last executing test programs: 6.069554497s ago: executing program 1 (id=1033): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) 5.058764511s ago: executing program 4 (id=1042): socket$kcm(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c0000000300000000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@getae={0x40, 0x1f, 0x319, 0x0, 0x0, {{@in=@empty}, @in6=@mcast2}}, 0x40}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)) 4.381918159s ago: executing program 1 (id=1047): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28) 4.030108609s ago: executing program 4 (id=1048): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f00000000c0)={0x564, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0x264, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']@e+*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x11}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[).%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.\x03!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@-(^!-/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/${}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.:+-!\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xdc, 0x4, "c86df2c1a32478ee631f502c9937d22725c1b48ae25928708e0319660f6f7bbe6bfdcff5ad8fda4ac66fbdfd5289ab1d6c2f26b2ea32e5747742cc88d1c9d23cb2e4631085a0f5d4f6b9a0a2483b3a925caa6c1daf0cb93135a01da6a7233993f6ab42127cf9891d90bc59ced1c8bec7dad41f2e63482950094c1a459ee154acf1c83c0c1a4555f6772d54429f9973e18829b4fbca4898e51047e7a59fc04f4c1d4d4710cce51dde6ea990e025093d37ab357205917d46d0cf57be28f5eb426252b21f8c24756fa095377c485c34cb64f578a765becf0abb"}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xff}, @ETHTOOL_A_LINKMODES_OURS={0x2a0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}]}, @ETHTOOL_A_BITSET_MASK={0xa7, 0x5, "1739e6eb9371b6d01c0336fe442d147a214f098171c001ea73ff7c7d620e3ab82de1b0e0f6ffafd0f0f5a433fe753fddec2afa7a90b14aa3a0d400234ff88f4f14d3539de4ca67eac18b7e7d5f4ee0f79dc1f894322a3a9256f462db2e3f284ad6c6bfd9c6cad7bca233652a169358fbf5d2605b005ab927962411c076bac5018dacb59591a9591856d80357144cfa19e847b266fcc695dcc6b7e88a17c1e1ed9358f3"}, @ETHTOOL_A_BITSET_BITS={0x11c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')#-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':\xd4\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffe00}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\'*[^&$}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, ':[@-*(\'})]./\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb25}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfdf}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '{:(&-\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'\\\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@{-.\'\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x9e, 0x5, "0f2362f2c147d6378659272e35782a35519abd3428a1579b65b59808db417a3971651f02e1cfa9cbc75a9654f8cf24f5c8548964fe3dcc4165426c5c3037a57633004954e677fa9e8aed2e1a6ba48726024cbce4bb122ded5e0701fb5f37f556a24396495e20b622bc03e6cd675105f384eebeb0547d65839701f6ea5e0a00a947593f00b7865db96af4f95d017f590d275db8643dc6b8672406"}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x564}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000003e040000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff00"/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x4}, 0x18) unshare(0x2a020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00'}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1df3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000003500)=[{0x0}, {0x0}, {0x0}], 0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r5, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) socket$nl_generic(0x10, 0x3, 0x10) 3.512866893s ago: executing program 2 (id=1050): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, 0x0, 0x0) 3.379657295s ago: executing program 0 (id=1051): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c0000000300000000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@getae={0x40, 0x1f, 0x319, 0x0, 0x0, {{@in=@empty}, @in6=@mcast2}}, 0x40}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)) 3.343798968s ago: executing program 4 (id=1052): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40000000) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)="b2dbc5f0e17200c2711ece883704f8d4e57dd865bbebc3e0a82d52178e7b1680e81cd20e70c6912657466fd7bce251b2597ac5af83df342bac37e62326b491e7a398ece17aebc23df3417bc961154672d1f226c39bb0f244e7c53697f6fc63df62e1019af7dfcfac5fdb685cfe71e25a97fc8038760f4d247c6ad1f84503aca4a54fc093ceb1ba354e9569ea8a4a81a12b6d4454310af17458200ca21e", 0x9d}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f00000000c0)="89755e169ff8517b08501d563f1ebf2503f00c75ff43f0c78bf50f38fe54e6ec5d85e4e3aeaf225794fd59ad0d1290a5bd906a11df58e6d7", 0x38}, {&(0x7f0000001800)="7f8f7671c88404c52b4a17dea3cc755122f020ea72ff852f232dad67d126674c6440dfed6e564c5140ade23e90535ccc64f5adca5342af7577fbb8039d9d4e0d2a353ec79ee6ed5fbcf1c5c17add1cf79e1704f4", 0x54}, {&(0x7f00000002c0)="9e70d6d56bb9f30185542b7e5e48f97f9e5c88061afd7e986fbe67002a25f1e2144762784c3cf3073e1b35bfb30b", 0x2e}, {&(0x7f0000000300)="6f20b4af22b0dee85128e8db104402499058043cfa47fd941fda35eaf45310b992305c9a6389a22abcacaa2d0856e8a69f79aa040928467c8d4bf1bff48116da269fad0bacc142dfee1b28d6f3f82c0472bdf71a", 0x54}, {&(0x7f0000000440)="9b2c8ca83aae9aa7ed8f34a2c212ede014db43605af115e07ee5dc3b8a0ba27a05800926fc579fd4bf6c63fad8360c7bc79985024048dd2b052870c106de814a260e6ea52d40c6347d259c78e290ac0272f184a152462abdf785af2342ff4a2ee6bf8e58ab9a86357b134de16c246c3fee7d42c456e839a21542bdf273cc9287", 0x80}], 0x7, &(0x7f00000016c0)=[@iv={0x80, 0x117, 0x2, 0x66, "2d2dca3030d2a97c688d3f6e86bc3b70466a8eafcc0ea0a534d17bd6fca3dbf4d21efd682af1475a6c33b98de5c0be7df3b38ddaedffcd5f599c964041e3aa1febb4e9572575d476b77be5492d52dce69babd06cbf0d1314556ad91aab1705d344ca54330c08"}, @assoc={0x18, 0x117, 0x4, 0x80000001}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0xf8, 0x40000}], 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000001980)=""/4084, 0xff4}, {&(0x7f0000001880)=""/252, 0xfc}], 0x2) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020287b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$inet_tcp_int(r6, 0x6, 0x2e, &(0x7f0000000040)=0x8002, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0xffff, 0x0, 0x6, 0x55, 0xb66e, 0x7c}, 0x9c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080003"], 0x3c}}, 0x0) 3.3428415s ago: executing program 2 (id=1053): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r5, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000680)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x9, 0x4e21, 0x2, 0x2, 0x80, 0x0, 0x84, r5, r7}, {0xb83, 0x7, 0x2, 0x37b561f9, 0x1702, 0x6918, 0x8000, 0x40}, {0x9, 0x7, 0x5, 0x1f}, 0x8, 0x0, 0x2, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x6c}, 0x2, @in=@local, 0x3503, 0x1, 0x3, 0x6, 0xb, 0x101, 0x5}}, 0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x4e, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0xa7, 0xb7, 0xfffffff8, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x40, 0x7800, 0x1e, 0x9}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r10, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0xf9ffff00, 0x0, 0x0}, 0x108) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6c}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x29, &(0x7f00000000c0)=""/41, 0x0, 0x18, '\x00', r9, @flow_dissector, r0, 0x8, &(0x7f0000000200)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x4, 0xd18, 0x4}, 0x10, r12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) 3.152249185s ago: executing program 0 (id=1054): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40000000) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f00000016c0)=[@iv={0x80, 0x117, 0x2, 0x66, "2d2dca3030d2a97c688d3f6e86bc3b70466a8eafcc0ea0a534d17bd6fca3dbf4d21efd682af1475a6c33b98de5c0be7df3b38ddaedffcd5f599c964041e3aa1febb4e9572575d476b77be5492d52dce69babd06cbf0d1314556ad91aab1705d344ca54330c08"}, @assoc={0x18, 0x117, 0x4, 0x80000001}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0xf8, 0x40000}], 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000001980)=""/4084, 0xff4}, {&(0x7f0000001880)=""/252, 0xfc}], 0x2) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020287b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$inet_tcp_int(r6, 0x6, 0x2e, &(0x7f0000000040)=0x8002, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0xffff, 0x0, 0x6, 0x55, 0xb66e, 0x7c}, 0x9c) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080003"], 0x3c}}, 0x0) 2.878244382s ago: executing program 1 (id=1056): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pB \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x7, 0x7, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x80, 0x700, 0x9, 0x430}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x5, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x27, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000002c0)) 2.644471605s ago: executing program 1 (id=1057): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x3c, 0x11, 0x1, 0x70bd27, 0x25dedbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xa}, {0xfff3, 0xc}, {0xfff2}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x87ac}, {0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x4, 0x0, 0x3, 0x4, 0x0, 0x70bd28, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}]}, 0x20}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000000000002e0000000a0001007770616e3100000005002e007f0000000c0005000201aada92afc3aa05002b"], 0x3c}}, 0x0) 2.482810168s ago: executing program 1 (id=1058): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x1000003, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff, 0x2}, 0xe) writev(r2, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff7f000000000000000000009500000000000000d1c4183247ea0bbb5d3862950f91ace0319f430925fda88089e3fe65327bef7730896f40535d8cc3c9e2357f8ac13729dd5377c9c47936647690105b100149bfde44adf0e4fae811ad40bb7d9385a4ba07521d9382b1183789c743d76db805ea62c6116d31e6ba78ad33b098cae1289b4b8f007241dff6f9fad1a5f0d161c275d54cbe561ae3842222b780bf1d11"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) recvmmsg(r4, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0x10000}, {{&(0x7f00000005c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000000780)=""/195, 0xc3}, {&(0x7f0000000100)=""/35, 0x23}], 0x3, &(0x7f0000000880)=""/144, 0x90}, 0x3}, {{&(0x7f0000000940), 0x80, &(0x7f00000011c0)=[{&(0x7f00000009c0)=""/176, 0xb0}, {&(0x7f0000000c00)=""/245, 0xf5}, {&(0x7f0000000d00)=""/193, 0xc1}, {&(0x7f0000000e00)=""/142, 0x8e}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000ec0)=""/158, 0xfffffffffffffd81}, {&(0x7f0000000f80)=""/168, 0xa8}, {&(0x7f00000010c0)=""/223, 0xdf}, {&(0x7f0000000a80)=""/21, 0x15}], 0x9}, 0x100}], 0x3, 0x40001023, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x40000083) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="4000000000000000060012810b000100627269646765000100010000ff0f00003004000000242d4400000000"], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x8044) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002180)=@o_path={&(0x7f0000001080)='./file0\x00', 0x0, 0x8, r8}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x18, &(0x7f0000000680)=ANY=[@ANYRESHEX=r6, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32, @ANYRES8=r4], &(0x7f00000022c0)='GPL\x00', 0x1008, 0x1b, &(0x7f0000002300)=""/27, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x11, r5, 0x8, &(0x7f0000002340)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002380)={0x2, 0xe, 0x7, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000200), &(0x7f0000002400)=[{0x3, 0x3, 0xf, 0x7}], 0x10, 0x81}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r9}, &(0x7f00000021c0), &(0x7f0000002500)=r10}, 0x20) socket(0x2, 0x80805, 0x0) 2.381730929s ago: executing program 2 (id=1059): r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) connect$unix(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x20) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000001280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x24) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0xfff, 0x7, 0x8, 0x1000, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000140)={r6, 0x80f, 0x10, 0xffffffffffffffff, 0x7bf}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x98, 0x2, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4498}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x508}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xba5}]}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x400}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8}, 0x40) socket$kcm(0x11, 0x200000000000002, 0x300) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x90, 0x2, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASTER={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xed2d}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c000380060001"], 0x10c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000006800010002000000fcffff7f00000000000000001400020001000000040000004200000007006f"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x20048040) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) 2.250460391s ago: executing program 4 (id=1061): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085004000bc0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x28000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040010) sendmsg$NL80211_CMD_NEW_STATION(r1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0) unshare(0x62040200) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30, 0x0, 0xa3}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @private=0xa010105}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='freezer.state\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='-cpuacct +cpuacct -net -rlimit -memory -net -cpuse~ '], 0x34) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x0, &(0x7f0000000180)=0x7ff57fc4, 0x4) 2.214153455s ago: executing program 0 (id=1062): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.724389104s ago: executing program 2 (id=1064): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c0000000300000000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@getae={0x40, 0x1f, 0x319, 0x0, 0x0, {{@in=@empty}, @in6=@mcast2}}, 0x40}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)) 1.648242301s ago: executing program 0 (id=1065): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8021000000000000140003006e657464657673696d300000000000001800168014000180100006"], 0x4c}, 0x1, 0x0, 0x0, 0xd1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, 0x3}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000d40)="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", 0x7c2}, {0x0}], 0x2, 0x0, 0xfffffffffffffe5c}}], 0x3fffffffffffc95, 0xc84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000800000900020073797a3000000000240007800c00028008000140e00000020c00018008000140e0000002050014002000000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.512453539s ago: executing program 2 (id=1066): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x4, r1, 0x1, 0xe}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x4c, 0x11, 0x1, 0x70bd26, 0x25dedbfc, {0x0, 0x0, 0x0, r1, {0x9, 0xa}, {0xfff3, 0xc}, {0xfff2}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x87ac}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000000000002e0000000a0001007770616e3100000005002e007f0000000c0005000201aada92afc3aa05002b"], 0x3c}}, 0x0) 1.495224214s ago: executing program 3 (id=1067): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="d800000018008106bc65f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014001000000036010fab94dcf5c04e04bcb726f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4004010) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.279659632s ago: executing program 0 (id=1068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x40408d4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth0_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f00000000c0), 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000140)={'wlan1\x00', 0x4}) r4 = socket(0x1, 0x3, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r4, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f0000002400)=[{&(0x7f00000001c0)="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"}, {&(0x7f00000011c0)="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"/4096}, {&(0x7f0000002480)="c13ceeefee84e5c6c0b114a5b76519302932f4cda7ad7cdc058327cb6a9e367df30eec9989fd61f91e8a3483b73d565e47b6dbb6e328254adf322dfcc0af2bf5c4a3f60a5d218b3080dd737a869db940de8c2c0efa1a58e552b510beb3410606fdcfecb68f445d13422d9d9f397d09a82a124106379d505e897eee58b75932f9585ad43d803e7131ef4ef6c22ae82b0df607147a8a2ba86b2aa91393682cbd3ef9718efe480fce25dde05cf85d2ac6a1f9287e70c9c923038ac1c8d6c65600f566e19e0113ca66b72e9776c1a017070545c778764723ffcaf01a66c22c87b6"}, {&(0x7f0000000100)='e;W8'}, {&(0x7f00000021c0)="41000092b754ea6c4cc7835dd3f190ab0bfddd5952e86f366d7e319539fca4d6"}, {&(0x7f0000002200)="49ce89f4a44287b6db436101f5ce5fad9a1a1686f3fae58700e016bfd299e6662764d268d5a84bdfa8cfdb70af5dcc9fa226e80db1aa0417dad9641265d882c1d392e96f9c6d8981f2a97bc491152523b0dc84bd0c2753832f7b4eda93fcc772d82838f6c05b084cdecba835bc6c6cb690da1f4e92b0e3e8be884ab819f531b24d51e10418622c13286cece8802b1e3838ec0f51a6d51c7c0ae98f809ae59e5f92f2a0658057f7759668f2b28ff9387745623ce440f5e400db5dab481ecc7a912f0fff6d89f0a94b4cfc06dcdfee79447289a3d077f513d130cf78fb1c4f3e1e0c96731f9204fc19fbdcedd6d3"}, {&(0x7f0000002300)="e797e1373da976d3cedfd32b3603556dada0ef656aff3ed4ff1bdb9a10a4f9879c164ce7101cc9c66939001732631e6f2debe767c46dbb5b1d109cfcd115fb46f42561d8155dff246b991b96fb4c241ee159ed960b8f329ccab129b72ff355328ad6c275a7e19b7d3f151136e51ade5b309c0bd00b9365e116c8e45da08d616d7691541078afd7c611ddf26dd74ff662dd81a50746878fedc6a38425d7c089056c465b44ec4d311352a2b26216a286dd98b2a1876c98f346e05c0231d4790e6c0428de799d699171f42866d985e9b5b86db87bf680db874bcae61da4f145ab80042e864d16822fc18a"}], 