last executing test programs: 4.145131227s ago: executing program 1 (id=2598): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = socket$inet6(0xa, 0x5, 0x3) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0x2}, 0x1c) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r2, 0x0, 0x0, 0x40000142, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000440)={r7, @in6={{0xa, 0x0, 0x6, @empty}}, 0x0, 0x80}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000540)={r7, @in6={{0xa, 0x4e20, 0x9, @empty, 0x6}}, 0x0, 0x7, 0x9ce, 0x4, 0x98}, &(0x7f00000001c0)=0x98) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x1002, &(0x7f00000017c0)=""/4098, 0x40f00}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x480) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x2f, &(0x7f0000000400), 0xa5e) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000000c000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @rand_addr=0x1}, {0x4e23, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "aa039c1191e5c7a177288d285126ceabe2203c71d1123984", "2f6d03735c501e64ab5269ea4be8b05a5d7b99d78e17a3954cf281da2419395e"}}}}}}, 0x0) 3.620214266s ago: executing program 1 (id=2605): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x800, 0x5) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket(0x10, 0x3, 0x7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x1d, 0x2, 0x7) getsockname$packet(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000f55874b20000000000000000003bb9afe80f6168bf0bcaa237e33c2e650ff1fd3460af249e3daba533f3116a8b95752ec4e449ce32be3b3201ba1ff7bcb33f455509f394ebd5ff7f4a30ac41e44fb0b2e3bd766e5d7f19bfce14275a322ae88bfaa93d9817f2adfe811899796a508ae69e97b5366026d706c38b057b959425f44837d060497c458b66dd3678ab39138365", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000f7ffffff0000000000000000201b35aba5000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001811000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="050000000000000073113e00070000008510000095000000000000009500a50500000000000000005cae2cc754c24315c2addc45ec378ce969d3ff237e57a4fc6f295d03a5cc32c4ac553ed45b13a7afd0a9e73866e8b66bc3f0e8be4c8001c14a9afb4b2e6e365e9822c598ac73d3e69e087b47f571229ba00f7ca6375154c94949bea64b27c73be8e455202bc9d6db5a7a628faf55512dd34ee58d73f66b907c5529049dc2bf8f03953e3ee9b07631c1642187138e30491951f6b1a4609e38bf9f0ba1b9d6dca72e2486d8b2d59fca0db5007330cbebf0d2e4f4d057c6d979ffa71add1e169da98a34643c69334f6df3d91837f800fef6bc34c4fd2ec9bf75790c383dbb2d0a4e3f4cef29ddbe2a296befad8f34c3a65a06ee9539ed333c"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x800}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) close(r4) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0xfffffffd) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 2.591680957s ago: executing program 1 (id=2613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0007000000080026000816"], 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022abd7001000000250f0000002a000e0068"], 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067f", 0x13}], 0x1) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x9, &(0x7f0000000380), 0x98) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="00000000000000df8b9c68000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="ecb6007989400095007a340000000000053900000000000000"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) write$tun(r5, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x3, 0x2c, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast, {[@rr={0x7, 0x3, 0xb}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}}}}, 0x3a) write$tun(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x175) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0xe, 0x0, &(0x7f0000000040)="581f9239658ea95ed371ea3dd361", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r11}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000050800000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.582031576s ago: executing program 0 (id=2614): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x1, 0x70bd25, 0x7, {0x0, 0x0, 0x0, r0, 0x44198, 0x188f}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}, @IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) 2.490127364s ago: executing program 0 (id=2615): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x43c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xb8, 0xcb, 0xead5, 0xe1e, 0x1c00000, 0x4, 0x2, 0x3fd, 0x1ff, 0x8, 0x8, 0x440, 0x4, 0x9a, 0x18f1, 0x5, 0x9, 0x0, 0x1, 0x8, 0x1000, 0x80000001, 0x40, 0x2, 0x6, 0x0, 0x56f140d4, 0x8, 0x1000000, 0xffffffc0, 0x56, 0x7f, 0x4, 0x10000, 0x9, 0x0, 0x8, 0x7, 0x10, 0x7, 0x2, 0x800, 0x6, 0x4, 0x5, 0xfffffffd, 0x3, 0x2, 0x10001, 0x7fffffff, 0x7, 0xfffffffa, 0xe1, 0x7, 0x401, 0x3, 0xe, 0xff, 0xfffff61d, 0x9, 0x3401, 0x1, 0x10001, 0x8001, 0x10001, 0xa, 0x9, 0x3, 0x3, 0x80000000, 0xead8, 0xb3f7, 0x187, 0x8, 0x1, 0x6, 0x19c, 0x6, 0x0, 0x2, 0x7, 0x3, 0x3, 0xfffffff8, 0xf7, 0x3, 0x40000000, 0xe, 0x5a97, 0x5, 0x1, 0x4, 0xf, 0x5, 0x5, 0x0, 0x10, 0x5, 0x9, 0x2, 0x8001, 0xf9, 0x5, 0x8001, 0x10001, 0x6, 0x0, 0xfff, 0x8, 0xa4b2, 0x70, 0x10000, 0x8e, 0x5, 0xd49, 0x4, 0x1200, 0xffffffff, 0x2, 0xf24, 0xf, 0x35a, 0xb, 0x3, 0xffff70f1, 0x0, 0x4, 0x1eeb, 0x1, 0x4, 0x9ef0, 0x7, 0x1000, 0xf1, 0x0, 0xff, 0x7d07cd9c, 0xb370, 0x3, 0xac, 0x3, 0xff, 0x3274cf9d, 0x1, 0x7, 0x0, 0x1, 0x2, 0x9, 0x4, 0x10e, 0x1, 0x5, 0x2, 0xf3a9, 0x7, 0x7fffffff, 0x401, 0x5e6, 0x2, 0x10, 0x4, 0xa367, 0x9, 0x80000001, 0x80000001, 0x9, 0x0, 0x8001, 0x7, 0x9, 0xf, 0x2, 0x8, 0x8, 0x6, 0xffffff81, 0x9e5, 0x3, 0x9, 0x1, 0x2, 0x1, 0x9, 0x62e, 0x6, 0x0, 0x6, 0x4, 0x8, 0x7, 0x6, 0x7eff, 0x8, 0x3, 0xc0, 0x101, 0x8, 0x7, 0x4, 0xffff, 0x81, 0x3ff, 0x80, 0x82, 0xffff, 0xcf, 0x400, 0xe7d, 0x0, 0xfffffffb, 0x7, 0x908, 0x3ff, 0xdf6, 0x1000, 0xc84, 0x2, 0x8, 0x8, 0x3, 0x7f, 0xfffff801, 0x7, 0x3, 0x2, 0x1, 0x8, 0x4, 0x6, 0x60000000, 0x5, 0x0, 0x4, 0x9, 0x35ed, 0x2, 0x80000000, 0x4, 0x7, 0x5, 0x2, 0x4, 0x8001, 0x10, 0x3, 0x3bc346c2, 0x200, 0x80, 0x3, 0x2cd, 0x1, 0x6, 0x5bce4c3f, 0x1ff, 0x7]}]}]}}]}, 0x43c}}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="040100001800010027bd7000fedbdf25ac1414bb000000000000000000000000000000000000000000000000000000004e2000004e2400060200808073000000a20b22833536881579eb6bdce4a1b17585edc32ab8c014177a518598cf311ff9d82c2a137e600fd4b066192f218bf9b0f3d8c1c05cf98fe3b12d03edff1a9832dc72128d70b926152835b39059d7d64b0e9505073c6908ff10de007c0be88c846f8ba94765f97d320a3956f9f0bb2785ef12852d91d9f2678b632c13c822fb2444a6910fa8098160aab65e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c000000fe8000000000000000000000000000bb0900000000000000000000000000000000080000000000000010000000000000000800000000000000000000000000008100000000000000000000000000000008000000000000000a00000000000000fdffffffffffffff03000000000000000400000015e40000070000002abd7000000000000a0000ff000000000000000004000000000000000c0015005a07350003000000"], 0x104}, 0x1, 0x0, 0x0, 0x24008010}, 0x200008cc) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000580), &(0x7f0000000200)=""/159}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r5}, 0x10) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x20) socket$packet(0x11, 0x2, 0x300) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x15, 0x3, 'nq\x00', 0x1, 0x4, 0x72}, 0x2c) r9 = socket$kcm(0xa, 0x2, 0x0) r10 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0xa, 0x11}, {@dev={0xac, 0x14, 0x14, 0xa6}, 0x4e1d, 0x3, 0xcd, 0xd21d}}, 0x44) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000002c0)) 2.384057437s ago: executing program 4 (id=2616): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000900)=0x2, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f0000000180)=0x38) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, 0xffffffffffffffff, 0x80000000) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x2d, 0x400eeb4, 0x13}, 0x2c) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@nop, @generic={0x13, 0x4, "e2cd"}, @fastopen={0x22, 0xc, "ce2781a9dfe9bc8597d9"}]}}}}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4000500ac141433000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000e000000200000000000000000000000000000000330000000a000000ac1414bb0000000000000000000000000000000001000000000000000000000000000000fe8000000000000000000000000000aa00000000ff00"/308], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.383418978s ago: executing program 3 (id=2617): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0x66, 0x3ff, 0x8403, 0x3, 0x9, 0x7fff, 0x5, 0x8}, &(0x7f0000000380)=0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) 2.316120151s ago: executing program 0 (id=2618): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r4}, 0x38) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r5, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) listen(r2, 0xe9c) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf250e00000008000300", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xc}, {0xfff3}}}, 0x24}}, 0x0) 2.127261303s ago: executing program 1 (id=2619): socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x148, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x56, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x50, 0x60, "210466d38547aa140db9"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x880}, 0x0) socketpair(0x1a, 0x6, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048010}, 0x30) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b06, 0x0) recvfrom$ax25(r5, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x4e21, 0xf14, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYBLOB], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2.045844231s ago: executing program 4 (id=2620): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB="1400030073000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0x14}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, 0x0, 0x4048800) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f00000008c0)={{}, "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"}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 1.894740403s ago: executing program 0 (id=2621): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) socket(0xa, 0x40000000002, 0x0) socket(0x400000000010, 0x3, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) socket$caif_stream(0x25, 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x801) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.881547946s ago: executing program 3 (id=2622): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) syz_emit_ethernet(0x46, &(0x7f0000000780)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000380)={"b00ff52c38f99c95ba29cea880cad65d", 0x0, r3, {0x75}, {0x8, 0x1a6f265c}, 0xffffffff, [0x3ff, 0x1, 0x3, 0x0, 0x2, 0xe46, 0x8, 0x9, 0x0, 0x80000001, 0x4, 0x101, 0x100000001, 0x32b1, 0x6, 0x100000001]}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x4000005) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0xc3ff) 1.724146385s ago: executing program 1 (id=2623): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xc, 0x2, [@TCA_CGROUP_EMATCHES={0x8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) (fail_nth: 4) 1.440696832s ago: executing program 4 (id=2624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x48}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 1.315644803s ago: executing program 1 (id=2626): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x2, 0x80805, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5cffffff", @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3, @ANYRESDEC], 0x5c}, 0x1, 0x0, 0x0, 0x40811}, 0x0) 1.315139747s ago: executing program 4 (id=2627): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r1, 0xfffffbeb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400010076657468305f746f5f6873720000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30400000000900010073797a300000000030000380"], 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x40000) sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4622, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c49", 0x2}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400000002000010070002007f00000007000000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000000000000050000000400ff0f"], 0x38, 0x48060}], 0x1, 0x200000d0) 1.064261123s ago: executing program 4 (id=2628): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x48a, 0x4) sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x2e, 0x20004840) 918.38793ms ago: executing program 0 (id=2630): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="e3e5e42d04003600e27f00000100000000000000c9338cbd70e9d610410d7a55a387ed154d8629d33bcdaadcc509491cee6cfc445bdb612f0d5c0cb009f629ceee94966480350afbf06b0c810570a6200f", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x26, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x888, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x3ff, 0x5, 0xfffffffd, {0x8, 0x1, 0x2, 0xf801, 0xa6d, 0x12b}, {0x5, 0x0, 0x4, 0x3701, 0xcc42, 0x7}, 0x0, 0x2, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4ae, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0x7, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0x4, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x7dd, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x2, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0xc, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x80000001, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x6, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x4, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x8001, 0x9, 0x4, 0x9, 0x3, 0x6, 0x6695, 0x8]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x0, 0x80) r9 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r9, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, 0x0}}], 0x1, 0x844) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000003080)={'vxcan0\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000003200)=[{{&(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000600)="8b55a213d3766c98a962c963101ef4fc72fbbe14f7ee4e68a04ee131803e234348b930d3c6ad5778977459dba34bd3954b093c8797bd5edfadb12138cafe50db9dfc9069395520ec862e094009609789a78ae9aa13cccc51ed5b87739ad53a0aa9f9c644c151a20d8a6c050b3e3658e942ae3776a1d375e7c9c7ba62823c6076217263b5efa6bb28ceb2e07c8328c899351ce3b983913d6cfb47872aee46e842d16965d4", 0xa4}, {&(0x7f0000001000)="4a13362c36b7b554d603565875c3a6c59f44d9fd39bac16d45faeab616ed8d5594536b1b0d0821d9001835ac6c1d987b1633952ebc6ce9c93e921dd3de156729b5e410362d9d3d2b798ee94d8601de86a196aba2192d5af2d22c7672f551714cfd0f2ebfaf", 0x65}, {&(0x7f0000001080)="f600e59cf2bfdc5de6cdd79c0d80d8ae40998fae7a97731e120f70a5cbff06bea620254d46d16c5be4b298c6d2549542eba9a961cf619ebfad4139c3f6b322bc8ebd68842777b668df8ae86705a1a9745d893773d56c0a073d1c41e343c51b2f34feb38d0788a73cb03023fb79656945c83225bf63de90a3b48b1dfbcd1989d1c82c4aa8e504c7212dc619f171bb04d5a52e", 0x92}, {&(0x7f0000001140)="eae2d313ce0f274b9f000b3b017532319020d87ba5336d424cd7dcb78a101c1ea543a57e30f5649659d3085c506fa1278c685ca3ab9e68ee7fac8b90321fc1d2ede7b7a993185617820df2c39128d4c5d0bce565a1a2be45e407c0a88ffadea79fe81730808793385d98610fb49b91b0a08bc0ccfb1e3c786ddbdc27c6fa5c9100b6100e", 0x84}, {&(0x7f0000001200)="c0483983143a4690105a2435f91789b666901bfaa68aef8d25e9e6f160f0a4aeb69bbfdc6059e46e90ebb88dc764f194b1cb2ec747e35f7b589ee44e1241534b772396a5e758474b6ac4bb72a88cfe726382e95e77ed2e8754b5df1fd42489fe9ec539ff91d16ead56213c705066ac55c5cc6a656fc4bdb3e23b25", 0x7b}, {&(0x7f0000001280)="d05afbd2528d7d3017d74850b634c06f5682c221da0bb434c8b9f483332e63e8ab3fac79a5c11f66c186bdf11b2b6f46eb57e7d3b94a2aceb42591cd48902a558b1aec164746c1ad16d945632b54b3f11a43455d6a50c42df6fc8485", 0x5c}], 0x6, &(0x7f0000000200)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0x18}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000580)=[{&(0x7f0000001380)="cadd5bfa6ab27f3df5201337162c449a47dbf45c73667a2a7ccd44a4e385e8aa127815320e25a67783d919094db653a4bc94898fd8758e036f88880b93bedb118d9109d6ccd9c00237b69df524a1b9a05e24c72d80513b34fbca1ce9dd61cb50d1d63f7607c2e3dee2ce821831c9726a418f7f9d3b7459c110c4d26cea5b53340824a83a333e0ff5e0eab18a2aa209e788f922d749e52b98a4043e90c3d5fca446af16b4a3ed445258f45102529a48dd510f0968c2d0429bc0e35e86e324a515be6ef3452525644d94d0b68c41b97171a4827675779a2a58ef76574447fdd5f0eced74eee29ac327373f23c21866e24669a6523a5f288da55e", 0xf9}, {&(0x7f00000004c0)="090f254ed7f169d41b0616e5f3e3b8506f141b2102272ecb9c923fe79a99cbb2a005abf126d80e141d465461e2", 0x2d}], 0x2, &(0x7f0000001480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x37, 0x3, 0x9, [{@empty, 0x2}, {@rand_addr=0x64010101, 0x1}]}, @rr={0x7, 0xb, 0x65, [@broadcast, @rand_addr=0x64010101]}, @cipso={0x86, 0x2f, 0x3, [{0x5, 0xf, "07171c0713dbe50bcf975a8d65"}, {0x2, 0xa, "b371b4771ba1f612"}, {0x2, 0xa, "4ea31edb6e37aed0"}, {0x1, 0x6, "b64691dc"}]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xd8}}, {{&(0x7f00000006c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001640)=[{&(0x7f0000003380)="e9de144f4062f27c46a1bde53662e10685dbd6144734295ad54f0c97d3279f42cf287e691d8cc62aeb7a5cf8ae7945da87bd511dda1bf453abc1d3c199566db588cb0ff7572a5ad8f831116229a4a856e7d56b2df5e2f12e5f8778c5ef57cc8d1cf338e78525ed63aa7fb595167aa0405872476102ff3a8b582b69568548943d8ed58c24526e7269fa9744780c40e39305cd48f2b057bb57e89064fac88daf29055edc1ed7d39eaa89ffb58a4f784c0b71a006e39fd53bb84e60cfa92fe69a02d8ed1d7b8b3cc46300c0ec00c5113d4b28c4fa8b1aa40b5e7003b833ada0b9fac8dc11aedb478d69347072a8ef07524db6da", 0xf2}], 0x1, &(0x7f0000001680)=[@ip_retopts={{0x44, 0x0, 0x7, {[@cipso={0x86, 0x31, 0x0, [{0x5, 0xf, "98b157e7bb6f6bd63cc8e77637"}, {0x5, 0x11, "3ccebe8aae62694e48bc7de8181eab"}, {0x7, 0xb, "c2223c1621ef77f3e4"}]}]}}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x88, 0x0, 0x7, {[@generic={0x82, 0x3, 'h'}, @rr={0x7, 0xf, 0xa4, [@local, @local, @local]}, @timestamp_addr={0x44, 0x54, 0xc4, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0x4}, {@remote, 0x3}, {@local, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@empty, 0xffff0546}, {@remote, 0x2}, {@loopback, 0x7fc00}, {@private=0xa010100, 0x7}, {@local, 0x7}]}, @timestamp={0x44, 0x8, 0xc7, 0x0, 0xe, [0x65c]}, @lsrr={0x83, 0x7, 0xdb, [@broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}], 0x148}}, {{0x0, 0x0, &(0x7f0000001800), 0x0, &(0x7f0000001840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @loopback}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001880)="0ec70e7f9a354396cf55083788ddcd93685d2e7f86ffa47c661ff41fe7a95d7145e591872620f2a010ec8a5ce8acc65d7ea17b4673e673f92f7e6ed14c1b13516b2622eabfa7c8e0b489662fdccf10556df8514737887025801b8958e805c29dae5fb1790fab263dea0170b452e94a73748646dd2a90990a898b089c041c9439ebc75a814a3237cbcaf5cfda128e3c73229cdeb17a40329d63da309bdc05d1f62d3042e0f21ed02c0b4244effd6fb730c0f4a1c99275b47259a900ad19cdff64f0e0977a652ffa9761e473382ad170e3f59da09e16ccc6526a93e6d1f7a87924cafc72fe399c92aa2be7d96d", 0xec}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="4ea116a63aa9a5c104b885219b6b9f84b3e1b2c50270aab6961f4ae33efad22c3adacfb1909dddbdcc1a3a8b7d51725922b217a9bc4fcb96ccaab370b2a087a16cb4fd088e72c8d64ef9e28f8bcc50d4fe74eba8a3e1e912d73f06771846a1128389018bf62c3abef978a5e7a778b7e27da0c81e2be8003175c8391f0b098eadf36fbe07791c240321afcf45150c5d2b", 0x90}, {&(0x7f0000002a40)="d18cb55b0db2", 0x6}, {&(0x7f0000002a80)="ce6d78efd7fd23ca440c7a9d3bc582c8570c612929880b4303febb7cb485a04bf71c31dee895694f7ce9b6275228f13c152b40a75f12e3a306b7c8301ec036ff695874f8a42bc852daa7f20642d5f0895d9ba4a4ee9f854392136de5f0a830533b6d00fa3adcb3c435d773a8fbe197ca09b5edd43717319b7124a48bb16f9e8980b3d6640e80ec291127049e64bf4582b75d50a76b8d369eb7a51bf88cc6b43dea", 0xa1}, {&(0x7f0000002b40)="a167cb7dcc4c1b4fcac5f67841d49c3713a415ebf004643f58b3b493b9c38b0c94307a0537fc40f87efe22f9fa5b6d4fc9ce0bfb540edc5de5bc91b121d7ab14298c02e524efe3d1c59b551455e665cb416d783127d9550cfb7c4191d272ae65f004d5fb9cd16a0bed9e7de2ed4d8fd22dd015", 