last executing test programs: 8.076815367s ago: executing program 0 (id=6005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/247, 0x200105d0}], 0xc}, 0x1f00) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x30, r7, 0x821, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "aaa05ee584cc1cbd50272f0484"}]}, 0x30}}, 0xc000) close(r3) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000}, 0x50) pselect6(0x40, &(0x7f0000000240)={0x9, 0x9e, 0xfbfc, 0xee, 0x8, 0x6, 0xa0c, 0xd}, 0x0, 0x0, &(0x7f00000003c0), 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x28, r9, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c095}, 0x0) 7.785820913s ago: executing program 0 (id=6008): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000), 0x8}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4627, 0x6, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x8}, 0x1c) listen(r0, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 7.540806995s ago: executing program 0 (id=6009): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="011a6f4000", @ANYRES16=r1, @ANYBLOB="0100000000000000000010000000280001801400030000000008000000000000ffffe00000010600029adaa71f894be051ae2cfb1149198445e9e8871042946ef6e0a3a05f24d2d12ba1c0fdd01e3b22456b68fed31ef635ccdfa35a50028487addc84d87285b10356c193769d9d5994083f2ef2cae0efaed307be2529b9e815283e00b74b50cc5ffee8da4a7c6f64553de0bb5e0cd005ad098347a90c9db704ce596ddb58f404227676b0a501"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8011) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$inet6(r4, &(0x7f0000004400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff89}}], 0x1, 0x8000) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000e45a0add1523ea298b3167da724aca5b8500000000bc319bbe"], &(0x7f0000000040)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x33}, 0x18) (async) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001780)=[{0x0}], 0x1}, 0x4000080) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r7, 0x8937, &(0x7f0000000040)={'dummy0\x00', @ifru_mtu=0x1}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x8864) (async) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r9, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x20040054) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x94811e7190055b9e}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4c080) (async) unshare(0x10800) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 6.912938656s ago: executing program 0 (id=6012): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000bc0)) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x34}}, 0x60) splice(r4, &(0x7f0000000000)=0x2, r4, &(0x7f0000000080)=0x1d2e, 0x2, 0x4) 6.088466716s ago: executing program 0 (id=6017): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x19}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x80) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 5.796712311s ago: executing program 0 (id=6019): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000080000000200000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) connect$caif(r0, &(0x7f0000000140)=@rfm={0x25, 0x9, "0b25f02440911280ec82cbf19b4eba18"}, 0x18) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080)=0x1) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5], 0x40}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x1, 0x0, 0x1, 0x4, 0xfffffffffffffff0}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 5.224991835s ago: executing program 4 (id=6021): unshare(0x60480) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0xffff, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 5.102860317s ago: executing program 2 (id=6024): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000d40)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x7fff}, 0x10}, 0x94) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000012c0), &(0x7f0000001300)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{}, &(0x7f0000000c80), &(0x7f0000000cc0)=r1}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000009000000000000000900000d0000000000000000050000000b00000004000000090000000200000008000000020000000f000000010000000d0000000400000001000000000000000b00000003000000060000000100000000802e6100002e5f00"], &(0x7f0000000ec0)=""/225, 0x75, 0xe1, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0500000050050000020000000300000101000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000500"/28], 0x50) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000b80)={0xa, 0x4e24, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000001380)=[{0x0}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="200000000000000029000000360000003c01000000000000010009000502000418000000000000002900360001001600000000000000400000000000000029000000360000003304000000000000000041c9102001000000000000000000000000000200000000cb5c6095c57dd1aaea2edc4abd4291ba4baa1ee2be97ae8a9e043d6ca77312c677716ccf19cec84e0343f68aec00e5fe6389d87a270c5f38c02ec3d3512afc0bab68fb2a212b1262e765f468c139540b36"], 0x78}}], 0x2, 0x4040005) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000107000004416f1800000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x1ad72f7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000013c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="2c00000003060300000000000000007a310000000000000200e75a60b9a2c0eee3000000000000000000000067"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) 4.939543961s ago: executing program 4 (id=6026): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x11, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x6}, 0x94) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x2000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000680)="8b929dbfc9b261a8181b708655a121ccf5b6b29b2df153d9663632b64c3bc37d642a384e5d546cdad47eb792c1c1e2ca42496ac521f593e821d62cd39e2e1e6df9521c1ca0506d96e399be5f43e751b6c7f82d57964571710def87f679ddd9f37cea6dafb292d5070ee137e5a6f689bfdda9425a62b4312338a50866557ea79353463839b4ffbaa417c068d0b62f993d3235168306d94f065ea3f3a002be155d81752021bf99ae361b287cb72a69d6f21fc1c950ad03ec829d016af2ced9a0f37d5b29f48465b6308012cc25", 0xcc, 0x4000, &(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1}, 0x4f) r6 = socket$netlink(0x10, 0x3, 0x4) listen(0xffffffffffffffff, 0x5) write(r6, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) unshare(0x6a040000) 4.720863633s ago: executing program 1 (id=6028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}]}]}, 0x70}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000007000000060000000c00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c98509148c177c7b05ad851802326513c69ddda078e560aeb69e65b9579035d0a6a7a508cf7c96ef777a83308ee847a9c7b79072c0c7b129427276159284d9b9e12945c6f8837a0d35a55d613cdfdb930c08caa29cf3de705f7b17", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket(0x9, 0xa, 0x3f) sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x8004000, 0x0, 0x0) 4.611909694s ago: executing program 1 (id=6029): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(r0, 0x0, r3, 0x0, 0x80, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) write(r3, &(0x7f0000003300)="ac", 0x1) write(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r7, 0x0, 0x7f}, 0x18) r8 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 4.106627308s ago: executing program 4 (id=6030): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xe0}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.996740155s ago: executing program 4 (id=6031): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001380)={0x0, "8d140c3f77d6cf1431380d4ccef685aa"}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002380)={r2, "fc32f9c076dd6aa759b4c2bf101a97e0"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xc3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x2}, [@generic={0x52, 0x1, 0x1, 0x44}]}, &(0x7f0000000c40)='GPL\x00', 0x1000, 0xfffffffffffffd73, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fcaefad}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r4, 0x26}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000040), 0x0, 0x40800) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xa, 0x7ffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@del={0xe0, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {{'lrw-camellia-asm\x00'}, '\x00', '\x00', 0x2000, 0x200}}, 0xe0}, 0x1, 0x0, 0x0, 0x20040810}, 0x850) 3.38441624s ago: executing program 2 (id=6035): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}], 0x20, 0x40844}}], 0x1, 0x1) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) socket$inet_tcp(0x2, 0x1, 0x0) 3.160875098s ago: executing program 3 (id=6036): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x0, 0x2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001d000bcc000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000a000200aaaaaaaaaa0c00c00600050001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=@RTM_NEWMDB={0x58, 0x54, 0x10, 0x70bd26, 0x25dfdbfe, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x4, {@in6_addr=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x1, 0x1, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40841}, 0x4042844) r7 = epoll_create1(0x80000) epoll_wait(r7, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000040)={0x2000001c}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x707, 0x7, 0x3, {{0x1a, 0x4, 0x2, 0x4, 0x68, 0x66, 0x0, 0x1, 0x2f, 0x0, @remote, @multicast2, {[@ssrr={0x89, 0x1f, 0xec, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @multicast1]}, @noop, @timestamp_addr={0x44, 0x24, 0x87, 0x1, 0x5, [{@private=0xa010101, 0xc6}, {@multicast1}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @timestamp_addr={0x44, 0xc, 0x7, 0x1, 0xa, [{@loopback, 0x80000001}]}, @ra={0x94, 0x4}]}}}}}) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r10}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x16, 0x1, 0x0, 0x1, [@generic="88046fa3301e12b1dbed7c66a9a96b690465"]}]}, 0x3c}], 0x1}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in=@multicast2, @in6=@mcast2, 0x4e23, 0x9c3, 0x4e20, 0x321, 0x2, 0x80, 0x80, 0x87, r8, r10}, {0xfff, 0x80, 0x86, 0xb75, 0x80, 0x9, 0x51, 0x10001}, {0x2, 0x7fff, 0x5, 0xffffffffffff8000}, 0x8, 0x6e6bb1, 0x0, 0x1, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, 0x4d5, 0x32}, 0x5ae21c328ff2db6b, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3505, 0x2, 0x3, 0x3, 0xfffffffc, 0x10000, 0x2}}, 0xe8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x44000) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 3.160592184s ago: executing program 2 (id=6037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1401, 0x400, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) 2.968377732s ago: executing program 1 (id=6038): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000e0ffff010000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, 0x0) socket$packet(0x11, 0x3, 0x300) unshare(0x62040200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r10, @ANYBLOB="0800050006000000100017800400020004000600040002000c00178004000200040006001c001780040004000b0003"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000cc0)="02", 0x1}], 0x1, &(0x7f0000001140)=ANY=[], 0x10}}], 0x2, 0x4004804) 2.854363145s ago: executing program 3 (id=6039): mmap(&(0x7f000009f000/0x3000)=nil, 0x3000, 0x1, 0x30, 0xffffffffffffffff, 0x6f322000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x2400c000) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000640)=@newqdisc={0x80, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x100000, 0x100000, 0xfffffffd, 0x1, 0x5, 0xf}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x5, 0x0, 0x4e71, 0x2b4, 0x5}}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x44, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80000001}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000010) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x4, 0x9, 0xc, 0x2}, {0x0, 0x3, 0x7f, 0x9}, {0x9, 0x6, 0xef, 0xfffffffe}, {0x6, 0x9, 0xfd, 0x7}]}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg(r2, &(0x7f0000000600)={&(0x7f0000000480)=@rc, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)="43f039ca7aa48ff8fac8668bee88da6c541dade32166da9ed137e2065a3fbde6200203e80f902adc3e4ebff69a4e41397619f09cbc41cf8ddf1d7b856ef60d8507ca8323ad9390645f8c8b00b2a74524b62c35a93aa50795dd01e98bc0add892352e6872c01fe6d3bdb774c63c17657348a2163423e16e9e939b431ca56773e93dd6edad5dbd71b8a3a02706f862f1875830100f0701a89e6e09046462371cfeaa0b9004d21864f6fda238a9e38328", 0xaf}, {&(0x7f00000006c0)="efb078e54d2925e5f2ab2ba53f3af496919f95ebe347c1bb0ceead215013739b583a9a45b04231789ae0cbdc7214cd87970c233ee84412bd5f117b25f8cf0cc78522de874e0823160a6dfc99f92466bbbcd5074fa5e5f7c74238c52c2992c000df23e481bea351e9a7758be0545127844c6c882ccfa2e1d509ac19273ae8c7758b07997632b18c6b82ce51a6b10c10e30c4cfc2d6f0225e645d5f71df26bc68f7c4a31fc68e5d765e061ba9ab05f62f7a44c4d7a131e1daadce6bbc813079353b5a449aa574b4b5e1c605c0e7c4c5e4332381dcd731b5fa8aab265f23200f173786863600571d5af3fe54c29b0104310c68f4d5aa4579d50f8", 0xf9}], 0x2, &(0x7f0000000880)=[{0x100, 0x118, 0xffffffff, "1f06d57f0bb62293472d6a0248c90135fdb5e1258c2cab89be42fbd6336a7eca9107c4d722e3c4c333e994ac68fc3966ff0fff64da6fb57f0c5b262ea3dcf712cd86f641a4d12251d3f7e63db2bc199c00d6e5ab49af92b95f5ee80284c00df9affca02888588c826064f63ec5158de564352c5e5202964f6c27fb0644e17ada25ade3c71421c85577ac79d942f73c38e6bc7c5b99dc0b9c495ca8ee7dbaa86f941105fa24cc355c005af6eec1f562ad3ef0ceea9506057d10dac5b22718e556ffb1372679ae340a973bc434738795990b55b7ae9e47f2664ee0ee79ed5b5339da2d18a8737739cb759726fcf3c4"}], 0x100}, 0x44000801) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipmr_newroute={0x6c, 0x18, 0x200, 0x70bd26, 0x25dfdbfd, {0x80, 0x0, 0x20, 0x4, 0xff, 0x4, 0xff, 0x9, 0x3100}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @local}, @RTA_UID={0x8, 0x19, r9}, @RTA_FLOW={0x8, 0xb, 0x3}, @RTA_PREFSRC={0x8, 0x7, @private=0xa010102}, @RTA_MARK={0x8, 0x10, 0x9}, @RTA_OIF={0x8, 0x4, r1}, @RTA_DST={0x8, 0x1, @rand_addr=0x64010100}, @RTA_OIF={0x8}, @RTA_NH_ID={0x8, 0x1e, 0x7ff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2.649514689s ago: executing program 4 (id=6040): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x800000, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x4f) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000e00000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80300001600010000000100fcffffff0a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080201d000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x3c8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002000010300000000000000000200000000000000000000000800060000000200"], 0x24}}, 0x0) socket$inet6(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)={0xf0, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x801}, 0x8000) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000003c0)={r7, 0xcb}, 0x8) sendmmsg(r2, &(0x7f0000000080), 0x0, 0x60) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1f}}}}, @ip_ttl={{0x14, 0x110, 0x2, 0x5398}}], 0x38}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x37, 0x9d, 0x62}, 0x2c) r8 = socket$inet6(0x10, 0x3, 0x0) write(r8, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 2.642537384s ago: executing program 2 (id=6041): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) sendmsg$nfc_llcp(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x27, r3, 0x1, 0x6, 0x80, 0x5, "722af652383021d102afc2d685bb9653dd89e2223d0ee6979ba43376341ef0fb08d131b8882d79c1ed0cc5332e1ae381e1fadcfdcca33765ec2f76f9840f12", 0x36}, 0x60, &(0x7f0000000080), 0x0, &(0x7f0000000280)={0x110, 0x102, 0x80000000, "e4c9509fbbf4a0593f5f1283cd8a2ddd25bd95a6fd52cd7ddc88c0d5201d802c011bd45a340c3b6c0b39dfee495aa9b73455b6b4cf5d8ba44a401ef54387969af85e9fddafe9962b3edd2e88f4ccf7d6701ef72a6631c3f1dcfca5a16864f4786ed503df096db87f2b71cbd4c3b99395883728f6f656981e94135a381f8bd3ec3b1fc06abfe68a7bd21038df16ee19a1125a37c3b494360f9ed80fe634189206d13b1b80edc4f409e1cc0619ef0b3b4dd3c6a97f4eb29b93a6cb502a478a832554ec2b5484f2e85f98cb32165440e5de27613e3c0f508d514d74b3d01807475ad783f6133162f53f378a2e15dfdc097bf550fba310b67b4f97d3de484319d2"}, 0x110, 0xc0}, 0x40000000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, &(0x7f0000000140)) 2.529489627s ago: executing program 3 (id=6042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x44, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xce5fca8ad66a7731}, 0x8000) 2.408581545s ago: executing program 2 (id=6043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {0xc}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f0000000000)=0x6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x65d, @loopback, 0x2}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x8, 0x2, 0x1}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newsa={0xf0, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20, 0x7, 0x4e24, 0x1000, 0x3540f2ab0b92041f, 0x20, 0x20, 0x1d}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x4, 0x8}, 0x400000, 0x34ff, 0x2, 0x1, 0xfe}}, 0xf0}}, 0x804) sendto$inet6(r6, 0x0, 0x0, 0x80, 0x0, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002d40)=ANY=[@ANYBLOB="30000000bb2977452ef42c4d584d677f04df25b1b64d2d2da71551e4f75790034cf21951a05a4cce7a81fcb8d653d54eb72c31c40e962638edb709fd74639c772ca18410c9ec507b05fce7de81ad739c983aeb1651b54a917f5d009036d24b916a2d292a65fcbc3721bb439279748e45a3", @ANYRES16=0x0, @ANYBLOB="040027bd7000ffdbdf2507000000080001001400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000005a000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000) r10 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r10, &(0x7f0000007f00)=[{{&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000700)=""/221, 0xdd}, {&(0x7f0000000800)=""/152, 0x98}, {&(0x7f00000008c0)=""/142, 0x8e}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000000980)=""/247, 0xf7}], 0x7, &(0x7f00000002c0)}, 0x43}, {{&(0x7f0000000a80)=@nfc, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000b00)=""/134, 0x86}, {&(0x7f0000000bc0)=""/200, 0xc8}, {&(0x7f0000000cc0)=""/149, 0x95}, {&(0x7f0000000d80)=""/65, 0x41}, {&(0x7f0000000e00)=""/187, 0xbb}, {&(0x7f0000000ec0)=""/219, 0xdb}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x7, &(0x7f00000031c0)=""/4096, 0x1000}, 0x400}, {{&(0x7f0000002040)=@can, 0x80, &(0x7f0000002400)=[{&(0x7f00000020c0)=""/145, 0x91}, {&(0x7f0000002180)=""/188, 0xbc}, {&(0x7f0000002240)=""/139, 0x8b}, {&(0x7f0000002300)=""/121, 0x79}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f0000002380)=""/78, 