last executing test programs: 3.071150711s ago: executing program 0 (id=2313): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x8200, 0x5, 0x10001}, &(0x7f00000000c0)=0x10) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000200)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218249a862bf52c0293a8e690a6aeb210b42f6921718d9f91bed1de0ea23bfeab7e12bc4adfed4af46a12a2e6925f6a3b27d1e818304b1962eee588523e7d95b7574e3a744d4b41f8df0d929ce9a2533d46ca81af250f076b97ce5abc2f629916962d07ff2a2d17c4582916aae26f37f69f684cd6f4625a8101caca5adc74919f746b7c8fa4e919988697740c09b9e8316b22ad21edb6ffedb40c42951310f48393d330ee68e470e336901742428d007a257e70926dea379a2440d2eb0300"/257], 0x36) 2.825797377s ago: executing program 1 (id=2317): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendto$inet6(r0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0) 2.069432695s ago: executing program 1 (id=2322): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r2 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r3, 0x9}, 0x8) 2.009823815s ago: executing program 1 (id=2325): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x4c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x28d41828b69a67d5, 0x12141, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) 1.939963174s ago: executing program 1 (id=2326): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x7, 0x3}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 14) 1.488285779s ago: executing program 0 (id=2327): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.487959463s ago: executing program 4 (id=2328): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 1.434553833s ago: executing program 1 (id=2330): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x90) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xd3a, 0x2c, 0x2, 0x76, 0x7, 0x6a, 0x4, 0x8, 0x80000000}}}}]}, 0x58}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}}}, 0x24}}, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000500dbf59b22bac105f900000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r6, @ANYRESHEX=r4], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) close(r2) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xbd}, &(0x7f0000000100)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d", 0x2a}], 0x2}], 0x1, 0x40800) close(r7) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x11d, 0x76, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) 1.325510667s ago: executing program 3 (id=2331): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786", 0x25}, {&(0x7f0000000240)="eeb9ff4efd6c", 0x6}, {&(0x7f00000001c0)='z3', 0x2}], 0x3, 0x0, 0x0, 0x4012}], 0x1, 0x0) recvmmsg$unix(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000034c0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x20, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt(0xffffffffffffffff, 0xe, 0x0, &(0x7f0000000040)="69954591faa44732573a96bc7831f200ece7c104e06444aebfdd61d91666a7008a39ebc5a673af7f097d2e9746ea3b38cfc6875fb42a432f4b461b9acd5e789681b72d0cfc185a98acb13fb5ff80d826e2f2b0d6d4ab6dc0", 0x58) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {0x2, 0x18, 0xc0, 0x2, r4}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0xffbb, 0x0, 0x0, 0x10001}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 1.324888449s ago: executing program 0 (id=2332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}}, 0x90) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000201050000000000000000000200000806001240000300001c7f0000004b90e61be285252f"], 0x1c}, 0x1, 0x0, 0x0, 0x20004804}, 0x40040) 1.249690405s ago: executing program 0 (id=2333): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.10533709s ago: executing program 3 (id=2335): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7, 0x741, 0x5, 0x8, {{0x2f, 0x4, 0x1, 0x5, 0xbc, 0x67, 0x0, 0x44, 0x2f, 0x0, @multicast2, @loopback, {[@noop, @timestamp_addr={0x44, 0x34, 0xfe, 0x1, 0x3, [{@rand_addr=0x64010101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x97da}, {@multicast1}, {@local, 0x7}, {@empty, 0x13}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xe7, [@empty, @broadcast, @remote]}, @timestamp_prespec={0x44, 0x2c, 0xd3, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x9}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x1}, {@private=0xa010102}, {@private=0xa010100, 0xd}]}, @generic={0x7, 0xa, "49ecf1dea31f90c3"}, @lsrr={0x83, 0x13, 0xac, [@empty, @broadcast, @multicast2, @multicast1]}, @timestamp={0x44, 0x8, 0xc3, 0x0, 0x6, [0x7]}, @ssrr={0x89, 0xf, 0xc3, [@local, @private=0x1000, @local]}]}}}}}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'caif0\x00'}}}}}, 0x34}}, 0x4000000) 1.083915179s ago: executing program 0 (id=2336): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.046695089s ago: executing program 2 (id=2337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'team_slave_0\x00', 0x102}) 941.40925ms ago: executing program 2 (id=2338): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newqdisc={0x48, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x983e}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 918.559416ms ago: executing program 3 (id=2339): r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x7a44, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}) r2 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x200000, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xa, 0x0, &(0x7f0000000140)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x12, 0x1, {0x2, 0x100, 0x0, 0x401, 0x9, 0x80, 0xef, 0x2, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYBLOB="b53e75d3bb1aeb95ffdaeb186254d4e52d53fa7626c2799119cfebf3f348a0f03eb785e19839bc9783f538b5b610b127", @ANYRES32=r0, @ANYRESOCT, @ANYRES64=r1, @ANYRES8=r3], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='svc_process\x00', r6, 0x0, 0x8}, 0x18) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) readv(r7, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1) close(r8) sendmsg$inet(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4000044) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 812.908579ms ago: executing program 2 (id=2340): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000440)={'veth1_macvtap\x00', 0x102}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0xffffff77, &(0x7f0000000180)}, 0x10) 697.319146ms ago: executing program 2 (id=2341): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002580), r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r5, r4, 0x2f, 0x0, 0x0, @void, @value=r5}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f0000001400000004"], 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="91b882b09a5b", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @rand_addr=0x64010100}, "08000071ae9b1c43"}}}}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x350759, 0x92}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000002640)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="30e3defb", @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf25120000000c00060003000000000000000500130001000000"], 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000040) 643.423355ms ago: executing program 3 (id=2342): socket$netlink(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x18, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x401, @empty, 0x6}, 0x1c) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) socket(0x400000000010, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) pipe(0x0) pipe(&(0x7f0000000300)) socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 529.370433ms ago: executing program 4 (id=2343): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x2000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x6}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}]}}]}, 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) socket$inet6_mptcp(0xa, 0x1, 0x106) vmsplice(r7, &(0x7f0000000340)=[{&(0x7f0000002000)="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", 0xfe41}, {&(0x7f0000000300)="9b364acaa018d77f8143825708d8", 0x1}], 0x1000000000000029, 0xa) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x8, [@func={0x10, 0x0, 0x0, 0xc, 0x5}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x3}, @enum={0xf, 0x4, 0x0, 0x6, 0x4, [{0x5, 0x9}, {0x7, 0x5017}, {0x10, 0x81}, {0x6, 0x2}]}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x3, 0x6}, @enum64={0x3, 0xa, 0x0, 0x13, 0x1, 0x0, [{0x8, 0x101, 0x6}, {0xe, 0x1, 0x554}, {0xe, 0x100, 0x1}, {0x5, 0xa21, 0x4}, {0xa, 0x9, 0x3}, {0xc, 0x40, 0x6}, {0xa, 0x6, 0x8ab0}, {0xa, 0x4, 0x1}, {0xb, 0x100, 0x1}, {0x8, 0xfffffffc, 0xfff}]}]}, {0x0, [0x61, 0x5f, 0x5f, 0x2e, 0x2e, 0x5f]}}, &(0x7f00000001c0)=""/37, 0xf8, 0xfffffffffffffde5, 0x1, 0x200}, 0x28) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x8, 0xc, 0x9, 0x18100, r6, 0x2, '\x00', 0x0, r7, 0x5, 0x4, 0x1, 0xf, @value=r9, @void, @value=r10}, 0x50) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000014c0)={0x74, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x57, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4001, @void, @void, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x10, 0x97, 0x0, 0xffff}}, @void, @val={0x5, 0x3, {0x0, 0x37, 0x2}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0x1ffa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x7, 0x6, 0x4}}, @void, @void, @void}}]}, 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r11, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}]}, 0x40}, 0x1, 0x0, 0x0, 0x40005}, 0x20040090) 472.794401ms ago: executing program 1 (id=2344): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)=""/197, 0xc5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5}, 0xfff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000002e00)=""/4094, 0xffe}, {&(0x7f0000006080)=""/4072, 0xfe8}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/113, 0x71}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) 465.535613ms ago: executing program 2 (id=2345): r0 = socket$kcm(0x10, 0x7, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000180)="c810d7eb6a2cc56c3af9e76b0698d27c597f636756657f4c208f6b1a6df7bf", 0x1f}, {&(0x7f0000000300)="012b9d0c6e962543dc2c477f2393afab3a4fcd17b02388344229617029a2e3ee545f057263a4b84353f488c2ddac2266824939b2cc7e3d5b83cc9b81383f50d257f621f27ac79ca061ad3df8409b0190", 0x50}, {&(0x7f0000000600)="49b2ec43451ee3e0be39e7e3b758cce86b354dfc03c49ff8be1eddb31d5fbf483f5fc082d416932ad33b6fa9b84f68ca1cb86770f8578c8bc38abf979cbeac198793fdce723e6c75a17529561c1a0d88072737323930c4e5d0f1af13fde4d17609d4b715474a9d382eb7fbb10f9523d63d97436320c178131d7c18e181481ec7fa70215812064e6485a4baa71d580c66e6735827948c07d41aeb46f95756113fd15abdfe1e189d4348564e604e", 0xad}, {&(0x7f0000000240)="bc4e3c180367afbd58b606cc957ed05c849dd01a5ca2c8d4c944185bb966", 0x1e}, {&(0x7f0000000500)="abfeddb209558f060be3ec515b25b8ebf9f58c7e1551e0a54a58744e401d1cf9a5710509339701d3feead56bc5eea218df43fa2ff50e2976ab180a8b71192e1461041fec3c85f9018569c4713891248b90b8a0f33eb865ec2f3e0d9492f82cb01dc18baee8d100eb58ad83332199053e06d0d40c4c807c9a229117", 0x7b}, {&(0x7f00000006c0)="5a55fc920a7b3b0dda27c21802b233e4faf0ffc70d54a76a0bd482fbca1fd340727e6028a7fcae22fec6a7507d4d6ba5ea78f087fd96bcde88028bc11405b7edf77ad30c9b165301679bbb0bc0ee0745cdb7bdf50eafaa3c5a90b781cf593cf3b3254addb6f44479292cfd900bf2a0704b101db6c0bb13984ea0369f088274e11869d5a349e02c194b1ae957a62e29231a0df1d84c674ec6730625d4f4c43cc6527e5733ee74e91ce9b321a3d8d8b596839c45c5007023a08fc0e73b3bd79663fa11ae0486d65c3c8d4c095ac344db3f31de37ea3862159ef623a469", 0xdc}, {&(0x7f00000007c0)="3d03883048fbf3e7c77b429952a490deccabf92e5b1c0e7a8353392aa97fdb29428c7f05a37035b98979bc3624212b3ea7250c4140d7295f1ccb140fa6cf5b7f1b502f3efbcad1f39f282ab136182adf1c80d23fe3fcbd8fd9f53a355009cdb536c1a2df607f542348a113c1235ed3b2d1758b78a17ed983c9a3dcc51228dafb8f4df4eff02f3f748f0d4c40cb7fb32bb2fd88dc5f2500927ca8e027af9fa01577ade25380d7823327b5cbb9182050a13bdb898a2db5502e909ff0d59175ff3b8f098e65186cd96e22e15e4c1e2b4ad6", 0xd0}], 0x7) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) r7 = accept$alg(r4, 0x0, 0x0) getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000440), &(0x7f0000000940)=0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@ipv6_newroute={0x1c, 0x18, 0x200, 0x1, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x2, 0xc8, 0x8, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$kcm(0x10, 0x7, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000180)="c810d7eb6a2cc56c3af9e76b0698d27c597f636756657f4c208f6b1a6df7bf", 0x1f}, {&(0x7f0000000300)="012b9d0c6e962543dc2c477f2393afab3a4fcd17b02388344229617029a2e3ee545f057263a4b84353f488c2ddac2266824939b2cc7e3d5b83cc9b81383f50d257f621f27ac79ca061ad3df8409b0190", 0x50}, {&(0x7f0000000600)="49b2ec43451ee3e0be39e7e3b758cce86b354dfc03c49ff8be1eddb31d5fbf483f5fc082d416932ad33b6fa9b84f68ca1cb86770f8578c8bc38abf979cbeac198793fdce723e6c75a17529561c1a0d88072737323930c4e5d0f1af13fde4d17609d4b715474a9d382eb7fbb10f9523d63d97436320c178131d7c18e181481ec7fa70215812064e6485a4baa71d580c66e6735827948c07d41aeb46f95756113fd15abdfe1e189d4348564e604e", 0xad}, {&(0x7f0000000240)="bc4e3c180367afbd58b606cc957ed05c849dd01a5ca2c8d4c944185bb966", 0x1e}, {&(0x7f0000000500)="abfeddb209558f060be3ec515b25b8ebf9f58c7e1551e0a54a58744e401d1cf9a5710509339701d3feead56bc5eea218df43fa2ff50e2976ab180a8b71192e1461041fec3c85f9018569c4713891248b90b8a0f33eb865ec2f3e0d9492f82cb01dc18baee8d100eb58ad83332199053e06d0d40c4c807c9a229117", 0x7b}, {&(0x7f00000006c0)="5a55fc920a7b3b0dda27c21802b233e4faf0ffc70d54a76a0bd482fbca1fd340727e6028a7fcae22fec6a7507d4d6ba5ea78f087fd96bcde88028bc11405b7edf77ad30c9b165301679bbb0bc0ee0745cdb7bdf50eafaa3c5a90b781cf593cf3b3254addb6f44479292cfd900bf2a0704b101db6c0bb13984ea0369f088274e11869d5a349e02c194b1ae957a62e29231a0df1d84c674ec6730625d4f4c43cc6527e5733ee74e91ce9b321a3d8d8b596839c45c5007023a08fc0e73b3bd79663fa11ae0486d65c3c8d4c095ac344db3f31de37ea3862159ef623a469", 0xdc}, {&(0x7f00000007c0)="3d03883048fbf3e7c77b429952a490deccabf92e5b1c0e7a8353392aa97fdb29428c7f05a37035b98979bc3624212b3ea7250c4140d7295f1ccb140fa6cf5b7f1b502f3efbcad1f39f282ab136182adf1c80d23fe3fcbd8fd9f53a355009cdb536c1a2df607f542348a113c1235ed3b2d1758b78a17ed983c9a3dcc51228dafb8f4df4eff02f3f748f0d4c40cb7fb32bb2fd88dc5f2500927ca8e027af9fa01577ade25380d7823327b5cbb9182050a13bdb898a2db5502e909ff0d59175ff3b8f098e65186cd96e22e15e4c1e2b4ad6", 0xd0}], 0x7) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async) accept$alg(r4, 0x0, 0x0) (async) getsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000440), &(0x7f0000000940)=0x10) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) (async) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@ipv6_newroute={0x1c, 0x18, 0x200, 0x1, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x2, 0xc8, 0x8, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) 392.607008ms ago: executing program 4 (id=2346): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) sendto$inet6(r0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0) 384.412096ms ago: executing program 3 (id=2347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0xaa000000, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) 250.799092ms ago: executing program 4 (id=2348): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r0 = socket(0x2, 0x3, 0x100000001) setsockopt(r0, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) syz_emit_ethernet(0x17f, &(0x7f00000006c0)={@link_local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x1f, 0x4, 0x3, 0x6, 0x171, 0x67, 0x0, 0xf3, 0x2, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x3, "17"}, @timestamp_prespec={0x44, 0x14, 0x8f, 0x3, 0xd, [{@empty, 0x7}, {@private=0xa010101, 0xff}]}, @timestamp={0x44, 0x14, 0x60, 0x0, 0x6, [0x5, 0x4, 0x3, 0x35d30a3e]}, @cipso={0x86, 0x39, 0xffffffffffffffff, [{0x0, 0x12, "9d1671f8b398cba94dd8d424c60d6f0e"}, {0x0, 0x10, "ec4fa2345a6a2e77761d9b410be8"}, {0x1, 0x11, "c4a3bd2c0a71ac698f45e6e206f301"}]}, @ra={0x94, 0x4}]}}, {0x1e, 0x16, 0x0, @multicast1, "8cfc58ac8917daf3845428289927e578e490f64d3cbd6c7417f94dd03f5825b48794d32ca81fe8f3e313ef50a13c6313881e19f7aa8f0ffbfb4e845e7bec623d2d9a94276198c016a4b22d67d92160ec93e69b4649a26bac0642ea79b78bbf7c340969a6725113126c637acbef1e3f9739633eba2f5fbdc15feeabaee3c4bb752ae85b1dab2977b23091f638db9cd41ecc14b23ccd72bbd4d7d77129b57cbbe61709789f3074f8363d05c8b1726d5b5289f4c4f6f6d2057b2de4c2113aa39d1bb45bacf43a8ab5baf836e8362729b603ae737b3e22830080a5c55dd45f10b8e0c00b3e83d4fb79f7cbeadade70"}}}}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="520003000100b8", 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="4eaa009f3a7290cea6f0d500000000009500000000000000", @ANYRESDEC, @ANYBLOB="748b06e7df34b283154a951827787c20c9311cec1cf2348a0e603805e15f42b0cd4cbd8ecb19024541c45f3359e218a3c23438ac8ba28f7dcd65142ceb0d79571a69776f817d2a6126b378fd07d5143a359f1ff51d031de74a9dedb291d329bc14c95818e33a25b7af9bfaccddaf696ac03cb3dae34c45802e7a653e92e574d6a5891c8406fb177902fac4e44b9583112c4588f49ba767a5dd9c8aca7e00a41c9af9ce866b1ce78ca382319a13986744f796817a6193ce6b8b9eea8d9f761ece37ba9b0b1857", @ANYRES32=0x0, @ANYRES64, @ANYRESDEC], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 250.35946ms ago: executing program 3 (id=2349): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x6000) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 188.706625ms ago: executing program 4 (id=2350): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 178.217199ms ago: executing program 2 (id=2351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r3, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x4}, 0x18) 57.283603ms ago: executing program 4 (id=2352): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003640)={0x2c, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048091}, 0x8010) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=@tcp6, 0x1}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x4, 0x3, 0x1}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0xb, &(0x7f0000000040)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @generic={0x6, 0x0, 0x2, 0x10, 0x7}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x1, 0x2, 0x5, 0x0, 0xffffffffffffffff}], &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x4, &(0x7f0000000180)=""/4, 0x40f00, 0x3d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[r5, 0x1, 0x1, 0x1, r6], &(0x7f0000000300)=[{0x3, 0x5, 0x9, 0x5}, {0x5, 0x1, 0x4, 0x4}, {0x5, 0x3, 0xb, 0x5}, {0x5, 0x1, 0xb, 0xb}], 0x10, 0x2}, 0x94) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'veth1_macvtap\x00', 0x102}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000011c0)={@cgroup, 0x1e, 0x1, 0x40000000, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000001100)=[0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000001240)={0x0, @multicast2, @broadcast}, &(0x7f0000001280)=0xc) writev(r8, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e600", 0x4}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cdeae62faa71a5f2383e963aba417592d7a84958b0378e15fa25bca4ceabb5", 0x7e}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001200)={@map=r5, 0xffffffffffffffff, 0x1c, 0x2000, 0x0, @value=r8, @void, @void, @void, r7}, 0x20) 0s ago: executing program 0 (id=2353): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) kernel console output (not intermixed with test programs): tipc: Disabling bearer [ 157.056800][ T7645] tipc: Resetting bearer [ 157.096528][ T7650] netlink: 'syz.3.544': attribute type 10 has an invalid length. [ 157.107592][ T7650] bond0: (slave wlan1): Opening slave failed [ 157.159521][ T7643] tipc: Resetting bearer [ 157.261694][ T7643] tipc: Disabling bearer [ 157.400195][ T7658] tipc: Enabled bearer , priority 0 [ 157.465985][ T7662] syzkaller0: entered promiscuous mode [ 157.471562][ T7662] syzkaller0: entered allmulticast mode [ 157.524406][ T7669] netlink: 'syz.2.551': attribute type 1 has an invalid length. [ 157.694231][ T7662] tipc: Resetting bearer [ 157.715498][ T7683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.553'. [ 157.758169][ T7675] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 157.772613][ T7669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.551'. [ 157.810553][ T7680] veth9: entered promiscuous mode [ 157.819995][ T7680] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 157.852291][ T7656] tipc: Resetting bearer [ 157.881802][ T7656] tipc: Disabling bearer [ 157.911682][ T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 157.911716][ T7669] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.101082][ T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 158.294392][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.302901][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.321262][ T7693] bond0: left promiscuous mode [ 158.327172][ T7693] bond_slave_0: left promiscuous mode [ 158.332873][ T7693] bond_slave_1: left promiscuous mode [ 158.699696][ T7693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.719088][ T7693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.891863][ T7693] vlan2: left allmulticast mode [ 158.897277][ T7693] veth1: left allmulticast mode [ 158.913281][ T7693] veth7: left promiscuous mode [ 158.928787][ T7693] veth9: left promiscuous mode [ 158.940766][ T7700] tipc: Enabled bearer , priority 0 [ 158.949341][ T7705] syzkaller0: entered promiscuous mode [ 158.962286][ T7705] syzkaller0: entered allmulticast mode [ 159.060140][ T7725] tipc: Resetting bearer [ 159.108850][ T7707] syzkaller0: entered promiscuous mode [ 159.120913][ T7707] syzkaller0: entered allmulticast mode [ 159.128977][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.141778][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.154683][ T7690] tipc: Resetting bearer [ 159.181530][ T7690] tipc: Disabling bearer [ 159.192007][ T7733] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 159.202528][ T7737] netlink: 'syz.2.563': attribute type 29 has an invalid length. [ 159.212127][ T7741] netlink: 'syz.2.563': attribute type 29 has an invalid length. [ 159.221751][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.223085][ T7737] netlink: 500 bytes leftover after parsing attributes in process `syz.2.563'. [ 159.241572][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.302125][ T7740] netlink: 'syz.2.563': attribute type 10 has an invalid length. [ 159.354670][ T7737] netlink: 144 bytes leftover after parsing attributes in process `syz.2.563'. [ 159.365294][ T7737] netlink: 'syz.2.563': attribute type 13 has an invalid length. [ 159.522677][ T7748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.567'. [ 159.598311][ T7737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.611420][ T7737] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.634799][ T7754] netlink: 'syz.4.566': attribute type 10 has an invalid length. [ 159.643620][ T7737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.691029][ T7754] syz_tun: entered promiscuous mode [ 159.715558][ T7750] netlink: 'syz.4.566': attribute type 10 has an invalid length. [ 159.751844][ T7750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.777431][ T7750] team0: Port device bond0 added [ 159.823656][ T7750] syz.4.566 (7750) used greatest stack depth: 20024 bytes left [ 159.929766][ T7762] netlink: 'syz.1.572': attribute type 4 has an invalid length. [ 159.949024][ T7758] tipc: Enabled bearer , priority 0 [ 160.160212][ T7765] syzkaller0: entered promiscuous mode [ 160.166842][ T7765] syzkaller0: entered allmulticast mode [ 160.204305][ T7765] tipc: Resetting bearer [ 160.344550][ T7757] tipc: Resetting bearer [ 160.398305][ T7783] netlink: 'syz.4.576': attribute type 4 has an invalid length. [ 161.065238][ T5907] tipc: Node number set to 46848816 [ 161.342847][ T7819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.582'. [ 162.181766][ T7757] tipc: Disabling bearer [ 162.310450][ T7816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.448080][ T7817] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.456223][ T7817] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 162.484223][ T7817] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 162.600264][ T7818] veth5: entered promiscuous mode [ 162.610849][ T7818] bond3: (slave veth5): Enslaving as an active interface with a down link [ 162.830400][ T7848] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 162.888781][ T7844] syzkaller0: entered promiscuous mode [ 162.901892][ T7844] syzkaller0: entered allmulticast mode [ 162.994515][ T7824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.614551][ T7858] syzkaller0: entered promiscuous mode [ 163.644794][ T7858] syzkaller0: entered allmulticast mode [ 163.809022][ T7881] validate_nla: 1 callbacks suppressed [ 163.809044][ T7881] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 163.970007][ T7888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.602'. [ 164.024449][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.600'. [ 165.081507][ T7881] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 165.108312][ T7883] vlan2: entered allmulticast mode [ 165.123136][ T7883] bond0: entered allmulticast mode [ 165.142649][ T7883] bond_slave_0: entered allmulticast mode [ 165.165128][ T7883] bond_slave_1: entered allmulticast mode [ 165.255842][ T7889] veth11: entered promiscuous mode [ 165.313004][ T7893] team0: Mode changed to "broadcast" [ 165.325527][ T7899] tipc: Enabled bearer , priority 0 [ 165.716517][ T7923] tipc: Enabled bearer , priority 0 [ 165.732303][ T7923] syzkaller0: entered promiscuous mode [ 165.748536][ T7923] syzkaller0: entered allmulticast mode [ 165.809264][ T7923] tipc: Resetting bearer [ 165.891927][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.614'. [ 165.901273][ T7922] tipc: Resetting bearer [ 165.982722][ T7922] tipc: Disabling bearer [ 166.020577][ T7940] bridge_slave_0: left allmulticast mode [ 166.034870][ T7940] bridge_slave_0: left promiscuous mode [ 166.096159][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.198412][ T7940] bridge_slave_1: left allmulticast mode [ 166.241192][ T7950] netlink: 'syz.4.620': attribute type 1 has an invalid length. [ 166.242449][ T7940] bridge_slave_1: left promiscuous mode [ 166.257259][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.274841][ T7940] bond0: (slave bond_slave_0): Releasing backup interface [ 166.290935][ T7940] bond0: (slave bond_slave_1): Releasing backup interface [ 166.312388][ T7940] team0: Port device team_slave_0 removed [ 166.329798][ T7940] team0: Port device team_slave_1 removed [ 166.424238][ T7945] team0: Mode changed to "loadbalance" [ 166.431590][ T7951] vlan0: entered promiscuous mode [ 166.450036][ T7951] team0: Port device vlan0 added [ 166.482575][ T7955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.620'. [ 166.701804][ T7950] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.834678][ T7952] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.866660][ T7952] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 166.920803][ T7952] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 167.052737][ T7954] veth3: entered promiscuous mode [ 167.068391][ T7954] bond4: (slave veth3): Enslaving as an active interface with a down link [ 167.417754][ T7993] tipc: Enabled bearer , priority 0 [ 167.450430][ T7993] syzkaller0: entered promiscuous mode [ 167.466428][ T7993] syzkaller0: entered allmulticast mode [ 167.517460][ T7993] tipc: Resetting bearer [ 167.538825][ T7991] tipc: Resetting bearer [ 167.603595][ T7991] tipc: Disabling bearer [ 167.669259][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 167.890951][ T8014] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 168.094022][ T8014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.155573][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.647'. [ 168.203546][ T8025] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.245799][ T8025] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 168.304844][ T8025] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 168.568380][ T8026] veth5: entered promiscuous mode [ 168.594797][ T8026] bond3: (slave veth5): Enslaving as an active interface with a down link [ 168.692736][ T8053] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 169.249217][ T8069] 8021q: adding VLAN 0 to HW filter on device bond5 [ 169.273557][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.669'. [ 169.394611][ T8076] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 169.439634][ T8076] bond2: (slave macvlan3): Enslaving as a backup interface with an up link [ 169.728247][ T8092] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 170.027975][ T8102] tipc: Enabled bearer , priority 0 [ 170.051787][ T8102] syzkaller0: entered promiscuous mode [ 170.058509][ T8102] syzkaller0: entered allmulticast mode [ 170.089777][ T8102] tipc: Resetting bearer [ 170.123328][ T8101] tipc: Resetting bearer [ 170.207579][ T8101] tipc: Disabling bearer [ 170.749955][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 171.188032][ T8158] ip6gre1: entered allmulticast mode [ 171.209237][ T8162] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 171.268227][ T5929] IPVS: starting estimator thread 0... [ 171.366903][ T8165] IPVS: using max 25 ests per chain, 60000 per kthread [ 171.871175][ T8190] xt_limit: Overflow, try lower: 271964/0 [ 172.279905][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.722'. [ 172.640956][ T8226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.727'. [ 172.704509][ T8228] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 173.064354][ T8243] netlink: 'syz.3.737': attribute type 1 has an invalid length. [ 173.228441][ T8247] tipc: Enabled bearer , priority 0 [ 173.267182][ T8247] syzkaller0: entered promiscuous mode [ 173.272813][ T8247] syzkaller0: entered allmulticast mode [ 173.298399][ T8247] tipc: Resetting bearer [ 173.311537][ T8246] tipc: Resetting bearer [ 173.356391][ T5848] Bluetooth: hci4: command tx timeout [ 173.401982][ T8246] tipc: Disabling bearer [ 173.726963][ T8269] tipc: Enabled bearer , priority 0 [ 173.744811][ T8269] syzkaller0: entered promiscuous mode [ 173.765060][ T8269] syzkaller0: entered allmulticast mode [ 173.797131][ T8269] tipc: Resetting bearer [ 173.855888][ T8268] tipc: Resetting bearer [ 173.894344][ T8268] tipc: Disabling bearer [ 174.172130][ T8289] tipc: Enabled bearer , priority 0 [ 174.191268][ T8289] syzkaller0: entered promiscuous mode [ 174.205233][ T8289] syzkaller0: entered allmulticast mode [ 174.237152][ T8289] tipc: Resetting bearer [ 174.252416][ T8288] tipc: Resetting bearer [ 174.367179][ T8288] tipc: Disabling bearer [ 175.048970][ T5848] Bluetooth: hci4: link tx timeout [ 175.055624][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 175.209199][ T8334] tipc: Enabled bearer , priority 0 [ 175.253660][ T8334] syzkaller0: entered promiscuous mode [ 175.305980][ T8334] syzkaller0: entered allmulticast mode [ 175.361233][ T8334] tipc: Resetting bearer [ 175.453963][ T8333] tipc: Resetting bearer [ 175.517688][ T8333] tipc: Disabling bearer [ 175.621005][ T8360] tipc: Enabled bearer , priority 0 [ 175.633764][ T8360] syzkaller0: entered promiscuous mode [ 175.661575][ T8360] syzkaller0: entered allmulticast mode [ 175.721372][ T8360] tipc: Resetting bearer [ 175.764796][ T8359] tipc: Resetting bearer [ 175.836199][ T8359] tipc: Disabling bearer [ 176.642761][ T8408] tipc: Enabled bearer , priority 24 [ 176.834567][ T8414] tipc: Enabled bearer , priority 0 [ 176.867975][ T8414] syzkaller0: entered promiscuous mode [ 176.886733][ T8414] syzkaller0: entered allmulticast mode [ 176.950137][ T8414] tipc: Resetting bearer [ 176.986196][ T8413] tipc: Resetting bearer [ 177.102641][ T8413] tipc: Disabling bearer [ 177.115173][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 177.133302][ T8427] block nbd3: not configured, cannot reconfigure [ 177.196383][ T8430] tipc: Enabled bearer , priority 0 [ 177.245764][ T8430] syzkaller0: entered promiscuous mode [ 177.303167][ T8430] syzkaller0: entered allmulticast mode [ 177.405295][ T8428] tipc: Resetting bearer [ 177.490118][ T8428] tipc: Disabling bearer [ 178.030791][ T8469] netlink: 32 bytes leftover after parsing attributes in process `syz.4.832'. [ 178.060210][ T8465] tipc: Enabled bearer , priority 0 [ 178.109146][ T8465] syzkaller0: entered promiscuous mode [ 178.114695][ T8465] syzkaller0: entered allmulticast mode [ 178.139530][ T8465] tipc: Resetting bearer [ 178.163020][ T8462] tipc: Resetting bearer [ 178.209655][ T8462] tipc: Disabling bearer [ 178.250917][ T8474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.834'. [ 178.563841][ T8486] tipc: Enabled bearer , priority 0 [ 178.572717][ T8486] syzkaller0: entered promiscuous mode [ 178.582045][ T8486] syzkaller0: entered allmulticast mode [ 178.612934][ T8485] tipc: Resetting bearer [ 178.668078][ T8485] tipc: Disabling bearer [ 179.007492][ T8503] tipc: Enabled bearer , priority 0 [ 179.026582][ T8503] syzkaller0: entered promiscuous mode [ 179.032124][ T8503] syzkaller0: entered allmulticast mode [ 179.071734][ T8503] tipc: Resetting bearer [ 179.382555][ T8501] tipc: Resetting bearer [ 179.441802][ T8501] tipc: Disabling bearer [ 179.918038][ T8531] netlink: 232 bytes leftover after parsing attributes in process `syz.4.861'. [ 181.181428][ T8588] tipc: Enabled bearer , priority 0 [ 181.199478][ T8588] syzkaller0: entered promiscuous mode [ 181.216110][ T8588] syzkaller0: entered allmulticast mode [ 181.242783][ T8588] tipc: Resetting bearer [ 181.269762][ T8587] tipc: Resetting bearer [ 181.324124][ T8587] tipc: Disabling bearer [ 181.583356][ T8603] netlink: 'syz.2.893': attribute type 25 has an invalid length. [ 181.899920][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.898'. [ 182.274588][ T8627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.902'. [ 182.281147][ T8633] netlink: 'syz.1.906': attribute type 25 has an invalid length. [ 183.075678][ T8662] netlink: 'syz.2.920': attribute type 25 has an invalid length. [ 183.135850][ T8665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.922'. [ 183.480643][ T8670] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.315948][ T8708] bond2: option mode: unable to set because the bond device has slaves [ 185.319969][ T8730] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 185.342126][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 185.418722][ T8747] netlink: 32 bytes leftover after parsing attributes in process `syz.4.957'. [ 185.775124][ T8759] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.439558][ T8781] tipc: Enabled bearer , priority 0 [ 186.469189][ T8781] syzkaller0: entered promiscuous mode [ 186.485769][ T8781] syzkaller0: entered allmulticast mode [ 186.635128][ T8780] tipc: Resetting bearer [ 186.691797][ T8780] tipc: Disabling bearer [ 186.766570][ T8791] team_slave_0: entered allmulticast mode [ 187.822370][ T8827] tipc: Enabled bearer , priority 0 [ 187.839567][ T8827] syzkaller0: entered promiscuous mode [ 187.848902][ T8827] syzkaller0: entered