last executing test programs: 7.459754846s ago: executing program 2 (id=2611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x0) (fail_nth: 7) 6.786564734s ago: executing program 2 (id=2616): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0}, &(0x7f0000000080)=0x60) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000000c0)={0xff, {0x36, 0x80000001, 0x3, 0x5, 0x8}}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000140)=0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x67aa, 0x7, [0x0, 0x8, 0x0, 0xfffa, 0x5, 0x5, 0x2]}, 0x16) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f00000001c0)={0x7f, 0xfffffffffffffffd, 0x0, 0x9, 0x2, [0x0, 0x0, 0xfffffff8, 0xffff]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x17, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa77}, [@map_fd={0x18, 0x7, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0xc, 0x7, 0x0, 0xffffffffffffffc0}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9fe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x1, 0x0, 0x2, 0x3, 0x5, 0x4, 0x4}]}, &(0x7f0000000380)='GPL\x00', 0x3ac, 0x82, &(0x7f00000003c0)=""/130, 0x41100, 0x11, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[r0, r2, r3, r2, r3], &(0x7f00000004c0)=[{0x3, 0x2, 0x9, 0x2}, {0x2, 0x1, 0xb, 0x4}, {0x3, 0x5, 0x2}, {0x5, 0x3, 0x5, 0x2}], 0x10, 0xffff}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f00000005c0)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r3) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000bc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000680)={0x4e0, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xa}, @ETHTOOL_A_LINKMODES_OURS={0x170, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0x2e, 0x5, "cae0857853491699e246ced08539b6dc3fceb5f6e9a9a710d0d9a1791f2a58368a567919ebc0962035e3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\]{@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/\a-{![+}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_OURS={0x338, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xaa, 0x4, "f2b34c612335d0e29878a91355a073089221c0eb23cbc8be49a2471767a26b2269a98988627c963665e31077698d5b255d5b95f5818a760dd1fb1e94e6c1c35e46ac6ce58d8f43302ee0e02853fdd7b2213ef3d58e4e2ebb30da169628a9880c9dd88057be1c30c77c580b5962a7a9059f67232cdffc7b45c0a7fd2726790070b41821e64651661672c617c2769303edd438a1e9df5f21040545558777936ed22368d75a4a79"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0x39, 0x4, "f7620c59779ef41684628dbb662116baada0b5adf9d3a69840347cae413edcc37d6a0e8493e4b29b69e95e5443d258bf49d775d9e0"}, @ETHTOOL_A_BITSET_MASK={0xfc, 0x5, "c05591ba995820d6886cf191ff85a1bbd3cdf5551df84c70fca41836b8867e4176ed60bd0db32764c32ec46f30f34a9e05122c6f3710709f1d0efd42dca49e264b2a44e097561612b5dfa97d518d71955dfb816b4db2b074a8f5b1e6f70e5e56e239c81756432506a1f9f476fe072c62edb9cb2b3bae8f78bdc476d7cfb57035bb479c786fee6f76385c5ea6f2f28116146938db0a5b0092ac7bdccc1e86e2e2ccab5b938e5de79fb0d26b4f0c91fbf7804e092bb2bf176a233500c2b098f1ffa1592ca3c896eafa70aa572e018a34ef77313c0c23d2a840a4668c65a7cede5e32d3ad1084f133016540ea28abe111684c95b021521d49e1"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0xa2, 0x5, "a4b9037403a82a53ce2acdf5c8a34b256902a26fa960f00a89784a71363d9cd26fc534f7d596e09e133fde84edbddb1e7eec9fa85d9d0121d9ee5c76425a22d02930032620d5f7f8ff0d7fd8966a7385bfed61f01f6cf1563cfb828ab70261b78656675c4112092cde40ee5ae2dc6df6b62d98c2b9e09acacfeaab8f01e393de1ab1e1664dfe394b4ca69b9e5714e2fd4994d494f254287c688fe71087cd"}]}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x5}, 0x4084) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000d00)={&(0x7f0000000c00), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r8, 0x400, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x9, 0x8, 0xe42, 0x6d}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20008881) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d80), r3) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x60, r9, 0x218, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x10}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f00), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x48, r11, 0x800, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000001040)=0x1f70, 0x4) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000010c0), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x4c, r12, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x10000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000001240)={0x7, 0xfcf, 0x3, 0xffff, 0x0, 0x3}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0x94, r14, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) r16 = syz_genetlink_get_family_id$nfc(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x2c, r16, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f00000015c0)=0x8fcc, 0x4) 6.755134196s ago: executing program 2 (id=2617): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0x7, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000014c0)=[@in6={0xa, 0x4e24, 0xb, @empty, 0xd1d}, @in6={0xa, 0x4e23, 0x7ff, @empty, 0x7}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x4e22, @loopback}], 0x78) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001640)={0xffffffffffffffff, &(0x7f0000001540)="c34ae3634bdf7d0da6290b7935a852cb636d845cd851364aaf97d8ffb03c4d467f5d067d0c394b21d8a6a0f26f77de5493c5b8dbea54cd11371bfa11fde2e134", &(0x7f0000001580)=""/173}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x0, 0x1e0, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIOCLEX(r4, 0x40049409) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000fc00"/32, @ANYRES32=0x0, @ANYBLOB="78b5f7f2"], 0x28}, 0x40) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000120001ca00000000000000001c0000000c00370000000000000000000c0029", @ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="fb4302205fe80fef5e01a40f25f0a5"], 0x2c}], 0x1}, 0x0) 5.546922225s ago: executing program 2 (id=2620): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) close(0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) getsockopt(0xffffffffffffffff, 0x101, 0x4, 0x0, &(0x7f0000000540)) r3 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000085be6ab2e543af8300020000000000000040000000"], 0x0, 0x9, 0xc5, &(0x7f00000002c0)=""/197, 0x0, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x51) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040800) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x1ff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000380)='syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote, @dev={0xfe, 0x80, '\x00', 0x25}, 0x2000000, 0x0, 0x7d, 0x600, 0x2, 0x970310}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r0, 0x0) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_int(r8, 0x0, 0x31, &(0x7f0000000000)=0x5, 0x4) 3.485977163s ago: executing program 2 (id=2634): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10) 3.408449078s ago: executing program 2 (id=2637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x10001, 0x0, 0xfffffffffffffffa, 0x8000, 0x7, 0x7fff, 0x8}, 0x0, 0x0, &(0x7f00000002c0), &(0x7f00000003c0)={&(0x7f0000000300)={[0x4]}, 0x8}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c"], 0xfc}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(0xffffffffffffffff, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442f2ffe8000000000000000000000000000aaff020000000000000000000000000001000000be000000030c00080005008640"], 0xfdef) 1.444186516s ago: executing program 1 (id=2657): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_eeprom={0x43, 0x2, 0x6}}) unshare(0x6020400) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r1, 0x1, 0x27, &(0x7f0000000080)=""/45, &(0x7f0000000180)=0x2d) 1.300600076s ago: executing program 1 (id=2660): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 1.148607458s ago: executing program 1 (id=2662): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000020008000100030000000500020003000000050002"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r3, 0x325}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x70}, 0x1, 0x0, 0x0, 0x10004}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r6, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x2, 0x328, 0x140, 0xa8, 0xfeffffff, 0x140, 0x1e8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @local}}}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={0x1, @bcast, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x101, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) unshare(0x22020600) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r9, 0xffffffffffffffff, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) 1.094955441s ago: executing program 3 (id=2663): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40) sendmsg$nl_route(r0, 0x0, 0x28044031) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r2], 0x38}}, 0x10) 1.07901017s ago: executing program 4 (id=2664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r2, &(0x7f0000002cc0), 0x0, 0x20) write$tun(r1, &(0x7f0000000340)=ANY=[], 0xfdef) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xf, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bf0000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) 1.002980053s ago: executing program 1 (id=2665): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in=@local, @in6=@local, 0x0, 0x3, 0x0, 0x0, 0x11, 0x2}, {@in6=@mcast1, @in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x3c, 0x4}]}]}, 0xec}}, 0x0) close(r3) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d0aff8d00"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xf9}, 0x90) 936.834059ms ago: executing program 3 (id=2666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008800) 900.376111ms ago: executing program 0 (id=2667): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x4) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000440), 0x4) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x1000001, 0x12, r1, 0x4c2c3000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x1fefe000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010014003800018006000100020000000800050000"], 0x4c}}, 0x0) 771.432952ms ago: executing program 0 (id=2668): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x20014880) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newtaction={0x60, 0x30, 0x48b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x9, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x68, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x100, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0xa0, 0xf, [@mic={0x8c, 0x18, {0xbdb, "773884b5a245", @long="0b41842da3f85c8aee3a74ebdcdbde43"}}, @tim={0x5, 0x6c, {0x2, 0xc3, 0xe, "4a1223307d1807090fd1702d25c92284f1d1091b8f21bacec51362acfa9f2104ac834dceb6edb5932eda6f76484c3e93bc60dedd44179dd59b2499735f1884348230a6cfaf2344d21b81eed38cc562ea6bc4923f440d20b7c3c1091af9108e47adcd1af5502c47cf69"}}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x100}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001480)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10000000, 0x16}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x9, 0x5, 0x9, 0x0, 0x3ff]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, [{0x60}, {}, {0xc}, {0x28, 0x1}, {0x60}, {0x48}, {0x1, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = accept$alg(r3, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmmsg$alg(r6, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="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", 0x17b}, {&(0x7f0000000a80)="9f1ac09f155c1291fc8baa01adb9b575260400877ef8644bccc1353c6da6123e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9d0800823bc89a7cc268e91fff7160c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7", 0xb5}, {&(0x7f00000012c0)="8e39308f7428bb361aa0e207e2191e9248da9eac174411869ef60059a981c6a11223cca963f4b365a2419adcb920c2a14965defd6186c5bfc157b6c1c219985ea4badc7bf93f3c939e452c503f86abee100fd05e2367155747876bd524b58bf60f115d5ac1d8bcd3dc85840f8ee47f46c74a4d11f53e68baa8de704b0d9b419407f8ddf3ec6b5dffa0d41dea9381328cacda24d9a3abd058062ad7ad510b02816e20128a7dedd60e86cb5e679599faad3d09e770721f2d5db2e56b1e0972c331f365076d7bdeff03a3ca3f9926227c5a8cd0a43538d37240503464cea7ad56fcdd32a12249d89d50685ff6742a95f669b780b80cfb70e90dee859d9ba7cf3485464ec7c3caefd5c605e66a3d78b6009a7ff6a92ae0fb552ea843c28f734ffa9d9c09cf3880d8c2fb2d69c43a2f226b8254", 0x131}], 0x3, 0x0, 0x0, 0x44000}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000000c0)=""/209, 0x3c, 0xd1, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffff66e2, 0x10000}, 0x28) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 730.65254ms ago: executing program 4 (id=2669): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x20014880) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newtaction={0x60, 0x30, 0x48b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x9, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x68, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x100, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0xa0, 0xf, [@mic={0x8c, 0x18, {0xbdb, "773884b5a245", @long="0b41842da3f85c8aee3a74ebdcdbde43"}}, @tim={0x5, 0x6c, {0x2, 0xc3, 0xe, "4a1223307d1807090fd1702d25c92284f1d1091b8f21bacec51362acfa9f2104ac834dceb6edb5932eda6f76484c3e93bc60dedd44179dd59b2499735f1884348230a6cfaf2344d21b81eed38cc562ea6bc4923f440d20b7c3c1091af9108e47adcd1af5502c47cf69"}}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x100}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001480)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10000000, 0x16}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x9, 0x5, 0x9, 0x0, 0x3ff]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, [{0x60}, {}, {0xc}, {0x28, 0x1}, {0x60}, {0x48}, {0x1, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = accept$alg(r3, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmmsg$alg(r6, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="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", 0x17b}, {&(0x7f0000000a80)="9f1ac09f155c1291fc8baa01adb9b575260400877ef8644bccc1353c6da6123e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9d0800823bc89a7cc268e91fff7160c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7", 0xb5}, {&(0x7f00000012c0)="8e39308f7428bb361aa0e207e2191e9248da9eac174411869ef60059a981c6a11223cca963f4b365a2419adcb920c2a14965defd6186c5bfc157b6c1c219985ea4badc7bf93f3c939e452c503f86abee100fd05e2367155747876bd524b58bf60f115d5ac1d8bcd3dc85840f8ee47f46c74a4d11f53e68baa8de704b0d9b419407f8ddf3ec6b5dffa0d41dea9381328cacda24d9a3abd058062ad7ad510b02816e20128a7dedd60e86cb5e679599faad3d09e770721f2d5db2e56b1e0972c331f365076d7bdeff03a3ca3f9926227c5a8cd0a43538d37240503464cea7ad56fcdd32a12249d89d50685ff6742a95f669b780b80cfb70e90dee859d9ba7cf3485464ec7c3caefd5c605e66a3d78b6009a7ff6a92ae0fb552ea843c28f734ffa9d9c09cf3880d8c2fb2d69c43a2f226b8254", 0x131}], 0x3, 0x0, 0x0, 0x44000}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000000c0)=""/209, 0x3c, 0xd1, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffff66e2, 0x10000}, 0x28) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 724.329189ms ago: executing program 0 (id=2670): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_eeprom={0x43, 0x2, 0x6}}) unshare(0x6020400) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r1, 0x1, 0x27, &(0x7f0000000080)=""/45, &(0x7f0000000180)=0x2d) 662.571588ms ago: executing program 1 (id=2671): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_eeprom={0x43, 0x2, 0x6}}) unshare(0x6020400) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r1, 0x1, 0x27, &(0x7f0000000080)=""/45, &(0x7f0000000180)=0x2d) 661.619019ms ago: executing program 3 (id=2672): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 588.726585ms ago: executing program 4 (id=2673): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x25, 0x1, 0x1) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (fail_nth: 59) 551.701321ms ago: executing program 0 (id=2674): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000fee000)=0x3fa, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0xa, 0x2, 