last executing test programs: 7m58.566906331s ago: executing program 2 (id=1571): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0xc) 7m58.292108807s ago: executing program 2 (id=1575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}}], 0x1, 0x4000) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40800) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, r5, 0xb00, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000ffffffffffffbbbbbbbbbbbb88a800008100000008004500004000006000002f9078ac1e0001ac1414aa000086dd"], 0xb9) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, 0x0, &(0x7f0000000080)) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 7m57.176150906s ago: executing program 2 (id=1584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 7m56.932280425s ago: executing program 2 (id=1587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) 7m56.884381702s ago: executing program 2 (id=1589): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000008020000210000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x24, 0x28, 0xfdeb31bfee27623b, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xa}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400f800100001040000020000e5000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000200028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r9 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r9, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000040)=0xfffffffffffffde0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x73, r10}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4400000010000304000001000000000800000000", @ANYRES32=0x0, @ANYBLOB="1502000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r14, @ANYBLOB="885063068f0a00a9468341ebd6eafe3dd0224f5e5f41182accc076b82ecdccdf6695c3e81dc018d2d6ca570dbcaad2223276405677c28971a2db3c694b25d85c706bddb9590f9cc916870e3efcbc896da566c058867258347ad62599cab5b8c6aa71abbdb50210f450414f15b3d6c328a3f0127902f0bcf19085ebe5e9018eaebc5ee7a93e32a555bb069276df976a5a6731a6a89fa55988950d442228fd0d1f7749f6e3ff6fb513205786ee7887b32ed97dae3219ef4892862559d2665ad701ab93448f200323af1093327f4c756928b866474ea711e65d74ba7900"/229, @ANYRES32=r14, @ANYBLOB], 0x44}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@loopback, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x1, 0x20, 0x3, 0x8, {{0x1c, 0x4, 0x0, 0x0, 0x70, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @empty, {[@ssrr={0x89, 0x1b, 0xf5, [@remote, @loopback, @broadcast, @rand_addr=0x64010102, @loopback, @multicast2]}, @rr={0x7, 0xf, 0x7d, [@rand_addr=0x64010101, @remote, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x23}, @multicast1, @local, @empty]}, @lsrr={0x83, 0x7, 0x54, [@empty]}, @lsrr={0x83, 0x13, 0xcb, [@rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x39}, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="465555068a4229464e14015f05000000008d9b538e2b4851fe310f19fd5f58dfb100cb140ed4d003467335ffffffffffffff7f5bea4421dc39075b8c97c9df271ca1226fcc47", @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf251900000064000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030002000000140002006272696467653000000000000000000008000100", @ANYRES16=r12, @ANYBLOB="1400020065727370616e30000000000000000000080003000300000008000300020000003c0001801400020064756d6d793000000000000000000000080003000300000008000100", @ANYRES32=r8, @ANYBLOB="14000200776731000000000000000000000000000c00018008000100", @ANYRES32=r10, @ANYBLOB="2c00018014000200766c616e300000000000000000000000140002006d6163736563300000000000000000007000018008000100", @ANYRES32=r14, @ANYBLOB="08000300030000001400020076657468315f766972745f776966690008000100", @ANYRES32=r15, @ANYRESDEC=r9, @ANYRES32=r16, @ANYBLOB="140002006970766c616e310000000000000000000800030001000000140002006d6163766c616e3000000000000000000800030000000000"], 0x15c}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) 7m55.876012553s ago: executing program 2 (id=1600): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1, 0x0, 0x100000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x3000000, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000019c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}}}, 0x24}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x2, @remote}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x19, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8001}}, @call={0x85, 0x0, 0x0, 0xb4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffab1}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7m55.480862013s ago: executing program 32 (id=1600): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1, 0x0, 0x100000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x3000000, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000019c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}}}, 0x24}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x2, @remote}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x19, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8001}}, @call={0x85, 0x0, 0x0, 0xb4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffab1}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.105141681s ago: executing program 3 (id=4094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x0, 0xfb04, 0x9}) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000300)="b0902b31b39637e3399ee56cb088228de7ee7efb3b61ddfe4c92347a6529027dfbcc368fc5c17e20c6d19536178b5094c13b2ae3f281346736965d28bdb21249c9f22211c2e7082bf4cf22", 0x4b}], 0x2}, 0x4000090) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001680)={@map, 0x26, 0x1, 0x40, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40802}, 0x40000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000003c0)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000a608000"], 0x20}, 0x1, 0x0, 0x0, 0x44845}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x64, r7, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10000002}}}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a64000000060a0b040000000000000000020000002c000480280001800b0001006f626a7265660000180002800900040073797a310000000008000340000000010073797a30000000000900020073797a320000000009000740887748f5d4000000140000001100010000000000000000000500000a"], 0x8c}}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x20) 8.707974658s ago: executing program 3 (id=4097): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0xc}, @void, @eth={@empty, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "d3"}}}}}}}, 0x19) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000480)="17000000020001000003be8c5e687a8a6a003c00020100ecff3f0000000300dc290001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb2e2f8144243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c9000000000100000000000080c457681f009cee79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085dbda1348fe947f1da062a00"/184, 0xb8) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DST={0x8, 0x1, @local}, @RTA_IIF={0x8}]}, 0x2c}}, 0x20000050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0xc, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x34, '\x00', 0x0, @flow_dissector}, 0x94) 8.25186601s ago: executing program 3 (id=4104): r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000054}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0xfffd, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x82, 0x2}, @generic={0x7, 0x6, "bb8e1297"}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x1}}) ioctl(r2, 0x8b1b, &(0x7f0000000040)) 8.122627506s ago: executing program 3 (id=4105): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9b07}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 6.476040568s ago: executing program 4 (id=4119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x103) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r1], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r7], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c051}, 0x8004) 5.653702641s ago: executing program 5 (id=4121): unshare(0x6a040000) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x15, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x5f, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={r2}, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000240)="91c130a48b19186a4bfb42f28055a921b20a90d496a81b74fbc16c892cb10b944b97dc18f4e167daa15383e4ed87f930aebe46f609766a76e680fa17436656d74fbb40d43c297417b37fe25844638a269c543b695539ddca4e52e9304af827afdd442d25016047f8fa657e279031e8506865fdad3f8e7b51c642e12e9439cdfa4b46ddcc682cbfa043e1a458b4fcad3cc589c5274da716564e93ee64d7e9ed46a122c8033a69680db4b6ac1f80cce58c824339301103cc4d34ee8387bd2439131d495a7d540029e26280db10f91f", 0xce) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 5.332245984s ago: executing program 4 (id=4122): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r1, 0x1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500)=0x2, &(0x7f0000000540)=r3}, 0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r6}, 0x20) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) unshare(0x62040200) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 2.431520495s ago: executing program 1 (id=4134): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) (async, rerun: 32) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 64) socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x6bf1c2d5adba8c32}) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000467910000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0xb}, {0x0, 0x10}}}, 0x24}}, 0x800) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r6, 0x25, 0x2, @void}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r7, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) (async) socket$kcm(0x2, 0xa, 0x2) (async) r8 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async, rerun: 64) socket$unix(0x1, 0x5, 0x0) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) 2.389229905s ago: executing program 5 (id=4135): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x195be}]}]}]}, 0x3c}}, 0x0) 2.218126485s ago: executing program 1 (id=4137): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) 2.21750582s ago: executing program 5 (id=4138): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0x10}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@mpls_delroute={0xa0, 0x18, 0x9, 0x70bd25, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{0x100}, {0x5, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0xea75}, {0x200, 0x0, 0x1}, {0xf}, {0xf}, {0x25f5, 0x0, 0x1}, {0x2}, {0x9}, {0x8001}, {0x2, 0x0, 0x1}, {0xd}, {0x0, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0xffffd, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x45a6}, {0x42ef7}, {0x3, 0x0, 0x1}, {0x784, 0x0, 0x1}, {0xffff}, {0x6, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x2}, {0x1}, {0xff, 0x0, 0x1}, {0x7}, {0x8, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x1ff}]}]}, 0xa0}}, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced000000000a9f33c9f7b9e5", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 32) 2.036202802s ago: executing program 4 (id=4139): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB="1ccd000004150000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="1100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000600"/28], 0x50) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) socket(0x10, 0x6, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 1.762177501s ago: executing program 1 (id=4142): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r6}, 0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000004900), 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@can_newroute={0x158, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x24, 0x2, 0x3, 0x9, 0xff, "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", 0x2, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_SRC_IF={0x8, 0x9, r3}, @CGW_CS_XOR={0x8, 0x5, {0xa, 0xf7, 0xfffffffffffffff7, 0x2}}, @CGW_SRC_IF={0x8, 0x9, r3}, @CGW_FILTER={0xc, 0xb, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}}]}, 0x158}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0) 1.53984598s ago: executing program 0 (id=4143): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c0000001ac2692500000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffe0, 0xffff}, {0x5, 0xfff5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_DELTABLE={0x38, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) ppoll(&(0x7f00000005c0)=[{0xffffffffffffffff, 0x8}, {r2, 0x30c8}, {0xffffffffffffffff, 0x4116}, {r2, 0x2020}, {0xffffffffffffffff, 0x404}], 0x5, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x9]}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r4, @ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0xd0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x48241, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x40800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) 1.402867979s ago: executing program 1 (id=4144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x161) r4 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000980)=r2, 0x4) socket(0x10, 0x803, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_opts(r6, 0x29, 0x4d, 0x0, &(0x7f00000001c0)) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) getsockopt$rose(r1, 0x104, 0x3, 0x0, &(0x7f0000000140)) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x0) 1.382779917s ago: executing program 4 (id=4145): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x9, 0xfffffffffffffffc, 0x1, 0xfffffffffffffffe}, 0x40000120) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x1c, 0x19, 0x1, 0x0, 0x0, {0x16, 0xd601, 0x9}, [@typed={0x8, 0x13e, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0xe401}], 0x1, 0x0, 0x0, 0x0) (async) recvfrom$rxrpc(r2, &(0x7f0000000180)=""/4096, 0x1000, 0x2020, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) 1.192326564s ago: executing program 5 (id=4146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000840)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x373}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0xa00, 0x7, 0x9223, 0x2}, {0x5, 0x2, 0xc, 0x2, 0x401, 0xe}, 0xac, 0x3, 0x19e8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.131460389s ago: executing program 0 (id=4147): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503"], 0x30}, 0x40880) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x1f, 'cryptd(sm3)\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESDEC], 0x7c}}, 0x4c040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) 958.017231ms ago: executing program 0 (id=4148): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000000)={0x80000000, 'syz1\x00'}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0xc527, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x800) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, r4}, 0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xdc, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x400}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x94, 0x2a, [@dsss={0x3, 0x1, 0xb6}, @channel_switch={0x25, 0x3, {0x1, 0xa9}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @random_vendor={0xdd, 0x76, "01336a49de57c9f200dadd7d6e3497717ccc69e9ebd53440bcc93cc33a8c9b2396455229e92e1af380dfd1de919aed89bb1c73c94fa1ad63a349097d9bf7d0a609ce51e0f18587720d76f10f91fadf7512338190ae8afa0b64e7419c0ab82dc3f8f023c079bfb94cc582fc671bdd5de58e48bd4b4223"}, @dsss={0x3, 0x1, 0x74}, @dsss={0x3, 0x1, 0x88}, @ibss={0x6, 0x2, 0x680}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x40000080) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r1) socketpair(0x8, 0x1, 0x625f, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bind$isdn(r8, &(0x7f00000004c0)={0x22, 0x7, 0xb1, 0x1c, 0x8}, 0x6) r9 = socket$vsock_stream(0x28, 0x1, 0x0) pwritev(r9, &(0x7f0000000700)=[{&(0x7f0000000500)="8fdc8fb1eafde079c3e03231e0720c4b211d6737c7b7ea15c31e46b1ed3b0174d3f13346ed203c7d46ded984578c8f5a7dea067cc751838a5b205589ad53bbcdd9fe56482beeadf5859b00f87acac45effc21e3342b2eb9f4d151c3a1afb195870914f5643976c32ec198831f2039498eafd6f8daf7f50b8f206aa6671fb187d1fb06ba17dda709191e2d792b6be64287e50e11b7277891829c2700492b7fdf4bb1b572eb726d093352a35c6415f0e3c54b53face9083e26b20383fafafd0ad28071c7723cbd256bdb57a3bedcb3550e23cc940fcfcb9ddcff1faf07bb581a30", 0xe0}, {&(0x7f0000000600)="4f78c39568477f6ce74425dad111e508a1266548625f6ae5342cb24731ad6324b8a4cfb19cffdaeba7aabf3023dea112c3a3b625c91ccc46a914bdac18f70c6df782b5728daed50d9453474cb6297fbfab411b7cac551c7c67fd290b2b8ffe6f639f3985548b1117414183aa6629d1cecc1e773a42dd31aebeed3307584a93304c71adfffdf74e498783f953e34b706c2dd4b2cc04a468e6f21addd9c9d8a6c7ab51e90cebdb884cfd8f5b293371a0903c800e745d1a4cfe4a5c065f128c219aea980d6e59bf3291c1e5", 0xca}], 0x2, 0x9, 0x1000) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) socket$kcm(0x29, 0x5, 0x0) getsockname$netrom(r8, &(0x7f0000000740)={{0x3, @rose}, [@default, @null, @rose, @rose, @remote, @rose, @remote, @netrom]}, &(0x7f00000007c0)=0x48) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r8) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xd0, r10, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc8}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8001}, {0x6, 0x16, 0xef}, {0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000880) sendto$packet(r7, &(0x7f0000000a00)="1164a2d4f1dc748ae7719e4be82b6528fc561f6e46552b1a27ca082887431b81a1e547230485a69489f1771f8fef08e3824ecc5dd88fb3c19477d0b72e05620ed34c8df8e1ac5cc25e567abfb782bf1f21d2fec9ba0aa739bee9e9ade435ec942958751f218e3a50792ca484f13974b763add3faf7b80cbee5374287058a26ad82cd1668c19b6fbe1050ae72c04dd8e804f480961e", 0x95, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x15100804}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa0, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}]}, 0xa0}}, 0x80) socketpair(0x8238f163eab29b99, 0xa, 0x4, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r12, &(0x7f00000011c0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000d00)={0x468, r13, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x57502e9dda8436b6}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x284, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xb7\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':}\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff0000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x36}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{\':&^\x82\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5dcd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x86\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '&-++\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xa7, 0x4, "4012211b0ba29615fda2480826becdbafa8fef1bd91389d139a1b1b75085d11c510da67742e5fb7e127de939854ba055c5861424bde001051e8e0aae5dc3fadefe9306e6508819c70c3661400aace867a7283c8ae8d5328be13dc78068cd601001f9b9e3ed7cda371e2c49d832902472c57b1bc0f8798faadbef0751e3142940da58cce1311405be14adcd077e6195826d6cdf69d9446397a5e148dd40aafd9fa4db90"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}*(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}]}, {0x4}]}, @ETHTOOL_A_BITSET_MASK={0x38, 0x5, "0d5bad28373a5547b8c429a2244a578eabaf7f98cb32b75fc5e3989116aa6182200ed31a9502dcdc4798a4c9f516ebeb452f0112"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x3c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ').\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sip\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x101, 0x4, "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"}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x468}, 0x1, 0x0, 0x0, 0x4896}, 0x24040014) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x20, r5, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5dfd, 0x53}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x40) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x18000080}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x70, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2de}], @NL80211_ATTR_MESH_CONFIG={0x54, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x8}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x29}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x9}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x8}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x75c4}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x40001) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000001480)={0x1, 0x4, [@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="ede1f6b1603b", @empty]}) 851.339199ms ago: executing program 5 (id=4149): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) (async) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r10 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r10, &(0x7f0000000a80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}], 0x1, 0x8000) (async) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000140)={0x10000010}) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 768.339724ms ago: executing program 0 (id=4150): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x35, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xffff}}, 0x40) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000000)) setsockopt$llc_int(r3, 0x10c, 0x2, &(0x7f0000000040)=0x80, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r2}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r5, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r5, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000100)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000001140)=0x5, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4) 690.520511ms ago: executing program 3 (id=4151): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x38}}, 0xd0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x2, 0x71, 0x10, 0x79}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r4}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff}, {0xffe0}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x4, 0x3, 0x2, 0x5, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x1]}}]}]}, 0x4c}}, 0x4) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x23, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x78, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xfffffd58, 0x2, [@TCA_BASIC_CLASSID={0x0, 0x1, {0x8, 0x3}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0x4, 0x998}) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x38}}, 0xd0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x2, 0x71, 0x10, 0x79}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r4}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff}, {0xffe0}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0x4, 0x3, 0x2, 0x5, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x1]}}]}]}, 0x4c}}, 0x4) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x23, 0x0, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x78, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xfffffd58, 0x2, [@TCA_BASIC_CLASSID={0x0, 0x1, {0x8, 0x3}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0x4, 0x998}) (async) 496.682413ms ago: executing program 0 (id=4152): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) bind$ax25(r0, &(0x7f0000000300)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000100)={'team_slave_1\x00', @random='@\x00'}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000080)) 404.411233ms ago: executing program 4 (id=4153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}}, {{@in=@multicast1}, 0x0, @in=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000008000000d4040053531b5db401710000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000a80)="28deeb01d387dbe9abc89b6f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) 404.192925ms ago: executing program 5 (id=4154): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xc, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(r1, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 367.790231ms ago: executing program 3 (id=4155): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x1, 0x4, 0x2, 0x40, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xe66718f2fcdfbfc8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x82) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x48, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}]}, 0x48}}, 0x20000000) 334.273075ms ago: executing program 0 (id=4156): r0 = socket(0x2c, 0x80002, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0xa, @loopback, 0xffffffff}, 0x1c) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt(r3, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0x2) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r4, 0x0, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000180001002abd7000fcdbdf270a800000ff02fe08"], 0x44}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0xc000) connect$pppoe(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x0, {0x2, @remote, 'macvlan1\x00'}}, 0x1e) read(r4, &(0x7f0000000300)=""/66, 0x42) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x9, 0xffff, 0x42, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x7, 0x7, 0x5, 0x6}}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="48000000100001040000000000000000000000008b6ff14a84ee461452a2a3ca2b875e101c8c0f09bf81af198478e0e65c1813de2ae0f762ccbfe1f064f707f3f41c3d37534651dc6e766265d99aa561b481af6ec7df194b0c62e01ce0dde2f66d22", @ANYRES16=r6, @ANYBLOB="000200000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r6, @ANYBLOB="00000000c20a0200"], 0x48}}, 0x2000000) socket$inet6_udp(0xa, 0x2, 0x0) 292.536322ms ago: executing program 4 (id=4157): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) 144.165914ms ago: executing program 1 (id=4158): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000004b1dd3103c6c000000000000000000000000000000000000000000000015c474602eafe32780d6773c7a6939fc34dbc77b3d3a0bbd4a342a57c9b7f78d62410f3b74d1ee738e347d4e8234695105bed4621e7c0fa3edcf3a068c08c62df4d5c59cbd3b44350b072493336b88925cca786f45499cfc47fcd4eba14ee880205a609fa69287e22466e47e6c41e154acbb53e0dde0637832bcd0d8ef5a67a4d5c5e612f70f0e9105cc18d8c24da8c4035cd91ca553042eaa31152c586382f8cce9ffe60b0b5e69a23d69c3278ccad29fa98cbd3707a8ed2d090c7a4936b166224a2241101c3dfbcc25310db563"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000380)=0x4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r7, 0x3, {}, 0x83fd91b2c546f8b0}, 0x18) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b0000000000080002000000fa22"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x4c, r9, 0x706050e330e974a5, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040841}, 0x400c0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000400300000000fcdbdf25000000004664eab8e009d272ab128e59ebd4973d9219018f19df0e436f1652ebe1fe3258d367e898c18ace", @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c00028006000500810000000a000100bbbbbbbbbbbb0000"], 0x48}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r12) 0s ago: executing program 1 (id=4159): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES32=r1, @ANYBLOB="d00000000a000100ad0000000000000008000f00010a0d47258c8428355ca9e7e9f6955f73328cd5ef7e61848a01884c4562e04b542cea82a43782c2c77ab16744e9605d2daeeee6bc865b2683cfb7582a3ad1767b374dc9a30215bda27e12a4d5ad919f5c2b8c971dfcf95e363200d82f819d11d4fa6fb47ac3a8c112afe8", @ANYRES8=r1, @ANYRESDEC=r1, @ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x20024090) kernel console output (not intermixed with test programs): [ 653.706404][T17797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3324'. [ 653.761962][T17799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3323'. [ 654.098686][T17810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3328'. [ 654.198071][T17811] lo speed is unknown, defaulting to 1000 [ 654.220243][T17811] lo speed is unknown, defaulting to 1000 [ 654.238681][T17811] lo speed is unknown, defaulting to 1000 [ 654.432148][T17829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3332'. [ 654.472167][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3333'. [ 654.489178][T17828] batadv0: entered promiscuous mode [ 654.497562][T17828] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 654.526895][T17828] batadv0: left promiscuous mode [ 654.542452][T17829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3332'. [ 654.573122][T17829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3332'. [ 654.596652][T17829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3332'. [ 654.622142][T17829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3332'. [ 654.666628][T17829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3332'. [ 654.997693][T17835] syzkaller1: entered promiscuous mode [ 655.005240][T17844] FAULT_INJECTION: forcing a failure. [ 655.005240][T17844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 655.024482][T17835] syzkaller1: entered allmulticast mode [ 655.043946][T17844] CPU: 1 UID: 0 PID: 17844 Comm: syz.3.3336 Not tainted syzkaller #0 PREEMPT(full) [ 655.043974][T17844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 655.043986][T17844] Call Trace: [ 655.043994][T17844] [ 655.044002][T17844] dump_stack_lvl+0x189/0x250 [ 655.044031][T17844] ? __pfx____ratelimit+0x10/0x10 [ 655.044056][T17844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 655.044081][T17844] ? __pfx__printk+0x10/0x10 [ 655.044112][T17844] ? fs_reclaim_acquire+0x7d/0x100 [ 655.044142][T17844] should_fail_ex+0x414/0x560 [ 655.044186][T17844] prepare_alloc_pages+0x213/0x610 [ 655.044217][T17844] __alloc_frozen_pages_noprof+0x123/0x370 [ 655.044244][T17844] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 655.044274][T17844] ? policy_nodemask+0x27c/0x720 [ 655.044310][T17844] alloc_pages_mpol+0x232/0x4a0 [ 655.044346][T17844] folio_alloc_mpol_noprof+0x39/0x70 [ 655.044378][T17844] shmem_alloc_and_add_folio+0x447/0xf60 [ 655.044413][T17844] ? filemap_get_entry+0xad/0x2f0 [ 655.044432][T17844] ? filemap_get_entry+0xad/0x2f0 [ 655.044449][T17844] ? filemap_get_entry+0xad/0x2f0 [ 655.044470][T17844] ? filemap_get_entry+0x28f/0x2f0 [ 655.044494][T17844] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 655.044529][T17844] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 655.044564][T17844] shmem_get_folio_gfp+0x59d/0x1660 [ 655.044615][T17844] shmem_write_begin+0xf7/0x2b0 [ 655.044653][T17844] generic_perform_write+0x2c5/0x900 [ 655.044693][T17844] ? __pfx_generic_perform_write+0x10/0x10 [ 655.044718][T17844] ? do_raw_spin_unlock+0x122/0x240 [ 655.044744][T17844] ? mnt_put_write_access_file+0xc0/0x100 [ 655.044771][T17844] ? file_update_time+0x416/0x490 [ 655.044800][T17844] shmem_file_write_iter+0xf8/0x120 [ 655.044834][T17844] vfs_write+0x5c9/0xb30 [ 655.044868][T17844] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 655.044900][T17844] ? __pfx_vfs_write+0x10/0x10 [ 655.044938][T17844] ? do_sys_openat2+0x154/0x1c0 [ 655.044959][T17844] ? kmem_cache_free+0x18f/0x400 [ 655.045006][T17844] ksys_write+0x145/0x250 [ 655.045038][T17844] ? __pfx_ksys_write+0x10/0x10 [ 655.045063][T17844] ? rcu_is_watching+0x15/0xb0 [ 655.045091][T17844] ? do_syscall_64+0xbe/0x3b0 [ 655.045121][T17844] do_syscall_64+0xfa/0x3b0 [ 655.045145][T17844] ? lockdep_hardirqs_on+0x9c/0x150 [ 655.045169][T17844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.045194][T17844] ? clear_bhb_loop+0x60/0xb0 [ 655.045220][T17844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.045241][T17844] RIP: 0033:0x7f521438eba9 [ 655.045259][T17844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.045276][T17844] RSP: 002b:00007f52151fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 655.045297][T17844] RAX: ffffffffffffffda RBX: 00007f52145d5fa0 RCX: 00007f521438eba9 [ 655.045312][T17844] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000005 [ 655.045326][T17844] RBP: 00007f52151fe090 R08: 0000000000000000 R09: 0000000000000000 [ 655.045339][T17844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 655.045351][T17844] R13: 00007f52145d6038 R14: 00007f52145d5fa0 R15: 00007ffe83540558 [ 655.045388][T17844] [ 655.532062][T17847] sctp: [Deprecated]: syz.5.3338 (pid 17847) Use of struct sctp_assoc_value in delayed_ack socket option. [ 655.532062][T17847] Use struct sctp_sack_info instead [ 655.734761][T17860] netlink: 'syz.5.3342': attribute type 1 has an invalid length. [ 656.518016][T17861] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 656.540479][T17861] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 656.626015][T17862] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 656.661587][T17871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.670092][T17871] batadv_slave_0: entered promiscuous mode [ 657.051348][T17879] lo speed is unknown, defaulting to 1000 [ 657.157432][T17882] netlink: 'syz.4.3346': attribute type 9 has an invalid length. [ 657.185472][T17887] FAULT_INJECTION: forcing a failure. [ 657.185472][T17887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.225702][T17887] CPU: 1 UID: 0 PID: 17887 Comm: syz.5.3348 Not tainted syzkaller #0 PREEMPT(full) [ 657.225730][T17887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 657.225743][T17887] Call Trace: [ 657.225751][T17887] [ 657.225759][T17887] dump_stack_lvl+0x189/0x250 [ 657.225788][T17887] ? __pfx____ratelimit+0x10/0x10 [ 657.225813][T17887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.225837][T17887] ? __pfx__printk+0x10/0x10 [ 657.225866][T17887] ? __might_fault+0xb0/0x130 [ 657.225906][T17887] should_fail_ex+0x414/0x560 [ 657.225942][T17887] _copy_from_user+0x2d/0xb0 [ 657.225970][T17887] ___sys_sendmsg+0x158/0x2a0 [ 657.226002][T17887] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.226085][T17887] ? __might_fault+0xb0/0x130 [ 657.226116][T17887] __sys_sendmmsg+0x227/0x430 [ 657.226151][T17887] ? __pfx___sys_sendmmsg+0x10/0x10 [ 657.226176][T17887] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 657.226230][T17887] ? ksys_write+0x22a/0x250 [ 657.226260][T17887] ? __pfx_ksys_write+0x10/0x10 [ 657.226294][T17887] __x64_sys_sendmmsg+0xa0/0xc0 [ 657.226343][T17887] do_syscall_64+0xfa/0x3b0 [ 657.226369][T17887] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.226394][T17887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.226415][T17887] ? clear_bhb_loop+0x60/0xb0 [ 657.226447][T17887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.226472][T17887] RIP: 0033:0x7fc2fe58eba9 [ 657.226490][T17887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.226508][T17887] RSP: 002b:00007fc2fc7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 657.226529][T17887] RAX: ffffffffffffffda RBX: 00007fc2fe7d6090 RCX: 00007fc2fe58eba9 [ 657.226545][T17887] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 657.226559][T17887] RBP: 00007fc2fc7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 657.226572][T17887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 657.226584][T17887] R13: 00007fc2fe7d6128 R14: 00007fc2fe7d6090 R15: 00007ffdf3eeb318 [ 657.226618][T17887] [ 657.258932][T17890] tipc: Enabling of bearer rejected, failed to enable media [ 657.523244][T17892] netlink: 'syz.1.3350': attribute type 12 has an invalid length. [ 658.130340][T17911] tipc: Enabled bearer , priority 0 [ 658.312814][T17911] syzkaller0: entered promiscuous mode [ 658.318992][T17911] syzkaller0: entered allmulticast mode [ 658.325624][T17911] tipc: Resetting bearer [ 658.443300][T17910] tipc: Resetting bearer [ 660.384765][T17910] tipc: Disabling bearer [ 660.407241][T17933] batadv0: entered promiscuous mode [ 660.420611][T17933] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 660.438699][T17933] batadv0: left promiscuous mode [ 660.620772][T17948] netlink: 'syz.1.3362': attribute type 12 has an invalid length. [ 660.753486][T17958] __nla_validate_parse: 66 callbacks suppressed [ 660.753508][T17958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3365'. [ 660.902077][T17957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3366'. [ 660.981902][T17957] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 661.226597][T17976] FAULT_INJECTION: forcing a failure. [ 661.226597][T17976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.260966][T17976] CPU: 0 UID: 0 PID: 17976 Comm: syz.4.3369 Not tainted syzkaller #0 PREEMPT(full) [ 661.261000][T17976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 661.261013][T17976] Call Trace: [ 661.261022][T17976] [ 661.261030][T17976] dump_stack_lvl+0x189/0x250 [ 661.261061][T17976] ? __pfx____ratelimit+0x10/0x10 [ 661.261085][T17976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.261110][T17976] ? __pfx__printk+0x10/0x10 [ 661.261139][T17976] ? shmem_alloc_and_add_folio+0xcb3/0xf60 [ 661.261193][T17976] ? filemap_get_entry+0xad/0x2f0 [ 661.261213][T17976] ? filemap_get_entry+0xad/0x2f0 [ 661.261238][T17976] should_fail_ex+0x414/0x560 [ 661.261277][T17976] copy_folio_from_iter_atomic+0x325/0x1910 [ 661.261307][T17976] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 661.261343][T17976] ? shmem_get_folio_gfp+0x1432/0x1660 [ 661.261382][T17976] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 661.261421][T17976] ? shmem_write_begin+0x15f/0x2b0 [ 661.261457][T17976] generic_perform_write+0x5df/0x900 [ 661.261500][T17976] ? __pfx_generic_perform_write+0x10/0x10 [ 661.261525][T17976] ? down_write+0x162/0x1f0 [ 661.261562][T17976] ? file_update_time+0x2da/0x490 [ 661.261593][T17976] shmem_file_write_iter+0xf8/0x120 [ 661.261628][T17976] vfs_write+0x5c9/0xb30 [ 661.261663][T17976] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 661.261697][T17976] ? __pfx_vfs_write+0x10/0x10 [ 661.261732][T17976] ? do_sys_openat2+0x154/0x1c0 [ 661.261754][T17976] ? kmem_cache_free+0x18f/0x400 [ 661.261811][T17976] ksys_write+0x145/0x250 [ 661.261843][T17976] ? __pfx_ksys_write+0x10/0x10 [ 661.261870][T17976] ? rcu_is_watching+0x15/0xb0 [ 661.261899][T17976] ? do_syscall_64+0xbe/0x3b0 [ 661.261932][T17976] do_syscall_64+0xfa/0x3b0 [ 661.261957][T17976] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.261981][T17976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.262003][T17976] ? clear_bhb_loop+0x60/0xb0 [ 661.262031][T17976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.262052][T17976] RIP: 0033:0x7f2630b8eba9 [ 661.262072][T17976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.262092][T17976] RSP: 002b:00007f2631ac8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 661.262114][T17976] RAX: ffffffffffffffda RBX: 00007f2630dd5fa0 RCX: 00007f2630b8eba9 [ 661.262130][T17976] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000005 [ 661.262144][T17976] RBP: 00007f2631ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 661.262157][T17976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 661.262170][T17976] R13: 00007f2630dd6038 R14: 00007f2630dd5fa0 R15: 00007fff92e6d5b8 [ 661.262207][T17976] [ 662.092464][T18003] netlink: 'syz.0.3377': attribute type 12 has an invalid length. [ 662.134227][T18007] netlink: 'syz.5.3379': attribute type 21 has an invalid length. [ 662.165038][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3376'. [ 662.199201][T18007] netlink: 'syz.5.3379': attribute type 1 has an invalid length. [ 662.207521][T18007] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3379'. [ 662.226755][T18001] batadv0: entered promiscuous mode [ 662.335228][T18001] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 662.402359][T18001] batadv0: left promiscuous mode [ 662.949310][T18023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3382'. [ 662.952910][T18024] FAULT_INJECTION: forcing a failure. [ 662.952910][T18024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.989788][T18024] CPU: 0 UID: 0 PID: 18024 Comm: syz.4.3384 Not tainted syzkaller #0 PREEMPT(full) [ 662.989820][T18024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 662.989835][T18024] Call Trace: [ 662.989845][T18024] [ 662.989855][T18024] dump_stack_lvl+0x189/0x250 [ 662.989888][T18024] ? __pfx____ratelimit+0x10/0x10 [ 662.989916][T18024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.989944][T18024] ? __pfx__printk+0x10/0x10 [ 662.989996][T18024] should_fail_ex+0x414/0x560 [ 662.990037][T18024] copy_folio_from_iter_atomic+0x325/0x1910 [ 662.990067][T18024] ? irqentry_exit+0x74/0x90 [ 662.990104][T18024] ? shmem_get_folio_gfp+0x6bc/0x1660 [ 662.990145][T18024] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 662.990187][T18024] ? shmem_write_begin+0x15f/0x2b0 [ 662.990226][T18024] generic_perform_write+0x5df/0x900 [ 662.990271][T18024] ? __pfx_generic_perform_write+0x10/0x10 [ 662.990299][T18024] ? do_raw_spin_unlock+0x122/0x240 [ 662.990329][T18024] ? mnt_put_write_access_file+0xc0/0x100 [ 662.990359][T18024] ? file_update_time+0x416/0x490 [ 662.990392][T18024] shmem_file_write_iter+0xf8/0x120 [ 662.990429][T18024] vfs_write+0x5c9/0xb30 [ 662.990466][T18024] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 662.990501][T18024] ? __pfx_vfs_write+0x10/0x10 [ 662.990538][T18024] ? do_sys_openat2+0x154/0x1c0 [ 662.990561][T18024] ? kmem_cache_free+0x18f/0x400 [ 662.990611][T18024] ksys_write+0x145/0x250 [ 662.990653][T18024] ? __pfx_ksys_write+0x10/0x10 [ 662.990692][T18024] ? rcu_is_watching+0x15/0xb0 [ 662.990720][T18024] ? do_syscall_64+0xbe/0x3b0 [ 662.990750][T18024] do_syscall_64+0xfa/0x3b0 [ 662.990774][T18024] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.990801][T18024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.990822][T18024] ? clear_bhb_loop+0x60/0xb0 [ 662.990848][T18024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.990868][T18024] RIP: 0033:0x7f2630b8eba9 [ 662.990886][T18024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.990905][T18024] RSP: 002b:00007f2631ac8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 662.990927][T18024] RAX: ffffffffffffffda RBX: 00007f2630dd5fa0 RCX: 00007f2630b8eba9 [ 662.990942][T18024] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000005 [ 662.990956][T18024] RBP: 00007f2631ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 662.990969][T18024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 662.990981][T18024] R13: 00007f2630dd6038 R14: 00007f2630dd5fa0 R15: 00007fff92e6d5b8 [ 662.991014][T18024] [ 663.456876][T18029] tipc: Enabling of bearer rejected, failed to enable media [ 663.652238][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3387'. [ 663.880528][T18035] lo speed is unknown, defaulting to 1000 [ 663.960099][T18035] lo speed is unknown, defaulting to 1000 [ 664.013494][T18035] lo speed is unknown, defaulting to 1000 [ 664.174002][T18057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3391'. [ 664.849562][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 664.881959][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3394'. [ 665.435078][T18083] netlink: 'syz.1.3396': attribute type 12 has an invalid length. [ 665.443432][T18080] lo speed is unknown, defaulting to 1000 [ 665.480330][T18080] lo speed is unknown, defaulting to 1000 [ 665.519657][T18080] lo speed is unknown, defaulting to 1000 [ 665.969880][T18093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3400'. [ 666.024230][T18095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3400'. [ 666.353205][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 666.470564][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3407'. [ 666.484429][T18106] batadv0: entered promiscuous mode [ 666.516562][T18106] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 666.573756][T18106] batadv0: left promiscuous mode [ 666.584480][T18115] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3408'. [ 667.162371][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3412'. [ 667.180937][T18129] netlink: zone id is out of range [ 667.209718][T18129] netlink: zone id is out of range [ 667.227901][T18129] netlink: zone id is out of range [ 667.247686][T18129] netlink: zone id is out of range [ 667.259296][T18129] netlink: zone id is out of range [ 667.304919][T18129] netlink: zone id is out of range [ 667.349527][T18129] netlink: zone id is out of range [ 667.379858][T18134] netlink: del zone limit has 4 unknown bytes [ 667.404631][T18129] netlink: zone id is out of range [ 667.420039][T18129] netlink: zone id is out of range [ 667.463933][ T5929] IPVS: starting estimator thread 0... [ 667.571870][T18145] IPVS: using max 28 ests per chain, 67200 per kthread [ 668.016324][T18156] dvmrp8: entered allmulticast mode [ 668.034356][T18150] dvmrp8: left allmulticast mode [ 668.216777][T18165] veth1_to_bond: entered allmulticast mode [ 668.254507][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3423'. [ 668.286665][T18165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3422'. [ 668.333110][T18164] batadv0: entered promiscuous mode [ 668.340509][T18164] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 668.355922][T18164] batadv0: left promiscuous mode [ 668.368745][T18169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3424'. [ 668.529065][T18176] netlink: 'syz.3.3425': attribute type 2 has an invalid length. [ 669.035945][T18169] bridge_slave_1: left allmulticast mode [ 669.058966][T18169] bridge_slave_1: left promiscuous mode [ 669.097306][T18169] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.203535][T18169] bridge_slave_0: left allmulticast mode [ 669.227533][T18169] bridge_slave_0: left promiscuous mode [ 669.244863][T18169] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.378239][T18192] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3426'. [ 670.076472][T18211] lo speed is unknown, defaulting to 1000 [ 670.101825][T18211] lo speed is unknown, defaulting to 1000 [ 670.112777][T18211] lo speed is unknown, defaulting to 1000 [ 670.234186][T18222] lo speed is unknown, defaulting to 1000 [ 670.276035][T18222] lo speed is unknown, defaulting to 1000 [ 670.600274][ T7455] bond0: left allmulticast mode [ 670.617677][ T7455] bridge3: port 1(bond0) entered disabled state [ 670.706287][ T7455] bond2: left allmulticast mode [ 670.739236][ T7455] bond2: left promiscuous mode [ 670.754038][ T7455] bridge0: port 1(bond2) entered disabled state [ 671.509854][ T7455] bond1 (unregistering): (slave geneve2): Releasing active interface [ 671.989397][ T7455]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.009298][ T7455]  (unregistering): (slave batadv_slave_0): Releasing backup interface [ 672.019982][ T7455]  (unregistering): Released all slaves [ 672.189171][ T7455] bond1 (unregistering): Released all slaves [ 672.344733][ T7455] bond0 (unregistering): Released all slaves [ 672.482099][ T7455] bond2 (unregistering): Released all slaves [ 672.504124][T18273] __nla_validate_parse: 5 callbacks suppressed [ 672.504145][T18273] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3447'. [ 672.512565][T18222] lo speed is unknown, defaulting to 1000 [ 672.571800][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3447'. [ 672.587767][T18273] net_ratelimit: 19 callbacks suppressed [ 672.587790][T18273] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 672.655236][T18274] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3447'. [ 672.770538][ T7455] þ: left promiscuous mode [ 672.910628][ T7455] tipc: Left network mode [ 673.144468][T18285] netlink: 'syz.0.3451': attribute type 12 has an invalid length. [ 673.145308][T18294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3453'. [ 673.225351][T18287] veth1_to_bond: entered allmulticast mode [ 673.345530][T18294] veth1_to_bond (unregistering): left allmulticast mode [ 673.382282][T18302] netlink: 'syz.4.3455': attribute type 11 has an invalid length. [ 673.407484][T18302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3455'. [ 673.686437][T18306] netlink: 888 bytes leftover after parsing attributes in process `syz.1.3456'. [ 673.895269][T18317] netlink: 'syz.1.3460': attribute type 2 has an invalid length. [ 673.903477][T18317] netlink: 4856 bytes leftover after parsing attributes in process `syz.1.3460'. [ 674.347189][T18330] netlink: 'syz.4.3463': attribute type 1 has an invalid length. [ 674.763935][T18339] bridge_slave_0: left allmulticast mode [ 674.785669][T18339] bridge_slave_0: left promiscuous mode [ 674.817943][T18339] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.884432][T18339] bridge_slave_1: left allmulticast mode [ 674.890210][T18339] bridge_slave_1: left promiscuous mode [ 674.896229][T18339] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.937221][T18339] bond0: (slave bond_slave_0): Releasing backup interface [ 674.984131][T18339] team0: Port device team_slave_0 removed [ 674.997478][T18339] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 675.154538][ T7455] hsr_slave_0: left promiscuous mode [ 675.198024][ T7455] hsr_slave_1: left promiscuous mode [ 675.228695][ T7455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.320330][ T7455] veth1_vlan: left promiscuous mode [ 675.366476][T18359] netlink: 'syz.1.3471': attribute type 1 has an invalid length. [ 675.426798][T18360] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3469'. [ 675.506190][T18364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3472'. [ 676.117861][ T7455] team0 (unregistering): Port device team_slave_1 removed [ 676.171869][ T7455] team0 (unregistering): Port device team_slave_0 removed [ 676.884321][T18359] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 677.016578][T18365] gretap1: entered promiscuous mode [ 677.190776][T18374] lo speed is unknown, defaulting to 1000 [ 677.263028][T18372] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3474'. [ 677.275274][T18374] lo speed is unknown, defaulting to 1000 [ 677.703635][T18391] !: renamed from dummy0 (while UP) [ 677.746523][ T7455] IPVS: stop unused estimator thread 0... [ 677.954807][T18398] __nla_validate_parse: 1 callbacks suppressed [ 677.954830][T18398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3482'. [ 681.395441][T18428] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3485'. [ 681.433808][T18428] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3485'. [ 681.475752][T18426] lo speed is unknown, defaulting to 1000 [ 681.531707][T18431] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 681.539216][T18431] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 681.574470][T18426] lo speed is unknown, defaulting to 1000 [ 681.741971][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3488'. [ 681.774303][T18434] batadv0: entered promiscuous mode [ 681.810536][T18434] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 681.951450][T18434] batadv0: left promiscuous mode [ 682.266470][T18442] Bluetooth: MGMT ver 1.23 [ 682.294387][T18442] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 682.464965][T18448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3492'. [ 682.514074][T18448] sch_fq: defrate 0 ignored. [ 682.538238][T18449] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 682.559175][T18451] netlink: 'syz.0.3493': attribute type 1 has an invalid length. [ 682.570198][T18449] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 682.613468][T18452] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3493'. [ 682.626125][T18449] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 682.784131][T18451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 682.916461][T18461] FAULT_INJECTION: forcing a failure. [ 682.916461][T18461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.929686][T18461] CPU: 0 UID: 0 PID: 18461 Comm: syz.0.3496 Not tainted syzkaller #0 PREEMPT(full) [ 682.929716][T18461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 682.929731][T18461] Call Trace: [ 682.929740][T18461] [ 682.929751][T18461] dump_stack_lvl+0x189/0x250 [ 682.929783][T18461] ? __pfx____ratelimit+0x10/0x10 [ 682.929807][T18461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.929832][T18461] ? __pfx__printk+0x10/0x10 [ 682.929859][T18461] ? __might_fault+0xb0/0x130 [ 682.929897][T18461] should_fail_ex+0x414/0x560 [ 682.929936][T18461] _copy_from_user+0x2d/0xb0 [ 682.929966][T18461] ___sys_sendmsg+0x158/0x2a0 [ 682.930001][T18461] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.930082][T18461] ? __might_fault+0xb0/0x130 [ 682.930117][T18461] __sys_sendmmsg+0x227/0x430 [ 682.930156][T18461] ? __pfx___sys_sendmmsg+0x10/0x10 [ 682.930185][T18461] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 682.930244][T18461] ? ksys_write+0x22a/0x250 [ 682.930300][T18461] ? __pfx_ksys_write+0x10/0x10 [ 682.930326][T18461] ? rcu_is_watching+0x15/0xb0 [ 682.930357][T18461] __x64_sys_sendmmsg+0xa0/0xc0 [ 682.930390][T18461] do_syscall_64+0xfa/0x3b0 [ 682.930416][T18461] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.930441][T18461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.930463][T18461] ? clear_bhb_loop+0x60/0xb0 [ 682.930489][T18461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.930510][T18461] RIP: 0033:0x7f7c0d38eba9 [ 682.930529][T18461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.930559][T18461] RSP: 002b:00007f7c0e134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 682.930580][T18461] RAX: ffffffffffffffda RBX: 00007f7c0d5d5fa0 RCX: 00007f7c0d38eba9 [ 682.930595][T18461] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 682.930609][T18461] RBP: 00007f7c0e134090 R08: 0000000000000000 R09: 0000000000000000 [ 682.930622][T18461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 682.930635][T18461] R13: 00007f7c0d5d6038 R14: 00007f7c0d5d5fa0 R15: 00007ffc6bc2cb28 [ 682.930668][T18461] [ 682.958621][T18459] FAULT_INJECTION: forcing a failure. [ 682.958621][T18459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.221271][T18459] CPU: 1 UID: 0 PID: 18459 Comm: syz.5.3495 Not tainted syzkaller #0 PREEMPT(full) [ 683.221299][T18459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 683.221312][T18459] Call Trace: [ 683.221320][T18459] [ 683.221328][T18459] dump_stack_lvl+0x189/0x250 [ 683.221355][T18459] ? __pfx____ratelimit+0x10/0x10 [ 683.221379][T18459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 683.221403][T18459] ? __pfx__printk+0x10/0x10 [ 683.221446][T18459] should_fail_ex+0x414/0x560 [ 683.221487][T18459] copy_folio_from_iter_atomic+0x325/0x1910 [ 683.221513][T18459] ? irqentry_exit+0x74/0x90 [ 683.221542][T18459] ? shmem_get_folio_gfp+0x6bc/0x1660 [ 683.221577][T18459] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 683.221613][T18459] ? shmem_write_begin+0x15f/0x2b0 [ 683.221645][T18459] generic_perform_write+0x5df/0x900 [ 683.221683][T18459] ? __pfx_generic_perform_write+0x10/0x10 [ 683.221704][T18459] ? down_write+0x162/0x1f0 [ 683.221737][T18459] ? file_update_time+0x2da/0x490 [ 683.221783][T18459] shmem_file_write_iter+0xf8/0x120 [ 683.221815][T18459] vfs_write+0x5c9/0xb30 [ 683.221848][T18459] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 683.221879][T18459] ? __pfx_vfs_write+0x10/0x10 [ 683.221910][T18459] ? do_sys_openat2+0x154/0x1c0 [ 683.221931][T18459] ? kmem_cache_free+0x18f/0x400 [ 683.221977][T18459] ksys_write+0x145/0x250 [ 683.222007][T18459] ? __pfx_ksys_write+0x10/0x10 [ 683.222032][T18459] ? rcu_is_watching+0x15/0xb0 [ 683.222060][T18459] ? do_syscall_64+0xbe/0x3b0 [ 683.222090][T18459] do_syscall_64+0xfa/0x3b0 [ 683.222113][T18459] ? lockdep_hardirqs_on+0x9c/0x150 [ 683.222136][T18459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.222156][T18459] ? clear_bhb_loop+0x60/0xb0 [ 683.222182][T18459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.222202][T18459] RIP: 0033:0x7fc2fe58eba9 [ 683.222220][T18459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.222238][T18459] RSP: 002b:00007fc2fc7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 683.222260][T18459] RAX: ffffffffffffffda RBX: 00007fc2fe7d5fa0 RCX: 00007fc2fe58eba9 [ 683.222276][T18459] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000005 [ 683.222289][T18459] RBP: 00007fc2fc7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 683.222302][T18459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 683.222315][T18459] R13: 00007fc2fe7d6038 R14: 00007fc2fe7d5fa0 R15: 00007ffdf3eeb318 [ 683.222350][T18459] [ 683.827698][T18467] syzkaller1: entered promiscuous mode [ 683.861671][T18467] syzkaller1: entered allmulticast mode [ 684.462040][T18480] netlink: 'syz.0.3502': attribute type 1 has an invalid length. [ 684.570950][T18482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3502'. [ 684.843687][T18481] bond2: (slave geneve2): making interface the new active one [ 684.892720][T18481] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 684.935850][T18482] 8021q: adding VLAN 0 to HW filter on device bond2 [ 685.032784][T18470] unknown channel width for channel at 909000KHz? [ 685.066614][T18493] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 685.225266][ T7446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 685.264023][ T7446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 685.361431][ T7446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 685.393259][T18494] lo speed is unknown, defaulting to 1000 [ 685.396257][ T7446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 685.434444][T18494] lo speed is unknown, defaulting to 1000 [ 685.506645][T18499] lo speed is unknown, defaulting to 1000 [ 685.850235][T18518] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3511'. [ 686.048413][T18519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3510'. [ 686.338891][T18499] lo speed is unknown, defaulting to 1000 [ 686.510177][T18527] tap0: tun_chr_ioctl cmd 1074025677 [ 686.534240][T18527] tap0: linktype set to 776 [ 687.053350][T18533] syzkaller0: entered promiscuous mode [ 687.059339][T18533] syzkaller0: entered allmulticast mode [ 687.340739][T18540] FAULT_INJECTION: forcing a failure. [ 687.340739][T18540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.376883][T18540] CPU: 1 UID: 0 PID: 18540 Comm: syz.0.3517 Not tainted syzkaller #0 PREEMPT(full) [ 687.376915][T18540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 687.376931][T18540] Call Trace: [ 687.376940][T18540] [ 687.376950][T18540] dump_stack_lvl+0x189/0x250 [ 687.376983][T18540] ? __pfx____ratelimit+0x10/0x10 [ 687.377011][T18540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 687.377048][T18540] ? __pfx__printk+0x10/0x10 [ 687.377081][T18540] ? __might_fault+0xb0/0x130 [ 687.377127][T18540] should_fail_ex+0x414/0x560 [ 687.377168][T18540] _copy_from_user+0x2d/0xb0 [ 687.377200][T18540] ___sys_sendmsg+0x158/0x2a0 [ 687.377235][T18540] ? __pfx____sys_sendmsg+0x10/0x10 [ 687.377318][T18540] ? __might_fault+0xb0/0x130 [ 687.377355][T18540] __sys_sendmmsg+0x227/0x430 [ 687.377394][T18540] ? __pfx___sys_sendmmsg+0x10/0x10 [ 687.377434][T18540] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 687.377493][T18540] ? ksys_write+0x22a/0x250 [ 687.377526][T18540] ? __pfx_ksys_write+0x10/0x10 [ 687.377564][T18540] __x64_sys_sendmmsg+0xa0/0xc0 [ 687.377597][T18540] do_syscall_64+0xfa/0x3b0 [ 687.377623][T18540] ? lockdep_hardirqs_on+0x9c/0x150 [ 687.377648][T18540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.377669][T18540] ? clear_bhb_loop+0x60/0xb0 [ 687.377697][T18540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.377718][T18540] RIP: 