last executing test programs: 1.739522394s ago: executing program 0 (id=7503): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1528bd70000000000000000020", @ANYRES32=0x0, @ANYBLOB="0400000000000000140012800900010076657468000000000400008008000300000000000500110001"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.643833679s ago: executing program 2 (id=7505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0x4}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x440c0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x8000) 1.571623595s ago: executing program 0 (id=7506): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@bridge_dellink={0x20, 0x11, 0x5, 0x70bd27, 0x0, {0x7, 0x0, 0x0, r4, 0x24000, 0x10e00}}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x44, r5, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000940)=""/158, 0x2e, 0x9e, 0x0, 0x4}, 0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r6) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r7, 0x7ad71c5c2912d839, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x7}, 0xc) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x8, 0x18}, 0xc) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r10, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x10}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000081) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r11, 0x84, 0x1c, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r14, 0x0) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000000060000000000000000000000000020", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="04000000000000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x22, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf}, [@map_val={0x18, 0xb, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffc99}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x5, &(0x7f0000000280)=""/5, 0x41100, 0x0, '\x00', r4, @fallback=0xc, r13, 0x8, &(0x7f0000000380)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x5, 0x3d7, 0xfffffffe}, 0x10, 0x0, r14, 0x5, &(0x7f0000000640)=[r15, r3], &(0x7f0000000680)=[{0x0, 0x5, 0x3, 0x8}, {0x4, 0x4, 0x8, 0xa}, {0x5, 0x3, 0xc, 0x2}, {0x5, 0x2, 0x6, 0x4}, {0x4, 0x3, 0xe, 0xa}], 0x10, 0xc}, 0x94) 1.540583286s ago: executing program 3 (id=7508): socket(0x2b, 0x80801, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x800003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 32) close(0x3) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001810000"], 0x1c}}, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x10, 0x4) (async) r3 = epoll_create1(0x80000) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = epoll_create1(0x80000) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000500)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x40000000}) (async) close(r5) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0) 1.407886747s ago: executing program 2 (id=7511): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001200)="01", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)="cf", 0x1}], 0x1}}], 0x2, 0x24000005) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) 1.407458412s ago: executing program 3 (id=7512): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003"], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (fail_nth: 1) 1.336841791s ago: executing program 2 (id=7514): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e00010000000000000000000200000001000007000000000800010000000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113400000000008510000002000000b70089bd000000009500c2000000000095000012697e0800"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}}}, 0x24}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000301010100000008080000000a000081"], 0x14}, 0x1, 0x0, 0x0, 0x20018045}, 0x20000800) getpeername(r0, &(0x7f00000003c0)=@ethernet={0x0, @remote}, &(0x7f00000004c0)=0x80) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r8, 0xc038943b, &(0x7f0000000040)={0x5, 0x30, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.306350479s ago: executing program 4 (id=7515): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1.063836811s ago: executing program 3 (id=7516): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x9c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c0001800800014000000000050014001f00080005000500020000000500010006"], 0x6c}}, 0x0) sendto$l2tp6(r0, 0x0, 0x0, 0xc096, &(0x7f0000000000)={0xa, 0x0, 0x5, @private2, 0x1, 0x8}, 0x20) r3 = socket(0x2a, 0x5, 0x3ac2) sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="b61372405053fc1e7fe9bb38b31fb3e81eb084a2999a49a47963f5fb5f6bff34c3bd0c643ba88460a75830ec3ed42f92d277af383a3525c0d76ea7d940e833d41c477189c9b3b90a91a3b19a2b0a58c8bebca26b04a223d731499c5d8177f830eeff700599ae5cb663b4fc25ff71d2581467277ca0d96693880538b35e2279926d568a734df413b8f9869a27aad21a42097150f82f472595e7c49fad3fb0c9f4af5d0ca87fb9dec76bf2786335f0a01940829a19c6a8cd8d6544d153a706f2f787968d7151f272c38bee77d80292e1fe836ba2ef7b6c7ca3b3aa9ad207406f", 0xdf}, {&(0x7f0000000140)="28949408644e85e112fb3cbccfdb05d0cf96e783ae49de113bd7633f4b304706c7a68dfb340f1de0", 0x28}, {&(0x7f0000000180)="680d0a12aca0dccbf0b9074135e713e955bf31664b865cdf81ee147a9ec2466637bbc55302fd92795e81794330418ee6d30feeceee1c120eed3a035c103dd7b33d4e05e7397d6e500e5c73b3f872eea34bf4a7469880717a21386e4cc1e5031f33cf", 0x62}, {&(0x7f0000000200)="3df575e2c63fc21839f140a24a37867f96c6432a6cba23ecfb3b7bbf0e753d86c5aff5be98d7fc75a15cd025c4ff", 0x2e}, {&(0x7f0000000240)="b6e0324a8797884dd6d39b5e1907e499874768d981474f8a5382aa1d8a3f034849b043c3e7a5c71a7957730a4fd3d3df95e2abd7ec518299be93c0f8a64d49d322e59c6fceb6b3fbd04586d2904a4bbe0374b78de0a328f9a1e9de006b75e2aa90cbbdf113c2f1354bb30238408befd1b6484c24049fd814712c0397a9e2b1e697e2ebdb453222d58c4ddbb9f7e8c9d898bf97df6de8857fc085cd3ba6ed34c7d731ec310b57603d8c842db31c4465051e85f5e965ef5b79e62bed1d05185a79cec14c2cdc5c6e30250d56341257cb3b190bc4c6b1d241bc446f1f6792575f92789dfa436d97f30478c56f341caf36b7d0fc69eb4329cbc63c", 0xf9}], 0x5, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x6}, @iv={0xe0, 0x117, 0x2, 0xc8, "297aad0fcc6628ee83bc17aafd5803097bd134e5cf4dcccb4d1878ea3335a41f3d36447589c4550231f1667fe92217d64beddd7b799cd00578a65e472c8af663d073eca94490ad0302189d41026a0a32569256603b810e7b82ed57f43dbc537ef8d21c8c2f9189f840ed10fc7039994b56579344dd52a5fabfd6186023a8ba0faff316b116030e021a1585a062045f8f8ff0ccf5dcccbc1fd020115e6da023e5644ffb81bc7d54a84077bdcbaf5ae035101c9238a0cbcf5dfa220b0c9219b90507461ac6db4f38f8"}], 0xf8, 0x40005}, 0x200080c0) 987.214488ms ago: executing program 1 (id=7517): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800fff4180000000b00000008c61efc68ae3b1b6c1361d9dec1000000000000080200000000000000000000090000bbe93a6f033b5f4e7c0953f4f12bb6f18c0d6a688eabf33501c0589c8b858f744262ae4369c72ca5b7c12ec29e96f38a2bb4d8aa29c6d4cc1089b41830aaa40a49a6c52ddda4f0070df5db9ca36206d88448380d0d46f1ddbb0a64410af0dd38c5754c908f502e"], &(0x7f0000000200)=""/201, 0x3b, 0xc9, 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000600)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x0, 0xc1}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x87030000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000440)="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", 0x188}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) 974.090028ms ago: executing program 4 (id=7518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x400c002) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20046000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) recvmmsg(r0, &(0x7f0000006a80)=[{{&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/107, 0x6b}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/210, 0xd2}, {&(0x7f0000002500)=""/122, 0x7a}, {&(0x7f0000002580)=""/254, 0xfe}, {&(0x7f0000002680)=""/170, 0xaa}, {&(0x7f0000002740)=""/46, 0x2e}, {&(0x7f0000002780)=""/17, 0x11}, {&(0x7f00000027c0)=""/244, 0xf4}], 0xa, &(0x7f0000002980)=""/246, 0xf6}, 0x7}, {{&(0x7f0000002a80)=@generic, 0x80, &(0x7f0000003c80)=[{&(0x7f0000002b00)=""/97, 0x61}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/204, 0xcc}], 0x3, &(0x7f0000003cc0)=""/204, 0xcc}, 0x2b}, {{&(0x7f0000003dc0)=@nl, 0x80, &(0x7f0000006280)=[{&(0x7f0000003e40)=""/214, 0xd6}, {&(0x7f0000003f40)=""/133, 0x85}, {&(0x7f0000004000)=""/139, 0x8b}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f00000050c0)=""/217, 0xd9}, {&(0x7f00000051c0)=""/46, 0x2e}, {&(0x7f0000005200)=""/70, 0x46}, {&(0x7f0000005280)=""/4096, 0x1000}], 0x8, &(0x7f0000006300)=""/142, 0x8e}, 0x8000}, {{&(0x7f00000063c0)=@ax25={{}, [@netrom, @remote, @rose, @bcast, @rose, @null]}, 0x80, &(0x7f00000066c0)=[{&(0x7f0000006440)=""/89, 0x59}, {&(0x7f00000064c0)=""/194, 0xc2}, {&(0x7f00000065c0)=""/222, 0xde}], 0x3, &(0x7f0000006700)=""/251, 0xfb}, 0x1}, {{0x0, 0x0, &(0x7f0000006940)=[{&(0x7f0000006800)=""/115, 0x73}, {&(0x7f0000006880)=""/150, 0x96}], 0x2, &(0x7f0000006980)=""/211, 0xd3}, 0x6}], 0x5, 0x40002060, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000006c00), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000006d00)={&(0x7f0000006bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000006cc0)={&(0x7f0000006c40)={0x7c, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x4) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000006d80), r6) sendmsg$NFC_CMD_DISABLE_SE(r6, &(0x7f0000006e40)={&(0x7f0000006d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000006e00)={&(0x7f0000006dc0)={0x24, r8, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x40d0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000006ec0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000006f00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000007000)={&(0x7f0000006e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006fc0)={&(0x7f0000006f40)={0x48, r9, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c088}, 0x44) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007080), r5) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000007140)={&(0x7f0000007040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000007100)={&(0x7f00000070c0)={0x30, r11, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x30}}, 0x4084) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000071c0), r5) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r12, &(0x7f0000007280)={&(0x7f0000007180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000007240)={&(0x7f0000007200)={0x14, r13, 0x100, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000007380)={&(0x7f00000072c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000007340)={&(0x7f0000007300)={0x1c, r4, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044890}, 0x20000041) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r12, &(0x7f0000007480)={&(0x7f00000073c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007440)={&(0x7f0000007400)={0x2c, r13, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}]}, 0x2c}}, 0x4008801) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r14, &(0x7f0000007580)={&(0x7f00000074c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000007540)={&(0x7f0000007500)={0x28, r13, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "e46cf7c24d7d04e10d541f6c0e134b12"}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x14) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007600), r14) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000007700)={&(0x7f00000075c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000076c0)={&(0x7f0000007640)={0x4c, r15, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x4c}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x3, {0x4, 0x7ff, 0x6, 0x8}}}, @NL80211_ATTR_BSS_SELECT={0x10, 0xe3, 0x0, 0x1, {0xc, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x3}}]}}, @NL80211_ATTR_MAC_HINT={0xa}]}, 0x4c}}, 0x20000000) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$devlink(&(0x7f0000007780), r12) sendmsg$DEVLINK_CMD_RELOAD(r16, &(0x7f0000007a40)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000007a00)={&(0x7f0000007900)={0xfc, r17, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44000}, 0x4008000) 924.37911ms ago: executing program 3 (id=7519): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000040)="c86589b8c614a33b9dc4bf293d31b9ac93f992b9e6a97ab3aa37fdca28fcbfa2fd046dd5173eb77cd1adfc7f93c46a05ec90ecba65c96f4be5d60d56e3508c879e9b8324057e106e3740e49d33552f85be20d755cbfa3f06aed361481c973e18f360c6e988e9eaf6cad9c1422d809d8660e74e9e442fcb89d0d312650f95614bde72ea12e2c2a3a82bf0161d15d046218a66", 0x92}, {&(0x7f0000000100)="fa85e4e2d64e961f7881121385477425d4182640d2475c64a572eba4bbfe04989b3c979eaf3fe2710ac58fed3d21d514464994cd9d251b3ef2fff11c0d0a4c062fc632183668711732440bc49a87d1792498f27e4a4cdbbeb395bc3f0dc5299648d84d757bb552a33bd949c7f77bc7f60cbf6396f6861708b558386f46761b60083c61fcf9e99eca50c697fc3dccd1bea99dc591334904267fac1f9096f4829248b57087c64ad9c2624779d502f2b9284a47d4d3c4bca017c851187c2f904ed00396016eee784e34793c310af7560bd52ed3287c454908b6d759bab40cc051dbfd", 0xe1}, {&(0x7f0000000200)="ef012576ee14928a177116c9a25fd159dff01b5ed807e1bc0e713f4c2f301942866adf303366b958bbf9eda975614abf2c53551b9ca22f8521744e18d7d87a506a12b91eac1b0cb19c16452dd1165b5dc126da18d3122e036c3d5e54991b6e1dd996e609a1fdb551bf062c5c0ee16ee12072dd76e99f808b22a3a22df502cf2410057cc3b16a3235f9174968704b8ab1d97b11320257823d30de052525e8360601d28bd3f8180a5052523d13d5ed8e9d4cec6a533549a69a2b08ec46099137ad19091c239a91f74471cea5395feec0", 0xcf}, {&(0x7f0000000300)="22cca09c161d3292c749efe72b8c9ed23e5ba05a1a7e05e75762733f33c62e18b580ee25cf2a9cb03cb4", 0x2a}, {&(0x7f0000000340)="5f7a0f7105757957be22e2d88f9379fc51cb6f94eae0f3002276d1d6e038ed44a86636d46bea5fa67c403376be5c9e685a26249e355fb825d93010c5e8e97c0f1d21756fec5ab4958f4b0bfc3702cea35412ad4039bb337cf3003b5b74f85ae72e702736707a1ff0a1ed7e2021f742465e33f6acb750c2881c93c8e727e2", 0x7e}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f00000003c0)="851ab3747ce1b6d013aa0f82", 0xc}, {&(0x7f0000000400)="3b3ecd4d1205059bdcbdedf643e0196f46f64fdbd0090c325a13fd73b30e6306f812801977a0d3cf853e80220a8c77479bdc4a663918a065499286f3301f2ec0f03f15fc3b43dd9d4ca327f32a54e8c72e5e3aa21ef53434dacb287ccebbe80a75514c646610fadab5a15fdaa811189b7ad7a3817fa266096774de", 0x7b}, {&(0x7f0000000480)="58d7e050253e2d1630b58e1db1fcb56caabc92f884f7a04630dc9a34c144982126ff585cf3cdfecbd4", 0x29}, {&(0x7f00000004c0)="2f87fd4c1db20ea286efefc5bbf715f78697c255c350f19feadc0e7951d7607f50a8f4ad54bccaa2f46294cfafc2ff6b791bc385d3b481059459ee86e2a87a8c47f57e13b1b40555dfaefbd1641309abdf55c84d8518e83fe3465d4b8bfdbb7d643085530b1a4dc546c8ea690181c1db62d67dd8fafd46363cc5e04bf36b3c6069050ef4ea735f7227cb758e0ecd349cddfc9c33d8a9ec28b6a2a6d1ab47552500b0aadd65627a00516fb96aea4940a89de3893151dc007358a8c76c030e0695cb5981c2acc7acfd5d13d3bc35e2cc07d72da5cd4315498a", 0xd8}], 0xa, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x13}}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x96, 0x3, 0xa, [{@broadcast, 0x9}, {@local, 0x6d6}]}, @ssrr={0x89, 0x7, 0x30, [@multicast1]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x6b, 0x0, 0x9, [0x1, 0x1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010102, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x98}, 0x20000000) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000008000000000000000000000000000000000000000000300000000000000000000000000000004000000000000e3ff000000000000000000000000000000040000000000000000000040000000000000000000000000000000ba9b55090000000000fcffffff0000000002000001000000000000000008001f0004000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000008001f0003000000150008"], 0x160}}, 0x4810) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120a000d0000000401a80016000a003a40f8ff070000000000004dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29bf1d809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 899.958854ms ago: executing program 1 (id=7520): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a000100000000000000000081008000000000000000000014000200000000000000000000fdffff0b3d0000b2ed6a67f0f82ce1797044984d723f939a89f2f46d0597f80df6f9c0b12251d32819032218eb107c40c876993b906854450a397aa6beec5343699cdf261ba522159e9128bd126f529b0e2cbb9001c121058103905b411a05b7f6335dd9a6bfd171313a316e5f03aea3445cae9381130ca4d5d96fd7c5a8d4260c6ff5c83e8be75b65edef4c"], 0x30}}, 0x0) 731.984789ms ago: executing program 4 (id=7521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0x4}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x440c0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x8000) 731.346089ms ago: executing program 2 (id=7522): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8ee112de}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 727.622096ms ago: executing program 1 (id=7523): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmmsg$alg(r2, &(0x7f0000000e80)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="d81c65a751202e82215f76073a088f2c28add9ce8a5131b65be16f65554b5ca2782caef0ecb73c8b0acf638d58bf9d795823c10568df0bfaec35e90fe52a356f3fae622b77cd7c8d277f9885ebb69fc278dbc87ce253ce9c3b8daab817ef18303f7712297c41ac43c5ab8e2cd91bd100a43de15835c59e1a22ef724e50ccdc50f93665c22148316cdbe20497e379c1c08ed910", 0x93}, {&(0x7f00000001c0)="1cf4466f5c7563fae65950ba9de888e5ee18099e2f", 0x15}], 0x2, 0x0, 0x0, 0x4042}, {0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="28b656339eee644d236d773b9953f1dce1727f4582ba549c84917eca5fead528711006cfe752b044039fe7f6f9f4238a731e9352b4e2084d41f0a16c1ce52d4249f739bbd80678d60763496695d0fd5440b123c33008f79ce3c6b10056550dc7d74a73b4c8f8412cdbf54aa62721c3f3472fadd0a4e3ac9d55006275265de342b25ecdba65cb", 0x86}, {&(0x7f0000000300)="a8cda3f0cbc39e91317b933d08e2998892617eb845570749e4321708219002361db61cf763326387623eb8da4925438d692cb704f7bea11f0a62a689ceeebbd0b65d44a868dba70075c8a1fa5714dada7f7cc9276bf544d7ec8f0c9344ec91b51a0970b3d5f8b0d6a7104feddc3ea18f8d3c54a80ab0099c5675de1c1c27d5", 0x7f}], 0x2, 0x0, 0x0, 0x1000}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="1ddb9e546267182d732bb233402793ed18341babcc5581996fcfc05e815ee783a6c30071c8f5a7a18273d06740ab01d6b5c763", 0x33}, {&(0x7f0000000400)="9f34c87be7fe4dbb3ab0c99c6cdcff6d6f146379f8", 0x15}, {&(0x7f0000000440)="bce658479eaf0e", 0x7}], 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x198, 0x4000}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)="0328bf4db7043825464541f5bfb2d033d054655562320d5fed279f6abbe93293ef3e102ca28360dc12182d244292d36132af0bad23c97fb75aa61a6b793867d0791878ced8e40d9f165b2e4c731fcefa6c9eadab55120d3dc2", 0x59}], 0x1, &(0x7f0000000940)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xc8, 0x117, 0x2, 0xb2, "7c4e7dafc6875255b20389e59fbc2f3f8c87f96bd8a454c4d902cdac7c1c5ce36b1962f086efad415d2afe28d80ead1b4055cf0e2f6437cf748b9d62164b435dfb211d190e00bb3d597f3ab47704b46b22416c687aeeb8729a937351a2ab56a19985af728b5bcb8fc7f9aff47b2c82e5abf792ecb7b86b6949926f3f18087407178a1dcec7151cf27ba4b521d919cfa6fd26aaac566738e2e51a1213d731d0da1a926ee051031d7bc51ebdf989e489c3a1f2"}], 0xe0}, {0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0x100}, @assoc={0x18, 0x117, 0x4, 0xcc8}], 0x30, 0x80}, {0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a40)="0b98785f8e90730df05bc0275615a205aaa88d4edd0b444e63ebda3160d6098fedc5eb334c020c77c16dff7d438ea25199799d3ebdba8f9310d31fc26f6894d13d59996995d72d5657c44c97408b9d487efa3a5a14a15a562214d889d414cc8bbb4b008f577c4d7793f6f992717920519055e6411008e2d3b3f8103396017fc9c4633df62444c7e209dc11bf9b66ae1b7867dc2b34b4caa31cd0fd6792d536a770f5", 0xa2}, {&(0x7f0000000640)="03f57fff06df9b60121c451aead680288f8c93ac60ecaac7d610bc9f16baba48fcfede37f0d9a9fa382d6db295c1a4c148a4884fccfd0008f4adfbea8249", 0x3e}, {&(0x7f0000000b00)="f3267bfdc88baeec279b4a9ee6f68874d052ebd3bb4ec01d4382490301015b8e04db814fe44d3cf6f28fe28d5e8bb5bc0f5d3f1b6798", 0x36}, {&(0x7f0000000b40)="d19864cdbef6046548762339923599fc50d52ebbaae61d36dccb26c262af50ed907938e35827ef4d7fd22000c146d045a7ea6b7ddcfc6839600663716f61bf42f8ef9865b3937b72d36f9ae2b06de2b3e3e7e99774ae2676b91540a14e", 0x5d}, {&(0x7f0000000bc0)="e391b39a72adf72608f8c0ab8d8113b0455117b8f0faae2a679e391c9d4795d286c0cd2cb62d026146c078b46981f5c6bd961e376e0f3d2cce8dac221ff02f204baa51b94a0bc5f1a3dff0bee8cbe5f01fbd5a54133a82b175e3eb5cfceb67a0a85c6a085c37359a4634a66d9785b8663856b61210b1f42a6f53fde3748241d8de54b6073089f7b3e85b5fdbd2d9ddeb0a9866f57da511b0ddf550f5e273e7a348f71b6f43a5c7d0e68f10f5812a63e2aed4b5df93dd", 0xb6}, {&(0x7f0000000c80)="2cffe6db848b49992de449c718f6f61301a56846a79665fd639218024c860dd36566225ec0e772503f63ca0c6c707629bcc78bc88504c5eca07ce743bfd7c9d5bf49cc43877771a1a8d21de476ba9d382615bde4dc47cf4f5d2ff2582d3c8b36dc18831bf616e4ee9eea804ec82804822cead15d28e4de5081fb2740578858835b9802887d4d81810897ad8fea5cb4bfc4863f93981181b1a19092c952ee98a59bef2354e94aafb482fa5178580264bb52f4aaf7629a83190f38953c1002d8b617310d006cbb5fd72e679b5013a7732a75339843869f86f2c82a372fbf158b60494709a3a9ea9a8b2152203d7aa4", 0xee}], 0x6, &(0x7f0000000e00)=[@assoc={0x18, 0x117, 0x4, 0xffff8001}, @iv={0x48, 0x117, 0x2, 0x31, "8c49501fb38d10fe76d85ecc311d6d24c9d1db79ecf58b94c7ab26933713dad23be949e1e7bcf42863ea19ae0064937491"}], 0x60, 0x24000800}], 0x6, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r8) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000fbdbdf25010000000c00020000000000000000009e5a331d6bdccde9e6aeba040007800c"], 0x30}, 0x1, 0x0, 0x0, 0x4044094}, 0x4000090) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10001}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r14, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0x10, 0xffffffff}, 0xc) r15 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_buf(r15, 0x1, 0x37, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000001380)={0x0, 0x21, &(0x7f0000001340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r12, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r13, @ANYRESOCT=r1], 0x6f4}, 0x1, 0x0, 0x0, 0x40008a0}, 0x0) 727.03143ms ago: executing program 3 (id=7524): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xe4}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000a00)={{r3}, "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"}) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340000000b000100657874686472000024000280050002000000000008000340000000000800044000000000080001400000000b0900010073797a300c0000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) close(0x3) 689.955654ms ago: executing program 0 (id=7525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r2, @ANYBLOB="1f0033005000000008"], 0x3c}}, 0x10) 531.75137ms ago: executing program 4 (id=7526): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f0000000000000000140002"], 0x54}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000031c0)={0x0, @local, @broadcast}, &(0x7f00000003c0)=0x2) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="a1000000653cb06cca007ca90000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xc, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008010) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfff2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) close(r11) sendmsg$nl_route_sched(r0, &(0x7f0000003180)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003140)={&(0x7f0000003200)=@delchain={0x1b9c, 0x65, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x6, 0x7fa2cf6e56d0278f}, {0x0, 0xe}, {0xc, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0xe}, @TCA_RATE={0x6, 0x5, {0x6, 0x71}}, @filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0x10}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @filter_kind_options=@f_route={{0xa}, {0x1b14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x21}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}, @TCA_ROUTE4_TO={0x8, 0x2, 0x86}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x62}, @TCA_ROUTE4_ACT={0x1af0, 0x6, [@m_skbedit={0x9c, 0xf, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb77}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8001, 0x0, 0x2, 0x687, 0x2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}]}, {0x10, 0x6, "75d679abaa0efbf027412d1f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x164, 0x20, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xce18}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x3, 0x2, 0x9, {0x4, 0x2, 0x1, 0x40, 0x6, 0x4d4b}, {0x8, 0x0, 0x8, 0x6, 0x2}, 0x6, 0x10, 0x1d2}}]]}, {0xe4, 0x6, "b908bab380a89aba077548a297852a321b4a6cb5158cba4e2dbba32028cd7f60e1b832f00a22435448713296e18e9ef94c06dd25981bbfad88b12b28771aaaf8447d894fa970460b30d8c215ae55517530f6d19604505a2b23fbf5e3b2c7e828b0054f68bf61c506735a3da2689d5d35d62a5320889cf65356dc1eb790bf564326f7947a4df1f834e204cb4de5bdd9ae35c800ebe97a6efc15611dfe3eeca7cd17180ca3d6c077af804223acefc6e5931d563d6001732d05c315a4749a551ffe5e701522a32ce98bd4291e4a9c7a5ee487bf8d89850b0e3c5fa954c3854be689"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x340, 0xe, 0x0, 0x0, {{0x7}, {0x2dc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x101}, @TCA_IPT_TARG={0xba, 0x6, {0x2cf, 'mangle\x00', 0x0, 0x81, "54e01c5fa21fff518969264fc81894f49f9cbe603797cae3f74764961bde69b5e1d6e0f4277bdf7b7a7e37650babbd1b4cc5fbd11cf6508db27b2e7dbef39b75ca3aefae343961d998ada2fcb770a2cd02b46a29f2b23965de76c5c440b5ccb748dedad7df108379b92e8673b744e4b0ea088b3797a9e8faa3bd3e593ac3f0f325d9654686d3b0851889ef370e43229e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7f}, @TCA_IPT_TARG={0x3c, 0x6, {0x7, 'filter\x00', 0x81, 0x7fff, "c55b6fbebd43c0e4caf55ff67a83eb3222c3"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0x102, 0x6, {0x2, 'mangle\x00', 0xfb, 0x0, "771287b9289ac04a253a2ad12d4c589e5973f56cd20b35fa5b688c0a6e16c8d6c71b15fe55818c3b50f1bec1db8d91aafc2f8ebdc4b46b3056297d023e5aeb2c83e0e670ab9cff011817c37823bc571e828cada61296c4ebed7a98660b4808691cfaea75b16f6aad1e87e137efbe3c6c8690c2d85b259e8bc794d3304f55b4df92a00d5d32aa5c00156db0fbd8e720a0ef853462f8a9afff1c78079e0fd4e5fe6eea5f9111aaa80da6189c89f767801707ae2430e65b43dc0fbfaa3975f4054f770a46024f1867dcfac59c17919f7962acce5a78c7127b00"}}, @TCA_IPT_TARG={0x9e, 0x6, {0x6, 'mangle\x00', 0xf4, 0x1, "457006f9c93218d7c951a13753792d287668db04a12d1e706a54e4f281e4801d5d22148de59eb0594ed4ab45380d8cf5ac62dfbedcf5bccdcebf75011cbdd5b3c64ec2aa5d4f8037f51021298e2943d2d6c3693b74ac0b999d523fab9bd99991424a8a0f3796207c2ce89a26f4044acdd9d16a5c"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x3e, 0x6, "bb6844382f88d441435029728cd0da9c0fa68f1361c44cee54e029c7d0ec131517296bf054790ff31bf3d665ddaec815c86b65b0dc76e0140bc8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x10c0, 0x0, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xfffffffa, 0x1, 0x4}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1d6e, 0xfffffff8, 0x2, 0x0, 0xfffffffc}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x3, 0x3, 0x80000001}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x10000000, 0x2, 0x1845b78d}, 0xba}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x10000000, 0x8, 0x94}, 0x8001}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0xbd4db92ee3ccb1a7}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x18c, 0x1d, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x6, 0x10000000, 0x3, 0x2}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x77bd, 0x3, 0x1, 0x8, 0x6}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xc4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x800}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x37, 0x7, 0x7, 0x7fffffff, 0x3}}]}, {0xed, 0x6, "17ca12fd45989cfe44243068cc0b6c97f94cdd2181c6f5cc933004ece36f3115fec59ad7dd4e7c4182b477d35a63a4587e387b3d57c950447edfed926671fa91321dc9c2e21a0de4648f23b8eafab36bd0fb217ae24ed0329b68b157da3547aa8645be7de3615b17cc0fbd4d2815d007489e9e566e0ab1db1a93bf74f31ebeeea0eb7138e6c00b7854df5ecfc8ec0d393046eb0ff7df012d9d6a583db7364ca7900df4591256558215c186d0f3bc5de601195f1c1a3e82a5116b2eccc846fa7794dfb1e6eeb838ae5a90fc2fce54d44084bcc36e2991cb65c335b23e74f4fff740bbdd512022e5a207"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x90, 0x15, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9a}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x1, 0x0, 0xfffffff9}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6c98fec}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x101, 0x2, 0x8, 0x7, 0xfffffff8}}, @TCA_SAMPLE_RATE={0x8}]}, {0x1b, 0x6, "c02ea76073ccd228fa39ea032d23f46dad978ed189de68"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x110, 0x6, 0x0, 0x0, {{0xd}, {0x4}, {0xde, 0x6, "f84cd1aae1ba27b60c03a8530fbdaf2d126356f8b8248a1b0e1229a014bc30c6f11bcc629c090d37c499db8a4591008ea812fabcbdfd4b9301b05bd7472635cc52b7227f6a7abdbdf1156ebe1b45da95cae52ddd847fdd38bca27412a9c491c2b44e3729ca7ac99722bf91fb1ad85ad6e02b6cfa121f1eb56670a18b1aa910cb5790220f1b4a2c9a413d44071c0ccc542839b233a95ca1a2c2ee0da19a368a92c9e4678bc269bd6d7933d05c6faf88229dbc33c2dd42ff6597292ff3c0bdb1e1f02af2125da1c0538d164d46228040b17c49603e42a8a3852810"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x68, 0x1a, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x6, 0x10000000, 0x401, 0x1ff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0xb, 0x6, "95d99ad1df6d26"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x100, 0x1b, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}]}, {0xca, 0x6, "2270b7457f643bfc4ef6d434df88b2dfe739a97f08ced135ff068a59e196c3f6cd81ffe52d49d9506f7f3791a3f864f6b0efbb0df96461f0cf344607e204d5be66f3b8bad9773ebad51fd9f23db36bda2727e72b2d40d299c51c389953b6df300a59506858121bff90746b91d7165f61c99c9cbb65ad1a235599f5fd1bda1c8384b8b5a7f31ab21b3073ce149ea6917699baf1b0e5cd1e4344c89b43720145fab20578c54ba5f24926b48e79ee570d40b37ccc0eb36639e01974fa0946da1e4b17954688c630"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x58, 0x1e, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x6c}, @TCA_CT_LABELS_MASK={0x14, 0x8, "8a22d5eded22ed698f99ab35eb9c829f"}]}, {0xc, 0x6, "11fa0d6991f88bc2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x100}, @TCA_CHAIN={0x8, 0xb, 0x15793be1}]}, 0x1b9c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000030c0), &(0x7f0000003100)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000001400200029bd7000fcdbdf2552e64ea3", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x33d3948374ee73f4}, 0x8040) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r12, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r13, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xd}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1ff}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xed7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4040080) socket$nl_generic(0x10, 0x3, 0x10) 465.745613ms ago: executing program 1 (id=7527): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000020000000000000000000000e000000200000000000000000000000000000000060000000a"], 0xb8}}, 0x0) 465.058637ms ago: executing program 0 (id=7528): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x17}, 0x94) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x99d3551565a72478}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa7}, @TCA_ROUTE4_IIF={0x8, 0x4, r6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2cca5052}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xed}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) (async) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 424.949905ms ago: executing program 2 (id=7529): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000040)=0xfffffffb, 0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) 422.628034ms ago: executing program 3 (id=7530): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000001580)=@newtaction={0x11c4, 0x30, 0x9, 0x0, 0x0, {}, [{0x11b0, 0x1, [@m_sample={0xb0, 0xf, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x800}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x101, 0x7, 0x7, 0x9, 0x9}}]}, {0x61, 0x6, "bbe7f7a9eb8e567910c1599ae5e716b29513bb11d671af3012a7f54fb00d7d24c2f72e89f22bd4a5c222bc384b3fafdca95b10b109c05aaa4bdbb81c21c6e5ada07cda500d8aa1471d80e69f10bfdff5e370906154bbf8b4397e3d6510"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x10a8, 0xd, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xcc, 0x6, 0x1, 0x9, 0x53f}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2e}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x8000, 0x1, 0xd0f, 0xfffffbff}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xa}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x7, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5e0, 0x80, 0x2, 0xe, 0xe74}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x54, 0x7, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0xfff1}}]}, {0x16, 0x6, "f38d7f90605acded3d651176749db24ed457"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x11c4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003"], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4, 0x0, 0x6}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x0, 0x1000, 