last executing test programs: 1.590192423s ago: executing program 2 (id=8595): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x18}, 0x90) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001ec0)={0x6, 0x8209, 0x0, 0x3b3}, &(0x7f0000001f00)=0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x10000000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0xffffff23, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5690}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmmsg$alg(r4, &(0x7f0000004180)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="fbc6a5886e8a141b4321b588bfd1adb3be4d7711b451dfece9da7d75d7d2c022f366af2f6d065df8c726662a61b12a668e76b98014a4b56def2960", 0x3b}], 0x1, &(0x7f00000042c0)=ANY=[@ANYBLOB="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"], 0x1030, 0x8004}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)="297e797fd12ddf3661afede12d0bc3f3f20df3fd", 0x14}, {&(0x7f0000001d80)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000900)="fc5dac1862c19466a87ad96dd8e6733ca130f1d23281983e4958bee165f25bed41d533552cf926e2328b5f53903a9432ade146449dae6815", 0x38}, {&(0x7f0000000a00)="d3270074e3a952234c898618733f743caef59645a3051a659ec02c9c31dd6739c1679ba2ed51f484d222be9dc704f8e3e6d47ce52454587d02e7240f7e4278563ada3d7dff3ad1696306b1f7bd9ef7034f787d54e95262b12707ad6b0245e663effbfc6bdf67ed2663631b8187cee5691ecee7a8da6b8f31d9a7c2da42b6ef9deaee234940d413ea8dd235445b518c2d9cc93a9017c273c7d9c6a8446a9b0bb8273bc81e3bedbd30b304c8c28713a42f35699f38ac890cce6262543ef87e245af92829d70fbe63eff66e96", 0xcb}], 0x7, 0x0, 0x0, 0x4000004}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000bc0)="781304bf74068d012acad51e44e32ec2634ced568e6c82ce03f1ded0405de6579dc80713b9d96db31b2b70e8c9e84240b246d6efdb5a2a8dcab2edeb8913e02a283ba21d6c54305fe53eba93538550227fa5743f715df1867447c4b7d56179c96372c8b5072fa62f8d8a3675c9abca395d2c1ac2269c0ee812978544a027568f89e17663f9c36b065afcb971da9e8429c4fe958c535b0eb5ee1185fa44a4b0bde78db2abc9ece103b5680161f3642e3754da3c044a554565c790222748508bbec30777dceaca77f4881bf5091d6109aff9fd7063c1eeebb39a1baf7581efde944b0d", 0xe2}, {&(0x7f0000002d80)="b91e84c967d5615c5516f453314ecc238b97b5df3b4e4def440d0a12a5ae4e84c3adff92bc3e7ee9d143bf5f5ceccea92187485301f64ed857f5cb7a305f7e1f236341b1b6a084c623d120490b16ead2ef06616874fb1e832784583819e659bac0083408874e69961cbd17d082efafb316e08d3a8f21b44bb1ab813f", 0x7c}], 0x2, &(0x7f0000002e00)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x1018, 0x117, 0x2, 0xffe, "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"}, @assoc={0x18, 0x117, 0x4, 0x6c9}], 0x1060, 0x20000810}, {0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000cc0)="cdcef075b1a1f7345903ee8436a601f9e6b39870c046cabcfd196ee7da30bcfecde0e9387c749e7fc0cf772a4a24", 0x2e}, {&(0x7f0000003e80)="2a5fe066dad3e50b9ba4157b1635f0f8a2bc70ead300c68c4aeb06f306cfec6df80cb5d89e28aca1a80057e07432f2656ce2a5fc4fe85fd95224e4fadb510d8f4d9d3de858b568da4440668f0bd5ee7d1f774d1e12d3ef4cc9608f6f7c39b8512d292f84547aeb9a1d66fcb186ccb0d5e7857839e9b9432c366b93942b3ffe69f5c5856a9eb98bd81fec19ad7f16201fc6b577459f4e9735d089256414939a34d3c74ddb876bac9f4b2b6feb291f9cc3a59142218e285ea12c081ef122d34842f5b830c3873d740bc09c6cf5944a72d0673c59990bfb47b7be4e5a2194c2f62b254046cb3d0737cf92fcba", 0xeb}], 0x2, &(0x7f0000003fc0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}, @op={0x18}], 0x48, 0x800}, {0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000004040)="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", 0xff}], 0x1, 0x0, 0x0, 0x4010}], 0x5, 0x4000180) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x66, 0x0, 0x0, 0x89, 0x0, @rand_addr, @private=0xa010101}}}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x48, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) nanosleep(&(0x7f0000000000), 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r10 = socket(0x2, 0x3, 0xff) bind$inet(r10, &(0x7f0000000080)={0x2, 0x2, @local}, 0x10) connect$inet(r10, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) write(r10, &(0x7f0000000640)="68a0b32fafd3b845da570480e0465913a86dde57923b10e6fd23bb9ae2d3029b", 0x20) 1.398402834s ago: executing program 2 (id=8601): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1d, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f0400000000000000000085000000bb00000085000000d100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x40000) accept4(r0, &(0x7f0000000280)=@isdn, &(0x7f0000000200)=0x80, 0x80000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa1}]}}}]}, 0x48}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x27, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r1, 0x0, 0x4004844) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000240)={{0x2, 0x4e23, @empty}, {0x306, @local}, 0x4, {0x2, 0x4e20, @multicast1}}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x9, 0x10000, @vifc_lcl_addr=@local, @multicast1}, 0x10) 1.293316159s ago: executing program 1 (id=8603): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x6, 0x4) 1.29226794s ago: executing program 4 (id=8604): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000a008000000200080000003f040008"], 0x20}, 0x1, 0x0, 0x0, 0x44845}, 0x4) 1.090436625s ago: executing program 3 (id=8606): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x8000}, 0x80) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0x0, 0x0, 0x5, 0x200001}, 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0xffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}], 0x1c) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0x0, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfd, 0x0, 0x0, 0x2, 0x5}}, {0x40}}]}]}, 0x64}}, 0x4000010) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000001340)=ANY=[@ANYBLOB="70050000b7aa4fcfa85be2cef3b381c942efdeeadf63b89a8675dd74ed480f0ff77289f2eac3f2e0619707c7ba28905636ccde01ed904e24e594e65f4c80221704f4f2741a71eebbf8c8cc9f85319f9dea09aa03992b9e1b6c6bad4c1fc70c601acf1a8045d5e35b12d01032852c75b4a80ef5c983863f1fabe75e89a7d3d099f9316176", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x570}, 0x1, 0x0, 0x0, 0x8000}, 0x44094) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.089987778s ago: executing program 4 (id=8607): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x20000080) (fail_nth: 4) 1.089817457s ago: executing program 1 (id=8608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB], 0x378}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) socket$inet(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) getpid() sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r6, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa0f0, 0x7}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x401}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x50}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xa}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xd62}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe}, @chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8001}]}, 0x90}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 1.020116499s ago: executing program 2 (id=8609): r0 = socket$inet6(0xa, 0x3, 0xff) sendto$l2tp6(r0, 0x0, 0x0, 0x20008894, 0x0, 0x0) 1.009649679s ago: executing program 0 (id=8610): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000406080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 654.578906ms ago: executing program 3 (id=8611): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x18}, 0x90) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001ec0)={0x6, 0x8209, 0x0, 0x3b3}, &(0x7f0000001f00)=0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x10000000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0xffffff23, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5690}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmmsg$alg(r4, &(0x7f0000004180)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="fbc6a5886e8a141b4321b588bfd1adb3be4d7711b451dfece9da7d75d7d2c022f366af2f6d065df8c726662a61b12a668e76b98014a4b56def2960", 0x3b}], 0x1, &(0x7f00000042c0)=ANY=[@ANYBLOB="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"], 0x1030, 0x8004}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)="297e797fd12ddf3661afede12d0bc3f3f20df3fd", 0x14}, {&(0x7f0000001d80)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000900)="fc5dac1862c19466a87ad96dd8e6733ca130f1d23281983e4958bee165f25bed41d533552cf926e2328b5f53903a9432ade146449dae6815", 0x38}, {&(0x7f0000000a00)="d3270074e3a952234c898618733f743caef59645a3051a659ec02c9c31dd6739c1679ba2ed51f484d222be9dc704f8e3e6d47ce52454587d02e7240f7e4278563ada3d7dff3ad1696306b1f7bd9ef7034f787d54e95262b12707ad6b0245e663effbfc6bdf67ed2663631b8187cee5691ecee7a8da6b8f31d9a7c2da42b6ef9deaee234940d413ea8dd235445b518c2d9cc93a9017c273c7d9c6a8446a9b0bb8273bc81e3bedbd30b304c8c28713a42f35699f38ac890cce6262543ef87e245af92829d70fbe63eff66e96", 0xcb}], 0x7, 0x0, 0x0, 0x4000004}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000bc0)="781304bf74068d012acad51e44e32ec2634ced568e6c82ce03f1ded0405de6579dc80713b9d96db31b2b70e8c9e84240b246d6efdb5a2a8dcab2edeb8913e02a283ba21d6c54305fe53eba93538550227fa5743f715df1867447c4b7d56179c96372c8b5072fa62f8d8a3675c9abca395d2c1ac2269c0ee812978544a027568f89e17663f9c36b065afcb971da9e8429c4fe958c535b0eb5ee1185fa44a4b0bde78db2abc9ece103b5680161f3642e3754da3c044a554565c790222748508bbec30777dceaca77f4881bf5091d6109aff9fd7063c1eeebb39a1baf7581efde944b0d", 0xe2}, {&(0x7f0000002d80)="b91e84c967d5615c5516f453314ecc238b97b5df3b4e4def440d0a12a5ae4e84c3adff92bc3e7ee9d143bf5f5ceccea92187485301f64ed857f5cb7a305f7e1f236341b1b6a084c623d120490b16ead2ef06616874fb1e832784583819e659bac0083408874e69961cbd17d082efafb316e08d3a8f21b44bb1ab813f", 0x7c}], 0x2, &(0x7f0000002e00)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x1018, 0x117, 0x2, 0xffe, "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"}, @assoc={0x18, 0x117, 0x4, 0x6c9}], 0x1060, 0x20000810}, {0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000cc0)="cdcef075b1a1f7345903ee8436a601f9e6b39870c046cabcfd196ee7da30bcfecde0e9387c749e7fc0cf772a4a24", 0x2e}, {&(0x7f0000003e80)="2a5fe066dad3e50b9ba4157b1635f0f8a2bc70ead300c68c4aeb06f306cfec6df80cb5d89e28aca1a80057e07432f2656ce2a5fc4fe85fd95224e4fadb510d8f4d9d3de858b568da4440668f0bd5ee7d1f774d1e12d3ef4cc9608f6f7c39b8512d292f84547aeb9a1d66fcb186ccb0d5e7857839e9b9432c366b93942b3ffe69f5c5856a9eb98bd81fec19ad7f16201fc6b577459f4e9735d089256414939a34d3c74ddb876bac9f4b2b6feb291f9cc3a59142218e285ea12c081ef122d34842f5b830c3873d740bc09c6cf5944a72d0673c59990bfb47b7be4e5a2194c2f62b254046cb3d0737cf92fcba", 0xeb}], 0x2, &(0x7f0000003fc0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}, @op={0x18}], 0x48, 0x800}, {0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000004040)="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", 0xff}], 0x1, 0x0, 0x0, 0x4010}], 0x5, 0x4000180) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x66, 0x0, 0x0, 0x89, 0x0, @rand_addr, @private=0xa010101}}}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x48, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) nanosleep(&(0x7f0000000000), 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r10 = socket(0x2, 0x3, 0xff) bind$inet(r10, &(0x7f0000000080)={0x2, 0x2, @local}, 0x10) connect$inet(r10, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) write(r10, &(0x7f0000000640)="68a0b32fafd3b845da570480e0465913a86dde57923b10e6fd23bb9ae2d3029b", 0x20) 654.442356ms ago: executing program 4 (id=8612): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200c700710d0007020000f8ffffffb703000008000000b70400000000000085000000820000002001000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000003890800010400001511ffffffffffff852000"], &(0x7f0000000180)='GPL\x00', 0x1, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) 652.90881ms ago: executing program 2 (id=8613): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x884) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24040004) r2 = epoll_create(0x1) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, 0x0, 0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfe}, 0x6}, 0x1c) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup, 0x2b, 0x0, 0x3cab, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x40) r6 = accept(r1, 0x0, &(0x7f0000000480)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e20, 0x6, @mcast1, 0x2}, @in6={0xa, 0x4e21, 0x10001, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}], 0x48) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES64=r8], 0x0, 0x56, 0x0, 0x1, 0x1}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) 646.088882ms ago: executing program 1 (id=8614): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 570.485572ms ago: executing program 4 (id=8615): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="000202"], 0x18) sendto$l2tp6(r0, 0x0, 0x0, 0x20008894, &(0x7f00000002c0)={0xa, 0x0, 0x200, @loopback, 0x6, 0x1}, 0x20) 503.534318ms ago: executing program 1 (id=8616): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x2, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fdffbf660000000000000000850000003600000085000000a000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0xf0, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0x20}, {@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x1, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f}, {0x0, 0x0, 0x4}, {0xf6, 0x0, 0x4}, 0x1000000, 0x0, 0x2, 0x1, 0xfe}}, 0xf0}}, 0x804) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xc, [@type_tag={0xa, 0x0, 0x0, 0x12, 0x3}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x63, 0x0, 0x41}]}, {0x0, [0x61, 0x5f, 0x61, 0x30, 0x5f, 0x0, 0x5f, 0x2e, 0x2e, 0x0]}}, &(0x7f0000000540)=""/247, 0x40, 0xf7, 0x1, 0x9}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r8, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xc, 0x7, 0x5, 0x54c, 0x10205, r2, 0x80, '\x00', 0x0, r7, 0x5, 0x2, 0x1, 0x0, @void, @value, @value=r8}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10) r10 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r10, &(0x7f0000000000)={0x2a, 0x2}, 0xc) bind$qrtr(r10, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)={0x14c, r11, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d8ccacb8149ca3a329509161df970159bcf20910ebda0595"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "57f79152a3cf66627c8780ab046901a99d4c509bf13f58d4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "964c4eac99883ad7e315a332313ec13224c1442703e47780"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "00c2bf6dbd80b00eae47fdd5063006632083e7e8c1b255ef"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}, 0x1, 0x0, 0x0, 0x4044800}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f00000001c0)="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"}, 0x20) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)=0xfb) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x20000080) 503.338579ms ago: executing program 0 (id=8617): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@empty=0x6000000, 0x4e20, 0x12002, 0x3, 0x0, 0x2}}, 0x44) 502.88927ms ago: executing program 4 (id=8618): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) 450.697177ms ago: executing program 2 (id=8619): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1d, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f0400000000000000000085000000bb00000085000000d100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000240), 0x4) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x40000) accept4(r0, &(0x7f0000000280)=@isdn, &(0x7f0000000200)=0x80, 0x80000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa1}]}}}]}, 0x48}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x27, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000240)={{0x2, 0x4e23, @empty}, {0x306, @local}, 0x4, {0x2, 0x4e20, @multicast1}}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x9, 0x10000, @vifc_lcl_addr=@local, @multicast1}, 0x10) 450.472702ms ago: executing program 4 (id=8620): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getuid() setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000580)=0x3, 0x4) sendmsg$nl_generic(r2, 0x0, 0x801) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="2300000001", 0x5) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f0000000280)={0xffff, 0x101, 0x9, 0x4, 0x0, 0x5, 0xd4c}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f00000000c0), &(0x7f00000002c0)=0xc) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) sendmmsg(r0, &(0x7f000000ca40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)}, {&(0x7f0000000940)="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", 0x4c4}], 0x2}}], 0x1, 0x40) 450.120489ms ago: executing program 3 (id=8621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000024000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000100000808000b400000000028000480240001800b0001007470726f7879000014000280080003400000000a08000140000000010900010073797a30"], 0xc4}}, 0x4008800) 338.591236ms ago: executing program 1 (id=8622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000000109010800000000000000000a0000042c0002001400018008000100e000000208000200ac14142a0c000280050001000100000006000340000100000c00020004000200"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000030020100bca30000000000006603000040feffff7b0af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61142400000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x30}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)={0x2, 'batadv0\x00', {0x4}, 0x5}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000280)) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440100001000010000000000617953e10697ffdbdf25fc0100000000000000000000000000017f00000100"/70, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000200000000000000000000000200000000000000000000004c0012006d6f7275733634302d67656e6572696300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000800180005000000"], 0x144}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ec0)=@allocspi={0x108, 0x16, 0x2, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@empty, {0x5, 0x1, 0x0, 0x0, 0x7fff, 0x100000000, 0x0, 0xfffffffffffffffd}, {0x0, 0x4, 0x100}, {0x0, 0x1}, 0x1, 0x4, 0xa}, 0x5, 0x9}, [@tfcpad={0x8, 0x16, 0x6}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffff8}]}, 0x108}, 0x1, 0x0, 0x0, 0x8081}, 0x4000080) 329.735869ms ago: executing program 0 (id=8623): r0 = socket$inet6(0xa, 0x3, 0xff) sendto$l2tp6(r0, 0x0, 0x0, 0x20008894, 0x0, 0x0) 319.471687ms ago: executing program 3 (id=8624): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x2000}, 0x4000) 257.869273ms ago: executing program 3 (id=8625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x64, r2, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x800}}}]}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x47}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0xa}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x8814}, 0x815) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x3) 146.711875ms ago: executing program 0 (id=8626): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = socket$nl_generic(0x11, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 146.398705ms ago: executing program 1 (id=8627): r0 = socket(0x2b, 0x80801, 0x1) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x6}, 0x8) sendto$inet6(r2, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, 