last executing test programs: 1.988656232s ago: executing program 4 (id=1257): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0x40}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f00000003c0)=[{r1, 0x605e}, {r1, 0x10}, {0xffffffffffffffff, 0xb00c}], 0x3, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) write$cgroup_pressure(r2, &(0x7f00000002c0)={'some', 0x20, 0x4, 0x20, 0xffff9}, 0x2f) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x20000400) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfffffffffffffc2d) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES32=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4040805}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20046010}, 0xc814) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000040)={r9, 0x8788, 0x20}, 0xc) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000bb7f1a00c400feff0000000a95"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xff, 0x6, 0x2, 0x10088, 0xffffffffffffffff, 0x83a, '\x00', r6, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x7}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001815000000010000000000", @ANYRES32=r11, @ANYBLOB="000000000000f92ab2ac0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r9, 0x4}, &(0x7f0000000280)=0x8) socket(0x10, 0x3, 0x0) 1.840767796s ago: executing program 0 (id=1262): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x50, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_MPU={0x8, 0xe, 0x102}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x800000}, @TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_INGRESS={0xfffffead, 0xf, 0x1}]}}]}, 0x80}}, 0x4090) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) close(r7) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="5a000300010003", 0x7) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 1.724162904s ago: executing program 3 (id=1264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1, 0x0, 0x0, 0x801}, 0x4000045) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x1000000, 0x0, 0x24008850}, 0x4004a040) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x204, 0x3ff, 0x7}}}}]}, 0x44}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r10, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000"], 0x64}}, 0x0) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000540)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000008a14000000110020e8641801000000000000000000"], 0x70}}, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xffffffffffffff59, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0xb2, @empty, 0x400}]}, &(0x7f0000000080)=0x10) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r14 = socket$netlink(0x10, 0x3, 0xf) writev(r14, &(0x7f0000000040), 0x0) write$rfkill(r13, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) 1.587175672s ago: executing program 3 (id=1267): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="6c356ff8c128", 'ip6erspan0\x00'}}, 0x1e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x98, r3, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x64, 0x100, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x3c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'batadv0\x00'}}, 0x1e) 1.450376102s ago: executing program 3 (id=1270): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)) sendto$packet(r0, &(0x7f0000000640)="053c4305", 0x4, 0xb00, 0x0, 0x0) 1.225371842s ago: executing program 3 (id=1271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x805, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$unix(0x1, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r10, r10, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r10, r12, 0x2f, 0x18, 0x4, @void, @value=r10}, 0x20) 1.225174988s ago: executing program 2 (id=1272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}}, 0x4008800) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1d, 0x3, @remote, 0x2}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000140)=0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x2, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 1.120490647s ago: executing program 2 (id=1275): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@float={0x4, 0x0, 0x0, 0x10, 0x4}, @ptr={0x80000f, 0x0, 0x0, 0x2, 0x1}]}}, 0x0, 0x32, 0x0, 0x1, 0x400}, 0x28) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001fe0ffe0000000000000c00010094040000000000000d00010000010000000000000c000100040000000000000008000500", @ANYRES32=r4], 0x80}}, 0x8000) 1.0993184s ago: executing program 4 (id=1276): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000f40)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f2719f828c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76e6b9c48e1f370f234a717f2f22951f1fdb5343deae0cac8cf17add62cff42dfa6fc8d20a93c5d2ee779a6e0f0b160875443d", 0x3b2}], 0x1}}], 0x2, 0x4048884) 1.046187959s ago: executing program 2 (id=1277): r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@empty, @in=@local, 0x4e23, 0xfffe, 0x0, 0x0, 0x2, 0x0, 0x80, 0x3c, 0x0, 0xffffffffffffffff}, {@in=@empty, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x7fff, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x4f, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x10, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x20}], @echo_reply}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r5, 0x1, 0x2f, &(0x7f00000001c0)=0x81, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000f100000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) setsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, 0x0) 965.804729ms ago: executing program 2 (id=1278): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000006000000000000000000000300000000030000000200000000000000000000000000000a04000000000000000000000300000000030000000200000003000000040000000000000800000000000000005f"], 0x0, 0x66}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='cq_modify\x00', r4, 0x0, 0xd}, 0x18) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r6, 0x0, 0x8040) close(r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg2\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r7}, 0x18) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) getsockopt$llc_int(r5, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt(r8, 0x200000000114, 0x2717, 0x0, &(0x7f0000000300)) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a00034002c3000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97", 0xd7}], 0x1}, 0x60044884) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000000800006b21000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000971bac5544ad77590779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x38}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 911.815216ms ago: executing program 1 (id=1279): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000001a80)={0x628, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x68}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1b2, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x4e5}, @device_b, @from_mac=@device_b, @device_b, {0x8}, "", @value={0x9, 0x1, 0x3, 0x0, 0x24}}, @a_msdu=[{@broadcast, @device_b, 0x93, "249e81985a137d3b9e224a81850a352ad8c13c8a0c7c7d9f73863410ec51ab62a36c20bae749f11ad5815652e6b10be0eb689503ed64d3169598eda57953290046c8af1ce95c2bc41f55eb1673f08f5157fce6bcee52e11ada39339c7290ec4a8d5e6ec1bf1117e639be9ffed458ea72077633dc8ee08008fccc95493638f84a9fde7d4211bc9c81132e92735a4ad62990c002"}, {@device_a, @device_a, 0xe1, "ab91d970cbc3c0d5f2f04801acbfb8aa6515cdf708cfe70af89516ce9acafcc785c6c5c1a16c5df3775ed6543c59966679ebf17bb02ffc2cdb316f82f71a235a07d62aeafbe34c35b29e89c83dd9c66c603726dc993deacbb685d5a17d11c28fc92c4db00e7d4eee34dedc8e035e26210fcd08ab1dcd81cf9fd235a1d3e2ecb3ccfc31512a013e84c8c8f884d8075326b216d594dfb585b28dad9971bf77dcccb5f20333e01b66545ada2c6b5ce43dda04cfd5abe3c164d9764a750b03fa8bff71a6e9fcc346580e879680c9f91786c72dee83824dbc31d0059d4ca8970279e772"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x8}, @device_a, @device_b}}, @NL80211_ATTR_FRAME={0x40f, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x4}, @broadcast, @device_b, @random="6b229f4319ff", {0x4, 0x1}, "", @value={0x3, 0x0, 0x2, 0x0, 0x2}, @value=@ver_80211n={0x0, 0x10, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @random="8383d77924b2834d001a109c9e18d6b7d3b53c7cd4e388d6dc58798739fbc0720bd9e4027b1083efefb00a3093665c70edbd9ce09e372398e04e0388323563a5df989a9cb73d07c81c99e40f6959021590a581c91bd578a4426a4f74994f6de28574557d4c8c64d4ddc6736dc657cd586cf3d01ad0cd6052a5f0f8b7ed0374b75ad515d59614bfc40977f6a72aa95929609e50e959ac815d4b873a1506d7f57ce6330e18af6c9d08c56a54bd1cfacf787869a9a93948d5da7b74d4235ccd55d3258712e1ddc688ca590d511dad5717873ba77f6ab38a9406856f7f18613984d203e351a9f40e6043bef11a6045dd7e91824982006fb9e9810000008df2f0167ffd334a94502bde2f94d89601c07864d27133d6c0b738082b85c1cd5608ddb7321a1213aa26a4412be10ecf8aafe5136a8f40b7342f3bc81a6ffe1226b1711768d65654dbcbb4ffae5ca7a805f1013e0bd439e09100bd5623a798eae7cf40f1e3974a98bd37c3c4c0bf8c96c77c201a82b88a98cd8ec0daee931d3587dd7aedfc87794c7c0b17659e837a55fdc3a9bc93e6163020a51daa50c06ca25b3723d5f32b4642f03a337c22be3dd690d57583746ca7bf29b78556b3bb7d4a0a5ccd39d5d7af6a420c39e968c7b51a536efa358369133464a77fc55c31a065d37be19f0dbad311d63c049f3937bc7d6b21a726da37a4bf4162edd39c8af79a8a4dfd860b53bc59fcf979f2f6797a33ea8d8c89a65dc1236c08008c976dae5829b22734dce8df7a92629555f94c7b164200284824fc66e0d2de09693bb961058b7edd72d3295e4dd505d4ea8986929d5540b06b73a9f5d9f2edaa12903d8659bf391f6ec28eacb30443840b573eb8348800a6f8c598d4c76ca1bf99a0183814cfc33d92255c9c8d14dd11b0ca9f9e4ec9ed3aeadbba235aebb32faf46ec87028732264f9b2b81b2e85eade5c6e9a57c0bb439396699ac0f5ec6b2d7bf8c0eb26fdf435708e9c1250cb61c5933792eeb10612a25a6c8a7c93b0f6c8c8e58bf6d0857e3b290587ee9ca786744ced427478f7cd50a00ac0abc6a82bd62eac172d1844317230c0d45bd6eae00f69807dfb4b6851d76ff74fd659344cf536e6b4d9d8fb8e35fae2d6fa3013290cbe5a4becc0681c9ae7084674a2e1df79cda69cc93777c85fb4c084e10d5e03f4d272dd3c14b68fc6ef51dac5fbd8eef3d41e44b1f9046563069a6f4892a1ecbdaa769d4871a379ef1e0f5656c6b3d4caf90180b0e3d66b8d812d8ab7eed10e3eb7aafe7c3c4b5d6a7216614d0bc4fa62c1fc8b1c4003a05a2c0310eff259fb3dd0ced958df489703124d50c12b3a5b4d08d5ed48d4b4ca61cd0b1326a46218a73974c22d52f8ff9c61093818eb3cc900b20956cc47d5baa8ba079a303752ae1d17900d70402bb"}}]}, 0x628}}, 0x20004001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8993, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001300)="349a7b81c308dc78e5475a608f4ee9bb", 0x10}], 0x2, 0x0, 0x0, 0x80}, 0x40) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x4c, r3, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x32}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '@{/.-\x00'}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) (fail_nth: 13) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123dee2dd2b184b256482322de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d28"], 0xe0}], 0x1}, 0x40040) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={0x0, 0xffffff8c, 0x20}, &(0x7f0000000440)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000580)={0x2, [0x0, 0x0]}, &(0x7f00000005c0)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000540)={r9, 0x202}, 0x8) sendmmsg$inet6(r8, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001700)='\x00', 0x1}], 0x1}}], 0x1, 0x0) getsockname$unix(r8, &(0x7f00000002c0)=@abs, &(0x7f0000000140)=0x6e) 909.431424ms ago: executing program 0 (id=1280): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "cc"}]}], {0x14}}, 0x8c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000e03ac71002000000ffffffff0000000200"/88, 0x58}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'vlan0\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x5, 0x5, 0xf, "ef536fabf429"}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000480)=[0x0], &(0x7f0000000540)=[0x0], 0x0, 0x5f, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000005c0), &(0x7f0000000640), 0x8, 0x78, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000008c0)={@empty, 0x18, r5}) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r8 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000600)=r7, 0x4) r9 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x20, 0x2, 0x7, 0x4}}) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00000008000100", @ANYRES64], 0x1c}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$SO_TIMESTAMPING(r10, 0x1, 0x68912cc494ef8cde, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmsg$qrtr(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0), 0x1, 0x0, 0xfffffffffffffce6, 0x60010003}, 0x38, 0x100) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x3001}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="7000fbdbdf251800000000000000857798e34bfe1f42d95af4d6"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0xa0}, 0x1, 0x0, 0x0, 0x2000c451}, 0x44084) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000740)={'ip6gre0\x00', r5, 0x4, 0xfe, 0x35, 0x6, 0x10, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x8000, 0x0, 0x101}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r8, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000b80)={0x5ac, 0x0, 0x201, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x224, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x9, 0x6, 0x9}, {0x73db, 0x3, 0xdc, 0x1ff}, {0x7, 0x40, 0x5, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6d}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xdee2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r5}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0xf4, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x3, 0x0, 0x3}, {0x68, 0x7, 0x1f, 0x3}, {0x4, 0x2, 0x7, 0xfffffffc}, {0x8, 0xd4, 0x7, 0xd85}, {0x8, 0x0, 0x4}, {0x7, 0x7, 0x2, 0x792}, {0xfabc, 0x2, 0xc4, 0x8}, {0x5d, 0xb6, 0x1, 0x7}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x5ac}, 0x1, 0x0, 0x0, 0x8040}, 0x40040) 902.720923ms ago: executing program 2 (id=1281): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000d40)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a", 0xfffffd61, 0x4000800, 0x0, 0xfffffffffffffef8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 789.291825ms ago: executing program 3 (id=1282): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)) sendto$packet(r0, &(0x7f0000000640)="053c4305", 0x4, 0xb00, 0x0, 0x0) 564.909591ms ago: executing program 3 (id=1283): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)=""/212, 0xd4}], 0x1}, 0x3ff}], 0x4000300, 0x2, 0x0) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00006001ffffffffa7c8779ccd6effff000000000001a000"], 0x2e) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x38, 0x0, 0x1, 0x80000, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x38}}, 0x40000) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x4c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c1}, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r6, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r9) sendmsg$IEEE802154_LLSEC_LIST_DEV(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r10, 0x701}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="40000000020901030000000000000005100002000c000280050001"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) 479.888413ms ago: executing program 1 (id=1284): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x20, 0x40, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x40}]}]}, 0x20}}, 0x4010) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000400)=""/4096, &(0x7f00000000c0)=0x1000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x101, 0x4) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x6}}, @enum={0xd, 0x5, 0x0, 0x6, 0x4, [{0x2}, {0xb, 0x9}, {0x9, 0x3ff}, {0xf, 0x1}, {0x3, 0xfffffffa}]}, @struct={0xc, 0x2, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x0, 0x80000000}, {0x6, 0x6, 0xdf}]}, @restrict={0x5, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x2e, 0x2e, 0x5f, 0xe, 0x60]}}, &(0x7f0000000040)=""/24, 0x9c, 0x18, 0x0, 0x8, 0x10000, @value=r3}, 0x28) socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001780)={0x14, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) 431.727261ms ago: executing program 0 (id=1285): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x802, 0x7}, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'pim6reg0\x00', {0x2}, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYRESHEX=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x20, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0xeb02a6408367861b, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008821}, 0x10) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000180)}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) 265.042518ms ago: executing program 0 (id=1286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x1, 0x4}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xffff}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) socket(0x400000000010, 0x3, 0x0) socket$inet(0x2, 0xa, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r6], 0x54}}, 0x0) 254.807054ms ago: executing program 1 (id=1287): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0xff, @private0, 0x680b}}, 0x5f2, 0x1}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r2, 0x1, 0x3175, 0x5}, &(0x7f0000000280)=0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x10, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000011c0), r1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002cbd7000fedbdf25620000000c00990006000000000000000600b300030000000600b300020000000600b400e30d00000600b30002000000"], 0x40}, 0x1, 0x0, 0x0, 0x64008080}, 0x8011) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000006a00000227bd7000ffdbdf250a0000000000000008000500", @ANYRES32=r5, @ANYBLOB="080001000200000008000500", @ANYRES32=r5, @ANYBLOB='\x00', @ANYRES32=r5, @ANYBLOB="08000a0002000000080001000200000008000100020000000800010002000000"], 0x58}, 0x1, 0x0, 0x0, 0x20040011}, 0x4) 215.407806ms ago: executing program 4 (id=1288): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x800}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x114, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x1001d, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xe4, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7f}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xa0, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfe}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000000000001e000000080017"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) writev(r9, &(0x7f0000000900)=[{&(0x7f0000000540)='x', 0x1}], 0x1) socket$caif_stream(0x25, 0x1, 0x5) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f00000000c0)) 200.402112ms ago: executing program 0 (id=1289): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4a21, 0x1000009, @remote, 0x6}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) 121.818563ms ago: executing