last executing test programs: 3.226235771s ago: executing program 2 (id=8637): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001d0001000000000004086aa42d"], 0x30}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (async, rerun: 64) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @empty}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x1c8, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@TCA_STAB={0x1a4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xe6, 0x9, 0x400, 0x1, 0x5, 0x37b, 0xa}}, {0x18, 0x2, [0x7, 0xfffb, 0x1000, 0xf53, 0x2, 0x7, 0x1b, 0x3a, 0x3, 0x0]}}, {{0x1c, 0x1, {0x4, 0x40, 0x6, 0x3, 0x1, 0x8, 0x4, 0x4}}, {0xc, 0x2, [0x4, 0x9, 0x9, 0x1372]}}, {{0x1c, 0x1, {0x1, 0x9f, 0x0, 0x7f, 0x0, 0xfd9, 0x9, 0x6}}, {0x10, 0x2, [0xf, 0x0, 0x8, 0x7, 0xd, 0xffff]}}, {{0x1c, 0x1, {0x2, 0x9, 0x3, 0xe, 0x1, 0x6, 0x94bd, 0x9}}, {0x16, 0x2, [0xfffb, 0x922c, 0x800, 0x7, 0x1ff, 0x401, 0x7, 0xac, 0xcb]}}, {{0x1c, 0x1, {0x6, 0x8, 0x7fff, 0xf, 0x2, 0x0, 0x7, 0xa}}, {0x18, 0x2, [0xd6c, 0x9, 0x4, 0x9, 0x0, 0x2, 0x964f, 0x8a, 0xe21, 0x4e5]}}, {{0x1c, 0x1, {0x4, 0x2, 0x7, 0x5, 0x0, 0x2, 0x4, 0x8}}, {0x14, 0x2, [0xbda2, 0x7, 0x5, 0x5, 0xd0c, 0x8, 0x7, 0x3dce]}}, {{0x1c, 0x1, {0x8e, 0x7f, 0x8f, 0x6, 0x1, 0x3, 0xfff, 0x5}}, {0xe, 0x2, [0x5, 0x40, 0x1, 0xa64a, 0x7]}}, {{0x1c, 0x1, {0x2, 0xfb, 0x101, 0x3, 0x0, 0xf, 0x7, 0x3}}, {0xa, 0x2, [0x1, 0x5, 0x0]}}, {{0x1c, 0x1, {0x4, 0x7d, 0x100, 0x9, 0x2, 0x9, 0x3ff, 0x5}}, {0xe, 0x2, [0x9, 0x3820, 0x800, 0x110, 0x6]}}]}]}, 0x1c8}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0xf31, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 3.0062503s ago: executing program 1 (id=8641): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="03000000d7fe68cafdffffff00000000d15e645380f23e6b44d2d70d84c1433497638c5710061c70247777b22e2d7ce827afb483f280e7826f88006e4654b4b64a47593c58fb977faca0ec3a2038bd4e49a3f25def6e4c2684385886f8b7e1478f01d652a56dba75662bc2792daf3a", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000040000000000000000020000b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000240)={@remote, @remote, @void, {@ipv4={0x800, @tcp={{0x2c, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@end, @ssrr={0x89, 0x1f, 0x1a, [@local, @rand_addr=0x64010102, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @broadcast]}, @generic={0x89, 0xd, "81b511258ea418c7e56bbd"}, @end, @lsrr={0x83, 0x7, 0xf2, [@dev={0xac, 0x14, 0x14, 0x2f}]}, @lsrr={0x83, 0x7, 0xe6, [@local]}, @generic={0x83, 0xc, "691e60aa8cd4be1539da"}, @timestamp_addr={0x44, 0x54, 0xe0, 0x1, 0x1, [{@loopback, 0x1}, {@broadcast, 0x7}, {@remote, 0x3}, {@rand_addr=0x64010102, 0x6}, {@local, 0x3e7}, {@private=0xa010101, 0xa4a}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2, 0x8da}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x3}, {@empty, 0x4}]}]}}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, &(0x7f0000000800)) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 3.005734723s ago: executing program 2 (id=8642): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000031a000000000100000000000100", @ANYRES32=0x0, @ANYBLOB="44280000b5280500240012800c0001006d6163766c616e00140002800800010010000000080003000200000008000500", @ANYRES32=r4, @ANYBLOB], 0x4c}}, 0x4000040) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000100039042bbd7000f8db582500000000", @ANYRES32=r5, @ANYBLOB="8bafea1f000000001800128008000100677265000c00028008000700e0000001"], 0x38}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r7, &(0x7f0000000240), 0x0}, 0x20) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000500)={'pimreg\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="20003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x40010c5}, 0x0) 2.77092626s ago: executing program 2 (id=8645): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 2.401979325s ago: executing program 2 (id=8647): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)=""/9, 0x9}, {&(0x7f0000000880)=""/193, 0xc1}, {&(0x7f0000000a00)=""/233, 0xe9}], 0x3, &(0x7f0000000580)=""/32, 0x20}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000040)={0x1, 0xe6, "41b6f7703b3ffbfed419b4bc589ca2bbf670b0bdd21fe7d33965f0cd4d42bb8f37528d7c5aff9c85419ff092f01b393d511cd1d1490b0de04c010644b32a5017e68fd20b5e4aeecf458b33277d05cc512ce81b00fe90aa348481409114810aed7585d63079db9a9fc229c4382d47f75083b7ad0e3a55dfbc8fea13446e25710a3399c4e464042ab11a79347936739cf98f39d5e7c0f75013717f930aaea0e0999c6ed789431a163c327e891d9278195b79cb0e262e1d5c77963e41e8a7c8a79fa51b173e097c3d805dcb2786c008826ff690fe17d9734c8a1e275dac9a8cae55a620476f1ac4"}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x21, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f2991a8", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r2, &(0x7f0000000280)=[{&(0x7f0000002040)="18a418e4181d8f36b2d931688c2c7e54a74d86cd84fabbf1d96d7edcbc9ea253116601cdafc8e4d252cfc031cbee3640e07553a072b9f608b7e6a44188558bd61ba3320fb3766d1815c9ddaf7d91193d044d06c859610943fb9b7798a776804c1c7af74782a1d88d143d10c1f40c6552848bb08861f1cef0a0b24e5069a002ae1b377488ca852ca8a429d19b717e3f3e1e6825281d9aa6f09b18b4c576cca899dd55b15c101aaed740d94b8212e9dea8e0e40df1e52f89d6aeb63b5c9c84a2f82a", 0xc1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r2, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001fc0)=@delchain={0x1b0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x168, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x150, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x11c, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0xd5, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943954da5ad28e25a9ba91b24d4c96612e2188dd3fa1dea6994033514d8f93add809a6ee955d65ac8c2ae97714a5c600000ddb671382ebf29bf9b3697264083e1c85729597a3ff8fed60b904846"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000006c0)) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.567758197s ago: executing program 2 (id=8654): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f00000006c0)={{'\x00', 0x3}, {0xd}, 0x0, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000540)="379d3200270b8eb36bb2c5c26358df795813dcb45a35e7c8f349d82c0443a90cf722acd0a4b6c1c44aced3534a2174182da4246f72744ce39889e1921ae808b9db3d223bcc9100bacf80bb4e9f74542602edca6268e31475b997", 0x5a, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x2ac}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060008060000971b02"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "8763c1e5966c6af2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a0400b9", "12772541f8eb02bb"}, 0x28) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r9, 0x0, 0x20000000002) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r10, 0x82307201, &(0x7f0000000cc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000480)=0x9, 0x4) r11 = openat$cgroup_ro(r9, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) 1.565464429s ago: executing program 1 (id=8655): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x13}, @void, @val={0xc, 0x99, {0x3, 0x31}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20008041) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000280)={0x1, 'wlan1\x00', {}, 0x7ff}) write$tun(r5, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x4d, 0x0, &(0x7f00000000c0)) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001800010000000000000000001d0100000800050000fd000008000900", @ANYRES32=0x0, @ANYRES8=r1, @ANYRESOCT=r3, @ANYRES16=r0], 0x60}}, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000300)='veth0_to_batadv\x00', 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x48, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x8}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) 1.466527635s ago: executing program 4 (id=8658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @null}, [@null, @bcast, @rose, @bcast, @default, @null, @rose, @rose]}, &(0x7f0000000300)=0x48) accept$netrom(r1, &(0x7f00000004c0)={{0x3, @rose}, [@default, @remote, @remote, @null, @remote, @netrom]}, &(0x7f00000003c0)=0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) recvfrom(r5, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000000000000000060a0b04000000000000000002000000400004803c0001800a0001006c696d69740000002c000280080003400000000408000440000000000c00024000000000000000020c000140000000004a9c4b670900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x4) 1.381900493s ago: executing program 0 (id=8659): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca", 0x97}], 0x1}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x3, 0x3}}, 0x2e) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c04", 0x54}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.274258903s ago: executing program 3 (id=8660): getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000040)=0x28) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) 1.226587625s ago: executing program 0 (id=8661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x78}, 0x1, 0x0, 0x2200000000000000}, 0x20000080) 1.145780678s ago: executing program 4 (id=8662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40091}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7080ffdbdf256200000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) 1.074332333s ago: executing program 0 (id=8663): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x6, 0x7) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x600000000000000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.074012041s ago: executing program 3 (id=8664): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe", 0xa5}], 0x1}}], 0x1, 0x240080e4) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @null]}, 0x48) (async) connect$ax25(r0, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @null]}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r2, 0x50) (async) listen(r2, 0x50) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r4, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) (async) bind$inet(r4, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r4, 0x3) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) listen(r3, 0x50) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000002c0), 0x4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012002102000000001000000000000000", @ANYRES8], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe3d}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe3d}, 0x48) 1.048087523s ago: executing program 1 (id=8665): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_deladdr={0x40, 0x15, 0xc00, 0x70bd27, 0x25dfdbfc, {0x2, 0x8, 0x1d, 0xfd}, [@IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @remote}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}]}, 0x40}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getaddr={0x20, 0x16, 0x2, 0x70bd25, 0x25dfdbfc, {0x2, 0x10, 0xf3, 0xfd, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c081}, 0x40800) 1.01752305s ago: executing program 4 (id=8666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000d000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 897.860425ms ago: executing program 3 (id=8667): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001800dd8d000000000000000002000000000000020000000006001500010000006c00a18068000880640001805e0003006f9d825e8b3a971499cf3920055d51ab0c40c63ad10fcb2dbc9a6e1910330ddc2a811450f565745c49b932481a0cd295f2bf4315d61d60bbabfc72ce7fcb62e7bb3fae6a8afcfab597ee8bc77ca478fa39b0ed6ca5fe7530"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 841.725788ms ago: executing program 4 (id=8668): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) listen(r4, 0xfff) accept(r4, 0xfffffffffffffffd, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x8}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48024}, 0x800) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000400)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f00000000c0)}, 0x8) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_lifetime={0x4, 0x2, 0x2, 0x7, 0x80, 0x3}, @sadb_lifetime={0x4, 0x4}]}, 0xa0}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a80000000001010400000000000000000200000070000d8014000400fe88000000000000000000000000000114000497fe8000000000000000000000000000aa140005000000000000000000000000000000000008000200ffffffff14000500fe80000000000000000000000000002614000400fe800000000000000000000000000042240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x20008820) syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="001208040300"/18, @ANYRES32=r13, @ANYBLOB="0c00238005000f0070000000"], 0x28}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 832.497917ms ago: executing program 1 (id=8669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0900300003003011000060ce902d120c2f0081e949b93897bc3b0000000000607d01ff020000000000000000000000000001120022eb"], 0xfdef) 710.328982ms ago: executing program 3 (id=8670): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000007b000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff85000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 709.824362ms ago: executing program 0 (id=8671): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca", 0x97}], 0x1}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x3, 0x3}}, 0x2e) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c04", 0x54}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec590806000108"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 652.989572ms ago: executing program 4 (id=8672): socket$phonet(0x23, 0x2, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x503, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004, 0x4c20}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x4c}}, 0x24048020) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0xe4bd6a1de0769c90, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32=r4, @ANYBLOB="140002"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 524.713611ms ago: executing program 3 (id=8673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x78}, 0x1, 0x0, 0xf5ffffffffffffff}, 0x20000080) 454.327812ms ago: executing program 0 (id=8674): syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000040), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r2, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}}, 0x0) 454.15083ms ago: executing program 1 (id=8675): openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030006ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (fail_nth: 2) 397.067859ms ago: executing program 3 (id=8676): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x200000000000000, 0x0, 0x800}, 0x40000) 105.41334ms ago: executing program 2 (id=8677): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000480)={0xffffffffffffffff}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async) r7 = accept(r6, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r7) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000000) (async) r8 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r8, r1, 0x0, 0x0, 0x0, 0x0}, 0x30) r10 = socket(0x10, 0x803, 0x0) (async) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}}) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r12}, &(0x7f0000000000), &(0x7f0000000080)='%-5lx \x00'}, 0x20) (async) write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x10448) (async) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r13, 0x84, 0xc, &(0x7f0000000000), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r0, 0x0, 0x1, 0x47d, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map=r12, 0xffffffffffffffff, 0x26, 0x35, r0, @void, @void, @void, @value=r9, r14}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f00000000c0)=0x10) getsockopt$sock_buf(r13, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r8, r12, 0x0, 0x0, 0x0}, 0x30) 1.848155ms ago: executing program 0 (id=8678): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffff6e}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffff80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000380)={0x4, 0x5ad3}) r6 = accept$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000004c0)={0x9, &(0x7f0000000440)=[{0xd, 0x4, 0x7, 0xf1a6}, {0x9, 0x2, 0x40, 0x4}, {0x6, 0xc0, 0x7, 0x2}, {0x8, 0x81, 0x4, 0xfffffff9}, {0x4, 0xbd, 0x5, 0x3}, {0x1, 0x1, 0x5, 0x2}, {0xff49, 0x92, 0x8, 0x1}, {0x1000, 0x16, 0x1, 0xd}, {0x9, 0x3, 0x7, 0x101}]}, 0x10) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000500)={@null, 0x2, 'batadv_slave_1\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000740)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r8, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x7453d1e1dcd4fe7e}, 0x2000c004) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000780)=0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1f8, r9, 0xa08, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x800}, 0x800) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b40)={'syztnl2\x00', r7, 0x4, 0x2, 0x0, 0x8e54, 0x68, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x80, 0x40, 0x7}}) getsockname$packet(r2, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c40)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r10, &(0x7f0000000e40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c80)={0x178, r11, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x20048010) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), r10) sendmsg$TIPC_NL_LINK_GET(r14, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x7c, r15, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe48}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x4000) r16 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x11, 0xd5, 0x6, 0xa, 0x7, 0x1, 0x51d4, '\x00', 0x0, r2, 0x1, 0x0, 0x1}, 