last executing test programs: 7.925848286s ago: executing program 1 (id=3915): socket(0x400000000010, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x8000000000, 0x1, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f91e2e00283c00fe880004000000000000000000000001ff0200000000000000000000000000012c02040105500400ff0200000000000000000000000000014e2100000401907800706a0100cc1978"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000fcdbdf2502000000000063000000000005000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 6.985345516s ago: executing program 1 (id=3925): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r4, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d6200100000000000000ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a0932f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c43ff010000000000000128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee99367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57d31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 6.406170339s ago: executing program 1 (id=3929): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f00000000c0)="4b0003000000", 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a80)={0x6, 0x29, &(0x7f0000001c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff1c79}, {}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000018c0)='GPL\x00', 0xadbc, 0xae, &(0x7f0000001900)=""/174, 0x41100, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000019c0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001a00)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r2], &(0x7f0000001a40)=[{0x5, 0x4, 0xf, 0x5}]}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)="88b0bae0e826425499f4d4ddb99bbe211a", 0x11}, 0x1, 0x0, 0x0, 0x8004}, 0x24044044) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0xf8, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x120}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x80}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x850) close(0x3) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000001600), r3) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000001780)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r8, @ANYBLOB="000428bd7000fbdbdf2504000000050004000200000014000200687372300000000000000000000000000900010073797a31000000000900030073797a32000000000900030073797a32000000001400020073797a5f74756e0000000000000000001400020069703665727370616e3000000000000009400300737900000002140002007465616d5f736c6176655f3100000000"], 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000088) recvmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xffffffe1}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/159, 0x9f}, {&(0x7f0000001500)=""/155, 0x9b}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xab}], 0x6, 0x2000, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) r10 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r10, 0x111, 0x2, 0x0, 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000000206010800000000000000000000000014000780080011400000000005001500100000000500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="050000150000005f00000000", @ANYRES32=r5, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r13, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x2c, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r11, 0x4100}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}]}]}, 0x2c}}, 0x4008000) 6.035982754s ago: executing program 1 (id=3935): socket(0x400000000010, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x8000000000, 0x1, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f91e2e00283c00fe880004000000000000000000000001ff0200000000000000000000000000012c02040105500400ff0200000000000000000000000000014e2100000401907800706a0100cc1978"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000fcdbdf2502000000000063000000000005000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 5.15126351s ago: executing program 3 (id=3943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) sendmsg$inet(r1, &(0x7f0000001140)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x74, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x29, 0x36}}, @ip_pktinfo={{0x1c, 0x4c000000, 0x8, {0x0, @broadcast, @remote}}}], 0x58}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100027bd7000fddbdf2501000000060028000300000005002f000100000008003b00000000fe0500330002000000f445479c68ff351d7ab522738d3e8d1a3737c8be8fa0228ef59114c2f610b8c3c2f2c2e2b32a76b22fa4a6b32cc8431706919e1b157a06b7775c886c62d1aa28c993410c0687ed648f6c3b8a33390ad38751d439c8bf"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) unshare(0x2c020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) socket(0x1e, 0x8769ca6870ae6a4, 0x5) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767c63616e0000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x800, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r9, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r8, &(0x7f00000000c0)='syz1\x00', 0x1ff) 5.051767296s ago: executing program 1 (id=3944): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES16=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x8, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x7}, {0x5, 0x4, 0x4, 0x6}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x1000) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) 4.687852473s ago: executing program 3 (id=3948): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x22, 0x2, 0x3) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, 0x0, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x2, 0xb007}, 0x4) readv(r3, &(0x7f0000000680)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg(r0, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="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", 0x62c}, {0x0, 0xe}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) close(r8) ioctl$F2FS_IOC_SEC_TRIM_FILE(r8, 0x4018f514, &(0x7f00000001c0)={0x101, 0x8000, 0x2}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 4.289677358s ago: executing program 2 (id=3949): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f00000000c0)=0x7fff, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_SRC={0x8, 0x2, @local}]}, 0x2c}}, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01050008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRESOCT], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x60, 0x12, 0x905, 0x70bd26, 0x25dfdbfb, {0x1, 0x9, 0xb, 0x0, {0x4e22, 0x4e26, [0xfffffffc, 0x923], [0x401, 0x4, 0x10003, 0x1], 0x0, [0x10000, 0x9]}, 0x6, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "05b014000a209cf06cc29523be37f351"}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000007240)={'syzkaller0\x00', {0x2, 0x0, @loopback}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8010}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="8def850aead0319da9be00082abd1317fcdbdf250a000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000100)={0x0, 0x1, 0x7fffffffffffffff}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x68040}, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000020, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(sha1-avx,ecb(cast5))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)='\x00\x00', 0x2}], 0x1}], 0x1, 0x4044840) recvmsg(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1}, 0x40000000) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x4, 0x0, @multicast}, 0x10) 4.190005617s ago: executing program 4 (id=3950): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket(0xa, 0x3, 0x3a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xffe0, 0xf}, {0x1, 0x5}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x895}, 0x4040040) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'dummy0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x2, 0x0, 0x10, r4, 0x80000001}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xb, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x117, 0x2048a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30086, 0x22}}}}}}]}, 0x48}}, 0x24008000) 3.703815795s ago: executing program 4 (id=3951): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xe498}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) (fail_nth: 96) 3.632263318s ago: executing program 3 (id=3952): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x44, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0x44}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/97, 0x61}, {0x0}], 0x2}, 0x32}], 0x4000000000000be, 0x122, 0x0) (async) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="4c2ff9ac7b97eb88f0701e71784e9c27e398554f764a4b2b0d23f76f46e76b0d9433e7fa7370b6fc1a0c59317b5a0c2072d41e382cbbec7534535962f886e8d5fca06af72a1299d026e74c1fd6abe854405cb8a675154ffac338b7bdf65c73e70c74b4a1c9136c7bec20b7ade12d16af7d3925dacc605d83d9567c41a9bf51b2bf2ed0d9f94b7af1cd8256b888b9e061a721cd", @ANYRES64=0x0], 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0f0000000000000002004e20ac1414260000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff000000000000000000000000000000000000000000000000000000000000000000dc53639d0500000002004e200a01010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e200a01010200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ffffffff00"/784], 0x310) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 3.631609333s ago: executing program 0 (id=3953): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000018c0)={'pim6reg\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x7d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/19, @ANYRES32], 0x54}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@bridge_setlink={0x30, 0x13, 0xa2f, 0x70bd2b, 0x4000010, {0x7, 0x0, 0x68, r5, 0x940, 0x22265}, [@IFLA_LINKINFO={0x10, 0x1a, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 3.584163237s ago: executing program 3 (id=3954): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@mpls_delroute={0x30, 0x19, 0x800, 0x70bd26, 0x25dfdbfd, {0x1c, 0x10, 0x14, 0x8, 0xfd, 0x4, 0xfe, 0xa, 0x5d00}, [@RTA_DST={0x8, 0x1, {0x4}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x28, 0xc}}]}, 0x30}}, 0xcd0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000100)=0x7448d6d, 0x4) sendto$inet(r2, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}}, 0x40) close(r4) r6 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xfc0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000180)={r7, 0x1, 0x6, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8427000000000000140003006e657464657673696d3000000000000008002900449d00001800168014000180100006"], 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x4804) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8848, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) close(0x4) 3.230396929s ago: executing program 2 (id=3955): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8) close(r2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018000100000e000000000000020000000003ff0900000000060015000400130014001680100003800500010001000000c4cbcc4e8ceaaaff7552456ca5c2aa53f8b40d792eca9b00000000"], 0x38}}, 0x4040000) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000040)=0x9, 0x4) 3.151561016s ago: executing program 4 (id=3956): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000001380)={0x2, 0x4e20, @multicast2}, 0x10) (async) unshare(0x400) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRESOCT=r1, @ANYRES8=r1, @ANYBLOB="16e5e3aeef317843fb1c70ea05ac02b3c5676abd60d98afd8e977344b44819515547a69023fbdd07af9d1eab317f5dd8664e99b619c9f5ab61b788617f8a171eab5503f11db0221629c612b111b67bde90982fc9cfb06647d61345937ca9b5bececf56fd82a65b620d08e7e9c255876e044ae35bae4db082a8b4d43857a3799eb5702e3f56adc07ead6c1d2af42d53364f2577fc12f8816aaa1fa27ec4f5bfd4e1861fa4fc6c2c581fbdfb4a9eb09f1b73e8a11faba6d229283f1303ae48f06819efbbaaaf89921a36b0", @ANYRES8=r1], 0x48) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000340)=0x4) (async) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f00000000c0)=0x6b, 0x4) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3fb, 0x20, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8005}, 0x4008040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r2, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r2, r2, r2, r2, 0xffffffffffffffff, r2], 0x0, 0x10, 0xfffffffe}, 0x94) 3.107828718s ago: executing program 4 (id=3957): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 3.006724006s ago: executing program 4 (id=3958): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000780)="2fa20b", 0x3, 0x400c040, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x4e, 0x0, 0x0) (async, rerun: 64) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1b, 0x3, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r2, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async, rerun: 32) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7cb7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000680)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000000000fe7f000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x93c}, [@call={0x85, 0x0, 0x0, 0x7f}, @alu={0x7, 0x1, 0x1, 0x5, 0x5, 0xfffffffffffffff8, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x47, &(0x7f0000000880)=""/71, 0x41000, 0x2e, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xe, 0x37e, 0x683}, 0x10, r3, r4, 0x0, &(0x7f0000000700)=[r5, 0xffffffffffffffff, r1, r6, r7, r8, r9], 0x0, 0x10, 0x6}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x8, &(0x7f0000000000)=0xf, 0x4) (async) getsockopt$inet6_buf(r11, 0x29, 0x6, 0xffffffffffffffff, &(0x7f00000001c0)=0xa4) (async) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010025bd7000fedbdf25390000000e00010065657464657673696d0000000f0002006e65746465b4edf0eded8dafe67673696d30000008000300000000004d5fbb286b681de0c48599cd342a6c00a981dfb43fff5f1e6a0ae838f9dd06d22fdd69b0dec35597357b47cf4ec7a345cc15866d1f8efdc2ee04a452e9c65e30342dcc865f3e7a8295112f9b787b811e9250f6ea82f1125558824b0331652a435ef0a0005d7460c432c0e4c2865aaf29603e32120275b577f94a2964cf882f54fb1cb62badca9612ad39a73d3983574d6f966223489737ffdeb50f8b8fa5d420e97dd682608760a2930e46e1cd3443b35252572e45ad18cb56c23effe97ae03c32937d80b8c7adeab891c6e912d038451d2bfbb2a58844cc6dd487e4ab44821a50ea51690e69f2090ed8f17c704044982acbb4b8eef520782b9329e49577e4628a4f98843197b8832f75839af1ff1390"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async) socket$netlink(0x10, 0x3, 0xb) 2.934163494s ago: executing program 2 (id=3959): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xd5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000400)=""/88, 0x58}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f00000006c0)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000880)=""/127, 0x7f}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x677, 0x2000, &(0x7f0000003700)={0x77359400}) 2.590419365s ago: executing program 0 (id=3960): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e0400000400000004000000abc77e88e279de364af0bf4229e5bd02000200000041352211a00f1ebc0f9179481b716a4af65c61ad714132d95a66f781cf1e750b2435e154dd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000280)={r1, 0x5}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0xfffffffffffffd25, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="310300000000000200000900000008000600", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 1.698581583s ago: executing program 0 (id=3961): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r2, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20010) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed85000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r5}, 0x38) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r5}, 0x38) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0), 0x4) socket$netlink(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40040) socket(0xa, 0x3, 0x3a) 1.098355271s ago: executing program 2 (id=3962): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="7b509a2ca9f18c331f7a04e186d450df250c0000001800018014000200"], 0x30}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendto$inet6(r2, &(0x7f0000000080)='\v', 0x1, 0x20040028, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 975.868088ms ago: executing program 3 (id=3963): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x21, 0x2, 0x2) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000003c0)=0x7, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0x8, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) bind$inet(r3, &(0x7f0000000280)={0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000004600)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="d1f543804ca1a1d87c792c1598d56963d123508d76db4d", 0x17}, {&(0x7f00000004c0)="ca78b0f92ac3eea2520ad4163511ac3b2bf25ec6c5a08b9c10532252e257ec457547b1a62e27858e864db9518122ca15285b80948637f1c17577d5c8c70992547265f68607e71703c94a308e3ca78f555d07ca5f3a9b94a44672a09dcf53331e87fa9c2c1528cc8a1197169e6710c5eba8a533481b936ca978713a6225d969c60d625a6b855544122c68d8ba52dcb910edaf6f1125451212135de9d14a8efe1c4be0b9e446ea8783d67ce319dc04ab6d1d99eecd10e7d8a40260d29a59dc52af7f5db0ff745032fcaaf95a27ea2f95119c49ede415074cf507714c0e58622608192919db48c9a0432c51616b", 0xec}, {&(0x7f00000001c0)="0a0698e3ab9d1f4960e4ab4c85b246f292f3a57315ecaa0d9bcb58f41d56bf7242d566d86f11b915e3f4cbb0efa9cef60f4de7d39b4f08622da05496d1f92c21b42512d0522c69d6fc6f57427ae28cc1d7a8d102f4439823b5625204f22f4be4e04594be28ef80a7118e3e5f11b3f68512103dbfc1806eaa498c122547b9b03c367698b9c3fb", 0x86}], 0x3, 0x0, 0x0, 0x1}], 0x1, 0x20048889) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000080071107900000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xffffffffffffff7d, 0x0, 0x0, 0x48, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet(0xa, 0x3, 0x7) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0xfffc, @rand_addr=0x64010100}, 0x6) bind$alg(r6, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp256-generic,ecb(blowfish))\x00'}, 0x58) recvmsg$can_j1939(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000223) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES64=r2, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r10, &(0x7f0000000000)=ANY=[], 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x0, &(0x7f0000000280)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffa8, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x29) unshare(0x20040600) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000040)=""/125, &(0x7f00000000c0)=0x7d) 823.183044ms ago: executing program 0 (id=3964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}}, 0x40) 750.736217ms ago: executing program 1 (id=3965): r0 = socket(0x1d, 0x2, 0x6) socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1) setsockopt$sock_attach_bpf(r2, 0x1, 