0x42) 1.224510358s ago: executing program 4 (id=1069): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.033863637s ago: executing program 4 (id=1070): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x1000003, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff, 0x2}, 0xe) writev(r2, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff7f000000000000000000009500000000000000d1c4183247ea0bbb5d3862950f91ace0319f430925fda88089e3fe65327bef7730896f40535d8cc3c9e2357f8ac13729dd5377c9c47936647690105b100149bfde44adf0e4fae811ad40bb7d9385a4ba07521d9382b1183789c743d76db805ea62c6116d31e6ba78ad33b098cae1289b4b8f007241dff6f9fad1a5f0d161c275d54cbe561ae3842222b780bf1d11"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) recvmmsg(r4, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0x10000}, {{&(0x7f00000005c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000000780)=""/195, 0xc3}, {&(0x7f0000000100)=""/35, 0x23}], 0x3, &(0x7f0000000880)=""/144, 0x90}, 0x3}, {{&(0x7f0000000940), 0x80, &(0x7f00000011c0)=[{&(0x7f00000009c0)=""/176, 0xb0}, {&(0x7f0000000c00)=""/245, 0xf5}, {&(0x7f0000000d00)=""/193, 0xc1}, {&(0x7f0000000e00)=""/142, 0x8e}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000ec0)=""/158, 0xfffffffffffffd81}, {&(0x7f0000000f80)=""/168, 0xa8}, {&(0x7f00000010c0)=""/223, 0xdf}, {&(0x7f0000000a80)=""/21, 0x15}], 0x9}, 0x100}], 0x3, 0x40001023, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x40000083) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bf0600000082565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="4000000000000000060012810b000100627269646765000100010000ff0f00003004000000242d4400000000"], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x8044) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002180)=@o_path={&(0x7f0000001080)='./file0\x00', 0x0, 0x8, r8}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x18, &(0x7f0000000680)=ANY=[@ANYRESHEX=r6, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32, @ANYRES8=r4], &(0x7f00000022c0)='GPL\x00', 0x1008, 0x1b, &(0x7f0000002300)=""/27, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x11, r5, 0x8, &(0x7f0000002340)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002380)={0x2, 0xe, 0x7, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000200), &(0x7f0000002400)=[{0x3, 0x3, 0xf, 0x7}], 0x10, 0x81}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r9}, &(0x7f00000021c0), &(0x7f0000002500)=r10}, 0x20) socket(0x2, 0x80805, 0x0) 1.021025881s ago: executing program 2 (id=1071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x4e, 0xffffff1f, 0x0, 0x0, {0x0, 0x6}}, 0x20}}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xc, r3, 0x0, 0x500}, 0x38) socketpair(0x1, 0x6, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$alg(0x26, 0x5, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000001080)=""/4072, &(0x7f0000000000)=0xfe8) unshare(0x6a040000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x240640a5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4048094}, 0x4000) listen(r6, 0x9) 987.982995ms ago: executing program 1 (id=1072): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x2c) pread64(r3, 0x0, 0x0, 0x869) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="79129800000000006113280000000000bf2020000000000004000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000002c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc4cab575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'sit0\x00', r7, 0x40, 0x7, 0x0, 0x34, {{0x17, 0x4, 0x0, 0x5, 0x5c, 0x65, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @local, {[@lsrr={0x83, 0x1b, 0x7f, [@broadcast, @loopback, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0xc, 0xbb, 0x1, 0x2, [{@private=0xa010101, 0x401}]}, @end, @generic={0x82, 0x2}, @rr={0x7, 0x17, 0xb2, [@dev={0xac, 0x14, 0x14, 0x27}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, r8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mr_dereg\x00', r9}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}}, 0x0) 959.921597ms ago: executing program 3 (id=1073): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 691.492677ms ago: executing program 3 (id=1074): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x28}}, 0x0) 589.783307ms ago: executing program 0 (id=1075): socket$inet_udp(0x2, 0x2, 0x0) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x23}, @remote}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff03316844268cb89e14f086dd", 0x0, 0x80000009, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x2c060000) unshare(0x24020400) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4000804) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000000c0)={0x0, 0xe946, 0xf333}) 484.247166ms ago: executing program 3 (id=1076): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x207d1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r1, 0x2}, 0x20) 214.930669ms ago: executing program 3 (id=1077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000002100001000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 3 (id=1078): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x2c, r5, 0x601, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) unshare(0x62040200) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000731132000000000016640000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008000100ac141400080005000a0101020c00168008020000000000020600150002"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x238}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) close(r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.585251][ T6862] netlink: 'syz.3.243': attribute type 1 has an invalid length. [ 126.610886][ T6862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.072480][ T6882] pim6reg: entered allmulticast mode [ 127.141369][ T6882] tipc: Enabled bearer , priority 0 [ 127.196455][ T6884] pim6reg1: entered promiscuous mode [ 127.208599][ T6884] pim6reg1: entered allmulticast mode [ 127.245328][ T6880] tipc: Disabling bearer [ 127.335590][ T6893] xt_policy: too many policy elements [ 127.881536][ T6913] FAULT_INJECTION: forcing a failure. [ 127.881536][ T6913] name failslab, interval 1, probability 0, space 0, times 0 [ 127.924278][ T6913] CPU: 1 UID: 0 PID: 6913 Comm: syz.1.259 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 127.924304][ T6913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.924315][ T6913] Call Trace: [ 127.924323][ T6913] [ 127.924331][ T6913] dump_stack_lvl+0x189/0x250 [ 127.924358][ T6913] ? __pfx____ratelimit+0x10/0x10 [ 127.924382][ T6913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.924404][ T6913] ? __pfx__printk+0x10/0x10 [ 127.924433][ T6913] ? __pfx___might_resched+0x10/0x10 [ 127.924459][ T6913] should_fail_ex+0x414/0x560 [ 127.924489][ T6913] should_failslab+0xa8/0x100 [ 127.924513][ T6913] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 127.924535][ T6913] ? __alloc_skb+0x112/0x2d0 [ 127.924564][ T6913] __alloc_skb+0x112/0x2d0 [ 127.924592][ T6913] netlink_sendmsg+0x5c6/0xb30 [ 127.924627][ T6913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.924656][ T6913] ? aa_sock_msg_perm+0x94/0x160 [ 127.924683][ T6913] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.924710][ T6913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.924736][ T6913] __sock_sendmsg+0x219/0x270 [ 127.924760][ T6913] ____sys_sendmsg+0x505/0x830 [ 127.924793][ T6913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.924830][ T6913] ? import_iovec+0x74/0xa0 [ 127.924854][ T6913] ___sys_sendmsg+0x21f/0x2a0 [ 127.924873][ T6913] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.924926][ T6913] ? __fget_files+0x2a/0x420 [ 127.924958][ T6913] ? __fget_files+0x3a0/0x420 [ 127.924991][ T6913] __x64_sys_sendmsg+0x19b/0x260 [ 127.925012][ T6913] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.925038][ T6913] ? __pfx_ksys_write+0x10/0x10 [ 127.925056][ T6913] ? rcu_is_watching+0x15/0xb0 [ 127.925082][ T6913] ? do_syscall_64+0xbe/0x3b0 [ 127.925111][ T6913] do_syscall_64+0xfa/0x3b0 [ 127.925134][ T6913] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.925160][ T6913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.925178][ T6913] ? clear_bhb_loop+0x60/0xb0 [ 127.925200][ T6913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.925217][ T6913] RIP: 0033:0x7fc38e18e929 [ 127.925234][ T6913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.925248][ T6913] RSP: 002b:00007fc38ef37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.925267][ T6913] RAX: ffffffffffffffda RBX: 00007fc38e3b5fa0 RCX: 00007fc38e18e929 [ 127.925280][ T6913] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 127.925291][ T6913] RBP: 00007fc38ef37090 R08: 0000000000000000 R09: 0000000000000000 [ 127.925302][ T6913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.925312][ T6913] R13: 0000000000000000 R14: 00007fc38e3b5fa0 R15: 00007ffd8b31a338 [ 127.925340][ T6913] [ 127.946652][ T6834] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.245655][ T6920] netlink: 'syz.3.260': attribute type 1 has an invalid length. [ 128.256844][ T6834] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.398376][ T6886] netlink: 'syz.2.250': attribute type 6 has an invalid length. [ 128.430836][ T6916] bond1: (slave bridge3): Enslaving as a backup interface with an up link [ 128.464392][ T6915] bond1: entered promiscuous mode [ 128.471341][ T3026] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 128.519807][ T6915] bridge3: entered promiscuous mode [ 128.525250][ T6915] bond1: entered allmulticast mode [ 128.559017][ T6915] bridge3: entered allmulticast mode [ 128.565079][ T6915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.601681][ T6834] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.615628][ T6834] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.640317][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 128.741044][ T6834] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.764319][ T6834] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.887438][ T6937] __nla_validate_parse: 4 callbacks suppressed [ 128.887456][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 129.297376][ T6937] gretap0: left allmulticast mode [ 129.318123][ T6937] bridge0: port 1(gretap0) entered disabled state [ 129.559607][ T6644] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.577269][ T6644] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.644707][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.654214][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.691606][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.710392][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.727189][ T6951] netlink: 20 bytes leftover after parsing attributes in process `syz.4.272'. [ 129.738949][ T6951] netlink: 32 bytes leftover after parsing attributes in process `syz.4.272'. [ 129.757750][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.770399][ T6951] netlink: 'syz.4.272': attribute type 13 has an invalid length. [ 129.802351][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.818422][ T6951] gretap0: refused to change device tx_queue_len [ 129.825159][ T6951] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 129.975190][ T6954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.273'. [ 130.019629][ T6954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.273'. [ 130.052215][ T6956] netlink: 32 bytes leftover after parsing attributes in process `syz.0.274'. [ 130.062489][ T6954] netlink: 'syz.1.273': attribute type 13 has an invalid length. [ 130.091231][ T6303] IPVS: starting estimator thread 0... [ 130.200535][ T6960] IPVS: using max 33 ests per chain, 79200 per kthread [ 130.228316][ T6954] gretap0: refused to change device tx_queue_len [ 130.246947][ T6965] netlink: 'syz.2.275': attribute type 2 has an invalid length. [ 130.266516][ T6954] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 130.390581][ T6965] : entered promiscuous mode [ 131.106258][ T7008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.286'. [ 131.115654][ T7008] netlink: 32 bytes leftover after parsing attributes in process `syz.1.286'. [ 131.153123][ T7008] netlink: 'syz.1.286': attribute type 13 has an invalid length. [ 131.242851][ T6979] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 131.263829][ T7008] gretap0: refused to change device tx_queue_len [ 131.290338][ T7008] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 131.543706][ T7021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.794892][ T7023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.803458][ T7023] team0: Port device bond1 added [ 132.412644][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.4.297'. [ 132.448175][ T7053] netlink: 'syz.4.297': attribute type 7 has an invalid length. [ 132.493438][ T7053] netlink: 'syz.4.297': attribute type 8 has an invalid length. [ 132.544348][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 132.819293][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.834576][ T7063] netlink: 'syz.4.300': attribute type 13 has an invalid length. [ 132.870468][ T7063] gretap0: refused to change device tx_queue_len [ 132.886322][ T7063] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 135.893139][ T7135] netdevsim netdevsim3: Direct firmware load for . [ 135.893139][ T7135] failed with error -2 [ 135.970830][ T7135] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 135.970830][ T7135] [ 136.508794][ T7152] FAULT_INJECTION: forcing a failure. [ 136.508794][ T7152] name failslab, interval 1, probability 0, space 0, times 0 [ 136.585547][ T7152] CPU: 0 UID: 0 PID: 7152 Comm: syz.0.324 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 136.585577][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.585589][ T7152] Call Trace: [ 136.585598][ T7152] [ 136.585607][ T7152] dump_stack_lvl+0x189/0x250 [ 136.585636][ T7152] ? __pfx____ratelimit+0x10/0x10 [ 136.585664][ T7152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.585688][ T7152] ? __pfx__printk+0x10/0x10 [ 136.585722][ T7152] ? __pfx___might_resched+0x10/0x10 [ 136.585745][ T7152] ? fs_reclaim_acquire+0x7d/0x100 [ 136.585778][ T7152] should_fail_ex+0x414/0x560 [ 136.585812][ T7152] should_failslab+0xa8/0x100 [ 136.585840][ T7152] __kmalloc_cache_noprof+0x70/0x3d0 [ 136.585864][ T7152] ? rtnl_newlink+0xed/0x1c70 [ 136.585888][ T7152] ? kasan_save_free_info+0x46/0x50 [ 136.585923][ T7152] rtnl_newlink+0xed/0x1c70 [ 136.585947][ T7152] ? netlink_sendmsg+0x805/0xb30 [ 136.585973][ T7152] ? __sock_sendmsg+0x219/0x270 [ 136.585994][ T7152] ? ____sys_sendmsg+0x505/0x830 [ 136.586022][ T7152] ? ___sys_sendmsg+0x21f/0x2a0 [ 136.586038][ T7152] ? __x64_sys_sendmsg+0x19b/0x260 [ 136.586054][ T7152] ? do_syscall_64+0xfa/0x3b0 [ 136.586079][ T7152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.586108][ T7152] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.586160][ T7152] ? kasan_quarantine_put+0xdd/0x220 [ 136.586180][ T7152] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.586213][ T7152] ? nlmon_xmit+0xb0/0x100 [ 136.586235][ T7152] ? kmem_cache_free+0x18f/0x400 [ 136.586267][ T7152] ? __local_bh_enable_ip+0x12d/0x1c0 [ 136.586291][ T7152] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.586325][ T7152] ? __local_bh_enable_ip+0x12d/0x1c0 [ 136.586348][ T7152] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 136.586374][ T7152] ? __dev_queue_xmit+0x27b/0x3b50 [ 136.586409][ T7152] ? __lock_acquire+0xab9/0xd20 [ 136.586457][ T7152] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.586482][ T7152] rtnetlink_rcv_msg+0x7cc/0xb70 [ 136.586514][ T7152] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 136.586539][ T7152] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.586563][ T7152] ? ref_tracker_free+0x63a/0x7d0 [ 136.586592][ T7152] ? __copy_skb_header+0xa7/0x550 [ 136.586614][ T7152] ? __pfx_ref_tracker_free+0x10/0x10 [ 136.586644][ T7152] ? __skb_clone+0x63/0x7a0 [ 136.586672][ T7152] netlink_rcv_skb+0x205/0x470 [ 136.586701][ T7152] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.586729][ T7152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.586770][ T7152] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.586798][ T7152] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.586831][ T7152] netlink_unicast+0x75c/0x8e0 [ 136.586868][ T7152] netlink_sendmsg+0x805/0xb30 [ 136.586907][ T7152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.586939][ T7152] ? aa_sock_msg_perm+0x94/0x160 [ 136.586970][ T7152] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 136.587000][ T7152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.587029][ T7152] __sock_sendmsg+0x219/0x270 [ 136.587057][ T7152] ____sys_sendmsg+0x505/0x830 [ 136.587095][ T7152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.587137][ T7152] ? import_iovec+0x74/0xa0 [ 136.587165][ T7152] ___sys_sendmsg+0x21f/0x2a0 [ 136.587186][ T7152] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.587245][ T7152] ? __fget_files+0x2a/0x420 [ 136.587270][ T7152] ? __fget_files+0x3a0/0x420 [ 136.587313][ T7152] __x64_sys_sendmsg+0x19b/0x260 [ 136.587336][ T7152] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.587366][ T7152] ? __pfx_ksys_write+0x10/0x10 [ 136.587395][ T7152] ? do_syscall_64+0xbe/0x3b0 [ 136.587426][ T7152] do_syscall_64+0xfa/0x3b0 [ 136.587452][ T7152] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.587477][ T7152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.587497][ T7152] ? clear_bhb_loop+0x60/0xb0 [ 136.587521][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.587541][ T7152] RIP: 0033:0x7faf38d8e929 [ 136.587559][ T7152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.587575][ T7152] RSP: 002b:00007faf39b99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.587596][ T7152] RAX: ffffffffffffffda RBX: 00007faf38fb5fa0 RCX: 00007faf38d8e929 [ 136.587611][ T7152] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 136.587623][ T7152] RBP: 00007faf39b99090 R08: 0000000000000000 R09: 0000000000000000 [ 136.587635][ T7152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.587647][ T7152] R13: 0000000000000000 R14: 00007faf38fb5fa0 R15: 00007fff26f3ac88 [ 136.587678][ T7152] [ 137.130104][ T7154] __nla_validate_parse: 8 callbacks suppressed [ 137.130125][ T7154] netlink: 32 bytes leftover after parsing attributes in process `syz.4.325'. [ 137.466272][ T7169] netlink: 'syz.0.327': attribute type 13 has an invalid length. [ 137.520010][ T7169] netlink: 'syz.0.327': attribute type 17 has an invalid length. [ 137.803320][ T7169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.849813][ T7181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.162904][ T7169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.673562][ T7203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.337'. [ 138.683771][ T7203] netlink: 32 bytes leftover after parsing attributes in process `syz.1.337'. [ 138.699100][ T7203] netlink: 'syz.1.337': attribute type 13 has an invalid length. [ 138.708178][ T7203] gretap0: refused to change device tx_queue_len [ 138.715289][ T7203] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 139.500458][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 139.926266][ T7236] netlink: 20 bytes leftover after parsing attributes in process `syz.4.347'. [ 139.936656][ T7236] netlink: 32 bytes leftover after parsing attributes in process `syz.4.347'. [ 139.958452][ T7236] netlink: 'syz.4.347': attribute type 13 has an invalid length. [ 140.002950][ T7236] gretap0: refused to change device tx_queue_len [ 140.012609][ T7236] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 140.566524][ T7248] macsec1: entered promiscuous mode [ 140.572259][ T7248] ip6gretap0: entered promiscuous mode [ 140.578315][ T7248] macsec1: entered allmulticast mode [ 140.584643][ T7248] ip6gretap0: entered allmulticast mode [ 140.606956][ T7254] netlink: 96 bytes leftover after parsing attributes in process `syz.1.353'. [ 140.898695][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.354'. [ 140.938722][ T7273] FAULT_INJECTION: forcing a failure. [ 140.938722][ T7273] name failslab, interval 1, probability 0, space 0, times 0 [ 140.999703][ T7273] CPU: 0 UID: 0 PID: 7273 Comm: syz.4.358 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 140.999736][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.999750][ T7273] Call Trace: [ 140.999759][ T7273] [ 140.999768][ T7273] dump_stack_lvl+0x189/0x250 [ 140.999801][ T7273] ? __pfx____ratelimit+0x10/0x10 [ 140.999832][ T7273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.999858][ T7273] ? __pfx__printk+0x10/0x10 [ 140.999906][ T7273] should_fail_ex+0x414/0x560 [ 140.999944][ T7273] should_failslab+0xa8/0x100 [ 140.999976][ T7273] __kmalloc_cache_noprof+0x70/0x3d0 [ 141.000003][ T7273] ? sctp_add_bind_addr+0x8c/0x370 [ 141.000037][ T7273] sctp_add_bind_addr+0x8c/0x370 [ 141.000071][ T7273] sctp_copy_local_addr_list+0x30b/0x4e0 [ 141.000105][ T7273] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 141.000134][ T7273] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 141.000167][ T7273] ? sctp_v6_is_any+0x64/0x80 [ 141.000201][ T7273] ? sctp_copy_one_addr+0x93/0x360 [ 141.000235][ T7273] sctp_bind_addr_copy+0xb3/0x3c0 [ 141.000266][ T7273] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 141.000296][ T7273] sctp_connect_new_asoc+0x2e0/0x690 [ 141.000335][ T7273] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 141.000368][ T7273] ? __local_bh_enable_ip+0x12d/0x1c0 [ 141.000405][ T7273] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 141.000427][ T7273] ? security_sctp_bind_connect+0x7e/0x2e0 [ 141.000460][ T7273] sctp_sendmsg+0x155c/0x2810 [ 141.000510][ T7273] ? __pfx_sctp_sendmsg+0x10/0x10 [ 141.000549][ T7273] ? aa_sk_perm+0x81e/0x950 [ 141.000586][ T7273] ? __pfx_aa_sk_perm+0x10/0x10 [ 141.000631][ T7273] ? sock_rps_record_flow+0x19/0x410 [ 141.000661][ T7273] ? inet_sendmsg+0x2f4/0x370 [ 141.000692][ T7273] __sock_sendmsg+0x19c/0x270 [ 141.000728][ T7273] ____sys_sendmsg+0x52d/0x830 [ 141.000773][ T7273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.000822][ T7273] ? import_iovec+0x74/0xa0 [ 141.000852][ T7273] ___sys_sendmsg+0x21f/0x2a0 [ 141.000878][ T7273] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.000953][ T7273] ? vfs_write+0x8d8/0xa90 [ 141.000989][ T7273] __sys_sendmmsg+0x227/0x430 [ 141.001018][ T7273] ? __pfx___sys_sendmmsg+0x10/0x10 [ 141.001052][ T7273] ? kmem_cache_free+0x18f/0x400 [ 141.001098][ T7273] ? ksys_write+0x1e1/0x250 [ 141.001127][ T7273] ? __pfx_ksys_write+0x10/0x10 [ 141.001150][ T7273] ? rcu_is_watching+0x15/0xb0 [ 141.001185][ T7273] __x64_sys_sendmmsg+0xa0/0xc0 [ 141.001211][ T7273] do_syscall_64+0xfa/0x3b0 [ 141.001242][ T7273] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.001271][ T7273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.001295][ T7273] ? clear_bhb_loop+0x60/0xb0 [ 141.001321][ T7273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.001343][ T7273] RIP: 0033:0x7fef4058e929 [ 141.001363][ T7273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.001381][ T7273] RSP: 002b:00007fef4139f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 141.001404][ T7273] RAX: ffffffffffffffda RBX: 00007fef407b5fa0 RCX: 00007fef4058e929 [ 141.001420][ T7273] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000008 [ 141.001434][ T7273] RBP: 00007fef4139f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.001447][ T7273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.001460][ T7273] R13: 0000000000000000 R14: 00007fef407b5fa0 R15: 00007ffd9e1579d8 [ 141.001497][ T7273] [ 141.782890][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.363'. [ 141.952300][ T7297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.366'. [ 142.285118][ T7314] netlink: 'syz.3.370': attribute type 13 has an invalid length. [ 142.315884][ T7314] netlink: 'syz.3.370': attribute type 17 has an invalid length. [ 142.561481][ T7318] netlink: 'syz.0.372': attribute type 13 has an invalid length. [ 142.562649][ T7314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.585629][ T7318] netlink: 'syz.0.372': attribute type 17 has an invalid length. [ 142.588147][ T7314] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.617482][ T7314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.667524][ T7318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.883097][ T7314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.900173][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 142.983470][ T7319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.037315][ T7332] __nla_validate_parse: 4 callbacks suppressed [ 143.037334][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.376'. [ 143.086036][ T7314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.264584][ T7313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.212808][ T7361] netlink: 'syz.2.384': attribute type 21 has an invalid length. [ 144.280230][ T7367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.384'. [ 144.310034][ T7361] netlink: 132 bytes leftover after parsing attributes in process `syz.2.384'. [ 144.401024][ T7367] netlink: 'syz.2.384': attribute type 7 has an invalid length. [ 144.409222][ T7367] netlink: 'syz.2.384': attribute type 8 has an invalid length. [ 144.534080][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 144.628333][ T7367] gretap0: entered promiscuous mode [ 144.664823][ T7367] batadv_slave_1: entered promiscuous mode [ 144.715239][ T7367] erspan0: entered promiscuous mode [ 144.735393][ T30] audit: type=1800 audit(1752300557.691:2): pid=7360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.383" name="cgroup.controllers" dev="tmpfs" ino=335 res=0 errno=0 [ 144.741498][ T7367] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 144.811355][ T7367] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.823419][ T7367] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 145.163602][ T7379] warning: `syz.2.390' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 145.195632][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 145.219926][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'. [ 145.654936][ T7395] netlink: 'syz.3.396': attribute type 1 has an invalid length. [ 145.729192][ T7401] netlink: 'syz.3.396': attribute type 3 has an invalid length. [ 145.743771][ T7401] netlink: 'syz.3.396': attribute type 3 has an invalid length. [ 145.752749][ T7401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.396'. [ 146.328577][ T7418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.401'. [ 146.686675][ T7423] netlink: 56 bytes leftover after parsing attributes in process `syz.4.403'. [ 146.705769][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 146.975221][ T7433] netlink: 'syz.0.407': attribute type 11 has an invalid length. [ 147.295070][ T7444] ip6t_srh: unknown srh match flags 4000 [ 147.935405][ T7468] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 148.435780][ T7473] netlink: 'syz.0.416': attribute type 13 has an invalid length. [ 148.448934][ T7473] netlink: 'syz.0.416': attribute type 17 has an invalid length. [ 148.538172][ T7473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.679819][ T7483] __nla_validate_parse: 2 callbacks suppressed [ 148.679838][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.419'. [ 148.870353][ T7479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.419'. [ 149.166480][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.421'. [ 149.239806][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 150.118015][ T7509] netlink: 'syz.2.427': attribute type 13 has an invalid length. [ 150.137099][ T7509] netlink: 'syz.2.427': attribute type 17 has an invalid length. [ 150.339680][ T7509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.412434][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 150.414751][ T7509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.443310][ T7509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.523272][ T7509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.637105][ T7524] veth0_to_team: entered promiscuous mode [ 150.643232][ T7524] veth0_to_team: entered allmulticast mode [ 151.012065][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.435'. [ 151.023958][ T7533] netlink: 32 bytes leftover after parsing attributes in process `syz.4.435'. [ 151.097152][ T7533] netlink: 'syz.4.435': attribute type 13 has an invalid length. [ 151.146444][ T7533] gretap0: refused to change device tx_queue_len [ 151.199526][ T7533] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 151.319219][ T7539] netlink: 'syz.0.434': attribute type 1 has an invalid length. [ 151.354355][ T7539] netlink: 224 bytes leftover after parsing attributes in process `syz.0.434'. [ 151.622631][ T7535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.434'. [ 151.767961][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 152.086423][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.440'. [ 152.390241][ T7560] FAULT_INJECTION: forcing a failure. [ 152.390241][ T7560] name failslab, interval 1, probability 0, space 0, times 0 [ 152.456830][ T7560] CPU: 0 UID: 0 PID: 7560 Comm: syz.1.442 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 152.456859][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.456871][ T7560] Call Trace: [ 152.456878][ T7560] [ 152.456886][ T7560] dump_stack_lvl+0x189/0x250 [ 152.456922][ T7560] ? __pfx____ratelimit+0x10/0x10 [ 152.456947][ T7560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.456970][ T7560] ? __pfx__printk+0x10/0x10 [ 152.457001][ T7560] ? __pfx___might_resched+0x10/0x10 [ 152.457023][ T7560] ? fs_reclaim_acquire+0x7d/0x100 [ 152.457053][ T7560] should_fail_ex+0x414/0x560 [ 152.457085][ T7560] should_failslab+0xa8/0x100 [ 152.457111][ T7560] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 152.457134][ T7560] ? __alloc_skb+0x112/0x2d0 [ 152.457165][ T7560] __alloc_skb+0x112/0x2d0 [ 152.457196][ T7560] netlink_ack+0x146/0xa50 [ 152.457239][ T7560] netlink_rcv_skb+0x28c/0x470 [ 152.457265][ T7560] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 152.457288][ T7560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.457329][ T7560] ? bpf_lsm_capable+0x9/0x20 [ 152.457350][ T7560] ? security_capable+0x7e/0x2e0 [ 152.457385][ T7560] nfnetlink_rcv+0x26a/0x2520 [ 152.457409][ T7560] ? __dev_queue_xmit+0x1d79/0x3b50 [ 152.457439][ T7560] ? __dev_queue_xmit+0x27b/0x3b50 [ 152.457459][ T7560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.457488][ T7560] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 152.457508][ T7560] ? __pfx___dev_queue_xmit+0x10/0x10 [ 152.457542][ T7560] ? ref_tracker_free+0x63a/0x7d0 [ 152.457568][ T7560] ? __copy_skb_header+0xa7/0x550 [ 152.457588][ T7560] ? __pfx_ref_tracker_free+0x10/0x10 [ 152.457615][ T7560] ? __skb_clone+0x63/0x7a0 [ 152.457638][ T7560] ? __skb_clone+0x483/0x7a0 [ 152.457664][ T7560] ? skb_clone+0x246/0x3a0 [ 152.457686][ T7560] ? __netlink_deliver_tap+0x807/0x850 [ 152.457711][ T7560] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.457742][ T7560] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.457767][ T7560] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.457798][ T7560] netlink_unicast+0x75c/0x8e0 [ 152.457832][ T7560] netlink_sendmsg+0x805/0xb30 [ 152.457867][ T7560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.457897][ T7560] ? aa_sock_msg_perm+0x94/0x160 [ 152.457932][ T7560] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 152.457959][ T7560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.457986][ T7560] __sock_sendmsg+0x219/0x270 [ 152.458012][ T7560] ____sys_sendmsg+0x505/0x830 [ 152.458047][ T7560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.458087][ T7560] ? import_iovec+0x74/0xa0 [ 152.458111][ T7560] ___sys_sendmsg+0x21f/0x2a0 [ 152.458132][ T7560] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.458186][ T7560] ? __fget_files+0x2a/0x420 [ 152.458209][ T7560] ? __fget_files+0x3a0/0x420 [ 152.458243][ T7560] __x64_sys_sendmsg+0x19b/0x260 [ 152.458264][ T7560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.458292][ T7560] ? __pfx_ksys_write+0x10/0x10 [ 152.458310][ T7560] ? rcu_is_watching+0x15/0xb0 [ 152.458338][ T7560] ? do_syscall_64+0xbe/0x3b0 [ 152.458369][ T7560] do_syscall_64+0xfa/0x3b0 [ 152.458393][ T7560] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.458416][ T7560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.458434][ T7560] ? clear_bhb_loop+0x60/0xb0 [ 152.458457][ T7560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.458475][ T7560] RIP: 0033:0x7fc38e18e929 [ 152.458491][ T7560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.458506][ T7560] RSP: 002b:00007fc38ef37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.458526][ T7560] RAX: ffffffffffffffda RBX: 00007fc38e3b5fa0 RCX: 00007fc38e18e929 [ 152.458539][ T7560] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 152.458551][ T7560] RBP: 00007fc38ef37090 R08: 0000000000000000 R09: 0000000000000000 [ 152.458562][ T7560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.458572][ T7560] R13: 0000000000000000 R14: 00007fc38e3b5fa0 R15: 00007ffd8b31a338 [ 152.458602][ T7560] [ 153.337366][ T7568] gretap0: entered promiscuous mode [ 153.379778][ T7568] batadv_slave_1: entered promiscuous mode [ 153.421106][ T7568] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 153.428713][ T7568] Cannot create hsr debugfs directory [ 153.468625][ T7568] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 153.558672][ T7580] netlink: 'syz.0.451': attribute type 10 has an invalid length. [ 153.607346][ T7580] veth0_vlan: entered allmulticast mode [ 153.638715][ T7580] bridge0: port 1(veth0_vlan) entered blocking state [ 153.653861][ T7583] netlink: 'syz.3.449': attribute type 13 has an invalid length. [ 153.678786][ T7580] bridge0: port 1(veth0_vlan) entered disabled state [ 153.694982][ T7583] netlink: 'syz.3.449': attribute type 17 has an invalid length. [ 153.700090][ T7580] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 153.777102][ T7583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.837052][ T7580] netlink: 'syz.0.451': attribute type 10 has an invalid length. [ 