0x50) getpeername$packet(r6, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x1b, &(0x7f0000001080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x8}, @map_fd={0x18, 0x9, 0x1, 0x0, r17}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001180)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x24, '\x00', r18, 0x0, r16, 0x8, &(0x7f0000001240)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001280)={0x4, 0x10, 0x20200, 0x2}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000012c0)=[r2, r2, r2, r2], &(0x7f0000001300)=[{0x5, 0x5, 0xf, 0x7}, {0x1, 0x1, 0xa, 0xb}, {0x0, 0x3, 0x6, 0x9}, {0x5, 0x5, 0xa, 0xb}, {0x5, 0x2, 0x10, 0x3}, {0x2, 0x1, 0xe, 0x6}, {0x3, 0x5, 0xd, 0x7}, {0x3, 0x4, 0x1, 0xb}, {0x4, 0x1, 0xd, 0xc}], 0x10, 0x92}, 0x94) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000001480)=0xa1, 0x4) sendmsg$NL80211_CMD_REQ_SET_REG(r14, &(0x7f00000016c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001540)={0x134, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x118, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10000}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xcf5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1c}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xadd6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffe}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5a2f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xf}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x134}}, 0x404c014) 136.976µs ago: executing program 1 (id=8679): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="764b9e147583ddd0569ba56a5cfd", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000001040500000000000000002c9654320006000640bff200000500010001"], 0x24}}, 0x20000020) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) close(0x3) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 0s ago: executing program 4 (id=8680): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@bridge_setlink={0x50, 0x13, 0x8, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x60040, 0x2800}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_IFALIAS={0x14, 0x14, 'pimreg1\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) kernel console output (not intermixed with test programs): __pfx__copy_from_iter+0x10/0x10 [ 642.189637][T27023] ? sock_alloc_send_pskb+0x86b/0x980 [ 642.189668][T27023] ? __pfx__copy_from_iter+0x10/0x10 [ 642.189692][T27023] ? page_copy_sane+0x16a/0x280 [ 642.189718][T27023] copy_page_from_iter+0xdd/0x170 [ 642.189746][T27023] skb_copy_datagram_from_iter+0x306/0x720 [ 642.189794][T27023] tun_get_user+0x1691/0x3e90 [ 642.189843][T27023] ? aa_file_perm+0x44d/0x1550 [ 642.189862][T27023] ? __pfx_tun_get_user+0x10/0x10 [ 642.189885][T27023] ? _parse_integer_limit+0x1ae/0x1f0 [ 642.189916][T27023] ? __lock_acquire+0xab9/0xd20 [ 642.189944][T27023] ? ref_tracker_alloc+0x318/0x460 [ 642.189962][T27023] ? __lock_acquire+0xab9/0xd20 [ 642.189984][T27023] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 642.190011][T27023] ? tun_get+0x1c/0x2f0 [ 642.190041][T27023] ? tun_get+0x1c/0x2f0 [ 642.190063][T27023] ? tun_get+0x1c/0x2f0 [ 642.190091][T27023] tun_chr_write_iter+0x113/0x200 [ 642.190119][T27023] vfs_write+0x5c9/0xb30 [ 642.190153][T27023] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 642.190177][T27023] ? __pfx_vfs_write+0x10/0x10 [ 642.190218][T27023] ? __fget_files+0x2a/0x420 [ 642.190248][T27023] ksys_write+0x145/0x250 [ 642.190279][T27023] ? __pfx_ksys_write+0x10/0x10 [ 642.190308][T27023] ? do_syscall_64+0xbe/0xfa0 [ 642.190337][T27023] do_syscall_64+0xfa/0xfa0 [ 642.190360][T27023] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.190383][T27023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.190403][T27023] ? clear_bhb_loop+0x60/0xb0 [ 642.190428][T27023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.190447][T27023] RIP: 0033:0x7fd166f8f6c9 [ 642.190466][T27023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.190484][T27023] RSP: 002b:00007fd167efa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 642.190507][T27023] RAX: ffffffffffffffda RBX: 00007fd1671e5fa0 RCX: 00007fd166f8f6c9 [ 642.190520][T27023] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000003 [ 642.190533][T27023] RBP: 00007fd167efa090 R08: 0000000000000000 R09: 0000000000000000 [ 642.190545][T27023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 642.190557][T27023] R13: 00007fd1671e6038 R14: 00007fd1671e5fa0 R15: 00007fff388c4ce8 [ 642.190593][T27023] [ 643.054202][T27070] xt_l2tp: v2 sid > 0xffff: 1114112 [ 643.149025][T27074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7213'. [ 643.421400][T27084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7215'. [ 643.465555][T27087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7217'. [ 643.712720][T27105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.950958][T27116] syzkaller1: entered promiscuous mode [ 643.971029][T27116] syzkaller1: entered allmulticast mode [ 644.083898][T27126] xt_hashlimit: size too large, truncated to 1048576 [ 644.370226][T27139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7229'. [ 644.626626][T27145] sctp: [Deprecated]: syz.4.7234 (pid 27145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 644.626626][T27145] Use struct sctp_sack_info instead [ 644.925116][T27157] bridge0: entered promiscuous mode [ 644.931215][T27157] macsec2: entered promiscuous mode [ 644.938533][T27157] macsec2: entered allmulticast mode [ 644.943996][T27157] bridge0: entered allmulticast mode [ 644.953700][T27157] bridge0: port 3(macsec2) entered blocking state [ 644.961093][T27157] bridge0: port 3(macsec2) entered disabled state [ 644.980942][T27157] bridge0: left allmulticast mode [ 644.991276][T27157] bridge0: left promiscuous mode [ 645.045259][T27158] bridge0: entered promiscuous mode [ 645.050952][T27158] macsec2: entered promiscuous mode [ 645.057658][T27158] macsec2: entered allmulticast mode [ 645.063499][T27158] bridge0: entered allmulticast mode [ 645.072315][T27158] bridge0: port 3(macsec2) entered blocking state [ 645.088609][T27158] bridge0: port 3(macsec2) entered disabled state [ 645.101952][T27158] bridge0: left allmulticast mode [ 645.107976][T27158] bridge0: left promiscuous mode [ 645.539769][T27200] netlink: 'syz.4.7251': attribute type 30 has an invalid length. [ 645.548290][T27200] __nla_validate_parse: 3 callbacks suppressed [ 645.548310][T27200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7251'. [ 645.986152][T27221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7260'. [ 646.317091][T27240] netlink: 'syz.1.7265': attribute type 30 has an invalid length. [ 646.325140][T27240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7265'. [ 646.396643][T27243] netlink: 'syz.2.7266': attribute type 142 has an invalid length. [ 646.497759][T27244] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7267'. [ 646.634064][T27253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7272'. [ 646.645975][T27255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7272'. [ 646.679701][T27253] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7272'. [ 646.867781][T27262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7275'. [ 646.890420][T27271] sctp: [Deprecated]: syz.2.7274 (pid 27271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 646.890420][T27271] Use struct sctp_sack_info instead [ 646.955576][T27273] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7278'. [ 647.114068][T27279] sctp: [Deprecated]: syz.1.7280 (pid 27279) Use of int in maxseg socket option. [ 647.114068][T27279] Use struct sctp_assoc_value instead [ 647.213499][T27290] bond_slave_0: default FDB implementation only supports local addresses [ 647.263356][T27293] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7285'. [ 647.409333][T27304] netlink: 'syz.1.7288': attribute type 11 has an invalid length. [ 647.486187][T27307] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 648.085792][T27342] sch_fq: defrate 52 ignored. [ 648.295797][T27357] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 648.990905][T27400] netlink: 'syz.1.7315': attribute type 4 has an invalid length. [ 649.181583][T27409] IPv6: NLM_F_CREATE should be specified when creating new route [ 649.604816][T27437] bridge_slave_0: entered promiscuous mode [ 649.792900][T27450] netlink: 'syz.2.7336': attribute type 16 has an invalid length. [ 649.827261][T27450] netlink: 'syz.2.7336': attribute type 17 has an invalid length. [ 649.855269][T27452] netlink: 'syz.0.7335': attribute type 30 has an invalid length. [ 649.908843][T27450] 8021q: adding VLAN 0 to HW filter on device ` [ 649.919754][T27450] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 649.939510][T27452] netlink: 'syz.0.7335': attribute type 30 has an invalid length. [ 650.078541][T27467] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20005 [ 650.474994][T27498] xt_HMARK: spi-set and port-set can't be combined [ 650.554181][T27503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.747446][T27507] __nla_validate_parse: 8 callbacks suppressed [ 650.747470][T27507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7354'. [ 650.788575][T27507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7354'. [ 650.812852][T27507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7354'. [ 650.856944][T27507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7354'. [ 651.525380][T27555] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7367'. [ 651.665512][T27561] x_tables: duplicate underflow at hook 3 [ 651.699560][T27565] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 651.703815][T27563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7370'. [ 651.717075][T27563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7370'. [ 651.726260][T27565] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 651.886212][T27578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7373'. [ 652.025401][T27582] xt_l2tp: v2 doesn't support IP mode [ 652.065420][T27585] xt_l2tp: v2 doesn't support IP mode [ 652.314227][T27604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7381'. [ 652.432449][T27607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7383'. [ 652.882822][T27631] syzkaller1: entered promiscuous mode [ 652.892297][T27631] syzkaller1: entered allmulticast mode [ 652.928332][T27635] Cannot find add_set index 3 as target [ 653.045261][T27640] sctp: [Deprecated]: syz.0.7394 (pid 27640) Use of int in maxseg socket option. [ 653.045261][T27640] Use struct sctp_assoc_value instead [ 653.346281][T27655] xt_addrtype: ipv6 does not support BROADCAST matching [ 653.365297][T27662] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 653.387464][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 653.497885][T27664] netlink: 'syz.0.7401': attribute type 4 has an invalid length. [ 654.427076][T27716] netlink: 'syz.4.7421': attribute type 1 has an invalid length. [ 654.645579][T27730] team_slave_1: Caught tx_queue_len zero misconfig [ 654.694991][T27734] tipc: Trying to set illegal importance in message [ 654.870455][T27746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.880661][T27748] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 654.926694][T27748] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 654.932696][T27749] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 654.957507][T27751] netlink: 'syz.0.7434': attribute type 33 has an invalid length. [ 655.214947][T27770] netlink: 'syz.1.7440': attribute type 5 has an invalid length. [ 655.484749][T27787] netlink: 'syz.2.7444': attribute type 4 has an invalid length. [ 655.831200][T27805] __nla_validate_parse: 18 callbacks suppressed [ 655.831223][T27805] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7452'. [ 655.840234][T27806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7448'. [ 655.887468][T27805] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7452'. [ 655.927842][T27811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7450'. [ 655.939377][T27805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7452'. [ 656.758922][T27849] xt_ecn: cannot match TCP bits for non-tcp packets [ 656.858512][T27857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7463'. [ 657.072868][T27870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7466'. [ 657.226656][T27873] netlink: 'syz.4.7469': attribute type 72 has an invalid length. [ 657.260214][T27878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7472'. [ 657.413818][T27887] dvmrp0: entered allmulticast mode [ 657.441776][T27890] netlink: 356 bytes leftover after parsing attributes in process `syz.2.7473'. [ 657.499776][T27895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7478'. [ 657.732927][T27907] netlink: 'syz.0.7480': attribute type 1 has an invalid length. [ 657.790388][T27907] 8021q: adding VLAN 0 to HW filter on device bond16 [ 657.841358][T27907] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 657.875698][T27907] bond16: (slave wlan0): Opening slave failed [ 658.199353][T27934] netlink: 'syz.1.7487': attribute type 1 has an invalid length. [ 658.254933][T27937] netlink: zone id is out of range [ 658.296770][T27937] netlink: zone id is out of range [ 658.301958][T27937] netlink: zone id is out of range [ 658.324653][T27937] netlink: get zone limit has 4 unknown bytes [ 658.336286][T27940] bond0: (slave bridge8): making interface the new active one [ 658.387755][T27940] bond0: (slave bridge8): Enslaving as an active interface with an up link [ 658.919117][T27985] block nbd5: Unsupported socket: should be TCP or UNIX. [ 659.319628][T28009] xt_hashlimit: overflow, rate too high: 0 [ 659.362182][T28009] netlink: 'syz.1.7507': attribute type 30 has an invalid length. [ 659.919504][T28046] netlink: 'syz.3.7518': attribute type 1 has an invalid length. [ 659.947160][T28050] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 660.028507][T28054] veth1: Caught tx_queue_len zero misconfig [ 660.036884][T28050] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 660.368448][T28074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.827982][T28091] xt_CT: No such helper "pptp" [ 660.979122][T28107] __nla_validate_parse: 18 callbacks suppressed [ 660.979146][T28107] netlink: 6 bytes leftover after parsing attributes in process `syz.2.7541'. [ 661.029530][T28107] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 661.174728][T28118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7545'. [ 686.017295][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 734.011281][T28138] netlink: 'syz.1.7547': attribute type 21 has an invalid length. [ 734.053188][T28142] pimreg: entered allmulticast mode [ 734.062826][T28138] IPv6: NLM_F_CREATE should be specified when creating new route [ 734.101749][T28149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7549'. [ 734.401152][T28161] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7551'. [ 734.969957][T28180] netlink: 'syz.4.7560': attribute type 30 has an invalid length. [ 734.990791][T28180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7560'. [ 735.028164][T21156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 735.040796][T21156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 735.052108][T21156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 735.076234][T21156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 735.086337][T21156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 735.111332][T28180] netlink: 'syz.4.7560': attribute type 30 has an invalid length. [ 735.119599][T28180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7560'. [ 735.139806][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 735.152414][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 735.160185][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 735.170945][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 735.184175][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 735.485029][T28203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7564'. [ 735.924879][ T1156] batadv3: left allmulticast mode [ 735.930692][ T1156] batadv3: left promiscuous mode [ 735.937446][ T1156] bridge0: port 4(batadv3) entered disabled state [ 736.020974][ T1156] bridge0: port 3(batadv2) entered disabled state [ 736.059973][ T1156] bridge0: port 2(wlan1) entered disabled state [ 736.078980][T28230] netlink: 'syz.3.7572': attribute type 30 has an invalid length. [ 736.097729][T28230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7572'. [ 736.107981][ T1156] bridge0: port 1() entered disabled state [ 736.411399][T28243] openvswitch: netlink: Duplicate or invalid key (type 0). [ 736.422062][T28243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.432545][T28243] netlink: 'syz.1.7577': attribute type 22 has an invalid length. [ 736.441038][T28243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7577'. [ 736.458725][ T1156] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 736.468678][ T1156] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 736.794642][T28256] blkio.reset_stats is deprecated [ 737.297681][T21156] Bluetooth: hci0: command tx timeout [ 737.522925][ T1156] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.532911][ T1156] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.542306][ T1156] ` (unregistering): Released all slaves [ 737.556799][ T1156] bond1 (unregistering): (slave veth3): Releasing backup interface [ 737.566024][ T1156] bond1 (unregistering): Released all slaves [ 737.584375][ T1156] bond2 (unregistering): (slave veth5): Releasing backup interface [ 737.593681][ T1156] bond2 (unregistering): Released all slaves [ 737.711209][ T1156] bond3 (unregistering): (slave