allmulticast mode [ 187.872258][ T8826] tipc: Resetting bearer [ 187.969039][ T8826] tipc: Disabling bearer [ 189.047873][ T8866] team0: Device gtp0 is up. Set it down before adding it as a team port [ 190.949471][ T8783] Set syz1 is full, maxelem 65536 reached [ 191.689092][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1040'. [ 191.718552][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806dd87800: rx timeout, send abort [ 191.728527][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806de63400: rx timeout, send abort [ 191.737132][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806dd87800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 191.752643][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806de63400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 191.940493][ T8966] syzkaller0: entered promiscuous mode [ 191.948455][ T8966] syzkaller0: entered allmulticast mode [ 191.998918][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 192.164865][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1048'. [ 192.260802][ T30] audit: type=1800 audit(1754489328.944:2): pid=8977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1051" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=993 res=0 errno=0 [ 192.305349][ T8979] netlink: 'syz.0.1050': attribute type 4 has an invalid length. [ 192.431517][ T8986] netlink: 'syz.0.1054': attribute type 1 has an invalid length. [ 192.431912][ T8987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1053'. [ 192.473135][ T8986] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.550549][ T8986] bond5: (slave ip6erspan0): making interface the new active one [ 192.562360][ T8986] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 192.747226][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1056'. [ 192.854359][ T9001] syzkaller0: entered promiscuous mode [ 192.904250][ T9001] syzkaller0: entered allmulticast mode [ 193.757513][ T9036] syzkaller0: entered promiscuous mode [ 193.773140][ T9036] syzkaller0: entered allmulticast mode [ 194.318689][ T9057] netlink: 'syz.1.1083': attribute type 21 has an invalid length. [ 194.332354][ T9057] netlink: 'syz.1.1083': attribute type 22 has an invalid length. [ 194.341531][ T9057] netlink: 'syz.1.1083': attribute type 23 has an invalid length. [ 194.362252][ T9057] netlink: 'syz.1.1083': attribute type 25 has an invalid length. [ 194.375723][ T9057] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1083'. [ 194.917947][ T9066] syzkaller1: entered promiscuous mode [ 194.923534][ T9066] syzkaller1: entered allmulticast mode [ 195.861710][ T9112] netlink: 'syz.3.1101': attribute type 4 has an invalid length. [ 195.882658][ T9112] netlink: 'syz.3.1101': attribute type 4 has an invalid length. [ 195.920165][ T9114] syzkaller0: entered promiscuous mode [ 195.933988][ T9114] syzkaller0: entered allmulticast mode [ 195.955381][ T9094] netlink: 'syz.0.1096': attribute type 6 has an invalid length. [ 196.241240][ T9124] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1107'. [ 196.542487][ T9127] gtp0: entered promiscuous mode [ 196.835213][ T9142] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1113'. [ 196.858581][ T9135] syzkaller1: entered promiscuous mode [ 196.903304][ T9135] syzkaller1: entered allmulticast mode [ 197.646880][ T9164] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1121'. [ 197.985946][ T9175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1125'. [ 198.673291][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 198.755168][ T3527] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.775599][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 198.784512][ T3527] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.784563][ T3527] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.884477][ T3527] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.111135][ T9215] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1142'. [ 199.409731][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1148'. [ 199.420800][ T9227] netlink: 'syz.2.1148': attribute type 18 has an invalid length. [ 199.530534][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1148'. [ 199.543887][ T9227] netlink: 'syz.2.1148': attribute type 18 has an invalid length. [ 199.565191][ T73] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.576402][ T73] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.604049][ T9234] syzkaller0: entered promiscuous mode [ 199.611202][ T9234] syzkaller0: entered allmulticast mode [ 199.622854][ T73] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.650856][ T73] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.550752][ T9273] syzkaller0: entered promiscuous mode [ 200.565093][ T9273] syzkaller0: entered allmulticast mode [ 200.648276][ T9275] tipc: Enabled bearer , priority 0 [ 200.658276][ T9279] netlink: 'syz.2.1168': attribute type 1 has an invalid length. [ 200.701170][ T9274] tipc: Disabling bearer [ 200.770622][ T9279] veth11: entered promiscuous mode [ 200.779177][ T9279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1168'. [ 200.935592][ T9290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1171'. [ 201.273383][ T9304] netlink: 'syz.4.1177': attribute type 4 has an invalid length. [ 201.462031][ T9312] syzkaller1: entered promiscuous mode [ 201.468044][ T9312] syzkaller1: entered allmulticast mode [ 201.473452][ T9314] netlink: 'syz.4.1182': attribute type 1 has an invalid length. [ 201.531044][ T9314] veth7: entered promiscuous mode [ 201.627496][ T9318] syzkaller1: entered allmulticast mode [ 201.639455][ T9318] syzkaller1: left allmulticast mode [ 201.997609][ T9332] __nla_validate_parse: 2 callbacks suppressed [ 201.997630][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1190'. [ 202.243477][ T9338] netlink: 'syz.0.1193': attribute type 1 has an invalid length. [ 202.302792][ T9338] veth9: entered promiscuous mode [ 202.310671][ T9338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1193'. [ 202.462149][ T9342] netlink: 'syz.0.1194': attribute type 13 has an invalid length. [ 202.482892][ T9342] netlink: 'syz.0.1194': attribute type 17 has an invalid length. [ 202.553419][ T9345] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3944. macoff=96 [ 202.580847][ T9345] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1195'. [ 202.648437][ T9342] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.660532][ T9342] batman_adv: batadv0: Interface activated: team0 [ 202.672891][ T9342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.771813][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1197'. [ 203.015147][ T9365] trusted_key: syz.2.1201 sent an empty control message without MSG_MORE. [ 203.031351][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 203.234219][ T9340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.284074][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1203'. [ 203.404593][ T9373] veth9: entered promiscuous mode [ 203.443452][ T9374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1204'. [ 204.245331][ T9401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1216'. [ 204.631169][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'. [ 204.723816][ T9422] syzkaller1: entered promiscuous mode [ 204.730391][ T9422] syzkaller1: entered allmulticast mode [ 205.259943][ T9441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1232'. [ 205.500725][ T9448] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 205.509328][ T24] IPVS: starting estimator thread 0... [ 205.588541][ T9450] tipc: Enabled bearer , priority 0 [ 205.595413][ T9452] IPVS: using max 26 ests per chain, 62400 per kthread [ 205.758308][ T9450] syzkaller0: entered promiscuous mode [ 205.764015][ T9450] syzkaller0: entered allmulticast mode [ 205.770897][ T9450] tipc: Resetting bearer [ 205.859001][ T9449] tipc: Resetting bearer [ 207.334035][ T9449] tipc: Disabling bearer [ 207.583373][ T9485] __nla_validate_parse: 2 callbacks suppressed [ 207.583392][ T9485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1247'. [ 207.648505][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1248'. [ 207.821656][ T9494] tipc: Resetting bearer [ 208.099281][ T9507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1254'. [ 208.113531][ T9494] tipc: Disabling bearer [ 208.619988][ T9521] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 208.650734][ T9526] tipc: Enabling of bearer rejected, failed to enable media [ 208.749271][ T9521] syz.0.1257 (9521) used greatest stack depth: 19800 bytes left [ 209.305855][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1266'. [ 210.131377][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1275'. [ 210.210449][ T9591] tipc: Enabling of bearer rejected, failed to enable media [ 210.405604][ T5503] veth0_vlan: left promiscuous mode [ 210.484662][ T5503] veth0_vlan: entered promiscuous mode [ 210.549315][ T9603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1279'. [ 211.087155][ T9610] tipc: Enabled bearer , priority 0 [ 211.110386][ T9609] tipc: Resetting bearer [ 211.352214][ T9608] tipc: Disabling bearer [ 211.921585][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 211.939316][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 211.945748][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 211.993747][ T9629] syzkaller0: entered promiscuous mode [ 212.030027][ T9629] syzkaller0: entered allmulticast mode [ 212.182049][ T9659] netlink: 'syz.3.1288': attribute type 33 has an invalid length. [ 212.208035][ T9659] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1288'. [ 212.236430][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1288'. [ 213.339334][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1291'. [ 213.698679][ T9675] vlan2: entered allmulticast mode [ 213.703974][ T9675] bridge0: entered allmulticast mode [ 213.725553][ T9675] bridge3: port 1(vlan2) entered blocking state [ 213.732000][ T9675] bridge3: port 1(vlan2) entered disabled state [ 213.799533][ T9675] vlan2: entered promiscuous mode [ 213.804637][ T9675] bridge0: entered promiscuous mode [ 213.928357][ T9687] tipc: Enabling of bearer rejected, already enabled [ 213.978439][ T9688] netlink: 'syz.1.1295': attribute type 25 has an invalid length. [ 214.103508][ T9692] bridge: RTM_NEWNEIGH with invalid ether address [ 214.169743][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1297'. [ 214.219053][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1297'. [ 214.278159][ T9698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1298'. [ 214.371668][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1298'. [ 214.542199][ T9706] syzkaller0: entered promiscuous mode [ 214.551579][ T9706] syzkaller0: entered allmulticast mode [ 214.560595][ T9708] tipc: Enabled bearer , priority 0 [ 214.688793][ T9698] syz.3.1298 (9698) used greatest stack depth: 19768 bytes left [ 215.960480][ T9728] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1306'. [ 216.357288][ T9712] tipc: Resetting bearer [ 216.363696][ T9715] tipc: Enabling of bearer rejected, already enabled [ 216.402828][ T9707] tipc: Disabling bearer [ 216.492229][ T9731] tipc: Enabled bearer , priority 0 [ 216.608058][ T9731] syzkaller0: entered promiscuous mode [ 216.615625][ T9731] syzkaller0: entered allmulticast mode [ 216.669715][ T9731] tipc: Resetting bearer [ 216.692230][ T9744] netlink: 'syz.2.1309': attribute type 25 has an invalid length. [ 216.713477][ T9730] tipc: Resetting bearer [ 216.770137][ T9730] tipc: Disabling bearer [ 217.112517][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1316'. [ 217.236748][ T9762] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.252601][ T9751] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1313'. [ 217.273219][ T1319] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.330496][ T1319] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.355268][ T1319] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.392534][ T1319] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.582656][ T9775] tipc: Enabling of bearer rejected, already enabled [ 217.772775][ T9780] netlink: 'syz.0.1324': attribute type 25 has an invalid length. [ 217.802687][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1322'. [ 217.896149][ T9777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.955593][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 218.139443][ T9788] syzkaller0: entered promiscuous mode [ 218.165140][ T9788] syzkaller0: entered allmulticast mode [ 220.386974][ T9790] __nla_validate_parse: 3 callbacks suppressed [ 220.386994][ T9790] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1327'. [ 220.418982][ T9816] tipc: Enabling of bearer rejected, already enabled [ 220.537811][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1336'. [ 220.632218][ T9835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.727651][ T9840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1338'. [ 220.740750][ T9841] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 220.762399][ T9840] openvswitch: netlink: Flow actions attr not present in new flow. [ 220.764770][ T9835] gretap1: entered promiscuous mode [ 220.787858][ T9835] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 220.799979][ T9841] netlink: 'syz.4.1337': attribute type 10 has an invalid length. [ 220.809760][ T9838] macvlan2: entered promiscuous mode [ 220.815244][ T9838] macvlan2: entered allmulticast mode [ 220.821340][ T9838] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 220.884039][ T9843] tipc: Enabled bearer , priority 0 [ 220.904539][ T9841] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 220.934530][ T9845] team0: Port device bond0 removed [ 220.950977][ T9845] bond0: (slave wlan1): Releasing backup interface [ 221.000240][ T9845] bond2: (slave bond3): Releasing backup interface [ 221.034028][ T9845] bond2: (slave gretap2): Releasing backup interface [ 221.051135][ T9845] bond4: (slave veth3): Releasing active interface [ 221.061805][ T9845] vlan2: left promiscuous mode [ 221.067877][ T9845] bridge0: left promiscuous mode [ 221.073213][ T9845] bridge3: port 1(vlan2) entered disabled state [ 221.084205][ T9848] syzkaller0: entered promiscuous mode [ 221.091871][ T9848] syzkaller0: entered allmulticast mode [ 221.191546][ T9854] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.204078][ T9858] tipc: Resetting bearer [ 221.261694][ T9842] tipc: Resetting bearer [ 221.332179][ T9842] tipc: Disabling bearer [ 221.544915][ T9872] tipc: Enabled bearer , priority 0 [ 221.612266][ T9872] tipc: Resetting bearer [ 221.973271][ T9871] tipc: Disabling bearer [ 221.990824][ T9884] tipc: Enabled bearer , priority 0 [ 221.998389][ T9886] syzkaller0: entered promiscuous mode [ 222.003992][ T9886] syzkaller0: entered allmulticast mode [ 222.030478][ T9889] tipc: Resetting bearer [ 222.046504][ T9877] tipc: Resetting bearer [ 222.081474][ T9877] tipc: Disabling bearer [ 222.578984][ T9899] syz.2.1357 (9899) used greatest stack depth: 17864 bytes left [ 222.701302][ T9911] tipc: Enabling of bearer rejected, failed to enable media [ 223.362661][ T9938] tipc: Enabled bearer , priority 0 [ 223.397593][ T9938] syzkaller0: entered promiscuous mode [ 223.403824][ T9938] syzkaller0: entered allmulticast mode [ 223.429012][ T9942] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 223.438645][ T9942] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1372'. [ 223.465730][ T9938] tipc: Resetting bearer [ 223.485541][ T9941] tipc: Enabled bearer , priority 0 [ 223.493408][ T9941] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 223.519370][ T9941] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 223.541421][ T9935] tipc: Resetting bearer [ 223.570446][ T9935] tipc: Disabling bearer [ 223.584739][ T9941] tipc: Resetting bearer [ 223.658982][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1373'. [ 223.758664][ T9950] bridge_slave_1: left allmulticast mode [ 223.773728][ T9950] bridge_slave_1: left promiscuous mode [ 223.791684][ T9950] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.822223][ T9950] bridge_slave_0: left allmulticast mode [ 223.846661][ T9950] bridge_slave_0: left promiscuous mode [ 223.871797][ T9950] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.928121][ T9959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1377'. [ 223.953705][ T9960] openvswitch: netlink: Message has 24 unknown bytes. [ 223.962312][ T9960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.123298][ T9955] syz_tun: left promiscuous mode [ 224.156268][ T9955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.179210][ T9955] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.223941][ T9955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.337095][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'. [ 224.453834][ T9976] openvswitch: netlink: IP tunnel dst address not specified [ 225.005432][T10001] tipc: Enabling of bearer rejected, failed to enable media [ 225.026544][T10000] netlink: 'syz.3.1396': attribute type 10 has an invalid length. [ 225.293139][T10021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1401'. [ 225.402167][T10024] vlan0: entered promiscuous mode [ 225.418457][T10024] bridge0: entered promiscuous mode [ 226.212759][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1416'. [ 226.249842][T10064] tipc: Enabling of bearer rejected, failed to enable media [ 226.534374][T10068] tipc: Enabled bearer , priority 0 [ 226.580448][T10068] syzkaller0: entered