0x43, &(0x7f0000002fc0)="7546849b3b04fc370b0cc14f8d62f9925035abfe20cf530e7a77df0e58a7c9985b9fe6eb121ccc7c8673cf819ed5f447bacde3036538694233b0742b8db1aeb7c969e32316365d9a0402f7e07e164c3fad32215e0daa7a4e39ad08f60121c26d396e3b73d2fea35c88401c99e069a821b16d7732ce81c0aa746c392e1ab2b55288323af78945b33c31b89214f1ecca31ed95372e54c8e189e517244a3d103caa4803ca5ae662d520d26ef6d0021dd7edc81ed8b2b0e74d6612f043b9df4822538fcc3e4ffb7a678cc491244c047746c8c67ca12372fc145ea3a5dc8be0d148fdb76564ab89c3126074f8445ddb506086f50d321ea2088da22f7264f55a6fcc03a2623e7d1e85bb1a6da3993ae74b97a9ea2e2221d551d3efa084cbf26d13d7ae6f0d2bc93285d7da95afbb6210b76ebd6c5b83e5946a688bdf7cc2c015a9665c59d458f1ba8cd928a294163964bb41fce631ddaf2e25916db2e85319d1c4aa20e5ee953577823dc562a5c13fd7fb7506b2e3e31840df5777dcd6fab9d2d4c35832e97379d9b4763241ceb37735592b5f647e184841d97e7bb00fc0dce8e9c473ab576450bcae075e2573d93bf5bbfd84fb087940132ffb4082b2a390f2c7e06c959d744f69a5ded29e1bc260c890cbc793492801d303223594d3ee3c837da2933bf02e8dfd0299265131256deb3b9f353b1c76db1f26756134cbae023597ab5d3b3a25a37b80a993d7afd7edff1467d91cba7318adbcc844559a9bb773e95ee6e7829052748318b0db32e7f2f320f39fa1206b8f193f3512ef5de3bf7bf2fdff9d7ea193acd1d1519999eadf87b54b3ce6e8d3600f8b56ffdce4b0f3bf64a7b6436acd18b32b5d9c797338e17bca57fa5590ecb504ca91b83d42b419e6a193d1a599cef5350c5cdeebab57998fc61b7e2616edd8b242f6aae3b6fa4129e310f4c948a22e7e9f73827ea8ef3ef2352871a6ccb671fa36fd400b2d6ada5cb82836f2377b4b3fb78c84809e4b84f99ae891da0dcf43d1294f533ed84adc137ee254face41b146864053ee27e7e0294eaf9029721f8355de8c7e3d767b627d27e5e73806775c3df54748cf2a9bb01f0d85737b13edd58bc9e6bc841a69b7362168f7a65a0a6f9315498cd579e6a02eb9b1246389a5024f89e1bc55b7bdc8c43c1eaa0406ccf4532b9fa90a34bbbf0fdc79f20dd09c449c3a7301c4fd8e444f54b9ed9e2465f1e5caa6c3a2751f983f570e91e5658ba26a871bfe214566a6f45379c608815a1e3adba52668f9a5c4d0555f002c297e63609d983b5aad6c6c43f52375527e07a8658b6a993efaef5ffc6be0f626a6f7d1540f0d266bd1c1c0029d550d5f3b022df438fc60e6cd6c42d5d2bedb1ad650bb2b962e685a7b581e58bdf21b7b4e86a8f7475c9122f14f7f353ede46d31216838bc402f062ae03d0c9edc25be78dc2db325c3db1f217b1711d7bace1f0b2468a8c3935c9fa73bb8d78ff7a1b10ef63567b6a9b84d8477b314702e9fc40ce5bdd72b54ade60c4b6691ed14ded159216a205e8af33ed7b24a90363715ac77ae1ec1bc88dd474b936f157bb39b42d327318c545ce4bb19ceb8e59b62ed5a8123d13aeae0ffb5e3e2d92819d3df51476b800268337f630083859c7e7f21be77310735e6fee95844bb920b7ce54fd7fcebc2b3531ef31d5448df4228e32095d26de1733bb8b467defeeafc4a4222460f3bfabfcb1ac8799a4b33d8b5a98aa9e4cf006f885f03aa29be653e369a46475e9cb85c887741914b115e7e4743b1831682738ebeef240471d3379634633a78e75419422ff47809852ecf505f25f68289effbd12309d48df5cf10e2946b19e196cfe854218beb66845f7b52860915428e0333480cabdd95c22238eb02956e3ca8280a263b208380548a5dfb7cd61766034156b819166eda969dda2d1e94baa603ed71fe162105dff106955fedc2eb4c81b08fee1ab0252651a5321afc1aed42fb281d029f83ae57444de5c4c33c2a17eb9780889073f8caeeed1fd95e591f621b368639ffe19f8c93f0bc8fc30c162cd1b135866a833b32f6489dc48db7cd12ec318c4e2d97f2ebc9d872d06d236088aec962a3217afcdcc004aa7910421a02cf86b2be29eab58334760b6a8426ad08df44d2b2361c3cfc7801e59dd08e98e9639108cc45687303a367c30e4433d594e864695a42f25b3515a13ef935b00bea42accf4f50f9083154c9ec7e1e822cc746928291c70811831c06350721a7c0ca2ae892a7cdc5ce0cbaca159cd8e7029f6e0050b6765a26be708196ecd79284904220f48c8be4359045bdafb1d7dca3b5ca6c86359172b0bd0ba9ee15578f73fa42c7183687c30da99e14c9b2499beefa28b90f38574d69baa2baefd2d9920d733955c7ef0383a2d07d397d560073f5871039f832c2cd28db1ff30628435e5ee944133d89e34f4e44f1bf2e29376b124e36bd7c772f2d4dd6cea2f08cb44c84a7e43ecbcae690edfd50559128e842008133c6cc99bd0332fa4ec681785fd40e99f4a1f825d12929814547541e70f1246b4745144474f9d052029e541d406689d4d0e31434650b6bf5704989e492b069e0b9530c579e549331efc9f8231854d97b540eef1b0918a95ca47a848c4ae33ad75c9e775186e1ca3fdfe26049f0036ff9f3875270bafe63bbdd3fe1e612ce251e704e02179650722b5f5690441cf1be3a75a2c0a7c17cd9451c870c642e7cc2020d860f24d26568dfcbd6ffcc57a7d8871232df4a68daddbe34f0a66ca8e10800b4901de105725e496e57568beabb1a097482381e53d89d29e1b552f3eb3eaad0a9c401584a08759fea33da2a4414ae0d7643b00bfadd749224b467b3c8de54703f64b75c4edf6bccea602eff8207a41bb7ba00cc7b4c9fd6fafb56447465f0d05b2a2862b91c5c2fd9d30bd1c64e0400acd38331dc77d59a2a757eb130a0ef289e339645af51d83bfa2ac29a36acb329776c11263253e7d7a7eb348c59c56db8b026c115273605216e9a08551ae3dc9e78655abcba09f57d97a2e0a48dc5a8586e5cd1a5731623896d0c2917a61eb877bb4f8d53109e91d6e54bd4bed649b904dd084497bfd30ff54b419e3e0bef46fceaa02ddcea907213a9d163c8b35a47369762f955a49f994e4fcbed8e0f3d715a31a91c99d53b02a3f71e093e589e70e465fac7c9811485a8d3cfdaba736f28fda7b1fa991b57b213a4a3e613b6230ed6c6758c07596488275d04873155c6418dc60753baeff1afe8f657b62f63879ec455bffcc389a427bfda012399a2d35f44f398b41bb1f7515ddef80c434ce88c4ace194ab25f2a4ea44d2af222fdb548c3576a0e7ce69d5f38819b43badc372df6e03405ce29755e269e39638460586f525ab84ca24e50c74a68b2a889463f4f23e38ca9dfa68a5bf80bfbb0311b07aa793b828136b0ef0b93d2e6f0bbc8000f61cab7972ba7a3d071a0ed6eed03bfc50d13bc134da0693fa47fdfdde91136c6939b61f1b4ceb4d042060a2b63dc13543abdf9e3a444084b667e21b1f04c344bf1a833c0b2fa4766620a8762262016d8f69736a299466a69922fd024093745713673a6e6dcfe74377dfaa4704dbb8eaa1119a5cfe4e22722cd18036130226dd6f61dd3e8592d4e3b1e405ce3a0ea8d8103568dce50ac26ce09652cf51ec84da3f908f4e0fe1427874b91a9124057faf5f28e7e15458fd3cc6358a4decaf1522588381eb65d4c526a39a8b08ac5b28052e5b0f100811ac94c4921f47de7ea5138ba8c831af5be9a70912d74947ec75a4ffbf776be86478c14866d8aacf0d1fa3048bcc1c83098991b05ce958127588b2976dddbedc97f9f7b786cd569b8b271687533e4d13a73a58aae4e7824f8ccfdd53ef8e61eabbec42267f4f6bea939747bb2879f9f66ba6781b872a749581ef4ac07312596e1418c2e5baddf46386fd92ba5fedbce627c466fa4e3be0e3fe87e326bd6a183c17d7097d15f6e7d23a802c5418402fb64747b7562990581707d93b818af3a7dbd843fe2322c598b4c3f6b71f70e1e575f6521dfa1c94fe7688df14b4bbaf38e0c55d64b3bff87bcd86356c1bc781a857eaa17fb1977efe6349142dffb8f8bc9a65efc4b60916eefee5d5144a895adc48a253279164a459e10bb39a62c53309ecced1ff85f8929b7d15743951e0542291db0962061a16fadaaa62acd97a2bb3eaecdf7c1aca112405d5e868219bad3aa173ecdc619a1d059da0111c3c33d70871f8b4afff360e6f17b381c11c8bba2c5c5261abc3e53b527c9b0e3eda73518d65045c60b549f635311681e6666cec8414e85120dcf390ccc49e824e64f6202297edbabfadf84c1a72f76af01cdcdc85652764db29deb8ac24946fc3d833b77b73f6ccfe1f3845b05cda4b985505c7fed6804fa91ecc98e7fab531852092db0b79db9cec40f71fd491ebdff37cef291c08c808d4445e06fc578671d77eb5237ff77a5ccd5031ce91008926848eddf67e4f6e48a0a8bbd850fca7bde649b3653fe60b0f33bee434f64566e6f22af11343eb2f4745b9a08ab6a0fcc4d46238c2a87b8e17d097906803aaefcdbb305a669188b0138316a5d2be802eda16c330abb54b4d07b16e80e2fb8443b39cc5046587645ba0bdc1d77f565c8c57808194f7a291d414a9129b900a609c3e12c9a790d497ee950dbd9fa209abb9c81853442ac81c0de009a6aa4a2c57ebb50aa2a24433cad14665a3947a9ba641d5bee0ab3dc741516a8b5b7849a340bbdc2bec522dade71a6fe78649addb314c240c0b685e3513ee433463fcc0fc6ef848ebe50e4fc1323e42973b7cd802d319ce05b0e6086534e0d185ea3a45d936d8b3c5f0bee5d9c73f31b3f7e18ae598dac4a70f8284d257936d6cc26d538c14f35edc562b99da363929095052e3aa7e257b9aadda2af4084894fb04b11c583dd669e09be3e119931c0dc967158fcb4cbf1dcd73291700f67874c98d2d93d1a3564325a01e0cf4589f74991613d9c40637dd1661f80e5156355b26b65372fd6cd1c6a860d5b6897d9a371ac429966bb4c248188cf55b7bc1766ab0d7cec4a8de9421eab4017ecc3b09e942a4c3afe7cd6808f13e79abb52c7e81459bb204914e2702f1499ad89a19a2fd2d7196cac53e4efab69f3ddf92b2447b25317d7fdef1b2338b78f8ed721e650e1f28f4c8849bf147ace10531e6afedfdef8f87964afa3d0aebe18d6c6d8d98bbfb63a2e76a6ea69b8bf9a73a58d0943e50ec3c91e6bfe4731aacd6805a52a63c8b385b554e4245787f6f313613b6d32569016f2775955d18f78ad6f733bc101dd8590bad74deaeaee795bf62d893f0ea5efb36a78f547243abaa6aa7666f3f181d84657e9078603c8cd8055ef20068d3337d4a091f2bec2a0708753bfa819d7a14c6400913f930a528e1237d3218956bceab2d2c415a827e7872f286e42bd4fa8155a98c44d6b9abe51a5fb6ca1943bb58c387bf342a8105cdf6a3010f11cc3b421d1b08611ea6a78485413d696e2d4c10c901a02b617d60c45e2f127680485138c4d3862a97bacb87cfa2c0097fff6eb5c973211f7050fce94f2639fbb8f552a1840a223c8bcffbea971f54adbff7231774ad4527254ad188dd26552173407cc49a9917c333e4f07f820b0c934895dba088f857c3478a315d8ebef36951f86b60e5d972fa8e6462c9dd933c2b138e9508139fe5e34c91749ea67b992a18c5a3e140851c3f6a191a522e2e3cfef9dcabdb8ad8f19283d73d92b872e0952c2972238561f58845a687d8e1", &(0x7f00000003c0)=""/67, 0x8, 0x0, 0x99, 0x65, &(0x7f0000000440)="46e96311410bc33c114e265ed3e43af97900774ff2a18af37d5ca09e87aee87b2f9a19de4b0327540f698edcd16c9c4cc56c079767c605f457456df2f2968f187532e44f08593ccbbb04a548113a5f6d55eeaa95edb9b9aad4edebf82906887c65bfb9a47f884e6efc1368421379795bef8878423a63fbdc657a393bee53899b71638ec045856fb96d4fbc2595ad3e728476200170c6bdb907", &(0x7f0000000500)="ad4219770975666f68776f7d2bf857b50495507df2b58e371363bfa5a2564ee8fbe87b236c37984f44564901c9c3cf89f9abfa095489e81d6d45e1d469be56158f1ed26cdb24dd33c729ae888fa53668e337e02733d8fb56acc4ef85966851927393add68b", 0x2, 0x0, 0x9}, 0x50) socket$igmp(0x2, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0xd6, 0x5, 0x47, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0xb}, 0x48) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 268.05011ms ago: executing program 1 (id=7531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080214000001080211000000505050505050"], 0x3c}}, 0x10) 223.254518ms ago: executing program 1 (id=7532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000280)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r3, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x1}, 0x6) write(r0, &(0x7f0000000600)="050000d0a8b2d07ec4b5253f178e824fb6eaf68db5ff8b44953554fc62c5ec5a7b14bb5a00aff4e1a84c183517947fcdf597d081bc7e02ab2954a00c031bd335bb1a20c65c834e55561ac09f64d03a558b1d89185a1593dd7dd90c16cbb025408741c5d570c18327328f8d1939dadc", 0x6f) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000000a0a010100000000000000000a00009f7748794d2e4c7bd6f77ffb0100737aad31000000000c0010"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c801}, 0x24000000) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r9, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r10, 0x89f7, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xbe, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYRES8=r2], 0x38}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004800600030076657468315f6d61637674617000000008000140000000050b00070066696c746572"], 0xf4}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 185.118668ms ago: executing program 0 (id=7533): recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {0x0}, {&(0x7f0000004300)=""/214, 0xd6}], 0x3}, 0x4}], 0x1, 0x23, 0x0) r0 = socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}}, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) preadv(r3, &(0x7f0000001200)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) 132.952726ms ago: executing program 4 (id=7534): r0 = socket$inet(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000700000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400000020000b000000000b00000000000000ed0400190033000000ca1b1b740dea47a82065c285004ec60688426dbed8be8e167bc029e07d081d604a95191e26dec1f2933d3d28"], 0x24}}, 0x48850) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x1e, 0x0, 0x4, 0x7, 0x10800, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1, 0x0, 0x0, @void, @value, @value=r0}, 0x50) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$inet(r9, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r10, &(0x7f0000000000), &(0x7f00000000c0)=""/109, 0x18}, 0x20) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) (async) sendto$inet6(r9, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) (async) setsockopt$inet6_buf(r7, 0x29, 0xcd, &(0x7f0000000100)="339fa6d300d77add2c233966072f85aec8a8a81753269416add12259134f696b9b19882c69b53053359ce3b4a9eb3db323e7b02d68a254cb13ff5f3db7ad1d97861dd1800935b0f95a3559b81492f09e15aafd6ea57db0c745cfb0f4", 0x5c) (async) socket$netlink(0x10, 0x3, 0x0) 92.828266ms ago: executing program 4 (id=7535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYBLOB="cac4fe4d4e47b5fa8d40f019925bf1bea1867344df3a1bb4ec224e6cfe4d798ca734be27facfbbcd0d31dad7e6ca45ee91b44faa35d5f9ac23270c2e0247", @ANYRESHEX=r0, @ANYRES8=r0], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYBLOB="cac4fe4d4e47b5fa8d40f019925bf1bea1867344df3a1bb4ec224e6cfe4d798ca734be27facfbbcd0d31dad7e6ca45ee91b44faa35d5f9ac23270c2e0247", @ANYRESHEX=r0, @ANYRES8=r0], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000050000000000000000711251000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ac00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x3, @loopback, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@rthdrdstopts={{0xf0, 0x29, 0x37, {0x1d, 0x1a, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3f}, @calipso={0x7, 0x48, {0x316a22652971bced, 0x10, 0x8, 0xf443, [0xc, 0x100000000, 0x2, 0xd1, 0x7, 0x5, 0xff, 0x7]}}, @calipso={0x7, 0x58, {0x0, 0x14, 0x2, 0x2, [0x0, 0xfff, 0x5, 0x80000000, 0x1d0, 0x8, 0x2, 0xfffffffffffff001, 0x40, 0x3]}}, @enc_lim={0x4, 0x1, 0xea}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x30}}}], 0x108}}], 0x1, 0x400c404) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c00048018000180080001006c6f67000c00028008000640000000210900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}}, 0x20000080) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c00048018000180080001006c6f67000c00028008000640000000210900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}}, 0x20000080) 71.226477ms ago: executing program 0 (id=7536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0x4}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x440c0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x8000) 0s ago: executing program 2 (id=7537): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x8000002}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001200)="01", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)="cf", 0x1}], 0x1}}], 0x2, 0x24000005) (fail_nth: 2) kernel console output (not intermixed with test programs): [1, 0] type 2 family 0 port 6081 - 0 [ 535.039067][T25370] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6468'. [ 535.122280][T25250] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.134385][T25374] netlink: 'syz.3.6469': attribute type 1 has an invalid length. [ 535.246279][T25383] 8021q: adding VLAN 0 to HW filter on device bond3 [ 535.255519][T25383] bond2: (slave bond3): making interface the new active one [ 535.263364][T25383] bond2: (slave bond3): Enslaving as an active interface with an up link [ 535.560906][T25250] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 535.582212][T25250] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 535.598525][T25250] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 535.620926][T25250] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 535.781105][T25250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.831721][T25250] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.860964][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.868194][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.898651][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.905876][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.431643][T25250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.596205][T25250] veth0_vlan: entered promiscuous mode [ 536.645696][T25250] veth1_vlan: entered promiscuous mode [ 536.769379][T25250] veth0_macvtap: entered promiscuous mode [ 536.790150][T25250] veth1_macvtap: entered promiscuous mode [ 536.804831][T20029] Bluetooth: hci2: command tx timeout [ 536.923460][T25250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.009986][T25250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.055398][ T3564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.085822][ T3564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.116897][ T3564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.165551][ T3564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.204792][T25490] __nla_validate_parse: 13 callbacks suppressed [ 537.204813][T25490] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6506'. [ 537.306889][T25497] netlink: 'syz.3.6505': attribute type 1 has an invalid length. [ 537.311087][T25496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6509'. [ 537.593159][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.606934][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.679441][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.697822][T25510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.700493][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.975984][T25521] block nbd1: server does not support multiple connections per device. [ 537.989978][T25521] block nbd1: shutting down sockets [ 538.034908][T25525] warn_alloc: 4 callbacks suppressed [ 538.034929][T25525] syz.0.6518: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 538.084603][T25525] CPU: 0 UID: 0 PID: 25525 Comm: syz.0.6518 Not tainted syzkaller #0 PREEMPT(full) [ 538.084633][T25525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 538.084646][T25525] Call Trace: [ 538.084655][T25525] [ 538.084665][T25525] dump_stack_lvl+0x189/0x250 [ 538.084699][T25525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.084727][T25525] ? __pfx__printk+0x10/0x10 [ 538.084749][T25525] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 538.084787][T25525] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 