0x73}, {&(0x7f0000002bc0)="9cdc3d0cd39431dd4df7c5549cbe67a4f4dac971bee63a32c3bdedff6de0192132b83b342bf4c873762b12aeb9f5a9454258cc87a1679bb8335e6236958de939e95e8820e26f75d487974fd9ab9957b9064d908bd7ff7459801062d6f8d22ed1fa45d07eb73850065c26b656f9eec65c0b9a23f311f0efc431b3957cbc6a02630f133afc3a29abbd94bc116564b794ce7b12fc6f66fe1934d268e03108d968c3ce4f23bd13f0599665ead82a4b4f9496c569f8ddd44fff58473eee47f57d76e1b3d718c9e160f3cd88a72a987f9b9932cca8771f480e039331cdc74036be35f085af7c780c07", 0xe6}, {&(0x7f0000002cc0)="d2803e7506a4f0afa306de0bcc5e2346add9dcad78dc85e4414af41596288f5f135b2f5b0cee91a49555e2f47b0ce8bfcb978e73c8a768d569a30391caefc9e0b62cab07e6fc3e2553680a794001269fc90b198046aa0453f4bf7f2970d413a70a5c8601da9964d625230ae8397cd6fdb1205a1dae971335bbd231d7cf1ba53768a5cc2575bce4", 0x87}, {&(0x7f0000002d80)="c2bbcc6490aebb3999f9ffa68e8c2a5b5af37b4864bcd5de5dce9711f56951e92a8598c54f62835b96a8f6cb02b46bbb2cc2a26c1a2f0c4493f63db1dc6bc931ba871ca6466b9d020ac5bc73392276d896675503d6bc56bfdb7107a57a8018965d4b98be4374f43460373641b42a", 0x6e}], 0x9}}, {{&(0x7f0000002ec0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000003040)=[{&(0x7f0000002f00)="7572f14ddc51139b769529660a092f0857ba72c490e930dbdd54e1e4751d7e63406ded10f295de29e1672ab01bcbee8952e6941552b7fde9579a7397b78a3a9b04f917e6b055942123a4dd2fc0514b", 0x4f}, {&(0x7f0000002f80)="9c4cb3b08b90cee0151c18140f41933d6217be64e6d5da724758c035401432f69e1a17c9cec306bd1985538ceeff2c90181202de62246812ac3f96ee9d348099b78340dabcc06af38ea345e8e759b2fcc18e347bc21f0c73ebb8d0fb53f172cb9afa6d4de7b15c0730ffafd24f44f7922b37fbed2a91e33d66240eab223c48e8f2d723036d21f4fbf88b187fd3466aea865619348952d27c45746ab48dba14d187f656520086599918", 0xa9}], 0x2, &(0x7f00000030c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="0a010101ac1414bb000000001c000000000000000000000008000000", @ANYRES32=r10, @ANYBLOB="7f000001ac1414aa00000000c0000000000000000000000007000000070b6c7f0000017f0000010717b97f00000164010101e00000027f000001e000000244242343ffffffff000000096c010100000000070a010100fffffff9640101010000000607235a7f000001ac1414aaac1e0001ffffffffac1414aa00000001ac1e01010a010102443c2121ac1e0101000090000a0101000000000900000000fffffffbac14142800000006ac14141200000001ac14141bfffffffcffffffff00000101890be4ac1e0001ffffffff1c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="000000e2ffff79"], 0x120}}], 0x6, 0x44044) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$netlink(0x10, 0x3, 0x4) 828.064983ms ago: executing program 3 (id=2631): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r4}, 0x38) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r5, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) listen(r2, 0xe9c) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fcdbdf250e00000008000300", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xc}, {0xfff3}}}, 0x24}}, 0x0) 825.202639ms ago: executing program 2 (id=2632): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x66, 0x3ff, 0x8403, 0x3, 0x9, 0x7fff, 0x5, 0x8}, &(0x7f0000000380)=0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) 520.424925ms ago: executing program 2 (id=2633): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) write(r0, &(0x7f00000000c0)="4b0003000000", 0x6) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0xb11, 0x800, 0xa, 0x0, 0x0, [{{r0}, 0xd}, {{r0}, 0x9}, {{r0}, 0x10000}, {{r0}, 0x4436}, {{r0}, 0x8000000000000001}, {{r0}, 0x5}, {{}, 0x8}, {{r0}, 0x7}, {{r0}, 0x8}, {{r0}, 0x5}]}) 420.268142ms ago: executing program 2 (id=2634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x30, 0x6a, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}}, @redirect={0x5, 0x2, 0x0, @remote, {0x5, 0x4, 0x3, 0x1f, 0x501, 0x67, 0x7f2, 0x48, 0x1, 0xf, @local, @multicast1}}}}}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) 415.199018ms ago: executing program 3 (id=2635): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x3, 0x9, 0x0, 0xffffffff, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2c, 0x3501}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2c, 0x3501}, @sadb_address={0x3, 0x6, 0x0, 0xa0, 0x0, @in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}}]}, 0x48}}, 0x0) unshare(0x2a020400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000180)=0x2c) r3 = socket(0x2, 0x2, 0x1) unshare(0x22020400) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r7, &(0x7f0000000740)={&(0x7f0000000400)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)=""/15, 0xf}, {&(0x7f0000000480)=""/194, 0xc2}, {&(0x7f0000000580)=""/65, 0x41}], 0x3, &(0x7f0000000640)=""/216, 0xd8}, 0x2022) splice(r5, 0x0, r7, 0x0, 0x25a5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) r8 = socket(0x10, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid_for_children\x00') ioctl$FICLONE(r10, 0x40049409, r6) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r8], 0x40}}, 0x0) 304.254493ms ago: executing program 2 (id=2636): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x18) 303.890981ms ago: executing program 3 (id=2637): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$packet(0x11, 0x3, 0x300) listen(r4, 0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000500000000", 0x40b}], 0x1) 293.328002ms ago: executing program 2 (id=2638): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0x66, 0x3ff, 0x8403, 0x3, 0x9, 0x7fff, 0x5, 0x8}, &(0x7f0000000380)=0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) 255.720803ms ago: executing program 3 (id=2639): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c001647c2afd10000", @ANYRES16=r6, @ANYBLOB="010029bd7000ffdbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x840) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x3, 0x26) r8 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r8, 0x0, 0x80) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@flushpolicy={0x10, 0x1d, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x10}}, 0x0) sendmsg$kcm(r5, &(0x7f0000002b00)={&(0x7f0000000280)=@l2={0x1f, 0x5, @any, 0x200, 0x1}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000000300)='\r', 0x1}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000340)}, {&(0x7f0000000380)="2fc038e8c0d3d8f4240dfa53ac4aeb763f6a65b7e5e0c7fa1a1270f5f7f431b7b908ce639d4411565f735a422a5f24ebc021e89588", 0x35}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="cd27349a456d93b7f919b740501ce95192b7867e6f32a1a29ca83462d204d583be4516358530e08326c280c431f7376a72d065a0fd2c7571adc99458e349b7ad1ed929e07d760e4b0541815c97b9cc51cd72f812dc8c71ab2413e4894356c2f31604471ba4c98018051dc644bed4ecfc587e5aeb55647369ec458ff19784ddcc1fb82493775d54fa07cb87edaee92f50697be2c17463097958aa97979b78f75f", 0xa0}, {&(0x7f0000002540)="a6ab373b5e8de7a280ca4a4797e0d533e257a48d9b0e576486798a50bf649230120bd31ceef9ea9030777ce3ebae3a6690c047482b059bf8b542702257503ba2344cc0cb5f3538a6440c2bfca9b07e48bbb7548d987950b8b165edeac9ac11c1ae6125af8b0a33a76b51ecb99f519427e582c65e0d91d7e0428df25b8812983b2c768ed2461c13499a89e76396e19663b1d5adbf573edf6bc31b0979bf708f18c758f81603d20fb122aa9cc55247f2ab6ec8b5c7a1ea9475edee01", 0xbb}, {&(0x7f0000002600)="4d4e42bcb908dedd85336e340e834be33c670957d48b7fd5be51b7a682c474057f75b0070787509e381ee3ae7fdfd008cd230dc000d1cdd3f533ba5a94f8c4a7506ee01cc468437ac92186dd86d64d54da86887fede6e5f2ae1dffe3085960c29b86a684b0816c51f2ebcc16eab26286f33a3b6ea7242786a9ad9c3b39923fb6173124eaae29836e43ecd30228be28bff9eb4023878cb7ff4c9ea564119766", 0x9f}, {&(0x7f00000026c0)="3f2667476d1611278ce0401cda29583261b80ec1d4c8a3d0c030fc738e15cc44ff0e8eab923c6eab1333dfba565ad36e12062378bcf3b9ad6b10294bd7ce38c54c6f085ed09369fe385e5e33ee468fa7ec5bab13f851646827567c3d93797c8cf0dc5c6dc0baa1d4c50ad753e55d25ccbd755e5ca58612e7057309924291fa71ec393857b142558282afddec36456b2072dc7c7935193390012d652dfdaa31ada183cf4cd60f5451cb7327e6c536a0624a6d8e708c575f5264dda079ed519bf52b51ff", 0xc3}, {&(0x7f00000003c0)="b8f2dc", 0x3}], 0xa, &(0x7f0000002880)=[{0xc8, 0x10b, 0x9, "e0e48351f4b6d21aaa87b299c2a22cf20e975c856a89fbba99d9a587f327812d05da884cfa88dc897aa096785ee51a9fa1cd69f0aca9773ba0b21ae3b40256c47b98a01730ff816d5a6a3e35d5fcbbbf59d4473c13e822c97b5c054657b9b12e3423ed8455370b92fd08bad2d182aef599fdba960dd3fb5516f37da0fca0d8214c1b63254928e0ff073d09120b371e2cf8cfba140f1c8e28a0610eb73a6aff979ae362b7655f657d9952424c48a578b8d0ac"}, {0xb0, 0x10c, 0x4, "f98f9691ae189e8c289c5cc65e32796af3804b45cb563b9ef3b774ef559f76564b70366a854240cdc6cd861384e31f04766d4e118acd877261eb5c2ab9a44dffdd7edbaa5470995e98450a3253cd8fe39349b8a5d0c4920231c5be9f3eb847b36a90752225c8f1f17d2e304b2979f56aef37a14b4e8cb70e2347dcb610021f845e44d7c9bda1b1714a0c6c13c14737cb65215448af48ae8ac993"}, {0x108, 0x88, 0x7a, "0f81cf539e39fa9f47b36fda27f41a072615427df6057d3d2b425f8982fa933f62cb2e743fcb195519e4e869b7e948d8fba3422452383168f618d4dfffc1fcb9ffb7879e315a6c9f709c63cca66d42ae164272bcba39ebab5865c5059931663cbd9a38ae6eab9f411b4ff8ca22ff8fe677fcbf17e3ec6e4a8d247eebd1b0aef3acb7dc8731f07c467cd2c30b2bd83f4a4c1720ac2aace042587e611bf360f990409105a47c569ba5de85578fc0312dd71f764bcf8b7552c6aa0b5dc862ec36d2f2f72f2e6fef4de03c17ff409fca74f13b19d74365d1ae74e784db7c8e009eb2695888109978ac3b541f8a4a4790bb9a758175fceb"}], 0x280}, 0x8004) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d61637365630000feff018008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}}, 0x0) 120.052722ms ago: executing program 4 (id=2640): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x740, 0x7, 0x5, 0x9, {{0x47, 0x4, 0x3, 0x1, 0x11c, 0x64, 0x0, 0x58, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0xfd, 0x3, 0x6, [{@loopback, 0x1}, {@multicast2, 0xff}, {@loopback, 0x8}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@local}]}, @cipso={0x86, 0x33, 0xffffffffffffffff, [{0x1, 0x11, "d2de786e64b9e3d66dca0993277df8"}, {0x6, 0xc, "724d14bceec618a73bde"}, {0x1, 0x10, "bf6ef18bad960deb0add934d6a82"}]}, @lsrr={0x83, 0x7, 0xa3, [@dev={0xac, 0x14, 0x14, 0x13}]}, @ssrr={0x89, 0x3, 0x41}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4c, 0x6, 0x1, 0x3, [{@rand_addr=0x8, 0x1}, {@multicast1, 0xfff}, {@broadcast, 0x100}, {@rand_addr=0x64010100, 0x8}, {@local, 0x5}, {@private=0xa010102, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x1}]}, @timestamp_addr={0x44, 0x44, 0x1f, 0x1, 0x3, [{@broadcast, 0x8}, {@broadcast, 0xa}, {@multicast1, 0x5}, {@rand_addr=0x64010100, 0xfffffff7}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x200}, {@broadcast, 0x9}, {@multicast2}, {@loopback, 0x230}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000ffdbdf25130000004c00018008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b', @ANYBLOB, @ANYRES32, @ANYBLOB="1400020070696d367265670000000000000000001400018008000100"], 0x74}, 0x1, 0x0, 0x0, 0x20040850}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f0000000480)={'ip6gre0\x00', r0, 0x4, 0x2, 0xff, 0x4, 0x12, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x40}, 0x20, 0x8000, 0x800000, 0x6}}) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x2000c094) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r4, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=""/100, 0x64, 0x0, &(0x7f0000000200)=""/144, 0x90}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000200000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x100000001, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 76.623903ms ago: executing program 2 (id=2641): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="e3e5e42d04003600e27f00000100000000000000c9338cbd70e9d610410d7a55a387ed154d8629d33bcdaadcc509491cee6cfc445bdb612f0d5c0cb009f629ceee94966480350afbf06b0c810570a6200f", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x26, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x80) r5 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r5, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, 0x0}}], 0x1, 0x844) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)={0xa0000001, 0x300000000000000}) 0s ago: executing program 0 (id=2642): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x100000, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x400, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x4e310}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xfffffffffffffe55}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) kernel console output (not intermixed with test programs): 1562] IPv6: NLM_F_CREATE should be set when creating new route [ 244.600683][T11556] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 244.625094][T11562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.680417][T11563] __nla_validate_parse: 6 callbacks suppressed [ 244.680435][T11563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1794'. [ 244.911305][T11558] veth1_macvtap: entered promiscuous mode [ 244.917842][T11558] veth1_macvtap: entered allmulticast mode [ 244.927986][T11558] macsec0: left promiscuous mode [ 244.933541][T11558] macsec0: left allmulticast mode [ 244.941544][T11558] veth1_macvtap: left allmulticast mode [ 245.793361][T11617] wireguard0: entered promiscuous mode [ 245.800184][T11617] wireguard0: entered allmulticast mode [ 245.953508][T11623] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1813'. [ 246.079843][T11632] netlink: 'syz.2.1815': attribute type 10 has an invalid length. [ 246.094112][T11632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1815'. [ 246.259621][T11642] FAULT_INJECTION: forcing a failure. [ 246.259621][T11642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.287426][T11642] CPU: 1 UID: 0 PID: 11642 Comm: syz.3.1818 Not tainted syzkaller #0 PREEMPT(full) [ 246.287452][T11642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.287462][T11642] Call Trace: [ 246.287470][T11642] [ 246.287478][T11642] dump_stack_lvl+0x189/0x250 [ 246.287504][T11642] ? __pfx____ratelimit+0x10/0x10 [ 246.287522][T11642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.287541][T11642] ? __pfx__printk+0x10/0x10 [ 246.287563][T11642] ? __might_fault+0xb0/0x130 [ 246.287597][T11642] should_fail_ex+0x414/0x560 [ 246.287625][T11642] _copy_from_user+0x2d/0xb0 [ 246.287645][T11642] __sys_bpf+0x1ed/0x870 [ 246.287669][T11642] ? __pfx___sys_bpf+0x10/0x10 [ 246.287703][T11642] ? ksys_write+0x22a/0x250 [ 246.287726][T11642] ? __pfx_ksys_write+0x10/0x10 [ 246.287744][T11642] ? rcu_is_watching+0x15/0xb0 [ 246.287769][T11642] __x64_sys_bpf+0x7c/0x90 [ 246.287789][T11642] do_syscall_64+0xfa/0x3b0 [ 246.287805][T11642] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.287822][T11642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.287838][T11642] ? clear_bhb_loop+0x60/0xb0 [ 246.287858][T11642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.287873][T11642] RIP: 0033:0x7fdbed98ebe9 [ 246.287889][T11642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.287907][T11642] RSP: 002b:00007fdbebbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.287925][T11642] RAX: ffffffffffffffda RBX: 00007fdbedbc6090 RCX: 00007fdbed98ebe9 [ 246.287938][T11642] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 246.287949][T11642] RBP: 00007fdbebbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 246.287959][T11642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.287975][T11642] R13: 00007fdbedbc6128 R14: 00007fdbedbc6090 R15: 00007ffeaf536c08 [ 246.288005][T11642] [ 246.522115][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1820'. [ 246.543216][T11644] batman_adv: batadv0: Adding interface: ipvlan3 [ 246.558925][T11644] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.587991][T11644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.601530][T11644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.615180][T11644] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 246.823407][T11654] lo speed is unknown, defaulting to 1000 [ 247.118415][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 247.173330][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 247.256938][ T30] audit: type=1800 audit(1756766990.667:3): pid=11666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1827" name="memory.events" dev="tmpfs" ino=1866 res=0 errno=0 [ 247.810471][T11692] Bluetooth: MGMT ver 1.23 [ 247.824288][T11693] FAULT_INJECTION: forcing a failure. [ 247.824288][T11693] name failslab, interval 1, probability 0, space 0, times 0 [ 247.855341][T11693] CPU: 0 UID: 0 PID: 11693 Comm: syz.0.1835 Not tainted syzkaller #0 PREEMPT(full) [ 247.855366][T11693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.855377][T11693] Call Trace: [ 247.855385][T11693] [ 247.855393][T11693] dump_stack_lvl+0x189/0x250 [ 247.855418][T11693] ? __pfx____ratelimit+0x10/0x10 [ 247.855436][T11693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.855455][T11693] ? __pfx__printk+0x10/0x10 [ 247.855484][T11693] ? __pfx___might_resched+0x10/0x10 [ 247.855500][T11693] ? fs_reclaim_acquire+0x7d/0x100 [ 247.855536][T11693] should_fail_ex+0x414/0x560 [ 247.855564][T11693] should_failslab+0xa8/0x100 [ 247.855588][T11693] kmem_cache_alloc_noprof+0x73/0x3c0 [ 247.855608][T11693] ? __kernfs_new_node+0xd7/0x7e0 [ 247.855631][T11693] __kernfs_new_node+0xd7/0x7e0 [ 247.855649][T11693] ? __lock_acquire+0xab9/0xd20 [ 247.855680][T11693] ? __pfx___kernfs_new_node+0x10/0x10 [ 247.855702][T11693] ? kernfs_root+0x1c/0x230 [ 247.855727][T11693] ? kernfs_root+0x1c/0x230 [ 247.855744][T11693] ? kernfs_root+0x1c/0x230 [ 247.855766][T11693] kernfs_new_node+0x102/0x210 [ 247.855791][T11693] kernfs_create_link+0xa7/0x200 [ 247.855816][T11693] sysfs_do_create_link_sd+0x83/0x110 [ 247.855838][T11693] device_add_class_symlinks+0x1cf/0x240 [ 247.855861][T11693] device_add+0x475/0xb50 [ 247.855878][T11693] ? device_initialize+0x24b/0x440 [ 247.855898][T11693] wakeup_source_sysfs_add+0x1af/0x280 [ 247.855921][T11693] wakeup_source_register+0x18a/0x380 [ 247.855941][T11693] ? ep_insert+0xb93/0x19e0 [ 247.855961][T11693] ep_insert+0xef6/0x19e0 [ 247.855995][T11693] ? __pfx_ep_insert+0x10/0x10 [ 247.856030][T11693] ? ep_loop_check+0x50/0x1b0 [ 247.856059][T11693] do_epoll_ctl+0x7f4/0xe80 [ 247.856091][T11693] __x64_sys_epoll_ctl+0x163/0x1a0 [ 247.856117][T11693] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 247.856136][T11693] ? rcu_is_watching+0x15/0xb0 [ 247.856159][T11693] ? do_syscall_64+0xbe/0x3b0 [ 247.856180][T11693] do_syscall_64+0xfa/0x3b0 [ 247.856196][T11693] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.856211][T11693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.856228][T11693] ? clear_bhb_loop+0x60/0xb0 [ 247.856249][T11693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.856264][T11693] RIP: 0033:0x7f354a18ebe9 [ 247.856280][T11693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.856295][T11693] RSP: 002b:00007f354b022038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 247.856314][T11693] RAX: ffffffffffffffda RBX: 00007f354a3c6090 RCX: 00007f354a18ebe9 [ 247.856327][T11693] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 000000000000000b [ 247.856337][T11693] RBP: 00007f354b022090 R08: 0000000000000000 R09: 0000000000000000 [ 247.856348][T11693] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.856359][T11693] R13: 00007f354a3c6128 R14: 00007f354a3c6090 R15: 00007fff4687d0f8 [ 247.856387][T11693] [ 248.183540][T11682] wireguard0: entered promiscuous mode [ 248.189928][T11682] wireguard0: entered allmulticast mode [ 248.226683][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'. [ 248.264015][T11692] geneve2: entered promiscuous mode [ 248.281220][T11695] FAULT_INJECTION: forcing a failure. [ 248.281220][T11695] name failslab, interval 1, probability 0, space 0, times 0 [ 248.281903][T11699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1838'. [ 248.297778][T11695] CPU: 1 UID: 0 PID: 11695 Comm: syz.4.1837 Not tainted syzkaller #0 PREEMPT(full) [ 248.297801][T11695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.297812][T11695] Call Trace: [ 248.297818][T11695] [ 248.297826][T11695] dump_stack_lvl+0x189/0x250 [ 248.297850][T11695] ? __pfx____ratelimit+0x10/0x10 [ 248.297868][T11695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.297886][T11695] ? __pfx__printk+0x10/0x10 [ 