veth9): Releasing backup interface [ 737.720374][ T1156] bond3 (unregistering): Released all slaves [ 737.838347][ T1156] bond4 (unregistering): (slave veth11): Releasing backup interface [ 737.847882][ T1156] bond4 (unregistering): Released all slaves [ 737.976143][ T1156] bond5 (unregistering): (slave veth13): Releasing backup interface [ 737.985126][ T1156] bond5 (unregistering): Released all slaves [ 738.102000][ T1156] bond6 (unregistering): Released all slaves [ 738.219319][ T1156] bond7 (unregistering): Released all slaves [ 738.232925][ T1156] bond8 (unregistering): Released all slaves [ 738.246802][ T1156] bond9 (unregistering): Released all slaves [ 738.263236][ T1156] bond10 (unregistering): Released all slaves [ 738.283839][ T1156] bond11 (unregistering): Released all slaves [ 738.298817][ T1156] bond12 (unregistering): Released all slaves [ 738.312996][ T1156] bond13 (unregistering): Released all slaves [ 738.329119][ T1156] bond14 (unregistering): Released all slaves [ 738.450413][ T1156] bond15 (unregistering): Released all slaves [ 738.565092][ T1156] bond0 (unregistering): Released all slaves [ 738.679282][ T1156] bond16 (unregistering): Released all slaves [ 738.693234][T28230] netlink: 'syz.3.7572': attribute type 30 has an invalid length. [ 738.701724][T28183] wlan0 speed is unknown, defaulting to 1000 [ 738.721992][T28230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7572'. [ 738.785743][T28252] tipc: Enabling of bearer rejected, failed to enable media [ 738.813299][T15146] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.825491][T15146] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.949347][T15146] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 738.975343][T15146] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.255125][ T1156] tipc: Disabling bearer [ 739.293061][ T1156] tipc: Disabling bearer [ 739.331420][ T1156] tipc: Left network mode [ 739.377678][T21156] Bluetooth: hci0: command tx timeout [ 739.406985][T28281] dvmrp6: entered allmulticast mode [ 739.444245][ T1156] IPVS: stopping master sync thread 13756 ... [ 739.457263][ T1156] IPVS: stopping backup sync thread 13349 ... [ 739.487848][T28287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7587'. [ 739.564894][T28290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7588'. [ 739.594635][T28290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7588'. [ 739.899221][T28306] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.7592'. [ 739.947901][T28309] netlink: 'syz.2.7593': attribute type 30 has an invalid length. [ 739.965907][T28183] chnl_net:caif_netlink_parms(): no params data found [ 739.994036][T28309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7593'. [ 739.996614][T28313] netlink: 'syz.3.7594': attribute type 2 has an invalid length. [ 740.052077][T28313] netlink: 'syz.3.7594': attribute type 1 has an invalid length. [ 740.140457][T28309] netlink: 'syz.2.7593': attribute type 30 has an invalid length. [ 740.172372][T28309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7593'. [ 740.499888][T28183] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.517896][T28183] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.530968][T28183] bridge_slave_0: entered allmulticast mode [ 740.560169][T28183] bridge_slave_0: entered promiscuous mode [ 740.571471][T28339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7601'. [ 740.745210][T28183] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.759717][T28183] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.776910][T28183] bridge_slave_1: entered allmulticast mode [ 740.794908][T28183] bridge_slave_1: entered promiscuous mode [ 740.807162][T28355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7603'. [ 740.979905][T28359] netlink: 'syz.4.7605': attribute type 1 has an invalid length. [ 741.010377][T28183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.048684][T28183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.173709][T28364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7605'. [ 741.352982][T28359] veth25: entered promiscuous mode [ 741.458074][T21156] Bluetooth: hci0: command tx timeout [ 741.473445][T28183] team0: Port device team_slave_0 added [ 741.508847][T28183] team0: Port device team_slave_1 added [ 741.925642][T28183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.934777][T28183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.966099][T28183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.047362][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.072043][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.333572][T28401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7618'. [ 743.094173][T28183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.101932][T28183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.128442][T28183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.386986][T28183] hsr_slave_0: entered promiscuous mode [ 743.404284][T28183] hsr_slave_1: entered promiscuous mode [ 743.425622][T28422] netlink: 'syz.2.7624': attribute type 3 has an invalid length. [ 743.537491][T21156] Bluetooth: hci0: command tx timeout [ 744.051070][T28448] netlink: 'syz.1.7633': attribute type 30 has an invalid length. [ 744.069190][T28451] netlink: 'syz.2.7634': attribute type 3 has an invalid length. [ 744.081639][T28448] netlink: 'syz.1.7633': attribute type 30 has an invalid length. [ 744.110017][ T1156] IPVS: stop unused estimator thread 0... [ 744.508859][T28468] __nla_validate_parse: 4 callbacks suppressed [ 744.508880][T28468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7640'. [ 744.518906][T28183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 744.537069][T28468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7640'. [ 744.552571][T28469] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7641'. [ 744.563302][T28469] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7641'. [ 744.597844][T28183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 744.616375][T28183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 744.632766][T28183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 744.976189][T28183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.047976][T28183] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.070966][T19399] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.078166][T19399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.131330][T15154] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.138636][T15154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.161010][T28498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7652'. [ 745.191783][T28498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7652'. [ 745.531590][T28521] FAULT_INJECTION: forcing a failure. [ 745.531590][T28521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.579292][T28521] CPU: 0 UID: 0 PID: 28521 Comm: syz.2.7660 Not tainted syzkaller #0 PREEMPT(full) [ 745.579321][T28521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 745.579333][T28521] Call Trace: [ 745.579342][T28521] [ 745.579351][T28521] dump_stack_lvl+0x189/0x250 [ 745.579386][T28521] ? __pfx____ratelimit+0x10/0x10 [ 745.579414][T28521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 745.579439][T28521] ? __pfx__printk+0x10/0x10 [ 745.579460][T28521] ? __might_fault+0xb0/0x130 [ 745.579498][T28521] should_fail_ex+0x414/0x560 [ 745.579532][T28521] _copy_from_user+0x2d/0xb0 [ 745.579559][T28521] ___sys_sendmsg+0x158/0x2a0 [ 745.579585][T28521] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.579650][T28521] ? __fget_files+0x2a/0x420 [ 745.579668][T28521] ? __fget_files+0x3a0/0x420 [ 745.579700][T28521] __sys_sendmmsg+0x227/0x430 [ 745.579728][T28521] ? __pfx___sys_sendmmsg+0x10/0x10 [ 745.579761][T28521] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 745.579813][T28521] ? ksys_write+0x22a/0x250 [ 745.579844][T28521] ? __pfx_ksys_write+0x10/0x10 [ 745.579878][T28521] __x64_sys_sendmmsg+0xa0/0xc0 [ 745.579902][T28521] do_syscall_64+0xfa/0xfa0 [ 745.579927][T28521] ? lockdep_hardirqs_on+0x9c/0x150 [ 745.579954][T28521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.579973][T28521] ? clear_bhb_loop+0x60/0xb0 [ 745.580020][T28521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.580039][T28521] RIP: 0033:0x7fbcc8d8f6c9 [ 745.580059][T28521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.580076][T28521] RSP: 002b:00007fbcc9ca0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 745.580098][T28521] RAX: ffffffffffffffda RBX: 00007fbcc8fe5fa0 RCX: 00007fbcc8d8f6c9 [ 745.580112][T28521] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000004 [ 745.580126][T28521] RBP: 00007fbcc9ca0090 R08: 0000000000000000 R09: 0000000000000000 [ 745.580139][T28521] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.580151][T28521] R13: 00007fbcc8fe6038 R14: 00007fbcc8fe5fa0 R15: 00007fff21f72d88 [ 745.580188][T28521] [ 745.848975][T28183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.021427][T28538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7665'. [ 746.050724][T28183] veth0_vlan: entered promiscuous mode [ 746.113163][T28183] veth1_vlan: entered promiscuous mode [ 746.241976][T28183] veth0_macvtap: entered promiscuous mode [ 746.284231][T28183] veth1_macvtap: entered promiscuous mode [ 746.343666][T28183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.358181][T28550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7669'. [ 746.391458][T28183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.411295][T15146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.421520][T15146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.493038][T15146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.507627][T28556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7672'. [ 746.518786][T28556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7672'. [ 746.538681][T15146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.542000][T28556] netlink: 'syz.3.7672': attribute type 14 has an invalid length. [ 746.689398][T28564] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 746.759838][T15154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.792813][T15154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.849806][T28571] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 746.939860][T19399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.955670][T19399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.322430][T28599] veth0_to_bond: mtu less than device minimum [ 747.437103][T28590] `: (slave bond_slave_1): Releasing backup interface [ 748.097479][ T5833] bridge0: port 1(syz_tun) entered disabled state [ 748.134221][ T5833] syz_tun (unregistering): left allmulticast mode [ 748.143850][ T5833] syz_tun (unregistering): left promiscuous mode [ 748.152145][ T5833] bridge0: port 1(syz_tun) entered disabled state [ 748.183615][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 748.218024][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 748.226984][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 748.239498][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 748.247441][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 748.570679][T28648] bridge0: port 1(vlan3) entered blocking state [ 748.588549][T28648] bridge0: port 1(vlan3) entered disabled state [ 748.605475][T28648] vlan3: entered allmulticast mode [ 748.620568][T28648] bridge0: entered allmulticast mode [ 748.673598][T28648] vlan3: left allmulticast mode [ 748.678629][T28648] bridge0: left allmulticast mode [ 748.839301][T28656] bridge_slave_1 (unregistering): left allmulticast mode [ 748.856725][T28656] bridge_slave_1 (unregistering): left promiscuous mode [ 748.872565][T28660] netlink: 'syz.3.7700': attribute type 3 has an invalid length. [ 748.876640][T28656] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.353432][T28679] netlink: 'syz.0.7706': attribute type 14 has an invalid length. [ 749.365153][T28678] IPVS: Unknown mcast interface: vcan0 [ 749.417526][T28634] wlan0 speed is unknown, defaulting to 1000 [ 749.525252][T28685] __nla_validate_parse: 12 callbacks suppressed [ 749.525275][T28685] netlink: 27 bytes leftover after parsing attributes in process `syz.2.7710'. [ 749.694222][T28694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7713'. [ 749.707044][T28692] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 750.042778][T28708] x_tables: duplicate underflow at hook 2 [ 750.165864][T28634] chnl_net:caif_netlink_parms(): no params data found [ 750.207245][T28716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7721'. [ 750.341599][ T5831] Bluetooth: hci2: command tx timeout [ 750.539136][T28634] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.556957][T28634] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.567484][T28634] bridge_slave_0: entered allmulticast mode [ 750.586374][T28634] bridge_slave_0: entered promiscuous mode [ 750.602519][T28634] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.610830][T28634] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.619424][T28634] bridge_slave_1: entered allmulticast mode [ 750.628196][T28634] bridge_slave_1: entered promiscuous mode [ 750.644040][T28738] FAULT_INJECTION: forcing a failure. [ 750.644040][T28738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.671178][T28738] CPU: 1 UID: 0 PID: 28738 Comm: syz.2.7728 Not tainted syzkaller #0 PREEMPT(full) [ 750.671206][T28738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 750.671218][T28738] Call Trace: [ 750.671227][T28738] [ 750.671236][T28738] dump_stack_lvl+0x189/0x250 [ 750.671268][T28738] ? __pfx____ratelimit+0x10/0x10 [ 750.671294][T28738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.671319][T28738] ? __pfx__printk+0x10/0x10 [ 750.671354][T28738] should_fail_ex+0x414/0x560 [ 750.671388][T28738] _copy_to_user+0x31/0xb0 [ 750.671416][T28738] simple_read_from_buffer+0xe1/0x170 [ 750.671449][T28738] proc_fail_nth_read+0x1b3/0x220 [ 750.671474][T28738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 750.671502][T28738] ? rw_verify_area+0x2a6/0x4d0 [ 750.671527][T28738] ? __lock_acquire+0xab9/0xd20 [ 750.671546][T28738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 750.671571][T28738] vfs_read+0x200/0xa30 [ 750.671596][T28738] ? fdget_pos+0x247/0x320 [ 750.671620][T28738] ? __pfx___mutex_lock+0x10/0x10 [ 750.671649][T28738] ? __pfx_vfs_read+0x10/0x10 [ 750.671676][T28738] ? __fget_files+0x2a/0x420 [ 750.671700][T28738] ? __fget_files+0x3a0/0x420 [ 750.671717][T28738] ? __fget_files+0x2a/0x420 [ 750.671746][T28738] ksys_read+0x145/0x250 [ 750.671775][T28738] ? __pfx_ksys_read+0x10/0x10 [ 750.671804][T28738] ? do_syscall_64+0xbe/0xfa0 [ 750.671834][T28738] do_syscall_64+0xfa/0xfa0 [ 750.671857][T28738] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.671882][T28738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.671900][T28738] ? clear_bhb_loop+0x60/0xb0 [ 750.671922][T28738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.671940][T28738] RIP: 0033:0x7fbcc8d8e0dc [ 750.671959][T28738] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 750.671975][T28738] RSP: 002b:00007fbcc9ca0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 750.671999][T28738] RAX: ffffffffffffffda RBX: 00007fbcc8fe5fa0 RCX: 00007fbcc8d8e0dc [ 750.672014][T28738] RDX: 000000000000000f RSI: 00007fbcc9ca00a0 RDI: 0000000000000005 [ 750.672027][T28738] RBP: 00007fbcc9ca0090 R08: 0000000000000000 R09: 0000000000000000 [ 750.672040][T28738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.672053][T28738] R13: 00007fbcc8fe6038 R14: 00007fbcc8fe5fa0 R15: 00007fff21f72d88 [ 750.672090][T28738] [ 750.925831][ T30] audit: type=1107 audit(1763178660.685:4): pid=28739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='*7g̯L "9PĘW9ܳ*S"-VIO(yϋWgDr]WR 5tBi~{mǷO!X' [ 750.986089][T28634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.999867][T28634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.106047][T28634] team0: Port device team_slave_0 added [ 751.115495][T28634] team0: Port device team_slave_1 added [ 751.180362][T28634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.196525][T28634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.227392][T28634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.238713][T28756] mac80211_hwsim hwsim17 wlan1: Caught tx_queue_len zero misconfig [ 751.266026][T28748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7729'. [ 751.277849][T28634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.285078][T28634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.313779][T28634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.338251][T28748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7729'. [ 751.590352][T28634] hsr_slave_0: entered promiscuous mode [ 751.601142][T28634] hsr_slave_1: entered promiscuous mode [ 751.608872][T28634] debugfs: 'hsr0' already exists in 'hsr' [ 751.614644][T28634] Cannot create hsr debugfs directory [ 751.986405][T28792] netlink: 27 bytes leftover after parsing attributes in process `syz.0.7744'. [ 752.011491][T28790] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7745'. [ 752.185255][T28803] xt_CT: You must specify a L4 protocol and not use inversions on it [ 752.199095][T28805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7749'. [ 752.239134][T28634] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.276989][T28800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7748'. [ 752.300859][T28800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7748'. [ 752.350724][T28634] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.397279][T28634] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.417929][ T5831] Bluetooth: hci2: command tx timeout [ 752.472867][T28813] netlink: 'syz.2.7753': attribute type 21 has an invalid length. [ 752.510771][T28634] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.548669][T28813] netlink: 'syz.2.7753': attribute type 1 has an invalid length. [ 752.854702][T28634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 752.919412][T28634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 752.988125][T28634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 753.012526][T28634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 753.179178][T28859] netlink: 'syz.2.7767': attribute type 3 has an invalid length. [ 753.359172][T28866] veth0_to_bridge: entered promiscuous mode [ 753.411317][T28865] veth0_to_bridge: left promiscuous mode [ 753.453376][T28871] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 753.744323][T28634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.773038][T28634] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.804801][T15154] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.812074][T15154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.886968][T15154] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.894191][T15154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.497347][ T5831] Bluetooth: hci2: command tx timeout [ 754.681463][T28634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.841229][T28634] veth0_vlan: entered promiscuous mode [ 754.875696][T28634] veth1_vlan: entered promiscuous mode [ 754.905041][T28942] __nla_validate_parse: 10 callbacks suppressed [ 754.905073][T28942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7793'. [ 754.932583][T28942] netlink: 'syz.2.7793': attribute type 10 has an invalid length. [ 754.941534][T28942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7793'. [ 754.953734][T28942] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 755.002556][T28945] netlink: 'syz.3.7795': attribute type 6 has an invalid length. [ 755.024067][T28634] veth0_macvtap: entered promiscuous mode [ 755.061759][T28634] veth1_macvtap: entered promiscuous mode [ 755.121214][T28634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.183740][T28634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.234958][T15149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.264521][T15149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.301794][T15149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.322015][T15149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.340946][T28958] sctp: [Deprecated]: syz.3.7800 (pid 28958) Use of int in maxseg socket option. [ 755.340946][T28958] Use struct sctp_assoc_value instead [ 755.444533][T28965] tipc: Resetting bearer [ 755.457552][T28965] tipc: Resetting bearer [ 755.512098][T28965] openvswitch: netlink: Flow key attr not present in new flow. [ 755.548450][T28965] netlink: 'syz.4.7802': attribute type 16 has an invalid length. [ 755.556347][T28965] netlink: 'syz.4.7802': attribute type 17 has an invalid length. [ 755.576275][T28967] netlink: 'syz.3.7803': attribute type 1 has an invalid length. [ 755.584395][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.598717][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.649954][T28965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 755.736643][T28977] bond0: (slave erspan0): Error: Device type is different from other slaves [ 755.794688][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.810075][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.065311][T28995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7682'. [ 756.350534][T29000] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7812'. [ 756.576771][ T5831] Bluetooth: hci2: command tx timeout [ 757.002805][T29030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7821'. [ 757.004218][ T50] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.014170][T29030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7821'. [ 757.046065][T29030] netlink: 'syz.1.7821': attribute type 14 has an invalid length. [ 757.046208][T21156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 757.066305][T21156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 757.078515][T21156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 757.092973][T21156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 757.102320][T21156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 757.114024][ T50] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.223376][ T50] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.240304][T29040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7824'. [ 757.430000][ T50] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.706627][T29045] netlink: 'syz.0.7827': attribute type 39 has an invalid length. [ 757.713705][T29048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7826'. [ 757.821969][T29046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7826'. [ 757.907280][ T50] bridge_slave_0: left promiscuous mode [ 757.919892][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.034134][T29059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7832'. [ 758.082667][T29059] netlink: 'syz.4.7832': attribute type 14 has an invalid length. [ 758.334157][T29072] nbd: device at index 64 is going down [ 758.402629][ T50] bond9 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 758.414598][ T50] bond9 (unregistering): (slave ip6gretap2): Releasing backup interface [ 758.995019][ T50] dvmrp6 (unregistering): left allmulticast mode [ 759.219018][ T5831] Bluetooth: hci4: command tx timeout [ 759.501199][ T50] bond20 (unregistering): (slave bridge9): Releasing active interface [ 759.764085][ T50] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.775935][ T50] ` (unregistering): Released all slaves [ 759.795284][ T50] bond1 (unregistering): (slave veth3): Releasing backup interface [ 759.806074][ T50] bond1 (unregistering): Released all slaves [ 759.930337][ T50] bond0 (unregistering): left promiscuous mode [ 759.937567][ T50] bond0 (unregistering): Released all slaves [ 760.060991][ T50] bond2 (unregistering): (slave veth7): Releasing backup interface [ 760.070094][ T50] bond2 (unregistering): Released all slaves [ 760.085129][ T50] bond3 (unregistering): (slave veth9): Releasing backup interface [ 760.094727][ T50] bond3 (unregistering): Released all slaves [ 760.110824][ T50] bond4 (unregistering): (slave veth11): Releasing backup interface [ 760.119700][ T50] bond4 (unregistering): Released all slaves [ 760.255127][ T50] bond5 (unregistering): Released all slaves [ 760.275512][ T50] bond6 (unregistering): (slave veth13): Releasing backup interface [ 760.285868][ T50] bond6 (unregistering): Released all slaves [ 760.409446][ T50] bond7 (unregistering): (slave veth15): Releasing backup interface [ 760.418890][ T50] bond7 (unregistering): Released all slaves [ 760.540573][ T50] bond8 (unregistering): Released all slaves [ 760.659249][ T50] bond9 (unregistering): Released all slaves [ 760.672702][ T50] bond10 (unregistering): Released all slaves [ 760.685818][ T50] bond11 (unregistering): Released all slaves [ 760.701121][ T50] bond12 (unregistering): Released all slaves [ 760.829367][ T50] bond13 (unregistering): Released all slaves [ 760.947806][ T50] bond14 (unregistering): Released all slaves [ 760.961215][ T50] bond15 (unregistering): Released all slaves [ 761.084096][ T50] bond16 (unregistering): Released all slaves [ 761.098603][ T50] bond17 (unregistering): Released all slaves [ 761.219270][ T50] bond18 (unregistering): Released all slaves [ 761.310871][ T5831] Bluetooth: hci4: command tx timeout [ 761.345004][ T50] bond19 (unregistering): (slave veth23): Releasing active interface [ 761.356379][ T50] bond19 (unregistering): (slave veth0_to_bond): Releasing active interface [ 761.367681][ T50] bond19 (unregistering): Released all slaves [ 761.382143][ T50] bond20 (unregistering): Released all slaves [ 761.397186][ T50] bond21 (unregistering): Released all slaves [ 761.410573][ T50] bond22 (unregistering): Released all slaves [ 761.424762][T29031] wlan0 speed is unknown, defaulting to 1000 [ 761.702641][T29107] __nla_validate_parse: 5 callbacks suppressed [ 761.702663][T29107] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7845'. [ 761.811375][ T50] tipc: Disabling bearer [ 761.822662][ T50] tipc: Disabling bearer [ 761.869148][ T50] tipc: Left network mode [ 762.015007][T29121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7848'. [ 762.417899][T29136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7851'. [ 762.474513][T29136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7851'. [ 762.485630][T29136] netlink: 'syz.1.7851': attribute type 14 has an invalid length. [ 762.496366][T29031] chnl_net:caif_netlink_parms(): no params data found [ 762.853680][T29157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7858'. [ 763.055436][T29166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7860'. [ 763.065927][T29166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7860'. [ 763.105955][T29161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7860'. [ 763.142201][T29031] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.166746][T29031] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.181372][T29031] bridge_slave_0: entered allmulticast mode [ 763.196645][T29031] bridge_slave_0: entered promiscuous mode [ 763.214778][T29031] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.233139][T29031] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.246708][T29031] bridge_slave_1: entered allmulticast mode [ 763.266083][T29031] bridge_slave_1: entered promiscuous mode [ 763.376723][ T5831] Bluetooth: hci4: command tx timeout [ 763.584243][T29031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.672630][T29031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.927831][T29031] team0: Port device team_slave_0 added [ 763.955958][T29190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7871'. [ 763.959513][T29031] team0: Port device team_slave_1 added [ 764.042393][T29192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7873'. [ 764.057820][T29192] netlink: 'syz.3.7873': attribute type 14 has an invalid length. [ 764.188428][T29194] vlan2: entered allmulticast mode [ 764.194506][T29194] hsr0: entered allmulticast mode [ 764.206823][T29194] hsr_slave_0: entered allmulticast mode [ 764.229339][T29194] hsr_slave_1: entered allmulticast mode [ 764.347533][T29031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.354921][T29031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.385315][T29031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.413935][ T50] batadv0: left promiscuous mode [ 764.430882][ T50] hsr_slave_0: left promiscuous mode [ 764.448890][ T50] hsr_slave_1: left promiscuous mode [ 764.462508][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 764.485194][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.507942][ T50] batman_adv: batadv0: Removing interface: macsec1 [ 764.823908][ T50] pimreg (unregistering): left allmulticast mode [ 765.154713][T29222] unsupported nla_type 52263 [ 765.459101][ T5831] Bluetooth: hci4: command tx timeout [ 765.468240][T29031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.475234][T29031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.504819][T29031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.578644][T29219] netlink: 'syz.0.7881': attribute type 4 has an invalid length. [ 765.744791][T29031] hsr_slave_0: entered promiscuous mode [ 765.761288][T29031] hsr_slave_1: entered promiscuous mode [ 765.770753][T29031] debugfs: 'hsr0' already exists in 'hsr' [ 765.776661][T29031] Cannot create hsr debugfs directory [ 766.168749][T29251] FAULT_INJECTION: forcing a failure. [ 766.168749][T29251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.234655][ T50] IPVS: stop unused estimator thread 0... [ 766.238899][T29251] CPU: 1 UID: 0 PID: 29251 Comm: syz.1.7893 Not tainted syzkaller #0 PREEMPT(full) [ 766.238925][T29251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 766.238935][T29251] Call Trace: [ 766.238943][T29251] [ 766.238951][T29251] dump_stack_lvl+0x189/0x250 [ 766.238980][T29251] ? __pfx____ratelimit+0x10/0x10 [ 766.239003][T29251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 766.239025][T29251] ? __pfx__printk+0x10/0x10 [ 766.239044][T29251] ? __might_fault+0xb0/0x130 [ 766.239079][T29251] should_fail_ex+0x414/0x560 [ 766.239109][T29251] _copy_from_user+0x2d/0xb0 [ 766.239140][T29251] ___sys_sendmsg+0x158/0x2a0 [ 766.239179][T29251] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.239235][T29251] ? __fget_files+0x2a/0x420 [ 766.239252][T29251] ? __fget_files+0x3a0/0x420 [ 766.239279][T29251] __x64_sys_sendmsg+0x19b/0x260 [ 766.239302][T29251] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 766.239331][T29251] ? __pfx_ksys_write+0x10/0x10 [ 766.239358][T29251] ? do_syscall_64+0xbe/0xfa0 [ 766.239385][T29251] do_syscall_64+0xfa/0xfa0 [ 766.239407][T29251] ? lockdep_hardirqs_on+0x9c/0x150 [ 766.239430][T29251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.239448][T29251] ? clear_bhb_loop+0x60/0xb0 [ 766.239469][T29251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.239486][T29251] RIP: 0033:0x7efdd3d8f6c9 [ 766.239502][T29251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.239517][T29251] RSP: 002b:00007efdd1ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.239543][T29251] RAX: ffffffffffffffda RBX: 00007efdd3fe5fa0 RCX: 00007efdd3d8f6c9 [ 766.239557][T29251] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 766.239568][T29251] RBP: 00007efdd1ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 766.239580][T29251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.239591][T29251] R13: 00007efdd3fe6038 R14: 00007efdd3fe5fa0 R15: 00007fff52026748 [ 766.239623][T29251] [ 766.640723][T29266] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 766.731456][T29273] __nla_validate_parse: 2 callbacks suppressed [ 766.731479][T29273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7902'. [ 767.151835][T29290] netlink: 'syz.1.7908': attribute type 10 has an invalid length. [ 767.183842][T29290] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.191756][T29290] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.212218][T29290] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.219531][T29290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.228143][T29290] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.235398][T29290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.252485][T29290] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 767.273895][T29298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7909'. [ 767.415950][T29031] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 767.449829][T29031] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 767.483096][T29031] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 767.517471][T29031] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 767.696108][T29031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.750262][T29031] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.770546][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.777830][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.818860][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.826130][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.234396][T29344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7922'. [ 768.266279][T29344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7922'. [ 768.320907][T29344] netlink: 'syz.0.7922': attribute type 14 has an invalid length. [ 768.343422][T29031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.524304][T29031] veth0_vlan: entered promiscuous mode [ 768.558172][T29356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7927'. [ 768.574643][T29031] veth1_vlan: entered promiscuous mode [ 768.608382][T29357] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 768.634672][T29356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7927'. [ 768.638270][T29031] veth0_macvtap: entered promiscuous mode [ 768.664444][T29031] veth1_macvtap: entered promiscuous mode [ 768.694353][T29363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7929'. [ 768.712609][T29356] vlan4: entered allmulticast mode [ 768.720045][T29363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7929'. [ 768.731874][T29356] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 768.784474][T29363] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 768.805519][T29363] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 768.861152][T29371] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7932'. [ 768.898363][T29031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.944564][T29031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.980651][T29374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7934'. [ 768.990183][T15154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.038273][T15154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.048647][T15154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.074305][T15154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.174492][T29381] netlink: 'syz.4.7937': attribute type 11 has an invalid length. [ 769.391425][T29388] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 769.414448][T19399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.422544][T19399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.516156][T15146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.537020][T15146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.641946][T29399] bridge_slave_1: left allmulticast mode [ 769.667816][T29399] bridge_slave_1: left promiscuous mode [ 769.673744][T29399] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.749000][T29399] bridge_slave_0: left allmulticast mode [ 769.754724][T29399] bridge_slave_0: left promiscuous mode [ 769.773540][T29399] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.646818][T29439] netlink: 'syz.2.7957': attribute type 30 has an invalid length. [ 770.655767][T29439] netlink: 'syz.2.7957': attribute type 30 has an invalid length. [ 770.735312][T21156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 770.771859][T21156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 770.773021][T29447] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 770.789528][T21156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 770.820548][T21156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 770.834804][T21156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 770.934183][T29447] sit1: entered promiscuous mode [ 770.939467][T29447] sit1: entered allmulticast mode [ 771.088841][T29462] bond0: entered promiscuous mode [ 771.093960][T29462] bond_slave_0: entered promiscuous mode [ 771.104776][T29462] bond_slave_1: entered promiscuous mode [ 771.173314][T29464] netlink: 'syz.1.7967': attribute type 1 has an invalid length. [ 771.469369][T29477] netlink: 'syz.3.7971': attribute type 30 has an invalid length. [ 771.497341][T29477] netlink: 'syz.3.7971': attribute type 30 has an invalid length. [ 771.795230][T29489] __nla_validate_parse: 19 callbacks suppressed [ 771.795255][T29489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7976'. [ 772.315185][T29510] FAULT_INJECTION: forcing a failure. [ 772.315185][T29510] name failslab, interval 1, probability 0, space 0, times 0 [ 772.361349][T29510] CPU: 0 UID: 0 PID: 29510 Comm: syz.0.7986 Not tainted syzkaller #0 PREEMPT(full) [ 772.361379][T29510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 772.361391][T29510] Call Trace: [ 772.361400][T29510] [ 772.361410][T29510] dump_stack_lvl+0x189/0x250 [ 772.361442][T29510] ? __pfx____ratelimit+0x10/0x10 [ 772.361468][T29510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 772.361495][T29510] ? __pfx__printk+0x10/0x10 [ 772.361522][T29510] ? __lock_acquire+0xab9/0xd20 [ 772.361551][T29510] should_fail_ex+0x414/0x560 [ 772.361587][T29510] should_failslab+0xa8/0x100 [ 772.361610][T29510] kmem_cache_alloc_noprof+0x74/0x6e0 [ 772.361639][T29510] ? skb_clone+0x212/0x3a0 [ 772.361667][T29510] skb_clone+0x212/0x3a0 [ 772.361694][T29510] __netlink_deliver_tap+0x404/0x850 [ 772.361730][T29510] ? netlink_deliver_tap+0x2e/0x1b0 [ 772.361752][T29510] netlink_deliver_tap+0x19c/0x1b0 [ 772.361774][T29510] netlink_unicast+0x7fa/0x9e0 [ 772.361813][T29510] ? __pfx_netlink_unicast+0x10/0x10 [ 772.361852][T29510] ? netlink_sendmsg+0x642/0xb30 [ 772.361870][T29510] ? skb_put+0x11b/0x210 [ 772.361894][T29510] netlink_sendmsg+0x805/0xb30 [ 772.361927][T29510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 772.361951][T29510] ? aa_sock_msg_perm+0xf1/0x1d0 [ 772.361979][T29510] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 772.361999][T29510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 772.362020][T29510] __sock_sendmsg+0x21c/0x270 [ 772.362049][T29510] ____sys_sendmsg+0x505/0x830 [ 772.362077][T29510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 772.362111][T29510] ? import_iovec+0x74/0xa0 [ 772.362141][T29510] ___sys_sendmsg+0x21f/0x2a0 [ 772.362167][T29510] ? __pfx____sys_sendmsg+0x10/0x10 [ 772.362232][T29510] ? __fget_files+0x2a/0x420 [ 772.362251][T29510] ? __fget_files+0x3a0/0x420 [ 772.362283][T29510] __x64_sys_sendmsg+0x19b/0x260 [ 772.362308][T29510] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 772.362342][T29510] ? __pfx_ksys_write+0x10/0x10 [ 772.362375][T29510] ? do_syscall_64+0xbe/0xfa0 [ 772.362407][T29510] do_syscall_64+0xfa/0xfa0 [ 772.362431][T29510] ? lockdep_hardirqs_on+0x9c/0x150 [ 772.362458][T29510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.362478][T29510] ? clear_bhb_loop+0x60/0xb0 [ 772.362503][T29510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.362522][T29510] RIP: 0033:0x7f9c8738f6c9 [ 772.362540][T29510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.362558][T29510] RSP: 002b:00007f9c8816c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.362580][T29510] RAX: ffffffffffffffda RBX: 00007f9c875e5fa0 RCX: 00007f9c8738f6c9 [ 772.362594][T29510] RDX: 0000000000040000 RSI: 0000200000000440 RDI: 0000000000000004 [ 772.362607][T29510] RBP: 00007f9c8816c090 R08: 0000000000000000 R09: 0000000000000000 [ 772.362620][T29510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.362632][T29510] R13: 00007f9c875e6038 R14: 00007f9c875e5fa0 R15: 00007fff8dfaef38 [ 772.362668][T29510] [ 772.362850][T29510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7986'. [ 772.588007][T29445] chnl_net:caif_netlink_parms(): no params data found [ 772.770827][T29526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7990'. [ 772.839527][T29526] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.885285][T29524] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 772.897380][ T5831] Bluetooth: hci5: command tx timeout [ 772.919937][T29531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7988'. [ 772.943007][T29526] bridge_slave_1 (unregistering): left allmulticast mode [ 772.961620][T29526] bridge_slave_1 (unregistering): left promiscuous mode [ 772.969900][T29526] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.205461][T29445] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.223417][T29445] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.240623][T29445] bridge_slave_0: entered allmulticast mode [ 773.259508][T29445] bridge_slave_0: entered promiscuous mode [ 773.276716][T29445] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.284887][T29445] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.292834][T29445] bridge_slave_1: entered allmulticast mode [ 773.302347][T29543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7995'. [ 773.358186][T29445] bridge_slave_1: entered promiscuous mode [ 773.469885][T29445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.505085][T29445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.699465][T29445] team0: Port device team_slave_0 added [ 773.717910][T29445] team0: Port device team_slave_1 added [ 773.819997][T29571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8003'. [ 773.915109][T29445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.933469][T29445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.952677][T29575] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8006'. [ 773.992169][T29445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.006209][T29579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8008'. [ 774.036922][T29445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.046766][T29445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.057128][T29579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8008'. [ 774.106756][T29445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.111439][T29579] netlink: 'syz.0.8008': attribute type 14 has an invalid length. [ 774.140266][T29578] tipc: Enabled bearer , priority 0 [ 774.156230][T29578] syzkaller0: entered promiscuous mode [ 774.225930][T29578] syzkaller0: entered allmulticast mode [ 774.329108][T29576] tipc: Resetting bearer [ 774.356844][T29576] tipc: Disabling bearer [ 774.370207][T29591] batadv_slave_0: entered promiscuous mode [ 774.395763][T29445] hsr_slave_0: entered promiscuous mode [ 774.408118][T29445] hsr_slave_1: entered promiscuous mode [ 774.425219][T29445] debugfs: 'hsr0' already exists in 'hsr' [ 774.444546][T29445] Cannot create hsr debugfs directory [ 774.464938][T29591] batadv_slave_0: left promiscuous mode [ 774.728566][T29610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8019'. [ 774.852428][T29445] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 774.978224][ T5831] Bluetooth: hci5: command tx timeout [ 775.067300][T29445] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 775.210671][T29445] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 775.353626][T29445] `: (slave netdevsim0): Releasing backup interface [ 775.391092][T29445] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 775.676295][T29445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 775.692354][T29445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 775.724334][T29445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 775.740592][T29445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 775.949158][T29445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.043220][T29674] smc: net device gre0 applied user defined pnetid SYZ1 [ 776.053900][T29445] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.088803][T15146] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.096053][T15146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.141866][T15146] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.149171][T15146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.294447][T29681] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 776.709163][T29445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 776.992441][T29717] __nla_validate_parse: 10 callbacks suppressed [ 776.992462][T29717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8056'. [ 777.057958][ T5831] Bluetooth: hci5: command tx timeout [ 777.238072][T29445] veth0_vlan: entered promiscuous mode [ 777.263144][T29445] veth1_vlan: entered promiscuous mode [ 777.362486][T29445] veth0_macvtap: entered promiscuous mode [ 777.394391][T29445] veth1_macvtap: entered promiscuous mode [ 777.439745][T29732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8062'. [ 777.474419][T29445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.510900][T29445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.866206][ T1156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.889591][ T1156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.940376][ T1156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.974922][ T1156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.029554][T29751] IPVS: Scheduler module ip_vs_ not found [ 778.193841][T19399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.224621][T19399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.312744][T15154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.332795][T15154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.502482][T29769] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8073'. [ 778.646309][T29774] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8075'. [ 778.657694][T29778] FAULT_INJECTION: forcing a failure. [ 778.657694][T29778] name failslab, interval 1, probability 0, space 0, times 0 [ 778.688521][T29778] CPU: 0 UID: 0 PID: 29778 Comm: syz.4.7950 Not tainted syzkaller #0 PREEMPT(full) [ 778.688548][T29778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 778.688558][T29778] Call Trace: [ 778.688565][T29778] [ 778.688573][T29778] dump_stack_lvl+0x189/0x250 [ 778.688599][T29778] ? __pfx____ratelimit+0x10/0x10 [ 778.688621][T29778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 778.688641][T29778] ? __pfx__printk+0x10/0x10 [ 778.688662][T29778] ? __lock_acquire+0xab9/0xd20 [ 778.688684][T29778] should_fail_ex+0x414/0x560 [ 778.688711][T29778] should_failslab+0xa8/0x100 [ 778.688729][T29778] kmem_cache_alloc_noprof+0x74/0x6e0 [ 778.688750][T29778] ? skb_clone+0x212/0x3a0 [ 778.688781][T29778] skb_clone+0x212/0x3a0 [ 778.688802][T29778] __netlink_deliver_tap+0x404/0x850 [ 778.688829][T29778] ? netlink_deliver_tap+0x2e/0x1b0 [ 778.688845][T29778] netlink_deliver_tap+0x19c/0x1b0 [ 778.688861][T29778] netlink_unicast+0x7fa/0x9e0 [ 778.688891][T29778] ? __pfx_netlink_unicast+0x10/0x10 [ 778.688914][T29778] ? netlink_sendmsg+0x642/0xb30 [ 778.688927][T29778] ? skb_put+0x11b/0x210 [ 778.688945][T29778] netlink_sendmsg+0x805/0xb30 [ 778.688968][T29778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.688986][T29778] ? aa_sock_msg_perm+0xf1/0x1d0 [ 778.689011][T29778] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 778.689027][T29778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.689043][T29778] __sock_sendmsg+0x21c/0x270 [ 778.689066][T29778] ____sys_sendmsg+0x505/0x830 [ 778.689089][T29778] ? __pfx_____sys_sendmsg+0x10/0x10 [ 778.689114][T29778] ? import_iovec+0x74/0xa0 [ 778.689137][T29778] ___sys_sendmsg+0x21f/0x2a0 [ 778.689156][T29778] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.689206][T29778] ? __fget_files+0x2a/0x420 [ 778.689220][T29778] ? __fget_files+0x3a0/0x420 [ 778.689244][T29778] __x64_sys_sendmsg+0x19b/0x260 [ 778.689263][T29778] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 778.689288][T29778] ? __pfx_ksys_write+0x10/0x10 [ 778.689313][T29778] ? do_syscall_64+0xbe/0xfa0 [ 778.689337][T29778] do_syscall_64+0xfa/0xfa0 [ 778.689355][T29778] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.689376][T29778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.689391][T29778] ? clear_bhb_loop+0x60/0xb0 [ 778.689410][T29778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.689424][T29778] RIP: 0033:0x7f245c58f6c9 [ 778.689439][T29778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.689452][T29778] RSP: 002b:00007f245d4c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.689470][T29778] RAX: ffffffffffffffda RBX: 00007f245c7e5fa0 RCX: 00007f245c58f6c9 [ 778.689481][T29778] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 778.689492][T29778] RBP: 00007f245d4c4090 R08: 0000000000000000 R09: 0000000000000000 [ 778.689501][T29778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.689510][T29778] R13: 00007f245c7e6038 R14: 00007f245c7e5fa0 R15: 00007ffd6e401d48 [ 778.689538][T29778] [ 778.689645][T29778] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7950'. [ 779.078888][T29786] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 779.137321][ T5831] Bluetooth: hci5: command tx timeout [ 779.512704][T29800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8086'. [ 779.662903][T29804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8087'. [ 779.694393][T21156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 779.698673][T29800] bond1: option xmit_hash_policy: invalid value (64) [ 779.704429][T21156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 779.719355][T21156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 779.728158][T21156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 779.736229][T21156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 779.748998][T29800] bond1 (unregistering): Released all slaves [ 780.090659][T15149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.104323][T15149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.225099][T15149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.240371][T15149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.340277][T15149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.366661][T15149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.424309][T29833] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8096'. [ 780.458881][T29833] team0: Port device veth0_to_bond added [ 780.550148][T15149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.597765][T15149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.725161][T29845] tls_set_device_offload_rx: netdev not found [ 780.733102][T29837] bond1: option all_slaves_active: invalid value (222) [ 780.746369][T29837] bond1 (unregistering): Released all slaves [ 781.455298][T15149] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 781.786095][T21156] Bluetooth: hci1: command tx timeout [ 781.809788][T15149] dvmrp0 (unregistering): left allmulticast mode [ 781.851029][T15149] dvmrp6 (unregistering): left allmulticast mode [ 782.260347][T15149] bond20 (unregistering): (slave macvlan4): Releasing backup interface [ 782.274247][T15149] bond0 (unregistering): Released all slaves [ 782.402959][T15149] bond1 (unregistering): (slave veth3): Releasing backup interface [ 782.412708][T15149] bond1 (unregistering): Released all slaves [ 782.429183][T15149] bond2 (unregistering): (slave veth5): Releasing backup interface [ 782.440561][T15149] bond2 (unregistering): Released all slaves [ 782.454892][T15149] bond3 (unregistering): (slave veth7): Releasing backup interface [ 782.464547][T15149] bond3 (unregistering): Released all slaves [ 782.480991][T15149] bond4 (unregistering): Released all slaves [ 782.601351][T15149] bond5 (unregistering): Released all slaves [ 782.614890][T15149] bond6 (unregistering): Released all slaves [ 782.631008][T15149] bond7 (unregistering): Released all slaves [ 782.645749][T15149] bond8 (unregistering): Released all slaves [ 782.781106][T15149] bond9 (unregistering): Released all slaves [ 782.794176][T15149] bond10 (unregistering): Released all slaves [ 782.915967][T15149] bond11 (unregistering): Released all slaves [ 783.039667][T15149] bond12 (unregistering): Released all slaves [ 783.053745][T15149] bond13 (unregistering): Released all slaves [ 783.171629][T15149] bond14 (unregistering): (slave veth19): Releasing backup interface [ 783.181499][T15149] bond14 (unregistering): Released all slaves [ 783.195576][T15149] bond15 (unregistering): Released all slaves [ 783.328643][T15149] bond16 (unregistering): Released all slaves [ 783.450586][T15149] bond17 (unregistering): Released all slaves [ 783.577022][T15149] bond18 (unregistering): Released all slaves [ 783.694782][T15149] bond19 (unregistering): Released all slaves [ 783.814740][T15149] bond20 (unregistering): Released all slaves [ 783.828762][T15149] bond21 (unregistering): Released all slaves [ 783.842285][T15149] bond22 (unregistering): Released all slaves [ 783.856785][T21156] Bluetooth: hci1: command tx timeout [ 784.206914][T15149] : left promiscuous mode [ 784.369872][T29887] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8112'. [ 784.414693][T29887] netlink: 'syz.4.8112': attribute type 1 has an invalid length. [ 784.515455][T15149] tipc: Disabling bearer [ 784.524944][T15149] tipc: Left network mode [ 784.585274][T29899] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 784.764066][T29806] chnl_net:caif_netlink_parms(): no params data found [ 785.056266][T29904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8117'. [ 785.334222][T29925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8126'. [ 785.624111][T29935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8130'. [ 785.637593][T29935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8130'. [ 785.648533][T29935] netlink: 'syz.0.8130': attribute type 14 has an invalid length. [ 785.696198][T29806] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.718496][T29932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8128'. [ 785.727606][T29806] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.734936][T29806] bridge_slave_0: entered allmulticast mode [ 785.748034][T29932] netlink: 'syz.4.8128': attribute type 22 has an invalid length. [ 785.788584][T29932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8128'. [ 785.870433][T29806] bridge_slave_0: entered promiscuous mode [ 785.939212][T21156] Bluetooth: hci1: command tx timeout [ 785.943554][T29932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8128'. [ 785.944857][T19399] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.954458][T29932] netlink: 'syz.4.8128': attribute type 22 has an invalid length. [ 785.988483][T29806] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.995880][T29806] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.005667][T29806] bridge_slave_1: entered allmulticast mode [ 786.015257][T29806] bridge_slave_1: entered promiscuous mode [ 786.050891][T29932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8128'. [ 786.099024][T15149] hsr_slave_0: left promiscuous mode [ 786.123384][T15149] veth0_macvtap: left promiscuous mode [ 786.141233][T15149] veth1_vlan: left promiscuous mode [ 786.147179][T15149] veth0_vlan: left promiscuous mode [ 786.476611][T15149] pimreg (unregistering): left allmulticast mode [ 786.630022][T15149] vlan1 (unregistering): left allmulticast mode [ 786.636848][T15149] veth0_vlan (unregistering): left allmulticast mode [ 787.175443][T19399] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.184631][T19399] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.213741][T29806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.279805][T29950] batadv1: entered allmulticast mode [ 787.356169][T19399] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.368463][T29806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.550622][T29806] team0: Port device team_slave_0 added [ 787.575490][T29806] team0: Port device team_slave_1 added [ 787.603774][T29963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8141'. [ 787.646063][T29965] netlink: 'syz.1.8142': attribute type 14 has an invalid length. [ 787.728958][T29806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.735985][T29806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.846660][T29806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.860979][T29806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.869858][T29806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.897257][T29806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.965915][T29976] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.017242][T21156] Bluetooth: hci1: command tx timeout [ 788.131730][T29976] bridge_slave_1 (unregistering): left allmulticast mode [ 788.149926][T29976] bridge_slave_1 (unregistering): left promiscuous mode [ 788.167805][T29976] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.324955][T15149] IPVS: stop unused estimator thread 0... [ 788.440027][T29806] hsr_slave_0: entered promiscuous mode [ 788.460373][T29806] hsr_slave_1: entered promiscuous mode [ 788.473970][T29806] debugfs: 'hsr0' already exists in 'hsr' [ 788.486686][T29806] Cannot create hsr debugfs directory [ 788.495221][T29997] netlink: 'syz.0.8153': attribute type 4 has an invalid length. [ 789.122995][T30022] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.188235][T30022] bridge_slave_1 (unregistering): left allmulticast mode [ 789.202651][T30022] bridge_slave_1 (unregistering): left promiscuous mode [ 789.215637][T30022] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.441057][T30028] __nla_validate_parse: 5 callbacks suppressed [ 789.441078][T30028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8161'. [ 789.757068][T30035] netlink: 'syz.1.8166': attribute type 11 has an invalid length. [ 789.870979][T29806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 789.944024][T29806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 789.973569][T29806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 790.004136][T29806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 790.086054][T30046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8170'. [ 790.341113][T29806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.589267][T30066] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8177'. [ 790.603957][T29806] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.636331][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.643622][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.687073][T30066] netlink: 'syz.0.8177': attribute type 12 has an invalid length. [ 790.738927][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.746177][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.854717][T30076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8179'. [ 790.864122][T30064] netlink: 'syz.4.8176': attribute type 4 has an invalid length. [ 791.226712][T30090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8183'. [ 791.417581][T30096] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 791.436118][T30096] bond1 (unregistering): Released all slaves [ 791.515294][T30106] netlink: 'syz.0.8189': attribute type 3 has an invalid length. [ 791.563857][T30102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8187'. [ 791.597099][T30102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8187'. [ 791.651660][T30111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8190'. [ 791.769700][T29806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.928417][T29806] veth0_vlan: entered promiscuous mode [ 791.978314][T29806] veth1_vlan: entered promiscuous mode [ 792.082293][T29806] veth0_macvtap: entered promiscuous mode [ 792.138731][T29806] veth1_macvtap: entered promiscuous mode [ 792.275095][T29806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.332982][T29806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.373602][T15146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.383962][T15146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.404880][T30137] netlink: 'syz.0.8198': attribute type 11 has an invalid length. [ 792.405202][T15146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.597064][T15146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.828332][T30152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8204'. [ 792.879002][T30144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.892791][T30144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.020627][T30153] tipc: Started in network mode [ 793.032702][T30153] tipc: Node identity fa9c8db7e928, cluster identity 4711 [ 793.046728][T30153] tipc: Enabled bearer , priority 0 [ 793.066231][T19399] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.095428][T19399] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.110193][T19399] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.174345][T19399] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.199604][T30153] tipc: Disabling bearer [ 793.306546][T30160] netlink: 'syz.0.8207': attribute type 1 has an invalid length. [ 793.357025][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.373165][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.401878][T30165] netlink: 356 bytes leftover after parsing attributes in process `syz.0.8207'. [ 793.431137][T19399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.440059][T19399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.631890][T30171] FAULT_INJECTION: forcing a failure. [ 793.631890][T30171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.667970][T30171] CPU: 0 UID: 0 PID: 30171 Comm: syz.0.8212 Not tainted syzkaller #0 PREEMPT(full) [ 793.668000][T30171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 793.668012][T30171] Call Trace: [ 793.668020][T30171] [ 793.668030][T30171] dump_stack_lvl+0x189/0x250 [ 793.668063][T30171] ? __pfx____ratelimit+0x10/0x10 [ 793.668090][T30171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 793.668116][T30171] ? __pfx__printk+0x10/0x10 [ 793.668137][T30171] ? __might_fault+0xb0/0x130 [ 793.668177][T30171] should_fail_ex+0x414/0x560 [ 793.668209][T30171] _copy_from_user+0x2d/0xb0 [ 793.668235][T30171] ___sys_sendmsg+0x158/0x2a0 [ 793.668261][T30171] ? __pfx____sys_sendmsg+0x10/0x10 [ 793.668324][T30171] ? __fget_files+0x2a/0x420 [ 793.668342][T30171] ? __fget_files+0x3a0/0x420 [ 793.668373][T30171] __x64_sys_sendmsg+0x19b/0x260 [ 793.668399][T30171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 793.668432][T30171] ? __pfx_ksys_write+0x10/0x10 [ 793.668464][T30171] ? do_syscall_64+0xbe/0xfa0 [ 793.668497][T30171] do_syscall_64+0xfa/0xfa0 [ 793.668522][T30171] ? lockdep_hardirqs_on+0x9c/0x150 [ 793.668549][T30171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.668568][T30171] ? clear_bhb_loop+0x60/0xb0 [ 793.668594][T30171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.668611][T30171] RIP: 0033:0x7f9c8738f6c9 [ 793.668631][T30171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.668647][T30171] RSP: 002b:00007f9c8816c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 793.668670][T30171] RAX: ffffffffffffffda RBX: 00007f9c875e5fa0 RCX: 00007f9c8738f6c9 [ 793.668684][T30171] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 793.668697][T30171] RBP: 00007f9c8816c090 R08: 0000000000000000 R09: 0000000000000000 [ 793.668709][T30171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.668721][T30171] R13: 00007f9c875e6038 R14: 00007f9c875e5fa0 R15: 00007fff8dfaef38 [ 793.668756][T30171] [ 794.145542][T30185] FAULT_INJECTION: forcing a failure. [ 794.145542][T30185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.196615][T30185] CPU: 1 UID: 0 PID: 30185 Comm: syz.0.8217 Not tainted syzkaller #0 PREEMPT(full) [ 794.196646][T30185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.196658][T30185] Call Trace: [ 794.196666][T30185] [ 794.196675][T30185] dump_stack_lvl+0x189/0x250 [ 794.196706][T30185] ? __pfx____ratelimit+0x10/0x10 [ 794.196732][T30185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.196757][T30185] ? __pfx__printk+0x10/0x10 [ 794.196779][T30185] ? __might_fault+0xb0/0x130 [ 794.196817][T30185] should_fail_ex+0x414/0x560 [ 794.196851][T30185] _copy_from_iter+0x1de/0x1790 [ 794.196881][T30185] ? rcu_is_watching+0x15/0xb0 [ 794.196909][T30185] ? kmalloc_reserve+0xbd/0x290 [ 794.196929][T30185] ? __pfx__copy_from_iter+0x10/0x10 [ 794.196954][T30185] ? __build_skb_around+0x262/0x3f0 [ 794.196989][T30185] ? netlink_sendmsg+0x642/0xb30 [ 794.197007][T30185] ? skb_put+0x11b/0x210 [ 794.197031][T30185] netlink_sendmsg+0x6b2/0xb30 [ 794.197063][T30185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.197087][T30185] ? aa_sock_msg_perm+0xf1/0x1d0 [ 794.197119][T30185] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 794.197139][T30185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.197160][T30185] __sock_sendmsg+0x21c/0x270 [ 794.197191][T30185] ____sys_sendmsg+0x505/0x830 [ 794.197220][T30185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.197253][T30185] ? import_iovec+0x74/0xa0 [ 794.197283][T30185] ___sys_sendmsg+0x21f/0x2a0 [ 794.197308][T30185] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.197372][T30185] ? __fget_files+0x2a/0x420 [ 794.197390][T30185] ? __fget_files+0x3a0/0x420 [ 794.197421][T30185] __x64_sys_sendmsg+0x19b/0x260 [ 794.197447][T30185] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 794.197480][T30185] ? __pfx_ksys_write+0x10/0x10 [ 794.197513][T30185] ? do_syscall_64+0xbe/0xfa0 [ 794.197544][T30185] do_syscall_64+0xfa/0xfa0 [ 794.197568][T30185] ? lockdep_hardirqs_on+0x9c/0x150 [ 794.197603][T30185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.197623][T30185] ? clear_bhb_loop+0x60/0xb0 [ 794.197653][T30185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.197672][T30185] RIP: 0033:0x7f9c8738f6c9 [ 794.197690][T30185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.197706][T30185] RSP: 002b:00007f9c8816c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.197729][T30185] RAX: ffffffffffffffda RBX: 00007f9c875e5fa0 RCX: 00007f9c8738f6c9 [ 794.197743][T30185] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 794.197756][T30185] RBP: 00007f9c8816c090 R08: 0000000000000000 R09: 0000000000000000 [ 794.197768][T30185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.197780][T30185] R13: 00007f9c875e6038 R14: 00007f9c875e5fa0 R15: 00007fff8dfaef38 [ 794.197816][T30185] [ 794.869727][T30193] __nla_validate_parse: 2 callbacks suppressed [ 794.869749][T30193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8221'. [ 795.003155][T30202] FAULT_INJECTION: forcing a failure. [ 795.003155][T30202] name failslab, interval 1, probability 0, space 0, times 0 [ 795.031810][T30202] CPU: 0 UID: 0 PID: 30202 Comm: syz.0.8225 Not tainted syzkaller #0 PREEMPT(full) [ 795.031840][T30202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.031853][T30202] Call Trace: [ 795.031861][T30202] [ 795.031871][T30202] dump_stack_lvl+0x189/0x250 [ 795.031903][T30202] ? __pfx____ratelimit+0x10/0x10 [ 795.031929][T30202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 795.031955][T30202] ? __pfx__printk+0x10/0x10 [ 795.031983][T30202] ? __pfx___might_resched+0x10/0x10 [ 795.032003][T30202] ? fs_reclaim_acquire+0x7d/0x100 [ 795.032027][T30202] should_fail_ex+0x414/0x560 [ 795.032062][T30202] should_failslab+0xa8/0x100 [ 795.032085][T30202] kmem_cache_alloc_node_noprof+0x77/0x710 [ 795.032113][T30202] ? __alloc_skb+0x112/0x2d0 [ 795.032130][T30202] ? netlink_autobind+0xdb/0x300 [ 795.032156][T30202] __alloc_skb+0x112/0x2d0 [ 795.032180][T30202] netlink_sendmsg+0x5c6/0xb30 [ 795.032211][T30202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.032235][T30202] ? aa_sock_msg_perm+0xf1/0x1d0 [ 795.032265][T30202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 795.032285][T30202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.032306][T30202] __sock_sendmsg+0x21c/0x270 [ 795.032336][T30202] ____sys_sendmsg+0x505/0x830 [ 795.032365][T30202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 795.032397][T30202] ? import_iovec+0x74/0xa0 [ 795.032426][T30202] ___sys_sendmsg+0x21f/0x2a0 [ 795.032451][T30202] ? __pfx____sys_sendmsg+0x10/0x10 [ 795.032520][T30202] ? __fget_files+0x2a/0x420 [ 795.032539][T30202] ? __fget_files+0x3a0/0x420 [ 795.032571][T30202] __x64_sys_sendmsg+0x19b/0x260 [ 795.032596][T30202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 795.032630][T30202] ? __pfx_ksys_write+0x10/0x10 [ 795.032662][T30202] ? do_syscall_64+0xbe/0xfa0 [ 795.032694][T30202] do_syscall_64+0xfa/0xfa0 [ 795.032719][T30202] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.032753][T30202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.032772][T30202] ? clear_bhb_loop+0x60/0xb0 [ 795.032796][T30202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.032815][T30202] RIP: 0033:0x7f9c8738f6c9 [ 795.032834][T30202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.032851][T30202] RSP: 002b:00007f9c8816c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.032873][T30202] RAX: ffffffffffffffda RBX: 00007f9c875e5fa0 RCX: 00007f9c8738f6c9 [ 795.032889][T30202] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 795.032903][T30202] RBP: 00007f9c8816c090 R08: 0000000000000000 R09: 0000000000000000 [ 795.032916][T30202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.032929][T30202] R13: 00007f9c875e6038 R14: 00007f9c875e5fa0 R15: 00007fff8dfaef38 [ 795.032966][T30202] [ 795.374610][T30212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8227'. [ 795.623415][T30224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8231'. [ 795.739672][T30231] xt_connbytes: Forcing CT accounting to be enabled [ 795.936254][T30245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8238'. [ 796.173714][T30256] veth0: entered promiscuous mode [ 796.181825][T30255] veth0: left promiscuous mode [ 796.340003][T30265] netlink: 'syz.0.8247': attribute type 1 has an invalid length. [ 796.348583][T30259] tipc: Started in network mode [ 796.349014][T30267] netlink: 'syz.3.8246': attribute type 3 has an invalid length. [ 796.353490][T30259] tipc: Node identity 3a81d93f0b97, cluster identity 4711 [ 796.353722][T30259] tipc: Enabled bearer , priority 0 [ 796.445547][T30259] syzkaller0: entered promiscuous mode [ 796.455396][T30259] syzkaller0: entered allmulticast mode [ 796.480638][T30265] netlink: 'syz.0.8247': attribute type 12 has an invalid length. [ 796.529221][T30265] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.8247'. [ 