program 1 (id=1290): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0xcb1f, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) sendmmsg$inet6(r0, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="52e0", 0x2}, {0x0}], 0x2}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000340)="14a79b6f450b2af789d13fff59613456ba592140616f23cd2138464300f9e8d9b4f0d581a40c6b92a396a18dc23c67fbde52bead207f11b9b45236ea50fb1ea907cbf865688cefee811ef12f5bf99ac79128dac8799745afd44826a52f09268e2d5cf65fe3450c87a1d733df77e8e97b1d908104cf18f66f6f77589e30d1205cb3300df57133f47d8eb51dd5939270b4c52dec4bd395bd29a43d34388815b5a692b728c4c3f22a9d865ba701f3ca13a28cd8eb295c6b06920713908c6d353c74a474c1a56180199f619d", 0xca}], 0x1, &(0x7f0000000480)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x0, 0x2, '\x00', [@generic, @calipso={0x7, 0x10, {0x2, 0x2, 0xe, 0x1000, [0x4]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdr={{0x18, 0x29, 0x39, {0x32, 0x0, 0x0, 0x1}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x21, 0x1, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0x6a05}}]}}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000ac0)="42724adb018413b750e5e1cfc513d9e65d10db442fa2eeeeefebe648e12ed778c104d27ca17323249865b9a0b00c51fd84921a3dd8bf4fb38c679514054863375d02", 0x42}, {&(0x7f0000000b80)="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", 0x420}], 0x2}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000005ac0)={0xa, 0x4e24, 0x3, @loopback}, 0x1c, &(0x7f0000005bc0)=[{&(0x7f0000005b00)}], 0x1}}], 0x5, 0x40011) 121.627556ms ago: executing program 0 (id=1291): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0xcb1f, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r1, 0x4, 0x3}, 0x50) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) 120.812675ms ago: executing program 1 (id=1292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0xf5ffffff, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "f2"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 120.23664ms ago: executing program 4 (id=1293): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 75.238522ms ago: executing program 4 (id=1294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}}, 0x4008800) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1d, 0x3, @remote, 0x2}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000140)=0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x2, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 74.608706ms ago: executing program 1 (id=1295): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804) unshare(0x600) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020605000000000000000000010000001400078008002a8443f00000080012400000ffff0500010006000000050005000200000090fd0400000000000900020073797a310000000011000300686173683a6e65742c6e657400000000"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112df000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8045) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}}, 0x20000080) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x1, 0x10048095, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000000c0)={'netdevsim0\x00', @link_local}) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800490000380000000000069078ac1e0001ac14140d8307d7e0000002860600"/54, @ANYRES32=0x41424344, @ANYBLOB="fc421ef57e9341bc0ce3ecd17797c54f4d767c27d669ac9fbf1f52e693198c696414ff5881cdc18a1bd6b09e2534fc291b62c3a877fd197e767234bfc1de811148b5c9ad02d8874af87e4ad33a2175e64bb15516c1c0f7359b579123d732d8a19a09c61e3e74c176b238a40646b435c2e6ec3d8bb00bfa256b9fc446704fac", @ANYBLOB="5000000090780000"], 0x0) socket(0x2a, 0x2, 0x0) 35.388842ms ago: executing program 4 (id=1296): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) unshare(0x22020600) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) unshare(0x22020400) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0xa4200, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000006f80)=[{{0x0, 0x0, &(0x7f0000003e80)=[{&(0x7f00000039c0)}, {&(0x7f0000000800)="1a16922ba4f637d97c2acc4140e62343502824790de32273bef566964a1491323fa93b", 0x23}, {&(0x7f0000003ac0)="07923dea5571554559488c8c703998ca166124bedc31557330e5711319bc8c315e2ccf0b8d6598874f52b4ebc03f96be1b0e35de1db92dc42abf9b5eb4552dbe8845df56d020b8a8284a7e9cc74907ff1d0a2db48358e5711b1fec", 0x5b}, {&(0x7f0000003b40)="75370dc2c6", 0x5}, {&(0x7f0000003bc0)='\b', 0x1}, {&(0x7f0000003c00)="d93b", 0x2}], 0x6}}], 0x1, 0x800) r4 = accept(r3, &(0x7f00000010c0)=@alg, &(0x7f00000001c0)=0x80) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000740)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$rds(r0, &(0x7f0000001480)={&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/168, 0xa8}, {&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000140)=""/21, 0x15}, {&(0x7f0000000400)=""/16, 0x10}, {&(0x7f0000000440)=""/8, 0x8}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f00000005c0)=""/166, 0xa6}, {&(0x7f0000000680)=""/51, 0x33}], 0x8, &(0x7f0000001240)=[@rdma_dest={0x18, 0x114, 0x2, {0x5, 0x9}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000780)=""/216, 0xd8}, &(0x7f0000000880), 0x6}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000008c0)=""/228, 0xe4}, &(0x7f00000009c0), 0x40}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x4}, &(0x7f0000000a00)=0xfffffffffffffff8, &(0x7f0000000a40)=0x9, 0x5, 0x23c9, 0x8, 0xfffffffffffffffb, 0x5, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x6, 0xfffffff2}, &(0x7f0000000a80)=0x44, &(0x7f0000000ac0)=0x5, 0xf, 0x0, 0x7, 0x0, 0x47, 0xffffffffa3926488}}, @mask_fadd={0x58, 0x114, 0x8, {{0xb, 0xe}, &(0x7f0000000b00)=0x4, &(0x7f0000000b40)=0x8, 0x8, 0x7, 0x259, 0x2, 0xd30095350cf42ac6, 0xc}}, @rdma_args={0x48, 0x114, 0x1, {{0x81, 0x80000001}, {&(0x7f0000000b80)=""/81, 0x51}, &(0x7f0000000c80)=[{&(0x7f0000000c00)=""/72, 0x48}], 0x1, 0x10, 0xf53}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x10001}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0xd}, {&(0x7f0000000cc0)=""/81, 0x51}, &(0x7f00000011c0)=[{&(0x7f0000000d40)=""/34, 0x22}, {&(0x7f0000000d80)=""/113, 0x71}, {&(0x7f0000000e00)=""/240, 0xf0}, {&(0x7f0000000f00)=""/60, 0x3c}, {&(0x7f0000000f40)=""/119, 0x77}, {&(0x7f0000000fc0)=""/191, 0xbf}, {&(0x7f0000001080)=""/21, 0x15}, {0x0}], 0x8, 0x2, 0x3}}], 0x228, 0x24044094}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038340300000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000008030380040300800800034000000002100002800c00028008000180000000000c000440", @ANYBLOB='FQLk'], 0x3c8}, 0x1, 0x0, 0x0, 0x4}, 0x50) recvmsg(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x38}, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc0100000000000000000000000000010001071435060387000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010100, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x28}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$PPPIOCGIDLE64(r8, 0x8010743f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) socket$tipc(0x1e, 0x2, 0x0) 0s ago: executing program 2 (id=1297): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r3, &(0x7f0000001280), 0x0, 0x60010062, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000021}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r5, &(0x7f00000001c0)="402a55c6"}, 0x20) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) kernel console output (not intermixed with test programs): ] netdev_register_kobject+0x178/0x310 [ 119.614858][ T7444] register_netdevice+0x126c/0x1ae0 [ 119.614892][ T7444] ? __pfx_register_netdevice+0x10/0x10 [ 119.614920][ T7444] ? __asan_memset+0x22/0x50 [ 119.614944][ T7444] ? dev_addr_mod+0x2ce/0x3d0 [ 119.614970][ T7444] ip6gre_newlink_common+0x3dd/0x590 [ 119.614998][ T7444] ? net_generic+0x1e/0x240 [ 119.615022][ T7444] ? __pfx_ip6gre_newlink_common+0x10/0x10 [ 119.615049][ T7444] ? ip6gre_tunnel_find+0x501/0x5a0 [ 119.615081][ T7444] ip6gre_newlink+0x228/0x360 [ 119.615105][ T7444] ? __pfx_ip6gre_newlink+0x10/0x10 [ 119.615130][ T7444] rtnl_newlink_create+0x30d/0xb00 [ 119.615159][ T7444] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 119.615184][ T7444] ? __pfx___mutex_lock+0x10/0x10 [ 119.615222][ T7444] ? ns_capable+0x8a/0xf0 [ 119.615244][ T7444] rtnl_newlink+0x16d6/0x1c70 [ 119.615279][ T7444] ? netlink_sendmsg+0x805/0xb30 [ 119.615305][ T7444] ? __pfx_rtnl_newlink+0x10/0x10 [ 119.615350][ T7444] ? rcu_is_watching+0x15/0xb0 [ 119.615375][ T7444] ? nlmon_xmit+0xb0/0x100 [ 119.615395][ T7444] ? kmem_cache_free+0x18f/0x400 [ 119.615429][ T7444] ? rcu_is_watching+0x15/0xb0 [ 119.615450][ T7444] ? __dev_queue_xmit+0x27b/0x3b50 [ 119.615476][ T7444] ? __local_bh_enable_ip+0x12d/0x1c0 [ 119.615498][ T7444] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 119.615518][ T7444] ? __dev_queue_xmit+0x27b/0x3b50 [ 119.615543][ T7444] ? lock_release+0x4b/0x3e0 [ 119.615576][ T7444] ? __dev_queue_xmit+0x27b/0x3b50 [ 119.615600][ T7444] ? __dev_queue_xmit+0x27b/0x3b50 [ 119.615640][ T7444] ? __dev_queue_xmit+0x1d79/0x3b50 [ 119.615674][ T7444] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 119.615709][ T7444] ? lock_release+0x4b/0x3e0 [ 119.615739][ T7444] ? bpf_lsm_capable+0x9/0x20 [ 119.615769][ T7444] ? security_capable+0x7e/0x2e0 [ 119.615803][ T7444] ? __pfx_rtnl_newlink+0x10/0x10 [ 119.615836][ T7444] rtnetlink_rcv_msg+0x7cc/0xb70 [ 119.615869][ T7444] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 119.615901][ T7444] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.615932][ T7444] ? ref_tracker_free+0x63a/0x7d0 [ 119.615964][ T7444] ? __asan_memcpy+0x40/0x70 [ 119.615988][ T7444] ? __pfx_ref_tracker_free+0x10/0x10 [ 119.616025][ T7444] netlink_rcv_skb+0x205/0x470 [ 119.616058][ T7444] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.616092][ T7444] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.616136][ T7444] netlink_unicast+0x82f/0x9e0 [ 119.616171][ T7444] ? __pfx_netlink_unicast+0x10/0x10 [ 119.616201][ T7444] ? netlink_sendmsg+0x642/0xb30 [ 119.616240][ T7444] ? skb_put+0x11b/0x210 [ 119.616262][ T7444] netlink_sendmsg+0x805/0xb30 [ 119.616286][ T7444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.616308][ T7444] ? aa_sock_msg_perm+0xf1/0x1d0 [ 119.616328][ T7444] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.616351][ T7444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.616371][ T7444] __sock_sendmsg+0x219/0x270 [ 119.616401][ T7444] ____sys_sendmsg+0x505/0x830 [ 119.616428][ T7444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.616455][ T7444] ? import_iovec+0x74/0xa0 [ 119.616482][ T7444] ___sys_sendmsg+0x21f/0x2a0 [ 119.616505][ T7444] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.616548][ T7444] ? __fget_files+0x2a/0x420 [ 119.616566][ T7444] ? __fget_files+0x3a0/0x420 [ 119.616591][ T7444] __x64_sys_sendmsg+0x19b/0x260 [ 119.616615][ T7444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.616647][ T7444] ? __pfx_ksys_write+0x10/0x10 [ 119.616673][ T7444] ? rcu_is_watching+0x15/0xb0 [ 119.616695][ T7444] ? rcu_is_watching+0x15/0xb0 [ 119.616717][ T7444] do_syscall_64+0xfa/0x3b0 [ 119.616736][ T7444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.616758][ T7444] ? clear_bhb_loop+0x60/0xb0 [ 119.616783][ T7444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.616804][ T7444] RIP: 0033:0x7efcd258ebe9 [ 119.616824][ T7444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.616844][ T7444] RSP: 002b:00007efcd331d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.616868][ T7444] RAX: ffffffffffffffda RBX: 00007efcd27b5fa0 RCX: 00007efcd258ebe9 [ 119.616885][ T7444] RDX: 0000000020040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 119.616900][ T7444] RBP: 00007efcd331d090 R08: 0000000000000000 R09: 0000000000000000 [ 119.616915][ T7444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.616929][ T7444] R13: 00007efcd27b6038 R14: 00007efcd27b5fa0 R15: 00007fff78706218 [ 119.616954][ T7444] [ 120.292060][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'. [ 120.359449][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'. [ 120.743212][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 121.001531][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 121.057775][ T7488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.471'. [ 121.090109][ T7491] netlink: 'syz.1.472': attribute type 6 has an invalid length. [ 121.130392][ T7491] netlink: 'syz.1.472': attribute type 5 has an invalid length. [ 122.175749][ T7526] macsec1: entered promiscuous mode [ 122.229896][ T7526] macsec1: entered allmulticast mode [ 122.339833][ T7532] netlink: 'syz.3.486': attribute type 6 has an invalid length. [ 122.365715][ T7532] netlink: 'syz.3.486': attribute type 5 has an invalid length. [ 122.458827][ T7537] netlink: 'syz.2.488': attribute type 1 has an invalid length. [ 122.635433][ T7550] FAULT_INJECTION: forcing a failure. [ 122.635433][ T7550] name failslab, interval 1, probability 0, space 0, times 0 [ 122.658473][ T7550] CPU: 0 UID: 0 PID: 7550 Comm: syz.2.492 Not tainted syzkaller #0 PREEMPT(full) [ 122.658509][ T7550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.658523][ T7550] Call Trace: [ 122.658531][ T7550] [ 122.658540][ T7550] dump_stack_lvl+0x189/0x250 [ 122.658572][ T7550] ? __pfx____ratelimit+0x10/0x10 [ 122.658604][ T7550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.658629][ T7550] ? __pfx__printk+0x10/0x10 [ 122.658660][ T7550] ? fs_reclaim_acquire+0x7d/0x100 [ 122.658693][ T7550] ? rcu_is_watching+0x15/0xb0 [ 122.658714][ T7550] ? __pfx___might_resched+0x10/0x10 [ 122.658733][ T7550] ? lock_acquire+0x5f/0x360 [ 122.658765][ T7550] should_fail_ex+0x414/0x560 [ 122.658796][ T7550] should_failslab+0xa8/0x100 [ 122.658827][ T7550] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 122.658857][ T7550] ? __alloc_skb+0x112/0x2d0 [ 122.658875][ T7550] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 122.658908][ T7550] __alloc_skb+0x112/0x2d0 [ 122.658930][ T7550] pfkey_sendmsg+0x1dd/0x1090 [ 122.658954][ T7550] ? __pfx___might_resched+0x10/0x10 [ 122.658978][ T7550] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 122.659002][ T7550] ? aa_sk_perm+0x81e/0x950 [ 122.659035][ T7550] ? __pfx_aa_sk_perm+0x10/0x10 [ 122.659064][ T7550] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 122.659090][ T7550] ? is_bpf_text_address+0x26/0x2b0 [ 122.659129][ T7550] ? rcu_is_watching+0x15/0xb0 [ 122.659147][ T7550] ? aa_sock_msg_perm+0xf1/0x1d0 [ 122.659168][ T7550] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.659190][ T7550] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 122.659211][ T7550] __sock_sendmsg+0x219/0x270 [ 122.659240][ T7550] ____sys_sendmsg+0x52d/0x830 [ 122.659265][ T7550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.659294][ T7550] ? import_iovec+0x74/0xa0 [ 122.659320][ T7550] ___sys_sendmsg+0x21f/0x2a0 [ 122.659343][ T7550] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.659367][ T7550] ? kstrtouint+0x6e/0xe0 [ 122.659415][ T7550] ? rcu_is_watching+0x15/0xb0 [ 122.659436][ T7550] ? lock_release+0x4b/0x3e0 [ 122.659466][ T7550] ? __might_fault+0xcc/0x130 [ 122.659495][ T7550] __sys_sendmmsg+0x227/0x430 [ 122.659519][ T7550] ? __pfx___sys_sendmmsg+0x10/0x10 [ 122.659537][ T7550] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 122.659582][ T7550] ? ksys_write+0x22a/0x250 [ 122.659609][ T7550] ? __pfx_ksys_write+0x10/0x10 [ 122.659634][ T7550] ? rcu_is_watching+0x15/0xb0 [ 122.659657][ T7550] __x64_sys_sendmmsg+0xa0/0xc0 [ 122.659679][ T7550] do_syscall_64+0xfa/0x3b0 [ 122.659698][ T7550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.659718][ T7550] ? clear_bhb_loop+0x60/0xb0 [ 122.659741][ T7550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.659761][ T7550] RIP: 0033:0x7f4277d8ebe9 [ 122.659779][ T7550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.659797][ T7550] RSP: 002b:00007f4278b39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 122.659819][ T7550] RAX: ffffffffffffffda RBX: 00007f4277fb5fa0 RCX: 00007f4277d8ebe9 [ 122.659835][ T7550] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000005 [ 122.659849][ T7550] RBP: 00007f4278b39090 R08: 0000000000000000 R09: 0000000000000000 [ 122.659863][ T7550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.659876][ T7550] R13: 00007f4277fb6038 R14: 00007f4277fb5fa0 R15: 00007ffc767a0688 [ 122.659901][ T7550] [ 123.798263][ T7590] __nla_validate_parse: 16 callbacks suppressed [ 123.798287][ T7590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 123.884936][ T7590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.505'. [ 123.901934][ T7590] netlink: 43 bytes leftover after parsing attributes in process `syz.1.505'. [ 123.913561][ T7590] netlink: 'syz.1.505': attribute type 6 has an invalid length. [ 123.922206][ T7590] netlink: 'syz.1.505': attribute type 5 has an invalid length. [ 123.932725][ T7590] netlink: 43 bytes leftover after parsing attributes in process `syz.1.505'. [ 124.121664][ T7601] netlink: 36 bytes leftover after parsing attributes in process `syz.3.508'. [ 124.644011][ T7621] netlink: 'syz.0.513': attribute type 32 has an invalid length. [ 124.673831][ T7622] netlink: 52 bytes leftover after parsing attributes in process `syz.3.514'. [ 124.697521][ T7622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.514'. [ 124.708302][ T7622] netlink: 52 bytes leftover after parsing attributes in process `syz.3.514'. [ 124.770898][ T7624] netlink: 52 bytes leftover after parsing attributes in process `syz.4.515'. [ 124.795751][ T7624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.515'. [ 125.017005][ T7635] netlink: 'syz.4.519': attribute type 6 has an invalid length. [ 125.034832][ T7635] netlink: 'syz.4.519': attribute type 5 has an invalid length. [ 125.685206][ T7664] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 125.750362][ T7669] C: renamed from lo (while UP) [ 125.799476][ T7669] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 126.737735][ T7684] netlink: 'syz.4.532': attribute type 6 has an invalid length. [ 126.745551][ T7684] netlink: 'syz.4.532': attribute type 5 has an invalid length. [ 126.869166][ T7695] !: renamed from dummy0 (while UP) [ 127.259078][ T7711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.407935][ T7716] netlink: 'syz.1.539': attribute type 5 has an invalid length. [ 127.895528][ T7716] batman_adv: batadv0: Adding interface: vxlan0 [ 127.901973][ T7716] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.932596][ T7716] batman_adv: batadv0: Interface activated: vxlan0 [ 127.954470][ T72] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.988826][ T72] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.003006][ T72] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.180295][ T72] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.223013][ T7751] IPVS: Unknown mcast interface: veth1_to_bridge [ 128.572907][ T7764] netlink: zone id is