0x6, 0x10, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x7800, 0x2b}}) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {}, [@FRA_FLOW={0x8}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000002c0)=""/132, 0x84, 0x0, &(0x7f0000000380)=""/88, 0x58}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300ff010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r8 = accept(0xffffffffffffffff, &(0x7f0000000540)=@generic, &(0x7f00000005c0)=0x80) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x7, &(0x7f00000006c0)=@raw=[@tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}], &(0x7f00000007c0)='GPL\x00', 0x72e0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x17, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x5, 0x4, 0x7f, 0x6}, 0x10, 0x9b36, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000880)={0x3c, r9, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) setsockopt(r2, 0xe8ab, 0xa185, &(0x7f0000000740)="7b577bdfcaecdbdb7135970b72c5766f7acac843a6d80174edc81fd69795b9b3f08201ab2e8949d8dcee90adb2c7b876e5b95be5a08d84d2615fc3068a0c88e1906d60e04d8b3ff0f7f3b9f1dfdb90f79b2a32d46d2b2340", 0x58) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00'}, 0x18) pipe(&(0x7f00000002c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xfffffffa, 0xd, 0x1, 0x100, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x5}, 0x50) unshare(0x20000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) 550.809662ms ago: executing program 3 (id=2675): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000020008000100030000000500020003000000050002"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r3, 0x325}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x70}, 0x1, 0x0, 0x0, 0x10004}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r6, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x2, 0x328, 0x140, 0xa8, 0xfeffffff, 0x140, 0x1e8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @local}}}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={0x1, @bcast, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x101, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) unshare(0x22020600) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r9, 0xffffffffffffffff, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) 542.906611ms ago: executing program 1 (id=2676): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffffe}}}}, [@chandef_params]}, 0x28}, 0x1, 0x0, 0x0, 0xc804}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r6) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r7, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r10, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}], 0x1) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x78, r11, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x10, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x3, 0x8}}, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x40}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x240000c4) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r13, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4d014) r14 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r14, 0x800442d3, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x17}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xa}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 387.809832ms ago: executing program 0 (id=2677): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x51}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x45, 0xfffffffe, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x84e4, @remote, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000001b40), 0x0, 0x24048040) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 232.556356ms ago: executing program 4 (id=2678): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB], 0x144}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xffffffff}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x2b3}]}}]}, 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r2, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f", 0xb7}, {&(0x7f0000001400)="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", 0xebb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fd", 0xaf}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 155.859992ms ago: executing program 3 (id=2679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r2, &(0x7f0000002cc0), 0x0, 0x20) write$tun(r1, &(0x7f0000000340)=ANY=[], 0xfdef) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xf, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bf000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) 103.411314ms ago: executing program 4 (id=2680): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x20014880) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newtaction={0x60, 0x30, 0x48b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x9, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x68, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x100, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0xa0, 0xf, [@mic={0x8c, 0x18, {0xbdb, "773884b5a245", @long="0b41842da3f85c8aee3a74ebdcdbde43"}}, @tim={0x5, 0x6c, {0x2, 0xc3, 0xe, "4a1223307d1807090fd1702d25c92284f1d1091b8f21bacec51362acfa9f2104ac834dceb6edb5932eda6f76484c3e93bc60dedd44179dd59b2499735f1884348230a6cfaf2344d21b81eed38cc562ea6bc4923f440d20b7c3c1091af9108e47adcd1af5502c47cf69"}}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x100}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000001480)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10000000, 0x16}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x9, 0x5, 0x9, 0x0, 0x3ff]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, [{0x60}, {}, {0xc}, {0x28, 0x1}, {0x60}, {0x48}, {0x1, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = accept$alg(r3, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmmsg$alg(r6, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="c16a22213bc73b5c37696b90ad0f0000004193fc04574d3ca94f95bdef8a6701633b8bd1cfecb4c0bbc0c62d3e3b7d4578bd360ea718afacbfd6c7559a0363ec0d3e901cf5eb094e044c36a7e312576131d3c2de4c159d29ab0c76798f3c75cf5d68d137fe86e1d0b8baa2f8d1b3c6f655cc668f8e164b1d89f4fe898cad99f500a0eedd85d90fb3afcbcc4468ce6684df82010000000000000075d0f7bedf3104a2dd27723e23aa1627b6e1dbfdeb89d42bcaddb41d301768f9f3a3dd3e8f9e199dfbaf050d98cec2903f478cb38eb1a7fbdc2d28d3ebb00609f68e2fe5ba9f341ea7e8f5d921c1a4c381c27c6011c70809268ceebd1a4a7fb4180f9384d6ef7d1c34d887a89696085a56021255997f8d03ba220eb2551d116a1fb5303f0d7d8511a80bd640d246cf94863ccd9371c0bf0a8d1a80f376300eb6b76dc0ac20adedb06f5b6022f19fa486c3cf6abfd3adf2317feb34385c3903f742c374e0d59e98a3ea7da582cbce8192a22098a87f1c9638fbd8a8cd0d4ec8044f", 0x17b}, {&(0x7f0000000a80)="9f1ac09f155c1291fc8baa01adb9b575260400877ef8644bccc1353c6da6123e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9d0800823bc89a7cc268e91fff7160c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7", 0xb5}, {&(0x7f00000012c0)="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", 0x131}], 0x3, 0x0, 0x0, 0x44000}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000000c0)=""/209, 0x3c, 0xd1, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffff66e2, 0x10000}, 0x28) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 92.499275ms ago: executing program 0 (id=2681): unshare(0x40000600) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 30.2275ms ago: executing program 4 (id=2682): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x140f, 0x20, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800001, 0x110, r1, 0x55e82000) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xfffd, 'syz1\x00', @default, 0xfffffdb6, 0x5, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x40000) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) bind$inet6(r5, &(0x7f0000002d40)={0xa, 0x4e23, 0x1, @private0, 0x6}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xfd}, [@RTA_DST={0x8}, @RTA_SRC={0x8, 0x2, @rand_addr=0x640100fd}]}, 0x2c}}, 0x20000050) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x4}]}, 0x3c}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x1, @bcast, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x101, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xc5}, 0x0, {[0x80000000, 0x3, 0x7fff, 0x57, 0x1, 0x1, 0xffffffff, 0x7f]}}, 0x5c) 0s ago: executing program 3 (id=2683): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000c30000000001000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f00000017c0)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xd4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1000000000000162, 0x1) kernel console output (not intermixed with test programs): 073562][T11874] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.358577][T11874] dummy0: left allmulticast mode [ 276.398378][T11894] team0: Device gtp0 is of different type [ 276.447583][ T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.458352][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.473767][ T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.497197][T11896] netlink: 'syz.0.1821': attribute type 1 has an invalid length. [ 276.507002][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.524126][T11896] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1821'. [ 276.546994][T11896] NCSI netlink: No device for ifindex 0 [ 276.555627][ T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.579694][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.591956][ T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.607751][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.722418][T11905] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1824'. [ 276.887542][T11905] lo speed is unknown, defaulting to 1000 [ 277.159558][T11927] FAULT_INJECTION: forcing a failure. [ 277.159558][T11927] name failslab, interval 1, probability 0, space 0, times 0 [ 277.173055][T11927] CPU: 0 UID: 0 PID: 11927 Comm: syz.0.1832 Not tainted syzkaller #0 PREEMPT(full) [ 277.173080][T11927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.173091][T11927] Call Trace: [ 277.173099][T11927] [ 277.173108][T11927] dump_stack_lvl+0x189/0x250 [ 277.173135][T11927] ? __pfx____ratelimit+0x10/0x10 [ 277.173165][T11927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.173187][T11927] ? __pfx__printk+0x10/0x10 [ 277.173212][T11927] ? __pfx___might_resched+0x10/0x10 [ 277.173230][T11927] ? fs_reclaim_acquire+0x7d/0x100 [ 277.173253][T11927] should_fail_ex+0x414/0x560 [ 277.173283][T11927] should_failslab+0xa8/0x100 [ 277.173303][T11927] kmem_cache_alloc_node_noprof+0x77/0x710 [ 277.173325][T11927] ? ref_tracker_free+0x4dd/0x7d0 [ 277.173341][T11927] ? __alloc_skb+0x112/0x2d0 [ 277.173366][T11927] __alloc_skb+0x112/0x2d0 [ 277.173388][T11927] netlink_dump+0x1b7/0xe90 [ 277.173405][T11927] ? ethnl_default_start+0x1ef/0x3f0 [ 277.173424][T11927] ? genl_start+0x4c3/0x6c0 [ 277.173442][T11927] ? __netlink_dump_start+0x469/0x7e0 [ 277.173458][T11927] ? genl_rcv_msg+0x5da/0x790 [ 277.173478][T11927] ? netlink_rcv_skb+0x208/0x470 [ 277.173493][T11927] ? genl_rcv+0x28/0x40 [ 277.173512][T11927] ? netlink_unicast+0x82f/0x9e0 [ 277.173533][T11927] ? netlink_sendmsg+0x805/0xb30 [ 277.173550][T11927] ? __sock_sendmsg+0x21c/0x270 [ 277.173570][T11927] ? ____sys_sendmsg+0x505/0x830 [ 277.173586][T11927] ? ___sys_sendmsg+0x21f/0x2a0 [ 277.173604][T11927] ? do_syscall_64+0xfa/0xfa0 [ 277.173620][T11927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.173639][T11927] ? __pfx_netlink_dump+0x10/0x10 [ 277.173659][T11927] ? ethnl_default_parse+0x181/0x290 [ 277.173694][T11927] ? genl_start+0x581/0x6c0 [ 277.173724][T11927] __netlink_dump_start+0x5cb/0x7e0 [ 277.173751][T11927] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 277.173778][T11927] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 277.173800][T11927] ? genl_get_cmd+0x67f/0x910 [ 277.173827][T11927] ? __pfx_genl_start+0x10/0x10 [ 277.173846][T11927] ? __pfx_genl_dumpit+0x10/0x10 [ 277.173866][T11927] ? __pfx_genl_done+0x10/0x10 [ 277.173893][T11927] ? stack_trace_save+0x9c/0xe0 [ 277.173922][T11927] genl_rcv_msg+0x5da/0x790 [ 277.173951][T11927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.173972][T11927] ? __pfx_ethnl_default_start+0x10/0x10 [ 277.173990][T11927] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 277.174008][T11927] ? __pfx_ethnl_default_done+0x10/0x10 [ 277.174049][T11927] netlink_rcv_skb+0x208/0x470 [ 277.174066][T11927] ? __lock_acquire+0xab9/0xd20 [ 277.174084][T11927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 277.174106][T11927] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 277.174143][T11927] ? down_read+0x1ad/0x2e0 [ 277.174165][T11927] genl_rcv+0x28/0x40 [ 277.174185][T11927] netlink_unicast+0x82f/0x9e0 [ 277.174220][T11927] ? __pfx_netlink_unicast+0x10/0x10 [ 277.174247][T11927] ? netlink_sendmsg+0x642/0xb30 [ 277.174263][T11927] ? skb_put+0x11b/0x210 [ 277.174285][T11927] netlink_sendmsg+0x805/0xb30 [ 277.174314][T11927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.174337][T11927] ? aa_sock_msg_perm+0xf1/0x1d0 [ 277.174363][T11927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.174381][T11927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.174401][T11927] __sock_sendmsg+0x21c/0x270 [ 277.174428][T11927] ____sys_sendmsg+0x505/0x830 [ 277.174454][T11927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.174484][T11927] ? import_iovec+0x74/0xa0 [ 277.174509][T11927] ___sys_sendmsg+0x21f/0x2a0 [ 277.174532][T11927] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.174591][T11927] ? __fget_files+0x2a/0x420 [ 277.174606][T11927] ? __fget_files+0x3a0/0x420 [ 277.174634][T11927] __x64_sys_sendmsg+0x19b/0x260 [ 277.174657][T11927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.174688][T11927] ? __pfx_ksys_write+0x10/0x10 [ 277.174716][T11927] ? do_syscall_64+0xbe/0xfa0 [ 277.174737][T11927] do_syscall_64+0xfa/0xfa0 [ 277.174752][T11927] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.174769][T11927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.174786][T11927] ? clear_bhb_loop+0x60/0xb0 [ 277.174807][T11927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.174824][T11927] RIP: 0033:0x7f10f7d8f6c9 [ 277.174841][T11927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.174855][T11927] RSP: 002b:00007f10f8c73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.174875][T11927] RAX: ffffffffffffffda RBX: 00007f10f7fe5fa0 RCX: 00007f10f7d8f6c9 [ 277.174888][T11927] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 277.174899][T11927] RBP: 00007f10f8c73090 R08: 0000000000000000 R09: 0000000000000000 [ 277.174909][T11927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.174920][T11927] R13: 00007f10f7fe6038 R14: 00007f10f7fe5fa0 R15: 00007ffc509b11f8 [ 277.174952][T11927] [ 277.734450][T11931] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 277.951276][T11936] team0: entered promiscuous mode [ 277.956490][T11936] team_slave_0: entered promiscuous mode [ 277.962396][T11936] team_slave_1: entered promiscuous mode [ 278.139104][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1838'. [ 278.633080][T11969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1847'. [ 278.642333][T11969] tc_dump_action: action bad kind [ 278.675345][T11967] lo speed is unknown, defaulting to 1000 [ 279.145841][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1852'. [ 279.167252][T11986] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 279.342439][T11988] FAULT_INJECTION: forcing a failure. [ 279.342439][T11988] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 279.356764][T11988] CPU: 1 UID: 0 PID: 11988 Comm: syz.0.1853 Not tainted syzkaller #0 PREEMPT(full) [ 279.356787][T11988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.356798][T11988] Call Trace: [ 279.356805][T11988] [ 279.356812][T11988] dump_stack_lvl+0x189/0x250 [ 279.356839][T11988] ? __pfx____ratelimit+0x10/0x10 [ 279.356872][T11988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.356893][T11988] ? __pfx__printk+0x10/0x10 [ 279.356914][T11988] ? fs_reclaim_acquire+0x7d/0x100 [ 