0x0, &(0x7f0000000080)) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000de0000000000000000000000630123000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa1) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000000000000000000000e00000010000000000000000000000004e24000000000000020000100000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000f9ffff3f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000325b6b3fcac1d56300"/101], 0xb8}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000a0b704000056e8dc23850000008200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a80000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) 146.144947ms ago: executing program 3 (id=8628): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @dev={0xac, 0x14, 0x14, 0x2a}, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@empty, 0x4e20, 0x12002, 0x3, 0x0, 0x2}}, 0x44) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0xa00, &(0x7f0000000580)=[{&(0x7f0000000200)='$r', 0x2}], 0xfe, &(0x7f0000001a80)=ANY=[@ANYBLOB="0c000000000000000100e8ff00000000"], 0xc}}], 0x1, 0x4004804) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 81.54477ms ago: executing program 0 (id=8629): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="000202"], 0x18) sendto$l2tp6(r0, 0x0, 0x0, 0x20008894, &(0x7f00000002c0)={0xa, 0x0, 0x200, @loopback, 0x6, 0x1}, 0x20) 26.28844ms ago: executing program 2 (id=8630): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001500674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0) 0s ago: executing program 0 (id=8631): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) write$rfkill(r0, &(0x7f0000000380)={0x1, 0x1, 0x1}, 0x8) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000003c0)={0xc223, 0x2}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f00000000c0)=0x20000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000ff", @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYRES8=r5], 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r11, &(0x7f0000001480)=0x80000000003, 0x12) bind(r3, &(0x7f00000002c0)=@phonet={0x23, 0xb, 0x3, 0xf0}, 0x80) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x2c, r14, 0x1, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) setsockopt$inet6_tcp_buf(r12, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r12, 0x6, 0x15, &(0x7f0000000240)=0x52, 0x4) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x10}, 0x40840) kernel console output (not intermixed with test programs): 3.131997][T29256] ? __pfx___might_resched+0x10/0x10 [ 673.132022][T29256] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 673.132046][T29256] ? aa_sk_perm+0x81e/0x950 [ 673.132079][T29256] ? __pfx_aa_sk_perm+0x10/0x10 [ 673.132107][T29256] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 673.132133][T29256] ? rcu_is_watching+0x15/0xb0 [ 673.132163][T29256] ? aa_sock_msg_perm+0xf1/0x1d0 [ 673.132181][T29256] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.132202][T29256] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 673.132222][T29256] __sock_sendmsg+0x21c/0x270 [ 673.132249][T29256] ____sys_sendmsg+0x52d/0x830 [ 673.132283][T29256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.132308][T29256] ? import_iovec+0x74/0xa0 [ 673.132332][T29256] ___sys_sendmsg+0x21f/0x2a0 [ 673.132354][T29256] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.132378][T29256] ? kstrtouint+0x6e/0xe0 [ 673.132420][T29256] ? rcu_is_watching+0x15/0xb0 [ 673.132439][T29256] ? lock_release+0x4b/0x3e0 [ 673.132467][T29256] ? __might_fault+0xcc/0x130 [ 673.132495][T29256] __sys_sendmmsg+0x227/0x430 [ 673.132519][T29256] ? __pfx___sys_sendmmsg+0x10/0x10 [ 673.132539][T29256] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 673.132584][T29256] ? ksys_write+0x22a/0x250 [ 673.132611][T29256] ? __pfx_ksys_write+0x10/0x10 [ 673.132636][T29256] ? rcu_is_watching+0x15/0xb0 [ 673.132659][T29256] __x64_sys_sendmmsg+0xa0/0xc0 [ 673.132681][T29256] do_syscall_64+0xfa/0x3b0 [ 673.132699][T29256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.132719][T29256] ? clear_bhb_loop+0x60/0xb0 [ 673.132741][T29256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.132761][T29256] RIP: 0033:0x7f41d098ebe9 [ 673.132778][T29256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.132796][T29256] RSP: 002b:00007f41d1856038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 673.132818][T29256] RAX: ffffffffffffffda RBX: 00007f41d0bb5fa0 RCX: 00007f41d098ebe9 [ 673.132833][T29256] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000004 [ 673.132847][T29256] RBP: 00007f41d1856090 R08: 0000000000000000 R09: 0000000000000000 [ 673.132861][T29256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 673.132873][T29256] R13: 00007f41d0bb6038 R14: 00007f41d0bb5fa0 R15: 00007ffd9f526e78 [ 673.132898][T29256] [ 673.624904][T29271] lo speed is unknown, defaulting to 1000 [ 673.763552][T29287] netlink: 'syz.2.7548': attribute type 1 has an invalid length. [ 673.929766][T29297] netlink: 'syz.4.7553': attribute type 22 has an invalid length. [ 673.952095][T29297] bond0: option ad_select: invalid value (8) [ 674.006883][T29304] FAULT_INJECTION: forcing a failure. [ 674.006883][T29304] name failslab, interval 1, probability 0, space 0, times 0 [ 674.021451][T29304] CPU: 1 UID: 0 PID: 29304 Comm: syz.4.7556 Not tainted syzkaller #0 PREEMPT(full) [ 674.021477][T29304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 674.021491][T29304] Call Trace: [ 674.021498][T29304] [ 674.021508][T29304] dump_stack_lvl+0x189/0x250 [ 674.021537][T29304] ? __pfx____ratelimit+0x10/0x10 [ 674.021566][T29304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.021589][T29304] ? __pfx__printk+0x10/0x10 [ 674.021619][T29304] ? __pfx___might_resched+0x10/0x10 [ 674.021637][T29304] ? lock_acquire+0x5f/0x360 [ 674.021667][T29304] should_fail_ex+0x414/0x560 [ 674.021696][T29304] should_failslab+0xa8/0x100 [ 674.021726][T29304] __kmalloc_cache_noprof+0x70/0x3d0 [ 674.021753][T29304] ? nfnetlink_rcv+0xeff/0x2520 [ 674.021781][T29304] nfnetlink_rcv+0xeff/0x2520 [ 674.021826][T29304] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 674.021861][T29304] ? ref_tracker_free+0x63a/0x7d0 [ 674.021915][T29304] ? __netlink_deliver_tap+0x807/0x850 [ 674.021945][T29304] ? netlink_deliver_tap+0x2e/0x1b0 [ 674.021976][T29304] ? lock_release+0x4b/0x3e0 [ 674.022011][T29304] netlink_unicast+0x82c/0x9e0 [ 674.022042][T29304] ? __pfx_netlink_unicast+0x10/0x10 [ 674.022070][T29304] ? netlink_sendmsg+0x642/0xb30 [ 674.022087][T29304] ? skb_put+0x11b/0x210 [ 674.022108][T29304] netlink_sendmsg+0x805/0xb30 [ 674.022131][T29304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.022151][T29304] ? aa_sock_msg_perm+0xf1/0x1d0 [ 674.022174][T29304] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 674.022195][T29304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.022214][T29304] __sock_sendmsg+0x21c/0x270 [ 674.022241][T29304] ____sys_sendmsg+0x505/0x830 [ 674.022265][T29304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.022292][T29304] ? import_iovec+0x74/0xa0 [ 674.022316][T29304] ___sys_sendmsg+0x21f/0x2a0 [ 674.022338][T29304] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.022380][T29304] ? __fget_files+0x2a/0x420 [ 674.022397][T29304] ? __fget_files+0x3a0/0x420 [ 674.022429][T29304] __x64_sys_sendmsg+0x19b/0x260 [ 674.022450][T29304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 674.022475][T29304] ? __pfx_ksys_write+0x10/0x10 [ 674.022497][T29304] ? rcu_is_watching+0x15/0xb0 [ 674.022518][T29304] ? rcu_is_watching+0x15/0xb0 [ 674.022537][T29304] do_syscall_64+0xfa/0x3b0 [ 674.022553][T29304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.022572][T29304] ? clear_bhb_loop+0x60/0xb0 [ 674.022593][T29304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.022611][T29304] RIP: 0033:0x7f650218ebe9 [ 674.022627][T29304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.022643][T29304] RSP: 002b:00007f6502f6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.022662][T29304] RAX: ffffffffffffffda RBX: 00007f65023b5fa0 RCX: 00007f650218ebe9 [ 674.022676][T29304] RDX: 0000000004008800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 674.022689][T29304] RBP: 00007f6502f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 674.022700][T29304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.022711][T29304] R13: 00007f65023b6038 R14: 00007f65023b5fa0 R15: 00007ffdfeb92468 [ 674.022734][T29304] [ 674.516690][T29323] netlink: 'syz.2.7563': attribute type 8 has an invalid length. [ 674.567975][T29324] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 674.582650][T29324] CPU: 0 UID: 0 PID: 29324 Comm: syz.0.7561 Not tainted syzkaller #0 PREEMPT(full) [ 674.582679][T29324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 674.582694][T29324] Call Trace: [ 674.582703][T29324] [ 674.582713][T29324] dump_stack_lvl+0x189/0x250 [ 674.582746][T29324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.582773][T29324] ? __pfx__printk+0x10/0x10 [ 674.582801][T29324] ? kernfs_root+0x1c/0x230 [ 674.582827][T29324] ? kernfs_path_from_node+0x2f/0x290 [ 674.582850][T29324] ? kernfs_path_from_node+0x250/0x290 [ 674.582873][T29324] ? kernfs_path_from_node+0x2f/0x290 [ 674.582900][T29324] sysfs_warn_dup+0x8e/0xa0 [ 674.582922][T29324] sysfs_do_create_link_sd+0xc0/0x110 [ 674.582947][T29324] device_add_class_symlinks+0x1cf/0x240 [ 674.582973][T29324] device_add+0x475/0xb50 [ 674.582996][T29324] wiphy_register+0x1ba6/0x28d0 [ 674.583037][T29324] ? __pfx_wiphy_register+0x10/0x10 [ 674.583067][T29324] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 674.583095][T29324] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 674.583122][T29324] ieee80211_register_hw+0x3425/0x4080 [ 674.583165][T29324] ? ieee80211_register_hw+0x14e1/0x4080 [ 674.583196][T29324] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 674.583223][T29324] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 674.583258][T29324] ? __hrtimer_setup+0x187/0x210 [ 674.583277][T29324] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 674.583311][T29324] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 674.583360][T29324] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 674.583386][T29324] ? trace_kmalloc+0x1f/0xd0 [ 674.583412][T29324] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 674.583441][T29324] ? kstrndup+0xbf/0x160 [ 674.583469][T29324] hwsim_new_radio_nl+0xea4/0x1b10 [ 674.583497][T29324] ? __pfx___nla_validate_parse+0x10/0x10 [ 674.583549][T29324] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 674.583582][T29324] ? __nla_parse+0x40/0x60 [ 674.583613][T29324] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 674.583661][T29324] genl_family_rcv_msg_doit+0x215/0x300 [ 674.583690][T29324] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 674.583726][T29324] ? bpf_lsm_capable+0x9/0x20 [ 674.583755][T29324] ? security_capable+0x7e/0x2e0 [ 674.583789][T29324] genl_rcv_msg+0x60e/0x790 [ 674.583818][T29324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 674.583842][T29324] ? __kasan_slab_alloc+0x6c/0x80 [ 674.583869][T29324] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 674.583897][T29324] ? __netlink_lookup+0xbd/0x810 [ 674.583916][T29324] ? rcu_is_watching+0x15/0xb0 [ 674.583944][T29324] netlink_rcv_skb+0x205/0x470 [ 674.583976][T29324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 674.584002][T29324] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 674.584041][T29324] ? lock_release+0x4b/0x3e0 [ 674.584073][T29324] ? down_read+0x1ad/0x2e0 [ 674.584095][T29324] genl_rcv+0x28/0x40 [ 674.584117][T29324] netlink_unicast+0x82c/0x9e0 [ 674.584159][T29324] ? __pfx_netlink_unicast+0x10/0x10 [ 674.584189][T29324] ? netlink_sendmsg+0x642/0xb30 [ 674.584207][T29324] ? skb_put+0x11b/0x210 [ 674.584230][T29324] netlink_sendmsg+0x805/0xb30 [ 674.584255][T29324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.584275][T29324] ? futex_unqueue+0x22/0x240 [ 674.584298][T29324] ? aa_sock_msg_perm+0xf1/0x1d0 [ 674.584319][T29324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 674.584342][T29324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.584362][T29324] __sock_sendmsg+0x21c/0x270 [ 674.584392][T29324] ____sys_sendmsg+0x505/0x830 [ 674.584418][T29324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.584446][T29324] ? import_iovec+0x74/0xa0 [ 674.584472][T29324] ___sys_sendmsg+0x21f/0x2a0 [ 674.584496][T29324] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.584523][T29324] ? futex_wait+0x285/0x360 [ 674.584570][T29324] ? __fget_files+0x2a/0x420 [ 674.584587][T29324] ? __fget_files+0x3a0/0x420 [ 674.584613][T29324] __x64_sys_sendmsg+0x19b/0x260 [ 674.584637][T29324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 674.584666][T29324] ? rcu_is_watching+0x15/0xb0 [ 674.584690][T29324] ? rcu_is_watching+0x15/0xb0 [ 674.584712][T29324] do_syscall_64+0xfa/0x3b0 [ 674.584733][T29324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.584755][T29324] ? clear_bhb_loop+0x60/0xb0 [ 674.584779][T29324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.584800][T29324] RIP: 0033:0x7f35a598ebe9 [ 674.584820][T29324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.584840][T29324] RSP: 002b:00007f35a6710038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.584864][T29324] RAX: ffffffffffffffda RBX: 00007f35a5bb6090 RCX: 00007f35a598ebe9 [ 674.584881][T29324] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a [ 674.584896][T29324] RBP: 00007f35a5a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 674.584910][T29324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.584924][T29324] R13: 00007f35a5bb6128 R14: 00007f35a5bb6090 R15: 00007ffeda2774b8 [ 674.584950][T29324] [ 675.162938][T29331] __nla_validate_parse: 8 callbacks suppressed [ 675.162958][T29331] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7567'. [ 675.195917][T29334] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7566'. [ 675.284276][T29347] IPVS: sync thread started: state = MASTER, mcast_ifn = macvtap0, syncid = 1, id = 0 [ 675.341817][T29349] lo speed is unknown, defaulting to 1000 [ 675.393143][T29350] lo speed is unknown, defaulting to 1000 [ 675.445876][T29355] FAULT_INJECTION: forcing a failure. [ 675.445876][T29355] name failslab, interval 1, probability 0, space 0, times 0 [ 675.461189][T29355] CPU: 0 UID: 0 PID: 29355 Comm: syz.2.7573 Not tainted syzkaller #0 PREEMPT(full) [ 675.461221][T29355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 675.461235][T29355] Call Trace: [ 675.461244][T29355] [ 675.461253][T29355] dump_stack_lvl+0x189/0x250 [ 675.461299][T29355] ? __pfx____ratelimit+0x10/0x10 [ 675.461353][T29355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.461379][T29355] ? __pfx__printk+0x10/0x10 [ 675.461455][T29355] ? rcu_is_watching+0x15/0xb0 [ 675.461522][T29355] ? __pfx___might_resched+0x10/0x10 [ 675.461599][T29355] ? lock_acquire+0x5f/0x360 [ 675.461686][T29355] should_fail_ex+0x414/0x560 [ 675.461753][T29355] should_failslab+0xa8/0x100 [ 675.461823][T29355] __kmalloc_noprof+0xcb/0x4f0 [ 675.461861][T29355] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 675.461906][T29355] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 675.461950][T29355] genl_family_rcv_msg_doit+0xb8/0x300 [ 675.461980][T29355] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 675.462021][T29355] ? apparmor_capable+0x137/0x1b0 [ 675.462071][T29355] ? bpf_lsm_capable+0x9/0x20 [ 675.462108][T29355] ? security_capable+0x7e/0x2e0 [ 675.462150][T29355] genl_rcv_msg+0x60e/0x790 [ 675.462183][T29355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.462216][T29355] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 675.462240][T29355] ? __asan_memcpy+0x40/0x70 [ 675.462264][T29355] ? __pfx_ref_tracker_free+0x10/0x10 [ 675.462306][T29355] ? __skb_clone+0x63/0x7a0 [ 675.462333][T29355] netlink_rcv_skb+0x205/0x470 [ 675.462370][T29355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.462396][T29355] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 675.462435][T29355] ? lock_release+0x4b/0x3e0 [ 675.462468][T29355] ? down_read+0x1ad/0x2e0 [ 675.462491][T29355] genl_rcv+0x28/0x40 [ 675.462514][T29355] netlink_unicast+0x82c/0x9e0 [ 675.462548][T29355] ? __pfx_netlink_unicast+0x10/0x10 [ 675.462578][T29355] ? netlink_sendmsg+0x642/0xb30 [ 675.462596][T29355] ? skb_put+0x11b/0x210 [ 675.462618][T29355] netlink_sendmsg+0x805/0xb30 [ 675.462644][T29355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.462665][T29355] ? aa_sock_msg_perm+0xf1/0x1d0 [ 675.462686][T29355] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.462710][T29355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.462730][T29355] __sock_sendmsg+0x21c/0x270 [ 675.462761][T29355] ____sys_sendmsg+0x505/0x830 [ 675.462788][T29355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.462817][T29355] ? import_iovec+0x74/0xa0 [ 675.462844][T29355] ___sys_sendmsg+0x21f/0x2a0 [ 675.462867][T29355] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.462918][T29355] ? __fget_files+0x2a/0x420 [ 675.462935][T29355] ? __fget_files+0x3a0/0x420 [ 675.462965][T29355] __x64_sys_sendmsg+0x19b/0x260 [ 675.462995][T29355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 675.463046][T29355] ? __pfx_ksys_write+0x10/0x10 [ 675.463076][T29355] ? rcu_is_watching+0x15/0xb0 [ 675.463104][T29355] ? rcu_is_watching+0x15/0xb0 [ 675.463127][T29355] do_syscall_64+0xfa/0x3b0 [ 675.463147][T29355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.463169][T29355] ? clear_bhb_loop+0x60/0xb0 [ 675.463194][T29355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.463215][T29355] RIP: 0033:0x7f41d098ebe9 [ 675.463235][T29355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.463255][T29355] RSP: 002b:00007f41d1856038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.463279][T29355] RAX: ffffffffffffffda RBX: 00007f41d0bb5fa0 RCX: 00007f41d098ebe9 [ 675.463296][T29355] RDX: 0000000000088010 RSI: 0000200000000540 RDI: 0000000000000005 [ 675.463310][T29355] RBP: 00007f41d1856090 R08: 0000000000000000 R09: 0000000000000000 [ 675.463324][T29355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.463337][T29355] R13: 00007f41d0bb6038 R14: 00007f41d0bb5fa0 R15: 00007ffd9f526e78 [ 675.463364][T29355] [ 675.866207][T29359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7574'. [ 675.875869][T29359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7574'. [ 675.963676][T29350] lo speed is unknown, defaulting to 1000 [ 676.010564][T29366] netlink: 'syz.2.7577': attribute type 10 has an invalid length. [ 676.038919][T29349] lo speed is unknown, defaulting to 1000 [ 676.112337][T29366] team0: Device veth0_macvtap failed to register rx_handler [ 676.442566][T29385] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7581'. [ 676.462276][T29376] lo speed is unknown, defaulting to 1000 [ 676.474066][T29365] netdevsim netdevsim1 netdevsim2 (unregistering): left allmulticast mode [ 676.483604][T29365] netdevsim netdevsim1 netdevsim2 (unregistering): left promiscuous mode [ 676.493451][T29365] bridge0: port 4(netdevsim2) entered disabled state [ 676.500485][T29389] IPv6: Can't replace route, no match found [ 676.536984][T29391] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7583'. [ 676.736134][T29365] bond0: (slave netdevsim0): Releasing backup interface [ 676.804751][T29405] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 676.956595][T29409] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7589'. [ 677.025747][T29409] pim6reg: entered allmulticast mode [ 677.050680][T29409] pim6reg: left allmulticast mode [ 677.160231][T29418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7589'. [ 677.170123][T29419] netlink: 'syz.3.7590': attribute type 1 has an invalid length. [ 677.505768][T29437] netlink: 'syz.1.7599': attribute type 8 has an invalid length. [ 677.640150][T29449] netlink: 'syz.3.7605': attribute type 22 has an invalid length. [ 677.651403][T29449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7605'. [ 677.661026][T29449] bond0: option ad_select: invalid value (8) [ 677.678511][T29451] FAULT_INJECTION: forcing a failure. [ 677.678511][T29451] name failslab, interval 1, probability 0, space 0, times 0 [ 677.706620][T29451] CPU: 1 UID: 0 PID: 29451 Comm: syz.0.7606 Not tainted syzkaller #0 PREEMPT(full) [ 677.706650][T29451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 677.706664][T29451] Call Trace: [ 677.706672][T29451] [ 677.706682][T29451] dump_stack_lvl+0x189/0x250 [ 677.706713][T29451] ? __pfx____ratelimit+0x10/0x10 [ 677.706744][T29451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.706768][T29451] ? __pfx__printk+0x10/0x10 [ 677.706798][T29451] ? fs_reclaim_acquire+0x7d/0x100 [ 677.706830][T29451] ? __pfx___might_resched+0x10/0x10 [ 677.706849][T29451] ? lock_acquire+0x5f/0x360 [ 677.706881][T29451] should_fail_ex+0x414/0x560 [ 677.706910][T29451] should_failslab+0xa8/0x100 [ 677.706942][T29451] __kmalloc_cache_noprof+0x70/0x3d0 [ 677.706970][T29451] ? ipcomp_init_state+0x125/0x2a0 [ 677.707000][T29451] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 677.707034][T29451] ipcomp_init_state+0x125/0x2a0 [ 677.707066][T29451] ipcomp6_init_state+0xcc/0x900 [ 677.707092][T29451] __xfrm_init_state+0xa73/0x13f0 [ 677.707131][T29451] ? __xfrm_init_state+0x7ef/0x13f0 [ 677.707158][T29451] xfrm_init_state+0x18/0xa0 [ 677.707179][T29451] pfkey_add+0x1d38/0x2e00 [ 677.707208][T29451] ? __pfx_pfkey_add+0x10/0x10 [ 677.707225][T29451] ? kmem_cache_free+0x18f/0x400 [ 677.707259][T29451] pfkey_sendmsg+0xbfe/0x1090 [ 677.707289][T29451] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 677.707320][T29451] ? is_bpf_text_address+0x26/0x2b0 [ 677.707349][T29451] ? rcu_is_watching+0x15/0xb0 [ 677.707367][T29451] ? aa_sock_msg_perm+0xf1/0x1d0 [ 677.707386][T29451] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 677.707408][T29451] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 677.707426][T29451] __sock_sendmsg+0x21c/0x270 [ 677.707454][T29451] ____sys_sendmsg+0x52d/0x830 [ 677.707476][T29451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 677.707501][T29451] ? import_iovec+0x74/0xa0 [ 677.707525][T29451] ___sys_sendmsg+0x21f/0x2a0 [ 677.707547][T29451] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.707569][T29451] ? kstrtouint+0x6e/0xe0 [ 677.707621][T29451] ? rcu_is_watching+0x15/0xb0 [ 677.707641][T29451] ? lock_release+0x4b/0x3e0 [ 677.707670][T29451] ? __might_fault+0xcc/0x130 [ 677.707697][T29451] __sys_sendmmsg+0x227/0x430 [ 677.707722][T29451] ? __pfx___sys_sendmmsg+0x10/0x10 [ 677.707741][T29451] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 677.707786][T29451] ? ksys_write+0x22a/0x250 [ 677.707813][T29451] ? __pfx_ksys_write+0x10/0x10 [ 677.707837][T29451] ? rcu_is_watching+0x15/0xb0 [ 677.707860][T29451] __x64_sys_sendmmsg+0xa0/0xc0 [ 677.707882][T29451] do_syscall_64+0xfa/0x3b0 [ 677.707901][T29451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.707921][T29451] ? clear_bhb_loop+0x60/0xb0 [ 677.707943][T29451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.707961][T29451] RIP: 0033:0x7f35a598ebe9 [ 677.707979][T29451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.707997][T29451] RSP: 002b:00007f35a6731038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 677.708018][T29451] RAX: ffffffffffffffda RBX: 00007f35a5bb5fa0 RCX: 00007f35a598ebe9 [ 677.708034][T29451] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000004 [ 677.708048][T29451] RBP: 00007f35a6731090 R08: 0000000000000000 R09: 0000000000000000 [ 677.708061][T29451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 677.708073][T29451] R13: 00007f35a5bb6038 R14: 00007f35a5bb5fa0 R15: 00007ffeda2774b8 [ 677.708097][T29451] [ 678.161743][T29458] IPv6: Can't replace route, no match found [ 678.283185][T29469] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7615'. [ 678.488208][T29473] lo speed is unknown, defaulting to 1000 [ 678.503106][T29480] dummy0: left allmulticast mode [ 678.512990][T29480] bridge0: port 1(dummy0) entered disabled state [ 678.525977][T29481] netlink: 'syz.0.7614': attribute type 1 has an invalid length. [ 678.817360][T24509] Bluetooth: hci0: command tx timeout [ 678.894041][T29499] netlink: 'syz.1.7619': attribute type 13 has an invalid length. [ 678.910967][T29499] netlink: 'syz.1.7619': attribute type 17 has an invalid length. [ 678.935442][T29500] lo speed is unknown, defaulting to 1000 [ 679.091863][T29499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.123204][T29499] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.134962][T29499] bridge0: port 3(dummy0) entered blocking state [ 679.141491][T29499] bridge0: port 3(dummy0) entered forwarding state [ 679.159281][T29499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 679.214563][T29501] lo speed is unknown, defaulting to 1000 [ 679.248583][ T8055] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 679.258907][ T8055] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 679.274456][ T8055] bond0: now running without any active interface! [ 679.632300][T29504] lo speed is unknown, defaulting to 1000 [ 679.639810][T25632] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 679.756059][T29507] lo speed is unknown, defaulting to 1000 [ 679.780711][T29517] FAULT_INJECTION: forcing a failure. [ 679.780711][T29517] name failslab, interval 1, probability 0, space 0, times 0 [ 679.817115][T29517] CPU: 0 UID: 0 PID: 29517 Comm: syz.2.7623 Not tainted syzkaller #0 PREEMPT(full) [ 679.817145][T29517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 679.817160][T29517] Call Trace: [ 679.817169][T29517] [ 679.817178][T29517] dump_stack_lvl+0x189/0x250 [ 679.817210][T29517] ? __pfx____ratelimit+0x10/0x10 [ 679.817242][T29517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.817274][T29517] ? __pfx__printk+0x10/0x10 [ 679.817302][T29517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.817328][T29517] ? __pfx___might_resched+0x10/0x10 [ 679.817348][T29517] ? lock_acquire+0x5f/0x360 [ 679.817381][T29517] should_fail_ex+0x414/0x560 [ 679.817412][T29517] should_failslab+0xa8/0x100 [ 679.817445][T29517] __kmalloc_node_noprof+0xd1/0x4e0 [ 679.817474][T29517] ? crypto_create_tfm_node+0x83/0x3f0 [ 679.817508][T29517] crypto_create_tfm_node+0x83/0x3f0 [ 679.817541][T29517] crypto_alloc_tfm_node+0x172/0x3f0 [ 679.817577][T29517] ipcomp_init_state+0x14d/0x2a0 [ 679.817611][T29517] ipcomp6_init_state+0xcc/0x900 [ 679.817637][T29517] __xfrm_init_state+0xa73/0x13f0 [ 679.817673][T29517] ? __xfrm_init_state+0x7ef/0x13f0 [ 679.817703][T29517] xfrm_init_state+0x18/0xa0 [ 679.817727][T29517] pfkey_add+0x1d38/0x2e00 [ 679.817760][T29517] ? __pfx_pfkey_add+0x10/0x10 [ 679.817779][T29517] ? kmem_cache_free+0x18f/0x400 [ 679.817816][T29517] pfkey_sendmsg+0xbfe/0x1090 [ 679.817846][T29517] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 679.817882][T29517] ? is_bpf_text_address+0x26/0x2b0 [ 679.817913][T29517] ? rcu_is_watching+0x15/0xb0 [ 679.817933][T29517] ? aa_sock_msg_perm+0xf1/0x1d0 [ 679.817954][T29517] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 679.817977][T29517] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 679.817998][T29517] __sock_sendmsg+0x21c/0x270 [ 679.818028][T29517] ____sys_sendmsg+0x52d/0x830 [ 679.818054][T29517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.818082][T29517] ? import_iovec+0x74/0xa0 [ 679.818109][T29517] ___sys_sendmsg+0x21f/0x2a0 [ 679.818133][T29517] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.818159][T29517] ? kstrtouint+0x6e/0xe0 [ 679.818208][T29517] ? rcu_is_watching+0x15/0xb0 [ 679.818228][T29517] ? lock_release+0x4b/0x3e0 [ 679.818260][T29517] ? __might_fault+0xcc/0x130 [ 679.818291][T29517] __sys_sendmmsg+0x227/0x430 [ 679.818317][T29517] ? __pfx___sys_sendmmsg+0x10/0x10 [ 679.818338][T29517] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 679.818400][T29517] ? ksys_write+0x22a/0x250 [ 679.818429][T29517] ? __pfx_ksys_write+0x10/0x10 [ 679.818455][T29517] ? rcu_is_watching+0x15/0xb0 [ 679.818478][T29517] __x64_sys_sendmmsg+0xa0/0xc0 [ 679.818502][T29517] do_syscall_64+0xfa/0x3b0 [ 679.818522][T29517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.818543][T29517] ? clear_bhb_loop+0x60/0xb0 [ 679.818567][T29517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.818588][T29517] RIP: 0033:0x7f41d098ebe9 [ 679.818606][T29517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.818626][T29517] RSP: 002b:00007f41d1856038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 679.818648][T29517] RAX: ffffffffffffffda RBX: 00007f41d0bb5fa0 RCX: 00007f41d098ebe9 [ 679.818670][T29517] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000004 [ 679.818685][T29517] RBP: 00007f41d1856090 R08: 0000000000000000 R09: 0000000000000000 [ 679.818699][T29517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 679.818712][T29517] R13: 00007f41d0bb6038 R14: 00007f41d0bb5fa0 R15: 00007ffd9f526e78 [ 679.818739][T29517] [ 680.222527][T29506] lo speed is unknown, defaulting to 1000 [ 680.574645][T24509] Bluetooth: hci5: link tx timeout [ 680.580870][T24509] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 680.591501][ T5858] Bluetooth: hci5: link tx timeout [ 680.596649][ T5858] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 680.607938][ T5858] Bluetooth: hci5: link tx timeout [ 680.613074][ T5858] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 680.624748][ T5858] Bluetooth: hci5: link tx timeout [ 680.629952][ T5858] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 680.639543][ T5858] Bluetooth: hci5: link tx timeout [ 680.644690][ T5858] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 680.652806][ T5858] Bluetooth: hci5: link tx timeout [ 680.657965][ T5858] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 680.670419][ T5858] Bluetooth: hci5: link tx timeout [ 680.675558][ T5858] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 680.683501][ T5858] Bluetooth: hci5: link tx timeout [ 680.688757][ T5858] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 680.696481][ T5858] Bluetooth: hci5: link tx timeout [ 680.702316][ T5858] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 680.710063][ T5858] Bluetooth: hci5: link tx timeout [ 680.715222][ T5858] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 681.010747][T29539] netlink: 'syz.1.7628': attribute type 1 has an invalid length. [ 681.034242][T29539] __nla_validate_parse: 3 callbacks suppressed [ 681.034263][T29539] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7628'. [ 681.537173][T29549] lo speed is unknown, defaulting to 1000 [ 681.891478][T29564] lo speed is unknown, defaulting to 1000 [ 682.038026][T29566] lo speed is unknown, defaulting to 1000 [ 682.171751][T29574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7640'. [ 682.187562][T29574] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7640'. [ 682.420661][T29561] mpoa:mpoad_close: () going down [ 682.470515][T29589] netlink: 'syz.3.7646': attribute type 22 has an invalid length. [ 682.483281][T29589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7646'. [ 682.607386][T29589] bond0: option ad_select: invalid value (8) [ 682.649436][T29594] lo speed is unknown, defaulting to 1000 [ 682.666809][ T5858] Bluetooth: hci5: command 0x040f tx timeout [ 682.769929][T29604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7649'. [ 682.783886][T29604] netlink: 'syz.1.7649': attribute type 2 has an invalid length. [ 682.794908][T29466] Set syz1 is full, maxelem 65536 reached [ 682.810914][T29604] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7649'. [ 682.929703][T29608] syz_tun: entered allmulticast mode [ 682.952078][T29607] syz_tun: left allmulticast mode [ 682.974815][T29610] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7651'. [ 683.043695][T29620] netlink: 'syz.1.7656': attribute type 8 has an invalid length. [ 683.217415][T29637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7662'. [ 683.464548][T29650] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 683.560705][T29628] netlink: 'syz.3.7659': attribute type 39 has an invalid length. [ 683.623367][T29650] lo speed is unknown, defaulting to 1000 [ 683.651380][T29628] netlink: 'syz.3.7659': attribute type 39 has an invalid length. [ 683.676012][T29628] netlink: 'syz.3.7659': attribute type 39 has an invalid length. [ 683.684535][T29628] netlink: 'syz.3.7659': attribute type 39 has an invalid length. [ 683.697393][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 683.851729][T29666] team0: Device veth0_macvtap failed to register rx_handler [ 683.943791][T29670] validate_nla: 29 callbacks suppressed [ 683.943837][T29670] netlink: 'syz.2.7670': attribute type 10 has an invalid length. [ 683.974468][T29670] team0: Device veth0_macvtap failed to register rx_handler [ 684.092625][T29677] netlink: 'syz.0.7671': attribute type 1 has an invalid length. [ 684.143812][T29676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7672'. [ 684.209401][T29681] syz_tun: entered allmulticast mode [ 684.356397][T29683] syz_tun: left allmulticast mode [ 684.484931][T29700] netlink: 'syz.2.7677': attribute type 10 has an invalid length. [ 684.502065][T29700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.512721][T29700] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 684.712092][T29702] tipc: Started in network mode [ 684.723743][T29702] tipc: Node identity 7a324a8818fa, cluster identity 4711 [ 684.733279][T29702] tipc: Enabled bearer , priority 0 [ 684.744241][T29702] syzkaller0: entered promiscuous mode [ 684.751061][T29702] syzkaller0: entered allmulticast mode [ 684.817009][T29708] tipc: Resetting bearer [ 684.852272][T29701] tipc: Resetting bearer [ 684.864073][T29701] tipc: Disabling bearer [ 685.082590][T29717] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7684'. [ 685.115231][T29719] netlink: 'syz.2.7685': attribute type 5 has an invalid length. [ 685.183902][T29719] geneve2: entered promiscuous mode [ 685.189317][T29719] geneve2: entered allmulticast mode [ 685.205959][T25632] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 685.228123][T25632] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 685.240522][T25632] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 685.268039][T25632] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 685.314997][T29724] netlink: 'syz.2.7687': attribute type 10 has an invalid length. [ 685.326498][T29724] team0: entered promiscuous mode [ 685.332192][T29724] team_slave_0: entered promiscuous mode [ 685.353293][T29724] team_slave_1: entered promiscuous mode [ 685.362761][T29724] bridge0: port 4(team0) entered blocking state [ 685.369356][T29724] bridge0: port 4(team0) entered disabled state [ 685.375982][T29724] team0: entered allmulticast mode [ 685.385009][T29724] team_slave_0: entered allmulticast mode [ 685.391285][T29724] team_slave_1: entered allmulticast mode [ 685.399437][T29724] bridge0: port 4(team0) entered blocking state [ 685.405811][T29724] bridge0: port 4(team0) entered forwarding state [ 685.510282][T29730] syzkaller1: entered promiscuous mode [ 685.514884][T29732] netlink: 'syz.0.7691': attribute type 8 has an invalid length. [ 685.525489][T29730] syzkaller1: entered allmulticast mode [ 685.659819][T29737] netlink: 'syz.3.7693': attribute type 10 has an invalid length. [ 685.904793][T29753] tap0: tun_chr_ioctl cmd 1074025677 [ 685.910729][T29753] tap0: linktype set to 800 [ 686.028075][T29758] netlink: 'syz.2.7699': attribute type 13 has an invalid length. [ 686.035945][T29758] netlink: 'syz.2.7699': attribute type 17 has an invalid length. [ 686.105317][T29764] netlink: 'syz.0.7703': attribute type 10 has an invalid length. [ 686.157663][T29765] __nla_validate_parse: 4 callbacks suppressed [ 686.157682][T29765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7703'. [ 686.173761][T29758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 686.201527][T29764] bridge0: port 1(dummy0) entered blocking state [ 686.208122][T29764] bridge0: port 1(dummy0) entered listening state [ 686.220092][T29764] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 686.242781][T29765] dummy0: left allmulticast mode [ 686.254209][T29765] bridge0: port 1(dummy0) entered disabled state [ 686.271499][T29765] bond0: (slave bridge0): Releasing backup interface [ 686.332616][T29766] lo speed is unknown, defaulting to 1000 [ 686.656465][T29793] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7712'. [ 686.669344][T29793] bond0: option ad_select: invalid value (8) [ 687.003968][T29808] lo speed is unknown, defaulting to 1000 [ 687.095234][T29812] lo speed is unknown, defaulting to 1000 [ 687.105004][T29812] lo speed is unknown, defaulting to 1000 [ 687.111345][T29812] lo speed is unknown, defaulting to 1000 [ 687.126436][T29812] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 687.149685][T29808] lo speed is unknown, defaulting to 1000 [ 687.150522][T29812] lo speed is unknown, defaulting to 1000 [ 687.165380][T29812] lo speed is unknown, defaulting to 1000 [ 687.172470][T29808] lo speed is unknown, defaulting to 1000 [ 687.183014][T29812] lo speed is unknown, defaulting to 1000 [ 687.200645][T29812] lo speed is unknown, defaulting to 1000 [ 687.209591][T29812] lo speed is unknown, defaulting to 1000 [ 687.219478][T29812] lo speed is unknown, defaulting to 1000 [ 687.251597][T29812] lo speed is unknown, defaulting to 1000 [ 687.258554][T29812] lo speed is unknown, defaulting to 1000 [ 687.265080][T29812] lo speed is unknown, defaulting to 1000 [ 687.271753][T29812] lo speed is unknown, defaulting to 1000 [ 687.557700][T29825] lo speed is unknown, defaulting to 1000 [ 687.567675][T29825] lo speed is unknown, defaulting to 1000 [ 687.734747][T29823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7721'. [ 687.790973][T29823] team0 (unregistering): Port device team_slave_0 removed [ 687.819359][T29828] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7721'. [ 687.834149][T29823] team0 (unregistering): Port device team_slave_1 removed [ 687.938200][T29840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7727'. [ 688.052295][T29825] netlink: 208 bytes leftover after parsing attributes in process `syz.3.7722'. [ 688.082428][T29851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7727'. [ 688.094921][T29848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7731'. [ 688.130089][T29851] bridge13: entered promiscuous mode [ 688.135478][T29851] macsec1: entered promiscuous mode [ 688.168035][T29851] macsec1: entered allmulticast mode [ 688.173525][T29851] bridge13: entered allmulticast mode [ 688.189913][T29851] bridge13: port 1(macsec1) entered blocking state [ 688.197595][T29851] bridge13: port 