10102, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$unix(0x1, 0x5, 0x0) socket$kcm(0xf, 0x3, 0x2) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40488d4}, 0x20044840) sendmmsg$inet6(r10, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001340)='\'', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 2.938181773s ago: executing program 3 (id=2254): socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@link_local, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 2.859927418s ago: executing program 4 (id=2255): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14, &(0x7f0000000400)={0x0}}, 0x0) 2.67460963s ago: executing program 4 (id=2257): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000012c0)={{r0}, "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"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x44, 0x30, 0xb, 0x5, 0x25df5bfc, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="e00000001000090500000000fdffffff6f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712d28"], 0xe0}], 0x1, 0x0, 0x0, 0x800}, 0x40040) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000540)=""/138, 0x8a}, {&(0x7f0000000a00)=""/259, 0x103}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f0000000b40)=""/236, 0xec}, {&(0x7f0000000c40)=""/208, 0xd0}], 0x6}, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r3, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmsg$alg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000008c0)="26211df9f277725f59d92c6cc9508b3e77e14653e2943f80f50bd360b40b1798f11a9b11a629d03e038401561c5de2a38c994ad80a52f1aa49e2a085b145c283a2c2eadab485f90c6bf6253b225127945a5fc817debdc1c3a31eeeedcdcb4e9ef85535e4e24d462e36bc7935e4582fac7bb12941c3499175bd4ce5cb5b4739e89ccc1ba14eade1ee903d39de8b8bb08671797bc99a1d46a24b8fdacd4613d6de4853c8c45e667ddaeeea8ea7380f874a78c1202e3b85c74795", 0xb9}], 0x1, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x5f}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0xb0, 0x117, 0x2, 0x98, "ac4119338e6bcf470fa6706632e88d240d8936ed06cab71350cfe1c0ba7668219322b5e89e81bc34b4a8ac7ed6790e692205c86009faaa7e4f7aeaa6dd301d7e03d6972e5ac29929884861b2e7d769034e4634e310dde05358d88e4c593a0672196cbd734fbcf6808c5413f2f575ffc7495ae2debf8d52928a3448b27da07454721b6120941e5b169261f732b1a9b842b29b1f281ab32540"}, @iv={0x60, 0x117, 0x2, 0x4b, "0318aacbc1c03da803543793ca2f8fdd806298c5d0dbbc31537da136c1a369db1c65186ab94af5a2bc541ec35b30d10ead8c4facc460382acf5b4619b3fd893ffbc95a42886da7c4ba48d0"}], 0x1b8}, 0x448c4) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa00a00a9}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="28dbdf25080001000000000008000300040000000800030001000000000000000000000000000000c06cde1c630b14a58ccdbb66156177"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x4041) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 2.477953329s ago: executing program 3 (id=2259): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x10000}, 0x38, 0x10020) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) unshare(0x22000000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r8 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r6, 0xd66771a5e8224ded, 0x1, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_PID={0x8, 0x52, r8}]}, 0x24}}, 0xc0) 1.90903931s ago: executing program 4 (id=2262): getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000200)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[], 0xfd6c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)={r0, 0xc6ed}, &(0x7f0000000280)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000440)={0x0, 'dummy0\x00', {0x1}, 0xfff7}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendto$inet(r5, &(0x7f0000000000)='\x00\x00', 0x2, 0x24008800, 0x0, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x800) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) shutdown(r6, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x6, 0x7fff, 0x1, 0xd, 0x0, 0xa6, 0x7, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x103, 0xffe, 0x9, 0x3, 0x8003, 0x1, 0xfffffffa, 0x0, 0x6, 0x100009, 0x9, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0x9, 0x2b12, 0xe2b, 0x6, 0x1c00, 0xb, 0x7, 0x7, 0x7, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0xf16e, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x78c, 0x6, 0xf, 0x101, 0xd7, 0x1fa08609, 0x7, 0xaa, 0x81, 0x9, 0x17fffc, 0x4007, 0x8b, 0x5, 0x2af, 0xffff, 0x1, 0x6, 0x6, 0x9, 0x144, 0x7, 0x4009, 0x0, 0x7, 0xfffffffe, 0x401, 0x752, 0x0, 0x1005, 0x0, 0x10001, 0x2, 0xffffffff, 0x8, 0x6, 0x9, 0x80000000, 0xfe000003, 0x5, 0x2, 0x6, 0x100, 0x5, 0x252, 0x2000081, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0x0, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x401, 0x40, 0x5, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x101, 0x4, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000740)='^', 0x1, 0x40000, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x14}}, 0x8040800) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r5) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20c0c1}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, r7, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1b}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x24048044}, 0x8001) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) 1.906902454s ago: executing program 0 (id=2263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) socket(0x2, 0xa, 0x300) write$tun(r1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000300), &(0x7f0000000280)=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180400fc010000000000000000000000000003feee"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\t'}]}], {0x14}}, 0x5c}}, 0x40) syz_emit_ethernet(0x49, &(0x7f0000000400)=ANY=[], 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r6, 0x33, 0x0, 0x870, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f00000004c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000580)={0x5768a6b, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup, r3, 0x14, 0x28, 0x0, @void, @void, @void, @value=r8, r7}, 0x20) 1.905371029s ago: executing program 1 (id=2264): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3}, &(0x7f0000000380)=0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="cd86a8e58245ba6aaecd8fe257f2c2ffbf", 0x11}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000340)=""/138, 0x8a}], 0x2}, 0x6}], 0x1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba1282", 0x12}], 0x2, 0x0, 0x0, 0x2000847}], 0x1, 0x40800) recvmmsg$unix(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000580)=""/21, 0x15}, {&(0x7f0000000640)=""/11, 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/192, 0xc0}], 0x1}}], 0x2, 0x62, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x3, {{@in=@rand_addr=0x64010102, @in6=@private0, 0xfffd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x0, 0xefffffffffffffff, 0xcb}, {0x0, 0xa01, 0x407ffffffffffe, 0x2}, 0xfae, 0x0, 0x1, 0x0, 0x4, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3c}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x5}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_buf(r7, 0x1, 0x3d, &(0x7f0000000680)=""/217, &(0x7f0000000780)=0xd9) 1.699519789s ago: executing program 2 (id=2265): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)={0x10, 0x22, 0x523}, 0x10}], 0x1, 0x0, 0x0, 0x24008015}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000200000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.623703697s ago: executing program 2 (id=2266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x1, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x24}}, 0xc0) 1.588356334s ago: executing program 3 (id=2267): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7fff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7fff}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x10) (async) 1.426932041s ago: executing program 0 (id=2268): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x20000004, 0x4) sendmmsg$inet(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="dcf034b82be421db2cf762d90d359ebc1b1bd71d7149373c280a6caa65c2b2695b027bb6f7c681caeeeb77b93dc472ebc2e87cabb473b7b87fb59cbc21a91335e0f204e6b4d4c6c9b12a178895656e38cb71b569c14d5030b4dae551b0cb018063d47d156f4ea4274474436e9877e1b066fe8f", 0x73}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f0000001b40)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000003040)}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}], 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000180)="0b036c12e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140), 0x14) 1.42555966s ago: executing program 2 (id=2269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001c40), &(0x7f0000001c80)=0x8) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0xb, &(0x7f0000000080)=""/10, &(0x7f0000000500)=0x3) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'netpci0\x00', &(0x7f0000000140)=@ethtool_eee={0x44, 0x2, 0x4, 0x9, 0x3, 0x1, 0x6, 0x79, [0x32, 0x5]}}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000700)="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", 0x684}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r4, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) 1.360210639s ago: executing program 4 (id=2270): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0xde, &(0x7f0000000880)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f0000000700), 0x8, 0x42, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000f8ffffffb7030000080000296e12fe9915afdc00b70400000000000085000040010000009500000000000000000000000026d5cbeec05d0cb14ad0d252b8675e378f776c2c6138dbd6f32210839bc80a922a1dcbe50ac30f7d33be3047f2aace0c7314e89d8d7b9e18a4898f41dbb13485"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) unshare(0x10000000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.23308928s ago: executing program 3 (id=2271): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001400)={&(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast1, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000001380)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x30}, 0x0) (fail_nth: 5) 1.231736143s ago: executing program 0 (id=2272): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x20004800) socket$netlink(0x10, 0x3, 0xe) (async) socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x400, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.229081538s ago: executing program 4 (id=2273): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) ioctl$OCFS2_IOC_INFO(r2, 0x80106f05, &(0x7f000000a1c0)={&(0x7f000000a000)=[0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, 0x0, &(0x7f0000003000)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004340)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f00000043c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f0000004400)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x4fbe, 0x9d}, {0x80, 0x5}, {0x8001, 0x2}, {0x9, 0x401}, {0x3, 0x101}, {0x8, 0x3}, {0xef4, 0x1}, {0x1, 0x7ff}, {0x1}, {0x0, 0xf96}, {0x6, 0x3}, {0x2, 0x6}, {0x0, 0x8}, {0x7fffffff, 0x7}, {0x8, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {0x8505, 0x8}, {0x1000, 0x8}, {0xe}, {0x8, 0x8cb4}, {0xc000000000000000, 0x100000001}, {0x7fffffffffffffff, 0xf0d}, {0x7de5, 0x8000}, {0x3}, {0x7, 0x3}, {0x6, 0x322e1c35}, {0x57e11f51, 0xfffffffffffffffd}, {0x5, 0x2}, {0x1}, {0x3, 0x4903}, {0x4, 0x8000000000000000}, {0xffffffffffffff11, 0x1}, {0xe7f, 0x5}, {0x6, 0xafd}, {0x2, 0xbc3}, {0xc, 0x4}, {0x2}, {0x400, 0x3a30000}, {0x80000001, 0x3}, {0xe9, 0x8}, {0x6}, {0xbcfa, 0x9}, {0x6, 0x6}, {0xad4, 0x3}, {0x9c37, 0x8}, {0x5, 0xc277}, {0x8, 0x30}, {0x2, 0xfffffffffffffff2}, {0x1, 0x5}, {0xacbd, 0x8}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0x2f16}, {0x9, 0xec75}, {0x7f, 0x5}, {0x5301, 0x3}, {0x8, 0x8}, {0x9, 0x7fffffffffffffff}, {0x7f, 0x5}, {0x0, 0x3ff}, {0x4, 0x10000}, {0x7ff, 0x7}, {0x1, 0x6e6}, {0x4cbb, 0x3ff}, {0x8000000000000001, 0x2}, {0x82, 0x6}, {0x0, 0x2}, {0x8001, 0x5}, {0xc, 0x100000001}, {0x5, 0xfffffffffffffff9}, {0x1, 0xffffffffffffffff}, {0x2, 0xdc6}, {0x4, 0x9}, {0xf}, {0x5, 0x7}, {0x4, 0xfffffffffffffffe}, {0xe08, 0x81}, {0x1, 0xf8}, {0x9, 0x9}, {0x7, 0x8}, {}, {0x0, 0x5}, {0x8000000000000000, 0x9}, {0x8, 0x8000}, {0x2, 0x1}, {0x3, 0x200}, {0x5, 0x6}, {0x6, 0x1000}, {0x1, 0x2}, {0x8, 0x89a}, {0xffffffffffffffff, 0x1ff}, {0x5, 0x6}, {0xbad}, {0x1, 0x2}, {0x7, 0x401}, {0xd, 0x6}, {0x9, 0x9}, {0x3, 0x10}, {0xfd5, 0xf5a}, {0x3, 0x3ff}, {0x3b, 0x1}, {0x0, 0xc6}, {0x8, 0xc}, {0x7}, {0x80, 0x10}, {0xffffffffffffffbb, 0x1}, {0x8, 0x6e9}, {0x1, 0x6}, {0x2, 0x401}, {0x2, 0x6}, {0xb8, 0x400}, {0x3, 0x7fffffff}, {0xffffffffffff0000, 0xffffffff}, {0x7, 0x4}, {0x46, 0x1}, {0x8e, 0x80}, {0x1}, {0x1, 0x7}, {0x9, 0x9}, {0xfffffffffffffffa, 0x7f}, {0x8, 0xfffffffffffff7db}, {0x7, 0x2f}, {0x2, 0x14}, {0x8}, {0x5, 0xfff}, {0xfffffffffffffffe, 0x3}, {0x100, 0x5}, {0x4, 0xffffffff00000000}, {0x100, 0x3}, {0x7616, 0x1a68}, {0x5476924a, 0x40}, {0x8, 0xff}, {0x8000, 0x9}, {0x8, 0x8}, {0x3, 0x7f}, {0xfffffffffffffffb, 0x5}, {0x4, 0x3}, {0x0, 0x4}, {0xd28, 0x1000}, {0x80000001, 0x6}, {0xd1, 0x4c00000000000000}, {0xfff, 0x5}, {0x4, 0x3ff}, {0x7, 0x7}, {0x7ff, 0x8}, {0x84, 0x2}, {0x2, 0x5}, {0x89, 0x14c}, {0xb, 0x6}, {0x3, 0x497}, {0x5820, 0x401}, {0x7}, {0x0, 0x7fff}, {0x6, 0x6}, {0x1, 0xeb}, {0x2, 0x3}, {0xd2a, 0x6}, {0x9, 0x57}, {0x9, 0xffff}, {0x6, 0x2}, {0x100000, 0x100}, {0x2, 0x2}, {0x6, 0x3}, {0x81, 0x5}, {0x100000001, 0x8}, {0xfffffffffffffc00, 0x4}, {0x5, 0x869}, {0x80000000, 0x4}, {0x7, 0xfffffffffffffc01}, {0x8000000000000001, 0x9}, {0x1, 0x7}, {0x5, 0x1}, {0x7, 0x4}, {0x101, 0x8}, {0x4, 0x9}, {0x8, 0xff9}, {0x6, 0x7fff}, {0x9, 0x3}, {0x3, 0x800}, {0x3, 0x8}, {0x76, 0xffff}, {0x9, 0x1}, {0x9, 0x8000}, {0xd, 0x1ff}, {0xffffffffffffffff, 0x1}, {0xffff, 0x8}, {0x9, 0x7}, {0x0, 0xac}, {0x4}, {0x7fff, 0x1}, {0x5f1, 0x800}, {0x10000, 0x9}, {0x6, 0x10001}, {0x7fff, 0x7}, {0x67fd, 0x1}, {0x5, 0xe883}, {0x7, 0xffffffffffffffff}, {0x3, 0x1}, {0x4, 0x2}, {0x6, 0x7}, {0x2, 0xe}, {0x6}, {0x1, 0x1}, {0xfffffffffffffffc, 0x9}, {0x4, 0x81cf}, {0x1, 0x9}, {0x5cd56246, 0x401}, {0x2, 0x5}, {0x9, 0x2}, {0x0, 0x5}, {0x9, 0x1}, {0xfffffffffffffff5, 0xffffffffffff0001}, {0x1, 0xab}, {0x6, 0x2}, {0x2, 0x123}, {0x8, 0xf}, {0x0, 0xe}, {0x80, 0x100000000}, {0xfffffffffc000000, 0x7702baf}, {0x7, 0x974}, {0x7, 0x7}, {0x8000000000000000, 0x6}, {0xfffffffffffffff7, 0x5}, {0x6}, {0x100000001, 0x101}, {0x9, 0x5}, {0x9, 0x3}, {0x1, 0xc}, {0x10000}, {0x7, 0x4}, {0x7f, 0x5}, {0x0, 0x8}, {0x0, 0x200}, {0x5, 0x2}, {0xd, 0x80000000}, {0x5, 0x3}, {0x0, 0x62b7acbf}, {0x9, 0x1421}, {0x9, 0x100000000}, {0xffffffffffffff81, 0x5740}, {0x7, 0xfffffffffffffe7a}, {0x7, 0x5}, {0x2, 0xffffffffffffff81}, {0x400, 0x4}, {0x1, 0xfffffffffffffffd}, {0x80000001, 0x9}, {0x8000000000000001, 0x7}, {0x3, 0x769a}, {0x9, 0xa59}, {0xb9, 0xc}, {0xb, 0x7}, {0x2, 0xc0}, {0x7, 0x6}, {0x8, 0xae4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000076c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x7, 0x3}, {0x4, 0xfffffffffffffff1}, {0x40, 0x9}, {0x5}, {0x80, 0x7}, {0x183, 0x6}, {0xbd40, 0x8}, {0x2a4ccaad}, {0x5, 0x2}, {0x6}, {0x6, 0x8}, {0x8000, 0x4}, {0x512201de, 0x4}, {0x7, 0x3}, {0x101, 0x8000000000000}, {0x9, 0x4}, {0x8}, {0x2, 0x6}, {0x2, 0x1}, {0xff, 0x101}, {0xffff, 0x49}, {0xac23, 0x5}, {0x7, 0x7fffffff}, {0x400, 0x8000000000000001}, {0x3, 0x7}, {0x5b4, 0x3ff00}, {0x485, 0xfffffffffffff689}, {0x481aacc4, 0x3}, {0x1, 0x4}, {0x60, 0x8}, {0x4, 0xe}, {0x5, 0xfff}, {0x6, 0xf262}, {0x6, 0xaea}, {0x7ff, 0x6}, {0xb483}, {0xb, 0x4}, {0x1, 0x8}, {0x5, 0x20000000}, {0x790, 0x4}, {0xe, 0x4}, {0x0, 0x4b}, {0x8, 0xb4f}, {0x1, 0x503fd167}, {0x8, 0x1}, {0x5, 0x8}, {}, {0x2, 0x8}, {0x80000000, 0xb}, {0x4, 0x7}, {0x1, 0x9}, {0x3, 0x7ff}, {0x81, 0x100000001}, {0x2, 0xb}, {0x5f, 0x81}, {0x7, 0x2}, {0x2}, {0x2, 0x2}, {0x80, 0x89}, {0x9, 0xa}, {0x5, 0x100000001}, {0x3, 0x7dc44036}, {0x1, 0x7fffffff}, {0x6, 0x4}, {0x8, 0x4}, {0x1, 0xa}, {0x8, 0xfffffffffffffffc}, {0x8000000000000001, 0x100000001}, {0x9, 0x6}, {0x200, 0xd}, {0x3, 0xfffffffffffffff8}, {0xa4e, 0x4}, {0xf9, 0x1}, {0x3ff}, {0xfffffffffffffff9}, {0x20c, 0x3}, {0x8, 0xfffffffffffffff3}, {0xffffffffffffffff, 0x7f}, {0x2, 0xe000000000000}, {0x2, 0x2}, {0x8001, 0x81}, {0x100000001, 0x5}, {0xfffffffffffffffb, 0x4}, {0x100000001, 0x101}, {0x2, 0x3}, {0xad38, 0x8001}, {0xe, 0x8}, {0x2, 0xd}, {0x66b, 0x8d0}, {0x0, 0xcf11}, {0xfb9, 0x5}, {0x2, 0x92c}, {0x936a, 0x39}, {0x1, 0x7}, {0x3d, 0x5}, {0x4, 0x3}, {0x9, 0x5}, {0x9, 0x3}, {0xe, 0x5}, {0x7}, {0xf00, 0x2}, {0x400, 0xd6}, {0x9, 0x2}, {0x0, 0x4}, {0x9b, 0x49ab}, {0x0, 0x2}, {0x7fffffff, 0x4}, {0x6, 0x3}, {0x5, 0xf9be}, {0x3ff, 0x3}, {0xb8c, 0xffffffff}, {0x7ff}, {0xffffffffffffffff, 0x3}, {0x7fff, 0x2}, {0x7fffffffffffffff, 0x80000000}, {0x7, 0x7fffffff}, {0x3, 0x3}, {0x2e0d1d0d, 0x8000000000000000}, {0x923, 0x687d}, {0x9, 0xd64a}, {0x7, 0x1}, {0x9, 0x50}, {0x4}, {0x2, 0x2}, {0x4ad, 0x200}, {0x4, 0x4}, {0x200, 0xff}, {0x8, 0x4}, {0x80, 0x9}, {0x1, 0x200}, {0x1ff, 0xfffffffffffffffa}, {0x2, 0xb000000000000000}, {0xc}, {0x6, 0x4}, {0x4, 0x4a12}, {0x4, 0x8000}, {0x2ef, 0xfffffffffffffffc}, {0xfffffffffffffc01, 0x9}, {0x5cd9, 0xffffffff}, {0x312, 0x9}, {0x3, 0x5}, {0x48c, 0x6}, {0x3, 0x7}, {0x8e, 0x8}, {0x81, 0x2}, {0x8, 0xffffffffffffffff}, {0x4, 0x8}, {0x1800000000000, 0x8000000000000000}, {0x3, 0xf}, {0x10, 0x9f}, {0x80000001, 0xfffffffffffffffc}, {0x4, 0x8}, {0x9, 0x8}, {0x6, 0xfffffffffffffff8}, {0xde2, 0x5}, {0x1a, 0xc}, {0x5, 0x6}, {0x7, 0x8000}, {0x8, 0x7}, {0x9, 0xffffffffffffff1e}, {0x0, 0x4}, {0x0, 0x6}, {0x7, 0x72b3fa45}, {0x37, 0x62a}, {0xfffffffffffffffc, 0x2}, {0xfffffffffffffffe, 0x94a6}, {0x4, 0xfffffffffffffffe}, {0xcd}, {0x1ff, 0x692}, {0xcf, 0xfffffffffffffff7}, {0x4, 0x6}, {0xfffffffffffffff8, 0x6}, {0x2, 0x205e}, {0x6, 0xb094}, {0x1d, 0x4}, {0x3ff, 0x3c6}, {0x9, 0x6}, {0x80000001, 0x8}, {0x1, 0x7fffffff}, {0xb, 0xfbf9}, {0x3, 0x54c2}, {0xc80, 0x100000001}, {0x8, 0x4838}, {0x9, 0x2}, {0x0, 0x92}, {0x59c, 0x7}, {0x3, 0xfffffffffffffffd}, {0x1, 0x109a}, {0xffffffffffff7fff, 0xffffffffffffffff}, {0xa, 0x7fff}, {0x40, 0x4}, {0x101, 0x3}, {0x2, 0x2}, {0x40, 0x100000001}, {0x40, 0x3d}, {0x1, 0x3}, {0x7ff, 0x2}, {0x1, 0x8fab}, {0xc, 0x66}, {0x100, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {0xffff, 0x1}, {0x8, 0x6}, {0x4, 0x1a}, {0x5, 0x6}, {0x7186, 0x10000}, {0xfffffffffffffff7, 0x5}, {0x40000000000000}, {0x3, 0x80}, {0x8, 0x2}, {0x7, 0x80000001}, {0xc5, 0x1}, {0x80000000, 0x9}, {0x6, 0x4}, {0xf}, {0x4, 0x400}, {0x6, 0x4}, {0x45, 0xb}, {0x7, 0x7}, {0x4, 0x7}, {0x1, 0x2b}, {0x3, 0x1610}, {0x9}, {0x9, 0x8d8}, {0x0, 0x8}, {0xfffffffffffffffc, 0xfffffffffffffffc}, {0x5, 0x7fff}, {0x8, 0x9}, {0x4, 0x6}, {0xfffffffffffffffa, 0x55a}, {0x3}, {0xb5, 0x4}, {0x4, 0x80000000}, {0x1, 0x2}, {0x7, 0x9}, {0x4, 0x6}, {0xc, 0x6}, {0x6, 0x4}, {0x1, 0x7d}, {0x5}, {0x7, 0xcb2}, {0x8}, {0x8, 0x2}, {0x1000000, 0x9}, {0x8, 0x4}, {0xe, 0x6}, {0x2, 0x5}, {0x10, 0x2}, {0xffff, 0x2}, {0x400, 0x8001}, {0xfffffffffffffffa, 0x5}, {0x4, 0x1}, {0x4, 0x40}, {0xe220, 0x6}]}, 0x0, &(0x7f0000008740)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, 0x0, 0x0, 0x0, &(0x7f0000008940)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, 0x0, 0x0, 0x0, &(0x7f0000008a80)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008c40)=@freeinode={{0x4f32494e, 0x8, 0x10}, [{0x6, 0x4}, {0x4, 0x9}, {0x9, 0xfffffffffffffffe}, {}, {0xcfd, 0x1c}, {0x5, 0xfffffffffffffffb}, {0x7fff, 0x6}, {0x768c, 0x38f}, {0xf, 0x98f}, {0x3, 0x8001}, {0xffffffff, 0x6}, {0xfffffffffffffff9, 0xa}, {0xb8d, 0x1}, {0x2477, 0x1}, {0x7fffffff}, {0x3e93, 0xfb0}, {0x7, 0x8000}, {0x7, 0xdf4}, {0x100, 0xfff}, {0x7, 0x7}, {0x5, 0x8}, {0x1, 0xbc}, {0x6, 0x2}, {0x2, 0xfd8}, {0x1, 0x10000}, {0x4, 0x2}, {0x4, 0x400}, {0x1ff}, {0x9, 0x4}, {0x98, 0x1}, {0x7, 0x6}, {0x29, 0x7}, {0x7, 0x4}, {0x7, 0xc6}, {0x3, 0x7fffffffffffffff}, {0xfffffffffffffffa, 0xf78}, {0x6, 0x63a}, {0x5, 0x3}, {0x8, 0x10000000}, {0x6, 0x3}, {0x3, 0xca7}, {0x6, 0xcc}, {0xca87, 0x9}, {0x81, 0x2}, {0xffffffffffffffff}, {0x1, 0x7}, {0x2, 0x2}, {0x180000000000, 0x2}, {0x2, 