0033:0x7f7c0d38eba9 [ 687.377738][T18540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.377756][T18540] RSP: 002b:00007f7c0b5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 687.377779][T18540] RAX: ffffffffffffffda RBX: 00007f7c0d5d6090 RCX: 00007f7c0d38eba9 [ 687.377796][T18540] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 687.377810][T18540] RBP: 00007f7c0b5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 687.377824][T18540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 687.377837][T18540] R13: 00007f7c0d5d6128 R14: 00007f7c0d5d6090 R15: 00007ffc6bc2cb28 [ 687.377872][T18540] [ 688.367422][T18548] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 688.829456][T18567] FAULT_INJECTION: forcing a failure. [ 688.829456][T18567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.891185][T18567] CPU: 1 UID: 0 PID: 18567 Comm: syz.0.3524 Not tainted syzkaller #0 PREEMPT(full) [ 688.891217][T18567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 688.891231][T18567] Call Trace: [ 688.891240][T18567] [ 688.891250][T18567] dump_stack_lvl+0x189/0x250 [ 688.891284][T18567] ? __pfx____ratelimit+0x10/0x10 [ 688.891311][T18567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.891350][T18567] ? __pfx__printk+0x10/0x10 [ 688.891381][T18567] ? __might_fault+0xb0/0x130 [ 688.891424][T18567] should_fail_ex+0x414/0x560 [ 688.891463][T18567] _copy_from_user+0x2d/0xb0 [ 688.891493][T18567] ___sys_sendmsg+0x158/0x2a0 [ 688.891526][T18567] ? __pfx____sys_sendmsg+0x10/0x10 [ 688.891611][T18567] ? __might_fault+0xb0/0x130 [ 688.891646][T18567] __sys_sendmmsg+0x227/0x430 [ 688.891683][T18567] ? __pfx___sys_sendmmsg+0x10/0x10 [ 688.891711][T18567] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 688.891768][T18567] ? ksys_write+0x22a/0x250 [ 688.891800][T18567] ? __pfx_ksys_write+0x10/0x10 [ 688.891838][T18567] __x64_sys_sendmmsg+0xa0/0xc0 [ 688.891865][T18567] do_syscall_64+0xfa/0x3b0 [ 688.891891][T18567] ? lockdep_hardirqs_on+0x9c/0x150 [ 688.891915][T18567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.891937][T18567] ? clear_bhb_loop+0x60/0xb0 [ 688.891963][T18567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.891986][T18567] RIP: 0033:0x7f7c0d38eba9 [ 688.892005][T18567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.892024][T18567] RSP: 002b:00007f7c0e134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 688.892047][T18567] RAX: ffffffffffffffda RBX: 00007f7c0d5d5fa0 RCX: 00007f7c0d38eba9 [ 688.892064][T18567] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 688.892078][T18567] RBP: 00007f7c0e134090 R08: 0000000000000000 R09: 0000000000000000 [ 688.892099][T18567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 688.892112][T18567] R13: 00007f7c0d5d6038 R14: 00007f7c0d5d5fa0 R15: 00007ffc6bc2cb28 [ 688.892146][T18567] [ 688.954178][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057057000: rx timeout, send abort [ 689.115613][ C0] vcan0: j1939_tp_rxtimer: 0xffff888023d2c800: rx timeout, send abort [ 689.124985][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057057000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 689.140666][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023d2c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 689.329498][T18571] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3525'. [ 689.730359][T18556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.768310][T18556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.032395][T18556] bridge0: left allmulticast mode [ 690.037961][T18556] macvtap1: left promiscuous mode [ 690.044290][T18556] macvtap1: left allmulticast mode [ 690.058211][T18556] ip6gretap0: left allmulticast mode [ 690.064198][T18556] macsec1: left promiscuous mode [ 690.069235][T18556] macsec1: left allmulticast mode [ 690.078170][T18556] bond1: left promiscuous mode [ 690.083233][T18556] bond1: left allmulticast mode [ 690.141764][T18579] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3527'. [ 690.151521][T12670] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.160456][T12670] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.198276][T12670] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.216410][T12670] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.363049][T18584] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3528'. [ 690.928987][T18595] FAULT_INJECTION: forcing a failure. [ 690.928987][T18595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.975680][T18595] CPU: 0 UID: 0 PID: 18595 Comm: syz.5.3532 Not tainted syzkaller #0 PREEMPT(full) [ 690.975711][T18595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 690.975725][T18595] Call Trace: [ 690.975735][T18595] [ 690.975745][T18595] dump_stack_lvl+0x189/0x250 [ 690.975777][T18595] ? __pfx____ratelimit+0x10/0x10 [ 690.975804][T18595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.975831][T18595] ? __pfx__printk+0x10/0x10 [ 690.975880][T18595] should_fail_ex+0x414/0x560 [ 690.975920][T18595] copy_folio_from_iter_atomic+0x325/0x1910 [ 690.975956][T18595] ? irqentry_exit+0x74/0x90 [ 690.975989][T18595] ? shmem_get_folio_gfp+0x6bc/0x1660 [ 690.976030][T18595] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 690.976070][T18595] ? shmem_write_begin+0x15f/0x2b0 [ 690.976107][T18595] generic_perform_write+0x5df/0x900 [ 690.976150][T18595] ? __pfx_generic_perform_write+0x10/0x10 [ 690.976175][T18595] ? down_write+0x162/0x1f0 [ 690.976211][T18595] ? file_update_time+0x2da/0x490 [ 690.976252][T18595] shmem_file_write_iter+0xf8/0x120 [ 690.976286][T18595] vfs_write+0x5c9/0xb30 [ 690.976320][T18595] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 690.976352][T18595] ? __pfx_vfs_write+0x10/0x10 [ 690.976384][T18595] ? do_sys_openat2+0x154/0x1c0 [ 690.976405][T18595] ? kmem_cache_free+0x18f/0x400 [ 690.976450][T18595] ksys_write+0x145/0x250 [ 690.976481][T18595] ? __pfx_ksys_write+0x10/0x10 [ 690.976506][T18595] ? rcu_is_watching+0x15/0xb0 [ 690.976534][T18595] ? do_syscall_64+0xbe/0x3b0 [ 690.976564][T18595] do_syscall_64+0xfa/0x3b0 [ 690.976588][T18595] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.976611][T18595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.976632][T18595] ? clear_bhb_loop+0x60/0xb0 [ 690.976658][T18595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.976678][T18595] RIP: 0033:0x7fc2fe58eba9 [ 690.976696][T18595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.976715][T18595] RSP: 002b:00007fc2fc7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 690.976736][T18595] RAX: ffffffffffffffda RBX: 00007fc2fe7d5fa0 RCX: 00007fc2fe58eba9 [ 690.976750][T18595] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000005 [ 690.976764][T18595] RBP: 00007fc2fc7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 690.976776][T18595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 690.976788][T18595] R13: 00007fc2fe7d6038 R14: 00007fc2fe7d5fa0 R15: 00007ffdf3eeb318 [ 690.976822][T18595] [ 691.130840][T18602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3533'. [ 691.707105][T18617] netlink: 'syz.4.3538': attribute type 4 has an invalid length. [ 691.858573][T18622] syzkaller1: entered promiscuous mode [ 691.901066][T18622] syzkaller1: entered allmulticast mode [ 692.499398][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3546'. [ 692.970356][T18644] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.654389][T18644] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.964875][T18644] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.057201][T18565] Set syz1 is full, maxelem 65536 reached [ 694.088466][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3552'. [ 694.209796][T18644] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.245352][T18680] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 694.304181][T18680] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 694.371719][T18684] block nbd0: server does not support multiple connections per device. [ 694.396175][T18684] block nbd0: shutting down sockets [ 694.545180][ T7448] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.592686][ T7448] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.709895][ T7446] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.727967][ T7446] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.271822][T18717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3565'. [ 695.292548][T18717] FAULT_INJECTION: forcing a failure. [ 695.292548][T18717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.317367][T18717] CPU: 1 UID: 0 PID: 18717 Comm: syz.0.3565 Not tainted syzkaller #0 PREEMPT(full) [ 695.317396][T18717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 695.317409][T18717] Call Trace: [ 695.317418][T18717] [ 695.317427][T18717] dump_stack_lvl+0x189/0x250 [ 695.317457][T18717] ? __pfx____ratelimit+0x10/0x10 [ 695.317483][T18717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 695.317508][T18717] ? __pfx__printk+0x10/0x10 [ 695.317552][T18717] should_fail_ex+0x414/0x560 [ 695.317589][T18717] _copy_to_user+0x31/0xb0 [ 695.317620][T18717] simple_read_from_buffer+0xe1/0x170 [ 695.317665][T18717] proc_fail_nth_read+0x1b3/0x220 [ 695.317693][T18717] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 695.317723][T18717] ? rw_verify_area+0x2a6/0x4d0 [ 695.317749][T18717] ? __lock_acquire+0xab9/0xd20 [ 695.317777][T18717] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 695.317802][T18717] vfs_read+0x200/0xa30 [ 695.317827][T18717] ? fdget_pos+0x247/0x320 [ 695.317850][T18717] ? __pfx___mutex_lock+0x10/0x10 [ 695.317876][T18717] ? __pfx_vfs_read+0x10/0x10 [ 695.317923][T18717] ? __fget_files+0x2a/0x420 [ 695.317948][T18717] ? __fget_files+0x3a0/0x420 [ 695.317966][T18717] ? __fget_files+0x2a/0x420 [ 695.317996][T18717] ksys_read+0x145/0x250 [ 695.318028][T18717] ? __pfx_ksys_read+0x10/0x10 [ 695.318054][T18717] ? rcu_is_watching+0x15/0xb0 [ 695.318083][T18717] ? do_syscall_64+0xbe/0x3b0 [ 695.318115][T18717] do_syscall_64+0xfa/0x3b0 [ 695.318139][T18717] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.318164][T18717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.318186][T18717] ? clear_bhb_loop+0x60/0xb0 [ 695.318213][T18717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.318234][T18717] RIP: 0033:0x7f7c0d38d5bc [ 695.318253][T18717] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 695.318272][T18717] RSP: 002b:00007f7c0e134030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 695.318295][T18717] RAX: ffffffffffffffda RBX: 00007f7c0d5d5fa0 RCX: 00007f7c0d38d5bc [ 695.318311][T18717] RDX: 000000000000000f RSI: 00007f7c0e1340a0 RDI: 0000000000000005 [ 695.318325][T18717] RBP: 00007f7c0e134090 R08: 0000000000000000 R09: 0000000000000000 [ 695.318339][T18717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.318352][T18717] R13: 00007f7c0d5d6038 R14: 00007f7c0d5d5fa0 R15: 00007ffc6bc2cb28 [ 695.318388][T18717] [ 695.696745][T18720] tipc: Started in network mode [ 695.705413][T18720] tipc: Node identity dea2bed614d3, cluster identity 4711 [ 695.713074][T18720] tipc: Enabled bearer , priority 0 [ 695.739344][T18720] sch_tbf: burst 883 is lower than device syzkaller0 mtu (1514) ! [ 695.749862][T18722] FAULT_INJECTION: forcing a failure. [ 695.749862][T18722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 695.775679][T18720] tipc: Resetting bearer [ 695.807896][T18722] CPU: 1 UID: 0 PID: 18722 Comm: syz.1.3566 Not tainted syzkaller #0 PREEMPT(full) [ 695.807927][T18722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 695.807942][T18722] Call Trace: [ 695.807951][T18722] [ 695.807962][T18722] dump_stack_lvl+0x189/0x250 [ 695.807994][T18722] ? __pfx____ratelimit+0x10/0x10 [ 695.808021][T18722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 695.808049][T18722] ? __pfx__printk+0x10/0x10 [ 695.808082][T18722] ? __might_fault+0xb0/0x130 [ 695.808128][T18722] should_fail_ex+0x414/0x560 [ 695.808169][T18722] _copy_from_user+0x2d/0xb0 [ 695.808202][T18722] ___sys_sendmsg+0x158/0x2a0 [ 695.808237][T18722] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.808321][T18722] ? __might_fault+0xb0/0x130 [ 695.808357][T18722] __sys_sendmmsg+0x227/0x430 [ 695.808396][T18722] ? __pfx___sys_sendmmsg+0x10/0x10 [ 695.808424][T18722] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 695.808496][T18722] ? ksys_write+0x22a/0x250 [ 695.808528][T18722] ? __pfx_ksys_write+0x10/0x10 [ 695.808555][T18722] ? rcu_is_watching+0x15/0xb0 [ 695.808584][T18722] __x64_sys_sendmmsg+0xa0/0xc0 [ 695.808624][T18722] do_syscall_64+0xfa/0x3b0 [ 695.808650][T18722] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.808675][T18722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.808697][T18722] ? clear_bhb_loop+0x60/0xb0 [ 695.808724][T18722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.808745][T18722] RIP: 0033:0x7feeb7f8eba9 [ 695.808765][T18722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.808785][T18722] RSP: 002b:00007feeb8e4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 695.808808][T18722] RAX: ffffffffffffffda RBX: 00007feeb81d5fa0 RCX: 00007feeb7f8eba9 [ 695.808825][T18722] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 695.808839][T18722] RBP: 00007feeb8e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 695.808853][T18722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 695.808867][T18722] R13: 00007feeb81d6038 R14: 00007feeb81d5fa0 R15: 00007ffea8fe1aa8 [ 695.808902][T18722] [ 696.046671][T18719] tipc: Disabling bearer [ 696.097146][T18726] ip6tnl1: entered promiscuous mode [ 696.112530][T18726] ip6tnl1: entered allmulticast mode [ 696.505325][T18747] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000 [ 696.628137][T18751] netlink: 'syz.3.3578': attribute type 1 has an invalid length. [ 696.711594][T18758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3580'. [ 696.748797][T18751] bond2: (slave geneve2): making interface the new active one [ 696.766716][T18751] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 696.777610][ T3542] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 696.786878][T18751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3578'. [ 696.835464][T18751] 8021q: adding VLAN 0 to HW filter on device bond2 [ 696.843503][ T3542] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 696.859617][ T3542] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 697.052784][ T3542] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 697.156448][T18770] syzkaller1: entered promiscuous mode [ 697.176125][T18770] syzkaller1: entered allmulticast mode [ 697.351440][T18779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3586'. [ 697.377663][T18779] batadv0: entered promiscuous mode [ 697.393162][T18779] macsec1: entered promiscuous mode [ 697.414768][T18781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3586'. [ 697.434002][T18779] batadv0: left promiscuous mode [ 697.608498][T18791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3589'. [ 698.048238][T18806] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3590'. [ 698.077349][T18804] lo speed is unknown, defaulting to 1000 [ 698.128846][T18804] lo speed is unknown, defaulting to 1000 [ 698.265834][T18820] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3597'. [ 698.306844][T18820] 8021q: VLANs not supported on ipvlan1 [ 698.395859][T18820] macsec2: entered promiscuous mode [ 698.411524][T18820] macsec2: entered allmulticast mode [ 698.517156][T18820] tipc: Enabling of bearer rejected, failed to enable media [ 698.600090][T18825] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3598'. [ 698.660680][T18820] syzkaller0: entered promiscuous mode [ 698.692002][T18820] syzkaller0: entered allmulticast mode [ 698.991050][T18830] ip6tnl1: left promiscuous mode [ 698.996143][T18830] ip6tnl1: left allmulticast mode [ 699.056220][ T7453] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 699.071865][T18835] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 699.087359][ T7453] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 699.102194][T18835] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 699.112476][T18835] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 699.123357][T18835] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 699.133929][T18835] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 699.144237][T18835] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 699.155099][T18835] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 699.189216][T18835] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 699.217490][T18835] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 699.240897][T18835] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 699.258660][ T7453] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 699.284450][ T7453] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 699.303052][T18841] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 699.342124][T18841] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3605'. [ 699.444068][T18848] FAULT_INJECTION: forcing a failure. [ 699.444068][T18848] name failslab, interval 1, probability 0, space 0, times 0 [ 699.480924][T18848] CPU: 0 UID: 0 PID: 18848 Comm: syz.5.3606 Not tainted syzkaller #0 PREEMPT(full) [ 699.480954][T18848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 699.480970][T18848] Call Trace: [ 699.480979][T18848] [ 699.480987][T18848] dump_stack_lvl+0x189/0x250 [ 699.481018][T18848] ? __pfx____ratelimit+0x10/0x10 [ 699.481041][T18848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 699.481065][T18848] ? __pfx__printk+0x10/0x10 [ 699.481113][T18848] ? __pfx___might_resched+0x10/0x10 [ 699.481139][T18848] should_fail_ex+0x414/0x560 [ 699.481176][T18848] should_failslab+0xa8/0x100 [ 699.481208][T18848] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 699.481238][T18848] ? __alloc_skb+0x112/0x2d0 [ 699.481268][T18848] __alloc_skb+0x112/0x2d0 [ 699.481297][T18848] tipc_msg_build+0x13b/0xcf0 [ 699.481330][T18848] ? aa_label_sk_perm+0x4cd/0x630 [ 699.481361][T18848] ? __pfx_tipc_msg_build+0x10/0x10 [ 699.481393][T18848] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 699.481439][T18848] __tipc_sendstream+0x8ac/0x1290 [ 699.481502][T18848] ? __pfx___tipc_sendstream+0x10/0x10 [ 699.481525][T18848] ? __pfx_woken_wake_function+0x10/0x10 [ 699.481554][T18848] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 699.481587][T18848] tipc_send_packet+0x7c/0xa0 [ 699.481609][T18848] ? __pfx_tipc_send_packet+0x10/0x10 [ 699.481638][T18848] __sock_sendmsg+0x219/0x270 [ 699.481663][T18848] ____sys_sendmsg+0x52d/0x830 [ 699.481698][T18848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 699.481737][T18848] ? import_iovec+0x74/0xa0 [ 699.481769][T18848] ___sys_sendmsg+0x21f/0x2a0 [ 699.481799][T18848] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.481876][T18848] ? __might_fault+0xb0/0x130 [ 699.481908][T18848] __sys_sendmmsg+0x227/0x430 [ 699.481943][T18848] ? __pfx___sys_sendmmsg+0x10/0x10 [ 699.481968][T18848] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 699.482023][T18848] ? ksys_write+0x22a/0x250 [ 699.482052][T18848] ? __pfx_ksys_write+0x10/0x10 [ 699.482077][T18848] ? rcu_is_watching+0x15/0xb0 [ 699.482122][T18848] __x64_sys_sendmmsg+0xa0/0xc0 [ 699.482153][T18848] do_syscall_64+0xfa/0x3b0 [ 699.482177][T18848] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.482200][T18848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.482221][T18848] ? clear_bhb_loop+0x60/0xb0 [ 699.482246][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.482266][T18848] RIP: 0033:0x7fc2fe58eba9 [ 699.482285][T18848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.482303][T18848] RSP: 