248.297914][T11695] ? __lock_acquire+0xab9/0xd20 [ 248.297946][T11695] should_fail_ex+0x414/0x560 [ 248.297973][T11695] should_failslab+0xa8/0x100 [ 248.297997][T11695] kmem_cache_alloc_noprof+0x73/0x3c0 [ 248.298017][T11695] ? skb_clone+0x212/0x3a0 [ 248.298041][T11695] skb_clone+0x212/0x3a0 [ 248.298062][T11695] __netlink_deliver_tap+0x404/0x850 [ 248.298092][T11695] ? netlink_deliver_tap+0x2e/0x1b0 [ 248.298110][T11695] netlink_deliver_tap+0x19c/0x1b0 [ 248.298128][T11695] netlink_unicast+0x7fa/0x9e0 [ 248.298158][T11695] ? __pfx_netlink_unicast+0x10/0x10 [ 248.298182][T11695] ? netlink_sendmsg+0x642/0xb30 [ 248.298196][T11695] ? skb_put+0x11b/0x210 [ 248.298217][T11695] netlink_sendmsg+0x805/0xb30 [ 248.298243][T11695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.298262][T11695] ? aa_sock_msg_perm+0xf1/0x1d0 [ 248.298280][T11695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.298298][T11695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.298315][T11695] __sock_sendmsg+0x21c/0x270 [ 248.298340][T11695] ____sys_sendmsg+0x52d/0x830 [ 248.298363][T11695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.298391][T11695] ? import_iovec+0x74/0xa0 [ 248.298414][T11695] ___sys_sendmsg+0x21f/0x2a0 [ 248.298434][T11695] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.298496][T11695] ? __might_fault+0xb0/0x130 [ 248.298517][T11695] __sys_sendmmsg+0x227/0x430 [ 248.298543][T11695] ? __pfx___sys_sendmmsg+0x10/0x10 [ 248.298559][T11695] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 248.298604][T11695] ? ksys_write+0x22a/0x250 [ 248.298627][T11695] ? __pfx_ksys_write+0x10/0x10 [ 248.298655][T11695] __x64_sys_sendmmsg+0xa0/0xc0 [ 248.298675][T11695] do_syscall_64+0xfa/0x3b0 [ 248.298693][T11695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.298708][T11695] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.298724][T11695] ? clear_bhb_loop+0x60/0xb0 [ 248.298750][T11695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.298765][T11695] RIP: 0033:0x7f3143b8ebe9 [ 248.298780][T11695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.298795][T11695] RSP: 002b:00007f3144a5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 248.298814][T11695] RAX: ffffffffffffffda RBX: 00007f3143dc5fa0 RCX: 00007f3143b8ebe9 [ 248.298826][T11695] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 248.298838][T11695] RBP: 00007f3144a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 248.298849][T11695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.298859][T11695] R13: 00007f3143dc6038 R14: 00007f3143dc5fa0 R15: 00007ffe7d0d8048 [ 248.298888][T11695] [ 248.463218][T11701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1839'. [ 248.878266][T11714] tipc: Enabled bearer , priority 0 [ 248.930247][T11719] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 248.953839][T11714] syzkaller0: entered promiscuous mode [ 248.993451][T11714] syzkaller0: entered allmulticast mode [ 249.063441][T11720] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1846'. [ 249.089688][T11728] netlink: 'syz.3.1850': attribute type 39 has an invalid length. [ 249.197342][T11713] tipc: Resetting bearer [ 249.237861][T11713] tipc: Disabling bearer [ 249.642303][T11753] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.798270][T11769] __nla_validate_parse: 2 callbacks suppressed [ 249.798288][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1861'. [ 249.843177][T11752] wireguard0: entered promiscuous mode [ 249.850444][T11752] wireguard0: entered allmulticast mode [ 249.907119][T11759] lo speed is unknown, defaulting to 1000 [ 250.992847][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'. [ 251.005467][T11794] netlink: 364 bytes leftover after parsing attributes in process `syz.3.1869'. [ 251.014532][T11794] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 251.141196][T11808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1872'. [ 251.709383][T11834] netlink: 'syz.2.1882': attribute type 1 has an invalid length. [ 251.810622][T11834] bond2: entered promiscuous mode [ 251.818244][T11834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.852169][T11834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.907930][T11834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.929929][T11838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 251.962133][T11838] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 252.063187][T11838] bond2: (slave wireguard1): Error -95 calling set_mac_address [ 252.114320][T11834] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 252.126845][T11834] bond2: (slave wireguard1): Error -95 calling set_mac_address [ 252.301133][T11855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1885'. [ 252.467925][T11864] netlink: 'syz.4.1888': attribute type 1 has an invalid length. [ 252.490493][T11864] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1888'. [ 252.681302][T11880] netlink: 'syz.2.1889': attribute type 303 has an invalid length. [ 252.752535][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 252.846344][T11887] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 252.896824][T11887] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1891'. [ 253.203538][T11903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1899'. [ 253.215756][T11899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1896'. [ 253.331829][T11911] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 253.385392][T11911] vlan2: left promiscuous mode [ 253.390215][T11911] dummy0: left promiscuous mode [ 253.418303][T11911] vti0: left promiscuous mode [ 253.424318][T11911] gretap2: left promiscuous mode [ 253.430563][T11911] macvtap1: left promiscuous mode [ 253.563519][T11928] FAULT_INJECTION: forcing a failure. [ 253.563519][T11928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.581780][T11927] netlink: 'syz.4.1907': attribute type 1 has an invalid length. [ 253.585475][T11929] FAULT_INJECTION: forcing a failure. [ 253.585475][T11929] name failslab, interval 1, probability 0, space 0, times 0 [ 253.601907][T11928] CPU: 0 UID: 0 PID: 11928 Comm: syz.0.1908 Not tainted syzkaller #0 PREEMPT(full) [ 253.601932][T11928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.601941][T11928] Call Trace: [ 253.601948][T11928] [ 253.601955][T11928] dump_stack_lvl+0x189/0x250 [ 253.601980][T11928] ? __pfx____ratelimit+0x10/0x10 [ 253.601997][T11928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.602024][T11928] ? __pfx__printk+0x10/0x10 [ 253.602045][T11928] ? __might_fault+0xb0/0x130 [ 253.602077][T11928] should_fail_ex+0x414/0x560 [ 253.602100][T11928] _copy_from_iter+0x1de/0x1790 [ 253.602123][T11928] ? rcu_is_watching+0x15/0xb0 [ 253.602139][T11928] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 253.602158][T11928] ? __pfx__copy_from_iter+0x10/0x10 [ 253.602175][T11928] ? __build_skb_around+0x257/0x3e0 [ 253.602195][T11928] ? netlink_sendmsg+0x642/0xb30 [ 253.602210][T11928] ? skb_put+0x11b/0x210 [ 253.602231][T11928] netlink_sendmsg+0x6b2/0xb30 [ 253.602258][T11928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.602277][T11928] ? aa_sock_msg_perm+0xf1/0x1d0 [ 253.602295][T11928] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 253.602313][T11928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.602329][T11928] __sock_sendmsg+0x21c/0x270 [ 253.602352][T11928] ____sys_sendmsg+0x505/0x830 [ 253.602374][T11928] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.602401][T11928] ? import_iovec+0x74/0xa0 [ 253.602423][T11928] ___sys_sendmsg+0x21f/0x2a0 [ 253.602443][T11928] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.602496][T11928] ? __fget_files+0x2a/0x420 [ 253.602510][T11928] ? __fget_files+0x3a0/0x420 [ 253.602536][T11928] __x64_sys_sendmsg+0x19b/0x260 [ 253.602556][T11928] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.602584][T11928] ? __pfx_ksys_write+0x10/0x10 [ 253.602602][T11928] ? rcu_is_watching+0x15/0xb0 [ 253.602624][T11928] ? do_syscall_64+0xbe/0x3b0 [ 253.602644][T11928] do_syscall_64+0xfa/0x3b0 [ 253.602659][T11928] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.602675][T11928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.602692][T11928] ? clear_bhb_loop+0x60/0xb0 [ 253.602711][T11928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.602727][T11928] RIP: 0033:0x7f354a18ebe9 [ 253.602743][T11928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.602756][T11928] RSP: 002b:00007f354b043038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.602774][T11928] RAX: ffffffffffffffda RBX: 00007f354a3c5fa0 RCX: 00007f354a18ebe9 [ 253.602786][T11928] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000003 [ 253.602797][T11928] RBP: 00007f354b043090 R08: 0000000000000000 R09: 0000000000000000 [ 253.602807][T11928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.602817][T11928] R13: 00007f354a3c6038 R14: 00007f354a3c5fa0 R15: 00007fff4687d0f8 [ 253.602845][T11928] [ 253.929162][T11929] CPU: 0 UID: 0 PID: 11929 Comm: syz.2.1906 Not tainted syzkaller #0 PREEMPT(full) [ 253.929186][T11929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.929195][T11929] Call Trace: [ 253.929202][T11929] [ 253.929210][T11929] dump_stack_lvl+0x189/0x250 [ 253.929233][T11929] ? __pfx____ratelimit+0x10/0x10 [ 253.929250][T11929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.929267][T11929] ? __pfx__printk+0x10/0x10 [ 253.929293][T11929] ? __pfx___might_resched+0x10/0x10 [ 253.929306][T11929] ? fs_reclaim_acquire+0x7d/0x100 [ 253.929333][T11929] should_fail_ex+0x414/0x560 [ 253.929359][T11929] should_failslab+0xa8/0x100 [ 253.929383][T11929] __kmalloc_noprof+0xcb/0x4f0 [ 253.929402][T11929] ? bpf_test_init+0xc2/0x170 [ 253.929428][T11929] bpf_test_init+0xc2/0x170 [ 253.929455][T11929] bpf_prog_test_run_xdp+0x37c/0x1000 [ 253.929489][T11929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 253.929511][T11929] ? __fget_files+0x2a/0x420 [ 253.929532][T11929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 253.929550][T11929] bpf_prog_test_run+0x2c7/0x340 [ 253.929576][T11929] __sys_bpf+0x581/0x870 [ 253.929598][T11929] ? __pfx___sys_bpf+0x10/0x10 [ 253.929631][T11929] ? ksys_write+0x22a/0x250 [ 253.929659][T11929] ? __pfx_ksys_write+0x10/0x10 [ 253.929676][T11929] ? rcu_is_watching+0x15/0xb0 [ 253.929701][T11929] __x64_sys_bpf+0x7c/0x90 [ 253.929721][T11929] do_syscall_64+0xfa/0x3b0 [ 253.929738][T11929] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.929754][T11929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.929771][T11929] ? clear_bhb_loop+0x60/0xb0 [ 253.929792][T11929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.929807][T11929] RIP: 0033:0x7efe32d8ebe9 [ 253.929823][T11929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.929837][T11929] RSP: 002b:00007efe33b91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.929856][T11929] RAX: ffffffffffffffda RBX: 00007efe32fc5fa0 RCX: 00007efe32d8ebe9 [ 253.929869][T11929] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 253.929880][T11929] RBP: 00007efe33b91090 R08: 0000000000000000 R09: 0000000000000000 [ 253.929891][T11929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.929901][T11929] R13: 00007efe32fc6038 R14: 00007efe32fc5fa0 R15: 00007ffdc8855f38 [ 253.929931][T11929] [ 254.427634][T11958] bond0 (unregistering): Released all slaves [ 254.503876][T11957] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.599911][T11955] lo speed is unknown, defaulting to 1000 [ 254.822090][T11978] Set syz0 is full, maxelem 0 reached [ 255.131383][T11992] netlink: 'syz.0.1929': attribute type 1 has an invalid length. [ 255.139985][T11992] __nla_validate_parse: 211 callbacks suppressed [ 255.140002][T11992] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1929'. [ 255.171018][T11999] netlink: 'syz.1.1931': attribute type 1 has an invalid length. [ 255.184110][T11998] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1930'. [ 255.288969][T12001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.364377][T12007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1935'. [ 255.711344][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.220219][T12039] netlink: 'syz.1.1943': attribute type 1 has an invalid length. [ 256.242729][T12039] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1943'. [ 256.271434][T12042] netlink: 'syz.4.1945': attribute type 4 has an invalid length. [ 256.331278][T12042] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1945'. [ 256.803277][T12069] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1949'. [ 256.840054][T12069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1949'. [ 257.055987][T12077] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1952'. [ 257.342374][T12086] IPVS: Error connecting to the multicast addr [ 257.355160][T12086] netlink: 'syz.2.1956': attribute type 13 has an invalid length. [ 257.363614][T12087] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 257.363714][T12086] netlink: 'syz.2.1956': attribute type 17 has an invalid length. [ 257.402185][T12086] ip6_vti0: left promiscuous mode [ 257.411536][T12086] ip6_vti0: left allmulticast mode [ 257.437667][T12086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.454530][T12081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1955'. [ 257.468476][T12089] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1956'. [ 257.787187][T12096] netlink: 'syz.2.1958': attribute type 1 has an invalid length. [ 257.918307][T12105] openvswitch: netlink: IP tunnel TTL not specified. [ 257.940794][T12105] batadv1: entered promiscuous mode [ 258.160790][T12111] netlink: 'syz.0.1964': attribute type 1 has an invalid length. [ 258.173900][T12111] netlink: 'syz.0.1964': attribute type 2 has an invalid length. [ 258.183371][T12111] netlink: 'syz.0.1964': attribute type 1 has an invalid length. [ 258.266967][T12115] Set syz0 is full, maxelem 0 reached [ 259.489945][T12152] Set syz0 is full, maxelem 0 reached [ 260.528669][ T5874] block nbd1: Receive control failed (result -32) [ 260.549675][T12179] validate_nla: 4 callbacks suppressed [ 260.549693][T12179] netlink: 'syz.0.1987': attribute type 1 has an invalid length. [ 260.572129][T12183] netlink: 'syz.0.1987': attribute type 12 has an invalid length. [ 260.583320][T12179] __nla_validate_parse: 13 callbacks suppressed [ 260.583336][T12179] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1987'. [ 260.604524][T12183] netlink: 'syz.0.1987': attribute type 29 has an invalid length. [ 260.620759][T12183] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1987'. [ 260.631765][T12179] netlink: 'syz.0.1987': attribute type 2 has an invalid length. [ 260.640392][T12179] netlink: 'syz.0.1987': attribute type 1 has an invalid length. [ 260.781485][T12196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1992'. [ 261.456538][T12220] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2000'. [ 261.784208][T12239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2007'. [ 261.822440][T12237] lo speed is unknown, defaulting to 1000 [ 261.882191][T12229] lo speed is unknown, defaulting to 1000 [ 262.093532][T12249] tc_dump_action: action bad kind [ 262.778142][T12283] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2020'. [ 263.010534][T12290] FAULT_INJECTION: forcing a failure. [ 263.010534][T12290] name failslab, interval 1, probability 0, space 0, times 0 [ 263.044510][T12290] CPU: 1 UID: 0 PID: 12290 Comm: syz.4.2022 Not tainted syzkaller #0 PREEMPT(full) [ 263.044532][T12290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.044542][T12290] Call Trace: [ 263.044549][T12290] [ 263.044557][T12290] dump_stack_lvl+0x189/0x250 [ 263.044585][T12290] ? __pfx____ratelimit+0x10/0x10 [ 263.044601][T12290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.044619][T12290] ? __pfx__printk+0x10/0x10 [ 263.044647][T12290] ? __pfx___might_resched+0x10/0x10 [ 263.044663][T12290] ? fs_reclaim_acquire+0x7d/0x100 [ 263.044692][T12290] should_fail_ex+0x414/0x560 [ 263.044719][T12290] should_failslab+0xa8/0x100 [ 263.044745][T12290] __kmalloc_cache_noprof+0x70/0x3d0 [ 263.044766][T12290] ? fl_change+0x199/0x1ac0 [ 263.044790][T12290] fl_change+0x199/0x1ac0 [ 263.044815][T12290] ? fl_get+0x9a/0x380 [ 263.044833][T12290] ? fl_get+0x9a/0x380 [ 263.044851][T12290] ? fl_get+0x2f1/0x380 [ 263.044868][T12290] ? __pfx_fl_change+0x10/0x10 [ 263.044884][T12290] ? fl_get+0x9a/0x380 [ 263.044901][T12290] ? __pfx_fl_get+0x10/0x10 [ 263.044927][T12290] tc_new_tfilter+0xdca/0x15b0 [ 263.044977][T12290] ? __pfx_tc_new_tfilter+0x10/0x10 [ 263.044993][T12290] ? __dev_queue_xmit+0x1d79/0x3b50 [ 263.045060][T12290] ? __pfx_tc_new_tfilter+0x10/0x10 [ 263.045076][T12290] rtnetlink_rcv_msg+0x7cf/0xb70 [ 263.045095][T12290] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 263.045109][T12290] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 263.045123][T12290] ? ref_tracker_free+0x63a/0x7d0 [ 263.045144][T12290] ? __asan_memcpy+0x40/0x70 [ 263.045162][T12290] ? __pfx_ref_tracker_free+0x10/0x10 [ 263.045181][T12290] ? __skb_clone+0x63/0x7a0 [ 263.045208][T12290] netlink_rcv_skb+0x205/0x470 [ 263.045226][T12290] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 263.045243][T12290] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 263.045271][T12290] ? netlink_deliver_tap+0x2e/0x1b0 [ 263.045295][T12290] netlink_unicast+0x82c/0x9e0 [ 263.045327][T12290] ? __pfx_netlink_unicast+0x10/0x10 [ 263.045351][T12290] ? netlink_sendmsg+0x642/0xb30 [ 263.045366][T12290] ? skb_put+0x11b/0x210 [ 263.045387][T12290] netlink_sendmsg+0x805/0xb30 [ 263.045415][T12290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.045437][T12290] ? aa_sock_msg_perm+0xf1/0x1d0 [ 263.045456][T12290] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 263.045474][T12290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.045493][T12290] __sock_sendmsg+0x21c/0x270 [ 263.045518][T12290] ____sys_sendmsg+0x52d/0x830 [ 263.045544][T12290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.045573][T12290] ? import_iovec+0x74/0xa0 [ 263.045597][T12290] ___sys_sendmsg+0x21f/0x2a0 [ 263.045619][T12290] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.045688][T12290] ? __might_fault+0xb0/0x130 [ 263.045714][T12290] __sys_sendmmsg+0x227/0x430 [ 263.045740][T12290] ? __pfx___sys_sendmmsg+0x10/0x10 [ 263.045756][T12290] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 263.045803][T12290] ? ksys_write+0x22a/0x250 [ 263.045827][T12290] ? __pfx_ksys_write+0x10/0x10 [ 263.045845][T12290] ? rcu_is_watching+0x15/0xb0 [ 263.045869][T12290] __x64_sys_sendmmsg+0xa0/0xc0 [ 263.045891][T12290] do_syscall_64+0xfa/0x3b0 [ 263.045908][T12290] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.045925][T12290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.045942][T12290] ? clear_bhb_loop+0x60/0xb0 [ 263.045963][T12290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.045979][T12290] RIP: 0033:0x7f3143b8ebe9 [ 263.045995][T12290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.046017][T12290] RSP: 002b:00007f3144a5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 263.046036][T12290] RAX: ffffffffffffffda RBX: 00007f3143dc5fa0 RCX: 00007f3143b8ebe9 [ 263.046050][T12290] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 263.046062][T12290] RBP: 00007f3144a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 263.046073][T12290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.046084][T12290] R13: 00007f3143dc6038 R14: 00007f3143dc5fa0 R15: 00007ffe7d0d8048 [ 263.046116][T12290] [ 263.561093][T12292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.568405][T12292] IPv6: NLM_F_CREATE should be set when creating new route [ 263.630079][T12294] netlink: 'syz.3.2023': attribute type 4 has an invalid length. [ 263.680077][T12294] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2023'. [ 263.692026][T12298] netlink: 'syz.0.2026': attribute type 39 has an invalid length. [ 263.722856][T12303] netlink: 'syz.1.2025': attribute type 1 has an invalid length. [ 