0x7}, {0x400, 0x200000}, {0xffffffffffffff80, 0xefa}, {0x2, 0x4b78}, {0x9, 0x2}, {0x2, 0x6}, {0x9, 0x3}, {0x5, 0xc}, {0x8, 0x7ff}, {0x7fff, 0x7}, {0x1000000000, 0x7}, {0x4, 0x6}, {0x100, 0x43b}, {0x1, 0x5}, {0x4, 0xb5c6}, {0x10000, 0x8}, {0x100, 0xffffffff}, {0x401, 0x5846662c}, {0x7fffffff, 0x4}, {0x7, 0x9}, {0x5, 0x10000}, {0x2, 0x8}, {0x7, 0x8}, {0x8, 0x1}, {0x1000, 0x6}, {0x3}, {0x5, 0x100000000}, {0x8, 0x66}, {0x2, 0x16}, {0x9, 0x1}, {0x5, 0x5}, {0xffff, 0x4}, {0x6, 0x4}, {0xfffffffffffffff9, 0x7}, {0xfffffffffffffffa, 0x9244}, {0xfffffffffffffffc, 0x8de}, {0xfffffffffffffffe, 0x4165}, {0x8, 0x9}, {0x0, 0xffffffffffffffff}, {0x2, 0x9}, {0x1, 0x7}, {0x1}, {0x433, 0x4}, {0x7ff, 0x6}, {0x41b4, 0x1}, {0x0, 0x7f}, {0x9, 0x46}, {0x8, 0xa}, {0x8, 0x7}, {0x8f, 0x66a2}, {0x7, 0x7fff}, {0x3, 0x9}, {0x1, 0x89c}, {0x1, 0x5}, {0x7, 0xf9}, {0x50, 0xfffffffffffffbff}, {0xfffffffffffffff7, 0xde4}, {0x6, 0x9000000000}, {0x0, 0xfffffffffffffffc}, {0x16}, {0x30000000000000}, {0x1}, {0x4, 0x7}, {0x8}, {0x5, 0x401}, {0xb41, 0xc}, {0x5, 0x43c7}, {0x874, 0x2a34}, {0x30000, 0x2}, {0x800, 0xffffffffffffffff}, {0x100000000, 0x400}, {0x7fffffffffffffff, 0x2}, {0x2, 0x96b}, {0x8}, {0x3, 0x10000}, {0xffffffff, 0x7b}, {0x80000001, 0x8}, {0x7fffffffffffffff, 0x7}, {0x9, 0x81}, {0xf9, 0x5}, {0x3, 0xfffffffffffffff9}, {0x1ff, 0x6}, {0x7, 0x100000000}, {0x2, 0xaf}, {0xc26, 0xfffffffffffffff7}, {0xde3, 0x4}, {0x2, 0x7}, {0xe814, 0x401}, {0x2, 0x3}, {0xb91, 0x5}, {0x1, 0xe}, {0xfffffffffffffff7, 0x1}, {0x7, 0x2}, {0xce38, 0x2}, {0x5, 0x9}, {0x0, 0x7fff}, {0xfffffffffffffff0, 0x2}, {}, {0x645, 0xbf7}, {0x7, 0x2}, {0x7c, 0xff}, {0x8000000000000001, 0x3}, {0xae, 0x3ff}, {0x3, 0x3}, {0x6, 0x8}, {0x5, 0x8}, {0x10, 0x86ab}, {0x10, 0xffffffff7fffffff}, {0x5, 0xbb2}, {0x64, 0x8}, {0x6, 0xb011}, {0x8, 0x7}, {0x7, 0x46}, {0x49, 0x6}, {0xd2, 0x6}, {0x4e8, 0x3}, {0x18, 0x8}, {0x10000, 0xf2}, {0xff, 0x6}, {0x7, 0x3}, {0x81, 0x6}, {0x8f5, 0xffffffffffffffee}, {0x2, 0x6}, {0x5, 0xf}, {0xfffffffffffffff7, 0x7}, {0x4000000000000, 0x6}, {0x85f7, 0xa}, {0x0, 0x1}, {0x2, 0x9}, {0x80, 0xfffffffffffffe01}, {0x7a, 0x3}, {0x6, 0xfffffffffffffffe}, {0x8, 0x9}, {0x621, 0x9}, {0x8, 0x2}, {0x7e5, 0x72}, {0x200, 0x8}, {0x401, 0xe}, {0x24e4, 0xfc3}, {0xef6, 0x7}, {0x44, 0xffff}, {0x4, 0x80000001}, {0x5, 0x7fff}, {0x6, 0xb}, {0x5, 0x9}, {0x6, 0xffff}, {0xfff, 0x33c3}, {0x3, 0x10000}, {0x80, 0x7f}, {0x5, 0x4}, {0x10001, 0x3}, {0x4, 0xfff}, {0x4, 0x7}, {0x5, 0x3}, {0x3, 0xfffffffffffffffd}, {0xbfc, 0x5}, {0x3f800, 0x7}, {0xc, 0x182afa1a}, {0x1, 0xe000000000}, {0x2, 0x9}, {0x6, 0x9}, {0x41, 0x100000001}, {0x7, 0x1}, {0xb, 0x60000000000}, {0x3, 0x3}, {0x1, 0x8000000000000000}, {0xa1, 0x5}, {0x6, 0x8}, {0x64c, 0xffffffffffffff23}, {0xfffffffffffffe01, 0x62}, {0x8, 0x1}, {0x5, 0x1271df46}, {0x5, 0x6}, {0x5, 0x9}, {0x1, 0x8}, {0x7, 0x10000}, {0xfffffffffffffff1, 0x6}, {0x6, 0x9}, {0x8166, 0x4}, {0x80, 0x8001}, {0x8, 0x6}, {0xf, 0xffff}, {0x5, 0x2}, {0xa9, 0x800}, {0x5}, {0x8, 0xde4e}, {0xd, 0x80000000}, {0x31, 0xff}, {0x4, 0x6}, {0x73, 0x400}, {0xa, 0xc7}, {0x2, 0x3}, {0x791, 0x4}, {0x3, 0x5}, {0x7f, 0x4}, {0xb8a, 0xbf}, {0x19da, 0x3}, {0x10, 0x5}, {0x7abc, 0x7}, {0x400, 0x8}, {0x6, 0xb18}, {0x7, 0x5}, {0x8, 0x77}, {0xdd0f, 0x7}, {0xe8, 0x6}, {0x8, 0x5}, {0x9, 0x2}]}, &(0x7f0000009c80)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000009cc0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000000}}, &(0x7f0000009d00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x3}, &(0x7f0000009e40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000009e80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0x7}, &(0x7f0000009fc0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}], 0x32}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, 0x0, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0xfffffffe) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000400)="05896d544d688c155b2634607aff136d3553df4cf1c590821b2a41cd74be4659981319decb2a", 0x26}], 0x1) r8 = accept4$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r8, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) 696.271683ms ago: executing program 1 (id=2274): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x900000000000000, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100000e00000080ff00000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000020013"], 0x70}}, 0x0) 597.043888ms ago: executing program 3 (id=2275): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000900)="ffff", 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e20, @multicast1}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x6e, {0x2, 0x4e22, @broadcast}, 'veth1\x00'}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x5d}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11000078e4000400df040083df20791900000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB='\x00'/28], 0x50) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f00000003c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_pwait(r9, &(0x7f0000000040)=[{}], 0x1, 0x7fff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x1a0000010}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r11, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc00c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) 596.688709ms ago: executing program 2 (id=2276): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, {@in=@private, 0x0, 0x32}, @in6=@loopback={0x6000}, {}, {}, {0x4}, 0x70bd25, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'streebog256\x00'}}}]}, 0x138}}, 0x0) 587.100867ms ago: executing program 4 (id=2277): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x10000}, 0x38, 0x10020) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) unshare(0x22000000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r8 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r6, 0xd66771a5e8224ded, 0x1, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_PID={0x8, 0x52, r8}]}, 0x24}}, 0xc0) 544.221318ms ago: executing program 1 (id=2278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) socket(0x2, 0xa, 0x300) write$tun(r1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000300), &(0x7f0000000280)=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180400fc010000000000000000000000000003feee"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\t'}]}], {0x14}}, 0x5c}}, 0x40) syz_emit_ethernet(0x49, &(0x7f0000000400)=ANY=[], 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r6, 0x33, 0x0, 0x870, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f00000004c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000580)={0x5768a6b, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup, r3, 0x14, 0x28, 0x0, @void, @void, @void, @value=r8, r7}, 0x20) 446.397794ms ago: executing program 0 (id=2279): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000008000000000000808d0000850000001800000095000000a78a4d92"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 389.82868ms ago: executing program 0 (id=2280): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x10000}, 0x38, 0x10020) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) unshare(0x22000000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r6, 0xd66771a5e8224ded, 0x1, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_PID={0x8}]}, 0x24}}, 0xc0) 301.547082ms ago: executing program 1 (id=2281): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x80010, 0xffffffffffffffff, 0x5ec122dc000) (async, rerun: 32) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r1 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r1, &(0x7f0000000000)=""/233, 0xe9, 0x40, &(0x7f0000000100)={0x23, 0x4, 0x5, 0x3}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) connect$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x17, r2, 0x1, 0xf, 0x6, @broadcast}, 0x14) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async, rerun: 64) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)) (async, rerun: 64) sendto$phonet(r1, &(0x7f0000000200)="fe3abe8a95b640b8db028026ca8d0a01d429fe64031c1daefbe4ffc755528eba4768de6130a7ddcdf480b33e77c8d7fe6ed8884eb1d60ab51d5f62a09dd7457faec2648130bf2c4165da1e48fb06b05fa37ac1dce0", 0x55, 0x24040880, 0x0, 0x0) (async) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x3, 0x8, 0x1, 0x20000, r4, 0xe, '\x00', r2, r5, 0x2, 0x5, 0x1, 0xc}, 0x50) ioctl$XFS_IOC_GET_RESBLKS(r6, 0x80105873, &(0x7f00000003c0)) (async, rerun: 32) r7 = socket(0x1d, 0xa, 0x3) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', r2, 0x29, 0x4, 0x6, 0x5, 0x9, @mcast2, @private2, 0x7, 0x8000, 0x0, 0xffff65d9}}) r8 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500)=0x10) getpeername(r8, &(0x7f0000000540)=@ethernet, &(0x7f00000005c0)=0x80) (async) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000600)='syztnl1\x00', 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000640)={0x2}, 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000680)=[@timestamp, @mss={0x2, 0x9}, @timestamp, @timestamp, @timestamp, @window={0x3, 0x4, 0x7}, @timestamp], 0x7) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000940)={0x0, 0x3, 0x2, 0x1}) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000000d40)={{r6}, r11, 0x4, @inherit={0x58, &(0x7f00000008c0)={0x1, 0x2, 0x19, 0x100, {0x4, 0x5, 0x1, 0xfffffffffffffffe, 0x8}, [0x623, 0x198]}}, @devid=r12}) (async, rerun: 32) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r7, &(0x7f00000021c0)={&(0x7f0000001d40), 0xc, &(0x7f0000002180)={&(0x7f0000001e00)={0x368, r13, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_TESTDATA={0xf8, 0x45, "265bba3dcb13bd9518b1d04904aa640052b20e1ec3878958c4e77b656c90c1069003011eac3dfbbeff45b23c837aa01e493a976f1aa9b79303ccb20f1ae3719dc0b1c7171676ae7fbf360713c222d6c29b8f551e631a674b5b42d7195df0289c9c5bd2f9e428e29209b30fc240d27bb0cbe5a26d1af3a43493e693c7ae401d9b49a331218fb0c516cbb6336e0afc15393ff61ba31c4f5e7c4b4de5b390c9c05670596e1f940e423683fbc9e079c4ded88fe610c7ed1573efbf0ea274123b62bb7713d2fbc9243e54a60ffc9de624d5c3420d4da5e1a3b82a77b5bca5948c962523fa050b94c960940dc90272e8122cbde5b9cb5d"}, @NL80211_ATTR_TESTDATA={0x36, 0x45, "775723d321b5d30cd6c3bfc42d1ddc5e1b46e9bd53579d48e99ec1e3adaa6c3e5c2cac0a827ac8ad7b3d431a0e88838f3d7a"}, @NL80211_ATTR_TESTDATA={0x1d, 0x45, "ebe8e72a7b429d75ef6598fb0ba7143cc689b83e1588a46223"}, @NL80211_ATTR_TESTDATA={0xaa, 0x45, "be61b0494e2cfaabbcef8168f93165318a7c533dd7377933751804e60b75ecbd9ed75908d3fd924263c434a88d9ba5aa4f5375650c6ab303a74cd485045a5791f0d2a639adc24dae688a83ddd0479f9e4eb927e8b3ecb2bdf383239ea0ab690ada83dce69a72605550485948d040df90c5b04dd1fc9fe506280fc2bb556d1efa355907dfa868b95425cceb31845957d11620d26392284ed7a44a2b338bc912b5534ff1e3b0a4"}, @NL80211_ATTR_TESTDATA={0x50, 0x45, "bc56b7ad94b007d23193262b9a565fd3627c362f58b2dca66aecbae86f3bc1d95708509fac4495ca4002f7f6e8dec964eff90d93c27bbc316cb1bae07cd5b3f8b1b935a30cc425d5a2996358"}, @NL80211_ATTR_TESTDATA={0x6c, 0x45, "d2d995ef3c6f89365962da0e5635d6c2181b61fb2cc306e345ac7c06f42ccdf9831740a840dbc630fb60afda8594a81206efbfbc83970492fcd7f4a047af48abe5df42bf6d1f1ca06d80b6b767b8f7a11b085808e81de82d8183b67b4da5b492e22ff46d1c4250fe"}, @NL80211_ATTR_TESTDATA={0x17, 0x45, "c63c47c4dcd46705c92d7b146412882bc3810c"}, @NL80211_ATTR_TESTDATA={0x7a, 0x45, "3032cb99f0be02d9f1b6c12b57e9b8a5be34708793d6e847bd994decb93d22c20e749cbd58daf4f4e1396c2373e30025e7275685acca512b94e69ebd5b9e1c46215235ce0e689b361ef44902537c01e5bf92c9e40c22e6ae1b4a5eec522639826b7aadb28d7356fb141c0899cd10869101bf83e3eebd"}]}, 0x368}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000002200)={r10, r9, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000003200)={{r15, 0x5, 0x7, 0x3, 0x4, 0xffffffff, 0x12d, 0x8, 0x8, 0x4, 0x6, 0x4ab, 0x6, 0x6, 0xeb7}}) (async) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r16, &(0x7f0000004340)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 188.870748ms ago: executing program 2 (id=2282): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xff80, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in=@remote, {0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 188.710617ms ago: executing program 1 (id=2283): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x20000004, 0x4) sendmmsg$inet(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="dcf034b82be421db2cf762d90d359ebc1b1bd71d7149373c280a6caa65c2b2695b027bb6f7c681caeeeb77b93dc472ebc2e87cabb473b7b87fb59cbc21a91335e0f204e6b4d4c6c9b12a178895656e38cb71b569c14d5030b4dae551b0cb018063d47d156f4ea4274474436e9877e1b066fe8f", 0x73}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f0000001b40)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000003040)}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}], 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000180)="0b036c12e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140), 0x14) 188.380089ms ago: executing program 3 (id=2284): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3}, &(0x7f0000000380)=0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="cd86a8e58245ba6aaecd8fe257f2c2ffbf", 0x11}], 0x1, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000340)=""/138, 0x8a}], 0x2}, 0x6}], 0x1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba1282", 0x12}], 0x2, 0x0, 0x0, 0x2000847}], 0x1, 0x40800) recvmmsg$unix(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000580)=""/21, 0x15}, {&(0x7f0000000640)=""/11, 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/192, 0xc0}], 0x1}}], 0x2, 0x62, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x3, {{@in=@rand_addr=0x64010102, @in6=@private0, 0xfffd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x0, 0xefffffffffffffff, 0xcb}, {0x0, 0xa01, 0x407ffffffffffe, 0x2}, 0xfae, 0x0, 0x1, 0x0, 0x4, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3c}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x5}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_buf(r7, 0x1, 0x3d, &(0x7f0000000680)=""/217, &(0x7f0000000780)=0xd9) 13.05237ms ago: executing program 2 (id=2285): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x7b, 0x96, &(0x7f0000000100)="8d50429b259084c4c48410b86dbe4f83556c53ea06113be826a325525a2e01b5f0dfa0b732a4fdd62871f653b1184f152e2a29f4e842199f8295e7f882a9d9d1e14c242a11497d5bd9ac521c3f94796c645941d87b1cd71a85bb88a40559a7e55ec59a686445ca32008d9999e04b1a6586549e5c228499a0d1c9c3", &(0x7f0000000380)=""/150, 0x4, 0x0, 0xdc, 0x0, &(0x7f0000000440)="2ac43d7de1dd0395735b52a75b2672b3fd2d648ce70cdfbdda4b463749a702f098b374c9691a10eaaff1cfa74202a447b2479495257187db86170997e16bc654a7151c435740a3fa4b7c82273c486f6c93d9db3f7d0e6cdba80041978b932aa4b86fc02e2a7c403121578edcab5199656b33b0d6e97231f48e43829d49be99f1682d2f26e591202de2343df5eb9860698c7b1efef8264f1f613c850fb13743b98dbdb24f13cdf07dbd57a0b47288898488d559e7b68404346dfdb859bd66921cf9accc3b9ff32f1132036c0e97d8f3f57b23534642935c7a21294ec5", &(0x7f0000000540), 0x2}, 0x50) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0xd6ff}}}, 0x84) 0s ago: executing program 1 (id=2286): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x200000, 0x0, 0xff, 0x1, 0x22d, 0x40}, 0x2f) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.4.1280'. [ 232.283315][T10543] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1286'. [ 232.429263][T10553] netlink: 'syz.0.1289': attribute type 2 has an invalid length. [ 232.446448][T10553] tipc: Cannot configure node identity twice [ 232.588019][T10558] sctp: [Deprecated]: syz.1.1291 (pid 10558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.588019][T10558] Use struct sctp_sack_info instead [ 232.690346][T10566] FAULT_INJECTION: forcing a failure. [ 232.690346][T10566] name failslab, interval 1, probability 0, space 0, times 0 [ 232.712829][T10566] CPU: 1 UID: 0 PID: 10566 Comm: syz.4.1293 Not tainted syzkaller #0 PREEMPT(full) [ 232.712863][T10566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 232.712878][T10566] Call Trace: [ 232.712887][T10566] [ 232.712897][T10566] dump_stack_lvl+0xe8/0x150 [ 232.712937][T10566] should_fail_ex+0x412/0x560 [ 232.712978][T10566] should_failslab+0xa8/0x100 [ 232.713011][T10566] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 232.713041][T10566] ? __alloc_skb+0x1d0/0x7d0 [ 232.713069][T10566] ? __local_bh_enable_ip+0xd0/0x130 [ 232.713106][T10566] __alloc_skb+0x1d0/0x7d0 [ 232.713136][T10566] ? trace_fib_table_lookup+0x85/0x240 [ 232.713168][T10566] alloc_skb_with_frags+0xca/0x890 [ 232.713210][T10566] ? fib4_rule_action+0x8f/0x330 [ 232.713239][T10566] sock_alloc_send_pskb+0x878/0x990 [ 232.713261][T10566] ? fib_rules_lookup+0x9b/0xea0 [ 232.713300][T10566] ? fib_rules_lookup+0x9b/0xea0 [ 232.713350][T10566] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 232.713374][T10566] ? __lock_acquire+0x6b5/0x2cf0 [ 232.713408][T10566] ? __pfx_fib_rules_lookup+0x10/0x10 [ 232.713441][T10566] ? l3mdev_update_flow+0x29/0x640 [ 232.713475][T10566] __ip_append_data+0x2bbb/0x3f30 [ 232.713533][T10566] ? __pfx_ping_getfrag+0x10/0x10 [ 232.713591][T10566] ? __pfx___ip_append_data+0x10/0x10 [ 232.713625][T10566] ? ipv4_mtu+0x53b/0x650 [ 232.713655][T10566] ? ipv4_mtu+0x23/0x650 [ 232.713685][T10566] ? __pfx_ipv4_mtu+0x10/0x10 [ 232.713716][T10566] ? ip_setup_cork+0x57e/0xa50 [ 232.713753][T10566] ip_append_data+0x10d/0x190 [ 232.713792][T10566] ? __pfx_ping_getfrag+0x10/0x10 [ 232.713834][T10566] ping_v4_sendmsg+0x13b0/0x1810 [ 232.713873][T10566] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 232.713938][T10566] ? sock_rps_record_flow+0x19/0x350 [ 232.713977][T10566] ? inet_sendmsg+0x2f4/0x370 [ 232.714009][T10566] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.714039][T10566] ? __pfx_inet_sendmsg+0x10/0x10 [ 232.714071][T10566] sock_write_iter+0x406/0x4f0 [ 232.714099][T10566] ? __pfx_sock_write_iter+0x10/0x10 [ 232.714137][T10566] ? bpf_lsm_file_permission+0x9/0x20 [ 232.714166][T10566] ? security_file_permission+0x75/0x260 [ 232.714205][T10566] vfs_write+0x61d/0xb90 [ 232.714241][T10566] ? __pfx_vfs_write+0x10/0x10 [ 232.714276][T10566] ? __fget_files+0x2a/0x420 [ 232.714309][T10566] ksys_write+0x150/0x270 [ 232.714338][T10566] ? __pfx_ksys_write+0x10/0x10 [ 232.714395][T10566] do_syscall_64+0x14d/0xf80 [ 232.714421][T10566] ? trace_irq_disable+0x3b/0x150 [ 232.714441][T10566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.714464][T10566] ? clear_bhb_loop+0x40/0x90 [ 232.714492][T10566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.714514][T10566] RIP: 0033:0x7f5f89d9c819 [ 232.714535][T10566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.714555][T10566] RSP: 002b:00007f5f8ab93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 232.714580][T10566] RAX: ffffffffffffffda RBX: 00007f5f8a015fa0 RCX: 00007f5f89d9c819 [ 232.714597][T10566] RDX: 00000000000000fd RSI: 0000200000000080 RDI: 0000000000000003 [ 232.714612][T10566] RBP: 00007f5f8ab93090 R08: 0000000000000000 R09: 0000000000000000 [ 232.714627][T10566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.714641][T10566] R13: 00007f5f8a016038 R14: 00007f5f8a015fa0 R15: 00007fff633e8768 [ 232.714677][T10566] [ 233.458899][T10575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1297'. [ 233.724680][T10585] syzkaller0: entered promiscuous mode [ 233.730232][T10585] syzkaller0: entered allmulticast mode [ 233.761662][T10591] tipc: Started in network mode [ 233.782639][T10591] tipc: Node identity 080211, cluster identity 4711 [ 233.789536][T10591] tipc: Enabled bearer , priority 0 [ 233.853029][T10591] tipc: Resetting bearer [ 233.962234][T10601] syzkaller0: entered promiscuous mode [ 233.967778][T10601] syzkaller0: entered allmulticast mode [ 234.243846][T10613] : renamed from veth0_to_bond [ 234.369845][T10620] sctp: [Deprecated]: syz.1.1310 (pid 10620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.369845][T10620] Use struct sctp_sack_info instead [ 234.884081][T10217] tipc: Node number set to 134353152 [ 235.523169][T10656] sit2: entered allmulticast mode [ 235.582883][T10660] netlink: 'syz.1.1322': attribute type 9 has an invalid length. [ 235.769917][T10668] __nla_validate_parse: 5 callbacks suppressed [ 235.769951][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1324'. [ 