002b:00007fc2fc7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 699.482324][T18848] RAX: ffffffffffffffda RBX: 00007fc2fe7d6090 RCX: 00007fc2fe58eba9 [ 699.482338][T18848] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 699.482352][T18848] RBP: 00007fc2fc7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 699.482364][T18848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 699.482377][T18848] R13: 00007fc2fe7d6128 R14: 00007fc2fe7d6090 R15: 00007ffdf3eeb318 [ 699.482410][T18848] [ 699.800024][T18850] FAULT_INJECTION: forcing a failure. [ 699.800024][T18850] name failslab, interval 1, probability 0, space 0, times 0 [ 699.813177][T18850] CPU: 0 UID: 0 PID: 18850 Comm: syz.0.3608 Not tainted syzkaller #0 PREEMPT(full) [ 699.813206][T18850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 699.813220][T18850] Call Trace: [ 699.813229][T18850] [ 699.813240][T18850] dump_stack_lvl+0x189/0x250 [ 699.813270][T18850] ? __pfx____ratelimit+0x10/0x10 [ 699.813296][T18850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 699.813323][T18850] ? __pfx__printk+0x10/0x10 [ 699.813360][T18850] ? __pfx___might_resched+0x10/0x10 [ 699.813388][T18850] should_fail_ex+0x414/0x560 [ 699.813427][T18850] should_failslab+0xa8/0x100 [ 699.813461][T18850] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 699.813493][T18850] ? __alloc_skb+0x112/0x2d0 [ 699.813525][T18850] __alloc_skb+0x112/0x2d0 [ 699.813556][T18850] tipc_msg_build+0x13b/0xcf0 [ 699.813591][T18850] ? aa_label_sk_perm+0x4cd/0x630 [ 699.813624][T18850] ? __pfx_tipc_msg_build+0x10/0x10 [ 699.813657][T18850] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 699.813700][T18850] __tipc_sendstream+0x8ac/0x1290 [ 699.813766][T18850] ? __pfx___tipc_sendstream+0x10/0x10 [ 699.813791][T18850] ? __pfx_woken_wake_function+0x10/0x10 [ 699.813822][T18850] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 699.813858][T18850] tipc_send_packet+0x7c/0xa0 [ 699.813881][T18850] ? __pfx_tipc_send_packet+0x10/0x10 [ 699.813906][T18850] __sock_sendmsg+0x219/0x270 [ 699.813932][T18850] ____sys_sendmsg+0x52d/0x830 [ 699.813968][T18850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 699.814010][T18850] ? import_iovec+0x74/0xa0 [ 699.814044][T18850] ___sys_sendmsg+0x21f/0x2a0 [ 699.814077][T18850] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.814114][T18850] ? __might_fault+0xb0/0x130 [ 699.814195][T18850] ? __might_fault+0xb0/0x130 [ 699.814229][T18850] __sys_sendmmsg+0x227/0x430 [ 699.814266][T18850] ? __pfx___sys_sendmmsg+0x10/0x10 [ 699.814293][T18850] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 699.814353][T18850] ? ksys_write+0x22a/0x250 [ 699.814385][T18850] ? __pfx_ksys_write+0x10/0x10 [ 699.814411][T18850] ? rcu_is_watching+0x15/0xb0 [ 699.814442][T18850] __x64_sys_sendmmsg+0xa0/0xc0 [ 699.814475][T18850] do_syscall_64+0xfa/0x3b0 [ 699.814500][T18850] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.814524][T18850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.814546][T18850] ? clear_bhb_loop+0x60/0xb0 [ 699.814573][T18850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.814594][T18850] RIP: 0033:0x7f7c0d38eba9 [ 699.814613][T18850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.814632][T18850] RSP: 002b:00007f7c0e134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 699.814655][T18850] RAX: ffffffffffffffda RBX: 00007f7c0d5d5fa0 RCX: 00007f7c0d38eba9 [ 699.814671][T18850] RDX: 00000000040001b6 RSI: 0000200000001540 RDI: 0000000000000003 [ 699.814686][T18850] RBP: 00007f7c0e134090 R08: 0000000000000000 R09: 0000000000000000 [ 699.814700][T18850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 699.814714][T18850] R13: 00007f7c0d5d6038 R14: 00007f7c0d5d5fa0 R15: 00007ffc6bc2cb28 [ 699.814749][T18850] [ 699.819640][T18847] pim6reg1: entered promiscuous mode [ 700.173482][T18847] pim6reg1: entered allmulticast mode [ 700.885004][T18877] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3615'. [ 701.368239][T18888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3620'. [ 701.389805][T18889] syzkaller0: entered promiscuous mode [ 701.401337][T18889] syzkaller0: entered allmulticast mode [ 701.454324][T18888] batadv0: entered promiscuous mode [ 701.469562][T18888] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 701.492205][T18888] batadv0: left promiscuous mode [ 701.740853][T18897] sch_tbf: burst 883 is lower than device syzkaller0 mtu (1514) ! [ 701.963221][T18905] tipc: Enabled bearer , priority 0 [ 701.984367][T18905] syzkaller0: entered promiscuous mode [ 701.992599][T18905] syzkaller0: entered allmulticast mode [ 702.040458][T18905] tipc: Resetting bearer [ 702.083969][T18904] tipc: Resetting bearer [ 702.119901][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3625'. [ 702.130294][T18907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3625'. [ 702.153120][T18904] tipc: Disabling bearer [ 702.175686][T18909] ÿÿÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 702.465367][T18915] lo speed is unknown, defaulting to 1000 [ 702.517583][T18915] lo speed is unknown, defaulting to 1000 [ 703.453721][T18949] FAULT_INJECTION: forcing a failure. [ 703.453721][T18949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.491220][T18949] CPU: 1 UID: 0 PID: 18949 Comm: syz.1.3636 Not tainted syzkaller #0 PREEMPT(full) [ 703.491262][T18949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 703.491282][T18949] Call Trace: [ 703.491296][T18949] [ 703.491311][T18949] dump_stack_lvl+0x189/0x250 [ 703.491354][T18949] ? __pfx____ratelimit+0x10/0x10 [ 703.491394][T18949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 703.491436][T18949] ? __pfx__printk+0x10/0x10 [ 703.491514][T18949] should_fail_ex+0x414/0x560 [ 703.491555][T18949] copy_folio_from_iter_atomic+0x325/0x1910 [ 703.491584][T18949] ? irqentry_exit+0x74/0x90 [ 703.491619][T18949] ? shmem_get_folio_gfp+0x6bc/0x1660 [ 703.491659][T18949] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 703.491697][T18949] ? shmem_write_begin+0x15f/0x2b0 [ 703.491735][T18949] generic_perform_write+0x5df/0x900 [ 703.491779][T18949] ? __pfx_generic_perform_write+0x10/0x10 [ 703.491805][T18949] ? do_raw_spin_unlock+0x122/0x240 [ 703.491834][T18949] ? mnt_put_write_access_file+0xc0/0x100 [ 703.491864][T18949] ? file_update_time+0x416/0x490 [ 703.491895][T18949] shmem_file_write_iter+0xf8/0x120 [ 703.491930][T18949] vfs_write+0x5c9/0xb30 [ 703.491966][T18949] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 703.491999][T18949] ? __pfx_vfs_write+0x10/0x10 [ 703.492034][T18949] ? trace_irq_disable+0x37/0x110 [ 703.492084][T18949] ksys_write+0x145/0x250 [ 703.492122][T18949] ? __pfx_ksys_write+0x10/0x10 [ 703.492160][T18949] ? rcu_is_watching+0x15/0xb0 [ 703.492188][T18949] ? do_syscall_64+0xbe/0x3b0 [ 703.492218][T18949] do_syscall_64+0xfa/0x3b0 [ 703.492242][T18949] ? lockdep_hardirqs_on+0x9c/0x150 [ 703.492265][T18949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.492285][T18949] ? clear_bhb_loop+0x60/0xb0 [ 703.492311][T18949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.492331][T18949] RIP: 0033:0x7feeb7f8eba9 [ 703.492350][T18949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.492386][T18949] RSP: 002b:00007feeb8e4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 703.492408][T18949] RAX: ffffffffffffffda RBX: 00007feeb81d5fa0 RCX: 00007feeb7f8eba9 [ 703.492424][T18949] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000005 [ 703.492438][T18949] RBP: 00007feeb8e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 703.492452][T18949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 703.492465][T18949] R13: 00007feeb81d6038 R14: 00007feeb81d5fa0 R15: 00007ffea8fe1aa8 [ 703.492502][T18949] [ 703.932642][T18955] lo speed is unknown, defaulting to 1000 [ 704.280587][T18955] lo speed is unknown, defaulting to 1000 [ 704.471894][T18979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3643'. [ 704.755506][T18989] netlink: 'syz.1.3644': attribute type 13 has an invalid length. [ 704.780046][T18989] netlink: 'syz.1.3644': attribute type 17 has an invalid length. [ 704.968007][T18989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 705.392149][T19001] netlink: 'syz.3.3650': attribute type 3 has an invalid length. [ 705.834014][T19007] FAULT_INJECTION: forcing a failure. [ 705.834014][T19007] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 705.891141][T19007] CPU: 0 UID: 0 PID: 19007 Comm: syz.1.3651 Not tainted syzkaller #0 PREEMPT(full) [ 705.891171][T19007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 705.891185][T19007] Call Trace: [ 705.891193][T19007] [ 705.891202][T19007] dump_stack_lvl+0x189/0x250 [ 705.891233][T19007] ? __pfx____ratelimit+0x10/0x10 [ 705.891258][T19007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 705.891283][T19007] ? __pfx__printk+0x10/0x10 [ 705.891314][T19007] ? fs_reclaim_acquire+0x7d/0x100 [ 705.891344][T19007] should_fail_ex+0x414/0x560 [ 705.891381][T19007] prepare_alloc_pages+0x213/0x610 [ 705.891411][T19007] __alloc_frozen_pages_noprof+0x123/0x370 [ 705.891437][T19007] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 705.891468][T19007] ? policy_nodemask+0x27c/0x720 [ 705.891504][T19007] alloc_pages_mpol+0x232/0x4a0 [ 705.891539][T19007] folio_alloc_mpol_noprof+0x39/0x70 [ 705.891571][T19007] shmem_alloc_and_add_folio+0x447/0xf60 [ 705.891605][T19007] ? filemap_get_entry+0xad/0x2f0 [ 705.891624][T19007] ? filemap_get_entry+0xad/0x2f0 [ 705.891642][T19007] ? filemap_get_entry+0xad/0x2f0 [ 705.891664][T19007] ? filemap_get_entry+0x28f/0x2f0 [ 705.891688][T19007] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 705.891723][T19007] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 705.891758][T19007] shmem_get_folio_gfp+0x59d/0x1660 [ 705.891808][T19007] shmem_write_begin+0xf7/0x2b0 [ 705.891845][T19007] generic_perform_write+0x2c5/0x900 [ 705.891885][T19007] ? __pfx_generic_perform_write+0x10/0x10 [ 705.891910][T19007] ? do_raw_spin_unlock+0x122/0x240 [ 705.891943][T19007] ? mnt_put_write_access_file+0xc0/0x100 [ 705.891969][T19007] ? file_update_time+0x416/0x490 [ 705.891998][T19007] shmem_file_write_iter+0xf8/0x120 [ 705.892032][T19007] vfs_write+0x5c9/0xb30 [ 705.892065][T19007] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 705.892096][T19007] ? __pfx_vfs_write+0x10/0x10 [ 705.892128][T19007] ? do_sys_openat2+0x154/0x1c0 [ 705.892159][T19007] ? kmem_cache_free+0x18f/0x400 [ 705.892202][T19007] ksys_write+0x145/0x250 [ 705.892230][T19007] ? __pfx_ksys_write+0x10/0x10 [ 705.892254][T19007] ? rcu_is_watching+0x15/0xb0 [ 705.892280][T19007] ? do_syscall_64+0xbe/0x3b0 [ 705.892308][T19007] do_syscall_64+0xfa/0x3b0 [ 705.892333][T19007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.892350][T19007] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 705.892369][T19007] ? clear_bhb_loop+0x60/0xb0 [ 705.892393][T19007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.892411][T19007] RIP: 0033:0x7feeb7f8eba9 [ 705.892428][T19007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.892445][T19007] RSP: 002b:00007feeb8e4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 705.892465][T19007] RAX: ffffffffffffffda RBX: 00007feeb81d5fa0 RCX: 00007feeb7f8eba9 [ 705.892480][T19007] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000005 [ 705.892492][T19007] RBP: 00007feeb8e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 705.892505][T19007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 705.892516][T19007] R13: 00007feeb81d6038 R14: 00007feeb81d5fa0 R15: 00007ffea8fe1aa8 [ 705.892549][T19007] [ 706.573378][T19019] netlink: 'syz.5.3655': attribute type 21 has an invalid length. [ 706.608960][T19019] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3655'. [ 706.681196][T19027] netlink: 'syz.4.3657': attribute type 2 has an invalid length. [ 706.701995][T19026] syzkaller0: entered promiscuous mode [ 706.707639][T19026] syzkaller0: entered allmulticast mode [ 706.760468][T19027] : entered promiscuous mode [ 706.791581][T19026] sch_tbf: burst 883 is lower than device syzkaller0 mtu (1514) ! [ 707.097632][T19043] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3662'. [ 707.117843][T19045] FAULT_INJECTION: forcing a failure. [ 707.117843][T19045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.151747][T19045] CPU: 0 UID: 0 PID: 19045 Comm: syz.4.3663 Not tainted syzkaller #0 PREEMPT(full) [ 707.151771][T19045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 707.151782][T19045] Call Trace: [ 707.151789][T19045] [ 707.151796][T19045] dump_stack_lvl+0x189/0x250 [ 707.151821][T19045] ? __pfx____ratelimit+0x10/0x10 [ 707.151852][T19045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 707.151871][T19045] ? __pfx__printk+0x10/0x10 [ 707.151893][T19045] ? shmem_alloc_and_add_folio+0xcb3/0xf60 [ 707.151922][T19045] ? filemap_get_entry+0xad/0x2f0 [ 707.151936][T19045] ? filemap_get_entry+0xad/0x2f0 [ 707.151953][T19045] should_fail_ex+0x414/0x560 [ 707.151982][T19045] copy_folio_from_iter_atomic+0x325/0x1910 [ 707.152004][T19045] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 707.152031][T19045] ? shmem_get_folio_gfp+0x1432/0x1660 [ 707.152059][T19045] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 707.152088][T19045] ? shmem_write_begin+0x15f/0x2b0 [ 707.152115][T19045] generic_perform_write+0x5df/0x900 [ 707.152147][T19045] ? __pfx_generic_perform_write+0x10/0x10 [ 707.152165][T19045] ? down_write+0x162/0x1f0 [ 707.152191][T19045] ? file_update_time+0x2da/0x490 [ 707.152213][T19045] shmem_file_write_iter+0xf8/0x120 [ 707.152239][T19045] vfs_write+0x5c9/0xb30 [ 707.152264][T19045] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 707.152289][T19045] ? __pfx_vfs_write+0x10/0x10 [ 707.152314][T19045] ? do_sys_openat2+0x154/0x1c0 [ 707.152330][T19045] ? kmem_cache_free+0x18f/0x400 [ 707.152370][T19045] ksys_write+0x145/0x250 [ 707.152402][T19045] ? __pfx_ksys_write+0x10/0x10 [ 707.152426][T19045] ? rcu_is_watching+0x15/0xb0 [ 707.152453][T19045] ? do_syscall_64+0xbe/0x3b0 [ 707.152500][T19045] do_syscall_64+0xfa/0x3b0 [ 707.152524][T19045] ? lockdep_hardirqs_on+0x9c/0x150 [ 707.152548][T19045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.152570][T19045] ? clear_bhb_loop+0x60/0xb0 [ 707.152619][T19045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.152639][T19045] RIP: 0033:0x7f2630b8eba9 [ 707.152657][T19045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.152675][T19045] RSP: 002b:00007f2631ac8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 707.152696][T19045] RAX: ffffffffffffffda RBX: 00007f2630dd5fa0 RCX: 00007f2630b8eba9 [ 707.152712][T19045] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000005 [ 707.152725][T19045] RBP: 00007f2631ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 707.152737][T19045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 707.152750][T19045] R13: 00007f2630dd6038 R14: 00007f2630dd5fa0 R15: 00007fff92e6d5b8 [ 707.152802][T19045] [ 707.753886][T19058] lo speed is unknown, defaulting to 1000 [ 707.956076][T19065] netlink: 'syz.5.3668': attribute type 1 has an invalid length. [ 708.040210][T19067] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3669'. [ 708.089806][T19072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3668'. [ 708.164942][T19060] hsr0: left promiscuous mode [ 708.268593][T19080] netlink: 'syz.0.3672': attribute type 1 has an invalid length. [ 708.323689][T19060] vlan2: left allmulticast mode [ 708.328630][T19060] bond0: left allmulticast mode [ 708.341690][T19058] lo speed is unknown, defaulting to 1000 [ 708.421003][T19065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 708.433632][ T7448] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.444328][ T7448] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.527369][ T7453] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.545027][ T7453] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.624853][T19091] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3674'. [ 708.651691][T19082] lo speed is unknown, defaulting to 1000 [ 708.673172][T19090] lo speed is unknown, defaulting to 1000 [ 708.719274][T19093] lo speed is unknown, defaulting to 1000 [ 708.920779][T19082] lo speed is unknown, defaulting to 1000 [ 709.616400][T19090] lo speed is unknown, defaulting to 1000 [ 709.616637][T19111] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3680'. [ 710.032632][T19093] lo speed is unknown, defaulting to 1000 [ 710.234585][T19120] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3682'. [ 710.268036][T19120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3682'. [ 710.285313][T19120] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3682'. [ 710.298428][T19120] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3682'. [ 711.255337][T19130] FAULT_INJECTION: forcing a failure. [ 711.255337][T19130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.320182][T19130] CPU: 1 UID: 0 PID: 19130 Comm: syz.5.3685 Not tainted syzkaller #0 PREEMPT(full) [ 711.320215][T19130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 711.320230][T19130] Call Trace: [ 711.320239][T19130] [ 711.320250][T19130] dump_stack_lvl+0x189/0x250 [ 711.320284][T19130] ? __pfx____ratelimit+0x10/0x10 [ 711.320319][T19130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 711.320347][T19130] ? __pfx__printk+0x10/0x10 [ 711.320379][T19130] ? __might_fault+0xb0/0x130 [ 711.320425][T19130] should_fail_ex+0x414/0x560 [ 711.320466][T19130] _copy_from_user+0x2d/0xb0 [ 711.320497][T19130] ___sys_sendmsg+0x158/0x2a0 [ 711.320532][T19130] ? __pfx____sys_sendmsg+0x10/0x10 [ 711.320607][T19130] ? __fget_files+0x2a/0x420 [ 711.320626][T19130] ? __fget_files+0x3a0/0x420 [ 711.320660][T19130] __x64_sys_sendmsg+0x19b/0x260 [ 711.320695][T19130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 711.320739][T19130] ? __pfx_ksys_write+0x10/0x10 [ 711.320766][T19130] ? rcu_is_watching+0x15/0xb0 [ 711.320796][T19130] ? do_syscall_64+0xbe/0x3b0 [ 711.320829][T19130] do_syscall_64+0xfa/0x3b0 [ 711.320855][T19130] ? lockdep_hardirqs_on+0x9c/0x150 [ 711.320880][T19130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.320903][T19130] ? clear_bhb_loop+0x60/0xb0 [ 711.320931][T19130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.320958][T19130] RIP: 0033:0x7fc2fe58eba9 [ 711.320976][T19130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.320996][T19130] RSP: 002b:00007fc2fc7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 711.321018][T19130] RAX: ffffffffffffffda RBX: 00007fc2fe7d5fa0 RCX: 00007fc2fe58eba9 [ 711.321034][T19130] RDX: 0000000000000080 RSI: 0000200000002ec0 RDI: 0000000000000007 [ 711.321048][T19130] RBP: 00007fc2fc7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 711.321062][T19130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.321075][T19130] R13: 00007fc2fe7d6038 R14: 00007fc2fe7d5fa0 R15: 00007ffdf3eeb318 [ 711.321112][T19130] [ 712.024747][T19152] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3691'. [ 712.183875][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3694'. [ 712.373338][T19171] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3696'. [ 712.395945][T19169] syz_tun: entered allmulticast mode [ 712.455025][T19167] syz_tun: left allmulticast mode [ 712.646313][T19179] syzkaller0: entered promiscuous mode [ 712.671470][T19179] syzkaller0: entered allmulticast mode [ 713.006657][T19188] lo speed is unknown, defaulting to 1000 [ 713.025541][T19188] lo speed is unknown, defaulting to 1000 [ 713.452773][T19199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3704'. [ 713.453102][T19197] lo speed is unknown, defaulting to 1000 [ 713.540804][T19199] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3704'. [ 713.579929][T19197] lo speed is