last executing test programs: 2.905770971s ago: executing program 2 (id=8798): r0 = socket(0x10, 0x3, 0x2) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)='\"', 0x1) r1 = socket(0x2, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x48) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000040)={0x0, @in={0x2, 0x3, @local}, @isdn={0x22, 0x4, 0x80, 0x7, 0xbb}, @ax25={0x3, @bcast, 0x8}, 0xc, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='erspan0\x00', 0x1450, 0x92a7, 0x5}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r3, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001400030400000000000000542d"], 0x44}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='rpcgss_svc_seqno_bad\x00', r5, 0x0, 0xff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r3, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r1}, 0x20) 2.372017019s ago: executing program 4 (id=8799): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0xfd}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random='\n\x00'}) 2.348240112s ago: executing program 2 (id=8801): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x5, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x128}, 0x240000d0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) shutdown(r3, 0x1) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) sendto(r3, 0x0, 0x0, 0x8840, 0x0, 0x0) close(r2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e24, @remote}, 0x10) close(r4) bind$alg(r1, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(ccm-aes-ce,blake2s-128-x86)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="171abdb5d25446463f74d3740a70f6e0249ca79eab57d2457df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070c8bb46c63d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b76d3fe56fc785245e3dd4eb6fd1d435e", 0x60}, {&(0x7f0000000680)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42ce95d4ba35f2eb622a380e72c66c93196ebf3cfcfad14644e6dcceb00920705382fadef5c17eae94a9578d9b3f67692be36c0a68c2ea8e9741bbefa08e31c991acb6c96a9b97d507ab4d9d9c6f66e11a31e528df5570aa43e0275fae14ceeaed60847c23360b0ee4ac087abc7def3979bd64d3745f8dfa3ca", 0xb0}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0x44854) recvmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/97, 0x61}, {&(0x7f0000000500)=""/184, 0xb8}], 0x2}, 0x2043) 2.313886154s ago: executing program 4 (id=8802): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000003200e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 2.243869158s ago: executing program 3 (id=8804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x6, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x8000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) 2.146054705s ago: executing program 4 (id=8806): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) setsockopt$MRT_DEL_VIF(r1, 0x0, 0x1a, 0x0, 0x0) (async) clock_gettime(0x7, &(0x7f0000000340)) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x9, &(0x7f0000000380)="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") (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x80, 0x20, 0xa13, 0x7fff, {{0x20, 0x4, 0x2, 0x36, 0x80, 0x66, 0x0, 0x5, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x10, 0x93, 0x0, 0xa, [0x8, 0x6, 0x3ff]}, @cipso={0x86, 0x54, 0x0, [{0x1, 0x2}, {0x2, 0xf, "bb0791b5dfbeda0bf74e53dc65"}, {0x1, 0xe, "acb6afb4e74a3f7b2c4e9e05"}, {0x6, 0xf, "939e24ade6606f6f06cd5aba75"}, {0x5, 0x3, '}'}, {0x1, 0x8, "6a9d4129c5a7"}, {0x2, 0xf, "e37518f4b7a66ebe19d9b95ea0"}, {0x0, 0x6, "c62f10f3"}]}, @rr={0x7, 0x7, 0xe5, [@local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', r3, 0x4, 0xfe, 0x4, 0x7, 0x40, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10, 0x10, 0xf7000000, 0x7}}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000300)=0x2) 2.008474139s ago: executing program 3 (id=8809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6000}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x40000}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1.839826847s ago: executing program 0 (id=8810): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) socketpair(0x28, 0x800, 0x4, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket(0x29, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}}) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000140)=[{0x3, 0x2, {0x1, 0x1, 0xb}, {0x1, 0xf0, 0x1}, 0x2, 0x2}, {0x3, 0x2, {0x1, 0x1, 0x5}, {0x1, 0xf0, 0x1}, 0xff, 0xfe}, {0x0, 0x3, {0x0, 0xf0}, {0x0, 0x1, 0x1}, 0x2, 0xff}], 0x60) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0xf96e) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0) ioctl$PPPIOCSDEBUG(r7, 0x40047440, &(0x7f0000000480)=0x976) (async) r8 = socket(0x21, 0x6, 0x8) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r10, 0x1, 0x78bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x2f, 0xb, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) (async) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000080)=0x3) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) (async) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0xf801, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x81, 0x2}, 0xe) (async) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r11, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) 1.743244759s ago: executing program 3 (id=8811): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c081) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x5, 0xee, 0x3d, 0x67, 0x6f0, 0x5, 0x5}, 0x1c) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r2) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x48891}, 0x20000000) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@random="edac8e3d3571", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@canfd={0xd, {{0x0, 0x1, 0x0, 0x1}, 0x26, 0x0, 0x0, 0x0, "046153bdf5cef8d8fbfdaf05aa65caa73686675eb308c6865cb0ed555b54e2bcaf278017a94e6c91e954ffb2af33993bb4b31ac0c9ef9313ba5e2ed2143eb99f"}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r3, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2400c884}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10001}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7128}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x2000c094) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) r10 = socket(0x5, 0x3, 0x5adf) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x95}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r10}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000840) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xb, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xaa8}]}, &(0x7f0000000880)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0xe, 0x9dd, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000940)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000980)=[{0x3, 0x4, 0xa, 0xa}, {0x3, 0x3, 0x6, 0x7}, {0x2, 0x3, 0xb, 0x9}, {0x0, 0x1, 0x10}, {0x4, 0x3, 0xa, 0x8}, {0x4, 0x5, 0xb, 0x1}], 0x10, 0x3ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r11, 0x0, 0x1000, 0x69, &(0x7f0000000ac0)="9aec80668082db7b7b5aeacdcd9e4f7e6cb2b107688333f5af92993a31c18cadf7ded570cb308f2493a1743641a5d5896651798f84ecac22ecbf94cd218e8c33c97aff2e0cc0c24bfebe7da8871ae0965122f2ab1b83758ac49701beff484479e99b5d97a25f41f512cacced0453b412fca9285df99ee72889a5dc7bbd99022e9cde337df29df661a8285e965850163050cc9f86a2a14d06e8f37c55cb2ebd4a15ad70d80db96f1e87be831962792cbc57c4218285b8e7d2ebad44bfaa47768fc1a66895410e9dad2feefa80e2c174761269feb7e06355c700473be8ab0f4308be80e55af111863c9309efbfe0e837b6b73d4091c7dfef6b35ce8f23a42c5f104c8ae0e2a5fa3234fb16f5669fc18752e017419b4b3e5f9a25e8e3072839b14aedbaef9d68980b2a4c32d9491975cf88ae07f33aac5500912698a9f98e6fc5b0ad4af295575acea98b06feed03f7f159278d85f190aa39add33e970c5ee9f64b29f132e8e569b46bd9e92dead5148fc2f2e4631ad5b1423739d39a010fe9ef0dbf30e91c61b1231897bb2dbcef18603b2dfb6135b3e32df18d53ee9c5fb31cb5b5648fa5eea555448a0c2427dd6ae0f683dea8fb0b5b103c71ccc6087272951c6ba732f7da8a740732087a18bc45d997f96ffb5669ff5169562267d5f81edfa07490b3e3fb5a3c1da8c429080082e79126b063020c7468ef94d6a55a02882f87ce496e9fca7c06fda8fb75d394707ff5aa719a20965204ce5f0e41d921c3ce2fde5d41137a431122ccc81a93c09e5a6c351b7d61fa40248c7e3d2c2b33c902aa7fa7554fdb269b0b1254bc245c2be6bd6c94556b11deb1ff51b864a5f9dae88b45a7f405746c25b408bd0b64aaae6762fedaf99a6b185e63fe72245fab62c286a1c7552e4b65d5d5d9ad09dba6e573565f39c06e080ed410d82b894f4a7c4c2ab62d296ef6762f2bb00afb76b640496dd8a710ab28643019dc8ccb236f22e4c992e1754b5a4c5022073eb9ca5c278492c594042b96c1b3fdac0e8438b1bf7475762ceceef46060fa91b4b8c0260e4e306c1316568448602511241af437bdcdfc3f968971bc7b93efad17ef07d32e44874bf0cbf458b14ff2abecbb1f1a0aff409b1207db2f33ff34bd5a8f249a953ae198dd152176d00a116907b1c6a203a719ed1a766e73807db8956dfc0c146b7fb9e7bf391d2eca91d0d9a2776050bb3c33484d77fb654413ad15461e0366812cc9a287433f44d3074a9debc4339e5cf9551ded7861337643ab96d7bb3dd47bea708e940202844bf6fc6d82a7974b6c9620a051ce17c9d6b86017d6198c463cd673b73b1eba183024026a48175a5fac8b735e0a8ff614ddd009030a76a138fee5d6aef5fb4bfc9d8489f5a13fc9b44b3444c3afb066ddbada4bb9d9ca745111faa171d862a0d22252ee4e8051187342c40495fcb905fbd98deb31354bf85e17b350dae79194ccccb804bc7320617a694baf2f7ee7a57fccb881fb25057764f3a2f8b0966970db819d5556242f87437a36ae714cc0107cb3edb2d69210b1488995cdc9501d82e3db6f118e3ac7fe9544f34e02555f039a35c739cc4f750bd1d0b1e6a5e36e0d4d6a1372bc561f40c735b10b26e39abd8256f5d313b87f84d2f9c92e709b4f72a15702c1e8c202ef06d6256a18e3e4dd28205709502aa603c3322902b5f6bddff57ad509187b7c12662fc71c1bac4192273ee42cc075acc209c60f8a4e57a5fa0e7341ce7b27692203fb85869d032446b1d2725e37ff7de6af27a1947d831db875b2cab377422815f19d3bb1ce9a475816014d03f94af60758bdaf9caba5a7e2692bf36977fc59ba1a42e145325033ece11cefbf43763e7d88fefc114334aa7e6733ca6490805eb737d86918259d845dd13b7c2f0a0fe4559691aba3c288a24559dcd8fed7f087476f1586d46453c2d9fd76cb1d297d429b2dd9cb3e3ecd4ab7b4e9287226876e8f15d0104cf8acbf9d414c9ed0cd4b7bbad601164ae83b05118e8d675fdbc47e21887912b649e609c3f31e10982fe5cf165a86900d29520013a8baf131abc88af7beff65724f2cf122240827ea4f377fe39393f86aa45eeb86662e89821785a94a1f031b2c77c7b9d870521ed8a537653d9dee6c131ba006a892a7cfe0e1de96c852454842e54b9be68f2e12e18990ce6f51c710f3ecec5560883a03b74b10a455b4e4310ea73b9bbcbf3934f774ee9e92b900198f3b2d9c2f8965a6e560823ff2c8bd43bfc0f49a8838427e833e5af4afc83279daf1873d567f242acaaf5b2758985b95409f7b8d9e1ee6c8093422e8e65f226660bcf5e78ea5b67b889049dfbd047989fabd2673c9836d6b23982cffd383b8c9c0e3621d9a1fdea2f5f5fdd3be340db08896a84c81c47b403df2ec76c7ab1d47db076668ed9f632f9ed3f6e4645a4ed4926388559a486ff3bd8021d35bc86fe50b55be3a3e8d377be4416f774618459e1e4e3f1c6edc5b029c3b970a7c43e8328cc7c7395a2f7313079ba8266c14c35885f7ff7e2ec9eab1200a87e25afa7c47fe38a22b916165372a5d06a2359e19e42b9f2e7f7c9e6d66c42df7d2ae1cc36e80664c36aa2f0108b01fdd11a18d3f86b6935f744d02fcc3dde4dd69ee1a6a52c043deac103a02f5f6c66770e64c04e3477438df5358cd272314a5637f1647f741e6475df6c912503f068ddd0329406898b1efe2c9ab9575befecfc668bc008acd2e67a4dbfc4ed2fba4f7e336acecd0ee5e68bfeed69b0eac05da53694fe0b0721039eda55e9d7a172d7934e5dc31f2ab2fc94066646a80581c1592123e268c1360ad400a8470e21a45efb0e92cd8bcdeb7145b7c8b2c08492fbd294e482f8f865a5350aafc43bbde61b9b892f5559e7b72d18b2d793f0b42ec6abf81f2a4d082d7f71326e8ba1b5ce8957fa15a60ee972b29c54f9a894f8762dde936c89683888a8bb4e5aa27ef7e49d742f1b137f0e6471f24a7fc4dd9ade7841baf90fa53a257990707f5d1dca4bb7aa6bb3462ac370bdec43c3f4ce47e8695d6c2ae5df8d034ca98678d5c857234b9fb186447569f7c81031d30fe09c42ea520970342d0a4c64e1f6c2f517ad6413ec18f26ffc04ac1c9efdc1d7bd2105598a7ac6925c6c2769bbf3f130066bd082c33ebc5e52050ed9ed70c8c26a7af39165f93084392aea11757e61de0f211a2fbd2968bc8204939d476c477ef947b4644c234a1f699a040d4af7b5b2d21fe46027b5e5bf8b8252fa6d515263c81adcad78064b03c31a5e2dbbf2a90a9dede39d0cf19cfc637330b2d925b96dc789c7dbbf148103f6b445565685286166d91f7da24027c67b5d1c7a6f99140adc32b15535385dae3c4b8ae807a541a105474560ef02f72e87f4aa2d5c8d1f1a6f1e72c9ed5a1387b61e5da366f25a17677418429ca75db928897feb34637d5f320b36a066717dcd2c7bcebb22c321e38af28a23f46add68af963033b9b2168f32e5eb4aa2cdcfa78bf03286eda29df12719877c67ff3b04c6d3bfa55ee170d3a247a636cac4933bd2706984b95a11fdd66ae3d171989d470dc449d83e0027b939ff1e069648e9715954fb1deb072124aea38722a7b6e2072e4f70900c3851769da26d9996ccb3e0b6bc95f1d4b33b2a154ae26febc5d96a2e7606f234223951002faf4cbe20e405cd998e04b3716cc79f6bd8b2ea51d20cd1e2358b1e1f37f8f5f9c4e20286c310bed0f251851f5d5fb8b24e4cee649db785f378939adf393265241df158fe2d4436a5642b5fcb08c0c03da7cac3f2f0126138c0e9f850aaef1feda1e6e60930c5f1a1223b398f15ec5716a8badf8194eccb80edc0f5a2880f8e697adbdefd7a72a2c50fd0b4291f34598ead95a66613ea7b0cae2edaa1976c391f72e4e882d51a91ca20593bd7b7392ad58345e841090895ca4889b68c59f29a295535dae1dcba414a293bdef0f54f569e02fa2f88a8d58605719a0bacdede45a40d119d6e494e6345b92c940d6867d26e2530c8431b15f5c5967362ad75a59508ec58691c4a029518877c60960038722a4f6c7626dd661a6126d570faf0561f43d024e624613ba6e5ff7082c3c20a08da69fca7f8365ea311db5fb2e783256a955fc653297860d1e421248633e9d72058c11af2f5fa90c767584d511928c04a881956df4506f6d6b69f176f20c201c82f5b44270dcfac131e2b91c44d99e22f087bddf33d2fd1384678f56637439d56d3ca59ded61bf2775cf26c5dc3338e52cc588aefb9edca08c8a0152134b90ee041621f9c363bfd9411a554bca926f9445185f9c7561e358454757b4ce87fe4f5244d4990b84a7c50818de2ede580382531e8b5c7ef2024d5c88c6f3ca9ae05f7dd206500d873002222fb081e04d10aaf8894e0056b7eed866f4a4fcd749b5c1078ea5de0f66357c6eef0c58c984f3a279020d5a56fa836cb057f11dc921f9ef9967677ebd83b8f8b27760ba8d43a6fac7673f0b95be8fd0b3903b012fe0198605cf53b8c3c93a6e6d8d65556cf84e9f6cfa57f4bd6fbb82a556c1bbebdd0b83c234b03a8b151d8e90c41ad36a719c7fb8d116dcafa1e8e8d157fa0a121ad52947d455a4280e4b5c4a0ea03d4af79b8b164d523580c1a42a7eb784227668403bbfa971c7ddfdc5f02c9a2a875cc13c8ec82384818dd0c3daec64ceee3c2857e0fed0c558b5c42e9c672156b1dd4e80e4e6ff01c371b3afd416052320c0d29e9b6d2d79f1bdbd99b2173e76700d405d7156ac208e7e5f304da427c26efc54dfbe032ce8d311e7414a7cee900dc2777257565aeb53fbdb0a4a1f01acfc681d795d83a8a506e4e452e3c3c9f8acebb70654306b813e62516aed544540a09014c1ccdd1b73c43d461dec291ac665d9893a6a14ca56e57c64f38bf7e5546eb56f80714362c2b96194d0629512aed06bf03effc1c58313819fd08ced88cc47108a122a26589b9660148c19068752288245707e7e433a883bae1b6a9f5d57037be769a01728fc819529ce1ba0028c95b4036ce9bd541666174d6b30591e111d937ddebf847c66f45e8892f4bca58113c7db4b4768bcaff82ab2d7b303f678ba261624ee218b9dee2530da24a33ccbff54f8b7ca60f5db74909a5d263d189189bc9d2f628877a5e4f23d387168f9738d016ce925d662c85d34f53f8692d4a35f95c0c6c59b2bf4f7d8a3a11262fd308a556ba0cd7b0e0423f9e731ae6b8abdc246cb16842637bc8ec693538c1c05c621eda1beb9562c1cc97c2b1e84e1cd179eaf8e4a42f8b9a9664bb1e1617a033d1df2a912f97351bd18b3e40081b9863077f265e0d86729434096399883044d42598bb685da9165643154efe43faa418881099ccb764ed2fbfd51761c89f704b2c3fbca86d69b6f1cbaf151ab737261be7873c0862f1e6d8fa27c35dbfcf474f17b8f30fc96919a5915964671634bb7b0942d9d04921cbd61d807760f21c1a334c2b2c1a23a3b73c11eb0ca5b59dc275f416895347673d2bdb972558a89c0689fee4bf92cf7850cf932b4b61825d636e7b0b5594de7f69bba7e226391a6a8e88580ae15a5acc49dee66aa8777b718851ef05df3060dfaf4ffc1e0939a49ede2faca03a33d6d3046c53beef6e1f8b4de73c376cc5fc1e53eff2db0bd769b7271dbd91521e5a19de40da54156fc00632700a53b6c0695a11857a1fd06c7c44ab2321b2ff9b91144e867a6920026ecc844edd26e4c8362f5042aa17772db0d5a71a7610b4407e040a4b778614501146f4b7268337c3bca395d297e4ec1b3418620", &(0x7f0000001ac0)=""/105, 0x5, 0x0, 0x10, 0x60, &(0x7f0000001b40)="414dc2c884c0bc0206a25a23ef2d30b9", &(0x7f0000001b80)="77eb9ee033d99e1b83d556459c8723e0ae7e19a7afaa1b61ba6237f556477fe5fc5b68bc1444d57ef1cb8a39d507dd86e4a7d285336b29b9b074ec0157ba47aad4cb5749af8b00a0b5a4a594e530f916959d21a3ab97d204c738628c149784ab", 0x3, 0x0, 0xfff}, 0x50) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000001c80)={0x0, 0x2}) setsockopt$inet_udp_encap(r10, 0x11, 0x64, &(0x7f0000001cc0)=0x1, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000001e40)={'sit0\x00', &(0x7f0000001e00)={'sit0\x00', 0x0, 0x747, 0x20, 0x1, 0x80, {{0x7, 0x4, 0x3, 0x5, 0x1c, 0x67, 0x0, 0xea, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, {[@timestamp={0x44, 0x8, 0x96, 0x0, 0x1, [0x3]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f00)={0x6, 0x4, &(0x7f0000001d00)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000001d40)='GPL\x00', 0x2a, 0x66, &(0x7f0000001d80)=""/102, 0x40f00, 0x1, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e80)={0x4, 0xc, 0x2, 0x59ea}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001ec0)=[{0x2, 0x2, 0x10, 0x3}], 0x10, 0x6}, 0x94) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000021c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002180)={&(0x7f0000002000)={0x180, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x38, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x101}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffc}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xf4, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x180}, 0x1, 0x0, 0x0, 0x1}, 0x30) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r13, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x30, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r14, &(0x7f00000023c0)={&(0x7f0000002300), 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x2c, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4048004) 1.717362906s ago: executing program 2 (id=8812): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08080000001cffff000000019078ac01ac1414aa000090780068000e0000"], 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08080000001cffff000000019078ac01ac1414aa000090780068000e0000"], 0x0) (async) 1.593278403s ago: executing program 2 (id=8813): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600010000000000000000000308000000000000080001"], 0x20}}, 0x0) (async) r2 = socket(0x11, 0x800000003, 0x0) accept4$packet(r2, 0x0, 0x0, 0x800) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async, rerun: 64) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0xffffffffffffffd9, r4, 0x1, 0x1070bd2c, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_LNS_MODE={0x0, 0x14, 0x49}, @L2TP_ATTR_PEER_SESSION_ID={0xfffffffffffffed3, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 1.593083013s ago: executing program 4 (id=8814): r0 = socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x80000025a5, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x4, 0x2, 0x2, 0x3}}, 0x26) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000280)=0x4) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) write(0xffffffffffffffff, &(0x7f0000000380)="a528d210215fed78d5c4f32bf971453e70eb52e7b4ec670dc404f4727536cfd97969efe1adf8c77f23d7e10b41845d47468ccffb3b8d68aedbed75828d675ab602b0ff4a3cf18f3e6d56c850bde005573779d013fa372016ba9aceb06b630377b3b3287bfda2626019e6ea782889fda1e6d5b68541380d306a5535268c04", 0x7e) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {0x0}, {&(0x7f0000000200)=""/157, 0x9d}], 0x4}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000029c0)=""/190, 0xbe}, {&(0x7f00000028c0)=""/236, 0xec}, {&(0x7f0000002b80)=""/4100, 0x1004}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000500)=""/240, 0xf0}], 0x5}, 0x9}], 0x4, 0x4022, 0x0) r7 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, 0x0, 0xfdef) close(r3) 1.592822196s ago: executing program 0 (id=8815): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x2c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001640), 0x4) (async) sendmsg$unix(r2, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x40) (async) listen(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000030a01010000000000000000010000000900010073797a300000000028000480080002400000000008000140000000050400040076657468315f746f5f62617461647600090003"], 0xa4}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@deltclass={0x5c, 0x29, 0x2, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x5}, {0xffff, 0x8}, {0xd, 0xc}}, [@tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0xd}}, @TCA_RATE={0x6, 0x5, {0x5, 0xe}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0xca}}, @TCA_RATE={0x6, 0x5, {0xb, 0x50}}]}, 0x5c}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x0) socketpair(0x29, 0x5, 0x9, &(0x7f0000000080)={0xffffffffffffffff}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) (async) sendmsg$nl_route(r10, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=@getnexthop={0x18, 0x6a, 0x100, 0x70bd27, 0x25dfdbfb}, 0x18}, 0x1, 0x0, 0x0, 0x4014}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)={0x50, r12, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044040}, 0x20008000) 1.591745895s ago: executing program 1 (id=8816): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e, 0x100000) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000003062000020001280080001006774700014000280080004000100000008000100", @ANYRES32=r3, @ANYBLOB="030000000000000016b80000"], 0x4c}}, 0x0) sendto$unix(r1, &(0x7f0000000100)="4456e29221c75762280266007fc0cc8d0dbc53832fb8e2163d7e7679f11a7a397a1d6f4e932ea2665ca72b11c3d59bf3f281e51463085e2da5d2a27fba4e1a4b84e490d0a1e56dd4e962ab52200d553862e3e653e75de621ade52c80a2ccce9868e50490f52342c5731912d8ee8ecd3c56205b2b35f836c69542dbaf", 0x7c, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c000000100003042dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="150200000000000008000a00", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="2c00128009000100766c616e000000001c1002820600000000000000100004800c000100031f000008000000"], 0x5c}, 0x1, 0xba01}, 0x4000040) 1.308072966s ago: executing program 0 (id=8817): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 1.254813757s ago: executing program 1 (id=8818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) pread64(r1, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000600000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb9c2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xdc1f}]}, 0x3c}}, 0x8080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 1.19815416s ago: executing program 3 (id=8819): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@local, @local, 0x20, 0x10}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x43}}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0300", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20000011}, 0x8855) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000280)=""/172, 0xac}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) 1.107827046s ago: executing program 2 (id=8820): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2001000016"], 0x148}}, 0x8095) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, 0x0, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x47c5, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x47c5, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000400)={0x0, 0x2, "64da36", 0xb, 0x8b}) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x28, r6, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '#).