235.837206][T10672] netlink: 'syz.3.1319': attribute type 12 has an invalid length. [ 236.124135][T10684] sctp: [Deprecated]: syz.1.1328 (pid 10684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.124135][T10684] Use struct sctp_sack_info instead [ 236.164778][T10686] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1329'. [ 236.752974][T10691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1331'. [ 237.624527][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1337'. [ 238.002466][T10730] sctp: [Deprecated]: syz.0.1343 (pid 10730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.002466][T10730] Use struct sctp_sack_info instead [ 238.176522][T10741] syzkaller1: entered allmulticast mode [ 238.187984][T10742] FAULT_INJECTION: forcing a failure. [ 238.187984][T10742] name failslab, interval 1, probability 0, space 0, times 0 [ 238.216970][T10742] CPU: 0 UID: 0 PID: 10742 Comm: syz.1.1346 Not tainted syzkaller #0 PREEMPT(full) [ 238.217004][T10742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 238.217019][T10742] Call Trace: [ 238.217028][T10742] [ 238.217038][T10742] dump_stack_lvl+0xe8/0x150 [ 238.217076][T10742] should_fail_ex+0x412/0x560 [ 238.217123][T10742] should_failslab+0xa8/0x100 [ 238.217153][T10742] ? skb_clone+0x212/0x3a0 [ 238.217174][T10742] kmem_cache_alloc_noprof+0x87/0x650 [ 238.217200][T10742] ? __netlink_lookup+0xc6/0x8b0 [ 238.217239][T10742] skb_clone+0x212/0x3a0 [ 238.217265][T10742] __netlink_deliver_tap+0x404/0x850 [ 238.217309][T10742] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.217342][T10742] netlink_deliver_tap+0x19c/0x1b0 [ 238.217375][T10742] netlink_unicast+0x730/0x8e0 [ 238.217414][T10742] netlink_sendmsg+0x813/0xb40 [ 238.217456][T10742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.217513][T10742] ? aa_sock_msg_perm+0xf1/0x1b0 [ 238.217538][T10742] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 238.217569][T10742] ____sys_sendmsg+0x972/0x9f0 [ 238.217614][T10742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.217657][T10742] ? import_iovec+0x73/0xa0 [ 238.217688][T10742] ___sys_sendmsg+0x2a5/0x360 [ 238.217729][T10742] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.217801][T10742] ? __fget_files+0x2a/0x420 [ 238.217822][T10742] ? __fget_files+0x3a0/0x420 [ 238.217855][T10742] __x64_sys_sendmsg+0x1bd/0x2a0 [ 238.217899][T10742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.217945][T10742] ? __pfx_ksys_write+0x10/0x10 [ 238.217984][T10742] do_syscall_64+0x14d/0xf80 [ 238.218009][T10742] ? trace_irq_disable+0x3b/0x150 [ 238.218029][T10742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.218053][T10742] ? clear_bhb_loop+0x40/0x90 [ 238.218081][T10742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.218104][T10742] RIP: 0033:0x7fabfad9c819 [ 238.218125][T10742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.218145][T10742] RSP: 002b:00007fabf8fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.218170][T10742] RAX: ffffffffffffffda RBX: 00007fabfb016090 RCX: 00007fabfad9c819 [ 238.218187][T10742] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 238.218202][T10742] RBP: 00007fabf8fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 238.218216][T10742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.218230][T10742] R13: 00007fabfb016128 R14: 00007fabfb016090 R15: 00007fffaf30c248 [ 238.218266][T10742] [ 238.883760][T10751] pim6reg: entered allmulticast mode [ 238.892659][T10751] pim6reg: left allmulticast mode [ 241.038260][T10732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 241.056361][T10749] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 241.071405][T10749] CPU: 0 UID: 0 PID: 10749 Comm: syz.2.1348 Not tainted syzkaller #0 PREEMPT(full) [ 241.071438][T10749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 241.071464][T10749] Call Trace: [ 241.071474][T10749] [ 241.071484][T10749] dump_stack_lvl+0xe8/0x150 [ 241.071521][T10749] sysfs_warn_dup+0x8e/0xa0 [ 241.071555][T10749] sysfs_do_create_link_sd+0xc0/0x110 [ 241.071590][T10749] device_add_class_symlinks+0x1cf/0x240 [ 241.071624][T10749] device_add+0x475/0xb70 [ 241.071658][T10749] wiphy_register+0x1dc5/0x2dc0 [ 241.071709][T10749] ? __pfx_wiphy_register+0x10/0x10 [ 241.071734][T10749] ? __pfx_netdev_run_todo+0x10/0x10 [ 241.071757][T10749] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 241.071794][T10749] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 241.071825][T10749] ieee80211_register_hw+0x3d82/0x4a70 [ 241.071851][T10749] ? __lock_acquire+0x6b5/0x2cf0 [ 241.071895][T10749] ? ieee80211_register_hw+0x1931/0x4a70 [ 241.071948][T10749] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 241.071981][T10749] ? __hrtimer_setup+0x181/0x200 [ 241.072012][T10749] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 241.072038][T10749] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 241.072106][T10749] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 241.072137][T10749] ? kstrndup+0xbf/0x160 [ 241.072178][T10749] hwsim_new_radio_nl+0xf6a/0x1c00 [ 241.072237][T10749] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 241.072280][T10749] ? rcu_is_watching+0x15/0xb0 [ 241.072310][T10749] ? trace_kmalloc+0x2a/0x110 [ 241.072342][T10749] ? __nla_parse+0x40/0x60 [ 241.072371][T10749] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 241.072396][T10749] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 241.072429][T10749] genl_family_rcv_msg_doit+0x22a/0x330 [ 241.072464][T10749] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 241.072503][T10749] ? bpf_lsm_capable+0x9/0x20 [ 241.072535][T10749] ? security_capable+0x7e/0x2c0 [ 241.072574][T10749] genl_rcv_msg+0x61c/0x7a0 [ 241.072604][T10749] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.072627][T10749] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 241.072679][T10749] netlink_rcv_skb+0x232/0x4b0 [ 241.072723][T10749] ? __pfx_genl_rcv_msg+0x10/0x10 [ 241.072747][T10749] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.072798][T10749] ? down_read+0x272/0x2e0 [ 241.072824][T10749] ? genl_rcv+0xd/0x40 [ 241.072848][T10749] genl_rcv+0x28/0x40 [ 241.072870][T10749] netlink_unicast+0x75c/0x8e0 [ 241.072910][T10749] netlink_sendmsg+0x813/0xb40 [ 241.072953][T10749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.072988][T10749] ? aa_sock_msg_perm+0xf1/0x1b0 [ 241.073012][T10749] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.073043][T10749] ____sys_sendmsg+0x972/0x9f0 [ 241.073075][T10749] ? futex_unqueue+0x211/0x240 [ 241.073121][T10749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.073174][T10749] ? import_iovec+0x73/0xa0 [ 241.073206][T10749] ___sys_sendmsg+0x2a5/0x360 [ 241.073245][T10749] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.073286][T10749] ? futex_wait+0x29a/0x380 [ 241.073349][T10749] ? __fget_files+0x2a/0x420 [ 241.073369][T10749] ? __fget_files+0x3a0/0x420 [ 241.073402][T10749] __x64_sys_sendmsg+0x1bd/0x2a0 [ 241.073439][T10749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.073485][T10749] ? rcu_is_watching+0x15/0xb0 [ 241.073533][T10749] do_syscall_64+0x14d/0xf80 [ 241.073559][T10749] ? trace_irq_disable+0x3b/0x150 [ 241.073579][T10749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.073602][T10749] ? clear_bhb_loop+0x40/0x90 [ 241.073630][T10749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.073653][T10749] RIP: 0033:0x7fc05e39c819 [ 241.073676][T10749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.073709][T10749] RSP: 002b:00007fc05f338028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.073740][T10749] RAX: ffffffffffffffda RBX: 00007fc05e615fa0 RCX: 00007fc05e39c819 [ 241.073757][T10749] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 241.073772][T10749] RBP: 00007fc05e432c91 R08: 0000000000000000 R09: 0000000000000000 [ 241.073788][T10749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.073803][T10749] R13: 00007fc05e616038 R14: 00007fc05e615fa0 R15: 00007ffdc25c0598 [ 241.073840][T10749] [ 241.609524][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'. [ 241.763056][T10768] tipc: Enabling of bearer rejected, failed to enable media [ 242.177067][T10788] sctp: [Deprecated]: syz.3.1359 (pid 10788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.177067][T10788] Use struct sctp_sack_info instead [ 242.349158][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 242.484226][T10799] netlink: 'syz.0.1361': attribute type 4 has an invalid length. [ 243.592314][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 243.609519][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1380'. [ 243.632102][T10845] netlink: 'syz.3.1382': attribute type 15 has an invalid length. [ 243.647089][T10845] netlink: 'syz.3.1382': attribute type 25 has an invalid length. [ 243.672536][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1382'. [ 244.088180][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1380'. [ 244.289919][T10870] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1385'. [ 244.426791][T10870] block nbd0: not configured, cannot reconfigure [ 244.635199][T10880] netlink: 'syz.1.1391': attribute type 10 has an invalid length. [ 244.721993][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'. [ 244.991226][T10893] syzkaller1: entered promiscuous mode [ 244.996998][T10893] syzkaller1: entered allmulticast mode [ 245.008174][T10893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1394'. [ 245.018434][T10893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1394'. [ 245.141029][T10893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.225896][T10942] syzkaller0: entered promiscuous mode [ 246.250826][T10942] syzkaller0: entered allmulticast mode [ 246.488741][T10958] netlink: 'syz.0.1411': attribute type 16 has an invalid length. [ 248.252338][T10985] netlink: 'syz.1.1418': attribute type 1 has an invalid length. [ 248.260338][T10985] netlink: 'syz.1.1418': attribute type 3 has an invalid length. [ 248.303111][T10985] block nbd0: not configured, cannot reconfigure [ 248.469933][T10999] xt_TPROXY: Can be used only with -p tcp or -p udp [ 248.477336][T10997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.540453][T10997] __nla_validate_parse: 19 callbacks suppressed [ 248.540477][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1424'. [ 248.571105][T10996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.515547][T11025] netlink: 'syz.0.1430': attribute type 2 has an invalid length. [ 249.662207][T11035] FAULT_INJECTION: forcing a failure. [ 249.662207][T11035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.677954][T11035] CPU: 0 UID: 0 PID: 11035 Comm: syz.3.1433 Not tainted syzkaller #0 PREEMPT(full) [ 249.677985][T11035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 249.677999][T11035] Call Trace: [ 249.678009][T11035] [ 249.678018][T11035] dump_stack_lvl+0xe8/0x150 [ 249.678055][T11035] should_fail_ex+0x412/0x560 [ 249.678096][T11035] _copy_to_user+0x31/0xb0 [ 249.678127][T11035] bpf_test_finish+0x22c/0x6b0 [ 249.678166][T11035] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 249.678200][T11035] ? __pfx_bpf_test_finish+0x10/0x10 [ 249.678237][T11035] ? _copy_from_user+0x94/0xb0 [ 249.678264][T11035] ? bpf_test_init+0x113/0x150 [ 249.678295][T11035] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 249.678343][T11035] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 249.678379][T11035] ? __fget_files+0x2a/0x420 [ 249.678404][T11035] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 249.678436][T11035] bpf_prog_test_run+0x2c7/0x340 [ 249.678464][T11035] __sys_bpf+0x643/0x950 [ 249.678488][T11035] ? __pfx___sys_bpf+0x10/0x10 [ 249.678527][T11035] ? ksys_write+0x242/0x270 [ 249.678554][T11035] ? __pfx_ksys_write+0x10/0x10 [ 249.678588][T11035] __x64_sys_bpf+0x7c/0x90 [ 249.678620][T11035] do_syscall_64+0x14d/0xf80 [ 249.678646][T11035] ? trace_irq_disable+0x3b/0x150 [ 249.678666][T11035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.678689][T11035] ? clear_bhb_loop+0x40/0x90 [ 249.678717][T11035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.678738][T11035] RIP: 0033:0x7ffaa459c819 [ 249.678759][T11035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.678778][T11035] RSP: 002b:00007ffaa53d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.678802][T11035] RAX: ffffffffffffffda RBX: 00007ffaa4815fa0 RCX: 00007ffaa459c819 [ 249.678818][T11035] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 249.678832][T11035] RBP: 00007ffaa53d5090 R08: 0000000000000000 R09: 0000000000000000 [ 249.678846][T11035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.678860][T11035] R13: 00007ffaa4816038 R14: 00007ffaa4815fa0 R15: 00007ffe899db298 [ 249.678895][T11035] [ 250.524722][T11057] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1438'. [ 250.534439][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1438'. [ 251.068961][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1448'. [ 251.320077][T11097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1451'. [ 251.381953][T11097] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 251.440184][T11106] syzkaller1: entered promiscuous mode [ 251.472316][T11106] syzkaller1: entered allmulticast mode [ 251.807180][T11121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1459'. [ 251.912641][T11123] netlink: 'syz.0.1460': attribute type 1 has an invalid length. [ 251.993675][T11123] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.039317][T11138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.049732][T11134] geneve1: entered promiscuous mode [ 252.111111][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1462'. [ 252.130861][T11144] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1460'. [ 252.201339][T11135] bond6: (slave veth5): Enslaving as an active interface with a down link [ 252.222242][T11129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.244224][T11123] netlink: 'syz.0.1460': attribute type 1 has an invalid length. [ 252.264037][T11123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.453860][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 252.464566][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 252.990925][T11182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.640270][T11215] __nla_validate_parse: 22 callbacks suppressed [ 253.640293][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1494'. [ 254.274538][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'. [ 254.295840][T11240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1500'. [ 254.417039][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1501'. [ 254.508289][T11255] FAULT_INJECTION: forcing a failure. [ 254.508289][T11255] name failslab, interval 1, probability 0, space 0, times 0 [ 254.552862][T11255] CPU: 0 UID: 0 PID: 11255 Comm: syz.0.1504 Not tainted syzkaller #0 PREEMPT(full) [ 254.552895][T11255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 254.552909][T11255] Call Trace: [ 254.552918][T11255] [ 254.552928][T11255] dump_stack_lvl+0xe8/0x150 [ 254.552965][T11255] should_fail_ex+0x412/0x560 [ 254.553006][T11255] should_failslab+0xa8/0x100 [ 254.553035][T11255] ? security_file_alloc+0x34/0x310 [ 254.553066][T11255] kmem_cache_alloc_noprof+0x87/0x650 [ 254.553089][T11255] ? rcu_is_watching+0x15/0xb0 [ 254.553122][T11255] ? trace_kmem_cache_alloc+0x29/0xf0 [ 254.553149][T11255] security_file_alloc+0x34/0x310 [ 254.553182][T11255] init_file+0x90/0x2b0 [ 254.553223][T11255] alloc_empty_file+0x6e/0x1d0 [ 254.553257][T11255] alloc_file_pseudo+0x155/0x240 [ 254.553293][T11255] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 254.553337][T11255] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 254.553368][T11255] ? rcu_is_watching+0x15/0xb0 [ 254.553399][T11255] ? hugetlbfs_get_inode+0x448/0x690 [ 254.553435][T11255] hugetlb_file_setup+0x3ee/0x630 [ 254.553466][T11255] ksys_mmap_pgoff+0x22e/0x760 [ 254.553495][T11255] do_syscall_64+0x14d/0xf80 [ 254.553520][T11255] ? trace_irq_disable+0x3b/0x150 [ 254.553546][T11255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.553569][T11255] ? clear_bhb_loop+0x40/0x90 [ 254.553598][T11255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.553621][T11255] RIP: 0033:0x7f074e39c819 [ 254.553648][T11255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.553669][T11255] RSP: 002b:00007f074f21c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 254.553693][T11255] RAX: ffffffffffffffda RBX: 00007f074e616090 RCX: 00007f074e39c819 [ 254.553710][T11255] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000000000 [ 254.553729][T11255] RBP: 00007f074f21c090 R08: ffffffffffffffff R09: 0000000000000000 [ 254.553745][T11255] R10: 0000000000041071 R11: 0000000000000246 R12: 0000000000000001 [ 254.553759][T11255] R13: 00007f074e616128 R14: 00007f074e616090 R15: 00007ffd2eadb808 [ 254.553795][T11255] [ 255.156919][T11250] hsr_slave_1 (unregistering): left promiscuous mode [ 255.436814][T11248] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 255.457984][T11248] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 255.482580][T11248] team0: Port device netdevsim0 removed [ 255.799445][T11284] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1511'. [ 256.166719][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1513'. [ 256.185741][T11296] netlink: 'syz.4.1514': attribute type 10 has an invalid length. [ 256.194749][T11294] netlink: 580 bytes leftover after parsing attributes in process `syz.1.1513'. [ 256.456817][T11303] xt_nat: multiple ranges no longer supported [ 256.466342][T11303] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1517'. [ 256.572400][T11287] syzkaller1: entered promiscuous mode [ 256.605720][T11287] syzkaller1: entered allmulticast mode [ 256.663728][T11312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1519'. [ 256.691557][T11310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.707573][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1520'. [ 256.717773][T11309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.751051][T11312] ipvlan2: entered allmulticast mode [ 256.756805][T11312] syz_tun: entered allmulticast mode [ 257.514151][T11331] No such timeout policy "syz1" [ 257.646468][T11329] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 257.666481][T11329] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 257.692905][T11329] team0: Port device netdevsim0 removed [ 258.540040][T11359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.558444][T11358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.757762][T11366] __nla_validate_parse: 4 callbacks suppressed [ 258.757786][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 258.790332][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 258.935394][T11372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1536'. [ 259.008791][T11374] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 259.376287][T11403] FAULT_INJECTION: forcing a failure. [ 259.376287][T11403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.410963][T11403] CPU: 1 UID: 0 PID: 11403 Comm: syz.1.1545 Not tainted syzkaller #0 PREEMPT(full) [ 259.410997][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 259.411011][T11403] Call Trace: [ 259.411020][T11403] [ 259.411030][T11403] dump_stack_lvl+0xe8/0x150 [ 259.411069][T11403] should_fail_ex+0x412/0x560 [ 259.411118][T11403] _copy_from_user+0x2d/0xb0 [ 259.411147][T11403] __sys_bpf+0x229/0x950 [ 259.411171][T11403] ? __pfx___sys_bpf+0x10/0x10 [ 259.411220][T11403] ? rcu_is_watching+0x15/0xb0 [ 259.411263][T11403] __x64_sys_bpf+0x7c/0x90 [ 259.411296][T11403] do_syscall_64+0x14d/0xf80 [ 259.411323][T11403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.411347][T11403] ? clear_bhb_loop+0x40/0x90 [ 259.411374][T11403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.411396][T11403] RIP: 0033:0x7fabfad9c819 [ 259.411418][T11403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.411438][T11403] RSP: 002b:00007fabf8ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.411468][T11403] RAX: ffffffffffffffda RBX: 00007fabfb015fa0 RCX: 00007fabfad9c819 [ 259.411485][T11403] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 259.411500][T11403] RBP: 00007fabf8ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 259.411515][T11403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.411529][T11403] R13: 00007fabfb016038 R14: 00007fabfb015fa0 R15: 00007fffaf30c248 [ 259.411565][T11403] [ 259.655882][T11408] openvswitch: netlink: IP tunnel dst address not specified [ 259.666062][T11408] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1547'. [ 259.917370][T11415] syzkaller1: entered promiscuous mode [ 259.924943][T11415] syzkaller1: entered allmulticast mode [ 260.518695][T11425] bridge9: entered promiscuous mode [ 260.525267][T11425] bridge9: entered allmulticast mode [ 260.534328][T11425] team0: Port device bridge9 added [ 260.795371][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 260.804564][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1555'. [ 260.855170][ T6170] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.875039][ T6175] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.886101][ T6175] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.895187][ T6175] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.960566][T11442] syzkaller0: entered promiscuous mode [ 260.967104][T11442] syzkaller0: entered allmulticast mode [ 262.264187][T11400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.433177][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1560'. [ 262.556388][T11456] FAULT_INJECTION: forcing a failure. [ 262.556388][T11456] name failslab, interval 1, probability 0, space 0, times 0 [ 262.582853][T11454] tipc: Enabled bearer , priority 0 [ 262.590945][T11456] CPU: 1 UID: 0 PID: 11456 Comm: syz.3.1564 Not tainted syzkaller #0 PREEMPT(full) [ 262.590977][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 262.590992][T11456] Call Trace: [ 262.591002][T11456] [ 262.591011][T11456] dump_stack_lvl+0xe8/0x150 [ 262.591050][T11456] should_fail_ex+0x412/0x560 [ 262.591091][T11456] should_failslab+0xa8/0x100 [ 262.591121][T11456] ? skb_clone+0x212/0x3a0 [ 262.591143][T11456] kmem_cache_alloc_noprof+0x87/0x650 [ 262.591170][T11456] ? __netlink_lookup+0xc6/0x8b0 [ 262.591214][T11456] skb_clone+0x212/0x3a0 [ 262.591240][T11456] __netlink_deliver_tap+0x404/0x850 [ 262.591285][T11456] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.591318][T11456] netlink_deliver_tap+0x19c/0x1b0 [ 262.591351][T11456] netlink_unicast+0x730/0x8e0 [ 262.591392][T11456] netlink_sendmsg+0x813/0xb40 [ 262.591434][T11456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.591470][T11456] ? aa_sock_msg_perm+0xf1/0x1b0 [ 262.591495][T11456] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.591526][T11456] ____sys_sendmsg+0x972/0x9f0 [ 262.591571][T11456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.591622][T11456] ? import_iovec+0x73/0xa0 [ 262.591654][T11456] ___sys_sendmsg+0x2a5/0x360 [ 262.591695][T11456] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.591769][T11456] ? __fget_files+0x2a/0x420 [ 262.591789][T11456] ? __fget_files+0x3a0/0x420 [ 262.591822][T11456] __x64_sys_sendmsg+0x1bd/0x2a0 [ 262.591870][T11456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.591916][T11456] ? __pfx_ksys_write+0x10/0x10 [ 262.591955][T11456] do_syscall_64+0x14d/0xf80 [ 262.591981][T11456] ? trace_irq_disable+0x3b/0x150 [ 262.592001][T11456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.592025][T11456] ? clear_bhb_loop+0x40/0x90 [ 262.592053][T11456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.592077][T11456] RIP: 0033:0x7ffaa459c819 [ 262.592099][T11456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.592118][T11456] RSP: 002b:00007ffaa53d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.592143][T11456] RAX: ffffffffffffffda RBX: 00007ffaa4815fa0 RCX: 00007ffaa459c819 [ 262.592160][T11456] RDX: 0000000000000098 RSI: 0000200000000000 RDI: 0000000000000003 [ 262.592175][T11456] RBP: 00007ffaa53d5090 R08: 0000000000000000 R09: 0000000000000000 [ 262.592190][T11456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.592204][T11456] R13: 00007ffaa4816038 R14: 00007ffaa4815fa0 R15: 00007ffe899db298 [ 262.592241][T11456] [ 262.592297][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 262.655754][T11454] tipc: Resetting bearer [ 262.918897][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1567'. [ 262.947790][T11453] tipc: Disabling bearer [ 262.970864][T11466] FAULT_INJECTION: forcing a failure. [ 262.970864][T11466] name failslab, interval 1, probability 0, space 0, times 0 [ 262.985077][T11466] CPU: 0 UID: 0 PID: 11466 Comm: syz.4.1568 Not tainted syzkaller #0 PREEMPT(full) [ 262.985109][T11466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 262.985123][T11466] Call Trace: [ 262.985131][T11466] [ 262.985140][T11466] dump_stack_lvl+0xe8/0x150 [ 262.985177][T11466] should_fail_ex+0x412/0x560 [ 262.985214][T11466] should_failslab+0xa8/0x100 [ 262.985244][T11466] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 262.985268][T11466] ? __alloc_skb+0x186/0x7d0 [ 262.985297][T11466] ? __alloc_skb+0x1d0/0x7d0 [ 262.985322][T11466] ? __local_bh_enable_ip+0xd0/0x130 [ 262.985356][T11466] __alloc_skb+0x1d0/0x7d0 [ 262.985384][T11466] ? netlink_ack_tlv_len+0x6c/0x210 [ 262.985416][T11466] netlink_ack+0x146/0xa50 [ 262.985443][T11466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 262.985472][T11466] ? ref_tracker_free+0x693/0x840 [ 262.985497][T11466] ? __pfx_ref_tracker_free+0x10/0x10 [ 262.985532][T11466] netlink_rcv_skb+0x2b6/0x4b0 [ 262.985562][T11466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 262.985603][T11466] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.985648][T11466] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.985678][T11466] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.985708][T11466] netlink_unicast+0x75c/0x8e0 [ 262.985740][T11466] netlink_sendmsg+0x813/0xb40 [ 262.985774][T11466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.985803][T11466] ? aa_sock_msg_perm+0xf1/0x1b0 [ 262.985823][T11466] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.985851][T11466] ____sys_sendmsg+0x972/0x9f0 [ 262.985886][T11466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.985924][T11466] ? import_iovec+0x73/0xa0 [ 262.985950][T11466] ___sys_sendmsg+0x2a5/0x360 [ 262.985983][T11466] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.986039][T11466] ? __fget_files+0x2a/0x420 [ 262.986056][T11466] ? __fget_files+0x3a0/0x420 [ 262.986081][T11466] __x64_sys_sendmsg+0x1bd/0x2a0 [ 262.986112][T11466] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.986148][T11466] ? __pfx_ksys_write+0x10/0x10 [ 262.986179][T11466] do_syscall_64+0x14d/0xf80 [ 262.986201][T11466] ? trace_irq_disable+0x3b/0x150 [ 262.986217][T11466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.986237][T11466] ? clear_bhb_loop+0x40/0x90 [ 262.986260][T11466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.986279][T11466] RIP: 0033:0x7f5f89d9c819 [ 262.986297][T11466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.986313][T11466] RSP: 002b:00007f5f8ab93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.986335][T11466] RAX: ffffffffffffffda RBX: 00007f5f8a015fa0 RCX: 00007f5f89d9c819 [ 262.986349][T11466] RDX: 0000000004000080 RSI: 0000200000001200 RDI: 0000000000000006 [ 262.986362][T11466] RBP: 00007f5f8ab93090 R08: 0000000000000000 R09: 0000000000000000 [ 262.986373][T11466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.986385][T11466] R13: 00007f5f8a016038 R14: 00007f5f8a015fa0 R15: 00007fff633e8768 [ 262.986412][T11466] [ 263.390033][T11469] syzkaller0: entered promiscuous mode [ 263.396739][T11469] syzkaller0: entered allmulticast mode [ 263.521947][ T9509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.531906][ T1160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.548022][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.557417][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.742097][T11483] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1574'. [ 263.773950][T11475] syzkaller1: entered promiscuous mode [ 263.779576][T11475] syzkaller1: entered allmulticast mode [ 263.849415][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1576'. [ 263.868043][T11488] syzkaller0: entered promiscuous mode [ 263.880844][T11488] syzkaller0: entered allmulticast mode [ 264.120881][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 264.445001][T11509] No such timeout policy "syz1" [ 264.596763][T11513] netlink: 'syz.3.1587': attribute type 10 has an invalid length. [ 264.631228][ T9509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.794734][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.804187][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.814508][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.819129][T11527] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1592'. [ 264.838619][T11527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1592'. [ 265.054320][T11537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1597'. [ 265.074530][T11541] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 265.082929][T11540] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1596'. [ 265.101862][T11540] nbd: socks must be embedded in a SOCK_ITEM attr [ 265.129667][T11540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.156863][T11540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.254616][T11540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.284103][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 265.318043][T11540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.386880][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1600'. [ 265.457617][T11540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.478751][T11540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.500450][T11540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.827891][T11575] FAULT_INJECTION: forcing a failure. [ 265.827891][T11575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.842983][T11575] CPU: 0 UID: 0 PID: 11575 Comm: syz.2.1611 Not tainted syzkaller #0 PREEMPT(full) [ 265.843013][T11575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 265.843026][T11575] Call Trace: [ 265.843035][T11575] [ 265.843045][T11575] dump_stack_lvl+0xe8/0x150 [ 265.843082][T11575] should_fail_ex+0x412/0x560 [ 265.843122][T11575] _copy_from_user+0x2d/0xb0 [ 265.843151][T11575] do_sock_getsockopt+0x200/0x7e0 [ 265.843191][T11575] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 265.843240][T11575] ? __fget_files+0x3a0/0x420 [ 265.843260][T11575] ? __fget_files+0x2a/0x420 [ 265.843289][T11575] __x64_sys_getsockopt+0x1a4/0x240 [ 265.843332][T11575] do_syscall_64+0x14d/0xf80 [ 265.843357][T11575] ? trace_irq_disable+0x3b/0x150 [ 265.843378][T11575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.843402][T11575] ? clear_bhb_loop+0x40/0x90 [ 265.843429][T11575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.843452][T11575] RIP: 0033:0x7fc05e39c819 [ 265.843473][T11575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.843493][T11575] RSP: 002b:00007fc05f338028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 265.843518][T11575] RAX: ffffffffffffffda RBX: 00007fc05e615fa0 RCX: 00007fc05e39c819 [ 265.843535][T11575] RDX: 0000000000000003 RSI: 000000000000011c RDI: 0000000000000003 [ 265.843548][T11575] RBP: 00007fc05f338090 R08: 0000200000000140 R09: 0000000000000000 [ 265.843563][T11575] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 265.843585][T11575] R13: 00007fc05e616038 R14: 00007fc05e615fa0 R15: 00007ffdc25c0598 [ 265.843621][T11575] [ 266.412212][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'. [ 266.541744][T11592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1616'. [ 266.649224][T11603] macsec1: entered allmulticast mode [ 266.680540][T11603] hsr0: entered allmulticast mode [ 266.706914][T11603] hsr_slave_0: entered allmulticast mode [ 266.751573][T11606] tipc: Enabled bearer , priority 10 [ 266.799703][T11611] netlink: 'syz.3.1622': attribute type 27 has an invalid length. [ 267.288182][T11635] FAULT_INJECTION: forcing a failure. [ 267.288182][T11635] name failslab, interval 1, probability 0, space 0, times 0 [ 267.302352][T11635] CPU: 0 UID: 0 PID: 11635 Comm: syz.3.1632 Not tainted syzkaller #0 PREEMPT(full) [ 267.302388][T11635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 267.302409][T11635] Call Trace: [ 267.302418][T11635] [ 267.302427][T11635] dump_stack_lvl+0xe8/0x150 [ 267.302465][T11635] should_fail_ex+0x412/0x560 [ 267.302506][T11635] should_failslab+0xa8/0x100 [ 267.302543][T11635] __kmalloc_cache_noprof+0x88/0x660 [ 267.302571][T11635] ? nfnetlink_rcv+0xfe1/0x27b0 [ 267.302605][T11635] nfnetlink_rcv+0xfe1/0x27b0 [ 267.302647][T11635] ? __dev_queue_xmit+0x2b6/0x3980 [ 267.302691][T11635] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 267.302738][T11635] ? ref_tracker_free+0x693/0x840 [ 267.302765][T11635] ? __pfx_ref_tracker_free+0x10/0x10 [ 267.302806][T11635] ? skb_clone+0x246/0x3a0 [ 267.302831][T11635] ? __netlink_deliver_tap+0x807/0x850 [ 267.302862][T11635] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.302900][T11635] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.302930][T11635] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.302967][T11635] netlink_unicast+0x75c/0x8e0 [ 267.303004][T11635] netlink_sendmsg+0x813/0xb40 [ 267.303046][T11635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.303081][T11635] ? aa_sock_msg_perm+0xf1/0x1b0 [ 267.303105][T11635] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.303136][T11635] ____sys_sendmsg+0x972/0x9f0 [ 267.303178][T11635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.303228][T11635] ? import_iovec+0x73/0xa0 [ 267.303271][T11635] ___sys_sendmsg+0x2a5/0x360 [ 267.303311][T11635] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.303394][T11635] ? __fget_files+0x2a/0x420 [ 267.303414][T11635] ? __fget_files+0x3a0/0x420 [ 267.303448][T11635] __x64_sys_sendmsg+0x1bd/0x2a0 [ 267.303490][T11635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.303536][T11635] ? __pfx_ksys_write+0x10/0x10 [ 267.303575][T11635] do_syscall_64+0x14d/0xf80 [ 267.303599][T11635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.303620][T11635] ? clear_bhb_loop+0x40/0x90 [ 267.303648][T11635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.303670][T11635] RIP: 0033:0x7ffaa459c819 [ 267.303691][T11635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.303711][T11635] RSP: 002b:00007ffaa53d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.303736][T11635] RAX: ffffffffffffffda RBX: 00007ffaa4815fa0 RCX: 00007ffaa459c819 [ 267.303752][T11635] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 267.303767][T11635] RBP: 00007ffaa53d5090 R08: 0000000000000000 R09: 0000000000000000 [ 267.303781][T11635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.303795][T11635] R13: 00007ffaa4816038 R14: 00007ffaa4815fa0 R15: 00007ffe899db298 [ 267.303832][T11635] [ 267.636652][T11630] veth3: entered allmulticast mode [ 268.212997][T11661] bond1: entered promiscuous mode [ 268.233381][T11661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.319519][T11668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.331670][T11668] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 268.363235][T11668] bond1: (slave vti0): Error -95 calling set_mac_address [ 268.976477][T11700] __nla_validate_parse: 10 callbacks suppressed [ 268.976500][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'. [ 269.179121][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'. [ 269.321711][T11721] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1658'. [ 269.340785][T11717] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:0 [ 269.472545][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1659'. [ 269.575002][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1659'. [ 269.667336][T11733] IPv6: sit2: Disabled Multicast RS [ 269.764345][T11743] netlink: 'syz.1.1665': attribute type 13 has an invalid length. [ 269.897312][ T5948] net_ratelimit: 139 callbacks suppressed [ 269.897340][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.105049][T11743] gretap0: refused to change device tx_queue_len [ 270.130894][T11743] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 270.551313][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.561175][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.570009][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.699590][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'. [ 270.814282][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1673'. [ 270.952958][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.024512][T11791] netlink: 'syz.3.1678': attribute type 2 has an invalid length. [ 271.052405][T11791] tipc: Started in network mode [ 271.074543][T11791] tipc: Node identity 340008, cluster identity 4711 [ 271.081703][T11791] tipc: Node number set to 3407880 [ 271.143689][T11797] bridge5: entered promiscuous mode [ 271.163007][T11797] bridge5: entered allmulticast mode [ 271.204605][T11797] team0: Port device bridge5 added [ 271.230173][T11793] bridge10: entered promiscuous mode [ 271.252415][T11793] bridge10: entered allmulticast mode [ 271.272327][T11793] team0: Port device bridge10 added [ 271.723738][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 271.798083][T11831] xt_HMARK: proto mask must be zero with L3 mode [ 271.828295][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 271.864199][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1689'. [ 271.879176][T11835] syzkaller0: entered promiscuous mode [ 271.912326][T11835] syzkaller0: entered allmulticast mode [ 271.992169][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.004123][T11844] FAULT_INJECTION: forcing a failure. [ 272.004123][T11844] name failslab, interval 1, probability 0, space 0, times 0 [ 272.038272][T11844] CPU: 0 UID: 0 PID: 11844 Comm: syz.1.1692 Not tainted syzkaller #0 PREEMPT(full) [ 272.038304][T11844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 272.038318][T11844] Call Trace: [ 272.038326][T11844] [ 272.038336][T11844] dump_stack_lvl+0xe8/0x150 [ 272.038376][T11844] should_fail_ex+0x412/0x560 [ 272.038421][T11844] should_failslab+0xa8/0x100 [ 272.038445][T11844] __kmalloc_cache_noprof+0x88/0x660 [ 272.038466][T11844] ? sctp_add_bind_addr+0x8c/0x370 [ 272.038488][T11844] sctp_add_bind_addr+0x8c/0x370 [ 272.038509][T11844] sctp_copy_local_addr_list+0x314/0x4f0 [ 272.038529][T11844] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 272.038547][T11844] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 272.038569][T11844] ? sctp_v4_is_any+0x35/0x60 [ 272.038586][T11844] ? sctp_copy_one_addr+0x93/0x360 [ 272.038606][T11844] sctp_bind_addr_copy+0xb3/0x3c0 [ 272.038624][T11844] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 272.038651][T11844] sctp_connect_new_asoc+0x2ff/0x6b0 [ 272.038675][T11844] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 272.038701][T11844] ? __local_bh_enable_ip+0xd0/0x130 [ 272.038722][T11844] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 272.038742][T11844] ? security_sctp_bind_connect+0x7e/0x2c0 [ 272.038767][T11844] sctp_sendmsg+0x1528/0x2c10 [ 272.038799][T11844] ? __pfx_sctp_sendmsg+0x10/0x10 [ 272.038838][T11844] ? aa_sk_perm+0x6d5/0x900 [ 272.038869][T11844] ? __pfx_aa_sk_perm+0x10/0x10 [ 272.038896][T11844] ? sock_rps_record_flow+0x19/0x350 [ 272.038921][T11844] ? __pfx_inet_sendmsg+0x10/0x10 [ 272.038945][T11844] ? inet_sendmsg+0x2f4/0x370 [ 272.038970][T11844] ? __pfx_inet_sendmsg+0x10/0x10 [ 272.038995][T11844] __sys_sendto+0x5de/0x710 [ 272.039020][T11844] ? __pfx___sys_sendto+0x10/0x10 [ 272.039040][T11844] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 272.039073][T11844] ? __fget_files+0x3a0/0x420 [ 272.039096][T11844] ? ksys_write+0x242/0x270 [ 272.039117][T11844] ? __pfx_ksys_write+0x10/0x10 [ 272.039139][T11844] __x64_sys_sendto+0xde/0x100 [ 272.039164][T11844] do_syscall_64+0x14d/0xf80 [ 272.039182][T11844] ? trace_irq_disable+0x3b/0x150 [ 272.039197][T11844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.039213][T11844] ? clear_bhb_loop+0x40/0x90 [ 272.039233][T11844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.039249][T11844] RIP: 0033:0x7fabfad9c819 [ 272.039264][T11844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.039278][T11844] RSP: 002b:00007fabf8ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 272.039295][T11844] RAX: ffffffffffffffda RBX: 00007fabfb015fa0 RCX: 00007fabfad9c819 [ 272.039308][T11844] RDX: 000000000000fffd RSI: 00002000000000c0 RDI: 0000000000000004 [ 272.039342][T11844] RBP: 00007fabf8ff6090 R08: 0000200000000280 R09: 0000000000000010 [ 272.039358][T11844] R10: 00000000000000c1 R11: 0000000000000246 R12: 0000000000000002 [ 272.039372][T11844] R13: 00007fabfb016038 R14: 00007fabfb015fa0 R15: 00007fffaf30c248 [ 272.039405][T11844] [ 272.533572][T11847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.616494][T11845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.994247][T11867] x_tables: duplicate underflow at hook 1 [ 273.031185][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.591441][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.091009][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.674886][T11932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.691275][T11932] __nla_validate_parse: 8 callbacks suppressed [ 274.691297][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'. [ 274.718650][T11931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.915534][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1717'. [ 274.995301][T11945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1717'. [ 275.112242][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.416378][T11975] FAULT_INJECTION: forcing a failure. [ 275.416378][T11975] name failslab, interval 1, probability 0, space 0, times 0 [ 275.464267][T11975] CPU: 1 UID: 0 PID: 11975 Comm: syz.2.1728 Not tainted syzkaller #0 PREEMPT(full) [ 275.464303][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 275.464317][T11975] Call Trace: [ 275.464327][T11975] [ 275.464337][T11975] dump_stack_lvl+0xe8/0x150 [ 275.464377][T11975] should_fail_ex+0x412/0x560 [ 275.464417][T11975] should_failslab+0xa8/0x100 [ 275.464449][T11975] __kmalloc_cache_noprof+0x88/0x660 [ 275.464478][T11975] ? device_add+0xbe/0xb70 [ 275.464513][T11975] device_add+0xbe/0xb70 [ 275.464542][T11975] ? device_initialize+0x26a/0x460 [ 275.464574][T11975] netdev_register_kobject+0x178/0x310 [ 275.464607][T11975] register_netdevice+0x12c0/0x1cf0 [ 275.464628][T11975] ? rtnl_create_link+0x31f/0xd70 [ 275.464651][T11975] ? rtnl_newlink_create+0x277/0xb70 [ 275.464682][T11975] ? rtnl_newlink+0x166a/0x1bb0 [ 275.464725][T11975] ? __pfx_register_netdevice+0x10/0x10 [ 275.464746][T11975] ? ip_tunnel_find+0x162/0x520 [ 275.464781][T11975] ? __pfx_ip_tunnel_find+0x10/0x10 [ 275.464826][T11975] ? net_generic+0x1e/0x240 [ 275.464856][T11975] ? ip_tunnel_newlink+0x237/0x8f0 [ 275.464897][T11975] ip_tunnel_newlink+0x261/0x8f0 [ 275.464938][T11975] ? __pfx_ip_tunnel_newlink+0x10/0x10 [ 275.464978][T11975] ? ip_tunnel_netlink_parms+0x3d0/0x5b0 [ 275.465006][T11975] ipip_newlink+0x2db/0x3c0 [ 275.465037][T11975] ? __pfx_ipip_newlink+0x10/0x10 [ 275.465076][T11975] ? __pfx_ipip_newlink+0x10/0x10 [ 275.465100][T11975] rtnl_newlink_create+0x329/0xb70 [ 275.465133][T11975] ? __pfx___nla_validate_parse+0x10/0x10 [ 275.465172][T11975] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 275.465210][T11975] ? __pfx___mutex_lock+0x10/0x10 [ 275.465251][T11975] ? ns_capable+0x89/0xe0 [ 275.465284][T11975] rtnl_newlink+0x166a/0x1bb0 [ 275.465333][T11975] ? __pfx_rtnl_newlink+0x10/0x10 [ 275.465361][T11975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.465426][T11975] ? kasan_quarantine_put+0xbb/0x1f0 [ 275.465452][T11975] ? lockdep_hardirqs_on+0x7a/0x110 [ 275.465484][T11975] ? kmem_cache_free+0x187/0x630 [ 275.465510][T11975] ? nlmon_xmit+0xb0/0x100 [ 275.465555][T11975] ? __lock_acquire+0x6b5/0x2cf0 [ 275.465594][T11975] ? __local_bh_enable_ip+0xd0/0x130 [ 275.465625][T11975] ? lockdep_hardirqs_on+0x7a/0x110 [ 275.465650][T11975] ? __dev_queue_xmit+0x2b6/0x3980 [ 275.465671][T11975] ? __local_bh_enable_ip+0xd0/0x130 [ 275.465700][T11975] ? __dev_queue_xmit+0x2b6/0x3980 [ 275.465751][T11975] ? __pfx_rtnl_newlink+0x10/0x10 [ 275.465781][T11975] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 275.465822][T11975] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 275.465851][T11975] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.465879][T11975] ? ref_tracker_free+0x693/0x840 [ 275.465907][T11975] ? __pfx_ref_tracker_free+0x10/0x10 [ 275.465943][T11975] netlink_rcv_skb+0x232/0x4b0 [ 275.465977][T11975] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.466009][T11975] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.466055][T11975] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.466086][T11975] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.466125][T11975] netlink_unicast+0x75c/0x8e0 [ 275.466166][T11975] netlink_sendmsg+0x813/0xb40 [ 275.466209][T11975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.466247][T11975] ? aa_sock_msg_perm+0xf1/0x1b0 [ 275.466272][T11975] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.466304][T11975] ____sys_sendmsg+0x972/0x9f0 [ 275.466350][T11975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.466395][T11975] ? import_iovec+0x73/0xa0 [ 275.466427][T11975] ___sys_sendmsg+0x2a5/0x360 [ 275.466467][T11975] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.466543][T11975] ? __fget_files+0x2a/0x420 [ 275.466563][T11975] ? __fget_files+0x3a0/0x420 [ 275.466597][T11975] __x64_sys_sendmsg+0x1bd/0x2a0 [ 275.466635][T11975] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 275.466681][T11975] ? __pfx_ksys_write+0x10/0x10 [ 275.466720][T11975] do_syscall_64+0x14d/0xf80 [ 275.466746][T11975] ? trace_irq_disable+0x3b/0x150 [ 275.466766][T11975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.466789][T11975] ? clear_bhb_loop+0x40/0x90 [ 275.466825][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.466848][T11975] RIP: 0033:0x7fc05e39c819 [ 275.466870][T11975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.466890][T11975] RSP: 002b:00007fc05f338028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.466915][T11975] RAX: ffffffffffffffda RBX: 00007fc05e615fa0 RCX: 00007fc05e39c819 [ 275.466933][T11975] RDX: 00000000040008c0 RSI: 0000200000000280 RDI: 0000000000000003 [ 275.466949][T11975] RBP: 00007fc05f338090 R08: 0000000000000000 R09: 0000000000000000 [ 275.466964][T11975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.466978][T11975] R13: 00007fc05e616038 R14: 00007fc05e615fa0 R15: 00007ffdc25c0598 [ 275.467015][T11975] [ 275.521899][T11979] netlink: 'syz.0.1729': attribute type 10 has an invalid length. [ 275.951086][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.122658][T11991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.139122][T11993] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1734'. [ 276.151400][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.162601][T11991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.173816][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1732'. [ 276.185288][T11995] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1734'. [ 276.198299][T11991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.221439][T11991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.240362][T11991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.264354][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'. [ 276.321827][T12005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.353697][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1736'. [ 276.381634][T12002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.402571][T12007] FAULT_INJECTION: forcing a failure. [ 276.402571][T12007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.421710][T12007] CPU: 0 UID: 0 PID: 12007 Comm: syz.3.1737 Not tainted syzkaller #0 PREEMPT(full) [ 276.421742][T12007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 276.421763][T12007] Call Trace: [ 276.421772][T12007] [ 276.421780][T12007] dump_stack_lvl+0xe8/0x150 [ 276.421816][T12007] should_fail_ex+0x412/0x560 [ 276.421857][T12007] _copy_to_user+0x31/0xb0 [ 276.421887][T12007] simple_read_from_buffer+0xe1/0x170 [ 276.421927][T12007] proc_fail_nth_read+0x1bb/0x230 [ 276.421964][T12007] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.422001][T12007] ? rw_verify_area+0x2a6/0x4d0 [ 276.422026][T12007] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.422060][T12007] vfs_read+0x20c/0xa70 [ 276.422083][T12007] ? fdget_pos+0x246/0x320 [ 276.422110][T12007] ? __pfx___mutex_lock+0x10/0x10 [ 276.422139][T12007] ? __pfx_vfs_read+0x10/0x10 [ 276.422167][T12007] ? __fget_files+0x2a/0x420 [ 276.422193][T12007] ? __fget_files+0x3a0/0x420 [ 276.422213][T12007] ? __fget_files+0x2a/0x420 [ 276.422245][T12007] ksys_read+0x150/0x270 [ 276.422273][T12007] ? __pfx_ksys_read+0x10/0x10 [ 276.422298][T12007] ? __pfx_sock_ioctl+0x10/0x10 [ 276.422333][T12007] do_syscall_64+0x14d/0xf80 [ 276.422358][T12007] ? trace_irq_disable+0x3b/0x150 [ 276.422380][T12007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.422415][T12007] ? clear_bhb_loop+0x40/0x90 [ 276.422443][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.422465][T12007] RIP: 0033:0x7ffaa455d04e [ 276.422484][T12007] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 276.422504][T12007] RSP: 002b:00007ffaa53d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 276.422526][T12007] RAX: ffffffffffffffda RBX: 00007ffaa53d56c0 RCX: 00007ffaa455d04e [ 276.422542][T12007] RDX: 000000000000000f RSI: 00007ffaa53d50a0 RDI: 0000000000000003 [ 276.422555][T12007] RBP: 00007ffaa53d5090 R08: 0000000000000000 R09: 0000000000000000 [ 276.422569][T12007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.422582][T12007] R13: 00007ffaa4816038 R14: 00007ffaa4815fa0 R15: 00007ffe899db298 [ 276.422617][T12007] [ 276.727326][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.825010][T12018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'. [ 276.867451][T12017] netlink: 'syz.0.1738': attribute type 1 has an invalid length. [ 276.908806][T12019] netlink: 'syz.3.1741': attribute type 30 has an invalid length. [ 276.941640][T11999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.038922][T12025] netlink: 'syz.0.1742': attribute type 10 has an invalid length. [ 277.062108][T12025] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 277.074724][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 277.437996][T12046] FAULT_INJECTION: forcing a failure. [ 277.437996][T12046] name failslab, interval 1, probability 0, space 0, times 0 [ 277.469771][T12046] CPU: 0 UID: 0 PID: 12046 Comm: syz.1.1748 Not tainted syzkaller #0 PREEMPT(full) [ 277.469802][T12046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 277.469812][T12046] Call Trace: [ 277.469821][T12046] [ 277.469828][T12046] dump_stack_lvl+0xe8/0x150 [ 277.469857][T12046] should_fail_ex+0x412/0x560 [ 277.469886][T12046] should_failslab+0xa8/0x100 [ 277.469910][T12046] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 277.469931][T12046] ? kasprintf+0xe2/0x140 [ 277.469954][T12046] kvasprintf+0xeb/0x1a0 [ 277.469976][T12046] ? __pfx_kvasprintf+0x10/0x10 [ 277.470029][T12046] kasprintf+0xe2/0x140 [ 277.470055][T12046] ? pcpu_alloc+0x10/0x360 [ 277.470093][T12046] ? __pfx_kasprintf+0x10/0x10 [ 277.470117][T12046] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 277.470138][T12046] ieee80211_alloc_led_names+0x141/0x2b0 [ 277.470163][T12046] ieee80211_alloc_hw_nm+0x1915/0x1fa0 [ 277.470190][T12046] mac80211_hwsim_new_radio+0x1e8/0x5ba0 [ 277.470229][T12046] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 277.470285][T12046] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 277.470321][T12046] ? do_trace_netlink_extack+0x80/0x200 [ 277.470364][T12046] hwsim_new_radio_nl+0xf6a/0x1c00 [ 277.470411][T12046] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 277.470443][T12046] ? rcu_is_watching+0x15/0xb0 [ 277.470467][T12046] ? trace_kmalloc+0x2a/0x110 [ 277.470490][T12046] ? __nla_parse+0x40/0x60 [ 277.470511][T12046] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 277.470529][T12046] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 277.470553][T12046] genl_family_rcv_msg_doit+0x22a/0x330 [ 277.470598][T12046] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 277.470637][T12046] ? bpf_lsm_capable+0x9/0x20 [ 277.470673][T12046] ? security_capable+0x7e/0x2c0 [ 277.470713][T12046] genl_rcv_msg+0x61c/0x7a0 [ 277.470743][T12046] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.470765][T12046] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 277.470815][T12046] netlink_rcv_skb+0x232/0x4b0 [ 277.470847][T12046] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.470873][T12046] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.470923][T12046] ? down_read+0x272/0x2e0 [ 277.470950][T12046] ? genl_rcv+0xd/0x40 [ 277.470975][T12046] genl_rcv+0x28/0x40 [ 277.470995][T12046] netlink_unicast+0x75c/0x8e0 [ 277.471048][T12046] netlink_sendmsg+0x813/0xb40 [ 277.471090][T12046] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.471124][T12046] ? aa_sock_msg_perm+0xf1/0x1b0 [ 277.471149][T12046] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.471179][T12046] ____sys_sendmsg+0x972/0x9f0 [ 277.471229][T12046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.471290][T12046] ? import_iovec+0x73/0xa0 [ 277.471321][T12046] ___sys_sendmsg+0x2a5/0x360 [ 277.471362][T12046] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.471444][T12046] ? __fget_files+0x2a/0x420 [ 277.471465][T12046] ? __fget_files+0x3a0/0x420 [ 277.471498][T12046] __x64_sys_sendmsg+0x1bd/0x2a0 [ 277.471536][T12046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.471582][T12046] ? __pfx_ksys_write+0x10/0x10 [ 277.471622][T12046] do_syscall_64+0x14d/0xf80 [ 277.471649][T12046] ? trace_irq_disable+0x3b/0x150 [ 277.471669][T12046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.471693][T12046] ? clear_bhb_loop+0x40/0x90 [ 277.471722][T12046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.471745][T12046] RIP: 0033:0x7fabfad9c819 [ 277.471766][T12046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.471786][T12046] RSP: 002b:00007fabf8fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.471811][T12046] RAX: ffffffffffffffda RBX: 00007fabfb016090 RCX: 00007fabfad9c819 [ 277.471827][T12046] RDX: 0000000020008004 RSI: 0000200000000140 RDI: 0000000000000003 [ 277.471843][T12046] RBP: 00007fabf8fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 277.471857][T12046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.471871][T12046] R13: 00007fabfb016128 R14: 00007fabfb016090 R15: 00007fffaf30c248 [ 277.471908][T12046] [ 278.883487][T12044] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 279.465938][T12078] netlink: 'syz.4.1758': attribute type 1 has an invalid length. [ 279.500946][T12078] NCSI netlink: No device for ifindex 0 [ 279.533093][T12077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.554538][T12079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.269035][T12100] __nla_validate_parse: 7 callbacks suppressed [ 280.269060][T12100] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1764'. [ 280.311194][ T5831] net_ratelimit: 8 callbacks suppressed [ 280.311217][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.594866][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 280.688917][T12117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1768'. [ 281.117988][T12145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.283564][T12155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1775'. [ 281.315910][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 281.325989][T12158] openvswitch: netlink: Flow actions attr not present in new flow. [ 281.342043][T12158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1778'. [ 281.367922][T12158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1778'. [ 281.404596][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.543464][T12139] tipc: Disabling bearer [ 281.609021][T12137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.471281][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.488436][T12193] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1790'. [ 282.510155][T12193] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1790'. [ 282.528664][T12197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1792'. [ 282.722143][T12208] FAULT_INJECTION: forcing a failure. [ 282.722143][T12208] name failslab, interval 1, probability 0, space 0, times 0 [ 282.778684][T12208] CPU: 0 UID: 0 PID: 12208 Comm: syz.1.1796 Not tainted syzkaller #0 PREEMPT(full) [ 282.778718][T12208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 282.778733][T12208] Call Trace: [ 282.778742][T12208] [ 282.778752][T12208] dump_stack_lvl+0xe8/0x150 [ 282.778790][T12208] should_fail_ex+0x412/0x560 [ 282.778831][T12208] should_failslab+0xa8/0x100 [ 282.778865][T12208] __kmalloc_cache_noprof+0x88/0x660 [ 282.778891][T12208] ? sctp_v6_cmp_addr+0x15/0xd0 [ 282.778915][T12208] ? sctp_add_bind_addr+0x8c/0x370 [ 282.778944][T12208] sctp_add_bind_addr+0x8c/0x370 [ 282.778993][T12208] sctp_copy_local_addr_list+0x314/0x4f0 [ 282.779022][T12208] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 282.779066][T12208] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 282.779088][T12208] ? sctp_association_new+0x1894/0x25e0 [ 282.779135][T12208] ? sctp_v4_is_any+0x35/0x60 [ 282.779171][T12208] ? sctp_copy_one_addr+0x93/0x360 [ 282.779200][T12208] sctp_bind_addr_copy+0xb3/0x3c0 [ 282.779241][T12208] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 282.779301][T12208] sctp_connect_new_asoc+0x2ff/0x6b0 [ 282.779334][T12208] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 282.779373][T12208] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 282.779402][T12208] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 282.779443][T12208] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 282.779482][T12208] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 282.779518][T12208] ? security_sctp_bind_connect+0x7e/0x2c0 [ 282.779551][T12208] sctp_sendmsg+0x1528/0x2c10 [ 282.779596][T12208] ? __pfx_sctp_sendmsg+0x10/0x10 [ 282.779629][T12208] ? aa_sk_perm+0x6d5/0x900 [ 282.779671][T12208] ? __pfx_aa_sk_perm+0x10/0x10 [ 282.779707][T12208] ? sock_rps_record_flow+0x19/0x350 [ 282.779740][T12208] ? __pfx_inet_sendmsg+0x10/0x10 [ 282.779774][T12208] ? inet_sendmsg+0x2f4/0x370 [ 282.779805][T12208] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.779831][T12208] ? __pfx_inet_sendmsg+0x10/0x10 [ 282.779865][T12208] __sys_sendto+0x5de/0x710 [ 282.779898][T12208] ? __pfx___sys_sendto+0x10/0x10 [ 282.779926][T12208] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 282.779967][T12208] ? __fget_files+0x3a0/0x420 [ 282.780000][T12208] ? ksys_write+0x242/0x270 [ 282.780029][T12208] ? __pfx_ksys_write+0x10/0x10 [ 282.780060][T12208] __x64_sys_sendto+0xde/0x100 [ 282.780095][T12208] do_syscall_64+0x14d/0xf80 [ 282.780120][T12208] ? trace_irq_disable+0x3b/0x150 [ 282.780139][T12208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.780161][T12208] ? clear_bhb_loop+0x40/0x90 [ 282.780189][T12208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.780218][T12208] RIP: 0033:0x7fabfad9c819 [ 282.780239][T12208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.780258][T12208] RSP: 002b:00007fabf8ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 282.780282][T12208] RAX: ffffffffffffffda RBX: 00007fabfb015fa0 RCX: 00007fabfad9c819 [ 282.780304][T12208] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 282.780318][T12208] RBP: 00007fabf8ff6090 R08: 0000200000000240 R09: 000000000000001c [ 282.780334][T12208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.780347][T12208] R13: 00007fabfb016038 R14: 00007fabfb015fa0 R15: 00007fffaf30c248 [ 282.780382][T12208] [ 