153.885755][ T7580] __nla_validate_parse: 3 callbacks suppressed [ 153.885775][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 153.918958][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.454'. [ 154.047924][ T7597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.072580][ T7599] netlink: 'syz.2.455': attribute type 2 has an invalid length. [ 154.086603][ T7599] netlink: 'syz.2.455': attribute type 1 has an invalid length. [ 154.098339][ T7583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.123111][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 154.136918][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.455'. [ 154.166683][ T7599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.455'. [ 154.178373][ T7583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.264935][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.455'. [ 154.276624][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.455'. [ 154.674693][ T7610] gretap0: entered promiscuous mode [ 154.689599][ T7610] vlan2: entered promiscuous mode [ 154.956363][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.459'. [ 154.967502][ T7617] netlink: 'syz.0.459': attribute type 7 has an invalid length. [ 155.013898][ T7617] netlink: 'syz.0.459': attribute type 8 has an invalid length. [ 155.081497][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 155.130532][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.460'. [ 155.202500][ T7617] batadv_slave_1: entered promiscuous mode [ 155.242803][ T7617] erspan0: entered promiscuous mode [ 155.264804][ T7617] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 155.274006][ T7617] Cannot create hsr debugfs directory [ 155.645674][ T7636] netlink: 'syz.4.462': attribute type 13 has an invalid length. [ 155.685042][ T7636] netlink: 'syz.4.462': attribute type 17 has an invalid length. [ 156.088948][ T7651] xt_recent: hitcount (262143) is larger than allowed maximum (65535) [ 156.121355][ T7651] netlink: del zone limit has 4 unknown bytes [ 156.289110][ T7636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.385238][ T7653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.564333][ T7663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.635804][ T7664] bond1: (slave ip6gretap1): making interface the new active one [ 156.695339][ T7664] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 156.702819][ T7673] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 156.756583][ T7646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.429044][ T7716] gretap0: refused to change device tx_queue_len [ 158.444637][ T7716] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 158.965828][ T7741] __nla_validate_parse: 10 callbacks suppressed [ 158.965845][ T7741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.490'. [ 159.012384][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 159.046693][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 159.075099][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 159.090553][ T7737] bond1: (slave ip6gretap1): Releasing active interface [ 159.178786][ T7749] netlink: 32 bytes leftover after parsing attributes in process `syz.1.490'. [ 159.229820][ T7739] netlink: 32 bytes leftover after parsing attributes in process `syz.1.490'. [ 159.255693][ T7741] netlink: 312 bytes leftover after parsing attributes in process `syz.1.490'. [ 159.776064][ T7771] bridge_slave_0: left allmulticast mode [ 159.785123][ T7771] bridge_slave_0: left promiscuous mode [ 159.806711][ T7771] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.857206][ T7771] bridge_slave_1: left allmulticast mode [ 159.877985][ T7771] bridge_slave_1: left promiscuous mode [ 159.909821][ T7771] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.926961][ T7771] bond0: (slave bond_slave_0): Releasing backup interface [ 159.956419][ T7771] bond0: (slave bond_slave_1): Releasing backup interface [ 159.975965][ T7771] team0: Port device team_slave_0 removed [ 159.993794][ T7771] team0: Port device team_slave_1 removed [ 160.000951][ T7771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.008466][ T7771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.023647][ T7771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.032974][ T7771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.056555][ T7771] team0: Port device bond1 removed [ 160.802962][ T7799] netlink: 20 bytes leftover after parsing attributes in process `syz.1.504'. [ 160.839531][ T7799] netlink: 32 bytes leftover after parsing attributes in process `syz.1.504'. [ 160.880126][ T7799] validate_nla: 8 callbacks suppressed [ 160.880143][ T7799] netlink: 'syz.1.504': attribute type 13 has an invalid length. [ 160.920415][ T7799] gretap0: refused to change device tx_queue_len [ 160.930248][ T7802] FAULT_INJECTION: forcing a failure. [ 160.930248][ T7802] name failslab, interval 1, probability 0, space 0, times 0 [ 160.954013][ T7799] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 160.987839][ T7802] CPU: 0 UID: 0 PID: 7802 Comm: syz.3.506 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 160.987868][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.987880][ T7802] Call Trace: [ 160.987888][ T7802] [ 160.987896][ T7802] dump_stack_lvl+0x189/0x250 [ 160.987926][ T7802] ? __pfx____ratelimit+0x10/0x10 [ 160.987965][ T7802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.987989][ T7802] ? __pfx__printk+0x10/0x10 [ 160.988023][ T7802] ? __pfx___might_resched+0x10/0x10 [ 160.988052][ T7802] should_fail_ex+0x414/0x560 [ 160.988085][ T7802] should_failslab+0xa8/0x100 [ 160.988113][ T7802] __kmalloc_noprof+0xcb/0x4f0 [ 160.988134][ T7802] ? nf_tables_newset+0x132b/0x2530 [ 160.988162][ T7802] ? nla_strdup+0x9d/0x140 [ 160.988179][ T7802] ? trace_kmalloc+0x1f/0xd0 [ 160.988203][ T7802] nla_strdup+0x9d/0x140 [ 160.988221][ T7802] ? nft_rhash_estimate+0x5f/0xa0 [ 160.988246][ T7802] nf_tables_newset+0x136a/0x2530 [ 160.988290][ T7802] ? __pfx_nf_tables_newset+0x10/0x10 [ 160.988342][ T7802] ? __nla_parse+0x40/0x60 [ 160.988365][ T7802] nfnetlink_rcv+0x112f/0x2520 [ 160.988424][ T7802] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 160.988483][ T7802] ? ref_tracker_free+0x63a/0x7d0 [ 160.988549][ T7802] ? __netlink_deliver_tap+0x807/0x850 [ 160.988586][ T7802] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.988613][ T7802] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.988647][ T7802] netlink_unicast+0x75c/0x8e0 [ 160.988685][ T7802] netlink_sendmsg+0x805/0xb30 [ 160.988724][ T7802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.988757][ T7802] ? aa_sock_msg_perm+0x94/0x160 [ 160.988789][ T7802] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.988819][ T7802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.988847][ T7802] __sock_sendmsg+0x219/0x270 [ 160.988876][ T7802] ____sys_sendmsg+0x505/0x830 [ 160.988915][ T7802] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.988964][ T7802] ? import_iovec+0x74/0xa0 [ 160.988992][ T7802] ___sys_sendmsg+0x21f/0x2a0 [ 160.989013][ T7802] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.989073][ T7802] ? __fget_files+0x2a/0x420 [ 160.989099][ T7802] ? __fget_files+0x3a0/0x420 [ 160.989137][ T7802] __x64_sys_sendmsg+0x19b/0x260 [ 160.989160][ T7802] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.989197][ T7802] ? __pfx_ksys_write+0x10/0x10 [ 160.989218][ T7802] ? rcu_is_watching+0x15/0xb0 [ 160.989250][ T7802] ? do_syscall_64+0xbe/0x3b0 [ 160.989284][ T7802] do_syscall_64+0xfa/0x3b0 [ 160.989312][ T7802] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.989342][ T7802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.989361][ T7802] ? clear_bhb_loop+0x60/0xb0 [ 160.989386][ T7802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.989406][ T7802] RIP: 0033:0x7f95f6b8e929 [ 160.989425][ T7802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.989440][ T7802] RSP: 002b:00007f95f79e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.989461][ T7802] RAX: ffffffffffffffda RBX: 00007f95f6db5fa0 RCX: 00007f95f6b8e929 [ 160.989475][ T7802] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 160.989488][ T7802] RBP: 00007f95f79e2090 R08: 0000000000000000 R09: 0000000000000000 [ 160.989499][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.989510][ T7802] R13: 0000000000000000 R14: 00007f95f6db5fa0 R15: 00007fff6ed39a08 [ 160.989542][ T7802] [ 161.908099][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'. [ 163.046149][ T7873] xt_policy: too many policy elements [ 163.065165][ T7873] netlink: 'syz.3.528': attribute type 10 has an invalid length. [ 163.118026][ T7877] netlink: 'syz.3.528': attribute type 10 has an invalid length. [ 163.118561][ T7873] team0: Port device dummy0 added [ 163.340395][ T7877] team0: Port device dummy0 removed [ 163.364924][ T7877] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 163.444227][ T7885] netlink: 'syz.4.531': attribute type 21 has an invalid length. [ 163.510830][ T7885] netlink: 'syz.4.531': attribute type 7 has an invalid length. [ 163.526651][ T7885] netlink: 'syz.4.531': attribute type 8 has an invalid length. [ 163.873618][ T7894] hsr_slave_0: left promiscuous mode [ 163.892489][ T7894] hsr_slave_1: left promiscuous mode [ 164.194834][ T7901] __nla_validate_parse: 5 callbacks suppressed [ 164.194853][ T7901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.537'. [ 164.253491][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.537'. [ 164.297774][ T7901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.537'. [ 164.325099][ T7906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.539'. [ 164.345269][ T7909] netlink: 'syz.2.538': attribute type 13 has an invalid length. [ 164.361886][ T7901] netlink: 32 bytes leftover after parsing attributes in process `syz.1.537'. [ 164.369910][ T7909] netlink: 'syz.2.538': attribute type 17 has an invalid length. [ 164.445756][ T7901] netlink: 312 bytes leftover after parsing attributes in process `syz.1.537'. [ 164.502187][ T7909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.739099][ T7909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.921054][ T7909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.973793][ T7929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'. [ 165.384445][ T7944] netlink: 'syz.4.547': attribute type 13 has an invalid length. [ 165.409672][ T7944] netlink: 'syz.4.547': attribute type 17 has an invalid length. [ 166.058269][ T7937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.028545][ T7944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.365305][ T7966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.553'. [ 167.464372][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 167.525139][ T7972] bond0: (slave dummy0): Releasing backup interface [ 167.555279][ T7972] team0: Port device bridge2 removed [ 167.563453][ T7972] bond1: (slave bridge3): Removing an active aggregator [ 167.572905][ T7972] bond1: (slave bridge3): Releasing backup interface [ 167.582467][ T7972] bridge3: left promiscuous mode [ 167.594196][ T7972] bridge3: left allmulticast mode [ 167.615813][ T7966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.553'. [ 168.060267][ T7993] netlink: 'syz.2.559': attribute type 13 has an invalid length. [ 168.081580][ T7993] netlink: 'syz.2.559': attribute type 17 has an invalid length. [ 168.175468][ T7993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.358907][ T7993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.455847][ T7993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.813616][ T8016] netlink: 'syz.0.567': attribute type 1 has an invalid length. [ 169.518381][ T8039] netlink: 'syz.0.573': attribute type 13 has an invalid length. [ 169.562087][ T8039] netlink: 'syz.0.573': attribute type 17 has an invalid length. [ 169.731230][ T8047] netlink: 'syz.3.577': attribute type 21 has an invalid length. [ 169.818374][ T8050] __nla_validate_parse: 9 callbacks suppressed [ 169.818395][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.577'. [ 169.867524][ T8050] netlink: 'syz.3.577': attribute type 7 has an invalid length. [ 169.880435][ T8050] netlink: 'syz.3.577': attribute type 8 has an invalid length. [ 169.901882][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 169.911520][ T8039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.964087][ T8047] netlink: 132 bytes leftover after parsing attributes in process `syz.3.577'. [ 169.975324][ T8058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.139263][ T8087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.589'. [ 171.148825][ T8087] netlink: 32 bytes leftover after parsing attributes in process `syz.2.589'. [ 171.171225][ T8087] netlink: 'syz.2.589': attribute type 13 has an invalid length. [ 171.226420][ T8089] syzkaller0: entered promiscuous mode [ 171.243006][ T8089] syzkaller0: entered allmulticast mode [ 171.306030][ T8087] gretap0: refused to change device tx_queue_len [ 171.307770][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 171.354648][ T8094] netlink: 'syz.0.592': attribute type 13 has an invalid length. [ 171.368918][ T8087] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 171.426906][ T8094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.600254][ T8101] netlink: 44 bytes leftover after parsing attributes in process `syz.2.594'. [ 171.787652][ T8094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.913082][ T8094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.265485][ T8123] netlink: 364 bytes leftover after parsing attributes in process `syz.3.599'. [ 172.311619][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 173.859992][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 174.489916][ T8179] validate_nla: 1 callbacks suppressed [ 174.489935][ T8179] netlink: 'syz.0.614': attribute type 13 has an invalid length. [ 174.529803][ T8179] netlink: 'syz.0.614': attribute type 17 has an invalid length. [ 174.679797][ T8179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.865913][ T8179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.588283][ T8201] __nla_validate_parse: 3 callbacks suppressed [ 175.588302][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 176.410923][ T8220] FAULT_INJECTION: forcing a failure. [ 176.410923][ T8220] name failslab, interval 1, probability 0, space 0, times 0 [ 176.481994][ T8220] CPU: 0 UID: 0 PID: 8220 Comm: syz.4.621 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 176.482023][ T8220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.482036][ T8220] Call Trace: [ 176.482044][ T8220] [ 176.482053][ T8220] dump_stack_lvl+0x189/0x250 [ 176.482084][ T8220] ? __pfx____ratelimit+0x10/0x10 [ 176.482110][ T8220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.482135][ T8220] ? __pfx__printk+0x10/0x10 [ 176.482168][ T8220] ? __pfx___might_resched+0x10/0x10 [ 176.482193][ T8220] ? fs_reclaim_acquire+0x7d/0x100 [ 176.482226][ T8220] should_fail_ex+0x414/0x560 [ 176.482262][ T8220] should_failslab+0xa8/0x100 [ 176.482290][ T8220] __kmalloc_cache_noprof+0x70/0x3d0 [ 176.482313][ T8220] ? smc_pnet_add+0xe04/0x13d0 [ 176.482338][ T8220] smc_pnet_add+0xe04/0x13d0 [ 176.482362][ T8220] ? smc_pnet_add+0x9b1/0x13d0 [ 176.482384][ T8220] ? __pfx_smc_pnet_add+0x10/0x10 [ 176.482409][ T8220] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 176.482442][ T8220] genl_family_rcv_msg_doit+0x215/0x300 [ 176.482472][ T8220] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 176.482509][ T8220] ? bpf_lsm_capable+0x9/0x20 [ 176.482531][ T8220] ? security_capable+0x7e/0x2e0 [ 176.482567][ T8220] genl_rcv_msg+0x60e/0x790 [ 176.482594][ T8220] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.482614][ T8220] ? __pfx_smc_pnet_add+0x10/0x10 [ 176.482648][ T8220] netlink_rcv_skb+0x205/0x470 [ 176.482685][ T8220] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.482707][ T8220] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.482755][ T8220] ? down_read+0x1ad/0x2e0 [ 176.482788][ T8220] genl_rcv+0x28/0x40 [ 176.482806][ T8220] netlink_unicast+0x75c/0x8e0 [ 176.482842][ T8220] netlink_sendmsg+0x805/0xb30 [ 176.482881][ T8220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.482912][ T8220] ? aa_sock_msg_perm+0x94/0x160 [ 176.482944][ T8220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.482972][ T8220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.483002][ T8220] __sock_sendmsg+0x219/0x270 [ 176.483029][ T8220] ____sys_sendmsg+0x505/0x830 [ 176.483068][ T8220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.483110][ T8220] ? import_iovec+0x74/0xa0 [ 176.483137][ T8220] ___sys_sendmsg+0x21f/0x2a0 [ 176.483160][ T8220] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.483220][ T8220] ? __fget_files+0x2a/0x420 [ 176.483245][ T8220] ? __fget_files+0x3a0/0x420 [ 176.483283][ T8220] __x64_sys_sendmsg+0x19b/0x260 [ 176.483305][ T8220] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.483335][ T8220] ? __pfx_ksys_write+0x10/0x10 [ 176.483355][ T8220] ? rcu_is_watching+0x15/0xb0 [ 176.483383][ T8220] ? do_syscall_64+0xbe/0x3b0 [ 176.483414][ T8220] do_syscall_64+0xfa/0x3b0 [ 176.483438][ T8220] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.483463][ T8220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.483483][ T8220] ? clear_bhb_loop+0x60/0xb0 [ 176.483507][ T8220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.483526][ T8220] RIP: 0033:0x7fef4058e929 [ 176.483544][ T8220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.483560][ T8220] RSP: 002b:00007fef4139f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.483580][ T8220] RAX: ffffffffffffffda RBX: 00007fef407b5fa0 RCX: 00007fef4058e929 [ 176.483594][ T8220] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 176.483606][ T8220] RBP: 00007fef4139f090 R08: 0000000000000000 R09: 0000000000000000 [ 176.483618][ T8220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.483630][ T8220] R13: 0000000000000000 R14: 00007fef407b5fa0 R15: 00007ffd9e1579d8 [ 176.483663][ T8220] [ 177.289208][ T8238] FAULT_INJECTION: forcing a failure. [ 177.289208][ T8238] name failslab, interval 1, probability 0, space 0, times 0 [ 177.356194][ T8238] CPU: 1 UID: 0 PID: 8238 Comm: syz.0.625 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 177.356226][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.356239][ T8238] Call Trace: [ 177.356248][ T8238] [ 177.356257][ T8238] dump_stack_lvl+0x189/0x250 [ 177.356286][ T8238] ? __pfx____ratelimit+0x10/0x10 [ 177.356319][ T8238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.356344][ T8238] ? __pfx__printk+0x10/0x10 [ 177.356374][ T8238] ? __pfx___might_resched+0x10/0x10 [ 177.356398][ T8238] ? fs_reclaim_acquire+0x7d/0x100 [ 177.356433][ T8238] should_fail_ex+0x414/0x560 [ 177.356468][ T8238] should_failslab+0xa8/0x100 [ 177.356496][ T8238] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 177.356521][ T8238] ? __alloc_skb+0x112/0x2d0 [ 177.356554][ T8238] __alloc_skb+0x112/0x2d0 [ 177.356587][ T8238] alloc_skb_with_frags+0xca/0x890 [ 177.356622][ T8238] ? __lock_acquire+0xab9/0xd20 [ 177.356652][ T8238] sock_alloc_send_pskb+0x857/0x990 [ 177.356695][ T8238] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 177.356748][ T8238] ? dev_get_by_index+0x22/0x2e0 [ 177.356770][ T8238] ? dev_get_by_index+0x22/0x2e0 [ 177.356801][ T8238] packet_sendmsg+0x3672/0x53f0 [ 177.356835][ T8238] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 177.356893][ T8238] ? __pfx___might_resched+0x10/0x10 [ 177.356917][ T8238] ? __lock_acquire+0xab9/0xd20 [ 177.356950][ T8238] ? __pfx_packet_sendmsg+0x10/0x10 [ 177.356966][ T8238] ? aa_sk_perm+0x81e/0x950 [ 177.357000][ T8238] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 177.357028][ T8238] ? aa_sock_msg_perm+0x94/0x160 [ 177.357058][ T8238] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.357089][ T8238] ? __pfx_packet_sendmsg+0x10/0x10 [ 177.357109][ T8238] __sock_sendmsg+0x219/0x270 [ 177.357137][ T8238] __sys_sendto+0x3bd/0x520 [ 177.357169][ T8238] ? __pfx___sys_sendto+0x10/0x10 [ 177.357195][ T8238] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 177.357237][ T8238] ? __fget_files+0x3a0/0x420 [ 177.357276][ T8238] ? ksys_write+0x22a/0x250 [ 177.357302][ T8238] ? __pfx_ksys_write+0x10/0x10 [ 177.357321][ T8238] ? rcu_is_watching+0x15/0xb0 [ 177.357349][ T8238] __x64_sys_sendto+0xde/0x100 [ 177.357383][ T8238] do_syscall_64+0xfa/0x3b0 [ 177.357408][ T8238] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.357433][ T8238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.357453][ T8238] ? clear_bhb_loop+0x60/0xb0 [ 177.357477][ T8238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.357496][ T8238] RIP: 0033:0x7faf38d8e929 [ 177.357515][ T8238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.357533][ T8238] RSP: 002b:00007faf39b99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 177.357555][ T8238] RAX: ffffffffffffffda RBX: 00007faf38fb5fa0 RCX: 00007faf38d8e929 [ 177.357570][ T8238] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000003 [ 177.357582][ T8238] RBP: 00007faf39b99090 R08: 0000200000000200 R09: 0000000000000014 [ 177.357597][ T8238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.357608][ T8238] R13: 0000000000000000 R14: 00007faf38fb5fa0 R15: 00007fff26f3ac88 [ 177.357638][ T8238] [ 177.714576][ T8241] netlink: 'syz.4.624': attribute type 13 has an invalid length. [ 177.727482][ T8241] netlink: 'syz.4.624': attribute type 17 has an invalid length. [ 177.993352][ T8241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.257600][ T8253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.316771][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.628'. [ 178.365615][ T8241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.405285][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 178.463200][ T8254] netlink: 32 bytes leftover after parsing attributes in process `syz.0.628'. [ 178.489253][ T8248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.502885][ T8256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.629'. [ 178.515612][ T8252] netlink: 312 bytes leftover after parsing attributes in process `syz.0.628'. [ 178.525066][ T8256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.629'. [ 178.562704][ T8256] netlink: 'syz.2.629': attribute type 13 has an invalid length. [ 178.623251][ T8256] gretap0: refused to change device tx_queue_len [ 178.704977][ T8256] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 178.950199][ T8269] xt_ecn: cannot match TCP bits for non-tcp packets [ 179.115220][ T8275] netlink: 'syz.0.635': attribute type 10 has an invalid length. [ 179.123310][ T8275] netlink: 40 bytes leftover after parsing attributes in process `syz.0.635'. [ 179.439882][ T8281] netlink: 'syz.0.637': attribute type 13 has an invalid length. [ 179.474480][ T8281] netlink: 'syz.0.637': attribute type 17 has an invalid length. [ 179.565342][ T8281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.844600][ T8281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.541051][ T8117] Set syz1 is full, maxelem 65536 reached [ 180.621203][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 180.630360][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.643'. [ 180.819288][ T8309] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 180.961849][ T8316] netlink: 'syz.0.644': attribute type 13 has an invalid length. [ 180.979897][ T8316] netlink: 'syz.0.644': attribute type 17 has an invalid length. [ 181.131124][ T8316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.310707][ T8329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.315433][ T8324] syzkaller0: left promiscuous mode [ 181.332053][ T8324] syzkaller0: left allmulticast mode [ 181.387286][ T8329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.511664][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 181.596374][ T8336] netlink: 40 bytes leftover after parsing attributes in process `syz.2.651'. [ 181.598300][ T8337] netlink: 'syz.3.652': attribute type 1 has an invalid length. [ 181.698719][ T8338] netlink: 'syz.4.653': attribute type 9 has an invalid length. [ 181.808546][ T8338] netlink: 'syz.4.653': attribute type 7 has an invalid length. [ 181.816407][ T8338] netlink: 'syz.4.653': attribute type 8 has an invalid length. [ 182.293245][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.657'. [ 182.660193][ T8368] netlink: 40 bytes leftover after parsing attributes in process `syz.0.663'. [ 182.754497][ T8361] bridge0: entered promiscuous mode [ 182.787140][ T8361] vlan2: entered promiscuous mode [ 182.828315][ T8363] pim6reg1: entered promiscuous mode [ 182.834754][ T8363] pim6reg1: entered allmulticast mode [ 182.845398][ T8368] FAULT_INJECTION: forcing a failure. [ 182.845398][ T8368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.883990][ T8368] CPU: 0 UID: 0 PID: 8368 Comm: syz.0.663 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 182.884033][ T8368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.884046][ T8368] Call Trace: [ 182.884054][ T8368] [ 182.884063][ T8368] dump_stack_lvl+0x189/0x250 [ 182.884093][ T8368] ? __pfx____ratelimit+0x10/0x10 [ 182.884122][ T8368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.884147][ T8368] ? __pfx__printk+0x10/0x10 [ 182.884188][ T8368] should_fail_ex+0x414/0x560 [ 182.884220][ T8368] _copy_to_user+0x31/0xb0 [ 182.884243][ T8368] simple_read_from_buffer+0xe1/0x170 [ 182.884270][ T8368] proc_fail_nth_read+0x1df/0x250 [ 182.884298][ T8368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.884325][ T8368] ? rw_verify_area+0x258/0x650 [ 182.884343][ T8368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.884368][ T8368] vfs_read+0x200/0x980 [ 182.884417][ T8368] ? __pfx___mutex_lock+0x10/0x10 [ 182.884443][ T8368] ? __pfx_vfs_read+0x10/0x10 [ 182.884464][ T8368] ? __fget_files+0x2a/0x420 [ 182.884492][ T8368] ? __fget_files+0x3a0/0x420 [ 182.884513][ T8368] ? __fget_files+0x2a/0x420 [ 182.884545][ T8368] ksys_read+0x145/0x250 [ 182.884568][ T8368] ? __pfx_ksys_read+0x10/0x10 [ 182.884585][ T8368] ? rcu_is_watching+0x15/0xb0 [ 182.884611][ T8368] ? do_syscall_64+0xbe/0x3b0 [ 182.884639][ T8368] do_syscall_64+0xfa/0x3b0 [ 182.884661][ T8368] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.884684][ T8368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.884701][ T8368] ? clear_bhb_loop+0x60/0xb0 [ 182.884735][ T8368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.884752][ T8368] RIP: 0033:0x7faf38d8d33c [ 182.884768][ T8368] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 182.884792][ T8368] RSP: 002b:00007faf39b99030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.884812][ T8368] RAX: ffffffffffffffda RBX: 00007faf38fb5fa0 RCX: 00007faf38d8d33c [ 182.884825][ T8368] RDX: 000000000000000f RSI: 00007faf39b990a0 RDI: 0000000000000004 [ 182.884836][ T8368] RBP: 00007faf39b99090 R08: 0000000000000000 R09: 0000000000000000 [ 182.884846][ T8368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.884856][ T8368] R13: 0000000000000000 R14: 00007faf38fb5fa0 R15: 00007fff26f3ac88 [ 182.884886][ T8368] [ 183.374874][ T8376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.666'. [ 183.449315][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 183.503068][ T8376] netlink: 32 bytes leftover after parsing attributes in process `syz.0.666'. [ 183.514019][ T8376] netlink: 312 bytes leftover after parsing attributes in process `syz.0.666'. [ 183.996867][ T8392] netlink: 'syz.3.669': attribute type 3 has an invalid length. [ 184.969686][ T8417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.049585][ T8418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.179655][ T8417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.758923][ T8440] tipc: Enabled bearer , priority 0 [ 185.767826][ T8440] syzkaller0: entered promiscuous mode [ 185.773929][ T8440] syzkaller0: entered allmulticast mode [ 186.313210][ T8434] tipc: Resetting bearer [ 186.367142][ T8434] tipc: Disabling bearer [ 186.639322][ T8461] ip6t_srh: unknown srh match flags 4000 [ 187.064158][ T8476] netlink: 'syz.0.694': attribute type 13 has an invalid length. [ 187.096297][ T8476] netlink: 'syz.0.694': attribute type 17 has an invalid length. [ 187.211849][ T8480] __nla_validate_parse: 2 callbacks suppressed [ 187.211870][ T8480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.693'. [ 187.504709][ T8486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.567626][ T8486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.711615][ T8476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.716699][ T8487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.059806][ T6303] IPVS: starting estimator thread 0... [ 188.159514][ T8496] IPVS: using max 25 ests per chain, 60000 per kthread [ 188.364252][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.689'. [ 188.418873][ T8464] nbd: must specify a size in bytes for the device [ 188.712532][ T8511] netlink: 'syz.3.700': attribute type 16 has an invalid length. [ 188.765332][ T8511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.700'. [ 188.834043][ T8505] can: request_module (can-proto-0) failed. [ 188.966089][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.703'. [ 188.988567][ T8515] netlink: 'syz.0.703': attribute type 1 has an invalid length. [ 188.997698][ T8515] netlink: 108 bytes leftover after parsing attributes in process `syz.0.703'. [ 189.687358][ T8534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.709'. [ 189.715924][ T8534] netlink: 32 bytes leftover after parsing attributes in process `syz.4.709'. [ 189.738177][ T8534] netlink: 'syz.4.709': attribute type 13 has an invalid length. [ 190.019068][ T8534] gretap0: refused to change device tx_queue_len [ 190.044035][ T8534] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 190.377299][ T8550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.715'. [ 190.453187][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 190.465563][ T8550] netlink: 32 bytes leftover after parsing attributes in process `syz.1.715'. [ 191.914016][ T8588] netlink: 'syz.1.723': attribute type 13 has an invalid length. [ 191.948552][ T8588] netlink: 'syz.1.723': attribute type 17 has an invalid length. [ 192.209263][ T8593] netlink: 'syz.3.726': attribute type 13 has an invalid length. [ 192.308545][ T8599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.331169][ T8588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.405551][ T8593] gretap0: refused to change device tx_queue_len [ 192.459661][ T8593] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 192.571521][ T8588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.575388][ T8604] IPv6: NLM_F_REPLACE set, but no existing node found! [ 192.659107][ T8604] __nla_validate_parse: 4 callbacks suppressed [ 192.659127][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.729'. [ 192.712589][ T8604] tipc: Enabling of bearer rejected, failed to enable media [ 192.732467][ T8588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.745463][ T8604] netlink: 32 bytes leftover after parsing attributes in process `syz.0.729'. [ 192.996644][ T8619] netlink: 'syz.0.732': attribute type 21 has an invalid length. [ 193.049055][ T8621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.732'. [ 193.072467][ T8619] netlink: 132 bytes leftover after parsing attributes in process `syz.0.732'. [ 193.073167][ T8621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.732'. [ 194.253492][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.521000][ T8648] FAULT_INJECTION: forcing a failure. [ 194.521000][ T8648] name failslab, interval 1, probability 0, space 0, times 0 [ 194.570645][ T8648] CPU: 0 UID: 0 PID: 8648 Comm: syz.0.739 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 194.570674][ T8648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.570687][ T8648] Call Trace: [ 194.570695][ T8648] [ 194.570704][ T8648] dump_stack_lvl+0x189/0x250 [ 194.570735][ T8648] ? __pfx____ratelimit+0x10/0x10 [ 194.570763][ T8648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.570789][ T8648] ? __pfx__printk+0x10/0x10 [ 194.570820][ T8648] ? __pfx___might_resched+0x10/0x10 [ 194.570845][ T8648] ? fs_reclaim_acquire+0x7d/0x100 [ 194.570880][ T8648] should_fail_ex+0x414/0x560 [ 194.570915][ T8648] should_failslab+0xa8/0x100 [ 194.570944][ T8648] __kmalloc_noprof+0xcb/0x4f0 [ 194.570966][ T8648] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 194.570989][ T8648] ? sock_kmalloc+0xd6/0x160 [ 194.571015][ T8648] sock_kmalloc+0xd6/0x160 [ 194.571039][ T8648] hash_recvmsg+0x1d4/0x840 [ 194.571076][ T8648] ? __pfx_hash_recvmsg+0x10/0x10 [ 194.571107][ T8648] sock_recvmsg_nosec+0x186/0x1c0 [ 194.571137][ T8648] ____sys_recvmsg+0x3aa/0x460 [ 194.571169][ T8648] ? __pfx_____sys_recvmsg+0x10/0x10 [ 194.571207][ T8648] ? import_iovec+0x74/0xa0 [ 194.571235][ T8648] ___sys_recvmsg+0x1b5/0x510 [ 194.571261][ T8648] ? __pfx____sys_recvmsg+0x10/0x10 [ 194.571316][ T8648] ? __might_fault+0xb0/0x130 [ 194.571344][ T8648] do_recvmmsg+0x307/0x770 [ 194.571373][ T8648] ? __pfx_do_recvmmsg+0x10/0x10 [ 194.571414][ T8648] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.571461][ T8648] __x64_sys_recvmmsg+0x190/0x240 [ 194.571485][ T8648] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 194.571504][ T8648] ? rcu_is_watching+0x15/0xb0 [ 194.571534][ T8648] ? do_syscall_64+0xbe/0x3b0 [ 194.571566][ T8648] do_syscall_64+0xfa/0x3b0 [ 194.571591][ T8648] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.571616][ T8648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.571636][ T8648] ? clear_bhb_loop+0x60/0xb0 [ 194.571660][ T8648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.571679][ T8648] RIP: 0033:0x7faf38d8e929 [ 194.571708][ T8648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.571725][ T8648] RSP: 002b:00007faf39b99038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 194.571746][ T8648] RAX: ffffffffffffffda RBX: 00007faf38fb5fa0 RCX: 00007faf38d8e929 [ 194.571760][ T8648] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000004 [ 194.571773][ T8648] RBP: 00007faf39b99090 R08: 0000000000000000 R09: 0000000000000000 [ 194.571785][ T8648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.571796][ T8648] R13: 0000000000000000 R14: 00007faf38fb5fa0 R15: 00007fff26f3ac88 [ 194.571827][ T8648] [ 194.856702][ T8653] netlink: 20 bytes leftover after parsing attributes in process `syz.4.741'. [ 194.865679][ T8653] netlink: 32 bytes leftover after parsing attributes in process `syz.4.741'. [ 194.877685][ T8653] netlink: 'syz.4.741': attribute type 13 has an invalid length. [ 194.885793][ T8653] gretap0: refused to change device tx_queue_len [ 194.893486][ T8653] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 195.183458][ T8664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.743'. [ 195.202673][ T8667] netlink: 80 bytes leftover after parsing