-!'}]}, 0x28}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x2000c810) 1.089148434s ago: executing program 1 (id=8821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xf5ff}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x40000}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 964.226643ms ago: executing program 0 (id=8822): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r1], 0x80}}, 0x0) 916.033298ms ago: executing program 3 (id=8823): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xdc05) 915.917542ms ago: executing program 1 (id=8824): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000000000f100000000000018000000000600000000000000000000d3000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) 858.201952ms ago: executing program 3 (id=8825): getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x5, 0x1, 0x6, 0x6, 0xfff}, &(0x7f00000000c0)=0x98) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x7ff, 0x0, 0x2, 0x8, r0}, &(0x7f0000000140)=0x10) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x1, 0xa, 0x0, 0x80, r0}, &(0x7f00000001c0)=0x10) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000200), 0x4) close(r3) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e, 0x80000) sendto$unix(r4, &(0x7f0000000540)="a21663bff59e2a17821d246ba19ec216e43175d4dc81c0fbdd13e07fb62ede49f0a3e8160484893f0e7d7eb4f5aa0d173d2358b35270a9c23aaf932cec9a190525a3abbe82295b8167fb5e10970fd2ce9b1b501383a89bdfbc4448c658c8bb07bfa1ae1d66ed893781b4d67c507da5cced177d67158ed7f85438db2839be284c075f161be9206e5d4fbae366eaa9fad95ecc8f5f24ef7b0f106b9ebcbb049979525ab6566e5bc8bd4531d18ea305cf3af54e469561123b4f1d6702be92c28ec0fa8ba5e88b8b7f3c13050b5a6db1d532ac087a6940eb3fdc1ae1d09af707a4ef912d6598e7c71e50", 0xe8, 0x80c4, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000640)={0x0, 0xed, 0x3, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000a40)={0x8, 0x2, {0xb, @struct={0x2, 0x80000001}, r5, 0x6, 0xab, 0x6, 0x2, 0x3371ea48, 0x20, @usage=0x9, 0x5, 0x10001, [0xab9, 0x1, 0xe7, 0x100000001]}, {0x6, @struct={0x8, 0x40}, 0x0, 0x101, 0x8000000000000000, 0x5, 0x3, 0x5, 0x0, @struct={0xffffff00, 0xe8a}, 0x2, 0x3, [0xff, 0x8, 0x6172403e, 0x1, 0x100, 0x8]}, {0xfffffffffffffff8, @usage=0x3, 0x0, 0x10000, 0x10, 0x82d4, 0x32a0, 0x6000, 0x490, @struct={0xa62, 0x8001}, 0x6, 0x5, [0xb300, 0x100000001, 0x2, 0x1, 0x101, 0xfffffffffffff3f2]}, {0x3, 0x7, 0xffffffffffffff7f}}) getpeername$tipc(r3, &(0x7f0000000e40)=@name, &(0x7f0000000e80)=0x10) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000ec0)={{r3}, "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"}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001f00)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000002000)={&(0x7f0000001ec0), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)=@getchain={0x74, 0x66, 0x300, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x10, 0xffff}, {0x2, 0xc}, {0x2, 0xfffa}}, [{0x8, 0xb, 0xe}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x5c}, {0x8, 0xb, 0x490}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xffff61c3}, {0x8, 0xb, 0x89bd}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x7fffffff}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000e880}, 0x40000) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000002040)={@dev={0xac, 0x14, 0x14, 0x10}, @broadcast, 0xffffffffffffffff, "bed518516df3457bd1ae3f5bf6ad0762e9fe2e9e6e9c2a3a4241404e06d3805b", 0x7ff, 0xfffffff7, 0xcb, 0x1}, 0x3c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000002080)=0x821, 0x4) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept$nfc_llcp(r8, &(0x7f00000020c0), &(0x7f0000002140)=0x60) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000021c0)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e24, @multicast1}, 0x1a8, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002180)='caif0\x00', 0x4, 0x400, 0x7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r9, &(0x7f0000002280)=""/4096, 0x1000, 0x0, &(0x7f0000003280)=@file={0x1, './file0\x00'}, 0x6e) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000003300)={0x1f, 0x3}, 0x6) r11 = socket$key(0xf, 0x3, 0x2) accept(r11, 0x0, &(0x7f0000003340)) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f00000033c0)={0x4, &(0x7f0000003380)=[{0xc, 0x3a, 0x5, 0x8}, {0x8001, 0x2c, 0xa, 0x4}, {0x1000, 0x9, 0x8, 0x8}, {0x5064, 0x6, 0x4, 0xb06}]}, 0x10) 785.453029ms ago: executing program 1 (id=8826): r0 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x1c, r5, 0x431, 0x0, 0x3, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc815) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xdae, 0x17}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x30}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x1c8, r0, 0x4, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8000}, {0xc, 0x90, 0x400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x200}, {0xc, 0x90, 0x5c}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xb}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xfff}, {0xc, 0x90, 0x1000}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x80000000}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x40}, {0xc, 0x90, 0xfb54}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000080)=""/78, &(0x7f0000000100)=0x4e) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRES16=r2, @ANYBLOB="0500000000000029d51f051158c1c7000000", @ANYRES32=r4, @ANYRES16=r7], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) 641.93637ms ago: executing program 0 (id=8827): r0 = socket$inet(0x2, 0x3, 0x7) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001100)={'sit0\x00', &(0x7f0000001040)={'tunl0\x00', 0x0, 0x1, 0x7800, 0x8, 0x7, {{0x23, 0x4, 0x1, 0x6, 0x8c, 0x66, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x17, 0x12, [@private=0xa010100, @loopback, @loopback, @broadcast, @empty]}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x3c, 0x54, 0x3, 0xf, [{@empty, 0x8}, {@multicast1, 0x8}, {@rand_addr=0x64010101, 0xe}, {@multicast2, 0xffff73a0}, {@broadcast, 0x2}, {@remote, 0x400}, {@rand_addr=0x64010100, 0x8}]}, @cipso={0x86, 0x14, 0x2, [{0x5, 0xb, "83d4509d2325771af9"}, {0x1, 0x3, "fc"}]}, @ra={0x94, 0x4}]}}}}}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000001140)={0x1d, r1, 0x0, {0x1, 0x1, 0x3}}, 0x18) (async) bind$can_j1939(0xffffffffffffffff, &(0x7f0000001140)={0x1d, r1, 0x0, {0x1, 0x1, 0x3}}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001180)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x58, r3, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1f9756db272f49eb}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x800) (async) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x58, r3, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x4c}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1f9756db272f49eb}]}, 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x800) socket$netlink(0x10, 0x3, 0xc) (async) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x5c, r3, 0x612, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x401}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "874b6ecb9f13c33ef16b945cd7"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x5c, r3, 0x612, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x401}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "874b6ecb9f13c33ef16b945cd7"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pread64(r0, &(0x7f0000001480)=""/109, 0x6d, 0x3) pipe(&(0x7f0000001500)) (async) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001580), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x3c, r7, 0x4, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc003}, 0x400c004) ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f0000001680)={0xe, 0x4c66832d}) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f00000016c0)=0xf, 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) recvmmsg(r5, &(0x7f0000002700)=[{{&(0x7f0000001700)=@caif=@dbg, 0x80, &(0x7f0000001980)=[{&(0x7f0000001780)=""/79, 0x4f}, {&(0x7f0000001800)=""/152, 0x98}, {&(0x7f00000018c0)=""/163, 0xa3}], 0x3}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/114, 0x72}], 0x2, &(0x7f0000001ac0)=""/39, 0x27}, 0x4}, {{&(0x7f0000001b00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001b80)=""/18, 0x12}, {&(0x7f0000001bc0)=""/115, 0x73}, {&(0x7f0000001c40)=""/96, 0x60}, {&(0x7f0000001cc0)=""/212, 0xd4}, {&(0x7f0000001dc0)=""/95, 0x5f}], 0x5, &(0x7f0000001ec0)=""/79, 0x4f}, 0x1000}, {{&(0x7f0000001f40)=@rc={0x1f, @none}, 0x80, &(0x7f0000002580)=[{&(0x7f0000001fc0)=""/251, 0xfb}, {&(0x7f00000020c0)=""/21, 0x15}, {&(0x7f0000002100)=""/230, 0xe6}, {&(0x7f0000002200)=""/2, 0x2}, {&(0x7f0000002240)=""/217, 0xd9}, {&(0x7f0000002340)=""/129, 0x81}, {&(0x7f0000002400)=""/48, 0x30}, {&(0x7f0000002440)=""/27, 0x1b}, {&(0x7f0000002480)=""/169, 0xa9}, {&(0x7f0000002540)=""/24, 0x18}], 0xa, &(0x7f0000002640)=""/158, 0x9e}, 0x6}], 0x4, 0x40000021, &(0x7f0000002800)={0x77359400}) (async) recvmmsg(r5, &(0x7f0000002700)=[{{&(0x7f0000001700)=@caif=@dbg, 0x80, &(0x7f0000001980)=[{&(0x7f0000001780)=""/79, 0x4f}, {&(0x7f0000001800)=""/152, 0x98}, {&(0x7f00000018c0)=""/163, 0xa3}], 0x3}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/114, 0x72}], 0x2, &(0x7f0000001ac0)=""/39, 0x27}, 0x4}, {{&(0x7f0000001b00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001b80)=""/18, 0x12}, {&(0x7f0000001bc0)=""/115, 0x73}, {&(0x7f0000001c40)=""/96, 0x60}, {&(0x7f0000001cc0)=""/212, 0xd4}, {&(0x7f0000001dc0)=""/95, 0x5f}], 0x5, &(0x7f0000001ec0)=""/79, 0x4f}, 0x1000}, {{&(0x7f0000001f40)=@rc={0x1f, @none}, 0x80, &(0x7f0000002580)=[{&(0x7f0000001fc0)=""/251, 0xfb}, {&(0x7f00000020c0)=""/21, 0x15}, {&(0x7f0000002100)=""/230, 0xe6}, {&(0x7f0000002200)=""/2, 0x2}, {&(0x7f0000002240)=""/217, 0xd9}, {&(0x7f0000002340)=""/129, 0x81}, {&(0x7f0000002400)=""/48, 0x30}, {&(0x7f0000002440)=""/27, 0x1b}, {&(0x7f0000002480)=""/169, 0xa9}, {&(0x7f0000002540)=""/24, 0x18}], 0xa, &(0x7f0000002640)=""/158, 0x9e}, 0x6}], 0x4, 0x40000021, &(0x7f0000002800)={0x77359400}) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002880), r5) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x30, r9, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r10 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000002980), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r10, 0x80049367, &(0x7f00000029c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r6) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r6) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x58, r11, 0x0, 0x81, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x804) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r12, 0x0, 0x20, &(0x7f0000002b80)={@remote, @remote, r8}, 0xc) (async) setsockopt$inet_mreqn(r12, 0x0, 0x20, &(0x7f0000002b80)={@remote, @remote, r8}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000002bc0)=0x95, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000002bc0)=0x95, 0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000002c40), r5) sendmsg$GTP_CMD_GETPDP(r13, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x50, r14, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x2b}, @GTPA_FAMILY={0x5, 0xd, 0xb}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x48880}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 641.328967ms ago: executing program 4 (id=8828): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x17, 0x8}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg$unix(r5, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x52, 0x0, &(0x7f00000002c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x3}, {0xf, 0xffff}, {0xc, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) 587.872024ms ago: executing program 1 (id=8829): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001640)=[{{&(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000001140)="c59a9693bd6a6c6f68ff71648498a367bdd52f96c8c8c32944821a214b18eeae3026eca24316d74dab904d48ca637f80acae1aed1a92b9eeed726e39fcb8852848a8ef3dc763d87488bad0b1ccc03b780aaedb671c0405a083db6ac3d2c0c643d53d0280347df6222f5ebdfdf9c27d021458b1368ab240eca40fb3329706f869d159def1c4feab40790624fefb6174e24d0334afa341225350a6236445cb9a29929abae2e059732f998afc3b4226190bc6aa0ea3e9413c92a8dafb1d594ff2e1759d8d616e450534a0f3b97c544b397a9e7d915cabfa37e0b30859a9", 0xdc}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000800)="931748ffe238461bdd06ee7e0d91513b33ece4dcaea59e2e0347875bf70f67848d383772091cd824a63ddbe4c37eaa9010826853e1b39394932183afd94615404d05a248bd0e18029c91f1", 0x4b}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) close(0x3) 486.360377ms ago: executing program 0 (id=8830): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4888}, 0x0) 480.877257ms ago: executing program 4 (id=8831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x503, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004, 0x4c20}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x4c}}, 0x24048020) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0xbac00000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$netlink(0x10, 0x3, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480), 0x1000000000000394}, 0x24040090) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x80c4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r7) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x1f, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001400030500008000ffdbdf25020751ff", @ANYRES32=r10, @ANYBLOB="080002007f"], 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) 0s ago: executing program 2 (id=8832): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 87581][T28585] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 622.901865][T28586] netlink: 'syz.2.7583': attribute type 10 has an invalid length. [ 623.050355][T28590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7587'. [ 623.553792][T28608] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7596'. [ 623.628748][T28612] netlink: zone id is out of range [ 623.647380][ T1042] hsr_slave_0: left promiscuous mode [ 623.653053][T28612] netlink: del zone limit has 4 unknown bytes [ 623.664089][ T1042] hsr_slave_1: left promiscuous mode [ 623.690475][T28616] netlink: 'syz.3.7600': attribute type 1 has an invalid length. [ 623.874072][T28623] netlink: 'syz.1.7601': attribute type 10 has an invalid length. [ 624.253979][ T1306] clip:clip_start_xmit: skb_dst(skb) == NULL [ 624.260122][ T1306] lec:lec_start_xmit: lec0:No lecd attached [ 625.066766][T28608] 8021q: VLANs not supported on gre0 [ 625.675730][T28647] FAULT_INJECTION: forcing a failure. [ 625.675730][T28647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.730474][T28647] CPU: 0 UID: 0 PID: 28647 Comm: syz.0.7610 Not tainted syzkaller #0 PREEMPT(full) [ 625.730499][T28647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 625.730511][T28647] Call Trace: [ 625.730518][T28647] [ 625.730526][T28647] dump_stack_lvl+0x189/0x250 [ 625.730551][T28647] ? __pfx____ratelimit+0x10/0x10 [ 625.730576][T28647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.730595][T28647] ? __pfx__printk+0x10/0x10 [ 625.730617][T28647] ? __might_fault+0xb0/0x130 [ 625.730650][T28647] should_fail_ex+0x414/0x560 [ 625.730677][T28647] _copy_from_iter+0x1de/0x1790 [ 625.730704][T28647] ? rcu_is_watching+0x15/0xb0 [ 625.730724][T28647] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 625.730748][T28647] ? __pfx__copy_from_iter+0x10/0x10 [ 625.730769][T28647] ? __build_skb_around+0x257/0x3e0 [ 625.730792][T28647] ? netlink_sendmsg+0x642/0xb30 [ 625.730807][T28647] ? skb_put+0x11b/0x210 [ 625.730829][T28647] netlink_sendmsg+0x6b2/0xb30 [ 625.730857][T28647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.730877][T28647] ? aa_sock_msg_perm+0xf1/0x1d0 [ 625.730896][T28647] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 625.730916][T28647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.730935][T28647] __sock_sendmsg+0x21c/0x270 [ 625.730961][T28647] ____sys_sendmsg+0x505/0x830 [ 625.730987][T28647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 625.731016][T28647] ? import_iovec+0x74/0xa0 [ 625.731040][T28647] ___sys_sendmsg+0x21f/0x2a0 [ 625.731063][T28647] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.731127][T28647] ? __fget_files+0x2a/0x420 [ 625.731143][T28647] ? __fget_files+0x3a0/0x420 [ 625.731170][T28647] __x64_sys_sendmsg+0x19b/0x260 [ 625.731193][T28647] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 625.731223][T28647] ? __pfx_ksys_write+0x10/0x10 [ 625.731251][T28647] ? do_syscall_64+0xbe/0x3b0 [ 625.731272][T28647] do_syscall_64+0xfa/0x3b0 [ 625.731288][T28647] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.731312][T28647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.731329][T28647] ? clear_bhb_loop+0x60/0xb0 [ 625.731351][T28647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.731368][T28647] RIP: 0033:0x7f0be5f8ebe9 [ 625.731385][T28647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.731400][T28647] RSP: 002b:00007f0be6e3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.731419][T28647] RAX: ffffffffffffffda RBX: 00007f0be61c6090 RCX: 00007f0be5f8ebe9 [ 625.731432][T28647] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 625.731445][T28647] RBP: 00007f0be6e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 625.731457][T28647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.731468][T28647] R13: 00007f0be61c6128 R14: 00007f0be61c6090 R15: 00007ffe591798b8 [ 625.731498][T28647] [ 626.294193][T28658] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 626.300969][T28658] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 626.349867][T28661] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7613'. [ 626.489896][T28667] wg2: entered promiscuous mode [ 626.495026][T28667] wg2: entered allmulticast mode [ 626.524304][T28669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7617'. [ 626.584143][ T1042] IPVS: stop unused estimator thread 0... [ 626.613398][T28673] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7622'. [ 626.676003][T28673] 8021q: VLANs not supported on gre0 [ 627.336491][T28709] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7633'. [ 627.360647][T28711] FAULT_INJECTION: forcing a failure. [ 627.360647][T28711] name failslab, interval 1, probability 0, space 0, times 0 [ 627.401678][T28711] CPU: 1 UID: 0 PID: 28711 Comm: syz.3.7634 Not tainted syzkaller #0 PREEMPT(full) [ 627.401703][T28711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 627.401720][T28711] Call Trace: [ 627.401728][T28711] [ 627.401737][T28711] dump_stack_lvl+0x189/0x250 [ 627.401763][T28711] ? __pfx____ratelimit+0x10/0x10 [ 627.401787][T28711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.401807][T28711] ? __pfx__printk+0x10/0x10 [ 627.401831][T28711] ? __lock_acquire+0xab9/0xd20 [ 627.401863][T28711] should_fail_ex+0x414/0x560 [ 627.401891][T28711] should_failslab+0xa8/0x100 [ 627.401916][T28711] kmem_cache_alloc_noprof+0x73/0x3c0 [ 627.401937][T28711] ? skb_clone+0x212/0x3a0 [ 627.401961][T28711] skb_clone+0x212/0x3a0 [ 627.401984][T28711] __netlink_deliver_tap+0x404/0x850 [ 627.402021][T28711] ? netlink_deliver_tap+0x2e/0x1b0 [ 627.402046][T28711] netlink_deliver_tap+0x19c/0x1b0 [ 627.402071][T28711] netlink_unicast+0x7fa/0x9e0 [ 627.402101][T28711] ? __pfx_netlink_unicast+0x10/0x10 [ 627.402126][T28711] ? netlink_sendmsg+0x642/0xb30 [ 627.402140][T28711] ? skb_put+0x11b/0x210 [ 627.402162][T28711] netlink_sendmsg+0x805/0xb30 [ 627.402189][T28711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.402210][T28711] ? aa_sock_msg_perm+0xf1/0x1d0 [ 627.402230][T28711] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 627.402248][T28711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.402265][T28711] __sock_sendmsg+0x21c/0x270 [ 627.402291][T28711] ____sys_sendmsg+0x505/0x830 [ 627.402316][T28711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.402344][T28711] ? import_iovec+0x74/0xa0 [ 627.402368][T28711] ___sys_sendmsg+0x21f/0x2a0 [ 627.402389][T28711] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.402447][T28711] ? __fget_files+0x2a/0x420 [ 627.402462][T28711] ? __fget_files+0x3a0/0x420 [ 627.402489][T28711] __x64_sys_sendmsg+0x19b/0x260 [ 627.402512][T28711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.402541][T28711] ? __pfx_ksys_write+0x10/0x10 [ 627.402560][T28711] ? rcu_is_watching+0x15/0xb0 [ 627.402583][T28711] ? do_syscall_64+0xbe/0x3b0 [ 627.402603][T28711] do_syscall_64+0xfa/0x3b0 [ 627.402618][T28711] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.402640][T28711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.402658][T28711] ? clear_bhb_loop+0x60/0xb0 [ 627.402682][T28711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.402698][T28711] RIP: 0033:0x7f25c358ebe9 [ 627.402719][T28711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.402734][T28711] RSP: 002b:00007f25c447c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.402753][T28711] RAX: ffffffffffffffda RBX: 00007f25c37c5fa0 RCX: 00007f25c358ebe9 [ 627.402766][T28711] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 627.402778][T28711] RBP: 00007f25c447c090 R08: 0000000000000000 R09: 0000000000000000 [ 627.402789][T28711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.402800][T28711] R13: 00007f25c37c6038 R14: 00007f25c37c5fa0 R15: 00007ffca3f893d8 [ 627.402831][T28711] [ 627.561314][T28713] netlink: 'syz.1.7635': attribute type 1 has an invalid length. [ 627.798952][T28716] netlink: zone id is out of range [ 627.874363][T28716] netlink: zone id is out of range [ 627.890043][T28716] netlink: zone id is out of range [ 627.912393][T28716] netlink: zone id is out of range [ 627.946032][T28716] netlink: zone id is out of range [ 627.951769][T28716] netlink: del zone limit has 4 unknown bytes [ 627.999391][T28721] tipc: Enabled bearer , priority 0 [ 628.220077][T28721] syzkaller0: entered promiscuous mode [ 628.230635][T28721] syzkaller0: entered allmulticast mode [ 628.242794][T28721] tipc: Resetting bearer [ 628.475229][T28720] tipc: Resetting bearer [ 628.496155][T28741] netlink: 'syz.0.7644': attribute type 2 has an invalid length. [ 628.593100][T28746] netlink: 'syz.2.7646': attribute type 1 has an invalid length. [ 628.620911][T28747] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7647'. [ 628.633659][T28746] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7646'. [ 628.866743][T28756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7651'. [ 629.098190][T28765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7654'. [ 629.364825][ C0] net_ratelimit: 2 callbacks suppressed [ 629.364847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.763639][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 629.771683][ C1] lec:lec_tx_timeout: lec0 [ 631.065886][T28720] tipc: Disabling bearer [ 631.634508][T28795] netlink: 'syz.4.7663': attribute type 6 has an invalid length. [ 631.715298][T28797] rdma_rxe: rxe_newlink: failed to add lo [ 631.808122][T28799] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7665'. [ 632.522444][T28830] FAULT_INJECTION: forcing a failure. [ 632.522444][T28830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.546169][T28834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7678'. [ 632.571311][T28830] CPU: 0 UID: 0 PID: 28830 Comm: syz.4.7676 Not tainted syzkaller #0 PREEMPT(full) [ 632.571337][T28830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 632.571349][T28830] Call Trace: [ 632.571357][T28830] [ 632.571366][T28830] dump_stack_lvl+0x189/0x250 [ 632.571392][T28830] ? __pfx____ratelimit+0x10/0x10 [ 632.571416][T28830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.571436][T28830] ? __pfx__printk+0x10/0x10 [ 632.571457][T28830] ? __might_fault+0xb0/0x130 [ 632.571489][T28830] should_fail_ex+0x414/0x560 [ 632.571517][T28830] _copy_from_user+0x2d/0xb0 [ 632.571538][T28830] ___sys_sendmsg+0x158/0x2a0 [ 632.571562][T28830] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.571616][T28830] ? __fget_files+0x2a/0x420 [ 632.571632][T28830] ? __fget_files+0x3a0/0x420 [ 632.571658][T28830] __x64_sys_sendmsg+0x19b/0x260 [ 632.571680][T28830] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 632.571709][T28830] ? __pfx_ksys_write+0x10/0x10 [ 632.571728][T28830] ? rcu_is_watching+0x15/0xb0 [ 632.571751][T28830] ? do_syscall_64+0xbe/0x3b0 [ 632.571772][T28830] do_syscall_64+0xfa/0x3b0 [ 632.571787][T28830] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.571809][T28830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.571826][T28830] ? clear_bhb_loop+0x60/0xb0 [ 632.571848][T28830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.571864][T28830] RIP: 0033:0x7fc22158ebe9 [ 632.571879][T28830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.571893][T28830] RSP: 002b:00007fc2223f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.571912][T28830] RAX: ffffffffffffffda RBX: 00007fc2217c5fa0 RCX: 00007fc22158ebe9 [ 632.571925][T28830] RDX: 0000000000040000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 632.571937][T28830] RBP: 00007fc2223f1090 R08: 0000000000000000 R09: 0000000000000000 [ 632.571947][T28830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.571958][T28830] R13: 00007fc2217c6038 R14: 00007fc2217c5fa0 R15: 00007ffedf5fceb8 [ 632.571988][T28830] [ 632.814632][T28838] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7679'. [ 633.190983][T28848] FAULT_INJECTION: forcing a failure. [ 633.190983][T28848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.206812][T28852] rdma_rxe: rxe_newlink: failed to add lo [ 633.259061][T28848] CPU: 1 UID: 0 PID: 28848 Comm: syz.2.7686 Not tainted syzkaller #0 PREEMPT(full) [ 633.259086][T28848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 633.259097][T28848] Call Trace: [ 633.259104][T28848] [ 633.259113][T28848] dump_stack_lvl+0x189/0x250 [ 633.259138][T28848] ? __pfx____ratelimit+0x10/0x10 [ 633.259161][T28848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.259181][T28848] ? __pfx__printk+0x10/0x10 [ 633.259209][T28848] ? __might_fault+0xb0/0x130 [ 633.259242][T28848] should_fail_ex+0x414/0x560 [ 633.259270][T28848] _copy_from_iter+0x1de/0x1790 [ 633.259296][T28848] ? rcu_is_watching+0x15/0xb0 [ 633.259315][T28848] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 633.259338][T28848] ? __pfx__copy_from_iter+0x10/0x10 [ 633.259358][T28848] ? __build_skb_around+0x257/0x3e0 [ 633.259379][T28848] ? netlink_sendmsg+0x642/0xb30 [ 633.259395][T28848] ? skb_put+0x11b/0x210 [ 633.259416][T28848] netlink_sendmsg+0x6b2/0xb30 [ 633.259445][T28848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.259466][T28848] ? aa_sock_msg_perm+0xf1/0x1d0 [ 633.259485][T28848] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 633.259503][T28848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.259521][T28848] __sock_sendmsg+0x21c/0x270 [ 633.259547][T28848] ____sys_sendmsg+0x505/0x830 [ 633.259572][T28848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.259600][T28848] ? import_iovec+0x74/0xa0 [ 633.259624][T28848] ___sys_sendmsg+0x21f/0x2a0 [ 633.259645][T28848] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.259700][T28848] ? __fget_files+0x2a/0x420 [ 633.259716][T28848] ? __fget_files+0x3a0/0x420 [ 633.259741][T28848] __x64_sys_sendmsg+0x19b/0x260 [ 633.259763][T28848] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 633.259791][T28848] ? __pfx_ksys_write+0x10/0x10 [ 633.259810][T28848] ? rcu_is_watching+0x15/0xb0 [ 633.259832][T28848] ? do_syscall_64+0xbe/0x3b0 [ 633.259853][T28848] do_syscall_64+0xfa/0x3b0 [ 633.259868][T28848] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.259890][T28848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.259907][T28848] ? clear_bhb_loop+0x60/0xb0 [ 633.259927][T28848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.259944][T28848] RIP: 0033:0x7f4ebdd8ebe9 [ 633.259960][T28848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.259975][T28848] RSP: 002b:00007f4ebbff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.259993][T28848] RAX: ffffffffffffffda RBX: 00007f4ebdfc5fa0 RCX: 00007f4ebdd8ebe9 [ 633.260006][T28848] RDX: 0000000000040000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 633.260018][T28848] RBP: 00007f4ebbff6090 R08: 0000000000000000 R09: 0000000000000000 [ 633.260029][T28848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.260040][T28848] R13: 00007f4ebdfc6038 R14: 00007f4ebdfc5fa0 R15: 00007ffcf2612728 [ 633.260070][T28848] [ 633.572314][T28858] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7688'. [ 633.870981][T28870] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 633.921462][T28875] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7692'. [ 634.172889][T28887] FAULT_INJECTION: forcing a failure. [ 634.172889][T28887] name failslab, interval 1, probability 0, space 0, times 0 [ 634.203999][T28887] CPU: 0 UID: 0 PID: 28887 Comm: syz.0.7698 Not tainted syzkaller #0 PREEMPT(full) [ 634.204024][T28887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 634.204036][T28887] Call Trace: [ 634.204044][T28887] [ 634.204052][T28887] dump_stack_lvl+0x189/0x250 [ 634.204098][T28887] ? __pfx____ratelimit+0x10/0x10 [ 634.204123][T28887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.204142][T28887] ? __pfx__printk+0x10/0x10 [ 634.204170][T28887] ? __pfx___might_resched+0x10/0x10 [ 634.204192][T28887] should_fail_ex+0x414/0x560 [ 634.204220][T28887] should_failslab+0xa8/0x100 [ 634.204245][T28887] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 634.204267][T28887] ? __alloc_skb+0x112/0x2d0 [ 634.204289][T28887] __alloc_skb+0x112/0x2d0 [ 634.204311][T28887] netlink_sendmsg+0x5c6/0xb30 [ 634.204344][T28887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.204365][T28887] ? aa_sock_msg_perm+0xf1/0x1d0 [ 634.204384][T28887] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.204402][T28887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.204420][T28887] __sock_sendmsg+0x21c/0x270 [ 634.204446][T28887] ____sys_sendmsg+0x505/0x830 [ 634.204472][T28887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.204500][T28887] ? import_iovec+0x74/0xa0 [ 634.204523][T28887] ___sys_sendmsg+0x21f/0x2a0 [ 634.204544][T28887] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.204599][T28887] ? __fget_files+0x2a/0x420 [ 634.204614][T28887] ? __fget_files+0x3a0/0x420 [ 634.204640][T28887] __x64_sys_sendmsg+0x19b/0x260 [ 634.204662][T28887] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.204692][T28887] ? __pfx_ksys_write+0x10/0x10 [ 634.204719][T28887] ? do_syscall_64+0xbe/0x3b0 [ 634.204739][T28887] do_syscall_64+0xfa/0x3b0 [ 634.204754][T28887] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.204776][T28887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.204793][T28887] ? clear_bhb_loop+0x60/0xb0 [ 634.204813][T28887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.204830][T28887] RIP: 0033:0x7f0be5f8ebe9 [ 634.204847][T28887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.204861][T28887] RSP: 002b:00007f0be6e3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.204880][T28887] RAX: ffffffffffffffda RBX: 00007f0be61c6090 RCX: 00007f0be5f8ebe9 [ 634.204893][T28887] RDX: 0000000000040000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 634.204905][T28887] RBP: 00007f0be6e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 634.204916][T28887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.204927][T28887] R13: 00007f0be61c6128 R14: 00007f0be61c6090 R15: 00007ffe591798b8 [ 634.204958][T28887] [ 634.886411][T28903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7706'. [ 635.019129][T28906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7707'. [ 635.047439][T28908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7708'. [ 635.049759][T28906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7707'. [ 635.196770][T28915] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7710'. [ 635.235577][T28916] netlink: 'syz.2.7711': attribute type 5 has an invalid length. [ 635.238314][T28915] 8021q: VLANs not supported on gre0 [ 635.269225][T28918] FAULT_INJECTION: forcing a failure. [ 635.269225][T28918] name failslab, interval 1, probability 0, space 0, times 0 [ 635.346769][T28918] CPU: 0 UID: 0 PID: 28918 Comm: syz.3.7712 Not tainted syzkaller #0 PREEMPT(full) [ 635.346793][T28918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 635.346803][T28918] Call Trace: [ 635.346811][T28918] [ 635.346819][T28918] dump_stack_lvl+0x189/0x250 [ 635.346843][T28918] ? __pfx____ratelimit+0x10/0x10 [ 635.346866][T28918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.346884][T28918] ? __pfx__printk+0x10/0x10 [ 635.346906][T28918] ? __lock_acquire+0xab9/0xd20 [ 635.346934][T28918] should_fail_ex+0x414/0x560 [ 635.346960][T28918] should_failslab+0xa8/0x100 [ 635.346985][T28918] kmem_cache_alloc_noprof+0x73/0x3c0 [ 635.347003][T28918] ? skb_clone+0x212/0x3a0 [ 635.347025][T28918] skb_clone+0x212/0x3a0 [ 635.347045][T28918] __netlink_deliver_tap+0x404/0x850 [ 635.347077][T28918] ? netlink_deliver_tap+0x2e/0x1b0 [ 635.347102][T28918] netlink_deliver_tap+0x19c/0x1b0 [ 635.347126][T28918] netlink_unicast+0x7fa/0x9e0 [ 635.347156][T28918] ? __pfx_netlink_unicast+0x10/0x10 [ 635.347179][T28918] ? netlink_sendmsg+0x642/0xb30 [ 635.347193][T28918] ? skb_put+0x11b/0x210 [ 635.347212][T28918] netlink_sendmsg+0x805/0xb30 [ 635.347248][T28918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.347270][T28918] ? aa_sock_msg_perm+0xf1/0x1d0 [ 635.347287][T28918] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.347305][T28918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.347322][T28918] __sock_sendmsg+0x21c/0x270 [ 635.347349][T28918] ____sys_sendmsg+0x505/0x830 [ 635.347374][T28918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.347403][T28918] ? import_iovec+0x74/0xa0 [ 635.347426][T28918] ___sys_sendmsg+0x21f/0x2a0 [ 635.347447][T28918] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.347501][T28918] ? __fget_files+0x2a/0x420 [ 635.347516][T28918] ? __fget_files+0x3a0/0x420 [ 635.347540][T28918] __x64_sys_sendmsg+0x19b/0x260 [ 635.347561][T28918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.347589][T28918] ? __pfx_ksys_write+0x10/0x10 [ 635.347615][T28918] ? do_syscall_64+0xbe/0x3b0 [ 635.347637][T28918] do_syscall_64+0xfa/0x3b0 [ 635.347652][T28918] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.347674][T28918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.347691][T28918] ? clear_bhb_loop+0x60/0xb0 [ 635.347711][T28918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.347727][T28918] RIP: 0033:0x7f25c358ebe9 [ 635.347744][T28918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.347759][T28918] RSP: 002b:00007f25c447c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.347779][T28918] RAX: ffffffffffffffda RBX: 00007f25c37c5fa0 RCX: 00007f25c358ebe9 [ 635.347792][T28918] RDX: 0000000000040000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 635.347804][T28918] RBP: 00007f25c447c090 R08: 0000000000000000 R09: 0000000000000000 [ 635.347816][T28918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.347827][T28918] R13: 00007f25c37c6038 R14: 00007f25c37c5fa0 R15: 00007ffca3f893d8 [ 635.347858][T28918] [ 635.863149][T28924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.875798][T28928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7713'. [ 636.045357][T28930] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 636.154563][T28934] FAULT_INJECTION: forcing a failure. [ 636.154563][T28934] name failslab, interval 1, probability 0, space 0, times 0 [ 636.183577][T28934] CPU: 0 UID: 0 PID: 28934 Comm: syz.2.7718 Not tainted syzkaller #0 PREEMPT(full) [ 636.183602][T28934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 636.183614][T28934] Call Trace: [ 636.183621][T28934] [ 636.183630][T28934] dump_stack_lvl+0x189/0x250 [ 636.183655][T28934] ? __pfx____ratelimit+0x10/0x10 [ 636.183678][T28934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.183696][T28934] ? __pfx__printk+0x10/0x10 [ 636.183724][T28934] ? __pfx___might_resched+0x10/0x10 [ 636.183740][T28934] ? fs_reclaim_acquire+0x7d/0x100 [ 636.183768][T28934] should_fail_ex+0x414/0x560 [ 636.183793][T28934] should_failslab+0xa8/0x100 [ 636.183817][T28934] __kmalloc_noprof+0xcb/0x4f0 [ 636.183836][T28934] ? kfree+0x4d/0x440 [ 636.183851][T28934] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 636.183874][T28934] tomoyo_realpath_from_path+0xe3/0x5d0 [ 636.183926][T28934] ? tomoyo_domain+0xd9/0x130 [ 636.183947][T28934] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 636.183968][T28934] tomoyo_path_number_perm+0x1e8/0x5a0 [ 636.183994][T28934] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 636.184032][T28934] ? __lock_acquire+0xab9/0xd20 [ 636.184072][T28934] ? __fget_files+0x2a/0x420 [ 636.184090][T28934] ? __fget_files+0x2a/0x420 [ 636.184103][T28934] ? __fget_files+0x3a0/0x420 [ 636.184117][T28934] ? __fget_files+0x2a/0x420 [ 636.184137][T28934] security_file_ioctl+0xcb/0x2d0 [ 636.184158][T28934] __se_sys_ioctl+0x47/0x170 [ 636.184180][T28934] do_syscall_64+0xfa/0x3b0 [ 636.184195][T28934] ? lockdep_hardirqs_on+0x9c/0x150 [ 636.184216][T28934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.184234][T28934] ? clear_bhb_loop+0x60/0xb0 [ 636.184255][T28934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.184270][T28934] RIP: 0033:0x7f4ebdd8ebe9 [ 636.184287][T28934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.184301][T28934] RSP: 002b:00007f4ebbff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.184320][T28934] RAX: ffffffffffffffda RBX: 00007f4ebdfc5fa0 RCX: 00007f4ebdd8ebe9 [ 636.184333][T28934] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000009 [ 636.184345][T28934] RBP: 00007f4ebbff6090 R08: 0000000000000000 R09: 0000000000000000 [ 636.184357][T28934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.184368][T28934] R13: 00007f4ebdfc6038 R14: 00007f4ebdfc5fa0 R15: 00007ffcf2612728 [ 636.184398][T28934] [ 636.184421][T28934] ERROR: Out of memory at tomoyo_realpath_from_path. [ 636.658266][T28924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 636.808736][T28930] smc: net device erspan0 applied user defined pnetid SYZ0 [ 637.148812][T28958] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000 [ 637.208941][T28961] FAULT_INJECTION: forcing a failure. [ 637.208941][T28961] name failslab, interval 1, probability 0, space 0, times 0 [ 637.223173][T28956] lo speed is unknown, defaulting to 1000 [ 637.256967][T28961] CPU: 1 UID: 0 PID: 28961 Comm: syz.3.7727 Not tainted syzkaller #0 PREEMPT(full) [ 637.256993][T28961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.257004][T28961] Call Trace: [ 637.257012][T28961] [ 637.257021][T28961] dump_stack_lvl+0x189/0x250 [ 637.257046][T28961] ? __pfx____ratelimit+0x10/0x10 [ 637.257070][T28961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.257090][T28961] ? __pfx__printk+0x10/0x10 [ 637.257119][T28961] ? __pfx___might_resched+0x10/0x10 [ 637.257136][T28961] ? fs_reclaim_acquire+0x7d/0x100 [ 637.257166][T28961] should_fail_ex+0x414/0x560 [ 637.257195][T28961] should_failslab+0xa8/0x100 [ 637.257220][T28961] kmem_cache_alloc_noprof+0x73/0x3c0 [ 637.257241][T28961] ? __kernfs_new_node+0xd7/0x7e0 [ 637.257266][T28961] __kernfs_new_node+0xd7/0x7e0 [ 637.257285][T28961] ? __lock_acquire+0xab9/0xd20 [ 637.257316][T28961] ? __pfx___kernfs_new_node+0x10/0x10 [ 637.257340][T28961] ? kernfs_root+0x1c/0x230 [ 637.257367][T28961] ? kernfs_root+0x1c/0x230 [ 637.257384][T28961] ? kernfs_root+0x1c/0x230 [ 637.257400][T28961] ? kernfs_root+0x1c/0x230 [ 637.257424][T28961] kernfs_new_node+0x102/0x210 [ 637.257450][T28961] __kernfs_create_file+0x4b/0x2e0 [ 637.257476][T28961] sysfs_add_file_mode_ns+0x238/0x300 [ 637.257510][T28961] sysfs_merge_group+0x177/0x310 [ 637.257533][T28961] ? __pfx_sysfs_merge_group+0x10/0x10 [ 637.257555][T28961] ? __pfx_device_add_attrs+0x10/0x10 [ 637.257579][T28961] dpm_sysfs_add+0xd2/0x270 [ 637.257602][T28961] device_add+0x4d8/0xb50 [ 637.257626][T28961] rfkill_register+0x17a/0x8e0 [ 637.257656][T28961] nfc_register_device+0x14a/0x320 [ 637.257682][T28961] nci_register_device+0x87f/0x9d0 [ 637.257711][T28961] ? __pfx_nci_register_device+0x10/0x10 [ 637.257734][T28961] ? __raw_spin_lock_init+0x45/0x100 [ 637.257758][T28961] ? __init_waitqueue_head+0xa9/0x150 [ 637.257784][T28961] virtual_ncidev_open+0x129/0x1a0 [ 637.257807][T28961] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 637.257832][T28961] misc_open+0x2bc/0x330 [ 637.257857][T28961] chrdev_open+0x4cc/0x5e0 [ 637.257884][T28961] ? __pfx_chrdev_open+0x10/0x10 [ 637.257912][T28961] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 637.257942][T28961] ? __pfx_chrdev_open+0x10/0x10 [ 637.257963][T28961] do_dentry_open+0x953/0x13f0 [ 637.257998][T28961] vfs_open+0x3b/0x340 [ 637.258013][T28961] ? path_openat+0x2ecd/0x3830 [ 637.258036][T28961] path_openat+0x2ee5/0x3830 [ 637.258054][T28961] ? arch_stack_walk+0xfc/0x150 [ 637.258094][T28961] ? stack_depot_save_flags+0x40/0x860 [ 637.258131][T28961] ? __pfx_path_openat+0x10/0x10 [ 637.258148][T28961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.258189][T28961] do_filp_open+0x1fa/0x410 [ 637.258207][T28961] ? __lock_acquire+0xab9/0xd20 [ 637.258231][T28961] ? __pfx_do_filp_open+0x10/0x10 [ 637.258277][T28961] ? _raw_spin_unlock+0x28/0x50 [ 637.258297][T28961] ? alloc_fd+0x64c/0x6c0 [ 637.258334][T28961] do_sys_openat2+0x121/0x1c0 [ 637.258356][T28961] ? __pfx_do_sys_openat2+0x10/0x10 [ 637.258376][T28961] ? ksys_write+0x22a/0x250 [ 637.258400][T28961] ? __pfx_ksys_write+0x10/0x10 [ 637.258418][T28961] ? rcu_is_watching+0x15/0xb0 [ 637.258441][T28961] __x64_sys_openat+0x138/0x170 [ 637.258466][T28961] do_syscall_64+0xfa/0x3b0 [ 637.258482][T28961] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.258504][T28961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.258521][T28961] ? clear_bhb_loop+0x60/0xb0 [ 637.258543][T28961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.258560][T28961] RIP: 0033:0x7f25c358ebe9 [ 637.258576][T28961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.258591][T28961] RSP: 002b:00007f25c447c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 637.258612][T28961] RAX: ffffffffffffffda RBX: 00007f25c37c5fa0 RCX: 00007f25c358ebe9 [ 637.258625][T28961] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 637.258638][T28961] RBP: 00007f25c447c090 R08: 0000000000000000 R09: 0000000000000000 [ 637.258649][T28961] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000002 [ 637.258661][T28961] R13: 00007f25c37c6038 R14: 00007f25c37c5fa0 R15: 00007ffca3f893d8 [ 637.258693][T28961] [ 637.850628][T28957] netlink: 'syz.2.7725': attribute type 58 has an invalid length. [ 637.858671][T28957] __nla_validate_parse: 5 callbacks suppressed [ 637.858686][T28957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7725'. [ 638.318452][T28991] FAULT_INJECTION: forcing a failure. [ 638.318452][T28991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.364536][T28991] CPU: 1 UID: 0 PID: 28991 Comm: syz.1.7733 Not tainted syzkaller #0 PREEMPT(full) [ 638.364562][T28991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 638.364573][T28991] Call Trace: [ 638.364582][T28991] [ 638.364590][T28991] dump_stack_lvl+0x189/0x250 [ 638.364616][T28991] ? __pfx____ratelimit+0x10/0x10 [ 638.364640][T28991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.364660][T28991] ? __pfx__printk+0x10/0x10 [ 638.364682][T28991] ? __might_fault+0xb0/0x130 [ 638.364715][T28991] should_fail_ex+0x414/0x560 [ 638.364742][T28991] _copy_from_user+0x2d/0xb0 [ 638.364763][T28991] ___sys_sendmsg+0x158/0x2a0 [ 638.364786][T28991] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.364842][T28991] ? __fget_files+0x2a/0x420 [ 638.364858][T28991] ? __fget_files+0x3a0/0x420 [ 638.364884][T28991] __x64_sys_sendmsg+0x19b/0x260 [ 638.364907][T28991] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 638.364936][T28991] ? __pfx_ksys_write+0x10/0x10 [ 638.364962][T28991] ? rcu_is_watching+0x15/0xb0 [ 638.364985][T28991] ? do_syscall_64+0xbe/0x3b0 [ 638.365006][T28991] do_syscall_64+0xfa/0x3b0 [ 638.365022][T28991] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.365044][T28991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.365061][T28991] ? clear_bhb_loop+0x60/0xb0 [ 638.365082][T28991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.365099][T28991] RIP: 0033:0x7fbfd8f8ebe9 [ 638.365115][T28991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.365129][T28991] RSP: 002b:00007fbfd9e4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.365148][T28991] RAX: ffffffffffffffda RBX: 00007fbfd91c5fa0 RCX: 00007fbfd8f8ebe9 [ 638.365162][T28991] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 638.365173][T28991] RBP: 00007fbfd9e4a090 R08: 0000000000000000 R09: 0000000000000000 [ 638.365185][T28991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.365196][T28991] R13: 00007fbfd91c6038 R14: 00007fbfd91c5fa0 R15: 00007ffd9bae44c8 [ 638.365226][T28991] [ 638.831296][T28956] hsr0 speed is unknown, defaulting to 1000 [ 638.879798][T29005] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 639.132261][T29017] netlink: 'syz.0.7744': attribute type 12 has an invalid length. [ 639.157743][T29014] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 639.360883][T29025] FAULT_INJECTION: forcing a failure. [ 639.360883][T29025] name failslab, interval 1, probability 0, space 0, times 0 [ 639.403731][T29025] CPU: 1 UID: 0 PID: 29025 Comm: syz.0.7745 Not tainted syzkaller #0 PREEMPT(full) [ 639.403757][T29025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 639.403769][T29025] Call Trace: [ 639.403777][T29025] [ 639.403786][T29025] dump_stack_lvl+0x189/0x250 [ 639.403811][T29025] ? __pfx____ratelimit+0x10/0x10 [ 639.403836][T29025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.403856][T29025] ? __pfx__printk+0x10/0x10 [ 639.403882][T29025] ? __pfx___might_resched+0x10/0x10 [ 639.403898][T29025] ? fs_reclaim_acquire+0x7d/0x100 [ 639.403927][T29025] should_fail_ex+0x414/0x560 [ 639.403955][T29025] should_failslab+0xa8/0x100 [ 639.403980][T29025] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 639.404003][T29025] ? __alloc_skb+0x112/0x2d0 [ 639.404024][T29025] __alloc_skb+0x112/0x2d0 [ 639.404045][T29025] netlink_ack+0x146/0xa50 [ 639.404066][T29025] ? __pfx_genl_rcv_msg+0x10/0x10 [ 639.404085][T29025] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 639.404105][T29025] ? __pfx_nl80211_post_doit+0x10/0x10 [ 639.404126][T29025] ? __asan_memcpy+0x40/0x70 [ 639.404144][T29025] ? __pfx_ref_tracker_free+0x10/0x10 [ 639.404175][T29025] netlink_rcv_skb+0x28c/0x470 [ 639.404196][T29025] ? __lock_acquire+0xab9/0xd20 [ 639.404219][T29025] ? __pfx_genl_rcv_msg+0x10/0x10 [ 639.404240][T29025] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 639.404284][T29025] ? down_read+0x1ad/0x2e0 [ 639.404303][T29025] genl_rcv+0x28/0x40 [ 639.404320][T29025] netlink_unicast+0x82c/0x9e0 [ 639.404350][T29025] ? __pfx_netlink_unicast+0x10/0x10 [ 639.404374][T29025] ? netlink_sendmsg+0x642/0xb30 [ 639.404388][T29025] ? skb_put+0x11b/0x210 [ 639.404409][T29025] netlink_sendmsg+0x805/0xb30 [ 639.404436][T29025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.404456][T29025] ? aa_sock_msg_perm+0xf1/0x1d0 [ 639.404476][T29025] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 639.404494][T29025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.404512][T29025] __sock_sendmsg+0x21c/0x270 [ 639.404539][T29025] ____sys_sendmsg+0x505/0x830 [ 639.404565][T29025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.404593][T29025] ? import_iovec+0x74/0xa0 [ 639.404617][T29025] ___sys_sendmsg+0x21f/0x2a0 [ 639.404646][T29025] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.404704][T29025] ? __fget_files+0x2a/0x420 [ 639.404719][T29025] ? __fget_files+0x3a0/0x420 [ 639.404746][T29025] __x64_sys_sendmsg+0x19b/0x260 [ 639.404768][T29025] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 639.404798][T29025] ? __pfx_ksys_write+0x10/0x10 [ 639.404825][T29025] ? do_syscall_64+0xbe/0x3b0 [ 639.404847][T29025] do_syscall_64+0xfa/0x3b0 [ 639.404862][T29025] ? lockdep_hardirqs_on+0x9c/0x150 [ 639.404885][T29025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.404902][T29025] ? clear_bhb_loop+0x60/0xb0 [ 639.404923][T29025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.404940][T29025] RIP: 0033:0x7f0be5f8ebe9 [ 639.404957][T29025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.404972][T29025] RSP: 002b:00007f0be6e3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.404992][T29025] RAX: ffffffffffffffda RBX: 00007f0be61c6090 RCX: 00007f0be5f8ebe9 [ 639.405006][T29025] RDX: 0000000000040000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 639.405018][T29025] RBP: 00007f0be6e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 639.405029][T29025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.405040][T29025] R13: 00007f0be61c6128 R14: 00007f0be61c6090 R15: 00007ffe591798b8 [ 639.405072][T29025] [ 640.215725][T29034] netlink: 'syz.3.7749': attribute type 21 has an invalid length. [ 640.227084][T29035] netlink: 'syz.1.7748': attribute type 11 has an invalid length. [ 640.531141][T29049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7755'. [ 640.849298][T29067] FAULT_INJECTION: forcing a failure. [ 640.849298][T29067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.866117][T29067] CPU: 0 UID: 0 PID: 29067 Comm: syz.4.7762 Not tainted syzkaller #0 PREEMPT(full) [ 640.866141][T29067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 640.866152][T29067] Call Trace: [ 640.866160][T29067] [ 640.866168][T29067] dump_stack_lvl+0x189/0x250 [ 640.866192][T29067] ? __pfx____ratelimit+0x10/0x10 [ 640.866217][T29067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.866236][T29067] ? __pfx__printk+0x10/0x10 [ 640.866258][T29067] ? __might_fault+0xb0/0x130 [ 640.866290][T29067] should_fail_ex+0x414/0x560 [ 640.866322][T29067] _copy_from_user+0x2d/0xb0 [ 640.866343][T29067] ___sys_recvmsg+0x12e/0x510 [ 640.866368][T29067] ? __pfx____sys_recvmsg+0x10/0x10 [ 640.866419][T29067] ? __might_fault+0xb0/0x130 [ 640.866444][T29067] do_recvmmsg+0x307/0x770 [ 640.866472][T29067] ? __pfx_do_recvmmsg+0x10/0x10 [ 640.866503][T29067] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 640.866538][T29067] __x64_sys_recvmmsg+0x190/0x240 [ 640.866561][T29067] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 640.866578][T29067] ? rcu_is_watching+0x15/0xb0 [ 640.866601][T29067] ? do_syscall_64+0xbe/0x3b0 [ 640.866622][T29067] do_syscall_64+0xfa/0x3b0 [ 640.866637][T29067] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.866659][T29067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.866677][T29067] ? clear_bhb_loop+0x60/0xb0 [ 640.866698][T29067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.866714][T29067] RIP: 0033:0x7fc22158ebe9 [ 640.866738][T29067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.866754][T29067] RSP: 002b:00007fc2223f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 640.866773][T29067] RAX: ffffffffffffffda RBX: 00007fc2217c5fa0 RCX: 00007fc22158ebe9 [ 640.866786][T29067] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 640.866798][T29067] RBP: 00007fc2223f1090 R08: 0000000000000000 R09: 0000000000000000 [ 640.866810][T29067] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 640.866821][T29067] R13: 00007fc2217c6038 R14: 00007fc2217c5fa0 R15: 00007ffedf5fceb8 [ 640.866851][T29067] [ 641.193061][T29071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 641.869154][T29094] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7770'. [ 641.938818][T29098] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7773'. [ 641.986090][T29098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7773'. [ 642.331419][T29124] FAULT_INJECTION: forcing a failure. [ 642.331419][T29124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.398485][T29124] CPU: 0 UID: 0 PID: 29124 Comm: syz.3.7780 Not tainted syzkaller #0 PREEMPT(full) [ 642.398511][T29124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 642.398522][T29124] Call Trace: [ 642.398530][T29124] [ 642.398538][T29124] dump_stack_lvl+0x189/0x250 [ 642.398563][T29124] ? __pfx____ratelimit+0x10/0x10 [ 642.398593][T29124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.398612][T29124] ? __pfx__printk+0x10/0x10 [ 642.398635][T29124] ? __might_fault+0xb0/0x130 [ 642.398667][T29124] should_fail_ex+0x414/0x560 [ 642.398694][T29124] _copy_from_user+0x2d/0xb0 [ 642.398714][T29124] ___sys_recvmsg+0x12e/0x510 [ 642.398741][T29124] ? __pfx____sys_recvmsg+0x10/0x10 [ 642.398792][T29124] ? __might_fault+0xb0/0x130 [ 642.398816][T29124] do_recvmmsg+0x307/0x770 [ 642.398844][T29124] ? __pfx_do_recvmmsg+0x10/0x10 [ 642.398875][T29124] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 642.398910][T29124] __x64_sys_recvmmsg+0x190/0x240 [ 642.398933][T29124] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 642.398950][T29124] ? rcu_is_watching+0x15/0xb0 [ 642.398973][T29124] ? do_syscall_64+0xbe/0x3b0 [ 642.398993][T29124] do_syscall_64+0xfa/0x3b0 [ 642.399008][T29124] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.399030][T29124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.399047][T29124] ? clear_bhb_loop+0x60/0xb0 [ 642.399068][T29124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.399084][T29124] RIP: 0033:0x7f25c358ebe9 [ 642.399101][T29124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.399115][T29124] RSP: 002b:00007f25c447c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 642.399135][T29124] RAX: ffffffffffffffda RBX: 00007f25c37c5fa0 RCX: 00007f25c358ebe9 [ 642.399148][T29124] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 642.399160][T29124] RBP: 00007f25c447c090 R08: 0000000000000000 R09: 0000000000000000 [ 642.399171][T29124] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 642.399181][T29124] R13: 00007f25c37c6038 R14: 00007f25c37c5fa0 R15: 00007ffca3f893d8 [ 642.399211][T29124] [ 642.988536][T29141] netlink: 165 bytes leftover after parsing attributes in process `syz.2.7787'. [ 643.173256][T29148] netlink: 'syz.2.7791': attribute type 1 has an invalid length. [ 643.267045][T29150] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7792'. [ 643.766890][T29143] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.774643][T29143] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.119967][T29143] wg2: left promiscuous mode [ 644.126648][T29143] wg2: left allmulticast mode [ 644.382918][T29143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.423121][T29143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.074690][T29148] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 645.213117][T29153] veth3: entered promiscuous mode [ 645.276748][T29176] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7801'. [ 645.309590][T29154] gretap1: entered allmulticast mode [ 645.388696][ T3551] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.420296][ T3551] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.458673][ T1042] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.477051][T29182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7803'. [ 645.512548][ T1042] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.586637][T29182] vlan2: entered allmulticast mode [ 645.591805][T29182] bond0: entered allmulticast mode [ 645.622360][T29195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7806'. [ 645.648921][T29182] bond_slave_0: entered allmulticast mode [ 645.685067][T29182] bond_slave_1: entered allmulticast mode [ 645.701522][T29182] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 645.747011][ T1094] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 645.828960][T29197] netlink: 124 bytes leftover after parsing attributes in process `syz.1.7803'. [ 645.841949][T29205] netlink: 13 bytes leftover after parsing attributes in process `syz.4.7810'. [ 645.867988][T29205] netlink: 13 bytes leftover after parsing attributes in process `syz.4.7810'. [ 646.296768][T29201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.465533][T29230] netlink: 'syz.1.7816': attribute type 1 has an invalid length. [ 646.506300][T29233] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7817'. [ 646.509131][T29230] 8021q: adding VLAN 0 to HW filter on device bond4 [ 646.592548][T29230] 8021q: adding VLAN 0 to HW filter on device bond4 [ 646.600813][T29230] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 646.603046][T29237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7818'. [ 646.624337][T29230] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 646.657796][T29233] 8021q: VLANs not supported on gre0 [ 646.745467][T29235] veth3: entered promiscuous mode [ 646.781979][T29235] bond4: (slave veth3): Enslaving as an active interface with a down link [ 646.821390][T29238] gretap1: entered allmulticast mode [ 646.890857][T29238] bond4: (slave gretap1): making interface the new active one [ 646.920391][T29238] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 647.195229][T29257] syzkaller1: entered promiscuous mode [ 647.221208][T29257] syzkaller1: entered allmulticast mode [ 647.672594][T29288] netlink: 'syz.2.7837': attribute type 1 has an invalid length. [ 647.678144][T29283] macvlan5: entered promiscuous mode [ 647.736411][T29283] macvlan5: entered allmulticast mode [ 647.764480][T29283] bond5: entered promiscuous mode [ 647.786647][T29283] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 647.820405][T29283] bond5: left promiscuous mode [ 647.998825][T29288] 8021q: adding VLAN 0 to HW filter on device bond3 [ 648.051663][T29295] 8021q: adding VLAN 0 to HW filter on device bond3 [ 648.062727][T29295] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 648.093027][T29295] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 648.219479][T29298] veth3: entered promiscuous mode [ 648.233322][T29298] bond3: (slave veth3): Enslaving as an active interface with a down link [ 648.261235][T29300] gretap1: entered allmulticast mode [ 648.285684][T29300] bond3: (slave gretap1): making interface the new active one [ 648.300747][T29300] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 648.459054][T29319] __nla_validate_parse: 3 callbacks suppressed [ 648.459072][T29319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7846'. [ 648.799766][T29338] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7853'. [ 649.041666][T29354] netlink: 'syz.1.7859': attribute type 1 has an invalid length. [ 649.062051][T29357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7860'. [ 649.191031][T29354] 8021q: adding VLAN 0 to HW filter on device bond6 [ 649.210230][T29363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7862'. [ 649.277547][T29363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7862'. [ 649.331190][T29362] 8021q: adding VLAN 0 to HW filter on device bond6 [ 649.391050][T29362] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 649.422797][T29362] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 649.489078][T29378] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7859'. [ 649.500934][T29376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7865'. [ 649.553303][T29378] netlink: zone id is out of range [ 649.594215][T29378] netlink: zone id is out of range [ 649.599418][T29378] netlink: zone id is out of range [ 649.634193][T29378] netlink: zone id is out of range [ 649.647230][T29365] veth5: entered promiscuous mode [ 649.653152][T29378] netlink: zone id is out of range [ 649.672374][T29365] bond6: (slave veth5): Enslaving as an active interface with a down link [ 649.676532][T29378] netlink: zone id is out of range [ 649.711863][T29378] netlink: zone id is out of range [ 649.746292][T29378] netlink: zone id is out of range [ 649.762612][T29378] netlink: zone id is out of range [ 649.778300][T29386] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7868'. [ 649.806207][T29386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7868'. [ 649.824038][T29378] netlink: zone id is out of range [ 650.020558][T29397] tipc: Enabling of bearer rejected, failed to enable media [ 650.193217][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.200643][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.207751][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.223579][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.230621][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.237763][T29404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7874'. [ 650.257711][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.266989][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.278526][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.304190][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.325677][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.340672][T29409] netlink: 'syz.0.7875': attribute type 10 has an invalid length. [ 650.346405][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.372853][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.410059][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.429801][T29392] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.438825][T29392] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.452222][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.460034][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.471184][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.509547][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.530243][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.548825][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.565731][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.593045][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.623133][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.642322][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.658360][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.665600][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.672498][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.680924][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.688295][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.697322][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.709322][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.716747][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.726748][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.733983][T29393] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 