1(macsec1) entered disabled state [ 688.206092][T29851] bridge13: left allmulticast mode [ 688.212381][T29851] bridge13: left promiscuous mode [ 688.272904][T29857] team0: Device veth0_macvtap failed to register rx_handler [ 688.300883][T29859] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 688.379632][T29871] syz_tun: entered allmulticast mode [ 688.385781][T29864] netlink: 87 bytes leftover after parsing attributes in process `syz.3.7735'. [ 688.412787][T29871] dvmrp8: entered allmulticast mode [ 688.431616][T29871] syz_tun: left allmulticast mode [ 688.436475][T29873] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7737'. [ 688.436798][T29871] dvmrp8: left allmulticast mode [ 688.622412][T29883] tipc: New replicast peer: 255.255.255.255 [ 688.630415][T29883] tipc: Enabled bearer , priority 10 [ 688.801873][T29894] bond0: option ad_select: unable to set because the bond device is up [ 688.835744][T29899] Bluetooth: MGMT ver 1.23 [ 688.979352][T29910] lo speed is unknown, defaulting to 1000 [ 688.987214][T29910] lo speed is unknown, defaulting to 1000 [ 689.112586][T29910] lo speed is unknown, defaulting to 1000 [ 689.120248][T29910] lo speed is unknown, defaulting to 1000 [ 689.176228][T29919] lo speed is unknown, defaulting to 1000 [ 689.184090][T29919] lo speed is unknown, defaulting to 1000 [ 689.202615][T29918] wg1: entered promiscuous mode [ 689.207772][T29918] wg1: entered allmulticast mode [ 689.410387][T29919] lo speed is unknown, defaulting to 1000 [ 689.418900][T29919] lo speed is unknown, defaulting to 1000 [ 689.524213][T29936] validate_nla: 10 callbacks suppressed [ 689.524226][T29936] netlink: 'syz.3.7757': attribute type 8 has an invalid length. [ 689.585445][T29938] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 689.714387][T29943] netlink: 'syz.3.7759': attribute type 3 has an invalid length. [ 689.751959][T29945] blkio.reset_stats is deprecated [ 689.825944][T29947] tipc: Enabled bearer , priority 0 [ 689.835876][T29948] syzkaller0: entered promiscuous mode [ 689.854469][T29948] syzkaller0: entered allmulticast mode [ 689.878415][T29946] tipc: Resetting bearer [ 689.887210][T29946] tipc: Disabling bearer [ 689.917012][T29952] lo speed is unknown, defaulting to 1000 [ 689.931538][T29952] lo speed is unknown, defaulting to 1000 [ 689.939155][T29954] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 690.111909][T29964] netlink: 'syz.3.7768': attribute type 22 has an invalid length. [ 690.131811][T29964] bond0: option ad_select: invalid value (8) [ 690.593647][T29996] netlink: 'syz.2.7779': attribute type 8 has an invalid length. [ 690.699778][T29999] netlink: 'syz.1.7780': attribute type 1 has an invalid length. [ 690.721757][T29999] bond8: entered promiscuous mode [ 690.728376][T29999] 8021q: adding VLAN 0 to HW filter on device bond8 [ 690.749468][T29999] batadv2: entered promiscuous mode [ 690.754722][T29999] batadv2: entered allmulticast mode [ 690.763141][T29999] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 690.771853][T29999] bond8: (slave batadv2): making interface the new active one [ 690.781248][T29999] bond8: (slave batadv2): Enslaving as an active interface with an up link [ 690.797020][T30007] lo speed is unknown, defaulting to 1000 [ 690.805765][T30007] lo speed is unknown, defaulting to 1000 [ 690.816800][T30009] lo speed is unknown, defaulting to 1000 [ 690.838278][T30010] netlink: 'syz.3.7783': attribute type 25 has an invalid length. [ 690.846380][T30009] lo speed is unknown, defaulting to 1000 [ 691.001540][T30019] syz_tun: entered allmulticast mode [ 691.012309][T30019] syz_tun: left allmulticast mode [ 691.059947][T30020] lo speed is unknown, defaulting to 1000 [ 691.070513][T30020] lo speed is unknown, defaulting to 1000 [ 691.232576][T30029] lo speed is unknown, defaulting to 1000 [ 691.245655][T30029] lo speed is unknown, defaulting to 1000 [ 691.530216][T30040] netlink: 'syz.0.7790': attribute type 22 has an invalid length. [ 691.555852][T30040] __nla_validate_parse: 10 callbacks suppressed [ 691.555873][T30040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7790'. [ 691.625818][T30040] bond0: option ad_select: invalid value (8) [ 691.697504][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 692.099110][T30065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7801'. [ 692.175802][T30071] netlink: 172 bytes leftover after parsing attributes in process `syz.2.7804'. [ 692.315875][T30079] netlink: 'syz.2.7807': attribute type 3 has an invalid length. [ 692.330453][T30079] netlink: 666 bytes leftover after parsing attributes in process `syz.2.7807'. [ 692.360378][T30079] FAULT_INJECTION: forcing a failure. [ 692.360378][T30079] name failslab, interval 1, probability 0, space 0, times 0 [ 692.380164][T30072] pim6reg: entered allmulticast mode [ 692.385723][T30079] CPU: 0 UID: 0 PID: 30079 Comm: syz.2.7807 Not tainted syzkaller #0 PREEMPT(full) [ 692.385752][T30079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 692.385767][T30079] Call Trace: [ 692.385776][T30079] [ 692.385785][T30079] dump_stack_lvl+0x189/0x250 [ 692.385818][T30079] ? __pfx____ratelimit+0x10/0x10 [ 692.385849][T30079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 692.385875][T30079] ? __pfx__printk+0x10/0x10 [ 692.385903][T30079] ? netlink_unicast+0x82c/0x9e0 [ 692.385932][T30079] ? vfs_write+0x5c9/0xb30 [ 692.385960][T30079] ? do_syscall_64+0xfa/0x3b0 [ 692.385979][T30079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.386007][T30079] should_fail_ex+0x414/0x560 [ 692.386037][T30079] should_failslab+0xa8/0x100 [ 692.386069][T30079] kmem_cache_alloc_noprof+0x73/0x3c0 [ 692.386098][T30079] ? skb_clone+0x212/0x3a0 [ 692.386124][T30079] skb_clone+0x212/0x3a0 [ 692.386150][T30079] __netlink_deliver_tap+0x404/0x850 [ 692.386190][T30079] ? netlink_deliver_tap+0x2e/0x1b0 [ 692.386223][T30079] netlink_deliver_tap+0x19c/0x1b0 [ 692.386256][T30079] netlink_sendskb+0x68/0x140 [ 692.386287][T30079] netlink_unicast+0x397/0x9e0 [ 692.386314][T30079] ? __asan_memcpy+0x40/0x70 [ 692.386343][T30079] ? __pfx_netlink_unicast+0x10/0x10 [ 692.386378][T30079] netlink_rcv_skb+0x28c/0x470 [ 692.386410][T30079] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 692.386444][T30079] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 692.386489][T30079] netlink_unicast+0x82c/0x9e0 [ 692.386523][T30079] ? __pfx_netlink_unicast+0x10/0x10 [ 692.386553][T30079] ? netlink_sendmsg+0x642/0xb30 [ 692.386584][T30079] ? skb_put+0x11b/0x210 [ 692.386606][T30079] netlink_sendmsg+0x805/0xb30 [ 692.386630][T30079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.386650][T30079] ? aa_sock_msg_perm+0xf1/0x1d0 [ 692.386671][T30079] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 692.386694][T30079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 692.386722][T30079] __sock_sendmsg+0x21c/0x270 [ 692.386751][T30079] sock_write_iter+0x258/0x330 [ 692.386778][T30079] ? __pfx_sock_write_iter+0x10/0x10 [ 692.386820][T30079] ? bpf_lsm_file_permission+0x9/0x20 [ 692.386843][T30079] ? security_file_permission+0x75/0x290 [ 692.386873][T30079] vfs_write+0x5c9/0xb30 [ 692.386899][T30079] ? __pfx_sock_write_iter+0x10/0x10 [ 692.386924][T30079] ? __pfx_vfs_write+0x10/0x10 [ 692.386954][T30079] ? __fget_files+0x2a/0x420 [ 692.386976][T30079] ksys_write+0x145/0x250 [ 692.387003][T30079] ? __pfx_ksys_write+0x10/0x10 [ 692.387026][T30079] ? rcu_is_watching+0x15/0xb0 [ 692.387048][T30079] ? rcu_is_watching+0x15/0xb0 [ 692.387068][T30079] do_syscall_64+0xfa/0x3b0 [ 692.387086][T30079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.387105][T30079] ? clear_bhb_loop+0x60/0xb0 [ 692.387127][T30079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.387146][T30079] RIP: 0033:0x7f41d098ebe9 [ 692.387163][T30079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.387180][T30079] RSP: 002b:00007f41d1856038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 692.387202][T30079] RAX: ffffffffffffffda RBX: 00007f41d0bb5fa0 RCX: 00007f41d098ebe9 [ 692.387217][T30079] RDX: 000000000000033a RSI: 0000200000000040 RDI: 0000000000000003 [ 692.387231][T30079] RBP: 00007f41d1856090 R08: 0000000000000000 R09: 0000000000000000 [ 692.387243][T30079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.387255][T30079] R13: 00007f41d0bb6038 R14: 00007f41d0bb5fa0 R15: 00007ffd9f526e78 [ 692.387282][T30079] [ 692.390677][T30073] pim6reg: left allmulticast mode [ 692.762057][T30086] macvlan2: entered allmulticast mode [ 692.769448][T30086] veth1_vlan: entered allmulticast mode [ 692.779890][T30086] bond0: (slave macvlan2): Enslaving as an active interface with a down link [ 692.790517][T30094] netlink: 'syz.4.7812': attribute type 3 has an invalid length. [ 692.813786][T30094] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7812'. [ 692.940113][T30102] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 692.951166][T30102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7815'. [ 693.075087][T30112] netlink: 'syz.4.7819': attribute type 11 has an invalid length. [ 693.101830][T30116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7817'. [ 693.114084][T30117] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7819'. [ 693.155015][T30116] dvmrp8: entered allmulticast mode [ 693.260214][T30105] dvmrp8: left allmulticast mode [ 693.382429][T30126] lo speed is unknown, defaulting to 1000 [ 693.393697][T30126] lo speed is unknown, defaulting to 1000 [ 693.421429][T30134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7822'. [ 693.485067][T30140] syz_tun: entered allmulticast mode [ 693.495588][T30140] dvmrp8: entered allmulticast mode [ 693.503927][T30140] syz_tun: left allmulticast mode [ 693.510045][T30140] dvmrp8: left allmulticast mode [ 693.572438][T30144] netlink: 844 bytes leftover after parsing attributes in process `syz.2.7830'. [ 693.638608][T30148] syz_tun: entered allmulticast mode [ 693.655324][T30148] syz_tun: left allmulticast mode [ 693.687080][T30152] netlink: 'syz.2.7832': attribute type 3 has an invalid length. [ 693.710558][T30150] tipc: Enabled bearer , priority 0 [ 693.718731][T30150] syzkaller0: entered promiscuous mode [ 693.724226][T30150] syzkaller0: entered allmulticast mode [ 693.781386][T30150] tipc: Resetting bearer [ 693.800636][T30149] tipc: Resetting bearer [ 693.811575][T30149] tipc: Disabling bearer [ 693.826093][T30157] team0: Device veth0_macvtap failed to register rx_handler [ 694.080994][T30174] syzkaller0: entered promiscuous mode [ 694.087315][T30174] syzkaller0: entered allmulticast mode [ 694.143395][T30179] syz_tun: entered allmulticast mode [ 694.164851][T30179] dvmrp8: entered allmulticast mode [ 694.204167][T30179] syz_tun: left allmulticast mode [ 694.216599][T30179] dvmrp8: left allmulticast mode [ 694.263765][T30188] lo speed is unknown, defaulting to 1000 [ 694.271883][T30188] lo speed is unknown, defaulting to 1000 [ 694.414953][T30188] lo speed is unknown, defaulting to 1000 [ 694.422960][T30188] lo speed is unknown, defaulting to 1000 [ 694.485920][T30200] team0: Device veth0_macvtap failed to register rx_handler [ 694.572795][T30208] validate_nla: 4 callbacks suppressed [ 694.572814][T30208] netlink: 'syz.4.7854': attribute type 22 has an invalid length. [ 694.602444][T30208] bond0: option ad_select: invalid value (8) [ 694.611075][T30211] sock: sock_set_timeout: `syz.0.7855' (pid 30211) tries to set negative timeout [ 694.726874][T30216] gretap0: entered promiscuous mode [ 694.744423][T30219] netlink: 'syz.4.7857': attribute type 1 has an invalid length. [ 694.780524][T30219] netlink: 'syz.4.7857': attribute type 2 has an invalid length. [ 694.804674][T30220] netlink: 'syz.4.7857': attribute type 3 has an invalid length. [ 694.840631][T30223] syz_tun: entered allmulticast mode [ 694.853821][T30223] dvmrp8: entered allmulticast mode [ 694.881965][T30223] syz_tun: left allmulticast mode [ 694.888397][T30223] dvmrp8: left allmulticast mode [ 695.152679][T30239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.339935][T30255] netlink: 'syz.4.7869': attribute type 1 has an invalid length. [ 695.459946][T30259] syz_tun: entered allmulticast mode [ 695.469900][T30259] syz_tun: left allmulticast mode [ 695.555938][T30272] netlink: 'syz.0.7880': attribute type 8 has an invalid length. [ 695.641860][T30280] netlink: 'syz.4.7883': attribute type 8 has an invalid length. [ 695.806861][T30293] siw: device registration error -23 [ 696.305949][T30327] netlink: 'syz.2.7899': attribute type 1 has an invalid length. [ 696.443802][T30334] netlink: 'syz.3.7901': attribute type 8 has an invalid length. [ 696.608473][T30341] wg1: entered promiscuous mode [ 696.618033][T30341] wg1: entered allmulticast mode [ 696.714250][T30349] netlink: 'syz.0.7908': attribute type 22 has an invalid length. [ 696.732615][T30352] __nla_validate_parse: 7 callbacks suppressed [ 696.732634][T30352] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7906'. [ 696.768235][T30349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7908'. [ 696.796276][T30349] bond0: option ad_select: invalid value (8) [ 696.815202][T30355] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 696.862721][T30359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7911'. [ 697.268197][T30370] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.7915'. [ 697.512636][T30390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7923'. [ 697.529159][T30390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7923'. [ 697.564563][T30390] bond8: entered promiscuous mode [ 697.571150][T30390] bond8: entered allmulticast mode [ 697.576708][T30390] 8021q: adding VLAN 0 to HW filter on device bond8 [ 697.588137][T30383] nbd0: detected capacity change from 0 to 127 [ 697.627550][ T5858] block nbd0: Receive control failed (result -32) [ 697.634154][ T5861] block nbd0: Receive control failed (result -32) [ 697.640836][T30390] lo speed is unknown, defaulting to 1000 [ 697.642733][T30390] lo speed is unknown, defaulting to 1000 [ 697.711759][T30402] syz_tun: entered allmulticast mode [ 697.720499][T30402] syz_tun: left allmulticast mode [ 697.972867][T30418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7929'. [ 697.994456][T30422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7934'. [ 698.134228][T30425] syz.2.7934: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 698.161181][T30425] CPU: 1 UID: 0 PID: 30425 Comm: syz.2.7934 Not tainted syzkaller #0 PREEMPT(full) [ 698.161213][T30425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 698.161228][T30425] Call Trace: [ 698.161236][T30425] [ 698.161246][T30425] dump_stack_lvl+0x189/0x250 [ 698.161279][T30425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 698.161305][T30425] ? __pfx__printk+0x10/0x10 [ 698.161333][T30425] ? lock_release+0x4b/0x3e0 [ 698.161366][T30425] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 698.161393][T30425] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 698.161420][T30425] warn_alloc+0x214/0x310 [ 698.161457][T30425] ? __pfx_warn_alloc+0x10/0x10 [ 698.161494][T30425] ? __get_vm_area_node+0x28f/0x300 [ 698.161523][T30425] ? packet_set_ring+0x6f4/0x2350 [ 698.161560][T30425] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 698.161614][T30425] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 698.161646][T30425] ? alloc_pages_mpol+0x3cd/0x4a0 [ 698.161678][T30425] ? packet_set_ring+0x6f4/0x2350 [ 698.161704][T30425] vzalloc_noprof+0xb2/0xf0 [ 698.161734][T30425] ? packet_set_ring+0x6f4/0x2350 [ 698.161761][T30425] packet_set_ring+0x6f4/0x2350 [ 698.161800][T30425] ? __pfx_packet_set_ring+0x10/0x10 [ 698.161830][T30425] ? lock_acquire+0x5f/0x360 [ 698.161863][T30425] ? rcu_is_watching+0x15/0xb0 [ 698.161884][T30425] ? lock_release+0x4b/0x3e0 [ 698.161914][T30425] ? __might_fault+0xb0/0x130 [ 698.161942][T30425] ? __might_fault+0xcc/0x130 [ 698.161984][T30425] ? _copy_from_user+0x94/0xb0 [ 698.162010][T30425] packet_setsockopt+0xc5a/0x12c0 [ 698.162036][T30425] ? anon_inode_getfd+0x1a9/0x1b0 [ 698.162063][T30425] ? __pfx_packet_setsockopt+0x10/0x10 [ 698.162107][T30425] ? map_create+0x10b8/0x14d0 [ 698.162140][T30425] ? aa_sk_perm+0x81e/0x950 [ 698.162171][T30425] ? rcu_is_watching+0x15/0xb0 [ 698.162193][T30425] ? __pfx_aa_sk_perm+0x10/0x10 [ 698.162223][T30425] ? lock_release+0x4b/0x3e0 [ 698.162254][T30425] ? __se_sys_futex+0x36f/0x400 [ 698.162279][T30425] ? aa_sock_opt_perm+0xff/0x1b0 [ 698.162300][T30425] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 698.162324][T30425] ? __pfx_packet_setsockopt+0x10/0x10 [ 698.162352][T30425] do_sock_setsockopt+0x179/0x1b0 [ 698.162376][T30425] __x64_sys_setsockopt+0x13f/0x1b0 [ 698.162413][T30425] do_syscall_64+0xfa/0x3b0 [ 698.162433][T30425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.162454][T30425] ? clear_bhb_loop+0x60/0xb0 [ 698.162497][T30425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.162518][T30425] RIP: 0033:0x7f41d098ebe9 [ 698.162537][T30425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.162570][T30425] RSP: 002b:00007f41d1835038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 698.162592][T30425] RAX: ffffffffffffffda RBX: 00007f41d0bb6090 RCX: 00007f41d098ebe9 [ 698.162608][T30425] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000008 [ 698.162621][T30425] RBP: 00007f41d0a11e19 R08: 000000000000001c R09: 0000000000000000 [ 698.162634][T30425] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 698.162647][T30425] R13: 00007f41d0bb6128 R14: 00007f41d0bb6090 R15: 00007ffd9f526e78 [ 698.162672][T30425] [ 698.162690][T30425] Mem-Info: [ 698.260901][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 698.506915][T30425] active_anon:7036 inactive_anon:0 isolated_anon:0 [ 698.506915][T30425] active_file:4552 inactive_file:40094 isolated_file:0 [ 698.506915][T30425] unevictable:768 dirty:424 writeback:0 [ 698.506915][T30425] slab_reclaimable:13212 slab_unreclaimable:211547 [ 698.506915][T30425] mapped:30177 shmem:1356 pagetables:1071 [ 698.506915][T30425] sec_pagetables:0 bounce:0 [ 698.506915][T30425] kernel_misc_reclaimable:0 [ 698.506915][T30425] free:1193217 free_pcp:21670 free_cma:0 [ 698.555918][T30425] Node 0 active_anon:28144kB inactive_anon:0kB active_file:18208kB inactive_file:160176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120708kB dirty:1696kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14700kB pagetables:4128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 698.593022][T30425] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 698.663462][T30437] syz_tun: entered allmulticast mode [ 698.675619][T30425] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 698.698100][T30437] syz_tun: left allmulticast mode [ 698.737459][T30425] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 698.753643][T30425] Node 0 DMA32 free:866400kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28200kB inactive_anon:0kB active_file:18208kB inactive_file:158596kB unevictable:1536kB writepending:1696kB present:3129332kB managed:2557448kB mlocked:0kB bounce:0kB free_pcp:69880kB local_pcp:52020kB free_cma:0kB [ 698.816914][T30425] lowmem_reserve[]: 0 0 1 1 1 [ 698.823150][T24509] Bluetooth: hci0: command tx timeout [ 698.823818][T30425] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 698.883534][T30425] lowmem_reserve[]: 0 0 0 0 0 [ 698.889781][T30425] Node 1 Normal free:3891096kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17112kB