0x12, &(0x7f00000007c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000007f000000040000000809000000000000", @ANYRES32=r7], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001a80)={'vxcan0\x00', 0x0}) r10 = socket$alg(0x26, 0x5, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r11, &(0x7f0000000240)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0xffff, 0xc4, 0x10}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x4, 0xd8, 0x65, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x1d, 0x80, 0x7, 0x0, 0x9, {[@mptcp=@remove_addr={0x1e, 0x59, 0x6, 0x0, "3bcc55e2fb4b662a463b24b28a4fafb428a89d60f9547d33690c48bf9581455479f14cea31faf5212327c508ed14d3cc9f1b20adaecc3b4c664e61295f92adc7b03928e6f24a8ee8e299effe97537d57096d808d21b4"}, @exp_fastopen={0xfe, 0x4}]}}, {"13d3b3875dfd9a3f6328f33f09ceec09986b30406704e2560f04592cb4869c77658fcb3eca004c77b183c5840dbb0fd30bcd067737d3f07dff1755aac0e628d921d141b089c15306c066b177aab800b1"}}}}, 0xe6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r10, 0x117, 0x5, 0x0, 0xe) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r9, 0x1, {0x0, 0x1, 0x2}}, 0x18) sendmmsg$inet6(r0, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="a8", 0x1}, {&(0x7f00000013c0)="e4d816cae519", 0x6}], 0x2}}], 0x1, 0x20048040) 611.88623ms ago: executing program 2 (id=3966): socket(0x22, 0x2, 0x4003) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003900010324bd7002eadbdf25010000004bf1f8b294ce7318a5066fb21942e31ecada1443c54030fbc70e7e504401af461ee7970dde6e320c96509bf0c5df23"], 0x14}}, 0x4000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c010000100013070000008232dd00fcdbdf252001000000000000000000e10500000120010000000000000000000000000001000000004e210002020000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socketpair(0x1a, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r4, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000001c0)=""/13, &(0x7f0000002180)=0xd) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r7, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000c40)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r8, &(0x7f0000000100), 0x0, 0x726, 0x7) socket$netlink(0x10, 0x3, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) bind$llc(r9, 0x0, 0x0) 515.986567ms ago: executing program 0 (id=3967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x4}, 0x2003}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32=r7], 0x60}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ee, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup(r10, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r12 = openat$cgroup_type(r11, &(0x7f0000000180), 0x2, 0x0) sendfile(r9, r12, 0x0, 0x7) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.numa_stat\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000ac0)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r8, 0x2f, 0xf7, 0x3, 0x400, 0x28, @private2, @local, 0x1, 0x8000, 0xffffffff, 0x82}}) sendmsg$kcm(r13, &(0x7f0000000a40)={&(0x7f0000000240)=@ll={0x11, 0x10, r14, 0x1, 0x10, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="72e15efc28774935f36333623baba4f4565442a54be2092073e6aa5bef1b58e79528967e6ac8e79daef6d01e126d650eb98157f730fe06c4b5bafc1530e8720abc18b2b97b1b7bc2023f1628cb1b5074f2e4d817f6e7516d50b13c68160783e7afb26eb0fbec1fc7353e23cd01a9ff9d452ea533b6fa59e388", 0x79}, {&(0x7f0000000500)="6ded690f815faf774140dcf904447be45b96a41109982a8c2410d1f8846803fa0f23678dfb99a9bc05c73ce374e183c7a32c8628676c2b5d0df6b754c66b77f8f91c21c96ec80d08c626fb262fe0ce9a34de4bfa9e13086b1a3deecc78f07268739803afda7901a2ef0ba324e6543fbd8440144e6fc3172952b9912a7f2ff75fa3557be9092cec7ef9db742b3e997019bd272d83345cac8a5a03b56dea79174691d3ac750ff5c9a3435797a05ee43cb7224d1c4f13f84a0a90727ed9ff5c46ec64c8351e150ab712a39af4896853fdf7e9eec34904274251afd43dd1a0433a5294d33e18466ff17fabaaeb25789c9e", 0xef}, {&(0x7f0000000340)="814fa869fa16780fd2e673d116177eca8c6439ff91f6dee408306e1a8cdaf3affbafad067a5cf0058d2c1b8cc8eb4723a7bdddb74a9886c580ab7f719958f1c9898e0f8b08e8d140bab8a2", 0x4b}, {&(0x7f00000003c0)="7bf278bcb6a40bd6493997a694e593e8343b58fe8af23edeaee452c0dce0c5d6fa8cafb799e8f813fd5aa9539953036252ff", 0x32}, {&(0x7f0000000600)="a295959da807a8af41e6444eee0f82f3759ab8213d6cca8ff36550", 0x1b}, {&(0x7f0000000640)="f99834c908e485f0e34e94fe938bc5578aa6d239fb07c2bac946906021b61d1d5e293298c00944f555f81b10789022df27649e4150849bc621442b1de42c435525612debec7903a95580d14120418768352a63236ac9f9093135d3a676fe38c8956c88153c62b5ca5e0b23f78eeb363316783ee865de60ad81dc43f02884e4d846e690f6c2f5e4a9beea6b30bdc365bab7c75fc0f6786bc7906b", 0x9a}, {&(0x7f0000000700)="06979799a2b6cf4080d733d15cbbdab06075b038407d3b03d4f108eff6c62ebcdb7b90beea5cd7c2d0a21c1fceedd501d59e4bd95e3a6a801e8add560558c5206d9f9db950c3741c24cf532dbc9d4d1386ba8c95dfc55e9a5cd98c7c8a32098970d41776ef1ed3a8aed891323506ec5f6defac09c2a63c902fe0ab20c31d2e3371d7c0f59daf3e5338f58e33b9b9f9d4b9b9cdf8", 0x94}], 0x7, &(0x7f0000000840)=[{0xc8, 0x102, 0x4, "a5714eeb7cc7940915c545503b8bc039a82c5e514dabe5c7ed2fe8eff0eaff486f0a9c92d7ed7e6d7e66f4aa4c1a3749abaed78a362b5894f956294248da1adc0785460ec24979d75d39addd222f54f1ba02ee519da29a5de96e1111e7621aab86aebfdf0ab170cab63d68d4a684496745afdd0993367beb6bfdac6dfb8ab8fce1c459a23b94b413a7d77bc10cdeac8768e0c9be7c53b5a6d8d28b3a5bc8c8b1d04df8dfd8975a85acb6f9e3ce430c43145d7b719a5cfbe2"}, {0xc0, 0x10c, 0x4f1f, "2fdb17912fdd4565857ce890cd1afaf41ce1467e2618c9ee209bc5ed37fc0184ea7481a0880188f429bf218e5ade96c23caee1482886bd1b4bd354ffe99a6dc17131d456181c907b2783c72764c48534e8d275e05439b68c58a4d4a2c5921b56906ab7d17e7cee8376c49ff9b16fccd2f4402848ad850b6ed1556709d80923f6359d894f4e4553c06a3dbb2feae45013cd149e7f7dd8fa075c9746df641b3c891b9e073feee35307a4a114bcd9"}, {0x48, 0x1b5, 0x2, "b5c908cf658976ef2ff83c988ba07314c128b3bfb134629160aec659b53f48994f96bcf76a188c2e6c8715589fcf0fc54d"}], 0x1d0}, 0x40) 289.634082ms ago: executing program 0 (id=3968): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001880)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x13, 0x19}}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_DELCHAIN={0x74, 0x5, 0xa, 0x401, 0x0, 0x0, {0x8, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe8}, 0x1, 0x0, 0x0, 0x90}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x14, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x3, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r7, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00', 0x0, 0x10}, 0x18) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xb, 0xf, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8001}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x58f}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0x0, 0x8, 0x6, 0x6}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x9d, &(0x7f00000004c0)=""/157, 0x40f00, 0x11, '\x00', r5, @fallback=0x38, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r9, 0x4, &(0x7f0000000c40)=[r10, r11, r4, r12, r13, 0x1], &(0x7f0000000c80)=[{0x2, 0x1, 0x5, 0x6}, {0x4, 0x3, 0x2, 0x4}, {0x5, 0x3, 0xd, 0x5}, {0x7, 0x3, 0x2, 0x7}], 0x10, 0xfffffffc}, 0x94) r14 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r15, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x5, 0x7, 0x0, 0x2000009, 0x2d, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0x58}}, 0x0) connect$unix(r14, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 229.44196ms ago: executing program 3 (id=3969): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='syzkaller\x00'}, 0x94) (async, rerun: 32) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x92d, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0xa, 0x1, 0x0, r1}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xcbf9, r0, 0x0, 0x0, 0x0, 0x10, 0x9e1}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098e4554990bc6fdfd4647aad6ed8951ff86c092399a8d11b76c5e", &(0x7f00000008c0)=""/206, 0x0, 0x0, 0x4c, 0x1e, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48) 54.218678ms ago: executing program 2 (id=3970): readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x1, 0x0, 0x10, @private2, @mcast1, 0x700, 0x10, 0x40000, 0x6}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) listen(0xffffffffffffffff, 0x4) 0s ago: executing program 4 (id=3971): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004040) kernel console output (not intermixed with test programs): : entered promiscuous mode [ 500.669761][T17616] veth1_macvtap: entered promiscuous mode [ 500.695607][T17836] netlink: 'syz.0.3164': attribute type 4 has an invalid length. [ 500.741544][T17616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.788128][T17616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.818366][ T6142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.835315][ T6142] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.848581][ T6142] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.878078][ T6142] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.006536][ T5869] Bluetooth: hci2: command tx timeout [ 501.019329][ T5999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.028023][ T5999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.121734][ T6142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.131155][T17841] netlink: 'syz.0.3166': attribute type 13 has an invalid length. [ 501.142023][T17841] syzkaller1: entered promiscuous mode [ 501.148745][T17841] syzkaller1: entered allmulticast mode [ 501.184293][ T6142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.269237][T17845] netlink: 'syz.4.3113': attribute type 4 has an invalid length. [ 501.287149][T17845] netlink: 'syz.4.3113': attribute type 4 has an invalid length. [ 501.377839][T17849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3168'. [ 501.392149][T17849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3168'. [ 501.635113][ T5869] Bluetooth: hci5: command tx timeout [ 501.767114][T17860] FAULT_INJECTION: forcing a failure. [ 501.767114][T17860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.787101][T17860] CPU: 0 UID: 0 PID: 17860 Comm: syz.4.3171 Not tainted syzkaller #0 PREEMPT(full) [ 501.787132][T17860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.787145][T17860] Call Trace: [ 501.787154][T17860] [ 501.787170][T17860] dump_stack_lvl+0x189/0x250 [ 501.787202][T17860] ? __pfx____ratelimit+0x10/0x10 [ 501.787233][T17860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.787259][T17860] ? __pfx__printk+0x10/0x10 [ 501.787289][T17860] ? __might_fault+0xb0/0x130 [ 501.787333][T17860] should_fail_ex+0x414/0x560 [ 501.787367][T17860] _copy_from_user+0x2d/0xb0 [ 501.787393][T17860] ___sys_recvmsg+0x12e/0x510 [ 501.787424][T17860] ? __pfx____sys_recvmsg+0x10/0x10 [ 501.787484][T17860] ? __might_fault+0xb0/0x130 [ 501.787518][T17860] do_recvmmsg+0x307/0x770 [ 501.787552][T17860] ? __pfx_do_recvmmsg+0x10/0x10 [ 501.787590][T17860] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 501.787649][T17860] __x64_sys_recvmmsg+0x190/0x240 [ 501.787677][T17860] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 501.787699][T17860] ? rcu_is_watching+0x15/0xb0 [ 501.787728][T17860] ? do_syscall_64+0xbe/0x3b0 [ 501.787765][T17860] do_syscall_64+0xfa/0x3b0 [ 501.787795][T17860] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.787825][T17860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.787846][T17860] ? clear_bhb_loop+0x60/0xb0 [ 501.787872][T17860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.787893][T17860] RIP: 0033:0x7feec938ebe9 [ 501.787912][T17860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.787931][T17860] RSP: 002b:00007feeca19b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 501.787954][T17860] RAX: ffffffffffffffda RBX: 00007feec95b5fa0 RCX: 00007feec938ebe9 [ 501.787969][T17860] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 501.787984][T17860] RBP: 00007feeca19b090 R08: 0000000000000000 R09: 0000000000000000 [ 501.787997][T17860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.788009][T17860] R13: 00007feec95b6038 R14: 00007feec95b5fa0 R15: 00007fff375cec98 [ 501.788045][T17860] [ 502.093047][T17862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3172'. [ 502.103212][T17862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3172'. [ 502.200892][T17862] bond1: entered promiscuous mode [ 502.243449][T17862] bond1: entered allmulticast mode [ 502.264786][T17862] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.302582][T17868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3173'. [ 502.553780][T16445] smc: removing ib device syz2 [ 502.989759][T17884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3178'. [ 503.004694][T17884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3178'. [ 503.192984][T17884] bond19: entered promiscuous mode [ 503.226094][T17884] bond19: entered allmulticast mode [ 503.255628][T17884] 8021q: adding VLAN 0 to HW filter on device bond19 [ 503.342692][T17897] netlink: 'syz.2.3183': attribute type 4 has an invalid length. [ 503.413853][T17900] netlink: 'syz.2.3183': attribute type 4 has an invalid length. [ 504.008761][T17906] syzkaller1: entered promiscuous mode [ 504.023680][T17906] syzkaller1: entered allmulticast mode [ 504.842579][T17932] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3190'. [ 505.169942][T17940] ip6erspan0: entered allmulticast mode [ 505.365520][T17950] netlink: 'syz.4.3196': attribute type 16 has an invalid length. [ 505.380249][T17950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3196'. [ 505.412618][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3196'. [ 505.600480][T17962] netlink: 'syz.1.3199': attribute type 13 has an invalid length. [ 505.657531][T17962] netlink: 'syz.1.3199': attribute type 17 has an invalid length. [ 506.042375][T17962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.099864][T17972] team_slave_0: entered promiscuous mode [ 506.105693][T17972] team_slave_1: entered promiscuous mode [ 506.121446][T17972] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 506.136674][T17972] team0: Device macvtap1 is already an upper device of the team interface [ 506.158091][T17972] team_slave_0: left promiscuous mode [ 506.163696][T17972] team_slave_1: left promiscuous mode [ 506.670583][T17994] netlink: 'syz.4.3206': attribute type 2 has an invalid length. [ 506.903343][T18004] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3208'. [ 506.911311][T18006] sctp: [Deprecated]: syz.0.3205 (pid 18006) Use of int in max_burst socket option deprecated. [ 506.911311][T18006] Use struct sctp_assoc_value instead [ 506.919703][T18004] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3208'. [ 507.102320][T18015] netlink: 'syz.1.3211': attribute type 4 has an invalid length. [ 507.122416][T18015] netlink: 'syz.1.3211': attribute type 4 has an invalid length. [ 507.161590][T18017] __nla_validate_parse: 1 callbacks suppressed [ 507.161609][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3212'. [ 507.317579][T18010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.928052][T18045] netlink: 'syz.4.3222': attribute type 1 has an invalid length. [ 508.171732][T18048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3223'. [ 508.214672][T18055] netlink: 'syz.2.3226': attribute type 4 has an invalid length. [ 508.291670][T18055] netlink: 'syz.2.3226': attribute type 4 has an invalid length. [ 508.312329][T18058] netlink: 'syz.3.3227': attribute type 4 has an invalid length. [ 508.445460][T18060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3228'. [ 508.490413][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3227'. [ 508.531951][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 508.556251][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 508.565141][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 508.565157][T18070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3229'. [ 508.565177][T18070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3229'. [ 508.577460][T18060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3228'. [ 508.607745][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 508.626792][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 508.671292][ T1321] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.715099][ T1331] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.732824][T18067] netlink: 'syz.3.3227': attribute type 4 has an invalid length. [ 508.867916][T18070] bond1: entered promiscuous mode [ 508.873346][T18070] bond1: entered allmulticast mode [ 508.879362][T18070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 508.926792][ T1331] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.926823][T18084] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3231'. [ 508.968768][ T1331] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.144348][T18069] chnl_net:caif_netlink_parms(): no params data found [ 510.404385][T18125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3238'. [ 510.674008][ T5869] Bluetooth: hci0: command tx timeout [ 511.312999][T18069] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.334404][T18069] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.353964][T18069] bridge_slave_0: entered allmulticast mode [ 511.373358][T18069] bridge_slave_0: entered promiscuous mode [ 511.434312][T18069] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.441581][T18069] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.463203][T18069] bridge_slave_1: entered allmulticast mode [ 511.476857][T18069] bridge_slave_1: entered promiscuous mode [ 511.567393][T18138] netlink: 'syz.3.3243': attribute type 4 has an invalid length. [ 511.653171][T18069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.677985][T18069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.746791][T18142] FAULT_INJECTION: forcing a failure. [ 511.746791][T18142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.761758][T18145] netlink: 'syz.4.3245': attribute type 4 has an invalid length. [ 511.771304][T18142] CPU: 0 UID: 0 PID: 18142 Comm: syz.1.3244 Not tainted syzkaller #0 PREEMPT(full) [ 511.771333][T18142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 511.771346][T18142] Call Trace: [ 511.771355][T18142] [ 511.771364][T18142] dump_stack_lvl+0x189/0x250 [ 511.771397][T18142] ? __pfx____ratelimit+0x10/0x10 [ 511.771427][T18142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.771453][T18142] ? __pfx__printk+0x10/0x10 [ 511.771483][T18142] ? __might_fault+0xb0/0x130 [ 511.771525][T18142] should_fail_ex+0x414/0x560 [ 511.771560][T18142] _copy_from_user+0x2d/0xb0 [ 511.771585][T18142] ___sys_recvmsg+0x12e/0x510 [ 511.771616][T18142] ? __pfx____sys_recvmsg+0x10/0x10 [ 511.771682][T18142] ? __might_fault+0xb0/0x130 [ 511.771716][T18142] do_recvmmsg+0x307/0x770 [ 511.771749][T18142] ? __pfx_do_recvmmsg+0x10/0x10 [ 511.771787][T18142] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 