0x4e}], 0x6}}, {{&(0x7f0000002480)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000002600)=[{&(0x7f0000000480)=""/51, 0x33}, {&(0x7f0000002500)=""/36, 0x24}, {&(0x7f0000002540)=""/166, 0xa6}], 0x3}, 0x8}, {{&(0x7f0000002640)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000026c0)=""/201, 0xc9}], 0x1, &(0x7f0000002800)=""/238, 0xee}, 0xff}, {{&(0x7f0000002900)=@un=@abs, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002980)=""/115, 0x73}, {&(0x7f00000051c0)=""/4096, 0x1000}], 0x2}, 0x8a}, {{&(0x7f0000002a40)=@rc={0x1f, @none}, 0x80, &(0x7f00000073c0)=[{&(0x7f00000061c0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/71, 0x47}, {&(0x7f0000002b40)=""/177, 0xb1}, {&(0x7f0000002c00)=""/19, 0x13}, {&(0x7f0000002c40)=""/92, 0x5c}, {&(0x7f00000072c0)=""/196, 0xc4}, {&(0x7f0000002cc0)=""/94, 0x5e}], 0x7, &(0x7f0000007440)=""/217, 0xd9}, 0x5}, {{&(0x7f0000007540)=@alg, 0x80, &(0x7f00000076c0)=[{&(0x7f00000075c0)=""/94, 0x5e}, {&(0x7f0000007640)=""/93, 0x5d}], 0x2}, 0x2}, {{&(0x7f0000007700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000007c80)=[{&(0x7f0000007780)=""/58, 0x3a}, {&(0x7f00000077c0)=""/142, 0x8e}, {&(0x7f0000007880)=""/235, 0xeb}, {&(0x7f0000007980)=""/2, 0x2}, {&(0x7f00000079c0)=""/22, 0x16}, {&(0x7f0000007a00)=""/133, 0x85}, {&(0x7f0000007ac0)=""/161, 0xa1}, {&(0x7f0000007b80)=""/19, 0x13}, {&(0x7f0000007bc0)=""/133, 0x85}], 0x9, &(0x7f0000007d40)=""/34, 0x22}, 0x28855763}, {{0x0, 0x0, &(0x7f0000007e00)=[{&(0x7f0000007d80)=""/109, 0x6d}], 0x1, &(0x7f0000007e40)=""/155, 0x9b}, 0x6}], 0xa, 0x3, 0x0) socket(0x10, 0x3, 0x33b6469) 2.355785915s ago: executing program 3 (id=6044): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x3, {}, 0xfe}, 0x18) recvfrom$inet(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 2.298007445s ago: executing program 1 (id=6045): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7f1700001000030400000000ffdbdf25bf8858000000", @ANYRES32=0x0, @ANYRESDEC=r0], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x40080) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002e0001000000000000000000180000801400070000000000000000000000ffff7f000001"], 0x28}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x94300, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000280)={r7}) unshare(0x22020600) bind$ax25(r5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$packet(0x11, 0x3, 0x300) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r5) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="00000000cb0bc4d8944c760a2fc5a8d5399c82fde2ffffff78fa64ff5a7d4358eeeba0570c695dd084e8214ea95ba9e5eaa67d1235167a218361b9eddf1a15112f021929e83a445bb0e748d328db747695fb12d39a99c8313eb3dcd3600f6137b974bfc24d11b157399205589b11d3e446bf21d91b8da454f528c2c71d60730fae329f2e243cda67989512bc64073bcf6c203cf6974c952b28fe6aa84e02f6bcb47f2d533d7c0c94f8b3a885eedc1e087e5afb36402d09312fe6c2db69f68ee59964b4e43afc64d026036caa5bc82accc46c5f510ddfe8998f82157d7618769952c2fa145632fbbebbcb0b93684b236e1b360641e6a0", @ANYRES16=r9, @ANYBLOB="00082cbd7000fbdbdf250e0000001400098008000100060000000800010000000080b40001802c00028008000400040000000800040004000000080001001500000008000200ff010000080002000700000044000400200001000a004e2300000001fc00000000000000000000000000000100040000200002000a004e2400000003fc000000000000000000000000000000eb7000000e0001006574683a7465616d300000000800030004000000100001006574683a70696d72656730001600010069623a6272696467655f736c6176655f300000001400078008000100000000000800010000800000"], 0xf0}, 0x1, 0x0, 0x0, 0x840}, 0x80) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r11], 0x8) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x24020400) sendmmsg$inet(r10, 0x0, 0x0, 0x4000040) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$tun(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="000088e7ffffffffffffaaaaaaaaaa3e8100220086dd6d0000000008110000000000000000000000000000000000ff0200000000000000000000000000014f1c1b5900089078e85c9040612e6a6abd60eb3df0805752dc9012"], 0x46) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x94, 0x3, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x73, 0xc, "03b07add54563af855d9eb95d28201dd8b31b45768df6390efe4b7da0ccfb998014aef14288292b47cc69539cd392416e7e721f89cac04383d4dd3e4af380dfeb66cfc5bd52cebd5e1226d36e21a895819aa06ab7dd6308c83daaeac774942a5d55a01b7f502826249d699dcbe209f"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0xf0, 0x18, 0xa, 0x202, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0xe8, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xd3, 0x6, "589e17a4befb3c5c29f77fbcad166231da12baea0305f7e273ab6b77f4abd940b9cddb680de66b6e2def9cfcaa21b1eeb9c112b05a36b356a3f2b81626542db104ba92d5f4716991085a91ea45cf3217de5d25badd2ec63b0b03187ce87041fde7a2a9960e706b1108956efd5ac83f10c9960df47fe02c3cada48618ec4f960412c60af882f59fe09a6e7322251f39cb7b1833e91a1fdda5e722a733daa44455ec40d5c0d2b05ec09b29aecd30e4187b0cb7e6532d9b08a7d4df897a17ade9f3f029ba4ee8d89aae7666560258a28b"}]}], {0x14}}, 0x294}, 0x1, 0x0, 0x0, 0x40000}, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r12, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000050000000000000012800e00010069703665727370616e0000001c00028014000700fc0200000000000000000000000000000400120008001f0008000000"], 0x58}}, 0x0) 2.208793425s ago: executing program 3 (id=6046): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1026b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c000180080001fffe0500030008000000000000c302ebd395b542c092ef48e6e17edba428cf332e7b7f796f1971d2d8ecf58e727f311647386f3c0c26de2d6d0009bff203fcb80f0c474b8ef3b2722a66d0c821684a4e14d56ed97751ec4766ef4d70fce00fc6b76beb2d5f7cf64f00aea492f56c8c41283e78ed855fd8ffe6f451a448a3d3a6b3e2e0c44c499a9ba363bd66"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000b6f2227f669f930a4f431fd92f17f756d761314fdeba22456fc515559fe7ecda8c1f91781170"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4f2700, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 2.190409395s ago: executing program 4 (id=6047): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(r0, 0x0, r3, 0x0, 0x80, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) write(r3, &(0x7f0000003300)="ac", 0x1) write(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r7, 0x0, 0x7f}, 0x18) r8 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1.912257667s ago: executing program 1 (id=6048): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000462d46db262fa1a70010852000000400000085000064ffffffffffffff00000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x689}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)}], 0x1) listen(0xffffffffffffffff, 0x40b12) r3 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmmsg$inet6(r3, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x51) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = socket$kcm(0x29, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="29c9aab9b62eb624b90cf6295ba3fac0cca72d67f88c7e31302dd51862b5c8bd77194df473257f6a55e48d94d9ec5ca1bda0cf9288e64c430a2b51d6c1c1efc89dcf96c99bdf68df716416932704184c1bdfcb71acff973abc1ee8c8465b837b2706a3b0726cdb0f807c11f90d407a037c580c35b41b4717a2c42910cd3f7baec4ce457a0b7ed9963e2cd804ee042d3369411546a3234074a2f340422d0b009a946a487906a78c44ec5ee83f1704141f6f8ff7456c2af47cf427a9b28d1c4acad09ca548aadb4302c79d9df378524dbe88461d3a68cc8511788be479161c568091c98deea2dfb35964c7492cd8ac310bf7", 0xf1}, {&(0x7f0000000580)="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", 0x800}], 0x2, &(0x7f0000000140)}, 0x810) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000001c0), &(0x7f0000000400)=0x4) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x4, &(0x7f0000000d80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000b00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fbdbdf25070000000a0004007770616e330000000a0004007770616e330000000c0017000203aaaaaaaaaaaa080005000000000008000300", @ANYRES32=r11, @ANYBLOB="0a0004"], 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x40) 76.115034ms ago: executing program 1 (id=6049): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x7, 0x1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x80, 0x20, 0x14, 0x4}}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}}, 0x800) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2, 0x2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0}, 0x94) r9 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x22020400) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601020000000000000000020000060c0007800800120000000000050001000700000005000400000000000900020073797a3000000000050005000200000016000300686173683a6e65742c706f72742c6e6574000000aa65eec3422d4c9d49defd4c5407459920e3fdd38dc789009a59db47df5f3c6ffa1f32f239"], 0x5c}}, 0x40) pwritev(r11, 0x0, 0x0, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r10, 0x100000000) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 3.092818ms ago: executing program 3 (id=6050): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_DELSETELEM={0x115c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1104, 0x3, 0x0, 0x1, [{0x1100, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x101}, @NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd15c}]}}}, @NFTA_SET_ELEM_DATA={0x102c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x11a4}}, 0x4040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000140)={0x2, 'virt_wifi0\x00', {0x8}, 0xe755}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x84) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x80000000}}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x3c, r3, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) socket$kcm(0x29, 0x5, 0x0) 0s ago: executing program 2 (id=6051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x840) (async) r1 = accept4(r0, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, &(0x7f00000000c0)=0x80, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x3, 0xff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r4, 0x2}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xf4, 0x2}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) kernel console output (not intermixed with test programs): s in process `syz.2.5503'. [ 622.686411][T24191] FAULT_INJECTION: forcing a failure. [ 622.686411][T24191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.771939][T24191] CPU: 1 UID: 0 PID: 24191 Comm: syz.4.5507 Not tainted syzkaller #0 PREEMPT(full) [ 622.771968][T24191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 622.771981][T24191] Call Trace: [ 622.771989][T24191] [ 622.771999][T24191] dump_stack_lvl+0x189/0x250 [ 622.772027][T24191] ? __pfx____ratelimit+0x10/0x10 [ 622.772050][T24191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.772072][T24191] ? __pfx__printk+0x10/0x10 [ 622.772113][T24191] should_fail_ex+0x414/0x560 [ 622.772147][T24191] _copy_from_user+0x2d/0xb0 [ 622.772174][T24191] __copy_msghdr+0x3c5/0x5b0 [ 622.772205][T24191] ___sys_sendmsg+0x1a5/0x2a0 [ 622.772234][T24191] ? __pfx____sys_sendmsg+0x10/0x10 [ 622.772300][T24191] ? __fget_files+0x2a/0x420 [ 622.772328][T24191] ? __fget_files+0x3a0/0x420 [ 622.772367][T24191] __x64_sys_sendmsg+0x19b/0x260 [ 622.772397][T24191] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 622.772434][T24191] ? __pfx_ksys_write+0x10/0x10 [ 622.772459][T24191] ? rcu_is_watching+0x15/0xb0 [ 622.772484][T24191] ? do_syscall_64+0xbe/0x3b0 [ 622.772511][T24191] do_syscall_64+0xfa/0x3b0 [ 622.772533][T24191] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.772554][T24191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.772575][T24191] ? clear_bhb_loop+0x60/0xb0 [ 622.772599][T24191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.772619][T24191] RIP: 0033:0x7f1c7618eec9 [ 622.772637][T24191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.772655][T24191] RSP: 002b:00007f1c76f5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.772676][T24191] RAX: ffffffffffffffda RBX: 00007f1c763e5fa0 RCX: 00007f1c7618eec9 [ 622.772697][T24191] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003 [ 622.772709][T24191] RBP: 00007f1c76f5c090 R08: 0000000000000000 R09: 0000000000000000 [ 622.772723][T24191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.772735][T24191] R13: 00007f1c763e6038 R14: 00007f1c763e5fa0 R15: 00007ffd27f8ad88 [ 622.772769][T24191] [ 623.127161][T24200] tipc: Enabled bearer , priority 0 [ 623.154107][T24200] syzkaller0: entered promiscuous mode [ 623.176989][T24200] syzkaller0: entered allmulticast mode [ 623.192098][ C1] net_ratelimit: 18 callbacks suppressed [ 623.192117][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 623.253730][T24200] tipc: Resetting bearer [ 623.261473][T24198] tipc: Resetting bearer [ 623.271948][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 623.282163][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 623.351921][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 623.362037][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 623.374568][T24198] tipc: Disabling bearer [ 623.477250][T24213] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5515'. [ 623.584904][T24215] tipc: Enabled bearer , priority 0 [ 623.609979][T24215] syzkaller0: entered promiscuous mode [ 623.625110][T24215] syzkaller0: entered allmulticast mode [ 623.684377][T24215] tipc: Resetting bearer [ 623.713569][T24214] tipc: Resetting bearer [ 623.772823][T24214] tipc: Disabling bearer [ 623.879061][T24224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.220414][T24230] syzkaller0: entered promiscuous mode [ 624.229317][T24241] FAULT_INJECTION: forcing a failure. [ 624.229317][T24241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.238032][T24230] syzkaller0: entered allmulticast mode [ 624.242562][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 624.249902][T24241] CPU: 0 UID: 0 PID: 24241 Comm: syz.3.5525 Not tainted syzkaller #0 PREEMPT(full) [ 624.249928][T24241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 624.249941][T24241] Call Trace: [ 624.249949][T24241] [ 624.249958][T24241] dump_stack_lvl+0x189/0x250 [ 624.249984][T24241] ? __pfx____ratelimit+0x10/0x10 [ 624.250006][T24241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.250027][T24241] ? __pfx__printk+0x10/0x10 [ 624.250053][T24241] ? __might_fault+0xb0/0x130 [ 624.250089][T24241] should_fail_ex+0x414/0x560 [ 624.250121][T24241] _copy_from_iter+0x1de/0x1790 [ 624.250151][T24241] ? rcu_is_watching+0x15/0xb0 [ 624.250171][T24241] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 624.250197][T24241] ? __pfx__copy_from_iter+0x10/0x10 [ 624.250221][T24241] ? __build_skb_around+0x257/0x3e0 [ 624.250247][T24241] ? netlink_sendmsg+0x642/0xb30 [ 624.250268][T24241] ? skb_put+0x11b/0x210 [ 624.250294][T24241] netlink_sendmsg+0x6b2/0xb30 [ 624.250326][T24241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.250352][T24241] ? aa_sock_msg_perm+0xf1/0x1d0 [ 624.250384][T24241] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 624.250404][T24241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.250428][T24241] __sock_sendmsg+0x21c/0x270 [ 624.250461][T24241] ____sys_sendmsg+0x505/0x830 [ 624.250492][T24241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.250528][T24241] ? import_iovec+0x74/0xa0 [ 624.250561][T24241] ___sys_sendmsg+0x21f/0x2a0 [ 624.250589][T24241] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.250651][T24241] ? __fget_files+0x2a/0x420 [ 624.250678][T24241] ? __fget_files+0x3a0/0x420 [ 624.250716][T24241] __x64_sys_sendmsg+0x19b/0x260 [ 624.250749][T24241] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.250784][T24241] ? __pfx_ksys_write+0x10/0x10 [ 624.250806][T24241] ? rcu_is_watching+0x15/0xb0 [ 624.250829][T24241] ? do_syscall_64+0xbe/0x3b0 [ 624.250855][T24241] do_syscall_64+0xfa/0x3b0 [ 624.250875][T24241] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.250896][T24241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.250915][T24241] ? clear_bhb_loop+0x60/0xb0 [ 624.250939][T24241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.250957][T24241] RIP: 0033:0x7feaa138eec9 [ 624.250974][T24241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.250992][T24241] RSP: 002b:00007feaa21d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.251012][T24241] RAX: ffffffffffffffda RBX: 00007feaa15e5fa0 RCX: 00007feaa138eec9 [ 624.251027][T24241] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 624.251039][T24241] RBP: 00007feaa21d7090 R08: 0000000000000000 R09: 0000000000000000 [ 624.251051][T24241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.251063][T24241] R13: 00007feaa15e6038 R14: 00007feaa15e5fa0 R15: 00007ffe438f78e8 [ 624.251095][T24241] [ 624.313219][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 624.320359][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 624.391996][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 624.640360][T24257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5527'. [ 624.657859][T24264] FAULT_INJECTION: forcing a failure. [ 624.657859][T24264] name failslab, interval 1, probability 0, space 0, times 0 [ 624.671380][T24264] CPU: 0 UID: 0 PID: 24264 Comm: syz.0.5528 Not tainted syzkaller #0 PREEMPT(full) [ 624.671408][T24264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 624.671421][T24264] Call Trace: [ 624.671430][T24264] [ 624.671439][T24264] dump_stack_lvl+0x189/0x250 [ 624.671466][T24264] ? __pfx____ratelimit+0x10/0x10 [ 624.671489][T24264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.671511][T24264] ? __pfx__printk+0x10/0x10 [ 624.671540][T24264] ? __pfx___might_resched+0x10/0x10 [ 624.671570][T24264] ? fs_reclaim_acquire+0x7d/0x100 [ 624.671606][T24264] should_fail_ex+0x414/0x560 [ 624.671640][T24264] should_failslab+0xa8/0x100 [ 624.671670][T24264] __kmalloc_noprof+0xcb/0x4f0 [ 624.671695][T24264] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 624.671732][T24264] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 624.671773][T24264] genl_family_rcv_msg_doit+0xb8/0x300 [ 624.671808][T24264] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 624.671845][T24264] ? apparmor_capable+0x137/0x1b0 [ 624.671869][T24264] ? bpf_lsm_capable+0x9/0x20 [ 624.671893][T24264] ? security_capable+0x7e/0x2e0 [ 624.671930][T24264] genl_rcv_msg+0x60e/0x790 [ 624.671965][T24264] ? __pfx_genl_rcv_msg+0x10/0x10 [ 624.671993][T24264] ? __pfx_wg_set_device+0x10/0x10 [ 624.672020][T24264] ? __asan_memcpy+0x40/0x70 [ 624.672041][T24264] ? __pfx_ref_tracker_free+0x10/0x10 [ 624.672079][T24264] netlink_rcv_skb+0x208/0x470 [ 624.672099][T24264] ? __lock_acquire+0xab9/0xd20 [ 624.672127][T24264] ? __pfx_genl_rcv_msg+0x10/0x10 [ 624.672157][T24264] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.672201][T24264] ? down_read+0x1ad/0x2e0 [ 624.672228][T24264] genl_rcv+0x28/0x40 [ 624.672253][T24264] netlink_unicast+0x82c/0x9e0 [ 624.672290][T24264] ? __pfx_netlink_unicast+0x10/0x10 [ 624.672313][T24264] ? netlink_sendmsg+0x642/0xb30 [ 624.672332][T24264] ? skb_put+0x11b/0x210 [ 624.672359][T24264] netlink_sendmsg+0x805/0xb30 [ 624.672391][T24264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.672418][T24264] ? aa_sock_msg_perm+0xf1/0x1d0 [ 624.672450][T24264] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 624.672470][T24264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.672495][T24264] __sock_sendmsg+0x21c/0x270 [ 624.672529][T24264] ____sys_sendmsg+0x505/0x830 [ 624.672563][T24264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.672600][T24264] ? import_iovec+0x74/0xa0 [ 624.672630][T24264] ___sys_sendmsg+0x21f/0x2a0 [ 624.672659][T24264] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.672728][T24264] ? __fget_files+0x2a/0x420 [ 624.672755][T24264] ? __fget_files+0x3a0/0x420 [ 624.672795][T24264] __x64_sys_sendmsg+0x19b/0x260 [ 624.672825][T24264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.672864][T24264] ? __pfx_ksys_write+0x10/0x10 [ 624.672887][T24264] ? rcu_is_watching+0x15/0xb0 [ 624.672912][T24264] ? do_syscall_64+0xbe/0x3b0 [ 624.672940][T24264] do_syscall_64+0xfa/0x3b0 [ 624.672962][T24264] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.672984][T24264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.673004][T24264] ? clear_bhb_loop+0x60/0xb0 [ 624.673029][T24264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.673048][T24264] RIP: 0033:0x7f90fcb8eec9 [ 624.673066][T24264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.673085][T24264] RSP: 002b:00007f90fd93f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.673107][T24264] RAX: ffffffffffffffda RBX: 00007f90fcde5fa0 RCX: 00007f90fcb8eec9 [ 624.673122][T24264] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 624.673136][T24264] RBP: 00007f90fd93f090 R08: 0000000000000000 R09: 0000000000000000 [ 624.673149][T24264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.673162][T24264] R13: 00007f90fcde6038 R14: 00007f90fcde5fa0 R15: 00007ffd8cdb6578 [ 624.673197][T24264] [ 626.905698][T24290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5538'. [ 627.006686][T24300] netlink: 'syz.2.5541': attribute type 1 has an invalid length. [ 627.023096][T24290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5538'. [ 627.037875][T24300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5541'. [ 627.063285][T24303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5542'. [ 627.645045][T24337] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5553'. [ 627.656045][T24337] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5553'. [ 627.833915][T24338] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.855113][T24356] FAULT_INJECTION: forcing a failure. [ 627.855113][T24356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.868715][T24356] CPU: 1 UID: 0 PID: 24356 Comm: syz.0.5560 Not tainted syzkaller #0 PREEMPT(full) [ 627.868742][T24356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 627.868754][T24356] Call Trace: [ 627.868763][T24356] [ 627.868772][T24356] dump_stack_lvl+0x189/0x250 [ 627.868800][T24356] ? __pfx____ratelimit+0x10/0x10 [ 627.868822][T24356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.868849][T24356] ? __pfx__printk+0x10/0x10 [ 627.868888][T24356] should_fail_ex+0x414/0x560 [ 627.868922][T24356] _copy_to_user+0x31/0xb0 [ 627.868949][T24356] simple_read_from_buffer+0xe1/0x170 [ 627.868980][T24356] proc_fail_nth_read+0x1b3/0x220 [ 627.869005][T24356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.869031][T24356] ? rw_verify_area+0x2a6/0x4d0 [ 627.869054][T24356] ? __lock_acquire+0xab9/0xd20 [ 627.869079][T24356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.869101][T24356] vfs_read+0x200/0xa30 [ 627.869124][T24356] ? fdget_pos+0x247/0x320 [ 627.869157][T24356] ? __pfx___mutex_lock+0x10/0x10 [ 627.869181][T24356] ? __pfx_vfs_read+0x10/0x10 [ 627.869213][T24356] ? __fget_files+0x2a/0x420 [ 627.869245][T24356] ? __fget_files+0x3a0/0x420 [ 627.869272][T24356] ? __fget_files+0x2a/0x420 [ 627.869310][T24356] ksys_read+0x145/0x250 [ 627.869338][T24356] ? __pfx_ksys_read+0x10/0x10 [ 627.869359][T24356] ? rcu_is_watching+0x15/0xb0 [ 627.869384][T24356] ? do_syscall_64+0xbe/0x3b0 [ 627.869411][T24356] do_syscall_64+0xfa/0x3b0 [ 627.869432][T24356] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.869452][T24356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.869473][T24356] ? clear_bhb_loop+0x60/0xb0 [ 627.869498][T24356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.869517][T24356] RIP: 0033:0x7f90fcb8d8dc [ 627.869535][T24356] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 627.869553][T24356] RSP: 002b:00007f90fd93f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 627.869574][T24356] RAX: ffffffffffffffda RBX: 00007f90fcde5fa0 RCX: 00007f90fcb8d8dc [ 627.869589][T24356] RDX: 000000000000000f RSI: 00007f90fd93f0a0 RDI: 0000000000000005 [ 627.869602][T24356] RBP: 00007f90fd93f090 R08: 0000000000000000 R09: 0000000000000000 [ 627.869614][T24356] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 627.869627][T24356] R13: 00007f90fcde6038 R14: 00007f90fcde5fa0 R15: 00007ffd8cdb6578 [ 627.869661][T24356] [ 628.142923][T24338] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.197873][T24338] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.266534][T24338] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.359869][ T1323] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.386533][ T1323] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.395045][ C1] net_ratelimit: 20 callbacks suppressed [ 628.395068][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 628.418005][ T1323] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.452147][ T1323] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.471984][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 628.472382][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 628.551919][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 628.552441][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 628.657521][T24375] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5566'. [ 628.770533][T24380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 629.305649][T24399] tipc: Enabled bearer , priority 0 [ 629.315055][T24399] syzkaller0: entered promiscuous mode [ 629.320702][T24399] syzkaller0: entered allmulticast mode [ 629.344083][T24399] syzkaller0: mtu greater than device maximum [ 629.351537][T24398] tipc: Resetting bearer [ 629.375708][T24398] tipc: Disabling bearer [ 629.433480][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 629.435115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.481433][T24404] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5576'. [ 629.512136][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 629.518810][T24404] veth0: entered promiscuous mode [ 629.526924][T24404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5576'. [ 629.556761][T24404] veth0 (unregistering): left promiscuous mode [ 629.597195][T24406] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5577'. [ 629.681320][T24410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5579'. [ 629.721370][T24410] netlink: 'syz.0.5579': attribute type 1 has an invalid length. [ 629.729691][T24410] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5579'. [ 629.738993][T24410] netlink: 'syz.0.5579': attribute type 1 has an invalid length. [ 629.747842][T24410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5579'. [ 629.768864][T24410] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5579'. [ 630.102165][T24434] netlink: 'syz.4.5586': attribute type 12 has an invalid length. [ 630.418802][T24454] FAULT_INJECTION: forcing a failure. [ 630.418802][T24454] name failslab, interval 1, probability 0, space 0, times 0 [ 630.450961][T24454] CPU: 1 UID: 0 PID: 24454 Comm: syz.1.5592 Not tainted syzkaller #0 PREEMPT(full) [ 630.450991][T24454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 630.451004][T24454] Call Trace: [ 630.451013][T24454] [ 630.451024][T24454] dump_stack_lvl+0x189/0x250 [ 630.451051][T24454] ? __pfx____ratelimit+0x10/0x10 [ 630.451074][T24454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.451097][T24454] ? __pfx__printk+0x10/0x10 [ 630.451130][T24454] ? __pfx___might_resched+0x10/0x10 [ 630.451159][T24454] ? fs_reclaim_acquire+0x7d/0x100 [ 630.451195][T24454] should_fail_ex+0x414/0x560 [ 630.451229][T24454] should_failslab+0xa8/0x100 [ 630.451259][T24454] __kmalloc_cache_noprof+0x70/0x3d0 [ 630.451285][T24454] ? __request_module+0x2b5/0x5e0 [ 630.451319][T24454] __request_module+0x2b5/0x5e0 [ 630.451351][T24454] ? rtnl_link_ops_get+0x23/0x250 [ 630.451376][T24454] ? __pfx___request_module+0x10/0x10 [ 630.451418][T24454] ? rtnl_link_ops_get+0x23/0x250 [ 630.451440][T24454] ? rtnl_link_ops_get+0x23/0x250 [ 630.451466][T24454] ? rtnl_link_ops_get+0x215/0x250 [ 630.451495][T24454] rtnl_newlink+0x65d/0x1c80 [ 630.451516][T24454] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 630.451545][T24454] ? netlink_sendmsg+0x805/0xb30 [ 630.451568][T24454] ? __sock_sendmsg+0x21c/0x270 [ 630.451595][T24454] ? ____sys_sendmsg+0x505/0x830 [ 630.451619][T24454] ? __x64_sys_sendmsg+0x19b/0x260 [ 630.451652][T24454] ? __pfx_rtnl_newlink+0x10/0x10 [ 630.451711][T24454] ? kasan_quarantine_put+0xdd/0x220 [ 630.451735][T24454] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.451766][T24454] ? nlmon_xmit+0xb0/0x100 [ 630.451784][T24454] ? kmem_cache_free+0x18f/0x400 [ 630.451814][T24454] ? __local_bh_enable_ip+0x12d/0x1c0 [ 630.451842][T24454] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.451862][T24454] ? __local_bh_enable_ip+0x12d/0x1c0 [ 630.451889][T24454] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 630.451921][T24454] ? __dev_queue_xmit+0x27b/0x3b50 [ 630.451946][T24454] ? __dev_queue_xmit+0x27b/0x3b50 [ 630.451971][T24454] ? __dev_queue_xmit+0x27b/0x3b50 [ 630.451998][T24454] ? __dev_queue_xmit+0x1d79/0x3b50 [ 630.452030][T24454] ? __lock_acquire+0xab9/0xd20 [ 630.452085][T24454] ? __pfx_rtnl_newlink+0x10/0x10 [ 630.452105][T24454] rtnetlink_rcv_msg+0x7cc/0xb70 [ 630.452130][T24454] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 630.452151][T24454] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 630.452170][T24454] ? ref_tracker_free+0x63a/0x7d0 [ 630.452197][T24454] ? __asan_memcpy+0x40/0x70 [ 630.452216][T24454] ? __pfx_ref_tracker_free+0x10/0x10 [ 630.452254][T24454] netlink_rcv_skb+0x208/0x470 [ 630.452276][T24454] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 630.452300][T24454] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 630.452332][T24454] ? netlink_deliver_tap+0x2e/0x1b0 [ 630.452363][T24454] netlink_unicast+0x82c/0x9e0 [ 630.452393][T24454] ? __pfx_netlink_unicast+0x10/0x10 [ 630.452417][T24454] ? netlink_sendmsg+0x642/0xb30 [ 630.452437][T24454] ? skb_put+0x11b/0x210 [ 630.452466][T24454] netlink_sendmsg+0x805/0xb30 [ 630.452500][T24454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.452527][T24454] ? aa_sock_msg_perm+0xf1/0x1d0 [ 630.452560][T24454] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 630.452581][T24454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.452606][T24454] __sock_sendmsg+0x21c/0x270 [ 630.452641][T24454] ____sys_sendmsg+0x505/0x830 [ 630.452673][T24454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.452716][T24454] ? import_iovec+0x74/0xa0 [ 630.452746][T24454] ___sys_sendmsg+0x21f/0x2a0 [ 630.452776][T24454] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.452842][T24454] ? __fget_files+0x2a/0x420 [ 630.452869][T24454] ? __fget_files+0x3a0/0x420 [ 630.452908][T24454] __x64_sys_sendmsg+0x19b/0x260 [ 630.452938][T24454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 630.452974][T24454] ? __pfx_ksys_write+0x10/0x10 [ 630.452997][T24454] ? rcu_is_watching+0x15/0xb0 [ 630.453021][T24454] ? do_syscall_64+0xbe/0x3b0 [ 630.453049][T24454] do_syscall_64+0xfa/0x3b0 [ 630.453071][T24454] ? lockdep_hardirqs_on+0x9c/0x150 [ 630.453092][T24454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.453112][T24454] ? clear_bhb_loop+0x60/0xb0 [ 630.453137][T24454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.453155][T24454] RIP: 0033:0x7efe3778eec9 [ 630.453173][T24454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.453191][T24454] RSP: 002b:00007efe3861f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.453213][T24454] RAX: ffffffffffffffda RBX: 00007efe379e5fa0 RCX: 00007efe3778eec9 [ 630.453229][T24454] RDX: 00000000040040d4 RSI: 0000200000000200 RDI: 0000000000000004 [ 630.453242][T24454] RBP: 00007efe3861f090 R08: 0000000000000000 R09: 0000000000000000 [ 630.453256][T24454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.453268][T24454] R13: 00007efe379e6038 R14: 00007efe379e5fa0 R15: 00007ffc93ce58a8 [ 630.453302][T24454] [ 631.394211][T24483] netlink: 'syz.2.5602': attribute type 10 has an invalid length. [ 631.767433][T24505] netlink: 'syz.4.5609': attribute type 39 has an invalid length. [ 632.065361][T24529] delete_channel: no stack [ 632.649940][T24555] FAULT_INJECTION: forcing a failure. [ 632.649940][T24555] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 632.666066][T24555] CPU: 0 UID: 0 PID: 24555 Comm: syz.4.5623 Not tainted syzkaller #0 PREEMPT(full) [ 632.666094][T24555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 632.666107][T24555] Call Trace: [ 632.666116][T24555] [ 632.666125][T24555] dump_stack_lvl+0x189/0x250 [ 632.666153][T24555] ? __pfx____ratelimit+0x10/0x10 [ 632.666176][T24555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.666198][T24555] ? __pfx__printk+0x10/0x10 [ 632.666226][T24555] ? fs_reclaim_acquire+0x7d/0x100 [ 632.666265][T24555] should_fail_ex+0x414/0x560 [ 632.666299][T24555] prepare_alloc_pages+0x213/0x610 [ 632.666337][T24555] __alloc_frozen_pages_noprof+0x123/0x370 [ 632.666373][T24555] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 632.666424][T24555] alloc_pages_mpol+0x232/0x4a0 [ 632.666458][T24555] alloc_pages_noprof+0xa9/0x190 [ 632.666487][T24555] pte_alloc_one+0x21/0x170 [ 632.666510][T24555] __pte_alloc+0x25/0x1a0 [ 632.666544][T24555] __handle_mm_fault+0x49b3/0x5440 [ 632.666589][T24555] ? __pfx___handle_mm_fault+0x10/0x10 [ 632.666637][T24555] ? __pfx___might_resched+0x10/0x10 [ 632.666673][T24555] handle_mm_fault+0x40a/0x8e0 [ 632.666710][T24555] __get_user_pages+0x1699/0x2ce0 [ 632.666729][T24555] ? __lock_acquire+0xab9/0xd20 [ 632.666803][T24555] __gup_longterm_locked+0xde9/0x1660 [ 632.666842][T24555] ? sanity_check_pinned_pages+0x1241/0x1300 [ 632.666868][T24555] ? gup_fast_fallback+0x195f/0x2010 [ 632.666896][T24555] gup_fast_fallback+0x1e6a/0x2010 [ 632.666958][T24555] ? __pfx_gup_fast_fallback+0x10/0x10 [ 632.666980][T24555] ? md5_transform+0x26/0xf60 [ 632.667020][T24555] ? pin_user_pages_fast+0x4d/0xb0 [ 632.667047][T24555] iov_iter_extract_pages+0x35a/0x5e0 [ 632.667082][T24555] extract_iter_to_sg+0xe46/0x24e0 [ 632.667111][T24555] ? sanity_check_pinned_pages+0x123a/0x1300 [ 632.667140][T24555] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 632.667161][T24555] ? unpin_user_page+0xc9/0x1d0 [ 632.667180][T24555] ? __pfx_unpin_user_page+0x10/0x10 [ 632.667214][T24555] ? __asan_memset+0x22/0x50 [ 632.667238][T24555] hash_sendmsg+0x4f4/0x11d0 [ 632.667280][T24555] ? __lock_acquire+0xab9/0xd20 [ 632.667312][T24555] ? __pfx_hash_sendmsg+0x10/0x10 [ 632.667339][T24555] __sock_sendmsg+0x21c/0x270 [ 632.667374][T24555] sock_write_iter+0x258/0x330 [ 632.667406][T24555] ? __pfx_sock_write_iter+0x10/0x10 [ 632.667448][T24555] ? bpf_lsm_file_permission+0x9/0x20 [ 632.667470][T24555] ? security_file_permission+0x75/0x290 [ 632.667505][T24555] vfs_write+0x5c9/0xb30 [ 632.667536][T24555] ? __pfx_sock_write_iter+0x10/0x10 [ 632.667566][T24555] ? __pfx_vfs_write+0x10/0x10 [ 632.667604][T24555] ? __fget_files+0x2a/0x420 [ 632.667643][T24555] ksys_write+0x145/0x250 [ 632.667671][T24555] ? __pfx_ksys_write+0x10/0x10 [ 632.667693][T24555] ? rcu_is_watching+0x15/0xb0 [ 632.667719][T24555] ? do_syscall_64+0xbe/0x3b0 [ 632.667752][T24555] do_syscall_64+0xfa/0x3b0 [ 632.667774][T24555] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.667795][T24555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.667815][T24555] ? clear_bhb_loop+0x60/0xb0 [ 632.667840][T24555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.667860][T24555] RIP: 0033:0x7f1c7618eec9 [ 632.667878][T24555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.667896][T24555] RSP: 002b:00007f1c76f5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 632.667917][T24555] RAX: ffffffffffffffda RBX: 00007f1c763e5fa0 RCX: 00007f1c7618eec9 [ 632.667933][T24555] RDX: 00000000fffffdef RSI: 0000200000000040 RDI: 0000000000000004 [ 632.667946][T24555] RBP: 00007f1c76f5c090 R08: 0000000000000000 R09: 0000000000000000 [ 632.667959][T24555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.667972][T24555] R13: 00007f1c763e6038 R14: 00007f1c763e5fa0 R15: 00007ffd27f8ad88 [ 632.668005][T24555] [ 632.702245][T24561] netlink: 'syz.2.5626': attribute type 39 has an invalid length. [ 633.348130][T24582] netlink: 'syz.0.5634': attribute type 1 has an invalid length. [ 633.377640][T24573] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.432521][T24573] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.453377][T24575] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.485701][T24573] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.575742][T24575] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.599488][T24573] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.606821][T24594] __nla_validate_parse: 11 callbacks suppressed [ 633.606841][T24594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5638'. [ 633.626518][T24594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5638'. [ 633.664298][T24596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5638'. [ 633.673516][ C0] net_ratelimit: 20 callbacks suppressed [ 633.673569][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 633.702830][T24575] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.752013][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 