538.084818][T25525] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 538.084850][T25525] warn_alloc+0x214/0x310 [ 538.084880][T25525] ? stack_depot_save_flags+0x40/0x860 [ 538.084916][T25525] ? __pfx_warn_alloc+0x10/0x10 [ 538.084948][T25525] ? kasan_save_track+0x3e/0x80 [ 538.084974][T25525] ? __kasan_kmalloc+0x93/0xb0 [ 538.085005][T25525] ? xsk_setsockopt+0x4dc/0x8d0 [ 538.085028][T25525] ? do_sock_setsockopt+0x17c/0x1b0 [ 538.085048][T25525] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 538.085067][T25525] ? do_syscall_64+0xfa/0xfa0 [ 538.085096][T25525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.085125][T25525] __vmalloc_node_range_noprof+0x125/0x12d0 [ 538.085188][T25525] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 538.085222][T25525] ? __kasan_kmalloc+0x93/0xb0 [ 538.085259][T25525] vmalloc_user_noprof+0xad/0xf0 [ 538.085288][T25525] ? xskq_create+0xbf/0x170 [ 538.085317][T25525] xskq_create+0xbf/0x170 [ 538.085346][T25525] xsk_init_queue+0xb0/0x110 [ 538.085375][T25525] xsk_setsockopt+0x4dc/0x8d0 [ 538.085403][T25525] ? __pfx_xsk_setsockopt+0x10/0x10 [ 538.085430][T25525] ? __pfx_aa_sk_perm+0x10/0x10 [ 538.085461][T25525] ? aa_sock_opt_perm+0xff/0x1b0 [ 538.085494][T25525] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 538.085514][T25525] ? __pfx_xsk_setsockopt+0x10/0x10 [ 538.085542][T25525] do_sock_setsockopt+0x17c/0x1b0 [ 538.085570][T25525] __x64_sys_setsockopt+0x13f/0x1b0 [ 538.085598][T25525] do_syscall_64+0xfa/0xfa0 [ 538.085624][T25525] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.085653][T25525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.085674][T25525] ? clear_bhb_loop+0x60/0xb0 [ 538.085697][T25525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.085717][T25525] RIP: 0033:0x7f12c518f749 [ 538.085736][T25525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.085756][T25525] RSP: 002b:00007f12c6019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 538.085785][T25525] RAX: ffffffffffffffda RBX: 00007f12c53e5fa0 RCX: 00007f12c518f749 [ 538.085801][T25525] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 538.085814][T25525] RBP: 00007f12c5213f91 R08: 0000000000000004 R09: 0000000000000000 [ 538.085826][T25525] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.085838][T25525] R13: 00007f12c53e6038 R14: 00007f12c53e5fa0 R15: 00007fff4b26fce8 [ 538.085872][T25525] [ 538.086898][T25525] Mem-Info: [ 538.270733][T25528] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6518'. [ 538.368301][T25525] active_anon:3858 inactive_anon:0 isolated_anon:0 [ 538.368301][T25525] active_file:3608 inactive_file:40083 isolated_file:0 [ 538.368301][T25525] unevictable:768 dirty:186 writeback:0 [ 538.368301][T25525] slab_reclaimable:12128 slab_unreclaimable:118688 [ 538.368301][T25525] mapped:27363 shmem:1356 pagetables:1036 [ 538.368301][T25525] sec_pagetables:0 bounce:0 [ 538.368301][T25525] kernel_misc_reclaimable:0 [ 538.368301][T25525] free:1308725 free_pcp:12178 free_cma:0 [ 538.484931][T25525] Node 0 active_anon:15132kB inactive_anon:0kB active_file:14432kB inactive_file:160128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:109452kB dirty:744kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12472kB pagetables:3792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 538.544420][T25525] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 538.626224][T25525] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 538.744330][T25525] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 538.775605][T25525] Node 0 DMA32 free:1340108kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15332kB inactive_anon:0kB active_file:14432kB inactive_file:160128kB unevictable:1536kB writepending:744kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:30608kB local_pcp:20900kB free_cma:0kB [ 538.844795][T25525] lowmem_reserve[]: 0 0 0 0 0 [ 538.849579][T25525] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 538.881783][T25525] lowmem_reserve[]: 0 0 0 0 0 [ 538.884044][T20029] Bluetooth: hci2: command tx timeout [ 538.887808][T25525] Node 1 Normal free:3890360kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18092kB local_pcp:8508kB free_cma:0kB [ 539.000979][T25525] lowmem_reserve[]: 0 0 0 0 0 [ 539.011953][T25525] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 539.025365][T25525] Node 0 DMA32: 570*4kB (UM) 554*8kB (UME) 326*16kB (ME) 204*32kB (UME) 117*64kB (ME) 69*128kB (UM) 219*256kB (UME) 99*512kB (UME) 45*1024kB (UM) 9*2048kB (UM) 277*4096kB (UM) = 1340632kB [ 539.045028][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 539.046675][T15971] syz_tun (unregistering): left allmulticast mode [ 539.055617][T25525] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 539.070398][T25525] Node 1 Normal: 196*4kB (U) 53*8kB (UME) 50*16kB (UME) 77*32kB (UME) 29*64kB (UME) 8*128kB (UME) 2*256kB (M) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3890360kB [ 539.088852][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 539.094657][T25525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 539.106066][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 539.109652][T25525] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 539.117529][T15971] syz_tun (unregistering): left promiscuous mode [ 539.129866][T15971] bridge0: port 4(syz_tun) entered disabled state [ 539.137246][T25525] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 539.148444][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 539.158373][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 539.170441][T25525] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 539.182222][T25525] 45045 total pagecache pages [ 539.187120][T25525] 0 pages in swap cache [ 539.191301][T25525] Free swap = 124996kB [ 539.195547][T25525] Total swap = 124996kB [ 539.199735][T25525] 2097051 pages RAM [ 539.211918][T25525] 0 pages HighMem/MovableOnly [ 539.219326][T25525] 424122 pages reserved [ 539.224944][T25525] 0 pages cma reserved [ 539.387000][ T1163] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.405446][ T1163] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.498163][T25550] wlan0 speed is unknown, defaulting to 1000 [ 539.602760][ T1163] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.616505][ T1163] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.634542][T25577] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 539.816516][ T1163] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.849164][ T1163] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.349733][T25602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6546'. [ 540.362282][ T1163] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.373725][ T1163] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.623755][ T1163] dummy0: left allmulticast mode [ 540.642025][ T1163] bridge0: port 3(dummy0) entered disabled state [ 540.667952][ T1163] bridge_slave_1: left allmulticast mode [ 540.673752][ T1163] bridge_slave_1: left promiscuous mode [ 540.681036][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.697488][ T1163] bridge_slave_0: left allmulticast mode [ 540.703326][ T1163] bridge_slave_0: left promiscuous mode [ 540.710019][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.967305][ T5847] Bluetooth: hci2: command tx timeout [ 541.204798][ T5847] Bluetooth: hci0: command tx timeout [ 541.407404][ T1163] bond1 (unregistering): Released all slaves [ 541.420858][ T1163] bond2 (unregistering): Released all slaves [ 541.527485][ T1163] bond3 (unregistering): Released all slaves [ 541.631860][ T1163] bond4 (unregistering): (slave veth3): Releasing active interface [ 541.641379][ T1163] bond4 (unregistering): Released all slaves [ 541.655030][ T1163] bond5 (unregistering): Released all slaves [ 541.762428][ T1163] bond0 (unregistering): Released all slaves [ 541.801207][T25550] chnl_net:caif_netlink_parms(): no params data found [ 541.953737][ T1163] tipc: Disabling bearer [ 541.959327][ T1163] tipc: Disabling bearer [ 541.975062][ T1163] tipc: Left network mode [ 542.142591][ T1163] IPVS: stopping backup sync thread 19662 ... [ 542.280760][T25661] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6565'. [ 542.332547][T25550] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.362371][T25550] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.373090][T25550] bridge_slave_0: entered allmulticast mode [ 542.382259][T25550] bridge_slave_0: entered promiscuous mode [ 542.406230][T25550] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.422432][T25550] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.432923][T25550] bridge_slave_1: entered allmulticast mode [ 542.442172][T25550] bridge_slave_1: entered promiscuous mode [ 542.629013][T25550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.681790][T25550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.781002][ T1163] hsr_slave_0: left promiscuous mode [ 542.791945][ T1163] hsr_slave_1: left promiscuous mode [ 542.800302][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.822018][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.833060][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.840790][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.843096][T25688] openvswitch: netlink: Key type 36 is out of range max 32 [ 542.895979][ T1163] veth1_macvtap: left promiscuous mode [ 542.907520][ T1163] veth0_macvtap: left promiscuous mode [ 542.913235][ T1163] veth1_vlan: left promiscuous mode [ 542.918876][ T1163] veth0_vlan: left promiscuous mode [ 542.942423][T25695] netlink: 'syz.3.6578': attribute type 8 has an invalid length. [ 542.954633][T25695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6578'. [ 543.017177][ T1163] pimreg3 (unregistering): left allmulticast mode [ 543.284594][ T5847] Bluetooth: hci0: command tx timeout [ 543.351411][T25704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6579'. [ 543.435096][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 543.477149][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 543.791299][T25692] team_slave_0: entered promiscuous mode [ 543.797074][T25692] team_slave_1: entered promiscuous mode [ 543.804106][T25692] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 543.841141][T25693] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 543.874651][T25550] team0: Port device team_slave_0 added [ 543.892046][T25550] team0: Port device team_slave_1 added [ 543.932287][T25706] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 544.094716][T25550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.120461][T25550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.150130][T25550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.167604][T25550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.184410][T25550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.211870][T25550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.343258][T25550] hsr_slave_0: entered promiscuous mode [ 544.349857][T25550] hsr_slave_1: entered promiscuous mode [ 544.356498][T25550] debugfs: 'hsr0' already exists in 'hsr' [ 544.362343][T25550] Cannot create hsr debugfs directory [ 544.385556][T25732] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6586'. [ 544.423484][ T1163] IPVS: stop unused estimator thread 0... [ 544.510467][T25739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6589'. [ 544.587182][T25741] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6590'. [ 544.631956][T25743] netlink: 'syz.2.6591': attribute type 2 has an invalid length. [ 544.685340][T25747] openvswitch: netlink: Duplicate key (type 1). [ 544.870527][T25754] bond2: option miimon: invalid value (18446744073709551585) [ 544.878378][T25754] bond2: option miimon: allowed values 0 - 2147483647 [ 544.888802][T25754] bond2 (unregistering): Released all slaves [ 544.988770][T25550] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 545.008918][T25550] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 545.027895][T25550] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 545.043016][T25550] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 545.091578][T25768] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6598'. [ 545.101684][T25768] ip6tnl0: Caught tx_queue_len zero misconfig [ 545.253702][T25550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.316706][T25550] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.331829][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.339037][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.369101][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.376396][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.469546][T25791] sctp: [Deprecated]: syz.2.6601 (pid 25791) Use of int in max_burst socket option. [ 545.469546][T25791] Use struct sctp_assoc_value instead [ 545.509012][T25794] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6605'. [ 545.559592][T25794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6605'. [ 545.880293][T25550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.906060][T25813] team_slave_0: entered promiscuous mode [ 545.911807][T25813] team_slave_1: entered promiscuous mode [ 545.927175][T25813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6609'. [ 545.935083][T25817] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 545.940248][T25815] xt_hashlimit: max too large, truncated to 1048576 [ 546.032112][T25550] veth0_vlan: entered promiscuous mode [ 546.054168][T25550] veth1_vlan: entered promiscuous mode [ 546.098181][T25550] veth0_macvtap: entered promiscuous mode [ 546.131509][T25550] veth1_macvtap: entered promiscuous mode [ 546.179700][T25550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.210957][T25550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.275369][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.322807][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.369244][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.394524][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.566073][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.598688][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.598776][T25844] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 546.700184][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.714812][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.074113][T25869] netlink: 'syz.3.6627': attribute type 1 has an invalid length. [ 547.249689][T25876] 8021q: adding VLAN 0 to HW filter on device bond6 [ 547.260422][T25876] bond5: (slave bond6): making interface the new active one [ 547.268993][T25876] bond5: (slave bond6): Enslaving as an active interface with an up link [ 547.360489][T25869] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 547.386334][T25894] 8021q: adding VLAN 0 to HW filter on device bond5 [ 547.563010][T25902] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 547.585404][T25906] FAULT_INJECTION: forcing a failure. [ 547.585404][T25906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.653878][T25906] CPU: 0 UID: 0 PID: 25906 Comm: syz.1.6637 Not tainted syzkaller #0 PREEMPT(full) [ 547.653907][T25906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.653918][T25906] Call Trace: [ 547.653926][T25906] [ 547.653934][T25906] dump_stack_lvl+0x189/0x250 [ 547.653966][T25906] ? __pfx____ratelimit+0x10/0x10 [ 547.653994][T25906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.654021][T25906] ? __pfx__printk+0x10/0x10 [ 547.654042][T25906] ? __might_fault+0xb0/0x130 [ 547.654083][T25906] should_fail_ex+0x414/0x560 [ 547.654126][T25906] _copy_from_iter+0x1de/0x1790 [ 547.654156][T25906] ? rcu_is_watching+0x15/0xb0 [ 547.654184][T25906] ? kmalloc_reserve+0xbd/0x290 [ 547.654204][T25906] ? __pfx__copy_from_iter+0x10/0x10 [ 547.654229][T25906] ? __build_skb_around+0x262/0x3f0 [ 547.654255][T25906] ? netlink_sendmsg+0x642/0xb30 [ 547.654274][T25906] ? skb_put+0x11b/0x210 [ 547.654298][T25906] netlink_sendmsg+0x6b2/0xb30 [ 547.654329][T25906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.654354][T25906] ? aa_sock_msg_perm+0xf1/0x1d0 [ 547.654385][T25906] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 547.654405][T25906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.654427][T25906] __sock_sendmsg+0x21c/0x270 [ 547.654457][T25906] ____sys_sendmsg+0x505/0x830 [ 547.654486][T25906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 547.654518][T25906] ? import_iovec+0x74/0xa0 [ 547.654547][T25906] ___sys_sendmsg+0x21f/0x2a0 [ 547.654571][T25906] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.654627][T25906] ? __fget_files+0x2a/0x420 [ 547.654646][T25906] ? __fget_files+0x3a0/0x420 [ 547.654675][T25906] __x64_sys_sendmsg+0x19b/0x260 [ 547.654700][T25906] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 