263.731329][T12294] Ã: renamed from bond0 (while UP) [ 263.779242][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'. [ 263.809706][T12308] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2030'. [ 263.819777][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 263.933257][T12314] FAULT_INJECTION: forcing a failure. [ 263.933257][T12314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.946659][T12314] CPU: 1 UID: 0 PID: 12314 Comm: syz.1.2032 Not tainted syzkaller #0 PREEMPT(full) [ 263.946682][T12314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.946692][T12314] Call Trace: [ 263.946699][T12314] [ 263.946707][T12314] dump_stack_lvl+0x189/0x250 [ 263.946731][T12314] ? __pfx____ratelimit+0x10/0x10 [ 263.946750][T12314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.946769][T12314] ? __pfx__printk+0x10/0x10 [ 263.946791][T12314] ? __might_fault+0xb0/0x130 [ 263.946824][T12314] should_fail_ex+0x414/0x560 [ 263.946851][T12314] _copy_from_user+0x2d/0xb0 [ 263.946882][T12314] ___sys_sendmsg+0x158/0x2a0 [ 263.946905][T12314] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.946970][T12314] ? __might_fault+0xb0/0x130 [ 263.946994][T12314] __sys_sendmmsg+0x227/0x430 [ 263.947019][T12314] ? __pfx___sys_sendmmsg+0x10/0x10 [ 263.947035][T12314] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 263.947081][T12314] ? ksys_write+0x22a/0x250 [ 263.947104][T12314] ? __pfx_ksys_write+0x10/0x10 [ 263.947122][T12314] ? rcu_is_watching+0x15/0xb0 [ 263.947145][T12314] __x64_sys_sendmmsg+0xa0/0xc0 [ 263.947167][T12314] do_syscall_64+0xfa/0x3b0 [ 263.947183][T12314] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.947200][T12314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.947217][T12314] ? clear_bhb_loop+0x60/0xb0 [ 263.947237][T12314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.947253][T12314] RIP: 0033:0x7fdb5cd8ebe9 [ 263.947270][T12314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.947284][T12314] RSP: 002b:00007fdb5db60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 263.947303][T12314] RAX: ffffffffffffffda RBX: 00007fdb5cfc5fa0 RCX: 00007fdb5cd8ebe9 [ 263.947316][T12314] RDX: 0000000000000300 RSI: 0000200000000740 RDI: 0000000000000003 [ 263.947328][T12314] RBP: 00007fdb5db60090 R08: 0000000000000000 R09: 0000000000000000 [ 263.947338][T12314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.947349][T12314] R13: 00007fdb5cfc6038 R14: 00007fdb5cfc5fa0 R15: 00007ffdb7d059d8 [ 263.947378][T12314] [ 264.283167][T12331] Set syz0 is full, maxelem 0 reached [ 264.300401][T12330] FAULT_INJECTION: forcing a failure. [ 264.300401][T12330] name failslab, interval 1, probability 0, space 0, times 0 [ 264.313942][T12330] CPU: 0 UID: 0 PID: 12330 Comm: syz.2.2037 Not tainted syzkaller #0 PREEMPT(full) [ 264.313968][T12330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.313979][T12330] Call Trace: [ 264.313987][T12330] [ 264.313995][T12330] dump_stack_lvl+0x189/0x250 [ 264.314020][T12330] ? __pfx____ratelimit+0x10/0x10 [ 264.314038][T12330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.314058][T12330] ? __pfx__printk+0x10/0x10 [ 264.314086][T12330] ? __pfx___might_resched+0x10/0x10 [ 264.314102][T12330] ? fs_reclaim_acquire+0x7d/0x100 [ 264.314130][T12330] should_fail_ex+0x414/0x560 [ 264.314156][T12330] should_failslab+0xa8/0x100 [ 264.314180][T12330] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 264.314202][T12330] ? __pfx_nf_tables_abort+0x10/0x10 [ 264.314220][T12330] ? __alloc_skb+0x112/0x2d0 [ 264.314242][T12330] __alloc_skb+0x112/0x2d0 [ 264.314264][T12330] netlink_ack+0x146/0xa50 [ 264.314285][T12330] ? __kasan_kmalloc+0x93/0xb0 [ 264.314317][T12330] nfnetlink_rcv+0x2290/0x2520 [ 264.314373][T12330] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 264.314448][T12330] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.314485][T12330] netlink_unicast+0x82c/0x9e0 [ 264.314516][T12330] ? __pfx_netlink_unicast+0x10/0x10 [ 264.314541][T12330] ? netlink_sendmsg+0x642/0xb30 [ 264.314555][T12330] ? skb_put+0x11b/0x210 [ 264.314577][T12330] netlink_sendmsg+0x805/0xb30 [ 264.314602][T12330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.314621][T12330] ? aa_sock_msg_perm+0xf1/0x1d0 [ 264.314639][T12330] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 264.314657][T12330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.314674][T12330] __sock_sendmsg+0x21c/0x270 [ 264.314700][T12330] ____sys_sendmsg+0x505/0x830 [ 264.314725][T12330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.314753][T12330] ? import_iovec+0x74/0xa0 [ 264.314777][T12330] ___sys_sendmsg+0x21f/0x2a0 [ 264.314797][T12330] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.314879][T12330] ? __fget_files+0x2a/0x420 [ 264.314902][T12330] ? __fget_files+0x3a0/0x420 [ 264.314929][T12330] __x64_sys_sendmsg+0x19b/0x260 [ 264.314951][T12330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.314979][T12330] ? __pfx_ksys_write+0x10/0x10 [ 264.314998][T12330] ? rcu_is_watching+0x15/0xb0 [ 264.315019][T12330] ? do_syscall_64+0xbe/0x3b0 [ 264.315040][T12330] do_syscall_64+0xfa/0x3b0 [ 264.315056][T12330] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.315072][T12330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.315089][T12330] ? clear_bhb_loop+0x60/0xb0 [ 264.315110][T12330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.315127][T12330] RIP: 0033:0x7efe32d8ebe9 [ 264.315144][T12330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.315158][T12330] RSP: 002b:00007efe33b91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.315178][T12330] RAX: ffffffffffffffda RBX: 00007efe32fc5fa0 RCX: 00007efe32d8ebe9 [ 264.315191][T12330] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 264.315207][T12330] RBP: 00007efe33b91090 R08: 0000000000000000 R09: 0000000000000000 [ 264.315217][T12330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.315228][T12330] R13: 00007efe32fc6038 R14: 00007efe32fc5fa0 R15: 00007ffdc8855f38 [ 264.315258][T12330] [ 264.688611][T12337] FAULT_INJECTION: forcing a failure. [ 264.688611][T12337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.724685][T12337] CPU: 1 UID: 0 PID: 12337 Comm: syz.1.2040 Not tainted syzkaller #0 PREEMPT(full) [ 264.724713][T12337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.724723][T12337] Call Trace: [ 264.724731][T12337] [ 264.724739][T12337] dump_stack_lvl+0x189/0x250 [ 264.724764][T12337] ? __pfx____ratelimit+0x10/0x10 [ 264.724780][T12337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.724799][T12337] ? __pfx__printk+0x10/0x10 [ 264.724820][T12337] ? __might_fault+0xb0/0x130 [ 264.724854][T12337] should_fail_ex+0x414/0x560 [ 264.724881][T12337] _copy_from_iter+0x1de/0x1790 [ 264.724908][T12337] ? rcu_is_watching+0x15/0xb0 [ 264.724928][T12337] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 264.724951][T12337] ? __pfx__copy_from_iter+0x10/0x10 [ 264.724971][T12337] ? __build_skb_around+0x257/0x3e0 [ 264.724993][T12337] ? netlink_sendmsg+0x642/0xb30 [ 264.725009][T12337] ? skb_put+0x11b/0x210 [ 264.725034][T12337] netlink_sendmsg+0x6b2/0xb30 [ 264.725059][T12337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.725079][T12337] ? aa_sock_msg_perm+0xf1/0x1d0 [ 264.725096][T12337] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 264.725114][T12337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.725132][T12337] __sock_sendmsg+0x21c/0x270 [ 264.725158][T12337] ____sys_sendmsg+0x505/0x830 [ 264.725183][T12337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.725217][T12337] ? import_iovec+0x74/0xa0 [ 264.725239][T12337] ___sys_sendmsg+0x21f/0x2a0 [ 264.725261][T12337] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.725318][T12337] ? __fget_files+0x2a/0x420 [ 264.725333][T12337] ? __fget_files+0x3a0/0x420 [ 264.725360][T12337] __x64_sys_sendmsg+0x19b/0x260 [ 264.725382][T12337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.725411][T12337] ? __pfx_ksys_write+0x10/0x10 [ 264.725429][T12337] ? rcu_is_watching+0x15/0xb0 [ 264.725451][T12337] ? do_syscall_64+0xbe/0x3b0 [ 264.725473][T12337] do_syscall_64+0xfa/0x3b0 [ 264.725488][T12337] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.725504][T12337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.725521][T12337] ? clear_bhb_loop+0x60/0xb0 [ 264.725542][T12337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.725557][T12337] RIP: 0033:0x7fdb5cd8ebe9 [ 264.725574][T12337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.725587][T12337] RSP: 002b:00007fdb5db60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.725607][T12337] RAX: ffffffffffffffda RBX: 00007fdb5cfc5fa0 RCX: 00007fdb5cd8ebe9 [ 264.725620][T12337] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000004 [ 264.725631][T12337] RBP: 00007fdb5db60090 R08: 0000000000000000 R09: 0000000000000000 [ 264.725642][T12337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.725652][T12337] R13: 00007fdb5cfc6038 R14: 00007fdb5cfc5fa0 R15: 00007ffdb7d059d8 [ 264.725682][T12337] [ 265.102023][T12346] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 265.121443][T12344] netlink: 'syz.2.2044': attribute type 2 has an invalid length. [ 265.125751][ T9011] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.140176][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.169270][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.217508][ T9011] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.457559][T12359] tipc: Enabling of bearer rejected, failed to enable media [ 265.620749][T12372] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 265.632677][T12372] __nla_validate_parse: 9 callbacks suppressed [ 265.632702][T12372] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2052'. [ 265.652758][T12372] netlink: 'syz.3.2052': attribute type 2 has an invalid length. [ 265.681319][T12372] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 265.846182][T12383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2056'. [ 265.863310][T12383] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2056'. [ 266.019384][T12385] syzkaller1: entered promiscuous mode [ 266.028326][T12385] syzkaller1: entered allmulticast mode [ 266.097711][T12387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2058'. [ 266.304268][T12395] netlink: 'syz.4.2061': attribute type 1 has an invalid length. [ 266.323016][T12395] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2061'. [ 266.356768][T12395] netlink: 'syz.4.2061': attribute type 2 has an invalid length. [ 266.386683][T12395] netlink: 'syz.4.2061': attribute type 1 has an invalid length. [ 266.540444][T12406] netlink: 14212 bytes leftover after parsing attributes in process `syz.4.2065'. [ 266.679168][T12412] netlink: 'syz.1.2066': attribute type 1 has an invalid length. [ 266.766681][T12412] bond3: entered promiscuous mode [ 266.769811][T12418] netlink: 'syz.3.2068': attribute type 1 has an invalid length. [ 266.772270][T12412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.806742][T12415] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.812522][T12412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.813967][T12415] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 266.820675][T12412] IPv6: NLM_F_CREATE should be set when creating new route [ 266.820790][T12412] IPv6: NLM_F_CREATE should be set when creating new route [ 266.848957][T12415] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 266.849220][T12412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.896188][T12426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.900144][T12418] bond0: entered promiscuous mode [ 266.903775][T12426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.914973][T12418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.952478][T12424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.962618][T12424] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 266.978536][T12424] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 267.008802][T12412] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 267.021337][T12412] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 267.298624][T12439] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2073'. [ 267.308739][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2073'. [ 267.531980][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2077'. [ 267.557864][T12445] batman_adv: batadv0: Adding interface: ipvlan4 [ 267.564367][T12445] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.605500][T12445] batman_adv: batadv0: Not using interface ipvlan4 (retrying later): interface not active [ 267.627513][T12452] netlink: 'syz.1.2078': attribute type 32 has an invalid length. [ 267.782093][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 267.832046][T12463] Set syz0 is full, maxelem 0 reached [ 267.971109][T12469] netlink: 'syz.3.2083': attribute type 10 has an invalid length. [ 267.980762][T12473] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 267.992826][T12469] Ã: (slave dummy0): Releasing backup interface [ 268.021137][T12469] team0: Port device dummy0 added [ 268.536177][T12498] lo speed is unknown, defaulting to 1000 [ 268.687637][T12503] Set syz0 is full, maxelem 0 reached [ 268.910052][T12510] bridge_slave_0: left allmulticast mode [ 268.939844][T12510] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 268.950298][T12510] gretap1: left promiscuous mode [ 268.957476][T12510] gretap1: left allmulticast mode [ 269.029729][ T9011] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.057621][ T9011] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.088742][ T9011] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.112823][ T9011] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.177361][T12527] syz_tun: entered allmulticast mode [ 269.191888][T12527] dvmrp8: entered allmulticast mode [ 269.224287][T12527] lo speed is unknown, defaulting to 1000 [ 269.334194][T12532] wireguard2: entered promiscuous mode [ 269.340914][T12532] wireguard2: entered allmulticast mode [ 269.917232][T12517] syz_tun: left allmulticast mode [ 269.923222][T12517] dvmrp8: left allmulticast mode [ 271.198391][T12582] FAULT_INJECTION: forcing a failure. [ 271.198391][T12582] name failslab, interval 1, probability 0, space 0, times 0 [ 271.240210][T12582] CPU: 0 UID: 0 PID: 12582 Comm: syz.2.2124 Not tainted syzkaller #0 PREEMPT(full) [ 271.240245][T12582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.240255][T12582] Call Trace: [ 271.240262][T12582] [ 271.240269][T12582] dump_stack_lvl+0x189/0x250 [ 271.240293][T12582] ? __pfx____ratelimit+0x10/0x10 [ 271.240310][T12582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.240327][T12582] ? __pfx__printk+0x10/0x10 [ 271.240351][T12582] ? __pfx___might_resched+0x10/0x10 [ 271.240368][T12582] ? fs_reclaim_acquire+0x7d/0x100 [ 271.240396][T12582] should_fail_ex+0x414/0x560 [ 271.240421][T12582] should_failslab+0xa8/0x100 [ 271.240446][T12582] __kmalloc_noprof+0xcb/0x4f0 [ 271.240465][T12582] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 271.240491][T12582] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 271.240520][T12582] genl_family_rcv_msg_doit+0xb8/0x300 [ 271.240549][T12582] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 271.240576][T12582] ? apparmor_capable+0x137/0x1b0 [ 271.240598][T12582] ? bpf_lsm_capable+0x9/0x20 [ 271.240619][T12582] ? security_capable+0x7e/0x2e0 [ 271.240649][T12582] genl_rcv_msg+0x60e/0x790 [ 271.240678][T12582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.240696][T12582] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 271.240715][T12582] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 271.240731][T12582] ? __pfx_nl80211_post_doit+0x10/0x10 [ 271.240767][T12582] netlink_rcv_skb+0x205/0x470 [ 271.240782][T12582] ? __lock_acquire+0xab9/0xd20 [ 271.240806][T12582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.240827][T12582] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.240866][T12582] ? down_read+0x1ad/0x2e0 [ 271.240888][T12582] genl_rcv+0x28/0x40 [ 271.240906][T12582] netlink_unicast+0x82c/0x9e0 [ 271.240939][T12582] ? __pfx_netlink_unicast+0x10/0x10 [ 271.240963][T12582] ? netlink_sendmsg+0x642/0xb30 [ 271.240977][T12582] ? skb_put+0x11b/0x210 [ 271.240999][T12582] netlink_sendmsg+0x805/0xb30 [ 271.241027][T12582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.241048][T12582] ? aa_sock_msg_perm+0xf1/0x1d0 [ 271.241067][T12582] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.241084][T12582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.241102][T12582] __sock_sendmsg+0x21c/0x270 [ 271.241129][T12582] ____sys_sendmsg+0x505/0x830 [ 271.241154][T12582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.241189][T12582] ? import_iovec+0x74/0xa0 [ 271.241213][T12582] ___sys_sendmsg+0x21f/0x2a0 [ 271.241235][T12582] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.241292][T12582] ? __fget_files+0x2a/0x420 [ 271.241307][T12582] ? __fget_files+0x3a0/0x420 [ 271.241335][T12582] __x64_sys_sendmsg+0x19b/0x260 [ 271.241357][T12582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.241388][T12582] ? __pfx_ksys_write+0x10/0x10 [ 271.241415][T12582] ? do_syscall_64+0xbe/0x3b0 [ 271.241437][T12582] do_syscall_64+0xfa/0x3b0 [ 271.241453][T12582] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.241470][T12582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.241486][T12582] ? clear_bhb_loop+0x60/0xb0 [ 271.241507][T12582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.241523][T12582] RIP: 0033:0x7efe32d8ebe9 [ 271.241539][T12582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.241552][T12582] RSP: 002b:00007efe33b91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.241572][T12582] RAX: ffffffffffffffda RBX: 00007efe32fc5fa0 RCX: 00007efe32d8ebe9 [ 271.241585][T12582] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000004 [ 271.241595][T12582] RBP: 00007efe33b91090 R08: 0000000000000000 R09: 0000000000000000 [ 271.241607][T12582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.241617][T12582] R13: 00007efe32fc6038 R14: 00007efe32fc5fa0 R15: 00007ffdc8855f38 [ 271.241647][T12582] [ 271.708838][ T9322] block nbd0: Possible stuck request ffff88802573e000: control (read@0,1024B). Runtime 120 seconds [ 271.720490][ T9322] block nbd0: Possible stuck request ffff88802573e1c0: control (read@1024,1024B). Runtime 120 seconds [ 271.731958][ T9322] block nbd0: Possible stuck request ffff88802573e380: control (read@2048,1024B). Runtime 120 seconds [ 271.754376][ T9322] block nbd0: Possible stuck request ffff88802573e540: control (read@3072,1024B). Runtime 120 seconds [ 271.835526][T12594] validate_nla: 7 callbacks suppressed [ 271.835545][T12594] netlink: 'syz.2.2126': attribute type 1 has an invalid length. [ 271.849203][T12598] netlink: 'syz.3.2128': attribute type 2 has an invalid length. [ 271.874022][T12594] __nla_validate_parse: 13 callbacks suppressed [ 271.874061][T12594] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2126'. [ 271.916912][T12594] netlink: 'syz.2.2126': attribute type 2 has an invalid length. [ 271.925557][T12594] netlink: 'syz.2.2126': attribute type 1 has an invalid length. [ 271.925781][T12590] netlink: 'syz.2.2126': attribute type 12 has an invalid length. [ 271.951604][T12590] netlink: 'syz.2.2126': attribute type 29 has an invalid length. [ 271.960272][T12590] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2126'. [ 272.110418][T12616] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2135'. [ 272.127160][T12616] tipc: Enabling of bearer rejected, failed to enable media [ 272.271197][T12626] netlink: 'syz.0.2140': attribute type 3 has an invalid length. [ 272.334342][T12629] FAULT_INJECTION: forcing a failure. [ 272.334342][T12629] name failslab, interval 1, probability 0, space 0, times 0 [ 272.350395][T12629] CPU: 0 UID: 0 PID: 12629 Comm: syz.3.2139 Not tainted syzkaller #0 PREEMPT(full) [ 272.350420][T12629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.350431][T12629] Call