promiscuous mode [ 226.594627][T10068] syzkaller0: entered allmulticast mode [ 226.676311][T10068] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 226.781014][T10085] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 226.827904][T10078] tipc: Resetting bearer [ 226.879864][T10065] tipc: Resetting bearer [ 227.022070][T10065] tipc: Disabling bearer [ 227.426397][T10113] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1427'. [ 227.958440][T10140] tipc: Enabling of bearer rejected, failed to enable media [ 228.300394][T10157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1441'. [ 228.735935][T10173] tipc: Enabled bearer , priority 0 [ 228.786796][T10173] syzkaller0: entered promiscuous mode [ 228.792347][T10173] syzkaller0: entered allmulticast mode [ 228.849746][T10173] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 228.972804][T10173] tipc: Resetting bearer [ 229.022144][T10170] tipc: Resetting bearer [ 229.113285][T10170] tipc: Disabling bearer [ 229.332214][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1453'. [ 229.460943][T10210] tipc: Enabling of bearer rejected, failed to enable media [ 230.499120][T10254] netlink: 'syz.1.1474': attribute type 4 has an invalid length. [ 230.961147][T10270] batadv0: entered promiscuous mode [ 230.973511][T10270] bond0: entered promiscuous mode [ 230.998033][T10270] bond_slave_0: entered promiscuous mode [ 231.032139][T10270] bond_slave_1: entered promiscuous mode [ 231.041614][T10270] bond0: left promiscuous mode [ 231.059634][T10270] bond_slave_0: left promiscuous mode [ 231.074756][T10270] bond_slave_1: left promiscuous mode [ 231.088175][T10270] batadv0: left promiscuous mode [ 231.204582][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1483'. [ 232.743921][T10317] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 233.875740][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1514'. [ 234.638518][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 234.857810][T10402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1525'. [ 234.900214][T10400] veth13: entered promiscuous mode [ 235.993414][T10434] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1537'. [ 236.748484][T10461] bridge_slave_0: entered promiscuous mode [ 236.943745][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1551'. [ 236.976280][T10466] netlink: 'syz.1.1551': attribute type 15 has an invalid length. [ 237.054196][ T1319] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.063743][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1551'. [ 237.115355][ T1319] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.129511][T10466] netlink: 'syz.1.1551': attribute type 15 has an invalid length. [ 237.184578][ T1319] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.221554][ T1319] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.334488][T10483] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1558'. [ 237.356445][T10480] tipc: Enabled bearer , priority 0 [ 237.419261][T10480] tipc: Resetting bearer [ 237.510573][T10479] tipc: Disabling bearer [ 237.617160][T10489] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.654675][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1561'. [ 237.758370][T10493] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 237.792067][T10493] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 238.091528][T10516] netlink: 'syz.1.1567': attribute type 1 has an invalid length. [ 238.141566][T10516] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1567'. [ 238.158226][T10516] netlink: 'syz.1.1567': attribute type 2 has an invalid length. [ 238.182011][T10516] netlink: 'syz.1.1567': attribute type 1 has an invalid length. [ 238.245269][T10521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1568'. [ 238.399620][T10517] syzkaller1: entered promiscuous mode [ 238.412633][T10517] syzkaller1: entered allmulticast mode [ 238.512047][T10526] syzkaller0: entered promiscuous mode [ 238.530688][T10526] syzkaller0: entered allmulticast mode [ 239.967271][T10535] tipc: Enabling of bearer rejected, already enabled [ 239.981208][T10545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1576'. [ 240.702746][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1591'. [ 240.743342][T10577] tipc: Enabled bearer , priority 0 [ 240.785839][T10577] syzkaller0: entered promiscuous mode [ 240.794751][T10577] syzkaller0: entered allmulticast mode [ 240.806444][T10578] tipc: Enabling of bearer rejected, already enabled [ 240.863578][T10577] tipc: Resetting bearer [ 240.882800][T10574] tipc: Resetting bearer [ 240.969189][T10574] tipc: Disabling bearer [ 241.643169][T10607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.243930][T10635] netlink: 'syz.0.1611': attribute type 1 has an invalid length. [ 242.274277][T10635] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1611'. [ 242.288037][T10639] openvswitch: netlink: Flow actions attr not present in new flow. [ 242.547007][T10648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1619'. [ 242.874791][T10660] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 243.031970][T10670] tipc: Enabling of bearer rejected, already enabled [ 243.136677][T10676] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4. [ 243.361162][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1632'. [ 245.595670][ T10] IPVS: starting estimator thread 0... [ 245.695152][T10712] IPVS: using max 27 ests per chain, 64800 per kthread [ 246.074304][T10728] tipc: Enabling of bearer rejected, already enabled [ 246.097467][T10728] netem: change failed [ 246.650229][T10753] netdevsim netdevsim0: Direct firmware load for /.€ failed with error -2 [ 246.660093][T10753] netdevsim netdevsim0: Falling back to sysfs fallback for: /.€ [ 247.102171][T10772] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.518421][T10756] mpoa:mpoad_close: () going down [ 249.333137][T10850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1685'. [ 249.431697][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1688'. [ 249.446865][T10856] bridge_slave_1: left allmulticast mode [ 249.487431][T10856] bridge_slave_1: left promiscuous mode [ 249.493303][T10856] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.568902][T10856] bridge_slave_0: left allmulticast mode [ 249.595887][T10856] bridge_slave_0: left promiscuous mode [ 249.636692][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.139786][T10886] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1694'. [ 250.600056][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 251.448560][T10940] syzkaller0: entered promiscuous mode [ 251.454123][T10940] syzkaller0: entered allmulticast mode [ 251.527437][T10946] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1715'. [ 251.747113][T10958] tipc: Enabled bearer , priority 0 [ 251.765987][T10958] syzkaller0: entered promiscuous mode [ 251.771889][T10958] syzkaller0: entered allmulticast mode [ 251.782862][T10960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1717'. [ 251.801069][T10958] tipc: Resetting bearer [ 251.853147][T10957] tipc: Resetting bearer [ 251.888077][T10957] tipc: Disabling bearer [ 251.980997][T10967] gtp0: entered promiscuous mode [ 252.474337][T10987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1727'. [ 252.752132][T10998] netlink: 'syz.0.1732': attribute type 2 has an invalid length. [ 252.762349][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 252.778788][T10999] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1731'. [ 252.808640][T10999] gretap0: entered promiscuous mode [ 252.840281][T10999] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1731'. [ 252.857307][T10999] 0ªî{X¹¦: renamed from gretap0 [ 252.882524][T10999] 0ªî{X¹¦: left promiscuous mode [ 252.898311][T10999] 0ªî{X¹¦: entered allmulticast mode [ 252.918201][T10999] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 253.041059][T11007] bond4: option mode: unable to set because the bond device is up [ 253.107899][T11007] bond_slave_0: entered promiscuous mode [ 253.114065][T11007] bond_slave_1: entered promiscuous mode [ 253.147004][T11007] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 253.183882][T11007] bond4: (slave macvlan4): Enslaving as a backup interface with an up link [ 253.353137][T11019] tipc: Enabled bearer , priority 0 [ 253.360908][T11019] syzkaller0: entered promiscuous mode [ 253.367002][T11019] syzkaller0: entered allmulticast mode [ 253.476488][T11022] netlink: 'syz.3.1739': attribute type 1 has an invalid length. [ 253.522310][T11018] tipc: Resetting bearer [ 253.590245][T11018] tipc: Disabling bearer [ 253.752806][T11023] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 253.834915][T11024] veth11: entered promiscuous mode [ 253.845954][T11024] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 253.931122][ T1165] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 253.931632][T11030] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.070303][ T1165] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 254.195235][T11043] tipc: Enabling of bearer rejected, already enabled [ 254.222414][T11038] syzkaller0: entered promiscuous mode [ 254.240153][T11038] syzkaller0: entered allmulticast mode [ 254.973057][T11068] __nla_validate_parse: 1 callbacks suppressed [ 254.973078][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1750'. [ 255.254499][ T36] tipc: Resetting bearer [ 255.366806][T11074] bond4: option mode: unable to set because the bond device has slaves [ 255.670160][T11074] bond4: (slave macvlan3): Error -98 calling set_mac_address [ 255.804338][T11080] syzkaller0: entered promiscuous mode [ 255.817244][T11080] syzkaller0: entered allmulticast mode [ 256.677750][T11117] tipc: Enabled bearer , priority 0 [ 256.696907][T11117] syzkaller0: entered promiscuous mode [ 256.702996][T11117] syzkaller0: entered allmulticast mode [ 256.761812][T11116] tipc: Resetting bearer [ 256.820722][T11116] tipc: Disabling bearer [ 257.001621][T11129] FAULT_INJECTION: forcing a failure. [ 257.001621][T11129] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 257.046011][T11129] CPU: 0 UID: 0 PID: 11129 Comm: syz.4.1776 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 257.046045][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 257.046066][T11129] Call Trace: [ 257.046075][T11129] [ 257.046089][T11129] dump_stack_lvl+0x189/0x250 [ 257.046128][T11129] ? __pfx____ratelimit+0x10/0x10 [ 257.046160][T11129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.046189][T11129] ? __pfx__printk+0x10/0x10 [ 257.046217][T11129] ? __might_fault+0xb0/0x130 [ 257.046264][T11129] should_fail_ex+0x414/0x560 [ 257.046304][T11129] _copy_from_user+0x2d/0xb0 [ 257.046336][T11129] ___sys_sendmsg+0x158/0x2a0 [ 257.046363][T11129] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.046421][T11129] ? __fget_files+0x2a/0x420 [ 257.046442][T11129] ? __fget_files+0x3a0/0x420 [ 257.046474][T11129] __x64_sys_sendmsg+0x19b/0x260 [ 257.046499][T11129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.046532][T11129] ? __pfx_ksys_write+0x10/0x10 [ 257.046561][T11129] ? rcu_is_watching+0x15/0xb0 [ 257.046601][T11129] ? do_syscall_64+0xbe/0x3b0 [ 257.046636][T11129] do_syscall_64+0xfa/0x3b0 [ 257.046665][T11129] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.046695][T11129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.046716][T11129] ? clear_bhb_loop+0x60/0xb0 [ 257.046742][T11129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.046762][T11129] RIP: 0033:0x7f64edb8ebe9 [ 257.046787][T11129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.046805][T11129] RSP: 002b:00007f64ee96e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.046833][T11129] RAX: ffffffffffffffda RBX: 00007f64eddb5fa0 RCX: 00007f64edb8ebe9 [ 257.046849][T11129] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 257.046862][T11129] RBP: 00007f64ee96e090 R08: 0000000000000000 R09: 0000000000000000 [ 257.046875][T11129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.046887][T11129] R13: 00007f64eddb6038 R14: 00007f64eddb5fa0 R15: 00007ffc58556d18 [ 257.046921][T11129] [ 257.278044][T11131] tipc: Enabled bearer , priority 0 [ 257.286169][T11131] syzkaller0: entered promiscuous mode [ 257.291971][T11131] syzkaller0: entered allmulticast mode [ 257.809186][T11140] tipc: Resetting bearer [ 257.819288][T11130] tipc: Resetting bearer [ 257.862685][T11130] tipc: Disabling bearer [ 257.873699][T11148] tipc: Enabled bearer , priority 0 [ 257.884410][T11153] syzkaller0: entered promiscuous mode [ 257.890403][T11153] syzkaller0: entered allmulticast mode [ 257.945858][T11139] tipc: Resetting bearer [ 257.975635][T11138] tipc: Resetting bearer [ 258.071059][T11138] tipc: Disabling bearer [ 258.113456][T11170] FAULT_INJECTION: forcing a failure. [ 258.113456][T11170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.145546][T11170] CPU: 1 UID: 0 PID: 11170 Comm: syz.1.1785 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 258.145577][T11170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.145589][T11170] Call Trace: [ 258.145598][T11170] [ 258.145607][T11170] dump_stack_lvl+0x189/0x250 [ 258.145634][T11170] ? __pfx____ratelimit+0x10/0x10 [ 258.145665][T11170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.145687][T11170] ? __pfx__printk+0x10/0x10 [ 258.145713][T11170] ? __might_fault+0xb0/0x130 [ 258.145757][T11170] should_fail_ex+0x414/0x560 [ 258.145797][T11170] _copy_from_user+0x2d/0xb0 [ 258.145828][T11170] __sys_connect+0x123/0x440 [ 258.145861][T11170] ? __fget_files+0x3a0/0x420 [ 258.145883][T11170] ? __pfx___sys_connect+0x10/0x10 [ 258.145929][T11170] ? __pfx_ksys_write+0x10/0x10 [ 258.145958][T11170] ? rcu_is_watching+0x15/0xb0 [ 258.146001][T11170] __x64_sys_connect+0x7a/0x90 [ 258.146035][T11170] do_syscall_64+0xfa/0x3b0 [ 258.146067][T11170] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.146096][T11170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.146117][T11170] ? clear_bhb_loop+0x60/0xb0 [ 258.146144][T11170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.146165][T11170] RIP: 0033:0x7fbb92d8ebe9 [ 258.146184][T11170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.146209][T11170] RSP: 002b:00007fbb90ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 258.146237][T11170] RAX: ffffffffffffffda RBX: 00007fbb92fb5fa0 RCX: 00007fbb92d8ebe9 [ 258.146251][T11170] RDX: 000000000000000f RSI: 0000200000000080 RDI: 0000000000000003 [ 258.146264][T11170] RBP: 00007fbb90ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 258.146277][T11170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.146289][T11170] R13: 00007fbb92fb6038 R14: 00007fbb92fb5fa0 R15: 00007ffd83b40898 [ 258.146323][T11170] [ 258.464371][T11177] bond4: option mode: unable to set because the bond device has slaves [ 258.533179][T11177] bond4: (slave macvlan5): Error -98 calling set_mac_address [ 258.727931][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1794'. [ 258.805511][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1793'. [ 259.160229][T11205] netlink: 'syz.4.1795': attribute type 5 has an invalid length. [ 259.270780][T11201] IPVS: Error connecting to the multicast addr [ 259.602522][T11217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1801'. [ 259.619142][T11217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1801'. [ 259.812433][T11228] FAULT_INJECTION: forcing a failure. [ 259.812433][T11228] name failslab, interval 1, probability 0, space 0, times 1 [ 259.826298][T11224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.913949][T11228] CPU: 0 UID: 0 PID: 11228 Comm: syz.1.1806 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 259.913982][T11228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.913995][T11228] Call Trace: [ 259.914003][T11228] [ 259.914012][T11228] dump_stack_lvl+0x189/0x250 [ 259.914040][T11228] ? __pfx____ratelimit+0x10/0x10 [ 259.914070][T11228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.914093][T11228] ? __pfx__printk+0x10/0x10 [ 259.914138][T11228] ? __pfx___might_resched+0x10/0x10 [ 259.914179][T11228] ? fs_reclaim_acquire+0x7d/0x100 [ 259.914209][T11228] should_fail_ex+0x414/0x560 [ 259.914246][T11228] should_failslab+0xa8/0x100 [ 259.914268][T11228] __kmalloc_cache_noprof+0x70/0x3d0 [ 259.914300][T11228] ? resv_map_alloc+0x88/0x2c0 [ 259.914331][T11228] resv_map_alloc+0x88/0x2c0 [ 259.914360][T11228] hugetlbfs_get_inode+0x68/0x660 [ 259.914391][T11228] ? fput+0xa0/0xd0 [ 259.914423][T11228] hugetlb_file_setup+0x21d/0x630 [ 259.914456][T11228] ksys_mmap_pgoff+0x22f/0x760 [ 259.914491][T11228] do_syscall_64+0xfa/0x3b0 [ 259.914523][T11228] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.914552][T11228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.914574][T11228] ? clear_bhb_loop+0x60/0xb0 [ 259.914601][T11228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.914620][T11228] RIP: 0033:0x7fbb92d8ebe9 [ 259.914646][T11228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.914664][T11228] RSP: 002b:00007fbb90ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 259.914688][T11228] RAX: ffffffffffffffda RBX: 00007fbb92fb5fa0 RCX: 00007fbb92d8ebe9 [ 259.914703][T11228] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 259.914717][T11228] RBP: 00007fbb90ff6090 R08: ffffffffffffffff R09: a401000000000000 [ 259.914732][T11228] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 259.914744][T11228] R13: 00007fbb92fb6038 R14: 00007fbb92fb5fa0 R15: 00007ffd83b40898 [ 259.914778][T11228] [ 