out of range [ 128.644503][ T7764] netlink: zone id is out of range [ 128.653094][ T7764] netlink: zone id is out of range [ 128.659743][ T7764] netlink: zone id is out of range [ 128.666400][ T7764] netlink: zone id is out of range [ 128.672065][ T7764] netlink: zone id is out of range [ 128.678839][ T7764] netlink: zone id is out of range [ 128.728379][ T7774] netlink: del zone limit has 4 unknown bytes [ 128.923880][ T7774] __nla_validate_parse: 22 callbacks suppressed [ 128.923902][ T7774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.547'. [ 129.071994][ T7778] netlink: 48 bytes leftover after parsing attributes in process `syz.0.545'. [ 129.086863][ T7778] netlink: 245 bytes leftover after parsing attributes in process `syz.0.545'. [ 129.108257][ T7769] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 129.248034][ T7781] syzkaller0: entered promiscuous mode [ 129.253861][ T7781] syzkaller0: entered allmulticast mode [ 129.282279][ T7787] FAULT_INJECTION: forcing a failure. [ 129.282279][ T7787] name failslab, interval 1, probability 0, space 0, times 0 [ 129.303189][ T7787] CPU: 1 UID: 0 PID: 7787 Comm: syz.4.549 Not tainted syzkaller #0 PREEMPT(full) [ 129.303219][ T7787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.303231][ T7787] Call Trace: [ 129.303239][ T7787] [ 129.303247][ T7787] dump_stack_lvl+0x189/0x250 [ 129.303277][ T7787] ? __pfx____ratelimit+0x10/0x10 [ 129.303311][ T7787] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.303335][ T7787] ? __pfx__printk+0x10/0x10 [ 129.303359][ T7787] ? rcu_is_watching+0x15/0xb0 [ 129.303380][ T7787] ? __pfx___might_resched+0x10/0x10 [ 129.303400][ T7787] ? lock_acquire+0x5f/0x360 [ 129.303431][ T7787] should_fail_ex+0x414/0x560 [ 129.303461][ T7787] should_failslab+0xa8/0x100 [ 129.303491][ T7787] __kmalloc_noprof+0xcb/0x4f0 [ 129.303519][ T7787] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 129.303563][ T7787] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 129.303595][ T7787] genl_family_rcv_msg_doit+0xb8/0x300 [ 129.303623][ T7787] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 129.303652][ T7787] ? apparmor_capable+0x137/0x1b0 [ 129.303677][ T7787] ? bpf_lsm_capable+0x9/0x20 [ 129.303704][ T7787] ? security_capable+0x7e/0x2e0 [ 129.303736][ T7787] genl_rcv_msg+0x60e/0x790 [ 129.303761][ T7787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.303802][ T7787] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 129.303835][ T7787] ? __asan_memcpy+0x40/0x70 [ 129.303858][ T7787] ? __pfx_ref_tracker_free+0x10/0x10 [ 129.303890][ T7787] netlink_rcv_skb+0x205/0x470 [ 129.303921][ T7787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.303946][ T7787] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.303984][ T7787] ? lock_release+0x4b/0x3e0 [ 129.304016][ T7787] ? down_read+0x1ad/0x2e0 [ 129.304037][ T7787] genl_rcv+0x28/0x40 [ 129.304059][ T7787] netlink_unicast+0x82f/0x9e0 [ 129.304092][ T7787] ? __pfx_netlink_unicast+0x10/0x10 [ 129.304121][ T7787] ? netlink_sendmsg+0x642/0xb30 [ 129.304138][ T7787] ? skb_put+0x11b/0x210 [ 129.304160][ T7787] netlink_sendmsg+0x805/0xb30 [ 129.304184][ T7787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.304204][ T7787] ? aa_sock_msg_perm+0xf1/0x1d0 [ 129.304224][ T7787] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 129.304247][ T7787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.304266][ T7787] __sock_sendmsg+0x219/0x270 [ 129.304295][ T7787] ____sys_sendmsg+0x505/0x830 [ 129.304320][ T7787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.304346][ T7787] ? import_iovec+0x74/0xa0 [ 129.304372][ T7787] ___sys_sendmsg+0x21f/0x2a0 [ 129.304395][ T7787] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.304435][ T7787] ? __fget_files+0x2a/0x420 [ 129.304453][ T7787] ? __fget_files+0x3a0/0x420 [ 129.304475][ T7787] __x64_sys_sendmsg+0x19b/0x260 [ 129.304498][ T7787] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.304536][ T7787] ? __pfx_ksys_write+0x10/0x10 [ 129.304563][ T7787] ? rcu_is_watching+0x15/0xb0 [ 129.304585][ T7787] ? rcu_is_watching+0x15/0xb0 [ 129.304606][ T7787] do_syscall_64+0xfa/0x3b0 [ 129.304625][ T7787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.304643][ T7787] ? clear_bhb_loop+0x60/0xb0 [ 129.304666][ T7787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.304686][ T7787] RIP: 0033:0x7f9b5c18ebe9 [ 129.304705][ T7787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.304724][ T7787] RSP: 002b:00007f9b5cf5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.304746][ T7787] RAX: ffffffffffffffda RBX: 00007f9b5c3b5fa0 RCX: 00007f9b5c18ebe9 [ 129.304762][ T7787] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 129.304775][ T7787] RBP: 00007f9b5cf5a090 R08: 0000000000000000 R09: 0000000000000000 [ 129.304788][ T7787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.304801][ T7787] R13: 00007f9b5c3b6038 R14: 00007f9b5c3b5fa0 R15: 00007ffdcbf42d78 [ 129.304825][ T7787] [ 129.929095][ T7803] FAULT_INJECTION: forcing a failure. [ 129.929095][ T7803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.950680][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 129.972757][ T7803] CPU: 0 UID: 0 PID: 7803 Comm: syz.2.555 Not tainted syzkaller #0 PREEMPT(full) [ 129.972787][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.972801][ T7803] Call Trace: [ 129.972810][ T7803] [ 129.972818][ T7803] dump_stack_lvl+0x189/0x250 [ 129.972849][ T7803] ? __pfx____ratelimit+0x10/0x10 [ 129.972881][ T7803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.972906][ T7803] ? __pfx__printk+0x10/0x10 [ 129.972933][ T7803] ? __might_fault+0xb0/0x130 [ 129.972967][ T7803] ? rcu_is_watching+0x15/0xb0 [ 129.972990][ T7803] should_fail_ex+0x414/0x560 [ 129.973019][ T7803] _copy_from_user+0x2d/0xb0 [ 129.973044][ T7803] ___sys_recvmsg+0x12e/0x510 [ 129.973072][ T7803] ? __pfx____sys_recvmsg+0x10/0x10 [ 129.973098][ T7803] ? __fget_files+0x2a/0x420 [ 129.973126][ T7803] ? rcu_is_watching+0x15/0xb0 [ 129.973146][ T7803] ? lock_release+0x4b/0x3e0 [ 129.973178][ T7803] ? __might_fault+0xcc/0x130 [ 129.973207][ T7803] do_recvmmsg+0x307/0x770 [ 129.973235][ T7803] ? __pfx_do_recvmmsg+0x10/0x10 [ 129.973266][ T7803] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 129.973309][ T7803] __x64_sys_recvmmsg+0x190/0x240 [ 129.973335][ T7803] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 129.973358][ T7803] ? rcu_is_watching+0x15/0xb0 [ 129.973382][ T7803] ? rcu_is_watching+0x15/0xb0 [ 129.973403][ T7803] do_syscall_64+0xfa/0x3b0 [ 129.973423][ T7803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.973444][ T7803] ? clear_bhb_loop+0x60/0xb0 [ 129.973476][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.973497][ T7803] RIP: 0033:0x7f4277d8ebe9 [ 129.973516][ T7803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.973535][ T7803] RSP: 002b:00007f4278b39038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 129.973559][ T7803] RAX: ffffffffffffffda RBX: 00007f4277fb5fa0 RCX: 00007f4277d8ebe9 [ 129.973575][ T7803] RDX: 0000000004000032 RSI: 0000200000004c00 RDI: 0000000000000004 [ 129.973589][ T7803] RBP: 00007f4278b39090 R08: 0000000000000000 R09: 0000000000000000 [ 129.973603][ T7803] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000001 [ 129.973616][ T7803] R13: 00007f4277fb6038 R14: 00007f4277fb5fa0 R15: 00007ffc767a0688 [ 129.973641][ T7803] [ 130.173834][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 130.364470][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'. [ 130.406584][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.494644][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 130.520822][ T7820] bridge_slave_1 (unregistering): left allmulticast mode [ 130.528957][ T7820] bridge_slave_1 (unregistering): left promiscuous mode [ 130.550195][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.612137][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.565'. [ 130.623245][ T7823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.561'. [ 130.881319][ T7847] netlink: 20 bytes leftover after parsing attributes in process `syz.4.569'. [ 130.949849][ T7857] netlink: 'syz.1.574': attribute type 1 has an invalid length. [ 130.981010][ T7857] bond0: entered promiscuous mode [ 130.986604][ T7857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.008649][ T7857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.015741][ T7857] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 131.026315][ T7857] bond0: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 131.043485][ T7857] bond0: (slave vxcan1): making interface the new active one [ 131.051618][ T7857] vxcan1: entered promiscuous mode [ 131.060518][ T7857] bond0: (slave vxcan1): Enslaving as an active interface with an up link [ 131.090759][ T7860] syzkaller0: entered promiscuous mode [ 131.101991][ T7860] syzkaller0: entered allmulticast mode [ 131.972395][ T7906] netlink: 'syz.4.591': attribute type 58 has an invalid length. [ 132.104430][ T7914] net_ratelimit: 2 callbacks suppressed [ 132.104452][ T7914] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 134.398918][ T8006] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 134.425445][ T8006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.490679][ T8006] veth3: entered promiscuous mode [ 134.663148][ T8019] __nla_validate_parse: 19 callbacks suppressed [ 134.663171][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.625'. [ 134.692038][ T8021] netlink: 52 bytes leftover after parsing attributes in process `syz.4.628'. [ 134.711699][ T8021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.628'. [ 134.732759][ T8021] netlink: 52 bytes leftover after parsing attributes in process `syz.4.628'. [ 134.785931][ T8026] tipc: Enabled bearer , priority 0 [ 134.796980][ T8026] syzkaller0: entered promiscuous mode [ 134.802775][ T8026] syzkaller0: entered allmulticast mode [ 134.884573][ T8026] tipc: Resetting bearer [ 135.105809][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 135.168377][ T8048] bridge_slave_1: left allmulticast mode [ 135.174093][ T8048] bridge_slave_1: left promiscuous mode [ 135.180168][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.191329][ T8048] bridge_slave_0: left allmulticast mode [ 135.197174][ T8048] bridge_slave_0: left promiscuous mode [ 135.203153][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.262612][ T8048] Ã: (slave bridge0): Releasing backup interface [ 135.404752][ T8053] tipc: Enabling of bearer rejected, failed to enable media [ 135.510902][ T8057] netlink: 64 bytes leftover after parsing attributes in process `syz.1.640'. [ 135.586013][ T8024] tipc: Resetting bearer [ 135.627292][ T8024] tipc: Disabling bearer [ 135.679462][ T8066] netlink: 164 bytes leftover after parsing attributes in process `syz.1.643'. [ 135.707681][ T30] audit: type=1800 audit(1756347029.706:2): pid=8058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.639" name="memory.events" dev="tmpfs" ino=736 res=0 errno=0 [ 135.787059][ T8069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.644'. [ 135.974911][ T8076] netlink: 248 bytes leftover after parsing attributes in process `syz.1.646'. [ 136.139496][ T8078] netlink: 248 bytes leftover after parsing attributes in process `syz.1.646'. [ 136.195592][ T8083] netlink: 'syz.4.648': attribute type 21 has an invalid length. [ 136.910096][ T8116] dvmrp8: entered allmulticast mode [ 137.423876][ T8127] tipc: Enabling of bearer rejected, already enabled [ 138.080859][ T8163] netlink: 'syz.3.665': attribute type 8 has an invalid length. [ 138.107315][ T8165] netlink: 'syz.3.665': attribute type 8 has an invalid length. [ 138.122108][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.322139][ T8171] FAULT_INJECTION: forcing a failure. [ 138.322139][ T8171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.350131][ T8171] CPU: 1 UID: 0 PID: 8171 Comm: syz.2.666 Not tainted syzkaller #0 PREEMPT(full) [ 138.350160][ T8171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.350173][ T8171] Call Trace: [ 138.350180][ T8171] [ 138.350189][ T8171] dump_stack_lvl+0x189/0x250 [ 138.350220][ T8171] ? __pfx____ratelimit+0x10/0x10 [ 138.350250][ T8171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.350273][ T8171] ? __pfx__printk+0x10/0x10 [ 138.350305][ T8171] ? rcu_is_watching+0x15/0xb0 [ 138.350328][ T8171] should_fail_ex+0x414/0x560 [ 138.350358][ T8171] _copy_to_user+0x31/0xb0 [ 138.350382][ T8171] simple_read_from_buffer+0xe1/0x170 [ 138.350415][ T8171] proc_fail_nth_read+0x1b3/0x220 [ 138.350441][ T8171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.350466][ T8171] ? rw_verify_area+0x2a6/0x4d0 [ 138.350491][ T8171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.350514][ T8171] vfs_read+0x1fd/0xa30 [ 138.350540][ T8171] ? fdget_pos+0x247/0x320 [ 138.350561][ T8171] ? __pfx___mutex_lock+0x10/0x10 [ 138.350592][ T8171] ? __pfx_vfs_read+0x10/0x10 [ 138.350620][ T8171] ? __free_pages_ok+0x505/0xbe0 [ 138.350652][ T8171] ? __fget_files+0x3a0/0x420 [ 138.350668][ T8171] ? __fget_files+0x2a/0x420 [ 138.350690][ T8171] ksys_read+0x145/0x250 [ 138.350718][ T8171] ? __pfx_ksys_read+0x10/0x10 [ 138.350747][ T8171] ? rcu_is_watching+0x15/0xb0 [ 138.350769][ T8171] do_syscall_64+0xfa/0x3b0 [ 138.350789][ T8171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.350810][ T8171] ? clear_bhb_loop+0x60/0xb0 [ 138.350833][ T8171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.350854][ T8171] RIP: 0033:0x7f4277d8d5fc [ 138.350872][ T8171] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 138.350891][ T8171] RSP: 002b:00007f4278b39030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.350914][ T8171] RAX: ffffffffffffffda RBX: 00007f4277fb5fa0 RCX: 00007f4277d8d5fc [ 138.350930][ T8171] RDX: 000000000000000f RSI: 00007f4278b390a0 RDI: 000000000000000a [ 138.350943][ T8171] RBP: 00007f4278b39090 R08: 0000000000000000 R09: 0000000000000000 [ 138.350956][ T8171] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 138.350968][ T8171] R13: 00007f4277fb6038 R14: 00007f4277fb5fa0 R15: 00007ffc767a0688 [ 138.351001][ T8171] [ 138.703798][ T8176] tipc: Enabling of bearer rejected, failed to enable media [ 138.786161][ T8180] tipc: Enabling of bearer rejected, failed to enable media [ 138.869692][ T8186] openvswitch: netlink: IP tunnel TTL not specified. [ 138.961176][ T8191] netlink: 'syz.3.674': attribute type 6 has an invalid length. [ 138.969082][ T8191] netlink: 'syz.3.674': attribute type 5 has an invalid length. [ 139.124548][ T8197] tipc: Enabled bearer , priority 0 [ 139.144456][ T8197] syzkaller0: entered promiscuous mode [ 139.150221][ T8197] syzkaller0: entered allmulticast mode [ 139.164044][ T8197] tipc: Resetting bearer [ 139.171262][ T8196] tipc: Resetting bearer [ 139.192257][ T8196] tipc: Disabling bearer [ 139.257800][ T8205] tls_set_device_offload_rx: netdev not found [ 139.289063][ T8207] !: renamed from dummy0 (while UP) [ 139.384089][ T8209] ipvlan0: entered promiscuous mode [ 139.619286][ T8215] FAULT_INJECTION: forcing a failure. [ 139.619286][ T8215] name failslab, interval 1, probability 0, space 0, times 0 [ 139.635950][ T8215] CPU: 0 UID: 0 PID: 8215 Comm: syz.0.686 Not tainted syzkaller #0 PREEMPT(full) [ 139.635980][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.635994][ T8215] Call Trace: [ 139.636002][ T8215] [ 139.636012][ T8215] dump_stack_lvl+0x189/0x250 [ 139.636042][ T8215] ? __pfx____ratelimit+0x10/0x10 [ 139.636074][ T8215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.636099][ T8215] ? __pfx__printk+0x10/0x10 [ 139.636130][ T8215] ? __pfx___might_resched+0x10/0x10 [ 139.636151][ T8215] ? lock_acquire+0x5f/0x360 [ 139.636183][ T8215] should_fail_ex+0x414/0x560 [ 139.636214][ T8215] should_failslab+0xa8/0x100 [ 139.636247][ T8215] kmem_cache_alloc_noprof+0x73/0x3c0 [ 139.636275][ T8215] ? ep_insert+0x51a/0x19e0 [ 139.636308][ T8215] ep_insert+0x51a/0x19e0 [ 139.636346][ T8215] ? __pfx_ep_insert+0x10/0x10 [ 139.636375][ T8215] ? __pfx___mutex_lock+0x10/0x10 [ 139.636411][ T8215] ? apparmor_capable+0x137/0x1b0 [ 139.636438][ T8215] ? bpf_lsm_capable+0x9/0x20 [ 139.636472][ T8215] do_epoll_ctl+0x7f4/0xe80 [ 139.636507][ T8215] __x64_sys_epoll_ctl+0x163/0x1a0 [ 139.636540][ T8215] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 139.636576][ T8215] ? rcu_is_watching+0x15/0xb0 [ 139.636599][ T8215] do_syscall_64+0xfa/0x3b0 [ 139.636622][ T8215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.636642][ T8215] ? clear_bhb_loop+0x60/0xb0 [ 139.636666][ T8215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.636686][ T8215] RIP: 0033:0x7f83f9b8ebe9 [ 139.636704][ T8215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.636724][ T8215] RSP: 002b:00007f83fa940038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 139.636746][ T8215] RAX: ffffffffffffffda RBX: 00007f83f9db6180 RCX: 00007f83f9b8ebe9 [ 139.636762][ T8215] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000004 [ 139.636774][ T8215] RBP: 00007f83fa940090 R08: 0000000000000000 R09: 0000000000000000 [ 139.636788][ T8215] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 139.636801][ T8215] R13: 00007f83f9db6218 R14: 00007f83f9db6180 R15: 00007ffe60dac958 [ 139.636826][ T8215] [ 140.015270][ T8219] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 140.169941][ T8226] FAULT_INJECTION: forcing a failure. [ 140.169941][ T8226] name failslab, interval 1, probability 0, space 0, times 0 [ 140.225019][ T8226] CPU: 1 UID: 0 PID: 8226 Comm: syz.4.688 Not tainted syzkaller #0 PREEMPT(full) [ 140.225049][ T8226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.225063][ T8226] Call Trace: [ 140.225071][ T8226] [ 140.225079][ T8226] dump_stack_lvl+0x189/0x250 [ 140.225113][ T8226] ? __pfx____ratelimit+0x10/0x10 [ 140.225145][ T8226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.225170][ T8226] ? __pfx__printk+0x10/0x10 [ 140.225199][ T8226] ? genl_family_rcv_msg_doit+0x267/0x300 [ 140.225227][ T8226] ? __pfx___might_resched+0x10/0x10 [ 140.225248][ T8226] ? lock_acquire+0x5f/0x360 [ 140.225280][ T8226] should_fail_ex+0x414/0x560 [ 140.225310][ T8226] should_failslab+0xa8/0x100 [ 140.225342][ T8226] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 140.225373][ T8226] ? __alloc_skb+0x112/0x2d0 [ 140.225394][ T8226] __alloc_skb+0x112/0x2d0 [ 140.225416][ T8226] netlink_ack+0x146/0xa50 [ 140.225445][ T8226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.225472][ T8226] ? __asan_memcpy+0x40/0x70 [ 140.225495][ T8226] ? __pfx_ref_tracker_free+0x10/0x10 [ 140.225529][ T8226] netlink_rcv_skb+0x28c/0x470 [ 140.225561][ T8226] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.225587][ T8226] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.225625][ T8226] ? lock_release+0x4b/0x3e0 [ 140.225659][ T8226] ? down_read+0x1ad/0x2e0 [ 140.225680][ T8226] genl_rcv+0x28/0x40 [ 140.225703][ T8226] netlink_unicast+0x82f/0x9e0 [ 140.225737][ T8226] ? __pfx_netlink_unicast+0x10/0x10 [ 140.225766][ T8226] ? netlink_sendmsg+0x642/0xb30 [ 140.225783][ T8226] ? skb_put+0x11b/0x210 [ 140.225805][ T8226] netlink_sendmsg+0x805/0xb30 [ 140.225829][ T8226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.225850][ T8226] ? aa_sock_msg_perm+0xf1/0x1d0 [ 140.225870][ T8226] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.225893][ T8226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.225919][ T8226] __sock_sendmsg+0x219/0x270 [ 140.225948][ T8226] ____sys_sendmsg+0x505/0x830 [ 140.225974][ T8226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.226002][ T8226] ? import_iovec+0x74/0xa0 [ 140.226028][ T8226] ___sys_sendmsg+0x21f/0x2a0 [ 140.226051][ T8226] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.226095][ T8226] ? __fget_files+0x2a/0x420 [ 140.226113][ T8226] ? __fget_files+0x3a0/0x420 [ 140.226136][ T8226] __x64_sys_sendmsg+0x19b/0x260 [ 140.226161][ T8226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.226190][ T8226] ? __pfx_ksys_write+0x10/0x10 [ 140.226221][ T8226] ? rcu_is_watching+0x15/0xb0 [ 140.226244][ T8226] do_syscall_64+0xfa/0x3b0 [ 140.226264][ T8226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.226285][ T8226] ? clear_bhb_loop+0x60/0xb0 [ 140.226309][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.226329][ T8226] RIP: 0033:0x7f9b5c18ebe9 [ 140.226359][ T8226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.226378][ T8226] RSP: 002b:00007f9b5cf39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.226400][ T8226] RAX: ffffffffffffffda RBX: 00007f9b5c3b6090 RCX: 00007f9b5c18ebe9 [ 140.226416][ T8226] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 140.226429][ T8226] RBP: 00007f9b5cf39090 R08: 0000000000000000 R09: 0000000000000000 [ 140.226443][ T8226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.226455][ T8226] R13: 00007f9b5c3b6128 R14: 00007f9b5c3b6090 R15: 00007ffdcbf42d78 [ 140.226480][ T8226] [ 140.245192][ T8228] __nla_validate_parse: 14 callbacks suppressed [ 140.245215][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.691'. [ 140.954606][ T8254] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 141.009806][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 141.020812][ T8260] netlink: 'syz.2.702': attribute type 4 has an invalid length. [ 141.043788][ T8260] netlink: 152 bytes leftover after parsing attributes in process `syz.2.702'. [ 141.392973][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.709'. [ 141.434034][ T8278] geneve2: entered promiscuous mode [ 141.459601][ T8278] geneve2: entered allmulticast mode [ 141.780626][ T8301] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 141.795124][ T8303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.715'. [ 141.805782][ T8303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'. [ 141.909912][ T8305] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.950084][ T8308] FAULT_INJECTION: forcing a failure. [ 141.950084][ T8308] name failslab, interval 1, probability 0, space 0, times 0 [ 141.964496][ T8308] CPU: 0 UID: 0 PID: 8308 Comm: syz.0.717 Not tainted syzkaller #0 PREEMPT(full) [ 141.964526][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.964541][ T8308] Call Trace: [ 141.964548][ T8308] [ 141.964557][ T8308] dump_stack_lvl+0x189/0x250 [ 141.964587][ T8308] ? __pfx____ratelimit+0x10/0x10 [ 141.964618][ T8308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.964643][ T8308] ? __pfx__printk+0x10/0x10 [ 141.964672][ T8308] ? __pfx___might_resched+0x10/0x10 [ 141.964692][ T8308] ? lock_acquire+0x5f/0x360 [ 141.964724][ T8308] should_fail_ex+0x414/0x560 [ 141.964754][ T8308] should_failslab+0xa8/0x100 [ 141.964786][ T8308] __kmalloc_cache_noprof+0x70/0x3d0 [ 141.964814][ T8308] ? tcf_block_get_ext+0x68d/0x17d0 [ 141.964847][ T8308] tcf_block_get_ext+0x68d/0x17d0 [ 141.964878][ T8308] ? __sock_sendmsg+0x219/0x270 [ 141.964903][ T8308] ? ___sys_sendmsg+0x21f/0x2a0 [ 141.964923][ T8308] ? __x64_sys_sendmsg+0x19b/0x260 [ 141.964944][ T8308] ? do_syscall_64+0xfa/0x3b0 [ 141.964961][ T8308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.964987][ T8308] tcf_block_get+0x67/0xa0 [ 141.965016][ T8308] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 141.965051][ T8308] multiq_init+0x6d/0x2c0 [ 141.965079][ T8308] ? __pfx_multiq_init+0x10/0x10 [ 141.965106][ T8308] qdisc_create+0x7a9/0xea0 [ 141.965142][ T8308] tc_modify_qdisc+0x1538/0x20e0 [ 141.965178][ T8308] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 141.965216][ T8308] ? lock_release+0x4b/0x3e0 [ 141.965245][ T8308] ? bpf_lsm_capable+0x9/0x20 [ 141.965273][ T8308] ? security_capable+0x7e/0x2e0 [ 141.965307][ T8308] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 141.965332][ T8308] rtnetlink_rcv_msg+0x77c/0xb70 [ 141.965366][ T8308] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 141.965396][ T8308] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.965442][ T8308] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 141.965478][ T8308] netlink_rcv_skb+0x205/0x470 [ 141.965508][ T8308] ? rcu_is_watching+0x15/0xb0 [ 141.965528][ T8308] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.965561][ T8308] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.965606][ T8308] netlink_unicast+0x82f/0x9e0 [ 141.965639][ T8308] ? __pfx_netlink_unicast+0x10/0x10 [ 141.965669][ T8308] ? netlink_sendmsg+0x642/0xb30 [ 141.965686][ T8308] ? skb_put+0x11b/0x210 [ 141.965707][ T8308] netlink_sendmsg+0x805/0xb30 [ 141.965731][ T8308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.965752][ T8308] ? aa_sock_msg_perm+0xf1/0x1d0 [ 141.965772][ T8308] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.965794][ T8308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.965813][ T8308] __sock_sendmsg+0x219/0x270 [ 141.965842][ T8308] ____sys_sendmsg+0x505/0x830 [ 141.965866][ T8308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.965893][ T8308] ? import_iovec+0x74/0xa0 [ 141.965919][ T8308] ___sys_sendmsg+0x21f/0x2a0 [ 141.965943][ T8308] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.965986][ T8308] ? __fget_files+0x2a/0x420 [ 141.966003][ T8308] ? __fget_files+0x3a0/0x420 [ 141.966028][ T8308] __x64_sys_sendmsg+0x19b/0x260 [ 141.966051][ T8308] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.966079][ T8308] ? __pfx_ksys_write+0x10/0x10 [ 141.966103][ T8308] ? rcu_is_watching+0x15/0xb0 [ 141.966126][ T8308] ? rcu_is_watching+0x15/0xb0 [ 141.966148][ T8308] do_syscall_64+0xfa/0x3b0 [ 141.966167][ T8308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.966185][ T8308] ? clear_bhb_loop+0x60/0xb0 [ 141.966207][ T8308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.966226][ T8308] RIP: 0033:0x7f83f9b8ebe9 [ 141.966239][ T8308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.966252][ T8308] RSP: 002b:00007f83fa982038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.966268][ T8308] RAX: ffffffffffffffda RBX: 00007f83f9db5fa0 RCX: 00007f83f9b8ebe9 [ 141.966279][ T8308] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 141.966288][ T8308] RBP: 00007f83fa982090 R08: 0000000000000000 R09: 0000000000000000 [ 141.966297][ T8308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.966306][ T8308] R13: 00007f83f9db6038 R14: 00007f83f9db5fa0 R15: 00007ffe60dac958 [ 141.966324][ T8308] [ 142.443823][ T8305] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.566787][ T8305] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.646160][ T8305] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.681011][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.723'. [ 142.716151][ T8327] netlink: 40 bytes leftover after parsing attributes in process `syz.0.723'. [ 142.730289][ T8327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.741657][ T8327] bond0: (slave rose0): Enslaving as an active interface with an up link [ 142.874663][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.904322][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.964825][ T72] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.996925][ T72] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.006190][ T8350] netlink: 'syz.0.728': attribute type 32 has an invalid length. [ 143.127816][ T8360] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 143.248252][ T8369] FAULT_INJECTION: forcing a failure. [ 143.248252][ T8369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.290000][ T8369] CPU: 1 UID: 0 PID: 8369 Comm: syz.1.732 Not tainted syzkaller #0 PREEMPT(full) [ 143.290030][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.290044][ T8369] Call Trace: [ 143.290052][ T8369] [ 143.290061][ T8369] dump_stack_lvl+0x189/0x250 [ 143.290092][ T8369] ? __pfx____ratelimit+0x10/0x10 [ 143.290123][ T8369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.290148][ T8369] ? __pfx__printk+0x10/0x10 [ 143.290175][ T8369] ? __might_fault+0xb0/0x130 [ 143.290209][ T8369] ? rcu_is_watching+0x15/0xb0 [ 143.290232][ T8369] should_fail_ex+0x414/0x560 [ 143.290262][ T8369] _copy_from_user+0x2d/0xb0 [ 143.290288][ T8369] ___sys_recvmsg+0x12e/0x510 [ 143.290326][ T8369] ? __pfx____sys_recvmsg+0x10/0x10 [ 143.290352][ T8369] ? __fget_files+0x2a/0x420 [ 143.290379][ T8369] ? rcu_is_watching+0x15/0xb0 [ 143.290399][ T8369] ? lock_release+0x4b/0x3e0 [ 143.290431][ T8369] ? __might_fault+0xcc/0x130 [ 143.290461][ T8369] do_recvmmsg+0x307/0x770 [ 143.290489][ T8369] ? __pfx_do_recvmmsg+0x10/0x10 [ 143.290519][ T8369] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.290563][ T8369] __x64_sys_recvmmsg+0x190/0x240 [ 143.290589][ T8369] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 143.290613][ T8369] ? rcu_is_watching+0x15/0xb0 [ 143.290636][ T8369] ? rcu_is_watching+0x15/0xb0 [ 143.290658][ T8369] do_syscall_64+0xfa/0x3b0 [ 143.290678][ T8369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.290699][ T8369] ? clear_bhb_loop+0x60/0xb0 [ 143.290723][ T8369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.290744][ T8369] RIP: 0033:0x7efcd258ebe9 [ 143.290762][ T8369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.290782][ T8369] RSP: 002b:00007efcd331d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 143.290805][ T8369] RAX: ffffffffffffffda RBX: 00007efcd27b5fa0 RCX: 00007efcd258ebe9 [ 143.290822][ T8369] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000003 [ 143.290835][ T8369] RBP: 00007efcd331d090 R08: 0000000000000000 R09: 0000000000000000 [ 143.290849][ T8369] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 143.290862][ T8369] R13: 00007efcd27b6038 R14: 00007efcd27b5fa0 R15: 00007fff78706218 [ 143.290890][ T8369] [ 143.629107][ T8377] netlink: 56 bytes leftover after parsing attributes in process `syz.1.733'. [ 143.662974][ T8377] netlink: 44 bytes leftover after parsing attributes in process `syz.1.733'. [ 143.674811][ T8377] netlink: 'syz.1.733': attribute type 6 has an invalid length. [ 143.684782][ T8377] netlink: 'syz.1.733': attribute type 5 has an invalid length. [ 143.951953][ T8399] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20002 [ 144.363720][ T8421] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20003 [ 144.455919][ T8428] netlink: 'syz.3.747': attribute type 6 has an invalid length. [ 144.523708][ T8428] netlink: 'syz.3.747': attribute type 5 has an invalid length. [ 144.670309][ T8440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.677655][ T8440] IPv6: NLM_F_CREATE should be set when creating new route [ 144.705756][ T8444] tipc: Started in network mode [ 144.715488][ T8444] tipc: Node identity befb42908b6e, cluster identity 4711 [ 144.726345][ T8444] tipc: Enabled bearer , priority 0 [ 144.735665][ T8444] syzkaller0: entered promiscuous mode [ 144.741431][ T8444] syzkaller0: entered allmulticast mode [ 144.756359][ T8444] tipc: Resetting bearer [ 144.929674][ T8448] syzkaller0: entered promiscuous mode [ 144.944322][ T8448] syzkaller0: entered allmulticast mode [ 145.110689][ T8442] tipc: Resetting bearer [ 145.121596][ T8442] tipc: Disabling bearer [ 145.292408][ T8459] netlink: 'syz.3.759': attribute type 1 has an invalid length. [ 145.315015][ T8459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.523084][ T8467] bond0: (slave geneve3): making interface the new active one [ 145.547891][ T8467] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 145.756078][ T8476] tipc: Enabled bearer , priority 0 [ 145.809742][ T8479] syzkaller0: entered promiscuous mode [ 145.815437][ T8479] syzkaller0: entered allmulticast mode [ 145.829727][ T8476] tipc: Resetting bearer [ 145.837651][ T8478] __nla_validate_parse: 14 callbacks suppressed [ 145.837671][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.761'. [ 145.867595][ T8475] tipc: Resetting bearer [ 145.876137][ T8475] tipc: Disabling bearer [ 145.935813][ T8482] netlink: 56 bytes leftover after parsing attributes in process `syz.3.763'. [ 146.019455][ T8485] netlink: 44 bytes leftover after parsing attributes in process `syz.3.763'. [ 146.028455][ T8485] netlink: 43 bytes leftover after parsing attributes in process `syz.3.763'. [ 146.038248][ T8485] netlink: 'syz.3.763': attribute type 6 has an invalid length. [ 146.045919][ T8485] netlink: 'syz.3.763': attribute type 5 has an invalid length. [ 146.067946][ T8487] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 146.077785][ T8485] netlink: 43 bytes leftover after parsing attributes in process `syz.3.763'. [ 146.082852][ T8487] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 146.276208][ T8493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.768'. [ 146.292208][ T8493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.768'. [ 146.491055][ T8509] syzkaller1: entered promiscuous mode [ 146.498837][ T8509] syzkaller1: entered allmulticast mode [ 146.684785][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 146.740452][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'. [ 146.762584][ T8525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.779483][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'. [ 146.793277][ T8525] macsec2: entered promiscuous mode [ 146.800585][ T8525] bond0: entered promiscuous mode [ 146.805830][ T8525] macsec2: entered allmulticast mode [ 146.811449][ T8525] bond0: entered allmulticast mode [ 146.830281][ T8525] bond0: left allmulticast mode [ 146.835409][ T8525] bond0: left promiscuous mode [ 146.840833][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 147.706450][ T8562] syzkaller0: entered promiscuous mode [ 147.741605][ T8562] syzkaller0: entered allmulticast mode [ 147.831803][ T8567] ip6gretap0: entered promiscuous mode [ 147.968236][ T8573] netlink: 'syz.4.795': attribute type 1 has an invalid length. [ 148.122605][ T8585] FAULT_INJECTION: forcing a failure. [ 148.122605][ T8585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.140885][ T8585] CPU: 0 UID: 0 PID: 8585 Comm: syz.2.799 Not tainted syzkaller #0 PREEMPT(full) [ 148.140916][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.140928][ T8585] Call Trace: [ 148.140937][ T8585] [ 148.140945][ T8585] dump_stack_lvl+0x189/0x250 [ 148.140975][ T8585] ? __pfx____ratelimit+0x10/0x10 [ 148.141004][ T8585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.141028][ T8585] ? __pfx__printk+0x10/0x10 [ 148.141054][ T8585] ? __might_fault+0xb0/0x130 [ 148.141083][ T8585] ? kasan_save_track+0x3e/0x80 [ 148.141108][ T8585] ? __kasan_kmalloc+0x93/0xb0 [ 148.141136][ T8585] ? rcu_is_watching+0x15/0xb0 [ 148.141157][ T8585] should_fail_ex+0x414/0x560 [ 148.141187][ T8585] _copy_from_user+0x2d/0xb0 [ 148.141210][ T8585] csum_and_copy_from_iter_full+0x694/0x1eb0 [ 148.141244][ T8585] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 148.141273][ T8585] ? trace_kmalloc+0x1f/0xd0 [ 148.141300][ T8585] ip_generic_getfrag+0x12f/0x2b0 [ 148.141326][ T8585] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 148.141351][ T8585] ? skb_put+0x11b/0x210 [ 148.141371][ T8585] __ip_append_data+0x3ba1/0x40c0 [ 148.141406][ T8585] ? __pfx_raw_getfrag+0x10/0x10 [ 148.141439][ T8585] ? __pfx___ip_append_data+0x10/0x10 [ 148.141462][ T8585] ? ip_setup_cork+0x322/0x9a0 [ 148.141488][ T8585] ? ip_setup_cork+0x577/0x9a0 [ 148.141512][ T8585] ip_append_data+0x10e/0x190 [ 148.141538][ T8585] ? __pfx_raw_getfrag+0x10/0x10 [ 148.141561][ T8585] raw_sendmsg+0x13d8/0x18b0 [ 148.141592][ T8585] ? __pfx_raw_sendmsg+0x10/0x10 [ 148.141623][ T8585] ? aa_sk_perm+0x81e/0x950 [ 148.141655][ T8585] ? __pfx_aa_sk_perm+0x10/0x10 [ 148.141683][ T8585] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 148.141706][ T8585] ? sock_rps_record_flow+0x19/0x410 [ 148.141733][ T8585] ? inet_sendmsg+0x2f4/0x370 [ 148.141757][ T8585] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 148.141781][ T8585] __sock_sendmsg+0x19c/0x270 [ 148.141809][ T8585] ____sys_sendmsg+0x505/0x830 [ 148.141833][ T8585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.141862][ T8585] ? import_iovec+0x74/0xa0 [ 148.141893][ T8585] ___sys_sendmsg+0x21f/0x2a0 [ 148.141915][ T8585] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.141953][ T8585] ? __fget_files+0x2a/0x420 [ 148.141970][ T8585] ? __fget_files+0x3a0/0x420 [ 148.141992][ T8585] __x64_sys_sendmsg+0x19b/0x260 [ 148.142015][ T8585] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.142041][ T8585] ? __pfx_ksys_write+0x10/0x10 [ 148.142066][ T8585] ? rcu_is_watching+0x15/0xb0 [ 148.142087][ T8585] ? rcu_is_watching+0x15/0xb0 [ 148.142108][ T8585] do_syscall_64+0xfa/0x3b0 [ 148.142127][ T8585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.142147][ T8585] ? clear_bhb_loop+0x60/0xb0 [ 148.142169][ T8585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.142189][ T8585] RIP: 0033:0x7f4277d8ebe9 [ 148.142206][ T8585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.142224][ T8585] RSP: 002b:00007f4278b39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.142247][ T8585] RAX: ffffffffffffffda RBX: 00007f4277fb5fa0 RCX: 00007f4277d8ebe9 [ 148.142262][ T8585] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 148.142275][ T8585] RBP: 00007f4278b39090 R08: 0000000000000000 R09: 0000000000000000 [ 148.142288][ T8585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.142300][ T8585] R13: 00007f4277fb6038 R14: 00007f4277fb5fa0 R15: 00007ffc767a0688 [ 148.142323][ T8585] [ 148.740068][ T8592] bridge2: entered promiscuous mode [ 148.763059][ T8598] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 149.228098][ T8629] 8021q: adding VLAN 0 to HW filter on device à [ 149.249109][ T8629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.953979][ T8648] geneve2: entered promiscuous mode [ 150.053111][ T8655] FAULT_INJECTION: forcing a failure. [ 150.053111][ T8655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.096920][ T8655] CPU: 0 UID: 0 PID: 8655 Comm: syz.2.821 Not tainted syzkaller #0 PREEMPT(full) [ 150.096959][ T8655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.096973][ T8655] Call Trace: [ 150.096981][ T8655] [ 150.096990][ T8655] dump_stack_lvl+0x189/0x250 [ 150.097020][ T8655] ? __pfx____ratelimit+0x10/0x10 [ 150.097052][ T8655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.097077][ T8655] ? __pfx__printk+0x10/0x10 [ 150.097103][ T8655] ? __might_fault+0xb0/0x130 [ 150.097137][ T8655] ? rcu_is_watching+0x15/0xb0 [ 150.097160][ T8655] should_fail_ex+0x414/0x560 [ 150.097190][ T8655] _copy_from_user+0x2d/0xb0 [ 150.097214][ T8655] ___sys_recvmsg+0x12e/0x510 [ 150.097242][ T8655] ? __pfx____sys_recvmsg+0x10/0x10 [ 150.097268][ T8655] ? __fget_files+0x2a/0x420 [ 150.097297][ T8655] ? rcu_is_watching+0x15/0xb0 [ 150.097316][ T8655] ? lock_release+0x4b/0x3e0 [ 150.097347][ T8655] ? __might_fault+0xcc/0x130 [ 150.097377][ T8655] do_recvmmsg+0x307/0x770 [ 150.097406][ T8655] ? __pfx_do_recvmmsg+0x10/0x10 [ 150.097437][ T8655] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 150.097482][ T8655] __x64_sys_recvmmsg+0x190/0x240 [ 150.097508][ T8655] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 150.097531][ T8655] ? rcu_is_watching+0x15/0xb0 [ 150.097554][ T8655] ? rcu_is_watching+0x15/0xb0 [ 150.097577][ T8655] do_syscall_64+0xfa/0x3b0 [ 150.097596][ T8655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.097617][ T8655] ? clear_bhb_loop+0x60/0xb0 [ 150.097641][ T8655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.097661][ T8655] RIP: 0033:0x7f4277d8ebe9 [ 150.097680][ T8655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.097699][ T8655] RSP: 002b:00007f4278b39038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 150.097723][ T8655] RAX: ffffffffffffffda RBX: 00007f4277fb5fa0 RCX: 00007f4277d8ebe9 [ 150.097738][ T8655] RDX: 0000000004000032 RSI: 0000200000004c00 RDI: 0000000000000004 [ 150.097753][ T8655] RBP: 00007f4278b39090 R08: 0000000000000000 R09: 0000000000000000 [ 150.097766][ T8655] R10: 0000000040000021 R11: 0000000000000246 R12: 0000000000000001 [ 150.097779][ T8655] R13: 00007f4277fb6038 R14: 00007f4277fb5fa0 R15: 00007ffc767a0688 [ 150.097805][ T8655] [ 150.611567][ T8670] netlink: 'syz.4.826': attribute type 10 has an invalid length. [ 150.636236][ T8670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.656290][ T8670] Ã: (slave batadv0): Enslaving as an active interface with an up link [ 151.349744][ T8725] netlink: 'syz.2.844': attribute type 4 has an invalid length. [ 151.390193][ T8728] netlink: 'syz.1.847': attribute type 23 has an invalid length. [ 151.503778][ C1] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 151.870203][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.885855][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.113016][ T8720] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 152.242347][ T8754] FAULT_INJECTION: forcing a failure. [ 152.242347][ T8754] name failslab, interval 1, probability 0, space 0, times 0 [ 152.302614][ T8754] CPU: 1 UID: 0 PID: 8754 Comm: syz.3.850 Not tainted syzkaller #0 PREEMPT(full) [ 152.302645][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.302659][ T8754] Call Trace: [ 152.302667][ T8754] [ 152.302677][ T8754] dump_stack_lvl+0x189/0x250 [ 152.302707][ T8754] ? __pfx____ratelimit+0x10/0x10 [ 152.302738][ T8754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.302771][ T8754] ? __pfx__printk+0x10/0x10 [ 152.302802][ T8754] ? __pfx___might_resched+0x10/0x10 [ 152.302823][ T8754] ? lock_acquire+0x5f/0x360 [ 152.302854][ T8754] should_fail_ex+0x414/0x560 [ 152.302884][ T8754] should_failslab+0xa8/0x100 [ 152.302914][ T8754] __kmalloc_node_noprof+0xd1/0x4e0 [ 152.302943][ T8754] ? qdisc_alloc+0x97/0xaa0 [ 152.302975][ T8754] qdisc_alloc+0x97/0xaa0 [ 152.303009][ T8754] qdisc_create_dflt+0x8e/0x4e0 [ 152.303041][ T8754] taprio_init+0x3e5/0xbd0 [ 152.303079][ T8754] ? __pfx_taprio_init+0x10/0x10 [ 152.303108][ T8754] ? qdisc_alloc+0x7a1/0xaa0 [ 152.303139][ T8754] ? qdisc_lookup+0x36d/0x6d0 [ 152.303160][ T8754] ? __pfx_taprio_init+0x10/0x10 [ 152.303191][ T8754] qdisc_create+0x7a9/0xea0 [ 152.303221][ T8754] tc_modify_qdisc+0x1538/0x20e0 [ 152.303256][ T8754] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 152.303291][ T8754] ? lock_release+0x4b/0x3e0 [ 152.303319][ T8754] ? bpf_lsm_capable+0x9/0x20 [ 152.303347][ T8754] ? security_capable+0x7e/0x2e0 [ 152.303379][ T8754] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 152.303404][ T8754] rtnetlink_rcv_msg+0x77c/0xb70 [ 152.303437][ T8754] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 152.303467][ T8754] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.303498][ T8754] ? __netlink_lookup+0xbd/0x810 [ 152.303516][ T8754] ? rcu_is_watching+0x15/0xb0 [ 152.303538][ T8754] ? rcu_is_watching+0x15/0xb0 [ 152.303562][ T8754] netlink_rcv_skb+0x205/0x470 [ 152.303593][ T8754] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.303625][ T8754] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.303668][ T8754] netlink_unicast+0x82f/0x9e0 [ 152.303699][ T8754] ? __pfx_netlink_unicast+0x10/0x10 [ 152.303728][ T8754] ? netlink_sendmsg+0x642/0xb30 [ 152.303745][ T8754] ? skb_put+0x11b/0x210 [ 152.303772][ T8754] netlink_sendmsg+0x805/0xb30 [ 152.303796][ T8754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.303815][ T8754] ? aa_sock_msg_perm+0xf1/0x1d0 [ 152.303841][ T8754] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 152.303864][ T8754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.303883][ T8754] __sock_sendmsg+0x219/0x270 [ 152.303911][ T8754] ____sys_sendmsg+0x505/0x830 [ 152.303935][ T8754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.303969][ T8754] ? import_iovec+0x74/0xa0 [ 152.303993][ T8754] ___sys_sendmsg+0x21f/0x2a0 [ 152.304016][ T8754] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.304057][ T8754] ? __fget_files+0x2a/0x420 [ 152.304074][ T8754] ? __fget_files+0x3a0/0x420 [ 152.304097][ T8754] __x64_sys_sendmsg+0x19b/0x260 [ 152.304120][ T8754] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.304147][ T8754] ? __pfx_ksys_write+0x10/0x10 [ 152.304174][ T8754] ? rcu_is_watching+0x15/0xb0 [ 152.304195][ T8754] ? rcu_is_watching+0x15/0xb0 [ 152.304217][ T8754] do_syscall_64+0xfa/0x3b0 [ 152.304236][ T8754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.304257][ T8754] ? clear_bhb_loop+0x60/0xb0 [ 152.304280][ T8754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.304301][ T8754] RIP: 0033:0x7efeb098ebe9 [ 152.304319][ T8754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.304339][ T8754] RSP: 002b:00007efeb17d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.304363][ T8754] RAX: ffffffffffffffda RBX: 00007efeb0bb5fa0 RCX: 00007efeb098ebe9 [ 152.304378][ T8754] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 152.304392][ T8754] RBP: 00007efeb17d6090 R08: 0000000000000000 R09: 0000000000000000 [ 152.304406][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.304418][ T8754] R13: 00007efeb0bb6038 R14: 00007efeb0bb5fa0 R15: 00007ffcdeef20c8 [ 152.304442][ T8754] [ 152.740158][ T8757] netlink: 'syz.0.852': attribute type 9 has an invalid length. [ 152.789027][ T8762] __nla_validate_parse: 24 callbacks suppressed [ 152.789050][ T8762] netlink: 2 bytes leftover after parsing attributes in process `syz.1.853'. [ 152.805632][ T3573] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.850044][ T3573] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.927018][ T3573] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.941667][ T3573] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.955588][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'. [ 153.103866][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'. [ 153.117743][ T8783] dummy0: entered promiscuous mode [ 153.124581][ T8783] dummy0: left promiscuous mode [ 153.360429][ T8798] pim6reg: entered allmulticast mode [ 153.369410][ T8798] pim6reg: left allmulticast mode [ 153.714351][ T8813] netlink: 44 bytes leftover after parsing attributes in process `syz.1.870'. [ 153.746930][ T8813] netlink: 43 bytes leftover after parsing attributes in process `syz.1.870'. [ 153.786329][ T8813] netlink: 'syz.1.870': attribute type 6 has an invalid length. [ 153.805936][ T8813] netlink: 'syz.1.870': attribute type 5 has an invalid length. [ 153.821125][ T8813] netlink: 43 bytes leftover after parsing attributes in process `syz.1.870'. [ 153.904624][ T8826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.874'. [ 154.260167][ T8856] netlink: 'syz.3.886': attribute type 5 has an invalid length. [ 154.282813][ T8856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.886'. [ 154.376198][ T8868] netlink: 'syz.3.889': attribute type 1 has an invalid length. [ 154.394351][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'. [ 154.406803][ T8868] netlink: 'syz.3.889': attribute type 1 has an invalid length. [ 154.421375][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'. [ 154.444714][ T8868] netlink: 'syz.3.889': attribute type 1 has an invalid length. [ 154.469466][ T8868] netlink: 'syz.3.889': attribute type 1 has an invalid length. [ 154.483673][ T8868] netlink: 'syz.3.889': attribute type 1 has an invalid length. [ 154.493726][ T8868] netlink: 'syz.3.889': attribute type 1 has an invalid length. [ 154.502627][ T8868] netlink: 'syz.3.889': attribute type 1 has an invalid length. [ 154.662884][ T8880] syzkaller0: entered promiscuous mode [ 154.684502][ T8880] syzkaller0: entered allmulticast mode [ 154.830288][ T8896] FAULT_INJECTION: forcing a failure. [ 154.830288][ T8896] name failslab, interval 1, probability 0, space 0, times 0 [ 154.844743][ T8896] CPU: 0 UID: 0 PID: 8896 Comm: syz.3.899 Not tainted syzkaller #0 PREEMPT(full) [ 154.844773][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.844787][ T8896] Call Trace: [ 154.844794][ T8896] [ 154.844802][ T8896] dump_stack_lvl+0x189/0x250 [ 154.844831][ T8896] ? __pfx____ratelimit+0x10/0x10 [ 154.844859][ T8896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.844882][ T8896] ? __pfx__printk+0x10/0x10 [ 154.844909][ T8896] ? __pfx___might_resched+0x10/0x10 [ 154.844928][ T8896] ? lock_acquire+0x5f/0x360 [ 154.844957][ T8896] should_fail_ex+0x414/0x560 [ 154.844984][ T8896] should_failslab+0xa8/0x100 [ 154.845012][ T8896] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 154.845039][ T8896] ? page_pool_create_percpu+0x76/0xbe0 [ 154.845065][ T8896] page_pool_create_percpu+0x76/0xbe0 [ 154.845088][ T8896] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 154.845114][ T8896] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 154.845146][ T8896] bpf_test_run_xdp_live+0x1ca/0x1b10 [ 154.845178][ T8896] ? stack_trace_save+0x9c/0xe0 [ 154.845202][ T8896] ? stack_depot_save_flags+0x40/0x860 [ 154.845231][ T8896] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 154.845259][ T8896] ? bpf_test_init+0xc2/0x170 [ 154.845285][ T8896] ? bpf_prog_test_run_xdp+0x37c/0x1000 [ 154.845312][ T8896] ? bpf_prog_test_run+0x2c7/0x340 [ 154.845338][ T8896] ? __sys_bpf+0x581/0x870 [ 154.845360][ T8896] ? __x64_sys_bpf+0x7c/0x90 [ 154.845395][ T8896] ? __might_fault+0xb0/0x130 [ 154.845419][ T8896] ? rcu_is_watching+0x15/0xb0 [ 154.845437][ T8896] ? lock_acquire+0x5f/0x360 [ 154.845467][ T8896] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 154.845486][ T8896] ? __might_fault+0xcc/0x130 [ 154.845512][ T8896] ? _copy_from_user+0x94/0xb0 [ 154.845539][ T8896] ? bpf_test_init+0x133/0x170 [ 154.845564][ T8896] ? xdp_convert_md_to_buff+0x5b/0x330 [ 154.845603][ T8896] bpf_prog_test_run_xdp+0x713/0x1000 [ 154.845635][ T8896] ? rcu_is_watching+0x15/0xb0 [ 154.845654][ T8896] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 154.845686][ T8896] ? __fget_files+0x2a/0x420 [ 154.845704][ T8896] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 154.845733][ T8896] bpf_prog_test_run+0x2c7/0x340 [ 154.845760][ T8896] __sys_bpf+0x581/0x870 [ 154.845786][ T8896] ? __pfx___sys_bpf+0x10/0x10 [ 154.845816][ T8896] ? ksys_write+0x22a/0x250 [ 154.845846][ T8896] ? __pfx_ksys_write+0x10/0x10 [ 154.845877][ T8896] __x64_sys_bpf+0x7c/0x90 [ 154.845900][ T8896] do_syscall_64+0xfa/0x3b0 [ 154.845917][ T8896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.845936][ T8896] ? clear_bhb_loop+0x60/0xb0 [ 154.845956][ T8896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.845974][ T8896] RIP: 0033:0x7efeb098ebe9 [ 154.845993][ T8896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.846012][ T8896] RSP: 002b:00007efeb17d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.846034][ T8896] RAX: ffffffffffffffda RBX: 00007efeb0bb5fa0 RCX: 00007efeb098ebe9 [ 154.846048][ T8896] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 154.846061][ T8896] RBP: 00007efeb17d6090 R08: 0000000000000000 R09: 0000000000000000 [ 154.846073][ T8896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.846084][ T8896] R13: 00007efeb0bb6038 R14: 00007efeb0bb5fa0 R15: 00007ffcdeef20c8 [ 154.846106][ T8896] [ 156.962230][ T8962] FAULT_INJECTION: forcing a failure. [ 156.962230][ T8962] name failslab, interval 1, probability 0, space 0, times 0 [ 156.976383][ T8962] CPU: 0 UID: 0 PID: 8962 Comm: syz.2.924 Not tainted syzkaller #0 PREEMPT(full) [ 156.976416][ T8962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.976430][ T8962] Call Trace: [ 156.976438][ T8962] [ 156.976446][ T8962] dump_stack_lvl+0x189/0x250 [ 156.976477][ T8962] ? __pfx____ratelimit+0x10/0x10 [ 156.976507][ T8962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.976532][ T8962] ? __pfx__printk+0x10/0x10 [ 156.976561][ T8962] ? genl_family_rcv_msg_doit+0x267/0x300 [ 156.976588][ T8962] ? __pfx___might_resched+0x10/0x10 [ 156.976608][ T8962] ? lock_acquire+0x5f/0x360 [ 156.976639][ T8962] should_fail_ex+0x414/0x560 [ 156.976669][ T8962] should_failslab+0xa8/0x100 [ 156.976700][ T8962] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 156.976729][ T8962] ? __alloc_skb+0x112/0x2d0 [ 156.976750][ T8962] __alloc_skb+0x112/0x2d0 [ 156.976770][ T8962] netlink_ack+0x146/0xa50 [ 156.976798][ T8962] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.976822][ T8962] ? __kasan_slab_alloc+0x6c/0x80 [ 156.976848][ T8962] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 156.976875][ T8962] ? __pfx_nl802154_post_doit+0x10/0x10 [ 156.976903][ T8962] ? __netlink_lookup+0xbd/0x810 [ 156.976921][ T8962] ? rcu_is_watching+0x15/0xb0 [ 156.976946][ T8962] netlink_rcv_skb+0x28c/0x470 [ 156.976976][ T8962] ? __pfx_genl_rcv_msg+0x10/0x10 [ 156.976999][ T8962] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.977036][ T8962] ? lock_release+0x4b/0x3e0 [ 156.977068][ T8962] ? down_read+0x1ad/0x2e0 [ 156.977088][ T8962] genl_rcv+0x28/0x40 [ 156.977122][ T8962] netlink_unicast+0x82f/0x9e0 [ 156.977154][ T8962] ? __pfx_netlink_unicast+0x10/0x10 [ 156.977183][ T8962] ? netlink_sendmsg+0x642/0xb30 [ 156.977199][ T8962] ? skb_put+0x11b/0x210 [ 156.977219][ T8962] netlink_sendmsg+0x805/0xb30 [ 156.977241][ T8962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.977259][ T8962] ? aa_sock_msg_perm+0xf1/0x1d0 [ 156.977279][ T8962] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 156.977302][ T8962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.977320][ T8962] __sock_sendmsg+0x219/0x270 [ 156.977348][ T8962] ____sys_sendmsg+0x505/0x830 [ 156.977372][ T8962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.977399][ T8962] ? import_iovec+0x74/0xa0 [ 156.977424][ T8962] ___sys_sendmsg+0x21f/0x2a0 [ 156.977446][ T8962] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.977487][ T8962] ? __fget_files+0x2a/0x420 [ 156.977503][ T8962] ? __fget_files+0x3a0/0x420 [ 156.977528][ T8962] __x64_sys_sendmsg+0x19b/0x260 [ 156.977552][ T8962] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.977580][ T8962] ? __pfx_ksys_write+0x10/0x10 [ 156.977606][ T8962] ? rcu_is_watching+0x15/0xb0 [ 156.977629][ T8962] ? rcu_is_watching+0x15/0xb0 [ 156.977650][ T8962] do_syscall_64+0xfa/0x3b0 [ 156.977669][ T8962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.977690][ T8962] ? clear_bhb_loop+0x60/0xb0 [ 156.977713][ T8962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.977733][ T8962] RIP: 0033:0x7f4277d8ebe9 [ 156.977752][ T8962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.977770][ T8962] RSP: 002b:00007f4278b39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.977794][ T8962] RAX: ffffffffffffffda RBX: 00007f4277fb5fa0 RCX: 00007f4277d8ebe9 [ 156.977810][ T8962] RDX: 0000000000040000 RSI: 0000200000000f00 RDI: 0000000000000005 [ 156.977823][ T8962] RBP: 00007f4278b39090 R08: 0000000000000000 R09: 0000000000000000 [ 156.977836][ T8962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.977847][ T8962] R13: 00007f4277fb6038 R14: 00007f4277fb5fa0 R15: 00007ffc767a0688 [ 156.977871][ T8962] [ 157.474433][ T8971] geneve3: entered promiscuous mode [ 157.505899][ T8973] veth3: entered promiscuous mode [ 157.553143][ T8978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.704636][ T8984] geneve2: left promiscuous mode [ 157.709871][ T8984] geneve2: left allmulticast mode [ 157.740351][ T72] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.751218][ T72] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.780985][ T72] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.808439][ T72] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.938285][ T8999] ipvlan0: entered promiscuous mode [ 157.981284][ T9003] FAULT_INJECTION: forcing a failure. [ 157.981284][ T9003] name failslab, interval 1, probability 0, space 0, times 0 [ 157.995423][ T9003] CPU: 0 UID: 0 PID: 9003 Comm: syz.1.936 Not tainted syzkaller #0 PREEMPT(full) [ 157.995453][ T9003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.995466][ T9003] Call Trace: [ 157.995474][ T9003] [ 157.995482][ T9003] dump_stack_lvl+0x189/0x250 [ 157.995524][ T9003] ? __pfx____ratelimit+0x10/0x10 [ 157.995553][ T9003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.995577][ T9003] ? __pfx__printk+0x10/0x10 [ 157.995604][ T9003] ? idr_alloc_u32+0x1b7/0x2d0 [ 157.995633][ T9003] ? __pfx___might_resched+0x10/0x10 [ 157.995652][ T9003] ? lock_acquire+0x5f/0x360 [ 157.995682][ T9003] should_fail_ex+0x414/0x560 [ 157.995710][ T9003] should_failslab+0xa8/0x100 [ 157.995740][ T9003] kmem_cache_alloc_noprof+0x73/0x3c0 [ 157.995768][ T9003] ? __kernfs_new_node+0xd7/0x7e0 [ 157.995790][ T9003] ? lock_acquire+0x5f/0x360 [ 157.995820][ T9003] __kernfs_new_node+0xd7/0x7e0 [ 157.995844][ T9003] ? lock_acquire+0x5f/0x360 [ 157.995875][ T9003] ? __pfx___kernfs_new_node+0x10/0x10 [ 157.995898][ T9003] ? rcu_is_watching+0x15/0xb0 [ 157.995918][ T9003] ? kernfs_root+0x1c/0x230 [ 157.995939][ T9003] ? rcu_is_watching+0x15/0xb0 [ 157.995958][ T9003] ? kernfs_root+0x1c/0x230 [ 157.995978][ T9003] ? lock_release+0x4b/0x3e0 [ 157.996020][ T9003] ? kernfs_root+0x1c/0x230 [ 157.996040][ T9003] ? kernfs_root+0x1c/0x230 [ 157.996063][ T9003] kernfs_new_node+0x102/0x210 [ 157.996089][ T9003] __kernfs_create_file+0x4b/0x2e0 [ 157.996121][ T9003] sysfs_add_file_mode_ns+0x238/0x300 [ 157.996157][ T9003] sysfs_merge_group+0x177/0x310 [ 157.996186][ T9003] ? __pfx_sysfs_merge_group+0x10/0x10 [ 157.996209][ T9003] ? kobject_put+0x43f/0x480 [ 157.996231][ T9003] dpm_sysfs_add+0xd2/0x270 [ 157.996255][ T9003] device_add+0x4d8/0xb50 [ 157.996277][ T9003] tty_register_device_attr+0x3fe/0x8f0 [ 157.996302][ T9003] ? __pfx_tty_register_device_attr+0x10/0x10 [ 157.996329][ T9003] ? tty_port_register_device+0x5a/0x100 [ 157.996352][ T9003] rfcomm_dev_ioctl+0x176d/0x1d20 [ 157.996378][ T9003] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 157.996398][ T9003] ? lock_release+0x4b/0x3e0 [ 157.996424][ T9003] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 157.996452][ T9003] ? kfree+0x18e/0x440 [ 157.996476][ T9003] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 157.996507][ T9003] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 157.996535][ T9003] sock_do_ioctl+0xd9/0x300 [ 157.996562][ T9003] ? __pfx_sock_do_ioctl+0x10/0x10 [ 157.996586][ T9003] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 157.996624][ T9003] sock_ioctl+0x576/0x790 [ 157.996645][ T9003] ? lock_release+0x4b/0x3e0 [ 157.996675][ T9003] ? __pfx_sock_ioctl+0x10/0x10 [ 157.996699][ T9003] ? __fget_files+0x2a/0x420 [ 157.996716][ T9003] ? __fget_files+0x3a0/0x420 [ 157.996731][ T9003] ? __fget_files+0x2a/0x420 [ 157.996749][ T9003] ? bpf_lsm_file_ioctl+0x9/0x20 [ 157.996793][ T9003] ? __pfx_sock_ioctl+0x10/0x10 [ 157.996817][ T9003] __se_sys_ioctl+0xf9/0x170 [ 157.996843][ T9003] do_syscall_64+0xfa/0x3b0 [ 157.996861][ T9003] ? rcu_is_watching+0x15/0xb0 [ 157.996881][ T9003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.996901][ T9003] ? clear_bhb_loop+0x60/0xb0 [ 157.996924][ T9003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.996945][ T9003] RIP: 0033:0x7efcd258ebe9 [ 157.996964][ T9003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.996982][ T9003] RSP: 002b:00007efcd331d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.997006][ T9003] RAX: ffffffffffffffda RBX: 00007efcd27b5fa0 RCX: 00007efcd258ebe9 [ 157.997030][ T9003] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 157.997044][ T9003] RBP: 00007efcd331d090 R08: 0000000000000000 R09: 0000000000000000 [ 157.997057][ T9003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.997070][ T9003] R13: 00007efcd27b6038 R14: 00007efcd27b5fa0 R15: 00007fff78706218 [ 157.997094][ T9003] [ 158.557222][ T9005] tipc: Enabled bearer , priority 0 [ 158.566091][ T9005] syzkaller0: entered promiscuous mode [ 158.571683][ T9005] syzkaller0: entered allmulticast mode [ 158.582047][ T9004] tipc: Resetting bearer [ 158.590732][ T9004] tipc: Disabling bearer [ 158.620537][ T9007] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20002 [ 158.832202][ T9027] __nla_validate_parse: 46 callbacks suppressed [ 158.832225][ T9027] netlink: 44 bytes leftover after parsing attributes in process `syz.0.944'. [ 158.867597][ T9027] netlink: 43 bytes leftover after parsing attributes in process `syz.0.944'. [ 158.878911][ T9027] validate_nla: 28 callbacks suppressed [ 158.878929][ T9027] netlink: 'syz.0.944': attribute type 6 has an invalid length. [ 158.894693][ T9027] netlink: 'syz.0.944': attribute type 5 has an invalid length. [ 158.905201][ T9027] netlink: 43 bytes leftover after parsing attributes in process `syz.0.944'. [ 159.644771][ T9062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.959'. [ 159.669448][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'. [ 159.796495][ T9070] netlink: 'syz.1.962': attribute type 1 has an invalid length. [ 159.865311][ T9070] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 159.875491][ T9070] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 159.887748][ T9070] bond2: (slave vti0): making interface the new active one [ 159.895844][ T9070] bond2: (slave vti0): Enslaving as an active interface with an up link [ 160.018131][ T9078] netlink: 64 bytes leftover after parsing attributes in process `syz.1.964'. [ 160.041345][ T9080] ip6erspan0: entered promiscuous mode [ 160.120589][ T9084] tipc: Enabling of bearer rejected, failed to enable media [ 160.337505][ T9092] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20004 [ 160.363516][ T9092] tipc: Failed to remove unknown binding: 66,1,1/11578026:314220541/314220543 [ 160.391591][ T9092] tipc: Failed to remove unknown binding: 66,1,1/11578026:314220541/314220543 [ 160.424088][ T9092] tipc: Failed to remove unknown binding: 66,1,1/11578026:314220541/314220543 [ 160.494482][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 160.525865][ T9092] netlink: 788 bytes leftover after parsing attributes in process `syz.3.970'. [ 160.566022][ T9104] syzkaller0: entered promiscuous mode [ 160.573064][ T9104] syzkaller0: entered allmulticast mode [ 161.087502][ T9120] batadv_slave_1: entered promiscuous mode [ 161.093609][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 161.329808][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 161.348426][ T9125] netlink: 'syz.3.977': attribute type 12 has an invalid length. [ 161.390051][ T9131] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 161.585559][ T9141] nbd: couldn't find device at index 536870912 [ 162.422537][ T9177] netlink: 'syz.4.998': attribute type 1 has an invalid length. [ 162.805887][ T5233] udevd[5233]: worker [5859] terminated by signal 33 (Unknown signal 33) [ 162.825848][ T5233] udevd[5233]: worker [5859] failed while handling '/devices/virtual/block/loop2' [ 162.890116][ T9201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.961635][ T9205] syzkaller0: entered promiscuous mode [ 162.975050][ T9205] syzkaller0: entered allmulticast mode [ 163.448403][ T9225] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20002 [ 163.855832][ T9245] __nla_validate_parse: 13 callbacks suppressed [ 163.855853][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'. [ 163.873673][ T9245] bridge_slave_0: left allmulticast mode [ 163.879682][ T9245] bridge_slave_0: left promiscuous mode [ 163.885440][ T9245] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.999040][ T9247] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1021'. [ 164.104318][ T9247] tipc: Enabling of bearer rejected, failed to enable media [ 164.176483][ T9256] syzkaller0: entered promiscuous mode [ 164.184088][ T9256] syzkaller0: entered allmulticast mode [ 164.193694][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 165.057534][ T9270] netlink: 'syz.3.1030': attribute type 32 has an invalid length. [ 165.090271][ T9271] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1031'. [ 165.159206][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'. [ 165.212894][ T9271] tipc: Enabling of bearer rejected, failed to enable media [ 165.298236][ T9285] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1036'. [ 165.418318][ T9295] syzkaller1: entered promiscuous mode [ 165.423977][ T9295] syzkaller1: entered allmulticast mode [ 165.575962][ T9304] tipc: Enabled bearer , priority 0 [ 165.600131][ T9304] bridge0: entered promiscuous mode [ 165.605407][ T9304] bridge0: entered allmulticast mode [ 165.647521][ T9304] tipc: Resetting bearer [ 165.674246][ T9316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1048'. [ 165.687655][ T9303] tipc: Disabling bearer [ 165.711061][ T9321] netlink: 'syz.2.1038': attribute type 4 has an invalid length. [ 165.725024][ T9316] netlink: 'syz.1.1048': attribute type 4 has an invalid length. [ 165.743385][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'. [ 165.772553][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 166.202025][ T9351] FAULT_INJECTION: forcing a failure. [ 166.202025][ T9351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.243403][ T9351] CPU: 0 UID: 0 PID: 9351 Comm: syz.1.1057 Not tainted syzkaller #0 PREEMPT(full) [ 166.243434][ T9351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.243449][ T9351] Call Trace: [ 166.243457][ T9351] [ 166.243466][ T9351] dump_stack_lvl+0x189/0x250 [ 166.243496][ T9351] ? __pfx____ratelimit+0x10/0x10 [ 166.243528][ T9351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.243560][ T9351] ? __pfx__printk+0x10/0x10 [ 166.243587][ T9351] ? __might_fault+0xb0/0x130 [ 166.243618][ T9351] ? kasan_save_track+0x3e/0x80 [ 166.243644][ T9351] ? __kasan_kmalloc+0x93/0xb0 [ 166.243673][ T9351] ? rcu_is_watching+0x15/0xb0 [ 166.243696][ T9351] should_fail_ex+0x414/0x560 [ 166.243727][ T9351] _copy_from_user+0x2d/0xb0 [ 166.243752][ T9351] csum_and_copy_from_iter_full+0x1e1/0x1eb0 [ 166.243789][ T9351] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 166.243820][ T9351] ? trace_kmalloc+0x1f/0xd0 [ 166.243848][ T9351] ip_generic_getfrag+0x12f/0x2b0 [ 166.243876][ T9351] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 166.243903][ T9351] ? skb_put+0x11b/0x210 [ 166.243925][ T9351] __ip6_append_data+0x3974/0x3f30 [ 166.243963][ T9351] ? rcu_is_watching+0x15/0xb0 [ 166.243986][ T9351] ? __pfx_raw6_getfrag+0x10/0x10 [ 166.244010][ T9351] ? lock_release+0x4b/0x3e0 [ 166.244040][ T9351] ? __asan_memset+0x22/0x50 [ 166.244066][ T9351] ? __pfx___ip6_append_data+0x10/0x10 [ 166.244093][ T9351] ? __pfx_ip6_mtu+0x10/0x10 [ 166.244125][ T9351] ip6_append_data+0x1c4/0x380 [ 166.244156][ T9351] ? __pfx_raw6_getfrag+0x10/0x10 [ 166.244176][ T9351] rawv6_sendmsg+0x127a/0x1820 [ 166.244218][ T9351] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 166.244254][ T9351] ? unwind_next_frame+0xa5/0x2390 [ 166.244288][ T9351] ? __pfx_aa_sk_perm+0x10/0x10 [ 166.244354][ T9351] ? rcu_is_watching+0x15/0xb0 [ 166.244373][ T9351] ? sock_rps_record_flow+0x19/0x410 [ 166.244402][ T9351] ? inet_sendmsg+0x2f4/0x370 [ 166.244433][ T9351] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 166.244459][ T9351] __sock_sendmsg+0x19c/0x270 [ 166.244489][ T9351] sock_write_iter+0x258/0x330 [ 166.244517][ T9351] ? __pfx_sock_write_iter+0x10/0x10 [ 166.244556][ T9351] ? kstrtoull+0x12f/0x1d0 [ 166.244590][ T9351] do_iter_readv_writev+0x619/0x8b0 [ 166.244625][ T9351] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 166.244653][ T9351] ? common_file_perm+0x1b5/0x230 [ 166.244688][ T9351] ? bpf_lsm_file_permission+0x9/0x20 [ 166.244714][ T9351] ? security_file_permission+0x75/0x290 [ 166.244748][ T9351] ? rw_verify_area+0x255/0x4d0 [ 166.244781][ T9351] vfs_writev+0x31a/0x960 [ 166.244801][ T9351] ? security_file_permission+0x75/0x290 [ 166.244832][ T9351] ? __pfx_vfs_writev+0x10/0x10 [ 166.244850][ T9351] ? vfs_write+0x956/0xb30 [ 166.244884][ T9351] ? lock_release+0x4b/0x3e0 [ 166.244918][ T9351] ? __fget_files+0x3a0/0x420 [ 166.244935][ T9351] ? __fget_files+0x2a/0x420 [ 166.244959][ T9351] do_writev+0x14d/0x2d0 [ 166.244980][ T9351] ? __pfx_do_writev+0x10/0x10 [ 166.244999][ T9351] ? rcu_is_watching+0x15/0xb0 [ 166.245022][ T9351] ? rcu_is_watching+0x15/0xb0 [ 166.245044][ T9351] do_syscall_64+0xfa/0x3b0 [ 166.245064][ T9351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.245085][ T9351] ? clear_bhb_loop+0x60/0xb0 [ 166.245109][ T9351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.245130][ T9351] RIP: 0033:0x7efcd258ebe9 [ 166.245148][ T9351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.245168][ T9351] RSP: 002b:00007efcd331d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 166.245191][ T9351] RAX: ffffffffffffffda RBX: 00007efcd27b5fa0 RCX: 00007efcd258ebe9 [ 166.245207][ T9351] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 166.245220][ T9351] RBP: 00007efcd331d090 R08: 0000000000000000 R09: 0000000000000000 [ 166.245234][ T9351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.245246][ T9351] R13: 00007efcd27b6038 R14: 00007efcd27b5fa0 R15: 00007fff78706218 [ 166.245271][ T9351] [ 167.074671][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1064'. [ 167.296182][ T9386] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 167.318881][ T9386] Ã: (slave bond_slave_0): Releasing backup interface [ 167.341801][ T9386] Ã: (slave bond_slave_1): Releasing backup interface [ 167.378676][ T9386] team0: Port device team_slave_0 removed [ 167.404291][ T9386] team0: Port device team_slave_1 removed [ 167.424652][ T9386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.449570][ T9392] FAULT_INJECTION: forcing a failure. [ 167.449570][ T9392] name failslab, interval 1, probability 0, space 0, times 0 [ 167.455522][ T9394] netlink: 'syz.2.1067': attribute type 10 has an invalid length. [ 167.463081][ T9392] CPU: 0 UID: 0 PID: 9392 Comm: syz.0.1069 Not tainted syzkaller #0 PREEMPT(full) [ 167.463115][ T9392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.463130][ T9392] Call Trace: [ 167.463139][ T9392] [ 167.463149][ T9392] dump_stack_lvl+0x189/0x250 [ 167.463183][ T9392] ? __pfx____ratelimit+0x10/0x10 [ 167.463216][ T9392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.463243][ T9392] ? __pfx__printk+0x10/0x10 [ 167.463278][ T9392] ? fs_reclaim_acquire+0x7d/0x100 [ 167.463314][ T9392] ? rcu_is_watching+0x15/0xb0 [ 167.463338][ T9392] ? __pfx___might_resched+0x10/0x10 [ 167.463359][ T9392] ? lock_acquire+0x5f/0x360 [ 167.463396][ T9392] should_fail_ex+0x414/0x560 [ 167.463430][ T9392] should_failslab+0xa8/0x100 [ 167.463476][ T9392] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 167.463508][ T9392] ? __alloc_skb+0x112/0x2d0 [ 167.463533][ T9392] __alloc_skb+0x112/0x2d0 [ 167.463555][ T9392] pfkey_sendmsg+0xca5/0x1090 [ 167.463578][ T9392] ? mntput_no_expire+0xb9/0x9d0 [ 167.463616][ T9392] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 167.463655][ T9392] ? aa_sock_msg_perm+0xf1/0x1d0 [ 167.463677][ T9392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.463703][ T9392] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 167.463725][ T9392] __sock_sendmsg+0x219/0x270 [ 167.463759][ T9392] ____sys_sendmsg+0x505/0x830 [ 167.463787][ T9392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.463819][ T9392] ? import_iovec+0x74/0xa0 [ 167.463848][ T9392] ___sys_sendmsg+0x21f/0x2a0 [ 167.463874][ T9392] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.463920][ T9392] ? __fget_files+0x2a/0x420 [ 167.463940][ T9392] ? __fget_files+0x3a0/0x420 [ 167.463967][ T9392] __x64_sys_sendmsg+0x19b/0x260 [ 167.463994][ T9392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.464024][ T9392] ? __pfx_ksys_write+0x10/0x10 [ 167.464055][ T9392] ? rcu_is_watching+0x15/0xb0 [ 167.464081][ T9392] ? rcu_is_watching+0x15/0xb0 [ 167.464107][ T9392] do_syscall_64+0xfa/0x3b0 [ 167.464127][ T9392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.464152][ T9392] ? clear_bhb_loop+0x60/0xb0 [ 167.464180][ T9392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.464204][ T9392] RIP: 0033:0x7f83f9b8ebe9 [ 167.464223][ T9392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.464247][ T9392] RSP: 002b:00007f83fa982038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.464273][ T9392] RAX: ffffffffffffffda RBX: 00007f83f9db5fa0 RCX: 00007f83f9b8ebe9 [ 167.464291][ T9392] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 167.464305][ T9392] RBP: 00007f83fa982090 R08: 0000000000000000 R09: 0000000000000000 [ 167.464321][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.464334][ T9392] R13: 00007f83f9db6038 R14: 00007f83f9db5fa0 R15: 00007ffe60dac958 [ 167.464362][ T9392] [ 167.566036][ T9386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.682387][ T9393] netlink: 'syz.4.1061': attribute type 10 has an invalid length. [ 167.773382][ T9394] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 167.792914][ T9394] wlan1: mtu less than device minimum [ 167.800981][ T9394] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 167.855476][ T9393] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.896519][ T9403] FAULT_INJECTION: forcing a failure. [ 167.896519][ T9403] name failslab, interval 1, probability 0, space 0, times 0 [ 167.899308][ T9393] Ã: (slave team0): Enslaving as an active interface with an up link [ 167.913379][ T9402] netlink: 'syz.1.1072': attribute type 11 has an invalid length. [ 167.925640][ T9403] CPU: 0 UID: 0 PID: 9403 Comm: syz.0.1071 Not tainted syzkaller #0 PREEMPT(full) [ 167.925672][ T9403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.925686][ T9403] Call Trace: [ 167.925695][ T9403] [ 167.925705][ T9403] dump_stack_lvl+0x189/0x250 [ 167.925737][ T9403] ? __pfx____ratelimit+0x10/0x10 [ 167.925770][ T9403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.925796][ T9403] ? __pfx__printk+0x10/0x10 [ 167.925828][ T9403] ? fs_reclaim_acquire+0x7d/0x100 [ 167.925860][ T9403] ? rcu_is_watching+0x15/0xb0 [ 167.925882][ T9403] ? __pfx___might_resched+0x10/0x10 [ 167.925902][ T9403] ? lock_acquire+0x5f/0x360 [ 167.925935][ T9403] should_fail_ex+0x414/0x560 [ 167.925966][ T9403] should_failslab+0xa8/0x100 [ 167.925999][ T9403] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 167.926029][ T9403] ? __alloc_skb+0x112/0x2d0 [ 167.926047][ T9403] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 167.926076][ T9403] __alloc_skb+0x112/0x2d0 [ 167.926098][ T9403] __ip_append_data+0x2dae/0x40c0 [ 167.926137][ T9403] ? __pfx_raw_getfrag+0x10/0x10 [ 167.926183][ T9403] ? __pfx___ip_append_data+0x10/0x10 [ 167.926208][ T9403] ? ip_setup_cork+0x322/0x9a0 [ 167.926235][ T9403] ? ip_setup_cork+0x577/0x9a0 [ 167.926261][ T9403] ip_append_data+0x10e/0x190 [ 167.926287][ T9403] ? __pfx_raw_getfrag+0x10/0x10 [ 167.926310][ T9403] raw_sendmsg+0x13d8/0x18b0 [ 167.926343][ T9403] ? __pfx_raw_sendmsg+0x10/0x10 [ 167.926376][ T9403] ? aa_sk_perm+0x81e/0x950 [ 167.926410][ T9403] ? __pfx_aa_sk_perm+0x10/0x10 [ 167.926438][ T9403] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 167.926462][ T9403] ? sock_rps_record_flow+0x19/0x410 [ 167.926491][ T9403] ? inet_sendmsg+0x2f4/0x370 [ 167.926516][ T9403] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.926541][ T9403] __sock_sendmsg+0x19c/0x270 [ 167.926574][ T9403] ____sys_sendmsg+0x505/0x830 [ 167.926598][ T9403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.926623][ T9403] ? import_iovec+0x74/0xa0 [ 167.926648][ T9403] ___sys_sendmsg+0x21f/0x2a0 [ 167.926669][ T9403] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.926709][ T9403] ? __fget_files+0x2a/0x420 [ 167.926726][ T9403] ? __fget_files+0x3a0/0x420 [ 167.926749][ T9403] __x64_sys_sendmsg+0x19b/0x260 [ 167.926772][ T9403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.926799][ T9403] ? __pfx_ksys_write+0x10/0x10 [ 167.926825][ T9403] ? rcu_is_watching+0x15/0xb0 [ 167.926847][ T9403] ? rcu_is_watching+0x15/0xb0 [ 167.926869][ T9403] do_syscall_64+0xfa/0x3b0 [ 167.926889][ T9403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.926909][ T9403] ? clear_bhb_loop+0x60/0xb0 [ 167.926933][ T9403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.926952][ T9403] RIP: 0033:0x7f83f9b8ebe9 [ 167.926970][ T9403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.926989][ T9403] RSP: 002b:00007f83fa982038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.927011][ T9403] RAX: ffffffffffffffda RBX: 00007f83f9db5fa0 RCX: 00007f83f9b8ebe9 [ 167.927027][ T9403] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 167.927041][ T9403] RBP: 00007f83fa982090 R08: 0000000000000000 R09: 0000000000000000 [ 167.927054][ T9403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.927067][ T9403] R13: 00007f83f9db6038 R14: 00007f83f9db5fa0 R15: 00007ffe60dac958 [ 167.927092][ T9403] [ 168.442694][ T9409] syzkaller1: entered promiscuous mode [ 168.471856][ T9409] syzkaller1: entered allmulticast mode [ 168.640382][ T9412] tipc: Enabling of bearer rejected, failed to enable media [ 168.761249][ T9444] siw: device registration error -23 [ 168.831426][ T9437] netlink: 'syz.3.1083': attribute type 1 has an invalid length. [ 168.885270][ T9437] bond1: entered promiscuous mode [ 168.893539][ T9437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.340543][ T9474] FAULT_INJECTION: forcing a failure. [ 169.340543][ T9474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.353960][ T9474] CPU: 0 UID: 0 PID: 9474 Comm: syz.3.1095 Not tainted syzkaller #0 PREEMPT(full) [ 169.353989][ T9474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.354002][ T9474] Call Trace: [ 169.354010][ T9474] [ 169.354056][ T9474] dump_stack_lvl+0x189/0x250 [ 169.354087][ T9474] ? __pfx____ratelimit+0x10/0x10 [ 169.354119][ T9474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.354144][ T9474] ? __pfx__printk+0x10/0x10 [ 169.354171][ T9474] ? __might_fault+0xb0/0x130 [ 169.354205][ T9474] ? rcu_is_watching+0x15/0xb0 [ 169.354228][ T9474] should_fail_ex+0x414/0x560 [ 169.354258][ T9474] _copy_to_iter+0x575/0x16f0 [ 169.354285][ T9474] ? __pfx__copy_to_iter+0x10/0x10 [ 169.354303][ T9474] ? __skb_try_recv_from_queue+0x58f/0x730 [ 169.354332][ T9474] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 169.354361][ T9474] __skb_datagram_iter+0xf8/0x990 [ 169.354386][ T9474] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 169.354414][ T9474] skb_copy_datagram_iter+0xc5/0x230 [ 169.354440][ T9474] netlink_recvmsg+0x2ab/0xa30 [ 169.354465][ T9474] ? __pfx_netlink_recvmsg+0x10/0x10 [ 169.354482][ T9474] ? unwind_next_frame+0xa5/0x2390 [ 169.354507][ T9474] ? unwind_next_frame+0xa5/0x2390 [ 169.354529][ T9474] ? aa_sock_msg_perm+0xf1/0x1d0 [ 169.354548][ T9474] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 169.354570][ T9474] ? security_socket_recvmsg+0x7e/0x2e0 [ 169.354593][ T9474] ? __pfx_netlink_recvmsg+0x10/0x10 [ 169.354610][ T9474] sock_recvmsg_nosec+0x186/0x1c0 [ 169.354640][ T9474] ____sys_recvmsg+0x3aa/0x460 [ 169.354668][ T9474] ? __pfx_____sys_recvmsg+0x10/0x10 [ 169.354697][ T9474] ? import_iovec+0x74/0xa0 [ 169.354722][ T9474] ___sys_recvmsg+0x1b5/0x510 [ 169.354747][ T9474] ? __pfx____sys_recvmsg+0x10/0x10 [ 169.354774][ T9474] ? __fget_files+0x2a/0x420 [ 169.354801][ T9474] ? rcu_is_watching+0x15/0xb0 [ 169.354822][ T9474] ? lock_release+0x4b/0x3e0 [ 169.354853][ T9474] ? __might_fault+0xcc/0x130 [ 169.354882][ T9474] do_recvmmsg+0x307/0x770 [ 169.354910][ T9474] ? __pfx_do_recvmmsg+0x10/0x10 [ 169.354940][ T9474] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.354990][ T9474] __x64_sys_recvmmsg+0x190/0x240 [ 169.355024][ T9474] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 169.355047][ T9474] ? rcu_is_watching+0x15/0xb0 [ 169.355070][ T9474] ? rcu_is_watching+0x15/0xb0 [ 169.355091][ T9474] do_syscall_64+0xfa/0x3b0 [ 169.355111][ T9474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.355132][ T9474] ? clear_bhb_loop+0x60/0xb0 [ 169.355155][ T9474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.355176][ T9474] RIP: 0033:0x7efeb098ebe9 [ 169.355195][ T9474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.355214][ T9474] RSP: 002b:00007efeb17d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 169.355237][ T9474] RAX: ffffffffffffffda RBX: 00007efeb0bb5fa0 RCX: 00007efeb098ebe9 [ 169.355253][ T9474] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 169.355266][ T9474] RBP: 00007efeb17d6090 R08: 0000000000000000 R09: 0000000000000000 [ 169.355280][ T9474] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 169.355293][ T9474] R13: 00007efeb0bb6038 R14: 00007efeb0bb5fa0 R15: 00007ffcdeef20c8 [ 169.355318][ T9474] [ 169.749032][ T9478] syzkaller0: entered promiscuous mode [ 169.776796][ T9478] syzkaller0: entered allmulticast mode [ 169.797276][ T9478] __nla_validate_parse: 3 callbacks suppressed [ 169.797297][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 169.829684][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1098'. [ 169.857294][ T9478] syz_tun: entered promiscuous mode [ 169.870494][ T9485] !: renamed from dummy0 (while UP) [ 169.952502][ T9491] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1101'. [ 169.962279][ T9491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1101'. [ 169.997310][ T9491] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1101'. [ 170.403994][ T9520] pim6reg1: entered promiscuous mode [ 170.416740][ T9520] pim6reg1: entered allmulticast mode [ 170.660197][ T9530] syzkaller1: entered promiscuous mode [ 170.688362][ T9530] syzkaller1: entered allmulticast mode [ 170.709987][ T9530] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 171.099577][ T9553] ip6gre1: entered promiscuous mode [ 171.120942][ T9557] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1119'. [ 171.267655][ T9567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1120'. [ 171.550222][ T9586] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1126'. [ 171.559653][ T9586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1126'. [ 171.573603][ T9586] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1126'. [ 172.236471][ T9616] syzkaller0: entered promiscuous mode [ 172.243749][ T9616] syzkaller0: entered allmulticast mode [ 172.252502][ T9615] tipc: Enabled bearer , priority 0 [ 172.264325][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.276350][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.288077][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.302412][ T9617] tipc: Resetting bearer [ 172.310854][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.322477][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.332478][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.355171][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.370186][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.387842][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.398857][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.408662][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.420095][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.459788][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.481655][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.500494][ T9626] tipc: Enabling of bearer rejected, failed to enable media [ 172.545883][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.574863][ T9621] tipc: Enabling of bearer rejected, failed to enable media [ 172.594394][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.618596][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.630917][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.641911][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.670982][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.681936][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.695670][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.713110][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.722455][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.732963][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.742172][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.752548][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.777474][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.797608][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.812488][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.857286][ T9638] dummy0: entered promiscuous mode [ 172.870150][ T9638] dummy0: left promiscuous mode [ 172.896564][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.908145][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.921279][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.932216][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.941694][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.966325][ T9615] tipc: Enabling of bearer rejected, already enabled [ 172.998401][ T9615] tipc: Enabling of bearer rejected, already enabled [ 173.060650][ T9640] tipc: Enabling of bearer rejected, failed to enable media [ 173.080551][ T9614] tipc: Resetting bearer [ 173.125336][ T9614] tipc: Disabling bearer [ 173.137699][ T9615] tipc: Enabling of bearer rejected, failed to enable media [ 173.152891][ T9648] macvtap1: entered promiscuous mode [ 173.161561][ T9648] macvtap1: entered allmulticast mode [ 173.179548][ T9648] syz_tun: entered promiscuous mode [ 173.185295][ T9648] syz_tun: entered allmulticast mode [ 173.192453][ T9648] team0: Device macvtap1 failed to register rx_handler [ 173.200859][ T9648] syz_tun: left allmulticast mode [ 173.206174][ T9648] syz_tun: left promiscuous mode [ 173.616233][ T9674] FAULT_INJECTION: forcing a failure. [ 173.616233][ T9674] name failslab, interval 1, probability 0, space 0, times 0 [ 173.636836][ T9674] CPU: 0 UID: 0 PID: 9674 Comm: syz.3.1155 Not tainted syzkaller #0 PREEMPT(full) [ 173.636866][ T9674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.636888][ T9674] Call Trace: [ 173.636896][ T9674] [ 173.636905][ T9674] dump_stack_lvl+0x189/0x250 [ 173.636935][ T9674] ? __pfx____ratelimit+0x10/0x10 [ 173.636966][ T9674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.637003][ T9674] ? __pfx__printk+0x10/0x10 [ 173.637034][ T9674] ? __pfx___might_resched+0x10/0x10 [ 173.637052][ T9674] ? lock_acquire+0x5f/0x360 [ 173.637083][ T9674] should_fail_ex+0x414/0x560 [ 173.637112][ T9674] ? nf_hook_entries_grow+0x27c/0x710 [ 173.637142][ T9674] should_failslab+0xa8/0x100 [ 173.637173][ T9674] __kvmalloc_node_noprof+0x161/0x5f0 [ 173.637202][ T9674] ? nf_hook_entries_grow+0x27c/0x710 [ 173.637253][ T9674] nf_hook_entries_grow+0x27c/0x710 [ 173.637294][ T9674] __nf_register_net_hook+0x2c9/0x930 [ 173.637321][ T9674] nf_register_net_hook+0xb2/0x190 [ 173.637342][ T9674] nf_register_net_hooks+0x44/0x1b0 [ 173.637364][ T9674] nf_ct_netns_do_get+0x3bf/0x5a0 [ 173.637386][ T9674] ? rcu_is_watching+0x15/0xb0 [ 173.637406][ T9674] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 173.637425][ T9674] ? lock_release+0x4b/0x3e0 [ 173.637455][ T9674] ? synproxy_pernet+0x45/0x270 [ 173.637478][ T9674] ? synproxy_pernet+0x45/0x270 [ 173.637504][ T9674] nft_synproxy_do_init+0x1d1/0x4c0 [ 173.637532][ T9674] nf_tables_newrule+0x178f/0x2890 [ 173.637564][ T9674] ? __pfx_nf_tables_newrule+0x10/0x10 [ 173.637586][ T9674] ? nfnl_pernet+0x23/0x240 [ 173.637610][ T9674] ? rcu_is_watching+0x15/0xb0 [ 173.637630][ T9674] ? nfnl_pernet+0x23/0x240 [ 173.637662][ T9674] ? __nla_parse+0x40/0x60 [ 173.637694][ T9674] nfnetlink_rcv+0x112f/0x2520 [ 173.637741][ T9674] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 173.637775][ T9674] ? kasan_save_track+0x4f/0x80 [ 173.637812][ T9674] ? kasan_save_track+0x3e/0x80 [ 173.637835][ T9674] ? __kasan_slab_alloc+0x6c/0x80 [ 173.637888][ T9674] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.637917][ T9674] ? rcu_is_watching+0x15/0xb0 [ 173.637937][ T9674] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.637969][ T9674] ? lock_release+0x4b/0x3e0 [ 173.637997][ T9674] ? net_generic+0x1e/0x240 [ 173.638020][ T9674] ? net_generic+0x1e/0x240 [ 173.638051][ T9674] netlink_unicast+0x82f/0x9e0 [ 173.638083][ T9674] ? __pfx_netlink_unicast+0x10/0x10 [ 173.638112][ T9674] ? netlink_sendmsg+0x642/0xb30 [ 173.638129][ T9674] ? skb_put+0x11b/0x210 [ 173.638150][ T9674] netlink_sendmsg+0x805/0xb30 [ 173.638174][ T9674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.638194][ T9674] ? aa_sock_msg_perm+0xf1/0x1d0 [ 173.638214][ T9674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.638236][ T9674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.638254][ T9674] __sock_sendmsg+0x219/0x270 [ 173.638284][ T9674] ____sys_sendmsg+0x505/0x830 [ 173.638308][ T9674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.638334][ T9674] ? import_iovec+0x74/0xa0 [ 173.638357][ T9674] ___sys_sendmsg+0x21f/0x2a0 [ 173.638380][ T9674] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.638413][ T9674] ? sb_end_write+0xe9/0x1c0 [ 173.638440][ T9674] ? __pfx_vfs_write+0x10/0x10 [ 173.638473][ T9674] __x64_sys_sendmsg+0x19b/0x260 [ 173.638496][ T9674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.638524][ T9674] ? __pfx_ksys_write+0x10/0x10 [ 173.638549][ T9674] ? rcu_is_watching+0x15/0xb0 [ 173.638572][ T9674] ? rcu_is_watching+0x15/0xb0 [ 173.638593][ T9674] do_syscall_64+0xfa/0x3b0 [ 173.638612][ T9674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.638632][ T9674] ? clear_bhb_loop+0x60/0xb0 [ 173.638655][ T9674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.638675][ T9674] RIP: 0033:0x7efeb098ebe9 [ 173.638694][ T9674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.638712][ T9674] RSP: 002b:00007efeb17d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.638734][ T9674] RAX: ffffffffffffffda RBX: 00007efeb0bb5fa0 RCX: 00007efeb098ebe9 [ 173.638750][ T9674] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000008 [ 173.638763][ T9674] RBP: 00007efeb17d6090 R08: 0000000000000000 R09: 0000000000000000 [ 173.638776][ T9674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.638789][ T9674] R13: 00007efeb0bb6038 R14: 00007efeb0bb5fa0 R15: 00007ffcdeef20c8 [ 173.638813][ T9674] [ 174.377483][ T9686] tipc: Enabled bearer , priority 0 [ 174.385179][ T9686] syzkaller0: entered promiscuous mode [ 174.390830][ T9686] syzkaller0: entered allmulticast mode [ 174.400511][ T9686] tipc: Resetting bearer [ 174.502028][ T9685] tipc: Resetting bearer [ 174.642514][ T9685] tipc: Disabling bearer [ 175.012790][ T9705] __nla_validate_parse: 10 callbacks suppressed [ 175.012812][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 175.065592][ T9710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1163'. [ 175.251727][ T9717] netlink: 'syz.3.1169': attribute type 7 has an invalid length. [ 175.282485][ T9717] netlink: 'syz.3.1169': attribute type 3 has an invalid length. [ 175.311232][ T9717] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1169'. [ 175.640437][ T9739] FAULT_INJECTION: forcing a failure. [ 175.640437][ T9739] name failslab, interval 1, probability 0, space 0, times 0 [ 175.653603][ T9739] CPU: 1 UID: 0 PID: 9739 Comm: syz.1.1177 Not tainted syzkaller #0 PREEMPT(full) [ 175.653633][ T9739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.653647][ T9739] Call Trace: [ 175.653657][ T9739] [ 175.653666][ T9739] dump_stack_lvl+0x189/0x250 [ 175.653696][ T9739] ? __pfx____ratelimit+0x10/0x10 [ 175.653727][ T9739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.653752][ T9739] ? __pfx__printk+0x10/0x10 [ 175.653782][ T9739] ? lock_release+0x4b/0x3e0 [ 175.653818][ T9739] should_fail_ex+0x414/0x560 [ 175.653847][ T9739] should_failslab+0xa8/0x100 [ 175.653880][ T9739] kmem_cache_alloc_noprof+0x73/0x3c0 [ 175.653908][ T9739] ? batadv_tt_local_add+0x478/0x1a90 [ 175.653936][ T9739] batadv_tt_local_add+0x478/0x1a90 [ 175.653974][ T9739] ? __pfx_batadv_tt_local_add+0x10/0x10 [ 175.654002][ T9739] ? batadv_get_vid+0x183/0x2b0 [ 175.654035][ T9739] batadv_interface_tx+0x7c0/0x14c0 [ 175.654055][ T9739] ? rcu_is_watching+0x15/0xb0 [ 175.654082][ T9739] ? __pfx_batadv_interface_tx+0x10/0x10 [ 175.654101][ T9739] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 175.654127][ T9739] dev_hard_start_xmit+0x2d7/0x830 [ 175.654160][ T9739] __dev_queue_xmit+0x1b8d/0x3b50 [ 175.654192][ T9739] ? __dev_queue_xmit+0x27b/0x3b50 [ 175.654219][ T9739] ? lock_release+0x4b/0x3e0 [ 175.654248][ T9739] ? __might_fault+0xb0/0x130 [ 175.654276][ T9739] ? __might_fault+0xcc/0x130 [ 175.654305][ T9739] ? __pfx___dev_queue_xmit+0x10/0x10 [ 175.654327][ T9739] ? _copy_from_iter+0x24c/0x16f0 [ 175.654350][ T9739] ? sock_alloc_send_pskb+0x875/0x990 [ 175.654378][ T9739] ? packet_parse_headers+0x7ff/0xb60 [ 175.654409][ T9739] ? packet_parse_headers+0x8b8/0xb60 [ 175.654445][ T9739] ? skb_copy_datagram_from_iter+0x60c/0x720 [ 175.654473][ T9739] ? packet_xmit+0x68/0x330 [ 175.654503][ T9739] packet_sendmsg+0x3e33/0x5080 [ 175.654541][ T9739] ? audit_mount+0xd0/0x610 [ 175.654573][ T9739] ? bpf_trace_run2+0x322/0x4b0 [ 175.654605][ T9739] ? __pfx___might_resched+0x10/0x10 [ 175.654626][ T9739] ? kstrtouint+0x6e/0xe0 [ 175.654657][ T9739] ? get_pid_task+0x20/0x1f0 [ 175.654681][ T9739] ? rcu_is_watching+0x15/0xb0 [ 175.654702][ T9739] ? __pfx_packet_sendmsg+0x10/0x10 [ 175.654725][ T9739] ? aa_sk_perm+0x81e/0x950 [ 175.654756][ T9739] ? __might_fault+0xb0/0x130 [ 175.654784][ T9739] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 175.654809][ T9739] ? aa_sock_msg_perm+0xf1/0x1d0 [ 175.654829][ T9739] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.654852][ T9739] ? __pfx_packet_sendmsg+0x10/0x10 [ 175.654877][ T9739] __sock_sendmsg+0x219/0x270 [ 175.654906][ T9739] __sys_sendto+0x3bd/0x520 [ 175.654926][ T9739] ? __pfx___sys_sendto+0x10/0x10 [ 175.654944][ T9739] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 175.654983][ T9739] ? __fget_files+0x3a0/0x420 [ 175.655007][ T9739] ? ksys_write+0x22a/0x250 [ 175.655036][ T9739] ? __pfx_ksys_write+0x10/0x10 [ 175.655062][ T9739] ? rcu_is_watching+0x15/0xb0 [ 175.655085][ T9739] __x64_sys_sendto+0xde/0x100 [ 175.655106][ T9739] do_syscall_64+0xfa/0x3b0 [ 175.655126][ T9739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.655146][ T9739] ? clear_bhb_loop+0x60/0xb0 [ 175.655170][ T9739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.655192][ T9739] RIP: 0033:0x7efcd258ebe9 [ 175.655211][ T9739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.655231][ T9739] RSP: 002b:00007efcd331d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 175.655255][ T9739] RAX: ffffffffffffffda RBX: 00007efcd27b5fa0 RCX: 00007efcd258ebe9 [ 175.655271][ T9739] RDX: 000000000000000e RSI: 0000200000000000 RDI: 0000000000000003 [ 175.655284][ T9739] RBP: 00007efcd331d090 R08: 0000200000000200 R09: 0000000000000014 [ 175.655298][ T9739] R10: 0000000000000050 R11: 0000000000000246 R12: 0000000000000001 [ 175.655311][ T9739] R13: 00007efcd27b6038 R14: 00007efcd27b5fa0 R15: 00007fff78706218 [ 175.655336][ T9739] [ 176.239023][ T9748] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1179'. [ 176.410844][ T9759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1181'. [ 176.494359][ T9762] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1182'. [ 