last executing test programs: 1m1.274508295s ago: executing program 1 (id=1290): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x128}, 0x1, 0x0, 0x0, 0x4000000}, 0x20030080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@newtaction={0x2e8, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2d4, 0x1, [@m_ife={0x90, 0xb, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8008, 0x6, 0x1fc, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x31, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad328a4154dd4046c261a61dc99ee70038b3509"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0xcc, 0x34, 0x0, 0x0, {{0x9}, {0x4}, {0x9d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df8dc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xc0, 0x9, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x6, 0x10000000, 0xc69, 0x3}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8001, 0x4, 0x7, 0x87f3, 0x6}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x9, 0x6, 0x3, 0x8000}}, @TCA_ACT_BPF_FD={0x8}]}, {0x3d, 0x6, "a09e88b2fafe2ad0dddad3cdaa9b726cf5b56034a46fe446c7d19b5780d1bd141230a65f0db61f93ab839c730b3903572c517419564b6cfe47"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xb4, 0x4, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x4, 0x1, 0x7}}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x4}]}, {0x3d, 0x6, "91ee006b0fddf50a8e24f8dae49128826481a23a4f6a15b0baafbd3caabb34800341a46986d6845e3558abc0ee240500fe788c94b90ed5983d"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4088, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x44}, {&(0x7f0000000200)=""/63, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (fail_nth: 3) 1m0.795940008s ago: executing program 1 (id=1295): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) (rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x60, r2, 0xe096044a3fc9e6f1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfd}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x9}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xffffffff, 0x401}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async, rerun: 64) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0x4, 0x0, &(0x7f00000000c0)) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x4, 0x6, 0x80000001, 0x81, 0x5, 0x100, 0x7, [0xd9bb, 0xd]}}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6802000000050104000000000000000000000000540201"], 0x268}, 0x1, 0x0, 0x0, 0xc060}, 0x0) 1m0.540305642s ago: executing program 1 (id=1301): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x2) 1m0.179926789s ago: executing program 1 (id=1305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000000)={0x1, 0x59b, 0x5, {}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r3], 0x7c}}, 0x80) 1m0.015635908s ago: executing program 1 (id=1308): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0xb4, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x84, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@TCA_NETEM_DELAY_DIST={0x68, 0xd, "1b057e80c26089a73ed32a6395a105a291946f4b7f3f6bcdb78fb27d2fb00ba43ad39d4be32634f5981bbf5ade4f584aef73ddf4e1b7807adc803bd94276ff55e3846ce91e5f041a7a1550bb0a000000b6445aff5e70944fac2d3bd79d188bd1116df49e"}]}}}]}, 0xb4}}, 0x0) 59.761914475s ago: executing program 1 (id=1313): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x20000000000000bf, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e655400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x10}, 0x94) 44.608052403s ago: executing program 32 (id=1313): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x20000000000000bf, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x10}, 0x94) 2.826818853s ago: executing program 4 (id=2023): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x31) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140ac1414bb0fcb9bd24853d47d0effe08027d4928fa51c47b1b94c7206b9cdfb3bdb204724e2f8b32b83c20794ce790a90fdf9a6b1015ae3b044f062f8b01960ffd60cf6d60d563ba7fc1efb1e13ad0d8d489f9a55edaeb773ff2b5b980f5395e2b6c6c755264dca83ef2fafa5807a8c2bf816289cf5d94669824b6d568a599ae8570a8a85eb1da686b7d6b4517729a466649545e9577887f98891e378e7fa26f8"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r7 = accept(r6, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x800) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r11, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x5c, 0x433547ab64d46445, 0xb, 0x16, 0x48, 0x4, 0x6c, 0x6c]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008044}], 0x1, 0x40081) recvmsg(r7, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) recvfrom$rose(r7, &(0x7f0000000900)=""/4096, 0x1000, 0x40000000, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @null}, 0x1c) 2.020133935s ago: executing program 3 (id=2036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async, rerun: 64) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000210021002cbd7000fedbdf2502141007020000000000010008000100e0000001080006000a0000000c000c40000000000000001e0c000c4000000000000000061800020006"], 0x5c}, 0x1, 0x0, 0x0, 0x40d5}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x38, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0x8}, {0xfff3, 0x1}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 1.884303397s ago: executing program 5 (id=2040): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) socket(0x400000000010, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x5, @mcast1, 0x101}, 0x1c) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', 0xffffffffffffffff, 0x0, 0xb9b}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000010000100000000000000000000c3ffff", @ANYRES32=r4, @ANYBLOB="84110000044000000a00010042"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.75997144s ago: executing program 4 (id=2041): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x7}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800000}}, 0x0, 0x4f1}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000004030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000002000000020000006401010200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099a9ec5e08887f19386a5a0c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac141400"/412], 0x190) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r3 = socket$igmp(0x2, 0x3, 0x2) recvfrom$inet(r3, &(0x7f0000000040)=""/56, 0x38, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r3, 0x9, 0x80000000, 0x9}) bind$bt_l2cap(r4, &(0x7f00000001c0)={0x1f, 0x5, @any, 0xcb4, 0x1}, 0xe) 1.741651636s ago: executing program 3 (id=2042): syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x7, 0x401, @dev={0xfe, 0x80, '\x00', 0x4b}, 0x8}, 0x20) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001200010400000000000000000000ffff", @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800020003000000140003"], 0x50}}, 0x0) 1.6154867s ago: executing program 5 (id=2045): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="c9715a060afc8dad842db2df0fb8ed5f2622ff32ca2bfa8cc6081b", 0x1b, 0x40, &(0x7f0000000100)={0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00', 0x7fff}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FITHAW(r2, 0xc0045878) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 1.51488257s ago: executing program 5 (id=2047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'vlan0\x00', 0x12}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x134, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffec}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x91}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x89a3, &(0x7f0000000100)) syz_emit_ethernet(0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60d2004000583a00fe800000000000000000000000000000fe8000000000000000000000000000aa04009078000000006031c90900002b0000000000000000000000000000000000fe8000000000000000000000000000bb6c04040200000000fe880000000000000000000000000001fe8000000000000000000000000014bb"], 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0x1}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x2, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x4}, {0x0, 0xc}, {0xfff1, 0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xe}, @TCA_RATE={0x6, 0x5, {0x3, 0xd}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x4010) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040054}, 0x4004884) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="185200000800000000000000000000001f90fffff0ffffff180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f1000000850000000600000018140000c12cbb3e94a6e68922981b4b953f74faef33ef154131b12a05fee415f7aa59a1d5e866159f6e3117c939593a57b9fd90f9ffc792f8c82c149cf38b8cf3d200e9d1a86a3a80edd0260d219b1cadc3cbad56ffce617e512f143eb3", @ANYRES32, @ANYBLOB="000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000490000008500000006000000b7e3fcfffcffffff"], &(0x7f0000000340)='GPL\x00', 0x7, 0x62, &(0x7f0000000500)=""/98, 0x41000, 0x45, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x3, 0x101, 0xc3d}, 0x10, 0xffffffffffffffff, 0x0, 0xa, &(0x7f00000005c0)=[r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x0, 0x2, 0xd, 0xa}, {0x5, 0x5, 0x7, 0xa}, {0x3, 0x3, 0xa, 0x8}, {0x2, 0x1, 0x0, 0x5}, {0x0, 0x1, 0xc, 0x8}, {0x4, 0x3, 0x2, 0x3}, {0x5, 0x5, 0xd, 0x2}, {0x1, 0x1, 0xb}, {0x5, 0x3}, {0x4, 0x4, 0x9, 0x2}], 0x10, 0x40}, 0x94) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000600)={0x0, 0x2, 0x8, 0x5}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@gettaction={0x14, 0x32, 0x8, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000091}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048890}, 0x4008000) 1.347643072s ago: executing program 3 (id=2048): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0xf8, 0x10, 0xfffff63d, 0x70bd2b, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x1}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x400}, @IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'sit0\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'pim6reg\x00'}, {0x14, 0x35, 'gretap0\x00'}, {0x14, 0x35, 'veth1_to_hsr\x00'}]}]}, 0xf8}}, 0x4051) 1.328805457s ago: executing program 5 (id=2050): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x700, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0xd0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) 833.134823ms ago: executing program 3 (id=2053): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r3) sendmsg$NFC_CMD_SE_IO(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000c51d0d43", @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0xea60}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x7, &(0x7f0000000540)=ANY=[@ANYRESHEX=r6], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r1, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x400) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x2e, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000060000001b0000000000df26301d780ee4225014fd797199a20000182300001c6f", @ANYRES32, @ANYBLOB="000000000900000018450000f9ffffff000000000000000018440000fbffffff0000000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000018120000", @ANYBLOB="784909a3ec60edeb0d9f", @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018240000", @ANYRES32=r2, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x4, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x4, 0x1, 0x9, 0x6}], 0x10, 0x1}, 0x94) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d00)=ANY=[@ANYBLOB="e40100001600010000000000fec0000000000000000000000000000cff0200000000000000000000000000010e2100004ecb44de50b5bc1be294caa4162000000a74c0784e040a5aa69b7fdaf6cbffbc4ffbc1900edd3f139b43071c587c8169fab1da5b125bb1913d5f17056f3ca90267308462dd28368b0c44b3fe0d64697a247081b32fe1f927b70522c746e3ea8b9f80d9b5f344c2f5d5606001f27c084280b786b0f2ffb85aac869cba3a4d52e129244455f685c54ab5da5d602e80e0f0efcb3017cd3b44498a9f6bf73448490525f94f3e3d2f334834a4ad535da07c800f42b1d6db856e8c00"/248, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1e4}}, 0x0) setsockopt(r10, 0x84, 0x77, &(0x7f00000002c0)="1a00000002000000", 0x8) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8040) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r11, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000003c0)={r8, r9}) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000500)=0xd0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000580)={'wpan4\x00'}) 832.070945ms ago: executing program 0 (id=2055): r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x70}}, 0x0) r4 = socket$packet(0x11, 0x4, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r9, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006480)={0x40, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FILTER={0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24040004) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r8], 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 831.08309ms ago: executing program 0 (id=2056): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) socket(0x400000000010, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x5, @mcast1, 0x101}, 0x1c) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', 0xffffffffffffffff, 0x0, 0xb9b}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000010000100000000000000000000feffff", @ANYRES32=r4, @ANYBLOB="84110000044000000a00010042"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 829.418038ms ago: executing program 2 (id=2057): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00000000000000000000000000004000000000000000000000ffff7f00000100", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000009000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000352f0000001c2fb9763341812fa06f73c2691190796d7288f4"], 0xb8}}, 0x4000) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000040)={@empty, @empty}, 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r10, 0x29, 0x4e, 0x0, &(0x7f0000000bc0)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r11, &(0x7f0000006a40)={0x0, 0x0, &(0x7f0000006a00)={&(0x7f0000006840)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8094) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000001200)={@rand_addr=' \x01\x00'}, 0x14) 829.008424ms ago: executing program 3 (id=2058): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xa00, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r4}, 0x10) 827.517207ms ago: executing program 2 (id=2059): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x8100000000000000) 825.295899ms ago: executing program 0 (id=2060): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xffffffffffffff3d, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000100)={0x5e2b, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) sendto(0xffffffffffffffff, &(0x7f0000000040)="2a2c8ee5ec6a2a69f1bb03e652b5167bde0242a85cece0349e00fe15f18ad4753466b9454d5ca00de893a31d459c4770a582ea2f4bf6541a35274aaa4b8fa8ba62285cc815bdca126a0e5a9c61029436d7374530bd5fa17c5abaf3c917c9283c300af113b83ac187f5aa20a7d46588e8262f3baa763ab72dcc41de8a786f5867610fe49c5afeb7548393aa42df95152e92e030d153791368", 0x98, 0x40040, &(0x7f0000000100)=@l2tp={0x2, 0x0, @local, 0x4}, 0x80) (async) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f00000001c0)) 736.498429ms ago: executing program 2 (id=2061): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000100)=r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@ipv6_newroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff}, [@RTA_GATEWAY={0x14, 0x5, @empty}]}, 0x30}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0xfe33) 736.162329ms ago: executing program 4 (id=2062): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000", @ANYRES8=r1], 0x7c}}, 0x80) 726.661633ms ago: executing program 0 (id=2063): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x52, &(0x7f0000000500)={&(0x7f0000001d80)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) syz_emit_ethernet(0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000403a0020010000000000000000000000000001ff020000000000000000000000000001010390787f00000060e1f588000700ffff020000000000000000000000000001ff025ef20ea9234f0000000000000000000000000001be000000000000007bf3"], 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x43}}}, 0x10) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r3, 0x89e3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000004c0)={0x9, 0x3, 0x7, 0x5}, 0x10) write(r0, &(0x7f0000000180)="8f2a0a6c1a391fd01288ee7cecd0c72463caf2cc7818f83c22fcd447b834430b4574b6e75684822be88137936234a83993", 0x31) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000002c0)='rpm_return_int\x00', r4, 0x0, 0x8}, 0x18) accept4(r3, &(0x7f0000001cc0)=@nfc_llcp, &(0x7f0000001d40)=0x80, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) r7 = socket$inet6(0xa, 0x2, 0x8001) sendmsg$inet6(r7, &(0x7f0000000200)={&(0x7f0000000080)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x9}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000000c0)="e97dea50d6599a2b9a4e1ed881fff2fd2750d3515083f69f5ab15d644480bdc798eab049ce72ff", 0x27}, {&(0x7f0000000140)="d96141e5754368", 0x7}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f00000002c0)="cd66e65f638bfaf8a5c284dd95f89da5f18b5575ea1766e89cde7a89599ed952776eba67749c51d793aa93fbad6e06a4951272e203d1d3f7abc63aa814794776d4c4a60e1c676230bf017b197ea7a46ab74c8c2438c28b953ea012dc2695cc8810351325b055b58e6620ff4b9de6a95bd20e28a92fe55ffe76948b2efdf363161ffbcc927c71bce695ba122f9d972bbaabb0b7073718d03dd8c820b6e31615f47662e68c41b9419dcff151654d1bb441e4a6eaaffadc13001dc42ba8cd4041b251abf4a30a5ab452488c8a4a9f0bcaf24c4b9a2d9c5f47cb485b387a4ddc1563ec29d8fac5bb67286b18736947f17ac41484a29bc944", 0xf6}, {&(0x7f00000003c0)="2ed80b06120620958975bf472daf08896ddc55e118d84c370e0940081215dfb6833c2354e123895aef9c7d2a3a5242359f091c17177b4e3be4e8a850a8de76531a98761e4f05fbd6d6106eb3a745794ae3d19ace16d8ec9dfe0076246688a3acc748c7034773579ce7ab31cb1de5e8eeaa42", 0x72}], 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="1400000000000000290000003e00000000020000000000004800000000000000290000003900000089060016000000002001000000000000000000000000000120010000000000000000000000000001fe8000000000000000000000000000152800000000000000290000003900000016020206000000000000000000000000000000000000000028000000000000002900000039000000010200f200000000fe8000000000000000000000000000bb14000000000000002900f4ff0a0000000000000300000000"], 