local_pcp:8992kB free_cma:0kB [ 698.927898][T30425] lowmem_reserve[]: 0 0 0 0 0 [ 698.932741][T30425] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 698.951747][T30442] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.959401][T30425] Node 0 DMA32: 1*4kB (M) 848*8kB (M) 443*16kB (UME) 249*32kB (ME) 286*64kB (UME) 93*128kB (UME) 71*256kB (UME) 13*512kB (UM) 21*1024kB (UME) 1*2048kB (U) 175*4096kB (UM) = 817236kB [ 698.983546][T30425] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 698.997847][T30442] dummy0: left promiscuous mode [ 699.005596][T30425] Node 1 Normal: 170*4kB (UE) 56*8kB (UME) 47*16kB (UME) 114*32kB (UME) 26*64kB (UME) 5*128kB (UM) 7*256kB (UME) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 946*4096kB (ME) = 3891096kB [ 699.029813][T30442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 699.080100][T30425] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 699.091563][T30425] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 699.101763][T30425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 699.113311][T30425] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 699.123229][T30425] 46049 total pagecache pages [ 699.131831][T30425] 0 pages in swap cache [ 699.136283][T30425] Free swap = 124996kB [ 699.177655][T30425] Total swap = 124996kB [ 699.187795][T30425] 2097051 pages RAM [ 699.191629][T30425] 0 pages HighMem/MovableOnly [ 699.200284][T30425] 425663 pages reserved [ 699.204514][T30425] 0 pages cma reserved [ 699.248282][T30443] lo speed is unknown, defaulting to 1000 [ 699.255645][T30443] lo speed is unknown, defaulting to 1000 [ 699.912054][T30494] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 700.216120][T30505] lo speed is unknown, defaulting to 1000 [ 700.230029][T30514] validate_nla: 6 callbacks suppressed [ 700.230048][T30514] netlink: 'syz.3.7961': attribute type 8 has an invalid length. [ 700.273594][T30505] lo speed is unknown, defaulting to 1000 [ 700.287027][T30515] netlink: 'syz.1.7963': attribute type 3 has an invalid length. [ 700.307740][T30515] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7963'. [ 700.442343][T30529] netlink: 'syz.0.7965': attribute type 13 has an invalid length. [ 700.474867][T30529] netlink: 'syz.0.7965': attribute type 17 has an invalid length. [ 700.552406][T30529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.561202][T30529] dummy0: left promiscuous mode [ 700.571469][T30529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 700.696787][T30538] lo speed is unknown, defaulting to 1000 [ 700.708688][T25638] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 700.730909][T25638] bond0: now running without any active interface! [ 700.739397][T30538] lo speed is unknown, defaulting to 1000 [ 700.868401][T30551] netlink: 'syz.4.7974': attribute type 1 has an invalid length. [ 700.878130][T30552] FAULT_INJECTION: forcing a failure. [ 700.878130][T30552] name failslab, interval 1, probability 0, space 0, times 0 [ 700.897593][T30552] CPU: 0 UID: 0 PID: 30552 Comm: syz.1.7975 Not tainted syzkaller #0 PREEMPT(full) [ 700.897620][T30552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 700.897633][T30552] Call Trace: [ 700.897641][T30552] [ 700.897650][T30552] dump_stack_lvl+0x189/0x250 [ 700.897679][T30552] ? __pfx____ratelimit+0x10/0x10 [ 700.897707][T30552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.897730][T30552] ? __pfx__printk+0x10/0x10 [ 700.897758][T30552] ? fs_reclaim_acquire+0x7d/0x100 [ 700.897787][T30552] ? rcu_is_watching+0x15/0xb0 [ 700.897806][T30552] ? __pfx___might_resched+0x10/0x10 [ 700.897824][T30552] ? lock_acquire+0x5f/0x360 [ 700.897853][T30552] should_fail_ex+0x414/0x560 [ 700.897880][T30552] should_failslab+0xa8/0x100 [ 700.897909][T30552] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 700.897936][T30552] ? __alloc_skb+0x112/0x2d0 [ 700.897956][T30552] __alloc_skb+0x112/0x2d0 [ 700.897976][T30552] netlink_sendmsg+0x5c6/0xb30 [ 700.897999][T30552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.898019][T30552] ? aa_sock_msg_perm+0xf1/0x1d0 [ 700.898045][T30552] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 700.898066][T30552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.898084][T30552] __sock_sendmsg+0x21c/0x270 [ 700.898112][T30552] ____sys_sendmsg+0x505/0x830 [ 700.898135][T30552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.898161][T30552] ? import_iovec+0x74/0xa0 [ 700.898186][T30552] ___sys_sendmsg+0x21f/0x2a0 [ 700.898208][T30552] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.898248][T30552] ? __fget_files+0x2a/0x420 [ 700.898264][T30552] ? __fget_files+0x3a0/0x420 [ 700.898287][T30552] __x64_sys_sendmsg+0x19b/0x260 [ 700.898309][T30552] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 700.898335][T30552] ? __pfx_ksys_write+0x10/0x10 [ 700.898358][T30552] ? rcu_is_watching+0x15/0xb0 [ 700.898380][T30552] ? rcu_is_watching+0x15/0xb0 [ 700.898400][T30552] do_syscall_64+0xfa/0x3b0 [ 700.898419][T30552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.898438][T30552] ? clear_bhb_loop+0x60/0xb0 [ 700.898460][T30552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.898479][T30552] RIP: 0033:0x7f3d9558ebe9 [ 700.898497][T30552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.898515][T30552] RSP: 002b:00007f3d9635f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.898537][T30552] RAX: ffffffffffffffda RBX: 00007f3d957b5fa0 RCX: 00007f3d9558ebe9 [ 700.898552][T30552] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 700.898566][T30552] RBP: 00007f3d9635f090 R08: 0000000000000000 R09: 0000000000000000 [ 700.898578][T30552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.898591][T30552] R13: 00007f3d957b6038 R14: 00007f3d957b5fa0 R15: 00007ffd3ea3aea8 [ 700.898615][T30552] [ 701.412716][T30572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7978'. [ 701.590450][T30585] dvmrp8: entered allmulticast mode [ 701.689473][T30577] dvmrp8: left allmulticast mode [ 701.900557][T30608] __nla_validate_parse: 1 callbacks suppressed [ 701.900577][T30608] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.7989'. [ 701.920542][T30598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7996'. [ 701.936434][T30598] dvmrp8: entered allmulticast mode [ 702.010771][T30597] dvmrp8: left allmulticast mode [ 702.041002][T30614] lo speed is unknown, defaulting to 1000 [ 702.049290][T30614] lo speed is unknown, defaulting to 1000 [ 702.159664][T30622] syz_tun: entered allmulticast mode [ 702.170714][T30622] dvmrp8: entered allmulticast mode [ 702.180632][T30622] syz_tun: left allmulticast mode [ 702.185769][T30622] dvmrp8: left allmulticast mode [ 702.241071][T30614] lo speed is unknown, defaulting to 1000 [ 702.278460][T30614] lo speed is unknown, defaulting to 1000 [ 702.405899][T30638] IPv6: sit2: Disabled Multicast RS [ 702.470111][T30640] netlink: 'syz.0.7999': attribute type 3 has an invalid length. [ 702.581558][T13581] IPVS: starting estimator thread 0... [ 702.625229][T30651] netlink: 'syz.0.8004': attribute type 22 has an invalid length. [ 702.636775][T30651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8004'. [ 702.647110][T30651] bond0: option ad_select: unable to set because the bond device is up [ 702.698180][T30646] IPVS: using max 36 ests per chain, 86400 per kthread [ 702.729281][T30648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8005'. [ 702.931280][T30665] tipc: Enabled bearer , priority 0 [ 703.000654][T30665] syzkaller0: entered promiscuous mode [ 703.002668][T30668] netlink: 172 bytes leftover after parsing attributes in process `syz.0.8010'. [ 703.016281][T30665] syzkaller0: entered allmulticast mode [ 703.073354][T30665] tipc: Resetting bearer [ 703.096117][T30664] tipc: Resetting bearer [ 703.115889][T30664] tipc: Disabling bearer [ 703.132736][T30681] netlink: 'syz.0.8016': attribute type 22 has an invalid length. [ 703.141137][T30681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8016'. [ 703.155019][T30681] bond0: option ad_select: unable to set because the bond device is up [ 703.180043][T30677] lo speed is unknown, defaulting to 1000 [ 703.190880][T30677] lo speed is unknown, defaulting to 1000 [ 703.229519][T30682] lo speed is unknown, defaulting to 1000 [ 703.237029][T30682] lo speed is unknown, defaulting to 1000 [ 703.563455][T30709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8023'. [ 703.809515][T30726] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8032'. [ 703.932117][T30734] netlink: 'syz.2.8036': attribute type 1 has an invalid length. [ 703.941453][T30734] netlink: 'syz.2.8036': attribute type 2 has an invalid length. [ 703.976020][T30734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8036'. [ 703.990409][T30734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8036'. [ 704.170406][T30752] IPVS: set_ctl: invalid protocol: 167 224.0.0.1:20003 [ 704.209357][T30753] dvmrp8: entered allmulticast mode [ 704.239341][T30752] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003 [ 704.286410][T30742] dvmrp8: left allmulticast mode [ 704.331907][T30765] bridge0: port 3(dummy0) entered disabled state [ 704.420835][T30765] bridge0: port 3(dummy0) entered blocking state [ 704.427324][T30765] bridge0: port 3(dummy0) entered forwarding state [ 704.489660][T30765] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 704.500067][T30769] dummy0: left allmulticast mode [ 704.505182][T30769] dummy0: left promiscuous mode [ 704.514966][T30769] bridge0: port 3(dummy0) entered disabled state [ 704.526954][T30769] bridge_slave_1: left allmulticast mode [ 704.535960][T30769] bridge_slave_1: left promiscuous mode [ 704.543117][T30769] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.552347][T30769] bridge_slave_0: left allmulticast mode [ 704.558138][T30769] bridge_slave_0: left promiscuous mode [ 704.564166][T30769] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.601035][T30769] bond0: (slave bridge0): Releasing backup interface [ 704.724674][T30780] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 705.269797][T30813] validate_nla: 5 callbacks suppressed [ 705.269815][T30813] netlink: 'syz.0.8059': attribute type 10 has an invalid length. [ 705.306149][T30813] dummy0: entered promiscuous mode [ 705.321524][T30813] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 706.315017][T30886] dvmrp8: entered allmulticast mode [ 706.509234][T30874] dvmrp8: left allmulticast mode [ 706.927236][T30912] netlink: 'syz.1.8091': attribute type 7 has an invalid length. [ 706.935789][T30912] netlink: 'syz.1.8091': attribute type 3 has an invalid length. [ 706.965244][T30918] __nla_validate_parse: 12 callbacks suppressed [ 706.965264][T30918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8094'. [ 706.982154][T30912] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8091'. [ 707.080742][T30926] IPVS: set_ctl: invalid protocol: 167 224.0.0.1:20003 [ 707.094080][T30926] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8096'. [ 707.106869][T30926] netlink: 'syz.4.8096': attribute type 1 has an invalid length. [ 707.116837][T30926] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20003 [ 707.180175][T30928] netlink: 'syz.4.8097': attribute type 74 has an invalid length. [ 707.387090][T30939] lo speed is unknown, defaulting to 1000 [ 707.395962][T30939] lo speed is unknown, defaulting to 1000 [ 707.512464][T30946] tipc: Enabled bearer , priority 0 [ 707.524686][T30948] netlink: 'syz.3.8103': attribute type 1 has an invalid length. [ 707.546968][T30950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8105'. [ 707.552524][T30948] netlink: 'syz.3.8103': attribute type 2 has an invalid length. [ 707.567015][T30950] netlink: 'syz.4.8105': attribute type 1 has an invalid length. [ 707.588774][T30950] netlink: 'syz.4.8105': attribute type 2 has an invalid length. [ 707.662138][T30950] tipc: Disabling bearer [ 707.675159][T30948] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.8103'. [ 707.697391][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 707.706553][T30953] netlink: 'syz.3.8103': attribute type 3 has an invalid length. [ 707.714505][T30953] netlink: 666 bytes leftover after parsing attributes in process `syz.3.8103'. [ 707.718591][T30939] netlink: 208 bytes leftover after parsing attributes in process `syz.2.8102'. [ 707.951205][T30962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8106'. [ 708.009743][T30961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8107'. [ 708.048205][T30961] netlink: 312 bytes leftover after parsing attributes in process `syz.0.8107'. [ 708.327623][T30989] unsupported nlmsg_type 40 [ 708.440159][T30994] bridge0: port 4(team0) entered disabled state [ 708.501700][ T5861] Bluetooth: hci4: command 0x0406 tx timeout [ 708.604996][T31005] bond0: option ad_select: unable to set because the bond device is up [ 709.000440][T31022] syzkaller0: entered promiscuous mode [ 709.007194][T31022] syzkaller0: entered allmulticast mode [ 709.980556][T31075] lo speed is unknown, defaulting to 1000 [ 710.015871][T31075] lo speed is unknown, defaulting to 1000 [ 710.191341][T31089] lo speed is unknown, defaulting to 1000 [ 710.199647][T31089] lo speed is unknown, defaulting to 1000 [ 710.363065][T31101] validate_nla: 10 callbacks suppressed [ 710.363087][T31101] netlink: 'syz.4.8156': attribute type 10 has an invalid length. [ 710.833420][T31130] IPVS: Scheduler module ip_vs_sip not found [ 710.997465][T31143] netlink: 'syz.4.8169': attribute type 10 has an invalid length. [ 711.070379][T31145] lo speed is unknown, defaulting to 1000 [ 711.095104][T31145] lo speed is unknown, defaulting to 1000 [ 711.126638][T31158] sctp: [Deprecated]: syz.0.8170 (pid 31158) Use of int in max_burst socket option. [ 711.126638][T31158] Use struct sctp_assoc_value instead [ 711.243196][T31169] IPv6: NLM_F_CREATE should be specified when creating new route [ 711.290824][T31169] IPv6: Can't replace route, no match found [ 711.657849][T31189] netlink: 'syz.3.8184': attribute type 22 has an invalid length. [ 711.667160][T31189] bond0: option ad_select: invalid value (8) [ 711.715183][T31191] tap0: tun_chr_ioctl cmd 1074025677 [ 711.743950][T31191] tap0: linktype set to 800 [ 711.881558][T31200] lo speed is unknown, defaulting to 1000 [ 711.909693][T31200] lo speed is unknown, defaulting to 1000 [ 712.084066][T31219] netlink: 'syz.3.8193': attribute type 3 has an invalid length. [ 712.107405][T31219] __nla_validate_parse: 17 callbacks suppressed [ 712.107425][T31219] netlink: 666 bytes leftover after parsing attributes in process `syz.3.8193'. [ 712.264499][T31228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8196'. [ 712.500465][T31244] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 712.613357][T31255] netlink: 'syz.3.8202': attribute type 13 has an invalid length. [ 712.644621][T31258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8201'. [ 712.662565][T31255] netlink: 'syz.3.8202': attribute type 17 has an invalid length. [ 712.736680][T31263] dvmrp8: entered allmulticast mode [ 712.816801][T31255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 712.843912][T31268] IPv6: Can't replace route, no match found [ 712.889046][T31241] dvmrp8: left allmulticast mode [ 712.922924][T31259] lo speed is unknown, defaulting to 1000 [ 712.937104][T31259] lo speed is unknown, defaulting to 1000 [ 713.006874][T31273] lo speed is unknown, defaulting to 1000 [ 713.029925][T31273] lo speed is unknown, defaulting to 1000 [ 713.219297][T31288] netlink: 'syz.1.8212': attribute type 1 has an invalid length. [ 713.236440][T31273] lo speed is unknown, defaulting to 1000 [ 713.290365][T31288] netlink: 'syz.1.8212': attribute type 2 has an invalid length. [ 713.310652][T31273] lo speed is unknown, defaulting to 1000 [ 713.345767][T31288] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.8212'. [ 713.515349][T31296] netlink: 'syz.2.8215': attribute type 22 has an invalid length. [ 713.529726][T31296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8215'. [ 713.543216][T31296] bond0: option ad_select: unable to set because the bond device is up [ 713.617564][ T5858] Bluetooth: hci2: command 0x0406 tx timeout [ 714.165302][T31322] netlink: 'syz.2.8225': attribute type 1 has an invalid length. [ 714.240994][T31324] netlink: 71 bytes leftover after parsing attributes in process `syz.3.8226'. [ 714.257429][T31322] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.8225'. [ 715.071173][T31330] syz_tun: entered allmulticast mode [ 715.093855][T31330] dvmrp8: entered allmulticast mode [ 715.106010][T31330] syz_tun: left allmulticast mode [ 715.117424][T31330] dvmrp8: left allmulticast mode [ 715.222579][T31342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8231'. [ 715.640709][T31370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8238'. [ 715.763170][T31372] syzkaller1: entered allmulticast mode [ 715.788036][T31372] syzkaller1: left allmulticast mode [ 716.068351][T31386] syz_tun: entered allmulticast mode [ 716.094826][T31386] syz_tun: left allmulticast mode [ 716.170854][T31390] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8248'. [ 716.173586][T31389] tipc: Enabled bearer , priority 0 [ 716.212042][T31389] syzkaller0: entered promiscuous mode [ 716.221516][T31389] syzkaller0: entered allmulticast mode [ 716.254078][T31389] tipc: Resetting bearer [ 716.279182][T31388] tipc: Resetting bearer [ 716.296065][T31388] tipc: Disabling bearer [ 716.555133][T31408] validate_nla: 2 callbacks suppressed [ 716.555154][T31408] netlink: 'syz.3.8254': attribute type 1 has an invalid length. [ 716.614741][T31408] netlink: 'syz.3.8254': attribute type 2 has an invalid length. [ 716.638387][T31410] netlink: 'syz.3.8254': attribute type 3 has an invalid length. [ 716.731186][T31415] lo speed is unknown, defaulting to 1000 [ 716.763858][T31415] lo speed is unknown, defaulting to 1000 [ 716.771522][T31418] syz_tun: entered allmulticast mode [ 716.796138][T31418] dvmrp8: entered allmulticast mode [ 716.833896][T31418] syz_tun: left allmulticast mode [ 716.867195][T31418] dvmrp8: left allmulticast mode [ 717.056198][T31428] FAULT_INJECTION: forcing a failure. [ 717.056198][T31428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.094890][T31428] CPU: 0 UID: 0 PID: 31428 Comm: syz.2.8262 Not tainted syzkaller #0 PREEMPT(full) [ 717.094923][T31428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 717.094939][T31428] Call Trace: [ 717.094948][T31428] [ 717.094958][T31428] dump_stack_lvl+0x189/0x250 [ 717.094990][T31428] ? __pfx____ratelimit+0x10/0x10 [ 717.095022][T31428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 717.095047][T31428] ? __pfx__printk+0x10/0x10 [ 717.095075][T31428] ? __might_fault+0xb0/0x130 [ 717.095110][T31428] ? rcu_is_watching+0x15/0xb0 [ 717.095133][T31428] should_fail_ex+0x414/0x560 [ 717.095164][T31428] _copy_from_user+0x2d/0xb0 [ 717.095190][T31428] ___sys_sendmsg+0x158/0x2a0 [ 717.095214][T31428] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.095259][T31428] ? __fget_files+0x2a/0x420 [ 717.095282][T31428] ? __fget_files+0x3a0/0x420 [ 717.095307][T31428] __x64_sys_sendmsg+0x19b/0x260 [ 717.095332][T31428] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 717.095362][T31428] ? __pfx_ksys_write+0x10/0x10 [ 717.095388][T31428] ? rcu_is_watching+0x15/0xb0 [ 717.095413][T31428] ? rcu_is_watching+0x15/0xb0 [ 