attributes in process `syz.0.747'. [ 195.241446][ T8660] netlink: 'syz.4.744': attribute type 13 has an invalid length. [ 195.259854][ T8660] netlink: 'syz.4.744': attribute type 17 has an invalid length. [ 195.408461][ T8668] netlink: 'syz.3.746': attribute type 1 has an invalid length. [ 195.434211][ T8668] netlink: 224 bytes leftover after parsing attributes in process `syz.3.746'. [ 195.513560][ T8678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.575426][ T8660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.864790][ T8660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.958960][ T8660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.539810][ T8699] geneve1: entered promiscuous mode [ 196.545076][ T8699] geneve1: entered allmulticast mode [ 197.175916][ T8714] FAULT_INJECTION: forcing a failure. [ 197.175916][ T8714] name failslab, interval 1, probability 0, space 0, times 0 [ 197.202468][ T8714] CPU: 0 UID: 0 PID: 8714 Comm: syz.4.755 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 197.202498][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.202511][ T8714] Call Trace: [ 197.202520][ T8714] [ 197.202529][ T8714] dump_stack_lvl+0x189/0x250 [ 197.202560][ T8714] ? __pfx____ratelimit+0x10/0x10 [ 197.202604][ T8714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.202629][ T8714] ? __pfx__printk+0x10/0x10 [ 197.202663][ T8714] ? __pfx___might_resched+0x10/0x10 [ 197.202694][ T8714] should_fail_ex+0x414/0x560 [ 197.202728][ T8714] should_failslab+0xa8/0x100 [ 197.202757][ T8714] __kmalloc_noprof+0xcb/0x4f0 [ 197.202786][ T8714] ? __kasan_kmalloc+0x93/0xb0 [ 197.202807][ T8714] ? nla_strdup+0x9d/0x140 [ 197.202831][ T8714] nla_strdup+0x9d/0x140 [ 197.202854][ T8714] nf_tables_newtable+0x491/0x1890 [ 197.202884][ T8714] ? nfnetlink_has_listeners+0x31/0x50 [ 197.202927][ T8714] nfnetlink_rcv+0x112f/0x2520 [ 197.202984][ T8714] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 197.203025][ T8714] ? ref_tracker_free+0x63a/0x7d0 [ 197.203090][ T8714] ? __netlink_deliver_tap+0x807/0x850 [ 197.203134][ T8714] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.203162][ T8714] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.203197][ T8714] netlink_unicast+0x75c/0x8e0 [ 197.203242][ T8714] netlink_sendmsg+0x805/0xb30 [ 197.203281][ T8714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.203314][ T8714] ? aa_sock_msg_perm+0x94/0x160 [ 197.203353][ T8714] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.203383][ T8714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.203412][ T8714] __sock_sendmsg+0x219/0x270 [ 197.203441][ T8714] ____sys_sendmsg+0x505/0x830 [ 197.203483][ T8714] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.203526][ T8714] ? import_iovec+0x74/0xa0 [ 197.203554][ T8714] ___sys_sendmsg+0x21f/0x2a0 [ 197.203576][ T8714] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.203636][ T8714] ? __fget_files+0x2a/0x420 [ 197.203663][ T8714] ? __fget_files+0x3a0/0x420 [ 197.203702][ T8714] __x64_sys_sendmsg+0x19b/0x260 [ 197.203726][ T8714] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.203756][ T8714] ? __pfx_ksys_write+0x10/0x10 [ 197.203778][ T8714] ? rcu_is_watching+0x15/0xb0 [ 197.203808][ T8714] ? do_syscall_64+0xbe/0x3b0 [ 197.203842][ T8714] do_syscall_64+0xfa/0x3b0 [ 197.203868][ T8714] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.203894][ T8714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.203915][ T8714] ? clear_bhb_loop+0x60/0xb0 [ 197.203940][ T8714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.203960][ T8714] RIP: 0033:0x7fef4058e929 [ 197.203980][ T8714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.203998][ T8714] RSP: 002b:00007fef4139f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.204020][ T8714] RAX: ffffffffffffffda RBX: 00007fef407b5fa0 RCX: 00007fef4058e929 [ 197.204035][ T8714] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 197.204048][ T8714] RBP: 00007fef4139f090 R08: 0000000000000000 R09: 0000000000000000 [ 197.204060][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.204073][ T8714] R13: 0000000000000000 R14: 00007fef407b5fa0 R15: 00007ffd9e1579d8 [ 197.204106][ T8714] [ 197.765150][ T8719] netlink: 'syz.3.757': attribute type 13 has an invalid length. [ 197.813145][ T8719] netlink: 'syz.3.757': attribute type 17 has an invalid length. [ 198.045991][ T8719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.274172][ T8719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.353952][ T8719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.674880][ T8742] syzkaller0: entered promiscuous mode [ 198.697449][ T8742] syzkaller0: entered allmulticast mode [ 199.946435][ T8771] netlink: 'syz.1.770': attribute type 13 has an invalid length. [ 199.963700][ T8771] netlink: 'syz.1.770': attribute type 17 has an invalid length. [ 199.978208][ T8772] netlink: 'syz.3.769': attribute type 13 has an invalid length. [ 199.989112][ T8772] netlink: 'syz.3.769': attribute type 17 has an invalid length. [ 200.097329][ T8777] netlink: 'syz.4.771': attribute type 21 has an invalid length. [ 200.156577][ T8771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.172968][ T8782] __nla_validate_parse: 1 callbacks suppressed [ 200.172986][ T8782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.771'. [ 200.209313][ T8782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.771'. [ 200.235387][ T8781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.296031][ T8772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.321656][ T8777] netlink: 132 bytes leftover after parsing attributes in process `syz.4.771'. [ 200.396579][ T8771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.407903][ T8782] batadv_slave_1: entered promiscuous mode [ 200.421582][ T8782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.433061][ T8782] Cannot create hsr debugfs directory [ 200.486832][ T8771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.501191][ T8785] netlink: 44 bytes leftover after parsing attributes in process `syz.0.772'. [ 200.586792][ T8785] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 200.603919][ T8785] macsec1: entered promiscuous mode [ 200.618608][ T8785] macsec1: entered allmulticast mode [ 200.626403][ T8785] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 200.628179][ T8788] FAULT_INJECTION: forcing a failure. [ 200.628179][ T8788] name failslab, interval 1, probability 0, space 0, times 0 [ 200.679057][ T8764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.706791][ T8788] CPU: 1 UID: 0 PID: 8788 Comm: syz.4.773 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 200.706834][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.706846][ T8788] Call Trace: [ 200.706854][ T8788] [ 200.706863][ T8788] dump_stack_lvl+0x189/0x250 [ 200.706919][ T8788] ? __pfx____ratelimit+0x10/0x10 [ 200.706946][ T8788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.706971][ T8788] ? __pfx__printk+0x10/0x10 [ 200.707014][ T8788] should_fail_ex+0x414/0x560 [ 200.707050][ T8788] should_failslab+0xa8/0x100 [ 200.707079][ T8788] __kmalloc_cache_noprof+0x70/0x3d0 [ 200.707103][ T8788] ? sctp_add_bind_addr+0x8c/0x370 [ 200.707133][ T8788] sctp_add_bind_addr+0x8c/0x370 [ 200.707162][ T8788] sctp_copy_local_addr_list+0x30b/0x4e0 [ 200.707192][ T8788] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 200.707219][ T8788] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 200.707247][ T8788] ? sctp_v6_is_any+0x64/0x80 [ 200.707277][ T8788] ? sctp_copy_one_addr+0x93/0x360 [ 200.707306][ T8788] sctp_bind_addr_copy+0xb3/0x3c0 [ 200.707333][ T8788] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 200.707361][ T8788] sctp_connect_new_asoc+0x2e0/0x690 [ 200.707396][ T8788] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 200.707433][ T8788] ? sctp_get_af_specific+0x29/0x80 [ 200.707457][ T8788] ? sctp_inet6_send_verify+0x80/0x300 [ 200.707480][ T8788] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 200.707513][ T8788] __sctp_connect+0x5ba/0xd50 [ 200.707557][ T8788] ? __pfx___sctp_connect+0x10/0x10 [ 200.707585][ T8788] ? __local_bh_enable_ip+0x12d/0x1c0 [ 200.707608][ T8788] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.707635][ T8788] ? __local_bh_enable_ip+0x12d/0x1c0 [ 200.707657][ T8788] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 200.707677][ T8788] ? security_sctp_bind_connect+0x7e/0x2e0 [ 200.707708][ T8788] sctp_setsockopt_connectx+0x100/0x1b0 [ 200.707734][ T8788] sctp_setsockopt+0x6d9/0x1200 [ 200.707765][ T8788] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 200.707796][ T8788] do_sock_setsockopt+0x257/0x3e0 [ 200.707831][ T8788] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 200.707868][ T8788] ? __fget_files+0x2a/0x420 [ 200.707912][ T8788] __x64_sys_setsockopt+0x18b/0x220 [ 200.707952][ T8788] do_syscall_64+0xfa/0x3b0 [ 200.707978][ T8788] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.708005][ T8788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.708025][ T8788] ? clear_bhb_loop+0x60/0xb0 [ 200.708050][ T8788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.708070][ T8788] RIP: 0033:0x7fef4058e929 [ 200.708088][ T8788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.708106][ T8788] RSP: 002b:00007fef4139f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 200.708128][ T8788] RAX: ffffffffffffffda RBX: 00007fef407b5fa0 RCX: 00007fef4058e929 [ 200.708143][ T8788] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 200.708156][ T8788] RBP: 00007fef4139f090 R08: 000000000000002c R09: 0000000000000000 [ 200.708169][ T8788] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 200.708182][ T8788] R13: 0000000000000000 R14: 00007fef407b5fa0 R15: 00007ffd9e1579d8 [ 200.708215][ T8788] [ 201.177268][ T8790] FAULT_INJECTION: forcing a failure. [ 201.177268][ T8790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.218362][ T8790] CPU: 1 UID: 0 PID: 8790 Comm: syz.4.775 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 201.218393][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.218405][ T8790] Call Trace: [ 201.218414][ T8790] [ 201.218423][ T8790] dump_stack_lvl+0x189/0x250 [ 201.218453][ T8790] ? __pfx____ratelimit+0x10/0x10 [ 201.218481][ T8790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.218506][ T8790] ? __pfx__printk+0x10/0x10 [ 201.218534][ T8790] ? __might_fault+0xb0/0x130 [ 201.218567][ T8790] should_fail_ex+0x414/0x560 [ 201.218598][ T8790] _copy_from_user+0x2d/0xb0 [ 201.218624][ T8790] core_sys_select+0x4b7/0xa20 [ 201.218657][ T8790] ? __pfx_core_sys_select+0x10/0x10 [ 201.218708][ T8790] ? __pfx_set_user_sigmask+0x10/0x10 [ 201.218730][ T8790] ? do_sys_openat2+0x154/0x1c0 [ 201.218758][ T8790] ? kmem_cache_free+0x18f/0x400 [ 201.218791][ T8790] __se_sys_pselect6+0x27a/0x300 [ 201.218822][ T8790] ? __pfx___se_sys_pselect6+0x10/0x10 [ 201.218847][ T8790] ? __pfx_ksys_write+0x10/0x10 [ 201.218868][ T8790] ? rcu_is_watching+0x15/0xb0 [ 201.218898][ T8790] ? __x64_sys_pselect6+0x21/0xf0 [ 201.218938][ T8790] do_syscall_64+0xfa/0x3b0 [ 201.218964][ T8790] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.218990][ T8790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.219011][ T8790] ? clear_bhb_loop+0x60/0xb0 [ 201.219036][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.219055][ T8790] RIP: 0033:0x7fef4058e929 [ 201.219075][ T8790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.219093][ T8790] RSP: 002b:00007fef4139f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 201.219115][ T8790] RAX: ffffffffffffffda RBX: 00007fef407b5fa0 RCX: 00007fef4058e929 [ 201.219130][ T8790] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 201.219143][ T8790] RBP: 00007fef4139f090 R08: 0000000000000000 R09: 0000000000000000 [ 201.219156][ T8790] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 201.219169][ T8790] R13: 0000000000000000 R14: 00007fef407b5fa0 R15: 00007ffd9e1579d8 [ 201.219206][ T8790] [ 201.436465][ T8793] netlink: 'syz.2.774': attribute type 13 has an invalid length. [ 201.465192][ T8793] netlink: 'syz.2.774': attribute type 17 has an invalid length. [ 201.521925][ T8793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.716377][ T8791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.956375][ T8807] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 202.026772][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 202.067407][ T8809] netlink: 44 bytes leftover after parsing attributes in process `syz.3.781'. [ 202.108987][ T8809] netlink: 32 bytes leftover after parsing attributes in process `syz.3.781'. [ 202.121254][ T8809] netlink: 312 bytes leftover after parsing attributes in process `syz.3.781'. [ 202.528288][ T8831] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 202.549323][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.787'. [ 202.551068][ T8829] netlink: 'syz.2.786': attribute type 1 has an invalid length. [ 202.580096][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.787'. [ 202.780747][ T8839] bond2: (slave geneve2): Opening slave failed [ 202.836995][ T8828] !: entered promiscuous mode [ 202.851237][ T8828] team0: entered promiscuous mode [ 202.870364][ T8828] hsr2: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 202.914368][ T8829] bond2: (slave ip6gretap1): making interface the new active one [ 202.947569][ T8829] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 202.964202][ T8842] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.195625][ T8851] raw_sendmsg: syz.4.791 forgot to set AF_INET. Fix it! [ 203.333665][ T8848] pimreg: entered allmulticast mode [ 203.654294][ T8872] netlink: 'syz.4.796': attribute type 30 has an invalid length. [ 203.682353][ T8872] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 203.763840][ T8872] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 203.787487][ T30] audit: type=1804 audit(1752300616.731:3): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.798" name="/newroot/151/cgroup.controllers" dev="tmpfs" ino=793 res=1 errno=0 [ 203.870832][ T30] audit: type=1800 audit(1752300616.731:4): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.798" name="cgroup.controllers" dev="tmpfs" ino=793 res=0 errno=0 [ 203.912300][ T8884] netlink: 'syz.0.799': attribute type 21 has an invalid length. [ 203.932561][ T8884] netlink: 'syz.0.799': attribute type 4 has an invalid length. [ 205.309633][ T7728] IPVS: starting estimator thread 0... [ 205.439476][ T8927] IPVS: using max 32 ests per chain, 76800 per kthread [ 205.510496][ T8934] FAULT_INJECTION: forcing a failure. [ 205.510496][ T8934] name failslab, interval 1, probability 0, space 0, times 0 [ 205.544699][ T8934] CPU: 0 UID: 0 PID: 8934 Comm: syz.1.812 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 205.544731][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.544744][ T8934] Call Trace: [ 205.544756][ T8934] [ 205.544766][ T8934] dump_stack_lvl+0x189/0x250 [ 205.544797][ T8934] ? __pfx____ratelimit+0x10/0x10 [ 205.544826][ T8934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.544851][ T8934] ? __pfx__printk+0x10/0x10 [ 205.544883][ T8934] ? __pfx___might_resched+0x10/0x10 [ 205.544908][ T8934] ? fs_reclaim_acquire+0x7d/0x100 [ 205.544942][ T8934] should_fail_ex+0x414/0x560 [ 205.544978][ T8934] should_failslab+0xa8/0x100 [ 205.545007][ T8934] __kmalloc_noprof+0xcb/0x4f0 [ 205.545031][ T8934] ? tomoyo_encode+0x28b/0x550 [ 205.545056][ T8934] tomoyo_encode+0x28b/0x550 [ 205.545082][ T8934] tomoyo_realpath_from_path+0x58d/0x5d0 [ 205.545105][ T8934] ? tomoyo_domain+0xd9/0x130 [ 205.545132][ T8934] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 205.545160][ T8934] tomoyo_path_number_perm+0x1e8/0x5a0 [ 205.545192][ T8934] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 205.545246][ T8934] ? __lock_acquire+0xab9/0xd20 [ 205.545291][ T8934] ? __fget_files+0x2a/0x420 [ 205.545323][ T8934] ? __fget_files+0x2a/0x420 [ 205.545349][ T8934] ? __fget_files+0x3a0/0x420 [ 205.545373][ T8934] ? __fget_files+0x2a/0x420 [ 205.545405][ T8934] security_file_ioctl+0xcb/0x2d0 [ 205.545433][ T8934] __se_sys_ioctl+0x47/0x170 [ 205.545459][ T8934] do_syscall_64+0xfa/0x3b0 [ 205.545487][ T8934] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.545514][ T8934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.545534][ T8934] ? clear_bhb_loop+0x60/0xb0 [ 205.545560][ T8934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.545580][ T8934] RIP: 0033:0x7fc38e18e929 [ 205.545598][ T8934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.545616][ T8934] RSP: 002b:00007fc38ef16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.545639][ T8934] RAX: ffffffffffffffda RBX: 00007fc38e3b6080 RCX: 00007fc38e18e929 [ 205.545654][ T8934] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000003 [ 205.545667][ T8934] RBP: 00007fc38ef16090 R08: 0000000000000000 R09: 0000000000000000 [ 205.545680][ T8934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.545692][ T8934] R13: 0000000000000000 R14: 00007fc38e3b6080 R15: 00007ffd8b31a338 [ 205.545725][ T8934] [ 205.545945][ T8934] ERROR: Out of memory at tomoyo_realpath_from_path. [ 206.331977][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 206.643848][ T8910] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 206.720867][ T8934] syzkaller0: mtu greater than device maximum [ 206.804031][ T36] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.822911][ T36] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.858466][ T36] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.867879][ T36] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.933635][ T36] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.942813][ T36] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.960709][ T8948] __nla_validate_parse: 6 callbacks suppressed [ 206.960727][ T8948] netlink: 20 bytes leftover after parsing attributes in process `syz.3.813'. [ 206.972431][ T36] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.985645][ T36] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.003031][ T8948] netlink: 32 bytes leftover after parsing attributes in process `syz.3.813'. [ 207.015232][ T8949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.814'. [ 207.043024][ T8949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.814'. [ 207.058484][ T8948] netlink: 'syz.3.813': attribute type 13 has an invalid length. [ 207.072454][ T8949] netlink: 'syz.1.814': attribute type 13 has an invalid length. [ 207.177230][ T8948] gretap0: refused to change device tx_queue_len [ 207.184192][ T8948] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 207.293076][ T8949] gretap0: refused to change device tx_queue_len [ 207.318203][ T8949] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 207.525954][ T8962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.818'. [ 207.593143][ T8962] netlink: 100 bytes leftover after parsing attributes in process `syz.3.818'. [ 208.048036][ T8975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.823'. [ 208.058194][ T8975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.823'. [ 208.338885][ T8983] netlink: 'syz.2.826': attribute type 1 has an invalid length. [ 208.356179][ T8983] netlink: 172 bytes leftover after parsing attributes in process `syz.2.826'. [ 208.376390][ T8983] netlink: 'syz.2.826': attribute type 1 has an invalid length. [ 208.403490][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'. [ 208.592216][ T8988] IPv6: Can't replace route, no match found [ 210.498443][ T9034] vlan2: entered promiscuous mode [ 210.718851][ T9040] netlink: 'syz.4.839': attribute type 13 has an invalid length. [ 210.749929][ T9040] netlink: 'syz.4.839': attribute type 17 has an invalid length. [ 210.882298][ T9044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.894581][ T9040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.009641][ T9040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.110712][ T9040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.228945][ T9053] netlink: 'syz.2.841': attribute type 13 has an invalid length. [ 211.249777][ T9053] netlink: 'syz.2.841': attribute type 17 has an invalid length. [ 211.322050][ T9053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.539265][ T9063] netlink: 'syz.0.845': attribute type 1 has an invalid length. [ 211.691474][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 211.692458][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 211.697533][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 211.772185][ T9047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.132562][ T9081] FAULT_INJECTION: forcing a failure. [ 212.132562][ T9081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.146813][ T9081] CPU: 0 UID: 0 PID: 9081 Comm: syz.4.851 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 212.146852][ T9081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.146864][ T9081] Call Trace: [ 212.146873][ T9081] [ 212.146882][ T9081] dump_stack_lvl+0x189/0x250 [ 212.146912][ T9081] ? __pfx____ratelimit+0x10/0x10 [ 212.146940][ T9081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.146965][ T9081] ? __pfx__printk+0x10/0x10 [ 212.146993][ T9081] ? __might_fault+0xb0/0x130 [ 212.147029][ T9081] should_fail_ex+0x414/0x560 [ 212.147071][ T9081] _copy_from_iter+0x1db/0x16f0 [ 212.147096][ T9081] ? rcu_is_watching+0x15/0xb0 [ 212.147122][ T9081] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 212.147149][ T9081] ? __pfx__copy_from_iter+0x10/0x10 [ 212.147171][ T9081] ? __build_skb_around+0x257/0x3e0 [ 212.147205][ T9081] ? netlink_sendmsg+0x642/0xb30 [ 212.147231][ T9081] ? skb_put+0x11b/0x210 [ 212.147265][ T9081] netlink_sendmsg+0x6b2/0xb30 [ 212.147304][ T9081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.147337][ T9081] ? aa_sock_msg_perm+0x94/0x160 [ 212.147369][ T9081] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.147400][ T9081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.147429][ T9081] __sock_sendmsg+0x219/0x270 [ 212.147458][ T9081] ____sys_sendmsg+0x505/0x830 [ 212.147495][ T9081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.147538][ T9081] ? import_iovec+0x74/0xa0 [ 212.147565][ T9081] ___sys_sendmsg+0x21f/0x2a0 [ 212.147593][ T9081] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.147653][ T9081] ? __fget_files+0x2a/0x420 [ 212.147679][ T9081] ? __fget_files+0x3a0/0x420 [ 212.147722][ T9081] __x64_sys_sendmsg+0x19b/0x260 [ 212.147744][ T9081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.147775][ T9081] ? __pfx_ksys_write+0x10/0x10 [ 212.147794][ T9081] ? rcu_is_watching+0x15/0xb0 [ 212.147824][ T9081] ? do_syscall_64+0xbe/0x3b0 [ 212.147857][ T9081] do_syscall_64+0xfa/0x3b0 [ 212.147882][ T9081] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.147909][ T9081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.147929][ T9081] ? clear_bhb_loop+0x60/0xb0 [ 212.147954][ T9081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.147973][ T9081] RIP: 0033:0x7fef4058e929 [ 212.147992][ T9081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.148009][ T9081] RSP: 002b:00007fef4139f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.148031][ T9081] RAX: ffffffffffffffda RBX: 00007fef407b5fa0 RCX: 00007fef4058e929 [ 212.148062][ T9081] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: 0000000000000003 [ 212.148075][ T9081] RBP: 00007fef4139f090 R08: 0000000000000000 R09: 0000000000000000 [ 212.148088][ T9081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.148100][ T9081] R13: 0000000000000000 R14: 00007fef407b5fa0 R15: 00007ffd9e1579d8 [ 212.148132][ T9081] [ 212.483983][ T9083] netlink: 'syz.4.852': attribute type 1 has an invalid length. [ 212.493492][ T9083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.901214][ T9101] netlink: 'syz.3.853': attribute type 13 has an invalid length. [ 212.915198][ T9101] netlink: 'syz.3.853': attribute type 17 has an invalid length. [ 213.138113][ T9108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.276612][ T9111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.495610][ T9101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.022085][ T9130] FAULT_INJECTION: forcing a failure. [ 214.022085][ T9130] name failslab, interval 1, probability 0, space 0, times 0 [ 214.152675][ T9130] CPU: 0 UID: 0 PID: 9130 Comm: syz.4.863 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 214.152718][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.152730][ T9130] Call Trace: [ 214.152738][ T9130] [ 214.152748][ T9130] dump_stack_lvl+0x189/0x250 [ 214.152786][ T9130] ? __pfx____ratelimit+0x10/0x10 [ 214.152813][ T9130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.152837][ T9130] ? __pfx__printk+0x10/0x10 [ 214.152871][ T9130] ? __pfx___might_resched+0x10/0x10 [ 214.152899][ T9130] should_fail_ex+0x414/0x560 [ 214.152934][ T9130] should_failslab+0xa8/0x100 [ 214.152961][ T9130] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 214.152987][ T9130] ? __alloc_skb+0x112/0x2d0 [ 214.153025][ T9130] __alloc_skb+0x112/0x2d0 [ 214.153057][ T9130] netlink_sendmsg+0x5c6/0xb30 [ 214.153096][ T9130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.153128][ T9130] ? aa_sock_msg_perm+0x94/0x160 [ 214.153158][ T9130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.153187][ T9130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.153215][ T9130] __sock_sendmsg+0x219/0x270 [ 214.153242][ T9130] ____sys_sendmsg+0x505/0x830 [ 214.153279][ T9130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.153321][ T9130] ? import_iovec+0x74/0xa0 [ 214.153348][ T9130] ___sys_sendmsg+0x21f/0x2a0 [ 214.153370][ T9130] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.153428][ T9130] ? __fget_files+0x2a/0x420 [ 214.153454][ T9130] ? __fget_files+0x3a0/0x420 [ 214.153490][ T9130] __x64_sys_sendmsg+0x19b/0x260 [ 214.153512][ T9130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.153542][ T9130] ? __pfx_ksys_write+0x10/0x10 [ 214.153570][ T9130] ? do_syscall_64+0xbe/0x3b0 [ 214.153601][ T9130] do_syscall_64+0xfa/0x3b0 [ 214.153626][ T9130] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.153652][ T9130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.153671][ T9130] ? clear_bhb_loop+0x60/0xb0 [ 214.153696][ T9130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.153715][ T9130] RIP: 0033:0x7fef4058e929 [ 214.153733][ T9130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.153750][ T9130] RSP: 002b:00007fef4139f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.153780][ T9130] RAX: ffffffffffffffda RBX: 00007fef407b5fa0 RCX: 00007fef4058e929 [ 214.153795][ T9130] RDX: 0000000000040880 RSI: 0000200000000280 RDI: 0000000000000004 [ 214.153808][ T9130] RBP: 00007fef4139f090 R08: 0000000000000000 R09: 0000000000000000 [ 214.153820][ T9130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.153832][ T9130] R13: 0000000000000000 R14: 00007fef407b5fa0 R15: 00007ffd9e1579d8 [ 214.153863][ T9130] [ 214.819165][ T9146] netlink: 'syz.4.870': attribute type 4 has an invalid length. [ 215.505920][ T9172] __nla_validate_parse: 8 callbacks suppressed [ 215.505944][ T9172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.879'. [ 215.558824][ T9172] netlink: 'syz.4.879': attribute type 12 has an invalid length. [ 216.334667][ T9194] FAULT_INJECTION: forcing a failure. [ 216.334667][ T9194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.365136][ T9193] !: renamed from dummy0 (while UP) [ 216.407370][ T9194] CPU: 0 UID: 0 PID: 9194 Comm: syz.0.886 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 216.407400][ T9194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.407413][ T9194] Call Trace: [ 216.407421][ T9194] [ 216.407430][ T9194] dump_stack_lvl+0x189/0x250 [ 216.407479][ T9194] ? __pfx____ratelimit+0x10/0x10 [ 216.407508][ T9194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.407533][ T9194] ? __pfx__printk+0x10/0x10 [ 216.407576][ T9194] should_fail_ex+0x414/0x560 [ 216.407620][ T9194] _copy_to_user+0x31/0xb0 [ 216.407648][ T9194] sk_getsockopt+0x19dd/0x2530 [ 216.407695][ T9194] ? __pfx_sk_getsockopt+0x10/0x10 [ 216.407723][ T9194] ? do_syscall_64+0x40/0x3b0 [ 216.407765][ T9194] ? __lock_acquire+0xab9/0xd20 [ 216.407799][ T9194] ? __might_fault+0xb0/0x130 [ 216.407847][ T9194] do_sock_getsockopt+0x275/0x650 [ 216.407878][ T9194] ? do_syscall_64+0x40/0x3b0 [ 216.407910][ T9194] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 216.407941][ T9194] ? do_syscall_64+0x40/0x3b0 [ 216.407968][ T9194] ? __fget_files+0x3a0/0x420 [ 216.407993][ T9194] ? __fget_files+0x2a/0x420 [ 216.408028][ T9194] __x64_sys_getsockopt+0x1a5/0x250 [ 216.408059][ T9194] ? do_syscall_64+0x40/0x3b0 [ 216.408089][ T9194] ? do_syscall_64+0x40/0x3b0 [ 216.408120][ T9194] do_syscall_64+0xfa/0x3b0 [ 216.408147][ T9194] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.408173][ T9194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.408193][ T9194] ? clear_bhb_loop+0x60/0xb0 [ 216.408218][ T9194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.408239][ T9194] RIP: 0033:0x7faf38d8e929 [ 216.408259][ T9194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.408276][ T9194] RSP: 002b:00007faf39b99038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 216.408298][ T9194] RAX: ffffffffffffffda RBX: 00007faf38fb5fa0 RCX: 00007faf38d8e929 [ 216.408313][ T9194] RDX: 0000000000000025 RSI: 0000000000000001 RDI: 0000000000000003 [ 216.408325][ T9194] RBP: 00007faf39b99090 R08: 0000200000000000 R09: 0000000000000000 [ 216.408340][ T9194] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 216.408353][ T9194] R13: 0000000000000000 R14: 00007faf38fb5fa0 R15: 00007fff26f3ac88 [ 216.408386][ T9194] [ 217.419776][ T9232] pim6reg1: entered promiscuous mode [ 217.478324][ T9232] pim6reg1: entered allmulticast mode [ 217.971023][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.894'. [ 217.995617][ T9259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.893'. [ 218.006671][ T9265] sch_fq: defrate 0 ignored. [ 218.012204][ T9259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.893'. [ 218.044344][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 218.107588][ T9271] netlink: 20 bytes leftover after parsing attributes in process `syz.4.897'. [ 218.110743][ T9261] netlink: 32 bytes leftover after parsing attributes in process `syz.0.894'. [ 218.117624][ T9271] netlink: 32 bytes leftover after parsing attributes in process `syz.4.897'. [ 218.139124][ T9271] netlink: 'syz.4.897': attribute type 13 has an invalid length. [ 218.164859][ T9261] netlink: 32 bytes leftover after parsing attributes in process `syz.0.894'. [ 218.210899][ T9261] netlink: 312 bytes leftover after parsing attributes in process `syz.0.894'. [ 218.454746][ T9271] gretap0: refused to change device tx_queue_len [ 218.515870][ T9271] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 218.992145][ T9293] netlink: 'syz.2.903': attribute type 21 has an invalid length. [ 219.121709][ T9295] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 219.456649][ T9315] netlink: 'syz.1.908': attribute type 13 has an invalid length. [ 219.514988][ T9315] netlink: 'syz.1.908': attribute type 17 has an invalid length. [ 219.600456][ T9313] can: request_module (can-proto-3) failed. [ 219.737990][ T9315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.820623][ T9336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.971026][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.053855][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.365976][ T9349] netlink: 'syz.2.919': attribute type 1 has an invalid length. [ 220.536218][ C0] Unknown status report in ack skb [ 221.182013][ T9384] netlink: 'syz.1.927': attribute type 1 has an invalid length. [ 221.263117][ T9384] __nla_validate_parse: 16 callbacks suppressed [ 221.263139][ T9384] netlink: 224 bytes leftover after parsing attributes in process `syz.1.927'. [ 221.346902][ T9387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.927'. [ 221.379502][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 221.687367][ T9395] FAULT_INJECTION: forcing a failure. [ 221.687367][ T9395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.717142][ T9395] CPU: 1 UID: 0 PID: 9395 Comm: syz.3.935 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 221.717177][ T9395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.717190][ T9395] Call Trace: [ 221.717199][ T9395] [ 221.717208][ T9395] dump_stack_lvl+0x189/0x250 [ 221.717239][ T9395] ? __pfx____ratelimit+0x10/0x10 [ 221.717267][ T9395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.717292][ T9395] ? __pfx__printk+0x10/0x10 [ 221.717321][ T9395] ? __might_fault+0xb0/0x130 [ 221.717357][ T9395] should_fail_ex+0x414/0x560 [ 221.717392][ T9395] _copy_from_iter+0x1db/0x16f0 [ 221.717424][ T9395] ? policy_nodemask+0x27c/0x720 [ 221.717449][ T9395] ? __pfx__copy_from_iter+0x10/0x10 [ 221.717477][ T9395] ? set_page_refcounted+0xa0/0x1e0 [ 221.717502][ T9395] ? page_copy_sane+0x4e/0x280 [ 221.717525][ T9395] copy_page_from_iter+0xdd/0x170 [ 221.717551][ T9395] tun_get_user+0x1d7b/0x3e20 [ 221.717585][ T9395] ? tun_get_user+0x6f6/0x3e20 [ 221.717620][ T9395] ? __pfx_tun_get_user+0x10/0x10 [ 221.717646][ T9395] ? aa_file_perm+0x11f/0xed0 [ 221.717666][ T9395] ? aa_file_perm+0x3e7/0xed0 [ 221.717711][ T9395] ? ref_tracker_alloc+0x318/0x460 [ 221.717738][ T9395] ? __lock_acquire+0xab9/0xd20 [ 221.717762][ T9395] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 221.717798][ T9395] ? tun_get+0x1c/0x2f0 [ 221.717826][ T9395] ? tun_get+0x1c/0x2f0 [ 221.717848][ T9395] ? tun_get+0x1c/0x2f0 [ 221.717875][ T9395] tun_chr_write_iter+0x113/0x200 [ 221.717901][ T9395] vfs_write+0x54b/0xa90 [ 221.717936][ T9395] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 221.717960][ T9395] ? __pfx_vfs_write+0x10/0x10 [ 221.717993][ T9395] ? __fget_files+0x2a/0x420 [ 221.718029][ T9395] ksys_write+0x145/0x250 [ 221.718054][ T9395] ? __pfx_ksys_write+0x10/0x10 [ 221.718073][ T9395] ? rcu_is_watching+0x15/0xb0 [ 221.718121][ T9395] ? do_syscall_64+0xbe/0x3b0 [ 221.718154][ T9395] do_syscall_64+0xfa/0x3b0 [ 221.718181][ T9395] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.718207][ T9395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.718227][ T9395] ? clear_bhb_loop+0x60/0xb0 [ 221.718252][ T9395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.718272][ T9395] RIP: 0033:0x7f95f6b8d3df [ 221.718291][ T9395] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 221.718308][ T9395] RSP: 002b:00007f95f79e2000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 221.718330][ T9395] RAX: ffffffffffffffda RBX: 00007f95f6db5fa0 RCX: 00007f95f6b8d3df [ 221.718357][ T9395] RDX: 000000000000003a RSI: 0000200000000080 RDI: 00000000000000c8 [ 221.718370][ T9395] RBP: 00007f95f79e2090 R08: 0000000000000000 R09: 0000000000000000 [ 221.718382][ T9395] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 221.718393][ T9395] R13: 