633.756372][ T1323] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.771255][T24575] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.811264][ T1329] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.819653][T24600] netlink: 'syz.4.5640': attribute type 2 has an invalid length. [ 633.841350][ T1329] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.863431][ T1329] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.941750][ T1329] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.956960][T24604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5642'. [ 633.980702][ T1323] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.999692][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.024080][T24604] netlink: 'syz.3.5642': attribute type 39 has an invalid length. [ 634.034189][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.043327][T24606] tipc: Enabled bearer , priority 0 [ 634.055700][T24606] tipc: Resetting bearer [ 634.072386][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 634.080054][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 634.087162][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 634.155753][T24605] tipc: Disabling bearer [ 634.200587][T24615] netlink: zone id is out of range [ 634.207110][T24615] netlink: zone id is out of range [ 634.213234][T24615] netlink: zone id is out of range [ 634.218441][T24615] netlink: zone id is out of range [ 634.224031][T24615] netlink: zone id is out of range [ 634.336053][T24624] netlink: 'syz.1.5648': attribute type 4 has an invalid length. [ 634.453779][T24624] netlink: 'syz.1.5648': attribute type 4 has an invalid length. [ 634.510242][T24630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5651'. [ 634.522235][T24630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5651'. [ 634.566003][T24634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5651'. [ 634.684343][T24638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5653'. [ 634.827975][T24632] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.851158][T24648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5654'. [ 634.886799][T24640] syz.0.5654: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 634.911041][T24640] CPU: 0 UID: 0 PID: 24640 Comm: syz.0.5654 Not tainted syzkaller #0 PREEMPT(full) [ 634.911101][T24640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 634.911130][T24640] Call Trace: [ 634.911147][T24640] [ 634.911157][T24640] dump_stack_lvl+0x189/0x250 [ 634.911190][T24640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.911214][T24640] ? __pfx__printk+0x10/0x10 [ 634.911241][T24640] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 634.911263][T24640] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 634.911287][T24640] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 634.911313][T24640] warn_alloc+0x214/0x310 [ 634.911344][T24640] ? stack_depot_save_flags+0x40/0x860 [ 634.911376][T24640] ? __pfx_warn_alloc+0x10/0x10 [ 634.911405][T24640] ? kasan_save_track+0x4f/0x80 [ 634.911428][T24640] ? xskq_create+0x56/0x170 [ 634.911446][T24640] ? xsk_init_queue+0xb0/0x110 [ 634.911463][T24640] ? xsk_setsockopt+0x4dc/0x8d0 [ 634.911492][T24640] ? do_sock_setsockopt+0x179/0x1b0 [ 634.911515][T24640] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 634.911547][T24640] ? do_syscall_64+0xfa/0x3b0 [ 634.911569][T24640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.911600][T24640] __vmalloc_node_range_noprof+0x125/0x12f0 [ 634.911663][T24640] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 634.911699][T24640] ? __kasan_kmalloc+0x93/0xb0 [ 634.911728][T24640] vmalloc_user_noprof+0xad/0xf0 [ 634.911760][T24640] ? xskq_create+0xbf/0x170 [ 634.911780][T24640] xskq_create+0xbf/0x170 [ 634.911802][T24640] xsk_init_queue+0xb0/0x110 [ 634.911822][T24640] xsk_setsockopt+0x4dc/0x8d0 [ 634.911854][T24640] ? __pfx_xsk_setsockopt+0x10/0x10 [ 634.911885][T24640] ? __pfx_aa_sk_perm+0x10/0x10 [ 634.911920][T24640] ? aa_sock_opt_perm+0xff/0x1b0 [ 634.911943][T24640] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 634.911962][T24640] ? __pfx_xsk_setsockopt+0x10/0x10 [ 634.911994][T24640] do_sock_setsockopt+0x179/0x1b0 [ 634.912023][T24640] __x64_sys_setsockopt+0x13f/0x1b0 [ 634.912057][T24640] do_syscall_64+0xfa/0x3b0 [ 634.912080][T24640] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.912102][T24640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.912123][T24640] ? clear_bhb_loop+0x60/0xb0 [ 634.912149][T24640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.912170][T24640] RIP: 0033:0x7f90fcb8eec9 [ 634.912190][T24640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.912209][T24640] RSP: 002b:00007f90fd93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 634.912231][T24640] RAX: ffffffffffffffda RBX: 00007f90fcde5fa0 RCX: 00007f90fcb8eec9 [ 634.912247][T24640] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 634.912261][T24640] RBP: 00007f90fcc11f91 R08: 0000000000000004 R09: 0000000000000000 [ 634.912273][T24640] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.912285][T24640] R13: 00007f90fcde6038 R14: 00007f90fcde5fa0 R15: 00007ffd8cdb6578 [ 634.912316][T24640] [ 635.248637][T24632] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.281604][T24640] Mem-Info: [ 635.285487][T24640] active_anon:4675 inactive_anon:0 isolated_anon:0 [ 635.285487][T24640] active_file:3854 inactive_file:40136 isolated_file:0 [ 635.285487][T24640] unevictable:768 dirty:408 writeback:0 [ 635.285487][T24640] slab_reclaimable:13029 slab_unreclaimable:143920 [ 635.285487][T24640] mapped:32073 shmem:1358 pagetables:1202 [ 635.285487][T24640] sec_pagetables:0 bounce:0 [ 635.285487][T24640] kernel_misc_reclaimable:0 [ 635.285487][T24640] free:1274855 free_pcp:19479 free_cma:0 [ 635.407420][T24651] netlink: 324 bytes leftover after parsing attributes in process `syz.1.5655'. [ 635.409735][T24640] Node 0 active_anon:18700kB inactive_anon:0kB active_file:15416kB inactive_file:160340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132392kB dirty:1632kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13176kB pagetables:4680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 635.460082][T24640] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 635.516364][T24632] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.531239][T24640] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 635.576334][T24640] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 635.603374][T24659] netlink: 'syz.2.5656': attribute type 11 has an invalid length. [ 635.614314][T24640] Node 0 DMA32 free:1195160kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18752kB inactive_anon:0kB active_file:15416kB inactive_file:158512kB unevictable:1536kB writepending:1632kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:57896kB local_pcp:19840kB free_cma:0kB [ 635.673028][T24632] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.701055][T24640] lowmem_reserve[]: 0 0 1 1 1 [ 635.707875][T24640] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 635.776517][ T1329] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.780763][T24640] lowmem_reserve[]: 0 0 0 0 0 [ 635.789609][T24640] Node 1 Normal free:3888752kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19368kB local_pcp:10024kB free_cma:0kB [ 635.836180][T24640] lowmem_reserve[]: 0 0 0 0 0 [ 635.840951][T24640] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 635.854880][T24640] Node 0 DMA32: 2910*4kB (UME) 1878*8kB (UME) 873*16kB (UME) 935*32kB (UME) 473*64kB (UME) 123*128kB (UME) 63*256kB (UM) 34*512kB (UME) 38*1024kB (UM) 12*2048kB (UM) 242*4096kB (UM) = 1204824kB [ 635.876818][T24640] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 635.889591][T24640] Node 1 Normal: 212*4kB (UE) 50*8kB (UME) 43*16kB (UME) 139*32kB (UME) 40*64kB (UME) 11*128kB (UME) 4*256kB (UME) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3888752kB [ 635.908331][T24640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 635.920320][T24640] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 635.934153][T24640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 635.944918][T24640] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 635.954393][T24640] 45344 total pagecache pages [ 635.959104][T24640] 0 pages in swap cache [ 635.963508][T24640] Free swap = 124996kB [ 635.967763][T24640] Total swap = 124996kB [ 635.973534][T24640] 2097051 pages RAM [ 635.977359][T24640] 0 pages HighMem/MovableOnly [ 635.982634][T24640] 424998 pages reserved [ 635.986818][T24640] 0 pages cma reserved [ 635.996346][ T3515] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.027422][ T3515] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.105583][T24666] bond1: entered promiscuous mode [ 636.129487][T24666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 636.195026][T24676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 636.220715][T24676] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 636.238227][T24676] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 636.266240][ T3515] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.288788][T24671] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.441739][T24671] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.604097][T24671] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.716366][T24671] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.718663][T24703] FAULT_INJECTION: forcing a failure. [ 636.718663][T24703] name failslab, interval 1, probability 0, space 0, times 0 [ 636.746671][T24703] CPU: 0 UID: 0 PID: 24703 Comm: syz.1.5671 Not tainted syzkaller #0 PREEMPT(full) [ 636.746699][T24703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 636.746712][T24703] Call Trace: [ 636.746721][T24703] [ 636.746730][T24703] dump_stack_lvl+0x189/0x250 [ 636.746757][T24703] ? __pfx____ratelimit+0x10/0x10 [ 636.746780][T24703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.746802][T24703] ? __pfx__printk+0x10/0x10 [ 636.746830][T24703] ? __lock_acquire+0xab9/0xd20 [ 636.746869][T24703] should_fail_ex+0x414/0x560 [ 636.746902][T24703] should_failslab+0xa8/0x100 [ 636.746932][T24703] kmem_cache_alloc_noprof+0x73/0x3c0 [ 636.746957][T24703] ? skb_clone+0x212/0x3a0 [ 636.746997][T24703] skb_clone+0x212/0x3a0 [ 636.747028][T24703] __netlink_deliver_tap+0x404/0x850 [ 636.747067][T24703] ? netlink_deliver_tap+0x2e/0x1b0 [ 636.747092][T24703] netlink_deliver_tap+0x19c/0x1b0 [ 636.747117][T24703] netlink_unicast+0x7fa/0x9e0 [ 636.747148][T24703] ? __pfx_netlink_unicast+0x10/0x10 [ 636.747171][T24703] ? netlink_sendmsg+0x642/0xb30 [ 636.747192][T24703] ? skb_put+0x11b/0x210 [ 636.747220][T24703] netlink_sendmsg+0x805/0xb30 [ 636.747254][T24703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.747282][T24703] ? aa_sock_msg_perm+0xf1/0x1d0 [ 636.747315][T24703] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 636.747335][T24703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.747361][T24703] __sock_sendmsg+0x21c/0x270 [ 636.747396][T24703] ____sys_sendmsg+0x505/0x830 [ 636.747429][T24703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.747466][T24703] ? import_iovec+0x74/0xa0 [ 636.747500][T24703] ___sys_sendmsg+0x21f/0x2a0 [ 636.747529][T24703] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.747598][T24703] ? __fget_files+0x2a/0x420 [ 636.747626][T24703] ? __fget_files+0x3a0/0x420 [ 636.747667][T24703] __x64_sys_sendmsg+0x19b/0x260 [ 636.747696][T24703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 636.747735][T24703] ? __pfx_ksys_write+0x10/0x10 [ 636.747758][T24703] ? rcu_is_watching+0x15/0xb0 [ 636.747783][T24703] ? do_syscall_64+0xbe/0x3b0 [ 636.747811][T24703] do_syscall_64+0xfa/0x3b0 [ 636.747833][T24703] ? lockdep_hardirqs_on+0x9c/0x150 [ 636.747854][T24703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.747875][T24703] ? clear_bhb_loop+0x60/0xb0 [ 636.747899][T24703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.747919][T24703] RIP: 0033:0x7efe3778eec9 [ 636.747936][T24703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.747954][T24703] RSP: 002b:00007efe3861f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.747976][T24703] RAX: ffffffffffffffda RBX: 00007efe379e5fa0 RCX: 00007efe3778eec9 [ 636.747999][T24703] RDX: 0000000000000800 RSI: 0000200000000480 RDI: 0000000000000003 [ 636.748012][T24703] RBP: 00007efe3861f090 R08: 0000000000000000 R09: 0000000000000000 [ 636.748025][T24703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.748038][T24703] R13: 00007efe379e6038 R14: 00007efe379e5fa0 R15: 00007ffc93ce58a8 [ 636.748073][T24703] [ 637.136133][T24707] sctp: [Deprecated]: syz.1.5673 (pid 24707) Use of int in max_burst socket option deprecated. [ 637.136133][T24707] Use struct sctp_assoc_value instead [ 637.180065][ T1323] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.224796][ T1323] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.241731][ T1323] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.258740][ T1323] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.440408][T24712] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.530881][T24712] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.612741][T24732] netlink: 'syz.0.5680': attribute type 39 has an invalid length. [ 637.645818][T24712] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.701754][T24733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.720235][T24733] 8021q: adding VLAN 0 to HW filter on device ` [ 637.741292][T24712] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.288111][T24765] netlink: 'syz.1.5692': attribute type 39 has an invalid length. [ 638.395451][T24770] netlink: 'syz.4.5693': attribute type 39 has an invalid length. [ 638.508442][ T1329] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.557159][ T1329] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.585711][ T3515] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.608984][ T3515] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.937723][T24790] __nla_validate_parse: 19 callbacks suppressed [ 638.937743][T24790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5700'. [ 638.961646][T24790] tipc: Bearer : already 2 bearers with priority 10 [ 638.972750][T24790] tipc: Bearer : trying with adjusted priority [ 638.980954][T24790] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 638.996297][T24794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5701'. [ 639.017742][T24794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5701'. [ 639.034479][T24796] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5703'. [ 639.064348][T24799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5701'. [ 639.112015][ C0] net_ratelimit: 64 callbacks suppressed [ 639.112035][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 639.124898][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 639.234249][T24805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5704'. [ 639.271878][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 639.278979][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 639.286562][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 639.297820][T24807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5705'. [ 639.347534][T24807] netlink: 'syz.1.5705': attribute type 39 has an invalid length. [ 639.515475][T24819] tipc: Enabled bearer , priority 10 [ 639.685130][T24825] netlink: 'syz.4.5712': attribute type 10 has an invalid length. [ 639.970853][T24842] FAULT_INJECTION: forcing a failure. [ 639.970853][T24842] name failslab, interval 1, probability 0, space 0, times 0 [ 639.996218][T24842] CPU: 0 UID: 0 PID: 24842 Comm: syz.0.5720 Not tainted syzkaller #0 PREEMPT(full) [ 639.996246][T24842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 639.996259][T24842] Call Trace: [ 639.996266][T24842] [ 639.996275][T24842] dump_stack_lvl+0x189/0x250 [ 639.996300][T24842] ? __pfx____ratelimit+0x10/0x10 [ 639.996322][T24842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.996345][T24842] ? __pfx__printk+0x10/0x10 [ 639.996374][T24842] ? __pfx___might_resched+0x10/0x10 [ 639.996404][T24842] ? fs_reclaim_acquire+0x7d/0x100 [ 639.996439][T24842] should_fail_ex+0x414/0x560 [ 639.996474][T24842] should_failslab+0xa8/0x100 [ 639.996504][T24842] __kmalloc_noprof+0xcb/0x4f0 [ 639.996527][T24842] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 639.996563][T24842] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 639.996606][T24842] genl_family_rcv_msg_doit+0xb8/0x300 [ 639.996643][T24842] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 639.996682][T24842] ? apparmor_capable+0x137/0x1b0 [ 639.996709][T24842] ? bpf_lsm_capable+0x9/0x20 [ 639.996734][T24842] ? security_capable+0x7e/0x2e0 [ 639.996771][T24842] genl_rcv_msg+0x60e/0x790 [ 639.996814][T24842] ? __pfx_genl_rcv_msg+0x10/0x10 [ 639.996841][T24842] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 639.996862][T24842] ? __pfx_nl802154_set_tx_power+0x10/0x10 [ 639.996884][T24842] ? __pfx_nl802154_post_doit+0x10/0x10 [ 639.996924][T24842] netlink_rcv_skb+0x208/0x470 [ 639.996946][T24842] ? __lock_acquire+0xab9/0xd20 [ 639.996974][T24842] ? __pfx_genl_rcv_msg+0x10/0x10 [ 639.997005][T24842] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 639.997051][T24842] ? down_read+0x1ad/0x2e0 [ 639.997078][T24842] genl_rcv+0x28/0x40 [ 639.997104][T24842] netlink_unicast+0x82c/0x9e0 [ 639.997136][T24842] ? __pfx_netlink_unicast+0x10/0x10 [ 639.997158][T24842] ? netlink_sendmsg+0x642/0xb30 [ 639.997178][T24842] ? skb_put+0x11b/0x210 [ 639.997205][T24842] netlink_sendmsg+0x805/0xb30 [ 639.997239][T24842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.997266][T24842] ? aa_sock_msg_perm+0xf1/0x1d0 [ 639.997298][T24842] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 639.997318][T24842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.997344][T24842] __sock_sendmsg+0x21c/0x270 [ 639.997379][T24842] ____sys_sendmsg+0x505/0x830 [ 639.997412][T24842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.997451][T24842] ? import_iovec+0x74/0xa0 [ 639.997480][T24842] ___sys_sendmsg+0x21f/0x2a0 [ 639.997509][T24842] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.997578][T24842] ? __fget_files+0x2a/0x420 [ 639.997606][T24842] ? __fget_files+0x3a0/0x420 [ 639.997647][T24842] __x64_sys_sendmsg+0x19b/0x260 [ 639.997677][T24842] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 639.997716][T24842] ? __pfx_ksys_write+0x10/0x10 [ 639.997739][T24842] ? rcu_is_watching+0x15/0xb0 [ 639.997765][T24842] ? do_syscall_64+0xbe/0x3b0 [ 639.997798][T24842] do_syscall_64+0xfa/0x3b0 [ 639.997820][T24842] ? lockdep_hardirqs_on+0x9c/0x150 [ 639.997842][T24842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.997862][T24842] ? clear_bhb_loop+0x60/0xb0 [ 639.997888][T24842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.997908][T24842] RIP: 0033:0x7f90fcb8eec9 [ 639.997926][T24842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.997945][T24842] RSP: 002b:00007f90fd93f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.997968][T24842] RAX: ffffffffffffffda RBX: 00007f90fcde5fa0 RCX: 00007f90fcb8eec9 [ 639.997983][T24842] RDX: 0000000000000040 RSI: 0000200000000a40 RDI: 0000000000000004 [ 639.997997][T24842] RBP: 00007f90fd93f090 R08: 0000000000000000 R09: 0000000000000000 [ 639.998010][T24842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.998022][T24842] R13: 00007f90fcde6038 R14: 00007f90fcde5fa0 R15: 00007ffd8cdb6578 [ 639.998056][T24842] [ 640.312215][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.323289][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.331823][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.339149][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.347005][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.499469][T24848] tipc: Failed to remove unknown binding: 66,1,1/30306737:2841443287/2841443289 [ 640.512722][T24849] tipc: Bearer : already 2 bearers with priority 10 [ 640.521098][T24849] tipc: Bearer : trying with adjusted priority [ 640.528316][T24849] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 640.531647][T24848] tipc: Failed to remove unknown binding: 66,1,1/30306737:2841443287/2841443289 [ 640.569142][T24848] tipc: Failed to remove unknown binding: 66,1,1/30306737:2841443287/2841443289 [ 640.620051][T24854] FAULT_INJECTION: forcing a failure. [ 640.620051][T24854] name failslab, interval 1, probability 0, space 0, times 0 [ 640.660689][T24854] CPU: 0 UID: 0 PID: 24854 Comm: syz.3.5725 Not tainted syzkaller #0 PREEMPT(full) [ 640.660741][T24854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 640.660757][T24854] Call Trace: [ 640.660765][T24854] [ 640.660773][T24854] dump_stack_lvl+0x189/0x250 [ 640.660800][T24854] ? __pfx____ratelimit+0x10/0x10 [ 640.660821][T24854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.660840][T24854] ? __pfx__printk+0x10/0x10 [ 640.660862][T24854] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 640.660891][T24854] ? __lock_acquire+0xab9/0xd20 [ 640.660923][T24854] should_fail_ex+0x414/0x560 [ 640.660955][T24854] should_failslab+0xa8/0x100 [ 640.660983][T24854] kmem_cache_alloc_noprof+0x73/0x3c0 [ 640.661006][T24854] ? dst_alloc+0x105/0x170 [ 640.661037][T24854] dst_alloc+0x105/0x170 [ 640.661069][T24854] xfrm_alloc_dst+0x76/0x160 [ 640.661093][T24854] xfrm_lookup_with_ifid+0x77e/0x1a70 [ 640.661124][T24854] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 640.661158][T24854] ? l2tp_ip6_sendmsg+0x9d5/0x17c0 [ 640.661194][T24854] xfrm_lookup_route+0x3c/0x1c0 [ 640.661215][T24854] l2tp_ip6_sendmsg+0xfca/0x17c0 [ 640.661251][T24854] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 640.661303][T24854] ? __pfx_aa_sk_perm+0x10/0x10 [ 640.661329][T24854] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 640.661359][T24854] ? inet_sendmsg+0x2f4/0x370 [ 640.661378][T24854] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 640.661401][T24854] __sock_sendmsg+0x19c/0x270 [ 640.661436][T24854] __sys_sendto+0x3bd/0x520 [ 640.661462][T24854] ? __pfx___sys_sendto+0x10/0x10 [ 640.661482][T24854] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 640.661520][T24854] ? __fget_files+0x3a0/0x420 [ 640.661561][T24854] ? ksys_write+0x22a/0x250 [ 640.661588][T24854] ? __pfx_ksys_write+0x10/0x10 [ 640.661611][T24854] ? rcu_is_watching+0x15/0xb0 [ 640.661635][T24854] __x64_sys_sendto+0xde/0x100 [ 640.661663][T24854] do_syscall_64+0xfa/0x3b0 [ 640.661685][T24854] ? lockdep_hardirqs_on+0x9c/0x150 [ 640.661716][T24854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.661736][T24854] ? clear_bhb_loop+0x60/0xb0 [ 640.661764][T24854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.661781][T24854] RIP: 0033:0x7feaa138eec9 [ 640.661799][T24854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.661816][T24854] RSP: 002b:00007feaa21d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 640.661836][T24854] RAX: ffffffffffffffda RBX: 00007feaa15e5fa0 RCX: 00007feaa138eec9 [ 640.661849][T24854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 640.661860][T24854] RBP: 00007feaa21d7090 R08: 0000200000000100 R09: 0000000000000020 [ 640.661874][T24854] R10: 37bc0b736aafec5e R11: 0000000000000246 R12: 0000000000000001 [ 640.661887][T24854] R13: 00007feaa15e6038 R14: 00007feaa15e5fa0 R15: 00007ffe438f78e8 [ 640.661921][T24854] [ 640.682851][T24856] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5726'. [ 641.091340][T24856] xt_HMARK: proto mask must be zero with L3 mode [ 641.120976][T24871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5732'. [ 641.187555][T24873] FAULT_INJECTION: forcing a failure. [ 641.187555][T24873] name failslab, interval 1, probability 0, space 0, times 0 [ 641.201449][T24873] CPU: 1 UID: 0 PID: 24873 Comm: syz.1.5733 Not tainted syzkaller #0 PREEMPT(full) [ 641.201476][T24873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 641.201489][T24873] Call Trace: [ 641.201496][T24873] [ 641.201506][T24873] dump_stack_lvl+0x189/0x250 [ 641.201534][T24873] ? __pfx____ratelimit+0x10/0x10 [ 641.201562][T24873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.201584][T24873] ? __pfx__printk+0x10/0x10 [ 641.201618][T24873] ? __pfx___might_resched+0x10/0x10 [ 641.201646][T24873] ? fs_reclaim_acquire+0x7d/0x100 [ 641.201681][T24873] should_fail_ex+0x414/0x560 [ 641.201715][T24873] should_failslab+0xa8/0x100 [ 641.201745][T24873] kmem_cache_alloc_noprof+0x73/0x3c0 [ 641.201767][T24873] ? _sctp_make_chunk+0x14e/0x430 [ 641.201797][T24873] _sctp_make_chunk+0x14e/0x430 [ 641.201828][T24873] sctp_make_datafrag_empty+0x122/0x230 [ 641.201862][T24873] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 641.201886][T24873] ? __kasan_kmalloc+0x93/0xb0 [ 641.201916][T24873] ? sctp_auth_send_cid+0x69/0x250 [ 641.201946][T24873] sctp_datamsg_from_user+0x726/0xef0 [ 641.201993][T24873] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 641.202020][T24873] ? __asan_memcpy+0x40/0x70 [ 641.202051][T24873] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 641.202097][T24873] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 641.202127][T24873] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 641.202159][T24873] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 641.202189][T24873] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 641.202217][T24873] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 641.202247][T24873] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 641.202269][T24873] ? security_sctp_bind_connect+0x7e/0x2e0 [ 641.202299][T24873] sctp_sendmsg+0x1941/0x2810 [ 641.202342][T24873] ? __pfx_sctp_sendmsg+0x10/0x10 [ 641.202375][T24873] ? aa_sk_perm+0x81e/0x950 [ 641.202411][T24873] ? __pfx_aa_sk_perm+0x10/0x10 [ 641.202443][T24873] ? sock_rps_record_flow+0x19/0x410 [ 641.202468][T24873] ? inet_sendmsg+0x2f4/0x370 [ 641.202488][T24873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 641.202512][T24873] __sock_sendmsg+0x19c/0x270 [ 641.202548][T24873] __sys_sendto+0x3bd/0x520 [ 641.202575][T24873] ? __pfx___sys_sendto+0x10/0x10 [ 641.202594][T24873] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 641.202634][T24873] ? __fget_files+0x3a0/0x420 [ 641.202676][T24873] ? ksys_write+0x22a/0x250 [ 641.202704][T24873] ? __pfx_ksys_write+0x10/0x10 [ 641.202736][T24873] __x64_sys_sendto+0xde/0x100 [ 641.202764][T24873] do_syscall_64+0xfa/0x3b0 [ 641.202786][T24873] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.202808][T24873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.202828][T24873] ? clear_bhb_loop+0x60/0xb0 [ 641.202859][T24873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.202879][T24873] RIP: 0033:0x7efe3778eec9 [ 641.202898][T24873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.202916][T24873] RSP: 002b:00007efe3861f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 641.202938][T24873] RAX: ffffffffffffffda RBX: 00007efe379e5fa0 RCX: 00007efe3778eec9 [ 641.202953][T24873] RDX: 0000000000034000 RSI: 0000200000000040 RDI: 0000000000000003 [ 641.202967][T24873] RBP: 00007efe3861f090 R08: 0000200000000100 R09: 000000000000001c [ 641.202981][T24873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 641.202994][T24873] R13: 00007efe379e6038 R14: 00007efe379e5fa0 R15: 00007ffc93ce58a8 [ 641.203029][T24873] [ 641.597273][T24876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5734'. [ 642.277651][T24911] netlink: 'syz.4.5743': attribute type 24 has an invalid length. [ 642.398879][T24919] FAULT_INJECTION: forcing a failure. [ 642.398879][T24919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.419807][T24919] CPU: 0 UID: 0 PID: 24919 Comm: syz.0.5747 Not tainted syzkaller #0 PREEMPT(full) [ 642.419835][T24919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 642.419847][T24919] Call Trace: [ 642.419854][T24919] [ 642.419863][T24919] dump_stack_lvl+0x189/0x250 [ 642.419891][T24919] ? __pfx____ratelimit+0x10/0x10 [ 642.419911][T24919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.419933][T24919] ? __pfx__printk+0x10/0x10 [ 642.419958][T24919] ? __might_fault+0xb0/0x130 [ 642.419995][T24919] should_fail_ex+0x414/0x560 [ 642.420027][T24919] _copy_from_user+0x2d/0xb0 [ 642.420053][T24919] generic_map_update_batch+0x572/0x7f0 [ 642.420087][T24919] ? __pfx_generic_map_update_batch+0x10/0x10 [ 642.420107][T24919] ? __fget_files+0x2a/0x420 [ 642.420142][T24919] ? __pfx_generic_map_update_batch+0x10/0x10 [ 642.420161][T24919] bpf_map_do_batch+0x36c/0x5f0 [ 642.420193][T24919] __sys_bpf+0x6af/0x870 [ 642.420219][T24919] ? __pfx___sys_bpf+0x10/0x10 [ 642.420258][T24919] ? ksys_write+0x22a/0x250 [ 642.420285][T24919] ? __pfx_ksys_write+0x10/0x10 [ 642.420307][T24919] ? rcu_is_watching+0x15/0xb0 [ 642.420333][T24919] __x64_sys_bpf+0x7c/0x90 [ 642.420356][T24919] do_syscall_64+0xfa/0x3b0 [ 642.420378][T24919] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.420399][T24919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.420419][T24919] ? clear_bhb_loop+0x60/0xb0 [ 642.420444][T24919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.420464][T24919] RIP: 0033:0x7f90fcb8eec9 [ 642.420487][T24919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.420504][T24919] RSP: 002b:00007f90fd93f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 642.420525][T24919] RAX: ffffffffffffffda RBX: 00007f90fcde5fa0 RCX: 00007f90fcb8eec9 [ 642.420540][T24919] RDX: 0000000000000038 RSI: 0000200000000400 RDI: 000000000000001a [ 642.420554][T24919] RBP: 00007f90fd93f090 R08: 0000000000000000 R09: 0000000000000000 [ 642.420566][T24919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 642.420578][T24919] R13: 00007f90fcde6038 R14: 00007f90fcde5fa0 R15: 00007ffd8cdb6578 [ 642.420607][T24919] [ 642.431593][T24922] netlink: 'syz.3.5748': attribute type 4 has an invalid length. [ 642.916476][T24931] syzkaller1: entered promiscuous mode [ 642.922811][T24931] syzkaller1: entered allmulticast mode [ 643.083242][T24942] syzkaller0: entered promiscuous mode [ 643.088750][T24942] syzkaller0: entered allmulticast mode [ 643.267175][T24957] netlink: 'syz.3.5756': attribute type 1 has an invalid length. [ 644.475732][ C0] net_ratelimit: 16 callbacks suppressed [ 644.475747][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 644.488468][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 644.634074][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 644.641344][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 644.648328][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 645.055335][T24957] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 645.239644][T24997] 8021q: adding VLAN 0 to HW filter on device  [ 645.253704][T25005] __nla_validate_parse: 9 callbacks suppressed [ 645.253721][T25005] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5772'. [ 645.282574][T24997] 8021q: adding VLAN 0 to HW filter on device ` [ 645.314980][T24997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 645.511956][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 645.519267][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 645.545705][T25023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 645.672303][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 645.714652][T25030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5778'. [ 645.731273][T25030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5778'. [ 645.748942][T25031] FAULT_INJECTION: forcing a failure. [ 645.748942][T25031] name failslab, interval 1, probability 0, space 0, times 0 [ 645.772121][T25031] CPU: 1 UID: 0 PID: 25031 Comm: syz.3.5779 Not tainted syzkaller #0 PREEMPT(full) [ 645.772148][T25031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 645.772160][T25031] Call Trace: [ 645.772170][T25031] [ 645.772179][T25031] dump_stack_lvl+0x189/0x250 [ 645.772205][T25031] ? __pfx____ratelimit+0x10/0x10 [ 645.772228][T25031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.772250][T25031] ? __pfx__printk+0x10/0x10 [ 645.772282][T25031] ? __pfx___might_resched+0x10/0x10 [ 645.772311][T25031] ? fs_reclaim_acquire+0x7d/0x100 [ 645.772343][T25031] should_fail_ex+0x414/0x560 [ 645.772376][T25031] should_failslab+0xa8/0x100 [ 645.772406][T25031] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 645.772432][T25031] ? __alloc_skb+0x112/0x2d0 [ 645.772460][T25031] __alloc_skb+0x112/0x2d0 [ 645.772487][T25031] netlink_ack+0x146/0xa50 [ 645.772508][T25031] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 645.772529][T25031] ? ref_tracker_free+0x63a/0x7d0 [ 645.772557][T25031] ? __asan_memcpy+0x40/0x70 [ 645.772581][T25031] ? __pfx_ref_tracker_free+0x10/0x10 [ 645.772621][T25031] netlink_rcv_skb+0x28c/0x470 [ 645.772644][T25031] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 645.772668][T25031] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.772703][T25031] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.772734][T25031] netlink_unicast+0x82c/0x9e0 [ 645.772764][T25031] ? __pfx_netlink_unicast+0x10/0x10 [ 645.772787][T25031] ? netlink_sendmsg+0x642/0xb30 [ 645.772808][T25031] ? skb_put+0x11b/0x210 [ 645.772835][T25031] netlink_sendmsg+0x805/0xb30 [ 645.772866][T25031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.772891][T25031] ? aa_sock_msg_perm+0xf1/0x1d0 [ 645.772921][T25031] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 645.772940][T25031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.772964][T25031] __sock_sendmsg+0x21c/0x270 [ 645.772999][T25031] ____sys_sendmsg+0x505/0x830 [ 645.773032][T25031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.773069][T25031] ? import_iovec+0x74/0xa0 [ 645.773099][T25031] ___sys_sendmsg+0x21f/0x2a0 [ 645.773135][T25031] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.773202][T25031] ? __fget_files+0x2a/0x420 [ 645.773230][T25031] ? __fget_files+0x3a0/0x420 [ 645.773270][T25031] __x64_sys_sendmsg+0x19b/0x260 [ 645.773300][T25031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.773338][T25031] ? __pfx_ksys_write+0x10/0x10 [ 645.773360][T25031] ? rcu_is_watching+0x15/0xb0 [ 645.773385][T25031] ? do_syscall_64+0xbe/0x3b0 [ 645.773412][T25031] do_syscall_64+0xfa/0x3b0 [ 645.773432][T25031] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.773454][T25031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.773474][T25031] ? clear_bhb_loop+0x60/0xb0 [ 645.773499][T25031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.773519][T25031] RIP: 0033:0x7feaa138eec9 [ 645.773537][T25031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.773555][T25031] RSP: 002b:00007feaa21d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.773577][T25031] RAX: ffffffffffffffda RBX: 00007feaa15e5fa0 RCX: 00007feaa138eec9 [ 645.773592][T25031] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 645.773606][T25031] RBP: 00007feaa21d7090 R08: 0000000000000000 R09: 0000000000000000 [ 645.773619][T25031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.773631][T25031] R13: 00007feaa15e6038 R14: 00007feaa15e5fa0 R15: 00007ffe438f78e8 [ 645.773666][T25031] [ 646.242730][T25040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5783'. [ 646.395973][T25040] netlink: 'syz.0.5783': attribute type 39 has an invalid length. [ 646.413914][T25052] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5788'. [ 646.452059][T25052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5788'. [ 647.621360][ T1329] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.642351][ T1329] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.657808][ T1329] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.689875][ T1329] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.003726][T25098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5801'. [ 648.076612][T25098] netlink: 'syz.0.5801': attribute type 39 has an invalid length. [ 648.350002][T25111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5803'. [ 648.654339][T25128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5809'. [ 648.765720][T25137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5814'. [ 648.846617][T25137] netlink: 'syz.2.5814': attribute type 39 has an invalid length. [ 649.398236][T25149] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000 [ 649.520014][T25158] netlink: 'syz.3.5820': attribute type 4 has an invalid length. [ 649.671831][ C0] net_ratelimit: 19 callbacks suppressed [ 649.671851][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 649.684690][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 649.700184][T25163] netlink: 'syz.1.5822': attribute type 39 has an invalid length. [ 649.831857][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 649.838886][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 649.846556][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 649.869666][T25174] netlink: 'syz.0.5825': attribute type 39 has an invalid length. [ 650.711921][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 650.719211][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 650.843891][T25218] __nla_validate_parse: 4 callbacks suppressed [ 