Trace: [ 272.350438][T12629] [ 272.350446][T12629] dump_stack_lvl+0x189/0x250 [ 272.350470][T12629] ? __pfx____ratelimit+0x10/0x10 [ 272.350488][T12629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.350507][T12629] ? __pfx__printk+0x10/0x10 [ 272.350535][T12629] ? __pfx___might_resched+0x10/0x10 [ 272.350551][T12629] ? fs_reclaim_acquire+0x7d/0x100 [ 272.350577][T12629] should_fail_ex+0x414/0x560 [ 272.350601][T12629] should_failslab+0xa8/0x100 [ 272.350624][T12629] kmem_cache_alloc_noprof+0x73/0x3c0 [ 272.350645][T12629] ? __kernfs_new_node+0xd7/0x7e0 [ 272.350670][T12629] __kernfs_new_node+0xd7/0x7e0 [ 272.350686][T12629] ? __lock_acquire+0xab9/0xd20 [ 272.350716][T12629] ? __pfx___kernfs_new_node+0x10/0x10 [ 272.350736][T12629] ? kernfs_root+0x1c/0x230 [ 272.350761][T12629] ? kernfs_root+0x1c/0x230 [ 272.350775][T12629] ? kernfs_root+0x1c/0x230 [ 272.350789][T12629] ? kernfs_root+0x1c/0x230 [ 272.350810][T12629] kernfs_new_node+0x102/0x210 [ 272.350833][T12629] __kernfs_create_file+0x4b/0x2e0 [ 272.350858][T12629] sysfs_add_file_mode_ns+0x238/0x300 [ 272.350890][T12629] internal_create_group+0x66d/0x1110 [ 272.350926][T12629] ? __pfx_internal_create_group+0x10/0x10 [ 272.350957][T12629] sysfs_create_groups+0x59/0x120 [ 272.350979][T12629] device_add_attrs+0x1c4/0x5a0 [ 272.351011][T12629] ? __pfx_device_add_attrs+0x10/0x10 [ 272.351026][T12629] ? kobject_put+0x43f/0x480 [ 272.351048][T12629] ? device_add_class_symlinks+0x21f/0x240 [ 272.351069][T12629] device_add+0x496/0xb50 [ 272.351085][T12629] ? device_initialize+0x24b/0x440 [ 272.351105][T12629] wakeup_source_sysfs_add+0x1af/0x280 [ 272.351127][T12629] wakeup_source_register+0x18a/0x380 [ 272.351148][T12629] ? ep_insert+0xb93/0x19e0 [ 272.351167][T12629] ep_insert+0xef6/0x19e0 [ 272.351204][T12629] ? __pfx_ep_insert+0x10/0x10 [ 272.351239][T12629] ? ep_loop_check+0x50/0x1b0 [ 272.351266][T12629] do_epoll_ctl+0x7f4/0xe80 [ 272.351296][T12629] __x64_sys_epoll_ctl+0x163/0x1a0 [ 272.351321][T12629] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 272.351341][T12629] ? rcu_is_watching+0x15/0xb0 [ 272.351364][T12629] ? do_syscall_64+0xbe/0x3b0 [ 272.351386][T12629] do_syscall_64+0xfa/0x3b0 [ 272.351401][T12629] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.351417][T12629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.351433][T12629] ? clear_bhb_loop+0x60/0xb0 [ 272.351455][T12629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.351471][T12629] RIP: 0033:0x7fdbed98ebe9 [ 272.351487][T12629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.351502][T12629] RSP: 002b:00007fdbebbd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 272.351521][T12629] RAX: ffffffffffffffda RBX: 00007fdbedbc6090 RCX: 00007fdbed98ebe9 [ 272.351534][T12629] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 000000000000000b [ 272.351544][T12629] RBP: 00007fdbebbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 272.351554][T12629] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.351564][T12629] R13: 00007fdbedbc6128 R14: 00007fdbedbc6090 R15: 00007ffeaf536c08 [ 272.351594][T12629] [ 272.891324][T12642] lo speed is unknown, defaulting to 1000 [ 273.170123][T12655] netlink: 'syz.4.2147': attribute type 1 has an invalid length. [ 273.233440][T12657] netlink: 'syz.4.2149': attribute type 1 has an invalid length. [ 273.242085][T12657] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2149'. [ 273.251758][T12657] netlink: 'syz.4.2149': attribute type 2 has an invalid length. [ 273.467488][T12666] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2154'. [ 273.507578][T12666] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2154'. [ 273.904263][T12685] bond8: entered promiscuous mode [ 273.910200][T12685] 8021q: adding VLAN 0 to HW filter on device bond8 [ 273.943499][T12685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 273.950875][T12685] IPv6: NLM_F_CREATE should be set when creating new route [ 273.954244][T12690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2163'. [ 273.958153][T12685] IPv6: NLM_F_CREATE should be set when creating new route [ 273.974968][T12690] tc_dump_action: action bad kind [ 273.980360][T12685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.243169][T12702] FAULT_INJECTION: forcing a failure. [ 274.243169][T12702] name failslab, interval 1, probability 0, space 0, times 0 [ 274.256341][T12705] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2169'. [ 274.275350][T12700] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2168'. [ 274.317399][T12702] CPU: 1 UID: 0 PID: 12702 Comm: syz.4.2167 Not tainted syzkaller #0 PREEMPT(full) [ 274.317424][T12702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.317433][T12702] Call Trace: [ 274.317441][T12702] [ 274.317448][T12702] dump_stack_lvl+0x189/0x250 [ 274.317474][T12702] ? __pfx____ratelimit+0x10/0x10 [ 274.317492][T12702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.317511][T12702] ? __pfx__printk+0x10/0x10 [ 274.317536][T12702] ? __pfx___might_resched+0x10/0x10 [ 274.317552][T12702] ? fs_reclaim_acquire+0x7d/0x100 [ 274.317581][T12702] should_fail_ex+0x414/0x560 [ 274.317608][T12702] should_failslab+0xa8/0x100 [ 274.317633][T12702] __kmalloc_noprof+0xcb/0x4f0 [ 274.317652][T12702] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 274.317680][T12702] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 274.317709][T12702] genl_family_rcv_msg_doit+0xb8/0x300 [ 274.317737][T12702] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 274.317766][T12702] ? apparmor_capable+0x137/0x1b0 [ 274.317798][T12702] ? bpf_lsm_capable+0x9/0x20 [ 274.317818][T12702] ? security_capable+0x7e/0x2e0 [ 274.317849][T12702] genl_rcv_msg+0x60e/0x790 [ 274.317876][T12702] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.317894][T12702] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 274.317913][T12702] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 274.317928][T12702] ? __pfx_nl80211_post_doit+0x10/0x10 [ 274.317950][T12702] ? __asan_memcpy+0x40/0x70 [ 274.317968][T12702] ? __pfx_ref_tracker_free+0x10/0x10 [ 274.317998][T12702] netlink_rcv_skb+0x205/0x470 [ 274.318013][T12702] ? __lock_acquire+0xab9/0xd20 [ 274.318034][T12702] ? __pfx_genl_rcv_msg+0x10/0x10 [ 274.318054][T12702] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.318091][T12702] ? down_read+0x1ad/0x2e0 [ 274.318112][T12702] genl_rcv+0x28/0x40 [ 274.318129][T12702] netlink_unicast+0x82c/0x9e0 [ 274.318166][T12702] ? __pfx_netlink_unicast+0x10/0x10 [ 274.318191][T12702] ? netlink_sendmsg+0x642/0xb30 [ 274.318206][T12702] ? skb_put+0x11b/0x210 [ 274.318228][T12702] netlink_sendmsg+0x805/0xb30 [ 274.318255][T12702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.318276][T12702] ? aa_sock_msg_perm+0xf1/0x1d0 [ 274.318295][T12702] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.318312][T12702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.318330][T12702] __sock_sendmsg+0x21c/0x270 [ 274.318357][T12702] ____sys_sendmsg+0x505/0x830 [ 274.318382][T12702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.318411][T12702] ? import_iovec+0x74/0xa0 [ 274.318435][T12702] ___sys_sendmsg+0x21f/0x2a0 [ 274.318456][T12702] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.318508][T12702] ? __fget_files+0x2a/0x420 [ 274.318523][T12702] ? __fget_files+0x3a0/0x420 [ 274.318546][T12702] __x64_sys_sendmsg+0x19b/0x260 [ 274.318566][T12702] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.318594][T12702] ? __pfx_ksys_write+0x10/0x10 [ 274.318612][T12702] ? rcu_is_watching+0x15/0xb0 [ 274.318635][T12702] ? do_syscall_64+0xbe/0x3b0 [ 274.318658][T12702] do_syscall_64+0xfa/0x3b0 [ 274.318673][T12702] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.318690][T12702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.318707][T12702] ? clear_bhb_loop+0x60/0xb0 [ 274.318727][T12702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.318743][T12702] RIP: 0033:0x7f3143b8ebe9 [ 274.318759][T12702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.318781][T12702] RSP: 002b:00007f3144a3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.318800][T12702] RAX: ffffffffffffffda RBX: 00007f3143dc6090 RCX: 00007f3143b8ebe9 [ 274.318812][T12702] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 0000000000000005 [ 274.318824][T12702] RBP: 00007f3144a3d090 R08: 0000000000000000 R09: 0000000000000000 [ 274.318835][T12702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.318845][T12702] R13: 00007f3143dc6128 R14: 00007f3143dc6090 R15: 00007ffe7d0d8048 [ 274.318877][T12702] [ 274.867879][T12722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 275.190775][T12747] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2182'. [ 275.348846][T12758] syzkaller1: entered allmulticast mode [ 275.682698][T12780] netlink: zone id is out of range [ 275.689744][T12780] netlink: zone id is out of range [ 275.697993][T12780] netlink: zone id is out of range [ 275.704345][T12780] netlink: zone id is out of range [ 275.711793][T12780] netlink: zone id is out of range [ 275.719609][T12780] netlink: zone id is out of range [ 275.733152][T12780] netlink: zone id is out of range [ 275.740025][T12780] netlink: zone id is out of range [ 275.745740][T12780] netlink: zone id is out of range [ 275.751163][T12780] netlink: zone id is out of range [ 276.191897][T12807] team0: Port device geneve0 added [ 276.515350][T12817] tipc: Started in network mode [ 276.521871][T12817] tipc: Node identity d66b1236bf33, cluster identity 4711 [ 276.551941][T12817] tipc: Enabled bearer , priority 0 [ 276.591454][T12826] syzkaller0: entered promiscuous mode [ 276.624304][T12826] syzkaller0: entered allmulticast mode [ 276.702606][T12839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 276.709924][T12839] IPv6: NLM_F_CREATE should be set when creating new route [ 276.716702][T12832] 8021q: adding VLAN 0 to HW filter on device bond9 [ 276.784093][T12824] vlan3: entered allmulticast mode [ 276.798971][T12824] veth1: entered allmulticast mode [ 276.886348][T12848] validate_nla: 15 callbacks suppressed [ 276.886367][T12848] netlink: 'syz.3.2220': attribute type 4 has an invalid length. [ 276.905865][T12848] __nla_validate_parse: 10 callbacks suppressed [ 276.905881][T12848] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2220'. [ 276.972376][T12853] netlink: 'syz.1.2221': attribute type 4 has an invalid length. [ 276.987910][T12853] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2221'. [ 277.001774][T12855] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2222'. [ 277.174306][T12815] tipc: Resetting bearer [ 277.227821][T12815] tipc: Disabling bearer [ 277.458920][T12872] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2229'. [ 277.473182][T12870] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2228'. [ 277.773677][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2233'. [ 278.047521][T12904] FAULT_INJECTION: forcing a failure. [ 278.047521][T12904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.093415][T12904] CPU: 0 UID: 0 PID: 12904 Comm: syz.3.2240 Not tainted syzkaller #0 PREEMPT(full) [ 278.093439][T12904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 278.093449][T12904] Call Trace: [ 278.093456][T12904] [ 278.093464][T12904] dump_stack_lvl+0x189/0x250 [ 278.093489][T12904] ? __pfx____ratelimit+0x10/0x10 [ 278.093504][T12904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.093520][T12904] ? __pfx__printk+0x10/0x10 [ 278.093537][T12904] ? __might_fault+0xb0/0x130 [ 278.093563][T12904] should_fail_ex+0x414/0x560 [ 278.093589][T12904] _copy_from_user+0x2d/0xb0 [ 278.093608][T12904] ___sys_sendmsg+0x158/0x2a0 [ 278.093631][T12904] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.093695][T12904] ? __might_fault+0xb0/0x130 [ 278.093726][T12904] __sys_sendmmsg+0x227/0x430 [ 278.093751][T12904] ? __pfx___sys_sendmmsg+0x10/0x10 [ 278.093767][T12904] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 278.093810][T12904] ? ksys_write+0x22a/0x250 [ 278.093833][T12904] ? __pfx_ksys_write+0x10/0x10 [ 278.093850][T12904] ? rcu_is_watching+0x15/0xb0 [ 278.093874][T12904] __x64_sys_sendmmsg+0xa0/0xc0 [ 278.093894][T12904] do_syscall_64+0xfa/0x3b0 [ 278.093910][T12904] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.093926][T12904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.093942][T12904] ? clear_bhb_loop+0x60/0xb0 [ 278.093960][T12904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.093975][T12904] RIP: 0033:0x7fdbed98ebe9 [ 278.093991][T12904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.094004][T12904] RSP: 002b:00007fdbebbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 278.094022][T12904] RAX: ffffffffffffffda RBX: 00007fdbedbc5fa0 RCX: 00007fdbed98ebe9 [ 278.094035][T12904] RDX: 0000000000000300 RSI: 0000200000000740 RDI: 0000000000000003 [ 278.094046][T12904] RBP: 00007fdbebbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 278.094057][T12904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 278.094067][T12904] R13: 00007fdbedbc6038 R14: 00007fdbedbc5fa0 R15: 00007ffeaf536c08 [ 278.094094][T12904] [ 279.062051][T12936] netlink: 'syz.0.2248': attribute type 10 has an invalid length. [ 279.201173][T12934] FAULT_INJECTION: forcing a failure. [ 279.201173][T12934] name failslab, interval 1, probability 0, space 0, times 0 [ 279.221921][T12934] CPU: 1 UID: 0 PID: 12934 Comm: syz.1.2251 Not tainted syzkaller #0 PREEMPT(full) [ 279.221946][T12934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 279.221957][T12934] Call Trace: [ 279.221964][T12934] [ 279.221972][T12934] dump_stack_lvl+0x189/0x250 [ 279.221996][T12934] ? __pfx____ratelimit+0x10/0x10 [ 279.222015][T12934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.222034][T12934] ? __pfx__printk+0x10/0x10 [ 279.222062][T12934] ? __pfx___might_resched+0x10/0x10 [ 279.222078][T12934] ? fs_reclaim_acquire+0x7d/0x100 [ 279.222107][T12934] should_fail_ex+0x414/0x560 [ 279.222134][T12934] should_failslab+0xa8/0x100 [ 279.222158][T12934] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 279.222179][T12934] ? __alloc_skb+0x112/0x2d0 [ 279.222200][T12934] __alloc_skb+0x112/0x2d0 [ 279.222223][T12934] netlink_ack+0x146/0xa50 [ 279.222237][T12934] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.222255][T12934] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 279.222275][T12934] ? __pfx_nl80211_post_doit+0x10/0x10 [ 279.222311][T12934] netlink_rcv_skb+0x28c/0x470 [ 279.222325][T12934] ? __lock_acquire+0xab9/0xd20 [ 279.222358][T12934] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.222379][T12934] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.222413][T12934] ? down_read+0x1ad/0x2e0 [ 279.222434][T12934] genl_rcv+0x28/0x40 [ 279.222451][T12934] netlink_unicast+0x82c/0x9e0 [ 279.222480][T12934] ? __pfx_netlink_unicast+0x10/0x10 [ 279.222501][T12934] ? netlink_sendmsg+0x642/0xb30 [ 279.222514][T12934] ? skb_put+0x11b/0x210 [ 279.222532][T12934] netlink_sendmsg+0x805/0xb30 [ 279.222558][T12934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.222578][T12934] ? aa_sock_msg_perm+0xf1/0x1d0 [ 279.222596][T12934] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 279.222613][T12934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.222629][T12934] __sock_sendmsg+0x21c/0x270 [ 279.222654][T12934] ____sys_sendmsg+0x505/0x830 [ 279.222678][T12934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.222704][T12934] ? import_iovec+0x74/0xa0 [ 279.222727][T12934] ___sys_sendmsg+0x21f/0x2a0 [ 279.222748][T12934] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.222804][T12934] ? __fget_files+0x2a/0x420 [ 279.222818][T12934] ? __fget_files+0x3a0/0x420 [ 279.222845][T12934] __x64_sys_sendmsg+0x19b/0x260 [ 279.222866][T12934] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 279.222895][T12934] ? __pfx_ksys_write+0x10/0x10 [ 279.222912][T12934] ? rcu_is_watching+0x15/0xb0 [ 279.222935][T12934] ? do_syscall_64+0xbe/0x3b0 [ 279.222957][T12934] do_syscall_64+0xfa/0x3b0 [ 279.222973][T12934] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.222989][T12934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.223005][T12934] ? clear_bhb_loop+0x60/0xb0 [ 279.223025][T12934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.223041][T12934] RIP: 0033:0x7fdb5cd8ebe9 [ 279.223057][T12934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.223071][T12934] RSP: 002b:00007fdb5db60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.223090][T12934] RAX: ffffffffffffffda RBX: 00007fdb5cfc5fa0 RCX: 00007fdb5cd8ebe9 [ 279.223102][T12934] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000004 [ 279.223113][T12934] RBP: 00007fdb5db60090 R08: 0000000000000000 R09: 0000000000000000 [ 279.223123][T12934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.223133][T12934] R13: 00007fdb5cfc6038 R14: 00007fdb5cfc5fa0 R15: 00007ffdb7d059d8 [ 279.223162][T12934] [ 279.582010][T12936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.867018][T12945] netlink: 'syz.2.2254': attribute type 12 has an invalid length. [ 279.879513][T12945] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2254'. [ 281.078316][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 281.093435][T12976] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2265'. [ 281.105387][T12976] net_ratelimit: 16 callbacks suppressed [ 281.105405][T12976] Set syz0 is full, maxelem 0 reached [ 281.163617][T12978] FAULT_INJECTION: forcing a failure. [ 281.163617][T12978] name failslab, interval 1, probability 0, space 0, times 0 [ 281.183221][T12978] CPU: 0 UID: 0 PID: 12978 Comm: syz.2.2266 Not tainted syzkaller #0 PREEMPT(full) [ 281.183244][T12978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.183254][T12978] Call Trace: [ 281.183261][T12978] [ 281.183269][T12978] dump_stack_lvl+0x189/0x250 [ 281.183293][T12978] ? __pfx____ratelimit+0x10/0x10 [ 281.183310][T12978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.183327][T12978] ? __pfx__printk+0x10/0x10 [ 281.183353][T12978] ? __pfx___might_resched+0x10/0x10 [ 281.183368][T12978] ? fs_reclaim_acquire+0x7d/0x100 [ 281.183395][T12978] should_fail_ex+0x414/0x560 [ 281.183422][T12978] should_failslab+0xa8/0x100 [ 281.183445][T12978] __kmalloc_noprof+0xcb/0x4f0 [ 281.183464][T12978] ? bpf_test_init+0xc2/0x170 [ 281.183489][T12978] bpf_test_init+0xc2/0x170 [ 281.183516][T12978] bpf_prog_test_run_xdp+0x37c/0x1000 [ 281.183548][T12978] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 281.183571][T12978] ? __fget_files+0x2a/0x420 [ 281.183592][T12978] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 281.183608][T12978] bpf_prog_test_run+0x2c7/0x340 [ 281.183634][T12978] __sys_bpf+0x581/0x870 [ 281.183656][T12978] ? __pfx___sys_bpf+0x10/0x10 [ 281.183688][T12978] ? ksys_write+0x22a/0x250 [ 281.183710][T12978] ? __pfx_ksys_write+0x10/0x10 [ 281.183728][T12978] ? rcu_is_watching+0x15/0xb0 [ 281.183756][T12978] __x64_sys_bpf+0x7c/0x90 [ 281.183776][T12978] do_syscall_64+0xfa/0x3b0 [ 281.183792][T12978] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.183809][T12978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.183825][T12978] ? clear_bhb_loop+0x60/0xb0 [ 281.183845][T12978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.183861][T12978] RIP: 0033:0x7efe32d8ebe9 [ 281.183877][T12978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.183892][T12978] RSP: 002b:00007efe33b91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.183910][T12978] RAX: ffffffffffffffda RBX: 00007efe32fc5fa0 RCX: 00007efe32d8ebe9 [ 281.183922][T12978] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 281.183933][T12978] RBP: 00007efe33b91090 R08: 0000000000000000 R09: 0000000000000000 [ 281.183944][T12978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.183954][T12978] R13: 00007efe32fc6038 R14: 00007efe32fc5fa0 R15: 00007ffdc8855f38 [ 281.183983][T12978] [ 281.892869][T13000] netlink: 'syz.0.2274': attribute type 15 has an invalid length. [ 282.206275][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2278'. [ 