283.106589][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.168819][T12210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.186369][T12217] netlink: 'syz.3.1801': attribute type 62 has an invalid length. [ 283.228192][T12209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.445719][T12234] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20004 [ 283.512537][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.567196][T12237] FAULT_INJECTION: forcing a failure. [ 283.567196][T12237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.581442][T12237] CPU: 1 UID: 0 PID: 12237 Comm: syz.0.1807 Not tainted syzkaller #0 PREEMPT(full) [ 283.581473][T12237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 283.581487][T12237] Call Trace: [ 283.581496][T12237] [ 283.581505][T12237] dump_stack_lvl+0xe8/0x150 [ 283.581545][T12237] should_fail_ex+0x412/0x560 [ 283.581586][T12237] _copy_from_iter+0x3b0/0x1670 [ 283.581625][T12237] ? __pfx__copy_from_iter+0x10/0x10 [ 283.581650][T12237] ? _copy_from_iter+0x446/0x1670 [ 283.581681][T12237] ? do_raw_spin_lock+0x12b/0x2f0 [ 283.581711][T12237] bcm_tx_setup+0x11be/0x1bc0 [ 283.581759][T12237] bcm_sendmsg+0x46e/0x6c0 [ 283.581794][T12237] ? __pfx_bcm_sendmsg+0x10/0x10 [ 283.581829][T12237] ? aa_sock_msg_perm+0xf1/0x1b0 [ 283.581855][T12237] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.581886][T12237] ____sys_sendmsg+0x972/0x9f0 [ 283.581932][T12237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.581977][T12237] ? import_iovec+0x73/0xa0 [ 283.582008][T12237] ___sys_sendmsg+0x2a5/0x360 [ 283.582049][T12237] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.582135][T12237] ? __fget_files+0x2a/0x420 [ 283.582157][T12237] ? __fget_files+0x3a0/0x420 [ 283.582189][T12237] __x64_sys_sendmsg+0x1bd/0x2a0 [ 283.582228][T12237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.582275][T12237] ? __pfx_ksys_write+0x10/0x10 [ 283.582315][T12237] do_syscall_64+0x14d/0xf80 [ 283.582341][T12237] ? trace_irq_disable+0x3b/0x150 [ 283.582362][T12237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.582385][T12237] ? clear_bhb_loop+0x40/0x90 [ 283.582414][T12237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.582437][T12237] RIP: 0033:0x7f074e39c819 [ 283.582458][T12237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.582478][T12237] RSP: 002b:00007f074f23d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.582504][T12237] RAX: ffffffffffffffda RBX: 00007f074e615fa0 RCX: 00007f074e39c819 [ 283.582521][T12237] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 283.582536][T12237] RBP: 00007f074f23d090 R08: 0000000000000000 R09: 0000000000000000 [ 283.582551][T12237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.582565][T12237] R13: 00007f074e616038 R14: 00007f074e615fa0 R15: 00007ffd2eadb808 [ 283.582602][T12237] [ 284.391342][T12271] netlink: 'syz.1.1811': attribute type 2 has an invalid length. [ 284.558697][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.662010][T12279] FAULT_INJECTION: forcing a failure. [ 284.662010][T12279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.705764][T12279] CPU: 0 UID: 0 PID: 12279 Comm: syz.3.1816 Not tainted syzkaller #0 PREEMPT(full) [ 284.705796][T12279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 284.705815][T12279] Call Trace: [ 284.705824][T12279] [ 284.705834][T12279] dump_stack_lvl+0xe8/0x150 [ 284.705872][T12279] should_fail_ex+0x412/0x560 [ 284.705913][T12279] _copy_from_user+0x2d/0xb0 [ 284.705941][T12279] ___sys_sendmsg+0x1c6/0x360 [ 284.705982][T12279] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.706055][T12279] ? __fget_files+0x2a/0x420 [ 284.706075][T12279] ? __fget_files+0x3a0/0x420 [ 284.706106][T12279] __x64_sys_sendmsg+0x1bd/0x2a0 [ 284.706144][T12279] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.706189][T12279] ? __pfx_ksys_write+0x10/0x10 [ 284.706229][T12279] do_syscall_64+0x14d/0xf80 [ 284.706255][T12279] ? trace_irq_disable+0x3b/0x150 [ 284.706276][T12279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.706300][T12279] ? clear_bhb_loop+0x40/0x90 [ 284.706328][T12279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.706352][T12279] RIP: 0033:0x7ffaa459c819 [ 284.706372][T12279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.706392][T12279] RSP: 002b:00007ffaa53d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.706417][T12279] RAX: ffffffffffffffda RBX: 00007ffaa4815fa0 RCX: 00007ffaa459c819 [ 284.706433][T12279] RDX: 0000000020000010 RSI: 0000200000000540 RDI: 0000000000000003 [ 284.706449][T12279] RBP: 00007ffaa53d5090 R08: 0000000000000000 R09: 0000000000000000 [ 284.706463][T12279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.706478][T12279] R13: 00007ffaa4816038 R14: 00007ffaa4815fa0 R15: 00007ffe899db298 [ 284.706513][T12279] [ 285.030395][T12290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.045423][T12289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.277684][T12301] delete_channel: no stack [ 285.283431][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.605414][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.623464][T12316] sctp: [Deprecated]: syz.3.1825 (pid 12316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.623464][T12316] Use struct sctp_sack_info instead [ 285.747487][T12321] __nla_validate_parse: 8 callbacks suppressed [ 285.747508][T12321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1829'. [ 285.783607][T12325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1830'. [ 286.150963][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.167443][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1837'. [ 286.186892][T12348] syzkaller0: entered promiscuous mode [ 286.192650][T12348] syzkaller0: entered allmulticast mode [ 286.442035][T12353] syzkaller0: entered promiscuous mode [ 286.447797][T12353] syzkaller0: entered allmulticast mode [ 286.630950][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.849644][T12360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1841'. [ 287.580375][T12382] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1847'. [ 287.670983][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.713509][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.834888][T12390] sctp: [Deprecated]: syz.4.1849 (pid 12390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 288.834888][T12390] Use struct sctp_sack_info instead [ 289.192017][T10218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.509251][T12393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.549349][T12393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.558058][T12393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.567526][T12395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.583357][T12396] FAULT_INJECTION: forcing a failure. [ 289.583357][T12396] name failslab, interval 1, probability 0, space 0, times 0 [ 289.597136][T12396] CPU: 1 UID: 0 PID: 12396 Comm: syz.1.1851 Not tainted syzkaller #0 PREEMPT(full) [ 289.597164][T12396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 289.597175][T12396] Call Trace: [ 289.597183][T12396] [ 289.597191][T12396] dump_stack_lvl+0xe8/0x150 [ 289.597222][T12396] should_fail_ex+0x412/0x560 [ 289.597255][T12396] should_failslab+0xa8/0x100 [ 289.597281][T12396] __kmalloc_noprof+0xe8/0x760 [ 289.597302][T12396] ? nf_tables_newrule+0x152c/0x28b0 [ 289.597329][T12396] ? nla_strcmp+0x106/0x140 [ 289.597352][T12396] nf_tables_newrule+0x152c/0x28b0 [ 289.597385][T12396] ? __pfx_nf_tables_newrule+0x10/0x10 [ 289.597404][T12396] ? nfnl_pernet+0x23/0x240 [ 289.597434][T12396] ? __nla_parse+0x40/0x60 [ 289.597457][T12396] nfnetlink_rcv+0x1240/0x27b0 [ 289.597507][T12396] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 289.597542][T12396] ? ref_tracker_free+0x693/0x840 [ 289.597586][T12396] ? __netlink_deliver_tap+0x807/0x850 [ 289.597619][T12396] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.597644][T12396] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.597674][T12396] netlink_unicast+0x75c/0x8e0 [ 289.597721][T12396] netlink_sendmsg+0x813/0xb40 [ 289.597753][T12396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.597781][T12396] ? aa_sock_msg_perm+0xf1/0x1b0 [ 289.597799][T12396] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.597822][T12396] ____sys_sendmsg+0x972/0x9f0 [ 289.597856][T12396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.597890][T12396] ? import_iovec+0x73/0xa0 [ 289.597934][T12396] ___sys_sendmsg+0x2a5/0x360 [ 289.597971][T12396] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.598045][T12396] ? __fget_files+0x2a/0x420 [ 289.598065][T12396] ? __fget_files+0x3a0/0x420 [ 289.598097][T12396] __x64_sys_sendmsg+0x1bd/0x2a0 [ 289.598134][T12396] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.598177][T12396] ? __pfx_ksys_write+0x10/0x10 [ 289.598229][T12396] do_syscall_64+0x14d/0xf80 [ 289.598255][T12396] ? trace_irq_disable+0x3b/0x150 [ 289.598275][T12396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.598299][T12396] ? clear_bhb_loop+0x40/0x90 [ 289.598338][T12396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.598360][T12396] RIP: 0033:0x7fabfad9c819 [ 289.598383][T12396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.598401][T12396] RSP: 002b:00007fabf8ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.598425][T12396] RAX: ffffffffffffffda RBX: 00007fabfb015fa0 RCX: 00007fabfad9c819 [ 289.598442][T12396] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 289.598457][T12396] RBP: 00007fabf8ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 289.598472][T12396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.598485][T12396] R13: 00007fabfb016038 R14: 00007fabfb015fa0 R15: 00007fffaf30c248 [ 289.598521][T12396] [ 289.941036][T12398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1852'. [ 290.638300][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1860'. [ 290.676536][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1860'. [ 290.686454][T12423] netlink: 'syz.0.1860': attribute type 19 has an invalid length. [ 290.695219][T12423] netlink: 'syz.0.1860': attribute type 20 has an invalid length. [ 290.817845][T12434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1863'. [ 290.954173][ T5948] net_ratelimit: 3 callbacks suppressed [ 290.954206][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.074293][T12442] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1866'. [ 291.085925][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1866'. [ 291.455710][T12464] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1874'. [ 291.495368][T12464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'. [ 291.508293][T12466] syzkaller1: entered promiscuous mode [ 291.520856][T12466] syzkaller1: entered allmulticast mode [ 291.660003][T12476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1876'. [ 291.670948][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.866002][T12486] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1878'. [ 291.993000][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.237992][T10218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.667766][T12520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1888'. [ 292.860361][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1892'. [ 292.890812][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1892'. [ 292.902052][T12529] netlink: 'syz.4.1892': attribute type 13 has an invalid length. [ 293.031592][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.417113][T12557] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 294.071542][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.871086][T10218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.889729][T12617] tipc: Enabled bearer , priority 0 [ 295.111302][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.271132][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.710401][T12652] FAULT_INJECTION: forcing a failure. [ 295.710401][T12652] name failslab, interval 1, probability 0, space 0, times 0 [ 295.725161][T12652] CPU: 0 UID: 0 PID: 12652 Comm: syz.3.1930 Not tainted syzkaller #0 PREEMPT(full) [ 295.725193][T12652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 295.725208][T12652] Call Trace: [ 295.725218][T12652] [ 295.725228][T12652] dump_stack_lvl+0xe8/0x150 [ 295.725266][T12652] should_fail_ex+0x412/0x560 [ 295.725308][T12652] should_failslab+0xa8/0x100 [ 295.725341][T12652] __kmalloc_cache_noprof+0x88/0x660 [ 295.725368][T12652] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 295.725393][T12652] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 295.725419][T12652] ? genl_start+0x1c9/0x6c0 [ 295.725448][T12652] genl_start+0x1c9/0x6c0 [ 295.725471][T12652] ? netlink_lookup+0x30/0x200 [ 295.725508][T12652] __netlink_dump_start+0x469/0x7e0 [ 295.725548][T12652] genl_family_rcv_msg_dumpit+0x213/0x310 [ 295.725578][T12652] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 295.725602][T12652] ? genl_get_cmd+0x6cb/0x960 [ 295.725631][T12652] ? __pfx_genl_start+0x10/0x10 [ 295.725658][T12652] ? __pfx_genl_dumpit+0x10/0x10 [ 295.725680][T12652] ? __pfx_genl_done+0x10/0x10 [ 295.725710][T12652] ? __lock_acquire+0x6b5/0x2cf0 [ 295.725747][T12652] genl_rcv_msg+0x5e8/0x7a0 [ 295.725792][T12652] ? __pfx_genl_rcv_msg+0x10/0x10 [ 295.725816][T12652] ? __pfx_ieee802154_llsec_dump_devkeys+0x10/0x10 [ 295.725867][T12652] netlink_rcv_skb+0x232/0x4b0 [ 295.725899][T12652] ? __pfx_genl_rcv_msg+0x10/0x10 [ 295.725926][T12652] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.725975][T12652] ? down_read+0x272/0x2e0 [ 295.726003][T12652] ? genl_rcv+0xd/0x40 [ 295.726028][T12652] genl_rcv+0x28/0x40 [ 295.726050][T12652] netlink_unicast+0x75c/0x8e0 [ 295.726090][T12652] netlink_sendmsg+0x813/0xb40 [ 295.726133][T12652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.726170][T12652] ? aa_sock_msg_perm+0xf1/0x1b0 [ 295.726195][T12652] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 295.726227][T12652] ____sys_sendmsg+0x972/0x9f0 [ 295.726271][T12652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.726317][T12652] ? import_iovec+0x73/0xa0 [ 295.726349][T12652] ___sys_sendmsg+0x2a5/0x360 [ 295.726389][T12652] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.726464][T12652] ? __fget_files+0x2a/0x420 [ 295.726485][T12652] ? __fget_files+0x3a0/0x420 [ 295.726518][T12652] __x64_sys_sendmsg+0x1bd/0x2a0 [ 295.726556][T12652] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.726602][T12652] ? __pfx_ksys_write+0x10/0x10 [ 295.726641][T12652] do_syscall_64+0x14d/0xf80 [ 295.726667][T12652] ? trace_irq_disable+0x3b/0x150 [ 295.726692][T12652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.726716][T12652] ? clear_bhb_loop+0x40/0x90 [ 295.726745][T12652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.726768][T12652] RIP: 0033:0x7ffaa459c819 [ 295.726796][T12652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.726816][T12652] RSP: 002b:00007ffaa53d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.726841][T12652] RAX: ffffffffffffffda RBX: 00007ffaa4815fa0 RCX: 00007ffaa459c819 [ 295.726858][T12652] RDX: 00000000040490c4 RSI: 0000200000000180 RDI: 0000000000000004 [ 295.726874][T12652] RBP: 00007ffaa53d5090 R08: 0000000000000000 R09: 0000000000000000 [ 295.726888][T12652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.726902][T12652] R13: 00007ffaa4816038 R14: 00007ffaa4815fa0 R15: 00007ffe899db298 [ 295.726939][T12652] [ 296.081120][ T5948] tipc: Node number set to 1372395639 [ 296.160958][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.271654][T12665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.283870][T12665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.295825][T12665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.296402][T12662] xt_hashlimit: size too large, truncated to 1048576 [ 296.317826][T12665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.372343][T12665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.403508][T12671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.482018][T12678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.491741][T12678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.520877][T12678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.770150][T12691] netlink: 'syz.3.1941': attribute type 12 has an invalid length. [ 296.779050][T12692] __nla_validate_parse: 14 callbacks suppressed [ 296.779071][T12692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1940'. [ 296.830208][T12698] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1940'. [ 296.841133][T12692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1940'. [ 296.901898][T12700] raw_sendmsg: syz.3.1943 forgot to set AF_INET. Fix it! [ 297.712513][T12726] FAULT_INJECTION: forcing a failure. [ 297.712513][T12726] name failslab, interval 1, probability 0, space 0, times 0 [ 297.725275][T12726] CPU: 0 UID: 0 PID: 12726 Comm: syz.2.1953 Not tainted syzkaller #0 PREEMPT(full) [ 297.725304][T12726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 297.725318][T12726] Call Trace: [ 297.725327][T12726] [ 297.725337][T12726] dump_stack_lvl+0xe8/0x150 [ 297.725375][T12726] should_fail_ex+0x412/0x560 [ 297.725416][T12726] should_failslab+0xa8/0x100 [ 297.725446][T12726] ? skb_clone+0x212/0x3a0 [ 297.725467][T12726] kmem_cache_alloc_noprof+0x87/0x650 [ 297.725494][T12726] ? __bpf_redirect+0xcb4/0x12a0 [ 297.725526][T12726] skb_clone+0x212/0x3a0 [ 297.725552][T12726] bpf_clone_redirect+0x16a/0x4b0 [ 297.725590][T12726] ? bpf_test_run+0x1d1/0x830 [ 297.725620][T12726] bpf_prog_9299a0b1a05450b6+0x5f/0x68 [ 297.725645][T12726] ? __lock_acquire+0x6b5/0x2cf0 [ 297.725699][T12726] ? ktime_get+0x45/0x200 [ 297.725725][T12726] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 297.725750][T12726] ? lockdep_hardirqs_on+0x7a/0x110 [ 297.725777][T12726] ? ktime_get+0x45/0x200 [ 297.725796][T12726] ? seqcount_lockdep_reader_access+0xea/0x100 [ 297.725820][T12726] ? bpf_test_run+0x1d1/0x830 [ 297.725854][T12726] ? bpf_test_timer_continue+0x10c/0x320 [ 297.725891][T12726] bpf_test_run+0x354/0x830 [ 297.725952][T12726] ? __pfx_bpf_test_run+0x10/0x10 [ 297.726001][T12726] ? eth_type_trans+0x348/0x7e0 [ 297.726030][T12726] ? convert___skb_to_skb+0x3d/0x5b0 [ 297.726064][T12726] bpf_prog_test_run_skb+0xd64/0x21f0 [ 297.726115][T12726] ? __fget_files+0x2a/0x420 [ 297.726136][T12726] ? __fget_files+0x3a0/0x420 [ 297.726156][T12726] ? __fget_files+0x2a/0x420 [ 297.726183][T12726] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 297.726215][T12726] bpf_prog_test_run+0x2c7/0x340 [ 297.726245][T12726] __sys_bpf+0x643/0x950 [ 297.726270][T12726] ? __pfx___sys_bpf+0x10/0x10 [ 297.726310][T12726] ? ksys_write+0x242/0x270 [ 297.726339][T12726] ? __pfx_ksys_write+0x10/0x10 [ 297.726373][T12726] __x64_sys_bpf+0x7c/0x90 [ 297.726408][T12726] do_syscall_64+0x14d/0xf80 [ 297.726433][T12726] ? trace_irq_disable+0x3b/0x150 [ 297.726454][T12726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.726477][T12726] ? clear_bhb_loop+0x40/0x90 [ 297.726505][T12726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.726528][T12726] RIP: 0033:0x7fc05e39c819 [ 297.726549][T12726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.726570][T12726] RSP: 002b:00007fc05f338028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 297.726594][T12726] RAX: ffffffffffffffda RBX: 00007fc05e615fa0 RCX: 00007fc05e39c819 [ 297.726612][T12726] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 297.726627][T12726] RBP: 00007fc05f338090 R08: 0000000000000000 R09: 0000000000000000 [ 297.726641][T12726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 297.726656][T12726] R13: 00007fc05e616038 R14: 00007fc05e615fa0 R15: 00007ffdc25c0598 [ 297.726692][T12726] [ 298.043165][T12728] team0: left allmulticast mode [ 298.048257][T12728] team_slave_0: left allmulticast mode [ 298.056749][T12728] team_slave_1: left allmulticast mode [ 298.062785][T12728] team0: left promiscuous mode [ 298.067794][T12728] team_slave_0: left promiscuous mode [ 298.075419][T12728] team_slave_1: left promiscuous mode [ 298.082647][T12728] bridge0: port 3(team0) entered disabled state [ 298.210343][T12728] bridge_slave_0: left allmulticast mode [ 298.247537][T12728] bridge_slave_0: left promiscuous mode [ 298.290051][T12728] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.303656][T12728] bridge_slave_1: left allmulticast mode [ 298.309374][T12728] bridge_slave_1: left promiscuous mode [ 298.318267][T12728] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.351466][T12728] bond0: (slave bond_slave_0): Releasing backup interface [ 298.363527][T12728] bond0: (slave bond_slave_1): Releasing backup interface [ 298.388807][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1959'. [ 298.423238][T12728] team0: Port device team_slave_0 removed [ 298.435435][T12728] team0: Port device team_slave_1 removed [ 298.447086][T12728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.457448][T12728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.520549][T12739] syzkaller0: entered promiscuous mode [ 298.536570][T12739] syzkaller0: entered allmulticast mode [ 299.032908][T12771] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1969'. [ 299.805580][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 299.974748][T12799] veth1_to_bridge: entered allmulticast mode [ 300.095008][T12804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1978'. [ 300.105769][T12804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1978'. [ 300.155136][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 300.497730][T12827] netlink: 'syz.3.1987': attribute type 10 has an invalid length. [ 300.578149][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 301.350926][T10217] net_ratelimit: 14 callbacks suppressed [ 301.350950][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.387893][T12860] delete_channel: no stack [ 301.411582][T12859] netlink: 'syz.3.1998': attribute type 10 has an invalid length. [ 301.430984][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.702079][T12876] netlink: 'syz.4.2002': attribute type 3 has an invalid length. [ 301.765985][T12883] delete_channel: no stack [ 302.186843][T12903] netlink: 'syz.2.2011': attribute type 10 has an invalid length. [ 302.351074][T12912] __nla_validate_parse: 4 callbacks suppressed [ 302.351100][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2014'. [ 302.396182][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2013'. [ 302.407910][T12914] bond3: Removing last arp target with arp_interval on [ 302.480867][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.662056][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 302.683609][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2017'. [ 302.774518][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2019'. [ 302.808969][T12934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2017'. [ 302.835626][T12941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.854537][T12941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.866446][T12941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.878764][T12941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.887630][T12941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.897658][T12940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.012280][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2025'. [ 303.067512][T12950] syzkaller1: entered promiscuous mode [ 303.075533][T12950] syzkaller1: entered allmulticast mode [ 303.079226][T12947] netlink: 'syz.1.2023': attribute type 10 has an invalid length. [ 303.214540][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2028'. [ 303.375958][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2029'. [ 303.521037][ T9509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.703080][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2032'. [ 304.250749][T13016] netlink: 'syz.1.2038': attribute type 10 has an invalid length. [ 304.589310][T13020] sit1: entered promiscuous mode [ 304.625726][T13024] syzkaller1: entered promiscuous mode [ 304.645557][T13024] syzkaller1: entered allmulticast mode [ 304.734344][T13029] netlink: 'syz.3.2043': attribute type 9 has an invalid length. [ 305.478844][T13057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.630906][ T9509] net_ratelimit: 10 callbacks suppressed [ 306.630929][ T9509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.887204][T13115] openvswitch: netlink: Duplicate or invalid key (type 0). [ 306.905908][T13115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.431020][T10218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.530164][T13137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.538714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.627533][T13141] syzkaller1: entered promiscuous mode [ 307.644746][T13141] syzkaller1: entered allmulticast mode [ 307.672392][ T9509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.373546][T13168] __nla_validate_parse: 9 callbacks suppressed [ 308.373570][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2093'. [ 308.516415][T13171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.713266][ T9509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.751899][ T9509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.799275][T13222] netlink: 'syz.0.2112': attribute type 21 has an invalid length. [ 309.829804][T13222] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2112'. [ 309.905280][T13222] netlink: 'syz.0.2112': attribute type 4 has an invalid length. [ 309.945335][T13222] netlink: 'syz.0.2112': attribute type 3 has an invalid length. [ 310.005060][T13222] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2112'. [ 310.282099][T13242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2116'. [ 310.532201][T13246] syzkaller1: entered promiscuous mode [ 310.554186][T13246] syzkaller1: entered allmulticast mode [ 310.742316][T13253] tipc: Enabling of bearer rejected, already enabled [ 311.059431][T13269] netlink: 'syz.1.2123': attribute type 1 has an invalid length. [ 311.122288][T13271] netlink: 'syz.4.2124': attribute type 1 has an invalid length. [ 311.130097][T13271] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2124'. [ 311.387319][T13284] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 311.421342][T13284] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 311.435981][T13284] team0: Port device netdevsim0 removed [ 311.816534][T13307] netlink: 'syz.3.2130': attribute type 5 has an invalid length. [ 311.836119][ T9509] net_ratelimit: 4 callbacks suppressed [ 311.836141][ T9509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.935023][T13306] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2132'. [ 311.989945][T13315] syzkaller0: entered promiscuous mode [ 312.012968][T13315] syzkaller0: entered allmulticast mode [ 312.282790][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'. [ 312.870922][ T9509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.970565][T13358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2142'. [ 313.510951][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.913348][ T9509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.077867][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.791976][T13426] delete_channel: no stack [ 314.981038][ T9509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.400347][T13433] x_tables: duplicate underflow at hook 1 [ 315.826626][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 315.999996][ T9509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.552004][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.830276][T13506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2171'. [ 316.874713][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2174'. [ 317.018145][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2176'. [ 317.031649][ T9509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.054558][T13518] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 317.063280][T13518] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 317.073739][T13518] tipc: Resetting bearer [ 317.103930][T13519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2177'. [ 317.265137][T13531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2180'. [ 317.346500][T13530] bond7: (slave veth1): Device is not bonding slave [ 317.353461][T13530] bond7: option active_slave: invalid value (veth1) [ 317.363311][T13530] bond7 (unregistering): Released all slaves [ 317.414985][T13531] bridge0: entered promiscuous mode [ 317.695440][T13549] tipc: Resetting bearer [ 317.736903][T13549] tipc: Resetting bearer [ 317.937275][T13559] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2187'. [ 317.978246][T13557] netlink: 'syz.2.2187': attribute type 29 has an invalid length. [ 317.987749][T13558] netlink: 'syz.2.2187': attribute type 29 has an invalid length. [ 318.032890][T13555] debugfs: '!' already exists in 'ieee80211' [ 318.079711][ T9509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.120182][T13562] netlink: 'syz.2.2188': attribute type 11 has an invalid length. [ 318.289133][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'. [ 318.323255][T13569] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 318.349478][T13569] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 318.529077][T13576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2194'. [ 318.704825][T13585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.718540][T13591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.747036][T13591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.787618][T13591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.982072][T13589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.995040][T13589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.047317][T13607] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 319.055941][T13607] CPU: 1 UID: 0 PID: 13607 Comm: syz.3.2201 Not tainted syzkaller #0 PREEMPT(full) [ 319.055986][T13607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 319.056007][T13607] Call Trace: [ 319.056021][T13607] [ 319.056034][T13607] dump_stack_lvl+0xe8/0x150 [ 319.056079][T13607] sysfs_warn_dup+0x8e/0xa0 [ 319.056114][T13607] sysfs_do_create_link_sd+0xc0/0x110 [ 319.056157][T13607] device_add_class_symlinks+0x1cf/0x240 [ 319.056195][T13607] device_add+0x475/0xb70 [ 319.056231][T13607] wiphy_register+0x1dc5/0x2dc0 [ 319.056275][T13607] ? __pfx_wiphy_register+0x10/0x10 [ 319.056302][T13607] ? __pfx_netdev_run_todo+0x10/0x10 [ 319.056328][T13607] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 319.056368][T13607] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 319.056400][T13607] ieee80211_register_hw+0x3d82/0x4a70 [ 319.056427][T13607] ? __lock_acquire+0x6b5/0x2cf0 [ 319.056475][T13607] ? ieee80211_register_hw+0x1931/0x4a70 [ 319.056532][T13607] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 319.056568][T13607] ? __hrtimer_setup+0x181/0x200 [ 319.056602][T13607] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 319.056632][T13607] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 319.056703][T13607] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 319.056737][T13607] ? kstrndup+0xbf/0x160 [ 319.056780][T13607] hwsim_new_radio_nl+0xf6a/0x1c00 [ 319.056850][T13607] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 319.056896][T13607] ? rcu_is_watching+0x15/0xb0 [ 319.056929][T13607] ? trace_kmalloc+0x2a/0x110 [ 319.056965][T13607] ? __nla_parse+0x40/0x60 [ 319.056998][T13607] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 319.057024][T13607] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 319.057060][T13607] genl_family_rcv_msg_doit+0x22a/0x330 [ 319.057095][T13607] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 319.057137][T13607] ? bpf_lsm_capable+0x9/0x20 [ 319.057171][T13607] ? security_capable+0x7e/0x2c0 [ 319.057215][T13607] genl_rcv_msg+0x61c/0x7a0 [ 319.057249][T13607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.057273][T13607] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 319.057327][T13607] netlink_rcv_skb+0x232/0x4b0 [ 319.057361][T13607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.057389][T13607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.057441][T13607] ? down_read+0x272/0x2e0 [ 319.057470][T13607] ? genl_rcv+0xd/0x40 [ 319.057503][T13607] genl_rcv+0x28/0x40 [ 319.057525][T13607] netlink_unicast+0x75c/0x8e0 [ 319.057568][T13607] netlink_sendmsg+0x813/0xb40 [ 319.057613][T13607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.057651][T13607] ? aa_sock_msg_perm+0xf1/0x1b0 [ 319.057678][T13607] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.057708][T13607] ____sys_sendmsg+0x972/0x9f0 [ 319.057754][T13607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.057802][T13607] ? import_iovec+0x73/0xa0 [ 319.057845][T13607] ___sys_sendmsg+0x2a5/0x360 [ 319.057888][T13607] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.057932][T13607] ? futex_wake+0x4ac/0x580 [ 319.057995][T13607] ? __fget_files+0x2a/0x420 [ 319.058018][T13607] ? __fget_files+0x3a0/0x420 [ 319.058052][T13607] __x64_sys_sendmsg+0x1bd/0x2a0 [ 319.058091][T13607] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.058139][T13607] ? rcu_is_watching+0x15/0xb0 [ 319.058189][T13607] do_syscall_64+0x14d/0xf80 [ 319.058217][T13607] ? trace_irq_disable+0x3b/0x150 [ 319.058238][T13607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.058263][T13607] ? clear_bhb_loop+0x40/0x90 [ 319.058293][T13607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.058317][T13607] RIP: 0033:0x7ffaa459c819 [ 319.058341][T13607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.058363][T13607] RSP: 002b:00007ffaa53d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.058389][T13607] RAX: ffffffffffffffda RBX: 00007ffaa4815fa0 RCX: 00007ffaa459c819 [ 319.058407][T13607] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 319.058423][T13607] RBP: 00007ffaa4632c91 R08: 0000000000000000 R09: 0000000000000000 [ 319.058439][T13607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.058455][T13607] R13: 00007ffaa4816038 R14: 00007ffaa4815fa0 R15: 00007ffe899db298 [ 319.058495][T13607] [ 319.556490][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.590888][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.980182][T13641] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2210'. [ 319.989946][T13641] unsupported nlmsg_type 40 [ 320.035258][T13641] netlink: 'syz.1.2210': attribute type 3 has an invalid length. [ 320.641817][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.011625][T13677] FAULT_INJECTION: forcing a failure. [ 321.011625][T13677] name failslab, interval 1, probability 0, space 0, times 0 [ 321.058358][T13677] CPU: 0 UID: 0 PID: 13677 Comm: syz.0.2217 Not tainted syzkaller #0 PREEMPT(full) [ 321.058392][T13677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 321.058408][T13677] Call Trace: [ 321.058417][T13677] [ 321.058427][T13677] dump_stack_lvl+0xe8/0x150 [ 321.058466][T13677] should_fail_ex+0x412/0x560 [ 321.058508][T13677] should_failslab+0xa8/0x100 [ 321.058541][T13677] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 321.058572][T13677] ? kasprintf+0xe2/0x140 [ 321.058605][T13677] kvasprintf+0xeb/0x1a0 [ 321.058635][T13677] ? __pfx_kvasprintf+0x10/0x10 [ 321.058676][T13677] kasprintf+0xe2/0x140 [ 321.058703][T13677] ? pcpu_alloc+0x10/0x360 [ 321.058742][T13677] ? __pfx_kasprintf+0x10/0x10 [ 321.058775][T13677] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 321.058807][T13677] ieee80211_alloc_led_names+0xa4/0x2b0 [ 321.058841][T13677] ieee80211_alloc_hw_nm+0x1915/0x1fa0 [ 321.058880][T13677] mac80211_hwsim_new_radio+0x1e8/0x5ba0 [ 321.058944][T13677] ? rcu_is_watching+0x15/0xb0 [ 321.058978][T13677] ? trace_kmalloc+0x2a/0x110 [ 321.059011][T13677] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 321.059043][T13677] ? kstrndup+0xbf/0x160 [ 321.059085][T13677] hwsim_new_radio_nl+0xf6a/0x1c00 [ 321.059145][T13677] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 321.059189][T13677] ? rcu_is_watching+0x15/0xb0 [ 321.059221][T13677] ? trace_kmalloc+0x2a/0x110 [ 321.059254][T13677] ? __nla_parse+0x40/0x60 [ 321.059288][T13677] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 321.059314][T13677] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 321.059349][T13677] genl_family_rcv_msg_doit+0x22a/0x330 [ 321.059383][T13677] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 321.059422][T13677] ? bpf_lsm_capable+0x9/0x20 [ 321.059455][T13677] ? security_capable+0x7e/0x2c0 [ 321.059496][T13677] genl_rcv_msg+0x61c/0x7a0 [ 321.059528][T13677] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.059552][T13677] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 321.059602][T13677] netlink_rcv_skb+0x232/0x4b0 [ 321.059635][T13677] ? __pfx_genl_rcv_msg+0x10/0x10 [ 321.059660][T13677] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.059710][T13677] ? down_read+0x272/0x2e0 [ 321.059738][T13677] ? genl_rcv+0xd/0x40 [ 321.059763][T13677] genl_rcv+0x28/0x40 [ 321.059784][T13677] netlink_unicast+0x75c/0x8e0 [ 321.059825][T13677] netlink_sendmsg+0x813/0xb40 [ 321.059868][T13677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.059904][T13677] ? aa_sock_msg_perm+0xf1/0x1b0 [ 321.059936][T13677] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.059968][T13677] ____sys_sendmsg+0x972/0x9f0 [ 321.060014][T13677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.060059][T13677] ? import_iovec+0x73/0xa0 [ 321.060089][T13677] ___sys_sendmsg+0x2a5/0x360 [ 321.060129][T13677] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.060203][T13677] ? __fget_files+0x2a/0x420 [ 321.060224][T13677] ? __fget_files+0x3a0/0x420 [ 321.060255][T13677] __x64_sys_sendmsg+0x1bd/0x2a0 [ 321.060291][T13677] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.060334][T13677] ? __pfx_ksys_write+0x10/0x10 [ 321.060369][T13677] do_syscall_64+0x14d/0xf80 [ 321.060393][T13677] ? trace_irq_disable+0x3b/0x150 [ 321.060412][T13677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.060433][T13677] ? clear_bhb_loop+0x40/0x90 [ 321.060459][T13677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.060481][T13677] RIP: 0033:0x7f074e39c819 [ 321.060503][T13677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.060523][T13677] RSP: 002b:00007f074f23d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.060548][T13677] RAX: ffffffffffffffda RBX: 00007f074e615fa0 RCX: 00007f074e39c819 [ 321.060565][T13677] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 321.060580][T13677] RBP: 00007f074f23d090 R08: 0000000000000000 R09: 0000000000000000 [ 321.060594][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 321.060608][T13677] R13: 00007f074e616038 R14: 00007f074e615fa0 R15: 00007ffd2eadb808 [ 321.060643][T13677] [ 321.527499][T13677] debugfs: '!' already exists in 'ieee80211' [ 321.787006][T13694] __nla_validate_parse: 2 callbacks suppressed [ 321.787027][T13694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2222'. [ 322.013430][T13710] netlink: 'syz.3.2223': attribute type 1 has an invalid length. [ 322.123680][T13715] net_ratelimit: 1 callbacks suppressed [ 322.123703][T13715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.195415][T13715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.253751][T13715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.291367][T13715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.341890][T13715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.381228][T13719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.436610][T13717] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 322.498235][T13714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.532681][T13717] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 322.664443][T13718] bond2: (slave gretap1): making interface the new active one [ 322.702572][T13718] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 322.712661][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.721278][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.817813][T13721] macvlan0: entered promiscuous mode [ 322.827027][T13721] macvlan0: entered allmulticast