547.654733][T25906] ? __pfx_ksys_write+0x10/0x10 [ 547.654762][T25906] ? do_syscall_64+0xbe/0xfa0 [ 547.654794][T25906] do_syscall_64+0xfa/0xfa0 [ 547.654821][T25906] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.654849][T25906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.654869][T25906] ? clear_bhb_loop+0x60/0xb0 [ 547.654893][T25906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.654913][T25906] RIP: 0033:0x7f22e878f749 [ 547.654931][T25906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.654949][T25906] RSP: 002b:00007f22e95fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.654971][T25906] RAX: ffffffffffffffda RBX: 00007f22e89e5fa0 RCX: 00007f22e878f749 [ 547.654987][T25906] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 547.655000][T25906] RBP: 00007f22e95fa090 R08: 0000000000000000 R09: 0000000000000000 [ 547.655013][T25906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.655026][T25906] R13: 00007f22e89e6038 R14: 00007f22e89e5fa0 R15: 00007ffce51ea3f8 [ 547.655060][T25906] [ 547.994151][T25916] __nla_validate_parse: 3 callbacks suppressed [ 547.994171][T25916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6641'. [ 548.087538][T25920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6640'. [ 548.097195][T25920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6640'. [ 548.113825][T25920] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6640'. [ 548.114907][T25923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6645'. [ 548.199864][T25916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.276908][T25924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.285129][T25938] FAULT_INJECTION: forcing a failure. [ 548.285129][T25938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.291228][T25924] bond1: (slave bond0): Enslaving as an active interface with an up link [ 548.301837][T25938] CPU: 0 UID: 0 PID: 25938 Comm: syz.2.6646 Not tainted syzkaller #0 PREEMPT(full) [ 548.301865][T25938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 548.301878][T25938] Call Trace: [ 548.301887][T25938] [ 548.301896][T25938] dump_stack_lvl+0x189/0x250 [ 548.301927][T25938] ? __pfx____ratelimit+0x10/0x10 [ 548.301952][T25938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 548.301978][T25938] ? __pfx__printk+0x10/0x10 [ 548.301997][T25938] ? __might_fault+0xb0/0x130 [ 548.302036][T25938] should_fail_ex+0x414/0x560 [ 548.302070][T25938] _copy_from_user+0x2d/0xb0 [ 548.302104][T25938] get_timespec64+0x8e/0x1a0 [ 548.302123][T25938] ? __pfx_get_timespec64+0x10/0x10 [ 548.302142][T25938] ? __fget_files+0x3a0/0x420 [ 548.302169][T25938] __se_sys_ppoll+0xce/0x260 [ 548.302200][T25938] ? __pfx___se_sys_ppoll+0x10/0x10 [ 548.302228][T25938] ? __pfx_ksys_write+0x10/0x10 [ 548.302259][T25938] ? do_syscall_64+0xbe/0xfa0 [ 548.302285][T25938] ? __x64_sys_ppoll+0x20/0xc0 [ 548.302315][T25938] do_syscall_64+0xfa/0xfa0 [ 548.302340][T25938] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.302368][T25938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.302387][T25938] ? clear_bhb_loop+0x60/0xb0 [ 548.302410][T25938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.302429][T25938] RIP: 0033:0x7fadcb18f749 [ 548.302446][T25938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.302464][T25938] RSP: 002b:00007fadc93d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 548.302484][T25938] RAX: ffffffffffffffda RBX: 00007fadcb3e6090 RCX: 00007fadcb18f749 [ 548.302498][T25938] RDX: 00002000000001c0 RSI: 0000000000000002 RDI: 0000200000000100 [ 548.302512][T25938] RBP: 00007fadc93d5090 R08: 0000000000000000 R09: 0000000000000000 [ 548.302524][T25938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.302537][T25938] R13: 00007fadcb3e6128 R14: 00007fadcb3e6090 R15: 00007ffd390d55e8 [ 548.302569][T25938] [ 548.462158][T25943] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6647'. [ 548.647109][T25929] bond1 (unregistering): (slave bond0): Releasing backup interface [ 548.657208][T25929] bond1 (unregistering): Released all slaves [ 548.930395][T25956] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6652'. [ 548.990306][T25960] FAULT_INJECTION: forcing a failure. [ 548.990306][T25960] name failslab, interval 1, probability 0, space 0, times 0 [ 549.028386][T25960] CPU: 1 UID: 0 PID: 25960 Comm: syz.2.6654 Not tainted syzkaller #0 PREEMPT(full) [ 549.028414][T25960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 549.028427][T25960] Call Trace: [ 549.028436][T25960] [ 549.028445][T25960] dump_stack_lvl+0x189/0x250 [ 549.028477][T25960] ? __pfx____ratelimit+0x10/0x10 [ 549.028506][T25960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.028533][T25960] ? __pfx__printk+0x10/0x10 [ 549.028560][T25960] ? __lock_acquire+0xab9/0xd20 [ 549.028588][T25960] should_fail_ex+0x414/0x560 [ 549.028624][T25960] should_failslab+0xa8/0x100 [ 549.028647][T25960] kmem_cache_alloc_noprof+0x74/0x6e0 [ 549.028676][T25960] ? skb_clone+0x212/0x3a0 [ 549.028705][T25960] skb_clone+0x212/0x3a0 [ 549.028732][T25960] __netlink_deliver_tap+0x404/0x850 [ 549.028768][T25960] ? netlink_deliver_tap+0x2e/0x1b0 [ 549.028790][T25960] netlink_deliver_tap+0x19c/0x1b0 [ 549.028811][T25960] netlink_unicast+0x7fa/0x9e0 [ 549.028850][T25960] ? __pfx_netlink_unicast+0x10/0x10 [ 549.028881][T25960] ? netlink_sendmsg+0x642/0xb30 [ 549.028900][T25960] ? skb_put+0x11b/0x210 [ 549.028924][T25960] netlink_sendmsg+0x805/0xb30 [ 549.028955][T25960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.028979][T25960] ? aa_sock_msg_perm+0xf1/0x1d0 [ 549.029011][T25960] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 549.029030][T25960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.029051][T25960] __sock_sendmsg+0x21c/0x270 [ 549.029082][T25960] ____sys_sendmsg+0x505/0x830 [ 549.029111][T25960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 549.029143][T25960] ? import_iovec+0x74/0xa0 [ 549.029172][T25960] ___sys_sendmsg+0x21f/0x2a0 [ 549.029196][T25960] ? __pfx____sys_sendmsg+0x10/0x10 [ 549.029259][T25960] ? __fget_files+0x2a/0x420 [ 549.029283][T25960] ? __fget_files+0x3a0/0x420 [ 549.029314][T25960] __x64_sys_sendmsg+0x19b/0x260 [ 549.029337][T25960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 549.029369][T25960] ? __pfx_ksys_write+0x10/0x10 [ 549.029399][T25960] ? do_syscall_64+0xbe/0xfa0 [ 549.029431][T25960] do_syscall_64+0xfa/0xfa0 [ 549.029457][T25960] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.029485][T25960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.029506][T25960] ? clear_bhb_loop+0x60/0xb0 [ 549.029530][T25960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.029549][T25960] RIP: 0033:0x7fadcb18f749 [ 549.029566][T25960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.029584][T25960] RSP: 002b:00007fadc93f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.029606][T25960] RAX: ffffffffffffffda RBX: 00007fadcb3e5fa0 RCX: 00007fadcb18f749 [ 549.029622][T25960] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 549.029635][T25960] RBP: 00007fadc93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 549.029647][T25960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.029660][T25960] R13: 00007fadcb3e6038 R14: 00007fadcb3e5fa0 R15: 00007ffd390d55e8 [ 549.029695][T25960] [ 549.514779][T25972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6661'. [ 549.646006][T25979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6663'. [ 549.769927][T25992] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6667'. [ 549.782086][T25992] tipc: Started in network mode [ 549.790249][T25992] tipc: Node identity 227cb901f887, cluster identity 4711 [ 549.814390][T25992] tipc: Enabled bearer , priority 0 [ 549.824771][T25994] syzkaller0: entered promiscuous mode [ 549.830276][T25994] syzkaller0: entered allmulticast mode [ 549.914219][T25996] tipc: Resetting bearer [ 549.956099][T25996] tipc: Disabling bearer [ 550.207196][T26019] lo: entered promiscuous mode [ 550.227767][T26019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.389208][T26034] openvswitch: netlink: Flow key attr not present in new flow. [ 550.467225][T26040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.722509][T26057] tipc: Started in network mode [ 550.744447][T26057] tipc: Node identity 7, cluster identity 4711 [ 550.750646][T26057] tipc: Node number set to 7 [ 551.214726][T26092] FAULT_INJECTION: forcing a failure. [ 551.214726][T26092] name failslab, interval 1, probability 0, space 0, times 0 [ 551.267926][T26092] CPU: 0 UID: 0 PID: 26092 Comm: syz.0.6699 Not tainted syzkaller #0 PREEMPT(full) [ 551.267954][T26092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.267967][T26092] Call Trace: [ 551.267975][T26092] [ 551.267985][T26092] dump_stack_lvl+0x189/0x250 [ 551.268017][T26092] ? __pfx____ratelimit+0x10/0x10 [ 551.268043][T26092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 551.268070][T26092] ? __pfx__printk+0x10/0x10 [ 551.268097][T26092] ? __pfx___might_resched+0x10/0x10 [ 551.268125][T26092] should_fail_ex+0x414/0x560 [ 551.268160][T26092] should_failslab+0xa8/0x100 [ 551.268183][T26092] kmem_cache_alloc_noprof+0x74/0x6e0 [ 551.268212][T26092] ? ovs_flow_alloc+0x24/0x1f0 [ 551.268241][T26092] ovs_flow_alloc+0x24/0x1f0 [ 551.268267][T26092] ovs_flow_cmd_new+0x1ee/0xd80 [ 551.268307][T26092] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 551.268392][T26092] ? rcu_is_watching+0x15/0xb0 [ 551.268420][T26092] ? __nla_parse+0x40/0x60 [ 551.268446][T26092] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 551.268483][T26092] genl_family_rcv_msg_doit+0x215/0x300 [ 551.268518][T26092] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 551.268557][T26092] ? bpf_lsm_capable+0x9/0x20 [ 551.268581][T26092] ? security_capable+0x7e/0x2e0 [ 551.268616][T26092] genl_rcv_msg+0x60e/0x790 [ 551.268649][T26092] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.268673][T26092] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 551.268703][T26092] ? __asan_memcpy+0x40/0x70 [ 551.268729][T26092] ? __pfx_ref_tracker_free+0x10/0x10 [ 551.268757][T26092] netlink_rcv_skb+0x208/0x470 [ 551.268775][T26092] ? __lock_acquire+0xab9/0xd20 [ 551.268802][T26092] ? __pfx_genl_rcv_msg+0x10/0x10 [ 551.268829][T26092] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 551.268870][T26092] ? down_read+0x1ad/0x2e0 [ 551.268894][T26092] genl_rcv+0x28/0x40 [ 551.268916][T26092] netlink_unicast+0x82f/0x9e0 [ 551.268959][T26092] ? __pfx_netlink_unicast+0x10/0x10 [ 551.268990][T26092] ? netlink_sendmsg+0x642/0xb30 [ 551.269009][T26092] ? skb_put+0x11b/0x210 [ 551.269033][T26092] netlink_sendmsg+0x805/0xb30 [ 551.269065][T26092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.269090][T26092] ? aa_sock_msg_perm+0xf1/0x1d0 [ 551.269122][T26092] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 551.269141][T26092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.269164][T26092] __sock_sendmsg+0x21c/0x270 [ 551.269195][T26092] ____sys_sendmsg+0x505/0x830 [ 551.269224][T26092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.269257][T26092] ? import_iovec+0x74/0xa0 [ 551.269287][T26092] ___sys_sendmsg+0x21f/0x2a0 [ 551.269312][T26092] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.269376][T26092] ? __fget_files+0x2a/0x420 [ 551.269394][T26092] ? __fget_files+0x3a0/0x420 [ 551.269425][T26092] __x64_sys_sendmsg+0x19b/0x260 [ 551.269452][T26092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 551.269486][T26092] ? __pfx_ksys_write+0x10/0x10 [ 551.269519][T26092] ? do_syscall_64+0xbe/0xfa0 [ 551.269552][T26092] do_syscall_64+0xfa/0xfa0 [ 551.269579][T26092] ? lockdep_hardirqs_on+0x9c/0x150 [ 551.269607][T26092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.269627][T26092] ? clear_bhb_loop+0x60/0xb0 [ 551.269651][T26092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.269669][T26092] RIP: 0033:0x7f12c518f749 [ 551.269686][T26092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.269705][T26092] RSP: 002b:00007f12c6019038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.269727][T26092] RAX: ffffffffffffffda RBX: 00007f12c53e5fa0 RCX: 00007f12c518f749 [ 551.269742][T26092] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 551.269756][T26092] RBP: 00007f12c6019090 R08: 0000000000000000 R09: 0000000000000000 [ 551.269770][T26092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.269783][T26092] R13: 00007f12c53e6038 R14: 00007f12c53e5fa0 R15: 00007fff4b26fce8 [ 551.269825][T26092] [ 551.813715][T26102] wlan0 speed is unknown, defaulting to 1000 [ 552.263573][T26135] FAULT_INJECTION: forcing a failure. [ 552.263573][T26135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.277278][T26135] CPU: 1 UID: 0 PID: 26135 Comm: syz.2.6716 Not tainted syzkaller #0 PREEMPT(full) [ 552.277306][T26135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 552.277319][T26135] Call Trace: [ 552.277328][T26135] [ 552.277337][T26135] dump_stack_lvl+0x189/0x250 [ 552.277369][T26135] ? __pfx____ratelimit+0x10/0x10 [ 552.277398][T26135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.277425][T26135] ? __pfx__printk+0x10/0x10 [ 552.277446][T26135] ? __might_fault+0xb0/0x130 [ 552.277487][T26135] should_fail_ex+0x414/0x560 [ 552.277522][T26135] _copy_from_iter+0x1de/0x1790 [ 552.277552][T26135] ? rcu_is_watching+0x15/0xb0 [ 552.277579][T26135] ? kmalloc_reserve+0xbd/0x290 [ 552.277599][T26135] ? __pfx__copy_from_iter+0x10/0x10 [ 552.277625][T26135] ? __build_skb_around+0x262/0x3f0 [ 552.277648][T26135] ? netlink_sendmsg+0x642/0xb30 [ 552.277667][T26135] ? skb_put+0x11b/0x210 [ 552.277691][T26135] netlink_sendmsg+0x6b2/0xb30 [ 552.277721][T26135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.277745][T26135] ? aa_sock_msg_perm+0xf1/0x1d0 [ 552.277777][T26135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 552.277796][T26135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.277818][T26135] __sock_sendmsg+0x21c/0x270 [ 552.277848][T26135] ____sys_sendmsg+0x505/0x830 [ 552.277877][T26135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.277908][T26135] ? import_iovec+0x74/0xa0 [ 552.277936][T26135] ___sys_sendmsg+0x21f/0x2a0 [ 552.277960][T26135] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.278021][T26135] ? __fget_files+0x2a/0x420 [ 552.278038][T26135] ? __fget_files+0x3a0/0x420 [ 552.278065][T26135] __x64_sys_sendmsg+0x19b/0x260 [ 552.278088][T26135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.278121][T26135] ? __pfx_ksys_write+0x10/0x10 [ 552.278152][T26135] ? do_syscall_64+0xbe/0xfa0 [ 552.278184][T26135] do_syscall_64+0xfa/0xfa0 [ 552.278211][T26135] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.278239][T26135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.278258][T26135] ? clear_bhb_loop+0x60/0xb0 [ 552.278282][T26135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.278301][T26135] RIP: 0033:0x7fadcb18f749 [ 552.278319][T26135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.278337][T26135] RSP: 002b:00007fadc93f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.278357][T26135] RAX: ffffffffffffffda RBX: 00007fadcb3e5fa0 RCX: 00007fadcb18f749 [ 552.278372][T26135] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 552.278385][T26135] RBP: 00007fadc93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 552.278398][T26135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.278410][T26135] R13: 00007fadcb3e6038 R14: 00007fadcb3e5fa0 R15: 00007ffd390d55e8 [ 552.278444][T26135] [ 552.715095][T26141] syzkaller0: entered promiscuous mode [ 552.720627][T26141] syzkaller0: entered allmulticast mode [ 552.989721][T26165] FAULT_INJECTION: forcing a failure. [ 552.989721][T26165] name failslab, interval 1, probability 0, space 0, times 0 [ 553.023320][T26165] CPU: 1 UID: 0 PID: 26165 Comm: syz.2.6729 Not tainted syzkaller #0 PREEMPT(full) [ 553.023348][T26165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 553.023361][T26165] Call Trace: [ 553.023370][T26165] [ 553.023379][T26165] dump_stack_lvl+0x189/0x250 [ 553.023411][T26165] ? __pfx____ratelimit+0x10/0x10 [ 553.023439][T26165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.023466][T26165] ? __pfx__printk+0x10/0x10 [ 553.023493][T26165] ? __lock_acquire+0xab9/0xd20 [ 553.023521][T26165] should_fail_ex+0x414/0x560 [ 553.023557][T26165] should_failslab+0xa8/0x100 [ 553.023580][T26165] kmem_cache_alloc_noprof+0x74/0x6e0 [ 553.023608][T26165] ? skb_clone+0x212/0x3a0 [ 553.023637][T26165] skb_clone+0x212/0x3a0 [ 553.023664][T26165] __netlink_deliver_tap+0x404/0x850 [ 553.023699][T26165] ? netlink_deliver_tap+0x2e/0x1b0 [ 553.023721][T26165] netlink_deliver_tap+0x19c/0x1b0 [ 553.023743][T26165] netlink_unicast+0x7fa/0x9e0 [ 553.023783][T26165] ? __pfx_netlink_unicast+0x10/0x10 [ 