282.277544][T13011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2278'. [ 282.927786][T13019] lo speed is unknown, defaulting to 1000 [ 282.996752][T13022] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2280'. [ 283.021260][T13018] lo speed is unknown, defaulting to 1000 [ 283.059108][T13023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2280'. [ 283.327775][T13023] team0: Port device macvlan2 removed [ 284.172635][T13037] netlink: 'syz.0.2285': attribute type 1 has an invalid length. [ 284.210457][T13037] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2285'. [ 284.243724][T13041] FAULT_INJECTION: forcing a failure. [ 284.243724][T13041] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 284.269110][T13041] CPU: 0 UID: 0 PID: 13041 Comm: syz.1.2288 Not tainted syzkaller #0 PREEMPT(full) [ 284.269134][T13041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.269144][T13041] Call Trace: [ 284.269152][T13041] [ 284.269159][T13041] dump_stack_lvl+0x189/0x250 [ 284.269184][T13041] ? __pfx____ratelimit+0x10/0x10 [ 284.269202][T13041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.269220][T13041] ? __pfx__printk+0x10/0x10 [ 284.269243][T13041] ? fs_reclaim_acquire+0x7d/0x100 [ 284.269276][T13041] should_fail_ex+0x414/0x560 [ 284.269300][T13041] prepare_alloc_pages+0x213/0x610 [ 284.269321][T13041] __alloc_frozen_pages_noprof+0x123/0x370 [ 284.269340][T13041] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 284.269355][T13041] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.269373][T13041] ? exc_page_fault+0x9f/0xf0 [ 284.269390][T13041] ? policy_nodemask+0x27c/0x720 [ 284.269415][T13041] alloc_pages_mpol+0x232/0x4a0 [ 284.269440][T13041] alloc_pages_noprof+0xa9/0x190 [ 284.269464][T13041] bpf_prog_test_run_xdp+0xb8d/0x1000 [ 284.269496][T13041] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 284.269517][T13041] ? __fget_files+0x2a/0x420 [ 284.269538][T13041] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 284.269556][T13041] bpf_prog_test_run+0x2c7/0x340 [ 284.269583][T13041] __sys_bpf+0x581/0x870 [ 284.269603][T13041] ? __pfx___sys_bpf+0x10/0x10 [ 284.269635][T13041] ? ksys_write+0x22a/0x250 [ 284.269655][T13041] ? __pfx_ksys_write+0x10/0x10 [ 284.269671][T13041] ? rcu_is_watching+0x15/0xb0 [ 284.269696][T13041] __x64_sys_bpf+0x7c/0x90 [ 284.269716][T13041] do_syscall_64+0xfa/0x3b0 [ 284.269733][T13041] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.269749][T13041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.269765][T13041] ? clear_bhb_loop+0x60/0xb0 [ 284.269786][T13041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.269799][T13041] RIP: 0033:0x7fdb5cd8ebe9 [ 284.269815][T13041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.269828][T13041] RSP: 002b:00007fdb5db60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 284.269846][T13041] RAX: ffffffffffffffda RBX: 00007fdb5cfc5fa0 RCX: 00007fdb5cd8ebe9 [ 284.269858][T13041] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 284.269869][T13041] RBP: 00007fdb5db60090 R08: 0000000000000000 R09: 0000000000000000 [ 284.269880][T13041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.269890][T13041] R13: 00007fdb5cfc6038 R14: 00007fdb5cfc5fa0 R15: 00007ffdb7d059d8 [ 284.269915][T13041] [ 284.590213][T13050] netlink: 'syz.3.2290': attribute type 1 has an invalid length. [ 284.598446][T13050] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2290'. [ 284.620372][T13050] netlink: 'syz.3.2290': attribute type 2 has an invalid length. [ 284.642973][T13050] netlink: 'syz.3.2290': attribute type 1 has an invalid length. [ 284.703511][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 284.957414][T13063] netlink: 'syz.2.2292': attribute type 4 has an invalid length. [ 284.966270][T13063] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2292'. [ 285.037544][T13065] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2295'. [ 285.080173][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2295'. [ 285.153219][T13071] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 285.164834][T13071] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 285.209541][T13076] netlink: 'syz.3.2300': attribute type 1 has an invalid length. [ 285.209552][T13071] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 285.238086][T13076] netlink: 'syz.3.2300': attribute type 1 has an invalid length. [ 285.444508][T13091] netlink: 'syz.3.2300': attribute type 1 has an invalid length. [ 285.500727][T13091] 8021q: adding VLAN 0 to HW filter on device bond5 [ 285.513588][T13094] netlink: 'syz.4.2305': attribute type 1 has an invalid length. [ 285.522629][T13094] netlink: 'syz.4.2305': attribute type 2 has an invalid length. [ 285.585971][T13076] vlan3: entered allmulticast mode [ 285.591241][T13076] veth1: entered allmulticast mode [ 285.601604][T13076] bond5: (slave vlan3): making interface the new active one [ 285.610509][T13076] bond5: (slave vlan3): Enslaving as an active interface with an up link [ 285.729332][T13100] Set syz0 is full, maxelem 0 reached [ 285.735481][T13100] FAULT_INJECTION: forcing a failure. [ 285.735481][T13100] name failslab, interval 1, probability 0, space 0, times 0 [ 285.748741][T13100] CPU: 0 UID: 0 PID: 13100 Comm: syz.4.2307 Not tainted syzkaller #0 PREEMPT(full) [ 285.748762][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 285.748771][T13100] Call Trace: [ 285.748777][T13100] [ 285.748784][T13100] dump_stack_lvl+0x189/0x250 [ 285.748807][T13100] ? __pfx____ratelimit+0x10/0x10 [ 285.748824][T13100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.748840][T13100] ? __pfx__printk+0x10/0x10 [ 285.748856][T13100] ? nfnetlink_rcv+0x26a/0x2520 [ 285.748876][T13100] ? ____sys_sendmsg+0x505/0x830 [ 285.748891][T13100] ? __x64_sys_sendmsg+0x19b/0x260 [ 285.748916][T13100] should_fail_ex+0x414/0x560 [ 285.748942][T13100] should_failslab+0xa8/0x100 [ 285.748964][T13100] kmem_cache_alloc_noprof+0x73/0x3c0 [ 285.748984][T13100] ? skb_clone+0x212/0x3a0 [ 285.749009][T13100] skb_clone+0x212/0x3a0 [ 285.749031][T13100] __netlink_deliver_tap+0x404/0x850 [ 285.749062][T13100] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.749081][T13100] netlink_deliver_tap+0x19c/0x1b0 [ 285.749098][T13100] netlink_sendskb+0x68/0x140 [ 285.749122][T13100] netlink_unicast+0x397/0x9e0 [ 285.749141][T13100] ? __asan_memcpy+0x40/0x70 [ 285.749169][T13100] ? __pfx_netlink_unicast+0x10/0x10 [ 285.749199][T13100] netlink_rcv_skb+0x28c/0x470 [ 285.749217][T13100] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 285.749241][T13100] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.749270][T13100] ? bpf_lsm_capable+0x9/0x20 [ 285.749290][T13100] ? security_capable+0x7e/0x2e0 [ 285.749321][T13100] nfnetlink_rcv+0x26a/0x2520 [ 285.749346][T13100] ? __dev_queue_xmit+0x1d79/0x3b50 [ 285.749377][T13100] ? __dev_queue_xmit+0x27b/0x3b50 [ 285.749411][T13100] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 285.749432][T13100] ? __pfx___dev_queue_xmit+0x10/0x10 [ 285.749467][T13100] ? ref_tracker_free+0x63a/0x7d0 [ 285.749488][T13100] ? __asan_memcpy+0x40/0x70 [ 285.749504][T13100] ? __pfx_ref_tracker_free+0x10/0x10 [ 285.749523][T13100] ? __skb_clone+0x63/0x7a0 [ 285.749545][T13100] ? __skb_clone+0x483/0x7a0 [ 285.749570][T13100] ? skb_clone+0x246/0x3a0 [ 285.749591][T13100] ? __netlink_deliver_tap+0x807/0x850 [ 285.749607][T13100] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.749637][T13100] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.749662][T13100] netlink_unicast+0x82c/0x9e0 [ 285.749691][T13100] ? __pfx_netlink_unicast+0x10/0x10 [ 285.749715][T13100] ? netlink_sendmsg+0x642/0xb30 [ 285.749728][T13100] ? skb_put+0x11b/0x210 [ 285.749752][T13100] netlink_sendmsg+0x805/0xb30 [ 285.749780][T13100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.749801][T13100] ? aa_sock_msg_perm+0xf1/0x1d0 [ 285.749820][T13100] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.749837][T13100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.749855][T13100] __sock_sendmsg+0x21c/0x270 [ 285.749880][T13100] ____sys_sendmsg+0x505/0x830 [ 285.749904][T13100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.749933][T13100] ? import_iovec+0x74/0xa0 [ 285.749957][T13100] ___sys_sendmsg+0x21f/0x2a0 [ 285.749978][T13100] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.750038][T13100] ? __fget_files+0x2a/0x420 [ 285.750052][T13100] ? __fget_files+0x3a0/0x420 [ 285.750080][T13100] __x64_sys_sendmsg+0x19b/0x260 [ 285.750102][T13100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.750132][T13100] ? __pfx_ksys_write+0x10/0x10 [ 285.750150][T13100] ? rcu_is_watching+0x15/0xb0 [ 285.750173][T13100] ? do_syscall_64+0xbe/0x3b0 [ 285.750196][T13100] do_syscall_64+0xfa/0x3b0 [ 285.750212][T13100] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.750228][T13100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.750246][T13100] ? clear_bhb_loop+0x60/0xb0 [ 285.750265][T13100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.750280][T13100] RIP: 0033:0x7f3143b8ebe9 [ 285.750296][T13100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.750310][T13100] RSP: 002b:00007f3144a5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.750330][T13100] RAX: ffffffffffffffda RBX: 00007f3143dc5fa0 RCX: 00007f3143b8ebe9 [ 285.750343][T13100] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000003 [ 285.750353][T13100] RBP: 00007f3144a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 285.750364][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.750374][T13100] R13: 00007f3143dc6038 R14: 00007f3143dc5fa0 R15: 00007ffe7d0d8048 [ 285.750403][T13100] [ 286.697107][T13136] Ã: renamed from bond0 (while UP) [ 287.186892][T13160] FAULT_INJECTION: forcing a failure. [ 287.186892][T13160] name failslab, interval 1, probability 0, space 0, times 0 [ 287.200588][T13160] CPU: 1 UID: 0 PID: 13160 Comm: syz.1.2329 Not tainted syzkaller #0 PREEMPT(full) [ 287.200613][T13160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.200623][T13160] Call Trace: [ 287.200630][T13160] [ 287.200637][T13160] dump_stack_lvl+0x189/0x250 [ 287.200662][T13160] ? __pfx____ratelimit+0x10/0x10 [ 287.200680][T13160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.200707][T13160] ? __pfx__printk+0x10/0x10 [ 287.200736][T13160] ? __pfx___might_resched+0x10/0x10 [ 287.200751][T13160] ? fs_reclaim_acquire+0x7d/0x100 [ 287.200780][T13160] should_fail_ex+0x414/0x560 [ 287.200808][T13160] should_failslab+0xa8/0x100 [ 287.200833][T13160] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 287.200856][T13160] ? __alloc_skb+0x112/0x2d0 [ 287.200879][T13160] __alloc_skb+0x112/0x2d0 [ 287.200902][T13160] netlink_ack+0x146/0xa50 [ 287.200917][T13160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.200936][T13160] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 287.200956][T13160] ? __pfx_nl80211_post_doit+0x10/0x10 [ 287.200992][T13160] netlink_rcv_skb+0x28c/0x470 [ 287.201007][T13160] ? __lock_acquire+0xab9/0xd20 [ 287.201030][T13160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.201053][T13160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.201091][T13160] ? down_read+0x1ad/0x2e0 [ 287.201115][T13160] genl_rcv+0x28/0x40 [ 287.201133][T13160] netlink_unicast+0x82c/0x9e0 [ 287.201165][T13160] ? __pfx_netlink_unicast+0x10/0x10 [ 287.201191][T13160] ? netlink_sendmsg+0x642/0xb30 [ 287.201207][T13160] ? skb_put+0x11b/0x210 [ 287.201230][T13160] netlink_sendmsg+0x805/0xb30 [ 287.201258][T13160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.201280][T13160] ? aa_sock_msg_perm+0xf1/0x1d0 [ 287.201300][T13160] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.201318][T13160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.201338][T13160] __sock_sendmsg+0x21c/0x270 [ 287.201365][T13160] ____sys_sendmsg+0x505/0x830 [ 287.201391][T13160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.201422][T13160] ? import_iovec+0x74/0xa0 [ 287.201446][T13160] ___sys_sendmsg+0x21f/0x2a0 [ 287.201468][T13160] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.201530][T13160] ? __fget_files+0x2a/0x420 [ 287.201545][T13160] ? __fget_files+0x3a0/0x420 [ 287.201573][T13160] __x64_sys_sendmsg+0x19b/0x260 [ 287.201597][T13160] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.201627][T13160] ? __pfx_ksys_write+0x10/0x10 [ 287.201655][T13160] ? do_syscall_64+0xbe/0x3b0 [ 287.201678][T13160] do_syscall_64+0xfa/0x3b0 [ 287.201695][T13160] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.201717][T13160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.201735][T13160] ? clear_bhb_loop+0x60/0xb0 [ 287.201756][T13160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.201773][T13160] RIP: 0033:0x7fdb5cd8ebe9 [ 287.201791][T13160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.201807][T13160] RSP: 002b:00007fdb5db60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.201828][T13160] RAX: ffffffffffffffda RBX: 00007fdb5cfc5fa0 RCX: 00007fdb5cd8ebe9 [ 287.201842][T13160] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000004 [ 287.201854][T13160] RBP: 00007fdb5db60090 R08: 0000000000000000 R09: 0000000000000000 [ 287.201865][T13160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.201876][T13160] R13: 00007fdb5cfc6038 R14: 00007fdb5cfc5fa0 R15: 00007ffdb7d059d8 [ 287.201908][T13160] [ 287.708574][T13169] __nla_validate_parse: 6 callbacks suppressed [ 287.708593][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2332'. [ 287.728040][T13169] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2332'. [ 287.806189][T13179] Set syz0 is full, maxelem 0 reached [ 288.241814][T13192] lo speed is unknown, defaulting to 1000 [ 289.015291][T13225] wireguard1: entered promiscuous mode [ 289.030683][T13225] wireguard1: entered allmulticast mode [ 289.298673][T13233] FAULT_INJECTION: forcing a failure. [ 289.298673][T13233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.325231][T13233] CPU: 0 UID: 0 PID: 13233 Comm: syz.1.2350 Not tainted syzkaller #0 PREEMPT(full) [ 289.325257][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.325268][T13233] Call Trace: [ 289.325276][T13233] [ 289.325285][T13233] dump_stack_lvl+0x189/0x250 [ 289.325319][T13233] ? __pfx____ratelimit+0x10/0x10 [ 289.325338][T13233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.325358][T13233] ? __pfx__printk+0x10/0x10 [ 289.325380][T13233] ? __might_fault+0xb0/0x130 [ 289.325414][T13233] should_fail_ex+0x414/0x560 [ 289.325442][T13233] _copy_from_user+0x2d/0xb0 [ 289.325463][T13233] do_sock_getsockopt+0x17d/0x450 [ 289.325486][T13233] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 289.325505][T13233] ? write_ibpb+0x30/0x40 [ 289.325521][T13233] ? __fget_files+0x3a0/0x420 [ 289.325537][T13233] ? __fget_files+0x2a/0x420 [ 289.325560][T13233] __x64_sys_getsockopt+0x1a5/0x250 [ 289.325578][T13233] ? write_ibpb+0x30/0x40 [ 289.325597][T13233] ? write_ibpb+0x30/0x40 [ 289.325619][T13233] do_syscall_64+0xfa/0x3b0 [ 289.325635][T13233] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.325653][T13233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.325670][T13233] ? clear_bhb_loop+0x60/0xb0 [ 289.325692][T13233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.325709][T13233] RIP: 0033:0x7fdb5cd8ebe9 [ 289.325726][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.325742][T13233] RSP: 002b:00007fdb5db60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 289.325762][T13233] RAX: ffffffffffffffda RBX: 00007fdb5cfc5fa0 RCX: 00007fdb5cd8ebe9 [ 289.325775][T13233] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 289.325787][T13233] RBP: 00007fdb5db60090 R08: 0000200000000000 R09: 0000000000000000 [ 289.325799][T13233] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 289.325809][T13233] R13: 00007fdb5cfc6038 R14: 00007fdb5cfc5fa0 R15: 00007ffdb7d059d8 [ 289.325839][T13233] [ 289.569455][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2352'. [ 289.931523][T13258] validate_nla: 5 callbacks suppressed [ 289.931539][T13258] netlink: 'syz.2.2359': attribute type 2 has an invalid length. [ 289.977967][T13258] k›*·]‘: entered promiscuous mode [ 290.021188][T13265] netlink: 'syz.0.2360': attribute type 8 has an invalid length. [ 290.051574][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2360'. [ 290.131440][T13258] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.174223][T13258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.186714][T13278] FAULT_INJECTION: forcing a failure. [ 290.186714][T13278] name failslab, interval 1, probability 0, space 0, times 0 [ 290.209901][T13278] CPU: 0 UID: 0 PID: 13278 Comm: syz.4.2366 Not tainted syzkaller #0 PREEMPT(full) [ 290.209925][T13278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.209936][T13278] Call Trace: [ 290.209943][T13278] [ 290.209952][T13278] dump_stack_lvl+0x189/0x250 [ 290.209975][T13278] ? __pfx____ratelimit+0x10/0x10 [ 290.209992][T13278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.210010][T13278] ? __pfx__printk+0x10/0x10 [ 290.210035][T13278] ? __pfx___might_resched+0x10/0x10 [ 290.210056][T13278] should_fail_ex+0x414/0x560 [ 290.210082][T13278] should_failslab+0xa8/0x100 [ 290.210106][T13278] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 290.210126][T13278] ? __alloc_skb+0x112/0x2d0 [ 290.210145][T13278] __alloc_skb+0x112/0x2d0 [ 290.210164][T13278] netlink_sendmsg+0x5c6/0xb30 [ 290.210191][T13278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.210212][T13278] ? aa_sock_msg_perm+0xf1/0x1d0 [ 290.210230][T13278] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 290.210249][T13278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.210266][T13278] __sock_sendmsg+0x21c/0x270 [ 290.210292][T13278] ____sys_sendmsg+0x505/0x830 [ 290.210317][T13278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.210347][T13278] ? import_iovec+0x74/0xa0 [ 290.210370][T13278] ___sys_sendmsg+0x21f/0x2a0 [ 290.210391][T13278] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.210453][T13278] ? __fget_files+0x2a/0x420 [ 290.210469][T13278] ? __fget_files+0x3a0/0x420 [ 290.210496][T13278] __x64_sys_sendmsg+0x19b/0x260 [ 290.210517][T13278] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 290.210544][T13278] ? __pfx_ksys_write+0x10/0x10 [ 290.210563][T13278] ? rcu_is_watching+0x15/0xb0 [ 290.210586][T13278] ? do_syscall_64+0xbe/0x3b0 [ 290.210608][T13278] do_syscall_64+0xfa/0x3b0 [ 290.210624][T13278] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.210641][T13278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.210658][T13278] ? clear_bhb_loop+0x60/0xb0 [ 290.210678][T13278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.210694][T13278] RIP: 0033:0x7f3143b8ebe9 [ 290.210709][T13278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.210724][T13278] RSP: 002b:00007f3144a5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.210742][T13278] RAX: ffffffffffffffda RBX: 00007f3143dc5fa0 RCX: 00007f3143b8ebe9 [ 290.210755][T13278] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 290.210764][T13278] RBP: 00007f3144a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 290.210774][T13278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.210784][T13278] R13: 00007f3143dc6038 R14: 00007f3143dc5fa0 R15: 00007ffe7d0d8048 [ 290.210813][T13278] [ 290.309918][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2364'. [ 290.673145][T13289] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2367'. [ 290.688836][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2367'. [ 290.763247][T13281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'. [ 290.876877][T13296] netlink: 'syz.2.2370': attribute type 4 has an invalid length. [ 290.921159][T13300] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2371'. [ 290.930712][T13297] netlink: 'syz.2.2370': attribute type 4 has an invalid length. [ 291.002585][T13296] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2370'. [ 291.148944][T13305] erspan0: entered