279.356940][T11988] should_fail_ex+0x414/0x560 [ 279.356970][T11988] prepare_alloc_pages+0x213/0x610 [ 279.356996][T11988] __alloc_frozen_pages_noprof+0x123/0x370 [ 279.357018][T11988] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 279.357047][T11988] ? policy_nodemask+0x27c/0x720 [ 279.357062][T11988] ? __lock_acquire+0xab9/0xd20 [ 279.357085][T11988] alloc_pages_mpol+0x232/0x4a0 [ 279.357107][T11988] vma_alloc_folio_noprof+0xe4/0x200 [ 279.357125][T11988] ? page_table_check_set+0x18d/0x730 [ 279.357149][T11988] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 279.357179][T11988] folio_prealloc+0x30/0x180 [ 279.357205][T11988] __handle_mm_fault+0x2a8b/0x5400 [ 279.357244][T11988] ? __pfx___handle_mm_fault+0x10/0x10 [ 279.357280][T11988] ? follow_page_pte+0x7ef/0x13e0 [ 279.357312][T11988] handle_mm_fault+0x40a/0x8e0 [ 279.357345][T11988] __get_user_pages+0x165c/0x2a00 [ 279.357401][T11988] __gup_longterm_locked+0xde4/0x1660 [ 279.357434][T11988] ? sanity_check_pinned_pages+0x1241/0x1300 [ 279.357455][T11988] ? gup_fast_fallback+0x1b86/0x22d0 [ 279.357476][T11988] gup_fast_fallback+0x1d65/0x22d0 [ 279.357532][T11988] ? __pfx_gup_fast_fallback+0x10/0x10 [ 279.357557][T11988] ? rcu_is_watching+0x15/0xb0 [ 279.357577][T11988] ? is_valid_gup_args+0x11f/0x200 [ 279.357598][T11988] ? pin_user_pages_fast+0x4d/0xb0 [ 279.357624][T11988] rds_info_getsockopt+0x1fb/0x470 [ 279.357652][T11988] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 279.357677][T11988] ? __might_fault+0xb0/0x130 [ 279.357701][T11988] ? rds_getsockopt+0x2c6/0x500 [ 279.357720][T11988] ? __pfx_rds_getsockopt+0x10/0x10 [ 279.357738][T11988] do_sock_getsockopt+0x372/0x450 [ 279.357761][T11988] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 279.357779][T11988] ? do_syscall_64+0xa0/0xfa0 [ 279.357809][T11988] __x64_sys_getsockopt+0x1a5/0x250 [ 279.357827][T11988] ? do_syscall_64+0xa0/0xfa0 [ 279.357853][T11988] ? do_syscall_64+0xa0/0xfa0 [ 279.357873][T11988] do_syscall_64+0xfa/0xfa0 [ 279.357889][T11988] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.357906][T11988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.357923][T11988] ? clear_bhb_loop+0x60/0xb0 [ 279.357944][T11988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.357962][T11988] RIP: 0033:0x7f10f7d8f6c9 [ 279.357978][T11988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.357993][T11988] RSP: 002b:00007f10f8c73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 279.358012][T11988] RAX: ffffffffffffffda RBX: 00007f10f7fe5fa0 RCX: 00007f10f7d8f6c9 [ 279.358025][T11988] RDX: 0000000000002716 RSI: 0000200000000114 RDI: 0000000000000003 [ 279.358037][T11988] RBP: 00007f10f8c73090 R08: 0000200000000000 R09: 0000000000000000 [ 279.358049][T11988] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 279.358060][T11988] R13: 00007f10f7fe6038 R14: 00007f10f7fe5fa0 R15: 00007ffc509b11f8 [ 279.358091][T11988] [ 279.719664][T11992] x_tables: ip_tables: osf match: only valid for protocol 6 [ 279.761661][T11992] FAULT_INJECTION: forcing a failure. [ 279.761661][T11992] name failslab, interval 1, probability 0, space 0, times 0 [ 279.805305][T11992] CPU: 0 UID: 0 PID: 11992 Comm: syz.4.1855 Not tainted syzkaller #0 PREEMPT(full) [ 279.805332][T11992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 279.805343][T11992] Call Trace: [ 279.805351][T11992] [ 279.805359][T11992] dump_stack_lvl+0x189/0x250 [ 279.805387][T11992] ? __pfx____ratelimit+0x10/0x10 [ 279.805412][T11992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.805434][T11992] ? __pfx__printk+0x10/0x10 [ 279.805458][T11992] ? __pfx___might_resched+0x10/0x10 [ 279.805476][T11992] ? fs_reclaim_acquire+0x7d/0x100 [ 279.805497][T11992] should_fail_ex+0x414/0x560 [ 279.805527][T11992] should_failslab+0xa8/0x100 [ 279.805547][T11992] kmem_cache_alloc_node_noprof+0x77/0x710 [ 279.805570][T11992] ? __alloc_skb+0x112/0x2d0 [ 279.805587][T11992] ? netlink_autobind+0xdb/0x300 [ 279.805612][T11992] __alloc_skb+0x112/0x2d0 [ 279.805633][T11992] netlink_sendmsg+0x5c6/0xb30 [ 279.805662][T11992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.805684][T11992] ? aa_sock_msg_perm+0xf1/0x1d0 [ 279.805710][T11992] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 279.805728][T11992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.805750][T11992] __sock_sendmsg+0x21c/0x270 [ 279.805773][T11992] ____sys_sendmsg+0x505/0x830 [ 279.805795][T11992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.805825][T11992] ? import_iovec+0x74/0xa0 [ 279.805850][T11992] ___sys_sendmsg+0x21f/0x2a0 [ 279.805872][T11992] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.805937][T11992] ? __fget_files+0x2a/0x420 [ 279.805953][T11992] ? __fget_files+0x3a0/0x420 [ 279.805980][T11992] __x64_sys_sendmsg+0x19b/0x260 [ 279.806000][T11992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 279.806026][T11992] ? __pfx_ksys_write+0x10/0x10 [ 279.806051][T11992] ? do_syscall_64+0xbe/0xfa0 [ 279.806070][T11992] do_syscall_64+0xfa/0xfa0 [ 279.806083][T11992] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.806099][T11992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.806115][T11992] ? clear_bhb_loop+0x60/0xb0 [ 279.806133][T11992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.806149][T11992] RIP: 0033:0x7f93ded8f6c9 [ 279.806164][T11992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.806178][T11992] RSP: 002b:00007f93dfc20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.806197][T11992] RAX: ffffffffffffffda RBX: 00007f93defe5fa0 RCX: 00007f93ded8f6c9 [ 279.806209][T11992] RDX: 0000000000088010 RSI: 0000200000000540 RDI: 000000000000000c [ 279.806219][T11992] RBP: 00007f93dfc20090 R08: 0000000000000000 R09: 0000000000000000 [ 279.806230][T11992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.806240][T11992] R13: 00007f93defe6038 R14: 00007f93defe5fa0 R15: 00007ffc061844d8 [ 279.806270][T11992] [ 280.153453][T11994] team0: Device gtp0 is of different type [ 280.363920][T12006] FAULT_INJECTION: forcing a failure. [ 280.363920][T12006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.377303][T12006] CPU: 0 UID: 0 PID: 12006 Comm: syz.3.1862 Not tainted syzkaller #0 PREEMPT(full) [ 280.377326][T12006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.377336][T12006] Call Trace: [ 280.377343][T12006] [ 280.377350][T12006] dump_stack_lvl+0x189/0x250 [ 280.377374][T12006] ? __pfx____ratelimit+0x10/0x10 [ 280.377398][T12006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.377420][T12006] ? __pfx__printk+0x10/0x10 [ 280.377437][T12006] ? __might_fault+0xb0/0x130 [ 280.377466][T12006] should_fail_ex+0x414/0x560 [ 280.377493][T12006] _copy_from_user+0x2d/0xb0 [ 280.377512][T12006] ___sys_sendmsg+0x158/0x2a0 [ 280.377533][T12006] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.377586][T12006] ? __fget_files+0x2a/0x420 [ 280.377603][T12006] ? __fget_files+0x3a0/0x420 [ 280.377626][T12006] __x64_sys_sendmsg+0x19b/0x260 [ 280.377648][T12006] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.377677][T12006] ? __pfx_ksys_write+0x10/0x10 [ 280.377699][T12006] ? do_syscall_64+0xbe/0xfa0 [ 280.377718][T12006] do_syscall_64+0xfa/0xfa0 [ 280.377732][T12006] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.377748][T12006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.377765][T12006] ? clear_bhb_loop+0x60/0xb0 [ 280.377784][T12006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.377800][T12006] RIP: 0033:0x7f892678f6c9 [ 280.377817][T12006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.377832][T12006] RSP: 002b:00007f8927615038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.377850][T12006] RAX: ffffffffffffffda RBX: 00007f89269e5fa0 RCX: 00007f892678f6c9 [ 280.377863][T12006] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 280.377874][T12006] RBP: 00007f8927615090 R08: 0000000000000000 R09: 0000000000000000 [ 280.377885][T12006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.377896][T12006] R13: 00007f89269e6038 R14: 00007f89269e5fa0 R15: 00007ffd9cd53de8 [ 280.377925][T12006] [ 280.603123][T12012] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1861'. [ 280.810360][T12012] lo speed is unknown, defaulting to 1000 [ 280.926972][T12027] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1870'. [ 281.063725][T12032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'. [ 281.480639][T12039] netlink: 'syz.2.1874': attribute type 6 has an invalid length. [ 281.514022][T12052] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1878'. [ 281.555276][T12052] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1878'. [ 281.573598][T12052] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1878'. [ 281.632090][T12061] syz.1.1875 (12061) used obsolete PPPIOCDETACH ioctl [ 282.189412][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1886'. [ 282.479220][T12089] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 282.511336][T12094] syzkaller0: entered promiscuous mode [ 282.532020][T12094] syzkaller0: entered allmulticast mode [ 282.724390][T12102] netlink: 'syz.1.1897': attribute type 4 has an invalid length. [ 282.887747][T12111] netlink: 'syz.1.1902': attribute type 29 has an invalid length. [ 282.916648][T12111] netlink: 'syz.1.1902': attribute type 29 has an invalid length. [ 282.937786][T12112] lo speed is unknown, defaulting to 1000 [ 283.359246][T12135] __nla_validate_parse: 3 callbacks suppressed [ 283.359264][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'. [ 283.426435][ T30] audit: type=1107 audit(1763067982.703:5): pid=12136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='JKe-'cDe!8 |gI/Y*ґwCx$M^{ [ 283.531066][T12148] dump_stack_lvl+0x189/0x250 [ 283.531093][T12148] ? __pfx____ratelimit+0x10/0x10 [ 283.531118][T12148] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.531139][T12148] ? __pfx__printk+0x10/0x10 [ 283.531158][T12148] ? __might_fault+0xb0/0x130 [ 283.531190][T12148] should_fail_ex+0x414/0x560 [ 283.531221][T12148] _copy_from_user+0x2d/0xb0 [ 283.531243][T12148] br_dev_siocdevprivate+0xf5/0x1580 [ 283.531268][T12148] ? __pfx___mutex_trylock_common+0x10/0x10 [ 283.531293][T12148] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 283.531315][T12148] ? rcu_is_watching+0x15/0xb0 [ 283.531334][T12148] ? trace_contention_end+0x39/0x120 [ 283.531363][T12148] ? __lock_acquire+0xab9/0xd20 [ 283.531382][T12148] ? dev_ioctl+0x83c/0x1150 [ 283.531399][T12148] ? full_name_hash+0x92/0xe0 [ 283.531442][T12148] ? netdev_name_node_lookup+0xdf/0x120 [ 283.531469][T12148] dev_ifsioc+0xb57/0xf00 [ 283.531494][T12148] dev_ioctl+0x84c/0x1150 [ 283.531514][T12148] sock_ioctl+0x719/0x790 [ 283.531538][T12148] ? __pfx_sock_ioctl+0x10/0x10 [ 283.531571][T12148] ? __fget_files+0x3a0/0x420 [ 283.531591][T12148] ? __fget_files+0x2a/0x420 [ 283.531609][T12148] ? bpf_lsm_file_ioctl+0x9/0x20 [ 283.531628][T12148] ? __pfx_sock_ioctl+0x10/0x10 [ 283.531649][T12148] __se_sys_ioctl+0xfc/0x170 [ 283.531671][T12148] do_syscall_64+0xfa/0xfa0 [ 283.531687][T12148] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.531703][T12148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.531719][T12148] ? clear_bhb_loop+0x60/0xb0 [ 283.531739][T12148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.531769][T12148] RIP: 0033:0x7f10f7d8f6c9 [ 283.531785][T12148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.531799][T12148] RSP: 002b:00007f10f8c73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.531817][T12148] RAX: ffffffffffffffda RBX: 00007f10f7fe5fa0 RCX: 00007f10f7d8f6c9 [ 283.531830][T12148] RDX: 0000200000000040 RSI: 00000000000089f0 RDI: 0000000000000004 [ 283.531841][T12148] RBP: 00007f10f8c73090 R08: 0000000000000000 R09: 0000000000000000 [ 283.531851][T12148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.531861][T12148] R13: 00007f10f7fe6038 R14: 00007f10f7fe5fa0 R15: 00007ffc509b11f8 [ 283.531892][T12148] [ 284.011075][T12163] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1917'. [ 284.218690][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1922'. [ 284.269922][T12175] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1922'. [ 284.313689][T12180] batman_adv: batadv0: Adding interface: macsec1 [ 284.358685][T12180] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.423469][T12180] batman_adv: batadv0: Interface activated: macsec1 [ 284.593900][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1927'. [ 284.791989][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1929'. [ 284.966501][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1934'. [ 285.089340][T12216] netlink: 'syz.1.1937': attribute type 30 has an invalid length. [ 285.219104][T12222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1940'. [ 285.239819][T12222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1940'. [ 285.429003][T12233] Cannot find add_set index 0 as target [ 285.588008][T12241] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 285.716566][T12249] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 285.834819][T12253] syzkaller0: entered promiscuous mode [ 285.843228][T12253] syzkaller0: entered allmulticast mode [ 286.330154][T12277] lo speed is unknown, defaulting to 1000 [ 288.022465][T12294] lo speed is unknown, defaulting to 1000 [ 288.181785][T12301] lo speed is unknown, defaulting to 1000 [ 288.259697][T12313] tipc: New replicast peer: 0.0.0.0 [ 288.265632][T12313] tipc: Enabled bearer , priority 10 [ 288.291468][T12314] tipc: New replicast peer: 172.30.1.1 [ 288.305587][T12316] FAULT_INJECTION: forcing a failure. [ 288.305587][T12316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.336795][T12316] CPU: 1 UID: 0 PID: 12316 Comm: syz.2.1970 Not tainted syzkaller #0 PREEMPT(full) [ 288.336820][T12316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.336830][T12316] Call Trace: [ 288.336838][T12316] [ 288.336846][T12316] dump_stack_lvl+0x189/0x250 [ 288.336872][T12316] ? __pfx____ratelimit+0x10/0x10 [ 288.336896][T12316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.336918][T12316] ? __pfx__printk+0x10/0x10 [ 288.336936][T12316] ? __might_fault+0xb0/0x130 [ 288.336968][T12316] should_fail_ex+0x414/0x560 [ 288.337000][T12316] _copy_from_iter+0x1de/0x1790 [ 288.337026][T12316] ? rcu_is_watching+0x15/0xb0 [ 288.337050][T12316] ? kmalloc_reserve+0xbd/0x290 [ 288.337069][T12316] ? __pfx__copy_from_iter+0x10/0x10 [ 288.337091][T12316] ? __build_skb_around+0x262/0x3f0 [ 288.337111][T12316] ? netlink_sendmsg+0x642/0xb30 [ 288.337128][T12316] ? skb_put+0x11b/0x210 [ 288.337149][T12316] netlink_sendmsg+0x6b2/0xb30 [ 288.337178][T12316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.337200][T12316] ? aa_sock_msg_perm+0xf1/0x1d0 [ 288.337225][T12316] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.337249][T12316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.337268][T12316] __sock_sendmsg+0x21c/0x270 [ 288.337294][T12316] ____sys_sendmsg+0x505/0x830 [ 288.337319][T12316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.337348][T12316] ? import_iovec+0x74/0xa0 [ 288.337371][T12316] ___sys_sendmsg+0x21f/0x2a0 [ 288.337393][T12316] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.337447][T12316] ? __fget_files+0x2a/0x420 [ 288.337464][T12316] ? __fget_files+0x3a0/0x420 [ 288.337489][T12316] __x64_sys_sendmsg+0x19b/0x260 [ 288.337511][T12316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.337539][T12316] ? __pfx_ksys_write+0x10/0x10 [ 288.337566][T12316] ? do_syscall_64+0xbe/0xfa0 [ 288.337587][T12316] do_syscall_64+0xfa/0xfa0 [ 288.337602][T12316] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.337619][T12316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.337636][T12316] ? clear_bhb_loop+0x60/0xb0 [ 288.337657][T12316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.337673][T12316] RIP: 0033:0x7fef8578f6c9 [ 288.337689][T12316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.337704][T12316] RSP: 002b:00007fef86691038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.337723][T12316] RAX: ffffffffffffffda RBX: 00007fef859e5fa0 RCX: 00007fef8578f6c9 [ 288.337735][T12316] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 