553.023810][T26165] ? netlink_sendmsg+0x642/0xb30 [ 553.023826][T26165] ? skb_put+0x11b/0x210 [ 553.023848][T26165] netlink_sendmsg+0x805/0xb30 [ 553.023876][T26165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.023899][T26165] ? aa_sock_msg_perm+0xf1/0x1d0 [ 553.023928][T26165] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 553.023954][T26165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.023974][T26165] __sock_sendmsg+0x21c/0x270 [ 553.024003][T26165] ____sys_sendmsg+0x505/0x830 [ 553.024030][T26165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.024059][T26165] ? import_iovec+0x74/0xa0 [ 553.024086][T26165] ___sys_sendmsg+0x21f/0x2a0 [ 553.024110][T26165] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.024172][T26165] ? __fget_files+0x2a/0x420 [ 553.024189][T26165] ? __fget_files+0x3a0/0x420 [ 553.024218][T26165] __x64_sys_sendmsg+0x19b/0x260 [ 553.024242][T26165] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 553.024273][T26165] ? __pfx_ksys_write+0x10/0x10 [ 553.024306][T26165] ? do_syscall_64+0xbe/0xfa0 [ 553.024339][T26165] do_syscall_64+0xfa/0xfa0 [ 553.024365][T26165] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.024393][T26165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.024412][T26165] ? clear_bhb_loop+0x60/0xb0 [ 553.024436][T26165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.024455][T26165] RIP: 0033:0x7fadcb18f749 [ 553.024473][T26165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.024491][T26165] RSP: 002b:00007fadc93f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.024513][T26165] RAX: ffffffffffffffda RBX: 00007fadcb3e5fa0 RCX: 00007fadcb18f749 [ 553.024528][T26165] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 553.024542][T26165] RBP: 00007fadc93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 553.024555][T26165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.024568][T26165] R13: 00007fadcb3e6038 R14: 00007fadcb3e5fa0 R15: 00007ffd390d55e8 [ 553.024603][T26165] [ 553.596188][T26186] __nla_validate_parse: 74 callbacks suppressed [ 553.596208][T26186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6736'. [ 553.660049][T26194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6737'. [ 553.665940][T26196] netlink: 'syz.4.6739': attribute type 62 has an invalid length. [ 553.966323][T26215] netlink: 'syz.2.6747': attribute type 23 has an invalid length. [ 554.162555][T26228] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6752'. [ 554.179833][T26228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6752'. [ 554.206607][T26228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6752'. [ 554.227096][T26233] netlink: 'syz.1.6753': attribute type 72 has an invalid length. [ 554.233937][T26228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6752'. [ 554.431391][T26245] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 554.761873][T26272] netlink: 'syz.0.6766': attribute type 72 has an invalid length. [ 555.176855][T26295] wlan0 speed is unknown, defaulting to 1000 [ 555.359528][T26304] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6780'. [ 555.405879][T26313] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6783'. [ 555.429303][T26314] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 555.678093][T26325] netlink: 300 bytes leftover after parsing attributes in process `syz.1.6788'. [ 555.791150][T26321] tipc: Enabled bearer , priority 0 [ 555.852406][T26321] syzkaller0: entered promiscuous mode [ 555.859733][T26321] syzkaller0: entered allmulticast mode [ 555.868322][T26320] tipc: Enabling of bearer rejected, already enabled [ 555.942387][T26320] tipc: Resetting bearer [ 555.972775][T26320] tipc: Disabling bearer [ 556.073200][T26355] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6796'. [ 556.225017][T26369] openvswitch: netlink: Flow actions attr not present in new flow. [ 556.701886][T26391] netlink: 'syz.0.6808': attribute type 1 has an invalid length. [ 556.799107][T26401] syzkaller1: entered promiscuous mode [ 556.805069][T26401] syzkaller1: entered allmulticast mode [ 557.321723][T26434] Bluetooth: MGMT ver 1.23 [ 557.450867][T26437] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 557.474400][T26437] bond1: option packets_per_slave: allowed values 0 - 65535 [ 557.496491][T26437] bond1 (unregistering): Released all slaves [ 557.826313][T26467] tipc: Can't bind to reserved service type 0 [ 557.962929][T26472] bond2: Removing last ns target with arp_interval on [ 558.079790][T26487] netlink: 'syz.3.6842': attribute type 1 has an invalid length. [ 558.107575][T26489] netlink: 'syz.3.6842': attribute type 1 has an invalid length. [ 558.167199][T26487] 8021q: adding VLAN 0 to HW filter on device bond7 [ 558.339641][T26506] ipt_REJECT: TCP_RESET invalid for non-tcp [ 558.378256][T26506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.666640][T26529] __nla_validate_parse: 3 callbacks suppressed [ 558.666658][T26529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6854'. [ 558.707383][T26529] veth0_macvtap: left promiscuous mode [ 558.912593][T26551] gtp0: entered promiscuous mode [ 558.922515][T26551] gtp0: entered allmulticast mode [ 558.936655][T26551] nbd: illegal input index 2958377 [ 559.217083][T26569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6868'. [ 559.288466][T26575] "syz.0.6870" (26575) uses obsolete ecb(arc4) skcipher [ 559.377111][T26583] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6873'. [ 559.425481][T26585] netlink: 'syz.4.6874': attribute type 1 has an invalid length. [ 559.468776][T26585] bond2: (slave gretap1): making interface the new active one [ 559.477151][T26585] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 559.666760][T26598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6880'. [ 559.717802][T26601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.799950][T26606] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 560.714913][T26645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 560.722195][T26645] IPv6: NLM_F_CREATE should be set when creating new route [ 561.089524][T26672] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 561.233598][T26682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6912'. [ 561.257743][T26685] netlink: 'syz.3.6914': attribute type 13 has an invalid length. [ 561.283663][T26685] gretap0: refused to change device tx_queue_len [ 561.308285][T26685] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 561.461906][T26700] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6916'. [ 561.605619][T26711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6921'. [ 562.053425][T26723] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.061320][T26723] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.121825][T26723] team_slave_0: left promiscuous mode [ 562.127252][T26738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.174045][T26723] team_slave_1: left promiscuous mode [ 562.249504][T26743] FAULT_INJECTION: forcing a failure. [ 562.249504][T26743] name failslab, interval 1, probability 0, space 0, times 0 [ 562.266233][T26743] CPU: 1 UID: 0 PID: 26743 Comm: syz.3.6933 Not tainted syzkaller #0 PREEMPT(full) [ 562.266261][T26743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 562.266274][T26743] Call Trace: [ 562.266283][T26743] [ 562.266292][T26743] dump_stack_lvl+0x189/0x250 [ 562.266324][T26743] ? __pfx____ratelimit+0x10/0x10 [ 562.266352][T26743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.266380][T26743] ? __pfx__printk+0x10/0x10 [ 562.266399][T26743] ? netlink_sendmsg+0x805/0xb30 [ 562.266422][T26743] ? __x64_sys_sendmsg+0x19b/0x260 [ 562.266444][T26743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.266474][T26743] should_fail_ex+0x414/0x560 [ 562.266511][T26743] should_failslab+0xa8/0x100 [ 562.266535][T26743] kmem_cache_alloc_noprof+0x74/0x6e0 [ 562.266564][T26743] ? skb_clone+0x212/0x3a0 [ 562.266593][T26743] skb_clone+0x212/0x3a0 [ 562.266620][T26743] __netlink_deliver_tap+0x404/0x850 [ 562.266656][T26743] ? netlink_deliver_tap+0x2e/0x1b0 [ 562.266679][T26743] netlink_deliver_tap+0x19c/0x1b0 [ 562.266702][T26743] netlink_sendskb+0x68/0x140 [ 562.266735][T26743] netlink_unicast+0x397/0x9e0 [ 562.266760][T26743] ? __asan_memcpy+0x40/0x70 [ 562.266797][T26743] ? __pfx_netlink_unicast+0x10/0x10 [ 562.266839][T26743] netlink_rcv_skb+0x28c/0x470 [ 562.266857][T26743] ? __lock_acquire+0xab9/0xd20 [ 562.266878][T26743] ? __pfx_genl_rcv_msg+0x10/0x10 [ 562.266905][T26743] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 562.266943][T26743] ? down_read+0x1ad/0x2e0 [ 562.266964][T26743] genl_rcv+0x28/0x40 [ 562.266986][T26743] netlink_unicast+0x82f/0x9e0 [ 562.267023][T26743] ? __pfx_netlink_unicast+0x10/0x10 [ 562.267061][T26743] ? netlink_sendmsg+0x642/0xb30 [ 562.267077][T26743] ? skb_put+0x11b/0x210 [ 562.267101][T26743] netlink_sendmsg+0x805/0xb30 [ 562.267130][T26743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.267154][T26743] ? aa_sock_msg_perm+0xf1/0x1d0 [ 562.267185][T26743] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 562.267204][T26743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.267225][T26743] __sock_sendmsg+0x21c/0x270 [ 562.267254][T26743] ____sys_sendmsg+0x505/0x830 [ 562.267283][T26743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 562.267315][T26743] ? import_iovec+0x74/0xa0 [ 562.267344][T26743] ___sys_sendmsg+0x21f/0x2a0 [ 562.267369][T26743] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.267434][T26743] ? __fget_files+0x2a/0x420 [ 562.267451][T26743] ? __fget_files+0x3a0/0x420 [ 562.267483][T26743] __x64_sys_sendmsg+0x19b/0x260 [ 562.267508][T26743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 562.267543][T26743] ? rcu_is_watching+0x15/0xb0 [ 562.267576][T26743] do_syscall_64+0xfa/0xfa0 [ 562.267603][T26743] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.267630][T26743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.267650][T26743] ? clear_bhb_loop+0x60/0xb0 [ 562.267675][T26743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.267695][T26743] RIP: 0033:0x7fc8f598f749 [ 562.267714][T26743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.267732][T26743] RSP: 002b:00007fc8f674d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.267754][T26743] RAX: ffffffffffffffda RBX: 00007fc8f5be5fa0 RCX: 00007fc8f598f749 [ 562.267770][T26743] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 562.267783][T26743] RBP: 00007fc8f674d090 R08: 0000000000000000 R09: 0000000000000000 [ 562.267795][T26743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 562.267807][T26743] R13: 00007fc8f5be6038 R14: 00007fc8f5be5fa0 R15: 00007ffc9c6b3c08 [ 562.267843][T26743] [ 562.700942][T26723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.715062][T26723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.817776][T26723] gtp0: left promiscuous mode [ 562.825509][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6931'. [ 562.845679][T26739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6931'. [ 562.854822][T26746] geneve3: entered promiscuous mode [ 562.875713][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.891763][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.926620][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6931'. [ 562.926685][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.946102][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.968474][ T3564] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.981240][ T3564] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.990280][ T3564] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.999743][ T3564] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.047367][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 563.070189][T26757] veth0: entered promiscuous mode [ 563.078800][T26757] veth0: left promiscuous mode [ 563.282788][T26768] openvswitch: netlink: Missing key (keys=40, expected=80) [ 563.540919][T26784] syzkaller1: entered promiscuous mode [ 563.550513][T26784] syzkaller1: entered allmulticast mode [ 563.710443][T26792] openvswitch: netlink: Missing valid actions attribute. [ 563.717896][T26792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.964255][T26809] openvswitch: netlink: Key 4 has unexpected len 2 expected 12 [ 564.130152][T26816] __nla_validate_parse: 5 callbacks suppressed [ 564.130179][T26816] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6960'. [ 564.174147][T26818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6961'. [ 564.242593][T26828] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6965'. [ 564.256974][T26824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6962'. [ 564.258141][T26825] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6963'. [ 564.307253][T26825] x_tables: duplicate underflow at hook 1 [ 564.544431][T26842] bond2: entered promiscuous mode [ 564.549624][T26842] bond2: entered allmulticast mode [ 564.555315][T26842] 8021q: adding VLAN 0 to HW filter on device bond2 [ 564.686446][T26858] netlink: 'syz.0.6975': attribute type 10 has an invalid length. [ 564.695020][T26858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6975'. [ 564.709689][T26860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6977'. [ 564.721316][T26858] dummy0: entered promiscuous mode [ 564.732541][T26858] bridge0: port 3(dummy0) entered blocking state [ 564.741841][T26858] bridge0: port 3(dummy0) entered disabled state [ 564.754572][T26858] dummy0: entered allmulticast mode [ 564.896294][T26871] xt_bpf: check failed: parse error [ 564.903045][T26871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6980'. [ 564.967174][ T5847] Bluetooth: hci2: command tx timeout [ 565.175507][T26888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6984'. [ 565.177857][T26889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6986'. [ 565.201873][T26888] : entered promiscuous mode [ 565.415108][T26894] netlink: 'syz.3.6989': attribute type 4 has an invalid length. [ 565.436378][T26894] netlink: 'syz.3.6989': attribute type 4 has an invalid length. [ 565.485319][T26905] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 565.575343][T26911] netlink: 'syz.3.6996': attribute type 11 has an invalid length. [ 565.589512][T26911] netlink: 'syz.3.6996': attribute type 11 has an invalid length. [ 566.049410][T26942] tun0: tun_chr_ioctl cmd 1074025675 [ 566.064021][T26942] tun0: persist disabled [ 567.112349][T27018] C: renamed from lo [ 567.276879][T27026] netlink: 'syz.2.7038': attribute type 1 has an invalid length. [ 567.347634][T27033] bond3: (slave gretap1): making interface the new active one [ 567.356407][T27033] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 567.966489][T27077] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 568.662992][T27122] FAULT_INJECTION: forcing a failure. [ 568.662992][T27122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.676571][T27122] CPU: 1 UID: 0 PID: 27122 Comm: syz.2.7075 Not tainted syzkaller #0 PREEMPT(full) [ 568.676598][T27122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.676610][T27122] Call Trace: [ 568.676627][T27122] [ 568.676635][T27122] dump_stack_lvl+0x189/0x250 [ 568.676667][T27122] ? __pfx____ratelimit+0x10/0x10 [ 568.676695][T27122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.676722][T27122] ? __pfx__printk+0x10/0x10 [ 568.676742][T27122] ? __might_fault+0xb0/0x130 [ 568.676779][T27122] should_fail_ex+0x414/0x560 [ 568.676811][T27122] _copy_from_user+0x2d/0xb0 [ 568.676835][T27122] ___sys_sendmsg+0x158/0x2a0 [ 568.676859][T27122] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.676913][T27122] ? __fget_files+0x2a/0x420 [ 568.676930][T27122] ? __fget_files+0x3a0/0x420 [ 568.676959][T27122] __x64_sys_sendmsg+0x19b/0x260 [ 568.676983][T27122] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 568.677016][T27122] ? __pfx_ksys_write+0x10/0x10 [ 568.677047][T27122] ? do_syscall_64+0xbe/0xfa0 [ 568.677080][T27122] do_syscall_64+0xfa/0xfa0 [ 568.677106][T27122] ? lockdep_hardirqs_on+0x9c/0x150 [ 568.677134][T27122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.677154][T27122] ? clear_bhb_loop+0x60/0xb0 [ 568.677178][T27122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.677197][T27122] RIP: 0033:0x7fadcb18f749 [ 568.677216][T27122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.677235][T27122] RSP: 002b:00007fadc93f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.677257][T27122] RAX: ffffffffffffffda RBX: 00007fadcb3e5fa0 RCX: 00007fadcb18f749 [ 568.677272][T27122] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 568.677286][T27122] RBP: 00007fadc93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 568.677300][T27122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.677312][T27122] R13: 00007fadcb3e6038 R14: 