0xc8}, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x1000000, @loopback, 0x7}, 0x1c) 637.173787ms ago: executing program 2 (id=2064): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r0, 0x1, 0x8, 0x7}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x14, 0x0, &(0x7f0000000100)) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) shutdown(r2, 0x1) splice(r2, 0x0, r1, 0x0, 0x2, 0x0) 519.823957ms ago: executing program 0 (id=2065): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4}]}, 0x0, 0x5}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) pread64(r2, &(0x7f0000001100)=""/238, 0xee, 0xffa000) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r5) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0xf) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xb3, 0x0, 0x5, 0x8}, 0x8) sendto$inet6(r7, &(0x7f0000000140)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x42, &(0x7f0000000940)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x69}, @timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmmsg(r9, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000200)=""/144, 0x90}], 0x2}, 0x1}], 0x400000000000032, 0x100, 0x0) 518.868364ms ago: executing program 4 (id=2066): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x55d}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4048010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) close(0x3) 415.770219ms ago: executing program 2 (id=2067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000140)={'vlan0\x00', @ifru_addrs=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x3}}}}) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000000701040000000000000000010000060400078014000780088e3c410002400000000108000240000000010900010073797a30000000000800094000000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24040004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYRES32=r2, @ANYRES16=r3, @ANYBLOB="010000000000000000001400000004000000000096000200000000000c0003000000000000000000080001000000000008000200000000000c000300000000000000000008000100000000000c00030000000000000000000800020000000000080001000000000008000100000000000c0004000000000000000000300005802c00028008000100000000000800020000000000080004000000000008000100000000000800030000000000700001803400028008000400000000000800030000000000080002000000000008000100000000000800040000000000080004000000000008000300000000000d0001007564703a73797a30000000001700010071623a76657468305f766972745f776966690000080003000000000004000480440002801982c902000000000800010000000000040004000800010000000000080001000000000008000200000000000400040004000400080002000000000004000400080005800400028000"/378], 0x180}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010760305000000000000913d00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e0014000280100005800a0004000000000000000000"], 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYRESOCT=r5, @ANYRES8=r6], 0x5c}}, 0x0) 355.704321ms ago: executing program 5 (id=2068): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c080}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008800}, 0x4) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0605000000000000000000020000030900020073797a30000000000500010007000000050001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x240440c0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES8=r5, @ANYRESOCT=r5, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434000800020005"], 0x54}}, 0x4000000) 286.275637ms ago: executing program 4 (id=2069): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, 0x0, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}}, 0x0) splice(r1, 0x0, r0, 0x0, 0x9, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000009c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000007}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @generic={0x6, 0xc, 0xf, 0x0, 0x2744}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'veth0_macvtap\x00', @broadcast}) 207.529788ms ago: executing program 0 (id=2070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="580000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002800500090000000000050004008000000014000300ff"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000d6e00000000a332c078adb0120c9121f14314e272d300"/41, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1566ecbc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x803, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write(r1, &(0x7f0000000280)="834422e6d087dc16a576ae45ffa1fff0f1c14a3b7b42dbf6bee50de54ea86c6d25b0b9d0ea2e19c0e00e269dac000c9505350cc46bcbbb9aae8444d2c9b2cc923602baa91fe8348e", 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0xf0, 0x18, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {@in6=@loopback, 0x4d4, 0x32}, @in=@dev, {}, {0x0, 0x200000000, 0x0, 0x100000}, {}, 0x1, 0x0, 0x2, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, 0x0, &(0x7f0000000140)) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xab, 0x8e}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) write$cgroup_pressure(r7, &(0x7f0000000200)={'some', 0x20, 0x2, 0x20, 0x8000000000}, 0x2f) 141.666859ms ago: executing program 2 (id=2071): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) socket(0x400000000010, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x5, @mcast1, 0x101}, 0x1c) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', 0xffffffffffffffff, 0x0, 0xb9b}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=r4, @ANYBLOB="84110000044000000a00010042"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 96.377366ms ago: executing program 4 (id=2072): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000090005"], 0x20}}, 0x40080c0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x80}], 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000280)=0xfffffffe, 0x15) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f0000000180)=0x8) ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0xd0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r6, 0x305, 0x0, 0x0, {0x7}}, 0x14}}, 0x24044080) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r6, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) close(r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) 74.461648ms ago: executing program 5 (id=2073): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x5}, 0x8) close(r2) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 0s ago: executing program 3 (id=2074): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) kernel console output (not intermixed with test programs): has an invalid length. [ 259.773545][ T9728] tipc: Enabled bearer , priority 0 [ 259.781652][ T9728] syzkaller0: entered promiscuous mode [ 259.787359][ T9728] syzkaller0: entered allmulticast mode [ 260.243349][ T9725] tipc: Resetting bearer [ 260.365737][ T9725] tipc: Disabling bearer [ 260.431897][ T9750] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 260.443470][ T9750] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 261.290604][ T9787] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 261.312731][ T9789] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 261.340795][ T9789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.352926][ T9787] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 261.663088][ T9806] syz.3.1230 uses old SIOCAX25GETINFO [ 261.724290][ T9808] tap0: tun_chr_ioctl cmd 1074025672 [ 261.733608][ T9808] tap0: ignored: set checksum disabled [ 262.167051][ T9827] netlink: 'syz.4.1238': attribute type 9 has an invalid length. [ 262.831735][ T9862] netlink: 'syz.2.1250': attribute type 6 has an invalid length. [ 262.924269][ T9864] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 263.190576][ T9878] __nla_validate_parse: 17 callbacks suppressed [ 263.190597][ T9878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1255'. [ 263.505435][ T5969] syz0: Port: 1 Link ACTIVE [ 263.872344][ T9913] netlink: 'syz.2.1263': attribute type 4 has an invalid length. [ 264.197998][ T9928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1267'. [ 264.306919][ T9933] netlink: 'syz.2.1270': attribute type 4 has an invalid length. [ 264.505386][ T9944] dvmrp0: entered allmulticast mode [ 265.006669][ T9955] netlink: 'syz.4.1278': attribute type 4 has an invalid length. [ 265.025116][ T9955] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1278'. [ 265.375759][ T9978] netlink: 'syz.0.1288': attribute type 1 has an invalid length. [ 265.412129][ T9978] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1288'. [ 265.455035][ T9978] nbd: couldn't find device at index 1048576 [ 265.482259][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 265.527905][ T9985] FAULT_INJECTION: forcing a failure. [ 265.527905][ T9985] name failslab, interval 1, probability 0, space 0, times 0 [ 265.578237][ T9985] CPU: 1 UID: 0 PID: 9985 Comm: syz.1.1290 Not tainted syzkaller #0 PREEMPT(full) [ 265.578266][ T9985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.578279][ T9985] Call Trace: [ 265.578287][ T9985] [ 265.578296][ T9985] dump_stack_lvl+0x189/0x250 [ 265.578326][ T9985] ? __pfx____ratelimit+0x10/0x10 [ 265.578356][ T9985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.578380][ T9985] ? __pfx__printk+0x10/0x10 [ 265.578413][ T9985] ? __pfx___might_resched+0x10/0x10 [ 265.578433][ T9985] ? fs_reclaim_acquire+0x7d/0x100 [ 265.578471][ T9985] should_fail_ex+0x414/0x560 [ 265.578505][ T9985] should_failslab+0xa8/0x100 [ 265.578538][ T9985] __kmalloc_noprof+0xcb/0x4f0 [ 265.578565][ T9985] ? iovec_from_user+0x87/0x250 [ 265.578594][ T9985] iovec_from_user+0x87/0x250 [ 265.578622][ T9985] __import_iovec+0x163/0x7f0 [ 265.578657][ T9985] import_iovec+0x74/0xa0 [ 265.578685][ T9985] ___sys_recvmsg+0x43a/0x510 [ 265.578715][ T9985] ? __pfx____sys_recvmsg+0x10/0x10 [ 265.578774][ T9985] ? __fget_files+0x3a0/0x420 [ 265.578818][ T9985] do_recvmmsg+0x307/0x770 [ 265.578850][ T9985] ? __pfx_do_recvmmsg+0x10/0x10 [ 265.578888][ T9985] ? _copy_from_user+0x94/0xb0 [ 265.578929][ T9985] __x64_sys_recvmmsg+0x1af/0x240 [ 265.578956][ T9985] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 265.578976][ T9985] ? rcu_is_watching+0x15/0xb0 [ 265.579003][ T9985] ? do_syscall_64+0xbe/0x3b0 [ 265.579037][ T9985] do_syscall_64+0xfa/0x3b0 [ 265.579066][ T9985] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.579093][ T9985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.579114][ T9985] ? clear_bhb_loop+0x60/0xb0 [ 265.579140][ T9985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.579161][ T9985] RIP: 0033:0x7f493db8ebe9 [ 265.579179][ T9985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.579198][ T9985] RSP: 002b:00007f493e9ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 265.579220][ T9985] RAX: ffffffffffffffda RBX: 00007f493ddb5fa0 RCX: 00007f493db8ebe9 [ 265.579235][ T9985] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 265.579249][ T9985] RBP: 00007f493e9ed090 R08: 0000200000003700 R09: 0000000000000000 [ 265.579267][ T9985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.579280][ T9985] R13: 00007f493ddb6038 R14: 00007f493ddb5fa0 R15: 00007ffe03c8dae8 [ 265.579314][ T9985] [ 266.104859][T10002] netlink: 'syz.3.1296': attribute type 4 has an invalid length. [ 266.229348][T10011] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1300'. [ 266.469124][T10021] netlink: 'syz.0.1304': attribute type 1 has an invalid length. [ 266.480509][T10021] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1304'. [ 266.522150][T10021] nbd: couldn't find device at index 1048576 [ 266.544982][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1304'. [ 266.943882][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 267.023575][T10045] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 267.367997][T10058] netlink: 'syz.4.1317': attribute type 1 has an invalid length. [ 267.375793][T10058] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1317'. [ 267.390510][T10058] nbd: couldn't find device at index 1048576 [ 267.401293][T10058] veth0_to_bridge: left allmulticast mode [ 267.436174][T10058] veth0_to_bridge: left promiscuous mode [ 267.452292][T10058] bridge0: port 3(veth0_to_bridge) entered disabled state [ 267.492902][T10058] bridge_slave_1: left allmulticast mode [ 267.502781][T10058] bridge_slave_1: left promiscuous mode [ 267.510466][T10058] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.534358][T10058] bridge_slave_0: left allmulticast mode [ 267.546455][T10058] bridge_slave_0: left promiscuous mode [ 267.556810][T10058] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.797982][T10074] netlink: 'syz.2.1325': attribute type 4 has an invalid length. [ 268.048806][T10086] veth1_macvtap: entered promiscuous mode [ 268.285400][T10101] __nla_validate_parse: 3 callbacks suppressed [ 268.285421][T10101] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1331'. [ 268.657621][T10116] FAULT_INJECTION: forcing a failure. [ 268.657621][T10116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.712362][T10116] CPU: 1 UID: 0 PID: 10116 Comm: syz.4.1335 Not tainted syzkaller #0 PREEMPT(full) [ 268.712392][T10116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.712405][T10116] Call Trace: [ 268.712413][T10116] [ 268.712422][T10116] dump_stack_lvl+0x189/0x250 [ 268.712452][T10116] ? __pfx____ratelimit+0x10/0x10 [ 268.712538][T10116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.712564][T10116] ? __pfx__printk+0x10/0x10 [ 268.712596][T10116] ? __might_fault+0xb0/0x130 [ 268.712638][T10116] should_fail_ex+0x414/0x560 [ 268.712673][T10116] _copy_to_iter+0x575/0x16f0 [ 268.712709][T10116] ? __pfx__copy_to_iter+0x10/0x10 [ 268.712728][T10116] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 268.712760][T10116] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 268.712794][T10116] __skb_datagram_iter+0xf8/0x990 [ 268.712821][T10116] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 268.712855][T10116] skb_copy_datagram_iter+0xc5/0x230 [ 268.712886][T10116] netlink_recvmsg+0x2ab/0xa30 [ 268.712934][T10116] ? __pfx_netlink_recvmsg+0x10/0x10 [ 268.712972][T10116] ? aa_sock_msg_perm+0xf1/0x1d0 [ 268.713009][T10116] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 268.713032][T10116] ? security_socket_recvmsg+0x7e/0x2e0 [ 268.713057][T10116] ? __pfx_netlink_recvmsg+0x10/0x10 [ 268.713089][T10116] sock_recvmsg+0x229/0x270 [ 268.713122][T10116] ____sys_recvmsg+0x1c9/0x460 [ 268.713155][T10116] ? __pfx_____sys_recvmsg+0x10/0x10 [ 268.713196][T10116] ? import_iovec+0x74/0xa0 [ 268.713225][T10116] ___sys_recvmsg+0x1b5/0x510 [ 268.713255][T10116] ? __pfx____sys_recvmsg+0x10/0x10 [ 268.713307][T10116] ? __fget_files+0x3a0/0x420 [ 268.713352][T10116] do_recvmmsg+0x307/0x770 [ 268.713386][T10116] ? __pfx_do_recvmmsg+0x10/0x10 [ 268.713424][T10116] ? _copy_from_user+0x94/0xb0 [ 268.713467][T10116] __x64_sys_recvmmsg+0x1af/0x240 [ 268.713495][T10116] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 268.713523][T10116] ? rcu_is_watching+0x15/0xb0 [ 268.713551][T10116] ? do_syscall_64+0xbe/0x3b0 [ 268.713588][T10116] do_syscall_64+0xfa/0x3b0 [ 268.713617][T10116] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.713646][T10116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.713668][T10116] ? clear_bhb_loop+0x60/0xb0 [ 268.713705][T10116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.713726][T10116] RIP: 0033:0x7f21ca98ebe9 [ 268.713744][T10116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.713761][T10116] RSP: 002b:00007f21cb718038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 268.713783][T10116] RAX: ffffffffffffffda RBX: 00007f21cabb5fa0 RCX: 00007f21ca98ebe9 [ 268.713798][T10116] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 268.713812][T10116] RBP: 00007f21cb718090 R08: 0000200000003700 R09: 0000000000000000 [ 268.713825][T10116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.713837][T10116] R13: 00007f21cabb6038 R14: 00007f21cabb5fa0 R15: 00007ffe250aa7a8 [ 268.713869][T10116] [ 269.088735][T10123] netlink: 'syz.4.1337': attribute type 1 has an invalid length. [ 269.097032][T10123] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1337'. [ 269.107069][T10123] nbd: couldn't find device at index 1048576 [ 269.114090][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'. [ 269.181431][T10121] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1336'. [ 269.253391][T10127] tap0: tun_chr_ioctl cmd 1074025676 [ 269.260592][T10132] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1336'. [ 269.284684][T10127] tap0: owner set to 0 [ 269.400282][T10136] netlink: 696 bytes leftover after parsing attributes in process `syz.2.1341'. [ 269.444324][T10138] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1342'. [ 269.600956][T10145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1344'. [ 269.626731][T10145] tipc: Invalid UDP bearer configuration [ 269.626792][T10145] tipc: Enabling of bearer rejected, failed to enable media [ 269.830649][T10153] netlink: 'syz.2.1349': attribute type 1 has an invalid length. [ 269.854417][T10155] FAULT_INJECTION: forcing a failure. [ 269.854417][T10155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.872817][T10155] CPU: 1 UID: 0 PID: 10155 Comm: syz.3.1350 Not tainted syzkaller #0 PREEMPT(full) [ 269.872847][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.872861][T10155] Call Trace: [ 269.872870][T10155] [ 269.872879][T10155] dump_stack_lvl+0x189/0x250 [ 269.872912][T10155] ? __pfx____ratelimit+0x10/0x10 [ 269.872943][T10155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.872970][T10155] ? __pfx__printk+0x10/0x10 [ 269.873000][T10155] ? __might_fault+0xb0/0x130 [ 269.873044][T10155] should_fail_ex+0x414/0x560 [ 269.873078][T10155] _copy_to_iter+0x575/0x16f0 [ 269.873125][T10155] ? __pfx__copy_to_iter+0x10/0x10 [ 269.873143][T10155] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 269.873174][T10155] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 269.873205][T10155] __skb_datagram_iter+0xf8/0x990 [ 269.873229][T10155] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 269.873263][T10155] skb_copy_datagram_iter+0xc5/0x230 [ 269.873292][T10155] netlink_recvmsg+0x2ab/0xa30 [ 