288.337746][T12316] RBP: 00007fef86691090 R08: 0000000000000000 R09: 0000000000000000 [ 288.337757][T12316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.337768][T12316] R13: 00007fef859e6038 R14: 00007fef859e5fa0 R15: 00007ffc852e5a38 [ 288.337798][T12316] [ 288.895069][T12323] __nla_validate_parse: 10 callbacks suppressed [ 288.895089][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1973'. [ 289.182778][T12330] bond0: option xmit_hash_policy: invalid value (9) [ 289.339331][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1980'. [ 289.503542][T12349] vlan2: entered allmulticast mode [ 289.525515][T12349] bridge0: entered allmulticast mode [ 289.583972][T12356] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1987'. [ 289.617523][T12356] netlink: 'syz.2.1987': attribute type 9 has an invalid length. [ 289.635089][T12356] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1987'. [ 289.678466][T12356] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1987'. [ 289.720459][T12350] lo speed is unknown, defaulting to 1000 [ 289.798875][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 290.388397][T12379] lo speed is unknown, defaulting to 1000 [ 291.193878][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'. [ 291.369540][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'. [ 293.007957][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2008'. [ 293.089198][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2007'. [ 293.251842][T12443] bridge15: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 293.379009][T12446] tap0: tun_chr_ioctl cmd 1074025673 [ 293.982946][T12475] tipc: Enabled bearer , priority 10 [ 294.378475][T12487] __nla_validate_parse: 2 callbacks suppressed [ 294.378494][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2028'. [ 294.460571][T12492] lo speed is unknown, defaulting to 1000 [ 294.843365][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'. [ 295.104016][T12509] FAULT_INJECTION: forcing a failure. [ 295.104016][T12509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.118088][T12509] CPU: 1 UID: 0 PID: 12509 Comm: syz.1.2035 Not tainted syzkaller #0 PREEMPT(full) [ 295.118112][T12509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 295.118121][T12509] Call Trace: [ 295.118127][T12509] [ 295.118134][T12509] dump_stack_lvl+0x189/0x250 [ 295.118157][T12509] ? __pfx____ratelimit+0x10/0x10 [ 295.118178][T12509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.118195][T12509] ? __pfx__printk+0x10/0x10 [ 295.118219][T12509] should_fail_ex+0x414/0x560 [ 295.118242][T12509] strncpy_from_user+0x36/0x290 [ 295.118264][T12509] strncpy_from_user_nofault+0x72/0x150 [ 295.118285][T12509] bpf_bprintf_prepare+0xb91/0x13a0 [ 295.118309][T12509] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 295.118327][T12509] ? cmp_ex_search+0x1e/0x80 [ 295.118340][T12509] ? bpf_trace_printk+0xc1/0x190 [ 295.118359][T12509] bpf_trace_printk+0xdb/0x190 [ 295.118373][T12509] ? __lock_acquire+0xab9/0xd20 [ 295.118389][T12509] ? __pfx_bpf_trace_printk+0x10/0x10 [ 295.118407][T12509] ? bpf_trace_run2+0x186/0x4b0 [ 295.118429][T12509] ? fixup_exception+0x1122/0x20b0 [ 295.118453][T12509] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 295.118469][T12509] bpf_trace_run2+0x284/0x4b0 [ 295.118492][T12509] ? bpf_trace_run2+0x186/0x4b0 [ 295.118515][T12509] ? __pfx_bpf_trace_run2+0x10/0x10 [ 295.118542][T12509] ? __bpf_trace_contention_begin+0xcd/0x130 [ 295.118565][T12509] __bpf_trace_contention_begin+0xdc/0x130 [ 295.118583][T12509] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 295.118601][T12509] ? fdget_pos+0x247/0x320 [ 295.118619][T12509] ? fdget_pos+0x247/0x320 [ 295.118643][T12509] trace_contention_begin+0xf4/0x120 [ 295.118663][T12509] __mutex_lock+0x198/0x1350 [ 295.118677][T12509] ? irqentry_exit+0x74/0x90 [ 295.118702][T12509] ? __lock_acquire+0xab9/0xd20 [ 295.118723][T12509] ? fdget_pos+0x247/0x320 [ 295.118749][T12509] ? __pfx___mutex_lock+0x10/0x10 [ 295.118772][T12509] ? __fget_files+0x2a/0x420 [ 295.118791][T12509] ? __fget_files+0x3a0/0x420 [ 295.118805][T12509] ? __fget_files+0x2a/0x420 [ 295.118825][T12509] fdget_pos+0x247/0x320 [ 295.118843][T12509] ksys_read+0x79/0x250 [ 295.118868][T12509] ? __pfx_ksys_read+0x10/0x10 [ 295.118894][T12509] ? do_syscall_64+0xbe/0xfa0 [ 295.118916][T12509] do_syscall_64+0xfa/0xfa0 [ 295.118931][T12509] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.118948][T12509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.118964][T12509] ? clear_bhb_loop+0x60/0xb0 [ 295.118984][T12509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.119000][T12509] RIP: 0033:0x7f677178e0dc [ 295.119017][T12509] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 295.119032][T12509] RSP: 002b:00007f6772568030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.119050][T12509] RAX: ffffffffffffffda RBX: 00007f67719e5fa0 RCX: 00007f677178e0dc [ 295.119062][T12509] RDX: 000000000000000f RSI: 00007f67725680a0 RDI: 0000000000000004 [ 295.119072][T12509] RBP: 00007f6772568090 R08: 0000000000000000 R09: 0000000000000000 [ 295.119082][T12509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.119092][T12509] R13: 00007f67719e6038 R14: 00007f67719e5fa0 R15: 00007fff0406d708 [ 295.119120][T12509] [ 295.620234][ T30] audit: type=1107 audit(1763067994.903:6): pid=12516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='JKe-'cDe!8 |gI/Y*ґwCx$M^{ [ 298.975488][T12597] dump_stack_lvl+0x189/0x250 [ 298.975510][T12597] ? __pfx____ratelimit+0x10/0x10 [ 298.975538][T12597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.975554][T12597] ? __pfx__printk+0x10/0x10 [ 298.975568][T12597] ? __might_fault+0xb0/0x130 [ 298.975595][T12597] should_fail_ex+0x414/0x560 [ 298.975618][T12597] _copy_from_iter+0x1de/0x1790 [ 298.975638][T12597] ? rcu_is_watching+0x15/0xb0 [ 298.975656][T12597] ? kmalloc_reserve+0xbd/0x290 [ 298.975670][T12597] ? __pfx__copy_from_iter+0x10/0x10 [ 298.975685][T12597] ? __build_skb_around+0x262/0x3f0 [ 298.975701][T12597] ? netlink_sendmsg+0x642/0xb30 [ 298.975713][T12597] ? skb_put+0x11b/0x210 [ 298.975729][T12597] netlink_sendmsg+0x6b2/0xb30 [ 298.975754][T12597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.975771][T12597] ? aa_sock_msg_perm+0xf1/0x1d0 [ 298.975792][T12597] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 298.975804][T12597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.975818][T12597] __sock_sendmsg+0x21c/0x270 [ 298.975839][T12597] ____sys_sendmsg+0x505/0x830 [ 298.975859][T12597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.975882][T12597] ? import_iovec+0x74/0xa0 [ 298.975900][T12597] ___sys_sendmsg+0x21f/0x2a0 [ 298.975917][T12597] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.975963][T12597] ? __fget_files+0x2a/0x420 [ 298.975976][T12597] ? __fget_files+0x3a0/0x420 [ 298.975999][T12597] __x64_sys_sendmsg+0x19b/0x260 [ 298.976017][T12597] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.976040][T12597] ? __pfx_ksys_write+0x10/0x10 [ 298.976062][T12597] ? do_syscall_64+0xbe/0xfa0 [ 298.976078][T12597] do_syscall_64+0xfa/0xfa0 [ 298.976089][T12597] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.976103][T12597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.976116][T12597] ? clear_bhb_loop+0x60/0xb0 [ 298.976133][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.976147][T12597] RIP: 0033:0x7f10f7d8f6c9 [ 298.976161][T12597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.976174][T12597] RSP: 002b:00007f10f8c73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.976191][T12597] RAX: ffffffffffffffda RBX: 00007f10f7fe5fa0 RCX: 00007f10f7d8f6c9 [ 298.976202][T12597] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 298.976211][T12597] RBP: 00007f10f8c73090 R08: 0000000000000000 R09: 0000000000000000 [ 298.976220][T12597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.976229][T12597] R13: 00007f10f7fe6038 R14: 00007f10f7fe5fa0 R15: 00007ffc509b11f8 [ 298.976260][T12597] [ 299.610608][T12611] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2066'. [ 299.637360][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2064'. [ 299.651144][T12614] netlink: 'syz.1.2064': attribute type 20 has an invalid length. [ 299.659670][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2064'. [ 299.868448][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2065'. [ 299.990526][T12626] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20004 [ 300.403569][T12630] syzkaller0: entered promiscuous mode [ 300.416748][T12630] syzkaller0: entered allmulticast mode [ 300.439302][T12637] Cannot find del_set index 4 as target [ 300.459346][T12637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2072'. [ 300.670989][T12647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2077'. [ 300.808709][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'. [ 300.818882][T12652] netlink: 'syz.2.2079': attribute type 20 has an invalid length. [ 300.828279][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2079'. [ 301.120194][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2081'. [ 301.209543][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2083'. [ 301.245658][T12666] Cannot find del_set index 4 as target [ 301.252347][T12664] geneve2: entered promiscuous mode [ 301.264672][T12664] geneve2: entered allmulticast mode [ 301.463143][T12676] IPVS: set_ctl: invalid protocol: 98 172.20.20.22:20003 [ 301.480707][T12681] netlink: 'syz.0.2088': attribute type 6 has an invalid length. [ 301.552232][T12682] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.570689][T12682] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.641794][T12687] syz_tun: entered promiscuous mode [ 301.654370][T12687] macvtap1: entered promiscuous mode [ 301.699132][T12687] syz_tun: left promiscuous mode [ 301.733609][T12682] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.747540][T12682] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.827081][T12682] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.838761][T12682] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.912212][T12682] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.923632][T12682] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.058385][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.067552][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.097332][ T3510] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.105700][ T3510] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.124100][ T3510] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.133182][ T3510] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.181404][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.201384][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.543491][T12730] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.555025][T12730] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.640731][T12730] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.651471][T12730] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.712738][T12730] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.726389][T12730] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.797523][T12730] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.808462][T12730] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.090970][ T30] audit: type=1107 audit(1763068002.373:7): pid=12753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='JKe-'cDe!8 |gI/Y*ґwCx$M^{ [ 308.318573][T12992] dump_stack_lvl+0x189/0x250 [ 308.318600][T12992] ? __pfx____ratelimit+0x10/0x10 [ 308.318625][T12992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.318648][T12992] ? __pfx__printk+0x10/0x10 [ 308.318669][T12992] ? fs_reclaim_acquire+0x7d/0x100 [ 308.318695][T12992] should_fail_ex+0x414/0x560 [ 308.318726][T12992] prepare_alloc_pages+0x213/0x610 [ 308.318751][T12992] __alloc_frozen_pages_noprof+0x123/0x370 [ 308.318774][T12992] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 308.318801][T12992] ? policy_nodemask+0x27c/0x720 [ 308.318814][T12992] ? __lock_acquire+0xab9/0xd20 [ 308.318837][T12992] alloc_pages_mpol+0x232/0x4a0 [ 308.318860][T12992] vma_alloc_folio_noprof+0xe4/0x200 [ 308.318878][T12992] ? page_table_check_set+0x18d/0x730 [ 308.318901][T12992] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 308.318931][T12992] folio_prealloc+0x30/0x180 [ 308.318957][T12992] __handle_mm_fault+0x2a8b/0x5400 [ 308.318996][T12992] ? __pfx___handle_mm_fault+0x10/0x10 [ 308.319032][T12992] ? follow_page_pte+0x7ef/0x13e0 [ 308.319071][T12992] handle_mm_fault+0x40a/0x8e0 [ 308.319104][T12992] __get_user_pages+0x165c/0x2a00 [ 308.319159][T12992] __gup_longterm_locked+0xde4/0x1660 [ 308.319194][T12992] ? sanity_check_pinned_pages+0x1241/0x1300 [ 308.319217][T12992] ? gup_fast_fallback+0x1b86/0x22d0 [ 308.319242][T12992] gup_fast_fallback+0x1d65/0x22d0 [ 308.319299][T12992] ? __pfx_gup_fast_fallback+0x10/0x10 [ 308.319326][T12992] ? rcu_is_watching+0x15/0xb0 [ 308.319346][T12992] ? is_valid_gup_args+0x11f/0x200 [ 308.319368][T12992] ? pin_user_pages_fast+0x4d/0xb0 [ 308.319391][T12992] rds_info_getsockopt+0x1fb/0x470 [ 308.319422][T12992] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 308.319446][T12992] ? __might_fault+0xb0/0x130 [ 308.319473][T12992] ? rds_getsockopt+0x2c6/0x500 [ 308.319490][T12992] ? __pfx_rds_getsockopt+0x10/0x10 [ 308.319511][T12992] do_sock_getsockopt+0x372/0x450 [ 308.319538][T12992] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 308.319556][T12992] ? do_syscall_64+0xa0/0xfa0 [ 308.319587][T12992] __x64_sys_getsockopt+0x1a5/0x250 [ 308.319606][T12992] ? do_syscall_64+0xa0/0xfa0 [ 308.319625][T12992] ? do_syscall_64+0xa0/0xfa0 [ 308.319646][T12992] do_syscall_64+0xfa/0xfa0 [ 308.319662][T12992] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.319680][T12992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.319697][T12992] ? clear_bhb_loop+0x60/0xb0 [ 308.319718][T12992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.319735][T12992] RIP: 0033:0x7f892678f6c9 [ 308.319751][T12992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.319764][T12992] RSP: 002b:00007f8927615038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 308.319783][T12992] RAX: ffffffffffffffda RBX: 00007f89269e5fa0 RCX: 00007f892678f6c9 [ 308.319796][T12992] RDX: 0000000000002716 RSI: 0000200000000114 RDI: 0000000000000003 [ 308.319806][T12992] RBP: 00007f8927615090 R08: 0000200000000000 R09: 0000000000000000 [ 308.319817][T12992] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 308.319828][T12992] R13: 00007f89269e6038 R14: 00007f89269e5fa0 R15: 00007ffd9cd53de8 [ 308.319859][T12992] [ 309.160969][T13020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2193'. [ 309.537003][T13043] lo speed is unknown, defaulting to 1000 [ 309.704849][T13051] lo speed is unknown, defaulting to 1000 [ 309.950329][T13056] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 310.326774][T13067] __nla_validate_parse: 3 callbacks suppressed [ 310.326792][T13067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2204'. [ 310.379750][T13067] IPv6: NLM_F_CREATE should be specified when creating new route [ 310.479894][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2206'. [ 310.625618][T13075] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2208'. [ 310.995341][T13081] lo speed is unknown, defaulting to 1000 [ 311.013802][T13087] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2212'. [ 311.300729][T13087] lo speed is unknown, defaulting to 1000 [ 311.842543][T13106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2217'. [ 311.888870][T13106] IPv6: NLM_F_CREATE should be specified when creating new route [ 312.124360][T13113] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.149529][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2219'. [ 312.181568][T13111] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 312.219794][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 312.238754][T13113] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.280196][T13116] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 