mode [ 322.835477][T13721] bond2: entered promiscuous mode [ 322.841211][T13721] gretap1: entered promiscuous mode [ 322.847431][T13721] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 322.923206][T13721] bond2: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 322.964396][T13721] bond2: left promiscuous mode [ 322.976237][T13721] gretap1: left promiscuous mode [ 323.055856][T13755] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2234'. [ 323.079895][T13745] bond5: (slave lo): Releasing backup interface [ 323.091796][T13745] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 323.105544][T13745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 323.212148][T13735] syzkaller0: entered promiscuous mode [ 323.217856][T13735] syzkaller0: entered allmulticast mode [ 324.951412][T13780] sctp: [Deprecated]: syz.3.2242 (pid 13780) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.951412][T13780] Use struct sctp_sack_info instead [ 325.284257][T13798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2245'. [ 325.385652][T13802] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2246'. [ 325.731343][T13821] netlink: 'syz.2.2251': attribute type 1 has an invalid length. [ 326.285861][T13850] FAULT_INJECTION: forcing a failure. [ 326.285861][T13850] name failslab, interval 1, probability 0, space 0, times 0 [ 326.323885][T13850] CPU: 1 UID: 0 PID: 13850 Comm: syz.2.2258 Not tainted syzkaller #0 PREEMPT(full) [ 326.323916][T13850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 326.323930][T13850] Call Trace: [ 326.323937][T13850] [ 326.323947][T13850] dump_stack_lvl+0xe8/0x150 [ 326.323984][T13850] should_fail_ex+0x412/0x560 [ 326.324022][T13850] should_failslab+0xa8/0x100 [ 326.324053][T13850] __kmalloc_noprof+0xe8/0x760 [ 326.324079][T13850] ? ethnl_default_set_doit+0x16a/0xad0 [ 326.324121][T13850] ethnl_default_set_doit+0x16a/0xad0 [ 326.324158][T13850] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 326.324183][T13850] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 326.324225][T13850] genl_family_rcv_msg_doit+0x22a/0x330 [ 326.324250][T13850] ? __asan_memcpy+0x40/0x70 [ 326.324278][T13850] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 326.324316][T13850] ? bpf_lsm_capable+0x9/0x20 [ 326.324349][T13850] ? security_capable+0x7e/0x2c0 [ 326.324390][T13850] genl_rcv_msg+0x61c/0x7a0 [ 326.324416][T13850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.324434][T13850] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 326.324477][T13850] netlink_rcv_skb+0x232/0x4b0 [ 326.324504][T13850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.324524][T13850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.324563][T13850] ? down_read+0x272/0x2e0 [ 326.324586][T13850] ? genl_rcv+0xd/0x40 [ 326.324605][T13850] genl_rcv+0x28/0x40 [ 326.324623][T13850] netlink_unicast+0x75c/0x8e0 [ 326.324655][T13850] netlink_sendmsg+0x813/0xb40 [ 326.324688][T13850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.324717][T13850] ? aa_sock_msg_perm+0xf1/0x1b0 [ 326.324736][T13850] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.324761][T13850] ____sys_sendmsg+0x972/0x9f0 [ 326.324796][T13850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.324832][T13850] ? import_iovec+0x73/0xa0 [ 326.324858][T13850] ___sys_sendmsg+0x2a5/0x360 [ 326.324893][T13850] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.324956][T13850] ? __fget_files+0x2a/0x420 [ 326.324973][T13850] ? __fget_files+0x3a0/0x420 [ 326.324999][T13850] __x64_sys_sendmsg+0x1bd/0x2a0 [ 326.325030][T13850] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.325068][T13850] ? __pfx_ksys_write+0x10/0x10 [ 326.325102][T13850] do_syscall_64+0x14d/0xf80 [ 326.325139][T13850] ? trace_irq_disable+0x3b/0x150 [ 326.325159][T13850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.325182][T13850] ? clear_bhb_loop+0x40/0x90 [ 326.325215][T13850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.325237][T13850] RIP: 0033:0x7fc05e39c819 [ 326.325258][T13850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.325276][T13850] RSP: 002b:00007fc05f338028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.325300][T13850] RAX: ffffffffffffffda RBX: 00007fc05e615fa0 RCX: 00007fc05e39c819 [ 326.325316][T13850] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 326.325329][T13850] RBP: 00007fc05f338090 R08: 0000000000000000 R09: 0000000000000000 [ 326.325343][T13850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.325355][T13850] R13: 00007fc05e616038 R14: 00007fc05e615fa0 R15: 00007ffdc25c0598 [ 326.325390][T13850] [ 326.898889][T13865] tipc: Enabled bearer , priority 0 [ 326.940927][T13865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2261'. [ 326.950294][T13865] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2261'. [ 326.950535][T13870] sctp: [Deprecated]: syz.1.2264 (pid 13870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.950535][T13870] Use struct sctp_sack_info instead [ 326.984137][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2263'. [ 326.995123][T13865] tipc: Resetting bearer [ 327.099929][T13877] netlink: 'syz.2.2265': attribute type 1 has an invalid length. [ 327.108057][T13877] netlink: 'syz.2.2265': attribute type 2 has an invalid length. [ 327.315557][T13881] bridge0: port 3(macsec1) entered blocking state [ 327.322563][T13881] bridge0: port 3(macsec1) entered disabled state [ 327.329485][T13881] macsec1: entered allmulticast mode [ 327.336919][T13881] bridge0: entered allmulticast mode [ 327.355639][T13881] macsec1: left allmulticast mode [ 327.370791][T13881] bridge0: left allmulticast mode [ 327.513678][T10218] net_ratelimit: 4 callbacks suppressed [ 327.513700][T10218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.570062][T13897] FAULT_INJECTION: forcing a failure. [ 327.570062][T13897] name failslab, interval 1, probability 0, space 0, times 0 [ 327.582877][T13897] CPU: 0 UID: 0 PID: 13897 Comm: syz.3.2271 Not tainted syzkaller #0 PREEMPT(full) [ 327.582909][T13897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 327.582924][T13897] Call Trace: [ 327.582934][T13897] [ 327.582943][T13897] dump_stack_lvl+0xe8/0x150 [ 327.582982][T13897] should_fail_ex+0x412/0x560 [ 327.583025][T13897] should_failslab+0xa8/0x100 [ 327.583055][T13897] ? dst_alloc+0x105/0x170 [ 327.583085][T13897] kmem_cache_alloc_noprof+0x87/0x650 [ 327.583117][T13897] ? __pfx_ip6_dst_gc+0x10/0x10 [ 327.583142][T13897] dst_alloc+0x105/0x170 [ 327.583171][T13897] ip6_pol_route+0xafb/0x13d0 [ 327.583197][T13897] ? ip6_pol_route+0x160/0x13d0 [ 327.583228][T13897] ? __pfx_ip6_pol_route+0x10/0x10 [ 327.583251][T13897] ? __lock_acquire+0x6b5/0x2cf0 [ 327.583300][T13897] fib6_rule_action+0x265/0xc00 [ 327.583333][T13897] ? __pfx_fib6_rule_action+0x10/0x10 [ 327.583361][T13897] ? kernel_text_address+0xa5/0xe0 [ 327.583389][T13897] ? __kernel_text_address+0xd/0x30 [ 327.583413][T13897] ? fib6_rule_match+0x79a/0xa80 [ 327.583435][T13897] ? __pfx_fib6_rule_action+0x10/0x10 [ 327.583462][T13897] fib_rules_lookup+0x768/0xea0 [ 327.583501][T13897] ? fib_rules_lookup+0x9b/0xea0 [ 327.583543][T13897] ? __pfx_fib_rules_lookup+0x10/0x10 [ 327.583575][T13897] ? l3mdev_update_flow+0x29/0x640 [ 327.583605][T13897] ? l3mdev_update_flow+0x4d1/0x640 [ 327.583632][T13897] ? l3mdev_update_flow+0x29/0x640 [ 327.583663][T13897] fib6_rule_lookup+0x1a0/0x730 [ 327.583689][T13897] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 327.583716][T13897] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 327.583746][T13897] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 327.583780][T13897] ? dev_get_by_index_rcu+0xf4/0x110 [ 327.583813][T13897] ip6_route_output_flags+0x364/0x5d0 [ 327.583841][T13897] ? ip6_route_output_flags+0x2e/0x5d0 [ 327.583871][T13897] ip6_dst_lookup_tail+0x1c3/0x15a0 [ 327.583909][T13897] ? format_decode+0x5a3/0xe10 [ 327.583947][T13897] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 327.583977][T13897] ? sk_dst_check+0x25/0x480 [ 327.584011][T13897] ? sk_dst_check+0x25/0x480 [ 327.584041][T13897] ? sk_dst_check+0x25/0x480 [ 327.584074][T13897] ? sk_dst_check+0x30e/0x480 [ 327.584107][T13897] ip6_sk_dst_lookup_flow+0x765/0xa20 [ 327.584139][T13897] ? udpv6_sendmsg+0x1864/0x25c0 [ 327.584171][T13897] udpv6_sendmsg+0x1a69/0x25c0 [ 327.584214][T13897] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 327.584239][T13897] ? udp_lib_get_port+0x177a/0x1c60 [ 327.584307][T13897] ? inet_send_prepare+0x1b9/0x270 [ 327.584342][T13897] ? inet_send_prepare+0x1b9/0x270 [ 327.584381][T13897] ? inet_send_prepare+0x1b9/0x270 [ 327.584413][T13897] ? __local_bh_enable_ip+0xd0/0x130 [ 327.584443][T13897] ? inet_send_prepare+0x1b9/0x270 [ 327.584481][T13897] ? inet6_sendmsg+0xe4/0x120 [ 327.584508][T13897] ____sys_sendmsg+0x5c7/0x9f0 [ 327.584553][T13897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.584598][T13897] ? import_iovec+0x73/0xa0 [ 327.584631][T13897] ___sys_sendmsg+0x2a5/0x360 [ 327.584672][T13897] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.584744][T13897] ? __fget_files+0x2a/0x420 [ 327.584764][T13897] ? __fget_files+0x3a0/0x420 [ 327.584795][T13897] __x64_sys_sendmsg+0x1bd/0x2a0 [ 327.584833][T13897] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 327.584877][T13897] ? __pfx_ksys_write+0x10/0x10 [ 327.584914][T13897] do_syscall_64+0x14d/0xf80 [ 327.584939][T13897] ? trace_irq_disable+0x3b/0x150 [ 327.584959][T13897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.584982][T13897] ? clear_bhb_loop+0x40/0x90 [ 327.585011][T13897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.585034][T13897] RIP: 0033:0x7ffaa459c819 [ 327.585056][T13897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.585082][T13897] RSP: 002b:00007ffaa53d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.585106][T13897] RAX: ffffffffffffffda RBX: 00007ffaa4815fa0 RCX: 00007ffaa459c819 [ 327.585123][T13897] RDX: 0000000000000000 RSI: 0000200000001400 RDI: 0000000000000003 [ 327.585138][T13897] RBP: 00007ffaa53d5090 R08: 0000000000000000 R09: 0000000000000000 [ 327.585152][T13897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.585165][T13897] R13: 00007ffaa4816038 R14: 00007ffaa4815fa0 R15: 00007ffe899db298 [ 327.585202][T13897] [ 328.014825][ T5948] tipc: Node number set to 3439591424 [ 328.020813][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.304802][T13913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2278'. [ 328.704676][T13941] sctp: [Deprecated]: syz.3.2284 (pid 13941) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.704676][T13941] Use struct sctp_sack_info instead [ 328.791596][T10217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.803293][T13939] ------------[ cut here ]------------ [ 328.808906][T13939] err [ 328.808934][T13939] WARNING: net/wireless/core.c:207 at cfg80211_switch_netns+0x58a/0x5b0, CPU#0: syz.4.2277/13939 [ 328.822637][T13939] Modules linked in: [ 328.826870][T13939] CPU: 0 UID: 0 PID: 13939 Comm: syz.4.2277 Not tainted syzkaller #0 PREEMPT(full) [ 328.836385][T13939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 328.846582][T13939] RIP: 0010:cfg80211_switch_netns+0x58a/0x5b0 [ 328.852803][T13939] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 c2 aa 36 f7 eb 82 e8 fb 58 cc f6 e9 63 fe ff ff e8 f1 58 cc f6 e9 59 fe ff ff e8 e7 58 cc f6 90 <0f> 0b 90 e9 7f fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fa [ 328.872642][T13939] RSP: 0018:ffffc900034373b8 EFLAGS: 00010283 [ 328.878782][T13939] RAX: ffffffff8af95709 RBX: ffff888052530de8 RCX: 0000000000080000 [ 328.886905][T13939] RDX: ffffc9001042a000 RSI: 000000000000632e RDI: 000000000000632f [ 328.895091][T13939] RBP: 00000000ffffffef R08: ffffffff9011d4b7 R09: 1ffffffff2023a96 [ 328.903189][T13939] R10: dffffc0000000000 R11: fffffbfff2023a97 R12: ffff888052530720 [ 328.911286][T13939] R13: ffff888026eb8620 R14: dffffc0000000000 R15: ffff888052530910 [ 328.919378][T13939] FS: 00007f5f87ff66c0(0000) GS:ffff888125447000(0000) knlGS:0000000000000000 [ 328.928452][T13939] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.935190][T13939] CR2: 00007ffaa45e9f00 CR3: 00000000477e8000 CR4: 00000000003526f0 [ 328.943286][T13939] Call Trace: [ 328.946629][T13939] [ 328.949618][T13939] nl80211_wiphy_netns+0x13e/0x3d0 [ 328.954869][T13939] genl_family_rcv_msg_doit+0x22a/0x330 [ 328.960496][T13939] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 328.966708][T13939] ? bpf_lsm_capable+0x9/0x20 [ 328.971956][T13939] ? security_capable+0x7e/0x2c0 [ 328.976993][T13939] genl_rcv_msg+0x61c/0x7a0 [ 328.981628][T13939] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.986749][T13939] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 328.992313][T13939] ? __pfx_nl80211_wiphy_netns+0x10/0x10 [ 328.998024][T13939] ? __pfx_nl80211_post_doit+0x10/0x10 [ 329.003652][T13939] netlink_rcv_skb+0x232/0x4b0 [ 329.008487][T13939] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.013654][T13939] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.019039][T13939] ? down_read+0x272/0x2e0 [ 329.023716][T13939] ? genl_rcv+0xd/0x40 [ 329.027848][T13939] genl_rcv+0x28/0x40 [ 329.032070][T13939] netlink_unicast+0x75c/0x8e0 [ 329.036914][T13939] netlink_sendmsg+0x813/0xb40 [ 329.041837][T13939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.047190][T13939] ? aa_sock_msg_perm+0xf1/0x1b0 [ 329.052267][T13939] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.057673][T13939] ____sys_sendmsg+0x972/0x9f0 [ 329.062576][T13939] ? futex_unqueue+0x211/0x240 [ 329.067410][T13939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.073331][T13939] ? import_iovec+0x73/0xa0 [ 329.077911][T13939] ___sys_sendmsg+0x2a5/0x360 [ 329.082845][T13939] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.088230][T13939] ? futex_wait+0x29a/0x380 [ 329.093127][T13939] ? __fget_files+0x2a/0x420 [ 329.097775][T13939] ? __fget_files+0x3a0/0x420 [ 329.102675][T13939] __x64_sys_sendmsg+0x1bd/0x2a0 [ 329.107690][T13939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.113584][T13939] ? rcu_is_watching+0x15/0xb0 [ 329.118496][T13939] do_syscall_64+0x14d/0xf80 [ 329.123297][T13939] ? trace_irq_disable+0x3b/0x150 [ 329.128387][T13939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.134625][T13939] ? clear_bhb_loop+0x40/0x90 [ 329.139376][T13939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.145443][T13939] RIP: 0033:0x7f5f89d9c819 [ 329.149916][T13939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.169687][T13939] RSP: 002b:00007f5f87ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.178273][T13939] RAX: ffffffffffffffda RBX: 00007f5f8a016180 RCX: 00007f5f89d9c819 [ 329.186401][T13939] RDX: 00000000000000c0 RSI: 0000200000000040 RDI: 0000000000000005 [ 329.194498][T13939] RBP: 00007f5f89e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 329.202632][T13939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.210713][T13939] R13: 00007f5f8a016218 R14: 00007f5f8a016180 R15: 00007fff633e8768 [ 329.218778][T13939] [ 329.221958][T13939] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 329.229425][T13939] CPU: 0 UID: 0 PID: 13939 Comm: syz.4.2277 Not tainted syzkaller #0 PREEMPT(full) [ 329.238979][T13939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 329.249091][T13939] Call Trace: [ 329.252512][T13939] [ 329.255485][T13939] vpanic+0x56c/0xa60 [ 329.259567][T13939] ? __pfx__printk+0x10/0x10 [ 329.264254][T13939] ? __pfx_vpanic+0x10/0x10 [ 329.268833][T13939] ? is_bpf_text_address+0x292/0x2b0 [ 329.274183][T13939] ? is_bpf_text_address+0x26/0x2b0 [ 329.279453][T13939] panic+0xc5/0xd0 [ 329.283239][T13939] ? __pfx_panic+0x10/0x10 [ 329.287752][T13939] __warn+0x315/0x4f0 [ 329.291789][T13939] ? cfg80211_switch_netns+0x58a/0x5b0 [ 329.297303][T13939] ? cfg80211_switch_netns+0x58a/0x5b0 [ 329.302802][T13939] __report_bug+0x29a/0x540 [ 329.307345][T13939] ? cfg80211_switch_netns+0x58a/0x5b0 [ 329.312826][T13939] ? __pfx___report_bug+0x10/0x10 [ 329.317892][T13939] ? cfg80211_switch_netns+0x58a/0x5b0 [ 329.323380][T13939] report_bug+0x16a/0x220 [ 329.327740][T13939] ? cfg80211_switch_netns+0x58a/0x5b0 [ 329.333229][T13939] ? cfg80211_switch_netns+0x58c/0x5b0 [ 329.338810][T13939] handle_bug+0x9c/0x200 [ 329.343085][T13939] exc_invalid_op+0x1a/0x50 [ 329.347625][T13939] asm_exc_invalid_op+0x1a/0x20 [ 329.352507][T13939] RIP: 0010:cfg80211_switch_netns+0x58a/0x5b0 [ 329.358631][T13939] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 c2 aa 36 f7 eb 82 e8 fb 58 cc f6 e9 63 fe ff ff e8 f1 58 cc f6 e9 59 fe ff ff e8 e7 58 cc f6 90 <0f> 0b 90 e9 7f fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fa [ 329.378364][T13939] RSP: 0018:ffffc900034373b8 EFLAGS: 00010283 [ 329.384481][T13939] RAX: ffffffff8af95709 RBX: ffff888052530de8 RCX: 0000000000080000 [ 329.392494][T13939] RDX: ffffc9001042a000 RSI: 000000000000632e RDI: 000000000000632f [ 329.400506][T13939] RBP: 00000000ffffffef R08: ffffffff9011d4b7 R09: 1ffffffff2023a96 [ 329.408504][T13939] R10: dffffc0000000000 R11: fffffbfff2023a97 R12: ffff888052530720 [ 329.416593][T13939] R13: ffff888026eb8620 R14: dffffc0000000000 R15: ffff888052530910 [ 329.424607][T13939] ? cfg80211_switch_netns+0x589/0x5b0 [ 329.430127][T13939] ? cfg80211_switch_netns+0x589/0x5b0 [ 329.435646][T13939] nl80211_wiphy_netns+0x13e/0x3d0 [ 329.440811][T13939] genl_family_rcv_msg_doit+0x22a/0x330 [ 329.446394][T13939] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 329.452503][T13939] ? bpf_lsm_capable+0x9/0x20 [ 329.457223][T13939] ? security_capable+0x7e/0x2c0 [ 329.462221][T13939] genl_rcv_msg+0x61c/0x7a0 [ 329.466768][T13939] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.471826][T13939] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 329.477237][T13939] ? __pfx_nl80211_wiphy_netns+0x10/0x10 [ 329.482998][T13939] ? __pfx_nl80211_post_doit+0x10/0x10 [ 329.488511][T13939] netlink_rcv_skb+0x232/0x4b0 [ 329.493316][T13939] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.498370][T13939] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.503709][T13939] ? down_read+0x272/0x2e0 [ 329.508156][T13939] ? genl_rcv+0xd/0x40 [ 329.512258][T13939] genl_rcv+0x28/0x40 [ 329.516270][T13939] netlink_unicast+0x75c/0x8e0 [ 329.521073][T13939] netlink_sendmsg+0x813/0xb40 [ 329.525894][T13939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.531230][T13939] ? aa_sock_msg_perm+0xf1/0x1b0 [ 329.536197][T13939] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.541602][T13939] ____sys_sendmsg+0x972/0x9f0 [ 329.546398][T13939] ? futex_unqueue+0x211/0x240 [ 329.551197][T13939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.556538][T13939] ? import_iovec+0x73/0xa0 [ 329.561082][T13939] ___sys_sendmsg+0x2a5/0x360 [ 329.565809][T13939] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.571067][T13939] ? futex_wait+0x29a/0x380 [ 329.575634][T13939] ? __fget_files+0x2a/0x420 [ 329.580336][T13939] ? __fget_files+0x3a0/0x420 [ 329.585062][T13939] __x64_sys_sendmsg+0x1bd/0x2a0 [ 329.590047][T13939] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.595550][T13939] ? rcu_is_watching+0x15/0xb0 [ 329.600388][T13939] do_syscall_64+0x14d/0xf80 [ 329.605021][T13939] ? trace_irq_disable+0x3b/0x150 [ 329.610071][T13939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.616177][T13939] ? clear_bhb_loop+0x40/0x90 [ 329.620896][T13939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.626813][T13939] RIP: 0033:0x7f5f89d9c819 [ 329.631259][T13939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.650898][T13939] RSP: 002b:00007f5f87ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.659433][T13939] RAX: ffffffffffffffda RBX: 00007f5f8a016180 RCX: 00007f5f89d9c819 [ 329.667436][T13939] RDX: 00000000000000c0 RSI: 0000200000000040 RDI: 0000000000000005 [ 329.675434][T13939] RBP: 00007f5f89e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 329.683436][T13939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.691440][T13939] R13: 00007f5f8a016218 R14: 00007f5f8a016180 R15: 00007fff633e8768 [ 329.699462][T13939] [ 329.703119][T13939] Kernel Offset: disabled [ 329.707478][T13939] Rebooting in 86400 seconds..