269.873352][T10155] ? __pfx_netlink_recvmsg+0x10/0x10 [ 269.873390][T10155] ? aa_sock_msg_perm+0xf1/0x1d0 [ 269.873439][T10155] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 269.873461][T10155] ? security_socket_recvmsg+0x7e/0x2e0 [ 269.873485][T10155] ? __pfx_netlink_recvmsg+0x10/0x10 [ 269.873516][T10155] sock_recvmsg+0x229/0x270 [ 269.873549][T10155] ____sys_recvmsg+0x1c9/0x460 [ 269.873581][T10155] ? __pfx_____sys_recvmsg+0x10/0x10 [ 269.873620][T10155] ? import_iovec+0x74/0xa0 [ 269.873655][T10155] ___sys_recvmsg+0x1b5/0x510 [ 269.873684][T10155] ? __pfx____sys_recvmsg+0x10/0x10 [ 269.873731][T10155] ? __fget_files+0x3a0/0x420 [ 269.873775][T10155] do_recvmmsg+0x307/0x770 [ 269.873806][T10155] ? __pfx_do_recvmmsg+0x10/0x10 [ 269.873842][T10155] ? _copy_from_user+0x94/0xb0 [ 269.873883][T10155] __x64_sys_recvmmsg+0x1af/0x240 [ 269.873909][T10155] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 269.873929][T10155] ? rcu_is_watching+0x15/0xb0 [ 269.873956][T10155] ? do_syscall_64+0xbe/0x3b0 [ 269.873990][T10155] do_syscall_64+0xfa/0x3b0 [ 269.874018][T10155] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.874046][T10155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.874066][T10155] ? clear_bhb_loop+0x60/0xb0 [ 269.874091][T10155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.874111][T10155] RIP: 0033:0x7f409d98ebe9 [ 269.874130][T10155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.874148][T10155] RSP: 002b:00007f409e7d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 269.874170][T10155] RAX: ffffffffffffffda RBX: 00007f409dbb5fa0 RCX: 00007f409d98ebe9 [ 269.874185][T10155] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 269.874199][T10155] RBP: 00007f409e7d8090 R08: 0000200000003700 R09: 0000000000000000 [ 269.874213][T10155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.874225][T10155] R13: 00007f409dbb6038 R14: 00007f409dbb5fa0 R15: 00007ffc98a5ec78 [ 269.874258][T10155] [ 269.889721][T10153] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1349'. [ 269.913293][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 269.948563][T10153] nbd: couldn't find device at index 1048576 [ 269.973106][T10156] veth0_to_bridge: left allmulticast mode [ 270.206483][T10156] veth0_to_bridge: left promiscuous mode [ 270.220049][T10156] bridge0: port 3(veth0_to_bridge) entered disabled state [ 270.260492][T10156] bridge_slave_1: left allmulticast mode [ 270.272328][T10156] bridge_slave_1: left promiscuous mode [ 270.284868][T10156] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.310512][T10156] bridge_slave_0: left allmulticast mode [ 270.317745][T10156] bridge_slave_0: left promiscuous mode [ 270.336598][T10156] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.710514][T10178] bridge0: port 1(veth0_to_bridge) entered blocking state [ 270.741826][T10178] bridge0: port 1(veth0_to_bridge) entered disabled state [ 270.777749][T10178] veth0_to_bridge: entered allmulticast mode [ 270.797904][T10178] veth0_to_bridge: entered promiscuous mode [ 270.810718][T10178] bridge0: port 1(veth0_to_bridge) entered blocking state [ 270.818160][T10178] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 270.932932][T10184] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 270.991564][T10199] FAULT_INJECTION: forcing a failure. [ 270.991564][T10199] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 271.015658][T10199] CPU: 0 UID: 0 PID: 10199 Comm: syz.0.1363 Not tainted syzkaller #0 PREEMPT(full) [ 271.015686][T10199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.015699][T10199] Call Trace: [ 271.015707][T10199] [ 271.015716][T10199] dump_stack_lvl+0x189/0x250 [ 271.015746][T10199] ? __pfx____ratelimit+0x10/0x10 [ 271.015775][T10199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.015801][T10199] ? __pfx__printk+0x10/0x10 [ 271.015832][T10199] ? fs_reclaim_acquire+0x7d/0x100 [ 271.015875][T10199] should_fail_ex+0x414/0x560 [ 271.015907][T10199] prepare_alloc_pages+0x213/0x610 [ 271.015931][T10199] __alloc_frozen_pages_noprof+0x123/0x370 [ 271.015952][T10199] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 271.015977][T10199] ? policy_nodemask+0x27c/0x720 [ 271.015999][T10199] ? __lock_acquire+0xab9/0xd20 [ 271.016042][T10199] alloc_pages_mpol+0x232/0x4a0 [ 271.016097][T10199] vma_alloc_folio_noprof+0xe4/0x200 [ 271.016131][T10199] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 271.016177][T10199] folio_prealloc+0x30/0x180 [ 271.016210][T10199] __handle_mm_fault+0x2ab9/0x5440 [ 271.016256][T10199] ? __pfx___handle_mm_fault+0x10/0x10 [ 271.016299][T10199] ? find_vma+0xe7/0x160 [ 271.016321][T10199] ? __pfx_find_vma+0x10/0x10 [ 271.016346][T10199] handle_mm_fault+0x40a/0x8e0 [ 271.016385][T10199] do_user_addr_fault+0x764/0x1390 [ 271.016427][T10199] exc_page_fault+0x76/0xf0 [ 271.016454][T10199] asm_exc_page_fault+0x26/0x30 [ 271.016470][T10199] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 271.016490][T10199] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 271.016506][T10199] RSP: 0018:ffffc9001a6174f8 EFLAGS: 00050202 [ 271.016522][T10199] RAX: ffff88804cb88001 RBX: ffff88804cb883e1 RCX: 0000000000000157 [ 271.016536][T10199] RDX: 0000000000000000 RSI: ffff88804cb88421 RDI: 0000200000001000 [ 271.016548][T10199] RBP: ffffc9001a617650 R08: ffff88804cb88577 R09: 1ffff110099710ae [ 271.016561][T10199] R10: dffffc0000000000 R11: ffffed10099710af R12: dffffc0000000000 [ 271.016574][T10199] R13: 0000000000000197 R14: 00007ffffffff000 R15: 0000200000001157 [ 271.016601][T10199] _copy_to_iter+0x5f6/0x16f0 [ 271.016631][T10199] ? __pfx__copy_to_iter+0x10/0x10 [ 271.016645][T10199] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 271.016671][T10199] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 271.016696][T10199] __skb_datagram_iter+0xf8/0x990 [ 271.016717][T10199] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 271.016745][T10199] skb_copy_datagram_iter+0xc5/0x230 [ 271.016768][T10199] netlink_recvmsg+0x2ab/0xa30 [ 271.016804][T10199] ? __pfx_netlink_recvmsg+0x10/0x10 [ 271.016834][T10199] ? aa_sock_msg_perm+0xf1/0x1d0 [ 271.016864][T10199] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 271.016882][T10199] ? security_socket_recvmsg+0x7e/0x2e0 [ 271.016902][T10199] ? __pfx_netlink_recvmsg+0x10/0x10 [ 271.016929][T10199] sock_recvmsg+0x229/0x270 [ 271.016955][T10199] ____sys_recvmsg+0x1c9/0x460 [ 271.016982][T10199] ? __pfx_____sys_recvmsg+0x10/0x10 [ 271.017014][T10199] ? import_iovec+0x74/0xa0 [ 271.017036][T10199] ___sys_recvmsg+0x1b5/0x510 [ 271.017059][T10199] ? __pfx____sys_recvmsg+0x10/0x10 [ 271.017099][T10199] ? __fget_files+0x3a0/0x420 [ 271.017136][T10199] do_recvmmsg+0x307/0x770 [ 271.017162][T10199] ? __pfx_do_recvmmsg+0x10/0x10 [ 271.017191][T10199] ? _copy_from_user+0x94/0xb0 [ 271.017226][T10199] __x64_sys_recvmmsg+0x1af/0x240 [ 271.017247][T10199] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 271.017278][T10199] ? rcu_is_watching+0x15/0xb0 [ 271.017299][T10199] ? do_syscall_64+0xbe/0x3b0 [ 271.017327][T10199] do_syscall_64+0xfa/0x3b0 [ 271.017350][T10199] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.017378][T10199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.017394][T10199] ? clear_bhb_loop+0x60/0xb0 [ 271.017415][T10199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.017431][T10199] RIP: 0033:0x7f14f838ebe9 [ 271.017446][T10199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.017460][T10199] RSP: 002b:00007f14f92bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 271.017477][T10199] RAX: ffffffffffffffda RBX: 00007f14f85b5fa0 RCX: 00007f14f838ebe9 [ 271.017489][T10199] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 271.017500][T10199] RBP: 00007f14f92bf090 R08: 0000200000003700 R09: 0000000000000000 [ 271.017511][T10199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.017521][T10199] R13: 00007f14f85b6038 R14: 00007f14f85b5fa0 R15: 00007fff260df758 [ 271.017547][T10199] [ 271.812108][T10222] netlink: 'syz.2.1370': attribute type 1 has an invalid length. [ 271.819875][T10225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.933771][T10230] netlink: 'syz.0.1372': attribute type 1 has an invalid length. [ 271.933789][T10222] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 271.949021][T10230] nbd: couldn't find device at index 1048576 [ 272.181581][T10239] netlink: 'syz.3.1376': attribute type 1 has an invalid length. [ 272.562344][T10256] FAULT_INJECTION: forcing a failure. [ 272.562344][T10256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.611944][T10256] CPU: 1 UID: 0 PID: 10256 Comm: syz.0.1382 Not tainted syzkaller #0 PREEMPT(full) [ 272.611977][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.611990][T10256] Call Trace: [ 272.611999][T10256] [ 272.612008][T10256] dump_stack_lvl+0x189/0x250 [ 272.612038][T10256] ? __pfx____ratelimit+0x10/0x10 [ 272.612068][T10256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.612099][T10256] ? __pfx__printk+0x10/0x10 [ 272.612145][T10256] should_fail_ex+0x414/0x560 [ 272.612177][T10256] _copy_to_iter+0x575/0x16f0 [ 272.612247][T10256] ? __pfx__copy_to_iter+0x10/0x10 [ 272.612265][T10256] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 272.612297][T10256] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 272.612342][T10256] __skb_datagram_iter+0xf8/0x990 [ 272.612368][T10256] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 272.612402][T10256] skb_copy_datagram_iter+0xc5/0x230 [ 272.612432][T10256] netlink_recvmsg+0x2ab/0xa30 [ 272.612475][T10256] ? __pfx_netlink_recvmsg+0x10/0x10 [ 272.612513][T10256] ? aa_sock_msg_perm+0xf1/0x1d0 [ 272.612548][T10256] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 272.612579][T10256] ? security_socket_recvmsg+0x7e/0x2e0 [ 272.612604][T10256] ? __pfx_netlink_recvmsg+0x10/0x10 [ 272.612636][T10256] sock_recvmsg+0x229/0x270 [ 272.612669][T10256] ____sys_recvmsg+0x1c9/0x460 [ 272.612702][T10256] ? __pfx_____sys_recvmsg+0x10/0x10 [ 272.612743][T10256] ? import_iovec+0x74/0xa0 [ 272.612771][T10256] ___sys_recvmsg+0x1b5/0x510 [ 272.612801][T10256] ? __pfx____sys_recvmsg+0x10/0x10 [ 272.612852][T10256] ? __fget_files+0x3a0/0x420 [ 272.612897][T10256] do_recvmmsg+0x307/0x770 [ 272.612930][T10256] ? __pfx_do_recvmmsg+0x10/0x10 [ 272.612967][T10256] ? _copy_from_user+0x94/0xb0 [ 272.613010][T10256] __x64_sys_recvmmsg+0x1af/0x240 [ 272.613036][T10256] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 272.613058][T10256] ? rcu_is_watching+0x15/0xb0 [ 272.613085][T10256] ? do_syscall_64+0xbe/0x3b0 [ 272.613121][T10256] do_syscall_64+0xfa/0x3b0 [ 272.613149][T10256] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.613178][T10256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.613199][T10256] ? clear_bhb_loop+0x60/0xb0 [ 272.613226][T10256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.613247][T10256] RIP: 0033:0x7f14f838ebe9 [ 272.613265][T10256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.613284][T10256] RSP: 002b:00007f14f92bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 272.613306][T10256] RAX: ffffffffffffffda RBX: 00007f14f85b5fa0 RCX: 00007f14f838ebe9 [ 272.613324][T10256] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 272.613338][T10256] RBP: 00007f14f92bf090 R08: 0000200000003700 R09: 0000000000000000 [ 272.613353][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.613365][T10256] R13: 00007f14f85b6038 R14: 00007f14f85b5fa0 R15: 00007fff260df758 [ 272.613400][T10256] [ 273.034258][T10265] netlink: 'syz.2.1385': attribute type 1 has an invalid length. [ 273.042134][T10265] nbd: couldn't find device at index 1048576 [ 273.307647][T10281] __nla_validate_parse: 14 callbacks suppressed [ 273.307668][T10281] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1391'. [ 273.454818][T10286] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1393'. [ 273.482528][T10286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1393'. [ 273.640869][T10294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.678251][T10294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.690649][T10294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.700367][T10294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.741676][T10301] netlink: 'syz.3.1398': attribute type 1 has an invalid length. [ 273.750881][T10301] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1398'. [ 273.761288][T10301] nbd: couldn't find device at index 1048576 [ 274.149649][T10317] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1405'. [ 274.313003][T10327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.356621][T10328] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1406'. [ 274.418738][T10328] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1406'. [ 274.529343][T10336] netlink: 'syz.2.1411': attribute type 1 has an invalid length. [ 274.543383][T10336] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1411'. [ 274.554113][T10336] nbd: couldn't find device at index 1048576 [ 274.578502][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 275.076572][T10364] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1420'. [ 275.340380][T10374] netlink: 'syz.2.1425': attribute type 1 has an invalid length. [ 275.363834][T10374] nbd: couldn't find device at index 1048576 [ 275.612727][T10382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.648882][T10383] 8021q: adding VLAN 0 to HW filter on device bond2 [ 276.120457][T10412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.255582][T10422] netlink: 'syz.4.1439': attribute type 1 has an invalid length. [ 276.274176][T10422] nbd: couldn't find device at index 1048576 [ 276.735305][T10440] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 277.045368][T10447] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20000 [ 277.292479][T10460] netlink: 'syz.0.1453': attribute type 1 has an invalid length. [ 277.301593][T10460] nbd: couldn't find device at index 1048576 [ 277.906524][T10489] netlink: 'syz.0.1466': attribute type 1 has an invalid length. [ 277.928579][T10489] nbd: couldn't find device at index 1048576 [ 278.862843][T10534] netlink: 'syz.0.1479': attribute type 1 has an invalid length. [ 278.875982][T10534] __nla_validate_parse: 20 callbacks suppressed [ 278.876000][T10534] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1479'. [ 278.925288][T10534] nbd: couldn't find device at index 1048576 [ 279.105095][T10542] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1481'. [ 279.170234][T10546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1481'. [ 279.317079][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1483'. [ 279.374692][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1483'. [ 279.393124][T10557] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1485'. [ 279.601516][T10560] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.726488][T10561] veth9: entered allmulticast mode [ 279.734486][T10560] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.875549][T10560] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.965227][T10560] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.134961][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 280.267977][T10204] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.319928][T10204] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.375993][T10204] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.456365][T10204] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.482290][T10593] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1495'. [ 280.527511][T10593] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1495'. [ 280.779248][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1497'. [ 281.078043][T10619] netlink: 'syz.4.1504': attribute type 14 has an invalid length. [ 281.089006][T10619] netlink: 'syz.4.1504': attribute type 14 has an invalid length. [ 281.108983][T10619] xt_time: unknown flags 0xf4 [ 281.251321][T10627] veth0_to_bridge: left allmulticast mode [ 281.267147][T10627] veth0_to_bridge: left promiscuous mode [ 281.278878][T10627] bridge0: port 1(veth0_to_bridge) entered disabled state [ 281.372860][T10632] veth11: entered allmulticast mode [ 281.525848][T10637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.229584][T10664] xfrm1: entered promiscuous mode [ 282.234894][T10664] xfrm1: entered allmulticast mode [ 283.021344][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.039278][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.047895][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.060186][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.072787][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.811366][T10693] chnl_net:caif_netlink_parms(): no params data found [ 283.928970][T10730] __nla_validate_parse: 13 callbacks suppressed [ 283.928989][T10730] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1536'. [ 283.960176][T10730] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1536'. [ 284.051950][T10693] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.070427][T10693] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.081808][T10693] bridge_slave_0: entered allmulticast mode [ 284.101188][T10693] bridge_slave_0: entered promiscuous mode [ 284.135356][T10693] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.157547][T10693] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.171277][T10693] bridge_slave_1: entered allmulticast mode [ 284.183299][T10693] bridge_slave_1: entered promiscuous mode [ 284.355948][T10693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.420126][T10693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.714375][T10693] team0: Port device team_slave_0 added [ 284.764255][T10693] team0: Port device team_slave_1 added [ 284.859747][T10693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.868202][T10693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.896225][T10693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.923755][T10693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.946673][T10693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.018906][T10763] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1547'. [ 285.058678][T10693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.075954][T10769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1547'. [ 