176.535890][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 176.556857][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'. [ 176.576147][ T9762] tipc: Enabling of bearer rejected, failed to enable media [ 176.589028][ T9764] netlink: 'syz.4.1183': attribute type 6 has an invalid length. [ 176.606437][ T9764] tipc: Enabled bearer , priority 0 [ 176.615897][ T9764] syzkaller0: entered promiscuous mode [ 176.623362][ T9764] syzkaller0: entered allmulticast mode [ 176.636165][ T9764] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1183'. [ 176.651844][ T9764] tipc: Resetting bearer [ 176.666935][ T9763] tipc: Resetting bearer [ 176.686341][ T9763] tipc: Disabling bearer [ 176.799027][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1188'. [ 176.964095][ T9789] netlink: 'syz.4.1193': attribute type 7 has an invalid length. [ 176.972324][ T9789] netlink: 'syz.4.1193': attribute type 3 has an invalid length. [ 177.115983][ T9797] FAULT_INJECTION: forcing a failure. [ 177.115983][ T9797] name failslab, interval 1, probability 0, space 0, times 0 [ 177.130630][ T9797] CPU: 0 UID: 0 PID: 9797 Comm: syz.1.1197 Not tainted syzkaller #0 PREEMPT(full) [ 177.130658][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.130672][ T9797] Call Trace: [ 177.130680][ T9797] [ 177.130689][ T9797] dump_stack_lvl+0x189/0x250 [ 177.130719][ T9797] ? __pfx____ratelimit+0x10/0x10 [ 177.130750][ T9797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.130774][ T9797] ? __pfx__printk+0x10/0x10 [ 177.130811][ T9797] should_fail_ex+0x414/0x560 [ 177.130840][ T9797] should_failslab+0xa8/0x100 [ 177.130872][ T9797] kmem_cache_alloc_noprof+0x73/0x3c0 [ 177.130900][ T9797] ? skb_clone+0x212/0x3a0 [ 177.130926][ T9797] skb_clone+0x212/0x3a0 [ 177.130952][ T9797] __netlink_deliver_tap+0x404/0x850 [ 177.130992][ T9797] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.131024][ T9797] netlink_deliver_tap+0x19c/0x1b0 [ 177.131057][ T9797] netlink_unicast+0x7fa/0x9e0 [ 177.131089][ T9797] ? __pfx_netlink_unicast+0x10/0x10 [ 177.131118][ T9797] ? netlink_sendmsg+0x642/0xb30 [ 177.131136][ T9797] ? skb_put+0x11b/0x210 [ 177.131157][ T9797] netlink_sendmsg+0x805/0xb30 [ 177.131209][ T9797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.131231][ T9797] ? aa_sock_msg_perm+0xf1/0x1d0 [ 177.131251][ T9797] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.131274][ T9797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.131294][ T9797] __sock_sendmsg+0x219/0x270 [ 177.131322][ T9797] ____sys_sendmsg+0x505/0x830 [ 177.131356][ T9797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.131384][ T9797] ? import_iovec+0x74/0xa0 [ 177.131409][ T9797] ___sys_sendmsg+0x21f/0x2a0 [ 177.131433][ T9797] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.131484][ T9797] ? __fget_files+0x2a/0x420 [ 177.131501][ T9797] ? __fget_files+0x3a0/0x420 [ 177.131525][ T9797] __x64_sys_sendmsg+0x19b/0x260 [ 177.131549][ T9797] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.131581][ T9797] ? __pfx_ksys_write+0x10/0x10 [ 177.131608][ T9797] ? rcu_is_watching+0x15/0xb0 [ 177.131633][ T9797] ? rcu_is_watching+0x15/0xb0 [ 177.131655][ T9797] do_syscall_64+0xfa/0x3b0 [ 177.131675][ T9797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.131696][ T9797] ? clear_bhb_loop+0x60/0xb0 [ 177.131719][ T9797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.131740][ T9797] RIP: 0033:0x7efcd258ebe9 [ 177.131758][ T9797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.131776][ T9797] RSP: 002b:00007efcd331d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.131799][ T9797] RAX: ffffffffffffffda RBX: 00007efcd27b5fa0 RCX: 00007efcd258ebe9 [ 177.131815][ T9797] RDX: 0000000024008804 RSI: 0000200000000280 RDI: 0000000000000003 [ 177.131829][ T9797] RBP: 00007efcd331d090 R08: 0000000000000000 R09: 0000000000000000 [ 177.131842][ T9797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.131855][ T9797] R13: 00007efcd27b6038 R14: 00007efcd27b5fa0 R15: 00007fff78706218 [ 177.131879][ T9797] [ 177.459570][ T9799] netlink: 'syz.0.1198': attribute type 3 has an invalid length. [ 177.469992][ T9798] delete_channel: no stack [ 177.481793][ T5943] IPVS: starting estimator thread 0... [ 177.505311][ T9795] tipc: Enabling of bearer rejected, failed to enable media [ 177.588116][ T9802] IPVS: using max 34 ests per chain, 81600 per kthread [ 177.610263][ T9806] netlink: 'syz.4.1200': attribute type 1 has an invalid length. [ 178.297209][ T9847] netlink: 'syz.3.1205': attribute type 10 has an invalid length. [ 178.566046][ T9847] wlan1: mtu less than device minimum [ 178.593179][ T9847] Ã: (slave wlan1): Error -22 calling dev_set_mtu [ 178.809113][ T9865] batadv1: entered promiscuous mode [ 178.899818][ T9866] wireguard0: entered promiscuous mode [ 178.949725][ T9866] wireguard0: entered allmulticast mode [ 178.968854][ T9866] tipc: Enabled bearer , priority 0 [ 178.983832][ T9877] syzkaller1: entered allmulticast mode [ 179.067514][ T9873] tipc: Resetting bearer [ 179.078276][ T9866] syzkaller0: entered promiscuous mode [ 179.083871][ T9866] syzkaller0: entered allmulticast mode [ 179.087678][ T9873] netlink: 'syz.3.1216': attribute type 11 has an invalid length. [ 179.189603][ T9863] tipc: Resetting bearer [ 179.202465][ T9863] tipc: Disabling bearer [ 179.535631][ T9901] tipc: Enabling of bearer rejected, failed to enable media [ 179.546738][ T9900] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 179.558308][ T9903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.695255][ T9911] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 180.513889][ T9941] __nla_validate_parse: 13 callbacks suppressed [ 180.513911][ T9941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1240'. [ 180.604820][ T9945] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1243'. [ 180.621395][ T9945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1243'. [ 180.633580][ T9945] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1243'. [ 180.697597][ T9943] dvmrp8: entered allmulticast mode [ 180.816419][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1246'. [ 181.091239][ T9967] netlink: 'syz.0.1250': attribute type 7 has an invalid length. [ 181.099559][ T9967] netlink: 'syz.0.1250': attribute type 3 has an invalid length. [ 181.108310][ T9967] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1250'. [ 181.164811][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 181.403912][ T9981] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1254'. [ 181.770990][T10007] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1265'. [ 181.783392][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 181.831800][T10001] Bluetooth: MGMT ver 1.23 [ 181.839522][T10007] netlink: 'syz.2.1265': attribute type 5 has an invalid length. [ 181.933216][T10017] FAULT_INJECTION: forcing a failure. [ 181.933216][T10017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.949200][T10011] tipc: Enabling of bearer rejected, failed to enable media [ 181.949367][T10017] CPU: 0 UID: 0 PID: 10017 Comm: syz.2.1268 Not tainted syzkaller #0 PREEMPT(full) [ 181.949397][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.949413][T10017] Call Trace: [ 181.949422][T10017] [ 181.949438][T10017] dump_stack_lvl+0x189/0x250 [ 181.949475][T10017] ? __pfx____ratelimit+0x10/0x10 [ 181.949509][T10017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.949537][T10017] ? __pfx__printk+0x10/0x10 [ 181.949570][T10017] ? __might_fault+0xb0/0x130 [ 181.949606][T10017] ? rcu_is_watching+0x15/0xb0 [ 181.949631][T10017] should_fail_ex+0x414/0x560 [ 181.949665][T10017] _copy_from_user+0x2d/0xb0 [ 181.949689][T10017] ___sys_recvmsg+0x12e/0x510 [ 181.949718][T10017] ? __pfx____sys_recvmsg+0x10/0x10 [ 181.949746][T10017] ? __fget_files+0x2a/0x420 [ 181.949776][T10017] ? rcu_is_watching+0x15/0xb0 [ 181.949798][T10017] ? lock_release+0x4b/0x3e0 [ 181.949833][T10017] ? __might_fault+0xcc/0x130 [ 181.949865][T10017] do_recvmmsg+0x307/0x770 [ 181.949895][T10017] ? __pfx_do_recvmmsg+0x10/0x10 [ 181.949927][T10017] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 181.949975][T10017] __x64_sys_recvmmsg+0x190/0x240 [ 181.950003][T10017] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 181.950033][T10017] ? rcu_is_watching+0x15/0xb0 [ 181.950058][T10017] ? rcu_is_watching+0x15/0xb0 [ 181.950083][T10017] do_syscall_64+0xfa/0x3b0 [ 181.950104][T10017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.950134][T10017] ? clear_bhb_loop+0x60/0xb0 [ 181.950162][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.950184][T10017] RIP: 0033:0x7f4277d8ebe9 [ 181.950205][T10017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.950228][T10017] RSP: 002b:00007f4278b39038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 181.950252][T10017] RAX: ffffffffffffffda RBX: 00007f4277fb5fa0 RCX: 00007f4277d8ebe9 [ 181.950270][T10017] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000003 [ 181.950286][T10017] RBP: 00007f4278b39090 R08: 0000000000000000 R09: 0000000000000000 [ 181.950300][T10017] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 181.950315][T10017] R13: 00007f4277fb6038 R14: 00007f4277fb5fa0 R15: 00007ffc767a0688 [ 181.950342][T10017] [ 182.281730][T10026] tipc: Enabled bearer , priority 0 [ 182.363028][T10026] syzkaller0: entered promiscuous mode [ 182.370464][T10026] syzkaller0: entered allmulticast mode [ 182.461171][T10026] tipc: Resetting bearer [ 182.480040][T10024] tipc: Resetting bearer [ 182.519363][T10024] tipc: Disabling bearer [ 182.613732][T10046] FAULT_INJECTION: forcing a failure. [ 182.613732][T10046] name failslab, interval 1, probability 0, space 0, times 0 [ 182.629326][T10046] CPU: 0 UID: 0 PID: 10046 Comm: syz.1.1279 Not tainted syzkaller #0 PREEMPT(full) [ 182.629356][T10046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.629369][T10046] Call Trace: [ 182.629378][T10046] [ 182.629387][T10046] dump_stack_lvl+0x189/0x250 [ 182.629418][T10046] ? __pfx____ratelimit+0x10/0x10 [ 182.629456][T10046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.629481][T10046] ? __pfx__printk+0x10/0x10 [ 182.629510][T10046] ? __might_fault+0xcc/0x130 [ 182.629544][T10046] ? __pfx___might_resched+0x10/0x10 [ 182.629564][T10046] ? lock_acquire+0x5f/0x360 [ 182.629596][T10046] should_fail_ex+0x414/0x560 [ 182.629625][T10046] should_failslab+0xa8/0x100 [ 182.629657][T10046] kmem_cache_alloc_noprof+0x73/0x3c0 [ 182.629684][T10046] ? skb_clone+0x212/0x3a0 [ 182.629710][T10046] skb_clone+0x212/0x3a0 [ 182.629734][T10046] pfkey_sendmsg+0x44b/0x1090 [ 182.629754][T10046] ? save_fpregs_to_fpstate+0xa3/0x210 [ 182.629790][T10046] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 182.629823][T10046] ? is_bpf_text_address+0x26/0x2b0 [ 182.629860][T10046] ? rcu_is_watching+0x15/0xb0 [ 182.629880][T10046] ? aa_sock_msg_perm+0xf1/0x1d0 [ 182.629901][T10046] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 182.629923][T10046] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 182.629943][T10046] __sock_sendmsg+0x219/0x270 [ 182.629972][T10046] ____sys_sendmsg+0x52d/0x830 [ 182.629996][T10046] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.630023][T10046] ? import_iovec+0x74/0xa0 [ 182.630048][T10046] ___sys_sendmsg+0x21f/0x2a0 [ 182.630070][T10046] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.630094][T10046] ? kstrtouint+0x6e/0xe0 [ 182.630138][T10046] ? rcu_is_watching+0x15/0xb0 [ 182.630159][T10046] ? lock_release+0x4b/0x3e0 [ 182.630187][T10046] ? __might_fault+0xcc/0x130 [ 182.630216][T10046] __sys_sendmmsg+0x227/0x430 [ 182.630241][T10046] ? __pfx___sys_sendmmsg+0x10/0x10 [ 182.630261][T10046] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 182.630309][T10046] ? ksys_write+0x22a/0x250 [ 182.630342][T10046] ? __pfx_ksys_write+0x10/0x10 [ 182.630367][T10046] ? rcu_is_watching+0x15/0xb0 [ 182.630391][T10046] __x64_sys_sendmmsg+0xa0/0xc0 [ 182.630413][T10046] do_syscall_64+0xfa/0x3b0 [ 182.630432][T10046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.630452][T10046] ? clear_bhb_loop+0x60/0xb0 [ 182.630475][T10046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.630494][T10046] RIP: 0033:0x7efcd258ebe9 [ 182.630512][T10046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.630531][T10046] RSP: 002b:00007efcd331d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 182.630553][T10046] RAX: ffffffffffffffda RBX: 00007efcd27b5fa0 RCX: 00007efcd258ebe9 [ 182.630568][T10046] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000005 [ 182.630582][T10046] RBP: 00007efcd331d090 R08: 0000000000000000 R09: 0000000000000000 [ 182.630596][T10046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.630608][T10046] R13: 00007efcd27b6038 R14: 00007efcd27b5fa0 R15: 00007fff78706218 [ 182.630632][T10046] [ 182.662020][T10051] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 183.081172][T10063] bridge0: entered allmulticast mode [ 183.180971][T10057] netlink: 'syz.3.1283': attribute type 1 has an invalid length. [ 183.497431][T10088] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 183.509398][T10088] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 183.518121][T10088] CPU: 1 UID: 0 PID: 10088 Comm: syz.4.1296 Not tainted syzkaller #0 PREEMPT(full) [ 183.527646][T10088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.537929][T10088] RIP: 0010:__xfrm_state_insert+0x1011/0x1450 [ 183.544025][T10088] Code: 18 00 74 08 4c 89 ef e8 bd c1 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 ba c0 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 91 c1 01 f8 4d 89 2e 41 80 3c 1f 00 [ 183.563671][T10088] RSP: 0018:ffffc9000397f0e8 EFLAGS: 00010246 [ 183.569762][T10088] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 183.577799][T10088] RDX: ffffc9000d2be000 RSI: 0000000000000486 RDI: 0000000000000487 [ 183.585817][T10088] RBP: ffff888059898cf0 R08: ffff888028afda00 R09: 0000000000000002 [ 183.593830][T10088] R10: 000000000000000a R11: 0000000000000002 R12: ffff88805b79eee8 [ 183.601834][T10088] R13: ffff888059898ce8 R14: 0000000000000000 R15: 1ffff1100b6f3dde [ 183.609827][T10088] FS: 00007f9b5cf5a6c0(0000) GS:ffff888125d1a000(0000) knlGS:0000000000000000 [ 183.618791][T10088] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.625383][T10088] CR2: 0000001b32e13ff8 CR3: 0000000076f90000 CR4: 00000000003526f0 [ 183.633367][T10088] Call Trace: [ 183.636745][T10088] [ 183.639709][T10088] ? xfrm_state_insert+0x44/0x60 [ 183.644673][T10088] xfrm_state_insert+0x54/0x60 [ 183.649461][T10088] ipcomp4_init_state+0x673/0xb20 [ 183.654591][T10088] __xfrm_init_state+0xa76/0x13f0 [ 183.659631][T10088] ? __xfrm_init_state+0x7ef/0x13f0 [ 183.664892][T10088] xfrm_add_sa+0x2f5b/0x4070 [ 183.669616][T10088] ? __pfx_xfrm_add_sa+0x10/0x10 [ 183.674592][T10088] ? apparmor_capable+0x137/0x1b0 [ 183.679728][T10088] ? __nla_parse+0x40/0x60 [ 183.684197][T10088] xfrm_user_rcv_msg+0x7a3/0xab0 [ 183.689167][T10088] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 183.694907][T10088] ? __pfx___mutex_trylock_common+0x10/0x10 [ 183.700848][T10088] ? rcu_is_watching+0x15/0xb0 [ 183.705658][T10088] ? trace_contention_end+0x39/0x120 [ 183.711092][T10088] ? __mutex_lock+0x335/0x1350 [ 183.715930][T10088] netlink_rcv_skb+0x205/0x470 [ 183.720807][T10088] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 183.726570][T10088] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.732038][T10088] ? lock_release+0x4b/0x3e0 [ 183.736862][T10088] ? netlink_deliver_tap+0x2e/0x1b0 [ 183.742120][T10088] xfrm_netlink_rcv+0x79/0x90 [ 183.746867][T10088] netlink_unicast+0x82f/0x9e0 [ 183.751772][T10088] ? __pfx_netlink_unicast+0x10/0x10 [ 183.757185][T10088] ? netlink_sendmsg+0x642/0xb30 [ 183.762331][T10088] ? skb_put+0x11b/0x210 [ 183.766697][T10088] netlink_sendmsg+0x805/0xb30 [ 183.771617][T10088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.777000][T10088] ? futex_unqueue+0x22/0x240 [ 183.781741][T10088] ? aa_sock_msg_perm+0xf1/0x1d0 [ 183.786805][T10088] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.792130][T10088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.797665][T10088] __sock_sendmsg+0x219/0x270 [ 183.802473][T10088] ____sys_sendmsg+0x505/0x830 [ 183.807280][T10088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.812678][T10088] ? import_iovec+0x74/0xa0 [ 183.817438][T10088] ___sys_sendmsg+0x21f/0x2a0 [ 183.822169][T10088] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.827501][T10088] ? futex_wait+0x285/0x360 [ 183.832226][T10088] ? file_init_path+0x434/0x590 [ 183.837111][T10088] __x64_sys_sendmsg+0x19b/0x260 [ 183.842157][T10088] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.847636][T10088] ? rcu_is_watching+0x15/0xb0 [ 183.852428][T10088] ? rcu_is_watching+0x15/0xb0 [ 183.857302][T10088] do_syscall_64+0xfa/0x3b0 [ 183.861839][T10088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.868007][T10088] ? clear_bhb_loop+0x60/0xb0 [ 183.872800][T10088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.878837][T10088] RIP: 0033:0x7f9b5c18ebe9 [ 183.883291][T10088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.902937][T10088] RSP: 002b:00007f9b5cf5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.911370][T10088] RAX: ffffffffffffffda RBX: 00007f9b5c3b5fa0 RCX: 00007f9b5c18ebe9 [ 183.919354][T10088] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 183.927361][T10088] RBP: 00007f9b5c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 183.935434][T10088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.943448][T10088] R13: 00007f9b5c3b6038 R14: 00007f9b5c3b5fa0 R15: 00007ffdcbf42d78 [ 183.951443][T10088] [ 183.954490][T10088] Modules linked in: [ 183.958550][T10088] ---[ end trace 0000000000000000 ]--- [ 183.964040][T10088] RIP: 0010:__xfrm_state_insert+0x1011/0x1450 [ 183.970167][T10088] Code: 18 00 74 08 4c 89 ef e8 bd c1 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 ba c0 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 91 c1 01 f8 4d 89 2e 41 80 3c 1f 00 [ 183.989831][T10088] RSP: 0018:ffffc9000397f0e8 EFLAGS: 00010246 [ 183.995954][T10088] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 184.004042][T10088] RDX: ffffc9000d2be000 RSI: 0000000000000486 RDI: 0000000000000487 [ 184.012277][T10088] RBP: ffff888059898cf0 R08: ffff888028afda00 R09: 0000000000000002 [ 184.020318][T10088] R10: 000000000000000a R11: 0000000000000002 R12: ffff88805b79eee8 [ 184.028341][T10088] R13: ffff888059898ce8 R14: 0000000000000000 R15: 1ffff1100b6f3dde [ 184.036349][T10088] FS: 00007f9b5cf5a6c0(0000) GS:ffff888125d1a000(0000) knlGS:0000000000000000 [ 184.045381][T10088] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.052027][T10088] CR2: 0000001b32e13ff8 CR3: 0000000076f90000 CR4: 00000000003526f0 [ 184.060078][T10088] Kernel panic - not syncing: Fatal exception in interrupt [ 184.067606][T10088] Kernel Offset: disabled [ 184.071937][T10088] Rebooting in 86400 seconds..