717.095436][T31428] do_syscall_64+0xfa/0x3b0 [ 717.095456][T31428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.095478][T31428] ? clear_bhb_loop+0x60/0xb0 [ 717.095502][T31428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.095524][T31428] RIP: 0033:0x7f41d098ebe9 [ 717.095544][T31428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.095564][T31428] RSP: 002b:00007f41d1856038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.095595][T31428] RAX: ffffffffffffffda RBX: 00007f41d0bb5fa0 RCX: 00007f41d098ebe9 [ 717.095612][T31428] RDX: 0000000000088010 RSI: 0000200000000540 RDI: 0000000000000005 [ 717.095626][T31428] RBP: 00007f41d1856090 R08: 0000000000000000 R09: 0000000000000000 [ 717.095640][T31428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.095654][T31428] R13: 00007f41d0bb6038 R14: 00007f41d0bb5fa0 R15: 00007ffd9f526e78 [ 717.095681][T31428] [ 717.354117][T31438] netlink: 'syz.2.8267': attribute type 10 has an invalid length. [ 717.363319][T31438] bond0: (slave wlan1): Opening slave failed [ 717.374985][T31438] __nla_validate_parse: 3 callbacks suppressed [ 717.375002][T31438] netlink: 71 bytes leftover after parsing attributes in process `syz.2.8267'. [ 717.643258][T31452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8271'. [ 717.670952][T31452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8271'. [ 717.684984][T31452] netlink: 'syz.3.8271': attribute type 5 has an invalid length. [ 717.719243][T31452] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8271'. [ 717.759823][T31452] geneve2: entered promiscuous mode [ 717.781518][T31452] geneve2: entered allmulticast mode [ 717.792918][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 717.805779][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 717.837274][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 717.863507][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 717.914710][T31463] netlink: 'syz.3.8274': attribute type 22 has an invalid length. [ 717.945818][T31463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8274'. [ 717.961782][T31463] bond0: option ad_select: invalid value (8) [ 718.149486][T31471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8276'. [ 718.354027][T31482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8276'. [ 718.390538][T31489] netlink: 'syz.3.8283': attribute type 3 has an invalid length. [ 718.427782][T31491] FAULT_INJECTION: forcing a failure. [ 718.427782][T31491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.432192][T31489] netlink: 666 bytes leftover after parsing attributes in process `syz.3.8283'. [ 718.473584][T31491] CPU: 0 UID: 0 PID: 31491 Comm: syz.4.8285 Not tainted syzkaller #0 PREEMPT(full) [ 718.473617][T31491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 718.473632][T31491] Call Trace: [ 718.473640][T31491] [ 718.473650][T31491] dump_stack_lvl+0x189/0x250 [ 718.473682][T31491] ? __pfx____ratelimit+0x10/0x10 [ 718.473713][T31491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.473739][T31491] ? __pfx__printk+0x10/0x10 [ 718.473775][T31491] ? __might_fault+0xb0/0x130 [ 718.473810][T31491] ? rcu_is_watching+0x15/0xb0 [ 718.473834][T31491] should_fail_ex+0x414/0x560 [ 718.473876][T31491] _copy_from_user+0x2d/0xb0 [ 718.473901][T31491] ___sys_sendmsg+0x158/0x2a0 [ 718.473925][T31491] ? __pfx____sys_sendmsg+0x10/0x10 [ 718.473969][T31491] ? __fget_files+0x2a/0x420 [ 718.473987][T31491] ? __fget_files+0x3a0/0x420 [ 718.474011][T31491] __x64_sys_sendmsg+0x19b/0x260 [ 718.474035][T31491] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 718.474063][T31491] ? __pfx_ksys_write+0x10/0x10 [ 718.474089][T31491] ? rcu_is_watching+0x15/0xb0 [ 718.474112][T31491] ? rcu_is_watching+0x15/0xb0 [ 718.474134][T31491] do_syscall_64+0xfa/0x3b0 [ 718.474153][T31491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.474174][T31491] ? clear_bhb_loop+0x60/0xb0 [ 718.474197][T31491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.474217][T31491] RIP: 0033:0x7f650218ebe9 [ 718.474235][T31491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.474254][T31491] RSP: 002b:00007f6502f6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.474277][T31491] RAX: ffffffffffffffda RBX: 00007f65023b5fa0 RCX: 00007f650218ebe9 [ 718.474293][T31491] RDX: 0000000000088010 RSI: 0000200000000540 RDI: 0000000000000005 [ 718.474311][T31491] RBP: 00007f6502f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 718.474324][T31491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.474337][T31491] R13: 00007f65023b6038 R14: 00007f65023b5fa0 R15: 00007ffdfeb92468 [ 718.474363][T31491] [ 718.719273][T31498] netlink: 'syz.4.8289': attribute type 13 has an invalid length. [ 718.722751][T31501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8287'. [ 718.727216][T31498] netlink: 'syz.4.8289': attribute type 17 has an invalid length. [ 718.730147][T31498] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8289'. [ 718.805232][T31499] lo speed is unknown, defaulting to 1000 [ 718.815127][T31499] lo speed is unknown, defaulting to 1000 [ 719.121652][T31517] netlink: 'syz.2.8291': attribute type 1 has an invalid length. [ 719.278182][T31521] tipc: Enabled bearer , priority 0 [ 719.299520][T31515] tipc: Resetting bearer [ 719.308567][T31523] tipc: Enabled bearer , priority 0 [ 719.323929][T31523] syzkaller0: entered promiscuous mode [ 719.332942][T31523] syzkaller0: entered allmulticast mode [ 719.346283][T31511] tipc: Disabling bearer [ 719.421997][T31526] FAULT_INJECTION: forcing a failure. [ 719.421997][T31526] name failslab, interval 1, probability 0, space 0, times 0 [ 719.435694][T31526] CPU: 0 UID: 0 PID: 31526 Comm: syz.2.8296 Not tainted syzkaller #0 PREEMPT(full) [ 719.435725][T31526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 719.435739][T31526] Call Trace: [ 719.435748][T31526] [ 719.435758][T31526] dump_stack_lvl+0x189/0x250 [ 719.435790][T31526] ? __pfx____ratelimit+0x10/0x10 [ 719.435822][T31526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 719.435848][T31526] ? __pfx__printk+0x10/0x10 [ 719.435880][T31526] ? fs_reclaim_acquire+0x7d/0x100 [ 719.435914][T31526] ? rcu_is_watching+0x15/0xb0 [ 719.435935][T31526] ? __pfx___might_resched+0x10/0x10 [ 719.435955][T31526] ? lock_acquire+0x5f/0x360 [ 719.435988][T31526] should_fail_ex+0x414/0x560 [ 719.436019][T31526] should_failslab+0xa8/0x100 [ 719.436050][T31526] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 719.436079][T31526] ? __alloc_skb+0x112/0x2d0 [ 719.436098][T31526] ? rcu_is_watching+0x15/0xb0 [ 719.436121][T31526] __alloc_skb+0x112/0x2d0 [ 719.436142][T31526] netlink_sendmsg+0x5c6/0xb30 [ 719.436169][T31526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.436191][T31526] ? aa_sock_msg_perm+0xf1/0x1d0 [ 719.436213][T31526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 719.436236][T31526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.436256][T31526] __sock_sendmsg+0x21c/0x270 [ 719.436287][T31526] ____sys_sendmsg+0x505/0x830 [ 719.436312][T31526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 719.436352][T31526] ? import_iovec+0x74/0xa0 [ 719.436379][T31526] ___sys_sendmsg+0x21f/0x2a0 [ 719.436404][T31526] ? __pfx____sys_sendmsg+0x10/0x10 [ 719.436448][T31526] ? __fget_files+0x2a/0x420 [ 719.436467][T31526] ? __fget_files+0x3a0/0x420 [ 719.436492][T31526] __x64_sys_sendmsg+0x19b/0x260 [ 719.436518][T31526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 719.436547][T31526] ? __pfx_ksys_write+0x10/0x10 [ 719.436586][T31526] ? rcu_is_watching+0x15/0xb0 [ 719.436612][T31526] ? rcu_is_watching+0x15/0xb0 [ 719.436635][T31526] do_syscall_64+0xfa/0x3b0 [ 719.436655][T31526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.436677][T31526] ? clear_bhb_loop+0x60/0xb0 [ 719.436701][T31526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.436722][T31526] RIP: 0033:0x7f41d098ebe9 [ 719.436741][T31526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.436761][T31526] RSP: 002b:00007f41d1856038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.436784][T31526] RAX: ffffffffffffffda RBX: 00007f41d0bb5fa0 RCX: 00007f41d098ebe9 [ 719.436801][T31526] RDX: 0000000000088010 RSI: 0000200000000540 RDI: 0000000000000005 [ 719.436815][T31526] RBP: 00007f41d1856090 R08: 0000000000000000 R09: 0000000000000000 [ 719.436829][T31526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.436854][T31526] R13: 00007f41d0bb6038 R14: 00007f41d0bb5fa0 R15: 00007ffd9f526e78 [ 719.436878][T31526] [ 719.438441][T31523] tipc: Resetting bearer [ 719.617445][ T5861] Bluetooth: hci5: command 0x040f tx timeout [ 719.744452][T31522] tipc: Resetting bearer [ 719.826315][T31522] tipc: Disabling bearer [ 720.043401][T31541] lo speed is unknown, defaulting to 1000 [ 720.066653][T31541] lo speed is unknown, defaulting to 1000 [ 720.090528][T31547] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.118275][T31547] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.143612][T31547] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 720.230905][T31547] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.241612][T31547] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.254842][T31547] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 720.313015][T31549] lo speed is unknown, defaulting to 1000 [ 720.322478][T31547] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.333099][T31547] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.343306][T31547] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 720.362847][T31549] lo speed is unknown, defaulting to 1000 [ 720.422635][T31547] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.432688][T31547] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.446630][T31547] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 720.849879][T25634] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.868965][T25634] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 720.877097][T25634] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 720.943224][T25634] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.961971][T25634] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 720.975342][T25634] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 721.006060][T25634] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.014807][T25634] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 721.024317][T25634] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 721.054691][T25634] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.075070][T25634] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 721.098367][T25634] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 721.612903][T31604] tipc: Enabled bearer , priority 0 [ 721.621089][T31604] syzkaller0: entered promiscuous mode [ 721.626839][T31604] syzkaller0: entered allmulticast mode [ 721.639523][T31604] tipc: Resetting bearer [ 721.653703][T31603] tipc: Resetting bearer [ 721.683491][T31603] tipc: Disabling bearer [ 721.705122][T31612] validate_nla: 1 callbacks suppressed [ 721.705140][T31612] netlink: 'syz.3.8326': attribute type 3 has an invalid length. [ 721.742326][T31615] netlink: 'syz.0.8328': attribute type 3 has an invalid length. [ 721.859523][T31621] lo speed is unknown, defaulting to 1000 [ 721.870923][T31621] lo speed is unknown, defaulting to 1000 [ 721.895851][T31622] lo speed is unknown, defaulting to 1000 [ 721.915572][T31622] lo speed is unknown, defaulting to 1000 [ 722.398528][T31631] lo speed is unknown, defaulting to 1000 [ 722.438159][T31644] FAULT_INJECTION: forcing a failure. [ 722.438159][T31644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.462279][T31631] lo speed is unknown, defaulting to 1000 [ 722.476731][T31644] CPU: 0 UID: 0 PID: 31644 Comm: syz.3.8335 Not tainted syzkaller #0 PREEMPT(full) [ 722.476761][T31644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 722.476775][T31644] Call Trace: [ 722.476783][T31644] [ 722.476792][T31644] dump_stack_lvl+0x189/0x250 [ 722.476823][T31644] ? __pfx____ratelimit+0x10/0x10 [ 722.476855][T31644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 722.476880][T31644] ? __pfx__printk+0x10/0x10 [ 722.476909][T31644] ? __might_fault+0xb0/0x130 [ 722.476943][T31644] ? rcu_is_watching+0x15/0xb0 [ 722.476967][T31644] should_fail_ex+0x414/0x560 [ 722.476998][T31644] _copy_from_iter+0x1db/0x16f0 [ 722.477021][T31644] ? rcu_is_watching+0x15/0xb0 [ 722.477043][T31644] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 722.477073][T31644] ? __pfx__copy_from_iter+0x10/0x10 [ 722.477096][T31644] ? __build_skb_around+0x257/0x3e0 [ 722.477131][T31644] ? netlink_sendmsg+0x642/0xb30 [ 722.477150][T31644] ? skb_put+0x11b/0x210 [ 722.477172][T31644] netlink_sendmsg+0x6b2/0xb30 [ 722.477196][T31644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.477218][T31644] ? aa_sock_msg_perm+0xf1/0x1d0 [ 722.477239][T31644] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 722.477266][T31644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.477286][T31644] __sock_sendmsg+0x21c/0x270 [ 722.477314][T31644] ____sys_sendmsg+0x505/0x830 [ 722.477339][T31644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 722.477366][T31644] ? import_iovec+0x74/0xa0 [ 722.477391][T31644] ___sys_sendmsg+0x21f/0x2a0 [ 722.477420][T31644] ? __pfx____sys_sendmsg+0x10/0x10 [ 722.477462][T31644] ? __fget_files+0x2a/0x420 [ 722.477479][T31644] ? __fget_files+0x3a0/0x420 [ 722.477502][T31644] __x64_sys_sendmsg+0x19b/0x260 [ 722.477527][T31644] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 722.477554][T31644] ? __pfx_ksys_write+0x10/0x10 [ 722.477580][T31644] ? rcu_is_watching+0x15/0xb0 [ 722.477603][T31644] ? rcu_is_watching+0x15/0xb0 [ 722.477625][T31644] do_syscall_64+0xfa/0x3b0 [ 722.477644][T31644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.477665][T31644] ? clear_bhb_loop+0x60/0xb0 [ 722.477688][T31644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.477708][T31644] RIP: 0033:0x7f8c6138ebe9 [ 722.477727][T31644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.477745][T31644] RSP: 002b:00007f8c62239038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.477767][T31644] RAX: ffffffffffffffda RBX: 00007f8c615b5fa0 RCX: 00007f8c6138ebe9 [ 722.477783][T31644] RDX: 0000000000088010 RSI: 0000200000000540 RDI: 0000000000000005 [ 722.477797][T31644] RBP: 00007f8c62239090 R08: 0000000000000000 R09: 0000000000000000 [ 722.477811][T31644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.477824][T31644] R13: 00007f8c615b6038 R14: 00007f8c615b5fa0 R15: 00007ffcc9430f08 [ 722.477850][T31644] [ 722.869829][T31630] lo speed is unknown, defaulting to 1000 [ 722.878490][T31630] lo speed is unknown, defaulting to 1000 [ 723.143093][T31653] lo speed is unknown, defaulting to 1000 [ 723.161122][T31653] lo speed is unknown, defaulting to 1000 [ 723.264373][T31658] lo speed is unknown, defaulting to 1000 [ 723.283722][T31658] lo speed is unknown, defaulting to 1000 [ 723.502633][T31659] lo speed is unknown, defaulting to 1000 [ 723.524559][T31659] lo speed is unknown, defaulting to 1000 [ 723.604622][T31662] lo speed is unknown, defaulting to 1000 [ 723.611452][T31669] syzkaller0: entered promiscuous mode [ 723.616962][T31669] syzkaller0: entered allmulticast mode [ 723.672879][T31662] lo speed is unknown, defaulting to 1000 [ 723.837209][T31676] netlink: 'syz.0.8346': attribute type 7 has an invalid length. [ 724.000125][T31681] lo speed is unknown, defaulting to 1000 [ 724.048682][T31681] lo speed is unknown, defaulting to 1000 [ 724.367221][T31691] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 724.393029][T31706] __nla_validate_parse: 6 callbacks suppressed [ 724.393048][T31706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8350'. [ 724.439828][T31702] netlink: 'syz.2.8350': attribute type 12 has an invalid length. [ 724.501560][T31703] tipc: Enabled bearer , priority 0 [ 724.525506][T31703] syzkaller0: entered promiscuous mode [ 724.559240][T31703] syzkaller0: entered allmulticast mode [ 724.638646][T31703] tipc: Resetting bearer [ 724.696347][T31701] tipc: Resetting bearer [ 724.734834][T31701] tipc: Disabling bearer [ 724.762335][T31715] netlink: 'syz.0.8357': attribute type 3 has an invalid length. [ 724.796679][T31715] netlink: 666 bytes leftover after parsing attributes in process `syz.0.8357'. [ 724.823507][T31721] netlink: 71 bytes leftover after parsing attributes in process `syz.2.8359'. [ 724.965370][T31723] netlink: 'syz.4.8360': attribute type 7 has an invalid length. [ 725.088469][T31731] lo speed is unknown, defaulting to 1000 [ 725.104875][T31731] lo speed is unknown, defaulting to 1000 [ 725.130266][T31732] lo speed is unknown, defaulting to 1000 [ 725.184724][T31748] netlink: 212264 bytes leftover after parsing attributes in process `syz.4.8368'. [ 725.200802][T31732] lo speed is unknown, defaulting to 1000 [ 725.207690][T31746] syz_tun: entered allmulticast mode [ 725.223825][T31746] dvmrp8: entered allmulticast mode [ 725.529765][T31761] tipc: Enabled bearer , priority 0 [ 725.598138][T31761] syzkaller0: entered promiscuous mode [ 725.605826][T31761] syzkaller0: entered allmulticast mode [ 725.636440][T31761] tipc: Resetting bearer [ 725.666816][T31759] tipc: Resetting bearer [ 725.681022][T31759] tipc: Disabling bearer [ 725.928413][T31781] IPv6: NLM_F_CREATE should be specified when creating new route [ 726.135609][T31791] netlink: 'syz.1.8379': attribute type 1 has an invalid length. [ 726.553552][T31800] netlink: 'syz.0.8381': attribute type 10 has an invalid length. [ 726.562043][T31800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8381'. [ 727.004233][T31807] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 727.068863][T31812] netlink: 212 bytes leftover after parsing attributes in process `syz.4.8386'. [ 727.080436][T31810] netlink: 71 bytes leftover after parsing attributes in process `syz.3.8385'. [ 727.350419][T31824] xt_socket: unknown flags 0x50 [ 727.646468][ T6664] hid-generic 0005:10CF:8002.0001: collection stack underflow [ 727.662238][ T6664] hid-generic 0005:10CF:8002.0001: item 0 0 0 12 parsing failed [ 727.676873][ T6664] hid-generic 0005:10CF:8002.0001: probe with driver hid-generic failed with error -22 [ 727.822248][T31849] netlink: 'syz.3.8400': attribute type 12 has an invalid length. [ 727.895477][T31855] lo speed is unknown, defaulting to 1000 [ 727.917058][T31855] lo speed is unknown, defaulting to 1000 [ 728.019118][T31859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8404'. [ 728.032204][T31855] lo speed is unknown, defaulting to 1000 [ 728.040457][T31855] lo speed is unknown, defaulting to 1000 [ 728.161471][T31864] netlink: 71 bytes leftover after parsing attributes in process `syz.0.8405'. [ 728.235507][T31868] FAULT_INJECTION: forcing a failure. [ 728.235507][T31868] name failslab, interval 1, probability 0, space 0, times 0 [ 728.284832][T31868] CPU: 0 UID: 0 PID: 31868 Comm: syz.4.8407 Not tainted syzkaller #0 PREEMPT(full) [ 728.284864][T31868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 728.284878][T31868] Call Trace: [ 728.284887][T31868] [ 728.284896][T31868] dump_stack_lvl+0x189/0x250 [ 728.284927][T31868] ? __pfx____ratelimit+0x10/0x10 [ 728.284960][T31868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 728.284985][T31868] ? __pfx__printk+0x10/0x10 [ 728.285017][T31868] ? __pfx___might_resched+0x10/0x10 [ 728.285039][T31868] ? lock_acquire+0x5f/0x360 [ 