511.771840][T18142] __x64_sys_recvmmsg+0x190/0x240 [ 511.771868][T18142] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 511.771889][T18142] ? rcu_is_watching+0x15/0xb0 [ 511.771918][T18142] ? do_syscall_64+0xbe/0x3b0 [ 511.771953][T18142] do_syscall_64+0xfa/0x3b0 [ 511.771983][T18142] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.772013][T18142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.772033][T18142] ? clear_bhb_loop+0x60/0xb0 [ 511.772060][T18142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.772080][T18142] RIP: 0033:0x7fd537f8ebe9 [ 511.772099][T18142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.772119][T18142] RSP: 002b:00007fd538d12038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 511.772141][T18142] RAX: ffffffffffffffda RBX: 00007fd5381b5fa0 RCX: 00007fd537f8ebe9 [ 511.772158][T18142] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 511.772172][T18142] RBP: 00007fd538d12090 R08: 0000000000000000 R09: 0000000000000000 [ 511.772185][T18142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 511.772198][T18142] R13: 00007fd5381b6038 R14: 00007fd5381b5fa0 R15: 00007ffc92018198 [ 511.772232][T18142] [ 511.989388][T18149] netlink: 'syz.4.3245': attribute type 4 has an invalid length. [ 512.149116][T18069] team0: Port device team_slave_0 added [ 512.172724][T18069] team0: Port device team_slave_1 added [ 512.297906][T18069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.305887][T18069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.510034][T18069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.559427][T18069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.568861][T18069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.606921][T18069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.753428][T18179] team_slave_0: entered promiscuous mode [ 512.759265][T18179] team_slave_1: entered promiscuous mode [ 512.777508][T18179] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 512.791537][T18179] team0: Device macvtap1 is already an upper device of the team interface [ 512.813378][T18179] team_slave_0: left promiscuous mode [ 512.819044][T18179] team_slave_1: left promiscuous mode [ 512.879324][T18069] hsr_slave_0: entered promiscuous mode [ 512.892923][T18069] hsr_slave_1: entered promiscuous mode [ 512.910724][T18069] debugfs: 'hsr0' already exists in 'hsr' [ 512.917719][T18069] Cannot create hsr debugfs directory [ 513.181950][T18069] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.194741][T18069] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.263092][T18069] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.273043][T18069] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.347607][T18069] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.357829][T18069] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.441121][T18069] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.476597][T18069] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.776261][T18069] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 513.791674][T18069] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 513.827797][T18069] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 513.882755][T18069] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 513.968379][T18222] netlink: 'syz.2.3266': attribute type 4 has an invalid length. [ 514.098642][T18069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.223444][T18069] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.276609][T16445] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.283834][T16445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.346691][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.353940][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.402877][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.433446][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.458493][T18227] netlink: 'syz.4.3268': attribute type 10 has an invalid length. [ 514.467800][T18228] netlink: 'syz.2.3267': attribute type 12 has an invalid length. [ 514.530780][T18231] netlink: 'syz.4.3268': attribute type 1 has an invalid length. [ 514.553318][T18227] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 514.860335][T18236] netlink: 'syz.2.3269': attribute type 4 has an invalid length. [ 514.924105][T18236] netlink: 'syz.2.3269': attribute type 4 has an invalid length. [ 515.126603][T18244] FAULT_INJECTION: forcing a failure. [ 515.126603][T18244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.175426][T18244] CPU: 1 UID: 0 PID: 18244 Comm: syz.2.3271 Not tainted syzkaller #0 PREEMPT(full) [ 515.175462][T18244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 515.175476][T18244] Call Trace: [ 515.175485][T18244] [ 515.175495][T18244] dump_stack_lvl+0x189/0x250 [ 515.175527][T18244] ? __pfx____ratelimit+0x10/0x10 [ 515.175559][T18244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.175586][T18244] ? __pfx__printk+0x10/0x10 [ 515.175617][T18244] ? __might_fault+0xb0/0x130 [ 515.175661][T18244] should_fail_ex+0x414/0x560 [ 515.175695][T18244] _copy_from_user+0x2d/0xb0 [ 515.175721][T18244] ___sys_recvmsg+0x12e/0x510 [ 515.175754][T18244] ? __pfx____sys_recvmsg+0x10/0x10 [ 515.175813][T18244] ? __might_fault+0xb0/0x130 [ 515.175847][T18244] do_recvmmsg+0x307/0x770 [ 515.175882][T18244] ? __pfx_do_recvmmsg+0x10/0x10 [ 515.175920][T18244] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 515.175973][T18244] __x64_sys_recvmmsg+0x190/0x240 [ 515.176001][T18244] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 515.176024][T18244] ? rcu_is_watching+0x15/0xb0 [ 515.176053][T18244] ? do_syscall_64+0xbe/0x3b0 [ 515.176091][T18244] do_syscall_64+0xfa/0x3b0 [ 515.176122][T18244] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.176160][T18244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.176182][T18244] ? clear_bhb_loop+0x60/0xb0 [ 515.176209][T18244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.176231][T18244] RIP: 0033:0x7fa1b9d8ebe9 [ 515.176251][T18244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.176270][T18244] RSP: 002b:00007fa1bab69038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 515.176295][T18244] RAX: ffffffffffffffda RBX: 00007fa1b9fb5fa0 RCX: 00007fa1b9d8ebe9 [ 515.176311][T18244] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 515.176326][T18244] RBP: 00007fa1bab69090 R08: 0000000000000000 R09: 0000000000000000 [ 515.176340][T18244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 515.176353][T18244] R13: 00007fa1b9fb6038 R14: 00007fa1b9fb5fa0 R15: 00007fff7b529f88 [ 515.176389][T18244] [ 515.431392][T18247] netlink: 'syz.3.3281': attribute type 4 has an invalid length. [ 515.482301][T18247] netlink: 'syz.3.3281': attribute type 4 has an invalid length. [ 515.590817][T18069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.704134][T18259] FAULT_INJECTION: forcing a failure. [ 515.704134][T18259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.732331][T18069] veth0_vlan: entered promiscuous mode [ 515.745891][T18259] CPU: 1 UID: 0 PID: 18259 Comm: syz.2.3274 Not tainted syzkaller #0 PREEMPT(full) [ 515.745921][T18259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 515.745936][T18259] Call Trace: [ 515.745945][T18259] [ 515.745955][T18259] dump_stack_lvl+0x189/0x250 [ 515.745987][T18259] ? __pfx____ratelimit+0x10/0x10 [ 515.746020][T18259] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.746047][T18259] ? __pfx__printk+0x10/0x10 [ 515.746078][T18259] ? __might_fault+0xb0/0x130 [ 515.746207][T18259] should_fail_ex+0x414/0x560 [ 515.746243][T18259] _copy_from_user+0x2d/0xb0 [ 515.746271][T18259] __sys_bpf+0x1ed/0x870 [ 515.746304][T18259] ? __pfx___sys_bpf+0x10/0x10 [ 515.746348][T18259] ? ksys_write+0x22a/0x250 [ 515.746378][T18259] ? __pfx_ksys_write+0x10/0x10 [ 515.746405][T18259] ? rcu_is_watching+0x15/0xb0 [ 515.746436][T18259] __x64_sys_bpf+0x7c/0x90 [ 515.746463][T18259] do_syscall_64+0xfa/0x3b0 [ 515.746495][T18259] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.746526][T18259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.746549][T18259] ? clear_bhb_loop+0x60/0xb0 [ 515.746576][T18259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.746597][T18259] RIP: 0033:0x7fa1b9d8ebe9 [ 515.746618][T18259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.746637][T18259] RSP: 002b:00007fa1bab69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 515.746660][T18259] RAX: ffffffffffffffda RBX: 00007fa1b9fb5fa0 RCX: 00007fa1b9d8ebe9 [ 515.746676][T18259] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 515.746690][T18259] RBP: 00007fa1bab69090 R08: 0000000000000000 R09: 0000000000000000 [ 515.746704][T18259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.746717][T18259] R13: 00007fa1b9fb6038 R14: 00007fa1b9fb5fa0 R15: 00007fff7b529f88 [ 515.746753][T18259] [ 515.981982][T18069] veth1_vlan: entered promiscuous mode [ 516.084541][T18264] IPVS: set_ctl: invalid protocol: 103 172.30.1.4:20256 [ 516.152225][T18069] veth0_macvtap: entered promiscuous mode [ 516.273406][T18069] veth1_macvtap: entered promiscuous mode [ 516.343411][T18069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.390827][T18069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.424411][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.437379][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.449800][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.471538][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.601266][T18275] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3278'. [ 516.758807][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.780691][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.816517][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.847211][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.118609][T18294] validate_nla: 1 callbacks suppressed [ 517.118629][T18294] netlink: 'syz.4.3282': attribute type 4 has an invalid length. [ 517.231477][T18301] netlink: 'syz.4.3282': attribute type 4 has an invalid length. [ 517.417725][T18314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3284'. [ 517.484939][T18326] netlink: 'syz.3.3286': attribute type 4 has an invalid length. [ 517.535785][T18327] netlink: 'syz.3.3286': attribute type 4 has an invalid length. [ 517.575702][T18330] FAULT_INJECTION: forcing a failure. [ 517.575702][T18330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.630006][T18330] CPU: 1 UID: 0 PID: 18330 Comm: syz.0.3287 Not tainted syzkaller #0 PREEMPT(full) [ 517.630039][T18330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 517.630055][T18330] Call Trace: [ 517.630065][T18330] [ 517.630076][T18330] dump_stack_lvl+0x189/0x250 [ 517.630108][T18330] ? __pfx____ratelimit+0x10/0x10 [ 517.630140][T18330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.630168][T18330] ? __pfx__printk+0x10/0x10 [ 517.630213][T18330] should_fail_ex+0x414/0x560 [ 517.630248][T18330] _copy_to_user+0x31/0xb0 [ 517.630282][T18330] bpf_prog_test_run_syscall+0x331/0x4b0 [ 517.630323][T18330] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 517.630365][T18330] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 517.630401][T18330] bpf_prog_test_run+0x2c7/0x340 [ 517.630438][T18330] __sys_bpf+0x581/0x870 [ 517.630470][T18330] ? __pfx___sys_bpf+0x10/0x10 [ 517.630514][T18330] ? ksys_write+0x22a/0x250 [ 517.630547][T18330] ? __pfx_ksys_write+0x10/0x10 [ 517.630580][T18330] ? rcu_is_watching+0x15/0xb0 [ 517.630612][T18330] __x64_sys_bpf+0x7c/0x90 [ 517.630641][T18330] do_syscall_64+0xfa/0x3b0 [ 517.630672][T18330] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.630702][T18330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.630724][T18330] ? clear_bhb_loop+0x60/0xb0 [ 517.630750][T18330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.630772][T18330] RIP: 0033:0x7f53fe98ebe9 [ 517.630790][T18330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.630810][T18330] RSP: 002b:00007f53ff834038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 517.630833][T18330] RAX: ffffffffffffffda RBX: 00007f53febb5fa0 RCX: 00007f53fe98ebe9 [ 517.630850][T18330] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 517.630864][T18330] RBP: 00007f53ff834090 R08: 0000000000000000 R09: 0000000000000000 [ 517.630879][T18330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.630892][T18330] R13: 00007f53febb6038 R14: 00007f53febb5fa0 R15: 00007ffec1828088 [ 517.630926][T18330] [ 518.040582][T18339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3292'. [ 518.073406][T18341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3292'. [ 518.148201][T18344] netlink: 'syz.3.3293': attribute type 1 has an invalid length. [ 518.259626][T18345] vcan1: entered promiscuous mode [ 518.354657][T18356] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131 [ 518.355125][T18355] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3294'. [ 518.633501][T18373] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode [ 518.700029][T18373] bridge_slave_0: left allmulticast mode [ 518.718440][T18373] bridge_slave_0: left promiscuous mode [ 518.761207][T18373] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.810729][T18379] netlink: 'syz.2.3298': attribute type 10 has an invalid length. [ 518.850692][T18373] bridge_slave_1: left allmulticast mode [ 518.879566][T18373] bridge_slave_1: left promiscuous mode [ 518.893400][T18373] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.931289][T18373] bond0: (slave bond_slave_0): Releasing backup interface [ 518.953534][T18373] bond0: (slave bond_slave_1): Releasing backup interface [ 518.989037][T18373] team0: Port device team_slave_0 removed [ 519.002734][T18373] team0: Port device team_slave_1 removed [ 519.009751][T18373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.017742][T18373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.029234][T18373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.043871][T18373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.081953][T18379] mac80211_hwsim hwsim48 wlan1: left allmulticast mode [ 519.133472][T18379] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 519.367662][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3304'. [ 519.550734][T18406] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3306'. [ 519.589408][T18406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3306'. [ 519.656150][T18410] netlink: 'syz.2.3309': attribute type 1 has an invalid length. [ 519.898758][T18418] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3310'. [ 520.123057][T18431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3312'. [ 521.078861][T18477] netlink: 'syz.0.3328': attribute type 13 has an invalid length. [ 521.105965][T18477] netlink: 'syz.0.3328': attribute type 17 has an invalid length. [ 521.289883][T18477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.018480][T18516] FAULT_INJECTION: forcing a failure. [ 522.018480][T18516] name failslab, interval 1, probability 0, space 0, times 0 [ 522.050520][T18516] CPU: 0 UID: 0 PID: 18516 Comm: syz.0.3341 Not tainted syzkaller #0 PREEMPT(full) [ 522.050549][T18516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 522.050563][T18516] Call Trace: [ 522.050570][T18516] [ 522.050579][T18516] dump_stack_lvl+0x189/0x250 [ 522.050607][T18516] ? __pfx____ratelimit+0x10/0x10 [ 522.050634][T18516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.050662][T18516] ? __pfx__printk+0x10/0x10 [ 522.050690][T18516] ? __pfx___might_resched+0x10/0x10 [ 522.050709][T18516] ? fs_reclaim_acquire+0x7d/0x100 [ 522.050745][T18516] should_fail_ex+0x414/0x560 [ 522.050778][T18516] should_failslab+0xa8/0x100 [ 522.050812][T18516] __kmalloc_noprof+0xcb/0x4f0 [ 522.050840][T18516] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 522.050865][T18516] ? sock_kmalloc+0xd6/0x160 [ 522.050904][T18516] sock_kmalloc+0xd6/0x160 [ 522.050931][T18516] hash_recvmsg+0x1d4/0x840 [ 522.050966][T18516] ? __pfx_hash_recvmsg+0x10/0x10 [ 522.050995][T18516] sock_recvmsg_nosec+0x183/0x1c0 [ 522.051030][T18516] ____sys_recvmsg+0x3aa/0x460 [ 522.051064][T18516] ? __pfx_____sys_recvmsg+0x10/0x10 [ 522.051108][T18516] ? import_iovec+0x74/0xa0 [ 522.051138][T18516] ___sys_recvmsg+0x1b5/0x510 [ 522.051169][T18516] ? __pfx____sys_recvmsg+0x10/0x10 [ 522.051228][T18516] ? __might_fault+0xb0/0x130 [ 522.051263][T18516] do_recvmmsg+0x307/0x770 [ 522.051297][T18516] ? __pfx_do_recvmmsg+0x10/0x10 [ 522.051335][T18516] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 522.051388][T18516] __x64_sys_recvmmsg+0x190/0x240 [ 522.051416][T18516] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 522.051438][T18516] ? rcu_is_watching+0x15/0xb0 [ 522.051466][T18516] ? do_syscall_64+0xbe/0x3b0 [ 522.051502][T18516] do_syscall_64+0xfa/0x3b0 [ 522.051534][T18516] ? lockdep_hardirqs_on+0x9c/0x150 [ 522.051564][T18516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.051587][T18516] ? clear_bhb_loop+0x60/0xb0 [ 522.051615][T18516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.051637][T18516] RIP: 0033:0x7f53fe98ebe9 [ 522.051659][T18516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.051680][T18516] RSP: 002b:00007f53ff834038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 522.051704][T18516] RAX: ffffffffffffffda RBX: 00007f53febb5fa0 RCX: 00007f53fe98ebe9 [ 522.051721][T18516] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 522.051736][T18516] RBP: 00007f53ff834090 R08: 0000000000000000 R09: 0000000000000000 [ 522.051749][T18516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 522.051763][T18516] R13: 00007f53febb6038 R14: 00007f53febb5fa0 R15: 00007ffec1828088 [ 522.051798][T18516] [ 522.674079][ T5871] Bluetooth: hci5: command 0x0405 tx timeout [ 522.686980][T18525] syzkaller1: entered allmulticast mode [ 522.882602][T18531] __nla_validate_parse: 2 callbacks suppressed [ 522.882623][T18531] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3345'. [ 523.763848][T18563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3354'. [ 523.803527][T18563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3354'. [ 523.870848][T18563] bond1: entered promiscuous mode [ 523.893867][T18563] bond1: entered allmulticast mode [ 523.899630][T18563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 524.827751][T18591] netlink: 'syz.0.3360': attribute type 28 has an invalid length. [ 524.870973][T18593] netlink: 'syz.0.3360': attribute type 28 has an invalid length. [ 524.886402][T18592] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3361'. [ 525.131774][T18606] netlink: 'syz.0.3363': attribute type 10 has an invalid length. [ 525.166267][T18606] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.177338][T18606] bond0: (slave team0): Enslaving as an active