0000000000000000 R14: 00007f95f6db5fa0 R15: 00007fff6ed39a08 [ 221.718425][ T9395] [ 222.035474][ T9398] netlink: 44 bytes leftover after parsing attributes in process `syz.2.933'. [ 222.068665][ T9399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.934'. [ 222.112580][ T9392] netlink: 'syz.0.934': attribute type 21 has an invalid length. [ 222.139882][ T9399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.934'. [ 222.248114][ T9392] netlink: 132 bytes leftover after parsing attributes in process `syz.0.934'. [ 222.359876][ T9405] veth0_to_team: entered promiscuous mode [ 222.391479][ T9405] veth0_to_team: entered allmulticast mode [ 222.443969][ T9406] netlink: 'syz.2.938': attribute type 13 has an invalid length. [ 222.452597][ T9406] netlink: 'syz.2.938': attribute type 17 has an invalid length. [ 222.517013][ T9406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.576370][ T9404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.642218][ T9404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.736057][ T9404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.916756][ T9422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.943'. [ 222.933728][ T9422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.943'. [ 222.964591][ T9422] dummy0: entered promiscuous mode [ 222.979480][ T9422] team0: entered promiscuous mode [ 222.986493][ T9422] debugfs: Directory 'hsr2' with parent 'hsr' already present! [ 222.998414][ T9422] Cannot create hsr debugfs directory [ 223.004799][ T9422] hsr2: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 223.358271][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 223.399818][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 223.411294][ T9441] netlink: 'syz.1.948': attribute type 13 has an invalid length. [ 223.419145][ T9441] netlink: 'syz.1.948': attribute type 17 has an invalid length. [ 223.438291][ T9440] netlink: 'syz.3.949': attribute type 1 has an invalid length. [ 223.504752][ T9441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.598349][ T9441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.691794][ T9453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.000260][ T9461] team0: entered promiscuous mode [ 224.008142][ T9461] bond0: entered promiscuous mode [ 224.033501][ T9461] debugfs: Directory 'hsr2' with parent 'hsr' already present! [ 224.047180][ T9461] Cannot create hsr debugfs directory [ 224.055599][ T9461] hsr2: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 224.087222][ T9461] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 224.109071][ T9463] team0: entered promiscuous mode [ 224.119265][ T9463] bond0: entered promiscuous mode [ 224.127566][ T9463] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 224.135409][ T9463] Cannot create hsr debugfs directory [ 224.152384][ T9463] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 224.189927][ T9463] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 224.221129][ T9463] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 224.686615][ T9481] tipc: Started in network mode [ 224.692036][ T9481] tipc: Node identity fffffff7, cluster identity 4711 [ 224.698951][ T9481] tipc: Node number set to 4294967287 [ 225.408062][ T9506] netlink: 'syz.2.966': attribute type 1 has an invalid length. [ 226.556052][ T9536] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 226.624929][ T9536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.707417][ T9540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.732780][ T9540] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 226.749006][ T9540] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 226.849951][ T9536] gretap1: entered promiscuous mode [ 226.897479][ T9536] bond1: (slave gretap1): making interface the new active one [ 226.930394][ T9536] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 226.944936][ T9549] syz_tun: entered allmulticast mode [ 227.010778][ T9549] dvmrp8: entered allmulticast mode [ 227.135555][ T9548] syz_tun: left allmulticast mode [ 227.521779][ T9560] __nla_validate_parse: 10 callbacks suppressed [ 227.521798][ T9560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.984'. [ 227.544286][ T9560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.984'. [ 227.570133][ T9562] netlink: 'syz.4.985': attribute type 21 has an invalid length. [ 227.591887][ T9562] netlink: 132 bytes leftover after parsing attributes in process `syz.4.985'. [ 227.608026][ T9562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.985'. [ 227.618978][ T9562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.985'. [ 228.091666][ T9579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.190102][ T9579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.337279][ T9575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.554735][ T9604] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 228.953334][ T9610] wireguard0: entered promiscuous mode [ 228.958860][ T9610] wireguard0: entered allmulticast mode [ 229.012634][ T9610] netlink: 'syz.3.1001': attribute type 1 has an invalid length. [ 229.061848][ T9610] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1001'. [ 229.071417][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1002'. [ 229.072879][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1002'. [ 229.167839][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 229.187821][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 229.380046][ T9626] netlink: 'syz.0.1005': attribute type 13 has an invalid length. [ 229.454494][ T9626] netlink: 'syz.0.1005': attribute type 17 has an invalid length. [ 229.477875][ T9628] netlink: 'syz.4.1004': attribute type 13 has an invalid length. [ 229.510174][ T9628] netlink: 'syz.4.1004': attribute type 17 has an invalid length. [ 229.717473][ T9626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.765346][ T9626] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.800100][ T9636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.810461][ T9635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.846609][ T9626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.884602][ T9636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.013655][ T9636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.110374][ T9623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.130141][ T9628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 230.196096][ T9623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.280898][ T9650] netlink: 'syz.1.1012': attribute type 21 has an invalid length. [ 230.628339][ T9658] ipvlan2: entered promiscuous mode [ 232.121028][ T9692] FAULT_INJECTION: forcing a failure. [ 232.121028][ T9692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.147155][ T9692] CPU: 1 UID: 0 PID: 9692 Comm: syz.2.1025 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 232.147185][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.147198][ T9692] Call Trace: [ 232.147206][ T9692] [ 232.147215][ T9692] dump_stack_lvl+0x189/0x250 [ 232.147247][ T9692] ? __pfx____ratelimit+0x10/0x10 [ 232.147288][ T9692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.147313][ T9692] ? __pfx__printk+0x10/0x10 [ 232.147341][ T9692] ? __might_fault+0xb0/0x130 [ 232.147377][ T9692] should_fail_ex+0x414/0x560 [ 232.147409][ T9692] _copy_from_iter+0x1db/0x16f0 [ 232.147434][ T9692] ? rcu_is_watching+0x15/0xb0 [ 232.147460][ T9692] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 232.147486][ T9692] ? __pfx__copy_from_iter+0x10/0x10 [ 232.147508][ T9692] ? __build_skb_around+0x257/0x3e0 [ 232.147541][ T9692] ? netlink_sendmsg+0x642/0xb30 [ 232.147567][ T9692] ? skb_put+0x11b/0x210 [ 232.147600][ T9692] netlink_sendmsg+0x6b2/0xb30 [ 232.147638][ T9692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.147672][ T9692] ? aa_sock_msg_perm+0x94/0x160 [ 232.147701][ T9692] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.147729][ T9692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.147756][ T9692] __sock_sendmsg+0x219/0x270 [ 232.147786][ T9692] ____sys_sendmsg+0x505/0x830 [ 232.147824][ T9692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.147867][ T9692] ? import_iovec+0x74/0xa0 [ 232.147895][ T9692] ___sys_sendmsg+0x21f/0x2a0 [ 232.147917][ T9692] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.147975][ T9692] ? __fget_files+0x2a/0x420 [ 232.148000][ T9692] ? __fget_files+0x3a0/0x420 [ 232.148035][ T9692] __x64_sys_sendmsg+0x19b/0x260 [ 232.148176][ T9692] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 232.148219][ T9692] ? __pfx_ksys_write+0x10/0x10 [ 232.148239][ T9692] ? rcu_is_watching+0x15/0xb0 [ 232.148268][ T9692] ? do_syscall_64+0xbe/0x3b0 [ 232.148315][ T9692] do_syscall_64+0xfa/0x3b0 [ 232.148341][ T9692] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.148365][ T9692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.148386][ T9692] ? clear_bhb_loop+0x60/0xb0 [ 232.148410][ T9692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.148429][ T9692] RIP: 0033:0x7f402b78e929 [ 232.148452][ T9692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.148469][ T9692] RSP: 002b:00007f402c694038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.148491][ T9692] RAX: ffffffffffffffda RBX: 00007f402b9b5fa0 RCX: 00007f402b78e929 [ 232.148506][ T9692] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 232.148519][ T9692] RBP: 00007f402c694090 R08: 0000000000000000 R09: 0000000000000000 [ 232.148532][ T9692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.148544][ T9692] R13: 0000000000000000 R14: 00007f402b9b5fa0 R15: 00007fff351604f8 [ 232.148577][ T9692] [ 232.794441][ T9707] netlink: 'syz.0.1030': attribute type 21 has an invalid length. [ 232.812382][ T9702] netlink: 'syz.3.1029': attribute type 10 has an invalid length. [ 232.860950][ T9702] __nla_validate_parse: 7 callbacks suppressed [ 232.860968][ T9702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1029'. [ 232.865294][ T9707] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1030'. [ 232.900505][ T9710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1030'. [ 232.913934][ T9702] !: entered promiscuous mode [ 232.914267][ T9710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1030'. [ 232.918751][ T9702] !: entered allmulticast mode [ 232.925805][ T9702] bridge0: port 1(0!) entered blocking state [ 232.939088][ T9702] bridge0: port 1(0!) entered disabled state [ 232.950069][ T9702] bridge0: port 1(0!) entered blocking state [ 232.956402][ T9702] bridge0: port 1(0!) entered forwarding state [ 233.402141][ T9725] netlink: 'syz.1.1033': attribute type 13 has an invalid length. [ 233.429787][ T9725] netlink: 'syz.1.1033': attribute type 17 has an invalid length. [ 233.481789][ T9725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.721474][ T9725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.825625][ T9725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.928702][ T9741] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1040'. [ 233.978243][ T9741] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1040'. [ 234.081607][ T9744] bond2: (slave gretap1): making interface the new active one [ 234.091155][ T9744] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 234.774729][ T9759] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1045'. [ 234.866854][ T9764] validate_nla: 2 callbacks suppressed [ 234.866873][ T9764] netlink: 'syz.1.1047': attribute type 13 has an invalid length. [ 234.910296][ T9764] netlink: 'syz.1.1047': attribute type 17 has an invalid length. [ 234.998012][ T9759] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1045'. [ 235.052923][ T9764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.165899][ T9764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.237936][ T9764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.316847][ T9764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.099651][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'. [ 236.455556][ T9809] netlink: 'syz.1.1057': attribute type 21 has an invalid length. [ 236.466491][ T9809] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1057'. [ 236.516642][ T9809] netlink: 'syz.1.1057': attribute type 4 has an invalid length. [ 236.525937][ T9809] netlink: 'syz.1.1057': attribute type 5 has an invalid length. [ 236.842928][ T9815] netlink: 'syz.2.1059': attribute type 13 has an invalid length. [ 236.999504][ T9824] netlink: 'syz.1.1058': attribute type 1 has an invalid length. [ 237.100187][ T9815] gretap0: refused to change device tx_queue_len [ 237.106584][ T9815] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 237.342262][ T9832] netlink: 'syz.3.1063': attribute type 21 has an invalid length. [ 237.766606][ T9844] netlink: 'syz.3.1067': attribute type 21 has an invalid length. [ 237.891821][ T9847] __nla_validate_parse: 9 callbacks suppressed [ 237.891839][ T9847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1067'. [ 237.952556][ T9844] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1067'. [ 237.994442][ T9847] netlink: 'syz.3.1067': attribute type 7 has an invalid length. [ 238.021043][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'. [ 238.568420][ T9872] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1070'. [ 238.657416][ T9872] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1070'. [ 238.677311][ T9879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1072'. [ 238.707065][ T9879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1072'. [ 239.189033][ T51] non-paged memory [ 239.193215][ T51] list_del corruption, ffff888077632080->next is LIST_POISON1 (dead000000000100) [ 239.203134][ T51] ------------[ cut here ]------------ [ 239.208648][ T51] kernel BUG at lib/list_debug.c:58! [ 239.214056][ T51] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 239.220330][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 239.232332][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.242419][ T51] Workqueue: hci3 hci_conn_timeout [ 239.243277][ T9887] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 239.247549][ T51] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 239.247584][ T51] Code: 80 a1 e2 8b 48 89 de e8 70 b6 5f fc 90 0f 0b 4c 89 e7 e8 95 fb 3a fd 48 c7 c7 e0 a1 e2 8b 48 89 de 4c 89 e2 e8 53 b6 5f fc 90 <0f> 0b 4c 89 e7 e8 78 fb 3a fd 48 c7 c7 40 a2 e2 8b 48 89 de 4c 89 [ 239.285666][ T51] RSP: 0018:ffffc90000bb7980 EFLAGS: 00010246 [ 239.291751][ T51] RAX: 000000000000004e RBX: ffff888077632080 RCX: 157a499b6ed1dc00 [ 239.299734][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 239.307716][ T51] RBP: ffffffff8a7ed610 R08: 0000000000000003 R09: 0000000000000004 [ 239.315688][ T51] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: dead000000000100 [ 239.323669][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 239.331655][ T51] FS: 0000000000000000(0000) GS:ffff888125d11000(0000) knlGS:0000000000000000 [ 239.340659][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.347268][ T51] CR2: 00007f95f79e1f98 CR3: 0000000034a3e000 CR4: 00000000003526f0 [ 239.355239][ T51] Call Trace: [ 239.358527][ T51] [ 239.361467][ T51] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 239.367110][ T51] hci_cancel_connect_sync+0xc8/0x120 [ 239.372495][ T51] hci_abort_conn+0x191/0x330 [ 239.377264][ T51] ? process_scheduled_works+0x9ef/0x17b0 [ 239.382987][ T51] process_scheduled_works+0xae1/0x17b0 [ 239.388546][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 239.394538][ T51] worker_thread+0x8a0/0xda0 [ 239.399144][ T51] kthread+0x70e/0x8a0 [ 239.403239][ T51] ? __pfx_worker_thread+0x10/0x10 [ 239.408365][ T51] ? __pfx_kthread+0x10/0x10 [ 239.412970][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.418168][ T51] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.423368][ T51] ? __pfx_kthread+0x10/0x10 [ 239.427964][ T51] ret_from_fork+0x3fc/0x770 [ 239.432556][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 239.437673][ T51] ? __switch_to_asm+0x39/0x70 [ 239.442457][ T51] ? __switch_to_asm+0x33/0x70 [ 239.447227][ T51] ? __pfx_kthread+0x10/0x10 [ 239.451998][ T51] ret_from_fork_asm+0x1a/0x30 [ 239.456797][ T51] [ 239.459833][ T51] Modules linked in: [ 239.464222][ T51] ---[ end trace 0000000000000000 ]--- [ 239.470320][ T51] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 239.477700][ T51] Code: 80 a1 e2 8b 48 89 de e8 70 b6 5f fc 90 0f 0b 4c 89 e7 e8 95 fb 3a fd 48 c7 c7 e0 a1 e2 8b 48 89 de 4c 89 e2 e8 53 b6 5f fc 90 <0f> 0b 4c 89 e7 e8 78 fb 3a fd 48 c7 c7 40 a2 e2 8b 48 89 de 4c 89 [ 239.497419][ T51] RSP: 0018:ffffc90000bb7980 EFLAGS: 00010246 [ 239.498705][ T9887] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 239.503544][ T51] RAX: 000000000000004e RBX: ffff888077632080 RCX: 157a499b6ed1dc00 [ 239.503563][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 239.503574][ T51] RBP: ffffffff8a7ed610 R08: 0000000000000003 R09: 0000000000000004 [ 239.503586][ T51] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: dead000000000100 [ 239.503600][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 239.503615][ T51] FS: 0000000000000000(0000) GS:ffff888125d11000(0000) knlGS:0000000000000000 [ 239.503630][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.503642][ T51] CR2: 00007f95f79e1f98 CR3: 0000000034a3e000 CR4: 00000000003526f0 [ 239.574069][ T51] Kernel panic - not syncing: Fatal exception [ 239.580623][ T51] Kernel Offset: disabled [ 239.584963][ T51] Rebooting in 86400 seconds..