312.322167][T13113] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.413921][T13113] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.619499][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.643984][ T6341] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.702060][ T6341] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.723553][ T6341] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.807211][T13134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2229'. [ 312.824751][T13134] IPv6: NLM_F_CREATE should be specified when creating new route [ 313.179586][T13152] lo speed is unknown, defaulting to 1000 [ 313.291336][T13154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 313.315249][T13159] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 313.375613][T13161] netlink: 'syz.1.2236': attribute type 17 has an invalid length. [ 313.568599][T13171] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.597682][T13171] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.614759][T13174] FAULT_INJECTION: forcing a failure. [ 313.614759][T13174] name failslab, interval 1, probability 0, space 0, times 0 [ 313.646698][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2242'. [ 313.666829][T13174] CPU: 0 UID: 0 PID: 13174 Comm: syz.2.2240 Not tainted syzkaller #0 PREEMPT(full) [ 313.666852][T13174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.666863][T13174] Call Trace: [ 313.666870][T13174] [ 313.666878][T13174] dump_stack_lvl+0x189/0x250 [ 313.666906][T13174] ? __pfx____ratelimit+0x10/0x10 [ 313.666931][T13174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.666954][T13174] ? __pfx__printk+0x10/0x10 [ 313.666978][T13174] ? __lock_acquire+0xab9/0xd20 [ 313.667003][T13174] should_fail_ex+0x414/0x560 [ 313.667033][T13174] should_failslab+0xa8/0x100 [ 313.667053][T13174] kmem_cache_alloc_noprof+0x74/0x6e0 [ 313.667077][T13174] ? skb_clone+0x212/0x3a0 [ 313.667103][T13174] skb_clone+0x212/0x3a0 [ 313.667127][T13174] __netlink_deliver_tap+0x404/0x850 [ 313.667159][T13174] ? netlink_deliver_tap+0x2e/0x1b0 [ 313.667180][T13174] netlink_deliver_tap+0x19c/0x1b0 [ 313.667200][T13174] netlink_unicast+0x7fa/0x9e0 [ 313.667235][T13174] ? __pfx_netlink_unicast+0x10/0x10 [ 313.667261][T13174] ? netlink_sendmsg+0x642/0xb30 [ 313.667278][T13174] ? skb_put+0x11b/0x210 [ 313.667300][T13174] netlink_sendmsg+0x805/0xb30 [ 313.667330][T13174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.667352][T13174] ? aa_sock_msg_perm+0xf1/0x1d0 [ 313.667379][T13174] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 313.667396][T13174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.667417][T13174] __sock_sendmsg+0x21c/0x270 [ 313.667443][T13174] ____sys_sendmsg+0x505/0x830 [ 313.667469][T13174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.667495][T13174] ? import_iovec+0x74/0xa0 [ 313.667520][T13174] ___sys_sendmsg+0x21f/0x2a0 [ 313.667542][T13174] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.667601][T13174] ? __fget_files+0x2a/0x420 [ 313.667616][T13174] ? __fget_files+0x3a0/0x420 [ 313.667644][T13174] __x64_sys_sendmsg+0x19b/0x260 [ 313.667667][T13174] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.667715][T13174] ? __pfx_ksys_write+0x10/0x10 [ 313.667748][T13174] ? do_syscall_64+0xbe/0xfa0 [ 313.667770][T13174] do_syscall_64+0xfa/0xfa0 [ 313.667796][T13174] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.667828][T13174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.667845][T13174] ? clear_bhb_loop+0x60/0xb0 [ 313.667871][T13174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.667888][T13174] RIP: 0033:0x7fef8578f6c9 [ 313.667905][T13174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.667931][T13174] RSP: 002b:00007fef86691038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.667950][T13174] RAX: ffffffffffffffda RBX: 00007fef859e5fa0 RCX: 00007fef8578f6c9 [ 313.667964][T13174] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 313.667975][T13174] RBP: 00007fef86691090 R08: 0000000000000000 R09: 0000000000000000 [ 313.667987][T13174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.667997][T13174] R13: 00007fef859e6038 R14: 00007fef859e5fa0 R15: 00007ffc852e5a38 [ 313.668030][T13174] [ 314.100895][T13171] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.123667][T13171] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.211385][T13191] FAULT_INJECTION: forcing a failure. [ 314.211385][T13191] name failslab, interval 1, probability 0, space 0, times 0 [ 314.237108][T13191] CPU: 1 UID: 0 PID: 13191 Comm: syz.0.2247 Not tainted syzkaller #0 PREEMPT(full) [ 314.237133][T13191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.237143][T13191] Call Trace: [ 314.237150][T13191] [ 314.237158][T13191] dump_stack_lvl+0x189/0x250 [ 314.237184][T13191] ? __pfx____ratelimit+0x10/0x10 [ 314.237209][T13191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.237231][T13191] ? __pfx__printk+0x10/0x10 [ 314.237254][T13191] ? __pfx___might_resched+0x10/0x10 [ 314.237278][T13191] should_fail_ex+0x414/0x560 [ 314.237308][T13191] should_failslab+0xa8/0x100 [ 314.237328][T13191] kmem_cache_alloc_node_noprof+0x77/0x710 [ 314.237351][T13191] ? __alloc_skb+0x112/0x2d0 [ 314.237375][T13191] __alloc_skb+0x112/0x2d0 [ 314.237396][T13191] netlink_ack+0x146/0xa50 [ 314.237412][T13191] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.237443][T13191] netlink_rcv_skb+0x28c/0x470 [ 314.237459][T13191] ? __lock_acquire+0xab9/0xd20 [ 314.237477][T13191] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.237496][T13191] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.237527][T13191] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.237554][T13191] netlink_unicast+0x82f/0x9e0 [ 314.237595][T13191] ? __pfx_netlink_unicast+0x10/0x10 [ 314.237621][T13191] ? netlink_sendmsg+0x642/0xb30 [ 314.237637][T13191] ? skb_put+0x11b/0x210 [ 314.237658][T13191] netlink_sendmsg+0x805/0xb30 [ 314.237692][T13191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.237715][T13191] ? aa_sock_msg_perm+0xf1/0x1d0 [ 314.237741][T13191] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 314.237759][T13191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.237778][T13191] __sock_sendmsg+0x21c/0x270 [ 314.237803][T13191] ____sys_sendmsg+0x505/0x830 [ 314.237829][T13191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.237857][T13191] ? import_iovec+0x74/0xa0 [ 314.237881][T13191] ___sys_sendmsg+0x21f/0x2a0 [ 314.237903][T13191] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.237962][T13191] ? __fget_files+0x2a/0x420 [ 314.237978][T13191] ? __fget_files+0x3a0/0x420 [ 314.238005][T13191] __x64_sys_sendmsg+0x19b/0x260 [ 314.238027][T13191] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.238057][T13191] ? __pfx_ksys_write+0x10/0x10 [ 314.238080][T13191] ? do_syscall_64+0xbe/0xfa0 [ 314.238099][T13191] do_syscall_64+0xfa/0xfa0 [ 314.238115][T13191] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.238131][T13191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.238148][T13191] ? clear_bhb_loop+0x60/0xb0 [ 314.238169][T13191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.238185][T13191] RIP: 0033:0x7f10f7d8f6c9 [ 314.238200][T13191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.238215][T13191] RSP: 002b:00007f10f8c73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.238235][T13191] RAX: ffffffffffffffda RBX: 00007f10f7fe5fa0 RCX: 00007f10f7d8f6c9 [ 314.238248][T13191] RDX: 0000000000000802 RSI: 00002000000003c0 RDI: 000000000000000c [ 314.238259][T13191] RBP: 00007f10f8c73090 R08: 0000000000000000 R09: 0000000000000000 [ 314.238268][T13191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.238277][T13191] R13: 00007f10f7fe6038 R14: 00007f10f7fe5fa0 R15: 00007ffc509b11f8 [ 314.238303][T13191] [ 314.590043][T13171] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.601178][T13171] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.673905][T13171] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.684915][T13171] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.784662][T13203] lo speed is unknown, defaulting to 1000 [ 314.934987][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.945685][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.013734][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.024007][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.049163][T13215] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 315.129293][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.149058][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.175924][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.186735][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.241913][T13207] lo speed is unknown, defaulting to 1000 [ 315.641751][T13220] __nla_validate_parse: 2 callbacks suppressed [ 315.641769][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2253'. [ 315.696690][T13231] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2258'. [ 315.710389][T13233] FAULT_INJECTION: forcing a failure. [ 315.710389][T13233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.726796][T13233] CPU: 1 UID: 0 PID: 13233 Comm: syz.2.2257 Not tainted syzkaller #0 PREEMPT(full) [ 315.726820][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 315.726831][T13233] Call Trace: [ 315.726838][T13233] [ 315.726846][T13233] dump_stack_lvl+0x189/0x250 [ 315.726873][T13233] ? __pfx____ratelimit+0x10/0x10 [ 315.726900][T13233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.726922][T13233] ? __pfx__printk+0x10/0x10 [ 315.726941][T13233] ? __might_fault+0xb0/0x130 [ 315.726975][T13233] should_fail_ex+0x414/0x560 [ 315.727006][T13233] _copy_from_user+0x2d/0xb0 [ 315.727029][T13233] ___sys_sendmsg+0x158/0x2a0 [ 315.727053][T13233] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.727108][T13233] ? __fget_files+0x2a/0x420 [ 315.727125][T13233] ? __fget_files+0x3a0/0x420 [ 315.727152][T13233] __x64_sys_sendmsg+0x19b/0x260 [ 315.727175][T13233] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 315.727204][T13233] ? __pfx_ksys_write+0x10/0x10 [ 315.727231][T13233] ? do_syscall_64+0xbe/0xfa0 [ 315.727253][T13233] do_syscall_64+0xfa/0xfa0 [ 315.727276][T13233] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.727293][T13233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.727310][T13233] ? clear_bhb_loop+0x60/0xb0 [ 315.727331][T13233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.727349][T13233] RIP: 0033:0x7fef8578f6c9 [ 315.727364][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.727384][T13233] RSP: 002b:00007fef86691038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.727402][T13233] RAX: ffffffffffffffda RBX: 00007fef859e5fa0 RCX: 00007fef8578f6c9 [ 315.727415][T13233] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 315.727426][T13233] RBP: 00007fef86691090 R08: 0000000000000000 R09: 0000000000000000 [ 315.727437][T13233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.727448][T13233] R13: 00007fef859e6038 R14: 00007fef859e5fa0 R15: 00007ffc852e5a38 [ 315.727479][T13233] [ 316.188391][T13249] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 316.257467][T13249] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 316.345023][T13249] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 316.359432][T13249] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 316.385446][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2265'. [ 316.472452][T13262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2267'. [ 316.530562][T13249] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 316.557971][T13249] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 316.658188][T13249] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 316.670308][T13249] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 316.714853][T13260] lo speed is unknown, defaulting to 1000 [ 316.838593][T13262] lo speed is unknown, defaulting to 1000 [ 316.903008][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 316.912130][ T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.989116][ T3510] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 316.997903][ T3510] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.079735][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 317.091652][ T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.122313][T13283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2271'. [ 317.149527][ T57] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 317.159094][ T57] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.349849][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.584898][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2274'. [ 317.724288][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2280'. [ 318.215594][T13313] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2283'. [ 318.260926][T13313] lo speed is unknown, defaulting to 1000 [ 318.667574][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2291'. [ 318.714570][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2289'. [ 319.061336][T13347] lo speed is unknown, defaulting to 1000 [ 319.134036][T13361] Cannot find map_set index 0 as target [ 319.356267][ T30] audit: type=1107 audit(1763068018.633:10): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='JKe-'cDe!8 |gI/Y*ґwCx$M^{ [ 323.803220][T13571] dump_stack_lvl+0x189/0x250 [ 323.803247][T13571] ? __pfx____ratelimit+0x10/0x10 [ 323.803273][T13571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.803295][T13571] ? __pfx__printk+0x10/0x10 [ 323.803325][T13571] should_fail_ex+0x414/0x560 [ 323.803355][T13571] _copy_to_user+0x31/0xb0 [ 323.803380][T13571] simple_read_from_buffer+0xe1/0x170 [ 323.803410][T13571] proc_fail_nth_read+0x1b3/0x220 [ 323.803435][T13571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.803459][T13571] ? rw_verify_area+0x2a6/0x4d0 [ 323.803481][T13571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.803504][T13571] vfs_read+0x200/0xa30 [ 323.803529][T13571] ? __might_fault+0xb0/0x130 [ 323.803554][T13571] ? __pfx_vfs_read+0x10/0x10 [ 323.803573][T13571] ? __put_user_nocheck_8+0x10/0x10 [ 323.803591][T13571] ? rxrpc_getsockopt+0x109/0x160 [ 323.803607][T13571] ? __pfx_rxrpc_getsockopt+0x10/0x10 [ 323.803625][T13571] ? do_sock_getsockopt+0x372/0x450 [ 323.803648][T13571] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 323.803674][T13571] ksys_read+0x145/0x250 [ 323.803699][T13571] ? __pfx_ksys_read+0x10/0x10 [ 323.803733][T13571] ? do_syscall_64+0xbe/0xfa0 [ 323.803753][T13571] do_syscall_64+0xfa/0xfa0 [ 323.803769][T13571] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.803787][T13571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.803804][T13571] ? clear_bhb_loop+0x60/0xb0 [ 323.803825][T13571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.803842][T13571] RIP: 0033:0x7fef8578e0dc [ 323.803858][T13571] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 323.803881][T13571] RSP: 002b:00007fef86691030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.803900][T13571] RAX: ffffffffffffffda RBX: 00007fef859e5fa0 RCX: 00007fef8578e0dc [ 323.803913][T13571] RDX: 000000000000000f RSI: 00007fef866910a0 RDI: 0000000000000004 [ 323.803923][T13571] RBP: 00007fef86691090 R08: 0000000000000000 R09: 0000000000000000 [ 323.803934][T13571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.803944][T13571] R13: 00007fef859e6038 R14: 00007fef859e5fa0 R15: 00007ffc852e5a38 [ 323.803975][T13571] [ 324.348592][T13584] bond0: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 324.523227][ T30] audit: type=1107 audit(1763068023.803:12): pid=13588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='JKe-'cDe!8 |gI/Y*ґwCx$M^{ [ 326.806581][T13689] dump_stack_lvl+0x189/0x250 [ 326.806608][T13689] ? __pfx____ratelimit+0x10/0x10 [ 326.806631][T13689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.806652][T13689] ? __pfx__printk+0x10/0x10 [ 326.806668][T13689] ? __might_fault+0xb0/0x130 [ 326.806699][T13689] should_fail_ex+0x414/0x560 [ 326.806727][T13689] _copy_from_user+0x2d/0xb0 [ 326.806758][T13689] ___sys_sendmsg+0x158/0x2a0 [ 