285.098513][ T5879] Bluetooth: hci5: command tx timeout [ 285.113347][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1549'. [ 285.229909][T10693] hsr_slave_0: entered promiscuous mode [ 285.263086][T10693] hsr_slave_1: entered promiscuous mode [ 285.286346][T10693] debugfs: 'hsr0' already exists in 'hsr' [ 285.292136][T10693] Cannot create hsr debugfs directory [ 285.892536][T10787] veth7: entered allmulticast mode [ 286.201246][T10801] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.211517][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 286.268517][T10801] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.358052][T10801] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.401314][T10693] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 286.424302][T10693] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 286.448569][T10801] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.490842][T10693] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 286.521129][T10693] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 286.560157][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1564'. [ 286.572334][T10809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1564'. [ 286.588070][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1564'. [ 286.632297][T10204] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.641336][T10809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1564'. [ 286.751869][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.771613][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.798027][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.989078][T10823] FAULT_INJECTION: forcing a failure. [ 286.989078][T10823] name failslab, interval 1, probability 0, space 0, times 0 [ 287.035046][T10823] CPU: 1 UID: 0 PID: 10823 Comm: syz.0.1565 Not tainted syzkaller #0 PREEMPT(full) [ 287.035075][T10823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.035088][T10823] Call Trace: [ 287.035096][T10823] [ 287.035105][T10823] dump_stack_lvl+0x189/0x250 [ 287.035135][T10823] ? __pfx____ratelimit+0x10/0x10 [ 287.035164][T10823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.035190][T10823] ? __pfx__printk+0x10/0x10 [ 287.035226][T10823] ? __pfx___might_resched+0x10/0x10 [ 287.035246][T10823] ? fs_reclaim_acquire+0x7d/0x100 [ 287.035283][T10823] should_fail_ex+0x414/0x560 [ 287.035316][T10823] should_failslab+0xa8/0x100 [ 287.035348][T10823] __kmalloc_noprof+0xcb/0x4f0 [ 287.035374][T10823] ? kfree+0x4d/0x440 [ 287.035398][T10823] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 287.035443][T10823] tomoyo_realpath_from_path+0xe3/0x5d0 [ 287.035479][T10823] ? tomoyo_domain+0xd9/0x130 [ 287.035508][T10823] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 287.035538][T10823] tomoyo_path_number_perm+0x1e8/0x5a0 [ 287.035571][T10823] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 287.035620][T10823] ? __lock_acquire+0xab9/0xd20 [ 287.035674][T10823] ? __fget_files+0x2a/0x420 [ 287.035723][T10823] ? __fget_files+0x2a/0x420 [ 287.035752][T10823] ? __fget_files+0x3a0/0x420 [ 287.035782][T10823] ? __fget_files+0x2a/0x420 [ 287.035818][T10823] security_file_ioctl+0xcb/0x2d0 [ 287.035848][T10823] __se_sys_ioctl+0x47/0x170 [ 287.035877][T10823] do_syscall_64+0xfa/0x3b0 [ 287.035906][T10823] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.035935][T10823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.035955][T10823] ? clear_bhb_loop+0x60/0xb0 [ 287.035980][T10823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.036000][T10823] RIP: 0033:0x7f14f838ebe9 [ 287.036018][T10823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.036041][T10823] RSP: 002b:00007f14f929e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.036082][T10823] RAX: ffffffffffffffda RBX: 00007f14f85b6090 RCX: 00007f14f838ebe9 [ 287.036097][T10823] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 000000000000000d [ 287.036110][T10823] RBP: 00007f14f929e090 R08: 0000000000000000 R09: 0000000000000000 [ 287.036124][T10823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.036136][T10823] R13: 00007f14f85b6128 R14: 00007f14f85b6090 R15: 00007fff260df758 [ 287.036171][T10823] [ 287.293606][T10693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.301652][T10823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 287.316788][T10693] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.331034][T10205] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.338237][T10205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.345796][ T5879] Bluetooth: hci5: command tx timeout [ 287.429536][T10693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 287.440003][T10693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.511064][T10205] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.518406][T10205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.899589][T10849] 8021q: VLANs not supported on gre0 [ 287.906913][T10850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.061212][T10693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.445069][T10873] veth13: entered allmulticast mode [ 289.014765][T10897] __nla_validate_parse: 7 callbacks suppressed [ 289.014785][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 289.148038][T10693] veth0_vlan: entered promiscuous mode [ 289.164956][T10693] veth1_vlan: entered promiscuous mode [ 289.324460][T10693] veth0_macvtap: entered promiscuous mode [ 289.369569][T10693] veth1_macvtap: entered promiscuous mode [ 289.417085][ T5879] Bluetooth: hci5: command tx timeout [ 289.430863][T10693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.492387][T10910] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20001 [ 289.511106][T10911] pim6reg1: entered promiscuous mode [ 289.529032][T10911] pim6reg1: entered allmulticast mode [ 289.552300][T10693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.630943][T10210] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.652435][T10210] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.673686][T10210] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.692008][T10210] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.912954][T10920] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1596'. [ 289.952364][T10209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.980640][T10209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.034930][T10924] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1596'. [ 290.103075][T10923] veth9: entered allmulticast mode [ 290.119270][T10209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.128784][T10209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.316421][T10928] netlink: 'syz.3.1599': attribute type 1 has an invalid length. [ 290.343516][T10928] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1599'. [ 290.387812][T10928] nbd: couldn't find device at index 1048576 [ 290.437937][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1599'. [ 290.713024][T10943] netlink: 'syz.3.1603': attribute type 1 has an invalid length. [ 290.752200][T10947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.900509][T10951] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1609'. [ 290.935782][T10956] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.102938][T10959] veth11: entered allmulticast mode [ 291.124208][T10956] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.177547][T10965] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1611'. [ 291.266832][T10969] netlink: 'syz.2.1613': attribute type 1 has an invalid length. [ 291.267890][T10956] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.290279][T10969] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1613'. [ 291.315818][T10969] nbd: couldn't find device at index 1048576 [ 291.350642][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'. [ 291.436837][T10956] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.496463][ T5879] Bluetooth: hci5: command tx timeout [ 291.623142][ T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.681378][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.740804][ T59] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.790926][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.387759][T11011] netlink: 'syz.0.1628': attribute type 1 has an invalid length. [ 292.395588][T11011] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1628'. [ 292.420378][T11011] nbd: couldn't find device at index 1048576 [ 292.426527][T11007] veth11: entered allmulticast mode [ 292.554411][T11018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.780424][T11027] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.823061][T11027] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.900313][T11034] FAULT_INJECTION: forcing a failure. [ 292.900313][T11034] name failslab, interval 1, probability 0, space 0, times 0 [ 292.944554][T11034] CPU: 0 UID: 0 PID: 11034 Comm: syz.3.1636 Not tainted syzkaller #0 PREEMPT(full) [ 292.944582][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.944595][T11034] Call Trace: [ 292.944602][T11034] [ 292.944628][T11034] dump_stack_lvl+0x189/0x250 [ 292.944658][T11034] ? __pfx____ratelimit+0x10/0x10 [ 292.944687][T11034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.944711][T11034] ? __pfx__printk+0x10/0x10 [ 292.944744][T11034] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 292.944771][T11034] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.944805][T11034] should_fail_ex+0x414/0x560 [ 292.944838][T11034] should_failslab+0xa8/0x100 [ 292.944871][T11034] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 292.944901][T11034] ? __alloc_skb+0x112/0x2d0 [ 292.944936][T11034] __alloc_skb+0x112/0x2d0 [ 292.944980][T11034] create_monitor_ctrl_open+0x156/0x880 [ 292.945012][T11034] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 292.945045][T11034] ? bpf_lsm_capable+0x9/0x20 [ 292.945074][T11034] hci_sock_ioctl+0x2f2/0x910 [ 292.945103][T11034] sock_do_ioctl+0xd9/0x300 [ 292.945143][T11034] ? __pfx_sock_do_ioctl+0x10/0x10 [ 292.945163][T11034] ? __lock_acquire+0xab9/0xd20 [ 292.945202][T11034] sock_ioctl+0x576/0x790 [ 292.945223][T11034] ? __pfx_sock_ioctl+0x10/0x10 [ 292.945244][T11034] ? __fget_files+0x2a/0x420 [ 292.945270][T11034] ? __fget_files+0x3a0/0x420 [ 292.945294][T11034] ? __fget_files+0x2a/0x420 [ 292.945323][T11034] ? bpf_lsm_file_ioctl+0x9/0x20 [ 292.945345][T11034] ? __pfx_sock_ioctl+0x10/0x10 [ 292.945364][T11034] __se_sys_ioctl+0xfc/0x170 [ 292.945388][T11034] do_syscall_64+0xfa/0x3b0 [ 292.945412][T11034] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.945434][T11034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.945452][T11034] ? clear_bhb_loop+0x60/0xb0 [ 292.945473][T11034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.945489][T11034] RIP: 0033:0x7f409d98ebe9 [ 292.945504][T11034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.945519][T11034] RSP: 002b:00007f409e7b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.945537][T11034] RAX: ffffffffffffffda RBX: 00007f409dbb6090 RCX: 00007f409d98ebe9 [ 292.945550][T11034] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 000000000000000d [ 292.945561][T11034] RBP: 00007f409e7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 292.945575][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.945585][T11034] R13: 00007f409dbb6128 R14: 00007f409dbb6090 R15: 00007ffc98a5ec78 [ 292.945611][T11034] [ 293.312918][T11027] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.323349][T11027] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.366955][T11042] netlink: 'syz.0.1641': attribute type 1 has an invalid length. [ 293.374809][T11042] nbd: couldn't find device at index 1048576 [ 293.392125][T11027] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.402310][T11027] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.489458][T11027] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.500550][T11027] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.602616][T11045] veth11: entered allmulticast mode [ 293.729410][T11052] veth15: entered allmulticast mode [ 293.884701][T10205] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.935480][T10205] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.973460][T10205] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.036144][T10205] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.092565][T10209] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.133296][T10209] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.201045][T11073] netlink: 'syz.4.1649': attribute type 10 has an invalid length. [ 294.215551][T10205] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.231675][T10205] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.569150][T11089] __nla_validate_parse: 5 callbacks suppressed [ 294.569171][T11089] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1652'. [ 294.603908][T11090] netlink: 'syz.3.1655': attribute type 1 has an invalid length. [ 294.626937][T11090] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1655'. [ 294.653754][T11090] nbd: couldn't find device at index 1048576 [ 294.687056][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1655'. [ 294.702964][T11089] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1652'. [ 294.737517][T11089] FAULT_INJECTION: forcing a failure. [ 294.737517][T11089] name failslab, interval 1, probability 0, space 0, times 0 [ 294.750745][T11089] CPU: 1 UID: 0 PID: 11089 Comm: syz.4.1652 Not tainted syzkaller #0 PREEMPT(full) [ 294.750775][T11089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.750789][T11089] Call Trace: [ 294.750797][T11089] [ 294.750806][T11089] dump_stack_lvl+0x189/0x250 [ 294.750839][T11089] ? __pfx____ratelimit+0x10/0x10 [ 294.750869][T11089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.750895][T11089] ? __pfx__printk+0x10/0x10 [ 294.750927][T11089] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 294.750954][T11089] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 294.750990][T11089] should_fail_ex+0x414/0x560 [ 294.751025][T11089] should_failslab+0xa8/0x100 [ 294.751059][T11089] kmem_cache_alloc_noprof+0x73/0x3c0 [ 294.751088][T11089] ? skb_clone+0x212/0x3a0 [ 294.751109][T11089] ? hci_sock_ioctl+0x30b/0x910 [ 294.751146][T11089] skb_clone+0x212/0x3a0 [ 294.751167][T11089] ? __hci_send_to_channel+0x120/0x2d0 [ 294.751202][T11089] __hci_send_to_channel+0x146/0x2d0 [ 294.751242][T11089] hci_sock_ioctl+0x31c/0x910 [ 294.751281][T11089] sock_do_ioctl+0xd9/0x300 [ 294.751310][T11089] ? __pfx_sock_do_ioctl+0x10/0x10 [ 294.751333][T11089] ? __lock_acquire+0xab9/0xd20 [ 294.751384][T11089] sock_ioctl+0x576/0x790 [ 294.751412][T11089] ? __pfx_sock_ioctl+0x10/0x10 [ 294.751439][T11089] ? __fget_files+0x2a/0x420 [ 294.751470][T11089] ? __fget_files+0x3a0/0x420 [ 294.751501][T11089] ? __fget_files+0x2a/0x420 [ 294.751538][T11089] ? bpf_lsm_file_ioctl+0x9/0x20 [ 294.751565][T11089] ? __pfx_sock_ioctl+0x10/0x10 [ 294.751590][T11089] __se_sys_ioctl+0xfc/0x170 [ 294.751620][T11089] do_syscall_64+0xfa/0x3b0 [ 294.751650][T11089] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.751679][T11089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.751701][T11089] ? clear_bhb_loop+0x60/0xb0 [ 294.751742][T11089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.751764][T11089] RIP: 0033:0x7f21ca98ebe9 [ 294.751784][T11089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.751803][T11089] RSP: 002b:00007f21c8bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.751826][T11089] RAX: ffffffffffffffda RBX: 00007f21cabb6090 RCX: 00007f21ca98ebe9 [ 294.751842][T11089] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 000000000000000d [ 294.751855][T11089] RBP: 00007f21c8bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 294.751868][T11089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.751881][T11089] R13: 00007f21cabb6128 R14: 00007f21cabb6090 R15: 00007ffe250aa7a8 [ 294.751916][T11089] [ 295.426618][T11107] veth17: entered allmulticast mode [ 295.606311][T11114] nbd3: detected capacity change from 0 to 549764202496 [ 295.627671][T11118] nbd: must specify a device to reconfigure [ 295.644493][ T8356] block nbd3: Send control failed (result -32) [ 295.653977][ T5879] block nbd3: Receive control failed (result -32) [ 295.671854][ T8356] block nbd3: Request send failed, requeueing [ 295.690830][ T55] block nbd3: Dead connection, failed to find a fallback [ 295.698129][ T55] block nbd3: shutting down sockets [ 295.703877][ T55] blk_print_req_error: 138 callbacks suppressed [ 295.703912][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.724641][ T55] buffer_io_error: 138 callbacks suppressed [ 295.724672][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.743046][T11129] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1663'. [ 295.751995][ T8356] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.761272][ T8356] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.769720][ T8356] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.779400][ T8356] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.787827][ T8356] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.800609][ T8356] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.808615][ T8356] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.817875][ T8356] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.825816][ T8356] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.835631][ T8356] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.843663][ T8356] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.853000][ T8356] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.896907][ T8356] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.911698][ T8356] Buffer I/O error on dev nbd3, logical block 0, async page read [ 295.932083][ T8356] ldm_validate_partition_table(): Disk read failed. [ 295.951445][T11134] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1668'. [ 295.962718][ T8356] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.975286][ T8356] Buffer I/O error on dev nbd3, logical block 0, async page read [ 296.004495][ T8356] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 296.024926][T11132] netlink: 