unknown, defaulting to 1000 [ 713.628762][T19199] netlink: 34 bytes leftover after parsing attributes in process `syz.0.3704'. [ 714.089024][T19209] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 714.168342][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3707'. [ 714.388318][T19222] sctp: [Deprecated]: syz.5.3710 (pid 19222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 714.388318][T19222] Use struct sctp_sack_info instead [ 714.419368][T19210] syzkaller1: entered allmulticast mode [ 714.568934][T19225] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3710'. [ 714.604575][T19227] FAULT_INJECTION: forcing a failure. [ 714.604575][T19227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.636944][T19227] CPU: 1 UID: 0 PID: 19227 Comm: syz.3.3711 Not tainted syzkaller #0 PREEMPT(full) [ 714.636971][T19227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 714.636985][T19227] Call Trace: [ 714.636994][T19227] [ 714.637003][T19227] dump_stack_lvl+0x189/0x250 [ 714.637033][T19227] ? __pfx____ratelimit+0x10/0x10 [ 714.637057][T19227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 714.637083][T19227] ? __pfx__printk+0x10/0x10 [ 714.637129][T19227] should_fail_ex+0x414/0x560 [ 714.637167][T19227] copy_folio_from_iter_atomic+0x325/0x1910 [ 714.637194][T19227] ? irqentry_exit+0x74/0x90 [ 714.637227][T19227] ? shmem_get_folio_gfp+0x6bc/0x1660 [ 714.637264][T19227] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 714.637308][T19227] ? shmem_write_begin+0x15f/0x2b0 [ 714.637344][T19227] generic_perform_write+0x5df/0x900 [ 714.637385][T19227] ? __pfx_generic_perform_write+0x10/0x10 [ 714.637408][T19227] ? down_write+0x162/0x1f0 [ 714.637443][T19227] ? file_update_time+0x2da/0x490 [ 714.637473][T19227] shmem_file_write_iter+0xf8/0x120 [ 714.637506][T19227] vfs_write+0x5c9/0xb30 [ 714.637539][T19227] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 714.637570][T19227] ? __pfx_vfs_write+0x10/0x10 [ 714.637603][T19227] ? do_sys_openat2+0x154/0x1c0 [ 714.637623][T19227] ? kmem_cache_free+0x18f/0x400 [ 714.637669][T19227] ksys_write+0x145/0x250 [ 714.637699][T19227] ? __pfx_ksys_write+0x10/0x10 [ 714.637724][T19227] ? rcu_is_watching+0x15/0xb0 [ 714.637770][T19227] ? do_syscall_64+0xbe/0x3b0 [ 714.637802][T19227] do_syscall_64+0xfa/0x3b0 [ 714.637830][T19227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.637850][T19227] ? asm_sysvec_call_function_single+0x1a/0x20 [ 714.637872][T19227] ? clear_bhb_loop+0x60/0xb0 [ 714.637902][T19227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.637924][T19227] RIP: 0033:0x7f521438eba9 [ 714.637944][T19227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.637963][T19227] RSP: 002b:00007f52151fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 714.637985][T19227] RAX: ffffffffffffffda RBX: 00007f52145d5fa0 RCX: 00007f521438eba9 [ 714.638002][T19227] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000005 [ 714.638016][T19227] RBP: 00007f52151fe090 R08: 0000000000000000 R09: 0000000000000000 [ 714.638029][T19227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 714.638042][T19227] R13: 00007f52145d6038 R14: 00007f52145d5fa0 R15: 00007ffe83540558 [ 714.638079][T19227] [ 715.389205][T19235] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 716.354527][T19253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3717'. [ 716.560040][T19255] lo speed is unknown, defaulting to 1000 [ 716.703199][T19255] lo speed is unknown, defaulting to 1000 [ 716.763127][T19259] gre1: entered allmulticast mode [ 716.948623][T19261] netlink: 'syz.1.3720': attribute type 1 has an invalid length. [ 717.261494][T19263] lo speed is unknown, defaulting to 1000 [ 717.403988][T19263] lo speed is unknown, defaulting to 1000 [ 718.354600][T19289] FAULT_INJECTION: forcing a failure. [ 718.354600][T19289] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 718.374723][T19289] CPU: 0 UID: 0 PID: 19289 Comm: syz.0.3724 Not tainted syzkaller #0 PREEMPT(full) [ 718.374751][T19289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 718.374764][T19289] Call Trace: [ 718.374773][T19289] [ 718.374782][T19289] dump_stack_lvl+0x189/0x250 [ 718.374811][T19289] ? __pfx____ratelimit+0x10/0x10 [ 718.374836][T19289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 718.374861][T19289] ? __pfx__printk+0x10/0x10 [ 718.374891][T19289] ? fs_reclaim_acquire+0x7d/0x100 [ 718.374921][T19289] should_fail_ex+0x414/0x560 [ 718.374958][T19289] prepare_alloc_pages+0x213/0x610 [ 718.374987][T19289] __alloc_frozen_pages_noprof+0x123/0x370 [ 718.375014][T19289] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 718.375045][T19289] ? policy_nodemask+0x27c/0x720 [ 718.375087][T19289] alloc_pages_mpol+0x232/0x4a0 [ 718.375123][T19289] folio_alloc_mpol_noprof+0x39/0x70 [ 718.375155][T19289] shmem_alloc_and_add_folio+0x447/0xf60 [ 718.375206][T19289] ? filemap_get_entry+0xad/0x2f0 [ 718.375229][T19289] ? filemap_get_entry+0xad/0x2f0 [ 718.375247][T19289] ? filemap_get_entry+0xad/0x2f0 [ 718.375271][T19289] ? filemap_get_entry+0x28f/0x2f0 [ 718.375295][T19289] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 718.375333][T19289] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 718.375370][T19289] shmem_get_folio_gfp+0x59d/0x1660 [ 718.375435][T19289] shmem_write_begin+0xf7/0x2b0 [ 718.375471][T19289] generic_perform_write+0x2c5/0x900 [ 718.375511][T19289] ? __pfx_generic_perform_write+0x10/0x10 [ 718.375534][T19289] ? down_write+0x162/0x1f0 [ 718.375568][T19289] ? file_update_time+0x2da/0x490 [ 718.375597][T19289] shmem_file_write_iter+0xf8/0x120 [ 718.375630][T19289] vfs_write+0x5c9/0xb30 [ 718.375663][T19289] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 718.375692][T19289] ? __pfx_vfs_write+0x10/0x10 [ 718.375743][T19289] ? do_sys_openat2+0x154/0x1c0 [ 718.375765][T19289] ? kmem_cache_free+0x18f/0x400 [ 718.375813][T19289] ksys_write+0x145/0x250 [ 718.375845][T19289] ? __pfx_ksys_write+0x10/0x10 [ 718.375871][T19289] ? rcu_is_watching+0x15/0xb0 [ 718.375900][T19289] ? do_syscall_64+0xbe/0x3b0 [ 718.375932][T19289] do_syscall_64+0xfa/0x3b0 [ 718.375967][T19289] ? lockdep_hardirqs_on+0x9c/0x150 [ 718.376008][T19289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.376030][T19289] ? clear_bhb_loop+0x60/0xb0 [ 718.376057][T19289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.376084][T19289] RIP: 0033:0x7f7c0d38eba9 [ 718.376114][T19289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.376133][T19289] RSP: 002b:00007f7c0e134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 718.376173][T19289] RAX: ffffffffffffffda RBX: 00007f7c0d5d5fa0 RCX: 00007f7c0d38eba9 [ 718.376190][T19289] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000005 [ 718.376204][T19289] RBP: 00007f7c0e134090 R08: 0000000000000000 R09: 0000000000000000 [ 718.376218][T19289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 718.376232][T19289] R13: 00007f7c0d5d6038 R14: 00007f7c0d5d5fa0 R15: 00007ffc6bc2cb28 [ 718.376269][T19289] [ 719.019710][T19301] netlink: 'syz.1.3729': attribute type 1 has an invalid length. [ 719.036303][T19301] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3729'. [ 719.078845][T19302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3729'. [ 719.152434][T19305] lo speed is unknown, defaulting to 1000 [ 719.164377][T19305] lo speed is unknown, defaulting to 1000 [ 720.417146][T19323] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3735'. [ 720.517276][T19330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3734'. [ 720.708858][T19340] macvlan2: entered allmulticast mode [ 720.734278][T19340] bond0: entered allmulticast mode [ 720.761527][T19340] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 720.763266][T19343] FAULT_INJECTION: forcing a failure. [ 720.763266][T19343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.787167][T19340] bond0: left allmulticast mode [ 720.793046][T19343] CPU: 1 UID: 0 PID: 19343 Comm: syz.3.3738 Not tainted syzkaller #0 PREEMPT(full) [ 720.793072][T19343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 720.793085][T19343] Call Trace: [ 720.793094][T19343] [ 720.793103][T19343] dump_stack_lvl+0x189/0x250 [ 720.793132][T19343] ? __pfx____ratelimit+0x10/0x10 [ 720.793157][T19343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 720.793182][T19343] ? __pfx__printk+0x10/0x10 [ 720.793211][T19343] ? shmem_alloc_and_add_folio+0xcb3/0xf60 [ 720.793248][T19343] ? filemap_get_entry+0xad/0x2f0 [ 720.793266][T19343] ? filemap_get_entry+0xad/0x2f0 [ 720.793289][T19343] should_fail_ex+0x414/0x560 [ 720.793326][T19343] copy_folio_from_iter_atomic+0x325/0x1910 [ 720.793353][T19343] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 720.793388][T19343] ? shmem_get_folio_gfp+0x1432/0x1660 [ 720.793424][T19343] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 720.793461][T19343] ? shmem_write_begin+0x15f/0x2b0 [ 720.793495][T19343] generic_perform_write+0x5df/0x900 [ 720.793535][T19343] ? __pfx_generic_perform_write+0x10/0x10 [ 720.793558][T19343] ? down_write+0x162/0x1f0 [ 720.793597][T19343] ? file_update_time+0x2da/0x490 [ 720.793627][T19343] shmem_file_write_iter+0xf8/0x120 [ 720.793665][T19343] vfs_write+0x5c9/0xb30 [ 720.793699][T19343] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 720.793730][T19343] ? __pfx_vfs_write+0x10/0x10 [ 720.793763][T19343] ? do_sys_openat2+0x154/0x1c0 [ 720.793782][T19343] ? kmem_cache_free+0x18f/0x400 [ 720.793829][T19343] ksys_write+0x145/0x250 [ 720.793859][T19343] ? __pfx_ksys_write+0x10/0x10 [ 720.793883][T19343] ? rcu_is_watching+0x15/0xb0 [ 720.793911][T19343] ? do_syscall_64+0xbe/0x3b0 [ 720.793941][T19343] do_syscall_64+0xfa/0x3b0 [ 720.793964][T19343] ? lockdep_hardirqs_on+0x9c/0x150 [ 720.793988][T19343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.794008][T19343] ? clear_bhb_loop+0x60/0xb0 [ 720.794034][T19343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.794053][T19343] RIP: 0033:0x7f521438eba9 [ 720.794071][T19343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.794089][T19343] RSP: 002b:00007f52151fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 720.794110][T19343] RAX: ffffffffffffffda RBX: 00007f52145d5fa0 RCX: 00007f521438eba9 [ 720.794125][T19343] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000005 [ 720.794139][T19343] RBP: 00007f52151fe090 R08: 0000000000000000 R09: 0000000000000000 [ 720.794152][T19343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 720.794164][T19343] R13: 00007f52145d6038 R14: 00007f52145d5fa0 R15: 00007ffe83540558 [ 720.794199][T19343] [ 721.435079][T19348] netlink: 'syz.3.3740': attribute type 1 has an invalid length. [ 721.593246][T19360] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 721.665888][T19364] FAULT_INJECTION: forcing a failure. [ 721.665888][T19364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.699122][T19364] CPU: 1 UID: 0 PID: 19364 Comm: syz.0.3745 Not tainted syzkaller #0 PREEMPT(full) [ 721.699152][T19364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 721.699168][T19364] Call Trace: [ 721.699176][T19364] [ 721.699187][T19364] dump_stack_lvl+0x189/0x250 [ 721.699218][T19364] ? __pfx____ratelimit+0x10/0x10 [ 721.699244][T19364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.699271][T19364] ? __pfx__printk+0x10/0x10 [ 721.699303][T19364] ? __might_fault+0xb0/0x130 [ 721.699348][T19364] should_fail_ex+0x414/0x560 [ 721.699388][T19364] _copy_from_user+0x2d/0xb0 [ 721.699421][T19364] ____sys_sendmsg+0x2fe/0x830 [ 721.699460][T19364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 721.699502][T19364] ? import_iovec+0x74/0xa0 [ 721.699536][T19364] ___sys_sendmsg+0x21f/0x2a0 [ 721.699581][T19364] ? __pfx____sys_sendmsg+0x10/0x10 [ 721.699653][T19364] ? __fget_files+0x2a/0x420 [ 721.699673][T19364] ? __fget_files+0x3a0/0x420 [ 721.699705][T19364] __sys_sendmmsg+0x227/0x430 [ 721.699743][T19364] ? __pfx___sys_sendmmsg+0x10/0x10 [ 721.699772][T19364] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 721.699831][T19364] ? ksys_write+0x22a/0x250 [ 721.699865][T19364] ? __pfx_ksys_write+0x10/0x10 [ 721.699911][T19364] __x64_sys_sendmmsg+0xa0/0xc0 [ 721.699944][T19364] do_syscall_64+0xfa/0x3b0 [ 721.699970][T19364] ? lockdep_hardirqs_on+0x9c/0x150 [ 721.699996][T19364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.700019][T19364] ? clear_bhb_loop+0x60/0xb0 [ 721.700046][T19364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.700068][T19364] RIP: 0033:0x7f7c0d38eba9 [ 721.700089][T19364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.700109][T19364] RSP: 002b:00007f7c0e134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 721.700133][T19364] RAX: ffffffffffffffda RBX: 00007f7c0d5d5fa0 RCX: 00007f7c0d38eba9 [ 721.700150][T19364] RDX: 0000000000000001 RSI: 0000200000000cc0 RDI: 0000000000000004 [ 721.700165][T19364] RBP: 00007f7c0e134090 R08: 0000000000000000 R09: 0000000000000000 [ 721.700180][T19364] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 721.700195][T19364] R13: 00007f7c0d5d6038 R14: 00007f7c0d5d5fa0 R15: 00007ffc6bc2cb28 [ 721.700230][T19364] [ 722.069059][T19369] netlink: 'syz.3.3747': attribute type 10 has an invalid length. [ 722.166938][T19369] team0: Port device 0! added [ 722.188753][T19374] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3749'. [ 722.289560][T19377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3750'. [ 722.570816][T19385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3751'. [ 723.228325][T19396] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3755'. [ 723.572747][T19413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3760'. [ 723.608594][T19413] batadv0: entered promiscuous mode [ 723.623298][T19413] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 723.667441][T19413] batadv0: left promiscuous mode [ 724.348107][T19445] syzkaller0: entered promiscuous mode [ 724.353907][T19445] syzkaller0: entered allmulticast mode [ 724.380827][T19445] sch_tbf: burst 883 is lower than device syzkaller0 mtu (1514) ! [ 724.407620][T19449] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3769'. [ 724.721906][T19453] netlink: 'syz.4.3771': attribute type 1 has an invalid length. [ 724.741385][T19453] netlink: 'syz.4.3771': attribute type 13 has an invalid length. [ 724.978597][T19463] lo speed is unknown, defaulting to 1000 [ 724.987597][T19463] lo speed is unknown, defaulting to 1000 [ 725.544365][T19477] lo speed is unknown, defaulting to 1000 [ 725.773397][T19479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.790559][T19485] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3776'. [ 725.837105][T19479] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.900207][T19479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 725.987956][T19477] lo speed is unknown, defaulting to 1000 [ 725.995954][T19483] lo speed is unknown, defaulting to 1000 [ 726.175420][T19475] netlink: 'syz.0.3773': attribute type 6 has an invalid length. [ 726.379169][T19483] lo speed is unknown, defaulting to 1000 [ 726.523808][T19493] netlink: 'syz.3.3778': attribute type 1 has an invalid length. [ 726.605996][T19493] 8021q: adding VLAN 0 to HW filter on device bond3 [ 726.832628][T19496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 726.839909][T19496] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 726.853407][T19496] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 726.929693][T19493] veth3: entered promiscuous mode [ 727.529103][T19507] syzkaller0: entered promiscuous mode [ 727.542580][T19507] syzkaller0: entered allmulticast mode [ 727.591719][T19506] sch_tbf: burst 883 is lower than device syzkaller0 mtu (1514) ! [ 727.906526][T19512] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3782'. [ 728.015754][T19518] bond0: Caught tx_queue_len zero misconfig [ 728.785478][T19545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 729.037097][T19552] syzkaller0: entered promiscuous mode [ 729.051082][T19552] syzkaller0: entered allmulticast mode [ 729.116180][T19552] sch_tbf: burst 883 is lower than device syzkaller0 mtu (1514) ! [ 729.697908][T19556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3795'. [ 729.733450][T19576] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3799'. [ 729.937398][T19591] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3803'. [ 730.077904][T19596] lo speed is unknown, defaulting to 1000 [ 730.099175][T19596] lo speed is unknown, defaulting to 1000 [ 730.636539][ T7453] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 731.207502][T19633] tunl0: Caught tx_queue_len zero misconfig [ 731.287359][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 731.287379][ T30] audit: type=1804 audit(1758037121.231:47): pid=19639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3812" name="cgroup.controllers" dev="tmpfs" ino=754 res=1 errno=0 [ 731.341435][T19625] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3810'. [ 731.375281][T19631] lo speed is unknown, defaulting to 1000 [ 731.447487][T19631] lo speed is unknown, defaulting to 1000 [ 731.454416][ T30] audit: type=1800 audit(1758037121.231:48): pid=19639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3812" name="cgroup.controllers" dev="tmpfs" ino=754 res=0 errno=0 [ 731.662432][T19645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 732.035137][T19659] lo speed is unknown, defaulting to 1000 [ 732.042685][T19664] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3819'. [ 732.271998][T19669] vlan2: entered promiscuous mode [ 732.282563][T19669] macvtap0: entered promiscuous mode [ 732.314507][T19673] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3820'. [ 732.370644][T19659] lo speed is unknown, defaulting to 1000 [ 732.594506][T19681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3823'. [ 732.715537][T19675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3822'. [ 733.306520][T19697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3827'. [ 733.470081][T19705] netlink: 'syz.3.3829': attribute type 1 has an invalid length. [ 733.615103][T19708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3829'. [ 734.344149][T19722] lo speed is unknown, defaulting to 1000 [ 734.387470][T19722] lo speed is unknown, defaulting to 1000 [ 734.860255][T19737] __nla_validate_parse: 1 callbacks suppressed [ 734.860278][T19737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3835'. [ 735.262474][T19757] netlink: 'syz.5.3843': attribute type 2 has an invalid length. [ 735.323008][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3843'. [ 735.398429][T19757] þ: entered promiscuous mode [ 735.803124][T19775] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3844'. [ 736.083226][T19780] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3845'. [ 736.112054][T19780] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3845'. [ 736.141512][T19780] netlink: 22 bytes leftover after parsing attributes in process `syz.5.3845'. [ 736.608744][T19787] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 736.640019][T19789] tipc: Enabled bearer , priority 0 [ 736.704648][T19791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3850'. [ 736.726475][T19787] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 736.775475][T19795] netlink: 'syz.5.3848': attribute type 10 has an invalid length. [ 736.823788][T19791] batadv0: entered promiscuous mode [ 736.831984][T19791] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 736.842605][T19791] batadv0: left promiscuous mode [ 736.931264][T19795] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 737.388859][T19817] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3856'. [ 737.516573][T19789] tipc: Disabling bearer [ 737.582759][T19819] lo speed is unknown, defaulting to 1000 [ 737.590592][T19819] lo speed