650.750380][T29392] bridge_slave_0: left allmulticast mode [ 650.756304][T29392] bridge_slave_0: left promiscuous mode [ 650.762195][T29392] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.789062][T29392] bridge_slave_1: left allmulticast mode [ 650.796076][T29392] bridge_slave_1: left promiscuous mode [ 650.801890][T29392] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.829001][T29392] bond0: (slave bond_slave_0): Releasing backup interface [ 650.850303][T29392] bond0: (slave bond_slave_1): Releasing backup interface [ 650.872428][T29392] team0: Port device team_slave_0 removed [ 650.889549][T29392] team0: Port device team_slave_1 removed [ 651.098335][T29403] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 651.134197][T29407] netlink: 'syz.2.7876': attribute type 5 has an invalid length. [ 651.154148][T29409] mac80211_hwsim hwsim41 wlan1: left allmulticast mode [ 651.185831][T29411] bridge_slave_0: left allmulticast mode [ 651.191504][T29411] bridge_slave_0: left promiscuous mode [ 651.234122][T29411] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.315054][T29411] bridge_slave_1: left allmulticast mode [ 651.333610][T29411] bridge_slave_1: left promiscuous mode [ 651.339405][T29411] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.421771][T29411] bond0: (slave bond_slave_0): Releasing backup interface [ 651.501821][T29411] bond0: (slave bond_slave_1): Releasing backup interface [ 651.522390][T29411] team0: Port device team_slave_0 removed [ 651.542935][T29411] team0: Port device team_slave_1 removed [ 651.542973][T29434] rdma_rxe: rxe_newlink: failed to add lo [ 651.549868][T29411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.564165][T29411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.584890][T25032] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.596356][T25032] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.644866][T29436] FAULT_INJECTION: forcing a failure. [ 651.644866][T29436] name failslab, interval 1, probability 0, space 0, times 0 [ 651.654564][T25032] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.703528][T29436] CPU: 0 UID: 0 PID: 29436 Comm: syz.3.7883 Not tainted syzkaller #0 PREEMPT(full) [ 651.703552][T29436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 651.703563][T29436] Call Trace: [ 651.703571][T29436] [ 651.703580][T29436] dump_stack_lvl+0x189/0x250 [ 651.703605][T29436] ? __pfx____ratelimit+0x10/0x10 [ 651.703630][T29436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.703650][T29436] ? __pfx__printk+0x10/0x10 [ 651.703679][T29436] ? __pfx___might_resched+0x10/0x10 [ 651.703702][T29436] should_fail_ex+0x414/0x560 [ 651.703737][T29436] should_failslab+0xa8/0x100 [ 651.703764][T29436] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 651.703787][T29436] ? __alloc_skb+0x112/0x2d0 [ 651.703810][T29436] __alloc_skb+0x112/0x2d0 [ 651.703832][T29436] netlink_dump+0x1b7/0xe90 [ 651.703854][T29436] ? __pfx__copy_to_iter+0x10/0x10 [ 651.703869][T29436] ? __skb_try_recv_from_queue+0x58f/0x730 [ 651.703899][T29436] ? __pfx_netlink_dump+0x10/0x10 [ 651.703948][T29436] netlink_recvmsg+0x676/0xa30 [ 651.703975][T29436] ? __pfx_netlink_recvmsg+0x10/0x10 [ 651.703996][T29436] ? __lock_acquire+0xab9/0xd20 [ 651.704017][T29436] ? aa_sock_msg_perm+0xf1/0x1d0 [ 651.704035][T29436] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 651.704056][T29436] ? __pfx_netlink_recvmsg+0x10/0x10 [ 651.704073][T29436] sock_recvmsg_nosec+0x183/0x1c0 [ 651.704099][T29436] ____sys_recvmsg+0x3aa/0x460 [ 651.704128][T29436] ? __pfx_____sys_recvmsg+0x10/0x10 [ 651.704164][T29436] ? import_iovec+0x74/0xa0 [ 651.704188][T29436] ___sys_recvmsg+0x1b5/0x510 [ 651.704213][T29436] ? __pfx____sys_recvmsg+0x10/0x10 [ 651.704266][T29436] ? __might_fault+0xb0/0x130 [ 651.704295][T29436] do_recvmmsg+0x307/0x770 [ 651.704324][T29436] ? __pfx_do_recvmmsg+0x10/0x10 [ 651.704357][T29436] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 651.704394][T29436] __x64_sys_recvmmsg+0x190/0x240 [ 651.704417][T29436] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 651.704443][T29436] ? do_syscall_64+0xbe/0x3b0 [ 651.704465][T29436] do_syscall_64+0xfa/0x3b0 [ 651.704480][T29436] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.704502][T29436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.704519][T29436] ? clear_bhb_loop+0x60/0xb0 [ 651.704540][T29436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.704556][T29436] RIP: 0033:0x7f25c358ebe9 [ 651.704572][T29436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.704586][T29436] RSP: 002b:00007f25c445b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 651.704605][T29436] RAX: ffffffffffffffda RBX: 00007f25c37c6090 RCX: 00007f25c358ebe9 [ 651.704618][T29436] RDX: 0000000000000004 RSI: 00002000000086c0 RDI: 0000000000000003 [ 651.704630][T29436] RBP: 00007f25c445b090 R08: 0000000000000000 R09: 0000000000000000 [ 651.704641][T29436] R10: 00000000400060a2 R11: 0000000000000246 R12: 0000000000000001 [ 651.704653][T29436] R13: 00007f25c37c6128 R14: 00007f25c37c6090 R15: 00007ffca3f893d8 [ 651.704682][T29436] [ 652.085325][T29430] syzkaller0: entered promiscuous mode [ 652.090968][T29430] syzkaller0: entered allmulticast mode [ 654.939760][T25032] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.949602][T29443] netlink: 'syz.3.7887': attribute type 12 has an invalid length. [ 654.964629][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 655.040274][T29470] __nla_validate_parse: 3 callbacks suppressed [ 655.040292][T29470] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7896'. [ 655.084342][T29470] 8021q: VLANs not supported on gre0 [ 655.145254][T29472] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7897'. [ 655.327660][T29486] netlink: 'syz.3.7903': attribute type 1 has an invalid length. [ 655.416758][T29489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7904'. [ 655.458928][T29492] netlink: 'syz.1.7907': attribute type 2 has an invalid length. [ 655.487549][T29492] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7907'. [ 655.517413][T29492] nbd: must specify a device to reconfigure [ 655.612566][T29490] syzkaller1: entered promiscuous mode [ 655.643986][T29490] syzkaller1: entered allmulticast mode [ 655.801212][T29508] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7912'. [ 656.576068][T29508] 8021q: VLANs not supported on gre0 [ 656.638929][T29516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7914'. [ 656.772324][T29521] netlink: 208 bytes leftover after parsing attributes in process `syz.1.7915'. [ 656.861897][T29525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7917'. [ 656.871697][T29525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7917'. [ 656.979508][T29529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7919'. [ 657.318908][T29546] net_ratelimit: 1 callbacks suppressed [ 657.318926][T29546] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 657.366937][T29546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.388576][T29550] netlink: 'syz.1.7923': attribute type 10 has an invalid length. [ 657.829886][T29571] rdma_rxe: rxe_newlink: failed to add lo [ 658.517670][T29611] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 658.544319][T29610] bridge0: entered promiscuous mode [ 658.582215][T29610] macsec1: entered promiscuous mode [ 658.605152][T29610] macsec1: entered allmulticast mode [ 658.616279][T29615] netlink: 'syz.2.7948': attribute type 7 has an invalid length. [ 658.632782][T29610] bridge0: entered allmulticast mode [ 658.638349][T29615] netlink: 'syz.2.7948': attribute type 8 has an invalid length. [ 658.668250][T29610] bridge0: port 3(macsec1) entered blocking state [ 658.693227][T29610] bridge0: port 3(macsec1) entered disabled state [ 658.719025][T29610] bridge0: left allmulticast mode [ 658.729506][T29610] bridge0: left promiscuous mode [ 659.217513][T29645] +: renamed from syzkaller0 [ 659.474800][T29658] rdma_rxe: rxe_newlink: failed to add lo [ 659.575441][T29665] 8021q: VLANs not supported on gre0 [ 659.943354][T29683] +: renamed from syzkaller0 [ 660.790804][T29734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 660.813248][T29734] __nla_validate_parse: 12 callbacks suppressed [ 660.813265][T29734] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7998'. [ 660.831036][T29734] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7998'. [ 660.861245][T29734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7998'. [ 661.267606][T29762] veth0: entered promiscuous mode [ 661.341022][T29756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8006'. [ 661.750725][T29777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 661.963010][T29791] FAULT_INJECTION: forcing a failure. [ 661.963010][T29791] name failslab, interval 1, probability 0, space 0, times 0 [ 661.966447][T29790] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8022'. [ 661.987421][T29792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8019'. [ 662.018629][T29791] CPU: 1 UID: 0 PID: 29791 Comm: syz.2.8020 Not tainted syzkaller #0 PREEMPT(full) [ 662.018653][T29791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 662.018664][T29791] Call Trace: [ 662.018672][T29791] [ 662.018680][T29791] dump_stack_lvl+0x189/0x250 [ 662.018706][T29791] ? __pfx____ratelimit+0x10/0x10 [ 662.018730][T29791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.018749][T29791] ? __pfx__printk+0x10/0x10 [ 662.018783][T29791] ? __pfx___might_resched+0x10/0x10 [ 662.018800][T29791] ? fs_reclaim_acquire+0x7d/0x100 [ 662.018829][T29791] should_fail_ex+0x414/0x560 [ 662.018855][T29791] should_failslab+0xa8/0x100 [ 662.018877][T29791] kmem_cache_alloc_noprof+0x73/0x3c0 [ 662.018896][T29791] ? skb_clone+0x212/0x3a0 [ 662.018918][T29791] skb_clone+0x212/0x3a0 [ 662.018935][T29791] ? nfnetlink_rcv+0x486/0x2520 [ 662.018958][T29791] nfnetlink_rcv+0x4b4/0x2520 [ 662.018981][T29791] ? __dev_queue_xmit+0x1d79/0x3b50 [ 662.019010][T29791] ? __dev_queue_xmit+0x27b/0x3b50 [ 662.019041][T29791] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 662.019077][T29791] ? ref_tracker_free+0x63a/0x7d0 [ 662.019099][T29791] ? __asan_memcpy+0x40/0x70 [ 662.019116][T29791] ? __pfx_ref_tracker_free+0x10/0x10 [ 662.019153][T29791] ? skb_clone+0x246/0x3a0 [ 662.019175][T29791] ? __netlink_deliver_tap+0x807/0x850 [ 662.019198][T29791] ? netlink_deliver_tap+0x2e/0x1b0 [ 662.019204][T29790] 8021q: VLANs not supported on gre0 [ 662.019236][T29791] netlink_unicast+0x82c/0x9e0 [ 662.019262][T29791] ? __pfx_netlink_unicast+0x10/0x10 [ 662.019284][T29791] ? netlink_sendmsg+0x642/0xb30 [ 662.019298][T29791] ? skb_put+0x11b/0x210 [ 662.019319][T29791] netlink_sendmsg+0x805/0xb30 [ 662.019345][T29791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.019363][T29791] ? aa_sock_msg_perm+0xf1/0x1d0 [ 662.019381][T29791] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.019400][T29791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.019417][T29791] __sock_sendmsg+0x21c/0x270 [ 662.019442][T29791] ____sys_sendmsg+0x505/0x830 [ 662.019466][T29791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 662.019493][T29791] ? import_iovec+0x74/0xa0 [ 662.019516][T29791] ___sys_sendmsg+0x21f/0x2a0 [ 662.019536][T29791] ? __pfx____sys_sendmsg+0x10/0x10 [ 662.019589][T29791] ? __fget_files+0x2a/0x420 [ 662.019604][T29791] ? __fget_files+0x3a0/0x420 [ 662.019629][T29791] __x64_sys_sendmsg+0x19b/0x260 [ 662.019650][T29791] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 662.019681][T29791] ? __pfx_ksys_write+0x10/0x10 [ 662.019700][T29791] ? rcu_is_watching+0x15/0xb0 [ 662.019722][T29791] ? do_syscall_64+0xbe/0x3b0 [ 662.019743][T29791] do_syscall_64+0xfa/0x3b0 [ 662.019757][T29791] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.019784][T29791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.019801][T29791] ? clear_bhb_loop+0x60/0xb0 [ 662.019821][T29791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.019837][T29791] RIP: 0033:0x7f4ebdd8ebe9 [ 662.019854][T29791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.019868][T29791] RSP: 002b:00007f4ebbff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.019885][T29791] RAX: ffffffffffffffda RBX: 00007f4ebdfc5fa0 RCX: 00007f4ebdd8ebe9 [ 662.019898][T29791] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 662.019909][T29791] RBP: 00007f4ebbff6090 R08: 0000000000000000 R09: 0000000000000000 [ 662.019920][T29791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.019930][T29791] R13: 00007f4ebdfc6038 R14: 00007f4ebdfc5fa0 R15: 00007ffcf2612728 [ 662.019958][T29791] [ 662.164047][ T5876] Bluetooth: hci0: command 0x041b tx timeout [ 662.390064][T29792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8019'. [ 662.505357][T29802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8026'. [ 662.711866][T29792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8019'. [ 662.733098][T29813] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8030'. [ 662.748221][T29812] netlink: 'syz.0.8029': attribute type 1 has an invalid length. [ 662.866470][T29812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 662.930029][T29822] delete_channel: no stack [ 662.978719][T29816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 663.009142][T29816] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 663.075667][T29816] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 663.234735][T29820] veth3: entered promiscuous mode [ 663.261343][T29820] bond1: (slave veth3): Enslaving as an active interface with a down link [ 663.798230][T29866] netlink: 'syz.3.8050': attribute type 1 has an invalid length. [ 663.858034][T29866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 663.916753][T29866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 663.933973][T29866] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 664.019961][T29866] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 664.062915][T29877] sctp: [Deprecated]: syz.4.8054 (pid 29877) Use of int in max_burst socket option. [ 664.062915][T29877] Use struct sctp_assoc_value instead [ 664.167773][T29885] netlink: zone id is out of range [ 664.172945][T29885] netlink: zone id is out of range [ 664.240136][T29885] netlink: zone id is out of range [ 664.272770][T29872] veth3: entered promiscuous mode [ 664.302306][T29885] netlink: get zone limit has 8 unknown bytes [ 664.345901][T29872] bond2: (slave veth3): Enslaving as an active interface with a down link [ 664.358582][T29892] netlink: 'syz.0.8058': attribute type 11 has an invalid length. [ 664.369765][T29892] netlink: 'syz.0.8058': attribute type 11 has an invalid length. [ 664.394280][T29873] gretap1: entered allmulticast mode [ 664.407619][T29873] bond2: (slave gretap1): making interface the new active one [ 664.419263][T29873] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 664.842039][T29914] FAULT_INJECTION: forcing a failure. [ 664.842039][T29914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.880263][T29914] CPU: 1 UID: 0 PID: 29914 Comm: syz.3.8063 Not tainted syzkaller #0 PREEMPT(full) [ 664.880287][T29914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 664.880298][T29914] Call Trace: [ 664.880306][T29914] [ 664.880313][T29914] dump_stack_lvl+0x189/0x250 [ 664.880340][T29914] ? __pfx____ratelimit+0x10/0x10 [ 664.880363][T29914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 664.880383][T29914] ? __pfx__printk+0x10/0x10 [ 664.880405][T29914] ? __might_fault+0xb0/0x130 [ 664.880437][T29914] should_fail_ex+0x414/0x560 [ 664.880464][T29914] _copy_from_iter+0x1de/0x1790 [ 664.880480][T29914] ? __lock_acquire+0xab9/0xd20 [ 664.880505][T29914] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 664.880539][T29914] ? policy_nodemask+0x27c/0x720 [ 664.880560][T29914] ? __pfx__copy_from_iter+0x10/0x10 [ 664.880585][T29914] ? set_page_refcounted+0xa0/0x1e0 [ 664.880607][T29914] ? page_copy_sane+0x4e/0x280 [ 664.880626][T29914] copy_page_from_iter+0xdd/0x170 [ 664.880648][T29914] tun_get_user+0x1d7b/0x3e20 [ 664.880673][T29914] ? tun_get_user+0x6f6/0x3e20 [ 664.880698][T29914] ? aa_file_perm+0x44d/0x1550 [ 664.880716][T29914] ? __pfx_tun_get_user+0x10/0x10 [ 664.880731][T29914] ? _parse_integer_limit+0x1ae/0x1f0 [ 664.880762][T29914] ? __lock_acquire+0xab9/0xd20 [ 664.880790][T29914] ? ref_tracker_alloc+0x318/0x460 [ 664.880810][T29914] ? __lock_acquire+0xab9/0xd20 [ 664.880833][T29914] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 664.880861][T29914] ? tun_get+0x1c/0x2f0 [ 664.880883][T29914] ? tun_get+0x1c/0x2f0 [ 664.880898][T29914] ? tun_get+0x1c/0x2f0 [ 664.880920][T29914] tun_chr_write_iter+0x113/0x200 [ 664.880940][T29914] vfs_write+0x5c6/0xb30 [ 664.880966][T29914] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 664.880982][T29914] ? __pfx_vfs_write+0x10/0x10 [ 664.881013][T29914] ? __fget_files+0x2a/0x420 [ 664.881037][T29914] ksys_write+0x145/0x250 [ 664.881060][T29914] ? __pfx_ksys_write+0x10/0x10 [ 664.881086][T29914] ? do_syscall_64+0xbe/0x3b0 [ 664.881107][T29914] do_syscall_64+0xfa/0x3b0 [ 664.881122][T29914] ? lockdep_hardirqs_on+0x9c/0x150 [ 664.881143][T29914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.881160][T29914] ? clear_bhb_loop+0x60/0xb0 [ 664.881181][T29914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.881197][T29914] RIP: 0033:0x7f25c358d69f [ 664.881214][T29914] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 664.881228][T29914] RSP: 002b:00007f25c445b000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 664.881262][T29914] RAX: ffffffffffffffda RBX: 00007f25c37c6090 RCX: 00007f25c358d69f [ 664.881275][T29914] RDX: 0000000000000066 RSI: 0000200000000680 RDI: 00000000000000c8 [ 664.881286][T29914] RBP: 00007f25c445b090 R08: 0000000000000000 R09: 0000000000000000 [ 664.881296][T29914] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001 [ 664.881307][T29914] R13: 00007f25c37c6128 R14: 00007f25c37c6090 R15: 00007ffca3f893d8 [ 664.881336][T29914] [ 665.424888][T29931] lo speed is unknown, defaulting to 1000 [ 665.431856][T29933] 8021q: VLANs not supported on gre0 [ 665.518389][T29931] netlink: 'syz.4.8071': attribute type 4 has an invalid length. [ 665.579137][T29938] netlink: 'syz.4.8071': attribute type 4 has an invalid length. [ 665.925909][T29955] __nla_validate_parse: 25 callbacks suppressed [ 665.925928][T29955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8081'. [ 666.317221][T29977] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8087'. [ 666.456961][T29981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8089'. [ 666.518611][T29983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8090'. [ 666.522190][T29981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8089'. [ 666.560935][T29985] netlink: 'syz.2.8091': attribute type 1 has an invalid length. [ 666.742475][T29985] 8021q: adding VLAN 0 to HW filter on device bond4 [ 667.098653][T30010] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 667.144668][T30016] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8101'. [ 667.230365][T30021] rdma_rxe: rxe_newlink: failed to add lo [ 667.424193][T30027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8104'. [ 667.449445][T30027] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8104'. [ 667.897137][T30056] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8115'. [ 668.098280][T30064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8119'. [ 668.836694][T30101] virt_wifi0: mtu less than device minimum [ 668.959648][T30107] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 669.488648][T30131] team0: No ports can be present during mode change [ 669.940966][T30153] rdma_rxe: rxe_newlink: failed to add lo [ 669.974504][T30157] FAULT_INJECTION: forcing a failure. [ 669.974504][T30157] name failslab, interval 1, probability 0, space 0, times 0 [ 670.024188][T30157] CPU: 0 UID: 0 PID: 30157 Comm: syz.4.8155 Not tainted syzkaller #0 PREEMPT(full) [ 670.024214][T30157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 670.024225][T30157] Call Trace: [ 670.024233][T30157] [ 670.024242][T30157] dump_stack_lvl+0x189/0x250 [ 670.024266][T30157] ? __pfx____ratelimit+0x10/0x10 [ 670.024290][T30157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.024309][T30157] ? __pfx__printk+0x10/0x10 [ 670.024337][T30157] ? __pfx___might_resched+0x10/0x10 [ 670.024354][T30157] ? fs_reclaim_acquire+0x7d/0x100 [ 670.024383][T30157] should_fail_ex+0x414/0x560 [ 670.024410][T30157] should_failslab+0xa8/0x100 [ 670.024436][T30157] __kmalloc_cache_noprof+0x70/0x3d0 [ 670.024458][T30157] ? nft_trans_elem_alloc+0x55/0x320 [ 670.024479][T30157] ? nft_set_elem_expr_setup+0xab/0x830 [ 670.024505][T30157] nft_trans_elem_alloc+0x55/0x320 [ 670.024527][T30157] ? nf_tables_newsetelem+0x24bc/0x4340 [ 670.024549][T30157] nf_tables_newsetelem+0x24db/0x4340 [ 670.024613][T30157] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 670.024631][T30157] ? __lock_acquire+0xab9/0xd20 [ 670.024674][T30157] ? nla_validate_array+0xfc/0x260 [ 670.024723][T30157] ? __pfx___nla_validate_parse+0x10/0x10 [ 670.024751][T30157] ? __lock_acquire+0xab9/0xd20 [ 670.024785][T30157] ? nfnl_pernet+0x23/0x240 [ 670.024823][T30157] ? __nla_parse+0x40/0x60 [ 670.024850][T30157] nfnetlink_rcv+0x112f/0x2520 [ 670.024905][T30157] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 670.024944][T30157] ? ref_tracker_free+0x63a/0x7d0 [ 670.024995][T30157] ? __netlink_deliver_tap+0x807/0x850 [ 670.025019][T30157] ? netlink_deliver_tap+0x2e/0x1b0 [ 670.025059][T30157] netlink_unicast+0x82c/0x9e0 [ 670.025090][T30157] ? __pfx_netlink_unicast+0x10/0x10 [ 670.025114][T30157] ? netlink_sendmsg+0x642/0xb30 [ 670.025128][T30157] ? skb_put+0x11b/0x210 [ 670.025150][T30157] netlink_sendmsg+0x805/0xb30 [ 670.025176][T30157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.025197][T30157] ? aa_sock_msg_perm+0xf1/0x1d0 [ 670.025219][T30157] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 670.025238][T30157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.025256][T30157] __sock_sendmsg+0x21c/0x270 [ 670.025282][T30157] ____sys_sendmsg+0x505/0x830 [ 670.025307][T30157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.025336][T30157] ? import_iovec+0x74/0xa0 [ 670.025360][T30157] ___sys_sendmsg+0x21f/0x2a0 [ 670.025382][T30157] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.025439][T30157] ? __fget_files+0x2a/0x420 [ 670.025455][T30157] ? __fget_files+0x3a0/0x420 [ 670.025482][T30157] __x64_sys_sendmsg+0x19b/0x260 [ 670.025504][T30157] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.025534][T30157] ? __pfx_ksys_write+0x10/0x10 [ 670.025553][T30157] ? rcu_is_watching+0x15/0xb0 [ 670.025577][T30157] ? do_syscall_64+0xbe/0x3b0 [ 670.025597][T30157] do_syscall_64+0xfa/0x3b0 [ 670.025612][T30157] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.025633][T30157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.025650][T30157] ? clear_bhb_loop+0x60/0xb0 [ 670.025671][T30157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.025687][T30157] RIP: 0033:0x7fc22158ebe9 [ 670.025702][T30157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.025717][T30157] RSP: 002b:00007fc2223f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.025736][T30157] RAX: ffffffffffffffda RBX: 00007fc2217c5fa0 RCX: 00007fc22158ebe9 [ 670.025749][T30157] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 670.025761][T30157] RBP: 00007fc2223f1090 R08: 0000000000000000 R09: 0000000000000000 [ 670.025772][T30157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 670.025783][T30157] R13: 00007fc2217c6038 R14: 00007fc2217c5fa0 R15: 00007ffedf5fceb8 [ 670.025821][T30157] [ 670.737642][T30172] netlink: 'syz.2.8161': attribute type 1 has an invalid length. [ 670.796994][T30170] team0: Mode changed to "loadbalance" [ 670.997633][T30180] tipc: Enabled bearer , priority 0 [ 671.095038][T30183] __nla_validate_parse: 13 callbacks suppressed [ 671.095057][T30183] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8166'. [ 671.440056][T30212] netlink: 11 bytes leftover after parsing attributes in process `syz.3.8176'. [ 671.707946][T30225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8179'. [ 671.727054][T30227] netlink: 'syz.2.8180': attribute type 12 has an invalid length. [ 671.734995][T30227] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8180'. [ 671.872923][T30225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8179'. [ 671.921122][T30231] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 672.039920][T30231] netlink: 'syz.4.8179': attribute type 10 has an invalid length. [ 672.081575][T30225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8179'. [ 672.123107][T30231] mac80211_hwsim hwsim34 wlan1: left allmulticast mode [ 672.141495][T30231] bond0: (slave wlan1): refused to change device type [ 672.182873][T30237] syzkaller0: entered promiscuous mode [ 672.209281][T30237] syzkaller0: entered allmulticast mode [ 672.431518][T30253] openvswitch: netlink: Message has 4 unknown bytes. [ 672.484242][ T5876] Bluetooth: hci5: command 0x0406 tx timeout [ 673.025006][T30288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8197'. [ 673.110260][T30294] FAULT_INJECTION: forcing a failure. [ 673.110260][T30294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.119363][T30293] rdma_rxe: rxe_newlink: failed to add lo [ 673.170127][T30294] CPU: 0 UID: 0 PID: 30294 Comm: syz.4.8199 Not tainted syzkaller #0 PREEMPT(full) [ 673.170152][T30294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 673.170164][T30294] Call Trace: [ 673.170172][T30294] [ 673.170180][T30294] dump_stack_lvl+0x189/0x250 [ 673.170205][T30294] ? __pfx____ratelimit+0x10/0x10 [ 673.170230][T30294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 673.170250][T30294] ? __pfx__printk+0x10/0x10 [ 673.170272][T30294] ? __might_fault+0xb0/0x130 [ 673.170306][T30294] should_fail_ex+0x414/0x560 [ 673.170333][T30294] _copy_from_iter+0x1de/0x1790 [ 673.170360][T30294] ? rcu_is_watching+0x15/0xb0 [ 673.170379][T30294] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 673.170403][T30294] ? __pfx__copy_from_iter+0x10/0x10 [ 673.170423][T30294] ? __build_skb_around+0x257/0x3e0 [ 673.170444][T30294] ? netlink_sendmsg+0x642/0xb30 [ 673.170459][T30294] ? skb_put+0x11b/0x210 [ 673.170480][T30294] netlink_sendmsg+0x6b2/0xb30 [ 673.170512][T30294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.170533][T30294] ? aa_sock_msg_perm+0xf1/0x1d0 [ 673.170552][T30294] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.170571][T30294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.170588][T30294] __sock_sendmsg+0x21c/0x270 [ 673.170614][T30294] ____sys_sendmsg+0x505/0x830 [ 673.170639][T30294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.170667][T30294] ? import_iovec+0x74/0xa0 [ 673.170690][T30294] ___sys_sendmsg+0x21f/0x2a0 [ 673.170712][T30294] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.170767][T30294] ? __fget_files+0x2a/0x420 [ 673.170782][T30294] ? __fget_files+0x3a0/0x420 [ 673.170808][T30294] __x64_sys_sendmsg+0x19b/0x260 [ 673.170831][T30294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 673.170860][T30294] ? __pfx_ksys_write+0x10/0x10 [ 673.170879][T30294] ? rcu_is_watching+0x15/0xb0 [ 673.170901][T30294] ? do_syscall_64+0xbe/0x3b0 [ 673.170922][T30294] do_syscall_64+0xfa/0x3b0 [ 673.170937][T30294] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.170959][T30294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.170976][T30294] ? clear_bhb_loop+0x60/0xb0 [ 673.170997][T30294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.171014][T30294] RIP: 0033:0x7fc22158ebe9 [ 673.171030][T30294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.171044][T30294] RSP: 002b:00007fc2223f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.171064][T30294] RAX: ffffffffffffffda RBX: 00007fc2217c5fa0 RCX: 00007fc22158ebe9 [ 673.171077][T30294] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 673.171089][T30294] RBP: 00007fc2223f1090 R08: 0000000000000000 R09: 0000000000000000 [ 673.171104][T30294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.171115][T30294] R13: 00007fc2217c6038 R14: 00007fc2217c5fa0 R15: 00007ffedf5fceb8 [ 673.171146][T30294] [ 673.560021][T30288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8197'. [ 673.648442][T30309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8203'. [ 673.689489][T30309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8203'. [ 674.220718][ T9] IPVS: starting estimator thread 0... [ 674.242365][T30346] FAULT_INJECTION: forcing a failure. [ 674.242365][T30346] name failslab, interval 1, probability 0, space 0, times 0 [ 674.273657][T30346] CPU: 1 UID: 0 PID: 30346 Comm: syz.1.8215 Not tainted syzkaller #0 PREEMPT(full) [ 674.273681][T30346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 674.273693][T30346] Call Trace: [ 674.273701][T30346] [ 674.273710][T30346] dump_stack_lvl+0x189/0x250 [ 674.273739][T30346] ? __pfx____ratelimit+0x10/0x10 [ 674.273763][T30346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.273784][T30346] ? __pfx__printk+0x10/0x10 [ 674.273810][T30346] ? __lock_acquire+0xab9/0xd20 [ 674.273844][T30346] should_fail_ex+0x414/0x560 [ 674.273872][T30346] should_failslab+0xa8/0x100 [ 674.273897][T30346] kmem_cache_alloc_noprof+0x73/0x3c0 [ 674.273919][T30346] ? skb_clone+0x212/0x3a0 [ 674.273944][T30346] skb_clone+0x212/0x3a0 [ 674.273966][T30346] __netlink_deliver_tap+0x404/0x850 [ 674.274001][T30346] ? netlink_deliver_tap+0x2e/0x1b0 [ 674.274025][T30346] netlink_deliver_tap+0x19c/0x1b0 [ 674.274049][T30346] netlink_unicast+0x7fa/0x9e0 [ 674.274079][T30346] ? __pfx_netlink_unicast+0x10/0x10 [ 674.274102][T30346] ? netlink_sendmsg+0x642/0xb30 [ 674.274116][T30346] ? skb_put+0x11b/0x210 [ 674.274137][T30346] netlink_sendmsg+0x805/0xb30 [ 674.274160][T30347] rdma_rxe: rxe_newlink: failed to add lo [ 674.274163][T30346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.274184][T30346] ? aa_sock_msg_perm+0xf1/0x1d0 [ 674.274201][T30346] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 674.274218][T30346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.274234][T30346] __sock_sendmsg+0x21c/0x270 [ 674.274260][T30346] ____sys_sendmsg+0x505/0x830 [ 674.274284][T30346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.274313][T30346] ? import_iovec+0x74/0xa0 [ 674.274336][T30346] ___sys_sendmsg+0x21f/0x2a0 [ 674.274357][T30346] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.274411][T30346] ? __fget_files+0x2a/0x420 [ 674.274426][T30346] ? __fget_files+0x3a0/0x420 [ 674.274451][T30346] __x64_sys_sendmsg+0x19b/0x260 [ 674.274472][T30346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 674.274501][T30346] ? __pfx_ksys_write+0x10/0x10 [ 674.274519][T30346] ? rcu_is_watching+0x15/0xb0 [ 674.274542][T30346] ? do_syscall_64+0xbe/0x3b0 [ 674.274563][T30346] do_syscall_64+0xfa/0x3b0 [ 674.274577][T30346] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.274602][T30346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.274620][T30346] ? clear_bhb_loop+0x60/0xb0 [ 674.274646][T30346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.274663][T30346] RIP: 0033:0x7fbfd8f8ebe9 [ 674.274678][T30346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.274693][T30346] RSP: 002b:00007fbfd9e4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.274712][T30346] RAX: ffffffffffffffda RBX: 00007fbfd91c5fa0 RCX: 00007fbfd8f8ebe9 [ 674.274725][T30346] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 674.274736][T30346] RBP: 00007fbfd9e4a090 R08: 0000000000000000 R09: 0000000000000000 [ 674.274747][T30346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.274757][T30346] R13: 00007fbfd91c6038 R14: 00007fbfd91c5fa0 R15: 00007ffd9bae44c8 [ 674.274787][T30346] [ 674.325923][T30343] IPVS: using max 31 ests per chain, 74400 per kthread [ 674.621228][T30351] sctp: [Deprecated]: syz.4.8216 (pid 30351) Use of int in maxseg socket option. [ 674.621228][T30351] Use struct sctp_assoc_value instead [ 674.709432][T30356] sctp: [Deprecated]: syz.4.8216 (pid 30356) Use of int in maxseg socket option. [ 674.709432][T30356] Use struct sctp_assoc_value instead [ 674.869333][T30363] tipc: Enabled bearer , priority 0 [ 674.966272][T30363] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 674.983226][T30363] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 675.015939][T30365] netlink: 'syz.0.8222': attribute type 1 has an invalid length. [ 675.058951][T30373] netlink: 'syz.2.8225': attribute type 17 has an invalid length. [ 675.303286][T30382] rdma_rxe: rxe_newlink: failed to add lo [ 675.351523][T30363] tipc: Resetting bearer [ 675.424705][T30386] tipc: Enabled bearer , priority 0 [ 675.465280][T30386] FAULT_INJECTION: forcing a failure. [ 675.465280][T30386] name failslab, interval 1, probability 0, space 0, times 0 [ 675.478831][T30386] CPU: 0 UID: 0 PID: 30386 Comm: syz.4.8231 Not tainted syzkaller #0 PREEMPT(full) [ 675.478854][T30386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 675.478865][T30386] Call Trace: [ 675.478874][T30386] [ 675.478882][T30386] dump_stack_lvl+0x189/0x250 [ 675.478906][T30386] ? __pfx____ratelimit+0x10/0x10 [ 675.478930][T30386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.478951][T30386] ? __pfx__printk+0x10/0x10 [ 675.478979][T30386] ? __pfx___might_resched+0x10/0x10 [ 675.478996][T30386] ? fs_reclaim_acquire+0x7d/0x100 [ 675.479025][T30386] should_fail_ex+0x414/0x560 [ 675.479052][T30386] should_failslab+0xa8/0x100 [ 675.479077][T30386] __kmalloc_noprof+0xcb/0x4f0 [ 675.479096][T30386] ? kfree+0x4d/0x440 [ 675.479114][T30386] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 675.479138][T30386] tomoyo_realpath_from_path+0xe3/0x5d0 [ 675.479158][T30386] ? tomoyo_domain+0xd9/0x130 [ 675.479182][T30386] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 675.479205][T30386] tomoyo_path_number_perm+0x1e8/0x5a0 [ 675.479230][T30386] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 675.479271][T30386] ? __lock_acquire+0xab9/0xd20 [ 675.479315][T30386] ? __fget_files+0x2a/0x420 [ 675.479335][T30386] ? __fget_files+0x2a/0x420 [ 675.479349][T30386] ? __fget_files+0x3a0/0x420 [ 675.479364][T30386] ? __fget_files+0x2a/0x420 [ 675.479384][T30386] security_file_ioctl+0xcb/0x2d0 [ 675.479408][T30386] __se_sys_ioctl+0x47/0x170 [ 675.479431][T30386] do_syscall_64+0xfa/0x3b0 [ 675.479447][T30386] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.479469][T30386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.479486][T30386] ? clear_bhb_loop+0x60/0xb0 [ 675.479507][T30386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.479524][T30386] RIP: 0033:0x7fc22158ebe9 [ 675.479540][T30386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.479562][T30386] RSP: 002b:00007fc2223f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.479582][T30386] RAX: ffffffffffffffda RBX: 00007fc2217c5fa0 RCX: 00007fc22158ebe9 [ 675.479595][T30386] RDX: 0000200000002280 RSI: 0000000000008923 RDI: 0000000000000005 [ 675.479607][T30386] RBP: 00007fc2223f1090 R08: 0000000000000000 R09: 0000000000000000 [ 675.479618][T30386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.479629][T30386] R13: 00007fc2217c6038 R14: 00007fc2217c5fa0 R15: 00007ffedf5fceb8 [ 675.479658][T30386] [ 675.479666][T30386] ERROR: Out of memory at tomoyo_realpath_from_path. [ 675.800351][T30386] +: renamed from syzkaller0 [ 675.822041][T30386] tipc: Disabling bearer [ 675.943428][T30406] macvtap1: entered promiscuous mode [ 675.987300][T30406] vlan0: entered promiscuous mode [ 676.016729][T30406] team0: Device macvtap1 failed to register rx_handler [ 676.043330][ T9] IPVS: starting estimator thread 0... [ 676.055850][T30406] vlan0: left promiscuous mode [ 676.135262][T30415] IPVS: using max 29 ests per chain, 69600 per kthread [ 676.138958][T30411] vxlan0: entered promiscuous mode [ 676.157984][T30411] vxlan0: entered allmulticast mode [ 676.170017][ T3551] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.211673][ T3551] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.240243][ T3551] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.269653][ T3551] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.514430][T30437] veth0_to_team: entered promiscuous mode [ 676.533651][T30437] veth0_to_team: entered allmulticast mode [ 676.599822][T30437] netlink: 'syz.3.8246': attribute type 15 has an invalid length. [ 676.654654][ T8254] IPVS: starting estimator thread 0... [ 676.773670][T30446] IPVS: using max 27 ests per chain, 64800 per kthread [ 677.261343][T30477] tipc: Enabled bearer , priority 0 [ 677.305095][T30477] syzkaller0: entered promiscuous mode [ 677.320777][T30477] syzkaller0: entered allmulticast mode [ 677.332532][T30481] netlink: 'syz.0.8263': attribute type 2 has an invalid length. [ 677.372599][T30481] netlink: 'syz.0.8263': attribute type 2 has an invalid length. [ 677.414846][T30482] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 677.524980][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 678.046858][T30484] tipc: Resetting bearer [ 678.148533][T30500] __nla_validate_parse: 4 callbacks suppressed [ 678.148553][T30500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8268'. [ 678.204423][T30476] tipc: Resetting bearer [ 678.232559][T30476] tipc: Disabling bearer [ 678.262490][T30502] veth0: entered promiscuous mode [ 678.402003][T30511] : entered promiscuous mode [ 678.439530][T30507] veth0: left promiscuous mode [ 678.625848][T30521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8275'. [ 678.652413][T30521] netlink: 'syz.2.8275': attribute type 11 has an invalid length. [ 678.672179][T30521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8275'. [ 678.672733][T25032] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.690903][T30521] netlink: 'syz.2.8275': attribute type 11 has an invalid length. [ 678.699472][T30523] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.8276'. [ 678.710927][T25032] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.749587][T25032] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.769907][T25032] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.971981][T30535] veth1_to_bond: entered allmulticast mode [ 678.981557][T30535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8283'. [ 678.992511][T30535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8283'. [ 679.015685][T30535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8283'. [ 679.278749][T30535] veth1_to_bond (unregistering): left allmulticast mode [ 679.309851][T30540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8284'. [ 679.320124][T30540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8284'. [ 679.384859][T30542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8285'. [ 679.511973][T30550] tipc: Enabled bearer , priority 0 [ 679.545991][T30550] syzkaller0: entered promiscuous mode [ 679.551492][T30550] syzkaller0: entered allmulticast mode [ 679.619239][T30548] tipc: Enabling of bearer rejected, already enabled [ 679.674388][T30553] netlink: 'syz.3.8289': attribute type 1 has an invalid length. [ 679.961136][T30554] tipc: Resetting bearer [ 680.140477][T30547] tipc: Resetting bearer [ 680.181163][T30547] tipc: Disabling bearer [ 680.205064][T30570] +: renamed from syzkaller0 [ 680.227416][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.237798][T30576] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 680.247271][T30576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.251593][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.535050][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.589841][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.756979][T30590] netlink: 'syz.0.8300': attribute type 83 has an invalid length. [ 681.507548][T30633] netlink: 'syz.3.8319': attribute type 4 has an invalid length. [ 681.586353][T30633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 681.646908][T30634] pim6reg1: entered promiscuous mode [ 681.672600][T30634] pim6reg1: entered allmulticast mode [ 681.843415][T30649] 8021q: VLANs not supported on lo [ 682.047441][T30654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.070149][T30720] 8021q: VLANs not supported on gre0 [ 683.425205][T30740] __nla_validate_parse: 16 callbacks suppressed [ 683.425222][T30740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8360'. [ 683.458168][T30744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8361'. [ 683.682027][T30752] sctp: [Deprecated]: syz.3.8362 (pid 30752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.682027][T30752] Use struct sctp_sack_info instead [ 683.712176][T30755] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8366'. [ 683.766307][T30755] 8021q: VLANs not supported on gre0 [ 683.796819][T30758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8369'. [ 683.937948][T30771] netlink: 'syz.0.8371': attribute type 1 has an invalid length. [ 684.015331][T30774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8373'. [ 684.106587][T30772] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.114349][T30772] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.149346][T30779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8375'. [ 684.200902][T30780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8375'. [ 684.241073][T30780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8375'. [ 684.401227][T30772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.421972][T30772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.668016][ T1042] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.724385][ T1042] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.743218][ T1042] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.799305][ T1042] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.826223][ T1116] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.858066][ T1116] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.884661][T30802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8382'. [ 684.925129][ T1116] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.968733][ T1116] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.289145][T30824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8390'. [ 685.385565][T30828] 8021q: adding VLAN 0 to HW filter on