'syz.5.1667': attribute type 1 has an invalid length. [ 296.050149][ T8356] Buffer I/O error on dev nbd3, logical block 0, async page read [ 296.060518][T11132] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1667'. [ 296.091835][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1667'. [ 296.101643][ T8356] Dev nbd3: unable to read RDB block 0 [ 296.115947][ T8356] nbd3: unable to read partition table [ 296.119611][T11137] bridge_slave_1: left allmulticast mode [ 296.131670][T11137] bridge_slave_1: left promiscuous mode [ 296.152891][T11132] nbd: couldn't find device at index 1048576 [ 296.159674][T11137] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.175759][T11142] FAULT_INJECTION: forcing a failure. [ 296.175759][T11142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.191385][T11142] CPU: 1 UID: 0 PID: 11142 Comm: syz.4.1670 Not tainted syzkaller #0 PREEMPT(full) [ 296.191413][T11142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.191426][T11142] Call Trace: [ 296.191434][T11142] [ 296.191444][T11142] dump_stack_lvl+0x189/0x250 [ 296.191473][T11142] ? __pfx____ratelimit+0x10/0x10 [ 296.191501][T11142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.191527][T11142] ? __pfx__printk+0x10/0x10 [ 296.191557][T11142] ? __might_fault+0xb0/0x130 [ 296.191599][T11142] should_fail_ex+0x414/0x560 [ 296.191631][T11142] _copy_from_user+0x2d/0xb0 [ 296.191655][T11142] ___sys_sendmsg+0x158/0x2a0 [ 296.191680][T11142] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.191744][T11142] ? __fget_files+0x2a/0x420 [ 296.191776][T11142] ? __fget_files+0x3a0/0x420 [ 296.191827][T11142] __x64_sys_sendmsg+0x19b/0x260 [ 296.191851][T11142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.191883][T11142] ? __pfx_ksys_write+0x10/0x10 [ 296.191908][T11142] ? rcu_is_watching+0x15/0xb0 [ 296.191935][T11142] ? do_syscall_64+0xbe/0x3b0 [ 296.191970][T11142] do_syscall_64+0xfa/0x3b0 [ 296.191998][T11142] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.192025][T11142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.192044][T11142] ? clear_bhb_loop+0x60/0xb0 [ 296.192070][T11142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.192089][T11142] RIP: 0033:0x7f21ca98ebe9 [ 296.192108][T11142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.192126][T11142] RSP: 002b:00007f21c8bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.192148][T11142] RAX: ffffffffffffffda RBX: 00007f21cabb6090 RCX: 00007f21ca98ebe9 [ 296.192163][T11142] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 296.192176][T11142] RBP: 00007f21c8bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 296.192189][T11142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.192201][T11142] R13: 00007f21cabb6128 R14: 00007f21cabb6090 R15: 00007ffe250aa7a8 [ 296.192234][T11142] [ 296.212452][ T8356] ldm_validate_partition_table(): Disk read failed. [ 296.420104][ T8356] Dev nbd3: unable to read RDB block 0 [ 296.430672][ T8356] nbd3: unable to read partition table [ 296.458751][T11137] bridge_slave_0: left allmulticast mode [ 296.498357][T11137] bridge_slave_0: left promiscuous mode [ 296.518406][T11137] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.521082][ T8356] ldm_validate_partition_table(): Disk read failed. [ 296.552611][ T8356] Dev nbd3: unable to read RDB block 0 [ 296.589751][ T8356] nbd3: unable to read partition table [ 296.648044][ T8356] ldm_validate_partition_table(): Disk read failed. [ 296.665778][ T8356] Dev nbd3: unable to read RDB block 0 [ 296.680426][ T8356] nbd3: unable to read partition table [ 296.931956][T11162] netlink: 'syz.5.1676': attribute type 1 has an invalid length. [ 296.950840][T11163] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1675'. [ 296.970983][T11163] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1675'. [ 296.983036][T11163] FAULT_INJECTION: forcing a failure. [ 296.983036][T11163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.996935][T11163] CPU: 1 UID: 0 PID: 11163 Comm: syz.2.1675 Not tainted syzkaller #0 PREEMPT(full) [ 296.996963][T11163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.996977][T11163] Call Trace: [ 296.996985][T11163] [ 296.996994][T11163] dump_stack_lvl+0x189/0x250 [ 296.997025][T11163] ? __pfx____ratelimit+0x10/0x10 [ 296.997055][T11163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.997081][T11163] ? __pfx__printk+0x10/0x10 [ 296.997124][T11163] should_fail_ex+0x414/0x560 [ 296.997158][T11163] _copy_to_user+0x31/0xb0 [ 296.997185][T11163] simple_read_from_buffer+0xe1/0x170 [ 296.997223][T11163] proc_fail_nth_read+0x1b3/0x220 [ 296.997252][T11163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.997279][T11163] ? rw_verify_area+0x2a6/0x4d0 [ 296.997318][T11163] ? __lock_acquire+0xab9/0xd20 [ 296.997347][T11163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.997372][T11163] vfs_read+0x200/0xa30 [ 296.997399][T11163] ? fdget_pos+0x247/0x320 [ 296.997422][T11163] ? __pfx___mutex_lock+0x10/0x10 [ 296.997453][T11163] ? __pfx_vfs_read+0x10/0x10 [ 296.997482][T11163] ? __fget_files+0x2a/0x420 [ 296.997519][T11163] ? __fget_files+0x3a0/0x420 [ 296.997550][T11163] ? __fget_files+0x2a/0x420 [ 296.997592][T11163] ksys_read+0x145/0x250 [ 296.997618][T11163] ? __fget_files+0x3a0/0x420 [ 296.997651][T11163] ? __pfx_ksys_read+0x10/0x10 [ 296.997691][T11163] ? do_syscall_64+0xbe/0x3b0 [ 296.997726][T11163] do_syscall_64+0xfa/0x3b0 [ 296.997755][T11163] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.997783][T11163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.997805][T11163] ? clear_bhb_loop+0x60/0xb0 [ 296.997831][T11163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.997852][T11163] RIP: 0033:0x7f173e58d5fc [ 296.997870][T11163] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 296.997889][T11163] RSP: 002b:00007f173f3a0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 296.997911][T11163] RAX: ffffffffffffffda RBX: 00007f173e7b6090 RCX: 00007f173e58d5fc [ 296.997927][T11163] RDX: 000000000000000f RSI: 00007f173f3a00a0 RDI: 000000000000000b [ 296.997940][T11163] RBP: 00007f173f3a0090 R08: 0000000000000000 R09: 0000000000000000 [ 296.997953][T11163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.997966][T11163] R13: 00007f173e7b6128 R14: 00007f173e7b6090 R15: 00007ffc60383ac8 [ 296.998001][T11163] [ 297.531004][T11169] veth3: entered allmulticast mode [ 297.587034][T11173] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 297.953220][T11186] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.995769][T11187] tipc: Enabling of bearer rejected, failed to enable media [ 298.007250][T11188] syzkaller0: refused to change device tx_queue_len [ 298.038214][T11186] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.149169][T11186] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.244776][T11186] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.308829][T11200] netlink: 'syz.3.1686': attribute type 1 has an invalid length. [ 298.320871][T11200] nbd: couldn't find device at index 1048576 [ 298.330166][T11202] FAULT_INJECTION: forcing a failure. [ 298.330166][T11202] name failslab, interval 1, probability 0, space 0, times 0 [ 298.348617][T11202] CPU: 1 UID: 0 PID: 11202 Comm: syz.2.1689 Not tainted syzkaller #0 PREEMPT(full) [ 298.348645][T11202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.348658][T11202] Call Trace: [ 298.348667][T11202] [ 298.348676][T11202] dump_stack_lvl+0x189/0x250 [ 298.348723][T11202] ? __pfx____ratelimit+0x10/0x10 [ 298.348753][T11202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.348779][T11202] ? __pfx__printk+0x10/0x10 [ 298.348816][T11202] ? __pfx___might_resched+0x10/0x10 [ 298.348843][T11202] should_fail_ex+0x414/0x560 [ 298.348877][T11202] should_failslab+0xa8/0x100 [ 298.348910][T11202] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 298.348941][T11202] ? __alloc_skb+0x112/0x2d0 [ 298.348978][T11202] __alloc_skb+0x112/0x2d0 [ 298.349014][T11202] netlink_sendmsg+0x5c6/0xb30 [ 298.349057][T11202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.349092][T11202] ? aa_sock_msg_perm+0xf1/0x1d0 [ 298.349127][T11202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 298.349150][T11202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.349184][T11202] __sock_sendmsg+0x219/0x270 [ 298.349214][T11202] ____sys_sendmsg+0x505/0x830 [ 298.349243][T11202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.349276][T11202] ? import_iovec+0x74/0xa0 [ 298.349306][T11202] ___sys_sendmsg+0x21f/0x2a0 [ 298.349331][T11202] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.349396][T11202] ? __fget_files+0x2a/0x420 [ 298.349436][T11202] ? __fget_files+0x3a0/0x420 [ 298.349480][T11202] __x64_sys_sendmsg+0x19b/0x260 [ 298.349505][T11202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.349538][T11202] ? __pfx_ksys_write+0x10/0x10 [ 298.349564][T11202] ? rcu_is_watching+0x15/0xb0 [ 298.349591][T11202] ? do_syscall_64+0xbe/0x3b0 [ 298.349627][T11202] do_syscall_64+0xfa/0x3b0 [ 298.349656][T11202] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.349685][T11202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.349706][T11202] ? clear_bhb_loop+0x60/0xb0 [ 298.349732][T11202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.349752][T11202] RIP: 0033:0x7f173e58ebe9 [ 298.349771][T11202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.349790][T11202] RSP: 002b:00007f173f3c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.349812][T11202] RAX: ffffffffffffffda RBX: 00007f173e7b5fa0 RCX: 00007f173e58ebe9 [ 298.349840][T11202] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 298.349853][T11202] RBP: 00007f173f3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 298.349865][T11202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.349878][T11202] R13: 00007f173e7b6038 R14: 00007f173e7b5fa0 R15: 00007ffc60383ac8 [ 298.349911][T11202] [ 298.352250][T11203] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.632134][T11203] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.705317][T10204] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.787502][T11203] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.803290][T11203] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.843385][T10204] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.865795][T10204] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.883551][T11203] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.894432][T11203] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.921878][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.948786][T11203] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.976186][T11203] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.118855][T11223] veth19: entered allmulticast mode [ 299.159097][T10206] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.168452][T10206] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.192754][T10206] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.219384][T10206] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.248525][T10206] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.265105][T10206] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.324437][T10206] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.358000][T10206] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.620608][T11242] __nla_validate_parse: 3 callbacks suppressed [ 299.620631][T11242] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1701'. [ 299.674081][T11243] netlink: 'syz.2.1699': attribute type 8 has an invalid length. [ 299.820570][T11250] netlink: 'syz.3.1702': attribute type 1 has an invalid length. [ 299.857608][T11250] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1702'. [ 299.890502][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1702'. [ 299.890803][T11250] nbd: couldn't find device at index 1048576 [ 299.940547][T11269] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1705'. [ 300.238173][T11277] veth5: entered allmulticast mode [ 300.554044][T11295] FAULT_INJECTION: forcing a failure. [ 300.554044][T11295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.584083][T11295] CPU: 0 UID: 0 PID: 11295 Comm: syz.5.1717 Not tainted syzkaller #0 PREEMPT(full) [ 300.584114][T11295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.584128][T11295] Call Trace: [ 300.584136][T11295] [ 300.584145][T11295] dump_stack_lvl+0x189/0x250 [ 300.584176][T11295] ? __pfx____ratelimit+0x10/0x10 [ 300.584205][T11295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.584230][T11295] ? __pfx__printk+0x10/0x10 [ 300.584259][T11295] ? __might_fault+0xb0/0x130 [ 300.584310][T11295] should_fail_ex+0x414/0x560 [ 300.584343][T11295] _copy_from_user+0x2d/0xb0 [ 300.584368][T11295] ___sys_sendmsg+0x158/0x2a0 [ 300.584393][T11295] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.584453][T11295] ? __fget_files+0x2a/0x420 [ 300.584485][T11295] ? __fget_files+0x3a0/0x420 [ 300.584527][T11295] __sys_sendmmsg+0x227/0x430 [ 300.584556][T11295] ? __pfx___sys_sendmmsg+0x10/0x10 [ 300.584574][T11295] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 300.584634][T11295] ? ksys_write+0x22a/0x250 [ 300.584664][T11295] ? __pfx_ksys_write+0x10/0x10 [ 300.584690][T11295] ? rcu_is_watching+0x15/0xb0 [ 300.584718][T11295] __x64_sys_sendmmsg+0xa0/0xc0 [ 300.584742][T11295] do_syscall_64+0xfa/0x3b0 [ 300.584771][T11295] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.584798][T11295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.584820][T11295] ? clear_bhb_loop+0x60/0xb0 [ 300.584845][T11295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.584865][T11295] RIP: 0033:0x7f2240d8ebe9 [ 300.584883][T11295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.584901][T11295] RSP: 002b:00007f2241c14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 300.584923][T11295] RAX: ffffffffffffffda RBX: 00007f2240fb5fa0 RCX: 00007f2240d8ebe9 [ 300.584936][T11295] RDX: 04924924924924b9 RSI: 0000200000000400 RDI: 0000000000000004 [ 300.584948][T11295] RBP: 00007f2241c14090 R08: 0000000000000000 R09: 0000000000000000 [ 300.584958][T11295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.584968][T11295] R13: 00007f2240fb6038 R14: 00007f2240fb5fa0 R15: 00007ffd03997528 [ 300.584994][T11295] [ 300.874180][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1718'. [ 300.904984][T11305] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 300.982192][T11305] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 300.990106][T11305] gretap1: entered promiscuous mode [ 300.995377][T11305] gretap1: entered allmulticast mode [ 301.067387][T11311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1719'. [ 301.107973][T11312] tipc: Enabled bearer , priority 0 [ 301.118850][T11312] syzkaller0: entered promiscuous mode [ 301.124464][T11312] syzkaller0: entered allmulticast mode [ 301.137893][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1720'. [ 301.161012][T11312] tipc: Resetting bearer [ 301.173713][T11312] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1720'. [ 301.189776][T11309] tipc: Resetting bearer [ 301.207126][T11309] tipc: Disabling bearer [ 301.433246][T11315] netlink: 'syz.0.1721': attribute type 1 has an invalid length. [ 301.456947][T11315] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1721'. [ 301.470428][T11315] nbd: couldn't find device at index 1048576 [ 301.480316][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1721'. [ 301.509399][T11317] netlink: 'syz.5.1722': attribute type 39 has an invalid length. [ 301.575848][T11318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.591485][T11320] FAULT_INJECTION: forcing a failure. [ 301.591485][T11320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.604964][T11320] CPU: 1 UID: 0 PID: 11320 Comm: syz.0.1723 Not tainted syzkaller #0 PREEMPT(full) [ 301.604992][T11320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.605005][T11320] Call Trace: [ 301.605013][T11320] [ 301.605024][T11320] dump_stack_lvl+0x189/0x250 [ 301.605046][T11320] ? __pfx____ratelimit+0x10/0x10 [ 301.605067][T11320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.605085][T11320] ? __pfx__printk+0x10/0x10 [ 301.605107][T11320] ? __might_fault+0xb0/0x130 [ 301.605143][T11320] should_fail_ex+0x414/0x560 [ 301.605166][T11320] _copy_from_iter+0x1db/0x16f0 [ 301.605184][T11320] ? rcu_is_watching+0x15/0xb0 [ 301.605200][T11320] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 301.605222][T11320] ? __pfx__copy_from_iter+0x10/0x10 [ 301.605238][T11320] ? __build_skb_around+0x257/0x3e0 [ 301.605263][T11320] ? netlink_sendmsg+0x642/0xb30 [ 301.605285][T11320] ? skb_put+0x11b/0x210 [ 301.605322][T11320] netlink_sendmsg+0x6b2/0xb30 [ 301.605362][T11320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.605409][T11320] ? aa_sock_msg_perm+0xf1/0x1d0 [ 301.605433][T11320] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.605448][T11320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.605468][T11320] __sock_sendmsg+0x219/0x270 [ 301.605487][T11320] ____sys_sendmsg+0x505/0x830 [ 301.605505][T11320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.605525][T11320] ? import_iovec+0x74/0xa0 [ 301.605543][T11320] ___sys_sendmsg+0x21f/0x2a0 [ 301.605557][T11320] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.605596][T11320] ? __fget_files+0x2a/0x420 [ 301.605616][T11320] ? __fget_files+0x3a0/0x420 [ 301.605643][T11320] __x64_sys_sendmsg+0x19b/0x260 [ 301.605659][T11320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.605679][T11320] ? __pfx_ksys_write+0x10/0x10 [ 301.605702][T11320] ? do_syscall_64+0xbe/0x3b0 [ 301.605724][T11320] do_syscall_64+0xfa/0x3b0 [ 301.605742][T11320] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.605760][T11320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.605773][T11320] ? clear_bhb_loop+0x60/0xb0 [ 301.605790][T11320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.605803][T11320] RIP: 0033:0x7f14f838ebe9 [ 301.605815][T11320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.605827][T11320] RSP: 002b:00007f14f92bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.605841][T11320] RAX: ffffffffffffffda RBX: 00007f14f85b5fa0 RCX: 00007f14f838ebe9 [ 301.605851][T11320] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 301.605859][T11320] RBP: 