728.285072][T31868] should_fail_ex+0x414/0x560 [ 728.285104][T31868] should_failslab+0xa8/0x100 [ 728.285137][T31868] __kmalloc_noprof+0xcb/0x4f0 [ 728.285166][T31868] ? ethnl_default_set_doit+0x168/0x890 [ 728.285193][T31868] ethnl_default_set_doit+0x168/0x890 [ 728.285216][T31868] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 728.285243][T31868] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 728.285281][T31868] genl_family_rcv_msg_doit+0x215/0x300 [ 728.285319][T31868] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 728.285354][T31868] ? bpf_lsm_capable+0x9/0x20 [ 728.285383][T31868] ? security_capable+0x7e/0x2e0 [ 728.285419][T31868] genl_rcv_msg+0x60e/0x790 [ 728.285449][T31868] ? __pfx_genl_rcv_msg+0x10/0x10 [ 728.285474][T31868] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 728.285498][T31868] ? __asan_memcpy+0x40/0x70 [ 728.285522][T31868] ? __pfx_ref_tracker_free+0x10/0x10 [ 728.285558][T31868] netlink_rcv_skb+0x205/0x470 [ 728.285591][T31868] ? __pfx_genl_rcv_msg+0x10/0x10 [ 728.285617][T31868] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 728.285658][T31868] ? lock_release+0x4b/0x3e0 [ 728.285697][T31868] ? down_read+0x1ad/0x2e0 [ 728.285721][T31868] genl_rcv+0x28/0x40 [ 728.285744][T31868] netlink_unicast+0x82c/0x9e0 [ 728.285779][T31868] ? __pfx_netlink_unicast+0x10/0x10 [ 728.285810][T31868] ? netlink_sendmsg+0x642/0xb30 [ 728.285828][T31868] ? skb_put+0x11b/0x210 [ 728.285851][T31868] netlink_sendmsg+0x805/0xb30 [ 728.285882][T31868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 728.285904][T31868] ? aa_sock_msg_perm+0xf1/0x1d0 [ 728.285925][T31868] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 728.285949][T31868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 728.285969][T31868] __sock_sendmsg+0x21c/0x270 [ 728.286000][T31868] ____sys_sendmsg+0x505/0x830 [ 728.286027][T31868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 728.286056][T31868] ? import_iovec+0x74/0xa0 [ 728.286083][T31868] ___sys_sendmsg+0x21f/0x2a0 [ 728.286108][T31868] ? __pfx____sys_sendmsg+0x10/0x10 [ 728.286153][T31868] ? __fget_files+0x2a/0x420 [ 728.286172][T31868] ? __fget_files+0x3a0/0x420 [ 728.286198][T31868] __x64_sys_sendmsg+0x19b/0x260 [ 728.286223][T31868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 728.286252][T31868] ? __pfx_ksys_write+0x10/0x10 [ 728.286280][T31868] ? rcu_is_watching+0x15/0xb0 [ 728.286304][T31868] ? rcu_is_watching+0x15/0xb0 [ 728.286327][T31868] do_syscall_64+0xfa/0x3b0 [ 728.286348][T31868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.286370][T31868] ? clear_bhb_loop+0x60/0xb0 [ 728.286395][T31868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.286416][T31868] RIP: 0033:0x7f650218ebe9 [ 728.286435][T31868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.286455][T31868] RSP: 002b:00007f6502f6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.286478][T31868] RAX: ffffffffffffffda RBX: 00007f65023b5fa0 RCX: 00007f650218ebe9 [ 728.286495][T31868] RDX: 0000000000088010 RSI: 0000200000000540 RDI: 0000000000000005 [ 728.286509][T31868] RBP: 00007f6502f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 728.286523][T31868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.286537][T31868] R13: 00007f65023b6038 R14: 00007f65023b5fa0 R15: 00007ffdfeb92468 [ 728.286564][T31868] [ 728.683256][T31876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8408'. [ 728.754216][T31872] bond0: (slave bond_slave_0): Releasing backup interface [ 728.821073][T31872] bond0: (slave bond_slave_1): Releasing backup interface [ 728.853780][T31872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.888387][T31872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.926488][T31872] bond6: (slave gretap1): Releasing active interface [ 728.953885][T31872] bond7: (slave batadv1): Releasing active interface [ 728.988941][T31872] bond8: (slave batadv2): Releasing active interface [ 728.998699][T31889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.051884][ T6664] lo speed is unknown, defaulting to 1000 [ 729.283583][T31897] lo speed is unknown, defaulting to 1000 [ 729.484681][T31897] lo speed is unknown, defaulting to 1000 [ 729.535085][T31907] lo speed is unknown, defaulting to 1000 [ 729.570117][T31918] __nla_validate_parse: 2 callbacks suppressed [ 729.570139][T31918] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8421'. [ 729.638539][T31907] lo speed is unknown, defaulting to 1000 [ 729.848392][T31926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8426'. [ 729.938700][T31926] macvlan0: entered promiscuous mode [ 729.944059][T31926] macvlan0: entered allmulticast mode [ 729.954169][T31926] bond9: (slave macvlan0): Opening slave failed [ 730.146499][T31938] FAULT_INJECTION: forcing a failure. [ 730.146499][T31938] name failslab, interval 1, probability 0, space 0, times 0 [ 730.171290][T31938] CPU: 0 UID: 0 PID: 31938 Comm: syz.1.8430 Not tainted syzkaller #0 PREEMPT(full) [ 730.171320][T31938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 730.171334][T31938] Call Trace: [ 730.171342][T31938] [ 730.171351][T31938] dump_stack_lvl+0x189/0x250 [ 730.171382][T31938] ? __pfx____ratelimit+0x10/0x10 [ 730.171413][T31938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 730.171437][T31938] ? __pfx__printk+0x10/0x10 [ 730.171466][T31938] ? genl_family_rcv_msg_doit+0x267/0x300 [ 730.171494][T31938] ? __pfx___might_resched+0x10/0x10 [ 730.171521][T31938] ? lock_acquire+0x5f/0x360 [ 730.171553][T31938] should_fail_ex+0x414/0x560 [ 730.171583][T31938] should_failslab+0xa8/0x100 [ 730.171613][T31938] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 730.171643][T31938] ? __alloc_skb+0x112/0x2d0 [ 730.171664][T31938] __alloc_skb+0x112/0x2d0 [ 730.171684][T31938] netlink_ack+0x146/0xa50 [ 730.171713][T31938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 730.171739][T31938] ? __asan_memcpy+0x40/0x70 [ 730.171763][T31938] ? __pfx_ref_tracker_free+0x10/0x10 [ 730.171796][T31938] netlink_rcv_skb+0x28c/0x470 [ 730.171828][T31938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 730.171853][T31938] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 730.171891][T31938] ? lock_release+0x4b/0x3e0 [ 730.171923][T31938] ? down_read+0x1ad/0x2e0 [ 730.171946][T31938] genl_rcv+0x28/0x40 [ 730.171967][T31938] netlink_unicast+0x82c/0x9e0 [ 730.172001][T31938] ? __pfx_netlink_unicast+0x10/0x10 [ 730.172031][T31938] ? netlink_sendmsg+0x642/0xb30 [ 730.172048][T31938] ? skb_put+0x11b/0x210 [ 730.172069][T31938] netlink_sendmsg+0x805/0xb30 [ 730.172093][T31938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 730.172114][T31938] ? aa_sock_msg_perm+0xf1/0x1d0 [ 730.172134][T31938] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 730.172157][T31938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 730.172177][T31938] __sock_sendmsg+0x21c/0x270 [ 730.172205][T31938] ____sys_sendmsg+0x505/0x830 [ 730.172231][T31938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 730.172259][T31938] ? import_iovec+0x74/0xa0 [ 730.172284][T31938] ___sys_sendmsg+0x21f/0x2a0 [ 730.172308][T31938] ? __pfx____sys_sendmsg+0x10/0x10 [ 730.172351][T31938] ? __fget_files+0x2a/0x420 [ 730.172370][T31938] ? __fget_files+0x3a0/0x420 [ 730.172394][T31938] __x64_sys_sendmsg+0x19b/0x260 [ 730.172418][T31938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 730.172447][T31938] ? __pfx_ksys_write+0x10/0x10 [ 730.172472][T31938] ? rcu_is_watching+0x15/0xb0 [ 730.172496][T31938] ? rcu_is_watching+0x15/0xb0 [ 730.172527][T31938] do_syscall_64+0xfa/0x3b0 [ 730.172546][T31938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.172568][T31938] ? clear_bhb_loop+0x60/0xb0 [ 730.172591][T31938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.172611][T31938] RIP: 0033:0x7f3d9558ebe9 [ 730.172629][T31938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.172647][T31938] RSP: 002b:00007f3d9635f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 730.172670][T31938] RAX: ffffffffffffffda RBX: 00007f3d957b5fa0 RCX: 00007f3d9558ebe9 [ 730.172686][T31938] RDX: 0000000000088010 RSI: 0000200000000540 RDI: 0000000000000005 [ 730.172700][T31938] RBP: 00007f3d9635f090 R08: 0000000000000000 R09: 0000000000000000 [ 730.172713][T31938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.172726][T31938] R13: 00007f3d957b6038 R14: 00007f3d957b5fa0 R15: 00007ffd3ea3aea8 [ 730.172751][T31938] [ 730.615662][T31946] netlink: 'syz.4.8431': attribute type 3 has an invalid length. [ 730.624102][T31946] netlink: 666 bytes leftover after parsing attributes in process `syz.4.8431'. [ 730.650759][T31947] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8433'. [ 730.707124][T31947] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8433'. [ 730.716558][T31947] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8433'. [ 730.736650][T31951] lo speed is unknown, defaulting to 1000 [ 730.759856][T31951] lo speed is unknown, defaulting to 1000 [ 730.850843][T31961] tipc: Enabled bearer , priority 0 [ 730.896629][T31966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8439'. [ 730.924007][T31961] syzkaller0: entered promiscuous mode [ 730.942410][T31961] syzkaller0: entered allmulticast mode [ 730.991354][T31960] tipc: Resetting bearer [ 731.041847][T31972] netlink: 'syz.4.8440': attribute type 10 has an invalid length. [ 731.052120][T31960] tipc: Disabling bearer [ 731.075904][T31972] bridge0: port 3(dummy0) entered disabled state [ 731.084171][T31972] dummy0: left allmulticast mode [ 731.091537][T31972] dummy0: left promiscuous mode [ 731.097273][T31972] bridge0: port 3(dummy0) entered disabled state [ 731.105274][T31977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8440'. [ 731.147168][T31972] dummy0: entered promiscuous mode [ 731.171047][T31972] dummy0: entered allmulticast mode [ 731.184597][T31972] team0: Port device dummy0 added [ 731.331020][T31991] netlink: 71 bytes leftover after parsing attributes in process `syz.4.8447'. [ 731.396585][T31995] netlink: 'syz.2.8448': attribute type 3 has an invalid length. [ 731.415122][T31995] netlink: 666 bytes leftover after parsing attributes in process `syz.2.8448'. [ 731.600266][T32009] tipc: Enabled bearer , priority 0 [ 731.635567][T32009] syzkaller0: entered promiscuous mode [ 731.643431][T32009] syzkaller0: entered allmulticast mode [ 731.669977][T32008] tipc: Resetting bearer [ 731.706118][T32008] tipc: Disabling bearer [ 731.863099][T32030] netlink: 'syz.3.8459': attribute type 18 has an invalid length. [ 731.954300][T32039] netlink: 'syz.4.8462': attribute type 3 has an invalid length. [ 732.024389][T32047] IPVS: length: 93 != 8 [ 732.082643][T32045] gretap2: entered promiscuous mode [ 732.108549][T32045] gretap2: entered allmulticast mode [ 732.163176][T32055] tipc: Enabled bearer , priority 0 [ 732.174089][T32055] syzkaller0: entered promiscuous mode [ 732.196286][T32055] syzkaller0: entered allmulticast mode [ 732.210112][T32057] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 732.224689][T32054] tipc: Resetting bearer [ 732.244574][T32054] tipc: Disabling bearer [ 732.294952][T32067] tipc: Enabled bearer , priority 0 [ 732.312430][T32065] syzkaller0: entered promiscuous mode [ 732.326469][T32065] syzkaller0: entered allmulticast mode [ 732.482506][T32065] tipc: Resetting bearer [ 732.497875][T32065] tipc: Disabling bearer [ 732.696794][T32084] lo speed is unknown, defaulting to 1000 [ 732.714973][T32084] lo speed is unknown, defaulting to 1000 [ 732.865572][T32097] netlink: 'syz.0.8485': attribute type 3 has an invalid length. [ 732.946071][T32084] lo speed is unknown, defaulting to 1000 [ 732.986122][T32084] lo speed is unknown, defaulting to 1000 [ 733.102639][T32117] gretap0: entered promiscuous mode [ 733.108202][T32117] vlan2: entered promiscuous mode [ 733.338807][T32132] netlink: 'syz.2.8500': attribute type 3 has an invalid length. [ 733.346990][T32129] netlink: 'syz.1.8499': attribute type 10 has an invalid length. [ 733.412618][T32135] FAULT_INJECTION: forcing a failure. [ 733.412618][T32135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.436627][T32135] CPU: 1 UID: 0 PID: 32135 Comm: syz.1.8503 Not tainted syzkaller #0 PREEMPT(full) [ 733.436659][T32135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 733.436674][T32135] Call Trace: [ 733.436684][T32135] [ 733.436693][T32135] dump_stack_lvl+0x189/0x250 [ 733.436726][T32135] ? __pfx____ratelimit+0x10/0x10 [ 733.436758][T32135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.436784][T32135] ? __pfx__printk+0x10/0x10 [ 733.436816][T32135] ? __might_fault+0xb0/0x130 [ 733.436851][T32135] ? rcu_is_watching+0x15/0xb0 [ 733.436875][T32135] should_fail_ex+0x414/0x560 [ 733.436906][T32135] _copy_from_user+0x2d/0xb0 [ 733.436931][T32135] ___sys_sendmsg+0x158/0x2a0 [ 733.436956][T32135] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.437001][T32135] ? __fget_files+0x2a/0x420 [ 733.437019][T32135] ? __fget_files+0x3a0/0x420 [ 733.437045][T32135] __x64_sys_sendmsg+0x19b/0x260 [ 733.437069][T32135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 733.437098][T32135] ? __pfx_ksys_write+0x10/0x10 [ 733.437124][T32135] ? rcu_is_watching+0x15/0xb0 [ 733.437149][T32135] ? rcu_is_watching+0x15/0xb0 [ 733.437171][T32135] do_syscall_64+0xfa/0x3b0 [ 733.437192][T32135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.437213][T32135] ? clear_bhb_loop+0x60/0xb0 [ 733.437238][T32135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.437271][T32135] RIP: 0033:0x7f3d9558ebe9 [ 733.437290][T32135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.437311][T32135] RSP: 002b:00007f3d9635f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.437334][T32135] RAX: ffffffffffffffda RBX: 00007f3d957b5fa0 RCX: 00007f3d9558ebe9 [ 733.437350][T32135] RDX: 0000000020000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 733.437365][T32135] RBP: 00007f3d9635f090 R08: 0000000000000000 R09: 0000000000000000 [ 733.437379][T32135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.437393][T32135] R13: 00007f3d957b6038 R14: 00007f3d957b5fa0 R15: 00007ffd3ea3aea8 [ 733.437420][T32135] [ 733.648340][T32137] netlink: 'syz.2.8502': attribute type 10 has an invalid length. [ 733.674193][T32137] bridge0: port 4(team0) entered blocking state [ 733.680578][T32137] bridge0: port 4(team0) entered forwarding state [ 733.712984][T32137] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.889935][T32147] lo speed is unknown, defaulting to 1000 [ 734.138802][T32165] netlink: 'syz.4.8513': attribute type 3 has an invalid length. [ 734.164722][T32147] lo speed is unknown, defaulting to 1000 [ 734.183015][T32166] lo speed is unknown, defaulting to 1000 [ 734.206801][T32166] lo speed is unknown, defaulting to 1000 [ 734.969612][T32207] netlink: 'syz.0.8526': attribute type 3 has an invalid length. [ 734.998017][T32207] __nla_validate_parse: 11 callbacks suppressed [ 734.998037][T32207] netlink: 666 bytes leftover after parsing attributes in process `syz.0.8526'. [ 735.054869][T32211] tipc: Enabled bearer , priority 0 [ 735.065277][T32211] syzkaller0: entered promiscuous mode [ 735.086694][T32211] syzkaller0: entered allmulticast mode [ 735.119454][T32211] tipc: Resetting bearer [ 735.129460][T32214] FAULT_INJECTION: forcing a failure. [ 735.129460][T32214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.154897][T32217] netlink: 71 bytes leftover after parsing attributes in process `syz.3.8525'. [ 735.164868][T32214] CPU: 0 UID: 0 PID: 32214 Comm: syz.0.8530 Not tainted syzkaller #0 PREEMPT(full) [ 735.164897][T32214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 735.164911][T32214] Call Trace: [ 735.164920][T32214] [ 735.164930][T32214] dump_stack_lvl+0x189/0x250 [ 735.164961][T32214] ? __pfx____ratelimit+0x10/0x10 [ 735.164994][T32214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.165019][T32214] ? __pfx__printk+0x10/0x10 [ 735.165053][T32214] ? rcu_is_watching+0x15/0xb0 [ 735.165076][T32214] should_fail_ex+0x414/0x560 [ 735.165107][T32214] _copy_to_user+0x31/0xb0 [ 735.165133][T32214] simple_read_from_buffer+0xe1/0x170 [ 735.165175][T32214] proc_fail_nth_read+0x1b3/0x220 [ 735.165202][T32214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 735.165227][T32214] ? rw_verify_area+0x2a6/0x4d0 [ 735.165254][T32214] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 735.165278][T32214] vfs_read+0x1fd/0xa30 [ 735.165304][T32214] ? fdget_pos+0x247/0x320 [ 735.165324][T32214] ? __pfx___mutex_lock+0x10/0x10 [ 735.165344][T32214] ? __pfx_vfs_read+0x10/0x10 [ 735.165376][T32214] ? __fget_files+0x3a0/0x420 [ 735.165393][T32214] ? __fget_files+0x2a/0x420 [ 735.165417][T32214] ksys_read+0x145/0x250 [ 735.165445][T32214] ? __pfx_ksys_read+0x10/0x10 [ 735.165471][T32214] ? rcu_is_watching+0x15/0xb0 [ 735.165495][T32214] ? rcu_is_watching+0x15/0xb0 [ 735.165518][T32214] do_syscall_64+0xfa/0x3b0 [ 735.165538][T32214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.165560][T32214] ? clear_bhb_loop+0x60/0xb0 [ 735.165584][T32214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.165605][T32214] RIP: 0033:0x7f35a598d5fc [ 735.165624][T32214] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 735.165643][T32214] RSP: 002b:00007f35a6731030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 735.165666][T32214] RAX: ffffffffffffffda RBX: 00007f35a5bb5fa0 RCX: 00007f35a598d5fc [ 735.165683][T32214] RDX: 000000000000000f RSI: 00007f35a67310a0 RDI: 0000000000000009 [ 735.165697][T32214] RBP: 00007f35a6731090 R08: 0000000000000000 R09: 0000000000000000 [ 735.165712][T32214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.165725][T32214] R13: 00007f35a5bb6038 R14: 00007f35a5bb5fa0 R15: 00007ffeda2774b8 [ 735.165751][T32214] [ 735.400492][T32219] netlink: 'syz.4.8531': attribute type 10 has an invalid length. [ 735.408824][T32211] tipc: Resetting bearer [ 735.415727][T32219] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8531'. [ 735.458162][T32223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8532'. [ 735.525446][T32225] netlink: 'syz.1.8529': attribute type 1 has an invalid length. [ 735.563217][T32211] tipc: Disabling bearer [ 735.572252][T32223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8532'. [ 735.652981][T32230] IPv6: Can't replace route, no match found [ 735.669519][T32232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8534'. [ 735.783249][T32243] netlink: 'syz.4.8539': attribute type 10 has an invalid length. [ 735.800847][T32243] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8539'. [ 735.966831][T32256] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 736.024593][T32260] netlink: 71 bytes leftover after parsing attributes in process `syz.2.8544'. [ 736.110603][T32269] lo speed is unknown, defaulting to 1000 [ 736.119396][T32269] lo speed is unknown, defaulting to 1000 [ 736.280799][T32278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8549'. [ 736.639584][T32302] netlink: 71 bytes leftover after parsing attributes in process `syz.3.8559'. [ 736.744284][T32304] netlink: 'syz.2.8560': attribute type 3 has an invalid length. [ 736.814761][T32308] lo speed is unknown, defaulting to 1000 [ 736.850666][T32308] lo speed is unknown, defaulting to 1000 [ 737.019384][T32322] lo speed is unknown, defaulting to 1000 [ 737.035976][T32322] lo speed is unknown, defaulting to 1000 [ 737.287871][T32336] team0: entered promiscuous mode [ 