device bond8 [ 685.410600][T30828] team0: Failed to send port change of device bond8 via netlink (err -105) [ 685.432511][T30828] team0: Failed to send options change via netlink (err -105) [ 685.448136][T30828] team0: Port device bond8 added [ 685.705294][T30837] delete_channel: no stack [ 685.716242][ T1306] clip:clip_start_xmit: skb_dst(skb) == NULL [ 685.722301][ T1306] lec:lec_start_xmit: lec0:No lecd attached [ 685.833987][T30847] netlink: 'syz.0.8399': attribute type 1 has an invalid length. [ 685.961398][T30847] bond2: entered promiscuous mode [ 685.999723][T30847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 686.102776][T30852] 8021q: adding VLAN 0 to HW filter on device bond2 [ 686.127876][T30852] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 686.156877][T30867] Bluetooth: MGMT ver 1.23 [ 686.161510][T30852] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 686.200314][T30852] bond2: (slave wireguard0): making interface the new active one [ 686.209344][T30852] wireguard0: entered promiscuous mode [ 686.221860][T30852] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 686.879332][T30913] netlink: 'syz.2.8417': attribute type 1 has an invalid length. [ 687.103803][T30925] netlink: 'syz.1.8423': attribute type 10 has an invalid length. [ 687.306377][T30931] geneve2: entered promiscuous mode [ 687.349019][T30931] geneve2: entered allmulticast mode [ 687.398585][ T1094] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.431524][ T1094] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.462021][T30934] netlink: 'syz.2.8424': attribute type 3 has an invalid length. [ 687.500809][ T1094] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.554121][ T1094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.765675][ T5187] Bluetooth: hci2: command 0x0406 tx timeout [ 687.789818][T30946] tipc: Enabled bearer , priority 0 [ 687.874801][T30959] lo: entered promiscuous mode [ 687.880866][T30959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 687.961642][T30944] tipc: Disabling bearer [ 688.352544][T30972] netlink: 'syz.4.8437': attribute type 10 has an invalid length. [ 688.441222][T30978] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 688.512087][T30972] bond0: (slave wlan1): refused to change device type [ 688.544468][T30986] __nla_validate_parse: 6 callbacks suppressed [ 688.544488][T30986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8441'. [ 688.696580][T30991] netlink: 'syz.3.8443': attribute type 1 has an invalid length. [ 688.862320][T30991] 8021q: adding VLAN 0 to HW filter on device bond4 [ 688.873023][T31001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8447'. [ 688.894033][T31006] veth0: entered allmulticast mode [ 689.334396][T31026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8455'. [ 689.541864][T31038] netlink: 'syz.0.8459': attribute type 11 has an invalid length. [ 689.639848][T31038] netlink: 'syz.0.8459': attribute type 4 has an invalid length. [ 689.690410][T31038] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8459'. [ 689.886178][T31056] tipc: Enabling of bearer rejected, already enabled [ 689.923870][T31056] mac80211_hwsim hwsim32 +: renamed from syzkaller0 (while UP) [ 689.960045][T31056] tipc: Disabling bearer [ 689.966014][T31065] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8468'. [ 690.198650][T31071] netlink: 'syz.3.8471': attribute type 10 has an invalid length. [ 690.210346][T31071] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 690.237373][T31075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8472'. [ 690.408845][T31082] IPv6: sit1: Disabled Multicast RS [ 690.475395][T31082] sit1: entered allmulticast mode [ 690.733487][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 690.741546][ C1] lec:lec_tx_timeout: lec0 [ 690.824653][T31113] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8486'. [ 690.866464][T31113] team0: Mode changed to "loadbalance" [ 690.883379][T31115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8486'. [ 691.022713][T31123] netlink: 'syz.3.8489': attribute type 1 has an invalid length. [ 691.090852][T31123] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8489'. [ 691.610552][T31152] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8501'. [ 691.662421][T31152] team0: Mode changed to "loadbalance" [ 692.407208][T31187] netlink: 'syz.0.8515': attribute type 1 has an invalid length. [ 692.630278][T31203] netlink: 'syz.2.8521': attribute type 10 has an invalid length. [ 692.710617][T31203] team0: Port device geneve0 added [ 692.742715][T25032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.795911][T25032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.826421][T25032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.861570][T25032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.582698][T31254] __nla_validate_parse: 7 callbacks suppressed [ 693.582717][T31254] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8537'. [ 693.600873][T31254] team0: Unable to change to the same mode the team is in [ 693.601987][T31257] netlink: 'syz.2.8538': attribute type 4 has an invalid length. [ 693.629007][T31254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8537'. [ 693.809434][T31257] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20000 [ 694.020236][T31277] syzkaller1: entered promiscuous mode [ 694.067220][T31277] syzkaller1: entered allmulticast mode [ 694.077395][T31286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8547'. [ 694.340379][T31296] netlink: 'syz.2.8551': attribute type 1 has an invalid length. [ 694.353103][T31296] netlink: 'syz.2.8551': attribute type 3 has an invalid length. [ 694.414097][T31296] netlink: 'syz.2.8551': attribute type 235 has an invalid length. [ 694.497968][T31304] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8553'. [ 694.548238][T31304] team0: Unable to change to the same mode the team is in [ 694.594358][T31304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8553'. [ 694.647496][T31310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8554'. [ 694.758383][T31314] netlink: 'syz.3.8555': attribute type 8 has an invalid length. [ 695.092658][T31333] rdma_rxe: rxe_newlink: failed to add lo [ 695.411983][T31351] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8568'. [ 695.433809][T31351] team0: No ports can be present during mode change [ 695.441783][T31351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8568'. [ 695.462195][T31354] netlink: 'syz.4.8571': attribute type 16 has an invalid length. [ 695.484929][T31354] netlink: 'syz.4.8571': attribute type 17 has an invalid length. [ 695.673160][T31354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.682696][T31365] netlink: 'syz.1.8574': attribute type 1 has an invalid length. [ 695.734202][T31354] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.750203][T31354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 695.808739][T31373] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.8574'. [ 695.851605][T31373] netlink: zone id is out of range [ 695.867735][T31373] netlink: zone id is out of range [ 695.872935][T31373] netlink: zone id is out of range [ 695.878641][T31373] netlink: zone id is out of range [ 695.884687][T31373] netlink: zone id is out of range [ 695.889957][T31373] netlink: get zone limit has 8 unknown bytes [ 695.975579][T31365] 8021q: adding VLAN 0 to HW filter on device bond10 [ 696.122239][T31372] 8021q: adding VLAN 0 to HW filter on device bond10 [ 696.130137][T31372] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 696.148330][T31372] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 696.445901][T31390] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8583'. [ 697.082766][T31416] can: request_module (can-proto-3) failed. [ 697.114389][T31426] rdma_rxe: rxe_newlink: failed to add lo [ 697.586632][T31446] syzkaller1: entered promiscuous mode [ 697.605504][T31446] syzkaller1: entered allmulticast mode [ 697.847076][T31464] netlink: 'syz.2.8609': attribute type 1 has an invalid length. [ 697.982328][T31473] netlink: zone id is out of range [ 698.010774][T31464] 8021q: adding VLAN 0 to HW filter on device bond5 [ 698.040924][T31473] netlink: zone id is out of range [ 698.061041][T31458] tipc: Enabled bearer , priority 0 [ 698.069006][T31473] netlink: zone id is out of range [ 698.069698][ T8254] hid (null): unknown global tag 0xe [ 698.083392][ T8254] hid (null): nested delimiters [ 698.102224][ T8254] hid (null): unknown global tag 0xe [ 698.132240][ T8254] hid (null): unknown global tag 0xe [ 698.144370][ T8254] hid (null): unknown global tag 0xa5 [ 698.161749][ T8254] hid (null): global environment stack underflow [ 698.181986][ T8254] hid (null): unknown global tag 0xe [ 698.195524][ T8254] hid (null): unknown global tag 0x27 [ 698.200908][ T8254] hid (null): report_id 1223242812 is invalid [ 698.228442][ T8254] hid (null): bogus close delimiter [ 698.230650][T31470] 8021q: adding VLAN 0 to HW filter on device bond5 [ 698.247731][ T8254] hid (null): report_id 0 is invalid [ 698.253064][ T8254] hid (null): unknown global tag 0xc [ 698.263194][T31470] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 698.279898][ T8254] hid (null): unknown global tag 0xe [ 698.300504][ T8254] hid (null): report_id 1639872362 is invalid [ 698.321457][ T8254] hid (null): report_id 3926717794 is invalid [ 698.329811][T31470] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 698.341145][ T8254] hid (null): unknown global tag 0xc [ 698.356485][ T8254] hid (null): unknown global tag 0xc [ 698.373339][ T8254] hid (null): invalid report_size 1365040336 [ 698.391645][ T8254] hid (null): invalid report_size 47028 [ 698.408635][ T8254] hid (null): unknown global tag 0xd [ 698.423660][ T8254] hid (null): unknown global tag 0xe [ 698.435801][ T8254] hid (null): invalid report_size -1111428265 [ 698.448534][ T8254] hid (null): unknown global tag 0xe [ 698.460660][ T8254] hid (null): report_id 3414115592 is invalid [ 698.487723][T31456] tipc: Disabling bearer [ 698.494508][ T8254] hid (null): unknown global tag 0xe [ 698.517648][ T8254] hid (null): unknown global tag 0xc [ 698.528854][ T8254] hid (null): invalid report_count -372525640 [ 698.547144][ T8254] hid (null): unknown global tag 0x50 [ 698.565671][ T8254] hid (null): unknown global tag 0x8c [ 698.575779][ T8254] hid (null): unknown global tag 0xc [ 698.588206][ T8254] hid (null): unknown global tag 0xc [ 698.609650][ T8254] hid (null): invalid report_count 42291 [ 698.618420][T31495] netlink: 'syz.3.8618': attribute type 10 has an invalid length. [ 698.637625][ T8254] hid (null): unknown global tag 0x53 [ 698.643152][ T8254] hid (null): unknown global tag 0xd [ 698.691824][ T8254] hid (null): global environment stack underflow [ 698.717398][ T8254] hid (null): unknown global tag 0xd [ 698.734228][ T8254] hid (null): unknown global tag 0xe [ 698.739569][ T8254] hid (null): unknown global tag 0x1b [ 698.773973][ T8254] hid (null): unknown global tag 0xe [ 698.779291][ T8254] hid (null): unknown global tag 0xe [ 698.805486][T31503] netlink: 'syz.1.8622': attribute type 1 has an invalid length. [ 698.824564][ T8254] hid (null): unknown global tag 0xe3 [ 698.832329][T31503] __nla_validate_parse: 4 callbacks suppressed [ 698.832344][T31503] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8622'. [ 698.847936][ T8254] hid (null): invalid report_size -183289338 [ 698.863819][ T8254] hid (null): unknown global tag 0xc [ 698.893676][ T8254] hid (null): unknown global tag 0xc [ 698.899406][T31503] netlink: 'syz.1.8622': attribute type 1 has an invalid length. [ 698.908757][ T8254] hid (null): unknown global tag 0xe [ 698.948049][ T8254] hid (null): unknown global tag 0xe [ 698.953360][ T8254] hid (null): bogus close delimiter [ 698.964540][T31503] netlink: 'syz.1.8622': attribute type 2 has an invalid length. [ 698.984177][T31503] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8622'. [ 698.993661][ T8254] hid (null): unknown global tag 0x46 [ 699.012775][ T8254] hid (null): global environment stack overflow [ 699.044264][ T8254] hid (null): unknown global tag 0xe [ 699.049609][ T8254] hid (null): unknown global tag 0xd [ 699.094259][ T8254] hid (null): bogus close delimiter [ 699.099579][ T8254] hid (null): global environment stack overflow [ 699.136519][ T8254] hid (null): unknown global tag 0xd [ 699.141891][ T8254] hid (null): unknown global tag 0xd [ 699.193811][ T8254] hid (null): global environment stack overflow [ 699.201053][ T8254] hid (null): invalid report_size 883590345 [ 699.226944][ T8254] hid (null): global environment stack overflow [ 699.244933][T31525] netlink: 'syz.1.8630': attribute type 1 has an invalid length. [ 699.253826][ T8254] hid (null): invalid report_count -710906326 [ 699.262158][ T8254] hid (null): usage index exceeded [ 699.301128][ T8254] hid (null): unknown global tag 0xe [ 699.322985][ T8254] hid (null): invalid report_size 474377247 [ 699.334529][ T8254] hid (null): invalid report_count 138379975 [ 699.346408][T31533] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.8630'. [ 699.350925][ T8254] hid (null): report_id 50936 is invalid [ 699.371580][ T8254] hid (null): bogus close delimiter [ 699.392791][ T8254] hid (null): unknown global tag 0xc [ 699.398760][ T8254] hid (null): global environment stack overflow [ 699.413683][ T8254] hid (null): invalid report_size 28401 [ 699.419318][ T8254] hid (null): unknown global tag 0xd [ 699.422713][T31525] 8021q: adding VLAN 0 to HW filter on device bond11 [ 699.425229][ T8254] hid (null): unknown global tag 0xe [ 699.438057][ T8254] hid (null): unknown global tag 0xc [ 699.443406][ T8254] hid (null): bogus close delimiter [ 699.475647][ T8254] hid (null): unknown global tag 0xc [ 699.525278][ T8254] hid (null): bogus close delimiter [ 699.531010][ T8254] hid (null): invalid report_size 2994 [ 699.538436][ T8254] hid (null): unknown global tag 0xc [ 699.606268][T31541] netlink: 4380 bytes leftover after parsing attributes in process `syz.2.8635'. [ 699.691639][T31539] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8636'. [ 699.755756][T31548] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8639'. [ 699.982466][T31562] validate_nla: 1 callbacks suppressed [ 699.982481][T31562] netlink: 'syz.1.8643': attribute type 1 has an invalid length. [ 700.038806][T31562] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8643'. [ 700.122079][T31567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8643'. [ 700.133058][T31562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8643'. [ 700.326569][T31573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8648'. [ 700.336926][T31576] lo speed is unknown, defaulting to 1000 [ 700.419279][T31582] tipc: Enabled bearer , priority 0 [ 700.462490][T31578] tipc: Disabling bearer [ 700.962605][T31576] hsr0 speed is unknown, defaulting to 1000 [ 700.964518][T31595] FAULT_INJECTION: forcing a failure. [ 700.964518][T31595] name failslab, interval 1, probability 0, space 0, times 0 [ 701.040605][T31595] CPU: 0 UID: 0 PID: 31595 Comm: syz.3.8655 Not tainted syzkaller #0 PREEMPT(full) [ 701.040628][T31595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 701.040637][T31595] Call Trace: [ 701.040644][T31595] [ 701.040651][T31595] dump_stack_lvl+0x189/0x250 [ 701.040672][T31595] ? __pfx____ratelimit+0x10/0x10 [ 701.040691][T31595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 701.040707][T31595] ? __pfx__printk+0x10/0x10 [ 701.040730][T31595] ? __pfx___might_resched+0x10/0x10 [ 701.040748][T31595] should_fail_ex+0x414/0x560 [ 701.040769][T31595] should_failslab+0xa8/0x100 [ 701.040789][T31595] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 701.040808][T31595] ? __alloc_skb+0x112/0x2d0 [ 701.040825][T31595] __alloc_skb+0x112/0x2d0 [ 701.040841][T31595] netlink_sendmsg+0x5c6/0xb30 [ 701.040862][T31595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.040877][T31595] ? aa_sock_msg_perm+0xf1/0x1d0 [ 701.040892][T31595] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 701.040906][T31595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.040919][T31595] __sock_sendmsg+0x21c/0x270 [ 701.040941][T31595] ____sys_sendmsg+0x505/0x830 [ 701.040961][T31595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 701.040982][T31595] ? import_iovec+0x74/0xa0 [ 701.041000][T31595] ___sys_sendmsg+0x21f/0x2a0 [ 701.041017][T31595] ? __pfx____sys_sendmsg+0x10/0x10 [ 701.041059][T31595] ? __fget_files+0x2a/0x420 [ 701.041070][T31595] ? __fget_files+0x3a0/0x420 [ 701.041090][T31595] __x64_sys_sendmsg+0x19b/0x260 [ 701.041107][T31595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 701.041130][T31595] ? __pfx_ksys_write+0x10/0x10 [ 701.041145][T31595] ? rcu_is_watching+0x15/0xb0 [ 701.041162][T31595] ? do_syscall_64+0xbe/0x3b0 [ 701.041179][T31595] do_syscall_64+0xfa/0x3b0 [ 701.041196][T31595] ? lockdep_hardirqs_on+0x9c/0x150 [ 701.041213][T31595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.041226][T31595] ? clear_bhb_loop+0x60/0xb0 [ 701.041242][T31595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.041254][T31595] RIP: 0033:0x7f25c358ebe9 [ 701.041268][T31595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.041280][T31595] RSP: 002b:00007f25c447c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.041296][T31595] RAX: ffffffffffffffda RBX: 00007f25c37c5fa0 RCX: 00007f25c358ebe9 [ 701.041306][T31595] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 701.041315][T31595] RBP: 00007f25c447c090 R08: 0000000000000000 R09: 0000000000000000 [ 701.041324][T31595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.041332][T31595] R13: 00007f25c37c6038 R14: 00007f25c37c5fa0 R15: 00007ffca3f893d8 [ 701.041355][T31595] [ 701.408992][ T8254] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 701.416676][ T8254] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 701.426061][ T8254] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 701.968088][T31619] netlink: 'syz.0.8664': attribute type 1 has an invalid length. [ 701.987683][T31619] nbd: error processing sock list [ 702.008271][T31619] block nbd4: shutting down sockets [ 702.339287][T31642] netlink: 'syz.1.8670': attribute type 10 has an invalid length. [ 703.210633][T31670] rdma_rxe: rxe_newlink: failed to add lo [ 703.505898][T31686] team0: Unable to change to the same mode the team is in [ 703.842327][T31700] FAULT_INJECTION: forcing a failure. [ 703.842327][T31700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.888232][T31700] CPU: 0 UID: 0 PID: 31700 Comm: syz.3.8686 Not tainted syzkaller #0 PREEMPT(full) [ 703.888281][T31700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 703.888306][T31700] Call Trace: [ 703.888323][T31700] [ 703.888340][T31700] dump_stack_lvl+0x189/0x250 [ 703.888392][T31700] ? __pfx____ratelimit+0x10/0x10 [ 703.888449][T31700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 703.888498][T31700] ? __pfx__printk+0x10/0x10 [ 703.888552][T31700] ? __might_fault+0xb0/0x130 [ 703.888633][T31700] should_fail_ex+0x414/0x560 [ 703.888690][T31700] _copy_from_user+0x2d/0xb0 [ 703.888712][T31700] ___sys_recvmsg+0x12e/0x510 [ 703.888738][T31700] ? __pfx____sys_recvmsg+0x10/0x10 [ 703.888784][T31700] ? __fget_files+0x3a0/0x420 [ 703.888809][T31700] do_recvmmsg+0x307/0x770 [ 703.888836][T31700] ? __pfx_do_recvmmsg+0x10/0x10 [ 703.888866][T31700] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 703.888899][T31700] __x64_sys_recvmmsg+0x190/0x240 [ 703.888924][T31700] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 703.888950][T31700] ? rcu_is_watching+0x15/0xb0 [ 703.888974][T31700] ? do_syscall_64+0xbe/0x3b0 [ 703.888995][T31700] do_syscall_64+0xfa/0x3b0 [ 703.889009][T31700] ? lockdep_hardirqs_on+0x9c/0x150 [ 703.889031][T31700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.889049][T31700] ? clear_bhb_loop+0x60/0xb0 [ 703.889069][T31700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.889085][T31700] RIP: 0033:0x7f25c358ebe9 [ 703.889101][T31700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.889114][T31700] RSP: 002b:00007f25c447c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 703.889133][T31700] RAX: ffffffffffffffda RBX: 00007f25c37c5fa0 RCX: 00007f25c358ebe9 [ 703.889146][T31700] RDX: 0000000000000007 RSI: 0000200000000340 RDI: 0000000000000008 [ 703.889158][T31700] RBP: 00007f25c447c090 R08: 0000000000000000 R09: 0000000000000000 [ 703.889169][T31700] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 703.889181][T31700] R13: 00007f25c37c6038 R14: 00007f25c37c5fa0 R15: 00007ffca3f893d8 [ 703.889210][T31700] [ 704.331390][T31709] rdma_rxe: rxe_newlink: failed to add lo [ 704.476941][T31713] net_ratelimit: 8 callbacks suppressed [ 704.476958][T31713] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 704.692668][T31717] netlink: 'syz.4.8694': attribute type 12 has an invalid length. [ 704.715640][T31727] sch_fq: defrate 0 ignored. [ 704.783799][T31729] netlink: 'syz.1.8698': attribute type 3 has an invalid length. [ 705.016157][T31740] __nla_validate_parse: 13 callbacks suppressed [ 705.016176][T31740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8700'. [ 705.127103][T31744] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8703'. [ 705.172534][T31744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 