interface with an up link [ 526.170622][T18638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3372'. [ 526.826613][T18655] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3376'. [ 527.120446][T18667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.153083][T18666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.556398][T18676] FAULT_INJECTION: forcing a failure. [ 527.556398][T18676] name failslab, interval 1, probability 0, space 0, times 0 [ 527.595063][T18676] CPU: 0 UID: 0 PID: 18676 Comm: syz.1.3382 Not tainted syzkaller #0 PREEMPT(full) [ 527.595095][T18676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.595109][T18676] Call Trace: [ 527.595118][T18676] [ 527.595129][T18676] dump_stack_lvl+0x189/0x250 [ 527.595161][T18676] ? __pfx____ratelimit+0x10/0x10 [ 527.595194][T18676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.595221][T18676] ? __pfx__printk+0x10/0x10 [ 527.595255][T18676] ? __pfx___might_resched+0x10/0x10 [ 527.595276][T18676] ? fs_reclaim_acquire+0x7d/0x100 [ 527.595324][T18676] should_fail_ex+0x414/0x560 [ 527.595361][T18676] should_failslab+0xa8/0x100 [ 527.595395][T18676] __kmalloc_noprof+0xcb/0x4f0 [ 527.595423][T18676] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 527.595444][T18676] ? sock_kmalloc+0xd6/0x160 [ 527.595476][T18676] sock_kmalloc+0xd6/0x160 [ 527.595504][T18676] hash_recvmsg+0x1d4/0x840 [ 527.595539][T18676] ? __pfx_hash_recvmsg+0x10/0x10 [ 527.595568][T18676] sock_recvmsg_nosec+0x183/0x1c0 [ 527.595604][T18676] ____sys_recvmsg+0x3aa/0x460 [ 527.595639][T18676] ? __pfx_____sys_recvmsg+0x10/0x10 [ 527.595683][T18676] ? import_iovec+0x74/0xa0 [ 527.595714][T18676] ___sys_recvmsg+0x1b5/0x510 [ 527.595746][T18676] ? __pfx____sys_recvmsg+0x10/0x10 [ 527.595809][T18676] ? __might_fault+0xb0/0x130 [ 527.595851][T18676] do_recvmmsg+0x307/0x770 [ 527.595887][T18676] ? __pfx_do_recvmmsg+0x10/0x10 [ 527.595927][T18676] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 527.595987][T18676] __x64_sys_recvmmsg+0x190/0x240 [ 527.596016][T18676] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 527.596038][T18676] ? rcu_is_watching+0x15/0xb0 [ 527.596067][T18676] ? do_syscall_64+0xbe/0x3b0 [ 527.596105][T18676] do_syscall_64+0xfa/0x3b0 [ 527.596139][T18676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.596159][T18676] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 527.596181][T18676] ? clear_bhb_loop+0x60/0xb0 [ 527.596231][T18676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.596252][T18676] RIP: 0033:0x7fd537f8ebe9 [ 527.596273][T18676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.596299][T18676] RSP: 002b:00007fd538d12038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 527.596322][T18676] RAX: ffffffffffffffda RBX: 00007fd5381b5fa0 RCX: 00007fd537f8ebe9 [ 527.596339][T18676] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 527.596353][T18676] RBP: 00007fd538d12090 R08: 0000000000000000 R09: 0000000000000000 [ 527.596367][T18676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.596380][T18676] R13: 00007fd5381b6038 R14: 00007fd5381b5fa0 R15: 00007ffc92018198 [ 527.596417][T18676] [ 527.631871][T18674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3381'. [ 528.053942][T18682] nbd4: detected capacity change from 0 to 63 [ 528.061790][T18690] block nbd4: NBD_DISCONNECT [ 528.070853][T18690] block nbd4: Disconnected due to user request. [ 528.095970][T18690] block nbd4: shutting down sockets [ 528.137872][T18697] netlink: 'syz.0.3387': attribute type 4 has an invalid length. [ 528.187924][T18697] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3387'. [ 528.252936][T18699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3388'. [ 528.510549][T18705] ip6tnl1: entered promiscuous mode [ 528.524970][T18705] ip6tnl1: entered allmulticast mode [ 528.542175][T18707] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3392'. [ 528.575480][T18707] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3392'. [ 528.610625][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3393'. [ 528.657142][T18713] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.665588][T18713] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.974524][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3397'. [ 529.105347][T18726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3398'. [ 529.269202][T18738] tipc: Started in network mode [ 529.285714][T18738] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 529.319682][T18738] tipc: Enabled bearer , priority 0 [ 529.343396][T18745] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3400'. [ 529.350663][T18747] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3400'. [ 529.421855][T18747] bridge_slave_1: left allmulticast mode [ 529.463234][T18747] bridge_slave_1: left promiscuous mode [ 529.498513][T18747] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.551171][T18747] bridge_slave_0: left allmulticast mode [ 529.589404][T18747] bridge_slave_0: left promiscuous mode [ 529.620557][T18747] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.741565][T18762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 530.483500][ T6757] tipc: Node number set to 11578026 [ 530.687294][T18791] erspan0: entered promiscuous mode [ 530.736192][T18791] erspan0: left promiscuous mode [ 531.112146][T18811] tipc: Started in network mode [ 531.128778][T18811] tipc: Node identity 92d49b701972, cluster identity 4711 [ 531.154742][T18811] tipc: Enabled bearer , priority 0 [ 531.193453][T18813] syzkaller0: entered promiscuous mode [ 531.201040][T18813] syzkaller0: entered allmulticast mode [ 531.236208][T18815] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20003 [ 531.396897][T18817] team_slave_0: entered promiscuous mode [ 531.402675][T18817] team_slave_1: entered promiscuous mode [ 531.415249][T18817] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 531.426528][T18817] team0: Device macvtap1 is already an upper device of the team interface [ 531.523242][T18817] team_slave_0: left promiscuous mode [ 531.528814][T18817] team_slave_1: left promiscuous mode [ 531.558373][T18825] netlink: 'syz.4.3423': attribute type 5 has an invalid length. [ 531.604920][T18818] tipc: Resetting bearer [ 531.863746][T18836] netlink: 'syz.4.3428': attribute type 4 has an invalid length. [ 531.912826][T18836] netlink: 'syz.4.3428': attribute type 4 has an invalid length. [ 532.095588][T18851] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 532.111902][T18851] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 532.150344][T18851] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 532.165385][T18323] tipc: Node number set to 2342951792 [ 532.190014][T18851] netlink: 'syz.3.3432': attribute type 2 has an invalid length. [ 532.205567][T18858] FAULT_INJECTION: forcing a failure. [ 532.205567][T18858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.224307][T18851] netlink: 'syz.3.3432': attribute type 2 has an invalid length. [ 532.236432][T18858] CPU: 0 UID: 0 PID: 18858 Comm: syz.1.3434 Not tainted syzkaller #0 PREEMPT(full) [ 532.236481][T18858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.236505][T18858] Call Trace: [ 532.236515][T18858] [ 532.236525][T18858] dump_stack_lvl+0x189/0x250 [ 532.236558][T18858] ? __pfx____ratelimit+0x10/0x10 [ 532.236590][T18858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.236617][T18858] ? __pfx__printk+0x10/0x10 [ 532.236648][T18858] ? __might_fault+0xb0/0x130 [ 532.236692][T18858] should_fail_ex+0x414/0x560 [ 532.236726][T18858] _copy_from_user+0x2d/0xb0 [ 532.236757][T18858] ___sys_recvmsg+0x12e/0x510 [ 532.236790][T18858] ? __pfx____sys_recvmsg+0x10/0x10 [ 532.236847][T18858] ? __might_fault+0xb0/0x130 [ 532.236889][T18858] do_recvmmsg+0x307/0x770 [ 532.236925][T18858] ? __pfx_do_recvmmsg+0x10/0x10 [ 532.236961][T18858] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 532.237014][T18858] __x64_sys_recvmmsg+0x190/0x240 [ 532.237043][T18858] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 532.237064][T18858] ? rcu_is_watching+0x15/0xb0 [ 532.237092][T18858] ? do_syscall_64+0xbe/0x3b0 [ 532.237130][T18858] do_syscall_64+0xfa/0x3b0 [ 532.237164][T18858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.237186][T18858] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.237208][T18858] ? clear_bhb_loop+0x60/0xb0 [ 532.237236][T18858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.237257][T18858] RIP: 0033:0x7fd537f8ebe9 [ 532.237278][T18858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.237298][T18858] RSP: 002b:00007fd538d12038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 532.237320][T18858] RAX: ffffffffffffffda RBX: 00007fd5381b5fa0 RCX: 00007fd537f8ebe9 [ 532.237336][T18858] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 532.237350][T18858] RBP: 00007fd538d12090 R08: 0000000000000000 R09: 0000000000000000 [ 532.237364][T18858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 532.237378][T18858] R13: 00007fd5381b6038 R14: 00007fd5381b5fa0 R15: 00007ffc92018198 [ 532.237413][T18858] [ 532.242168][T18851] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 532.603838][T18851] netlink: 'syz.3.3432': attribute type 1 has an invalid length. [ 532.679389][T18874] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 532.801703][T18880] sit1: entered promiscuous mode [ 532.979206][T18887] FAULT_INJECTION: forcing a failure. [ 532.979206][T18887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.009406][T18887] CPU: 0 UID: 0 PID: 18887 Comm: syz.0.3442 Not tainted syzkaller #0 PREEMPT(full) [ 533.009439][T18887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 533.009455][T18887] Call Trace: [ 533.009464][T18887] [ 533.009475][T18887] dump_stack_lvl+0x189/0x250 [ 533.009508][T18887] ? __pfx____ratelimit+0x10/0x10 [ 533.009541][T18887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.009568][T18887] ? __pfx__printk+0x10/0x10 [ 533.009600][T18887] ? __might_fault+0xb0/0x130 [ 533.009646][T18887] should_fail_ex+0x414/0x560 [ 533.009681][T18887] _copy_from_iter+0x1db/0x16f0 [ 533.009710][T18887] ? rcu_is_watching+0x15/0xb0 [ 533.009735][T18887] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 533.009769][T18887] ? __pfx__copy_from_iter+0x10/0x10 [ 533.009794][T18887] ? __build_skb_around+0x257/0x3e0 [ 533.009833][T18887] ? netlink_sendmsg+0x642/0xb30 [ 533.009864][T18887] ? skb_put+0x11b/0x210 [ 533.009890][T18887] netlink_sendmsg+0x6b2/0xb30 [ 533.009935][T18887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.009974][T18887] ? aa_sock_msg_perm+0xf1/0x1d0 [ 533.010016][T18887] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.010041][T18887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.010076][T18887] __sock_sendmsg+0x21c/0x270 [ 533.010110][T18887] ____sys_sendmsg+0x505/0x830 [ 533.010147][T18887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.010183][T18887] ? import_iovec+0x74/0xa0 [ 533.010213][T18887] ___sys_sendmsg+0x21f/0x2a0 [ 533.010240][T18887] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.010306][T18887] ? __fget_files+0x2a/0x420 [ 533.010326][T18887] ? __fget_files+0x3a0/0x420 [ 533.010359][T18887] __x64_sys_sendmsg+0x19b/0x260 [ 533.010386][T18887] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.010422][T18887] ? __pfx_ksys_write+0x10/0x10 [ 533.010450][T18887] ? rcu_is_watching+0x15/0xb0 [ 533.010478][T18887] ? do_syscall_64+0xbe/0x3b0 [ 533.010517][T18887] do_syscall_64+0xfa/0x3b0 [ 533.010550][T18887] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.010581][T18887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.010603][T18887] ? clear_bhb_loop+0x60/0xb0 [ 533.010631][T18887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.010652][T18887] RIP: 0033:0x7f53fe98ebe9 [ 533.010671][T18887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.010690][T18887] RSP: 002b:00007f53ff834038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.010714][T18887] RAX: ffffffffffffffda RBX: 00007f53febb5fa0 RCX: 00007f53fe98ebe9 [ 533.010731][T18887] RDX: 0000000000000080 RSI: 0000200000000240 RDI: 0000000000000003 [ 533.010746][T18887] RBP: 00007f53ff834090 R08: 0000000000000000 R09: 0000000000000000 [ 533.010760][T18887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.010773][T18887] R13: 00007f53febb6038 R14: 00007f53febb5fa0 R15: 00007ffec1828088 [ 533.010809][T18887] [ 533.591051][T18899] __nla_validate_parse: 8 callbacks suppressed [ 533.591072][T18899] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.3447'. [ 533.684774][T18899] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.3447'. [ 533.780217][T18904] FAULT_INJECTION: forcing a failure. [ 533.780217][T18904] name failslab, interval 1, probability 0, space 0, times 0 [ 533.826865][T18904] CPU: 1 UID: 0 PID: 18904 Comm: syz.1.3448 Not tainted syzkaller #0 PREEMPT(full) [ 533.826898][T18904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 533.826913][T18904] Call Trace: [ 533.826922][T18904] [ 533.826933][T18904] dump_stack_lvl+0x189/0x250 [ 533.826966][T18904] ? __pfx____ratelimit+0x10/0x10 [ 533.826998][T18904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.827026][T18904] ? __pfx__printk+0x10/0x10 [ 533.827099][T18904] ? __pfx___might_resched+0x10/0x10 [ 533.827123][T18904] ? fs_reclaim_acquire+0x7d/0x100 [ 533.827164][T18904] should_fail_ex+0x414/0x560 [ 533.827200][T18904] should_failslab+0xa8/0x100 [ 533.827242][T18904] __kmalloc_noprof+0xcb/0x4f0 [ 533.827271][T18904] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 533.827293][T18904] ? sock_kmalloc+0xd6/0x160 [ 533.827324][T18904] sock_kmalloc+0xd6/0x160 [ 533.827353][T18904] hash_recvmsg+0x1d4/0x840 [ 533.827389][T18904] ? __pfx_hash_recvmsg+0x10/0x10 [ 533.827419][T18904] sock_recvmsg_nosec+0x183/0x1c0 [ 533.827455][T18904] ____sys_recvmsg+0x3aa/0x460 [ 533.827490][T18904] ? __pfx_____sys_recvmsg+0x10/0x10 [ 533.827536][T18904] ? import_iovec+0x74/0xa0 [ 533.827566][T18904] ___sys_recvmsg+0x1b5/0x510 [ 533.827598][T18904] ? __pfx____sys_recvmsg+0x10/0x10 [ 533.827663][T18904] ? __might_fault+0xb0/0x130 [ 533.827700][T18904] do_recvmmsg+0x307/0x770 [ 533.827737][T18904] ? __pfx_do_recvmmsg+0x10/0x10 [ 533.827778][T18904] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 533.827836][T18904] __x64_sys_recvmmsg+0x190/0x240 [ 533.827866][T18904] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 533.827909][T18904] ? rcu_is_watching+0x15/0xb0 [ 533.827939][T18904] ? do_syscall_64+0xbe/0x3b0 [ 533.827978][T18904] do_syscall_64+0xfa/0x3b0 [ 533.828010][T18904] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.828042][T18904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.828074][T18904] ? clear_bhb_loop+0x60/0xb0 [ 533.828102][T18904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.828124][T18904] RIP: 0033:0x7fd537f8ebe9 [ 533.828145][T18904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.828164][T18904] RSP: 002b:00007fd538d12038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 533.828187][T18904] RAX: ffffffffffffffda RBX: 00007fd5381b5fa0 RCX: 00007fd537f8ebe9 [ 533.828204][T18904] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 533.828218][T18904] RBP: 00007fd538d12090 R08: 0000000000000000 R09: 0000000000000000 [ 533.828232][T18904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 533.828246][T18904] R13: 00007fd5381b6038 R14: 00007fd5381b5fa0 R15: 00007ffc92018198 [ 533.828283][T18904] [ 533.970064][T18895] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 534.317320][T18917] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3453'. [ 534.332383][T18917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3453'. [ 534.572784][T18927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3457'. [ 534.605958][T18931] FAULT_INJECTION: forcing a failure. [ 534.605958][T18931] name failslab, interval 1, probability 0, space 0, times 0 [ 534.630061][T18931] CPU: 1 UID: 0 PID: 18931 Comm: syz.0.3456 Not tainted syzkaller #0 PREEMPT(full) [ 534.630093][T18931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.630107][T18931] Call Trace: [ 534.630116][T18931] [ 534.630127][T18931] dump_stack_lvl+0x189/0x250 [ 534.630159][T18931] ? __pfx____ratelimit+0x10/0x10 [ 534.630190][T18931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.630217][T18931] ? __pfx__printk+0x10/0x10 [ 534.630250][T18931] ? __lock_acquire+0xab9/0xd20 [ 534.630294][T18931] should_fail_ex+0x414/0x560 [ 534.630330][T18931] should_failslab+0xa8/0x100 [ 534.630364][T18931] kmem_cache_alloc_noprof+0x73/0x3c0 [ 534.630394][T18931] ? skb_clone+0x212/0x3a0 [ 534.630424][T18931] skb_clone+0x212/0x3a0 [ 534.630453][T18931] __netlink_deliver_tap+0x404/0x850 [ 534.630500][T18931] ? netlink_deliver_tap+0x2e/0x1b0 [ 534.630536][T18931] netlink_deliver_tap+0x19c/0x1b0 [ 534.630571][T18931] netlink_unicast+0x7fa/0x9e0 [ 534.630612][T18931] ? __pfx_netlink_unicast+0x10/0x10 [ 534.630644][T18931] ? netlink_sendmsg+0x642/0xb30 [ 534.630675][T18931] ? skb_put+0x11b/0x210 [ 534.630700][T18931] netlink_sendmsg+0x805/0xb30 [ 534.630744][T18931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.630782][T18931] ? aa_sock_msg_perm+0xf1/0x1d0 [ 534.630818][T18931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 534.630844][T18931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.630879][T18931] __sock_sendmsg+0x21c/0x270 [ 534.630913][T18931] ____sys_sendmsg+0x505/0x830 [ 534.630952][T18931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.630987][T18931] ? import_iovec+0x74/0xa0 [ 534.631017][T18931] ___sys_sendmsg+0x21f/0x2a0 [ 534.631044][T18931] ? __pfx____sys_sendmsg+0x10/0x10 [ 534.631109][T18931] ? __fget_files+0x2a/0x420 [ 534.631128][T18931] ? __fget_files+0x3a0/0x420 [ 534.631160][T18931] __x64_sys_sendmsg+0x19b/0x260 [ 534.631188][T18931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 534.631223][T18931] ? __pfx_ksys_write+0x10/0x10 [ 534.631250][T18931] ? rcu_is_watching+0x15/0xb0 [ 534.631278][T18931] ? do_syscall_64+0xbe/0x3b0 [ 534.631316][T18931] do_syscall_64+0xfa/0x3b0 [ 534.631348][T18931] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.631380][T18931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.631401][T18931] ? clear_bhb_loop+0x60/0xb0 [ 534.631429][T18931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.631451][T18931] RIP: 0033:0x7f53fe98ebe9 [ 534.631472][T18931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.631491][T18931] RSP: 002b:00007f53ff834038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.631514][T18931] RAX: ffffffffffffffda RBX: 00007f53febb5fa0 RCX: 00007f53fe98ebe9 [ 534.631530][T18931] RDX: 0000000000000080 RSI: 0000200000000240 RDI: 0000000000000003 [ 534.631544][T18931] RBP: 00007f53ff834090 R08: 0000000000000000 R09: 0000000000000000 [ 534.631558][T18931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.631572][T18931] R13: 