650.843913][T25218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5840'. [ 650.871851][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 650.879397][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 650.886544][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 650.926064][T25220] netlink: 'syz.4.5840': attribute type 39 has an invalid length. [ 651.479641][T25238] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5846'. [ 652.245628][T25276] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5855'. [ 652.340252][T25270] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.394760][T25270] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.417488][T25280] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5857'. [ 652.449985][T25270] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.560140][T25282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5858'. [ 652.609768][T25270] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.673130][T25286] FAULT_INJECTION: forcing a failure. [ 652.673130][T25286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.689865][T25286] CPU: 0 UID: 0 PID: 25286 Comm: syz.1.5859 Not tainted syzkaller #0 PREEMPT(full) [ 652.689895][T25286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 652.689908][T25286] Call Trace: [ 652.689917][T25286] [ 652.689926][T25286] dump_stack_lvl+0x189/0x250 [ 652.689954][T25286] ? __pfx____ratelimit+0x10/0x10 [ 652.689977][T25286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.689999][T25286] ? __pfx__printk+0x10/0x10 [ 652.690025][T25286] ? __might_fault+0xb0/0x130 [ 652.690062][T25286] should_fail_ex+0x414/0x560 [ 652.690108][T25286] _copy_to_iter+0x589/0x1790 [ 652.690142][T25286] ? __pfx__copy_to_iter+0x10/0x10 [ 652.690158][T25286] ? __skb_try_recv_from_queue+0x58f/0x730 [ 652.690187][T25286] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 652.690215][T25286] __skb_datagram_iter+0xf8/0x990 [ 652.690239][T25286] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 652.690270][T25286] skb_copy_datagram_iter+0xc5/0x230 [ 652.690297][T25286] netlink_recvmsg+0x2ab/0xa30 [ 652.690325][T25286] ? __pfx_netlink_recvmsg+0x10/0x10 [ 652.690348][T25286] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 652.690373][T25286] ? aa_sock_msg_perm+0xf1/0x1d0 [ 652.690400][T25286] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 652.690418][T25286] ? __pfx_netlink_recvmsg+0x10/0x10 [ 652.690439][T25286] sock_recvmsg_nosec+0x183/0x1c0 [ 652.690459][T25286] ____sys_recvmsg+0x3aa/0x460 [ 652.690490][T25286] ? __pfx_____sys_recvmsg+0x10/0x10 [ 652.690525][T25286] ? import_iovec+0x74/0xa0 [ 652.690548][T25286] ___sys_recvmsg+0x1b5/0x510 [ 652.690575][T25286] ? __pfx____sys_recvmsg+0x10/0x10 [ 652.690625][T25286] ? __might_fault+0xb0/0x130 [ 652.690649][T25286] do_recvmmsg+0x307/0x770 [ 652.690678][T25286] ? __pfx_do_recvmmsg+0x10/0x10 [ 652.690711][T25286] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 652.690752][T25286] __x64_sys_recvmmsg+0x190/0x240 [ 652.690778][T25286] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 652.690806][T25286] ? do_syscall_64+0xbe/0x3b0 [ 652.690834][T25286] do_syscall_64+0xfa/0x3b0 [ 652.690851][T25286] ? lockdep_hardirqs_on+0x9c/0x150 [ 652.690868][T25286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.690884][T25286] ? clear_bhb_loop+0x60/0xb0 [ 652.690905][T25286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.690921][T25286] RIP: 0033:0x7efe3778eec9 [ 652.690936][T25286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.690951][T25286] RSP: 002b:00007efe385fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 652.690970][T25286] RAX: ffffffffffffffda RBX: 00007efe379e6090 RCX: 00007efe3778eec9 [ 652.690983][T25286] RDX: 0000000000000004 RSI: 0000200000001b80 RDI: 0000000000000003 [ 652.690994][T25286] RBP: 00007efe385fe090 R08: 0000000000000000 R09: 0000000000000000 [ 652.691005][T25286] R10: 0000000000014022 R11: 0000000000000246 R12: 0000000000000002 [ 652.691015][T25286] R13: 00007efe379e6128 R14: 00007efe379e6090 R15: 00007ffc93ce58a8 [ 652.691042][T25286] [ 653.171479][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.181076][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.266117][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.365953][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.647975][T25298] FAULT_INJECTION: forcing a failure. [ 653.647975][T25298] name failslab, interval 1, probability 0, space 0, times 0 [ 653.665536][T25298] CPU: 1 UID: 0 PID: 25298 Comm: syz.3.5863 Not tainted syzkaller #0 PREEMPT(full) [ 653.665563][T25298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 653.665575][T25298] Call Trace: [ 653.665583][T25298] [ 653.665593][T25298] dump_stack_lvl+0x189/0x250 [ 653.665620][T25298] ? __pfx____ratelimit+0x10/0x10 [ 653.665643][T25298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.665665][T25298] ? __pfx__printk+0x10/0x10 [ 653.665694][T25298] ? __pfx___might_resched+0x10/0x10 [ 653.665723][T25298] ? fs_reclaim_acquire+0x7d/0x100 [ 653.665758][T25298] should_fail_ex+0x414/0x560 [ 653.665792][T25298] should_failslab+0xa8/0x100 [ 653.665821][T25298] __kmalloc_cache_noprof+0x70/0x3d0 [ 653.665847][T25298] ? rds_cong_from_addr+0x54/0x370 [ 653.665871][T25298] rds_cong_from_addr+0x54/0x370 [ 653.665896][T25298] rds_cong_get_maps+0x53/0xb0 [ 653.665918][T25298] __rds_conn_create+0x9a9/0x2060 [ 653.665936][T25298] ? __rds_conn_create+0x2e3/0x2060 [ 653.665972][T25298] ? __pfx___rds_conn_create+0x10/0x10 [ 653.666001][T25298] ? __raw_spin_lock_init+0x45/0x100 [ 653.666029][T25298] rds_conn_create_outgoing+0x43/0x60 [ 653.666056][T25298] rds_sendmsg+0x1001/0x1f00 [ 653.666100][T25298] ? __pfx_rds_sendmsg+0x10/0x10 [ 653.666123][T25298] ? aa_sk_perm+0x81e/0x950 [ 653.666158][T25298] ? __pfx_aa_sk_perm+0x10/0x10 [ 653.666184][T25298] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 653.666212][T25298] ? aa_sock_msg_perm+0xf1/0x1d0 [ 653.666244][T25298] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 653.666265][T25298] ? __pfx_rds_sendmsg+0x10/0x10 [ 653.666292][T25298] __sock_sendmsg+0x21c/0x270 [ 653.666326][T25298] ____sys_sendmsg+0x505/0x830 [ 653.666357][T25298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.666391][T25298] ? import_iovec+0x74/0xa0 [ 653.666418][T25298] ___sys_sendmsg+0x21f/0x2a0 [ 653.666445][T25298] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.666515][T25298] ? __fget_files+0x2a/0x420 [ 653.666543][T25298] ? __fget_files+0x3a0/0x420 [ 653.666586][T25298] __x64_sys_sendmsg+0x19b/0x260 [ 653.666616][T25298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 653.666652][T25298] ? __pfx_ksys_write+0x10/0x10 [ 653.666675][T25298] ? rcu_is_watching+0x15/0xb0 [ 653.666699][T25298] ? do_syscall_64+0xbe/0x3b0 [ 653.666726][T25298] do_syscall_64+0xfa/0x3b0 [ 653.666748][T25298] ? lockdep_hardirqs_on+0x9c/0x150 [ 653.666769][T25298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.666789][T25298] ? clear_bhb_loop+0x60/0xb0 [ 653.666814][T25298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.666833][T25298] RIP: 0033:0x7feaa138eec9 [ 653.666851][T25298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.666869][T25298] RSP: 002b:00007feaa21b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.666891][T25298] RAX: ffffffffffffffda RBX: 00007feaa15e6090 RCX: 00007feaa138eec9 [ 653.666906][T25298] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 653.666919][T25298] RBP: 00007feaa21b6090 R08: 0000000000000000 R09: 0000000000000000 [ 653.666932][T25298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 653.666944][T25298] R13: 00007feaa15e6128 R14: 00007feaa15e6090 R15: 00007ffe438f78e8 [ 653.666978][T25298] [ 653.993413][T25307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5866'. [ 654.002835][T25308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5866'. [ 654.305860][T25322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5870'. [ 654.361391][T25322] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5870'. [ 654.708930][T25344] : renamed from bond_slave_0 [ 654.825225][T25347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5876'. [ 655.032206][ C1] net_ratelimit: 15 callbacks suppressed [ 655.032222][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 655.033795][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 655.038611][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 655.045101][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 655.051915][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 655.648091][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 655.660255][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 655.675350][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 655.693711][ T5878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 655.703827][ T5878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 655.755887][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 655.763826][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 655.771510][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 655.788265][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 655.796830][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 655.878323][T25370] __nla_validate_parse: 1 callbacks suppressed [ 655.878341][T25370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5882'. [ 656.071908][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 656.072090][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 656.079135][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 656.086029][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 656.093489][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 656.139026][T25375] FAULT_INJECTION: forcing a failure. [ 656.139026][T25375] name failslab, interval 1, probability 0, space 0, times 0 [ 656.154804][T25375] CPU: 0 UID: 0 PID: 25375 Comm: syz.0.5885 Not tainted syzkaller #0 PREEMPT(full) [ 656.154832][T25375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 656.154845][T25375] Call Trace: [ 656.154853][T25375] [ 656.154862][T25375] dump_stack_lvl+0x189/0x250 [ 656.154888][T25375] ? __pfx____ratelimit+0x10/0x10 [ 656.154909][T25375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.154932][T25375] ? __pfx__printk+0x10/0x10 [ 656.154964][T25375] ? __pfx___might_resched+0x10/0x10 [ 656.154993][T25375] ? fs_reclaim_acquire+0x7d/0x100 [ 656.155027][T25375] should_fail_ex+0x414/0x560 [ 656.155060][T25375] should_failslab+0xa8/0x100 [ 656.155089][T25375] __kmalloc_cache_noprof+0x70/0x3d0 [ 656.155114][T25375] ? hwsim_new_radio_nl+0xe7d/0x1bd0 [ 656.155148][T25375] hwsim_new_radio_nl+0xe7d/0x1bd0 [ 656.155181][T25375] ? __pfx___nla_validate_parse+0x10/0x10 [ 656.155214][T25375] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 656.155267][T25375] ? __nla_parse+0x40/0x60 [ 656.155289][T25375] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 656.155328][T25375] genl_family_rcv_msg_doit+0x212/0x300 [ 656.155365][T25375] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 656.155407][T25375] ? bpf_lsm_capable+0x9/0x20 [ 656.155427][T25375] ? security_capable+0x7e/0x2e0 [ 656.155456][T25375] genl_rcv_msg+0x60e/0x790 [ 656.155484][T25375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.155504][T25375] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 656.155531][T25375] ? __asan_memcpy+0x40/0x70 [ 656.155551][T25375] ? __pfx_ref_tracker_free+0x10/0x10 [ 656.155590][T25375] netlink_rcv_skb+0x208/0x470 [ 656.155611][T25375] ? __lock_acquire+0xab9/0xd20 [ 656.155639][T25375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.155669][T25375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 656.155714][T25375] ? down_read+0x1ad/0x2e0 [ 656.155741][T25375] genl_rcv+0x28/0x40 [ 656.155765][T25375] netlink_unicast+0x82c/0x9e0 [ 656.155794][T25375] ? __pfx_netlink_unicast+0x10/0x10 [ 656.155815][T25375] ? netlink_sendmsg+0x642/0xb30 [ 656.155833][T25375] ? skb_put+0x11b/0x210 [ 656.155859][T25375] netlink_sendmsg+0x805/0xb30 [ 656.155894][T25375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.155922][T25375] ? aa_sock_msg_perm+0xf1/0x1d0 [ 656.155954][T25375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 656.155973][T25375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.155997][T25375] __sock_sendmsg+0x21c/0x270 [ 656.156031][T25375] ____sys_sendmsg+0x505/0x830 [ 656.156064][T25375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.156100][T25375] ? import_iovec+0x74/0xa0 [ 656.156128][T25375] ___sys_sendmsg+0x21f/0x2a0 [ 656.156155][T25375] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.156223][T25375] ? __fget_files+0x2a/0x420 [ 656.156257][T25375] ? __fget_files+0x3a0/0x420 [ 656.156297][T25375] __x64_sys_sendmsg+0x19b/0x260 [ 656.156327][T25375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 656.156364][T25375] ? __pfx_ksys_write+0x10/0x10 [ 656.156386][T25375] ? rcu_is_watching+0x15/0xb0 [ 656.156411][T25375] ? do_syscall_64+0xbe/0x3b0 [ 656.156439][T25375] do_syscall_64+0xfa/0x3b0 [ 656.156461][T25375] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.156481][T25375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.156502][T25375] ? clear_bhb_loop+0x60/0xb0 [ 656.156527][T25375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.156546][T25375] RIP: 0033:0x7f90fcb8eec9 [ 656.156565][T25375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.156583][T25375] RSP: 002b:00007f90fd93f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.156604][T25375] RAX: ffffffffffffffda RBX: 00007f90fcde5fa0 RCX: 00007f90fcb8eec9 [ 656.156619][T25375] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 656.156632][T25375] RBP: 00007f90fd93f090 R08: 0000000000000000 R09: 0000000000000000 [ 656.156645][T25375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.156657][T25375] R13: 00007f90fcde6038 R14: 00007f90fcde5fa0 R15: 00007ffd8cdb6578 [ 656.156692][T25375] [ 656.757815][T25362] chnl_net:caif_netlink_parms(): no params data found [ 656.959089][T25396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5889'. [ 656.997365][T25396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5889'. [ 657.129379][T25362] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.142653][T25362] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.159862][T25362] bridge_slave_0: entered allmulticast mode [ 657.171542][T25362] bridge_slave_0: entered promiscuous mode [ 657.180714][T25362] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.190308][T25362] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.200715][T25362] bridge_slave_1: entered allmulticast mode [ 657.213609][T25362] bridge_slave_1: entered promiscuous mode [ 657.250599][T25407] netlink: 'syz.2.5892': attribute type 1 has an invalid length. [ 657.260180][T25402] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5891'. [ 657.340934][T25362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.382739][T25407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5892'. [ 657.411729][T25411] bond6: (slave veth11): Enslaving as an active interface with a down link [ 657.438957][T25416] bond0: (slave bridge0): Releasing backup interface [ 657.447502][T25416] bridge0: left promiscuous mode [ 657.460145][T25362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.475195][T25407] 8021q: adding VLAN 0 to HW filter on device bond6 [ 657.476404][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5895'. [ 657.498252][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5895'. [ 657.529458][T25362] team0: Port device team_slave_0 added [ 657.538800][T25362] team0: Port device team_slave_1 added [ 657.599899][T25362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.615550][T25362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.642436][T25362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.657022][T25362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.665173][T25362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.700176][T25362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.797125][T25362] hsr_slave_0: entered promiscuous mode [ 657.803887][T25362] hsr_slave_1: entered promiscuous mode [ 657.810017][T25362] debugfs: 'hsr0' already exists in 'hsr' [ 657.816612][T25362] Cannot create hsr debugfs directory [ 657.832012][ T5878] Bluetooth: hci4: command tx timeout [ 658.220275][T25362] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 658.230534][T25362] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 658.248926][T25362] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 658.259412][T25362] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 658.345803][T25444] netlink: 'syz.3.5901': attribute type 7 has an invalid length. [ 658.357741][T25444] netlink: 'syz.3.5901': attribute type 8 has an invalid length. [ 658.366231][T25444] netlink: 'syz.3.5901': attribute type 4 has an invalid length. [ 658.379198][T25444] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5901'. [ 658.440893][T25362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.508181][T25362] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.525150][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.532355][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.561046][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.568312][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.586764][T25452] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5904'. [ 658.608495][T25453] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5903'. [ 659.007881][T25475] netlink: 'syz.2.5910': attribute type 7 has an invalid length. [ 659.053675][T25481] netlink: 'syz.0.5911': attribute type 3 has an invalid length. [ 659.089642][T25481] netlink: 'syz.0.5911': attribute type 3 has an invalid length. [ 659.152366][T25362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.839436][T25490] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.872588][T25490] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.915249][ T5878] Bluetooth: hci4: command 0x041b tx timeout [ 660.170460][T25490] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.206199][T25490] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.233932][ C1] net_ratelimit: 16 callbacks suppressed [ 660.233957][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 660.242220][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 660.246754][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 660.253692][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 660.260921][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 