promiscuous mode [ 291.155779][T13305] macvtap2: entered promiscuous mode [ 291.161251][T13305] macvtap2: entered allmulticast mode [ 291.173593][T13305] erspan0: entered allmulticast mode [ 291.704365][T13326] Set syz0 is full, maxelem 0 reached [ 291.809783][T13332] FAULT_INJECTION: forcing a failure. [ 291.809783][T13332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.842052][T13334] netlink: 'syz.1.2379': attribute type 1 has an invalid length. [ 291.853232][T13332] CPU: 1 UID: 0 PID: 13332 Comm: syz.3.2378 Not tainted syzkaller #0 PREEMPT(full) [ 291.853257][T13332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.853268][T13332] Call Trace: [ 291.853276][T13332] [ 291.853284][T13332] dump_stack_lvl+0x189/0x250 [ 291.853310][T13332] ? __pfx____ratelimit+0x10/0x10 [ 291.853329][T13332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.853347][T13332] ? __pfx__printk+0x10/0x10 [ 291.853369][T13332] ? __might_fault+0xb0/0x130 [ 291.853403][T13332] should_fail_ex+0x414/0x560 [ 291.853427][T13332] _copy_from_user+0x2d/0xb0 [ 291.853447][T13332] bpf_prog_test_run_xdp+0xd05/0x1000 [ 291.853483][T13332] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 291.853507][T13332] ? __fget_files+0x2a/0x420 [ 291.853528][T13332] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 291.853546][T13332] bpf_prog_test_run+0x2c7/0x340 [ 291.853573][T13332] __sys_bpf+0x581/0x870 [ 291.853596][T13332] ? __pfx___sys_bpf+0x10/0x10 [ 291.853630][T13332] ? ksys_write+0x22a/0x250 [ 291.853653][T13332] ? __pfx_ksys_write+0x10/0x10 [ 291.853671][T13332] ? rcu_is_watching+0x15/0xb0 [ 291.853698][T13332] __x64_sys_bpf+0x7c/0x90 [ 291.853719][T13332] do_syscall_64+0xfa/0x3b0 [ 291.853734][T13332] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.853749][T13332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.853765][T13332] ? clear_bhb_loop+0x60/0xb0 [ 291.853783][T13332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.853798][T13332] RIP: 0033:0x7fdbed98ebe9 [ 291.853812][T13332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.853826][T13332] RSP: 002b:00007fdbebbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.853845][T13332] RAX: ffffffffffffffda RBX: 00007fdbedbc5fa0 RCX: 00007fdbed98ebe9 [ 291.853856][T13332] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 291.853866][T13332] RBP: 00007fdbebbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 291.853877][T13332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.853887][T13332] R13: 00007fdbedbc6038 R14: 00007fdbedbc5fa0 R15: 00007ffeaf536c08 [ 291.853915][T13332] [ 292.185503][T13342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.192952][T13342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.254055][T13340] IPVS: Scheduler module ip_vs_sip not found [ 292.297389][T13334] bond5: entered promiscuous mode [ 292.303405][T13334] 8021q: adding VLAN 0 to HW filter on device bond5 [ 292.460641][T13360] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 292.493959][ T5913] IPVS: starting estimator thread 0... [ 292.594879][T13362] IPVS: using max 30 ests per chain, 72000 per kthread [ 292.758581][T13365] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 292.772404][T13380] __nla_validate_parse: 5 callbacks suppressed [ 292.772422][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2391'. [ 292.853154][T13373] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 292.886965][T13380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2391'. [ 292.911070][T13373] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 292.937730][T13373] bond5: (slave vti0): making interface the new active one [ 292.947978][T13373] bond5: (slave vti0): Enslaving as an active interface with an up link [ 293.754396][T13390] lo speed is unknown, defaulting to 1000 [ 294.210468][T13411] Set syz0 is full, maxelem 0 reached [ 294.261236][T13408] lo speed is unknown, defaulting to 1000 [ 294.804524][T13430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2406'. [ 295.083686][T13442] FAULT_INJECTION: forcing a failure. [ 295.083686][T13442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.103525][T13442] CPU: 0 UID: 0 PID: 13442 Comm: syz.2.2412 Not tainted syzkaller #0 PREEMPT(full) [ 295.103550][T13442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.103561][T13442] Call Trace: [ 295.103569][T13442] [ 295.103578][T13442] dump_stack_lvl+0x189/0x250 [ 295.103602][T13442] ? __pfx____ratelimit+0x10/0x10 [ 295.103621][T13442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.103640][T13442] ? __pfx__printk+0x10/0x10 [ 295.103666][T13442] ? 0xffffffffa0201750 [ 295.103689][T13442] should_fail_ex+0x414/0x560 [ 295.103716][T13442] _copy_to_user+0x31/0xb0 [ 295.103738][T13442] bpf_test_finish+0x56f/0x700 [ 295.103765][T13442] ? __pfx_bpf_test_finish+0x10/0x10 [ 295.103788][T13442] ? bpf_test_init+0x133/0x170 [ 295.103814][T13442] bpf_prog_test_run_xdp+0x79a/0x1000 [ 295.103846][T13442] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 295.103868][T13442] ? __fget_files+0x2a/0x420 [ 295.103887][T13442] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 295.103904][T13442] bpf_prog_test_run+0x2c7/0x340 [ 295.103933][T13442] __sys_bpf+0x581/0x870 [ 295.103951][T13442] ? __pfx___sys_bpf+0x10/0x10 [ 295.103978][T13442] ? ksys_write+0x22a/0x250 [ 295.103996][T13442] ? __pfx_ksys_write+0x10/0x10 [ 295.104011][T13442] ? rcu_is_watching+0x15/0xb0 [ 295.104031][T13442] __x64_sys_bpf+0x7c/0x90 [ 295.104048][T13442] do_syscall_64+0xfa/0x3b0 [ 295.104061][T13442] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.104074][T13442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.104088][T13442] ? clear_bhb_loop+0x60/0xb0 [ 295.104104][T13442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.104117][T13442] RIP: 0033:0x7efe32d8ebe9 [ 295.104130][T13442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.104142][T13442] RSP: 002b:00007efe33b91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.104159][T13442] RAX: ffffffffffffffda RBX: 00007efe32fc5fa0 RCX: 00007efe32d8ebe9 [ 295.104170][T13442] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 295.104179][T13442] RBP: 00007efe33b91090 R08: 0000000000000000 R09: 0000000000000000 [ 295.104188][T13442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.104196][T13442] R13: 00007efe32fc6038 R14: 00007efe32fc5fa0 R15: 00007ffdc8855f38 [ 295.104219][T13442] [ 295.666509][T13465] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 295.718073][T13465] bridge_slave_0: left allmulticast mode [ 295.726148][T13465] bridge_slave_0: left promiscuous mode [ 295.732826][T13465] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.803704][T13472] netlink: 'syz.0.2418': attribute type 10 has an invalid length. [ 295.990155][T13475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2418'. [ 296.033281][T13465] bridge_slave_1: left allmulticast mode [ 296.047648][T13465] bridge_slave_1: left promiscuous mode [ 296.053903][T13465] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.533636][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2421'. [ 296.557502][T13483] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2421'. [ 296.608024][T13480] Set syz0 is full, maxelem 0 reached [ 296.637272][T13486] netlink: 'syz.4.2420': attribute type 4 has an invalid length. [ 296.649265][T13486] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2420'. [ 296.979936][T13465] Ã: (slave bond_slave_0): Releasing backup interface [ 298.671357][T13465] Ã: (slave bond_slave_1): Releasing backup interface [ 298.701700][T13465] team0: Port device team_slave_0 removed [ 298.715921][T13465] team0: Port device team_slave_1 removed [ 298.722689][T13465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.730753][T13465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.739462][T13465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.749047][T13465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.763765][T13465] bond2: (slave bridge1): Releasing active interface [ 298.776755][T13465] bond5: (slave bridge4): Releasing active interface [ 298.793952][T13465] bond6: (slave gretap2): Releasing active interface [ 298.807799][T13465] bond7: (slave bridge6): Releasing active interface [ 298.818220][T13465] batman_adv: batadv0: Removing interface: ipvlan3 [ 298.827076][T13472] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 298.835882][T13472] wlan1: mtu less than device minimum [ 298.841292][T13472] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 298.933915][T13493] pim6reg: entered allmulticast mode [ 299.026722][T13496] tipc: Enabled bearer , priority 0 [ 299.087022][T13493] tipc: Resetting bearer [ 299.137205][T13493] pim6reg: left allmulticast mode [ 299.195481][T13508] block nbd2: server does not support multiple connections per device. [ 299.207899][T13508] block nbd2: shutting down sockets [ 299.213560][T13501] syzkaller0: entered promiscuous mode [ 299.248707][T13501] syzkaller0: entered allmulticast mode [ 299.282687][T13517] netlink: 'syz.2.2430': attribute type 3 has an invalid length. [ 299.299258][T13517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2430'. [ 299.305561][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2432'. [ 299.312010][T13517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2430'. [ 299.326842][T13519] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2432'. [ 299.330606][T13517] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2430'. [ 299.352293][T13519] Set syz0 is full, maxelem 0 reached [ 299.381847][T13492] tipc: Resetting bearer [ 299.452077][T13492] tipc: Disabling bearer [ 299.714394][T13533] wireguard2: entered promiscuous mode [ 299.721318][T13533] wireguard2: entered allmulticast mode [ 299.790024][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2436'. [ 299.815456][T13539] veth1_to_bond: entered allmulticast mode [ 299.877002][T13545] veth1_to_bond (unregistering): left allmulticast mode [ 300.133369][T13560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.149499][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2446'. [ 300.206390][T13562] batman_adv: batadv0: Adding interface: ipvlan4 [ 300.218729][T13562] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.247893][T13562] batman_adv: batadv0: Not using interface ipvlan4 (retrying later): interface not active [ 300.322461][T13568] lo speed is unknown, defaulting to 1000 [ 300.343571][T13569] netlink: 'syz.2.2449': attribute type 5 has an invalid length. [ 300.353666][T13570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2448'. [ 300.410492][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2448'. [ 300.432317][T13569] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 300.477621][T13569] ieee802154 phy1 wpan1: encryption failed: -22 [ 300.683736][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 301.806677][ T9322] block nbd0: Possible stuck request ffff88802573e000: control (read@0,1024B). Runtime 150 seconds [ 301.817860][ T9322] block nbd0: Possible stuck request ffff88802573e1c0: control (read@1024,1024B). Runtime 150 seconds [ 301.830725][ T9322] block nbd0: Possible stuck request ffff88802573e380: control (read@2048,1024B). Runtime 150 seconds [ 301.842130][ T9322] block nbd0: Possible stuck request ffff88802573e540: control (read@3072,1024B). Runtime 150 seconds [ 301.856682][T13620] tap0: tun_chr_ioctl cmd 1074025677 [ 301.905379][T13620] tap0: linktype set to 776 [ 302.167399][T13636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.528514][T13651] syzkaller0: entered promiscuous mode [ 302.560790][T13651] syzkaller0: entered allmulticast mode [ 303.427951][T13672] sctp: [Deprecated]: syz.1.2481 (pid 13672) Use of int in max_burst socket option deprecated. [ 303.427951][T13672] Use struct sctp_assoc_value instead [ 303.834417][T13688] netlink: 'syz.3.2487': attribute type 1 has an invalid length. [ 303.943226][T13698] FAULT_INJECTION: forcing a failure. [ 303.943226][T13698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.990390][T13698] CPU: 1 UID: 0 PID: 13698 Comm: syz.1.2490 Not tainted syzkaller #0 PREEMPT(full) [ 303.990415][T13698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.990426][T13698] Call Trace: [ 303.990434][T13698] [ 303.990443][T13698] dump_stack_lvl+0x189/0x250 [ 303.990469][T13698] ? __pfx____ratelimit+0x10/0x10 [ 303.990488][T13698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.990507][T13698] ? __pfx__printk+0x10/0x10 [ 303.990530][T13698] ? __might_fault+0xb0/0x130 [ 303.990564][T13698] should_fail_ex+0x414/0x560 [ 303.990592][T13698] _copy_from_user+0x2d/0xb0 [ 303.990613][T13698] bpf_prog_test_run_xdp+0xd05/0x1000 [ 303.990649][T13698] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 303.990672][T13698] ? __fget_files+0x2a/0x420 [ 303.990694][T13698] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 303.990712][T13698] bpf_prog_test_run+0x2c7/0x340 [ 303.990771][T13698] __sys_bpf+0x581/0x870 [ 303.990794][T13698] ? __pfx___sys_bpf+0x10/0x10 [ 303.990829][T13698] ? ksys_write+0x22a/0x250 [ 303.990853][T13698] ? __pfx_ksys_write+0x10/0x10 [ 303.990871][T13698] ? rcu_is_watching+0x15/0xb0 [ 303.990897][T13698] __x64_sys_bpf+0x7c/0x90 [ 303.990918][T13698] do_syscall_64+0xfa/0x3b0 [ 303.990936][T13698] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.990953][T13698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.990970][T13698] ? clear_bhb_loop+0x60/0xb0 [ 303.990991][T13698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.991007][T13698] RIP: 0033:0x7fdb5cd8ebe9 [ 303.991023][T13698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.991038][T13698] RSP: 002b:00007fdb5db60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 303.991057][T13698] RAX: ffffffffffffffda RBX: 00007fdb5cfc5fa0 RCX: 00007fdb5cd8ebe9 [ 303.991071][T13698] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 303.991082][T13698] RBP: 00007fdb5db60090 R08: 0000000000000000 R09: 0000000000000000 [ 303.991094][T13698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.991104][T13698] R13: 00007fdb5cfc6038 R14: 00007fdb5cfc5fa0 R15: 00007ffdb7d059d8 [ 303.991134][T13698] [ 304.321793][T13705] __nla_validate_parse: 6 callbacks suppressed [ 304.321813][T13705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2494'. [ 304.459269][T13711] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2495'. [ 304.512418][T13715] Set syz0 is full, maxelem 0 reached [ 304.739044][T13730] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 304.751323][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2501'. [ 304.762697][T13729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.839734][T13729] netlink: 'syz.0.2501': attribute type 1 has an invalid length. [ 304.848013][T13729] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2501'. [ 304.864046][T13734] delete_channel: no stack [ 304.927449][T13739] FAULT_INJECTION: forcing a failure. [ 304.927449][T13739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.942265][T13739] CPU: 1 UID: 0 PID: 13739 Comm: syz.0.2505 Not tainted syzkaller #0 PREEMPT(full) [ 304.942288][T13739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.942299][T13739] Call Trace: [ 304.942307][T13739] [ 304.942315][T13739] dump_stack_lvl+0x189/0x250 [ 304.942340][T13739] ? __pfx____ratelimit+0x10/0x10 [ 304.942359][T13739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.942378][T13739] ? __pfx__printk+0x10/0x10 [ 304.942399][T13739] ? __might_fault+0xb0/0x130 [ 304.942432][T13739] should_fail_ex+0x414/0x560 [ 304.942458][T13739] _copy_from_iter+0x1de/0x1790 [ 304.942482][T13739] ? rcu_is_watching+0x15/0xb0 [ 304.942502][T13739] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 304.942525][T13739] ? __pfx__copy_from_iter+0x10/0x10 [ 304.942545][T13739] ? __build_skb_around+0x257/0x3e0 [ 304.942567][T13739] ? netlink_sendmsg+0x642/0xb30 [ 304.942583][T13739] ? skb_put+0x11b/0x210 [ 304.942605][T13739] netlink_sendmsg+0x6b2/0xb30 [ 304.942632][T13739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.942654][T13739] ? aa_sock_msg_perm+0xf1/0x1d0 [ 304.942682][T13739] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.942700][T13739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.942718][T13739] __sock_sendmsg+0x21c/0x270 [ 304.942745][T13739] ____sys_sendmsg+0x505/0x830 [ 304.942770][T13739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.942800][T13739] ? import_iovec+0x74/0xa0 [ 304.942822][T13739] ___sys_sendmsg+0x21f/0x2a0 [ 304.942843][T13739] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.942893][T13739] ? __fget_files+0x2a/0x420 [ 304.942907][T13739] ? __fget_files+0x3a0/0x420 [ 304.942931][T13739] __x64_sys_sendmsg+0x19b/0x260 [ 304.942954][T13739] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.942985][T13739] ? __pfx_ksys_write+0x10/0x10 [ 304.943003][T13739] ? rcu_is_watching+0x15/0xb0 [ 304.943024][T13739] ? do_syscall_64+0xbe/0x3b0 [ 304.943045][T13739] do_syscall_64+0xfa/0x3b0 [ 304.943060][T13739] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.943076][T13739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.943092][T13739] ? clear_bhb_loop+0x60/0xb0 [ 304.943112][T13739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.943129][T13739] RIP: 0033:0x7f354a18ebe9 [ 304.943145][T13739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.943159][T13739] RSP: 002b:00007f354b043038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.943178][T13739] RAX: ffffffffffffffda RBX: 00007f354a3c5fa0 RCX: 00007f354a18ebe9 [ 304.943191][T13739] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 304.943202][T13739] RBP: 00007f354b043090 R08: 0000000000000000 R09: 0000000000000000 [ 304.943213][T13739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.943224][T13739] R13: 00007f354a3c6038 R14: 00007f354a3c5fa0 R15: 00007fff4687d0f8 [ 304.943254][T13739] [ 305.236931][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2506'. [ 305.273537][T13741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.334211][T13746] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2508'. [ 305.542998][T13751] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2509'. [ 305.627432][T13756] netlink: 'syz.4.2512': attribute type 3 has an invalid length. [ 305.697590][T13757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2511'. [ 305.853578][T13760] geneve2: entered promiscuous mode [ 305.957084][T13768] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.2516'. [ 306.051278][T13771] netlink: 'syz.4.2518': attribute type 1 has an invalid length. [ 306.060530][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2518'. [ 306.199000][T13777] netlink: 'syz.4.2519': attribute type 4 has an invalid length. [ 306.515770][T13789] Set syz0 is full, maxelem 0 reached [ 306.869103][T13805] lo speed is unknown, defaulting to 1000 [ 307.521139][T13843] netlink: 'syz.1.2538': attribute type 1 has an invalid length. [ 308.088303][T13865] sctp: [Deprecated]: syz.3.2544 (pid 13865) Use of int in maxseg socket option. [ 308.088303][T13865] Use struct sctp_assoc_value instead [ 308.103743][T13869] nbd: device at index 4 is going down [ 308.874325][T13895] FAULT_INJECTION: forcing a failure. [ 308.874325][T13895] name failslab, interval 1, probability 0, space 0, times 0 [ 308.905287][ T5864] Bluetooth: hci4: command 0x0406 tx timeout [ 308.995587][T13895] CPU: 0 UID: 0 PID: 13895 Comm: syz.4.2553 Not tainted syzkaller #0 PREEMPT(full) [ 308.995614][T13895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.995625][T13895] Call Trace: [ 308.995633][T13895] [ 308.995641][T13895] dump_stack_lvl+0x189/0x250 [ 308.995667][T13895] ? __pfx____ratelimit+0x10/0x10 [ 308.995686][T13895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.995707][T13895] ? __pfx__printk+0x10/0x10 [ 308.995732][T13895] ? __pfx___might_resched+0x10/0x10 [ 308.995749][T13895] ? fs_reclaim_acquire+0x7d/0x100 [ 308.995778][T13895] should_fail_ex+0x414/0x560 [ 308.995805][T13895] should_failslab+0xa8/0x100 [ 308.995830][T13895] __kmalloc_noprof+0xcb/0x4f0 [ 308.995850][T13895] ? tomoyo_encode+0x28b/0x550 [ 308.995873][T13895] tomoyo_encode+0x28b/0x550 [ 308.995897][T13895] tomoyo_realpath_from_path+0x58d/0x5d0 [ 308.995918][T13895] ? tomoyo_domain+0xd9/0x130 [ 308.995942][T13895] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 308.995965][T13895] tomoyo_path_number_perm+0x1e8/0x5a0 [ 308.995991][T13895] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 308.996032][T13895] ? __lock_acquire+0xab9/0xd20 [ 308.996077][T13895] ? __fget_files+0x2a/0x420 [ 308.996097][T13895] ? __fget_files+0x2a/0x420 [ 308.996111][T13895] ? __fget_files+0x3a0/0x420 [ 308.996126][T13895] ? __fget_files+0x2a/0x420 [ 308.996146][T13895] security_file_ioctl+0xcb/0x2d0 [ 308.996169][T13895] __se_sys_ioctl+0x47/0x170 [ 308.996192][T13895] do_syscall_64+0xfa/0x3b0 [ 308.996210][T13895] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.996226][T13895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.996244][T13895] ? clear_bhb_loop+0x60/0xb0 [ 308.996265][T13895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.996280][T13895] RIP: 0033:0x7f3143b8ebe9 [ 308.996297][T13895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.996312][T13895] RSP: 002b:00007f3144a5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.996332][T13895] RAX: ffffffffffffffda RBX: 00007f3143dc5fa0 RCX: 00007f3143b8ebe9 [ 308.996346][T13895] RDX: 0000200000000000 RSI: 000000000000891c RDI: 0000000000000004 [ 308.996357][T13895] RBP: 00007f3144a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 308.996368][T13895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.996378][T13895] R13: 00007f3143dc6038 R14: 00007f3143dc5fa0 R15: 00007ffe7d0d8048 [ 308.996410][T13895] [ 308.996431][T13895] ERROR: Out of memory at tomoyo_realpath_from_path. [ 309.403495][T13903] __nla_validate_parse: 9 callbacks suppressed [ 309.403513][T13903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2556'. [ 309.481205][T13906] macvlan4: entered allmulticast mode [ 309.515123][T13906] veth1_vlan: entered allmulticast mode [ 309.567824][T13906] veth1_vlan: left allmulticast mode [ 309.579613][T13910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2559'. [ 309.916502][T13925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2565'. [ 309.982616][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2565'. [ 310.138925][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2568'. [ 310.178049][T13936] veth5: entered promiscuous mode [ 310.195750][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2568'. [ 310.717769][T13956] lo speed is unknown, defaulting to 1000 [ 310.726697][T13963] netlink: 'syz.0.2579': attribute type 1 has an invalid length. [ 310.734451][T13963] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2579'. [ 310.985972][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2583'. [ 311.294906][T13993] netlink: 'syz.2.2588': attribute type 1 has an invalid length. [ 311.302679][T13993] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2588'. [ 311.790332][T14009] netlink: 'syz.2.2595': attribute type 1 has an invalid length. [ 311.808972][T14009] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2595'. [ 312.340409][T14033] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 312.452866][T14037] team0: Device gtp0 is of different type [ 312.621817][T14039] wireguard0: entered promiscuous mode [ 312.629715][T14039] wireguard0: entered allmulticast mode [ 312.878647][T14060] lo speed is unknown, defaulting to 1000 [ 313.003205][T14070] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 313.193282][T14078] FAULT_INJECTION: forcing a failure. [ 313.193282][T14078] name failslab, interval 1, probability 0, space 0, times 0 [ 313.255332][T14078] CPU: 1 UID: 0 PID: 14078 Comm: syz.4.2610 Not tainted syzkaller #0 PREEMPT(full) [ 313.255357][T14078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.255367][T14078] Call Trace: [ 313.255375][T14078] [ 313.255383][T14078] dump_stack_lvl+0x189/0x250 [ 313.255407][T14078] ? __pfx____ratelimit+0x10/0x10 [ 313.255425][T14078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.255445][T14078] ? __pfx__printk+0x10/0x10 [ 313.255469][T14078] ? __lock_acquire+0xab9/0xd20 [ 313.255501][T14078] should_fail_ex+0x414/0x560 [ 313.255528][T14078] should_failslab+0xa8/0x100 [ 313.255553][T14078] kmem_cache_alloc_noprof+0x73/0x3c0 [ 313.255574][T14078] ? skb_clone+0x212/0x3a0 [ 313.255596][T14078] skb_clone+0x212/0x3a0 [ 313.255618][T14078] __netlink_deliver_tap+0x404/0x850 [ 313.255646][T14078] ? netlink_deliver_tap+0x2e/0x1b0 [ 313.255666][T14078] netlink_deliver_tap+0x19c/0x1b0 [ 313.255684][T14078] netlink_unicast+0x7fa/0x9e0 [ 313.255717][T14078] ? __pfx_netlink_unicast+0x10/0x10 [ 313.255742][T14078] ? netlink_sendmsg+0x642/0xb30 [ 313.255758][T14078] ? skb_put+0x11b/0x210 [ 313.255777][T14078] netlink_sendmsg+0x805/0xb30 [ 313.255805][T14078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.255826][T14078] ? aa_sock_msg_perm+0xf1/0x1d0 [ 313.255846][T14078] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 313.255864][T14078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.255884][T14078] __sock_sendmsg+0x21c/0x270 [ 313.255911][T14078] ____sys_sendmsg+0x505/0x830 [ 313.255937][T14078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.255967][T14078] ? import_iovec+0x74/0xa0 [ 313.255990][T14078] ___sys_sendmsg+0x21f/0x2a0 [ 313.256013][T14078] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.256075][T14078] ? __fget_files+0x2a/0x420 [ 313.256093][T14078] ? __fget_files+0x3a0/0x420 [ 313.256120][T14078] __x64_sys_sendmsg+0x19b/0x260 [ 313.256142][T14078] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.256167][T14078] ? __pfx_ksys_write+0x10/0x10 [ 313.256185][T14078] ? rcu_is_watching+0x15/0xb0 [ 313.256204][T14078] ? do_syscall_64+0xbe/0x3b0 [ 313.256226][T14078] do_syscall_64+0xfa/0x3b0 [ 313.256240][T14078] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.256255][T14078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.256272][T14078] ? clear_bhb_loop+0x60/0xb0 [ 313.256293][T14078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.256308][T14078] RIP: 0033:0x7f3143b8ebe9 [ 313.256325][T14078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.256340][T14078] RSP: 002b:00007f3144a5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.256360][T14078] RAX: ffffffffffffffda RBX: 00007f3143dc5fa0 RCX: 00007f3143b8ebe9 [ 313.256374][T14078] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 313.256385][T14078] RBP: 00007f3144a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 313.256396][T14078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.256406][T14078] R13: 00007f3143dc6038 R14: 00007f3143dc5fa0 R15: 00007ffe7d0d8048 [ 313.256436][T14078] [ 313.779171][ T5913] IPVS: starting estimator thread 0... [ 313.875331][T14093] IPVS: using max 26 ests per chain, 62400 per kthread [ 314.008094][T14102] batadv1: entered promiscuous mode [ 314.046942][T14105] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 314.430153][T14119] netlink: 'syz.3.2622': attribute type 1 has an invalid length. [ 314.504890][T14119] bond6: entered promiscuous mode [ 314.510433][T14119] 8021q: adding VLAN 0 to HW filter on device bond6 [ 314.533365][T14126] FAULT_INJECTION: forcing a failure. [ 314.533365][T14126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.548272][T14126] CPU: 1 UID: 0 PID: 14126 Comm: syz.1.2623 Not tainted syzkaller #0 PREEMPT(full) [ 314.548298][T14126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.548310][T14126] Call Trace: [ 314.548318][T14126] [ 314.548327][T14126] dump_stack_lvl+0x189/0x250 [ 314.548352][T14126] ? __pfx____ratelimit+0x10/0x10 [ 314.548371][T14126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.548392][T14126] ? __pfx__printk+0x10/0x10 [ 314.548417][T14126] ? __might_fault+0xb0/0x130 [ 314.548447][T14126] should_fail_ex+0x414/0x560 [ 314.548475][T14126] _copy_from_user+0x2d/0xb0 [ 314.548496][T14126] copy_from_sockptr+0x5e/0xa0 [ 314.548516][T14126] do_tcp_getsockopt+0x1a64/0x2600 [ 314.548546][T14126] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 314.548564][T14126] ? sock_common_getsockopt+0x20/0xb0 [ 314.548586][T14126] ? __might_fault+0xb0/0x130 [ 314.548609][T14126] ? _parse_integer_limit+0x1ae/0x1f0 [ 314.548634][T14126] ? aa_label_sk_perm+0x4cd/0x630 [ 314.548660][T14126] ? __lock_acquire+0xab9/0xd20 [ 314.548686][T14126] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 314.548740][T14126] ? __lock_acquire+0xab9/0xd20 [ 314.548790][T14126] tcp_getsockopt+0x83/0x130 [ 314.548807][T14126] ? sock_common_getsockopt+0x20/0xb0 [ 314.548830][T14126] ? sock_common_getsockopt+0x20/0xb0 [ 314.548850][T14126] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 314.548875][T14126] do_sock_getsockopt+0x36f/0x450 [ 314.548897][T14126] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 314.548921][T14126] ? write_ibpb+0x30/0x40 [ 314.548938][T14126] ? __fget_files+0x3a0/0x420 [ 314.548954][T14126] ? __fget_files+0x2a/0x420 [ 314.548978][T14126] __x64_sys_getsockopt+0x1a5/0x250 [ 314.548997][T14126] ? write_ibpb+0x30/0x40 [ 314.549016][T14126] ? write_ibpb+0x30/0x40 [ 314.549037][T14126] do_syscall_64+0xfa/0x3b0 [ 314.549054][T14126] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.549071][T14126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.549088][T14126] ? clear_bhb_loop+0x60/0xb0 [ 314.549110][T14126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.549127][T14126] RIP: 0033:0x7fdb5cd8ebe9 [ 314.549144][T14126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.549160][T14126] RSP: 002b:00007fdb5db60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 314.549180][T14126] RAX: ffffffffffffffda RBX: 00007fdb5cfc5fa0 RCX: 00007fdb5cd8ebe9 [ 314.549194][T14126] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 314.549205][T14126] RBP: 00007fdb5db60090 R08: 0000200000000000 R09: 0000000000000000 [ 314.549218][T14126] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 314.549230][T14126] R13: 00007fdb5cfc6038 R14: 00007fdb5cfc5fa0 R15: 00007ffdb7d059d8 [ 314.549261][T14126] [ 314.938529][T14131] __nla_validate_parse: 5 callbacks suppressed [ 314.938548][T14131] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2627'. [ 315.100354][T14124] 8021q: adding VLAN 0 to HW filter on device bond6 [ 315.133113][T14124] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 315.166028][T14124] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 315.512904][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2631'. [ 316.027199][T14173] netlink: 'syz.2.2638': attribute type 12 has an invalid length. [ 316.046382][T14173] netlink: 'syz.2.2638': attribute type 29 has an invalid length. [ 316.060925][T14173] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2638'. [ 316.291768][T14179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2642'. [ 316.346526][T14179] batman_adv: batadv0: Adding interface: ipvlan5 [ 316.368434][T14179] batman_adv: batadv0: The MTU of interface ipvlan5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.424649][ C0] [ 316.427020][ C0] ================================ [ 316.432121][ C0] WARNING: inconsistent lock state [ 316.437239][ C0] syzkaller #0 Not tainted [ 316.441658][ C0] -------------------------------- [ 316.446763][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 316.453608][ C0] syz.3.2639/14171 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 316.460029][ C0] ffff8880581eaca8 (&p->tcfa_lock){+.?.}-{3:3}, at: est_timer+0xd4/0x9f0 [ 316.468500][ C0] {SOFTIRQ-ON-W} state was registered at: [ 316.470438][T14179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan4 [ 316.474250][ C0] lock_acquire+0x120/0x360 [ 316.474282][ C0] _raw_spin_lock+0x2e/0x40 [ 316.485849][T14179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.488651][ C0] tcf_mpls_init+0xbff/0x1280 [ 316.488681][ C0] tcf_action_init_1+0x460/0x6d0 [ 316.493327][T14179] batman_adv: batadv0: Not using interface ipvlan5 (retrying later): interface not active [ 316.503031][ C0] tcf_action_init+0x2cf/0xab0 [ 316.503060][ C0] tc_ctl_action+0x430/0xbd0 [ 316.503079][ C0] rtnetlink_rcv_msg+0x77c/0xb70 [ 316.503094][ C0] netlink_rcv_skb+0x205/0x470 [ 316.503107][ C0] netlink_unicast+0x82c/0x9e0 [ 316.503129][ C0] netlink_sendmsg+0x805/0xb30 [ 316.551735][ C0] __sock_sendmsg+0x21c/0x270 [ 316.556508][ C0] ____sys_sendmsg+0x505/0x830 [ 316.561350][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 316.566101][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 316.571110][ C0] do_syscall_64+0xfa/0x3b0 [ 316.575691][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.581662][ C0] irq event stamp: 19446 [ 316.585885][ C0] hardirqs last enabled at (19446): [] _raw_spin_unlock_irq+0x23/0x50 [ 316.595682][ C0] hardirqs last disabled at (19445): [] _raw_spin_lock_irq+0x7d/0xf0 [ 316.605307][ C0] softirqs last enabled at (18480): [] __irq_exit_rcu+0xca/0x1f0 [ 316.614665][ C0] softirqs last disabled at (19443): [] __irq_exit_rcu+0xca/0x1f0 [ 316.624027][ C0] [ 316.624027][ C0] other info that might help us debug this: [ 316.632065][ C0] Possible unsafe locking scenario: [ 316.632065][ C0] [ 316.639496][ C0] CPU0 [ 316.642765][ C0] ---- [ 316.646028][ C0] lock(&p->tcfa_lock); [ 316.650259][ C0] [ 316.653700][ C0] lock(&p->tcfa_lock); [ 316.658102][ C0] [ 316.658102][ C0] *** DEADLOCK *** [ 316.658102][ C0] [ 316.666230][ C0] 6 locks held by syz.3.2639/14171: [ 316.671412][ C0] #0: ffff888049e201e0 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x16f/0x380 [ 316.680805][ C0] #1: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: __handle_mm_fault+0x27b7/0x5440 [ 316.690628][ C0] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x150/0x1740 [ 316.700373][ C0] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x29/0x250 [ 316.709937][ C0] #4: ffff8880588f3078 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x13e/0x210 [ 316.720550][ C0] #5: ffffc90000007be0 ((&est->timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 316.729770][ C0] [ 316.729770][ C0] stack backtrace: [ 316.735647][ C0] CPU: 0 UID: 0 PID: 14171 Comm: syz.3.2639 Not tainted syzkaller #0 PREEMPT(full) [ 316.735666][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.735676][ C0] Call Trace: [ 316.735687][ C0] [ 316.735694][ C0] dump_stack_lvl+0x189/0x250 [ 316.735715][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.735733][ C0] ? __pfx__printk+0x10/0x10 [ 316.735753][ C0] ? print_lock_name+0xde/0x100 [ 316.735772][ C0] print_usage_bug+0x297/0x2e0 [ 316.735787][ C0] valid_state+0xc3/0xf0 [ 316.735801][ C0] mark_lock_irq+0x36/0x390 [ 316.735814][ C0] ? __kernel_text_address+0xd/0x40 [ 316.735833][ C0] ? unwind_get_return_address+0x4d/0x90 [ 316.735853][ C0] mark_lock+0x11b/0x190 [ 316.735866][ C0] __lock_acquire+0x680/0xd20 [ 316.735888][ C0] ? est_timer+0xd4/0x9f0 [ 316.735906][ C0] lock_acquire+0x120/0x360 [ 316.735925][ C0] ? est_timer+0xd4/0x9f0 [ 316.735946][ C0] ? lockdep_unlock+0x89/0x120 [ 316.735965][ C0] _raw_spin_lock+0x2e/0x40 [ 316.735985][ C0] ? est_timer+0xd4/0x9f0 [ 316.736003][ C0] est_timer+0xd4/0x9f0 [ 316.736024][ C0] ? call_timer_fn+0xbe/0x5f0 [ 316.736044][ C0] ? call_timer_fn+0xbe/0x5f0 [ 316.736063][ C0] ? __pfx_est_timer+0x10/0x10 [ 316.736086][ C0] call_timer_fn+0x17e/0x5f0 [ 316.736104][ C0] ? __pfx_est_timer+0x10/0x10 [ 316.736123][ C0] ? call_timer_fn+0xbe/0x5f0 [ 316.736141][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 316.736164][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 316.736183][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.736197][ C0] ? __pfx_est_timer+0x10/0x10 [ 316.736216][ C0] __run_timer_base+0x61a/0x860 [ 316.736234][ C0] ? ktime_get+0x3e/0x1f0 [ 316.736253][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 316.736270][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 316.736293][ C0] run_timer_softirq+0xb7/0x180 [ 316.736311][ C0] handle_softirqs+0x283/0x870 [ 316.736327][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 316.736343][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 316.736359][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 316.736377][ C0] __irq_exit_rcu+0xca/0x1f0 [ 316.736390][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 316.736407][ C0] irq_exit_rcu+0x9/0x30 [ 316.736419][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 316.736442][ C0] [ 316.736446][ C0] [ 316.736452][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 316.736469][ C0] RIP: 0010:lock_is_held_type+0x137/0x190 [ 316.736484][ C0] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 f9 53 26 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 316.736497][ C0] RSP: 0018:ffffc9001c347598 EFLAGS: 00000206 [ 316.736511][ C0] RAX: 56cb371469304100 RBX: 0000000000000001 RCX: 56cb371469304100 [ 316.736522][ C0] RDX: ffff888027951e00 RSI: ffffffff8dba8ae0 RDI: ffffffff8be33800 [ 316.736533][ C0] RBP: 00000000ffffffff R08: ffffea0001b84a07 R09: 1ffffd4000370940 [ 316.736545][ C0] R10: dffffc0000000000 R11: fffff94000370941 R12: 0000000000000246 [ 316.736555][ C0] R13: ffff888027951e00 R14: ffffffff8e139ee0 R15: 0000000000000001 [ 316.736574][ C0] xas_reload+0x19f/0x470 [ 316.736589][ C0] next_uptodate_folio+0x15f/0x5d0 [ 316.736608][ C0] filemap_map_pages+0x102b/0x1740 [ 316.736629][ C0] ? filemap_map_pages+0x150/0x1740 [ 316.736647][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 316.736666][ C0] ? __handle_mm_fault+0x27b7/0x5440 [ 316.736691][ C0] ? __handle_mm_fault+0x27b7/0x5440 [ 316.736710][ C0] __handle_mm_fault+0x34a9/0x5440 [ 316.736733][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 316.736757][ C0] ? follow_page_pte+0x7ef/0x13e0 [ 316.736778][ C0] handle_mm_fault+0x40a/0x8e0 [ 316.736800][ C0] __get_user_pages+0x1699/0x2ce0 [ 316.736829][ C0] populate_vma_page_range+0x29f/0x3a0 [ 316.736847][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 316.736863][ C0] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 316.736885][ C0] ? down_read+0x1ad/0x2e0 [ 316.736901][ C0] __mm_populate+0x24c/0x380 [ 316.736918][ C0] ? __pfx___mm_populate+0x10/0x10 [ 316.736935][ C0] ? up_write+0x1c4/0x420 [ 316.736951][ C0] vm_mmap_pgoff+0x387/0x4d0 [ 316.736970][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 316.736984][ C0] ? exc_page_fault+0x76/0xf0 [ 316.737000][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 316.737018][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 316.737034][ C0] do_syscall_64+0xfa/0x3b0 [ 316.737049][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.737062][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.737076][ C0] ? clear_bhb_loop+0x60/0xb0 [ 316.737091][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.737105][ C0] RIP: 0033:0x7fdbed98ebe9 [ 316.737118][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.737131][ C0] RSP: 002b:00007fdbebbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 316.737145][ C0] RAX: ffffffffffffffda RBX: 00007fdbedbc5fa0 RCX: 00007fdbed98ebe9 [ 316.737157][ C0] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 316.737166][ C0] RBP: 00007fdbeda11e19 R08: ffffffffffffffff R09: 0000000000000000 [ 316.737177][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 316.737185][ C0] R13: 00007fdbedbc6038 R14: 00007fdbedbc5fa0 R15: 00007ffeaf536c08 [ 316.737202][ C0] [ 317.373505][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2639'. [ 317.386832][T14171] macsec1: entered promiscuous mode [ 317.392056][T14171] syzkaller0: entered promiscuous mode [ 317.399115][T14171] batman_adv: batadv0: Adding interface: macsec1 [ 317.405913][T14171] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.431613][T14171] batman_adv: batadv0: Interface activated: macsec1 [ 317.446602][T14170] batman_adv: batadv0: Interface deactivated: macsec1 [ 317.453478][T14170] syzkaller0 (unregistering): left promiscuous mode [ 317.469861][T14170] batman_adv: batadv0: Removing interface: macsec1