737.393597][T32343] lo speed is unknown, defaulting to 1000 [ 737.419126][T32343] lo speed is unknown, defaulting to 1000 [ 737.726364][T32359] vlan0: entered promiscuous mode [ 737.777366][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 737.879872][T32346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 737.913591][T32373] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 737.946024][T32346] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 737.960093][T32372] lo speed is unknown, defaulting to 1000 [ 737.993378][T32378] dvmrp8: entered allmulticast mode [ 738.128666][T32372] lo speed is unknown, defaulting to 1000 [ 738.165651][T32381] lo speed is unknown, defaulting to 1000 [ 738.193647][T32360] dvmrp8: left allmulticast mode [ 738.234514][T32381] lo speed is unknown, defaulting to 1000 [ 738.300540][T32382] lo speed is unknown, defaulting to 1000 [ 738.342343][T32385] lo speed is unknown, defaulting to 1000 [ 738.351419][T32382] lo speed is unknown, defaulting to 1000 [ 738.393391][T32385] lo speed is unknown, defaulting to 1000 [ 738.450366][T32398] siw: device registration error -23 [ 738.665564][T32414] validate_nla: 5 callbacks suppressed [ 738.665586][T32414] netlink: 'syz.4.8594': attribute type 10 has an invalid length. [ 739.082005][T32444] IPv6: Can't replace route, no match found [ 739.240570][T32454] FAULT_INJECTION: forcing a failure. [ 739.240570][T32454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.294172][T32454] CPU: 0 UID: 0 PID: 32454 Comm: syz.4.8607 Not tainted syzkaller #0 PREEMPT(full) [ 739.294201][T32454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 739.294215][T32454] Call Trace: [ 739.294224][T32454] [ 739.294232][T32454] dump_stack_lvl+0x189/0x250 [ 739.294261][T32454] ? __pfx____ratelimit+0x10/0x10 [ 739.294289][T32454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.294313][T32454] ? __pfx__printk+0x10/0x10 [ 739.294338][T32454] ? __might_fault+0xb0/0x130 [ 739.294368][T32454] ? rcu_is_watching+0x15/0xb0 [ 739.294389][T32454] should_fail_ex+0x414/0x560 [ 739.294416][T32454] _copy_from_iter+0x1db/0x16f0 [ 739.294438][T32454] ? rcu_is_watching+0x15/0xb0 [ 739.294457][T32454] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 739.294485][T32454] ? __pfx__copy_from_iter+0x10/0x10 [ 739.294505][T32454] ? __build_skb_around+0x257/0x3e0 [ 739.294538][T32454] ? netlink_sendmsg+0x642/0xb30 [ 739.294554][T32454] ? skb_put+0x11b/0x210 [ 739.294574][T32454] netlink_sendmsg+0x6b2/0xb30 [ 739.294595][T32454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.294615][T32454] ? aa_sock_msg_perm+0xf1/0x1d0 [ 739.294634][T32454] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 739.294655][T32454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.294673][T32454] __sock_sendmsg+0x21c/0x270 [ 739.294700][T32454] ____sys_sendmsg+0x505/0x830 [ 739.294723][T32454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 739.294750][T32454] ? import_iovec+0x74/0xa0 [ 739.294773][T32454] ___sys_sendmsg+0x21f/0x2a0 [ 739.294795][T32454] ? __pfx____sys_sendmsg+0x10/0x10 [ 739.294842][T32454] ? __fget_files+0x2a/0x420 [ 739.294858][T32454] ? __fget_files+0x3a0/0x420 [ 739.294881][T32454] __x64_sys_sendmsg+0x19b/0x260 [ 739.294903][T32454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 739.294929][T32454] ? __pfx_ksys_write+0x10/0x10 [ 739.294954][T32454] ? rcu_is_watching+0x15/0xb0 [ 739.294975][T32454] ? rcu_is_watching+0x15/0xb0 [ 739.294995][T32454] do_syscall_64+0xfa/0x3b0 [ 739.295014][T32454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.295033][T32454] ? clear_bhb_loop+0x60/0xb0 [ 739.295056][T32454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.295075][T32454] RIP: 0033:0x7f650218ebe9 [ 739.295092][T32454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.295109][T32454] RSP: 002b:00007f6502f6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.295131][T32454] RAX: ffffffffffffffda RBX: 00007f65023b5fa0 RCX: 00007f650218ebe9 [ 739.295146][T32454] RDX: 0000000020000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 739.295159][T32454] RBP: 00007f6502f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 739.295172][T32454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.295184][T32454] R13: 00007f65023b6038 R14: 00007f65023b5fa0 R15: 00007ffdfeb92468 [ 739.295208][T32454] [ 739.876124][T32477] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.901342][T32477] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.963918][T32487] netlink: 'syz.1.8622': attribute type 2 has an invalid length. [ 739.974000][T32477] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.000313][T32477] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.015984][T32487] __nla_validate_parse: 11 callbacks suppressed [ 740.016004][T32487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8622'. [ 740.059358][T32487] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8622'. [ 740.072390][T32484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8619'. [ 740.096755][T32477] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.172833][T32477] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.203987][T32503] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 740.234627][T32477] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.258398][T32477] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.274788][T32508] netlink: 172 bytes leftover after parsing attributes in process `syz.2.8630'. [ 740.290786][T32506] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8627'. [ 740.343857][T32477] ------------[ cut here ]------------ [ 740.349409][T32477] WARNING: CPU: 0 PID: 32477 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x2c8/0x370 [ 740.359631][T32477] Modules linked in: [ 740.363546][T32477] CPU: 0 UID: 0 PID: 32477 Comm: syz.4.8620 Not tainted syzkaller #0 PREEMPT(full) [ 740.364340][T32514] siw: device registration error -23 [ 740.372949][T32477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 740.372980][T32477] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 740.373010][T32477] Code: 74 10 4c 89 e7 89 54 24 0c e8 c4 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 70 74 77 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 740.373030][T32477] RSP: 0018:ffffc9000435e940 EFLAGS: 00010246 [ 740.373056][T32477] RAX: ffffc9000435e900 RBX: 0000000000000017 RCX: 0000000000000000 [ 740.373072][T32477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000435e9a8 [ 740.373087][T32477] RBP: ffffc9000435ea28 R08: ffffc9000435e9a7 R09: 0000000000000000 [ 740.373103][T32477] R10: ffffc9000435e980 R11: fffff5200086bd35 R12: 0000000000000000 [ 740.373118][T32477] R13: 1ffff9200086bd2c R14: 0000000000040920 R15: dffffc0000000000 [ 740.373135][T32477] FS: 00007f6502f6f6c0(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 740.373154][T32477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 740.373169][T32477] CR2: 000000110c3503d2 CR3: 00000000426cc000 CR4: 00000000003526f0 [ 740.373188][T32477] Call Trace: [ 740.373197][T32477] [ 740.373206][T32477] ? __sock_sendmsg+0x21c/0x270 [ 740.373233][T32477] ? ___sys_sendmsg+0x21f/0x2a0 [ 740.373255][T32477] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 740.373280][T32477] ? policy_nodemask+0x28b/0x720 [ 740.373311][T32477] alloc_pages_mpol+0x232/0x4a0 [ 740.373342][T32477] ___kmalloc_large_node+0x5f/0x1b0 [ 740.373372][T32477] __kmalloc_large_node_noprof+0x18/0x90 [ 740.373401][T32477] __kmalloc_noprof+0x36f/0x4f0 [ 740.373428][T32477] ? nsim_fib_event_nb+0x295/0x1080 [ 740.373451][T32477] nsim_fib_event_nb+0x295/0x1080 [ 740.373475][T32477] ? netlink_rcv_skb+0x205/0x470 [ 740.373506][T32477] call_fib_notifier+0x45/0x80 [ 740.373527][T32477] fib6_node_dump+0x21d/0x2b0 [ 740.373553][T32477] ? __pfx_fib6_node_dump+0x10/0x10 [ 740.373584][T32477] ? rcu_is_watching+0x15/0xb0 [ 740.373608][T32477] fib6_walk_continue+0x67b/0x910 [ 740.373643][T32477] fib6_walk+0x149/0x290 [ 740.373671][T32477] fib6_tables_dump+0x1c9/0x2b0 [ 740.373699][T32477] ? __pfx_fib6_tables_dump+0x10/0x10 [ 740.443879][T32516] netlink: 'syz.0.8631': attribute type 10 has an invalid length. [ 740.445389][T32477] ? net_generic+0x1e/0x240 [ 740.445423][T32477] register_fib_notifier+0x181/0x360 [ 740.604773][T32477] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 740.611083][T32477] ? register_fib_notifier+0x6a/0x360 [ 740.616507][T32477] nsim_fib_create+0x847/0x9d0 [ 740.621331][T32477] ? __pfx_nsim_fib_create+0x10/0x10 [ 740.626656][T32477] nsim_dev_reload_up+0x36b/0x780 [ 740.631749][T32477] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 740.637350][T32477] devlink_reload+0x4ec/0x8d0 [ 740.642049][T32477] ? rcu_is_watching+0x15/0xb0 [ 740.646833][T32477] ? __pfx_devlink_reload+0x10/0x10 [ 740.652109][T32477] ? devlink_resources_validate+0xa7/0xd0 [ 740.657877][T32477] ? devlink_resources_validate+0xa7/0xd0 [ 740.663626][T32477] devlink_nl_reload_doit+0xb35/0xd50 [ 740.669084][T32477] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 740.675009][T32477] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 740.681399][T32477] genl_family_rcv_msg_doit+0x215/0x300 [ 740.686983][T32477] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 740.693105][T32477] ? bpf_lsm_capable+0x9/0x20 [ 740.697837][T32477] ? security_capable+0x7e/0x2e0 [ 740.702809][T32477] genl_rcv_msg+0x60e/0x790 [ 740.707382][T32477] ? __pfx_genl_rcv_msg+0x10/0x10 [ 740.712422][T32477] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 740.718888][T32477] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 740.724813][T32477] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 740.731373][T32477] ? __asan_memcpy+0x40/0x70 [ 740.735988][T32477] ? __pfx_ref_tracker_free+0x10/0x10 [ 740.741447][T32477] netlink_rcv_skb+0x205/0x470 [ 740.746252][T32477] ? __pfx_genl_rcv_msg+0x10/0x10 [ 740.751331][T32477] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 740.756654][T32477] ? lock_release+0x4b/0x3e0 [ 740.761300][T32477] ? down_read+0x1ad/0x2e0 [ 740.765737][T32477] genl_rcv+0x28/0x40 [ 740.769785][T32477] netlink_unicast+0x82c/0x9e0 [ 740.774589][T32477] ? __pfx_netlink_unicast+0x10/0x10 [ 740.779934][T32477] ? netlink_sendmsg+0x642/0xb30 [ 740.784899][T32477] ? skb_put+0x11b/0x210 [ 740.789200][T32477] netlink_sendmsg+0x805/0xb30 [ 740.793992][T32477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.799344][T32477] ? aa_sock_msg_perm+0xf1/0x1d0 [ 740.804307][T32477] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 740.809647][T32477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.814958][T32477] __sock_sendmsg+0x21c/0x270 [ 740.819694][T32477] ____sys_sendmsg+0x505/0x830 [ 740.824489][T32477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 740.829824][T32477] ? import_iovec+0x74/0xa0 [ 740.834356][T32477] ___sys_sendmsg+0x21f/0x2a0 [ 740.839109][T32477] ? __pfx____sys_sendmsg+0x10/0x10 [ 740.844334][T32477] ? futex_wake+0x4b2/0x560 [ 740.848917][T32477] ? __fget_files+0x2a/0x420 [ 740.853546][T32477] ? __fget_files+0x3a0/0x420 [ 740.858295][T32477] __x64_sys_sendmsg+0x19b/0x260 [ 740.863253][T32477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 740.868768][T32477] ? rcu_is_watching+0x15/0xb0 [ 740.873557][T32477] ? rcu_is_watching+0x15/0xb0 [ 740.878369][T32477] do_syscall_64+0xfa/0x3b0 [ 740.882894][T32477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.889030][T32477] ? clear_bhb_loop+0x60/0xb0 [ 740.893729][T32477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.899666][T32477] RIP: 0033:0x7f650218ebe9 [ 740.904123][T32477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.923805][T32477] RSP: 002b:00007f6502f6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.932281][T32477] RAX: ffffffffffffffda RBX: 00007f65023b5fa0 RCX: 00007f650218ebe9 [ 740.940307][T32477] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 740.948334][T32477] RBP: 00007f6502211e19 R08: 0000000000000000 R09: 0000000000000000 [ 740.956328][T32477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.964365][T32477] R13: 00007f65023b6038 R14: 00007f65023b5fa0 R15: 00007ffdfeb92468 [ 740.972405][T32477] [ 740.975448][T32477] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 740.982777][T32477] CPU: 0 UID: 0 PID: 32477 Comm: syz.4.8620 Not tainted syzkaller #0 PREEMPT(full) [ 740.992156][T32477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 741.002220][T32477] Call Trace: [ 741.005515][T32477] [ 741.008463][T32477] dump_stack_lvl+0x99/0x250 [ 741.013080][T32477] ? __asan_memcpy+0x40/0x70 [ 741.017687][T32477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 741.022904][T32477] ? __pfx__printk+0x10/0x10 [ 741.027535][T32477] vpanic+0x281/0x750 [ 741.031535][T32477] ? __pfx__printk+0x10/0x10 [ 741.036154][T32477] ? __pfx_vpanic+0x10/0x10 [ 741.040698][T32477] ? is_bpf_text_address+0x26/0x2b0 [ 741.045936][T32477] panic+0xb9/0xc0 [ 741.049698][T32477] ? __pfx_panic+0x10/0x10 [ 741.054151][T32477] __warn+0x31b/0x4b0 [ 741.058159][T32477] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 741.064154][T32477] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 741.070143][T32477] report_bug+0x2be/0x4f0 [ 741.074494][T32477] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 741.080489][T32477] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 741.086488][T32477] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 741.092509][T32477] handle_bug+0x84/0x160 [ 741.096769][T32477] exc_invalid_op+0x1a/0x50 [ 741.101310][T32477] asm_exc_invalid_op+0x1a/0x20 [ 741.106192][T32477] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 741.112805][T32477] Code: 74 10 4c 89 e7 89 54 24 0c e8 c4 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 70 74 77 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 741.132424][T32477] RSP: 0018:ffffc9000435e940 EFLAGS: 00010246 [ 741.138514][T32477] RAX: ffffc9000435e900 RBX: 0000000000000017 RCX: 0000000000000000 [ 741.146513][T32477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000435e9a8 [ 741.154501][T32477] RBP: ffffc9000435ea28 R08: ffffc9000435e9a7 R09: 0000000000000000 [ 741.162486][T32477] R10: ffffc9000435e980 R11: fffff5200086bd35 R12: 0000000000000000 [ 741.170470][T32477] R13: 1ffff9200086bd2c R14: 0000000000040920 R15: dffffc0000000000 [ 741.178470][T32477] ? __sock_sendmsg+0x21c/0x270 [ 741.183355][T32477] ? ___sys_sendmsg+0x21f/0x2a0 [ 741.188228][T32477] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 741.194580][T32477] ? policy_nodemask+0x28b/0x720 [ 741.199558][T32477] alloc_pages_mpol+0x232/0x4a0 [ 741.204443][T32477] ___kmalloc_large_node+0x5f/0x1b0 [ 741.209714][T32477] __kmalloc_large_node_noprof+0x18/0x90 [ 741.215377][T32477] __kmalloc_noprof+0x36f/0x4f0 [ 741.220257][T32477] ? nsim_fib_event_nb+0x295/0x1080 [ 741.225476][T32477] nsim_fib_event_nb+0x295/0x1080 [ 741.230526][T32477] ? netlink_rcv_skb+0x205/0x470 [ 741.235497][T32477] call_fib_notifier+0x45/0x80 [ 741.240287][T32477] fib6_node_dump+0x21d/0x2b0 [ 741.244994][T32477] ? __pfx_fib6_node_dump+0x10/0x10 [ 741.250222][T32477] ? rcu_is_watching+0x15/0xb0 [ 741.255004][T32477] fib6_walk_continue+0x67b/0x910 [ 741.260061][T32477] fib6_walk+0x149/0x290 [ 741.264331][T32477] fib6_tables_dump+0x1c9/0x2b0 [ 741.269207][T32477] ? __pfx_fib6_tables_dump+0x10/0x10 [ 741.274610][T32477] ? net_generic+0x1e/0x240 [ 741.279145][T32477] register_fib_notifier+0x181/0x360 [ 741.284450][T32477] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 741.290714][T32477] ? register_fib_notifier+0x6a/0x360 [ 741.296108][T32477] nsim_fib_create+0x847/0x9d0 [ 741.300904][T32477] ? __pfx_nsim_fib_create+0x10/0x10 [ 741.306218][T32477] nsim_dev_reload_up+0x36b/0x780 [ 741.311277][T32477] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 741.316874][T32477] devlink_reload+0x4ec/0x8d0 [ 741.321597][T32477] ? rcu_is_watching+0x15/0xb0 [ 741.326394][T32477] ? __pfx_devlink_reload+0x10/0x10 [ 741.331622][T32477] ? devlink_resources_validate+0xa7/0xd0 [ 741.337375][T32477] ? devlink_resources_validate+0xa7/0xd0 [ 741.343117][T32477] devlink_nl_reload_doit+0xb35/0xd50 [ 741.348523][T32477] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 741.354462][T32477] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 741.360823][T32477] genl_family_rcv_msg_doit+0x215/0x300 [ 741.366400][T32477] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 741.372503][T32477] ? bpf_lsm_capable+0x9/0x20 [ 741.377209][T32477] ? security_capable+0x7e/0x2e0 [ 741.382175][T32477] genl_rcv_msg+0x60e/0x790 [ 741.386736][T32477] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.391782][T32477] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 741.398221][T32477] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 741.404135][T32477] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 741.410657][T32477] ? __asan_memcpy+0x40/0x70 [ 741.415269][T32477] ? __pfx_ref_tracker_free+0x10/0x10 [ 741.420694][T32477] netlink_rcv_skb+0x205/0x470 [ 741.425498][T32477] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.430552][T32477] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 741.435891][T32477] ? lock_release+0x4b/0x3e0 [ 741.440514][T32477] ? down_read+0x1ad/0x2e0 [ 741.444949][T32477] genl_rcv+0x28/0x40 [ 741.448953][T32477] netlink_unicast+0x82c/0x9e0 [ 741.453748][T32477] ? __pfx_netlink_unicast+0x10/0x10 [ 741.459058][T32477] ? netlink_sendmsg+0x642/0xb30 [ 741.464021][T32477] ? skb_put+0x11b/0x210 [ 741.468281][T32477] netlink_sendmsg+0x805/0xb30 [ 741.473059][T32477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.478354][T32477] ? aa_sock_msg_perm+0xf1/0x1d0 [ 741.483310][T32477] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 741.488635][T32477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.493934][T32477] __sock_sendmsg+0x21c/0x270 [ 741.498639][T32477] ____sys_sendmsg+0x505/0x830 [ 741.503427][T32477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 741.508748][T32477] ? import_iovec+0x74/0xa0 [ 741.513297][T32477] ___sys_sendmsg+0x21f/0x2a0 [ 741.518003][T32477] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.523231][T32477] ? futex_wake+0x4b2/0x560 [ 741.527784][T32477] ? __fget_files+0x2a/0x420 [ 741.532403][T32477] ? __fget_files+0x3a0/0x420 [ 741.537103][T32477] __x64_sys_sendmsg+0x19b/0x260 [ 741.542064][T32477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 741.547551][T32477] ? rcu_is_watching+0x15/0xb0 [ 741.552364][T32477] ? rcu_is_watching+0x15/0xb0 [ 741.557165][T32477] do_syscall_64+0xfa/0x3b0 [ 741.561688][T32477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.567773][T32477] ? clear_bhb_loop+0x60/0xb0 [ 741.572477][T32477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.578387][T32477] RIP: 0033:0x7f650218ebe9 [ 741.582835][T32477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.602460][T32477] RSP: 002b:00007f6502f6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.610905][T32477] RAX: ffffffffffffffda RBX: 00007f65023b5fa0 RCX: 00007f650218ebe9 [ 741.618889][T32477] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 741.626875][T32477] RBP: 00007f6502211e19 R08: 0000000000000000 R09: 0000000000000000 [ 741.634864][T32477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.642855][T32477] R13: 00007f65023b6038 R14: 00007f65023b5fa0 R15: 00007ffdfeb92468 [ 741.650864][T32477] [ 741.654435][T32477] Kernel Offset: disabled [ 741.658776][T32477] Rebooting in 86400 seconds..