260.359051][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'. [ 260.514602][T11253] FAULT_INJECTION: forcing a failure. [ 260.514602][T11253] name failslab, interval 1, probability 0, space 0, times 0 [ 260.531157][T11253] CPU: 1 UID: 0 PID: 11253 Comm: syz.1.1811 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 260.531189][T11253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.531202][T11253] Call Trace: [ 260.531211][T11253] [ 260.531220][T11253] dump_stack_lvl+0x189/0x250 [ 260.531247][T11253] ? __pfx____ratelimit+0x10/0x10 [ 260.531279][T11253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.531301][T11253] ? __pfx__printk+0x10/0x10 [ 260.531335][T11253] ? __pfx___might_resched+0x10/0x10 [ 260.531374][T11253] should_fail_ex+0x414/0x560 [ 260.531413][T11253] should_failslab+0xa8/0x100 [ 260.531436][T11253] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 260.531471][T11253] ? __alloc_skb+0x112/0x2d0 [ 260.531509][T11253] __alloc_skb+0x112/0x2d0 [ 260.531547][T11253] netlink_sendmsg+0x5c6/0xb30 [ 260.531591][T11253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.531627][T11253] ? aa_sock_msg_perm+0x94/0x160 [ 260.531658][T11253] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.531684][T11253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.531718][T11253] __sock_sendmsg+0x21c/0x270 [ 260.531750][T11253] ____sys_sendmsg+0x505/0x830 [ 260.531779][T11253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.531816][T11253] ? import_iovec+0x74/0xa0 [ 260.531850][T11253] ___sys_sendmsg+0x21f/0x2a0 [ 260.531876][T11253] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.531939][T11253] ? __fget_files+0x2a/0x420 [ 260.531959][T11253] ? __fget_files+0x3a0/0x420 [ 260.531991][T11253] __x64_sys_sendmsg+0x19b/0x260 [ 260.532018][T11253] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.532052][T11253] ? __pfx_ksys_write+0x10/0x10 [ 260.532087][T11253] ? rcu_is_watching+0x15/0xb0 [ 260.532127][T11253] ? do_syscall_64+0xbe/0x3b0 [ 260.532164][T11253] do_syscall_64+0xfa/0x3b0 [ 260.532194][T11253] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.532223][T11253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.532245][T11253] ? clear_bhb_loop+0x60/0xb0 [ 260.532271][T11253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.532291][T11253] RIP: 0033:0x7fbb92d8ebe9 [ 260.532310][T11253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.532327][T11253] RSP: 002b:00007fbb90ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.532351][T11253] RAX: ffffffffffffffda RBX: 00007fbb92fb5fa0 RCX: 00007fbb92d8ebe9 [ 260.532366][T11253] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000003 [ 260.532379][T11253] RBP: 00007fbb90ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 260.532391][T11253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.532403][T11253] R13: 00007fbb92fb6038 R14: 00007fbb92fb5fa0 R15: 00007ffd83b40898 [ 260.532437][T11253] [ 261.353232][T11280] "syz.4.1818" (11280) uses obsolete ecb(arc4) skcipher [ 261.859316][T11298] netlink: 'syz.3.1825': attribute type 1 has an invalid length. [ 261.905664][T11298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1825'. [ 262.218171][T11310] syzkaller0: entered promiscuous mode [ 262.223932][T11310] syzkaller0: entered allmulticast mode [ 262.401957][T11329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1835'. [ 262.941430][T11347] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1842'. [ 263.239951][T11353] syzkaller0: entered promiscuous mode [ 263.255742][T11353] syzkaller0: entered allmulticast mode [ 263.620838][T11368] tipc: Enabling of bearer rejected, already enabled [ 263.750928][T11372] FAULT_INJECTION: forcing a failure. [ 263.750928][T11372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.820308][T11372] CPU: 1 UID: 0 PID: 11372 Comm: syz.3.1852 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 263.820340][T11372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.820353][T11372] Call Trace: [ 263.820362][T11372] [ 263.820372][T11372] dump_stack_lvl+0x189/0x250 [ 263.820400][T11372] ? __pfx____ratelimit+0x10/0x10 [ 263.820432][T11372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.820455][T11372] ? __pfx__printk+0x10/0x10 [ 263.820497][T11372] should_fail_ex+0x414/0x560 [ 263.820537][T11372] _copy_to_user+0x31/0xb0 [ 263.820571][T11372] simple_read_from_buffer+0xe1/0x170 [ 263.820611][T11372] proc_fail_nth_read+0x1b3/0x220 [ 263.820642][T11372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.820672][T11372] ? rw_verify_area+0x258/0x650 [ 263.820702][T11372] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 263.820729][T11372] vfs_read+0x1fd/0x980 [ 263.820759][T11372] ? fdget_pos+0x247/0x320 [ 263.820784][T11372] ? __pfx___mutex_lock+0x10/0x10 [ 263.820818][T11372] ? __pfx_vfs_read+0x10/0x10 [ 263.820857][T11372] ? __fget_files+0x2a/0x420 [ 263.820883][T11372] ? __fget_files+0x3a0/0x420 [ 263.820902][T11372] ? __fget_files+0x2a/0x420 [ 263.820934][T11372] ksys_read+0x145/0x250 [ 263.820967][T11372] ? __pfx_ksys_read+0x10/0x10 [ 263.821004][T11372] ? do_syscall_64+0xbe/0x3b0 [ 263.821039][T11372] do_syscall_64+0xfa/0x3b0 [ 263.821069][T11372] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.821098][T11372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.821119][T11372] ? clear_bhb_loop+0x60/0xb0 [ 263.821146][T11372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.821166][T11372] RIP: 0033:0x7fb33238d5fc [ 263.821185][T11372] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 263.821203][T11372] RSP: 002b:00007fb3331d4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 263.821228][T11372] RAX: ffffffffffffffda RBX: 00007fb3325b5fa0 RCX: 00007fb33238d5fc [ 263.821243][T11372] RDX: 000000000000000f RSI: 00007fb3331d40a0 RDI: 0000000000000005 [ 263.821257][T11372] RBP: 00007fb3331d4090 R08: 0000000000000000 R09: 0000000000000000 [ 263.821270][T11372] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 263.821283][T11372] R13: 00007fb3325b6038 R14: 00007fb3325b5fa0 R15: 00007fff5c971438 [ 263.821318][T11372] [ 264.166141][T11383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'. [ 264.176710][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1857'. [ 264.553693][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1863'. [ 264.631227][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1865'. [ 264.634530][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1866'. [ 264.693246][T11411] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1866'. [ 265.029075][T11421] syzkaller0: entered promiscuous mode [ 265.034637][T11421] syzkaller0: entered allmulticast mode [ 266.302066][T11442] FAULT_INJECTION: forcing a failure. [ 266.302066][T11442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.320391][T11442] CPU: 0 UID: 0 PID: 11442 Comm: syz.1.1877 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 266.320424][T11442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.320437][T11442] Call Trace: [ 266.320446][T11442] [ 266.320455][T11442] dump_stack_lvl+0x189/0x250 [ 266.320483][T11442] ? __pfx____ratelimit+0x10/0x10 [ 266.320515][T11442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.320545][T11442] ? __pfx__printk+0x10/0x10 [ 266.320573][T11442] ? __might_fault+0xb0/0x130 [ 266.320618][T11442] should_fail_ex+0x414/0x560 [ 266.320658][T11442] _copy_from_user+0x2d/0xb0 [ 266.320690][T11442] map_update_elem+0x4a6/0x750 [ 266.320734][T11442] __sys_bpf+0x63a/0x870 [ 266.320767][T11442] ? __pfx___sys_bpf+0x10/0x10 [ 266.320811][T11442] ? ksys_write+0x22a/0x250 [ 266.320845][T11442] ? __pfx_ksys_write+0x10/0x10 [ 266.320873][T11442] ? rcu_is_watching+0x15/0xb0 [ 266.320915][T11442] __x64_sys_bpf+0x7c/0x90 [ 266.320943][T11442] do_syscall_64+0xfa/0x3b0 [ 266.320974][T11442] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.321003][T11442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.321025][T11442] ? clear_bhb_loop+0x60/0xb0 [ 266.321051][T11442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.321072][T11442] RIP: 0033:0x7fbb92d8ebe9 [ 266.321091][T11442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.321109][T11442] RSP: 002b:00007fbb90ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 266.321133][T11442] RAX: ffffffffffffffda RBX: 00007fbb92fb5fa0 RCX: 00007fbb92d8ebe9 [ 266.321149][T11442] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000002 [ 266.321162][T11442] RBP: 00007fbb90ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 266.321175][T11442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.321188][T11442] R13: 00007fbb92fb6038 R14: 00007fbb92fb5fa0 R15: 00007ffd83b40898 [ 266.321222][T11442] [ 266.591695][T11444] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 266.600211][T11444] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1878'. [ 266.831790][T11450] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1881'. [ 267.358248][T11424] vlan2: entered allmulticast mode [ 267.363439][T11424] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 267.798624][T11465] FAULT_INJECTION: forcing a failure. [ 267.798624][T11465] name failslab, interval 1, probability 0, space 0, times 0 [ 267.811731][T11465] CPU: 0 UID: 0 PID: 11465 Comm: syz.2.1889 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 267.811761][T11465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.811772][T11465] Call Trace: [ 267.811781][T11465] [ 267.811790][T11465] dump_stack_lvl+0x189/0x250 [ 267.811817][T11465] ? __pfx____ratelimit+0x10/0x10 [ 267.811849][T11465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.811870][T11465] ? __pfx__printk+0x10/0x10 [ 267.811899][T11465] ? stack_trace_save+0x9c/0xe0 [ 267.811927][T11465] ? stack_depot_save_flags+0x40/0x900 [ 267.811952][T11465] should_fail_ex+0x414/0x560 [ 267.811992][T11465] should_failslab+0xa8/0x100 [ 267.812015][T11465] kmem_cache_alloc_noprof+0x73/0x3c0 [ 267.812046][T11465] ? xfrm_state_alloc+0x24/0x2f0 [ 267.812084][T11465] xfrm_state_alloc+0x24/0x2f0 [ 267.812118][T11465] __find_acq_core+0x8a7/0x1c00 [ 267.812154][T11465] ? xfrm_find_acq+0x4b/0xa0 [ 267.812192][T11465] xfrm_find_acq+0x78/0xa0 [ 267.812227][T11465] xfrm_alloc_userspi+0x6b3/0xc90 [ 267.812259][T11465] ? __pfx_aa_get_newest_label+0x10/0x10 [ 267.812300][T11465] ? apparmor_capable+0x137/0x1b0 [ 267.812321][T11465] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 267.812351][T11465] ? __nla_parse+0x40/0x60 [ 267.812380][T11465] xfrm_user_rcv_msg+0x7a0/0xab0 [ 267.812412][T11465] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 267.812476][T11465] ? __pfx___mutex_trylock_common+0x10/0x10 [ 267.812505][T11465] ? rcu_is_watching+0x15/0xb0 [ 267.812538][T11465] ? trace_contention_end+0x39/0x120 [ 267.812562][T11465] ? __mutex_lock+0x335/0x1340 [ 267.812601][T11465] netlink_rcv_skb+0x208/0x470 [ 267.812633][T11465] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 267.812660][T11465] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 267.812708][T11465] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.812739][T11465] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.812774][T11465] xfrm_netlink_rcv+0x79/0x90 [ 267.812800][T11465] netlink_unicast+0x82c/0x9e0 [ 267.812837][T11465] ? __pfx_netlink_unicast+0x10/0x10 [ 267.812867][T11465] ? netlink_sendmsg+0x642/0xb30 [ 267.812897][T11465] ? skb_put+0x11b/0x210 [ 267.812922][T11465] netlink_sendmsg+0x805/0xb30 [ 267.812964][T11465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.813000][T11465] ? aa_sock_msg_perm+0x94/0x160 [ 267.813030][T11465] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.813053][T11465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.813085][T11465] __sock_sendmsg+0x21c/0x270 [ 267.813117][T11465] ____sys_sendmsg+0x505/0x830 [ 267.813155][T11465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.813188][T11465] ? import_iovec+0x74/0xa0 [ 267.813223][T11465] ___sys_sendmsg+0x21f/0x2a0 [ 267.813247][T11465] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.813312][T11465] ? __fget_files+0x2a/0x420 [ 267.813333][T11465] ? __fget_files+0x3a0/0x420 [ 267.813366][T11465] __x64_sys_sendmsg+0x19b/0x260 [ 267.813393][T11465] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.813426][T11465] ? __pfx_ksys_write+0x10/0x10 [ 267.813455][T11465] ? rcu_is_watching+0x15/0xb0 [ 267.813494][T11465] ? do_syscall_64+0xbe/0x3b0 [ 267.813533][T11465] do_syscall_64+0xfa/0x3b0 [ 267.813564][T11465] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.813594][T11465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.813616][T11465] ? clear_bhb_loop+0x60/0xb0 [ 267.813642][T11465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.813663][T11465] RIP: 0033:0x7f170078ebe9 [ 267.813683][T11465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.813702][T11465] RSP: 002b:00007f170158b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.813727][T11465] RAX: ffffffffffffffda RBX: 00007f17009b5fa0 RCX: 00007f170078ebe9 [ 267.813742][T11465] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000041 [ 267.813756][T11465] RBP: 00007f170158b090 R08: 0000000000000000 R09: 0000000000000000 [ 267.813769][T11465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.813782][T11465] R13: 00007f17009b6038 R14: 00007f17009b5fa0 R15: 00007ffd0776ef68 [ 267.813818][T11465] [ 268.970849][T11499] FAULT_INJECTION: forcing a failure. [ 268.970849][T11499] name failslab, interval 1, probability 0, space 0, times 0 [ 268.986300][T11499] CPU: 0 UID: 0 PID: 11499 Comm: syz.2.1901 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 268.986333][T11499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.986346][T11499] Call Trace: [ 268.986354][T11499] [ 268.986363][T11499] dump_stack_lvl+0x189/0x250 [ 268.986391][T11499] ? __pfx____ratelimit+0x10/0x10 [ 268.986423][T11499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.986445][T11499] ? __pfx__printk+0x10/0x10 [ 268.986479][T11499] ? __pfx___might_resched+0x10/0x10 [ 268.986511][T11499] ? fs_reclaim_acquire+0x7d/0x100 [ 268.986540][T11499] should_fail_ex+0x414/0x560 [ 268.986581][T11499] should_failslab+0xa8/0x100 [ 268.986604][T11499] __kmalloc_node_noprof+0xd1/0x4e0 [ 268.986635][T11499] ? qdisc_alloc+0x97/0xaa0 [ 268.986672][T11499] qdisc_alloc+0x97/0xaa0 [ 268.986711][T11499] qdisc_create+0x12c/0xea0 [ 268.986742][T11499] ? nla_strcmp+0xe6/0x140 [ 268.986770][T11499] tc_modify_qdisc+0x1538/0x20e0 [ 268.986816][T11499] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 268.986879][T11499] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 268.986904][T11499] rtnetlink_rcv_msg+0x779/0xb70 [ 268.986941][T11499] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 268.986972][T11499] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 268.987002][T11499] ? ref_tracker_free+0x63a/0x7d0 [ 268.987032][T11499] ? __asan_memcpy+0x40/0x70 [ 268.987059][T11499] ? __pfx_ref_tracker_free+0x10/0x10 [ 268.987094][T11499] netlink_rcv_skb+0x208/0x470 [ 268.987127][T11499] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 268.987162][T11499] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 268.987208][T11499] ? netlink_deliver_tap+0x2e/0x1b0 [ 268.987250][T11499] netlink_unicast+0x82c/0x9e0 [ 268.987290][T11499] ? __pfx_netlink_unicast+0x10/0x10 [ 268.987322][T11499] ? netlink_sendmsg+0x642/0xb30 [ 268.987352][T11499] ? skb_put+0x11b/0x210 [ 268.987377][T11499] netlink_sendmsg+0x805/0xb30 [ 268.987421][T11499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.987457][T11499] ? aa_sock_msg_perm+0x94/0x160 [ 268.987488][T11499] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.987513][T11499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.987547][T11499] __sock_sendmsg+0x21c/0x270 [ 268.987579][T11499] ____sys_sendmsg+0x52d/0x830 [ 268.987610][T11499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.987644][T11499] ? import_iovec+0x74/0xa0 [ 268.987678][T11499] ___sys_sendmsg+0x21f/0x2a0 [ 268.987703][T11499] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.987770][T11499] ? __fget_files+0x2a/0x420 [ 268.987790][T11499] ? __fget_files+0x3a0/0x420 [ 268.987824][T11499] __sys_sendmmsg+0x227/0x430 [ 268.987854][T11499] ? __pfx___sys_sendmmsg+0x10/0x10 [ 268.987874][T11499] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 268.987939][T11499] ? ksys_write+0x22a/0x250 [ 268.987973][T11499] ? __pfx_ksys_write+0x10/0x10 [ 268.988001][T11499] ? rcu_is_watching+0x15/0xb0 [ 268.988049][T11499] __x64_sys_sendmmsg+0xa0/0xc0 [ 268.988075][T11499] do_syscall_64+0xfa/0x3b0 [ 268.988106][T11499] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.988136][T11499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.988158][T11499] ? clear_bhb_loop+0x60/0xb0 [ 268.988185][T11499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.988207][T11499] RIP: 0033:0x7f170078ebe9 [ 268.988226][T11499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.988245][T11499] RSP: 002b:00007f170158b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 268.988270][T11499] RAX: ffffffffffffffda RBX: 00007f17009b5fa0 RCX: 00007f170078ebe9 [ 268.988287][T11499] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 268.988302][T11499] RBP: 00007f170158b090 R08: 0000000000000000 R09: 0000000000000000 [ 268.988316][T11499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.988329][T11499] R13: 00007f17009b6038 R14: 00007f17009b5fa0 R15: 00007ffd0776ef68 [ 268.988365][T11499] [ 268.992131][T11501] FAULT_INJECTION: forcing a failure. [ 268.992131][T11501] name failslab, interval 1, probability 0, space 0, times 0 [ 