00007fadcb3e5fa0 R15: 00007ffd390d55e8 [ 568.677346][T27122] [ 568.915201][T27125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.921445][T27127] netlink: 'syz.4.7072': attribute type 1 has an invalid length. [ 568.977157][T27127] 8021q: adding VLAN 0 to HW filter on device bond3 [ 569.038051][T27127] 8021q: adding VLAN 0 to HW filter on device bond3 [ 569.047991][T27127] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 569.059484][T27127] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 569.060696][T27133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.138486][T27139] vlan2: entered allmulticast mode [ 569.143666][T27139] bond3: entered allmulticast mode [ 569.257965][T27146] xt_hashlimit: max too large, truncated to 1048576 [ 569.308454][T27134] veth3: entered promiscuous mode [ 569.323252][T27134] bond3: (slave veth3): Enslaving as an active interface with a down link [ 569.488561][T27160] FAULT_INJECTION: forcing a failure. [ 569.488561][T27160] name failslab, interval 1, probability 0, space 0, times 0 [ 569.501378][T27160] CPU: 1 UID: 0 PID: 27160 Comm: syz.0.7086 Not tainted syzkaller #0 PREEMPT(full) [ 569.501403][T27160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 569.501415][T27160] Call Trace: [ 569.501423][T27160] [ 569.501430][T27160] dump_stack_lvl+0x189/0x250 [ 569.501461][T27160] ? __pfx____ratelimit+0x10/0x10 [ 569.501487][T27160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.501513][T27160] ? __pfx__printk+0x10/0x10 [ 569.501540][T27160] ? __pfx___might_resched+0x10/0x10 [ 569.501562][T27160] ? fs_reclaim_acquire+0x7d/0x100 [ 569.501604][T27160] should_fail_ex+0x414/0x560 [ 569.501639][T27160] should_failslab+0xa8/0x100 [ 569.501661][T27160] kmem_cache_alloc_node_noprof+0x77/0x710 [ 569.501689][T27160] ? __alloc_skb+0x112/0x2d0 [ 569.501708][T27160] ? netlink_autobind+0xdb/0x300 [ 569.501734][T27160] __alloc_skb+0x112/0x2d0 [ 569.501758][T27160] netlink_sendmsg+0x5c6/0xb30 [ 569.501789][T27160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.501813][T27160] ? aa_sock_msg_perm+0xf1/0x1d0 [ 569.501844][T27160] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 569.501864][T27160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.501885][T27160] __sock_sendmsg+0x21c/0x270 [ 569.501916][T27160] ____sys_sendmsg+0x505/0x830 [ 569.501944][T27160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.501977][T27160] ? import_iovec+0x74/0xa0 [ 569.502006][T27160] ___sys_sendmsg+0x21f/0x2a0 [ 569.502031][T27160] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.502092][T27160] ? __fget_files+0x2a/0x420 [ 569.502111][T27160] ? __fget_files+0x3a0/0x420 [ 569.502187][T27160] __x64_sys_sendmsg+0x19b/0x260 [ 569.502214][T27160] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 569.502248][T27160] ? __pfx_ksys_write+0x10/0x10 [ 569.502280][T27160] ? do_syscall_64+0xbe/0xfa0 [ 569.502312][T27160] do_syscall_64+0xfa/0xfa0 [ 569.502339][T27160] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.502367][T27160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.502387][T27160] ? clear_bhb_loop+0x60/0xb0 [ 569.502412][T27160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.502432][T27160] RIP: 0033:0x7f12c518f749 [ 569.502450][T27160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.502469][T27160] RSP: 002b:00007f12c6019038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.502491][T27160] RAX: ffffffffffffffda RBX: 00007f12c53e5fa0 RCX: 00007f12c518f749 [ 569.502507][T27160] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 569.502520][T27160] RBP: 00007f12c6019090 R08: 0000000000000000 R09: 0000000000000000 [ 569.502533][T27160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.502547][T27160] R13: 00007f12c53e6038 R14: 00007f12c53e5fa0 R15: 00007fff4b26fce8 [ 569.502609][T27160] [ 569.519351][T27157] __nla_validate_parse: 16 callbacks suppressed [ 569.519371][T27157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7083'. [ 570.130908][T27188] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 570.581400][T27220] macvtap0: entered promiscuous mode [ 570.596949][T27220] vlan0: entered promiscuous mode [ 570.627623][T27220] macvtap0: entered allmulticast mode [ 570.647589][T27220] vlan0: entered allmulticast mode [ 570.667076][T27220] veth0_vlan: entered allmulticast mode [ 570.706389][T27224] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 570.836140][T27234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7111'. [ 571.023039][T27245] FAULT_INJECTION: forcing a failure. [ 571.023039][T27245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.048000][ T36] wlan0: Trigger new scan to find an IBSS to join [ 571.061402][T27246] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7114'. [ 571.061560][T27245] CPU: 1 UID: 0 PID: 27245 Comm: syz.1.7113 Not tainted syzkaller #0 PREEMPT(full) [ 571.061583][T27245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.061595][T27245] Call Trace: [ 571.061604][T27245] [ 571.061612][T27245] dump_stack_lvl+0x189/0x250 [ 571.061644][T27245] ? __pfx____ratelimit+0x10/0x10 [ 571.061671][T27245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.061697][T27245] ? __pfx__printk+0x10/0x10 [ 571.061716][T27245] ? __might_fault+0xb0/0x130 [ 571.061754][T27245] should_fail_ex+0x414/0x560 [ 571.061787][T27245] _copy_from_iter+0x1de/0x1790 [ 571.061817][T27245] ? rcu_is_watching+0x15/0xb0 [ 571.061843][T27245] ? kmalloc_reserve+0xbd/0x290 [ 571.061862][T27245] ? __pfx__copy_from_iter+0x10/0x10 [ 571.061886][T27245] ? __build_skb_around+0x262/0x3f0 [ 571.061908][T27245] ? netlink_sendmsg+0x642/0xb30 [ 571.061926][T27245] ? skb_put+0x11b/0x210 [ 571.061948][T27245] netlink_sendmsg+0x6b2/0xb30 [ 571.061976][T27245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.062000][T27245] ? aa_sock_msg_perm+0xf1/0x1d0 [ 571.062029][T27245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 571.062048][T27245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.062068][T27245] __sock_sendmsg+0x21c/0x270 [ 571.062098][T27245] ____sys_sendmsg+0x505/0x830 [ 571.062124][T27245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.062155][T27245] ? import_iovec+0x74/0xa0 [ 571.062182][T27245] ___sys_sendmsg+0x21f/0x2a0 [ 571.062205][T27245] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.062262][T27245] ? __fget_files+0x2a/0x420 [ 571.062280][T27245] ? __fget_files+0x3a0/0x420 [ 571.062309][T27245] __x64_sys_sendmsg+0x19b/0x260 [ 571.062333][T27245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 571.062364][T27245] ? __pfx_ksys_write+0x10/0x10 [ 571.062395][T27245] ? do_syscall_64+0xbe/0xfa0 [ 571.062426][T27245] do_syscall_64+0xfa/0xfa0 [ 571.062452][T27245] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.062485][T27245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.062504][T27245] ? clear_bhb_loop+0x60/0xb0 [ 571.062527][T27245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.062546][T27245] RIP: 0033:0x7f22e878f749 [ 571.062563][T27245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.062579][T27245] RSP: 002b:00007f22e95fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.062599][T27245] RAX: ffffffffffffffda RBX: 00007f22e89e5fa0 RCX: 00007f22e878f749 [ 571.062614][T27245] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 571.062627][T27245] RBP: 00007f22e95fa090 R08: 0000000000000000 R09: 0000000000000000 [ 571.062639][T27245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.062651][T27245] R13: 00007f22e89e6038 R14: 00007f22e89e5fa0 R15: 00007ffce51ea3f8 [ 571.062683][T27245] [ 571.243659][T27254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7116'. [ 571.619892][T27278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7126'. [ 571.637736][T27279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7126'. [ 571.754874][T27290] FAULT_INJECTION: forcing a failure. [ 571.754874][T27290] name failslab, interval 1, probability 0, space 0, times 0 [ 571.770160][T27288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7130'. [ 571.782226][T27290] CPU: 0 UID: 0 PID: 27290 Comm: syz.1.7129 Not tainted syzkaller #0 PREEMPT(full) [ 571.782254][T27290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.782267][T27290] Call Trace: [ 571.782275][T27290] [ 571.782285][T27290] dump_stack_lvl+0x189/0x250 [ 571.782315][T27290] ? __pfx____ratelimit+0x10/0x10 [ 571.782343][T27290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.782368][T27290] ? __pfx__printk+0x10/0x10 [ 571.782395][T27290] ? __lock_acquire+0xab9/0xd20 [ 571.782431][T27290] should_fail_ex+0x414/0x560 [ 571.782467][T27290] should_failslab+0xa8/0x100 [ 571.782491][T27290] kmem_cache_alloc_noprof+0x74/0x6e0 [ 571.782519][T27290] ? skb_clone+0x212/0x3a0 [ 571.782549][T27290] skb_clone+0x212/0x3a0 [ 571.782576][T27290] __netlink_deliver_tap+0x404/0x850 [ 571.782611][T27290] ? netlink_deliver_tap+0x2e/0x1b0 [ 571.782633][T27290] netlink_deliver_tap+0x19c/0x1b0 [ 571.782654][T27290] netlink_unicast+0x7fa/0x9e0 [ 571.782693][T27290] ? __pfx_netlink_unicast+0x10/0x10 [ 571.782725][T27290] ? netlink_sendmsg+0x642/0xb30 [ 571.782744][T27290] ? skb_put+0x11b/0x210 [ 571.782768][T27290] netlink_sendmsg+0x805/0xb30 [ 571.782800][T27290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.782825][T27290] ? aa_sock_msg_perm+0xf1/0x1d0 [ 571.782857][T27290] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 571.782877][T27290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.782899][T27290] __sock_sendmsg+0x21c/0x270 [ 571.782930][T27290] ____sys_sendmsg+0x505/0x830 [ 571.782959][T27290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.782990][T27290] ? import_iovec+0x74/0xa0 [ 571.783019][T27290] ___sys_sendmsg+0x21f/0x2a0 [ 571.783043][T27290] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.783099][T27290] ? __fget_files+0x2a/0x420 [ 571.783117][T27290] ? __fget_files+0x3a0/0x420 [ 571.783145][T27290] __x64_sys_sendmsg+0x19b/0x260 [ 571.783168][T27290] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 571.783207][T27290] ? do_syscall_64+0xbe/0xfa0 [ 571.783238][T27290] do_syscall_64+0xfa/0xfa0 [ 571.783264][T27290] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.783290][T27290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.783309][T27290] ? clear_bhb_loop+0x60/0xb0 [ 571.783330][T27290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.783348][T27290] RIP: 0033:0x7f22e878f749 [ 571.783367][T27290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.783383][T27290] RSP: 002b:00007f22e95fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.783409][T27290] RAX: ffffffffffffffda RBX: 00007f22e89e5fa0 RCX: 00007f22e878f749 [ 571.783424][T27290] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 571.783436][T27290] RBP: 00007f22e95fa090 R08: 0000000000000000 R09: 0000000000000000 [ 571.783449][T27290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.783461][T27290] R13: 00007f22e89e6038 R14: 00007f22e89e5fa0 R15: 00007ffce51ea3f8 [ 571.783495][T27290] [ 571.845282][T27290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.870531][T27293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.119464][T27298] FAULT_INJECTION: forcing a failure. [ 572.119464][T27298] name failslab, interval 1, probability 0, space 0, times 0 [ 572.132492][T27298] CPU: 0 UID: 0 PID: 27298 Comm: syz.4.7134 Not tainted syzkaller #0 PREEMPT(full) [ 572.132518][T27298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 572.132531][T27298] Call Trace: [ 572.132539][T27298] [ 572.132548][T27298] dump_stack_lvl+0x189/0x250 [ 572.132580][T27298] ? __pfx____ratelimit+0x10/0x10 [ 572.132608][T27298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 572.132633][T27298] ? __pfx__printk+0x10/0x10 [ 572.132659][T27298] ? __lock_acquire+0xab9/0xd20 [ 572.132687][T27298] should_fail_ex+0x414/0x560 [ 572.132723][T27298] should_failslab+0xa8/0x100 [ 572.132745][T27298] kmem_cache_alloc_noprof+0x74/0x6e0 [ 572.132773][T27298] ? skb_clone+0x212/0x3a0 [ 572.132798][T27298] skb_clone+0x212/0x3a0 [ 572.132821][T27298] __netlink_deliver_tap+0x404/0x850 [ 572.132851][T27298] ? netlink_deliver_tap+0x2e/0x1b0 [ 572.132872][T27298] netlink_deliver_tap+0x19c/0x1b0 [ 572.132892][T27298] netlink_unicast+0x7fa/0x9e0 [ 572.132924][T27298] ? __pfx_netlink_unicast+0x10/0x10 [ 572.132954][T27298] ? netlink_sendmsg+0x642/0xb30 [ 572.132973][T27298] ? skb_put+0x11b/0x210 [ 572.132994][T27298] netlink_sendmsg+0x805/0xb30 [ 572.133025][T27298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.133050][T27298] ? aa_sock_msg_perm+0xf1/0x1d0 [ 572.133081][T27298] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 572.133102][T27298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.133124][T27298] __sock_sendmsg+0x21c/0x270 [ 572.133154][T27298] ____sys_sendmsg+0x505/0x830 [ 572.133183][T27298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.133214][T27298] ? import_iovec+0x74/0xa0 [ 572.133243][T27298] ___sys_sendmsg+0x21f/0x2a0 [ 572.133268][T27298] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.133331][T27298] ? __fget_files+0x2a/0x420 [ 572.133350][T27298] ? __fget_files+0x3a0/0x420 [ 572.133389][T27298] __x64_sys_sendmsg+0x19b/0x260 [ 572.133416][T27298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.133449][T27298] ? __pfx_ksys_write+0x10/0x10 [ 572.133482][T27298] ? do_syscall_64+0xbe/0xfa0 [ 572.133515][T27298] do_syscall_64+0xfa/0xfa0 [ 572.133542][T27298] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.133571][T27298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.133589][T27298] ? clear_bhb_loop+0x60/0xb0 [ 572.133614][T27298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.133632][T27298] RIP: 0033:0x7f9e5a58f749 [ 572.133651][T27298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.133669][T27298] RSP: 002b:00007f9e5b496038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.133691][T27298] RAX: ffffffffffffffda RBX: 00007f9e5a7e5fa0 RCX: 00007f9e5a58f749 [ 572.133706][T27298] RDX: 0000000004000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 572.133720][T27298] RBP: 00007f9e5b496090 R08: 0000000000000000 R09: 0000000000000000 [ 572.133733][T27298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.133746][T27298] R13: 00007f9e5a7e6038 R14: 00007f9e5a7e5fa0 R15: 00007ffc891cb8a8 [ 572.133783][T27298] [ 572.427530][T27299] netlink: 8228 bytes leftover after parsing attributes in process `syz.0.7136'. [ 572.437099][T27299] openvswitch: netlink: Flow key attr not present in new flow. [ 572.695711][T27317] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7143'. [ 572.842861][T27330] openvswitch: netlink: Flow key attr not present in new flow. [ 572.959133][T27336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.990112][T27340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7153'. [ 573.088109][T27346] tipc: Failed to obtain node identity [ 573.098979][T27346] tipc: Enabling of bearer rejected, failed to enable media [ 573.240824][T27357] sctp: [Deprecated]: syz.0.7161 (pid 27357) Use of int in max_burst socket option. [ 573.240824][T27357] Use struct sctp_assoc_value instead [ 573.267572][T27358] sctp: [Deprecated]: syz.0.7161 (pid 27358) Use of int in max_burst socket option. [ 573.267572][T27358] Use struct sctp_assoc_value instead [ 573.334002][T27357] dvmrp0: entered allmulticast mode [ 573.475806][T27367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.704080][T27380] : renamed from veth1_vlan (while UP) [ 573.745874][T27383] delete_channel: no stack [ 574.008404][T27395] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 574.031864][T27395] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 574.039963][T27395] gretap2: entered promiscuous mode [ 574.045395][T27395] gretap2: entered allmulticast mode [ 574.115868][T27406] openvswitch: netlink: Message has 8 unknown bytes. [ 574.377047][T27422] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 574.451007][T27427] netlink: 'syz.1.7188': attribute type 1 has an invalid length. [ 574.538919][T27428] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 574.598651][T27440] __nla_validate_parse: 7 callbacks suppressed [ 574.598671][T27440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7191'. [ 574.606659][T27433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 574.621550][T27441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7188'. [ 574.634378][T27433] bond1: (slave bond2): making interface the new active one [ 574.643439][T27433] bond1: (slave bond2): Enslaving as an active interface with an up link [ 574.667553][T27435] bridge2: entered promiscuous mode [ 574.672899][T27435] bridge2: entered allmulticast mode [ 574.675589][T27443] FAULT_INJECTION: forcing a failure. [ 574.675589][T27443] name failslab, interval 1, probability 0, space 0, times 0 [ 