660.362056][T25490] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.372566][T25490] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.463576][T25490] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.488779][T25490] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.532551][T25362] veth0_vlan: entered promiscuous mode [ 660.540632][T25519] syzkaller0: entered promiscuous mode [ 660.550093][T25519] syzkaller0: entered allmulticast mode [ 660.622613][T25362] veth1_vlan: entered promiscuous mode [ 660.645596][ T1323] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.653991][ T1323] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.689513][ T3515] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.698720][ T3515] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.738639][T25362] veth0_macvtap: entered promiscuous mode [ 660.768241][ T1329] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.785947][ T1329] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.801354][T25525] netlink: 'syz.0.5924': attribute type 1 has an invalid length. [ 660.818167][T25362] veth1_macvtap: entered promiscuous mode [ 660.843527][ T1323] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.859010][ T1323] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.916468][T25362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.948302][T25530] __nla_validate_parse: 7 callbacks suppressed [ 660.948321][T25530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5927'. [ 660.950093][T25362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.966627][T25530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5927'. [ 660.993397][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.002361][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.011113][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.040071][ T1329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.054546][T25537] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5927'. [ 661.105858][T25537] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5927'. [ 661.140681][T25533] syzkaller0: entered promiscuous mode [ 661.143535][T25541] FAULT_INJECTION: forcing a failure. [ 661.143535][T25541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.147827][T25533] syzkaller0: entered allmulticast mode [ 661.176405][T25530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5927'. [ 661.192875][T25541] CPU: 0 UID: 0 PID: 25541 Comm: syz.3.5929 Not tainted syzkaller #0 PREEMPT(full) [ 661.192911][T25541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 661.192925][T25541] Call Trace: [ 661.192934][T25541] [ 661.192944][T25541] dump_stack_lvl+0x189/0x250 [ 661.192973][T25541] ? __pfx____ratelimit+0x10/0x10 [ 661.193003][T25541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 661.193023][T25541] ? __pfx__printk+0x10/0x10 [ 661.193055][T25541] ? __might_fault+0xb0/0x130 [ 661.193093][T25541] should_fail_ex+0x414/0x560 [ 661.193126][T25541] _copy_from_user+0x2d/0xb0 [ 661.193152][T25541] ___sys_sendmsg+0x158/0x2a0 [ 661.193182][T25541] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.193248][T25541] ? __fget_files+0x2a/0x420 [ 661.193276][T25541] ? __fget_files+0x3a0/0x420 [ 661.193316][T25541] __x64_sys_sendmsg+0x19b/0x260 [ 661.193345][T25541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.193383][T25541] ? __pfx_ksys_write+0x10/0x10 [ 661.193406][T25541] ? rcu_is_watching+0x15/0xb0 [ 661.193431][T25541] ? do_syscall_64+0xbe/0x3b0 [ 661.193458][T25541] do_syscall_64+0xfa/0x3b0 [ 661.193481][T25541] ? lockdep_hardirqs_on+0x9c/0x150 [ 661.193502][T25541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.193522][T25541] ? clear_bhb_loop+0x60/0xb0 [ 661.193548][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.193568][T25541] RIP: 0033:0x7feaa138eec9 [ 661.193587][T25541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.193605][T25541] RSP: 002b:00007feaa21d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.193628][T25541] RAX: ffffffffffffffda RBX: 00007feaa15e5fa0 RCX: 00007feaa138eec9 [ 661.193644][T25541] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 661.193657][T25541] RBP: 00007feaa21d7090 R08: 0000000000000000 R09: 0000000000000000 [ 661.193670][T25541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.193682][T25541] R13: 00007feaa15e6038 R14: 00007feaa15e5fa0 R15: 00007ffe438f78e8 [ 661.193717][T25541] [ 661.271996][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 661.276067][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 661.280673][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 661.285176][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 661.290479][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 661.490337][T25548] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5931'. [ 661.995674][ T5865] Bluetooth: hci4: command 0x041b tx timeout [ 663.234244][T25547] syzkaller0: entered promiscuous mode [ 663.251576][T25547] syzkaller0: entered allmulticast mode [ 663.289405][T25555] syzkaller0: left allmulticast mode [ 663.384353][T25565] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20004 [ 663.420223][T25565] vxcan3: entered allmulticast mode [ 663.460915][T23410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.474106][T23410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.514019][T25574] netlink: 'syz.1.5938': attribute type 13 has an invalid length. [ 663.528749][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.533311][T25574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5938'. [ 663.560642][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.740818][T25584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5941'. [ 663.760193][T25584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5941'. [ 663.869458][T25589] syzkaller0: entered promiscuous mode [ 663.888702][T25589] syzkaller0: entered allmulticast mode [ 663.973568][T25596] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5944'. [ 663.996493][T25596] block nbd0: must specify backend [ 664.073133][ T5865] Bluetooth: hci4: command 0x041b tx timeout [ 664.077493][T25600] FAULT_INJECTION: forcing a failure. [ 664.077493][T25600] name failslab, interval 1, probability 0, space 0, times 0 [ 664.093421][T25600] CPU: 0 UID: 0 PID: 25600 Comm: syz.1.5945 Not tainted syzkaller #0 PREEMPT(full) [ 664.093451][T25600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 664.093464][T25600] Call Trace: [ 664.093472][T25600] [ 664.093482][T25600] dump_stack_lvl+0x189/0x250 [ 664.093510][T25600] ? __pfx____ratelimit+0x10/0x10 [ 664.093533][T25600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 664.093556][T25600] ? __pfx__printk+0x10/0x10 [ 664.093585][T25600] ? __lock_acquire+0xab9/0xd20 [ 664.093623][T25600] should_fail_ex+0x414/0x560 [ 664.093656][T25600] should_failslab+0xa8/0x100 [ 664.093687][T25600] kmem_cache_alloc_noprof+0x73/0x3c0 [ 664.093721][T25600] ? skb_clone+0x212/0x3a0 [ 664.093753][T25600] skb_clone+0x212/0x3a0 [ 664.093785][T25600] __netlink_deliver_tap+0x404/0x850 [ 664.093822][T25600] ? netlink_deliver_tap+0x2e/0x1b0 [ 664.093848][T25600] netlink_deliver_tap+0x19c/0x1b0 [ 664.093874][T25600] netlink_unicast+0x7fa/0x9e0 [ 664.093906][T25600] ? __pfx_netlink_unicast+0x10/0x10 [ 664.093928][T25600] ? netlink_sendmsg+0x642/0xb30 [ 664.093950][T25600] ? skb_put+0x11b/0x210 [ 664.093978][T25600] netlink_sendmsg+0x805/0xb30 [ 664.094013][T25600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.094042][T25600] ? aa_sock_msg_perm+0xf1/0x1d0 [ 664.094076][T25600] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 664.094098][T25600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.094122][T25600] __sock_sendmsg+0x21c/0x270 [ 664.094158][T25600] ____sys_sendmsg+0x505/0x830 [ 664.094190][T25600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 664.094232][T25600] ? import_iovec+0x74/0xa0 [ 664.094261][T25600] ___sys_sendmsg+0x21f/0x2a0 [ 664.094291][T25600] ? __pfx____sys_sendmsg+0x10/0x10 [ 664.094359][T25600] ? __fget_files+0x2a/0x420 [ 664.094386][T25600] ? __fget_files+0x3a0/0x420 [ 664.094425][T25600] __x64_sys_sendmsg+0x19b/0x260 [ 664.094455][T25600] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 664.094492][T25600] ? __pfx_ksys_write+0x10/0x10 [ 664.094524][T25600] ? do_syscall_64+0xbe/0x3b0 [ 664.094556][T25600] do_syscall_64+0xfa/0x3b0 [ 664.094576][T25600] ? lockdep_hardirqs_on+0x9c/0x150 [ 664.094597][T25600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.094615][T25600] ? clear_bhb_loop+0x60/0xb0 [ 664.094638][T25600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.094658][T25600] RIP: 0033:0x7efe3778eec9 [ 664.094675][T25600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.094693][T25600] RSP: 002b:00007efe385fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 664.094718][T25600] RAX: ffffffffffffffda RBX: 00007efe379e6090 RCX: 00007efe3778eec9 [ 664.094731][T25600] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 664.094742][T25600] RBP: 00007efe385fe090 R08: 0000000000000000 R09: 0000000000000000 [ 664.094754][T25600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.094765][T25600] R13: 00007efe379e6128 R14: 00007efe379e6090 R15: 00007ffc93ce58a8 [ 664.094800][T25600] [ 664.718302][T25610] siw: device registration error -23 [ 665.436626][ C1] net_ratelimit: 16 callbacks suppressed [ 665.436648][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 665.442047][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 665.442992][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 665.449512][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 665.456286][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 666.152076][ T5865] Bluetooth: hci4: command 0x041b tx timeout [ 666.451172][T25622] netlink: 'syz.4.5952': attribute type 16 has an invalid length. [ 666.471842][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 666.471991][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 666.479913][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 666.486809][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 666.494147][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 666.503914][T25622] netlink: 'syz.4.5952': attribute type 17 has an invalid length. [ 666.542699][T25621] netlink: 'syz.3.5951': attribute type 1 has an invalid length. [ 666.560017][T25628] IPv6: NLM_F_REPLACE set, but no existing node found! [ 666.759580][T25622] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.767433][T25622] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.985784][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 666.997277][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 667.003479][T25622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.007666][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 667.021529][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 667.022595][T25622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.030428][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 667.179002][T25630] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5954'. [ 667.256862][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.267977][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.286921][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.378026][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.412406][T25646] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5957'. [ 667.448696][T25646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5957'. [ 667.645867][T25651] mac80211_hwsim hwsim23 syzkaller0: left promiscuous mode [ 667.654379][T25651] mac80211_hwsim hwsim23 syzkaller0: left allmulticast mode [ 667.697304][ T1323] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.729021][ T1323] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.737627][ T1323] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.785729][ T1323] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.809389][T25659] tipc: Enabled bearer , priority 0 [ 667.846652][T25657] syzkaller0: entered promiscuous mode [ 667.852829][T25657] syzkaller0: entered allmulticast mode [ 667.916528][T25657] tipc: Resetting bearer [ 667.929468][T25657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5959'. [ 667.957061][T25664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5961'. [ 668.016372][T25664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 668.047573][T25668] bond1: (slave batadv1): Opening slave failed [ 668.265586][T25676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5963'. [ 668.288942][T25679] tun0: tun_chr_ioctl cmd 2147767521 [ 668.304198][T25679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5964'. [ 668.366277][T25635] chnl_net:caif_netlink_parms(): no params data found [ 668.519859][T25655] tipc: Resetting bearer [ 668.553553][T25655] tipc: Disabling bearer [ 668.587366][T25635] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.607131][T25635] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.615273][T25635] bridge_slave_0: entered allmulticast mode [ 668.623408][T25635] bridge_slave_0: entered promiscuous mode [ 668.633100][T25635] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.640364][T25635] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.647899][T25635] bridge_slave_1: entered allmulticast mode [ 668.656011][T25635] bridge_slave_1: entered promiscuous mode [ 668.685749][T25700] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5970'. [ 668.868971][T25635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.890052][T25703] FAULT_INJECTION: forcing a failure. [ 668.890052][T25703] name failslab, interval 1, probability 0, space 0, times 0 [ 668.894125][T25635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.911303][T25703] CPU: 1 UID: 0 PID: 25703 Comm: syz.3.5972 Not tainted syzkaller #0 PREEMPT(full) [ 668.911333][T25703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 668.911345][T25703] Call Trace: [ 668.911354][T25703] [ 668.911366][T25703] dump_stack_lvl+0x189/0x250 [ 668.911393][T25703] ? __pfx____ratelimit+0x10/0x10 [ 668.911416][T25703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.911437][T25703] ? __pfx__printk+0x10/0x10 [ 668.911474][T25703] ? __pfx___might_resched+0x10/0x10 [ 668.911502][T25703] ? fs_reclaim_acquire+0x7d/0x100 [ 668.911535][T25703] should_fail_ex+0x414/0x560 [ 668.911568][T25703] should_failslab+0xa8/0x100 [ 668.911597][T25703] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 668.911622][T25703] ? __alloc_skb+0x112/0x2d0 [ 668.911650][T25703] __alloc_skb+0x112/0x2d0 [ 668.911677][T25703] netlink_ack+0x146/0xa50 [ 668.911696][T25703] ? __pfx_genl_rcv_msg+0x10/0x10 [ 668.911722][T25703] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 668.911741][T25703] ? __pfx_nl80211_post_doit+0x10/0x10 [ 668.911780][T25703] netlink_rcv_skb+0x28c/0x470 [ 668.911800][T25703] ? __lock_acquire+0xab9/0xd20 [ 668.911826][T25703] ? __pfx_genl_rcv_msg+0x10/0x10 [ 668.911855][T25703] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 668.911896][T25703] ? down_read+0x1ad/0x2e0 [ 668.911922][T25703] genl_rcv+0x28/0x40 [ 668.911946][T25703] netlink_unicast+0x82c/0x9e0 [ 668.911977][T25703] ? __pfx_netlink_unicast+0x10/0x10 [ 668.911998][T25703] ? netlink_sendmsg+0x642/0xb30 [ 668.912018][T25703] ? skb_put+0x11b/0x210 [ 668.912044][T25703] netlink_sendmsg+0x805/0xb30 [ 668.912065][T25703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.912085][T25703] ? aa_sock_msg_perm+0xf1/0x1d0 [ 668.912116][T25703] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 668.912136][T25703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 668.912172][T25703] __sock_sendmsg+0x21c/0x270 [ 668.912205][T25703] ____sys_sendmsg+0x505/0x830 [ 668.912232][T25703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 668.912262][T25703] ? import_iovec+0x74/0xa0 [ 668.912299][T25703] ___sys_sendmsg+0x21f/0x2a0 [ 668.912327][T25703] ? __pfx____sys_sendmsg+0x10/0x10 [ 668.912388][T25703] ? __fget_files+0x2a/0x420 [ 668.912416][T25703] ? __fget_files+0x3a0/0x420 [ 668.912460][T25703] __x64_sys_sendmsg+0x19b/0x260 [ 668.912485][T25703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 668.912521][T25703] ? __pfx_ksys_write+0x10/0x10 [ 668.912543][T25703] ? rcu_is_watching+0x15/0xb0 [ 668.912566][T25703] ? do_syscall_64+0xbe/0x3b0 [ 668.912593][T25703] do_syscall_64+0xfa/0x3b0 [ 668.912613][T25703] ? lockdep_hardirqs_on+0x9c/0x150 [ 668.912633][T25703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.912652][T25703] ? clear_bhb_loop+0x60/0xb0 [ 668.912676][T25703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.912694][T25703] RIP: 0033:0x7feaa138eec9 [ 668.912712][T25703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.912729][T25703] RSP: 002b:00007feaa21d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.912749][T25703] RAX: ffffffffffffffda RBX: 00007feaa15e5fa0 RCX: 00007feaa138eec9 [ 668.912764][T25703] RDX: 0000000020000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 668.912781][T25703] RBP: 00007feaa21d7090 R08: 0000000000000000 R09: 0000000000000000 [ 668.912794][T25703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.912806][T25703] R13: 00007feaa15e6038 R14: 00007feaa15e5fa0 R15: 00007ffe438f78e8 [ 668.912838][T25703] [ 669.118382][ T5878] Bluetooth: hci2: command tx timeout [ 669.378423][T25635] team0: Port device team_slave_0 added [ 669.395066][T25722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5979'. [ 669.404805][T25722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5979'. [ 669.444958][T25635] team0: Port device team_slave_1 added [ 669.574003][T25635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.591702][T25635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.620103][T25728] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20002 [ 669.635341][T25635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.651282][T25635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.661753][T25635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.689717][T25635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.705357][T25737] netlink: 'syz.4.5983': attribute type 1 has an invalid length. [ 669.713730][T25730] tipc: MTU too low for tipc bearer [ 669.742097][T25735] FAULT_INJECTION: forcing a failure. [ 669.742097][T25735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.773047][T25735] CPU: 1 UID: 0 PID: 25735 Comm: syz.4.5983 Not tainted syzkaller #0 PREEMPT(full) [ 669.773074][T25735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 669.773086][T25735] Call Trace: [ 