269.434986][T11501] CPU: 0 UID: 0 PID: 11501 Comm: syz.3.1902 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 269.435020][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.435033][T11501] Call Trace: [ 269.435042][T11501] [ 269.435051][T11501] dump_stack_lvl+0x189/0x250 [ 269.435079][T11501] ? __pfx____ratelimit+0x10/0x10 [ 269.435111][T11501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.435133][T11501] ? __pfx__printk+0x10/0x10 [ 269.435166][T11501] ? __pfx___might_resched+0x10/0x10 [ 269.435198][T11501] ? fs_reclaim_acquire+0x7d/0x100 [ 269.435226][T11501] should_fail_ex+0x414/0x560 [ 269.435265][T11501] should_failslab+0xa8/0x100 [ 269.435296][T11501] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 269.435329][T11501] ? __alloc_skb+0x112/0x2d0 [ 269.435366][T11501] __alloc_skb+0x112/0x2d0 [ 269.435403][T11501] netlink_ack+0x146/0xa50 [ 269.435431][T11501] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 269.435461][T11501] ? ref_tracker_free+0x63a/0x7d0 [ 269.435484][T11501] ? __asan_memcpy+0x40/0x70 [ 269.435509][T11501] ? __pfx_ref_tracker_free+0x10/0x10 [ 269.435541][T11501] netlink_rcv_skb+0x28c/0x470 [ 269.435575][T11501] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 269.435609][T11501] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 269.435654][T11501] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.435694][T11501] netlink_unicast+0x82c/0x9e0 [ 269.435729][T11501] ? __pfx_netlink_unicast+0x10/0x10 [ 269.435758][T11501] ? netlink_sendmsg+0x642/0xb30 [ 269.435788][T11501] ? skb_put+0x11b/0x210 [ 269.435812][T11501] netlink_sendmsg+0x805/0xb30 [ 269.435855][T11501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.435891][T11501] ? aa_sock_msg_perm+0x94/0x160 [ 269.435922][T11501] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.435946][T11501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.435980][T11501] __sock_sendmsg+0x21c/0x270 [ 269.436012][T11501] ____sys_sendmsg+0x52d/0x830 [ 269.436042][T11501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.436074][T11501] ? import_iovec+0x74/0xa0 [ 269.436108][T11501] ___sys_sendmsg+0x21f/0x2a0 [ 269.436133][T11501] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.436196][T11501] ? __fget_files+0x2a/0x420 [ 269.436216][T11501] ? __fget_files+0x3a0/0x420 [ 269.436248][T11501] __sys_sendmmsg+0x227/0x430 [ 269.436283][T11501] ? __pfx___sys_sendmmsg+0x10/0x10 [ 269.436303][T11501] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 269.436366][T11501] ? ksys_write+0x22a/0x250 [ 269.436398][T11501] ? __pfx_ksys_write+0x10/0x10 [ 269.436426][T11501] ? rcu_is_watching+0x15/0xb0 [ 269.436467][T11501] __x64_sys_sendmmsg+0xa0/0xc0 [ 269.436492][T11501] do_syscall_64+0xfa/0x3b0 [ 269.436523][T11501] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.436553][T11501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.436573][T11501] ? clear_bhb_loop+0x60/0xb0 [ 269.436599][T11501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.436621][T11501] RIP: 0033:0x7fb33238ebe9 [ 269.436640][T11501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.436658][T11501] RSP: 002b:00007fb3331d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 269.436682][T11501] RAX: ffffffffffffffda RBX: 00007fb3325b5fa0 RCX: 00007fb33238ebe9 [ 269.436698][T11501] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 269.436713][T11501] RBP: 00007fb3331d4090 R08: 0000000000000000 R09: 0000000000000000 [ 269.436725][T11501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.436737][T11501] R13: 00007fb3325b6038 R14: 00007fb3325b5fa0 R15: 00007fff5c971438 [ 269.436771][T11501] [ 270.087860][T11525] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1910'. [ 270.533333][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1921'. [ 270.812705][T11562] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1926'. [ 270.841230][T11562] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1926'. [ 271.008469][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1930'. [ 271.013615][T11574] netlink: 'syz.0.1929': attribute type 1 has an invalid length. [ 271.022841][T11575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1931'. [ 271.063151][T11574] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.139375][T11574] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.158058][T11574] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 271.182266][T11574] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 271.193410][T11582] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1933'. [ 271.207361][T11584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1929'. [ 271.307574][T11591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.340884][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.385101][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.459640][T11581] veth15: entered promiscuous mode [ 271.486432][T11581] bond6: (slave veth15): Enslaving as an active interface with an up link [ 271.521001][T11584] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.676991][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1937'. [ 271.687155][T11607] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 271.697079][T11607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.738050][T11607] vlan4: entered promiscuous mode [ 271.743343][T11607] bridge0: entered promiscuous mode [ 272.621033][T11629] netlink: 'syz.2.1947': attribute type 1 has an invalid length. [ 272.648337][T11631] 0ªî{X¹¦: entered promiscuous mode [ 272.654780][T11631] vlan3: entered promiscuous mode [ 272.775207][T11638] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 272.793872][T11629] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.857017][T11629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1947'. [ 272.881064][T11637] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.891242][T11637] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 272.904116][T11637] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 272.949548][T11641] veth15: entered promiscuous mode [ 272.969657][T11641] bond6: (slave veth15): Enslaving as an active interface with an up link [ 272.979434][T11645] tipc: Enabled bearer , priority 0 [ 272.988342][T11629] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.150685][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'. [ 273.248572][T11663] FAULT_INJECTION: forcing a failure. [ 273.248572][T11663] name failslab, interval 1, probability 0, space 0, times 0 [ 273.274654][T11663] CPU: 0 UID: 0 PID: 11663 Comm: syz.2.1955 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 273.274688][T11663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.274703][T11663] Call Trace: [ 273.274712][T11663] [ 273.274723][T11663] dump_stack_lvl+0x189/0x250 [ 273.274752][T11663] ? __pfx____ratelimit+0x10/0x10 [ 273.274784][T11663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.274807][T11663] ? __pfx__printk+0x10/0x10 [ 273.274842][T11663] ? __pfx___might_resched+0x10/0x10 [ 273.274874][T11663] ? fs_reclaim_acquire+0x7d/0x100 [ 273.274904][T11663] should_fail_ex+0x414/0x560 [ 273.274948][T11663] should_failslab+0xa8/0x100 [ 273.274972][T11663] __kmalloc_cache_noprof+0x70/0x3d0 [ 273.275003][T11663] ? nl80211_prepare_wdev_dump+0x2c3/0x6a0 [ 273.275039][T11663] nl80211_prepare_wdev_dump+0x2c3/0x6a0 [ 273.275077][T11663] nl80211_dump_mpp+0x137/0x720 [ 273.275124][T11663] ? __pfx_nl80211_dump_mpp+0x10/0x10 [ 273.275159][T11663] ? trace_kmalloc+0x1f/0xd0 [ 273.275186][T11663] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 273.275229][T11663] ? __build_skb_around+0x257/0x3e0 [ 273.275269][T11663] genl_dumpit+0x10b/0x1b0 [ 273.275299][T11663] netlink_dump+0x6e1/0xe90 [ 273.275344][T11663] ? __pfx_netlink_dump+0x10/0x10 [ 273.275395][T11663] ? genl_start+0x499/0x6c0 [ 273.275429][T11663] __netlink_dump_start+0x5cb/0x7e0 [ 273.275470][T11663] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 273.275501][T11663] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 273.275534][T11663] ? rcu_is_watching+0x15/0xb0 [ 273.275566][T11663] ? __pfx_genl_start+0x10/0x10 [ 273.275587][T11663] ? __pfx_genl_dumpit+0x10/0x10 [ 273.275610][T11663] ? __pfx_genl_done+0x10/0x10 [ 273.275646][T11663] ? bpf_lsm_capable+0x9/0x20 [ 273.275677][T11663] ? security_capable+0x7e/0x2e0 [ 273.275713][T11663] genl_rcv_msg+0x5da/0x790 [ 273.275746][T11663] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.275770][T11663] ? __pfx_nl80211_dump_mpp+0x10/0x10 [ 273.275801][T11663] ? __asan_memcpy+0x40/0x70 [ 273.275829][T11663] ? __pfx_ref_tracker_free+0x10/0x10 [ 273.275861][T11663] netlink_rcv_skb+0x208/0x470 [ 273.275890][T11663] ? __lock_acquire+0xab9/0xd20 [ 273.275922][T11663] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.275948][T11663] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.276002][T11663] ? down_read+0x1ad/0x2e0 [ 273.276025][T11663] genl_rcv+0x28/0x40 [ 273.276048][T11663] netlink_unicast+0x82c/0x9e0 [ 273.276088][T11663] ? __pfx_netlink_unicast+0x10/0x10 [ 273.276119][T11663] ? netlink_sendmsg+0x642/0xb30 [ 273.276150][T11663] ? skb_put+0x11b/0x210 [ 273.276174][T11663] netlink_sendmsg+0x805/0xb30 [ 273.276219][T11663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.276256][T11663] ? aa_sock_msg_perm+0x94/0x160 [ 273.276287][T11663] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.276311][T11663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.276346][T11663] __sock_sendmsg+0x21c/0x270 [ 273.276378][T11663] ____sys_sendmsg+0x505/0x830 [ 273.276408][T11663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.276442][T11663] ? import_iovec+0x74/0xa0 [ 273.276496][T11663] ___sys_sendmsg+0x21f/0x2a0 [ 273.276523][T11663] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.276589][T11663] ? __fget_files+0x2a/0x420 [ 273.276609][T11663] ? __fget_files+0x3a0/0x420 [ 273.276652][T11663] __x64_sys_sendmsg+0x19b/0x260 [ 273.276679][T11663] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.276715][T11663] ? __pfx_ksys_write+0x10/0x10 [ 273.276754][T11663] ? do_syscall_64+0xbe/0x3b0 [ 273.276791][T11663] do_syscall_64+0xfa/0x3b0 [ 273.276821][T11663] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.276852][T11663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.276873][T11663] ? clear_bhb_loop+0x60/0xb0 [ 273.276900][T11663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.276922][T11663] RIP: 0033:0x7f170078ebe9 [ 273.276942][T11663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.276961][T11663] RSP: 002b:00007f170156a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.276986][T11663] RAX: ffffffffffffffda RBX: 00007f17009b6090 RCX: 00007f170078ebe9 [ 273.277002][T11663] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 273.277016][T11663] RBP: 00007f170156a090 R08: 0000000000000000 R09: 0000000000000000 [ 273.277029][T11663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.277042][T11663] R13: 00007f17009b6128 R14: 00007f17009b6090 R15: 00007ffd0776ef68 [ 273.277078][T11663] [ 274.073512][T11675] tipc: Enabling of bearer rejected, failed to enable media [ 274.083429][T11675] syzkaller0: entered promiscuous mode [ 274.089025][T11675] syzkaller0: entered allmulticast mode [ 274.328529][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1962'. [ 274.461932][T11696] netlink: 'syz.0.1966': attribute type 1 has an invalid length. [ 274.649772][T11703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 276.119997][T11686] vlan0: entered allmulticast mode [ 276.125310][T11686] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 276.242081][T11696] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.351930][T11714] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1969'. [ 276.371360][T11715] netlink: 'syz.4.1972': attribute type 1 has an invalid length. [ 276.379727][T11715] netlink: 'syz.4.1972': attribute type 3 has an invalid length. [ 276.388350][T11715] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1972'. [ 276.427944][T11717] netlink: 'syz.4.1972': attribute type 10 has an invalid length. [ 276.437120][T11718] Bluetooth: MGMT ver 1.23 [ 276.566120][T11699] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.573440][T11699] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 276.589329][T11699] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 276.651409][T11701] veth17: entered promiscuous mode [ 276.660690][T11701] bond7: (slave veth17): Enslaving as an active interface with an up link [ 276.672832][T11703] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.696363][T11717] veth1_macvtap: left promiscuous mode [ 276.703423][T11717] team0: Device veth1_macvtap failed to register rx_handler [ 276.729530][T11727] netlink: 'syz.1.1973': attribute type 3 has an invalid length. [ 276.892107][T11733] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1976'. [ 276.922776][T11729] tipc: Enabled bearer , priority 0 [ 276.932041][T11733] netlink: 'syz.1.1976': attribute type 11 has an invalid length. [ 276.959693][T11729] tipc: Resetting bearer [ 276.970058][T11728] tipc: Disabling bearer [ 277.174166][T11742] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1980'. [ 277.394807][T11753] netlink: 'syz.3.1985': attribute type 1 has an invalid length. [ 277.500402][T11753] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.532001][T11758] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.539664][T11758] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 277.552277][T11758] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 277.573372][T11762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1985'. [ 277.592143][T11753] veth13: entered promiscuous mode [ 277.602234][T11753] bond6: (slave veth13): Enslaving as an active interface with an up link [ 277.617245][T11762] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.716803][T11767] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 277.724870][T11767] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1990'. [ 277.734113][T11767] nbd: illegal input index 1048576 [ 277.741584][T11770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1990'. [ 277.751737][T11767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1990'. [ 277.792478][T11772] tipc: Enabling of bearer rejected, already enabled [ 278.079006][T11785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.289462][T11795] tipc: Enabled bearer , priority 0 [ 278.401775][T11797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2001'. [ 278.746838][T11814] tipc: Enabling of bearer rejected, failed to enable media [ 278.753546][T11815] netlink: 'syz.3.2009': attribute type 2 has an invalid length. [ 278.768376][T11816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.797947][T11814] syzkaller0: entered promiscuous mode [ 278.814538][T11814] syzkaller0: entered allmulticast mode [ 278.893786][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 279.127719][T11829] tipc: Enabling of bearer rejected, already enabled [ 279.325714][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'. [ 279.792506][T11850] netlink: 'syz.3.2018': attribute type 3 has an invalid length. [ 279.804891][T11850] netlink: 'syz.3.2018': attribute type 3 has an invalid length. [ 279.836981][T11850] netlink: 'syz.3.2018': attribute type 3 has an invalid length. [ 279.852773][T11850] netlink: 'syz.3.2018': attribute type 3 has an invalid length. [ 279.871831][T11850] netlink: 'syz.3.2018': attribute type 3 has an invalid length. [ 279.881400][T11850] netlink: 'syz.3.2018': attribute type 3 has an invalid length. [ 279.891044][T11850] netlink: 'syz.3.2018': attribute type 3 has an invalid length. [ 279.900214][T11850] netlink: 'syz.3.2018': attribute type 3 has an invalid length. [ 280.282708][T11873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.478786][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2028'. [ 280.724328][T11893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.216591][T11953] __nla_validate_parse: 3 callbacks suppressed [ 282.216613][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2055'. [ 282.434046][T11964] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 282.493785][T11971] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 282.779171][T11985] validate_nla: 41 callbacks suppressed [ 282.779193][T11985] netlink: 'syz.4.2068': attribute type 10 has an invalid length. [ 282.794486][T11985] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2068'. [ 282.807676][T11985] batadv0: entered promiscuous mode [ 282.813521][T11985] batadv0: entered allmulticast mode [ 282.819638][T11985] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 283.012956][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'. [ 283.226784][T12004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2075'. [ 283.303624][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2077'. [ 283.342247][T12006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2077'. [ 283.572043][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2083'. [ 283.860848][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2086'. [ 283.873752][T12041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2087'. [ 284.165235][T12051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2090'. [ 284.258739][T12058] FAULT_INJECTION: forcing a failure. [ 284.258739][T12058] name failslab, interval 1, probability 0, space 0, times 0 [ 284.331816][T12058] CPU: 0 UID: 0 PID: 12058 Comm: syz.4.2093 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 