326.806782][T13689] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.806839][T13689] ? __fget_files+0x2a/0x420 [ 326.806856][T13689] ? __fget_files+0x3a0/0x420 [ 326.806883][T13689] __x64_sys_sendmsg+0x19b/0x260 [ 326.806907][T13689] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.806937][T13689] ? __pfx_ksys_write+0x10/0x10 [ 326.806964][T13689] ? do_syscall_64+0xbe/0xfa0 [ 326.806985][T13689] do_syscall_64+0xfa/0xfa0 [ 326.807000][T13689] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.807018][T13689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.807036][T13689] ? clear_bhb_loop+0x60/0xb0 [ 326.807057][T13689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.807074][T13689] RIP: 0033:0x7f93ded8f6c9 [ 326.807089][T13689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.807104][T13689] RSP: 002b:00007f93dfc20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.807123][T13689] RAX: ffffffffffffffda RBX: 00007f93defe5fa0 RCX: 00007f93ded8f6c9 [ 326.807136][T13689] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 326.807147][T13689] RBP: 00007f93dfc20090 R08: 0000000000000000 R09: 0000000000000000 [ 326.807158][T13689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.807168][T13689] R13: 00007f93defe6038 R14: 00007f93defe5fa0 R15: 00007ffc061844d8 [ 326.807196][T13689] [ 327.018532][T13685] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 327.032287][T13685] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 327.112284][T13685] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 327.145651][T13685] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 327.211250][T13698] FAULT_INJECTION: forcing a failure. [ 327.211250][T13698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.262629][T13698] CPU: 0 UID: 0 PID: 13698 Comm: syz.0.2418 Not tainted syzkaller #0 PREEMPT(full) [ 327.262655][T13698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 327.262666][T13698] Call Trace: [ 327.262673][T13698] [ 327.262681][T13698] dump_stack_lvl+0x189/0x250 [ 327.262710][T13698] ? __pfx____ratelimit+0x10/0x10 [ 327.262736][T13698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.262758][T13698] ? __pfx__printk+0x10/0x10 [ 327.262789][T13698] should_fail_ex+0x414/0x560 [ 327.262820][T13698] _copy_to_user+0x31/0xb0 [ 327.262845][T13698] simple_read_from_buffer+0xe1/0x170 [ 327.262876][T13698] proc_fail_nth_read+0x1b3/0x220 [ 327.262901][T13698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.262926][T13698] ? rw_verify_area+0x2a6/0x4d0 [ 327.262947][T13698] ? __lock_acquire+0xab9/0xd20 [ 327.262962][T13698] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 327.262986][T13698] vfs_read+0x200/0xa30 [ 327.263007][T13698] ? fdget_pos+0x247/0x320 [ 327.263029][T13698] ? __pfx___mutex_lock+0x10/0x10 [ 327.263048][T13698] ? __pfx_vfs_read+0x10/0x10 [ 327.263072][T13698] ? __fget_files+0x2a/0x420 [ 327.263093][T13698] ? __fget_files+0x3a0/0x420 [ 327.263108][T13698] ? __fget_files+0x2a/0x420 [ 327.263134][T13698] ksys_read+0x145/0x250 [ 327.263159][T13698] ? __pfx_ksys_read+0x10/0x10 [ 327.263185][T13698] ? do_syscall_64+0xbe/0xfa0 [ 327.263206][T13698] do_syscall_64+0xfa/0xfa0 [ 327.263222][T13698] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.263239][T13698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.263256][T13698] ? clear_bhb_loop+0x60/0xb0 [ 327.263278][T13698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.263295][T13698] RIP: 0033:0x7f10f7d8e0dc [ 327.263312][T13698] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 327.263326][T13698] RSP: 002b:00007f10f8c73030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 327.263346][T13698] RAX: ffffffffffffffda RBX: 00007f10f7fe5fa0 RCX: 00007f10f7d8e0dc [ 327.263359][T13698] RDX: 000000000000000f RSI: 00007f10f8c730a0 RDI: 0000000000000004 [ 327.263370][T13698] RBP: 00007f10f8c73090 R08: 0000000000000000 R09: 0000000000000000 [ 327.263381][T13698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.263391][T13698] R13: 00007f10f7fe6038 R14: 00007f10f7fe5fa0 R15: 00007ffc509b11f8 [ 327.263423][T13698] [ 327.704524][T13685] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 327.749946][T13685] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 327.859786][ T57] net_ratelimit: 21 callbacks suppressed [ 327.859808][ T57] bond4: (slave macvlan2): failed to get link speed/duplex [ 328.003288][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 328.085050][T13728] netlink: 47 bytes leftover after parsing attributes in process `syz.4.2427'. [ 328.109858][ T57] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 328.126275][ T57] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 328.146008][ T57] bond4: (slave macvlan2): failed to get link speed/duplex [ 328.214682][T13730] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2428'. [ 328.239169][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 328.247938][ T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 328.271340][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 328.280681][ T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 328.296624][ T57] bond4: (slave macvlan2): failed to get link speed/duplex [ 328.326626][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 328.354630][ T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 328.407623][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 328.491083][T13739] bond1: option packets_per_slave: invalid value (1048582) [ 328.499883][T13746] FAULT_INJECTION: forcing a failure. [ 328.499883][T13746] name failslab, interval 1, probability 0, space 0, times 0 [ 328.538167][T13739] bond1: option packets_per_slave: allowed values 0 - 65535 [ 328.571003][T13746] CPU: 1 UID: 0 PID: 13746 Comm: syz.4.2434 Not tainted syzkaller #0 PREEMPT(full) [ 328.571029][T13746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.571039][T13746] Call Trace: [ 328.571046][T13746] [ 328.571054][T13746] dump_stack_lvl+0x189/0x250 [ 328.571081][T13746] ? __pfx____ratelimit+0x10/0x10 [ 328.571105][T13746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.571125][T13746] ? __pfx__printk+0x10/0x10 [ 328.571145][T13746] ? __pfx___might_resched+0x10/0x10 [ 328.571164][T13746] ? fs_reclaim_acquire+0x7d/0x100 [ 328.571184][T13746] should_fail_ex+0x414/0x560 [ 328.571212][T13746] should_failslab+0xa8/0x100 [ 328.571232][T13746] kmem_cache_alloc_noprof+0x74/0x6e0 [ 328.571254][T13746] ? skb_clone+0x212/0x3a0 [ 328.571279][T13746] skb_clone+0x212/0x3a0 [ 328.571296][T13746] ? nfnetlink_rcv+0x4ba/0x2590 [ 328.571323][T13746] nfnetlink_rcv+0x4ec/0x2590 [ 328.571348][T13746] ? __dev_queue_xmit+0x284/0x3740 [ 328.571369][T13746] ? __dev_queue_xmit+0x1bfb/0x3740 [ 328.571404][T13746] ? __dev_queue_xmit+0x284/0x3740 [ 328.571442][T13746] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 328.571483][T13746] ? ref_tracker_free+0x63a/0x7d0 [ 328.571502][T13746] ? __asan_memcpy+0x40/0x70 [ 328.571523][T13746] ? __pfx_ref_tracker_free+0x10/0x10 [ 328.571537][T13746] ? __skb_clone+0x63/0x7a0 [ 328.571561][T13746] ? __skb_clone+0x483/0x7a0 [ 328.571588][T13746] ? skb_clone+0x246/0x3a0 [ 328.571611][T13746] ? __netlink_deliver_tap+0x807/0x850 [ 328.571630][T13746] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.571665][T13746] netlink_unicast+0x82f/0x9e0 [ 328.571698][T13746] ? __pfx_netlink_unicast+0x10/0x10 [ 328.571725][T13746] ? netlink_sendmsg+0x642/0xb30 [ 328.571742][T13746] ? skb_put+0x11b/0x210 [ 328.571764][T13746] netlink_sendmsg+0x805/0xb30 [ 328.571792][T13746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.571814][T13746] ? aa_sock_msg_perm+0xf1/0x1d0 [ 328.571840][T13746] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.571857][T13746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.571877][T13746] __sock_sendmsg+0x21c/0x270 [ 328.571903][T13746] ____sys_sendmsg+0x505/0x830 [ 328.571929][T13746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.571957][T13746] ? import_iovec+0x74/0xa0 [ 328.571981][T13746] ___sys_sendmsg+0x21f/0x2a0 [ 328.572003][T13746] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.572061][T13746] ? __fget_files+0x2a/0x420 [ 328.572077][T13746] ? __fget_files+0x3a0/0x420 [ 328.572103][T13746] __x64_sys_sendmsg+0x19b/0x260 [ 328.572126][T13746] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.572155][T13746] ? __pfx_ksys_write+0x10/0x10 [ 328.572182][T13746] ? do_syscall_64+0xbe/0xfa0 [ 328.572203][T13746] do_syscall_64+0xfa/0xfa0 [ 328.572218][T13746] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.572236][T13746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.572252][T13746] ? clear_bhb_loop+0x60/0xb0 [ 328.572272][T13746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.572288][T13746] RIP: 0033:0x7f93ded8f6c9 [ 328.572305][T13746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.572318][T13746] RSP: 002b:00007f93dfc20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.572337][T13746] RAX: ffffffffffffffda RBX: 00007f93defe5fa0 RCX: 00007f93ded8f6c9 [ 328.572349][T13746] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 328.572360][T13746] RBP: 00007f93dfc20090 R08: 0000000000000000 R09: 0000000000000000 [ 328.572371][T13746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.572381][T13746] R13: 00007f93defe6038 R14: 00007f93defe5fa0 R15: 00007ffc061844d8 [ 328.572411][T13746] [ 329.040731][T13739] bond1 (unregistering): Released all slaves [ 329.126428][ T3460] bond4: (slave macvlan2): failed to get link speed/duplex [ 329.231417][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2438'. [ 329.256377][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 329.366091][ T3460] bond4: (slave macvlan2): failed to get link speed/duplex [ 329.454463][T13769] lo speed is unknown, defaulting to 1000 [ 329.476569][ T3460] bond4: (slave macvlan2): failed to get link speed/duplex [ 329.678301][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 329.831801][T13798] netlink: 39 bytes leftover after parsing attributes in process `syz.4.2450'. [ 330.219697][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'. [ 330.269524][ T30] audit: type=1107 audit(1763068029.553:13): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='JKe-'cDe!8 |gI/Y*ґwCx$M^{ [ 332.690848][T13924] dump_stack_lvl+0x189/0x250 [ 332.690876][T13924] ? __pfx____ratelimit+0x10/0x10 [ 332.690900][T13924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.690922][T13924] ? __pfx__printk+0x10/0x10 [ 332.690951][T13924] should_fail_ex+0x414/0x560 [ 332.690982][T13924] _copy_to_user+0x31/0xb0 [ 332.691006][T13924] simple_read_from_buffer+0xe1/0x170 [ 332.691036][T13924] proc_fail_nth_read+0x1b3/0x220 [ 332.691070][T13924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.691095][T13924] ? rw_verify_area+0x2a6/0x4d0 [ 332.691116][T13924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.691138][T13924] vfs_read+0x200/0xa30 [ 332.691167][T13924] ? __pfx_vfs_read+0x10/0x10 [ 332.691185][T13924] ? aa_sock_perm+0xed/0x1a0 [ 332.691210][T13924] ? move_addr_to_user+0xf7/0x1f0 [ 332.691230][T13924] ? __sys_getpeername+0x1e6/0x270 [ 332.691250][T13924] ? __pfx___sys_getpeername+0x10/0x10 [ 332.691275][T13924] ksys_read+0x145/0x250 [ 332.691299][T13924] ? __pfx_ksys_read+0x10/0x10 [ 332.691324][T13924] ? do_syscall_64+0xbe/0xfa0 [ 332.691345][T13924] do_syscall_64+0xfa/0xfa0 [ 332.691360][T13924] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.691376][T13924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.691392][T13924] ? clear_bhb_loop+0x60/0xb0 [ 332.691413][T13924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.691428][T13924] RIP: 0033:0x7f10f7d8e0dc [ 332.691444][T13924] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 332.691456][T13924] RSP: 002b:00007f10f8c73030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 332.691476][T13924] RAX: ffffffffffffffda RBX: 00007f10f7fe5fa0 RCX: 00007f10f7d8e0dc [ 332.691488][T13924] RDX: 000000000000000f RSI: 00007f10f8c730a0 RDI: 0000000000000005 [ 332.691499][T13924] RBP: 00007f10f8c73090 R08: 0000000000000000 R09: 0000000000000000 [ 332.691508][T13924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.691517][T13924] R13: 00007f10f7fe6038 R14: 00007f10f7fe5fa0 R15: 00007ffc509b11f8 [ 332.691547][T13924] [ 333.006389][ T13] net_ratelimit: 17 callbacks suppressed [ 333.006410][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 333.212889][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 333.227800][ T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 334.576423][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 334.689655][ T3510] bond4: (slave macvlan2): failed to get link speed/duplex [ 334.760406][T13967] Cannot find map_set index 0 as target [ 334.792953][T13969] FAULT_INJECTION: forcing a failure. [ 334.792953][T13969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.817531][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 334.832779][T13969] CPU: 0 UID: 0 PID: 13969 Comm: syz.1.2504 Not tainted syzkaller #0 PREEMPT(full) [ 334.832802][T13969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.832811][T13969] Call Trace: [ 334.832818][T13969] [ 334.832825][T13969] dump_stack_lvl+0x189/0x250 [ 334.832850][T13969] ? __pfx____ratelimit+0x10/0x10 [ 334.832874][T13969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.832896][T13969] ? __pfx__printk+0x10/0x10 [ 334.832914][T13969] ? __might_fault+0xb0/0x130 [ 334.832955][T13969] should_fail_ex+0x414/0x560 [ 334.832986][T13969] _copy_from_user+0x2d/0xb0 [ 334.833008][T13969] ___sys_sendmsg+0x158/0x2a0 [ 334.833032][T13969] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.833091][T13969] ? __might_fault+0xb0/0x130 [ 334.833122][T13969] __sys_sendmmsg+0x227/0x430 [ 334.833147][T13969] ? __pfx___sys_sendmmsg+0x10/0x10 [ 334.833176][T13969] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 334.833211][T13969] ? ksys_write+0x22a/0x250 [ 334.833237][T13969] ? __pfx_ksys_write+0x10/0x10 [ 334.833264][T13969] __x64_sys_sendmmsg+0xa0/0xc0 [ 334.833287][T13969] do_syscall_64+0xfa/0xfa0 [ 334.833302][T13969] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.833319][T13969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.833337][T13969] ? clear_bhb_loop+0x60/0xb0 [ 334.833357][T13969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.833375][T13969] RIP: 0033:0x7f677178f6c9 [ 334.833390][T13969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.833405][T13969] RSP: 002b:00007f6772568038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 334.833425][T13969] RAX: ffffffffffffffda RBX: 00007f67719e5fa0 RCX: 00007f677178f6c9 [ 334.833438][T13969] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000004 [ 334.833449][T13969] RBP: 00007f6772568090 R08: 0000000000000000 R09: 0000000000000000 [ 334.833460][T13969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 334.833471][T13969] R13: 00007f67719e6038 R14: 00007f67719e5fa0 R15: 00007fff0406d708 [ 334.833502][T13969] [ 335.059296][T13973] Unsupported ieee802154 address type: 0 [ 335.129924][T13980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.130580][ T6341] bond4: (slave macvlan2): failed to get link speed/duplex [ 335.185286][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2508'. [ 335.331829][T13984] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.342436][T13992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2512'. [ 335.373880][T13980] lo speed is unknown, defaulting to 1000 [ 335.380482][ T3510] bond4: (slave macvlan2): failed to get link speed/duplex [ 335.458883][T13984] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.530974][ T3510] bond4: (slave macvlan2): failed to get link speed/duplex [ 335.571088][T13984] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.675162][T13984] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.679607][T14010] FAULT_INJECTION: forcing a failure. [ 335.679607][T14010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.698742][T14010] CPU: 0 UID: 0 PID: 14010 Comm: syz.3.2517 Not tainted syzkaller #0 PREEMPT(full) [ 335.698770][T14010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.698780][T14010] Call Trace: [ 335.698787][T14010] [ 