is unknown, defaulting to 1000 [ 737.905184][T19823] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3857'. [ 737.945623][T19826] lo speed is unknown, defaulting to 1000 [ 738.103384][T19839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3858'. [ 738.169747][T19826] lo speed is unknown, defaulting to 1000 [ 738.194064][T19842] rds_bind: 23 callbacks suppressed [ 738.194084][T19842] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 738.484092][T19850] syzkaller0: entered promiscuous mode [ 738.496600][T19850] syzkaller0: entered allmulticast mode [ 738.587275][T19851] sch_tbf: burst 883 is lower than device syzkaller0 mtu (1514) ! [ 738.918405][T19858] batadv0: entered promiscuous mode [ 738.935315][T19858] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 738.949547][T19858] batadv0: left promiscuous mode [ 739.137023][T19864] lo speed is unknown, defaulting to 1000 [ 739.158735][T19864] lo speed is unknown, defaulting to 1000 [ 739.276733][T19878] netlink: 'syz.4.3870': attribute type 2 has an invalid length. [ 739.294262][T19878] netlink: 'syz.4.3870': attribute type 8 has an invalid length. [ 739.313314][T19878] netlink: 'syz.4.3870': attribute type 1 has an invalid length. [ 739.508974][T19885] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 739.521854][T19885] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 739.536520][T19885] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 740.388753][T19900] veth0_to_bridge: entered promiscuous mode [ 740.422706][T19900] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 740.550621][T19903] syzkaller0: entered promiscuous mode [ 740.560442][T19903] syzkaller0: entered allmulticast mode [ 740.614715][T19903] sch_tbf: burst 883 is lower than device syzkaller0 mtu (1514) ! [ 740.628986][T19907] __nla_validate_parse: 4 callbacks suppressed [ 740.629006][T19907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3879'. [ 740.706808][T19911] netlink: 'syz.0.3880': attribute type 13 has an invalid length. [ 740.714840][T19911] netlink: 'syz.0.3880': attribute type 17 has an invalid length. [ 740.733092][T19913] netlink: 'syz.1.3879': attribute type 10 has an invalid length. [ 741.005085][T19911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.029327][T19911] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.060767][T19911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 741.392216][T19931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3883'. [ 741.469095][T19933] geneve2: entered promiscuous mode [ 741.493442][T12668] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.515960][T19935] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3886'. [ 741.521738][T12668] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.554493][T12668] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.572549][T12668] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.617209][T19935] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 741.627228][ T5942] IPVS: starting estimator thread 0... [ 741.721084][T19938] IPVS: using max 27 ests per chain, 64800 per kthread [ 741.905984][T19950] lo speed is unknown, defaulting to 1000 [ 742.027370][T19950] lo speed is unknown, defaulting to 1000 [ 742.227563][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3892'. [ 742.281626][T19962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3892'. [ 742.290864][T19962] netlink: 'syz.3.3892': attribute type 6 has an invalid length. [ 742.638205][T19972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3895'. [ 742.701869][T19975] tipc: Enabled bearer , priority 0 [ 742.733149][T19975] syzkaller0: entered promiscuous mode [ 742.738656][T19975] syzkaller0: entered allmulticast mode [ 742.784705][T19975] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3897'. [ 743.070458][T19992] tipc: Resetting bearer [ 743.149849][T19973] tipc: Resetting bearer [ 743.196248][T19973] tipc: Disabling bearer [ 743.209023][T19981] lo speed is unknown, defaulting to 1000 [ 743.303812][T19953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3889'. [ 743.506742][T19981] lo speed is unknown, defaulting to 1000 [ 744.593968][T20028] netlink: 'syz.0.3908': attribute type 7 has an invalid length. [ 744.631074][T20028] netlink: 'syz.0.3908': attribute type 8 has an invalid length. [ 745.504523][T20057] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.3915'. [ 745.552797][T20057] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 745.777675][T20064] lo speed is unknown, defaulting to 1000 [ 745.837632][T20064] lo speed is unknown, defaulting to 1000 [ 746.634637][T20094] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 746.648257][T20094] dvmrp1: linktype set to 773 [ 746.848454][T20098] tipc: Enabled bearer , priority 0 [ 746.875439][T20101] netlink: 'syz.5.3926': attribute type 8 has an invalid length. [ 746.884765][T20101] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3926'. [ 746.894345][T20102] syzkaller0: entered promiscuous mode [ 746.899844][T20102] syzkaller0: entered allmulticast mode [ 746.933202][T20101] bond0: entered promiscuous mode [ 746.954786][T20101] bond0: left promiscuous mode [ 747.068411][T20098] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 747.107205][T20102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3924'. [ 747.124619][T20112] FAULT_INJECTION: forcing a failure. [ 747.124619][T20112] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 747.135941][T20098] tipc: Resetting bearer [ 747.138453][T20112] CPU: 0 UID: 0 PID: 20112 Comm: syz.0.3928 Not tainted syzkaller #0 PREEMPT(full) [ 747.138484][T20112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 747.138501][T20112] Call Trace: [ 747.138512][T20112] [ 747.138522][T20112] dump_stack_lvl+0x189/0x250 [ 747.138558][T20112] ? __pfx____ratelimit+0x10/0x10 [ 747.138588][T20112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 747.138618][T20112] ? __pfx__printk+0x10/0x10 [ 747.138654][T20112] ? fs_reclaim_acquire+0x7d/0x100 [ 747.138690][T20112] should_fail_ex+0x414/0x560 [ 747.138734][T20112] prepare_alloc_pages+0x213/0x610 [ 747.138769][T20112] __alloc_frozen_pages_noprof+0x123/0x370 [ 747.138801][T20112] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 747.138837][T20112] ? policy_nodemask+0x27c/0x720 [ 747.138879][T20112] alloc_pages_mpol+0x232/0x4a0 [ 747.138923][T20112] folio_alloc_mpol_noprof+0x39/0x70 [ 747.138962][T20112] shmem_alloc_and_add_folio+0x447/0xf60 [ 747.139001][T20112] ? filemap_get_entry+0xad/0x2f0 [ 747.139025][T20112] ? filemap_get_entry+0xad/0x2f0 [ 747.139045][T20112] ? filemap_get_entry+0xad/0x2f0 [ 747.139081][T20112] ? filemap_get_entry+0x28f/0x2f0 [ 747.139109][T20112] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 747.139168][T20112] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 747.139212][T20112] shmem_get_folio_gfp+0x59d/0x1660 [ 747.139271][T20112] shmem_write_begin+0xf7/0x2b0 [ 747.139318][T20112] generic_perform_write+0x2c5/0x900 [ 747.139367][T20112] ? __pfx_generic_perform_write+0x10/0x10 [ 747.139395][T20112] ? down_write+0x162/0x1f0 [ 747.139440][T20112] ? file_update_time+0x2da/0x490 [ 747.139478][T20112] shmem_file_write_iter+0xf8/0x120 [ 747.139520][T20112] vfs_write+0x5c9/0xb30 [ 747.139562][T20112] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 747.139601][T20112] ? __pfx_vfs_write+0x10/0x10 [ 747.139642][T20112] ? do_sys_openat2+0x154/0x1c0 [ 747.139668][T20112] ? kmem_cache_free+0x18f/0x400 [ 747.139724][T20112] ksys_write+0x145/0x250 [ 747.139759][T20112] ? __pfx_ksys_write+0x10/0x10 [ 747.139791][T20112] ? rcu_is_watching+0x15/0xb0 [ 747.139824][T20112] ? do_syscall_64+0xbe/0x3b0 [ 747.139861][T20112] do_syscall_64+0xfa/0x3b0 [ 747.139889][T20112] ? lockdep_hardirqs_on+0x9c/0x150 [ 747.139919][T20112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.139943][T20112] ? clear_bhb_loop+0x60/0xb0 [ 747.139976][T20112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.140001][T20112] RIP: 0033:0x7f7c0d38eba9 [ 747.140023][T20112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.140046][T20112] RSP: 002b:00007f7c0e134038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 747.140079][T20112] RAX: ffffffffffffffda RBX: 00007f7c0d5d5fa0 RCX: 00007f7c0d38eba9 [ 747.140098][T20112] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000005 [ 747.140115][T20112] RBP: 00007f7c0e134090 R08: 0000000000000000 R09: 0000000000000000 [ 747.140132][T20112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.140148][T20112] R13: 00007f7c0d5d6038 R14: 00007f7c0d5d5fa0 R15: 00007ffc6bc2cb28 [ 747.140192][T20112] [ 747.459411][T20118] netlink: 4660 bytes leftover after parsing attributes in process `syz.0.3929'. [ 747.547827][T20097] tipc: Resetting bearer [ 747.644763][T20097] tipc: Disabling bearer [ 747.725412][T20117] netlink: 204700 bytes leftover after parsing attributes in process `syz.0.3929'. [ 747.983052][T20133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3933'. [ 748.044879][T20124] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3931'. [ 748.181582][ T30] audit: type=1804 audit(1758037138.121:49): pid=20138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3934" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=955 res=1 errno=0 [ 748.239477][ T30] audit: type=1800 audit(1758037138.121:50): pid=20138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3934" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=955 res=0 errno=0 [ 748.264237][ T30] audit: type=1804 audit(1758037138.191:51): pid=20141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3934" name="/newroot/181/x000000000000000400000000000000000000004" dev="tmpfs" ino=955 res=1 errno=0 [ 748.393088][T20149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3936'. [ 748.452388][T20148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3937'. [ 748.513245][T20148] batadv0: entered promiscuous mode [ 748.529661][T20148] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 748.566231][T20148] batadv0: left promiscuous mode [ 748.668566][T20157] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3939'. [ 748.693052][T20156] netlink: 'syz.1.3940': attribute type 13 has an invalid length. [ 748.720005][T20156] netlink: 'syz.1.3940': attribute type 17 has an invalid length. [ 748.721771][T20157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.898068][T20156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 749.040286][T20163] lo speed is unknown, defaulting to 1000 [ 749.086743][T20163] lo speed is unknown, defaulting to 1000 [ 749.121614][T20156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.188127][T20172] pim6reg: entered allmulticast mode [ 749.888198][T20192] lo speed is unknown, defaulting to 1000 [ 750.060194][T20192] lo speed is unknown, defaulting to 1000 [ 750.355814][T20203] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3952'. [ 751.090250][T20223] syzkaller0: entered promiscuous mode [ 751.121863][T20223] syzkaller0: entered allmulticast mode [ 751.198673][T20224] sch_tbf: burst 883 is lower than device syzkaller0 mtu (1514) ! [ 751.755514][T20239] lo speed is unknown, defaulting to 1000 [ 751.773074][T20239] lo speed is unknown, defaulting to 1000 [ 751.939750][T20252] __nla_validate_parse: 4 callbacks suppressed [ 751.939771][T20252] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3966'. [ 751.987385][T20247] lo speed is unknown, defaulting to 1000 [ 752.227300][T20261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.408828][T20247] lo speed is unknown, defaulting to 1000 [ 753.491436][T20271] netlink: 'syz.5.3970': attribute type 2 has an invalid length. [ 753.499252][T20271] netlink: 'syz.5.3970': attribute type 1 has an invalid length. [ 753.555566][T20271] netlink: 'syz.5.3970': attribute type 1 has an invalid length. [ 753.660280][ T5985] IPVS: starting estimator thread 0... [ 753.751548][T20280] IPVS: using max 26 ests per chain, 62400 per kthread [ 754.002276][T20285] tipc: Enabling of bearer rejected, failed to enable media [ 754.415691][T20296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3975'. [ 754.553197][T12670] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.577383][T12670] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.596905][T12670] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.620258][T12670] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 754.817693][T20304] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 754.890332][T20306] tipc: Enabled bearer , priority 0 [ 754.960430][T20310] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3982'. [ 754.983644][T20305] tipc: Disabling bearer [ 754.997187][T20310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 755.004487][T20310] IPv6: NLM_F_CREATE should be set when creating new route [ 755.011824][T20310] IPv6: NLM_F_CREATE should be set when creating new route [ 755.068645][T20310] netlink: 'syz.5.3982': attribute type 1 has an invalid length. [ 755.101221][T20310] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3982'. [ 755.144696][T20310] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3982'. [ 755.333443][T20323] syzkaller0: entered promiscuous mode [ 755.354813][T20323] syzkaller0: entered allmulticast mode [ 755.422266][T20328] sch_tbf: burst 883 is lower than device syzkaller0 mtu (1514) ! [ 755.561912][T20324] cgroup: fork rejected by pids controller in /syz5 [ 756.500907][T20435] netlink: 'syz.1.3987': attribute type 1 has an invalid length. [ 756.517793][T20435] netlink: 'syz.1.3987': attribute type 4 has an invalid length. [ 756.534614][T20435] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3987'. [ 756.547537][T20435] netlink: 'syz.1.3987': attribute type 1 has an invalid length. [ 756.563897][T20435] netlink: 'syz.1.3987': attribute type 4 has an invalid length. [ 756.623680][T20435] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3987'. [ 756.715069][T20455] netlink: 'syz.3.3993': attribute type 10 has an invalid length. [ 756.750468][T20455] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3993'. [ 756.820386][T20455] team0: Port device geneve0 added [ 756.848011][ T7446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.921035][ T7446] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.954880][ T7446] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.965622][T20465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3995'. [ 757.017310][ T7446] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.372781][T20475] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4000'. [ 757.483961][T20479] netlink: 'syz.4.4001': attribute type 1 has an invalid length. [ 758.338891][T20503] lo speed is unknown, defaulting to 1000 [ 758.395811][T20503] lo speed is unknown, defaulting to 1000 [ 759.626152][T20543] netlink: 'syz.3.4021': attribute type 1 has an invalid length. [ 759.952879][T20561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4027'. [ 759.966973][T20558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4025'. [ 759.991070][T20562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4026'. [ 760.164732][T20561] siw: device registration error -23 [ 760.697368][T20570] lo: entered allmulticast mode [ 760.854187][T20584] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4031'. [ 760.876300][T20570] lo: left allmulticast mode [ 761.333494][T20600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4035'. [ 761.377030][T20600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4035'. [ 761.472694][T20600] ip6tnl2: entered promiscuous mode [ 761.501663][T20600] ip6tnl2: entered allmulticast mode [ 761.519562][T20606] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 761.624580][T20604] team0: Port device team_slave_0 removed [ 761.679655][T20607] netlink: 'syz.4.4037': attribute type 10 has an invalid length. [ 761.760657][T20604] team0: Port device team_slave_1 removed [ 761.787617][T20604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.806587][T20604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.831027][T20604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.869926][T20604] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 761.974339][T20607] mac80211_hwsim hwsim32 wlan1: left allmulticast mode [ 762.417706][T20622] tipc: Enabled bearer , priority 0 [ 762.440390][T20622] syzkaller0: entered promiscuous mode [ 762.455165][T20624] rdma_rxe: rxe_newlink: failed to add lo [ 762.468447][T20622] syzkaller0: entered allmulticast mode [ 762.496243][T20624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 762.584755][T20622] tipc: Resetting bearer [ 762.654279][T20621] tipc: Resetting bearer [ 762.722119][T20621] tipc: Disabling bearer [ 762.971033][T20630] netlink: 212388 bytes leftover after parsing attributes in process `syz.0.4045'. [ 763.205472][T20636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4048'. [ 763.252579][T20637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4048'. [ 763.557463][T20640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4046'. [ 763.569681][T20654] netlink: 'syz.4.4052': attribute type 4 has an invalid length. [ 763.578937][T20640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4046'. [ 763.624480][T20655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4052'. [ 763.652918][T20655] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4052'. [ 763.697111][T20655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4052'. [ 764.826225][T20668] wg0: left allmulticast mode [ 764.855206][T20668] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 764.901969][T20668] mac80211_hwsim hwsim40 wlan0: left promiscuous mode [ 765.111154][T20716] netlink: 'syz.3.4058': attribute type 5 has an invalid length. [ 765.196345][ T3542] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.208295][ T3542] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 765.246824][ T3542] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.291065][ T3542] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 765.315219][T20896] netlink: 'syz.5.4062': attribute type 3 has an invalid length. [ 765.349240][T20896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4062'. [ 765.393255][T20904] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4063'. [ 765.407763][ T3542] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.451383][ T3542] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 765.476602][ T3542] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.507933][ T3542] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 765.535556][T20898] lo speed is unknown, defaulting to 1000 [ 765.544079][T20898] lo speed is unknown, defaulting to 1000 [ 765.655950][T20913] lo speed is unknown, defaulting to 1000 [ 765.820576][T20913] lo speed is unknown, defaulting to 1000 [ 766.407533][T20930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 766.607770][T20939] sctp: [Deprecated]: syz.1.4075 (pid 20939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 766.607770][T20939] Use struct sctp_sack_info instead [ 766.741765][T20932] lo speed is unknown, defaulting to 1000 [ 766.749917][T20945] netlink: 'syz.0.4074': attribute type 15 has an invalid length. [ 766.876762][T20932] lo speed is unknown, defaulting to 1000 [ 769.291792][T21005] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 769.301868][T21019] __nla_validate_parse: 7 callbacks suppressed [ 769.301888][T21019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4091'. [ 769.321967][T21005] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 769.359507][T21005] team0: Failed to send options change via netlink (err -105) [ 769.369578][T21005] team0: Port device batadv1 added [ 769.916335][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4094'. [ 