796.543833][T30259] tipc: Resetting bearer [ 796.565815][T30258] tipc: Resetting bearer [ 796.603010][T30258] tipc: Disabling bearer [ 796.637296][T30265] bond1: (slave gretap1): making interface the new active one [ 796.645511][T30265] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 796.683182][T30265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8247'. [ 796.748552][T30265] hsr_slave_0: left promiscuous mode [ 796.756171][T30265] hsr_slave_1: left promiscuous mode [ 797.440229][T30304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8258'. [ 797.521540][T30307] netlink: 'syz.4.8259': attribute type 21 has an invalid length. [ 797.562521][T30307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8259'. [ 797.610528][T30305] syzkaller0: entered promiscuous mode [ 797.634298][T30305] syzkaller0: entered allmulticast mode [ 797.805958][T30316] netlink: 'syz.2.8262': attribute type 5 has an invalid length. [ 797.847967][T30319] netlink: 'syz.0.8263': attribute type 3 has an invalid length. [ 798.189722][T30334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8269'. [ 798.242601][T30336] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8269'. [ 798.403953][T30345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.549726][T30352] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 798.692806][ T50] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.726927][ T50] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.745215][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.763172][T30364] netlink: 'syz.3.8282': attribute type 21 has an invalid length. [ 798.770824][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.791533][T30366] netlink: 'syz.4.8281': attribute type 29 has an invalid length. [ 798.834710][T30364] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 798.849009][T30368] netlink: 'syz.0.8280': attribute type 1 has an invalid length. [ 798.853007][T30364] bond1 (unregistering): Released all slaves [ 798.895257][T30368] netlink: 'syz.0.8280': attribute type 4 has an invalid length. [ 799.231746][T17294] IPVS: starting estimator thread 0... [ 799.328896][T30384] IPVS: using max 48 ests per chain, 115200 per kthread [ 799.888594][T30435] __nla_validate_parse: 12 callbacks suppressed [ 799.888617][T30435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8305'. [ 799.923542][T30435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8305'. [ 799.952739][T30438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8306'. [ 799.976140][T30435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8305'. [ 799.988522][T30438] FAULT_INJECTION: forcing a failure. [ 799.988522][T30438] name failslab, interval 1, probability 0, space 0, times 0 [ 800.006569][T30435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8305'. [ 800.012692][T30438] CPU: 0 UID: 0 PID: 30438 Comm: syz.1.8306 Not tainted syzkaller #0 PREEMPT(full) [ 800.012727][T30438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 800.012739][T30438] Call Trace: [ 800.012746][T30438] [ 800.012756][T30438] dump_stack_lvl+0x189/0x250 [ 800.012785][T30438] ? __pfx____ratelimit+0x10/0x10 [ 800.012809][T30438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 800.012833][T30438] ? __pfx__printk+0x10/0x10 [ 800.012848][T30438] ? netlink_sendmsg+0x805/0xb30 [ 800.012867][T30438] ? __x64_sys_sendmsg+0x19b/0x260 [ 800.012885][T30438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.012913][T30438] should_fail_ex+0x414/0x560 [ 800.012944][T30438] should_failslab+0xa8/0x100 [ 800.012965][T30438] kmem_cache_alloc_noprof+0x74/0x6e0 [ 800.012989][T30438] ? skb_clone+0x212/0x3a0 [ 800.013015][T30438] skb_clone+0x212/0x3a0 [ 800.013039][T30438] __netlink_deliver_tap+0x404/0x850 [ 800.013070][T30438] ? netlink_deliver_tap+0x2e/0x1b0 [ 800.013089][T30438] netlink_deliver_tap+0x19c/0x1b0 [ 800.013108][T30438] netlink_sendskb+0x68/0x140 [ 800.013135][T30438] netlink_unicast+0x397/0x9e0 [ 800.013157][T30438] ? __asan_memcpy+0x40/0x70 [ 800.013187][T30438] ? __pfx_netlink_unicast+0x10/0x10 [ 800.013222][T30438] netlink_rcv_skb+0x28c/0x470 [ 800.013237][T30438] ? __lock_acquire+0xab9/0xd20 [ 800.013256][T30438] ? __pfx_genl_rcv_msg+0x10/0x10 [ 800.013278][T30438] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 800.013317][T30438] ? down_read+0x1ad/0x2e0 [ 800.013337][T30438] genl_rcv+0x28/0x40 [ 800.013356][T30438] netlink_unicast+0x82f/0x9e0 [ 800.013390][T30438] ? __pfx_netlink_unicast+0x10/0x10 [ 800.013415][T30438] ? netlink_sendmsg+0x642/0xb30 [ 800.013431][T30438] ? skb_put+0x11b/0x210 [ 800.013452][T30438] netlink_sendmsg+0x805/0xb30 [ 800.013480][T30438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 800.013509][T30438] ? aa_sock_msg_perm+0xf1/0x1d0 [ 800.013536][T30438] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 800.013554][T30438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 800.013573][T30438] __sock_sendmsg+0x21c/0x270 [ 800.013600][T30438] ____sys_sendmsg+0x505/0x830 [ 800.013625][T30438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 800.013655][T30438] ? import_iovec+0x74/0xa0 [ 800.013682][T30438] ___sys_sendmsg+0x21f/0x2a0 [ 800.013705][T30438] ? __pfx____sys_sendmsg+0x10/0x10 [ 800.013764][T30438] ? __fget_files+0x2a/0x420 [ 800.013780][T30438] ? __fget_files+0x3a0/0x420 [ 800.013809][T30438] __x64_sys_sendmsg+0x19b/0x260 [ 800.013831][T30438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 800.013861][T30438] ? __pfx_ksys_write+0x10/0x10 [ 800.013890][T30438] ? do_syscall_64+0xbe/0xfa0 [ 800.013918][T30438] do_syscall_64+0xfa/0xfa0 [ 800.013940][T30438] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.013962][T30438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.013979][T30438] ? clear_bhb_loop+0x60/0xb0 [ 800.014002][T30438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.014018][T30438] RIP: 0033:0x7efdd3d8f6c9 [ 800.014036][T30438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.014051][T30438] RSP: 002b:00007efdd1ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 800.014071][T30438] RAX: ffffffffffffffda RBX: 00007efdd3fe5fa0 RCX: 00007efdd3d8f6c9 [ 800.014084][T30438] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 800.014095][T30438] RBP: 00007efdd1ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 800.014106][T30438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.014117][T30438] R13: 00007efdd3fe6038 R14: 00007efdd3fe5fa0 R15: 00007fff52026748 [ 800.014150][T30438] [ 800.069119][T30441] syzkaller0: entered promiscuous mode [ 800.069146][T30441] syzkaller0: entered allmulticast mode [ 801.153602][T30486] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 801.173769][T21156] block nbd5: Receive control failed (result -32) [ 801.224917][T30489] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8321'. [ 801.310125][T30492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8322'. [ 801.421283][T30494] syzkaller0: entered promiscuous mode [ 801.427233][T30494] syzkaller0: entered allmulticast mode [ 801.557412][T30506] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8328'. [ 801.591685][T30508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8329'. [ 801.604441][T30506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8328'. [ 801.670552][T30511] Bluetooth: MGMT ver 1.23 [ 802.689481][T30561] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.697439][T30561] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.862308][T30561] bridge_slave_0: left allmulticast mode [ 802.869504][T30561] bridge_slave_0: left promiscuous mode [ 802.875514][T30561] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.902366][T30561] bridge_slave_1: left allmulticast mode [ 802.908616][T30561] bridge_slave_1: left promiscuous mode [ 802.914550][T30561] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.939104][T30561] bond0: (slave bond_slave_0): Releasing backup interface [ 802.960018][T30561] bond0: (slave bond_slave_1): Releasing backup interface [ 802.981940][T30561] team0: Port device team_slave_0 removed [ 802.995337][T30561] team0: Port device team_slave_1 removed [ 803.006219][T30561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.017772][T30561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.030498][T30561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.041489][T30561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.061055][T30561] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 803.251654][T30586] validate_nla: 1 callbacks suppressed [ 803.251674][T30586] netlink: 'syz.2.8359': attribute type 10 has an invalid length. [ 803.331074][T30586] team0: Device veth1_macvtap failed to register rx_handler [ 803.727611][T15146] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.736955][T15146] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.751851][T15146] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.770114][ T50] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 803.854233][T30633] netlink: 'syz.3.8373': attribute type 1 has an invalid length. [ 804.033640][T30633] vlan2: entered allmulticast mode [ 804.039128][T30633] vxlan0: entered allmulticast mode [ 804.372341][T30664] openvswitch: netlink: Flow key attr not present in new flow. [ 804.807155][T30687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 804.884278][T30676] xt_hashlimit: size too large, truncated to 1048576 [ 805.281915][T30712] __nla_validate_parse: 15 callbacks suppressed [ 805.281936][T30712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8394'. [ 805.484679][T30721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8396'. [ 805.496124][T30726] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8399'. [ 805.679043][T30734] netlink: 'syz.0.8399': attribute type 13 has an invalid length. [ 805.687781][T30734] netlink: 'syz.0.8399': attribute type 58 has an invalid length. [ 805.695715][T30734] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8399'. [ 805.711088][T30732] netlink: 'syz.1.8402': attribute type 12 has an invalid length. [ 805.720117][T30732] netlink: 'syz.1.8402': attribute type 29 has an invalid length. [ 805.756527][T30732] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8402'. [ 805.774108][T30732] netlink: 59 bytes leftover after parsing attributes in process `syz.1.8402'. [ 805.923662][T30745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8406'. [ 805.943931][T30745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8406'. [ 805.985714][T30747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.995981][T30748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.036561][T30745] netlink: 'syz.4.8406': attribute type 14 has an invalid length. [ 806.098852][T30755] IPVS: length: 112 != 24 [ 806.145779][T30757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8409'. [ 806.318116][T30769] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8414'. [ 806.454914][T30776] netlink: 'syz.2.8418': attribute type 1 has an invalid length. [ 806.900252][T30795] netlink: 'syz.4.8423': attribute type 14 has an invalid length. [ 807.069038][T30801] FAULT_INJECTION: forcing a failure. [ 807.069038][T30801] name failslab, interval 1, probability 0, space 0, times 0 [ 807.083243][T30801] CPU: 1 UID: 0 PID: 30801 Comm: syz.3.8427 Not tainted syzkaller #0 PREEMPT(full) [ 807.083272][T30801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 807.083285][T30801] Call Trace: [ 807.083293][T30801] [ 807.083302][T30801] dump_stack_lvl+0x189/0x250 [ 807.083346][T30801] ? __pfx____ratelimit+0x10/0x10 [ 807.083371][T30801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.083396][T30801] ? __pfx__printk+0x10/0x10 [ 807.083423][T30801] ? __pfx___might_resched+0x10/0x10 [ 807.083443][T30801] ? fs_reclaim_acquire+0x7d/0x100 [ 807.083467][T30801] should_fail_ex+0x414/0x560 [ 807.083501][T30801] should_failslab+0xa8/0x100 [ 807.083523][T30801] kmem_cache_alloc_node_noprof+0x77/0x710 [ 807.083549][T30801] ? __alloc_skb+0x112/0x2d0 [ 807.083565][T30801] ? netlink_autobind+0xdb/0x300 [ 807.083590][T30801] __alloc_skb+0x112/0x2d0 [ 807.083613][T30801] netlink_sendmsg+0x5c6/0xb30 [ 807.083644][T30801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.083668][T30801] ? aa_sock_msg_perm+0xf1/0x1d0 [ 807.083698][T30801] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 807.083718][T30801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 807.083738][T30801] __sock_sendmsg+0x21c/0x270 [ 807.083768][T30801] ____sys_sendmsg+0x505/0x830 [ 807.083797][T30801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 807.083829][T30801] ? import_iovec+0x74/0xa0 [ 807.083858][T30801] ___sys_sendmsg+0x21f/0x2a0 [ 807.083881][T30801] ? __pfx____sys_sendmsg+0x10/0x10 [ 807.083929][T30801] ? __fget_files+0x2a/0x420 [ 807.083943][T30801] ? __fget_files+0x3a0/0x420 [ 807.083970][T30801] __x64_sys_sendmsg+0x19b/0x260 [ 807.083994][T30801] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 807.084027][T30801] ? __pfx_ksys_write+0x10/0x10 [ 807.084059][T30801] ? do_syscall_64+0xbe/0xfa0 [ 807.084090][T30801] do_syscall_64+0xfa/0xfa0 [ 807.084115][T30801] ? lockdep_hardirqs_on+0x9c/0x150 [ 807.084142][T30801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.084160][T30801] ? clear_bhb_loop+0x60/0xb0 [ 807.084183][T30801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.084201][T30801] RIP: 0033:0x7f5c20b8f6c9 [ 807.084219][T30801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.084235][T30801] RSP: 002b:00007f5c219a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.084257][T30801] RAX: ffffffffffffffda RBX: 00007f5c20de5fa0 RCX: 00007f5c20b8f6c9 [ 807.084271][T30801] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000004 [ 807.084282][T30801] RBP: 00007f5c219a5090 R08: 0000000000000000 R09: 0000000000000000 [ 807.084293][T30801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.084304][T30801] R13: 00007f5c20de6038 R14: 00007f5c20de5fa0 R15: 00007ffd25041d38 [ 807.084340][T30801] [ 807.153914][T30811] netlink: 'syz.0.8428': attribute type 1 has an invalid length. [ 807.440526][T30815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.602409][T30814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.866164][T30834] vlan2: entered promiscuous mode [ 809.871718][T30834] bridge0: entered promiscuous mode [ 810.822946][T30906] openvswitch: netlink: Duplicate or invalid key (type 0). [ 810.833481][T30906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 810.887839][T30909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 811.025510][T30914] __nla_validate_parse: 11 callbacks suppressed [ 811.025535][T30914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8466'. [ 811.076620][T30912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8465'. [ 811.142474][T30919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8466'. [ 811.304873][T30926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8470'. [ 811.543403][T30941] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8476'. [ 811.563736][T30941] netlink: 27 bytes leftover after parsing attributes in process `syz.2.8476'. [ 811.932927][T30960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8482'. [ 812.725727][T30985] tipc: Started in network mode [ 812.731710][T30985] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 812.742939][T30985] tipc: Enabled bearer , priority 10 [ 812.757439][T30985] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8491'. [ 813.097024][T31009] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 813.104674][T31009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 813.149740][T31013] vet0_virt_wifi: renamed from dummy0 (while UP) [ 813.503550][T31038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8509'. [ 813.513490][T31038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8509'. [ 813.528077][T31038] validate_nla: 1 callbacks suppressed [ 813.528096][T31038] netlink: 'syz.0.8509': attribute type 14 has an invalid length. [ 813.858298][T17294] tipc: Node number set to 10005162 [ 814.097971][T31056] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 814.381692][T31069] netlink: 'syz.0.8521': attribute type 3 has an invalid length. [ 814.403223][T31072] netlink: 'syz.4.8522': attribute type 14 has an invalid length. [ 814.517227][T31078] IPVS: Unknown mcast interface: pimreg1 [ 815.401783][T31133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 815.440527][T31138] FAULT_INJECTION: forcing a failure. [ 815.440527][T31138] name failslab, interval 1, probability 0, space 0, times 0 [ 815.483533][T31138] CPU: 1 UID: 0 PID: 31138 Comm: syz.1.8544 Not tainted syzkaller #0 PREEMPT(full) [ 815.483561][T31138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 815.483574][T31138] Call Trace: [ 815.483582][T31138] [ 815.483592][T31138] dump_stack_lvl+0x189/0x250 [ 815.483625][T31138] ? __pfx____ratelimit+0x10/0x10 [ 815.483650][T31138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 815.483674][T31138] ? __pfx__printk+0x10/0x10 [ 815.483712][T31138] should_fail_ex+0x414/0x560 [ 815.483746][T31138] should_failslab+0xa8/0x100 [ 815.483770][T31138] kmem_cache_alloc_noprof+0x74/0x6e0 [ 815.483797][T31138] ? skb_clone+0x212/0x3a0 [ 815.483822][T31138] skb_clone+0x212/0x3a0 [ 815.483840][T31138] ? __skb_tstamp_tx+0x519/0xee0 [ 815.483872][T31138] __skb_tstamp_tx+0x526/0xee0 [ 815.483912][T31138] __dev_queue_xmit+0x1fed/0x3b50 [ 815.483953][T31138] ? ip6t_do_table+0x1db/0x1560 [ 815.483984][T31138] ? __pfx_ip6t_do_table+0x10/0x10 [ 815.484022][T31138] ? __pfx___dev_queue_xmit+0x10/0x10 [ 815.484055][T31138] ? ip6table_mangle_hook+0x2a2/0x6c0 [ 815.484081][T31138] ? __lock_acquire+0xab9/0xd20 [ 815.484117][T31138] ? ip6_output+0x340/0x550 [ 815.484148][T31138] ? ip6_finish_output2+0xd4c/0x1480 [ 815.484182][T31138] ip6_finish_output2+0xf70/0x1480 [ 815.484225][T31138] ? __pfx_ip6_finish_output2+0x10/0x10 [ 815.484253][T31138] ? ip6_mtu+0x7d/0x490 [ 815.484285][T31138] ? ip6_mtu+0x38c/0x490 [ 815.484312][T31138] ? ip6_finish_output+0x2ef/0x4e0 [ 815.484336][T31138] ? ip6_output+0x126/0x550 [ 815.484360][T31138] ip6_output+0x340/0x550 [ 815.484388][T31138] ? ip6_send_skb+0x10f/0x390 [ 815.484419][T31138] ip6_send_skb+0x1d5/0x390 [ 815.484449][T31138] udp_v6_send_skb+0xc17/0x1830 [ 815.484499][T31138] udpv6_sendmsg+0x1d62/0x2510 [ 815.484536][T31138] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 815.484571][T31138] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 815.484607][T31138] ? __lock_acquire+0xab9/0xd20 [ 815.484648][T31138] ? __local_bh_enable_ip+0x12d/0x1c0 [ 815.484669][T31138] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 815.484699][T31138] ? inet_send_prepare+0x1b9/0x270 [ 815.484721][T31138] ? inet_send_prepare+0x1b9/0x270 [ 815.484744][T31138] ? inet6_sendmsg+0xe4/0x120 [ 815.484768][T31138] __sock_sendmsg+0xe5/0x270 [ 815.484797][T31138] ____sys_sendmsg+0x52d/0x830 [ 815.484824][T31138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 815.484857][T31138] ? import_iovec+0x74/0xa0 [ 815.484887][T31138] ___sys_sendmsg+0x21f/0x2a0 [ 815.484912][T31138] ? __pfx____sys_sendmsg+0x10/0x10 [ 815.484977][T31138] ? __fget_files+0x2a/0x420 [ 815.484994][T31138] ? __fget_files+0x3a0/0x420 [ 815.485025][T31138] __sys_sendmmsg+0x227/0x430 [ 815.485056][T31138] ? __pfx___sys_sendmmsg+0x10/0x10 [ 815.485089][T31138] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 815.485139][T31138] ? ksys_write+0x22a/0x250 [ 815.485171][T31138] ? __pfx_ksys_write+0x10/0x10 [ 815.485205][T31138] __x64_sys_sendmmsg+0xa0/0xc0 [ 815.485228][T31138] do_syscall_64+0xfa/0xfa0 [ 815.485254][T31138] ? lockdep_hardirqs_on+0x9c/0x150 [ 815.485290][T31138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.485311][T31138] ? clear_bhb_loop+0x60/0xb0 [ 815.485337][T31138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.485357][T31138] RIP: 0033:0x7efdd3d8f6c9 [ 815.485376][T31138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.485393][T31138] RSP: 002b:00007efdd1ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 815.485416][T31138] RAX: ffffffffffffffda RBX: 00007efdd3fe5fa0 RCX: 00007efdd3d8f6c9 [ 815.485431][T31138] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000003 [ 815.485445][T31138] RBP: 00007efdd1ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 815.485458][T31138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.485470][T31138] R13: 00007efdd3fe6038 R14: 00007efdd3fe5fa0 R15: 00007fff52026748 [ 815.485509][T31138] [ 816.057653][T31154] __nla_validate_parse: 8 callbacks suppressed [ 816.057675][T31154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8547'. [ 816.111749][T31154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8547'. [ 816.264762][T31164] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8551'. [ 816.339328][T31173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8552'. [ 816.406771][T31176] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8554'. [ 816.722813][T31187] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 816.817517][T31190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8558'. [ 816.827934][T31190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8558'. [ 816.839281][T31190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8558'. [ 816.849250][T31190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8558'. [ 817.153123][T31195] netlink: 'syz.0.8559': attribute type 3 has an invalid length. [ 817.487915][T31209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8565'. [ 817.711189][T31225] netlink: 'syz.3.8572': attribute type 14 has an invalid length. [ 817.925570][T31233] tipc: Enabled bearer , priority 0 [ 818.023938][T31224] tipc: Resetting bearer [ 818.187561][T31237] syzkaller0: entered promiscuous mode [ 818.193339][T31237] syzkaller0: entered allmulticast mode [ 818.237409][T31221] tipc: Resetting bearer [ 818.320500][T31221] tipc: Disabling bearer [ 818.363210][T31255] ip6gre0: Master is either lo or non-ether device [ 818.611728][T31270] netlink: 'syz.0.8586': attribute type 14 has an invalid length. [ 818.878639][T31281] syzkaller0: entered promiscuous mode [ 818.931388][T31281] syzkaller0: entered allmulticast mode [ 819.768229][T31317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 820.551944][T31365] sit0: entered promiscuous mode [ 820.588808][T31365] netlink: 'syz.2.8626': attribute type 1 has an invalid length. [ 821.243457][T31405] __nla_validate_parse: 25 callbacks suppressed [ 821.243479][T31405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8637'. [ 821.287108][T31406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8637'. [ 821.428471][T31411] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 821.555922][T31417] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8643'. [ 821.565408][T31417] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8643'. [ 821.915840][T31429] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 821.932968][T31431] xt_connbytes: Forcing CT accounting to be enabled [ 821.936535][T31429] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 821.957255][T31431] tipc: Enabling of bearer rejected, failed to enable media [ 821.965732][T31429] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 821.965975][T31429] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 821.966117][T31429] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 821.994298][T31431] vlan3: entered promiscuous mode [ 822.027828][T31429] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 822.038022][T31429] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 822.049680][T31429] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 822.061095][T31429] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 823.023298][T31449] syzkaller1: entered promiscuous mode [ 823.029246][T31449] syzkaller1: entered allmulticast mode [ 823.089714][T31449] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8655'. [ 823.199751][T31469] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 823.317243][T31474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8662'. [ 823.818374][T31497] netlink: 'syz.4.8672': attribute type 2 has an invalid length. [ 823.826167][T31497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8672'. [ 823.885121][T31497] netlink: 'syz.4.8672': attribute type 2 has an invalid length. [ 823.906595][T31497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8672'. [ 823.971631][T31504] FAULT_INJECTION: forcing a failure. [ 823.971631][T31504] name failslab, interval 1, probability 0, space 0, times 0 [ 823.987748][T31504] CPU: 1 UID: 0 PID: 31504 Comm: syz.1.8675 Not tainted syzkaller #0 PREEMPT(full) [ 823.987777][T31504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 823.987790][T31504] Call Trace: [ 823.987798][T31504] [ 823.987807][T31504] dump_stack_lvl+0x189/0x250 [ 823.987840][T31504] ? __pfx____ratelimit+0x10/0x10 [ 823.987867][T31504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 823.987892][T31504] ? __pfx__printk+0x10/0x10 [ 823.987918][T31504] ? __pfx___might_resched+0x10/0x10 [ 823.987939][T31504] ? fs_reclaim_acquire+0x7d/0x100 [ 823.987964][T31504] should_fail_ex+0x414/0x560 [ 823.987997][T31504] should_failslab+0xa8/0x100 [ 823.988019][T31504] kmem_cache_alloc_node_noprof+0x77/0x710 [ 823.988047][T31504] ? __alloc_skb+0x112/0x2d0 [ 823.988065][T31504] ? netlink_autobind+0xdb/0x300 [ 823.988090][T31504] __alloc_skb+0x112/0x2d0 [ 823.988121][T31504] netlink_sendmsg+0x5c6/0xb30 [ 823.988150][T31504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.988173][T31504] ? aa_sock_msg_perm+0xf1/0x1d0 [ 823.988201][T31504] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 823.988221][T31504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.988242][T31504] __sock_sendmsg+0x21c/0x270 [ 823.988272][T31504] ____sys_sendmsg+0x505/0x830 [ 823.988301][T31504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 823.988333][T31504] ? import_iovec+0x74/0xa0 [ 823.988376][T31504] ___sys_sendmsg+0x21f/0x2a0 [ 823.988398][T31504] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.988456][T31504] ? __fget_files+0x2a/0x420 [ 823.988475][T31504] ? __fget_files+0x3a0/0x420 [ 823.988504][T31504] __x64_sys_sendmsg+0x19b/0x260 [ 823.988530][T31504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 823.988563][T31504] ? __pfx_ksys_write+0x10/0x10 [ 823.988602][T31504] ? do_syscall_64+0xbe/0xfa0 [ 823.988631][T31504] do_syscall_64+0xfa/0xfa0 [ 823.988655][T31504] ? lockdep_hardirqs_on+0x9c/0x150 [ 823.988680][T31504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.988699][T31504] ? clear_bhb_loop+0x60/0xb0 [ 823.988721][T31504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.988739][T31504] RIP: 0033:0x7efdd3d8f6c9 [ 823.988756][T31504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.988772][T31504] RSP: 002b:00007efdd1ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.988795][T31504] RAX: ffffffffffffffda RBX: 00007efdd3fe5fa0 RCX: 00007efdd3d8f6c9 [ 823.988810][T31504] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000006 [ 823.988823][T31504] RBP: 00007efdd1ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 823.988835][T31504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.988847][T31504] R13: 00007efdd3fe6038 R14: 00007efdd3fe5fa0 R15: 00007fff52026748 [ 823.988881][T31504] [ 824.463405][T31509] [ 824.465785][T31509] ====================================================== [ 824.472817][T31509] WARNING: possible circular locking dependency detected [ 824.479850][T31509] syzkaller #0 Not tainted [ 824.484272][T31509] ------------------------------------------------------ [ 824.491374][T31509] syz.1.8679/31509 is trying to acquire lock: [ 824.497435][T31509] ffffffff8f426458 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 824.506842][T31509] [ 824.506842][T31509] but task is already holding lock: [ 824.514303][T31509] ffff88804f4a2a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 824.523740][T31509] [ 824.523740][T31509] which lock already depends on the new lock. [ 824.523740][T31509] [ 824.534160][T31509] [ 824.534160][T31509] the existing dependency chain (in reverse order) is: [ 824.543271][T31509] [ 824.543271][T31509] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 824.551303][T31509] lock_acquire+0x120/0x360 [ 824.556334][T31509] _raw_spin_lock_bh+0x36/0x50 [ 824.561629][T31509] nr_rt_device_down+0x12a/0x720 [ 824.567190][T31509] nr_device_event+0x137/0x150 [ 824.572486][T31509] notifier_call_chain+0x1b6/0x3e0 [ 824.578149][T31509] netif_close_many+0x29c/0x410 [ 824.583544][T31509] netif_close+0x158/0x210 [ 824.588493][T31509] dev_close+0x10a/0x220 [ 824.593258][T31509] bpq_device_event+0x377/0x6a0 [ 824.598730][T31509] notifier_call_chain+0x1b6/0x3e0 [ 824.604363][T31509] netif_close_many+0x29c/0x410 [ 824.609746][T31509] netif_close+0x158/0x210 [ 824.614695][T31509] dev_close+0x10a/0x220 [ 824.619543][T31509] bond_setup_by_slave+0x5f/0x3f0 [ 824.625182][T31509] bond_enslave+0x6ca/0x38a0 [ 824.630300][T31509] bond_do_ioctl+0x635/0x9b0 [ 824.635410][T31509] dev_ifsioc+0x90b/0xf00 [ 824.640269][T31509] dev_ioctl+0x7b4/0x1150 [ 824.645124][T31509] sock_do_ioctl+0x22c/0x300 [ 824.650238][T31509] sock_ioctl+0x576/0x790 [ 824.655097][T31509] __se_sys_ioctl+0xfc/0x170 [ 824.660224][T31509] do_syscall_64+0xfa/0xfa0 [ 824.665256][T31509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.671673][T31509] [ 824.671673][T31509] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 824.679525][T31509] lock_acquire+0x120/0x360 [ 824.684559][T31509] _raw_spin_lock_bh+0x36/0x50 [ 824.689853][T31509] nr_rt_device_down+0xa9/0x720 [ 824.695424][T31509] nr_device_event+0x137/0x150 [ 824.700817][T31509] notifier_call_chain+0x1b6/0x3e0 [ 824.706469][T31509] netif_close_many+0x29c/0x410 [ 824.711851][T31509] netif_close+0x158/0x210 [ 824.716800][T31509] dev_close+0x10a/0x220 [ 824.721581][T31509] bpq_device_event+0x377/0x6a0 [ 824.727138][T31509] notifier_call_chain+0x1b6/0x3e0 [ 824.732770][T31509] netif_close_many+0x29c/0x410 [ 824.738224][T31509] netif_close+0x158/0x210 [ 824.743165][T31509] dev_close+0x10a/0x220 [ 824.747924][T31509] bond_setup_by_slave+0x5f/0x3f0 [ 824.753473][T31509] bond_enslave+0x6ca/0x38a0 [ 824.758685][T31509] bond_do_ioctl+0x635/0x9b0 [ 824.763883][T31509] dev_ifsioc+0x90b/0xf00 [ 824.768830][T31509] dev_ioctl+0x7b4/0x1150 [ 824.773691][T31509] sock_do_ioctl+0x22c/0x300 [ 824.778811][T31509] sock_ioctl+0x576/0x790 [ 824.783760][T31509] __se_sys_ioctl+0xfc/0x170 [ 824.788869][T31509] do_syscall_64+0xfa/0xfa0 [ 824.793895][T31509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.800307][T31509] [ 824.800307][T31509] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 824.808219][T31509] validate_chain+0xb9b/0x2140 [ 824.813512][T31509] __lock_acquire+0xab9/0xd20 [ 824.818717][T31509] lock_acquire+0x120/0x360 [ 824.823740][T31509] _raw_spin_lock_bh+0x36/0x50 [ 824.829033][T31509] nr_remove_neigh+0x25/0xe0 [ 824.834235][T31509] nr_add_node+0x1d9f/0x2570 [ 824.839346][T31509] nr_rt_ioctl+0xc12/0xd50 [ 824.844286][T31509] sock_do_ioctl+0xdc/0x300 [ 824.849404][T31509] sock_ioctl+0x576/0x790 [ 824.854256][T31509] __se_sys_ioctl+0xfc/0x170 [ 824.859371][T31509] do_syscall_64+0xfa/0xfa0 [ 824.864482][T31509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.870893][T31509] [ 824.870893][T31509] other info that might help us debug this: [ 824.870893][T31509] [ 824.881123][T31509] Chain exists of: [ 824.881123][T31509] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 824.881123][T31509] [ 824.894968][T31509] Possible unsafe locking scenario: [ 824.894968][T31509] [ 824.902414][T31509] CPU0 CPU1 [ 824.907784][T31509] ---- ---- [ 824.913151][T31509] lock(&nr_node->node_lock); [ 824.917934][T31509] lock(nr_node_list_lock); [ 824.925046][T31509] lock(&nr_node->node_lock); [ 824.932339][T31509] lock(nr_neigh_list_lock); [ 824.937022][T31509] [ 824.937022][T31509] *** DEADLOCK *** [ 824.937022][T31509] [ 824.945161][T31509] 1 lock held by syz.1.8679/31509: [ 824.950266][T31509] #0: ffff88804f4a2a70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 824.960111][T31509] [ 824.960111][T31509] stack backtrace: [ 824.966013][T31509] CPU: 1 UID: 0 PID: 31509 Comm: syz.1.8679 Not tainted syzkaller #0 PREEMPT(full) [ 824.966031][T31509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 824.966041][T31509] Call Trace: [ 824.966049][T31509] [ 824.966056][T31509] dump_stack_lvl+0x189/0x250 [ 824.966080][T31509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.966106][T31509] ? __pfx__printk+0x10/0x10 [ 824.966119][T31509] ? stack_trace_save+0x9c/0xe0 [ 824.966144][T31509] print_circular_bug+0x2ee/0x310 [ 824.966164][T31509] check_noncircular+0x134/0x160 [ 824.966184][T31509] validate_chain+0xb9b/0x2140 [ 824.966210][T31509] __lock_acquire+0xab9/0xd20 [ 824.966226][T31509] ? nr_remove_neigh+0x25/0xe0 [ 824.966244][T31509] lock_acquire+0x120/0x360 [ 824.966257][T31509] ? nr_remove_neigh+0x25/0xe0 [ 824.966278][T31509] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 824.966298][T31509] ? nr_remove_neigh+0x25/0xe0 [ 824.966316][T31509] _raw_spin_lock_bh+0x36/0x50 [ 824.966334][T31509] ? nr_remove_neigh+0x25/0xe0 [ 824.966353][T31509] nr_remove_neigh+0x25/0xe0 [ 824.966373][T31509] nr_add_node+0x1d9f/0x2570 [ 824.966395][T31509] ? dev_get_by_name+0x21/0x200 [ 824.966418][T31509] ? dev_get_by_name+0x21/0x200 [ 824.966438][T31509] ? dev_get_by_name+0x21/0x200 [ 824.966459][T31509] ? nr_call_to_digi+0x136/0x1b0 [ 824.966483][T31509] nr_rt_ioctl+0xc12/0xd50 [ 824.966512][T31509] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 824.966532][T31509] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.966564][T31509] ? apparmor_capable+0x137/0x1b0 [ 824.966590][T31509] ? capable+0x89/0xe0 [ 824.966610][T31509] ? nr_ioctl+0x1b1/0x3b0 [ 824.966629][T31509] sock_do_ioctl+0xdc/0x300 [ 824.966655][T31509] ? __pfx_sock_do_ioctl+0x10/0x10 [ 824.966684][T31509] sock_ioctl+0x576/0x790 [ 824.966709][T31509] ? __pfx_sock_ioctl+0x10/0x10 [ 824.966733][T31509] ? __fget_files+0x3a0/0x420 [ 824.966752][T31509] ? __fget_files+0x2a/0x420 [ 824.966770][T31509] ? bpf_lsm_file_ioctl+0x9/0x20 [ 824.966792][T31509] ? __pfx_sock_ioctl+0x10/0x10 [ 824.966815][T31509] __se_sys_ioctl+0xfc/0x170 [ 824.966842][T31509] do_syscall_64+0xfa/0xfa0 [ 824.966870][T31509] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.966894][T31509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.966914][T31509] ? clear_bhb_loop+0x60/0xb0 [ 824.966936][T31509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.966954][T31509] RIP: 0033:0x7efdd3d8f6c9 [ 824.966973][T31509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.966991][T31509] RSP: 002b:00007efdd1ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 824.967012][T31509] RAX: ffffffffffffffda RBX: 00007efdd3fe5fa0 RCX: 00007efdd3d8f6c9 [ 824.967027][T31509] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000007 [ 824.967041][T31509] RBP: 00007efdd3e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 824.967053][T31509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.967065][T31509] R13: 00007efdd3fe6038 R14: 00007efdd3fe5fa0 R15: 00007fff52026748 [ 824.967088][T31509] [ 825.363225][T31509] net_ratelimit: 7430 callbacks suppressed [ 825.363248][T31509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 825.392968][T31516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8676'.