284.331851][T12058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.331866][T12058] Call Trace: [ 284.331875][T12058] [ 284.331884][T12058] dump_stack_lvl+0x189/0x250 [ 284.331914][T12058] ? __pfx____ratelimit+0x10/0x10 [ 284.331947][T12058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.331976][T12058] ? __pfx__printk+0x10/0x10 [ 284.332007][T12058] ? __pfx___might_resched+0x10/0x10 [ 284.332040][T12058] ? fs_reclaim_acquire+0x7d/0x100 [ 284.332074][T12058] should_fail_ex+0x414/0x560 [ 284.332115][T12058] should_failslab+0xa8/0x100 [ 284.332138][T12058] __kmalloc_noprof+0xcb/0x4f0 [ 284.332169][T12058] ? tomoyo_encode+0x28b/0x550 [ 284.332206][T12058] tomoyo_encode+0x28b/0x550 [ 284.332249][T12058] tomoyo_realpath_from_path+0x58d/0x5d0 [ 284.332284][T12058] ? tomoyo_domain+0xd9/0x130 [ 284.332323][T12058] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 284.332350][T12058] tomoyo_path_number_perm+0x1e8/0x5a0 [ 284.332380][T12058] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 284.332428][T12058] ? __lock_acquire+0xab9/0xd20 [ 284.332483][T12058] ? __fget_files+0x2a/0x420 [ 284.332508][T12058] ? __fget_files+0x2a/0x420 [ 284.332527][T12058] ? __fget_files+0x3a0/0x420 [ 284.332547][T12058] ? __fget_files+0x2a/0x420 [ 284.332579][T12058] security_file_ioctl+0xcb/0x2d0 [ 284.332607][T12058] __se_sys_ioctl+0x47/0x170 [ 284.332640][T12058] do_syscall_64+0xfa/0x3b0 [ 284.332671][T12058] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.332702][T12058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.332725][T12058] ? clear_bhb_loop+0x60/0xb0 [ 284.332752][T12058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.332773][T12058] RIP: 0033:0x7f64edb8ebe9 [ 284.332794][T12058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.332814][T12058] RSP: 002b:00007f64ee96e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.332839][T12058] RAX: ffffffffffffffda RBX: 00007f64eddb5fa0 RCX: 00007f64edb8ebe9 [ 284.332856][T12058] RDX: 0000200000000440 RSI: 0000000000008922 RDI: 0000000000000003 [ 284.332871][T12058] RBP: 00007f64ee96e090 R08: 0000000000000000 R09: 0000000000000000 [ 284.332885][T12058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.332897][T12058] R13: 00007f64eddb6038 R14: 00007f64eddb5fa0 R15: 00007ffc58556d18 [ 284.332934][T12058] [ 284.333032][T12058] ERROR: Out of memory at tomoyo_realpath_from_path. [ 285.329621][T12104] wg1: entered promiscuous mode [ 286.799711][T12161] tipc: Enabling of bearer rejected, failed to enable media [ 286.842679][T12164] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 287.887927][T12205] netlink: 'syz.3.2145': attribute type 4 has an invalid length. [ 287.922807][T12205] __nla_validate_parse: 7 callbacks suppressed [ 287.922825][T12205] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2145'. [ 287.976933][T12210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2146'. [ 287.996720][T12205] : renamed from bond0 (while UP) [ 288.024676][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'. [ 288.041246][T12210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2146'. [ 288.173361][T12212] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2147'. [ 288.596374][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2156'. [ 288.845393][T12239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2158'. [ 288.878547][T12241] veth13: entered promiscuous mode [ 288.928884][T12249] FAULT_INJECTION: forcing a failure. [ 288.928884][T12249] name failslab, interval 1, probability 0, space 0, times 0 [ 288.984245][T12249] CPU: 0 UID: 0 PID: 12249 Comm: syz.2.2161 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 288.984278][T12249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.984292][T12249] Call Trace: [ 288.984300][T12249] [ 288.984310][T12249] dump_stack_lvl+0x189/0x250 [ 288.984339][T12249] ? __pfx____ratelimit+0x10/0x10 [ 288.984370][T12249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.984393][T12249] ? __pfx__printk+0x10/0x10 [ 288.984423][T12249] ? __pfx___might_resched+0x10/0x10 [ 288.984455][T12249] ? fs_reclaim_acquire+0x7d/0x100 [ 288.984483][T12249] should_fail_ex+0x414/0x560 [ 288.984522][T12249] should_failslab+0xa8/0x100 [ 288.984544][T12249] kmem_cache_alloc_noprof+0x73/0x3c0 [ 288.984576][T12249] ? radix_tree_node_alloc+0x7e/0x3a0 [ 288.984610][T12249] radix_tree_node_alloc+0x7e/0x3a0 [ 288.984646][T12249] idr_get_free+0x2b3/0xa70 [ 288.984689][T12249] idr_alloc_u32+0x159/0x2d0 [ 288.984726][T12249] ? __pfx_idr_alloc_u32+0x10/0x10 [ 288.984764][T12249] ? tcf_idr_check_alloc+0xc8/0x7b0 [ 288.984795][T12249] tcf_idr_check_alloc+0x5de/0x7b0 [ 288.984821][T12249] ? tcf_idr_check_alloc+0xc8/0x7b0 [ 288.984845][T12249] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 288.984873][T12249] ? __nla_parse+0x40/0x60 [ 288.984901][T12249] tcf_skbmod_init+0x2ce/0xb40 [ 288.984948][T12249] ? __pfx_tcf_skbmod_init+0x10/0x10 [ 288.984991][T12249] ? nla_memcpy+0x5b/0xc0 [ 288.985025][T12249] tcf_action_init_1+0x460/0x6d0 [ 288.985060][T12249] ? __pfx_tcf_action_init_1+0x10/0x10 [ 288.985086][T12249] ? _raw_read_unlock+0x28/0x50 [ 288.985114][T12249] ? tc_action_load_ops+0x214/0x4e0 [ 288.985170][T12249] ? __nla_parse+0x40/0x60 [ 288.985198][T12249] tcf_action_init+0x2cf/0xab0 [ 288.985226][T12249] ? __lock_acquire+0xab9/0xd20 [ 288.985262][T12249] ? __pfx_tcf_action_init+0x10/0x10 [ 288.985319][T12249] ? trace_sched_exit_tp+0x38/0x120 [ 288.985347][T12249] ? __pfx___nla_validate_parse+0x10/0x10 [ 288.985416][T12249] tc_ctl_action+0x430/0xbd0 [ 288.985455][T12249] ? __pfx_tc_ctl_action+0x10/0x10 [ 288.985488][T12249] ? rcu_is_watching+0x15/0xb0 [ 288.985577][T12249] ? __pfx_tc_ctl_action+0x10/0x10 [ 288.985603][T12249] rtnetlink_rcv_msg+0x779/0xb70 [ 288.985641][T12249] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 288.985673][T12249] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.985703][T12249] ? ref_tracker_free+0x63a/0x7d0 [ 288.985726][T12249] ? __asan_memcpy+0x40/0x70 [ 288.985754][T12249] ? __pfx_ref_tracker_free+0x10/0x10 [ 288.985788][T12249] netlink_rcv_skb+0x208/0x470 [ 288.985822][T12249] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.985857][T12249] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.985903][T12249] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.985943][T12249] netlink_unicast+0x82c/0x9e0 [ 288.985982][T12249] ? __pfx_netlink_unicast+0x10/0x10 [ 288.986013][T12249] ? netlink_sendmsg+0x642/0xb30 [ 288.986043][T12249] ? skb_put+0x11b/0x210 [ 288.986068][T12249] netlink_sendmsg+0x805/0xb30 [ 288.986111][T12249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.986159][T12249] ? aa_sock_msg_perm+0x94/0x160 [ 288.986190][T12249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.986216][T12249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.986248][T12249] __sock_sendmsg+0x21c/0x270 [ 288.986280][T12249] ____sys_sendmsg+0x52d/0x830 [ 288.986310][T12249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.986344][T12249] ? import_iovec+0x74/0xa0 [ 288.986378][T12249] ___sys_sendmsg+0x21f/0x2a0 [ 288.986404][T12249] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.986470][T12249] ? __fget_files+0x2a/0x420 [ 288.986490][T12249] ? __fget_files+0x3a0/0x420 [ 288.986524][T12249] __sys_sendmmsg+0x227/0x430 [ 288.986555][T12249] ? __pfx___sys_sendmmsg+0x10/0x10 [ 288.986576][T12249] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 288.986640][T12249] ? ksys_write+0x22a/0x250 [ 288.986674][T12249] ? __pfx_ksys_write+0x10/0x10 [ 288.986703][T12249] ? rcu_is_watching+0x15/0xb0 [ 288.986745][T12249] __x64_sys_sendmmsg+0xa0/0xc0 [ 288.986771][T12249] do_syscall_64+0xfa/0x3b0 [ 288.986802][T12249] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.986833][T12249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.986854][T12249] ? clear_bhb_loop+0x60/0xb0 [ 288.986882][T12249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.986903][T12249] RIP: 0033:0x7f170078ebe9 [ 288.986923][T12249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.986943][T12249] RSP: 002b:00007f170158b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 288.986968][T12249] RAX: ffffffffffffffda RBX: 00007f17009b5fa0 RCX: 00007f170078ebe9 [ 288.986985][T12249] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 288.986999][T12249] RBP: 00007f170158b090 R08: 0000000000000000 R09: 0000000000000000 [ 288.987013][T12249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.987025][T12249] R13: 00007f17009b6038 R14: 00007f17009b5fa0 R15: 00007ffd0776ef68 [ 288.987061][T12249] [ 289.503606][T12253] FAULT_INJECTION: forcing a failure. [ 289.503606][T12253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.533483][T12253] CPU: 1 UID: 0 PID: 12253 Comm: syz.1.2163 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 289.533516][T12253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.533530][T12253] Call Trace: [ 289.533538][T12253] [ 289.533548][T12253] dump_stack_lvl+0x189/0x250 [ 289.533578][T12253] ? __pfx____ratelimit+0x10/0x10 [ 289.533610][T12253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.533632][T12253] ? __pfx__printk+0x10/0x10 [ 289.533660][T12253] ? __might_fault+0xb0/0x130 [ 289.533704][T12253] should_fail_ex+0x414/0x560 [ 289.533745][T12253] _copy_from_user+0x2d/0xb0 [ 289.533778][T12253] kstrtouint_from_user+0xc4/0x170 [ 289.533807][T12253] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 289.533852][T12253] proc_fail_nth_write+0x88/0x200 [ 289.533879][T12253] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 289.533913][T12253] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 289.533941][T12253] vfs_write+0x27b/0xa90 [ 289.533983][T12253] ? __pfx_vfs_write+0x10/0x10 [ 289.534017][T12253] ? __fget_files+0x2a/0x420 [ 289.534044][T12253] ? __fget_files+0x3a0/0x420 [ 289.534065][T12253] ? __fget_files+0x2a/0x420 [ 289.534095][T12253] ksys_write+0x145/0x250 [ 289.534131][T12253] ? __pfx_ksys_write+0x10/0x10 [ 289.534158][T12253] ? rcu_is_watching+0x15/0xb0 [ 289.534198][T12253] ? do_syscall_64+0xbe/0x3b0 [ 289.534241][T12253] do_syscall_64+0xfa/0x3b0 [ 289.534276][T12253] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.534312][T12253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.534334][T12253] ? clear_bhb_loop+0x60/0xb0 [ 289.534368][T12253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.534393][T12253] RIP: 0033:0x7fbb92d8d69f [ 289.534413][T12253] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 289.534433][T12253] RSP: 002b:00007fbb90ff6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 289.534457][T12253] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbb92d8d69f [ 289.534473][T12253] RDX: 0000000000000001 RSI: 00007fbb90ff60a0 RDI: 0000000000000004 [ 289.534486][T12253] RBP: 00007fbb90ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 289.534499][T12253] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 289.534511][T12253] R13: 00007fbb92fb6038 R14: 00007fbb92fb5fa0 R15: 00007ffd83b40898 [ 289.534546][T12253] [ 289.865664][T12261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.953238][T12264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2168'. [ 290.342653][T12276] syzkaller0: entered promiscuous mode [ 290.362880][T12276] syzkaller0: entered allmulticast mode [ 290.772334][T12294] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 291.183445][T12308] veth15: entered promiscuous mode [ 291.191118][T12306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2184'. [ 291.259800][T12313] tipc: Enabling of bearer rejected, already enabled [ 291.420258][T12319] IPVS: Error connecting to the multicast addr [ 291.479219][T12321] team_slave_0: entered promiscuous mode [ 291.529340][T12319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.644723][T12332] netlink: 'syz.1.2194': attribute type 4 has an invalid length. [ 291.696027][T12332] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2194'. [ 291.731925][T12338] netlink: 'syz.3.2196': attribute type 2 has an invalid length. [ 291.775824][T12332] : renamed from bond0 (while UP) [ 291.831380][T12340] netlink: 'syz.0.2198': attribute type 21 has an invalid length. [ 291.874799][T12338] bond0: entered promiscuous mode [ 291.881290][T12338] bond0: entered allmulticast mode [ 291.888105][T12338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.897579][T12340] netlink: 'syz.0.2198': attribute type 4 has an invalid length. [ 291.915580][T12340] netlink: 'syz.0.2198': attribute type 5 has an invalid length. [ 292.260392][T12363] veth13: entered promiscuous mode [ 292.570488][T12381] netlink: 'syz.2.2210': attribute type 1 has an invalid length. [ 292.596962][T12384] FAULT_INJECTION: forcing a failure. [ 292.596962][T12384] name failslab, interval 1, probability 0, space 0, times 0 [ 292.643384][T12384] CPU: 1 UID: 0 PID: 12384 Comm: syz.1.2211 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 292.643421][T12384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.643434][T12384] Call Trace: [ 292.643443][T12384] [ 292.643452][T12384] dump_stack_lvl+0x189/0x250 [ 292.643480][T12384] ? __pfx____ratelimit+0x10/0x10 [ 292.643510][T12384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.643531][T12384] ? __pfx__printk+0x10/0x10 [ 292.643560][T12384] ? __pfx___might_resched+0x10/0x10 [ 292.643593][T12384] ? fs_reclaim_acquire+0x7d/0x100 [ 292.643622][T12384] should_fail_ex+0x414/0x560 [ 292.643661][T12384] should_failslab+0xa8/0x100 [ 292.643685][T12384] kmem_cache_alloc_noprof+0x73/0x3c0 [ 292.643716][T12384] ? radix_tree_node_alloc+0x7e/0x3a0 [ 292.643751][T12384] radix_tree_node_alloc+0x7e/0x3a0 [ 292.643787][T12384] idr_get_free+0x2b3/0xa70 [ 292.643831][T12384] idr_alloc_u32+0x159/0x2d0 [ 292.643869][T12384] ? __pfx_idr_alloc_u32+0x10/0x10 [ 292.643905][T12384] ? tcf_idr_check_alloc+0xc8/0x7b0 [ 292.643936][T12384] tcf_idr_check_alloc+0x5de/0x7b0 [ 292.643962][T12384] ? tcf_idr_check_alloc+0xc8/0x7b0 [ 292.643988][T12384] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 292.644023][T12384] ? __nla_parse+0x40/0x60 [ 292.644053][T12384] tcf_skbmod_init+0x2ce/0xb40 [ 292.644105][T12384] ? __pfx_tcf_skbmod_init+0x10/0x10 [ 292.644151][T12384] ? nla_memcpy+0x5b/0xc0 [ 292.644187][T12384] tcf_action_init_1+0x460/0x6d0 [ 292.644222][T12384] ? __pfx_tcf_action_init_1+0x10/0x10 [ 292.644249][T12384] ? _raw_read_unlock+0x28/0x50 [ 292.644284][T12384] ? tc_action_load_ops+0x214/0x4e0 [ 292.644330][T12384] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 292.644360][T12384] ? __nla_parse+0x40/0x60 [ 292.644387][T12384] tcf_action_init+0x2cf/0xab0 [ 292.644427][T12384] ? __pfx_tcf_action_init+0x10/0x10 [ 292.644488][T12384] ? __pfx___nla_validate_parse+0x10/0x10 [ 292.644556][T12384] tc_ctl_action+0x430/0xbd0 [ 292.644597][T12384] ? __pfx_tc_ctl_action+0x10/0x10 [ 292.644630][T12384] ? rcu_is_watching+0x15/0xb0 [ 292.644663][T12384] ? trace_contention_end+0x39/0x120 [ 292.644738][T12384] ? __pfx_tc_ctl_action+0x10/0x10 [ 292.644765][T12384] rtnetlink_rcv_msg+0x779/0xb70 [ 292.644802][T12384] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 292.644833][T12384] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.644862][T12384] ? ref_tracker_free+0x63a/0x7d0 [ 292.644885][T12384] ? __asan_memcpy+0x40/0x70 [ 292.644911][T12384] ? __pfx_ref_tracker_free+0x10/0x10 [ 292.644944][T12384] netlink_rcv_skb+0x208/0x470 [ 292.644978][T12384] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.645011][T12384] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.645057][T12384] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.645108][T12384] netlink_unicast+0x82c/0x9e0 [ 292.645148][T12384] ? __pfx_netlink_unicast+0x10/0x10 [ 292.645179][T12384] ? netlink_sendmsg+0x642/0xb30 [ 292.645219][T12384] ? skb_put+0x11b/0x210 [ 292.645245][T12384] netlink_sendmsg+0x805/0xb30 [ 292.645289][T12384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.645327][T12384] ? aa_sock_msg_perm+0x94/0x160 [ 292.645359][T12384] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.645384][T12384] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.645418][T12384] __sock_sendmsg+0x21c/0x270 [ 292.645451][T12384] ____sys_sendmsg+0x52d/0x830 [ 292.645481][T12384] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.645515][T12384] ? import_iovec+0x74/0xa0 [ 292.645550][T12384] ___sys_sendmsg+0x21f/0x2a0 [ 292.645577][T12384] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.645645][T12384] ? __fget_files+0x2a/0x420 [ 292.645664][T12384] ? __fget_files+0x3a0/0x420 [ 292.645699][T12384] __sys_sendmmsg+0x227/0x430 [ 292.645729][T12384] ? __pfx___sys_sendmmsg+0x10/0x10 [ 292.645750][T12384] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 292.645815][T12384] ? ksys_write+0x22a/0x250 [ 292.645849][T12384] ? __pfx_ksys_write+0x10/0x10 [ 292.645877][T12384] ? rcu_is_watching+0x15/0xb0 [ 292.645919][T12384] __x64_sys_sendmmsg+0xa0/0xc0 [ 292.645945][T12384] do_syscall_64+0xfa/0x3b0 [ 292.645976][T12384] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.646006][T12384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.646029][T12384] ? clear_bhb_loop+0x60/0xb0 [ 292.646056][T12384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.646077][T12384] RIP: 0033:0x7fbb92d8ebe9 [ 292.646103][T12384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.646122][T12384] RSP: 002b:00007fbb90ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 292.646148][T12384] RAX: ffffffffffffffda RBX: 00007fbb92fb5fa0 RCX: 00007fbb92d8ebe9 [ 292.646164][T12384] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 292.646178][T12384] RBP: 