335.698795][T14010] dump_stack_lvl+0x189/0x250 [ 335.698821][T14010] ? __pfx____ratelimit+0x10/0x10 [ 335.698855][T14010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.698875][T14010] ? __pfx__printk+0x10/0x10 [ 335.698906][T14010] should_fail_ex+0x414/0x560 [ 335.698937][T14010] _copy_to_user+0x31/0xb0 [ 335.698960][T14010] simple_read_from_buffer+0xe1/0x170 [ 335.698989][T14010] proc_fail_nth_read+0x1b3/0x220 [ 335.699014][T14010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.699036][T14010] ? rw_verify_area+0x2a6/0x4d0 [ 335.699053][T14010] ? __lock_acquire+0xab9/0xd20 [ 335.699066][T14010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.699085][T14010] vfs_read+0x200/0xa30 [ 335.699105][T14010] ? fdget_pos+0x247/0x320 [ 335.699125][T14010] ? __pfx___mutex_lock+0x10/0x10 [ 335.699143][T14010] ? __pfx_vfs_read+0x10/0x10 [ 335.699166][T14010] ? __fget_files+0x2a/0x420 [ 335.699184][T14010] ? __fget_files+0x3a0/0x420 [ 335.699200][T14010] ? __fget_files+0x2a/0x420 [ 335.699223][T14010] ksys_read+0x145/0x250 [ 335.699248][T14010] ? __pfx_ksys_read+0x10/0x10 [ 335.699272][T14010] ? do_syscall_64+0xbe/0xfa0 [ 335.699292][T14010] do_syscall_64+0xfa/0xfa0 [ 335.699307][T14010] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.699321][T14010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.699336][T14010] ? clear_bhb_loop+0x60/0xb0 [ 335.699353][T14010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.699369][T14010] RIP: 0033:0x7f892678e0dc [ 335.699383][T14010] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 335.699397][T14010] RSP: 002b:00007f8927615030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.699416][T14010] RAX: ffffffffffffffda RBX: 00007f89269e5fa0 RCX: 00007f892678e0dc [ 335.699427][T14010] RDX: 000000000000000f RSI: 00007f89276150a0 RDI: 0000000000000006 [ 335.699437][T14010] RBP: 00007f8927615090 R08: 0000000000000000 R09: 0000000000000000 [ 335.699447][T14010] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.699459][T14010] R13: 00007f89269e6038 R14: 00007f89269e5fa0 R15: 00007ffd9cd53de8 [ 335.699488][T14010] [ 336.086432][ T3460] bond4: (slave macvlan2): failed to get link speed/duplex [ 336.183386][T14019] IPVS: set_ctl: invalid protocol: 157 172.20.20.170:20002 [ 336.235047][T14019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2520'. [ 336.266364][ T13] bond4: (slave macvlan2): failed to get link speed/duplex [ 336.355196][ T3460] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.440876][T14027] team0: Device gtp0 is of different type [ 336.481163][ T6341] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.529196][T14029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2523'. [ 336.532626][ T6341] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.625580][ T3460] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.856522][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'. [ 336.868205][ T30] audit: type=1107 audit(1763068036.153:15): pid=14047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='JKe-'cDe!8 |gI/Y*ґwCx$M^{ [ 342.010716][T14224] dump_stack_lvl+0x189/0x250 [ 342.010744][T14224] ? __pfx____ratelimit+0x10/0x10 [ 342.010768][T14224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.010790][T14224] ? __pfx__printk+0x10/0x10 [ 342.010808][T14224] ? __might_fault+0xb0/0x130 [ 342.010842][T14224] should_fail_ex+0x414/0x560 [ 342.010872][T14224] _copy_from_user+0x2d/0xb0 [ 342.010895][T14224] __sys_connect+0x123/0x440 [ 342.010913][T14224] ? __fget_files+0x3a0/0x420 [ 342.010931][T14224] ? __pfx___sys_connect+0x10/0x10 [ 342.010960][T14224] ? __pfx_ksys_write+0x10/0x10 [ 342.010989][T14224] __x64_sys_connect+0x7a/0x90 [ 342.011007][T14224] do_syscall_64+0xfa/0xfa0 [ 342.011022][T14224] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.011038][T14224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.011055][T14224] ? clear_bhb_loop+0x60/0xb0 [ 342.011076][T14224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.011093][T14224] RIP: 0033:0x7f677178f6c9 [ 342.011109][T14224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.011123][T14224] RSP: 002b:00007f6772568038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 342.011143][T14224] RAX: ffffffffffffffda RBX: 00007f67719e5fa0 RCX: 00007f677178f6c9 [ 342.011156][T14224] RDX: 0000000000000058 RSI: 00002000000001c0 RDI: 0000000000000003 [ 342.011167][T14224] RBP: 00007f6772568090 R08: 0000000000000000 R09: 0000000000000000 [ 342.011178][T14224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.011188][T14224] R13: 00007f67719e6038 R14: 00007f67719e5fa0 R15: 00007fff0406d708 [ 342.011218][T14224] [ 342.369855][T14234] lo speed is unknown, defaulting to 1000 [ 342.839258][T14234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2590'. [ 342.852423][T14254] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 342.881925][T14234] lo speed is unknown, defaulting to 1000 [ 342.891341][T14253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2597'. [ 342.958013][T14259] netlink: 'syz.3.2599': attribute type 6 has an invalid length. [ 343.096426][ T6341] net_ratelimit: 19 callbacks suppressed [ 343.096448][ T6341] bond4: (slave macvlan2): failed to get link speed/duplex [ 343.299358][ T12] IPVS: stopping backup sync thread 14254 ... [ 343.326301][ T3510] bond4: (slave macvlan2): failed to get link speed/duplex [ 343.496552][ T3510] bond4: (slave macvlan2): failed to get link speed/duplex [ 343.662314][T14294] FAULT_INJECTION: forcing a failure. [ 343.662314][T14294] name failslab, interval 1, probability 0, space 0, times 0 [ 343.691422][T14294] CPU: 1 UID: 0 PID: 14294 Comm: syz.2.2611 Not tainted syzkaller #0 PREEMPT(full) [ 343.691447][T14294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 343.691458][T14294] Call Trace: [ 343.691466][T14294] [ 343.691473][T14294] dump_stack_lvl+0x189/0x250 [ 343.691500][T14294] ? __pfx____ratelimit+0x10/0x10 [ 343.691526][T14294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.691556][T14294] ? __pfx__printk+0x10/0x10 [ 343.691577][T14294] ? __pfx___might_resched+0x10/0x10 [ 343.691595][T14294] ? fs_reclaim_acquire+0x7d/0x100 [ 343.691616][T14294] should_fail_ex+0x414/0x560 [ 343.691646][T14294] should_failslab+0xa8/0x100 [ 343.691666][T14294] __kmalloc_cache_noprof+0x6f/0x6f0 [ 343.691690][T14294] ? nfnetlink_rcv+0xf97/0x2590 [ 343.691714][T14294] ? __nla_parse+0x40/0x60 [ 343.691736][T14294] nfnetlink_rcv+0xf97/0x2590 [ 343.691793][T14294] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 343.691834][T14294] ? ref_tracker_free+0x63a/0x7d0 [ 343.691881][T14294] ? __netlink_deliver_tap+0x807/0x850 [ 343.691900][T14294] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.691938][T14294] netlink_unicast+0x82f/0x9e0 [ 343.691972][T14294] ? __pfx_netlink_unicast+0x10/0x10 [ 343.692000][T14294] ? netlink_sendmsg+0x642/0xb30 [ 343.692017][T14294] ? skb_put+0x11b/0x210 [ 343.692039][T14294] netlink_sendmsg+0x805/0xb30 [ 343.692068][T14294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.692091][T14294] ? aa_sock_msg_perm+0xf1/0x1d0 [ 343.692117][T14294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 343.692135][T14294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.692155][T14294] __sock_sendmsg+0x21c/0x270 [ 343.692182][T14294] ____sys_sendmsg+0x505/0x830 [ 343.692208][T14294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.692237][T14294] ? import_iovec+0x74/0xa0 [ 343.692263][T14294] ___sys_sendmsg+0x21f/0x2a0 [ 343.692285][T14294] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.692342][T14294] ? __fget_files+0x2a/0x420 [ 343.692358][T14294] ? __fget_files+0x3a0/0x420 [ 343.692386][T14294] __x64_sys_sendmsg+0x19b/0x260 [ 343.692409][T14294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.692440][T14294] ? __pfx_ksys_write+0x10/0x10 [ 343.692467][T14294] ? do_syscall_64+0xbe/0xfa0 [ 343.692489][T14294] do_syscall_64+0xfa/0xfa0 [ 343.692505][T14294] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.692523][T14294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.692547][T14294] ? clear_bhb_loop+0x60/0xb0 [ 343.692569][T14294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.692586][T14294] RIP: 0033:0x7fef8578f6c9 [ 343.692603][T14294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.692618][T14294] RSP: 002b:00007fef86691038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.692639][T14294] RAX: ffffffffffffffda RBX: 00007fef859e5fa0 RCX: 00007fef8578f6c9 [ 343.692653][T14294] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 343.692665][T14294] RBP: 00007fef86691090 R08: 0000000000000000 R09: 0000000000000000 [ 343.692675][T14294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.692686][T14294] R13: 00007fef859e6038 R14: 00007fef859e5fa0 R15: 00007ffc852e5a38 [ 343.692719][T14294] [ 344.190393][T14290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2610'. [ 344.234675][T14303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2615'. [ 345.393895][T14293] netlink: 'syz.0.2613': attribute type 6 has an invalid length. [ 345.408328][T14298] netlink: 'syz.0.2613': attribute type 17 has an invalid length. [ 345.418611][T14303] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 345.426424][ T3460] bond4: (slave macvlan2): failed to get link speed/duplex [ 345.535848][T14288] lo speed is unknown, defaulting to 1000 [ 345.577330][ T3460] bond4: (slave macvlan2): failed to get link speed/duplex [ 345.625864][T14310] lo speed is unknown, defaulting to 1000 [ 345.657156][T14316] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 345.669478][T14316] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 345.716120][ T3460] bond4: (slave macvlan2): failed to get link speed/duplex [ 345.759027][T14321] lo speed is unknown, defaulting to 1000 [ 345.840047][T14316] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 345.861386][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2621'. [ 345.865971][T14316] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 345.995327][T14316] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 346.016349][T14316] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 346.045922][ T57] bond4: (slave macvlan2): failed to get link speed/duplex [ 346.280519][T14316] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 346.292602][T14316] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 346.448237][ T3460] bond4: (slave macvlan2): failed to get link speed/duplex [ 346.557290][T14339] FAULT_INJECTION: forcing a failure. [ 346.557290][T14339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.585767][ T3460] bond4: (slave macvlan2): failed to get link speed/duplex [ 346.626446][T14339] CPU: 1 UID: 0 PID: 14339 Comm: syz.0.2626 Not tainted syzkaller #0 PREEMPT(full) [ 346.626472][T14339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.626483][T14339] Call Trace: [ 346.626490][T14339] [ 346.626498][T14339] dump_stack_lvl+0x189/0x250 [ 346.626526][T14339] ? __pfx____ratelimit+0x10/0x10 [ 346.626551][T14339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.626573][T14339] ? __pfx__printk+0x10/0x10 [ 346.626604][T14339] should_fail_ex+0x414/0x560 [ 346.626634][T14339] _copy_to_user+0x31/0xb0 [ 346.626659][T14339] simple_read_from_buffer+0xe1/0x170 [ 346.626690][T14339] proc_fail_nth_read+0x1b3/0x220 [ 346.626715][T14339] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.626740][T14339] ? rw_verify_area+0x2a6/0x4d0 [ 346.626761][T14339] ? __lock_acquire+0xab9/0xd20 [ 346.626777][T14339] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.626800][T14339] vfs_read+0x200/0xa30 [ 346.626821][T14339] ? fdget_pos+0x247/0x320 [ 346.626842][T14339] ? __pfx___mutex_lock+0x10/0x10 [ 346.626862][T14339] ? __pfx_vfs_read+0x10/0x10 [ 346.626885][T14339] ? __fget_files+0x2a/0x420 [ 346.626906][T14339] ? __fget_files+0x3a0/0x420 [ 346.626941][T14339] ? __fget_files+0x2a/0x420 [ 346.626967][T14339] ksys_read+0x145/0x250 [ 346.626992][T14339] ? __pfx_ksys_read+0x10/0x10 [ 346.627018][T14339] ? do_syscall_64+0xbe/0xfa0 [ 346.627039][T14339] do_syscall_64+0xfa/0xfa0 [ 346.627055][T14339] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.627072][T14339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.627090][T14339] ? clear_bhb_loop+0x60/0xb0 [ 346.627111][T14339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.627127][T14339] RIP: 0033:0x7f10f7d8e0dc [ 346.627141][T14339] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 346.627154][T14339] RSP: 002b:00007f10f8c73030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 346.627173][T14339] RAX: ffffffffffffffda RBX: 00007f10f7fe5fa0 RCX: 00007f10f7d8e0dc [ 346.627186][T14339] RDX: 000000000000000f RSI: 00007f10f8c730a0 RDI: 000000000000000d [ 346.627197][T14339] RBP: 00007f10f8c73090 R08: 0000000000000000 R09: 0000000000000000 [ 346.627208][T14339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.627219][T14339] R13: 00007f10f7fe6038 R14: 00007f10f7fe5fa0 R15: 00007ffc509b11f8 [ 346.627251][T14339] [ 346.872312][ T6341] bond4: (slave macvlan2): failed to get link speed/duplex [ 347.041503][T14344] netlink: 'syz.4.2628': attribute type 6 has an invalid length. [ 347.091240][ T6341] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 347.126159][ T6341] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 347.206873][T14345] lo speed is unknown, defaulting to 1000 [ 347.243912][ T6341] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 347.254014][ T6341] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 347.319142][T14351] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2630'. [ 347.358542][ T6341] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 347.368093][ T6341] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 347.458074][T14351] bond3: entered promiscuous mode [ 347.463461][ T3574] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 347.472442][ T3574] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 347.741424][T14364] syzkaller0: entered promiscuous mode [ 347.747713][T14364] syzkaller0: entered allmulticast mode [ 347.772911][T14364] FAULT_INJECTION: forcing a failure. [ 347.772911][T14364] name failslab, interval 1, probability 0, space 0, times 0 [ 347.799806][T14364] CPU: 1 UID: 0 PID: 14364 Comm: syz.0.2636 Not tainted syzkaller #0 PREEMPT(full) [ 347.799832][T14364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.799843][T14364] Call Trace: [ 347.799851][T14364] [ 347.799859][T14364] dump_stack_lvl+0x189/0x250 [ 347.799888][T14364] ? __pfx____ratelimit+0x10/0x10 [ 347.799913][T14364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.799935][T14364] ? __pfx__printk+0x10/0x10 [ 347.799956][T14364] ? __pfx___might_resched+0x10/0x10 [ 347.799976][T14364] ? fs_reclaim_acquire+0x7d/0x100 [ 347.799997][T14364] should_fail_ex+0x414/0x560 [ 347.800028][T14364] should_failslab+0xa8/0x100 [ 347.800058][T14364] kmem_cache_alloc_node_noprof+0x77/0x710 [ 347.800081][T14364] ? __alloc_skb+0x112/0x2d0 [ 347.800097][T14364] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 347.800127][T14364] __alloc_skb+0x112/0x2d0 [ 347.800148][T14364] rtmsg_ifinfo_build_skb+0x84/0x260 [ 347.800180][T14364] rtnetlink_event+0x1b7/0x270 [ 347.800202][T14364] notifier_call_chain+0x1b6/0x3e0 [ 347.800231][T14364] netif_change_tx_queue_len+0x120/0x270 [ 347.800255][T14364] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 347.800276][T14364] ? netdev_name_node_lookup+0xdf/0x120 [ 347.800307][T14364] dev_change_tx_queue_len+0x125/0x260 [ 347.800331][T14364] dev_ioctl+0x7b4/0x1150 [ 347.800352][T14364] sock_do_ioctl+0x22c/0x300 [ 347.800376][T14364] ? __pfx_sock_do_ioctl+0x10/0x10 [ 347.800413][T14364] sock_ioctl+0x576/0x790 [ 347.800435][T14364] ? __pfx_sock_ioctl+0x10/0x10 [ 347.800457][T14364] ? __fget_files+0x3a0/0x420 [ 347.800473][T14364] ? __fget_files+0x2a/0x420 [ 347.800492][T14364] ? bpf_lsm_file_ioctl+0x9/0x20 [ 347.800509][T14364] ? __pfx_sock_ioctl+0x10/0x10 [ 347.800529][T14364] __se_sys_ioctl+0xfc/0x170 [ 347.800554][T14364] do_syscall_64+0xfa/0xfa0 [ 347.800570][T14364] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.800587][T14364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.800604][T14364] ? clear_bhb_loop+0x60/0xb0 [ 347.800625][T14364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.800643][T14364] RIP: 0033:0x7f10f7d8f6c9 [ 347.800660][T14364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.800674][T14364] RSP: 002b:00007f10f8c73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.800695][T14364] RAX: ffffffffffffffda RBX: 00007f10f7fe5fa0 RCX: 00007f10f7d8f6c9 [ 347.800708][T14364] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000009 [ 347.800719][T14364] RBP: 00007f10f8c73090 R08: 0000000000000000 R09: 0000000000000000 [ 347.800730][T14364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.800741][T14364] R13: 00007f10f7fe6038 R14: 00007f10f7fe5fa0 R15: 00007ffc509b11f8 [ 347.800774][T14364] [ 348.187679][ T3574] net_ratelimit: 4 callbacks suppressed [ 348.187699][ T3574] bond4: (slave macvlan2): failed to get link speed/duplex [ 348.309619][ T3574] bond4: (slave macvlan2): failed to get link speed/duplex [ 348.326774][T14382] netlink: 'syz.3.2643': attribute type 10 has an invalid length. [ 348.433628][T14388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2642'. [ 348.445414][T14373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2639'. [ 348.526720][ T12] bond4: (slave macvlan2): failed to get link speed/duplex [ 348.636109][ T12] bond4: (slave macvlan2): failed to get link speed/duplex [ 348.753248][ T3460] bond4: (slave macvlan2): failed to get link speed/duplex [ 348.887258][ T6341] bond4: (slave macvlan2): failed to get link speed/duplex [ 349.015953][ T12] bond4: (slave macvlan2): failed to get link speed/duplex [ 349.056802][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2652'. [ 349.105491][T14410] FAULT_INJECTION: forcing a failure. [ 349.105491][T14410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.121747][T14410] CPU: 0 UID: 0 PID: 14410 Comm: syz.4.2651 Not tainted syzkaller #0 PREEMPT(full) [ 349.121773][T14410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.121784][T14410] Call Trace: [ 349.121791][T14410] [ 349.121799][T14410] dump_stack_lvl+0x189/0x250 [ 349.121825][T14410] ? __pfx____ratelimit+0x10/0x10 [ 349.121849][T14410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.121870][T14410] ? __pfx__printk+0x10/0x10 [ 349.121887][T14410] ? __might_fault+0xb0/0x130 [ 349.121920][T14410] should_fail_ex+0x414/0x560 [ 349.121957][T14410] _copy_from_user+0x2d/0xb0 [ 349.121980][T14410] ___sys_recvmsg+0x12e/0x510 [ 349.122004][T14410] ? __pfx____sys_recvmsg+0x10/0x10 [ 349.122050][T14410] ? __might_fault+0xb0/0x130 [ 349.122074][T14410] do_recvmmsg+0x307/0x770 [ 349.122102][T14410] ? __pfx_do_recvmmsg+0x10/0x10 [ 349.122132][T14410] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 349.122169][T14410] __x64_sys_recvmmsg+0x190/0x240 [ 349.122191][T14410] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 349.122214][T14410] ? do_syscall_64+0xbe/0xfa0 [ 349.122234][T14410] do_syscall_64+0xfa/0xfa0 [ 349.122250][T14410] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.122265][T14410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.122283][T14410] ? clear_bhb_loop+0x60/0xb0 [ 349.122304][T14410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.122321][T14410] RIP: 0033:0x7f93ded8f6c9 [ 349.122337][T14410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.122352][T14410] RSP: 002b:00007f93dfc20038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 349.122371][T14410] RAX: ffffffffffffffda RBX: 00007f93defe5fa0 RCX: 00007f93ded8f6c9 [ 349.122384][T14410] RDX: 0000000004000210 RSI: 0000200000001740 RDI: 0000000000000004 [ 349.122396][T14410] RBP: 00007f93dfc20090 R08: 0000000000000000 R09: 0000000000000000 [ 349.122408][T14410] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 349.122418][T14410] R13: 00007f93defe6038 R14: 00007f93defe5fa0 R15: 00007ffc061844d8 [ 349.122447][T14410] [ 349.335805][ T3460] bond4: (slave macvlan2): failed to get link speed/duplex [ 349.373397][T14415] lo speed is unknown, defaulting to 1000 [ 349.447051][ T3460] bond4: (slave macvlan2): failed to get link speed/duplex [ 349.626460][ T6341] bond4: (slave macvlan2): failed to get link speed/duplex [ 349.791231][T14427] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2658'. [ 349.808149][T14427] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 349.901562][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'. [ 349.948717][T14437] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2662'. [ 349.960687][T14437] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 350.030956][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2663'. [ 350.124030][T14444] bridge_slave_1: left allmulticast mode [ 350.129955][T14444] bridge_slave_1: left promiscuous mode [ 350.138067][T14444] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.154813][T14444] bridge_slave_0: left allmulticast mode [ 350.161492][T14444] bridge_slave_0: left promiscuous mode [ 350.168285][T14444] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.507765][T14461] FAULT_INJECTION: forcing a failure. [ 350.507765][T14461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.527054][T14461] CPU: 1 UID: 0 PID: 14461 Comm: syz.4.2673 Not tainted syzkaller #0 PREEMPT(full) [ 350.527081][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 350.527091][T14461] Call Trace: [ 350.527098][T14461] [ 350.527106][T14461] dump_stack_lvl+0x189/0x250 [ 350.527141][T14461] ? __pfx____ratelimit+0x10/0x10 [ 350.527165][T14461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.527185][T14461] ? __pfx__printk+0x10/0x10 [ 350.527203][T14461] ? __might_fault+0xb0/0x130 [ 350.527235][T14461] should_fail_ex+0x414/0x560 [ 350.527264][T14461] _copy_from_user+0x2d/0xb0 [ 350.527286][T14461] ___sys_sendmsg+0x158/0x2a0 [ 350.527309][T14461] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.527367][T14461] ? __might_fault+0xb0/0x130 [ 350.527393][T14461] __sys_sendmmsg+0x227/0x430 [ 350.527418][T14461] ? __pfx___sys_sendmmsg+0x10/0x10 [ 350.527445][T14461] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 350.527481][T14461] ? ksys_write+0x22a/0x250 [ 350.527506][T14461] ? __pfx_ksys_write+0x10/0x10 [ 350.527534][T14461] __x64_sys_sendmmsg+0xa0/0xc0 [ 350.527555][T14461] do_syscall_64+0xfa/0xfa0 [ 350.527571][T14461] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.527588][T14461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.527605][T14461] ? clear_bhb_loop+0x60/0xb0 [ 350.527626][T14461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.527643][T14461] RIP: 0033:0x7f93ded8f6c9 [ 350.527659][T14461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.527673][T14461] RSP: 002b:00007f93dfc20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 350.527692][T14461] RAX: ffffffffffffffda RBX: 00007f93defe5fa0 RCX: 00007f93ded8f6c9 [ 350.527705][T14461] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000004 [ 350.527717][T14461] RBP: 00007f93dfc20090 R08: 0000000000000000 R09: 0000000000000000 [ 350.527728][T14461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 350.527738][T14461] R13: 00007f93defe6038 R14: 00007f93defe5fa0 R15: 00007ffc061844d8 [ 350.527765][T14461] [ 350.583324][T14467] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2675'. [ 350.767662][T14473] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 350.799119][T14469] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 350.991101][T14483] lo speed is unknown, defaulting to 1000 [ 351.043513][T14486] [ 351.046057][T14486] ====================================================== [ 351.053082][T14486] WARNING: possible circular locking dependency detected [ 351.060197][T14486] syzkaller #0 Not tainted [ 351.064602][T14486] ------------------------------------------------------ [ 351.071598][T14486] syz.4.2682/14486 is trying to acquire lock: [ 351.077644][T14486] ffffffff8f4268d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 351.086954][T14486] [ 351.086954][T14486] but task is already holding lock: [ 351.094299][T14486] ffff8880518b0670 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 351.103602][T14486] [ 351.103602][T14486] which lock already depends on the new lock. [ 351.103602][T14486] [ 351.113993][T14486] [ 351.113993][T14486] the existing dependency chain (in reverse order) is: [ 351.123001][T14486] [ 351.123001][T14486] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 351.130987][T14486] lock_acquire+0x120/0x360 [ 351.136012][T14486] _raw_spin_lock_bh+0x36/0x50 [ 351.141284][T14486] nr_rt_device_down+0x12a/0x720 [ 351.146827][T14486] nr_device_event+0x137/0x150 [ 351.152099][T14486] notifier_call_chain+0x1b6/0x3e0 [ 351.157727][T14486] __dev_notify_flags+0x18d/0x2e0 [ 351.163258][T14486] netif_change_flags+0xe8/0x1a0 [ 351.168719][T14486] dev_change_flags+0x130/0x260 [ 351.174085][T14486] dev_ioctl+0x7b4/0x1150 [ 351.178920][T14486] sock_do_ioctl+0x22c/0x300 [ 351.184027][T14486] sock_ioctl+0x576/0x790 [ 351.188862][T14486] __se_sys_ioctl+0xfc/0x170 [ 351.193960][T14486] do_syscall_64+0xfa/0xfa0 [ 351.198972][T14486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.205380][T14486] [ 351.205380][T14486] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 351.213186][T14486] lock_acquire+0x120/0x360 [ 351.218203][T14486] _raw_spin_lock_bh+0x36/0x50 [ 351.223475][T14486] nr_rt_device_down+0xa9/0x720 [ 351.228844][T14486] nr_device_event+0x137/0x150 [ 351.234139][T14486] notifier_call_chain+0x1b6/0x3e0 [ 351.239762][T14486] __dev_notify_flags+0x18d/0x2e0 [ 351.245295][T14486] netif_change_flags+0xe8/0x1a0 [ 351.250767][T14486] dev_change_flags+0x130/0x260 [ 351.256124][T14486] dev_ioctl+0x7b4/0x1150 [ 351.260970][T14486] sock_do_ioctl+0x22c/0x300 [ 351.266066][T14486] sock_ioctl+0x576/0x790 [ 351.270899][T14486] __se_sys_ioctl+0xfc/0x170 [ 351.275994][T14486] do_syscall_64+0xfa/0xfa0 [ 351.281013][T14486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.287419][T14486] [ 351.287419][T14486] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 351.295312][T14486] validate_chain+0xb9b/0x2140 [ 351.300625][T14486] __lock_acquire+0xab9/0xd20 [ 351.305811][T14486] lock_acquire+0x120/0x360 [ 351.310818][T14486] _raw_spin_lock_bh+0x36/0x50 [ 351.316093][T14486] nr_remove_neigh+0x25/0xe0 [ 351.321195][T14486] nr_add_node+0x1d9f/0x2570 [ 351.326297][T14486] nr_rt_ioctl+0xc12/0xd50 [ 351.331306][T14486] sock_do_ioctl+0xdc/0x300 [ 351.336334][T14486] sock_ioctl+0x576/0x790 [ 351.341172][T14486] __se_sys_ioctl+0xfc/0x170 [ 351.346358][T14486] do_syscall_64+0xfa/0xfa0 [ 351.351367][T14486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.357768][T14486] [ 351.357768][T14486] other info that might help us debug this: [ 351.357768][T14486] [ 351.367997][T14486] Chain exists of: [ 351.367997][T14486] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 351.367997][T14486] [ 351.381804][T14486] Possible unsafe locking scenario: [ 351.381804][T14486] [ 351.389235][T14486] CPU0 CPU1 [ 351.394579][T14486] ---- ---- [ 351.399925][T14486] lock(&nr_node->node_lock); [ 351.404677][T14486] lock(nr_node_list_lock); [ 351.411767][T14486] lock(&nr_node->node_lock); [ 351.419035][T14486] lock(nr_neigh_list_lock); [ 351.423697][T14486] [ 351.423697][T14486] *** DEADLOCK *** [ 351.423697][T14486] [ 351.431821][T14486] 1 lock held by syz.4.2682/14486: [ 351.436914][T14486] #0: ffff8880518b0670 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 351.446653][T14486] [ 351.446653][T14486] stack backtrace: [ 351.452526][T14486] CPU: 1 UID: 0 PID: 14486 Comm: syz.4.2682 Not tainted syzkaller #0 PREEMPT(full) [ 351.452558][T14486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.452573][T14486] Call Trace: [ 351.452580][T14486] [ 351.452586][T14486] dump_stack_lvl+0x189/0x250 [ 351.452615][T14486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.452632][T14486] ? __pfx__printk+0x10/0x10 [ 351.452644][T14486] ? stack_trace_save+0x9c/0xe0 [ 351.452665][T14486] print_circular_bug+0x2ee/0x310 [ 351.452684][T14486] check_noncircular+0x134/0x160 [ 351.452708][T14486] validate_chain+0xb9b/0x2140 [ 351.452731][T14486] __lock_acquire+0xab9/0xd20 [ 351.452747][T14486] ? nr_remove_neigh+0x25/0xe0 [ 351.452764][T14486] lock_acquire+0x120/0x360 [ 351.452776][T14486] ? nr_remove_neigh+0x25/0xe0 [ 351.452796][T14486] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 351.452813][T14486] ? nr_remove_neigh+0x25/0xe0 [ 351.452836][T14486] _raw_spin_lock_bh+0x36/0x50 [ 351.452855][T14486] ? nr_remove_neigh+0x25/0xe0 [ 351.452872][T14486] nr_remove_neigh+0x25/0xe0 [ 351.452890][T14486] nr_add_node+0x1d9f/0x2570 [ 351.452908][T14486] ? __asan_memcpy+0x40/0x70 [ 351.452926][T14486] ? nr_call_to_digi+0x126/0x1b0 [ 351.452943][T14486] nr_rt_ioctl+0xc12/0xd50 [ 351.452964][T14486] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 351.452979][T14486] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.453003][T14486] ? apparmor_capable+0x137/0x1b0 [ 351.453020][T14486] ? capable+0x89/0xe0 [ 351.453035][T14486] ? nr_ioctl+0x1b1/0x3b0 [ 351.453050][T14486] sock_do_ioctl+0xdc/0x300 [ 351.453069][T14486] ? __pfx_sock_do_ioctl+0x10/0x10 [ 351.453091][T14486] sock_ioctl+0x576/0x790 [ 351.453108][T14486] ? __pfx_sock_ioctl+0x10/0x10 [ 351.453126][T14486] ? __fget_files+0x3a0/0x420 [ 351.453139][T14486] ? __fget_files+0x2a/0x420 [ 351.453152][T14486] ? bpf_lsm_file_ioctl+0x9/0x20 [ 351.453167][T14486] ? __pfx_sock_ioctl+0x10/0x10 [ 351.453183][T14486] __se_sys_ioctl+0xfc/0x170 [ 351.453201][T14486] do_syscall_64+0xfa/0xfa0 [ 351.453214][T14486] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.453226][T14486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.453240][T14486] ? clear_bhb_loop+0x60/0xb0 [ 351.453255][T14486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.453268][T14486] RIP: 0033:0x7f93ded8f6c9 [ 351.453282][T14486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.453296][T14486] RSP: 002b:00007f93dfc20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.453311][T14486] RAX: ffffffffffffffda RBX: 00007f93defe5fa0 RCX: 00007f93ded8f6c9 [ 351.453323][T14486] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000005 [ 351.453332][T14486] RBP: 00007f93dee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 351.453340][T14486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.453348][T14486] R13: 00007f93defe6038 R14: 00007f93defe5fa0 R15: 00007ffc061844d8 [ 351.453364][T14486] [ 351.785427][T14486] syz_tun: entered promiscuous mode [ 353.216046][ T3510] net_ratelimit: 22 callbacks suppressed [ 353.216066][ T3510] bond4: (slave macvlan2): failed to get link speed/duplex [ 353.335955][ T3510] bond4: (slave macvlan2): failed to get link speed/duplex [ 353.446175][ T3574] bond4: (slave macvlan2): failed to get link speed/duplex [ 353.556146][ T3574] bond4: (slave macvlan2): failed to get link speed/duplex [ 353.665964][ T3574] bond4: (slave macvlan2): failed to get link speed/duplex [ 353.775965][ T3460] bond4: (slave macvlan2): failed to get link speed/duplex [ 353.886015][ T3460] bond4: (slave macvlan2): failed to get link speed/duplex [ 353.996219][ T3460] bond4: (slave macvlan2): failed to get link speed/duplex [ 354.105954][ T12] bond4: (slave macvlan2): failed to get link speed/duplex [ 354.226526][ T3460] bond4: (slave macvlan2): failed to get link speed/duplex [ 358.226165][ T57] net_ratelimit: 35 callbacks suppressed [ 358.226187][ T57] bond4: (slave macvlan2): failed to get link speed/duplex [ 358.346219][ T3510] bond4: (slave macvlan2): failed to get link speed/duplex [ 358.456131][ T6341] bond4: (slave macvlan2): failed to get link speed/duplex [ 358.565893][ T3574] bond4: (slave macvlan2): failed to get link speed/duplex [ 358.685894][ T6341] bond4: (slave macvlan2): failed to get link speed/duplex [ 358.796191][ T6341] bond4: (slave macvlan2): failed to get link speed/duplex [ 358.906113][ T3574] bond4: (slave macvlan2): failed to get link speed/duplex [ 359.015839][ T3510] bond4: (slave macvlan2): failed to get link speed/duplex [ 359.126107][ T3510] bond4: (slave macvlan2): failed to get link speed/duplex [ 359.235904][ T3510] bond4: (slave macvlan2): failed to get link speed/duplex