769.969380][T21120] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4094'. [ 770.645002][T21137] tipc: Enabled bearer , priority 0 [ 770.699606][T21139] syzkaller0: entered promiscuous mode [ 770.717568][T21139] syzkaller0: entered allmulticast mode [ 770.795923][T21137] tipc: Resetting bearer [ 770.816116][T21136] tipc: Resetting bearer [ 770.876918][T21136] tipc: Disabling bearer [ 771.474664][T21172] sctp: [Deprecated]: syz.4.4109 (pid 21172) Use of int in max_burst socket option deprecated. [ 771.474664][T21172] Use struct sctp_assoc_value instead [ 772.058826][T21253] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4112'. [ 772.258709][T21294] netlink: 'syz.5.4115': attribute type 13 has an invalid length. [ 772.281445][T21294] netlink: 'syz.5.4115': attribute type 17 has an invalid length. [ 772.458450][T21398] netlink: 'syz.4.4119': attribute type 1 has an invalid length. [ 772.593816][T21417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 772.601192][T21417] IPv6: NLM_F_CREATE should be set when creating new route [ 772.608513][T21417] IPv6: NLM_F_CREATE should be set when creating new route [ 772.662617][T21417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 773.133255][T21294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 773.213574][T21398] bond3: entered promiscuous mode [ 773.219270][T21398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 773.227950][T21411] tipc: Enabling of bearer rejected, failed to enable media [ 773.292165][T21414] 8021q: adding VLAN 0 to HW filter on device bond3 [ 773.300748][T21414] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 773.312350][T21414] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 773.329801][T21414] bond3: (slave wireguard0): making interface the new active one [ 773.338479][T21414] wireguard0: entered promiscuous mode [ 773.346846][T21414] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 773.395479][T21417] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 773.434742][T21417] bond3: (slave wireguard1): Enslaving as a backup interface with an up link [ 773.452819][T21415] syzkaller0: entered promiscuous mode [ 773.458341][T21415] syzkaller0: entered allmulticast mode [ 773.787493][T21440] lo speed is unknown, defaulting to 1000 [ 773.819342][T21447] lo speed is unknown, defaulting to 1000 [ 773.851920][T21440] lo speed is unknown, defaulting to 1000 [ 773.970880][T21455] tipc: Enabled bearer , priority 0 [ 773.990857][T21454] tipc: Enabling of bearer rejected, already enabled [ 774.023547][T21455] syzkaller0: entered promiscuous mode [ 774.030237][T21455] syzkaller0: entered allmulticast mode [ 774.059279][T21454] tipc: Resetting bearer [ 774.088317][T21453] tipc: Resetting bearer [ 774.163296][T21453] tipc: Disabling bearer [ 774.650764][T21571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4127'. [ 774.733819][T21447] lo speed is unknown, defaulting to 1000 [ 775.267334][T21582] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4129'. [ 776.176075][T21600] tipc: Enabling of bearer rejected, failed to enable media [ 776.205421][T21600] syzkaller0: entered promiscuous mode [ 776.241113][T21600] syzkaller0: entered allmulticast mode [ 776.342469][T21602] sch_tbf: burst 883 is lower than device syzkaller0 mtu (1514) ! [ 776.741893][T21613] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4136'. [ 776.877299][T21624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4137'. [ 777.250520][T21638] sctp: [Deprecated]: syz.1.4142 (pid 21638) Use of int in maxseg socket option. [ 777.250520][T21638] Use struct sctp_assoc_value instead [ 777.278500][T21637] veth0: entered promiscuous mode [ 777.334241][T21637] batadv0: entered promiscuous mode [ 777.356621][T21637] hsr1: Slave A (veth0) is not up; please bring it up to get a fully working HSR network [ 777.398390][T21637] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 777.849772][T21652] tipc: Enabling of bearer rejected, failed to enable media [ 777.869847][T21652] syzkaller0: entered promiscuous mode [ 777.877192][T21652] syzkaller0: entered allmulticast mode [ 777.924110][T21652] sch_tbf: burst 883 is lower than device syzkaller0 mtu (1514) ! [ 778.176234][T21659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4150'. [ 778.325088][T21730] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4151'. [ 778.721977][T21782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4156'. [ 778.749342][T21782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 778.756681][T21782] IPv6: NLM_F_CREATE should be set when creating new route [ 778.763979][T21782] IPv6: NLM_F_CREATE should be set when creating new route [ 778.881554][T21786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4156'. [ 778.912579][T21776] [ 778.914958][T21776] ====================================================== [ 778.922005][T21776] WARNING: possible circular locking dependency detected [ 778.929060][T21776] syzkaller #0 Not tainted [ 778.933597][T21776] ------------------------------------------------------ [ 778.940713][T21776] syz.3.4155/21776 is trying to acquire lock: [ 778.946892][T21776] ffff8880251b2d28 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x19b/0x450 [ 778.956314][T21776] [ 778.956314][T21776] but task is already holding lock: [ 778.963682][T21776] ffff8880251b27e8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 778.973962][T21776] [ 778.973962][T21776] which lock already depends on the new lock. [ 778.973962][T21776] [ 778.984365][T21776] [ 778.984365][T21776] the existing dependency chain (in reverse order) is: [ 778.993376][T21776] [ 778.993376][T21776] -> #6 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 779.001998][T21776] lock_acquire+0x120/0x360 [ 779.007047][T21776] blk_alloc_queue+0x538/0x620 [ 779.012361][T21776] __blk_mq_alloc_disk+0x15c/0x340 [ 779.018001][T21776] nbd_dev_add+0x46c/0xae0 [ 779.022940][T21776] nbd_init+0x168/0x1f0 [ 779.027624][T21776] do_one_initcall+0x233/0x820 [ 779.032940][T21776] do_initcall_level+0x104/0x190 [ 779.038496][T21776] do_initcalls+0x59/0xa0 [ 779.043353][T21776] kernel_init_freeable+0x334/0x4b0 [ 779.049084][T21776] kernel_init+0x1d/0x1d0 [ 779.053946][T21776] ret_from_fork+0x436/0x7d0 [ 779.059062][T21776] ret_from_fork_asm+0x1a/0x30 [ 779.064356][T21776] [ 779.064356][T21776] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 779.071583][T21776] lock_acquire+0x120/0x360 [ 779.076620][T21776] fs_reclaim_acquire+0x72/0x100 [ 779.082078][T21776] kmem_cache_alloc_node_noprof+0x47/0x3c0 [ 779.088415][T21776] __alloc_skb+0x112/0x2d0 [ 779.093362][T21776] tipc_msg_build+0x13b/0xcf0 [ 779.098579][T21776] __tipc_sendmsg+0x1715/0x2960 [ 779.103953][T21776] __tipc_sendstream+0x1041/0x1290 [ 779.109588][T21776] tipc_sendstream+0x55/0x70 [ 779.114737][T21776] __sock_sendmsg+0x219/0x270 [ 779.119941][T21776] ____sys_sendmsg+0x505/0x830 [ 779.125234][T21776] ___sys_sendmsg+0x21f/0x2a0 [ 779.130434][T21776] __x64_sys_sendmsg+0x19b/0x260 [ 779.135895][T21776] do_syscall_64+0xfa/0x3b0 [ 779.140940][T21776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.147368][T21776] [ 779.147368][T21776] -> #4 (sk_lock-AF_TIPC){+.+.}-{0:0}: [ 779.155036][T21776] lock_acquire+0x120/0x360 [ 779.160069][T21776] lock_sock_nested+0x48/0x100 [ 779.165441][T21776] tipc_shutdown+0x62/0x4f0 [ 779.170466][T21776] nbd_mark_nsock_dead+0x2e9/0x560 [ 779.176128][T21776] sock_shutdown+0x15e/0x260 [ 779.181259][T21776] nbd_config_put+0x342/0x790 [ 779.186477][T21776] nbd_genl_connect+0x167c/0x18f0 [ 779.192027][T21776] genl_family_rcv_msg_doit+0x212/0x300 [ 779.198107][T21776] genl_rcv_msg+0x60e/0x790 [ 779.203162][T21776] netlink_rcv_skb+0x208/0x470 [ 779.208450][T21776] genl_rcv+0x28/0x40 [ 779.212961][T21776] netlink_unicast+0x82c/0x9e0 [ 779.218246][T21776] netlink_sendmsg+0x805/0xb30 [ 779.223533][T21776] __sock_sendmsg+0x219/0x270 [ 779.228734][T21776] ____sys_sendmsg+0x505/0x830 [ 779.234066][T21776] ___sys_sendmsg+0x21f/0x2a0 [ 779.239362][T21776] __x64_sys_sendmsg+0x19b/0x260 [ 779.244836][T21776] do_syscall_64+0xfa/0x3b0 [ 779.249887][T21776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.256312][T21776] [ 779.256312][T21776] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 779.263985][T21776] lock_acquire+0x120/0x360 [ 779.269026][T21776] __mutex_lock+0x187/0x1350 [ 779.274144][T21776] nbd_queue_rq+0x257/0xf10 [ 779.279175][T21776] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 779.285243][T21776] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 779.292093][T21776] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 779.298592][T21776] blk_mq_run_hw_queue+0x348/0x4f0 [ 779.304230][T21776] blk_mq_dispatch_list+0xd0c/0xe00 [ 779.309946][T21776] blk_mq_flush_plug_list+0x469/0x550 [ 779.315858][T21776] __blk_flush_plug+0x3d3/0x4b0 [ 779.321249][T21776] __submit_bio+0x2d3/0x5a0 [ 779.326273][T21776] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 779.332416][T21776] block_read_full_folio+0x599/0x830 [ 779.338223][T21776] filemap_read_folio+0x114/0x380 [ 779.343780][T21776] do_read_cache_folio+0x350/0x590 [ 779.349513][T21776] read_part_sector+0xb6/0x2b0 [ 779.354811][T21776] adfspart_check_ICS+0xa4/0xa50 [ 779.360280][T21776] bdev_disk_changed+0x75f/0x14b0 [ 779.365848][T21776] blkdev_get_whole+0x380/0x510 [ 779.371220][T21776] bdev_open+0x31e/0xd30 [ 779.375989][T21776] blkdev_open+0x457/0x600 [ 779.380923][T21776] do_dentry_open+0x950/0x13f0 [ 779.386220][T21776] vfs_open+0x3b/0x340 [ 779.390809][T21776] path_openat+0x2ee5/0x3830 [ 779.395922][T21776] do_filp_open+0x1fa/0x410 [ 779.400964][T21776] do_sys_openat2+0x121/0x1c0 [ 779.406190][T21776] __x64_sys_openat+0x138/0x170 [ 779.411569][T21776] do_syscall_64+0xfa/0x3b0 [ 779.416596][T21776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.423008][T21776] [ 779.423008][T21776] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 779.430224][T21776] lock_acquire+0x120/0x360 [ 779.435290][T21776] __mutex_lock+0x187/0x1350 [ 779.440412][T21776] nbd_queue_rq+0xc8/0xf10 [ 779.445352][T21776] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 779.451419][T21776] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 779.458274][T21776] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 779.464806][T21776] blk_mq_run_hw_queue+0x348/0x4f0 [ 779.470545][T21776] blk_mq_dispatch_list+0xd0c/0xe00 [ 779.476299][T21776] blk_mq_flush_plug_list+0x469/0x550 [ 779.482217][T21776] __blk_flush_plug+0x3d3/0x4b0 [ 779.487604][T21776] __submit_bio+0x2d3/0x5a0 [ 779.492635][T21776] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 779.498793][T21776] block_read_full_folio+0x599/0x830 [ 779.504632][T21776] filemap_read_folio+0x114/0x380 [ 779.510186][T21776] do_read_cache_folio+0x350/0x590 [ 779.515828][T21776] read_part_sector+0xb6/0x2b0 [ 779.521131][T21776] adfspart_check_ICS+0xa4/0xa50 [ 779.526619][T21776] bdev_disk_changed+0x75f/0x14b0 [ 779.532179][T21776] blkdev_get_whole+0x380/0x510 [ 779.537556][T21776] bdev_open+0x31e/0xd30 [ 779.542322][T21776] blkdev_open+0x457/0x600 [ 779.547265][T21776] do_dentry_open+0x950/0x13f0 [ 779.552557][T21776] vfs_open+0x3b/0x340 [ 779.557152][T21776] path_openat+0x2ee5/0x3830 [ 779.562272][T21776] do_filp_open+0x1fa/0x410 [ 779.567327][T21776] do_sys_openat2+0x121/0x1c0 [ 779.572535][T21776] __x64_sys_openat+0x138/0x170 [ 779.577915][T21776] do_syscall_64+0xfa/0x3b0 [ 779.582944][T21776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.589374][T21776] [ 779.589374][T21776] -> #1 (set->srcu){.+.+}-{0:0}: [ 779.596509][T21776] lock_sync+0xba/0x160 [ 779.601202][T21776] __synchronize_srcu+0x96/0x3a0 [ 779.606673][T21776] elevator_switch+0x12b/0x640 [ 779.612046][T21776] elevator_change+0x2d4/0x450 [ 779.617330][T21776] elevator_set_default+0x186/0x260 [ 779.623050][T21776] blk_register_queue+0x34e/0x3f0 [ 779.628601][T21776] __add_disk+0x677/0xd50 [ 779.633458][T21776] add_disk_fwnode+0xfc/0x480 [ 779.638659][T21776] nbd_dev_add+0x717/0xae0 [ 779.643599][T21776] nbd_init+0x168/0x1f0 [ 779.648281][T21776] do_one_initcall+0x233/0x820 [ 779.653579][T21776] do_initcall_level+0x104/0x190 [ 779.659047][T21776] do_initcalls+0x59/0xa0 [ 779.663917][T21776] kernel_init_freeable+0x334/0x4b0 [ 779.669666][T21776] kernel_init+0x1d/0x1d0 [ 779.674542][T21776] ret_from_fork+0x436/0x7d0 [ 779.679670][T21776] ret_from_fork_asm+0x1a/0x30 [ 779.684978][T21776] [ 779.684978][T21776] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 779.692819][T21776] validate_chain+0xb9b/0x2140 [ 779.698127][T21776] __lock_acquire+0xab9/0xd20 [ 779.703347][T21776] lock_acquire+0x120/0x360 [ 779.708393][T21776] __mutex_lock+0x187/0x1350 [ 779.713521][T21776] elevator_change+0x19b/0x450 [ 779.718827][T21776] elevator_set_none+0x42/0xb0 [ 779.724120][T21776] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 779.730458][T21776] nbd_start_device+0x17f/0xb10 [ 779.735848][T21776] nbd_genl_connect+0x135b/0x18f0 [ 779.741396][T21776] genl_family_rcv_msg_doit+0x212/0x300 [ 779.747509][T21776] genl_rcv_msg+0x60e/0x790 [ 779.752543][T21776] netlink_rcv_skb+0x208/0x470 [ 779.758026][T21776] genl_rcv+0x28/0x40 [ 779.762540][T21776] netlink_unicast+0x82c/0x9e0 [ 779.767835][T21776] netlink_sendmsg+0x805/0xb30 [ 779.773125][T21776] __sock_sendmsg+0x219/0x270 [ 779.778322][T21776] ____sys_sendmsg+0x505/0x830 [ 779.783624][T21776] ___sys_sendmsg+0x21f/0x2a0 [ 779.788925][T21776] __x64_sys_sendmsg+0x19b/0x260 [ 779.794387][T21776] do_syscall_64+0xfa/0x3b0 [ 779.799442][T21776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.805859][T21776] [ 779.805859][T21776] other info that might help us debug this: [ 779.805859][T21776] [ 779.816081][T21776] Chain exists of: [ 779.816081][T21776] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 779.816081][T21776] [ 779.829910][T21776] Possible unsafe locking scenario: [ 779.829910][T21776] [ 779.837362][T21776] CPU0 CPU1 [ 779.842736][T21776] ---- ---- [ 779.848096][T21776] lock(&q->q_usage_counter(io)#50); [ 779.853498][T21776] lock(fs_reclaim); [ 779.860010][T21776] lock(&q->q_usage_counter(io)#50); [ 779.867997][T21776] lock(&q->elevator_lock); [ 779.872594][T21776] [ 779.872594][T21776] *** DEADLOCK *** [ 779.872594][T21776] [ 779.880735][T21776] 6 locks held by syz.3.4155/21776: [ 779.885945][T21776] #0: ffffffff8f59fa90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 779.894163][T21776] #1: ffffffff8f59f8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 779.903149][T21776] #2: ffff8880251c7988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 779.914559][T21776] #3: ffff8880251c78d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 779.925539][T21776] #4: ffff8880251b27e8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 779.936173][T21776] #5: ffff8880251b2820 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: elevator_change+0x180/0x450 [ 779.947156][T21776] [ 779.947156][T21776] stack backtrace: [ 779.953047][T21776] CPU: 0 UID: 0 PID: 21776 Comm: syz.3.4155 Not tainted syzkaller #0 PREEMPT(full) [ 779.953070][T21776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 779.953083][T21776] Call Trace: [ 779.953093][T21776] [ 779.953102][T21776] dump_stack_lvl+0x189/0x250 [ 779.953130][T21776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.953151][T21776] ? __pfx__printk+0x10/0x10 [ 779.953178][T21776] ? print_lock_name+0xde/0x100 [ 779.953204][T21776] print_circular_bug+0x2ee/0x310 [ 779.953227][T21776] check_noncircular+0x134/0x160 [ 779.953250][T21776] validate_chain+0xb9b/0x2140 [ 779.953280][T21776] __lock_acquire+0xab9/0xd20 [ 779.953311][T21776] ? elevator_change+0x19b/0x450 [ 779.953327][T21776] lock_acquire+0x120/0x360 [ 779.953354][T21776] ? elevator_change+0x19b/0x450 [ 779.953377][T21776] __mutex_lock+0x187/0x1350 [ 779.953400][T21776] ? elevator_change+0x19b/0x450 [ 779.953418][T21776] ? xa_find_after+0xae/0x430 [ 779.953446][T21776] ? xa_find_after+0x402/0x430 [ 779.953470][T21776] ? elevator_change+0x19b/0x450 [ 779.953486][T21776] ? xa_find_after+0xae/0x430 [ 779.953512][T21776] ? __pfx___mutex_lock+0x10/0x10 [ 779.953537][T21776] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 779.953564][T21776] elevator_change+0x19b/0x450 [ 779.953581][T21776] ? elevator_set_none+0x37/0xb0 [ 779.953600][T21776] elevator_set_none+0x42/0xb0 [ 779.953619][T21776] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 779.953661][T21776] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 779.953692][T21776] ? sysfs_add_file_mode_ns+0x259/0x300 [ 779.953723][T21776] nbd_start_device+0x17f/0xb10 [ 779.953745][T21776] ? device_create_file+0xf4/0x1c0 [ 779.953766][T21776] nbd_genl_connect+0x135b/0x18f0 [ 779.953788][T21776] ? __pfx_nbd_genl_connect+0x10/0x10 [ 779.953818][T21776] ? __nla_parse+0x40/0x60 [ 779.953838][T21776] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 779.953870][T21776] genl_family_rcv_msg_doit+0x212/0x300 [ 779.953901][T21776] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 779.953953][T21776] ? stack_trace_save+0x9c/0xe0 [ 779.953990][T21776] genl_rcv_msg+0x60e/0x790 [ 779.954019][T21776] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.954044][T21776] ? __pfx_nbd_genl_connect+0x10/0x10 [ 779.954085][T21776] netlink_rcv_skb+0x208/0x470 [ 779.954105][T21776] ? __lock_acquire+0xab9/0xd20 [ 779.954132][T21776] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.954159][T21776] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 779.954189][T21776] ? down_read+0x1ad/0x2e0 [ 779.954213][T21776] genl_rcv+0x28/0x40 [ 779.954238][T21776] netlink_unicast+0x82c/0x9e0 [ 779.954260][T21776] ? __pfx_netlink_unicast+0x10/0x10 [ 779.954279][T21776] ? netlink_sendmsg+0x642/0xb30 [ 779.954300][T21776] ? skb_put+0x11b/0x210 [ 779.954324][T21776] netlink_sendmsg+0x805/0xb30 [ 779.954351][T21776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.954375][T21776] ? aa_sock_msg_perm+0xf1/0x1d0 [ 779.954394][T21776] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 779.954414][T21776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.954437][T21776] __sock_sendmsg+0x219/0x270 [ 779.954456][T21776] ____sys_sendmsg+0x505/0x830 [ 779.954483][T21776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 779.954512][T21776] ? import_iovec+0x74/0xa0 [ 779.954537][T21776] ___sys_sendmsg+0x21f/0x2a0 [ 779.954565][T21776] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.954606][T21776] ? __fget_files+0x2a/0x420 [ 779.954622][T21776] ? __fget_files+0x3a0/0x420 [ 779.954642][T21776] __x64_sys_sendmsg+0x19b/0x260 [ 779.954668][T21776] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 779.954698][T21776] ? rcu_is_watching+0x15/0xb0 [ 779.954719][T21776] ? do_syscall_64+0xbe/0x3b0 [ 779.954742][T21776] do_syscall_64+0xfa/0x3b0 [ 779.954764][T21776] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.954784][T21776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.954802][T21776] ? clear_bhb_loop+0x60/0xb0 [ 779.954828][T21776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.954846][T21776] RIP: 0033:0x7f521438eba9 [ 779.954863][T21776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.954879][T21776] RSP: 002b:00007f52151fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.954898][T21776] RAX: ffffffffffffffda RBX: 00007f52145d5fa0 RCX: 00007f521438eba9 [ 779.954912][T21776] RDX: 0000000020000000 RSI: 0000200000000300 RDI: 000000000000000b [ 779.954925][T21776] RBP: 00007f5214411e19 R08: 0000000000000000 R09: 0000000000000000 [ 779.954937][T21776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.954948][T21776] R13: 00007f52145d6038 R14: 00007f52145d5fa0 R15: 00007ffe83540558 [ 779.954969][T21776] [ 780.499054][ T5874] block nbd1: Receive control failed (result -32) [ 780.499075][ T5865] block nbd1: Receive control failed (result -32)