00007f53febb6038 R14: 00007f53febb5fa0 R15: 00007ffec1828088 [ 534.631606][T18931] [ 534.732058][T18927] bridge2: port 1(veth0_to_bond) entered blocking state [ 535.022178][T18927] bridge2: port 1(veth0_to_bond) entered disabled state [ 535.060571][T18927] veth0_to_bond: entered allmulticast mode [ 535.076109][T18941] netlink: 'syz.0.3460': attribute type 11 has an invalid length. [ 535.112701][T18927] veth0_to_bond: entered promiscuous mode [ 535.141610][T18945] FAULT_INJECTION: forcing a failure. [ 535.141610][T18945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.173773][T18945] CPU: 0 UID: 0 PID: 18945 Comm: syz.4.3461 Not tainted syzkaller #0 PREEMPT(full) [ 535.173806][T18945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.173820][T18945] Call Trace: [ 535.173830][T18945] [ 535.173840][T18945] dump_stack_lvl+0x189/0x250 [ 535.173872][T18945] ? __pfx____ratelimit+0x10/0x10 [ 535.173904][T18945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.173931][T18945] ? __pfx__printk+0x10/0x10 [ 535.173963][T18945] ? __might_fault+0xb0/0x130 [ 535.174007][T18945] should_fail_ex+0x414/0x560 [ 535.174044][T18945] _copy_from_user+0x2d/0xb0 [ 535.174070][T18945] ___sys_recvmsg+0x12e/0x510 [ 535.174103][T18945] ? __pfx____sys_recvmsg+0x10/0x10 [ 535.174162][T18945] ? __might_fault+0xb0/0x130 [ 535.174201][T18945] do_recvmmsg+0x307/0x770 [ 535.174236][T18945] ? __pfx_do_recvmmsg+0x10/0x10 [ 535.174275][T18945] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 535.174331][T18945] __x64_sys_recvmmsg+0x190/0x240 [ 535.174360][T18945] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 535.174383][T18945] ? rcu_is_watching+0x15/0xb0 [ 535.174413][T18945] ? do_syscall_64+0xbe/0x3b0 [ 535.174451][T18945] do_syscall_64+0xfa/0x3b0 [ 535.174483][T18945] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.174514][T18945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.174537][T18945] ? clear_bhb_loop+0x60/0xb0 [ 535.174565][T18945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.174587][T18945] RIP: 0033:0x7feec938ebe9 [ 535.174607][T18945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.174627][T18945] RSP: 002b:00007feeca17a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 535.174651][T18945] RAX: ffffffffffffffda RBX: 00007feec95b6090 RCX: 00007feec938ebe9 [ 535.174669][T18945] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 535.174691][T18945] RBP: 00007feeca17a090 R08: 0000000000000000 R09: 0000000000000000 [ 535.174706][T18945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.174719][T18945] R13: 00007feec95b6128 R14: 00007feec95b6090 R15: 00007fff375cec98 [ 535.174755][T18945] [ 535.491027][T18933] bridge2: port 2(veth3) entered blocking state [ 535.522447][T18933] bridge2: port 2(veth3) entered disabled state [ 535.552824][T18933] veth3: entered allmulticast mode [ 535.613189][T18933] veth3: entered promiscuous mode [ 535.899592][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3462'. [ 535.989643][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3463'. [ 536.055480][T18954] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3466'. [ 536.260055][T18959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3465'. [ 536.307070][T18962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.307773][T18959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3465'. [ 536.349808][ T30] audit: type=1800 audit(1755762009.403:4): pid=18964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3468" name="blkio.bfq.io_wait_time" dev="tmpfs" ino=431 res=0 errno=0 [ 536.759096][T18967] tipc: Started in network mode [ 536.807248][T18967] tipc: Node identity ac14142f, cluster identity 4711 [ 536.847214][T18967] tipc: New replicast peer: 0.0.0.0 [ 536.878262][T18967] tipc: Enabled bearer , priority 10 [ 536.967253][T18975] FAULT_INJECTION: forcing a failure. [ 536.967253][T18975] name failslab, interval 1, probability 0, space 0, times 0 [ 537.005844][T18975] CPU: 1 UID: 0 PID: 18975 Comm: syz.3.3471 Not tainted syzkaller #0 PREEMPT(full) [ 537.005878][T18975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.005891][T18975] Call Trace: [ 537.005900][T18975] [ 537.005911][T18975] dump_stack_lvl+0x189/0x250 [ 537.005943][T18975] ? __pfx____ratelimit+0x10/0x10 [ 537.005974][T18975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.006001][T18975] ? __pfx__printk+0x10/0x10 [ 537.006039][T18975] ? __pfx___might_resched+0x10/0x10 [ 537.006060][T18975] ? fs_reclaim_acquire+0x7d/0x100 [ 537.006098][T18975] should_fail_ex+0x414/0x560 [ 537.006133][T18975] should_failslab+0xa8/0x100 [ 537.006167][T18975] __kmalloc_cache_noprof+0x70/0x3d0 [ 537.006197][T18975] ? ip_set_create+0x348/0x1940 [ 537.006228][T18975] ip_set_create+0x348/0x1940 [ 537.006266][T18975] ? __mutex_lock+0x335/0x1360 [ 537.006302][T18975] ? __pfx_ip_set_create+0x10/0x10 [ 537.006370][T18975] nfnetlink_rcv_msg+0xb4d/0x1130 [ 537.006400][T18975] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 537.006451][T18975] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 537.006476][T18975] ? kasan_save_free_info+0x46/0x50 [ 537.006562][T18975] netlink_rcv_skb+0x208/0x470 [ 537.006596][T18975] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 537.006627][T18975] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.006672][T18975] ? bpf_lsm_capable+0x9/0x20 [ 537.006701][T18975] ? security_capable+0x7e/0x2e0 [ 537.006742][T18975] nfnetlink_rcv+0x26a/0x2520 [ 537.006773][T18975] ? __dev_queue_xmit+0x1d79/0x3b50 [ 537.006813][T18975] ? __dev_queue_xmit+0x27b/0x3b50 [ 537.006856][T18975] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 537.006884][T18975] ? __pfx___dev_queue_xmit+0x10/0x10 [ 537.006926][T18975] ? ref_tracker_free+0x63a/0x7d0 [ 537.006957][T18975] ? __asan_memcpy+0x40/0x70 [ 537.006981][T18975] ? __pfx_ref_tracker_free+0x10/0x10 [ 537.007030][T18975] ? skb_clone+0x246/0x3a0 [ 537.007059][T18975] ? __netlink_deliver_tap+0x807/0x850 [ 537.007091][T18975] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.007130][T18975] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.007172][T18975] netlink_unicast+0x82f/0x9e0 [ 537.007211][T18975] ? __pfx_netlink_unicast+0x10/0x10 [ 537.007243][T18975] ? netlink_sendmsg+0x642/0xb30 [ 537.007273][T18975] ? skb_put+0x11b/0x210 [ 537.007299][T18975] netlink_sendmsg+0x805/0xb30 [ 537.007342][T18975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.007379][T18975] ? aa_sock_msg_perm+0xf1/0x1d0 [ 537.007415][T18975] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.007438][T18975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.007472][T18975] __sock_sendmsg+0x21c/0x270 [ 537.007505][T18975] ____sys_sendmsg+0x505/0x830 [ 537.007541][T18975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.007574][T18975] ? import_iovec+0x74/0xa0 [ 537.007604][T18975] ___sys_sendmsg+0x21f/0x2a0 [ 537.007631][T18975] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.007696][T18975] ? __fget_files+0x2a/0x420 [ 537.007714][T18975] ? __fget_files+0x3a0/0x420 [ 537.007746][T18975] __x64_sys_sendmsg+0x19b/0x260 [ 537.007773][T18975] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.007808][T18975] ? __pfx_ksys_write+0x10/0x10 [ 537.007835][T18975] ? rcu_is_watching+0x15/0xb0 [ 537.007863][T18975] ? do_syscall_64+0xbe/0x3b0 [ 537.007900][T18975] do_syscall_64+0xfa/0x3b0 [ 537.007931][T18975] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.007962][T18975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.007983][T18975] ? clear_bhb_loop+0x60/0xb0 [ 537.008010][T18975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.008032][T18975] RIP: 0033:0x7fcb6358ebe9 [ 537.008052][T18975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.008072][T18975] RSP: 002b:00007fcb64404038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.008096][T18975] RAX: ffffffffffffffda RBX: 00007fcb637b5fa0 RCX: 00007fcb6358ebe9 [ 537.008113][T18975] RDX: 0000000000000080 RSI: 0000200000000240 RDI: 0000000000000003 [ 537.008128][T18975] RBP: 00007fcb64404090 R08: 0000000000000000 R09: 0000000000000000 [ 537.008142][T18975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.008155][T18975] R13: 00007fcb637b6038 R14: 00007fcb637b5fa0 R15: 00007ffc98086898 [ 537.008191][T18975] [ 537.889288][T18986] tipc: Started in network mode [ 537.897178][T18986] tipc: Node identity 16684b8c726d, cluster identity 4711 [ 537.911068][T18986] tipc: Enabled bearer , priority 0 [ 537.939909][T18986] syzkaller0: entered promiscuous mode [ 537.945636][T18986] syzkaller0: entered allmulticast mode [ 537.993740][ T10] tipc: Node number set to 2886997039 [ 538.399282][T19007] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 538.434227][T19007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.474399][T19012] syzkaller1: entered promiscuous mode [ 538.526293][T19012] syzkaller1: entered allmulticast mode [ 538.610179][T19001] __nla_validate_parse: 2 callbacks suppressed [ 538.610200][T19001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3480'. [ 538.982953][T19029] batadv_slave_1: entered promiscuous mode [ 539.044500][T18303] tipc: Node number set to 1678068620 [ 539.208492][T19037] validate_nla: 4 callbacks suppressed [ 539.208515][T19037] netlink: 'syz.0.3488': attribute type 16 has an invalid length. [ 539.229187][T19037] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.3488'. [ 539.481701][T19016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.493012][T19021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3485'. [ 539.508452][T19021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3485'. [ 539.546611][T19027] batadv_slave_1: left promiscuous mode [ 539.923238][T19058] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3492'. [ 540.211914][T19097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.291258][T19097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.317340][T19094] dvmrp0: entered allmulticast mode [ 540.322981][T19097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.363093][T19097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.382887][T19100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3497'. [ 540.446652][T19105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.489841][T19105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.512979][T19097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.544903][T19100] bridge2: port 1(veth3) entered blocking state [ 540.551754][T19100] bridge2: port 1(veth3) entered disabled state [ 540.565874][T19100] veth3: entered allmulticast mode [ 540.572842][T19100] veth3: entered promiscuous mode [ 540.583023][T19097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.603538][T19097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.679102][T19097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.037097][T19106] bridge2: port 2(veth0_to_bond) entered blocking state [ 541.061234][T19106] bridge2: port 2(veth0_to_bond) entered disabled state [ 541.071789][T19106] veth0_to_bond: entered allmulticast mode [ 541.082791][T19106] veth0_to_bond: entered promiscuous mode [ 541.288018][T19116] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003 [ 541.551561][T19131] netlink: 'syz.1.3503': attribute type 7 has an invalid length. [ 542.434420][T19157] tipc: Failed to remove unknown binding: 66,1,1/2886997039:1783802904/1783802906 [ 542.462640][T19157] tipc: Failed to remove unknown binding: 66,1,1/2886997039:1783802904/1783802906 [ 542.629543][T19169] openvswitch: netlink: Flow actions attr not present in new flow. [ 542.898436][T19184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3520'. [ 542.939414][T19187] netlink: 'syz.2.3519': attribute type 4 has an invalid length. [ 542.968800][T19184] netlink: 'syz.3.3520': attribute type 6 has an invalid length. [ 542.984709][T19186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3522'. [ 542.987949][T19187] netlink: 'syz.2.3519': attribute type 4 has an invalid length. [ 542.997070][T19184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3520'. [ 543.047750][T19186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3522'. [ 543.111521][T19193] 0·: renamed from hsr0 (while UP) [ 543.130798][T19193] 0·: entered allmulticast mode [ 543.147852][T19193] hsr_slave_0: entered allmulticast mode [ 543.170569][T19193] hsr_slave_1: entered allmulticast mode [ 543.185720][T19193] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 543.282766][T19198] team0: entered promiscuous mode [ 543.289937][T19198] team_slave_0: entered promiscuous mode [ 543.296369][T19198] team_slave_1: entered promiscuous mode [ 543.429333][T19206] Bluetooth: MGMT ver 1.23 [ 543.684766][T19220] __nla_validate_parse: 4 callbacks suppressed [ 543.684791][T19220] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3531'. [ 543.835307][T19225] bond2: entered promiscuous mode [ 543.840555][T19225] bond2: entered allmulticast mode [ 543.847266][T19225] 8021q: adding VLAN 0 to HW filter on device bond2 [ 543.899632][ T30] audit: type=1800 audit(1755762016.953:5): pid=19212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3526" name="memory.events" dev="tmpfs" ino=646 res=0 errno=0 [ 544.744381][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3542'. [ 544.972260][T19264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3545'. [ 545.013522][T19266] tipc: Enabling of bearer rejected, failed to enable media [ 545.140537][T19264] bridge3: port 1(veth5) entered blocking state [ 545.176021][T19264] bridge3: port 1(veth5) entered disabled state [ 545.182598][T19264] veth5: entered allmulticast mode [ 545.217179][T19276] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3549'. [ 545.219893][T19264] veth5: entered promiscuous mode [ 545.242541][T19269] veth0_to_bond: left allmulticast mode [ 545.250297][T19269] veth0_to_bond: left promiscuous mode [ 545.263493][T19269] bridge2: port 1(veth0_to_bond) entered disabled state [ 545.383510][T19269] bridge3: port 2(veth0_to_bond) entered blocking state [ 545.426297][T19269] bridge3: port 2(veth0_to_bond) entered disabled state [ 545.435024][T19269] veth0_to_bond: entered allmulticast mode [ 545.446305][T19269] veth0_to_bond: entered promiscuous mode [ 545.567424][T19274] tipc: Enabling of bearer rejected, already enabled [ 546.197973][T19305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3552'. [ 546.214708][T19305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3552'. [ 546.411700][T19318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3556'. [ 546.672728][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3556'. [ 547.072448][T19348] tipc: Started in network mode [ 547.078196][T19348] tipc: Node identity 9e4f3358c988, cluster identity 4711 [ 547.086200][T19348] tipc: Enabled bearer , priority 0 [ 547.094471][T19348] syzkaller0: entered promiscuous mode [ 547.113873][T19348] syzkaller0: entered allmulticast mode [ 547.548270][T19362] tipc: Resetting bearer [ 547.643014][T19347] tipc: Resetting bearer [ 547.735099][T19347] tipc: Disabling bearer [ 548.047996][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3571'. [ 548.087268][T19371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3571'. [ 548.893234][T19396] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 548.917010][T19394] syzkaller0: left promiscuous mode [ 548.922435][T19394] syzkaller0: left allmulticast mode [ 549.919499][T19425] tipc: Enabling of bearer rejected, already enabled [ 549.935523][T19425] syzkaller0: entered promiscuous mode [ 549.941271][T19425] syzkaller0: entered allmulticast mode [ 549.975438][T19425] tipc: Resetting bearer [ 550.060332][T19427] netlink: 'syz.3.3588': attribute type 1 has an invalid length. [ 550.180988][T19430] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 550.199225][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3591'. [ 550.200811][T19430] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 550.241042][T19435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3591'. [ 550.264649][T19427] gretap1: entered promiscuous mode [ 550.306195][T19427] bond2: (slave gretap1): making interface the new active one [ 550.348718][T19427] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 550.371048][T19436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3589'. [ 550.382500][T19441] netlink: 'syz.4.3592': attribute type 6 has an invalid length. [ 550.616534][T19447] netlink: 'syz.4.3595': attribute type 1 has an invalid length. [ 550.899272][T19459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3601'. [ 550.906478][T19457] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3600'. [ 551.146707][T19467] netlink: 'syz.1.3603': attribute type 10 has an invalid length. [ 551.229467][T19467] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 551.247996][T19467] team0: Failed to send options change via netlink (err -105) [ 551.260513][T19467] team0: Port device dummy0 added [ 551.368662][T19477] FAULT_INJECTION: forcing a failure. [ 551.368662][T19477] name failslab, interval 1, probability 0, space 0, times 0 [ 551.399742][T19477] CPU: 1 UID: 0 PID: 19477 Comm: syz.3.3606 Not tainted syzkaller #0 PREEMPT(full) [ 551.399773][T19477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.399787][T19477] Call Trace: [ 551.399797][T19477] [ 551.399806][T19477] dump_stack_lvl+0x189/0x250 [ 551.399837][T19477] ? __pfx____ratelimit+0x10/0x10 [ 551.399869][T19477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 551.399895][T19477] ? __pfx__printk+0x10/0x10 [ 551.399931][T19477] ? __pfx___might_resched+0x10/0x10 [ 551.399958][T19477] should_fail_ex+0x414/0x560 [ 551.399992][T19477] should_failslab+0xa8/0x100 [ 551.400024][T19477] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 551.400055][T19477] ? __alloc_skb+0x112/0x2d0 [ 551.400093][T19477] __alloc_skb+0x112/0x2d0 [ 551.400129][T19477] netlink_sendmsg+0x5c6/0xb30 [ 551.400172][T19477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.400208][T19477] ? aa_sock_msg_perm+0xf1/0x1d0 [ 551.400243][T19477] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 551.400272][T19477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.400306][T19477] __sock_sendmsg+0x21c/0x270 [ 551.400338][T19477] ____sys_sendmsg+0x505/0x830 [ 551.400368][T19477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.400402][T19477] ? import_iovec+0x74/0xa0 [ 551.400431][T19477] ___sys_sendmsg+0x21f/0x2a0 [ 551.400458][T19477] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.400519][T19477] ? __fget_files+0x2a/0x420 [ 551.400538][T19477] ? __fget_files+0x3a0/0x420 [ 551.400568][T19477] __x64_sys_sendmsg+0x19b/0x260 [ 551.400594][T19477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 551.400647][T19477] ? __pfx_ksys_write+0x10/0x10 [ 551.400675][T19477] ? rcu_is_watching+0x15/0xb0 [ 