705.180700][T31744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 705.188608][T31744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 705.196490][T31744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 705.204408][T31744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 705.212259][T31744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 705.220166][T31744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 705.228052][T31744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 705.235940][T31744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 705.840794][T31776] rdma_rxe: rxe_newlink: failed to add lo [ 705.873031][T31778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8719'. [ 706.639187][T31811] rdma_rxe: rxe_newlink: failed to add lo [ 706.698237][T31813] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8730'. [ 706.773390][T31813] gretap0: entered promiscuous mode [ 707.009982][T31830] syzkaller1: entered promiscuous mode [ 707.019370][T31830] syzkaller1: entered allmulticast mode [ 707.037540][T31832] tunl0: entered promiscuous mode [ 707.043243][T31832] netlink: 'syz.0.8739': attribute type 3 has an invalid length. [ 707.061487][T31830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8738'. [ 707.072865][T31832] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8739'. [ 707.705521][T31858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8751'. [ 708.116111][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.145459][T31877] netlink: 'syz.4.8755': attribute type 3 has an invalid length. [ 708.152673][T31882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8757'. [ 708.173215][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.346379][T31890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8761'. [ 708.621995][T31905] tipc: Started in network mode [ 708.638603][T31905] tipc: Node identity 96eec81f2beb, cluster identity 4711 [ 708.652174][T31905] tipc: Enabled bearer , priority 0 [ 708.665187][T31905] syzkaller0: entered promiscuous mode [ 708.694186][T31905] syzkaller0: entered allmulticast mode [ 708.717444][T31905] tipc: Resetting bearer [ 708.739010][T31904] tipc: Resetting bearer [ 708.836268][T31904] tipc: Disabling bearer [ 708.987622][T31923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8776'. [ 709.116714][T31929] sctp: [Deprecated]: syz.1.8779 (pid 31929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 709.116714][T31929] Use struct sctp_sack_info instead [ 709.249180][T31937] netlink: 'syz.0.8781': attribute type 1 has an invalid length. [ 709.461183][T31946] gretap0: entered promiscuous mode [ 709.471793][T31948] 0ªî{X¹¦: renamed from gretap0 [ 709.521614][T31948] 0ªî{X¹¦: left promiscuous mode [ 709.529198][T31948] 0ªî{X¹¦: entered allmulticast mode [ 709.566488][T31948] net_ratelimit: 45 callbacks suppressed [ 709.566503][T31948] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 709.589779][T31952] openvswitch: netlink: IP tunnel dst address not specified [ 709.627917][T31952] netlink: 'syz.3.8786': attribute type 29 has an invalid length. [ 709.910305][T31970] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 709.931559][T31973] netlink: 'syz.2.8796': attribute type 11 has an invalid length. [ 709.945269][T31970] netlink: 'syz.1.8795': attribute type 10 has an invalid length. [ 709.999955][T31970] mac80211_hwsim hwsim32 wlan1: left promiscuous mode [ 710.072297][T31974] bridge_slave_0: left allmulticast mode [ 710.096278][T31974] bridge_slave_0: left promiscuous mode [ 710.112420][T31974] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.148810][T31974] bridge_slave_1: left allmulticast mode [ 710.157990][T31974] bridge_slave_1: left promiscuous mode [ 710.188015][T31974] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.217876][T31974] bond0: (slave bond_slave_0): Releasing backup interface [ 710.241604][T31974] bond_slave_0: left allmulticast mode [ 710.268413][T31974] bond0: (slave bond_slave_1): Releasing backup interface [ 710.280755][T31974] bond_slave_1: left allmulticast mode [ 710.302666][T31974] team0: Port device team_slave_0 removed [ 710.320424][T31974] team0: Port device team_slave_1 removed [ 710.340230][T31974] bond0: (slave wlan1): Releasing backup interface [ 710.350390][T31974] mac80211_hwsim hwsim32 wlan1: left allmulticast mode [ 710.367426][T31974] bond4: (slave veth3): Releasing active interface [ 710.378070][T31974] gretap1: entered promiscuous mode [ 710.388596][T31974] bond4: (slave gretap1): Releasing active interface [ 710.397847][T31974] gretap1: left promiscuous mode [ 710.414990][T31974] bond6: (slave veth5): Releasing active interface [ 710.436853][T31974] team0: Port device bond8 removed [ 710.445962][T31983] __nla_validate_parse: 5 callbacks suppressed [ 710.445979][T31983] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8798'. [ 710.606817][T31989] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8800'. [ 710.695718][T31993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8802'. [ 710.791423][T32001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8803'. [ 710.999897][T32012] netlink: 'syz.1.8808': attribute type 1 has an invalid length. [ 711.034141][T32012] netlink: 124 bytes leftover after parsing attributes in process `syz.1.8808'. [ 711.086714][T32017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8808'. [ 711.211241][T32022] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 711.432444][T32041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8816'. [ 711.551573][T32041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8816'. [ 711.752275][T32057] openvswitch: netlink: Actions may not be safe on all matching packets [ 712.147173][T32071] macvlan5: entered promiscuous mode [ 712.169531][T32071] macvlan5: entered allmulticast mode [ 712.827742][T32097] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8831'. [ 713.018661][T32089] ------------[ cut here ]------------ [ 713.025371][T32089] WARNING: CPU: 0 PID: 32089 at net/mac80211/chan.c:844 ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 713.036997][T32089] Modules linked in: [ 713.041247][T32089] CPU: 0 UID: 0 PID: 32089 Comm: syz.1.8829 Not tainted syzkaller #0 PREEMPT(full) [ 713.051637][T32089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 713.062889][T32089] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 713.070735][T32089] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7b 32 25 f7 4d 8b 36 4d 39 fe 74 22 e8 0e c1 c1 f6 e9 ef f8 ff ff e8 04 c1 c1 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 f6 c0 c1 f6 e9 39 07 00 00 48 83 7c 24 [ 713.091219][T32089] RSP: 0018:ffffc9000b8de380 EFLAGS: 00010246 [ 713.097825][T32089] RAX: ffffffff8afdf592 RBX: 0000000000000000 RCX: 0000000000080000 [ 713.106367][T32089] RDX: ffffc9001f12b000 RSI: 000000000007ffff RDI: 0000000000080000 [ 713.115161][T32089] RBP: ffffc9000b8de540 R08: ffff88807ab7d737 R09: 1ffff1100f56fae6 [ 713.123145][T32089] R10: dffffc0000000000 R11: ffffed100f56fae7 R12: dffffc0000000000 [ 713.131931][T32089] R13: 0000000000000070 R14: ffff888054eba8c0 R15: ffff888054eba8c0 [ 713.140474][T32089] FS: 00007fbfd9e296c0(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 713.150242][T32089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 713.157376][T32089] CR2: 00007f4ebbfd4f98 CR3: 000000002452c000 CR4: 00000000003526f0 [ 713.165881][T32089] Call Trace: [ 713.169173][T32089] [ 713.172125][T32089] ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10 [ 713.180112][T32089] ? __pfx___might_resched+0x10/0x10 [ 713.185962][T32089] ieee80211_assign_link_chanctx+0x5ca/0xd70 [ 713.191966][T32089] __ieee80211_link_release_channel+0x33b/0x4a0 [ 713.198751][T32089] ieee80211_leave_mesh+0xc5/0x130 [ 713.204709][T32089] cfg80211_leave_mesh+0x290/0x800 [ 713.209932][T32089] cfg80211_netdev_notifier_call+0x1b3/0x1450 [ 713.216564][T32089] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 713.223088][T32089] ? __lock_acquire+0xab9/0xd20 [ 713.228473][T32089] ? do_raw_spin_lock+0x121/0x290 [ 713.234332][T32089] ? inetdev_event+0x464/0x15b0 [ 713.239208][T32089] ? igmp_netdev_event+0x7c/0x770 [ 713.244404][T32089] notifier_call_chain+0x1b3/0x3e0 [ 713.249535][T32089] __dev_close_many+0x106/0x6f0 [ 713.254475][T32089] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.259689][T32089] ? __local_bh_enable_ip+0x12d/0x1c0 [ 713.265374][T32089] ? __pfx___dev_close_many+0x10/0x10 [ 713.270777][T32089] __dev_change_flags+0x2c7/0x6d0 [ 713.276348][T32089] ? __pfx___dev_change_flags+0x10/0x10 [ 713.281906][T32089] ? netif_state_change+0x256/0x3a0 [ 713.287683][T32089] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 713.294475][T32089] ? __pfx_netif_state_change+0x10/0x10 [ 713.300053][T32089] netif_change_flags+0x88/0x1a0 [ 713.305548][T32089] do_setlink+0xc55/0x41c0 [ 713.309985][T32089] ? __kernel_text_address+0xd/0x40 [ 713.315737][T32089] ? arch_stack_walk+0xfc/0x150 [ 713.320613][T32089] ? __pfx_do_setlink+0x10/0x10 [ 713.326325][T32089] ? __lock_acquire+0xab9/0xd20 [ 713.331207][T32089] ? __mutex_trylock_common+0x153/0x260 [ 713.337309][T32089] ? __pfx___mutex_trylock_common+0x10/0x10 [ 713.343221][T32089] ? rcu_is_watching+0x15/0xb0 [ 713.348522][T32089] ? trace_contention_end+0x39/0x120 [ 713.354621][T32089] ? __mutex_lock+0x335/0x1350 [ 713.359412][T32089] ? rtnl_newlink+0x8db/0x1c70 [ 713.364747][T32089] ? __pfx___mutex_lock+0x10/0x10 [ 713.369806][T32089] ? ns_capable+0x8a/0xf0 [ 713.374660][T32089] ? rtnl_link_get_net_capable+0x16a/0x350 [ 713.380487][T32089] rtnl_newlink+0x149f/0x1c70 [ 713.385986][T32089] ? netlink_sendmsg+0x805/0xb30 [ 713.390952][T32089] ? __pfx_rtnl_newlink+0x10/0x10 [ 713.396542][T32089] ? kasan_quarantine_put+0xdd/0x220 [ 713.401844][T32089] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.407599][T32089] ? nlmon_xmit+0xb0/0x100 [ 713.412029][T32089] ? kmem_cache_free+0x18f/0x400 [ 713.418264][T32089] ? __local_bh_enable_ip+0x12d/0x1c0 [ 713.424181][T32089] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.429406][T32089] ? __local_bh_enable_ip+0x12d/0x1c0 [ 713.435296][T32089] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 713.441032][T32089] ? __dev_queue_xmit+0x27b/0x3b50 [ 713.446978][T32089] ? __dev_queue_xmit+0x27b/0x3b50 [ 713.452104][T32089] ? __dev_queue_xmit+0x27b/0x3b50 [ 713.457791][T32089] ? __dev_queue_xmit+0x1d79/0x3b50 [ 713.463014][T32089] ? __lock_acquire+0xab9/0xd20 [ 713.468427][T32089] ? __pfx_rtnl_newlink+0x10/0x10 [ 713.474255][T32089] rtnetlink_rcv_msg+0x7cf/0xb70 [ 713.479221][T32089] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 713.484905][T32089] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 713.490380][T32089] ? ref_tracker_free+0x63a/0x7d0 [ 713.495928][T32089] ? __asan_memcpy+0x40/0x70 [ 713.500537][T32089] ? __pfx_ref_tracker_free+0x10/0x10 [ 713.506740][T32089] netlink_rcv_skb+0x205/0x470 [ 713.511536][T32089] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 713.517532][T32089] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 713.522856][T32089] ? netlink_deliver_tap+0x2e/0x1b0 [ 713.528708][T32089] netlink_unicast+0x82c/0x9e0 [ 713.533888][T32089] ? __pfx_netlink_unicast+0x10/0x10 [ 713.539199][T32089] ? netlink_sendmsg+0x642/0xb30 [ 713.544224][T32089] ? skb_put+0x11b/0x210 [ 713.548488][T32089] netlink_sendmsg+0x805/0xb30 [ 713.553274][T32089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.558625][T32089] ? aa_sock_msg_perm+0xf1/0x1d0 [ 713.564360][T32089] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 713.569660][T32089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.575492][T32089] __sock_sendmsg+0x21c/0x270 [ 713.580195][T32089] ____sys_sendmsg+0x505/0x830 [ 713.585518][T32089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 713.590857][T32089] ? import_iovec+0x74/0xa0 [ 713.596175][T32089] ___sys_sendmsg+0x21f/0x2a0 [ 713.600877][T32089] ? __pfx____sys_sendmsg+0x10/0x10 [ 713.607110][T32089] ? __fget_files+0x2a/0x420 [ 713.611715][T32089] ? __fget_files+0x3a0/0x420 [ 713.616955][T32089] __x64_sys_sendmsg+0x19b/0x260 [ 713.621915][T32089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 713.628204][T32089] ? rcu_is_watching+0x15/0xb0 [ 713.633000][T32089] ? do_syscall_64+0xbe/0x3b0 [ 713.638232][T32089] do_syscall_64+0xfa/0x3b0 [ 713.642751][T32089] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.648508][T32089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.655406][T32089] ? clear_bhb_loop+0x60/0xb0 [ 713.660110][T32089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.666592][T32089] RIP: 0033:0x7fbfd8f8ebe9 [ 713.671020][T32089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.691553][T32089] RSP: 002b:00007fbfd9e29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.700532][T32089] RAX: ffffffffffffffda RBX: 00007fbfd91c6090 RCX: 00007fbfd8f8ebe9 [ 713.709052][T32089] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 713.717819][T32089] RBP: 00007fbfd9011e19 R08: 0000000000000000 R09: 0000000000000000 [ 713.726336][T32089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.734890][T32089] R13: 00007fbfd91c6128 R14: 00007fbfd91c6090 R15: 00007ffd9bae44c8 [ 713.742894][T32089] [ 713.746749][T32089] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 713.754049][T32089] CPU: 0 UID: 0 PID: 32089 Comm: syz.1.8829 Not tainted syzkaller #0 PREEMPT(full) [ 713.763421][T32089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 713.773481][T32089] Call Trace: [ 713.776795][T32089] [ 713.779731][T32089] dump_stack_lvl+0x99/0x250 [ 713.784342][T32089] ? __asan_memcpy+0x40/0x70 [ 713.788944][T32089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 713.794157][T32089] ? __pfx__printk+0x10/0x10 [ 713.798775][T32089] vpanic+0x281/0x750 [ 713.802770][T32089] ? __pfx__printk+0x10/0x10 [ 713.807375][T32089] ? __pfx_vpanic+0x10/0x10 [ 713.811888][T32089] ? is_bpf_text_address+0x26/0x2b0 [ 713.817110][T32089] panic+0xb9/0xc0 [ 713.820845][T32089] ? __pfx_panic+0x10/0x10 [ 713.825293][T32089] __warn+0x31b/0x4b0 [ 713.829281][T32089] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 713.835889][T32089] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 713.842495][T32089] report_bug+0x2be/0x4f0 [ 713.846836][T32089] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 713.853445][T32089] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 713.860042][T32089] ? ieee80211_recalc_chanctx_chantype+0x89f/0x10f0 [ 713.866628][T32089] handle_bug+0x84/0x160 [ 713.870870][T32089] exc_invalid_op+0x1a/0x50 [ 713.875371][T32089] asm_exc_invalid_op+0x1a/0x20 [ 713.880218][T32089] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 713.887414][T32089] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7b 32 25 f7 4d 8b 36 4d 39 fe 74 22 e8 0e c1 c1 f6 e9 ef f8 ff ff e8 04 c1 c1 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 f6 c0 c1 f6 e9 39 07 00 00 48 83 7c 24 [ 713.907014][T32089] RSP: 0018:ffffc9000b8de380 EFLAGS: 00010246 [ 713.913076][T32089] RAX: ffffffff8afdf592 RBX: 0000000000000000 RCX: 0000000000080000 [ 713.921035][T32089] RDX: ffffc9001f12b000 RSI: 000000000007ffff RDI: 0000000000080000 [ 713.929001][T32089] RBP: ffffc9000b8de540 R08: ffff88807ab7d737 R09: 1ffff1100f56fae6 [ 713.936964][T32089] R10: dffffc0000000000 R11: ffffed100f56fae7 R12: dffffc0000000000 [ 713.944930][T32089] R13: 0000000000000070 R14: ffff888054eba8c0 R15: ffff888054eba8c0 [ 713.952899][T32089] ? ieee80211_recalc_chanctx_chantype+0x10e2/0x10f0 [ 713.959589][T32089] ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10 [ 713.966434][T32089] ? __pfx___might_resched+0x10/0x10 [ 713.971722][T32089] ieee80211_assign_link_chanctx+0x5ca/0xd70 [ 713.977702][T32089] __ieee80211_link_release_channel+0x33b/0x4a0 [ 713.983936][T32089] ieee80211_leave_mesh+0xc5/0x130 [ 713.989039][T32089] cfg80211_leave_mesh+0x290/0x800 [ 713.994145][T32089] cfg80211_netdev_notifier_call+0x1b3/0x1450 [ 714.000207][T32089] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 714.006700][T32089] ? __lock_acquire+0xab9/0xd20 [ 714.011547][T32089] ? do_raw_spin_lock+0x121/0x290 [ 714.016577][T32089] ? inetdev_event+0x464/0x15b0 [ 714.021419][T32089] ? igmp_netdev_event+0x7c/0x770 [ 714.026435][T32089] notifier_call_chain+0x1b3/0x3e0 [ 714.031538][T32089] __dev_close_many+0x106/0x6f0 [ 714.036378][T32089] ? lockdep_hardirqs_on+0x9c/0x150 [ 714.041567][T32089] ? __local_bh_enable_ip+0x12d/0x1c0 [ 714.046924][T32089] ? __pfx___dev_close_many+0x10/0x10 [ 714.052293][T32089] __dev_change_flags+0x2c7/0x6d0 [ 714.057308][T32089] ? __pfx___dev_change_flags+0x10/0x10 [ 714.062838][T32089] ? netif_state_change+0x256/0x3a0 [ 714.068027][T32089] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 714.073997][T32089] ? __pfx_netif_state_change+0x10/0x10 [ 714.079539][T32089] netif_change_flags+0x88/0x1a0 [ 714.084470][T32089] do_setlink+0xc55/0x41c0 [ 714.088878][T32089] ? __kernel_text_address+0xd/0x40 [ 714.094066][T32089] ? arch_stack_walk+0xfc/0x150 [ 714.098911][T32089] ? __pfx_do_setlink+0x10/0x10 [ 714.103764][T32089] ? __lock_acquire+0xab9/0xd20 [ 714.108613][T32089] ? __mutex_trylock_common+0x153/0x260 [ 714.114146][T32089] ? __pfx___mutex_trylock_common+0x10/0x10 [ 714.120028][T32089] ? rcu_is_watching+0x15/0xb0 [ 714.124778][T32089] ? trace_contention_end+0x39/0x120 [ 714.130056][T32089] ? __mutex_lock+0x335/0x1350 [ 714.134812][T32089] ? rtnl_newlink+0x8db/0x1c70 [ 714.139571][T32089] ? __pfx___mutex_lock+0x10/0x10 [ 714.144587][T32089] ? ns_capable+0x8a/0xf0 [ 714.148910][T32089] ? rtnl_link_get_net_capable+0x16a/0x350 [ 714.154704][T32089] rtnl_newlink+0x149f/0x1c70 [ 714.159462][T32089] ? netlink_sendmsg+0x805/0xb30 [ 714.164395][T32089] ? __pfx_rtnl_newlink+0x10/0x10 [ 714.169435][T32089] ? kasan_quarantine_put+0xdd/0x220 [ 714.174705][T32089] ? lockdep_hardirqs_on+0x9c/0x150 [ 714.179906][T32089] ? nlmon_xmit+0xb0/0x100 [ 714.184309][T32089] ? kmem_cache_free+0x18f/0x400 [ 714.189245][T32089] ? __local_bh_enable_ip+0x12d/0x1c0 [ 714.194605][T32089] ? lockdep_hardirqs_on+0x9c/0x150 [ 714.199796][T32089] ? __local_bh_enable_ip+0x12d/0x1c0 [ 714.205151][T32089] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 714.210855][T32089] ? __dev_queue_xmit+0x27b/0x3b50 [ 714.215956][T32089] ? __dev_queue_xmit+0x27b/0x3b50 [ 714.221052][T32089] ? __dev_queue_xmit+0x27b/0x3b50 [ 714.226151][T32089] ? __dev_queue_xmit+0x1d79/0x3b50 [ 714.231340][T32089] ? __lock_acquire+0xab9/0xd20 [ 714.236203][T32089] ? __pfx_rtnl_newlink+0x10/0x10 [ 714.241216][T32089] rtnetlink_rcv_msg+0x7cf/0xb70 [ 714.246152][T32089] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 714.251258][T32089] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 714.256718][T32089] ? ref_tracker_free+0x63a/0x7d0 [ 714.261744][T32089] ? __asan_memcpy+0x40/0x70 [ 714.266321][T32089] ? __pfx_ref_tracker_free+0x10/0x10 [ 714.271688][T32089] netlink_rcv_skb+0x205/0x470 [ 714.276448][T32089] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 714.281900][T32089] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 714.287189][T32089] ? netlink_deliver_tap+0x2e/0x1b0 [ 714.292388][T32089] netlink_unicast+0x82c/0x9e0 [ 714.297149][T32089] ? __pfx_netlink_unicast+0x10/0x10 [ 714.302426][T32089] ? netlink_sendmsg+0x642/0xb30 [ 714.307347][T32089] ? skb_put+0x11b/0x210 [ 714.311584][T32089] netlink_sendmsg+0x805/0xb30 [ 714.316340][T32089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 714.321613][T32089] ? aa_sock_msg_perm+0xf1/0x1d0 [ 714.326537][T32089] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 714.331809][T32089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 714.337077][T32089] __sock_sendmsg+0x21c/0x270 [ 714.341748][T32089] ____sys_sendmsg+0x505/0x830 [ 714.346505][T32089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 714.351786][T32089] ? import_iovec+0x74/0xa0 [ 714.356302][T32089] ___sys_sendmsg+0x21f/0x2a0 [ 714.360966][T32089] ? __pfx____sys_sendmsg+0x10/0x10 [ 714.366183][T32089] ? __fget_files+0x2a/0x420 [ 714.370757][T32089] ? __fget_files+0x3a0/0x420 [ 714.375428][T32089] __x64_sys_sendmsg+0x19b/0x260 [ 714.380355][T32089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 714.385808][T32089] ? rcu_is_watching+0x15/0xb0 [ 714.390564][T32089] ? do_syscall_64+0xbe/0x3b0 [ 714.395235][T32089] do_syscall_64+0xfa/0x3b0 [ 714.399729][T32089] ? lockdep_hardirqs_on+0x9c/0x150 [ 714.404919][T32089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.410970][T32089] ? clear_bhb_loop+0x60/0xb0 [ 714.415636][T32089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.421516][T32089] RIP: 0033:0x7fbfd8f8ebe9 [ 714.425920][T32089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.445515][T32089] RSP: 002b:00007fbfd9e29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.453917][T32089] RAX: ffffffffffffffda RBX: 00007fbfd91c6090 RCX: 00007fbfd8f8ebe9 [ 714.461894][T32089] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 714.469869][T32089] RBP: 00007fbfd9011e19 R08: 0000000000000000 R09: 0000000000000000 [ 714.477834][T32089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.485797][T32089] R13: 00007fbfd91c6128 R14: 00007fbfd91c6090 R15: 00007ffd9bae44c8 [ 714.493778][T32089] [ 714.496942][T32089] Kernel Offset: disabled [ 714.501250][T32089] Rebooting in 86400 seconds..