00007f14f92bf090 R08: 0000000000000000 R09: 0000000000000000 [ 301.605867][T11320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.605874][T11320] R13: 00007f14f85b6038 R14: 00007f14f85b5fa0 R15: 00007fff260df758 [ 301.605895][T11320] [ 301.970054][T11322] tipc: Enabling of bearer rejected, failed to enable media [ 302.160237][T11337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.267372][T11342] veth21: entered allmulticast mode [ 302.800528][T11348] netlink: 'syz.0.1734': attribute type 1 has an invalid length. [ 302.812758][T11348] nbd: couldn't find device at index 1048576 [ 303.045201][T11363] FAULT_INJECTION: forcing a failure. [ 303.045201][T11363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.059562][T11363] CPU: 0 UID: 0 PID: 11363 Comm: syz.0.1738 Not tainted syzkaller #0 PREEMPT(full) [ 303.059589][T11363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.059601][T11363] Call Trace: [ 303.059609][T11363] [ 303.059618][T11363] dump_stack_lvl+0x189/0x250 [ 303.059657][T11363] ? __pfx____ratelimit+0x10/0x10 [ 303.059684][T11363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.059708][T11363] ? __pfx__printk+0x10/0x10 [ 303.059736][T11363] ? __might_fault+0xb0/0x130 [ 303.059793][T11363] should_fail_ex+0x414/0x560 [ 303.059825][T11363] _copy_from_user+0x2d/0xb0 [ 303.059850][T11363] ____sys_sendmsg+0x2fe/0x830 [ 303.059877][T11363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.059904][T11363] ? import_iovec+0x74/0xa0 [ 303.059927][T11363] ___sys_sendmsg+0x21f/0x2a0 [ 303.059945][T11363] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.059992][T11363] ? __fget_files+0x2a/0x420 [ 303.060017][T11363] ? __fget_files+0x3a0/0x420 [ 303.060051][T11363] __sys_sendmmsg+0x227/0x430 [ 303.060074][T11363] ? __pfx___sys_sendmmsg+0x10/0x10 [ 303.060088][T11363] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 303.060147][T11363] ? ksys_write+0x22a/0x250 [ 303.060177][T11363] ? __pfx_ksys_write+0x10/0x10 [ 303.060198][T11363] ? rcu_is_watching+0x15/0xb0 [ 303.060221][T11363] __x64_sys_sendmmsg+0xa0/0xc0 [ 303.060240][T11363] do_syscall_64+0xfa/0x3b0 [ 303.060263][T11363] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.060287][T11363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.060303][T11363] ? clear_bhb_loop+0x60/0xb0 [ 303.060324][T11363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.060341][T11363] RIP: 0033:0x7f14f838ebe9 [ 303.060356][T11363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.060370][T11363] RSP: 002b:00007f14f92bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 303.060390][T11363] RAX: ffffffffffffffda RBX: 00007f14f85b5fa0 RCX: 00007f14f838ebe9 [ 303.060402][T11363] RDX: 04924924924924b9 RSI: 0000200000000400 RDI: 0000000000000004 [ 303.060414][T11363] RBP: 00007f14f92bf090 R08: 0000000000000000 R09: 0000000000000000 [ 303.060425][T11363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.060434][T11363] R13: 00007f14f85b6038 R14: 00007f14f85b5fa0 R15: 00007fff260df758 [ 303.060461][T11363] [ 303.465826][T11373] FAULT_INJECTION: forcing a failure. [ 303.465826][T11373] name failslab, interval 1, probability 0, space 0, times 0 [ 303.483121][T11373] CPU: 0 UID: 0 PID: 11373 Comm: syz.3.1743 Not tainted syzkaller #0 PREEMPT(full) [ 303.483149][T11373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.483162][T11373] Call Trace: [ 303.483170][T11373] [ 303.483179][T11373] dump_stack_lvl+0x189/0x250 [ 303.483210][T11373] ? __pfx____ratelimit+0x10/0x10 [ 303.483239][T11373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.483264][T11373] ? __pfx__printk+0x10/0x10 [ 303.483296][T11373] ? __lock_acquire+0xab9/0xd20 [ 303.483337][T11373] should_fail_ex+0x414/0x560 [ 303.483370][T11373] should_failslab+0xa8/0x100 [ 303.483402][T11373] kmem_cache_alloc_noprof+0x73/0x3c0 [ 303.483439][T11373] ? skb_clone+0x212/0x3a0 [ 303.483464][T11373] skb_clone+0x212/0x3a0 [ 303.483489][T11373] __netlink_deliver_tap+0x404/0x850 [ 303.483531][T11373] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.483562][T11373] netlink_deliver_tap+0x19c/0x1b0 [ 303.483591][T11373] netlink_unicast+0x7fa/0x9e0 [ 303.483625][T11373] ? __pfx_netlink_unicast+0x10/0x10 [ 303.483652][T11373] ? netlink_sendmsg+0x642/0xb30 [ 303.483679][T11373] ? skb_put+0x11b/0x210 [ 303.483713][T11373] netlink_sendmsg+0x805/0xb30 [ 303.483753][T11373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.483803][T11373] ? aa_sock_msg_perm+0xf1/0x1d0 [ 303.483838][T11373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 303.483861][T11373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.483892][T11373] __sock_sendmsg+0x219/0x270 [ 303.483923][T11373] ____sys_sendmsg+0x505/0x830 [ 303.483950][T11373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.483982][T11373] ? import_iovec+0x74/0xa0 [ 303.484019][T11373] ___sys_sendmsg+0x21f/0x2a0 [ 303.484043][T11373] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.484104][T11373] ? __fget_files+0x2a/0x420 [ 303.484136][T11373] ? __fget_files+0x3a0/0x420 [ 303.484179][T11373] __x64_sys_sendmsg+0x19b/0x260 [ 303.484204][T11373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.484236][T11373] ? __pfx_ksys_write+0x10/0x10 [ 303.484262][T11373] ? rcu_is_watching+0x15/0xb0 [ 303.484289][T11373] ? do_syscall_64+0xbe/0x3b0 [ 303.484323][T11373] do_syscall_64+0xfa/0x3b0 [ 303.484352][T11373] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.484379][T11373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.484400][T11373] ? clear_bhb_loop+0x60/0xb0 [ 303.484425][T11373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.484446][T11373] RIP: 0033:0x7f409d98ebe9 [ 303.484464][T11373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.484481][T11373] RSP: 002b:00007f409e7d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.484503][T11373] RAX: ffffffffffffffda RBX: 00007f409dbb5fa0 RCX: 00007f409d98ebe9 [ 303.484518][T11373] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 303.484531][T11373] RBP: 00007f409e7d8090 R08: 0000000000000000 R09: 0000000000000000 [ 303.484543][T11373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.484556][T11373] R13: 00007f409dbb6038 R14: 00007f409dbb5fa0 R15: 00007ffc98a5ec78 [ 303.484589][T11373] [ 304.444168][T11403] netlink: 'syz.0.1755': attribute type 1 has an invalid length. [ 304.486964][T11403] nbd: couldn't find device at index 1048576 [ 304.633566][T11411] veth13: entered allmulticast mode [ 304.818580][T11417] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.918422][T11417] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.024771][T11417] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.098534][T11417] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.218997][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.248224][T10205] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.256651][T10205] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.275857][T10205] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.471305][T11449] netlink: 'syz.0.1771': attribute type 1 has an invalid length. [ 305.479458][T11449] __nla_validate_parse: 8 callbacks suppressed [ 305.479476][T11449] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1771'. [ 305.494887][T11449] nbd: couldn't find device at index 1048576 [ 305.502221][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 305.750177][T11461] FAULT_INJECTION: forcing a failure. [ 305.750177][T11461] name failslab, interval 1, probability 0, space 0, times 0 [ 305.764025][T11461] CPU: 0 UID: 0 PID: 11461 Comm: syz.2.1773 Not tainted syzkaller #0 PREEMPT(full) [ 305.764055][T11461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.764069][T11461] Call Trace: [ 305.764078][T11461] [ 305.764095][T11461] dump_stack_lvl+0x189/0x250 [ 305.764127][T11461] ? __pfx____ratelimit+0x10/0x10 [ 305.764158][T11461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.764185][T11461] ? __pfx__printk+0x10/0x10 [ 305.764219][T11461] ? __pfx___might_resched+0x10/0x10 [ 305.764240][T11461] ? fs_reclaim_acquire+0x7d/0x100 [ 305.764280][T11461] should_fail_ex+0x414/0x560 [ 305.764315][T11461] should_failslab+0xa8/0x100 [ 305.764348][T11461] __kmalloc_noprof+0xcb/0x4f0 [ 305.764378][T11461] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 305.764411][T11461] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 305.764445][T11461] genl_family_rcv_msg_doit+0xb8/0x300 [ 305.764479][T11461] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 305.764513][T11461] ? apparmor_capable+0x137/0x1b0 [ 305.764542][T11461] ? bpf_lsm_capable+0x9/0x20 [ 305.764571][T11461] ? security_capable+0x7e/0x2e0 [ 305.764610][T11461] genl_rcv_msg+0x60e/0x790 [ 305.764643][T11461] ? __pfx_genl_rcv_msg+0x10/0x10 [ 305.764666][T11461] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 305.764716][T11461] ? __asan_memcpy+0x40/0x70 [ 305.764759][T11461] ? __pfx_ref_tracker_free+0x10/0x10 [ 305.764799][T11461] netlink_rcv_skb+0x205/0x470 [ 305.764828][T11461] ? __lock_acquire+0xab9/0xd20 [ 305.764860][T11461] ? __pfx_genl_rcv_msg+0x10/0x10 [ 305.764887][T11461] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 305.764940][T11461] ? down_read+0x1ad/0x2e0 [ 305.764977][T11461] genl_rcv+0x28/0x40 [ 305.764999][T11461] netlink_unicast+0x82c/0x9e0 [ 305.765038][T11461] ? __pfx_netlink_unicast+0x10/0x10 [ 305.765069][T11461] ? netlink_sendmsg+0x642/0xb30 [ 305.765109][T11461] ? skb_put+0x11b/0x210 [ 305.765148][T11461] netlink_sendmsg+0x805/0xb30 [ 305.765192][T11461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.765227][T11461] ? aa_sock_msg_perm+0xf1/0x1d0 [ 305.765264][T11461] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 305.765287][T11461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.765321][T11461] __sock_sendmsg+0x219/0x270 [ 305.765353][T11461] ____sys_sendmsg+0x505/0x830 [ 305.765382][T11461] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.765415][T11461] ? import_iovec+0x74/0xa0 [ 305.765445][T11461] ___sys_sendmsg+0x21f/0x2a0 [ 305.765469][T11461] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.765533][T11461] ? __fget_files+0x2a/0x420 [ 305.765565][T11461] ? __fget_files+0x3a0/0x420 [ 305.765611][T11461] __x64_sys_sendmsg+0x19b/0x260 [ 305.765637][T11461] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 305.765671][T11461] ? __pfx_ksys_write+0x10/0x10 [ 305.765696][T11461] ? rcu_is_watching+0x15/0xb0 [ 305.765724][T11461] ? do_syscall_64+0xbe/0x3b0 [ 305.765760][T11461] do_syscall_64+0xfa/0x3b0 [ 305.765789][T11461] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.765819][T11461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.765841][T11461] ? clear_bhb_loop+0x60/0xb0 [ 305.765868][T11461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.765889][T11461] RIP: 0033:0x7f173e58ebe9 [ 305.765908][T11461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.765928][T11461] RSP: 002b:00007f173f3c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.765951][T11461] RAX: ffffffffffffffda RBX: 00007f173e7b5fa0 RCX: 00007f173e58ebe9 [ 305.765967][T11461] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 305.765981][T11461] RBP: 00007f173f3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 305.765995][T11461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.766007][T11461] R13: 00007f173e7b6038 R14: 00007f173e7b5fa0 R15: 00007ffc60383ac8 [ 305.766042][T11461] [ 306.335736][T11468] FAULT_INJECTION: forcing a failure. [ 306.335736][T11468] name failslab, interval 1, probability 0, space 0, times 0 [ 306.398103][T11468] CPU: 0 UID: 0 PID: 11468 Comm: syz.5.1774 Not tainted syzkaller #0 PREEMPT(full) [ 306.398132][T11468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.398145][T11468] Call Trace: [ 306.398153][T11468] [ 306.398162][T11468] dump_stack_lvl+0x189/0x250 [ 306.398192][T11468] ? __pfx____ratelimit+0x10/0x10 [ 306.398221][T11468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.398246][T11468] ? __pfx__printk+0x10/0x10 [ 306.398278][T11468] ? __pfx___might_resched+0x10/0x10 [ 306.398297][T11468] ? fs_reclaim_acquire+0x7d/0x100 [ 306.398335][T11468] should_fail_ex+0x414/0x560 [ 306.398367][T11468] should_failslab+0xa8/0x100 [ 306.398399][T11468] __kmalloc_noprof+0xcb/0x4f0 [ 306.398425][T11468] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 306.398445][T11468] ? sock_kmalloc+0xd6/0x160 [ 306.398472][T11468] sock_kmalloc+0xd6/0x160 [ 306.398497][T11468] af_alg_sendmsg+0x109c/0x22e0 [ 306.398520][T11468] ? __pfx___might_resched+0x10/0x10 [ 306.398564][T11468] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 306.398588][T11468] ? __pfx_aa_sk_perm+0x10/0x10 [ 306.398616][T11468] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 306.398644][T11468] ? aa_sock_msg_perm+0xf1/0x1d0 [ 306.398677][T11468] ? skcipher_sendmsg+0x26/0xf0 [ 306.398702][T11468] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 306.398730][T11468] __sock_sendmsg+0x219/0x270 [ 306.398759][T11468] ____sys_sendmsg+0x52d/0x830 [ 306.398786][T11468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.398816][T11468] ? import_iovec+0x74/0xa0 [ 306.398850][T11468] ___sys_sendmsg+0x21f/0x2a0 [ 306.398873][T11468] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.398932][T11468] ? __fget_files+0x2a/0x420 [ 306.398963][T11468] ? __fget_files+0x3a0/0x420 [ 306.399005][T11468] __sys_sendmmsg+0x227/0x430 [ 306.399033][T11468] ? __pfx___sys_sendmmsg+0x10/0x10 [ 306.399051][T11468] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 306.399110][T11468] ? ksys_write+0x22a/0x250 [ 306.399139][T11468] ? __pfx_ksys_write+0x10/0x10 [ 306.399164][T11468] ? rcu_is_watching+0x15/0xb0 [ 306.399191][T11468] __x64_sys_sendmmsg+0xa0/0xc0 [ 306.399214][T11468] do_syscall_64+0xfa/0x3b0 [ 306.399242][T11468] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.399269][T11468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.399289][T11468] ? clear_bhb_loop+0x60/0xb0 [ 306.399314][T11468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.399333][T11468] RIP: 0033:0x7f2240d8ebe9 [ 306.399351][T11468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.399369][T11468] RSP: 002b:00007f2241c14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 306.399390][T11468] RAX: ffffffffffffffda RBX: 00007f2240fb5fa0 RCX: 00007f2240d8ebe9 [ 306.399405][T11468] RDX: 04924924924924b9 RSI: 0000200000000400 RDI: 0000000000000004 [ 306.399418][T11468] RBP: 00007f2241c14090 R08: 0000000000000000 R09: 0000000000000000 [ 306.399431][T11468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.399443][T11468] R13: 00007f2240fb6038 R14: 00007f2240fb5fa0 R15: 00007ffd03997528 [ 306.399476][T11468] [ 307.262416][T11501] netlink: 'syz.5.1782': attribute type 1 has an invalid length. [ 307.273236][T11501] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1782'. [ 307.302770][T11501] nbd: couldn't find device at index 1048576 [ 307.364612][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1782'. [ 307.398725][T11503] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1783'. [ 307.445497][T11511] netlink: 'syz.2.1787': attribute type 11 has an invalid length. [ 307.460077][T11512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.468822][T11511] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1787'. [ 307.495517][T11512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.544163][T11512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.581546][T11512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.618529][T11512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.649986][T11512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.667715][T11512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.671322][T11521] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1788'. [ 307.677721][T11512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.700495][T11512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.705910][T11519] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1790'. [ 307.709105][T11512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.735595][T11523] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1788'. [ 307.785080][T11515] veth7: entered allmulticast mode [ 308.088024][T11533] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.187654][T11533] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.248811][T11545] netlink: 'syz.5.1800': attribute type 1 has an invalid length. [ 308.260104][T11545] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1800'. [ 308.273230][T11545] nbd: couldn't find device at index 1048576 [ 308.285794][T11533] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.347785][T11533] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.504886][T11554] FAULT_INJECTION: forcing a failure. [ 308.504886][T11554] name failslab, interval 1, probability 0, space 0, times 0 [ 308.519925][T11554] CPU: 1 UID: 0 PID: 11554 Comm: syz.4.1804 Not tainted syzkaller #0 PREEMPT(full) [ 308.519955][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.519968][T11554] Call Trace: [ 308.519976][T11554] [ 308.519985][T11554] dump_stack_lvl+0x189/0x250 [ 308.520016][T11554] ? __pfx____ratelimit+0x10/0x10 [ 308.520046][T11554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.520071][T11554] ? __pfx__printk+0x10/0x10 [ 308.520108][T11554] ? __pfx___might_resched+0x10/0x10 [ 308.520127][T11554] ? fs_reclaim_acquire+0x7d/0x100 [ 308.520165][T11554] should_fail_ex+0x414/0x560 [ 308.520198][T11554] should_failslab+0xa8/0x100 [ 308.520229][T11554] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 308.520258][T11554] ? __alloc_skb+0x112/0x2d0 [ 308.520292][T11554] __alloc_skb+0x112/0x2d0 [ 308.520325][T11554] netlink_ack+0x146/0xa50 [ 308.520352][T11554] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.520379][T11554] ? __asan_memcpy+0x40/0x70 [ 308.520402][T11554] ? __pfx_ref_tracker_free+0x10/0x10 [ 308.520438][T11554] netlink_rcv_skb+0x28c/0x470 [ 308.520466][T11554] ? __lock_acquire+0xab9/0xd20 [ 308.520496][T11554] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.520521][T11554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.520572][T11554] ? down_read+0x1ad/0x2e0 [ 308.520607][T11554] genl_rcv+0x28/0x40 [ 308.520626][T11554] netlink_unicast+0x82c/0x9e0 [ 308.520663][T11554] ? __pfx_netlink_unicast+0x10/0x10 [ 