00007fbb90ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 292.646192][T12384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.646205][T12384] R13: 00007fbb92fb6038 R14: 00007fbb92fb5fa0 R15: 00007ffd83b40898 [ 292.646239][T12384] [ 293.624079][T12411] __nla_validate_parse: 4 callbacks suppressed [ 293.624100][T12411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2219'. [ 293.666466][T12408] veth17: entered promiscuous mode [ 293.700526][T12413] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2221'. [ 293.834817][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2223'. [ 293.988979][T12413] bond0 (unregistering): Released all slaves [ 294.215976][T12429] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2225'. [ 294.479219][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2232'. [ 294.679223][T12447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2234'. [ 294.742235][T12456] veth17: entered promiscuous mode [ 294.768221][T12465] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2238'. [ 294.785105][T12466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.796653][T12465] xt_socket: unknown flags 0xd0 [ 295.452285][T12498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.615958][T12502] can: request_module (can-proto-0) failed. [ 296.262041][T12537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2265'. [ 296.314691][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2266'. [ 296.573774][T12551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2271'. [ 296.721713][T12555] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 297.169432][T12570] syzkaller0: entered promiscuous mode [ 297.186897][T12570] syzkaller0: entered allmulticast mode [ 298.066132][ T3527] wlan1: Trigger new scan to find an IBSS to join [ 298.490666][T12602] netlink: 'syz.4.2290': attribute type 11 has an invalid length. [ 298.499317][T12602] netlink: 'syz.4.2290': attribute type 11 has an invalid length. [ 299.181414][T12613] netlink: 'syz.2.2294': attribute type 24 has an invalid length. [ 299.373788][T12620] __nla_validate_parse: 5 callbacks suppressed [ 299.373811][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2298'. [ 299.427593][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2298'. [ 299.754835][T12642] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 299.913511][T12651] netlink: 'syz.1.2311': attribute type 83 has an invalid length. [ 300.167942][T12663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.351586][T12675] FAULT_INJECTION: forcing a failure. [ 300.351586][T12675] name failslab, interval 1, probability 0, space 0, times 0 [ 300.415333][T12675] CPU: 1 UID: 0 PID: 12675 Comm: syz.3.2318 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 300.415367][T12675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.415381][T12675] Call Trace: [ 300.415390][T12675] [ 300.415398][T12675] dump_stack_lvl+0x189/0x250 [ 300.415426][T12675] ? __pfx____ratelimit+0x10/0x10 [ 300.415458][T12675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.415480][T12675] ? __pfx__printk+0x10/0x10 [ 300.415502][T12675] ? nfnetlink_rcv+0x26a/0x2520 [ 300.415530][T12675] ? ____sys_sendmsg+0x505/0x830 [ 300.415551][T12675] ? __x64_sys_sendmsg+0x19b/0x260 [ 300.415585][T12675] should_fail_ex+0x414/0x560 [ 300.415624][T12675] should_failslab+0xa8/0x100 [ 300.415649][T12675] kmem_cache_alloc_noprof+0x73/0x3c0 [ 300.415681][T12675] ? skb_clone+0x212/0x3a0 [ 300.415715][T12675] skb_clone+0x212/0x3a0 [ 300.415743][T12675] __netlink_deliver_tap+0x404/0x850 [ 300.415790][T12675] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.415825][T12675] netlink_deliver_tap+0x19c/0x1b0 [ 300.415859][T12675] netlink_sendskb+0x68/0x140 [ 300.415891][T12675] netlink_unicast+0x397/0x9e0 [ 300.415917][T12675] ? __asan_memcpy+0x40/0x70 [ 300.415955][T12675] ? __pfx_netlink_unicast+0x10/0x10 [ 300.415996][T12675] netlink_rcv_skb+0x28c/0x470 [ 300.416029][T12675] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 300.416060][T12675] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.416115][T12675] ? bpf_lsm_capable+0x9/0x20 [ 300.416145][T12675] ? security_capable+0x7e/0x2e0 [ 300.416183][T12675] nfnetlink_rcv+0x26a/0x2520 [ 300.416216][T12675] ? __dev_queue_xmit+0x1d79/0x3b50 [ 300.416253][T12675] ? __dev_queue_xmit+0x27b/0x3b50 [ 300.416293][T12675] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 300.416321][T12675] ? __pfx___dev_queue_xmit+0x10/0x10 [ 300.416363][T12675] ? ref_tracker_free+0x63a/0x7d0 [ 300.416386][T12675] ? __asan_memcpy+0x40/0x70 [ 300.416413][T12675] ? __pfx_ref_tracker_free+0x10/0x10 [ 300.416453][T12675] ? skb_clone+0x246/0x3a0 [ 300.416482][T12675] ? __netlink_deliver_tap+0x807/0x850 [ 300.416514][T12675] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.416555][T12675] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.416597][T12675] netlink_unicast+0x82c/0x9e0 [ 300.416635][T12675] ? __pfx_netlink_unicast+0x10/0x10 [ 300.416667][T12675] ? netlink_sendmsg+0x642/0xb30 [ 300.416698][T12675] ? skb_put+0x11b/0x210 [ 300.416721][T12675] netlink_sendmsg+0x805/0xb30 [ 300.416764][T12675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.416798][T12675] ? aa_sock_msg_perm+0x94/0x160 [ 300.416829][T12675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.416854][T12675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.416887][T12675] __sock_sendmsg+0x21c/0x270 [ 300.416919][T12675] ____sys_sendmsg+0x505/0x830 [ 300.416949][T12675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.416981][T12675] ? import_iovec+0x74/0xa0 [ 300.417015][T12675] ___sys_sendmsg+0x21f/0x2a0 [ 300.417041][T12675] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.417111][T12675] ? __fget_files+0x2a/0x420 [ 300.417131][T12675] ? __fget_files+0x3a0/0x420 [ 300.417164][T12675] __x64_sys_sendmsg+0x19b/0x260 [ 300.417190][T12675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.417225][T12675] ? __pfx_ksys_write+0x10/0x10 [ 300.417253][T12675] ? rcu_is_watching+0x15/0xb0 [ 300.417293][T12675] ? do_syscall_64+0xbe/0x3b0 [ 300.417330][T12675] do_syscall_64+0xfa/0x3b0 [ 300.417361][T12675] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.417391][T12675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.417413][T12675] ? clear_bhb_loop+0x60/0xb0 [ 300.417439][T12675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.417460][T12675] RIP: 0033:0x7fb33238ebe9 [ 300.417480][T12675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.417498][T12675] RSP: 002b:00007fb3331d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.417523][T12675] RAX: ffffffffffffffda RBX: 00007fb3325b5fa0 RCX: 00007fb33238ebe9 [ 300.417539][T12675] RDX: 0000000000040040 RSI: 0000200000000300 RDI: 0000000000000003 [ 300.417553][T12675] RBP: 00007fb3331d4090 R08: 0000000000000000 R09: 0000000000000000 [ 300.417566][T12675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.417579][T12675] R13: 00007fb3325b6038 R14: 00007fb3325b5fa0 R15: 00007fff5c971438 [ 300.417614][T12675] [ 301.026093][ T37] wlan1: Trigger new scan to find an IBSS to join [ 301.124580][T12697] FAULT_INJECTION: forcing a failure. [ 301.124580][T12697] name failslab, interval 1, probability 0, space 0, times 0 [ 301.141005][T12697] CPU: 1 UID: 0 PID: 12697 Comm: syz.1.2326 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 301.141046][T12697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.141060][T12697] Call Trace: [ 301.141069][T12697] [ 301.141079][T12697] dump_stack_lvl+0x189/0x250 [ 301.141107][T12697] ? __pfx____ratelimit+0x10/0x10 [ 301.141140][T12697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.141163][T12697] ? __pfx__printk+0x10/0x10 [ 301.141208][T12697] should_fail_ex+0x414/0x560 [ 301.141249][T12697] should_failslab+0xa8/0x100 [ 301.141273][T12697] kmem_cache_alloc_noprof+0x73/0x3c0 [ 301.141305][T12697] ? skb_clone+0x212/0x3a0 [ 301.141335][T12697] skb_clone+0x212/0x3a0 [ 301.141363][T12697] __netlink_deliver_tap+0x404/0x850 [ 301.141411][T12697] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.141445][T12697] netlink_deliver_tap+0x19c/0x1b0 [ 301.141479][T12697] netlink_sendskb+0x68/0x140 [ 301.141511][T12697] netlink_unicast+0x397/0x9e0 [ 301.141551][T12697] ? __pfx_netlink_unicast+0x10/0x10 [ 301.141591][T12697] nlmsg_notify+0x12e/0x1a0 [ 301.141628][T12697] tc_ctl_action+0x92e/0xbd0 [ 301.141662][T12697] ? __pfx_tc_ctl_action+0x10/0x10 [ 301.141694][T12697] ? rcu_is_watching+0x15/0xb0 [ 301.141729][T12697] ? trace_contention_end+0x39/0x120 [ 301.141800][T12697] ? __pfx_tc_ctl_action+0x10/0x10 [ 301.141826][T12697] rtnetlink_rcv_msg+0x779/0xb70 [ 301.141864][T12697] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 301.141895][T12697] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 301.141925][T12697] ? ref_tracker_free+0x63a/0x7d0 [ 301.141948][T12697] ? __asan_memcpy+0x40/0x70 [ 301.141975][T12697] ? __pfx_ref_tracker_free+0x10/0x10 [ 301.142020][T12697] netlink_rcv_skb+0x208/0x470 [ 301.142054][T12697] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 301.142088][T12697] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.142134][T12697] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.142176][T12697] netlink_unicast+0x82c/0x9e0 [ 301.142216][T12697] ? __pfx_netlink_unicast+0x10/0x10 [ 301.142248][T12697] ? netlink_sendmsg+0x642/0xb30 [ 301.142278][T12697] ? skb_put+0x11b/0x210 [ 301.142304][T12697] netlink_sendmsg+0x805/0xb30 [ 301.142348][T12697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.142386][T12697] ? aa_sock_msg_perm+0x94/0x160 [ 301.142418][T12697] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.142442][T12697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.142477][T12697] __sock_sendmsg+0x21c/0x270 [ 301.142511][T12697] ____sys_sendmsg+0x52d/0x830 [ 301.142541][T12697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.142576][T12697] ? import_iovec+0x74/0xa0 [ 301.142611][T12697] ___sys_sendmsg+0x21f/0x2a0 [ 301.142637][T12697] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.142703][T12697] ? __fget_files+0x2a/0x420 [ 301.142723][T12697] ? __fget_files+0x3a0/0x420 [ 301.142755][T12697] __sys_sendmmsg+0x227/0x430 [ 301.142783][T12697] ? __pfx___sys_sendmmsg+0x10/0x10 [ 301.142803][T12697] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 301.142867][T12697] ? ksys_write+0x22a/0x250 [ 301.142900][T12697] ? __pfx_ksys_write+0x10/0x10 [ 301.142928][T12697] ? rcu_is_watching+0x15/0xb0 [ 301.142970][T12697] __x64_sys_sendmmsg+0xa0/0xc0 [ 301.142995][T12697] do_syscall_64+0xfa/0x3b0 [ 301.143033][T12697] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.143063][T12697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.143085][T12697] ? clear_bhb_loop+0x60/0xb0 [ 301.143111][T12697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.143132][T12697] RIP: 0033:0x7fbb92d8ebe9 [ 301.143151][T12697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.143170][T12697] RSP: 002b:00007fbb90ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 301.143195][T12697] RAX: ffffffffffffffda RBX: 00007fbb92fb5fa0 RCX: 00007fbb92d8ebe9 [ 301.143211][T12697] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 301.143225][T12697] RBP: 00007fbb90ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 301.143238][T12697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.143250][T12697] R13: 00007fbb92fb6038 R14: 00007fbb92fb5fa0 R15: 00007ffd83b40898 [ 301.143285][T12697] [ 301.942903][T12721] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2334'. [ 302.069786][T12725] tipc: Enabling of bearer rejected, already enabled [ 302.144731][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2338'. [ 302.291387][T12732] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 302.515200][T12746] netlink: 'syz.3.2342': attribute type 25 has an invalid length. [ 302.553964][T12748] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2343'. [ 302.709409][T12752] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2345'. [ 302.828770][T12763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.960441][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 302.987157][T12770] netlink: 'syz.4.2352': attribute type 1 has an invalid length. [ 302.996798][T12770] netlink: 'syz.4.2352': attribute type 1 has an invalid length. [ 303.147887][T12770] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 303.159941][T12770] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 303.169604][T12770] CPU: 0 UID: 0 PID: 12770 Comm: syz.4.2352 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 303.181338][T12770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.191460][T12770] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 303.197167][T12770] Code: ff ff ff e8 13 b5 41 01 89 c5 31 ff 89 c6 e8 08 9e 91 f7 85 ed 74 45 e8 bf 99 91 f7 eb 05 e8 b8 99 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 92 bc f4 f7 49 8b 2c 24 49 8d 7c [ 303.216809][T12770] RSP: 0018:ffffc900030a76a0 EFLAGS: 00010206 [ 303.223374][T12770] RAX: 000000001fffe000 RBX: 1ffff1100b353c82 RCX: 0000000000080000 [ 303.231429][T12770] RDX: ffffc9000bdca000 RSI: 000000000000331f RDI: 0000000000003320 [ 303.239454][T12770] RBP: 0000000000000001 R08: ffffffff8fa07bf7 R09: 1ffffffff1f40f7e [ 303.247454][T12770] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: 00000000ffff0000 [ 303.255454][T12770] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888059a9e410 [ 303.263452][T12770] FS: 00007f64ee96e6c0(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 303.272400][T12770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.279173][T12770] CR2: 0000200000019800 CR3: 0000000077020000 CR4: 00000000003526f0 [ 303.287333][T12770] Call Trace: [ 303.290639][T12770] [ 303.293581][T12770] mld_clear_delrec+0x160/0x660 [ 303.298459][T12770] ipv6_mc_destroy_dev+0x45/0x5a0 [ 303.303677][T12770] ? addrconf_ifdown+0x1396/0x1880 [ 303.308900][T12770] addrconf_ifdown+0x139e/0x1880 [ 303.313860][T12770] ? tls_dev_event+0x717/0xec0 [ 303.318647][T12770] ? __pfx_addrconf_ifdown+0x10/0x10 [ 303.323955][T12770] addrconf_notify+0x1bc/0x1010 [ 303.328845][T12770] notifier_call_chain+0x1b3/0x3e0 [ 303.333979][T12770] netif_set_mtu_ext+0x594/0x7d0 [ 303.338942][T12770] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 303.344414][T12770] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 303.350318][T12770] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 303.356663][T12770] ? rcu_is_watching+0x15/0xb0 [ 303.361449][T12770] netif_set_mtu+0xa4/0x150 [ 303.365993][T12770] ? __pfx_netif_set_mtu+0x10/0x10 [ 303.371214][T12770] ? netdev_name_node_lookup+0xdf/0x120 [ 303.376791][T12770] dev_set_mtu+0x126/0x260 [ 303.381305][T12770] dev_ioctl+0x7b4/0x1150 [ 303.385677][T12770] sock_do_ioctl+0x22c/0x300 [ 303.390390][T12770] ? __pfx_sock_do_ioctl+0x10/0x10 [ 303.395753][T12770] ? __lock_acquire+0xab9/0xd20 [ 303.400654][T12770] sock_ioctl+0x576/0x790 [ 303.405012][T12770] ? __pfx_sock_ioctl+0x10/0x10 [ 303.409885][T12770] ? __fget_files+0x2a/0x420 [ 303.414487][T12770] ? __fget_files+0x3a0/0x420 [ 303.419172][T12770] ? __fget_files+0x2a/0x420 [ 303.423865][T12770] ? bpf_lsm_file_ioctl+0x9/0x20 [ 303.428825][T12770] ? __pfx_sock_ioctl+0x10/0x10 [ 303.433723][T12770] __se_sys_ioctl+0xf9/0x170 [ 303.438429][T12770] do_syscall_64+0xfa/0x3b0 [ 303.442958][T12770] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.448206][T12770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.454460][T12770] ? clear_bhb_loop+0x60/0xb0 [ 303.459156][T12770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.465061][T12770] RIP: 0033:0x7f64edb8ebe9 [ 303.469598][T12770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.489228][T12770] RSP: 002b:00007f64ee96e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.497703][T12770] RAX: ffffffffffffffda RBX: 00007f64eddb5fa0 RCX: 00007f64edb8ebe9 [ 303.505705][T12770] RDX: 0000200000000440 RSI: 0000000000008922 RDI: 0000000000000003 [ 303.513712][T12770] RBP: 00007f64edc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 303.521712][T12770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.529703][T12770] R13: 00007f64eddb6038 R14: 00007f64eddb5fa0 R15: 00007ffc58556d18 [ 303.537828][T12770] [ 303.540865][T12770] Modules linked in: [ 303.545886][T12770] ---[ end trace 0000000000000000 ]--- [ 303.553603][T12770] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 303.560935][T12770] Code: ff ff ff e8 13 b5 41 01 89 c5 31 ff 89 c6 e8 08 9e 91 f7 85 ed 74 45 e8 bf 99 91 f7 eb 05 e8 b8 99 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 92 bc f4 f7 49 8b 2c 24 49 8d 7c [ 303.582474][T12770] RSP: 0018:ffffc900030a76a0 EFLAGS: 00010206 [ 303.589246][T12770] RAX: 000000001fffe000 RBX: 1ffff1100b353c82 RCX: 0000000000080000 [ 303.598265][T12770] RDX: ffffc9000bdca000 RSI: 000000000000331f RDI: 0000000000003320 [ 303.619099][T12770] RBP: 0000000000000001 R08: ffffffff8fa07bf7 R09: 1ffffffff1f40f7e [ 303.627225][T12770] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: 00000000ffff0000 [ 303.635560][T12770] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888059a9e410 [ 303.643994][T12770] FS: 00007f64ee96e6c0(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 303.664679][T12770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.677725][T12770] CR2: 00007f0caa1aff98 CR3: 0000000077020000 CR4: 00000000003526f0 [ 303.686836][T12770] Kernel panic - not syncing: Fatal exception [ 303.693269][T12770] Kernel Offset: disabled [ 303.697605][T12770] Rebooting in 86400 seconds..