669.773093][T25735] [ 669.773102][T25735] dump_stack_lvl+0x189/0x250 [ 669.773129][T25735] ? __pfx____ratelimit+0x10/0x10 [ 669.773149][T25735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.773168][T25735] ? __pfx__printk+0x10/0x10 [ 669.773192][T25735] ? __might_fault+0xb0/0x130 [ 669.773227][T25735] should_fail_ex+0x414/0x560 [ 669.773257][T25735] _copy_from_user+0x2d/0xb0 [ 669.773280][T25735] ___sys_sendmsg+0x158/0x2a0 [ 669.773308][T25735] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.773368][T25735] ? __fget_files+0x2a/0x420 [ 669.773393][T25735] ? __fget_files+0x3a0/0x420 [ 669.773429][T25735] __x64_sys_sendmsg+0x19b/0x260 [ 669.773455][T25735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 669.773489][T25735] ? __pfx_ksys_write+0x10/0x10 [ 669.773510][T25735] ? rcu_is_watching+0x15/0xb0 [ 669.773532][T25735] ? do_syscall_64+0xbe/0x3b0 [ 669.773557][T25735] do_syscall_64+0xfa/0x3b0 [ 669.773577][T25735] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.773596][T25735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.773614][T25735] ? clear_bhb_loop+0x60/0xb0 [ 669.773637][T25735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.773655][T25735] RIP: 0033:0x7fcae2f8eec9 [ 669.773672][T25735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.773690][T25735] RSP: 002b:00007fcae3e4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 669.773710][T25735] RAX: ffffffffffffffda RBX: 00007fcae31e5fa0 RCX: 00007fcae2f8eec9 [ 669.773724][T25735] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008 [ 669.773736][T25735] RBP: 00007fcae3e4e090 R08: 0000000000000000 R09: 0000000000000000 [ 669.773748][T25735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.773759][T25735] R13: 00007fcae31e6038 R14: 00007fcae31e5fa0 R15: 00007fff503b4e38 [ 669.773791][T25735] [ 670.062934][T25635] hsr_slave_0: entered promiscuous mode [ 670.069697][T25635] hsr_slave_1: entered promiscuous mode [ 670.076650][T25635] debugfs: 'hsr0' already exists in 'hsr' [ 670.082932][T25635] Cannot create hsr debugfs directory [ 670.425276][T25738] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 670.427285][T25748] netlink: 'syz.3.5987': attribute type 39 has an invalid length. [ 670.631850][ C1] net_ratelimit: 15 callbacks suppressed [ 670.631868][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 670.632102][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 670.637675][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 670.644563][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 670.651990][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 670.860048][T25761] batadv_slave_1: entered promiscuous mode [ 670.924869][T25635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 670.947675][T25763] netlink: 'syz.4.5994': attribute type 4 has an invalid length. [ 670.948977][T25635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 671.001491][T25760] batadv_slave_1: left promiscuous mode [ 671.008266][T25635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 671.026054][T25635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 671.221063][T25781] netlink: 'syz.1.5999': attribute type 1 has an invalid length. [ 671.227392][T25782] netlink: 'syz.4.5998': attribute type 1 has an invalid length. [ 671.274942][T25777] netlink: 'syz.3.5997': attribute type 9 has an invalid length. [ 671.301641][T25781] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 671.354251][ T5878] Bluetooth: hci2: command tx timeout [ 671.522986][T25635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.601119][T25635] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.672001][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 671.672126][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 671.679516][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 671.686142][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 671.693070][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 671.795471][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.802682][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.890615][T25804] netlink: 'syz.3.6001': attribute type 2 has an invalid length. [ 671.902852][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.910046][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.703241][T25836] __nla_validate_parse: 14 callbacks suppressed [ 672.703261][T25836] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6011'. [ 672.809997][T25836] netlink: 'syz.4.6011': attribute type 39 has an invalid length. [ 673.013133][T25843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6012'. [ 673.045544][T25843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6012'. [ 673.065586][T25635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.208014][T25635] veth0_vlan: entered promiscuous mode [ 673.234046][T25635] veth1_vlan: entered promiscuous mode [ 673.271745][T25635] veth0_macvtap: entered promiscuous mode [ 673.287300][T25635] veth1_macvtap: entered promiscuous mode [ 673.319021][T25635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.338963][T25635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.356173][T23410] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.374437][T23410] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.383449][T23410] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.397139][T23410] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.432135][ T5878] Bluetooth: hci2: command tx timeout [ 673.896593][T25845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 673.963634][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.975436][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.035735][T23410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.044517][T23410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.052430][T25864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6018'. [ 674.064792][T25866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6019'. [ 674.088032][T25864] macvtap1: entered promiscuous mode [ 674.093910][T25864] bridge0: entered promiscuous mode [ 674.099600][T25864] macvtap1: entered allmulticast mode [ 674.106719][T25864] bridge0: entered allmulticast mode [ 674.115099][T25869] FAULT_INJECTION: forcing a failure. [ 674.115099][T25869] name failslab, interval 1, probability 0, space 0, times 0 [ 674.132647][T25869] CPU: 0 UID: 0 PID: 25869 Comm: syz.3.6018 Not tainted syzkaller #0 PREEMPT(full) [ 674.132677][T25869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 674.132690][T25869] Call Trace: [ 674.132698][T25869] [ 674.132707][T25869] dump_stack_lvl+0x189/0x250 [ 674.132733][T25869] ? __pfx____ratelimit+0x10/0x10 [ 674.132756][T25869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.132777][T25869] ? __pfx__printk+0x10/0x10 [ 674.132809][T25869] ? __pfx___might_resched+0x10/0x10 [ 674.132836][T25869] ? fs_reclaim_acquire+0x7d/0x100 [ 674.132869][T25869] should_fail_ex+0x414/0x560 [ 674.132902][T25869] should_failslab+0xa8/0x100 [ 674.132930][T25869] __kmalloc_cache_noprof+0x70/0x3d0 [ 674.132956][T25869] ? rtnl_newlink+0xfb/0x1c80 [ 674.132982][T25869] rtnl_newlink+0xfb/0x1c80 [ 674.133008][T25869] ? __lock_acquire+0xab9/0xd20 [ 674.133040][T25869] ? __pfx_rtnl_newlink+0x10/0x10 [ 674.133074][T25869] ? is_bpf_text_address+0x26/0x2b0 [ 674.133109][T25869] ? __lock_acquire+0xab9/0xd20 [ 674.133148][T25869] ? __lock_acquire+0xab9/0xd20 [ 674.133195][T25869] ? is_bpf_text_address+0x26/0x2b0 [ 674.133227][T25869] ? is_bpf_text_address+0x292/0x2b0 [ 674.133252][T25869] ? is_bpf_text_address+0x26/0x2b0 [ 674.133289][T25869] ? __lock_acquire+0xab9/0xd20 [ 674.133341][T25869] ? __pfx_rtnl_newlink+0x10/0x10 [ 674.133363][T25869] rtnetlink_rcv_msg+0x7cc/0xb70 [ 674.133384][T25869] ? __lock_acquire+0xab9/0xd20 [ 674.133411][T25869] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 674.133432][T25869] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 674.133479][T25869] netlink_rcv_skb+0x208/0x470 [ 674.133500][T25869] ? __lock_acquire+0xab9/0xd20 [ 674.133527][T25869] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 674.133551][T25869] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 674.133586][T25869] ? netlink_deliver_tap+0x2e/0x1b0 [ 674.133615][T25869] netlink_unicast+0x82c/0x9e0 [ 674.133641][T25869] ? __pfx_netlink_unicast+0x10/0x10 [ 674.133662][T25869] ? netlink_sendmsg+0x642/0xb30 [ 674.133682][T25869] ? skb_put+0x11b/0x210 [ 674.133707][T25869] netlink_sendmsg+0x805/0xb30 [ 674.133737][T25869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.133764][T25869] ? aa_sock_msg_perm+0xf1/0x1d0 [ 674.133796][T25869] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 674.133816][T25869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.133840][T25869] __sock_sendmsg+0x21c/0x270 [ 674.133875][T25869] ____sys_sendmsg+0x505/0x830 [ 674.133907][T25869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.133944][T25869] ? import_iovec+0x74/0xa0 [ 674.133973][T25869] ___sys_sendmsg+0x21f/0x2a0 [ 674.134001][T25869] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.134067][T25869] ? __fget_files+0x2a/0x420 [ 674.134093][T25869] ? __fget_files+0x3a0/0x420 [ 674.134133][T25869] __x64_sys_sendmsg+0x19b/0x260 [ 674.134162][T25869] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 674.134199][T25869] ? __pfx_ksys_write+0x10/0x10 [ 674.134230][T25869] ? do_syscall_64+0xbe/0x3b0 [ 674.134258][T25869] do_syscall_64+0xfa/0x3b0 [ 674.134279][T25869] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.134301][T25869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.134321][T25869] ? clear_bhb_loop+0x60/0xb0 [ 674.134346][T25869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.134366][T25869] RIP: 0033:0x7feaa138eec9 [ 674.134384][T25869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.134402][T25869] RSP: 002b:00007feaa21b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.134424][T25869] RAX: ffffffffffffffda RBX: 00007feaa15e6090 RCX: 00007feaa138eec9 [ 674.134440][T25869] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 674.134460][T25869] RBP: 00007feaa21b6090 R08: 0000000000000000 R09: 0000000000000000 [ 674.134472][T25869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.134485][T25869] R13: 00007feaa15e6128 R14: 00007feaa15e6090 R15: 00007ffe438f78e8 [ 674.134518][T25869] [ 674.978154][T25892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6024'. [ 675.056381][T25895] netlink: 'syz.4.6026': attribute type 83 has an invalid length. [ 675.449726][T25900] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.460187][T25900] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.512923][ T5878] Bluetooth: hci2: command tx timeout [ 675.560228][T25900] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.603032][T25900] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.664020][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 675.674669][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 675.683707][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 675.707807][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 675.718667][T25900] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.732136][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 675.739083][T25900] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.831847][ C1] net_ratelimit: 15 callbacks suppressed [ 675.831868][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 675.831906][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 675.838259][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 675.844759][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 675.851397][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 675.944848][T25900] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 676.080235][T25900] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.162865][T25914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6033'. [ 676.256495][T25915] netlink: 'syz.3.6033': attribute type 39 has an invalid length. [ 676.348635][ T49] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.357341][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.426260][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.458821][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.523408][T23410] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.535158][T23410] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.714317][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 676.732162][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.871838][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 676.872005][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 676.878932][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 676.885953][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 676.893086][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 676.971423][T25929] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6037'. [ 677.029798][T25924] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6037'. [ 677.106701][T25936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6038'. [ 677.208472][T25904] chnl_net:caif_netlink_parms(): no params data found [ 677.387982][T23956] IPVS: starting estimator thread 0... [ 677.484484][T25947] IPVS: using max 27 ests per chain, 64800 per kthread [ 677.767497][T25904] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.779612][T25904] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.804912][T25904] bridge_slave_0: entered allmulticast mode [ 677.824396][T25904] bridge_slave_0: entered promiscuous mode [ 677.837694][ T5865] Bluetooth: hci0: command tx timeout [ 677.979251][T25961] syzkaller0: entered promiscuous mode [ 677.986305][T25961] syzkaller0: entered allmulticast mode [ 677.996738][T25904] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.004530][T25904] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.012355][T25904] bridge_slave_1: entered allmulticast mode [ 678.020341][T25904] bridge_slave_1: entered promiscuous mode [ 678.149167][T25983] __nla_validate_parse: 4 callbacks suppressed [ 678.149189][T25983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6048'. [ 679.668991][T25904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.711116][T25904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.847878][T23986] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN PTI [ 679.859802][T23986] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 679.868227][T23986] CPU: 0 UID: 0 PID: 23986 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) [ 679.877687][T23986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 679.887741][T23986] Workqueue: events l2cap_info_timeout [ 679.893207][T23986] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 679.899097][T23986] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 50 a1 53 09 cc 66 66 66 66 66 66 2e [ 679.918692][T23986] RSP: 0018:ffffc900107ff7a8 EFLAGS: 00010206 [ 679.924753][T23986] RAX: dffffc0000000000 RBX: ffffffff895b1918 RCX: 1fc7522b193ac900 [ 679.932720][T23986] RDX: 0000000000000000 RSI: ffffffff895b1918 RDI: 000000000000004b [ 679.940781][T23986] RBP: ffffffff8a85bd95 R08: 0000000000000001 R09: 0000000000000000 [ 679.948753][T23986] R10: dffffc0000000000 R11: ffffffff8a85bd50 R12: 0000000000000000 [ 679.956717][T23986] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 679.964684][T23986] FS: 0000000000000000(0000) GS:ffff888125c39000(0000) knlGS:0000000000000000 [ 679.973616][T23986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 679.980200][T23986] CR2: 00002000000044c1 CR3: 000000005336c000 CR4: 00000000003526f0 [ 679.988172][T23986] Call Trace: [ 679.991445][T23986] [ 679.994368][T23986] __kasan_check_byte+0x12/0x40 [ 679.999232][T23986] lock_acquire+0x8d/0x360 [ 680.003654][T23986] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.008847][T23986] ? __cancel_work+0x254/0x2e0 [ 680.013613][T23986] lock_sock_nested+0x48/0x100 [ 680.018370][T23986] ? l2cap_sock_ready_cb+0x45/0x140 [ 680.023566][T23986] l2cap_sock_ready_cb+0x45/0x140 [ 680.028590][T23986] l2cap_conn_start+0x76d/0xe50 [ 680.033447][T23986] ? __pfx_l2cap_conn_start+0x10/0x10 [ 680.038826][T23986] ? __lock_acquire+0xab9/0xd20 [ 680.043681][T23986] ? __pfx___mutex_lock+0x10/0x10 [ 680.048799][T23986] ? process_scheduled_works+0x9ef/0x17b0 [ 680.054525][T23986] l2cap_info_timeout+0x68/0xa0 [ 680.059373][T23986] ? process_scheduled_works+0x9ef/0x17b0 [ 680.065088][T23986] process_scheduled_works+0xae1/0x17b0 [ 680.070640][T23986] ? __pfx_process_scheduled_works+0x10/0x10 [ 680.076622][T23986] worker_thread+0x8a0/0xda0 [ 680.081219][T23986] kthread+0x70e/0x8a0 [ 680.085296][T23986] ? __pfx_worker_thread+0x10/0x10 [ 680.090402][T23986] ? __pfx_kthread+0x10/0x10 [ 680.094987][T23986] ? _raw_spin_unlock_irq+0x23/0x50 [ 680.100178][T23986] ? lockdep_hardirqs_on+0x9c/0x150 [ 680.105367][T23986] ? __pfx_kthread+0x10/0x10 [ 680.109951][T23986] ret_from_fork+0x439/0x7d0 [ 680.114536][T23986] ? __pfx_ret_from_fork+0x10/0x10 [ 680.119654][T23986] ? __switch_to_asm+0x39/0x70 [ 680.124512][T23986] ? __switch_to_asm+0x33/0x70 [ 680.129276][T23986] ? __pfx_kthread+0x10/0x10 [ 680.133873][T23986] ret_from_fork_asm+0x1a/0x30 [ 680.138653][T23986] [ 680.141668][T23986] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 680.147443][T23986] ---[ end trace 0000000000000000 ]--- [ 680.166948][ T5865] Bluetooth: hci0: command tx timeout [ 680.194746][ T3515] tipc: Resetting bearer [ 680.281240][T23986] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 680.317037][T23986] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 50 a1 53 09 cc 66 66 66 66 66 66 2e [ 680.337465][T23986] RSP: 0018:ffffc900107ff7a8 EFLAGS: 00010206 [ 680.343704][T23986] RAX: dffffc0000000000 RBX: ffffffff895b1918 RCX: 1fc7522b193ac900 [ 680.351700][T23986] RDX: 0000000000000000 RSI: ffffffff895b1918 RDI: 000000000000004b [ 680.359961][T23986] RBP: ffffffff8a85bd95 R08: 0000000000000001 R09: 0000000000000000 [ 680.368795][T23986] R10: dffffc0000000000 R11: ffffffff8a85bd50 R12: 0000000000000000 [ 680.376864][T23986] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 680.385550][T23986] FS: 0000000000000000(0000) GS:ffff888125c39000(0000) knlGS:0000000000000000 [ 680.395195][T23986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 680.401837][T23986] CR2: 00007efc181c2e9c CR3: 000000000df36000 CR4: 00000000003526f0 [ 680.410549][T23986] Kernel panic - not syncing: Fatal exception [ 680.416951][T23986] Kernel Offset: disabled [ 680.421260][T23986] Rebooting in 86400 seconds..