551.400713][T19477] ? do_syscall_64+0xbe/0x3b0 [ 551.400752][T19477] do_syscall_64+0xfa/0x3b0 [ 551.400784][T19477] ? lockdep_hardirqs_on+0x9c/0x150 [ 551.400816][T19477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.400839][T19477] ? clear_bhb_loop+0x60/0xb0 [ 551.400865][T19477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.400888][T19477] RIP: 0033:0x7fcb6358ebe9 [ 551.400908][T19477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.400928][T19477] RSP: 002b:00007fcb64404038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.400952][T19477] RAX: ffffffffffffffda RBX: 00007fcb637b5fa0 RCX: 00007fcb6358ebe9 [ 551.400968][T19477] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 551.400982][T19477] RBP: 00007fcb64404090 R08: 0000000000000000 R09: 0000000000000000 [ 551.400997][T19477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.401010][T19477] R13: 00007fcb637b6038 R14: 00007fcb637b5fa0 R15: 00007ffc98086898 [ 551.401046][T19477] [ 551.842132][T19487] tipc: Invalid UDP bearer configuration [ 551.842194][T19487] tipc: Enabling of bearer rejected, failed to enable media [ 552.057976][T19495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3613'. [ 552.088486][T19500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3615'. [ 552.742844][T19536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.769944][T19541] ip6gretap0: entered promiscuous mode [ 552.782440][T19541] ip6gretap0: entered allmulticast mode [ 552.938207][T19536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.971573][T19549] FAULT_INJECTION: forcing a failure. [ 552.971573][T19549] name failslab, interval 1, probability 0, space 0, times 0 [ 553.034499][T19549] CPU: 1 UID: 0 PID: 19549 Comm: syz.0.3631 Not tainted syzkaller #0 PREEMPT(full) [ 553.034531][T19549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 553.034545][T19549] Call Trace: [ 553.034554][T19549] [ 553.034564][T19549] dump_stack_lvl+0x189/0x250 [ 553.034608][T19549] ? __pfx____ratelimit+0x10/0x10 [ 553.034640][T19549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.034668][T19549] ? __pfx__printk+0x10/0x10 [ 553.034702][T19549] ? __pfx___might_resched+0x10/0x10 [ 553.034724][T19549] ? fs_reclaim_acquire+0x7d/0x100 [ 553.034765][T19549] should_fail_ex+0x414/0x560 [ 553.034800][T19549] should_failslab+0xa8/0x100 [ 553.034836][T19549] __kmalloc_noprof+0xcb/0x4f0 [ 553.034864][T19549] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 553.034885][T19549] ? sock_kmalloc+0xd6/0x160 [ 553.034915][T19549] sock_kmalloc+0xd6/0x160 [ 553.034944][T19549] hash_recvmsg+0x1d4/0x840 [ 553.034980][T19549] ? __pfx_hash_recvmsg+0x10/0x10 [ 553.035008][T19549] sock_recvmsg_nosec+0x183/0x1c0 [ 553.035043][T19549] ____sys_recvmsg+0x3aa/0x460 [ 553.035079][T19549] ? __pfx_____sys_recvmsg+0x10/0x10 [ 553.035122][T19549] ? import_iovec+0x74/0xa0 [ 553.035152][T19549] ___sys_recvmsg+0x1b5/0x510 [ 553.035184][T19549] ? __pfx____sys_recvmsg+0x10/0x10 [ 553.035247][T19549] ? __might_fault+0xb0/0x130 [ 553.035282][T19549] do_recvmmsg+0x307/0x770 [ 553.035318][T19549] ? __pfx_do_recvmmsg+0x10/0x10 [ 553.035359][T19549] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 553.035414][T19549] __x64_sys_recvmmsg+0x190/0x240 [ 553.035444][T19549] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 553.035467][T19549] ? rcu_is_watching+0x15/0xb0 [ 553.035495][T19549] ? do_syscall_64+0xbe/0x3b0 [ 553.035534][T19549] do_syscall_64+0xfa/0x3b0 [ 553.035565][T19549] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.035607][T19549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.035629][T19549] ? clear_bhb_loop+0x60/0xb0 [ 553.035656][T19549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.035679][T19549] RIP: 0033:0x7f53fe98ebe9 [ 553.035699][T19549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.035719][T19549] RSP: 002b:00007f53ff813038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 553.035743][T19549] RAX: ffffffffffffffda RBX: 00007f53febb6090 RCX: 00007f53fe98ebe9 [ 553.035760][T19549] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 553.035774][T19549] RBP: 00007f53ff813090 R08: 0000000000000000 R09: 0000000000000000 [ 553.035789][T19549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 553.035802][T19549] R13: 00007f53febb6128 R14: 00007f53febb6090 R15: 00007ffec1828088 [ 553.035838][T19549] [ 553.434479][T19536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.462256][T19556] tipc: Enabled bearer , priority 0 [ 553.470260][T19556] syzkaller0: entered promiscuous mode [ 553.480074][T19556] syzkaller0: entered allmulticast mode [ 553.506912][T19560] team_slave_0: entered promiscuous mode [ 553.512646][T19560] team_slave_1: entered promiscuous mode [ 553.520938][T19560] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 553.529258][T19560] team0: Device macvtap1 is already an upper device of the team interface [ 553.550318][T19560] team_slave_0: left promiscuous mode [ 553.555883][T19560] team_slave_1: left promiscuous mode [ 553.631766][T19564] tipc: Resetting bearer [ 553.680674][T19555] tipc: Resetting bearer [ 553.750473][T19555] tipc: Disabling bearer [ 553.834184][T19571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3639'. [ 553.850220][T19536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.193554][T19572] bridge3: port 1(veth5) entered blocking state [ 554.210825][T19572] bridge3: port 1(veth5) entered disabled state [ 554.232890][T19572] veth5: entered allmulticast mode [ 554.255045][T19572] veth5: entered promiscuous mode [ 554.271226][T19574] veth0_to_bond: left allmulticast mode [ 554.293797][T19574] veth0_to_bond: left promiscuous mode [ 554.322272][T19574] bridge2: port 2(veth0_to_bond) entered disabled state [ 554.357219][T19574] bridge3: port 2(veth0_to_bond) entered blocking state [ 554.377246][T19574] bridge3: port 2(veth0_to_bond) entered disabled state [ 554.403924][T19574] veth0_to_bond: entered allmulticast mode [ 554.419674][T19574] veth0_to_bond: entered promiscuous mode [ 554.467019][T19581] tipc: Enabled bearer , priority 0 [ 554.495354][T19584] syzkaller0: entered promiscuous mode [ 554.501706][T19584] syzkaller0: entered allmulticast mode [ 554.613429][T19580] tipc: Resetting bearer [ 554.676713][T19578] tipc: Resetting bearer [ 554.718213][T19578] tipc: Disabling bearer [ 554.819540][T19603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3645'. [ 554.851298][T19085] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.877957][T19085] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.929760][T19076] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.959899][T19076] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.977073][T19605] vxcan2: entered promiscuous mode [ 554.999500][T19535] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.081756][T19535] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.131928][T19609] ip6tnl1: entered promiscuous mode [ 555.137967][T19609] ip6tnl1: entered allmulticast mode [ 555.162777][T19612] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3648'. [ 555.185167][T19612] "syz.1.3648" (19612) uses obsolete ecb(arc4) skcipher [ 555.198507][T19535] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.263706][T19616] netlink: 'syz.4.3650': attribute type 1 has an invalid length. [ 555.284961][T19535] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.357515][T19619] pim6reg: entered allmulticast mode [ 555.375503][T19620] bond3: (slave geneve2): making interface the new active one [ 555.386599][T19620] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 555.403180][T19616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3650'. [ 555.417280][T19616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 555.438107][T19091] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 555.453435][T19091] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 555.465845][T19091] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 555.519783][T19091] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 555.682655][T19638] team_slave_0: entered promiscuous mode [ 555.688484][T19638] team_slave_1: entered promiscuous mode [ 555.694330][T19638] dummy0: entered promiscuous mode [ 555.702123][T19638] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 555.710001][T19638] team0: Device macvtap1 is already an upper device of the team interface [ 555.734683][T19638] team_slave_0: left promiscuous mode [ 555.740157][T19638] team_slave_1: left promiscuous mode [ 555.745677][T19638] dummy0: left promiscuous mode [ 555.857651][T19642] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3656'. [ 556.211418][T19653] netlink: 'syz.2.3660': attribute type 1 has an invalid length. [ 556.544876][T19675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3664'. [ 556.658442][T19682] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3662'. [ 556.696397][T19683] netlink: 'syz.1.3665': attribute type 1 has an invalid length. [ 556.704850][T19683] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3665'. [ 556.715096][T19683] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3665'. [ 557.238957][T19695] bond0: (slave dummy0): Releasing backup interface [ 557.310802][T19695] bond0: (slave bond_slave_0): Releasing backup interface [ 557.321209][ T5869] Bluetooth: hci5: command 0x0405 tx timeout [ 557.417044][T19695] bond0: (slave bond_slave_1): Releasing backup interface [ 557.475162][T19706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3672'. [ 557.488570][T19695] team0: Port device team_slave_0 removed [ 557.497011][T19706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3672'. [ 557.526835][T19695] team0: Port device team_slave_1 removed [ 557.535573][T19707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3672'. [ 557.556633][T19695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.568350][T19695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.568374][T19709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3673'. [ 557.586938][T19695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.594455][T19695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.622039][T19695] bond3: (slave geneve2): Releasing active interface [ 557.679300][T19712] netlink: 'syz.0.3674': attribute type 3 has an invalid length. [ 557.686098][T19698] ip6gretap0: left promiscuous mode [ 557.692416][T19698] ip6gretap0: left allmulticast mode [ 557.703805][T19698] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 557.762781][T19714] team0: No ports can be present during mode change [ 557.771306][T19714] netlink: 'syz.0.3674': attribute type 1 has an invalid length. [ 557.779800][T19714] netlink: 'syz.0.3674': attribute type 2 has an invalid length. [ 557.788386][T19714] netlink: 'syz.0.3674': attribute type 1 has an invalid length. [ 557.841816][T19710] bridge1: port 1(veth3) entered blocking state [ 557.863552][T19710] bridge1: port 1(veth3) entered disabled state [ 557.871240][T19710] veth3: entered allmulticast mode [ 557.888312][T19710] veth3: entered promiscuous mode [ 557.898254][T19091] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 557.929945][T19091] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 557.940906][T19712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.034799][T19713] bridge1: port 2(veth0_to_bond) entered blocking state [ 558.097999][T19713] bridge1: port 2(veth0_to_bond) entered disabled state [ 558.114851][T19713] veth0_to_bond: entered allmulticast mode [ 558.143010][T19713] veth0_to_bond: entered promiscuous mode [ 558.162048][T19091] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 558.202723][T19091] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 558.260146][T19720] team_slave_0: entered promiscuous mode [ 558.266021][T19720] team_slave_1: entered promiscuous mode [ 558.271806][T19720] dummy0: entered promiscuous mode [ 558.281101][T19720] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 558.289777][T19720] team0: Device macvtap1 is already an upper device of the team interface [ 558.301141][T19720] team_slave_0: left promiscuous mode [ 558.306767][T19720] team_slave_1: left promiscuous mode [ 558.312273][T19720] dummy0: left promiscuous mode [ 558.762336][T19741] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 558.783319][T19741] team0: Device macvtap1 is already an upper device of the team interface [ 558.872614][T19065] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.903031][T19091] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.936925][T19065] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.969965][T19065] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.007466][T19750] veth1_macvtap: left promiscuous mode [ 559.158564][T19750] veth1_macvtap: entered promiscuous mode [ 559.357765][T19768] syzkaller0: left promiscuous mode [ 559.363452][T19768] syzkaller0: left allmulticast mode [ 559.542064][T19773] netlink: 'syz.0.3688': attribute type 4 has an invalid length. [ 559.612718][T19781] FAULT_INJECTION: forcing a failure. [ 559.612718][T19781] name failslab, interval 1, probability 0, space 0, times 0 [ 559.640336][T19781] CPU: 1 UID: 0 PID: 19781 Comm: syz.1.3689 Not tainted syzkaller #0 PREEMPT(full) [ 559.640382][T19781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.640397][T19781] Call Trace: [ 559.640406][T19781] [ 559.640417][T19781] dump_stack_lvl+0x189/0x250 [ 559.640449][T19781] ? __pfx____ratelimit+0x10/0x10 [ 559.640480][T19781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.640507][T19781] ? __pfx__printk+0x10/0x10 [ 559.640546][T19781] ? ref_tracker_alloc+0x318/0x460 [ 559.640581][T19781] should_fail_ex+0x414/0x560 [ 559.640615][T19781] should_failslab+0xa8/0x100 [ 559.640650][T19781] kmem_cache_alloc_noprof+0x73/0x3c0 [ 559.640678][T19781] ? skb_clone+0x212/0x3a0 [ 559.640708][T19781] skb_clone+0x212/0x3a0 [ 559.640737][T19781] __netlink_deliver_tap+0x404/0x850 [ 559.640785][T19781] ? netlink_deliver_tap+0x2e/0x1b0 [ 559.640826][T19781] netlink_deliver_tap+0x19c/0x1b0 [ 559.640860][T19781] __netlink_sendskb+0x47/0x90 [ 559.640891][T19781] netlink_dump+0xa84/0xe90 [ 559.640942][T19781] ? __pfx_netlink_dump+0x10/0x10 [ 559.640970][T19781] ? __netlink_lookup+0x752/0x810 [ 559.641009][T19781] ? netlink_lookup+0x30/0x200 [ 559.641039][T19781] ? netlink_lookup+0x30/0x200 [ 559.641067][T19781] ? netlink_lookup+0x30/0x200 [ 559.641105][T19781] __netlink_dump_start+0x5cb/0x7e0 [ 559.641155][T19781] rtnetlink_rcv_msg+0x9eb/0xb70 [ 559.641191][T19781] ? __pfx_inet6_dump_ifacaddr+0x10/0x10 [ 559.641224][T19781] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 559.641255][T19781] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 559.641285][T19781] ? ref_tracker_free+0x63a/0x7d0 [ 559.641315][T19781] ? __pfx_inet6_dump_ifacaddr+0x10/0x10 [ 559.641365][T19781] netlink_rcv_skb+0x208/0x470 [ 559.641399][T19781] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 559.641434][T19781] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 559.641480][T19781] ? netlink_deliver_tap+0x2e/0x1b0 [ 559.641522][T19781] netlink_unicast+0x82f/0x9e0 [ 559.641562][T19781] ? __pfx_netlink_unicast+0x10/0x10 [ 559.641594][T19781] ? netlink_sendmsg+0x642/0xb30 [ 559.641625][T19781] ? skb_put+0x11b/0x210 [ 559.641651][T19781] netlink_sendmsg+0x805/0xb30 [ 559.641696][T19781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.641734][T19781] ? aa_sock_msg_perm+0xf1/0x1d0 [ 559.641771][T19781] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 559.641795][T19781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 559.641838][T19781] __sock_sendmsg+0x21c/0x270 [ 559.641871][T19781] ____sys_sendmsg+0x505/0x830 [ 559.641903][T19781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 559.641938][T19781] ? import_iovec+0x74/0xa0 [ 559.641967][T19781] ___sys_sendmsg+0x21f/0x2a0 [ 559.641994][T19781] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.642061][T19781] ? __fget_files+0x2a/0x420 [ 559.642080][T19781] ? __fget_files+0x3a0/0x420 [ 559.642113][T19781] __x64_sys_sendmsg+0x19b/0x260 [ 559.642139][T19781] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 559.642174][T19781] ? __pfx_ksys_write+0x10/0x10 [ 559.642201][T19781] ? rcu_is_watching+0x15/0xb0 [ 559.642229][T19781] ? do_syscall_64+0xbe/0x3b0 [ 559.642267][T19781] do_syscall_64+0xfa/0x3b0 [ 559.642297][T19781] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.642328][T19781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.642350][T19781] ? clear_bhb_loop+0x60/0xb0 [ 559.642377][T19781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.642399][T19781] RIP: 0033:0x7fd537f8ebe9 [ 559.642419][T19781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.642438][T19781] RSP: 002b:00007fd538d12038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.642461][T19781] RAX: ffffffffffffffda RBX: 00007fd5381b5fa0 RCX: 00007fd537f8ebe9 [ 559.642478][T19781] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 559.642493][T19781] RBP: 00007fd538d12090 R08: 0000000000000000 R09: 0000000000000000 [ 559.642506][T19781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.642520][T19781] R13: 00007fd5381b6038 R14: 00007fd5381b5fa0 R15: 00007ffc92018198 [ 559.642556][T19781] [ 560.062906][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 560.167080][T19783] kthread_run failed with err -4 [ 560.769397][T19820] __nla_validate_parse: 5 callbacks suppressed [ 560.769419][T19820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3699'. [ 560.788173][T19820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3699'. [ 560.822070][T19820] bond1: entered promiscuous mode [ 560.827906][T19820] bond1: entered allmulticast mode [ 560.834711][T19820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 561.253482][T19830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3701'. [ 561.295994][T19830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3701'. [ 561.378451][T19830] bond3: entered promiscuous mode [ 561.384545][T19830] bond3: entered allmulticast mode [ 561.390198][T19830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.544923][T19832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3701'. [ 561.581572][T19838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3703'. [ 561.592677][T19838] FAULT_INJECTION: forcing a failure. [ 561.592677][T19838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.607215][T19838] CPU: 0 UID: 0 PID: 19838 Comm: syz.4.3703 Not tainted syzkaller #0 PREEMPT(full) [ 561.607247][T19838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 561.607262][T19838] Call Trace: [ 561.607272][T19838] [ 561.607283][T19838] dump_stack_lvl+0x189/0x250 [ 561.607317][T19838] ? __pfx____ratelimit+0x10/0x10 [ 561.607348][T19838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.607376][T19838] ? __pfx__printk+0x10/0x10 [ 561.607421][T19838] should_fail_ex+0x414/0x560 [ 561.607456][T19838] _copy_to_user+0x31/0xb0 [ 561.607485][T19838] simple_read_from_buffer+0xe1/0x170 [ 561.607524][T19838] proc_fail_nth_read+0x1b3/0x220 [ 561.607553][T19838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 561.607583][T19838] ? rw_verify_area+0x2a6/0x4d0 [ 561.607610][T19838] ? __lock_acquire+0xab9/0xd20 [ 561.607640][T19838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 561.607668][T19838] vfs_read+0x1fd/0xa30 [ 561.607695][T19838] ? fdget_pos+0x247/0x320 [ 561.607720][T19838] ? __pfx___mutex_lock+0x10/0x10 [ 561.607754][T19838] ? __pfx_vfs_read+0x10/0x10 [ 561.607785][T19838] ? __fget_files+0x2a/0x420 [ 561.607810][T19838] ? __fget_files+0x3a0/0x420 [ 561.607829][T19838] ? __fget_files+0x2a/0x420 [ 561.607860][T19838] ksys_read+0x145/0x250 [ 561.607891][T19838] ? __pfx_ksys_read+0x10/0x10 [ 561.607917][T19838] ? rcu_is_watching+0x15/0xb0 [ 561.607952][T19838] ? do_syscall_64+0xbe/0x3b0 [ 561.607990][T19838] do_syscall_64+0xfa/0x3b0 [ 561.608022][T19838] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.608053][T19838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.608076][T19838] ? clear_bhb_loop+0x60/0xb0 [ 561.608103][T19838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.608131][T19838] RIP: 0033:0x7feec938d5fc [ 561.608152][T19838] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 561.608172][T19838] RSP: 002b:00007feeca19b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 561.608196][T19838] RAX: ffffffffffffffda RBX: 00007feec95b5fa0 RCX: 00007feec938d5fc [ 561.608213][T19838] RDX: 000000000000000f RSI: 00007feeca19b0a0 RDI: 0000000000000004 [ 561.608227][T19838] RBP: 00007feeca19b090 R08: 0000000000000000 R09: 0000000000000000 [ 561.608242][T19838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.608256][T19838] R13: 00007feec95b6038 R14: 00007feec95b5fa0 R15: 00007fff375cec98 [ 561.608292][T19838] [ 562.169189][T19849] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3706'. [ 562.185298][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3706'. [ 562.322374][T19851] syzkaller0: entered promiscuous mode [ 562.340592][T19851] syzkaller0: entered allmulticast mode [ 562.445259][T19857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3707'. [ 562.469819][T19857] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 564.297473][T19879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3714'. [ 564.542074][T19887] vxcan1: entered allmulticast mode [ 564.582883][T19893] vxcan1: left allmulticast mode [ 564.860137][T19908] netlink: 'syz.4.3723': attribute type 1 has an invalid length. [ 565.037136][T19916] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 565.055959][T19916] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 565.221029][T19908] gretap1: entered promiscuous mode [ 565.525487][T19937] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144) [ 565.978327][T19948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.986476][T19951] __nla_validate_parse: 3 callbacks suppressed [ 565.986498][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3733'. [ 566.059611][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3734'. [ 566.179224][T19951] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.186921][T19951] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.246122][T19952] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 566.499186][T19956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 566.532058][T19956] bond0: (slave bond3): Enslaving as an active interface with an up link [ 566.566870][T19965] batadv_slave_1: entered promiscuous mode [ 566.652156][T19965] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (575537154) [ 566.663143][T19965] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 566.676443][T19964] batadv_slave_1: left promiscuous mode [ 566.838223][T19968] netlink: 'syz.1.3738': attribute type 10 has an invalid length. [ 566.948012][T19968] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.000689][T19968] bond0: (slave team0): Enslaving as an active interface with an up link [ 567.259124][T19984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3745'. [ 567.270973][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3745'. [ 567.321604][T19988] netlink: 'syz.3.3746': attribute type 58 has an invalid length. [ 567.331572][T19988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3746'. [ 567.426957][T19992] netlink: 'syz.3.3746': attribute type 58 has an invalid length. [ 567.435151][T19992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3746'. [ 567.680738][T19984] bond6: entered promiscuous mode [ 567.690700][T19984] bond6: entered allmulticast mode [ 567.697696][T19984] 8021q: adding VLAN 0 to HW filter on device bond6 [ 567.851747][T20007] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3748'. [ 568.087041][T20014] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3751'. [ 568.351516][ T13] veth0_to_bond: left allmulticast mode [ 568.391235][T20024] netlink: 'syz.2.3752': attribute type 10 has an invalid length. [ 568.398539][ T13] veth0_to_bond: left promiscuous mode [ 568.413845][ T13] bridge5: port 2(veth0_to_bond) entered disabled state [ 568.421682][T20028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3754'. [ 568.434111][T20024] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3752'. [ 568.471047][ T13] veth7: left allmulticast mode [ 568.478416][ T13] veth7: left promiscuous mode [ 568.483486][ T13] bridge5: port 1(veth7) entered disabled state [ 568.925873][ T13] dvmrp0 (unregistering): left allmulticast mode [ 569.374341][ T13] bond1 (unregistering): Released all slaves [ 569.488729][ T13] bond2 (unregistering): Released all slaves [ 569.600747][ T13] bond3 (unregistering): Released all slaves [ 569.816181][ T13] bond4 (unregistering): Released all slaves [ 569.972959][ T13] bond0 (unregistering): Released all slaves [ 570.083428][ T13] bond5 (unregistering): Released all slaves [ 570.100200][ T13] bond6 (unregistering): Released all slaves [ 570.215068][ T13] bond7 (unregistering): Released all slaves [ 570.330839][ T13] bond8 (unregistering): Released all slaves [ 570.440144][ T13] bond9 (unregistering): Released all slaves [ 570.476627][T20024] team0: Port device geneve0 added [ 570.510160][T20035] bridge4: port 1(veth7) entered blocking state [ 570.521130][T20035] bridge4: port 1(veth7) entered disabled state [ 570.531901][T20035] veth7: entered allmulticast mode [ 570.547587][T20035] veth7: entered promiscuous mode [ 570.586370][T20041] veth0_to_bond: left allmulticast mode [ 570.621937][T20041] veth0_to_bond: left promiscuous mode [ 570.645479][T20041] bridge3: port 2(veth0_to_bond) entered disabled state [ 570.716614][T20041] bridge4: port 2(veth0_to_bond) entered blocking state [ 570.742502][T20041] bridge4: port 2(veth0_to_bond) entered disabled state [ 570.765142][T20041] veth0_to_bond: entered allmulticast mode [ 570.773258][T20041] veth0_to_bond: entered promiscuous mode [ 571.073256][ T13] tipc: Left network mode [ 571.107407][T20088] netlink: 'syz.4.3765': attribute type 1 has an invalid length. [ 571.175578][T20077] veth0_to_bond: left allmulticast mode [ 571.191727][T20077] veth0_to_bond: left promiscuous mode [ 571.199036][T20077] bridge1: port 2(veth0_to_bond) entered disabled state [ 571.211535][T20077] bridge3: port 1(veth0_to_bond) entered blocking state [ 571.221146][T20077] bridge3: port 1(veth0_to_bond) entered disabled state [ 571.230000][T20077] veth0_to_bond: entered allmulticast mode [ 571.240824][T20077] veth0_to_bond: entered promiscuous mode [ 571.332069][T20088] 8021q: adding VLAN 0 to HW filter on device bond7 [ 571.423329][T20097] __nla_validate_parse: 5 callbacks suppressed [ 571.423353][T20097] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3766'. [ 571.511496][T20091] 8021q: adding VLAN 0 to HW filter on device bond7 [ 571.548134][T20091] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 571.588612][T20091] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 571.672548][T20100] veth3: entered promiscuous mode [ 571.682088][T20100] bond7: (slave veth3): Enslaving as an active interface with a down link [ 571.691784][T20088] erspan0: entered allmulticast mode [ 571.752740][T20088] bond7: (slave erspan0): making interface the new active one [ 571.765319][T20088] bond7: (slave erspan0): Enslaving as an active interface with an up link [ 571.799205][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3770'. [ 571.910134][T20115] tipc: Enabling of bearer rejected, already enabled [ 572.058674][T20115] D: renamed from syzkaller0 (while UP) [ 572.067702][T20115] tipc: Disabling bearer [ 572.300293][T20147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3780'. [ 572.322080][T20145] IPv6: Can't replace route, no match found [ 572.482436][T20152] tipc: Enabled bearer , priority 0 [ 572.508685][T20152] syzkaller0: entered promiscuous mode [ 572.519028][T20152] syzkaller0: entered allmulticast mode [ 572.564756][T20151] tipc: Resetting bearer [ 572.615313][T20151] tipc: Disabling bearer [ 572.660827][T20165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3784'. [ 572.886711][T20156] team0: left promiscuous mode [ 572.891961][T20156] team_slave_0: left promiscuous mode [ 572.899819][T20156] team_slave_1: left promiscuous mode [ 573.045478][T20156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.072638][T20156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.531042][T20156] bond1: left promiscuous mode [ 573.537248][T20156] bond1: left allmulticast mode [ 573.633713][T19091] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.677820][T19091] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.759266][T20192] tipc: Enabled bearer , priority 0 [ 573.764577][T20197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3791'. [ 573.780473][T19091] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.791414][T19091] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.980557][T20193] syzkaller0: entered promiscuous mode [ 574.023378][T20193] syzkaller0: entered allmulticast mode [ 574.040034][T20193] tipc: Resetting bearer [ 574.269353][ T13] pimreg (unregistering): left allmulticast mode [ 574.356425][T20222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3798'. [ 575.343688][T20189] tipc: Resetting bearer [ 576.951948][T20189] tipc: Disabling bearer [ 576.988096][T20223] tipc: Enabled bearer , priority 0 [ 577.034836][T20224] syzkaller0: entered promiscuous mode [ 577.040376][T20224] syzkaller0: entered allmulticast mode [ 577.085850][T20231] tipc: Resetting bearer [ 577.332452][T20231] tipc: Resetting bearer [ 577.436717][T20231] tipc: Disabling bearer [ 577.651441][ T13] IPVS: stop unused estimator thread 0... [ 578.088834][T20280] ip6gretap1: entered promiscuous mode [ 578.101031][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3812'. [ 578.334377][T20302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3815'. [ 578.434241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.473400][T20308] netlink: 'syz.4.3814': attribute type 4 has an invalid length. [ 578.532107][T20309] netlink: 'syz.4.3814': attribute type 4 has an invalid length. [ 578.681469][T20296] bridge1: port 1(veth3) entered blocking state [ 578.694086][T20296] bridge1: port 1(veth3) entered disabled state [ 578.703147][T20296] veth3: entered allmulticast mode [ 578.711961][T20296] veth3: entered promiscuous mode [ 578.721769][T20291] bridge1: port 2(veth0_to_bond) entered blocking state [ 578.734286][T20291] bridge1: port 2(veth0_to_bond) entered disabled state [ 578.741850][T20291] veth0_to_bond: entered allmulticast mode [ 578.751216][T20291] veth0_to_bond: entered promiscuous mode [ 578.898119][T20312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3816'. [ 578.944255][T20312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3816'. [ 578.964133][T20312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3816'. [ 579.016685][T20312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3816'. [ 579.045466][T20312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3816'. [ 579.061689][T20312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3816'. [ 579.096002][T20312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3816'. [ 579.115431][T20312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3816'. [ 579.671328][T20343] netlink: 'syz.4.3824': attribute type 1 has an invalid length. [ 579.787604][T20343] bond8: entered promiscuous mode [ 579.793399][T20343] 8021q: adding VLAN 0 to HW filter on device bond8 [ 579.839656][T20348] 8021q: adding VLAN 0 to HW filter on device bond8 [ 579.864887][T20348] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 579.904642][T20348] bond8: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 579.928464][T20348] bond8: (slave vxcan3): making interface the new active one [ 579.974808][T20348] vxcan3: entered promiscuous mode [ 579.985936][T20348] bond8: (slave vxcan3): Enslaving as an active interface with an up link [ 580.026724][T20349] veth0_to_bond: left allmulticast mode [ 580.032753][T20349] veth0_to_bond: left promiscuous mode [ 580.041240][T20349] bridge3: port 1(veth0_to_bond) entered disabled state [ 580.053116][T20362] netlink: 'syz.1.3829': attribute type 1 has an invalid length. [ 580.088776][T20349] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 580.107829][T20349] team0: Port device geneve0 removed [ 580.126667][T20349] bond0: (slave wlan1): Releasing backup interface [ 580.187461][T20349] veth3: left allmulticast mode [ 580.192571][T20349] veth3: left promiscuous mode [ 580.198359][T20349] bridge1: port 1(veth3) entered disabled state [ 580.361208][T20358] team0: Failed to send options change via netlink (err -105) [ 580.379792][T20358] team0: Mode changed to "activebackup" [ 580.587424][T20362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 580.653124][T20360] bond4: entered promiscuous mode [ 580.658459][T20360] bond4: entered allmulticast mode [ 580.664933][T20360] 8021q: adding VLAN 0 to HW filter on device bond4 [ 580.750037][T20363] dummy0: entered promiscuous mode [ 580.775692][T20363] dummy0: left promiscuous mode [ 580.876467][T20376] bond2: (slave gretap1): making interface the new active one [ 580.889004][T20376] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 581.223744][T20397] tipc: New replicast peer: 255.255.255.255 [ 581.245027][T20397] tipc: Enabled bearer , priority 10 [ 582.647427][T20423] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 582.655601][T20423] team0: Device macvtap1 is already an upper device of the team interface [ 582.808677][T20425] netlink: 'syz.1.3841': attribute type 1 has an invalid length. [ 583.182830][T20429] sctp: [Deprecated]: syz.3.3842 (pid 20429) Use of int in max_burst socket option deprecated. [ 583.182830][T20429] Use struct sctp_assoc_value instead [ 583.511733][T20437] __nla_validate_parse: 84 callbacks suppressed [ 583.511755][T20437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3845'. [ 583.674033][T20441] tipc: MTU too low for tipc bearer [ 583.716309][T20448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3848'. [ 583.744534][T20448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3848'. [ 583.832193][T20448] bond2: entered promiscuous mode [ 583.859180][T20448] bond2: entered allmulticast mode [ 583.897979][T20448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 583.930253][T20461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3852'. [ 583.936856][T20463] netlink: 'syz.2.3853': attribute type 1 has an invalid length. [ 583.947957][T20463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.959464][T20463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3853'. [ 584.014965][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3853'. [ 584.057272][T20463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3853'. [ 584.079728][T20463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3853'. [ 584.111235][T20461] bridge5: port 1(veth7) entered blocking state [ 584.118448][T20461] bridge5: port 1(veth7) entered disabled state [ 584.139266][T20461] veth7: entered allmulticast mode [ 584.175331][T20461] veth7: entered promiscuous mode [ 584.330002][T20467] veth0_to_bond: left allmulticast mode [ 584.336636][T20467] veth0_to_bond: left promiscuous mode [ 584.343139][T20467] bridge3: port 2(veth0_to_bond) entered disabled state [ 584.399059][T20467] bridge5: port 2(veth0_to_bond) entered blocking state [ 584.412091][T20467] bridge5: port 2(veth0_to_bond) entered disabled state [ 584.420837][T20467] veth0_to_bond: entered allmulticast mode [ 584.440669][T20467] veth0_to_bond: entered promiscuous mode [ 584.775090][T20465] delete_channel: no stack [ 585.026832][T20481] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3856'. [ 585.440782][T20501] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 585.500506][T20501] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 585.550227][T20501] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 585.678451][T20508] netlink: 'syz.2.3863': attribute type 4 has an invalid length. [ 585.714558][T20508] netlink: 'syz.2.3863': attribute type 4 has an invalid length. [ 585.735580][T20513] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3866'. [ 585.763127][T20513] netlink: 'syz.3.3866': attribute type 13 has an invalid length. [ 585.800796][T20513] netlink: 'syz.3.3866': attribute type 12 has an invalid length. [ 585.957125][T20523] netlink: 'syz.0.3867': attribute type 3 has an invalid length. [ 585.988218][T20523] netlink: 'syz.0.3867': attribute type 2 has an invalid length. [ 586.300245][T20534] netlink: 'syz.3.3871': attribute type 1 has an invalid length. [ 586.320132][T20531] bridge5: port 1(veth9) entered blocking state [ 586.334591][T20531] bridge5: port 1(veth9) entered disabled state [ 586.341238][T20531] veth9: entered allmulticast mode [ 586.349774][T20531] veth9: entered promiscuous mode [ 586.431093][T20537] veth0_to_bond: left allmulticast mode [ 586.473681][T20537] veth0_to_bond: left promiscuous mode [ 586.479455][T20537] bridge4: port 2(veth0_to_bond) entered disabled state [ 586.566241][T20537] bridge5: port 2(veth0_to_bond) entered blocking state [ 586.575080][T20537] bridge5: port 2(veth0_to_bond) entered disabled state [ 586.612709][T20537] veth0_to_bond: entered allmulticast mode [ 586.668870][T20519] netlink: 'syz.4.3868': attribute type 6 has an invalid length. [ 586.684353][T20549] netlink: 'syz.3.3873': attribute type 1 has an invalid length. [ 586.697826][T20537] veth0_to_bond: entered promiscuous mode [ 586.896126][T20550] batadv1: entered promiscuous mode [ 586.903477][T20550] batadv1: entered allmulticast mode [ 587.204714][T20562] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 587.212822][T20562] team0: Device macvtap1 is