308.520692][T11554] ? netlink_sendmsg+0x642/0xb30 [ 308.520720][T11554] ? skb_put+0x11b/0x210 [ 308.520756][T11554] netlink_sendmsg+0x805/0xb30 [ 308.520797][T11554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.520837][T11554] ? aa_sock_msg_perm+0xf1/0x1d0 [ 308.520872][T11554] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.520894][T11554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.520933][T11554] __sock_sendmsg+0x219/0x270 [ 308.520964][T11554] ____sys_sendmsg+0x505/0x830 [ 308.520991][T11554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.521023][T11554] ? import_iovec+0x74/0xa0 [ 308.521051][T11554] ___sys_sendmsg+0x21f/0x2a0 [ 308.521074][T11554] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.521135][T11554] ? __fget_files+0x2a/0x420 [ 308.521166][T11554] ? __fget_files+0x3a0/0x420 [ 308.521210][T11554] __x64_sys_sendmsg+0x19b/0x260 [ 308.521234][T11554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.521267][T11554] ? __pfx_ksys_write+0x10/0x10 [ 308.521300][T11554] ? do_syscall_64+0xbe/0x3b0 [ 308.521335][T11554] do_syscall_64+0xfa/0x3b0 [ 308.521363][T11554] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.521391][T11554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.521412][T11554] ? clear_bhb_loop+0x60/0xb0 [ 308.521437][T11554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.521458][T11554] RIP: 0033:0x7f21ca98ebe9 [ 308.521476][T11554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.521494][T11554] RSP: 002b:00007f21cb718038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.521516][T11554] RAX: ffffffffffffffda RBX: 00007f21cabb5fa0 RCX: 00007f21ca98ebe9 [ 308.521531][T11554] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 308.521544][T11554] RBP: 00007f21cb718090 R08: 0000000000000000 R09: 0000000000000000 [ 308.521556][T11554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.521568][T11554] R13: 00007f21cabb6038 R14: 00007f21cabb5fa0 R15: 00007ffe250aa7a8 [ 308.521601][T11554] [ 308.959284][ T30] audit: type=1800 audit(1755621495.755:4): pid=11559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1805" name="memory.events" dev="tmpfs" ino=1895 res=0 errno=0 [ 308.982237][ T30] audit: type=1804 audit(1755621495.755:5): pid=11559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1805" name="/newroot/372/memory.events" dev="tmpfs" ino=1895 res=1 errno=0 [ 309.081026][T11562] FAULT_INJECTION: forcing a failure. [ 309.081026][T11562] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 309.094640][T11562] CPU: 1 UID: 0 PID: 11562 Comm: syz.2.1807 Not tainted syzkaller #0 PREEMPT(full) [ 309.094672][T11562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.094686][T11562] Call Trace: [ 309.094694][T11562] [ 309.094702][T11562] dump_stack_lvl+0x189/0x250 [ 309.094731][T11562] ? __pfx____ratelimit+0x10/0x10 [ 309.094760][T11562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.094802][T11562] ? __pfx__printk+0x10/0x10 [ 309.094833][T11562] ? fs_reclaim_acquire+0x7d/0x100 [ 309.094877][T11562] should_fail_ex+0x414/0x560 [ 309.094911][T11562] prepare_alloc_pages+0x213/0x610 [ 309.094941][T11562] __alloc_frozen_pages_noprof+0x123/0x370 [ 309.094968][T11562] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 309.094999][T11562] ? policy_nodemask+0x27c/0x720 [ 309.095036][T11562] alloc_pages_mpol+0x232/0x4a0 [ 309.095072][T11562] alloc_pages_noprof+0xa9/0x190 [ 309.095105][T11562] af_alg_sendmsg+0x133a/0x22e0 [ 309.095130][T11562] ? __pfx___might_resched+0x10/0x10 [ 309.095176][T11562] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 309.095200][T11562] ? __pfx_aa_sk_perm+0x10/0x10 [ 309.095229][T11562] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 309.095258][T11562] ? aa_sock_msg_perm+0xf1/0x1d0 [ 309.095294][T11562] ? skcipher_sendmsg+0x26/0xf0 [ 309.095320][T11562] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 309.095347][T11562] __sock_sendmsg+0x219/0x270 [ 309.095377][T11562] ____sys_sendmsg+0x52d/0x830 [ 309.095404][T11562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.095434][T11562] ? import_iovec+0x74/0xa0 [ 309.095461][T11562] ___sys_sendmsg+0x21f/0x2a0 [ 309.095485][T11562] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.095544][T11562] ? __fget_files+0x2a/0x420 [ 309.095574][T11562] ? __fget_files+0x3a0/0x420 [ 309.095623][T11562] __sys_sendmmsg+0x227/0x430 [ 309.095650][T11562] ? __pfx___sys_sendmmsg+0x10/0x10 [ 309.095668][T11562] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 309.095727][T11562] ? ksys_write+0x22a/0x250 [ 309.095757][T11562] ? __pfx_ksys_write+0x10/0x10 [ 309.095781][T11562] ? rcu_is_watching+0x15/0xb0 [ 309.095809][T11562] __x64_sys_sendmmsg+0xa0/0xc0 [ 309.095832][T11562] do_syscall_64+0xfa/0x3b0 [ 309.095860][T11562] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.095887][T11562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.095908][T11562] ? clear_bhb_loop+0x60/0xb0 [ 309.095933][T11562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.095953][T11562] RIP: 0033:0x7f173e58ebe9 [ 309.095971][T11562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.095988][T11562] RSP: 002b:00007f173f3c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 309.096014][T11562] RAX: ffffffffffffffda RBX: 00007f173e7b5fa0 RCX: 00007f173e58ebe9 [ 309.096030][T11562] RDX: 04924924924924b9 RSI: 0000200000000400 RDI: 0000000000000004 [ 309.096044][T11562] RBP: 00007f173f3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 309.096056][T11562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.096068][T11562] R13: 00007f173e7b6038 R14: 00007f173e7b5fa0 R15: 00007ffc60383ac8 [ 309.096120][T11562] [ 309.749086][T11583] netlink: 'syz.3.1812': attribute type 1 has an invalid length. [ 309.765820][T11583] nbd: couldn't find device at index 1048576 [ 309.860936][T11589] FAULT_INJECTION: forcing a failure. [ 309.860936][T11589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.874429][T11589] CPU: 1 UID: 0 PID: 11589 Comm: syz.2.1815 Not tainted syzkaller #0 PREEMPT(full) [ 309.874455][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.874469][T11589] Call Trace: [ 309.874476][T11589] [ 309.874485][T11589] dump_stack_lvl+0x189/0x250 [ 309.874515][T11589] ? __pfx____ratelimit+0x10/0x10 [ 309.874564][T11589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.874589][T11589] ? __pfx__printk+0x10/0x10 [ 309.874619][T11589] ? __might_fault+0xb0/0x130 [ 309.874658][T11589] should_fail_ex+0x414/0x560 [ 309.874690][T11589] _copy_from_user+0x2d/0xb0 [ 309.874715][T11589] ___sys_sendmsg+0x158/0x2a0 [ 309.874739][T11589] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.874798][T11589] ? __fget_files+0x2a/0x420 [ 309.874829][T11589] ? __fget_files+0x3a0/0x420 [ 309.874871][T11589] __sys_sendmmsg+0x227/0x430 [ 309.874898][T11589] ? __pfx___sys_sendmmsg+0x10/0x10 [ 309.874916][T11589] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 309.874975][T11589] ? ksys_write+0x22a/0x250 [ 309.875005][T11589] ? __pfx_ksys_write+0x10/0x10 [ 309.875030][T11589] ? rcu_is_watching+0x15/0xb0 [ 309.875058][T11589] __x64_sys_sendmmsg+0xa0/0xc0 [ 309.875083][T11589] do_syscall_64+0xfa/0x3b0 [ 309.875111][T11589] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.875139][T11589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.875160][T11589] ? clear_bhb_loop+0x60/0xb0 [ 309.875186][T11589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.875206][T11589] RIP: 0033:0x7f173e58ebe9 [ 309.875225][T11589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.875242][T11589] RSP: 002b:00007f173f3c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 309.875264][T11589] RAX: ffffffffffffffda RBX: 00007f173e7b5fa0 RCX: 00007f173e58ebe9 [ 309.875280][T11589] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 309.875292][T11589] RBP: 00007f173f3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 309.875305][T11589] R10: 0000000004040880 R11: 0000000000000246 R12: 0000000000000001 [ 309.875318][T11589] R13: 00007f173e7b6038 R14: 00007f173e7b5fa0 R15: 00007ffc60383ac8 [ 309.875351][T11589] [ 310.242190][T11597] netlink: 'syz.2.1819': attribute type 7 has an invalid length. [ 310.423317][T11601] veth17: entered allmulticast mode [ 310.453849][T11597] : entered promiscuous mode [ 310.671632][T11623] Bluetooth: MGMT ver 1.23 [ 310.727150][T11629] netlink: 'syz.3.1826': attribute type 1 has an invalid length. [ 310.743252][T11629] __nla_validate_parse: 9 callbacks suppressed [ 310.743273][T11629] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1826'. [ 310.779317][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1826'. [ 310.790579][T11629] nbd: couldn't find device at index 1048576 [ 310.863303][T11636] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1831'. [ 310.878363][T11636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1831'. [ 310.890420][T11637] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1829'. [ 310.905361][T11636] syzkaller0: entered allmulticast mode [ 311.034501][T11641] netlink: 'syz.3.1833': attribute type 10 has an invalid length. [ 311.054643][T11641] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.094793][T11641] bond0: (slave team0): Enslaving as an active interface with an up link [ 311.229525][T10205] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.240913][T10205] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.267796][T10205] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.292332][T10206] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.584110][T11663] FAULT_INJECTION: forcing a failure. [ 311.584110][T11663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.600651][T11663] CPU: 0 UID: 0 PID: 11663 Comm: syz.0.1842 Not tainted syzkaller #0 PREEMPT(full) [ 311.600677][T11663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.600689][T11663] Call Trace: [ 311.600697][T11663] [ 311.600707][T11663] dump_stack_lvl+0x189/0x250 [ 311.600735][T11663] ? __pfx____ratelimit+0x10/0x10 [ 311.600763][T11663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.600786][T11663] ? __pfx__printk+0x10/0x10 [ 311.600846][T11663] should_fail_ex+0x414/0x560 [ 311.600880][T11663] _copy_from_user+0x2d/0xb0 [ 311.600906][T11663] __copy_msghdr+0x3c5/0x5b0 [ 311.600932][T11663] ___sys_sendmsg+0x1a5/0x2a0 [ 311.600956][T11663] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.601018][T11663] ? __fget_files+0x2a/0x420 [ 311.601049][T11663] ? __fget_files+0x3a0/0x420 [ 311.601093][T11663] __sys_sendmmsg+0x227/0x430 [ 311.601120][T11663] ? __pfx___sys_sendmmsg+0x10/0x10 [ 311.601139][T11663] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 311.601200][T11663] ? ksys_write+0x22a/0x250 [ 311.601231][T11663] ? __pfx_ksys_write+0x10/0x10 [ 311.601255][T11663] ? rcu_is_watching+0x15/0xb0 [ 311.601284][T11663] __x64_sys_sendmmsg+0xa0/0xc0 [ 311.601308][T11663] do_syscall_64+0xfa/0x3b0 [ 311.601337][T11663] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.601365][T11663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.601386][T11663] ? clear_bhb_loop+0x60/0xb0 [ 311.601413][T11663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.601432][T11663] RIP: 0033:0x7f14f838ebe9 [ 311.601458][T11663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.601476][T11663] RSP: 002b:00007f14f92bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 311.601496][T11663] RAX: ffffffffffffffda RBX: 00007f14f85b5fa0 RCX: 00007f14f838ebe9 [ 311.601508][T11663] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 311.601519][T11663] RBP: 00007f14f92bf090 R08: 0000000000000000 R09: 0000000000000000 [ 311.601529][T11663] R10: 0000000004040880 R11: 0000000000000246 R12: 0000000000000001 [ 311.601539][T11663] R13: 00007f14f85b6038 R14: 00007f14f85b5fa0 R15: 00007fff260df758 [ 311.601566][T11663] [ 311.884279][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1844'. [ 311.912594][T11668] netlink: 'syz.3.1843': attribute type 1 has an invalid length. [ 311.938449][T11668] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1843'. [ 311.952959][T11668] nbd: couldn't find device at index 1048576 [ 311.960813][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'. [ 312.266664][T11679] veth13: entered allmulticast mode [ 312.392471][T11688] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1851'. [ 312.411161][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1850'. [ 312.613160][T11700] FAULT_INJECTION: forcing a failure. [ 312.613160][T11700] name failslab, interval 1, probability 0, space 0, times 0 [ 312.629756][T11700] CPU: 0 UID: 0 PID: 11700 Comm: syz.0.1856 Not tainted syzkaller #0 PREEMPT(full) [ 312.629785][T11700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.629798][T11700] Call Trace: [ 312.629806][T11700] [ 312.629815][T11700] dump_stack_lvl+0x189/0x250 [ 312.629845][T11700] ? __pfx____ratelimit+0x10/0x10 [ 312.629875][T11700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.629899][T11700] ? __pfx__printk+0x10/0x10 [ 312.629925][T11700] ? genl_rcv+0x28/0x40 [ 312.629947][T11700] ? ____sys_sendmsg+0x505/0x830 [ 312.629965][T11700] ? __x64_sys_sendmsg+0x19b/0x260 [ 312.629998][T11700] should_fail_ex+0x414/0x560 [ 312.630029][T11700] should_failslab+0xa8/0x100 [ 312.630062][T11700] kmem_cache_alloc_noprof+0x73/0x3c0 [ 312.630094][T11700] ? skb_clone+0x212/0x3a0 [ 312.630122][T11700] skb_clone+0x212/0x3a0 [ 312.630147][T11700] __netlink_deliver_tap+0x404/0x850 [ 312.630210][T11700] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.630242][T11700] netlink_deliver_tap+0x19c/0x1b0 [ 312.630276][T11700] netlink_sendskb+0x68/0x140 [ 312.630306][T11700] netlink_unicast+0x397/0x9e0 [ 312.630332][T11700] ? __asan_memcpy+0x40/0x70 [ 312.630365][T11700] ? __pfx_netlink_unicast+0x10/0x10 [ 312.630405][T11700] netlink_rcv_skb+0x28c/0x470 [ 312.630434][T11700] ? __lock_acquire+0xab9/0xd20 [ 312.630467][T11700] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.630492][T11700] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.630555][T11700] ? down_read+0x1ad/0x2e0 [ 312.630590][T11700] genl_rcv+0x28/0x40 [ 312.630618][T11700] netlink_unicast+0x82c/0x9e0 [ 312.630653][T11700] ? __pfx_netlink_unicast+0x10/0x10 [ 312.630682][T11700] ? netlink_sendmsg+0x642/0xb30 [ 312.630710][T11700] ? skb_put+0x11b/0x210 [ 312.630747][T11700] netlink_sendmsg+0x805/0xb30 [ 312.630788][T11700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.630824][T11700] ? aa_sock_msg_perm+0xf1/0x1d0 [ 312.630860][T11700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.630883][T11700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.630915][T11700] __sock_sendmsg+0x219/0x270 [ 312.630946][T11700] ____sys_sendmsg+0x505/0x830 [ 312.630974][T11700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.631006][T11700] ? import_iovec+0x74/0xa0 [ 312.631034][T11700] ___sys_sendmsg+0x21f/0x2a0 [ 312.631059][T11700] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.631121][T11700] ? __fget_files+0x2a/0x420 [ 312.631152][T11700] ? __fget_files+0x3a0/0x420 [ 312.631195][T11700] __x64_sys_sendmsg+0x19b/0x260 [ 312.631221][T11700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.631253][T11700] ? __pfx_ksys_write+0x10/0x10 [ 312.631279][T11700] ? rcu_is_watching+0x15/0xb0 [ 312.631306][T11700] ? do_syscall_64+0xbe/0x3b0 [ 312.631341][T11700] do_syscall_64+0xfa/0x3b0 [ 312.631370][T11700] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.631398][T11700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.631419][T11700] ? clear_bhb_loop+0x60/0xb0 [ 312.631445][T11700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.631466][T11700] RIP: 0033:0x7f14f838ebe9 [ 312.631484][T11700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.631502][T11700] RSP: 002b:00007f14f92bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.631524][T11700] RAX: ffffffffffffffda RBX: 00007f14f85b5fa0 RCX: 00007f14f838ebe9 [ 312.631539][T11700] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 312.631552][T11700] RBP: 00007f14f92bf090 R08: 0000000000000000 R09: 0000000000000000 [ 312.631565][T11700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.631577][T11700] R13: 00007f14f85b6038 R14: 00007f14f85b5fa0 R15: 00007fff260df758 [ 312.631616][T11700] [ 313.175788][T11705] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.253317][T11714] netlink: 'syz.0.1859': attribute type 1 has an invalid length. [ 313.278506][T11705] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.300311][T11714] nbd: couldn't find device at index 1048576 [ 313.431649][T11718] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 313.539853][T11705] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.641024][T11730] FAULT_INJECTION: forcing a failure. [ 313.641024][T11730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.712665][T11730] CPU: 1 UID: 0 PID: 11730 Comm: syz.4.1865 Not tainted syzkaller #0 PREEMPT(full) [ 313.712696][T11730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.712709][T11730] Call Trace: [ 313.712717][T11730] [ 313.712726][T11730] dump_stack_lvl+0x189/0x250 [ 313.712757][T11730] ? __pfx____ratelimit+0x10/0x10 [ 313.712786][T11730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.712811][T11730] ? __pfx__printk+0x10/0x10 [ 313.712841][T11730] ? __might_fault+0xb0/0x130 [ 313.712883][T11730] should_fail_ex+0x414/0x560 [ 313.712916][T11730] _copy_from_user+0x2d/0xb0 [ 313.712942][T11730] ____sys_sendmsg+0x2fe/0x830 [ 313.712970][T11730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.713001][T11730] ? import_iovec+0x74/0xa0 [ 313.713029][T11730] ___sys_sendmsg+0x21f/0x2a0 [ 313.713054][T11730] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.713113][T11730] ? __fget_files+0x2a/0x420 [ 313.713144][T11730] ? __fget_files+0x3a0/0x420 [ 313.713187][T11730] __sys_sendmmsg+0x227/0x430 [ 313.713215][T11730] ? __pfx___sys_sendmmsg+0x10/0x10 [ 313.713234][T11730] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 313.713300][T11730] ? ksys_write+0x22a/0x250 [ 313.713330][T11730] ? __pfx_ksys_write+0x10/0x10 [ 313.713355][T11730] ? rcu_is_watching+0x15/0xb0 [ 313.713383][T11730] __x64_sys_sendmmsg+0xa0/0xc0 [ 313.713407][T11730] do_syscall_64+0xfa/0x3b0 [ 313.713435][T11730] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.713463][T11730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.713483][T11730] ? clear_bhb_loop+0x60/0xb0 [ 313.713508][T11730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.713530][T11730] RIP: 0033:0x7f21ca98ebe9 [ 313.713548][T11730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.713567][T11730] RSP: 002b:00007f21cb718038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 313.713589][T11730] RAX: ffffffffffffffda RBX: 00007f21cabb5fa0 RCX: 00007f21ca98ebe9 [ 313.713604][T11730] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 313.713617][T11730] RBP: 00007f21cb718090 R08: 0000000000000000 R09: 0000000000000000 [ 313.713631][T11730] R10: 0000000004040880 R11: 0000000000000246 R12: 0000000000000001 [ 313.713643][T11730] R13: 00007f21cabb6038 R14: 00007f21cabb5fa0 R15: 00007ffe250aa7a8 [ 313.713677][T11730] [ 313.952173][T11705] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.149358][T11745] ip6gre1: entered allmulticast mode [ 314.156579][T10204] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.202267][ T3554] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.242881][T10204] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.266592][T10204] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.629859][T11757] netlink: 'syz.5.1875': attribute type 1 has an invalid length. [ 314.643040][T11757] nbd: couldn't find device at index 1048576 [ 314.751752][T11762] veth13: entered allmulticast mode [ 315.108039][T11776] FAULT_INJECTION: forcing a failure. [ 315.108039][T11776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.176074][T11776] CPU: 0 UID: 0 PID: 11776 Comm: syz.2.1880 Not tainted syzkaller #0 PREEMPT(full) [ 315.176103][T11776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.176117][T11776] Call Trace: [ 315.176126][T11776] [ 315.176135][T11776] dump_stack_lvl+0x189/0x250 [ 315.176167][T11776] ? __pfx____ratelimit+0x10/0x10 [ 315.176204][T11776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.176236][T11776] ? __pfx__printk+0x10/0x10 [ 315.176289][T11776] should_fail_ex+0x414/0x560 [ 315.176324][T11776] _copy_to_user+0x31/0xb0 [ 315.176351][T11776] simple_read_from_buffer+0xe1/0x170 [ 315.176389][T11776] proc_fail_nth_read+0x1b3/0x220 [ 315.176417][T11776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.176452][T11776] ? rw_verify_area+0x2a6/0x4d0 [ 315.176479][T11776] ? __lock_acquire+0xab9/0xd20 [ 315.176508][T11776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.176535][T11776] vfs_read+0x200/0xa30 [ 315.176561][T11776] ? fdget_pos+0x247/0x320 [ 315.176585][T11776] ? __pfx___mutex_lock+0x10/0x10 [ 315.176616][T11776] ? __pfx_vfs_read+0x10/0x10 [ 315.176647][T11776] ? __fget_files+0x2a/0x420 [ 315.176684][T11776] ? __fget_files+0x3a0/0x420 [ 315.176715][T11776] ? __fget_files+0x2a/0x420 [ 315.176764][T11776] ksys_read+0x145/0x250 [ 315.176795][T11776] ? __pfx_ksys_read+0x10/0x10 [ 315.176820][T11776] ? rcu_is_watching+0x15/0xb0 [ 315.176848][T11776] ? do_syscall_64+0xbe/0x3b0 [ 315.176883][T11776] do_syscall_64+0xfa/0x3b0 [ 315.176912][T11776] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.176941][T11776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.176962][T11776] ? clear_bhb_loop+0x60/0xb0 [ 315.176990][T11776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.177011][T11776] RIP: 0033:0x7f173e58d5fc [ 315.177030][T11776] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 315.177049][T11776] RSP: 002b:00007f173f3c1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 315.177071][T11776] RAX: ffffffffffffffda RBX: 00007f173e7b5fa0 RCX: 00007f173e58d5fc [ 315.177087][T11776] RDX: 000000000000000f RSI: 00007f173f3c10a0 RDI: 0000000000000004 [ 315.177101][T11776] RBP: 00007f173f3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 315.177114][T11776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.177127][T11776] R13: 00007f173e7b6038 R14: 00007f173e7b5fa0 R15: 00007ffc60383ac8 [ 315.177168][T11776] [ 315.593584][T11782] tipc: Enabling of bearer rejected, already enabled [ 315.769865][T11801] netlink: 'syz.0.1888': attribute type 1 has an invalid length. [ 315.789169][T11801] __nla_validate_parse: 16 callbacks suppressed [ 315.789189][T11801] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1888'. [ 315.807531][T11802] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1889'. [ 315.839185][T11801] nbd: couldn't find device at index 1048576 [ 315.847115][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'. [ 315.858454][T11800] netlink: 'syz.3.1890': attribute type 27 has an invalid length. [ 315.885784][T11805] macsec1: entered promiscuous mode [ 315.916452][T11805] macsec1: entered allmulticast mode [ 316.057939][T11810] veth23: entered allmulticast mode [ 316.501410][T11837] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1900'. [ 316.573848][T11844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1900'. [ 316.595050][T11845] netlink: 'syz.3.1902': attribute type 1 has an invalid length. [ 316.611856][T11846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1903'. [ 316.621095][T11845] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1902'. [ 316.621123][T11845] nbd: couldn't find device at index 1048576 [ 316.622088][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 317.094840][T11862] veth21: entered allmulticast mode [ 317.110460][T11870] netlink: 'syz.0.1912': attribute type 1 has an invalid length. [ 317.141927][T11873] netlink: 'syz.0.1912': attribute type 1 has an invalid length. [ 317.263003][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.273217][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.311570][T11876] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1914'. [ 317.402976][T11879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1915'. [ 317.435741][T11884] netlink: 'syz.5.1917': attribute type 1 has an invalid length. [ 317.443910][T11884] nbd: couldn't find device at index 1048576 [ 317.863799][T11904] veth9: entered allmulticast mode [ 318.314592][T11924] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 318.504234][T11943] netlink: 'syz.2.1937': attribute type 58 has an invalid length. [ 318.735658][T11953] veth25: entered allmulticast mode [ 318.902045][T11963] netlink: 'syz.0.1945': attribute type 10 has an invalid length. [ 318.948281][T11963] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 319.194347][T11981] sit0: entered promiscuous mode [ 319.231288][T11981] netlink: 'syz.3.1949': attribute type 1 has an invalid length. [ 319.462569][T11990] tc_dump_action: action bad kind [ 319.480323][T11989] netlink: 'syz.5.1952': attribute type 1 has an invalid length. [ 319.487330][T11990] netlink: 'syz.3.1953': attribute type 13 has an invalid length. [ 319.492945][T11989] nbd: couldn't find device at index 1048576 [ 319.521472][T11990] veth0_macvtap: left promiscuous mode [ 319.563893][T11990] macvtap0: entered allmulticast mode [ 319.600209][T11990] macvtap0: refused to change device tx_queue_len [ 320.100885][T12025] netlink: 'syz.3.1963': attribute type 1 has an invalid length. [ 320.245367][T12025] 8021q: adding VLAN 0 to HW filter on device bond2 [ 320.302269][T12036] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 320.325193][T12044] netlink: 'syz.0.1967': attribute type 1 has an invalid length. [ 320.335651][T12044] nbd: couldn't find device at index 1048576 [ 320.361771][T12025] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 320.517652][T12049] tipc: Enabled bearer , priority 0 [ 320.558096][T12049] syzkaller0: entered promiscuous mode [ 320.563637][T12049] syzkaller0: entered allmulticast mode [ 320.596435][T12060] sctp: [Deprecated]: syz.0.1971 (pid 12060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.596435][T12060] Use struct sctp_sack_info instead [ 320.623945][T12049] tipc: Resetting bearer [ 320.634398][T12049] tipc: Enabling of bearer rejected, already enabled [ 320.664447][T12049] net_ratelimit: 39 callbacks suppressed [ 320.664466][T12049] veth1_to_bridge: mtu greater than device maximum [ 320.740730][T12048] tipc: Resetting bearer [ 320.765018][T12048] tipc: Disabling bearer [ 320.869081][T12065] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002 [ 320.961109][T12071] nbd: couldn't find a device at index -373156329 [ 320.979784][T12072] nbd: couldn't find a device at index -373156329 [ 321.238004][T12086] tipc: MTU too low for tipc bearer [ 321.243486][T12086] tipc: MTU too low for tipc bearer [ 321.260676][T12087] netlink: 'syz.3.1981': attribute type 1 has an invalid length. [ 321.287422][T12087] __nla_validate_parse: 21 callbacks suppressed [ 321.287441][T12087] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1981'. [ 321.325928][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1981'. [ 321.335723][T12087] nbd: couldn't find device at index 1048576 [ 321.344762][T12086] tipc: MTU too low for tipc bearer [ 321.357591][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1983'. [ 321.371572][T12086] tipc: MTU too low for tipc bearer [ 321.382435][T12086] tipc: MTU too low for tipc bearer [ 321.402505][T12086] tipc: MTU too low for tipc bearer [ 321.421436][T12086] tipc: MTU too low for tipc bearer [ 321.466471][T12086] tipc: MTU too low for tipc bearer [ 321.507634][T12086] tipc: MTU too low for tipc bearer [ 321.513152][T12086] tipc: MTU too low for tipc bearer [ 321.572119][T12086] tipc: MTU too low for tipc bearer [ 321.583777][T12086] tipc: MTU too low for tipc bearer [ 321.674696][T12107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.707282][T12086] tipc: MTU too low for tipc bearer [ 321.712776][T12086] tipc: MTU too low for tipc bearer [ 321.727605][T12086] tipc: MTU too low for tipc bearer [ 321.734453][T12086] tipc: MTU too low for tipc bearer [ 321.746240][T12086] tipc: MTU too low for tipc bearer [ 321.751706][T12086] tipc: MTU too low for tipc bearer [ 321.757505][T12086] tipc: MTU too low for tipc bearer [ 321.763041][T12086] tipc: MTU too low for tipc bearer [ 321.769443][T12086] tipc: MTU too low for tipc bearer [ 321.776579][T12086] tipc: MTU too low for tipc bearer [ 321.782160][T12086] tipc: MTU too low for tipc bearer [ 321.787683][T12086] tipc: MTU too low for tipc bearer [ 321.793254][T12086] tipc: MTU too low for tipc bearer [ 321.828287][T12086] tipc: MTU too low for tipc bearer [ 321.845189][T12086] tipc: MTU too low for tipc bearer [ 321.876584][T12086] tipc: MTU too low for tipc bearer [ 321.899101][T12112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.911627][T12086] tipc: MTU too low for tipc bearer [ 321.938022][T12112] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1985'. [ 321.983163][T12086] tipc: MTU too low for tipc bearer [ 322.021130][T12086] tipc: MTU too low for tipc bearer [ 322.037223][T12086] tipc: MTU too low for tipc bearer [ 322.042981][T12086] tipc: MTU too low for tipc bearer [ 322.079665][T12124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1992'. [ 322.285436][T12135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1995'. [ 322.379841][ T5879] Bluetooth: hci1: command 0x0c1a tx timeout [ 322.404205][T12141] netlink: 'syz.5.1996': attribute type 1 has an invalid length. [ 322.421074][T12140] veth23: entered allmulticast mode [ 322.429787][T12141] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1996'. [ 322.462589][T12141] nbd: couldn't find device at index 1048576 [ 322.469578][T12145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1996'. [ 322.544591][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2000'. [ 322.554977][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2000'. [ 322.620160][T12152] tipc: Started in network mode [ 322.629857][T12152] tipc: Node identity c66bf19fb51, cluster identity 4711 [ 322.650244][T12152] tipc: Enabled bearer , priority 0 [ 322.663964][T12152] syzkaller0: entered promiscuous mode [ 322.671383][T12152] syzkaller0: entered allmulticast mode [ 322.717924][T12152] tipc: Resetting bearer [ 323.132650][T12173] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 323.211271][T12151] tipc: Resetting bearer [ 323.268593][T12151] tipc: Disabling bearer [ 324.355290][T12233] veth15: entered allmulticast mode [ 325.169232][T12278] netlink: 'syz.4.2041': attribute type 14 has an invalid length. [ 325.178984][T12278] netlink: 'syz.4.2041': attribute type 13 has an invalid length. [ 325.240209][T12275] veth27: entered allmulticast mode [ 325.271153][T12283] tipc: Enabling of bearer rejected, failed to enable media [ 325.365913][T12287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.879448][T12315] veth15: entered allmulticast mode [ 326.099049][T12327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.261800][T12332] Driver unsupported XDP return value 0 on prog (id 424) dev N/A, expect packet loss! [ 326.365532][T12338] __nla_validate_parse: 29 callbacks suppressed [ 326.365554][T12338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2067'. [ 326.533906][T12340] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2068'. [ 326.781713][T12358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2072'. [ 326.810156][T12360] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2073'. [ 326.845940][T12357] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe03a: 0000 [#1] SMP KASAN PTI [ 326.857910][T12357] KASAN: probably user-memory-access in range [0x00000000ffff01d0-0x00000000ffff01d7] [ 326.867475][T12357] CPU: 1 UID: 0 PID: 12357 Comm: syz.5.2073 Not tainted syzkaller #0 PREEMPT(full) [ 326.876888][T12357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.886957][T12357] RIP: 0010:____ip_mc_inc_group+0x214/0xde0 [ 326.892878][T12357] Code: 4b 89 05 01 48 c7 c7 80 9c 9e 8c be ec 05 00 00 48 c7 c2 00 9d 9e 8c e8 6a 7a 99 f7 44 89 e8 4d 8d 34 c6 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 2e 09 1f f8 4d 8b 2e 4d 85 ed 0f 84 [ 326.912490][T12357] RSP: 0018:ffffc9000ef77830 EFLAGS: 00010206 [ 326.918574][T12357] RAX: 000000001fffe03a RBX: dffffc0000000000 RCX: 0000000000080000 [ 326.926554][T12357] RDX: ffffc9001d779000 RSI: 0000000000000085 RDI: 0000000000000086 [ 326.934557][T12357] RBP: 0000000000000001 R08: ffffffff8f537ba7 R09: 1ffffffff1ea6f74 [ 326.942551][T12357] R10: dffffc0000000000 R11: fffffbfff1ea6f75 R12: 00000000020000e0 [ 326.950536][T12357] R13: 000000000000003a R14: 00000000ffff01d0 R15: 0000000000000cc0 [ 326.958512][T12357] FS: 00007f2241c146c0(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 326.967451][T12357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.974038][T12357] CR2: 00007f6656991950 CR3: 000000002e920000 CR4: 00000000003526f0 [ 326.982012][T12357] Call Trace: [ 326.985295][T12357] [ 326.988264][T12357] __ip_mc_join_group+0x431/0x510 [ 326.993323][T12357] do_mcast_group_source+0x35d/0x460 [ 326.998640][T12357] ? __pfx_do_mcast_group_source+0x10/0x10 [ 327.004470][T12357] ? do_raw_spin_lock+0x121/0x290 [ 327.009510][T12357] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 327.015416][T12357] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.020627][T12357] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 327.026577][T12357] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 327.032939][T12357] ? look_up_lock_class+0x74/0x170 [ 327.038074][T12357] ? __local_bh_enable_ip+0x12d/0x1c0 [ 327.043453][T12357] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.048667][T12357] ? __local_bh_enable_ip+0x12d/0x1c0 [ 327.054043][T12357] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 327.059793][T12357] do_ip_setsockopt+0x1aa5/0x2d00 [ 327.064832][T12357] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 327.070214][T12357] ? aa_sk_perm+0x81e/0x950 [ 327.074729][T12357] ? __pfx_aa_sk_perm+0x10/0x10 [ 327.079589][T12357] ? __fget_files+0x2a/0x420 [ 327.084207][T12357] ? aa_sock_opt_perm+0xff/0x1b0 [ 327.089150][T12357] ip_setsockopt+0x66/0x110 [ 327.093665][T12357] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 327.099570][T12357] do_sock_setsockopt+0x17c/0x1b0 [ 327.104608][T12357] __x64_sys_setsockopt+0x13f/0x1b0 [ 327.109809][T12357] do_syscall_64+0xfa/0x3b0 [ 327.114327][T12357] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.119537][T12357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.125616][T12357] ? clear_bhb_loop+0x60/0xb0 [ 327.130301][T12357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.136204][T12357] RIP: 0033:0x7f2240d8ebe9 [ 327.140634][T12357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.160258][T12357] RSP: 002b:00007f2241c14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 327.168684][T12357] RAX: ffffffffffffffda RBX: 00007f2240fb5fa0 RCX: 00007f2240d8ebe9 [ 327.176665][T12357] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000003 [ 327.184636][T12357] RBP: 00007f2240e11e19 R08: 0000000000000108 R09: 0000000000000000 [ 327.192611][T12357] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 327.200586][T12357] R13: 00007f2240fb6038 R14: 00007f2240fb5fa0 R15: 00007ffd03997528 [ 327.208578][T12357] [ 327.211610][T12357] Modules linked in: [ 327.217425][T12357] ---[ end trace 0000000000000000 ]--- [ 327.230933][T12361] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2073'. [ 327.250632][T12357] RIP: 0010:____ip_mc_inc_group+0x214/0xde0 [ 327.258003][T12357] Code: 4b 89 05 01 48 c7 c7 80 9c 9e 8c be ec 05 00 00 48 c7 c2 00 9d 9e 8c e8 6a 7a 99 f7 44 89 e8 4d 8d 34 c6 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 2e 09 1f f8 4d 8b 2e 4d 85 ed 0f 84 [ 327.280979][T12357] RSP: 0018:ffffc9000ef77830 EFLAGS: 00010206 [ 327.288397][T12357] RAX: 000000001fffe03a RBX: dffffc0000000000 RCX: 0000000000080000 [ 327.299130][T12357] RDX: ffffc9001d779000 RSI: 0000000000000085 RDI: 0000000000000086 [ 327.307371][T12357] RBP: 0000000000000001 R08: ffffffff8f537ba7 R09: 1ffffffff1ea6f74 [ 327.315388][T12357] R10: dffffc0000000000 R11: fffffbfff1ea6f75 R12: 00000000020000e0 [ 327.324344][T12357] R13: 000000000000003a R14: 00000000ffff01d0 R15: 0000000000000cc0 [ 327.332791][T12357] FS: 00007f2241c146c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 327.342900][T12357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.349823][T12357] CR2: 00007f21c8bd3fb8 CR3: 000000002e920000 CR4: 00000000003526f0 [ 327.358579][T12357] Kernel panic - not syncing: Fatal exception [ 327.365029][T12357] Kernel Offset: disabled [ 327.369357][T12357] Rebooting in 86400 seconds..