already an upper device of the team interface [ 587.909308][T20577] bond0: (slave team0): Releasing backup interface [ 588.013089][T20577] bridge_slave_0: left allmulticast mode [ 588.023790][T20577] bridge_slave_0: left promiscuous mode [ 588.029699][T20577] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.081263][T20577] bridge_slave_1: left allmulticast mode [ 588.164376][T20577] bridge_slave_1: left promiscuous mode [ 588.171742][T20577] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.276843][T20577] veth0_to_bond: left allmulticast mode [ 588.292859][T20577] veth0_to_bond: left promiscuous mode [ 588.334454][T20577] bridge1: port 2(veth0_to_bond) entered disabled state [ 588.391888][T20577] bond0: (slave bond_slave_0): Releasing backup interface [ 588.429772][T20577] bond0: (slave bond_slave_1): Releasing backup interface [ 588.441884][T20577] team0: Port device team_slave_0 removed [ 588.458344][T20577] team0: Port device team_slave_1 removed [ 588.469053][T20577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.480496][T20577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.497103][T20577] veth3: left allmulticast mode [ 588.512397][T20577] veth3: left promiscuous mode [ 588.520514][T20577] bridge1: port 1(veth3) entered disabled state [ 588.842061][T20594] __nla_validate_parse: 12 callbacks suppressed [ 588.842083][T20594] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3884'. [ 588.851966][T20600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3887'. [ 589.121105][T20615] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3891'. [ 589.349883][T20620] validate_nla: 2 callbacks suppressed [ 589.349905][T20620] netlink: 'syz.3.3893': attribute type 21 has an invalid length. [ 589.388872][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'. [ 589.440108][T20622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3895'. [ 589.468996][T20622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3895'. [ 589.480959][T20622] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3895'. [ 589.491506][T20622] nbd: socks must be embedded in a SOCK_ITEM attr [ 589.513026][T20629] FAULT_INJECTION: forcing a failure. [ 589.513026][T20629] name failslab, interval 1, probability 0, space 0, times 0 [ 589.528193][T20629] CPU: 0 UID: 0 PID: 20629 Comm: syz.2.3896 Not tainted syzkaller #0 PREEMPT(full) [ 589.528225][T20629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 589.528240][T20629] Call Trace: [ 589.528250][T20629] [ 589.528260][T20629] dump_stack_lvl+0x189/0x250 [ 589.528292][T20629] ? __pfx____ratelimit+0x10/0x10 [ 589.528324][T20629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.528352][T20629] ? __pfx__printk+0x10/0x10 [ 589.528387][T20629] ? __pfx___might_resched+0x10/0x10 [ 589.528409][T20629] ? fs_reclaim_acquire+0x7d/0x100 [ 589.528450][T20629] should_fail_ex+0x414/0x560 [ 589.528486][T20629] should_failslab+0xa8/0x100 [ 589.528520][T20629] __kmalloc_noprof+0xcb/0x4f0 [ 589.528548][T20629] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 589.528569][T20629] ? sock_kmalloc+0xd6/0x160 [ 589.528600][T20629] sock_kmalloc+0xd6/0x160 [ 589.528628][T20629] hash_recvmsg+0x1d4/0x840 [ 589.528663][T20629] ? __pfx_hash_recvmsg+0x10/0x10 [ 589.528692][T20629] sock_recvmsg_nosec+0x183/0x1c0 [ 589.528727][T20629] ____sys_recvmsg+0x3aa/0x460 [ 589.528762][T20629] ? __pfx_____sys_recvmsg+0x10/0x10 [ 589.528806][T20629] ? import_iovec+0x74/0xa0 [ 589.528835][T20629] ___sys_recvmsg+0x1b5/0x510 [ 589.528867][T20629] ? __pfx____sys_recvmsg+0x10/0x10 [ 589.528938][T20629] ? __might_fault+0xb0/0x130 [ 589.528973][T20629] do_recvmmsg+0x307/0x770 [ 589.529012][T20629] ? __pfx_do_recvmmsg+0x10/0x10 [ 589.529051][T20629] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 589.529106][T20629] __x64_sys_recvmmsg+0x190/0x240 [ 589.529135][T20629] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 589.529158][T20629] ? rcu_is_watching+0x15/0xb0 [ 589.529186][T20629] ? do_syscall_64+0xbe/0x3b0 [ 589.529224][T20629] do_syscall_64+0xfa/0x3b0 [ 589.529255][T20629] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.529285][T20629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.529307][T20629] ? clear_bhb_loop+0x60/0xb0 [ 589.529334][T20629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.529355][T20629] RIP: 0033:0x7fa1b9d8ebe9 [ 589.529375][T20629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.529395][T20629] RSP: 002b:00007fa1bab69038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 589.529418][T20629] RAX: ffffffffffffffda RBX: 00007fa1b9fb5fa0 RCX: 00007fa1b9d8ebe9 [ 589.529435][T20629] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 589.529449][T20629] RBP: 00007fa1bab69090 R08: 0000000000000000 R09: 0000000000000000 [ 589.529463][T20629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 589.529477][T20629] R13: 00007fa1b9fb6038 R14: 00007fa1b9fb5fa0 R15: 00007fff7b529f88 [ 589.529513][T20629] [ 589.912942][T20638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3898'. [ 589.927108][T20636] netlink: 'syz.4.3898': attribute type 11 has an invalid length. [ 589.979243][T20636] netlink: 'syz.4.3898': attribute type 4 has an invalid length. [ 589.988133][T20636] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3898'. [ 590.079810][T20647] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3900'. [ 590.578805][T20641] vlan0: entered promiscuous mode [ 590.591669][T20641] bridge0: entered promiscuous mode [ 590.600932][T20641] bridge0: port 1(vlan0) entered blocking state [ 590.608954][T20641] bridge0: port 1(vlan0) entered disabled state [ 590.628339][T20641] vlan0: entered allmulticast mode [ 590.634857][T20641] bridge0: entered allmulticast mode [ 590.642831][T20641] vlan0: left allmulticast mode [ 590.648690][T20641] bridge0: left allmulticast mode [ 590.756710][ T5867] Bluetooth: hci1: command 0x0406 tx timeout [ 590.758142][T20592] Bluetooth: hci3: command 0x0406 tx timeout [ 591.857079][ T5869] Bluetooth: hci5: link tx timeout [ 591.863295][ T5869] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 591.875350][ T5869] Bluetooth: hci5: link tx timeout [ 591.880598][ T5869] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 591.889099][ T5869] Bluetooth: hci5: link tx timeout [ 591.895038][ T5869] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 591.902851][ T5869] Bluetooth: hci5: link tx timeout [ 591.908747][ T5869] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 591.930739][ T5869] Bluetooth: hci5: link tx timeout [ 591.936689][ T5869] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 591.949578][ T5869] Bluetooth: hci5: link tx timeout [ 591.955025][ T5869] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 591.962908][ T5869] Bluetooth: hci5: link tx timeout [ 591.968749][ T5869] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 592.366764][T20729] sctp: [Deprecated]: syz.0.3926 (pid 20729) Use of int in max_burst socket option deprecated. [ 592.366764][T20729] Use struct sctp_assoc_value instead [ 592.715962][T20744] team0: entered promiscuous mode [ 592.722981][T20744] team_slave_0: entered promiscuous mode [ 592.757706][T20744] team_slave_1: entered promiscuous mode [ 592.773041][T20744] dummy0: entered promiscuous mode [ 593.536199][T19091] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 593.818897][T20781] netlink: 'syz.4.3940': attribute type 13 has an invalid length. [ 593.848835][T20781] netlink: 'syz.4.3940': attribute type 17 has an invalid length. [ 593.954748][ T5869] Bluetooth: hci5: command 0x0405 tx timeout [ 594.058215][ T6756] IPVS: starting estimator thread 0... [ 594.110017][T20794] netlink: 'syz.3.3943': attribute type 1 has an invalid length. [ 594.130710][T20801] netlink: 'syz.1.3944': attribute type 13 has an invalid length. [ 594.140291][T20801] netlink: 'syz.1.3944': attribute type 17 has an invalid length. [ 594.174949][T20795] IPVS: using max 25 ests per chain, 60000 per kthread [ 594.247838][T20808] __nla_validate_parse: 11 callbacks suppressed [ 594.247860][T20808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3945'. [ 594.281720][T20794] 8021q: adding VLAN 0 to HW filter on device bond5 [ 594.361643][T20801] team0: left promiscuous mode [ 594.403073][T20801] team_slave_0: left promiscuous mode [ 594.434942][T20801] team_slave_1: left promiscuous mode [ 594.442188][T20801] dummy0: left promiscuous mode [ 594.489452][T20801] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.538319][T20801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 594.965341][T20816] tipc: Resetting bearer [ 595.060651][T20816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.080815][T20816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.252935][T20827] dummy0: entered allmulticast mode [ 595.278645][T19075] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.290209][T19075] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.327829][T19075] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.337342][T19062] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.359316][T20824] dummy0: left allmulticast mode [ 595.571422][T20848] FAULT_INJECTION: forcing a failure. [ 595.571422][T20848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.615545][T20848] CPU: 0 UID: 0 PID: 20848 Comm: syz.4.3951 Not tainted syzkaller #0 PREEMPT(full) [ 595.615577][T20848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 595.615592][T20848] Call Trace: [ 595.615601][T20848] [ 595.615611][T20848] dump_stack_lvl+0x189/0x250 [ 595.615644][T20848] ? __pfx____ratelimit+0x10/0x10 [ 595.615676][T20848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.615703][T20848] ? __pfx__printk+0x10/0x10 [ 595.615733][T20848] ? __might_fault+0xb0/0x130 [ 595.615776][T20848] should_fail_ex+0x414/0x560 [ 595.615811][T20848] _copy_from_user+0x2d/0xb0 [ 595.615837][T20848] ___sys_recvmsg+0x12e/0x510 [ 595.615870][T20848] ? __pfx____sys_recvmsg+0x10/0x10 [ 595.615931][T20848] ? __might_fault+0xb0/0x130 [ 595.615964][T20848] do_recvmmsg+0x307/0x770 [ 595.615999][T20848] ? __pfx_do_recvmmsg+0x10/0x10 [ 595.616036][T20848] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 595.616091][T20848] __x64_sys_recvmmsg+0x190/0x240 [ 595.616119][T20848] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 595.616149][T20848] ? rcu_is_watching+0x15/0xb0 [ 595.616177][T20848] ? do_syscall_64+0xbe/0x3b0 [ 595.616219][T20848] do_syscall_64+0xfa/0x3b0 [ 595.616250][T20848] ? lockdep_hardirqs_on+0x9c/0x150 [ 595.616280][T20848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.616301][T20848] ? clear_bhb_loop+0x60/0xb0 [ 595.616328][T20848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.616349][T20848] RIP: 0033:0x7feec938ebe9 [ 595.616369][T20848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.616388][T20848] RSP: 002b:00007feeca17a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 595.616412][T20848] RAX: ffffffffffffffda RBX: 00007feec95b6090 RCX: 00007feec938ebe9 [ 595.616429][T20848] RDX: 0000000000000600 RSI: 0000200000003700 RDI: 0000000000000005 [ 595.616443][T20848] RBP: 00007feeca17a090 R08: 0000000000000000 R09: 0000000000000000 [ 595.616457][T20848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 595.616470][T20848] R13: 00007feec95b6128 R14: 00007feec95b6090 R15: 00007fff375cec98 [ 595.616506][T20848] [ 598.064794][T20886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3962'. [ 598.617666][T20900] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3966'. [ 598.674477][T20900] netlink: 'syz.2.3966': attribute type 12 has an invalid length. [ 598.697310][T20900] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3966'. [ 598.722036][T20904] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3967'. [ 598.733158][T20904] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3967'. [ 598.757309][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3967'. [ 598.767233][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3967'. [ 599.186348][T20918] [ 599.188734][T20918] ====================================================== [ 599.195858][T20918] WARNING: possible circular locking dependency detected [ 599.202911][T20918] syzkaller #0 Not tainted [ 599.207354][T20918] ------------------------------------------------------ [ 599.214396][T20918] syz.2.3970/20918 is trying to acquire lock: [ 599.220489][T20918] ffffffff8f68d2f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 599.230064][T20918] [ 599.230064][T20918] but task is already holding lock: [ 599.237455][T20918] ffffffff8f68d298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 599.247106][T20918] [ 599.247106][T20918] which lock already depends on the new lock. [ 599.247106][T20918] [ 599.257517][T20918] [ 599.257517][T20918] the existing dependency chain (in reverse order) is: [ 599.266548][T20918] [ 599.266548][T20918] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 599.274503][T20918] lock_acquire+0x120/0x360 [ 599.279550][T20918] _raw_spin_lock_bh+0x36/0x50 [ 599.284850][T20918] nr_rt_ioctl+0x390/0xd50 [ 599.289807][T20918] sock_do_ioctl+0xd9/0x300 [ 599.294844][T20918] sock_ioctl+0x576/0x790 [ 599.299711][T20918] __se_sys_ioctl+0xf9/0x170 [ 599.304831][T20918] do_syscall_64+0xfa/0x3b0 [ 599.309964][T20918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.316397][T20918] [ 599.316397][T20918] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 599.324409][T20918] lock_acquire+0x120/0x360 [ 599.329450][T20918] _raw_spin_lock_bh+0x36/0x50 [ 599.334744][T20918] nr_rt_ioctl+0x193/0xd50 [ 599.339699][T20918] sock_do_ioctl+0xd9/0x300 [ 599.344733][T20918] sock_ioctl+0x576/0x790 [ 599.349588][T20918] __se_sys_ioctl+0xf9/0x170 [ 599.354712][T20918] do_syscall_64+0xfa/0x3b0 [ 599.359790][T20918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.366222][T20918] [ 599.366222][T20918] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 599.374059][T20918] validate_chain+0xb9b/0x2140 [ 599.379367][T20918] __lock_acquire+0xab9/0xd20 [ 599.384761][T20918] lock_acquire+0x120/0x360 [ 599.389798][T20918] _raw_spin_lock_bh+0x36/0x50 [ 599.395095][T20918] nr_rt_device_down+0xa9/0x720 [ 599.400480][T20918] nr_device_event+0x137/0x150 [ 599.405771][T20918] notifier_call_chain+0x1b3/0x3e0 [ 599.411408][T20918] __dev_notify_flags+0x18d/0x2e0 [ 599.416957][T20918] netif_change_flags+0xe8/0x1a0 [ 599.422418][T20918] dev_change_flags+0x130/0x260 [ 599.427799][T20918] dev_ioctl+0x7b4/0x1150 [ 599.432662][T20918] sock_do_ioctl+0x22c/0x300 [ 599.437781][T20918] sock_ioctl+0x576/0x790 [ 599.442641][T20918] __se_sys_ioctl+0xf9/0x170 [ 599.447765][T20918] do_syscall_64+0xfa/0x3b0 [ 599.452815][T20918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.459239][T20918] [ 599.459239][T20918] other info that might help us debug this: [ 599.459239][T20918] [ 599.469474][T20918] Chain exists of: [ 599.469474][T20918] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 599.469474][T20918] [ 599.483404][T20918] Possible unsafe locking scenario: [ 599.483404][T20918] [ 599.490873][T20918] CPU0 CPU1 [ 599.496255][T20918] ---- ---- [ 599.501624][T20918] lock(nr_neigh_list_lock); [ 599.506314][T20918] lock(&nr_node->node_lock); [ 599.513614][T20918] lock(nr_neigh_list_lock); [ 599.520829][T20918] lock(nr_node_list_lock); [ 599.525466][T20918] [ 599.525466][T20918] *** DEADLOCK *** [ 599.525466][T20918] [ 599.533617][T20918] 2 locks held by syz.2.3970/20918: [ 599.538825][T20918] #0: ffffffff8f537c48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 599.547650][T20918] #1: ffffffff8f68d298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 599.557679][T20918] [ 599.557679][T20918] stack backtrace: [ 599.563576][T20918] CPU: 1 UID: 0 PID: 20918 Comm: syz.2.3970 Not tainted syzkaller #0 PREEMPT(full) [ 599.563604][T20918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 599.563619][T20918] Call Trace: [ 599.563630][T20918] [ 599.563641][T20918] dump_stack_lvl+0x189/0x250 [ 599.563674][T20918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.563706][T20918] ? __pfx__printk+0x10/0x10 [ 599.563739][T20918] ? print_lock_name+0xde/0x100 [ 599.563771][T20918] print_circular_bug+0x2ee/0x310 [ 599.563799][T20918] check_noncircular+0x134/0x160 [ 599.563827][T20918] validate_chain+0xb9b/0x2140 [ 599.563854][T20918] ? rt6_disable_ip+0x6b3/0x720 [ 599.563889][T20918] ? __lock_acquire+0xab9/0xd20 [ 599.563922][T20918] __lock_acquire+0xab9/0xd20 [ 599.563958][T20918] ? nr_rt_device_down+0xa9/0x720 [ 599.563983][T20918] lock_acquire+0x120/0x360 [ 599.564013][T20918] ? nr_rt_device_down+0xa9/0x720 [ 599.564046][T20918] ? nr_rt_device_down+0xa9/0x720 [ 599.564072][T20918] _raw_spin_lock_bh+0x36/0x50 [ 599.564099][T20918] ? nr_rt_device_down+0xa9/0x720 [ 599.564130][T20918] nr_rt_device_down+0xa9/0x720 [ 599.564154][T20918] ? do_raw_spin_unlock+0x122/0x240 [ 599.564185][T20918] nr_device_event+0x137/0x150 [ 599.564206][T20918] notifier_call_chain+0x1b3/0x3e0 [ 599.564229][T20918] __dev_notify_flags+0x18d/0x2e0 [ 599.564249][T20918] ? __pfx___dev_notify_flags+0x10/0x10 [ 599.564264][T20918] ? __dev_change_flags+0x4cc/0x6d0 [ 599.564284][T20918] ? __pfx___dev_change_flags+0x10/0x10 [ 599.564302][T20918] ? full_name_hash+0x92/0xe0 [ 599.564325][T20918] netif_change_flags+0xe8/0x1a0 [ 599.564349][T20918] dev_change_flags+0x130/0x260 [ 599.564379][T20918] dev_ioctl+0x7b4/0x1150 [ 599.564413][T20918] sock_do_ioctl+0x22c/0x300 [ 599.564446][T20918] ? __pfx_sock_do_ioctl+0x10/0x10 [ 599.564467][T20918] ? __lock_acquire+0xab9/0xd20 [ 599.564506][T20918] sock_ioctl+0x576/0x790 [ 599.564529][T20918] ? __pfx_sock_ioctl+0x10/0x10 [ 599.564551][T20918] ? __fget_files+0x2a/0x420 [ 599.564566][T20918] ? __fget_files+0x3a0/0x420 [ 599.564580][T20918] ? __fget_files+0x2a/0x420 [ 599.564596][T20918] ? bpf_lsm_file_ioctl+0x9/0x20 [ 599.564619][T20918] ? __pfx_sock_ioctl+0x10/0x10 [ 599.564640][T20918] __se_sys_ioctl+0xf9/0x170 [ 599.564662][T20918] do_syscall_64+0xfa/0x3b0 [ 599.564689][T20918] ? lockdep_hardirqs_on+0x9c/0x150 [ 599.564714][T20918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.564732][T20918] ? clear_bhb_loop+0x60/0xb0 [ 599.564752][T20918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.564770][T20918] RIP: 0033:0x7fa1b9d8ebe9 [ 599.564787][T20918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.564804][T20918] RSP: 002b:00007fa1bab69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.564823][T20918] RAX: ffffffffffffffda RBX: 00007fa1b9fb5fa0 RCX: 00007fa1b9d8ebe9 [ 599.564838][T20918] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000009 [ 599.564850][T20918] RBP: 00007fa1b9e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 599.564862][T20918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.564874][T20918] R13: 00007fa1b9fb6038 R14: 00007fa1b9fb5fa0 R15: 00007fff7b529f88 [ 599.564895][T20918]