574.684032][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 574.695376][T27443] CPU: 1 UID: 0 PID: 27443 Comm: syz.3.7193 Not tainted syzkaller #0 PREEMPT(full) [ 574.695403][T27443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 574.695414][T27443] Call Trace: [ 574.695423][T27443] [ 574.695431][T27443] dump_stack_lvl+0x189/0x250 [ 574.695463][T27443] ? __pfx____ratelimit+0x10/0x10 [ 574.695490][T27443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.695516][T27443] ? __pfx__printk+0x10/0x10 [ 574.695533][T27443] ? kasan_save_track+0x4f/0x80 [ 574.695568][T27443] ? __nla_validate_parse+0x2400/0x2d40 [ 574.695589][T27443] ? ___sys_sendmsg+0x21f/0x2a0 [ 574.695608][T27443] ? __x64_sys_sendmsg+0x19b/0x260 [ 574.695633][T27443] should_fail_ex+0x414/0x560 [ 574.695667][T27443] should_failslab+0xa8/0x100 [ 574.695688][T27443] kmem_cache_alloc_node_noprof+0x77/0x710 [ 574.695716][T27443] ? __alloc_skb+0x112/0x2d0 [ 574.695741][T27443] __alloc_skb+0x112/0x2d0 [ 574.695763][T27443] hsr_get_node_list+0x2cc/0xa80 [ 574.695792][T27443] ? hsr_get_node_list+0xe9/0xa80 [ 574.695823][T27443] ? __pfx_hsr_get_node_list+0x10/0x10 [ 574.695852][T27443] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 574.695888][T27443] genl_family_rcv_msg_doit+0x215/0x300 [ 574.695921][T27443] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 574.695971][T27443] genl_rcv_msg+0x60e/0x790 [ 574.696003][T27443] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.696027][T27443] ? __pfx_hsr_get_node_list+0x10/0x10 [ 574.696053][T27443] ? __asan_memcpy+0x40/0x70 [ 574.696077][T27443] ? __pfx_ref_tracker_free+0x10/0x10 [ 574.696105][T27443] netlink_rcv_skb+0x208/0x470 [ 574.696122][T27443] ? __lock_acquire+0xab9/0xd20 [ 574.696141][T27443] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.696168][T27443] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.696214][T27443] ? down_read+0x1ad/0x2e0 [ 574.696236][T27443] genl_rcv+0x28/0x40 [ 574.696258][T27443] netlink_unicast+0x82f/0x9e0 [ 574.696297][T27443] ? __pfx_netlink_unicast+0x10/0x10 [ 574.696327][T27443] ? netlink_sendmsg+0x642/0xb30 [ 574.696344][T27443] ? skb_put+0x11b/0x210 [ 574.696367][T27443] netlink_sendmsg+0x805/0xb30 [ 574.696397][T27443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.696422][T27443] ? aa_sock_msg_perm+0xf1/0x1d0 [ 574.696453][T27443] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.696469][T27443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.696490][T27443] __sock_sendmsg+0x21c/0x270 [ 574.696520][T27443] ____sys_sendmsg+0x505/0x830 [ 574.696547][T27443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.696579][T27443] ? import_iovec+0x74/0xa0 [ 574.696608][T27443] ___sys_sendmsg+0x21f/0x2a0 [ 574.696632][T27443] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.696693][T27443] ? __fget_files+0x2a/0x420 [ 574.696711][T27443] ? __fget_files+0x3a0/0x420 [ 574.696745][T27443] __x64_sys_sendmsg+0x19b/0x260 [ 574.696771][T27443] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.696803][T27443] ? __pfx_ksys_write+0x10/0x10 [ 574.696835][T27443] ? do_syscall_64+0xbe/0xfa0 [ 574.696867][T27443] do_syscall_64+0xfa/0xfa0 [ 574.696893][T27443] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.696920][T27443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.696939][T27443] ? clear_bhb_loop+0x60/0xb0 [ 574.696964][T27443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.696982][T27443] RIP: 0033:0x7fc8f598f749 [ 574.697000][T27443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.697019][T27443] RSP: 002b:00007fc8f674d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.697040][T27443] RAX: ffffffffffffffda RBX: 00007fc8f5be5fa0 RCX: 00007fc8f598f749 [ 574.697055][T27443] RDX: 0000000004000040 RSI: 0000200000000000 RDI: 0000000000000003 [ 574.697068][T27443] RBP: 00007fc8f674d090 R08: 0000000000000000 R09: 0000000000000000 [ 574.697081][T27443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.697093][T27443] R13: 00007fc8f5be6038 R14: 00007fc8f5be5fa0 R15: 00007ffc9c6b3c08 [ 574.697127][T27443] [ 574.917405][T27447] netlink: 'syz.3.7194': attribute type 10 has an invalid length. [ 574.922388][ T36] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 574.975480][ T12] wlan0: Trigger new scan to find an IBSS to join [ 574.996899][T27427] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 575.155998][T27441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.191525][T27433] vlan1: entered promiscuous mode [ 575.197960][T27433] bond1: entered promiscuous mode [ 575.203107][T27433] bond2: entered promiscuous mode [ 575.257273][T27447] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 575.277272][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 575.373881][T27455] : renamed from hsr0 (while UP) [ 575.410958][ T36] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 575.496519][T27470] FAULT_INJECTION: forcing a failure. [ 575.496519][T27470] name failslab, interval 1, probability 0, space 0, times 0 [ 575.526072][T27470] CPU: 0 UID: 0 PID: 27470 Comm: syz.0.7201 Not tainted syzkaller #0 PREEMPT(full) [ 575.526098][T27470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.526109][T27470] Call Trace: [ 575.526116][T27470] [ 575.526124][T27470] dump_stack_lvl+0x189/0x250 [ 575.526162][T27470] ? __pfx____ratelimit+0x10/0x10 [ 575.526189][T27470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.526215][T27470] ? __pfx__printk+0x10/0x10 [ 575.526237][T27470] ? __pfx___might_resched+0x10/0x10 [ 575.526260][T27470] ? fs_reclaim_acquire+0x7d/0x100 [ 575.526297][T27470] should_fail_ex+0x414/0x560 [ 575.526331][T27470] should_failslab+0xa8/0x100 [ 575.526352][T27470] __kmalloc_cache_noprof+0x6f/0x6f0 [ 575.526378][T27470] ? ovs_flow_cmd_new+0x294/0xd80 [ 575.526412][T27470] ovs_flow_cmd_new+0x294/0xd80 [ 575.526448][T27470] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 575.526529][T27470] ? rcu_is_watching+0x15/0xb0 [ 575.526558][T27470] ? __nla_parse+0x40/0x60 [ 575.526585][T27470] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 575.526622][T27470] genl_family_rcv_msg_doit+0x215/0x300 [ 575.526654][T27470] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 575.526692][T27470] ? bpf_lsm_capable+0x9/0x20 [ 575.526716][T27470] ? security_capable+0x7e/0x2e0 [ 575.526748][T27470] genl_rcv_msg+0x60e/0x790 [ 575.526781][T27470] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.526803][T27470] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 575.526842][T27470] netlink_rcv_skb+0x208/0x470 [ 575.526858][T27470] ? __lock_acquire+0xab9/0xd20 [ 575.526878][T27470] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.526903][T27470] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.526942][T27470] ? down_read+0x1ad/0x2e0 [ 575.526965][T27470] genl_rcv+0x28/0x40 [ 575.526987][T27470] netlink_unicast+0x82f/0x9e0 [ 575.527028][T27470] ? __pfx_netlink_unicast+0x10/0x10 [ 575.527060][T27470] ? netlink_sendmsg+0x642/0xb30 [ 575.527077][T27470] ? skb_put+0x11b/0x210 [ 575.527099][T27470] netlink_sendmsg+0x805/0xb30 [ 575.527128][T27470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.527157][T27470] ? aa_sock_msg_perm+0xf1/0x1d0 [ 575.527186][T27470] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 575.527203][T27470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.527224][T27470] __sock_sendmsg+0x21c/0x270 [ 575.527253][T27470] ____sys_sendmsg+0x505/0x830 [ 575.527278][T27470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.527309][T27470] ? import_iovec+0x74/0xa0 [ 575.527337][T27470] ___sys_sendmsg+0x21f/0x2a0 [ 575.527362][T27470] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.527421][T27470] ? __fget_files+0x2a/0x420 [ 575.527439][T27470] ? __fget_files+0x3a0/0x420 [ 575.527469][T27470] __x64_sys_sendmsg+0x19b/0x260 [ 575.527494][T27470] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 575.527529][T27470] ? __pfx_ksys_write+0x10/0x10 [ 575.527560][T27470] ? do_syscall_64+0xbe/0xfa0 [ 575.527594][T27470] do_syscall_64+0xfa/0xfa0 [ 575.527620][T27470] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.527647][T27470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.527665][T27470] ? clear_bhb_loop+0x60/0xb0 [ 575.527688][T27470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.527707][T27470] RIP: 0033:0x7f12c518f749 [ 575.527724][T27470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.527741][T27470] RSP: 002b:00007f12c6019038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.527763][T27470] RAX: ffffffffffffffda RBX: 00007f12c53e5fa0 RCX: 00007f12c518f749 [ 575.527779][T27470] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 575.527793][T27470] RBP: 00007f12c6019090 R08: 0000000000000000 R09: 0000000000000000 [ 575.527805][T27470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.527817][T27470] R13: 00007f12c53e6038 R14: 00007f12c53e5fa0 R15: 00007fff4b26fce8 [ 575.527851][T27470] [ 575.532787][T27473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7202'. [ 575.681599][T27479] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 575.943199][T27483] Bluetooth: MGMT ver 1.23 [ 575.950289][ T8452] wlan0: Creating new IBSS network, BSSID b6:be:3c:28:a8:f4 [ 576.234891][T27499] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7212'. [ 576.309930][T27506] FAULT_INJECTION: forcing a failure. [ 576.309930][T27506] name failslab, interval 1, probability 0, space 0, times 0 [ 576.345829][T27506] CPU: 1 UID: 0 PID: 27506 Comm: syz.1.7214 Not tainted syzkaller #0 PREEMPT(full) [ 576.345857][T27506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.345870][T27506] Call Trace: [ 576.345879][T27506] [ 576.345888][T27506] dump_stack_lvl+0x189/0x250 [ 576.345920][T27506] ? __pfx____ratelimit+0x10/0x10 [ 576.345948][T27506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.345975][T27506] ? __pfx__printk+0x10/0x10 [ 576.345998][T27506] ? __pfx___might_resched+0x10/0x10 [ 576.346021][T27506] ? fs_reclaim_acquire+0x7d/0x100 [ 576.346057][T27506] should_fail_ex+0x414/0x560 [ 576.346093][T27506] should_failslab+0xa8/0x100 [ 576.346115][T27506] __kmalloc_cache_noprof+0x6f/0x6f0 [ 576.346142][T27506] ? ovs_flow_cmd_new+0x294/0xd80 [ 576.346173][T27506] ovs_flow_cmd_new+0x294/0xd80 [ 576.346199][T27506] ? netlink_deliver_tap+0x19c/0x1b0 [ 576.346229][T27506] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 576.346322][T27506] ? rcu_is_watching+0x15/0xb0 [ 576.346350][T27506] ? __nla_parse+0x40/0x60 [ 576.346377][T27506] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 576.346413][T27506] genl_family_rcv_msg_doit+0x215/0x300 [ 576.346448][T27506] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 576.346489][T27506] ? bpf_lsm_capable+0x9/0x20 [ 576.346514][T27506] ? security_capable+0x7e/0x2e0 [ 576.346558][T27506] genl_rcv_msg+0x60e/0x790 [ 576.346595][T27506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.346620][T27506] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 576.346651][T27506] ? __asan_memcpy+0x40/0x70 [ 576.346677][T27506] ? __pfx_ref_tracker_free+0x10/0x10 [ 576.346706][T27506] netlink_rcv_skb+0x208/0x470 [ 576.346725][T27506] ? __lock_acquire+0xab9/0xd20 [ 576.346746][T27506] ? __pfx_genl_rcv_msg+0x10/0x10 [ 576.346774][T27506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 576.346815][T27506] ? down_read+0x1ad/0x2e0 [ 576.346837][T27506] genl_rcv+0x28/0x40 [ 576.346858][T27506] netlink_unicast+0x82f/0x9e0 [ 576.346896][T27506] ? __pfx_netlink_unicast+0x10/0x10 [ 576.346926][T27506] ? netlink_sendmsg+0x642/0xb30 [ 576.346944][T27506] ? skb_put+0x11b/0x210 [ 576.346968][T27506] netlink_sendmsg+0x805/0xb30 [ 576.346998][T27506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.347021][T27506] ? aa_sock_msg_perm+0xf1/0x1d0 [ 576.347051][T27506] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 576.347069][T27506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.347090][T27506] __sock_sendmsg+0x21c/0x270 [ 576.347120][T27506] ____sys_sendmsg+0x505/0x830 [ 576.347149][T27506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 576.347182][T27506] ? import_iovec+0x74/0xa0 [ 576.347212][T27506] ___sys_sendmsg+0x21f/0x2a0 [ 576.347238][T27506] ? __pfx____sys_sendmsg+0x10/0x10 [ 576.347302][T27506] ? __fget_files+0x2a/0x420 [ 576.347326][T27506] ? __fget_files+0x3a0/0x420 [ 576.347357][T27506] __x64_sys_sendmsg+0x19b/0x260 [ 576.347382][T27506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 576.347416][T27506] ? __pfx_ksys_write+0x10/0x10 [ 576.347449][T27506] ? do_syscall_64+0xbe/0xfa0 [ 576.347483][T27506] do_syscall_64+0xfa/0xfa0 [ 576.347511][T27506] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.347538][T27506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.347558][T27506] ? clear_bhb_loop+0x60/0xb0 [ 576.347582][T27506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.347607][T27506] RIP: 0033:0x7f22e878f749 [ 576.347626][T27506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.347643][T27506] RSP: 002b:00007f22e95fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.347666][T27506] RAX: ffffffffffffffda RBX: 00007f22e89e5fa0 RCX: 00007f22e878f749 [ 576.347681][T27506] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 576.347694][T27506] RBP: 00007f22e95fa090 R08: 0000000000000000 R09: 0000000000000000 [ 576.347706][T27506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.347718][T27506] R13: 00007f22e89e6038 R14: 00007f22e89e5fa0 R15: 00007ffce51ea3f8 [ 576.347750][T27506] [ 576.754102][T27510] vlan2: entered promiscuous mode [ 576.759384][T27510] bridge0: entered promiscuous mode [ 576.828559][T27509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7216'. [ 576.839366][T27509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7216'. [ 576.858586][T27509] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7216'. [ 576.915889][T27519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7219'. [ 576.947686][T27518] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 577.041231][T27526] netlink: 'syz.2.7222': attribute type 5 has an invalid length. [ 577.245894][T27544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7227'. [ 577.428579][T27556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7230'. [ 578.368583][T27611] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 578.472657][T27623] netlink: 'syz.3.7254': attribute type 1 has an invalid length. [ 578.852048][T27642] netlink: 'syz.2.7260': attribute type 5 has an invalid length. [ 578.940473][T27644] netlink: 'syz.4.7261': attribute type 1 has an invalid length. [ 579.090497][T27655] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 579.496345][T27675] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20001 [ 579.569033][T27686] tipc: Enabled bearer , priority 0 [ 579.577278][T27686] syzkaller0: entered promiscuous mode [ 579.583234][T27686] syzkaller0: entered allmulticast mode [ 579.595484][T27686] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 579.658246][T27691] __nla_validate_parse: 10 callbacks suppressed [ 579.658264][T27691] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7279'. [ 579.678165][T27692] tipc: Resetting bearer [ 579.748014][T27696] syz.4.7281: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 579.763050][T27696] CPU: 0 UID: 0 PID: 27696 Comm: syz.4.7281 Not tainted syzkaller #0 PREEMPT(full) [ 579.763073][T27696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 579.763086][T27696] Call Trace: [ 579.763094][T27696] [ 579.763102][T27696] dump_stack_lvl+0x189/0x250 [ 579.763133][T27696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.763157][T27696] ? __pfx__printk+0x10/0x10 [ 579.763178][T27696] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 579.763206][T27696] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 579.763232][T27696] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 579.763261][T27696] warn_alloc+0x214/0x310 [ 579.763290][T27696] ? stack_depot_save_flags+0x40/0x860 [ 579.763322][T27696] ? __pfx_warn_alloc+0x10/0x10 [ 579.763354][T27696] ? kasan_save_track+0x3e/0x80 [ 579.763380][T27696] ? __kasan_kmalloc+0x93/0xb0 [ 579.763411][T27696] ? xsk_setsockopt+0x4dc/0x8d0 [ 579.763435][T27696] ? do_sock_setsockopt+0x17c/0x1b0 [ 579.763455][T27696] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 579.763475][T27696] ? do_syscall_64+0xfa/0xfa0 [ 579.763500][T27696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.763530][T27696] __vmalloc_node_range_noprof+0x125/0x12d0 [ 579.763590][T27696] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 579.763623][T27696] ? __kasan_kmalloc+0x93/0xb0 [ 579.763658][T27696] vmalloc_user_noprof+0xad/0xf0 [ 579.763686][T27696] ? xskq_create+0xbf/0x170 [ 579.763713][T27696] xskq_create+0xbf/0x170 [ 579.763743][T27696] xsk_init_queue+0xb0/0x110 [ 579.763775][T27696] xsk_setsockopt+0x4dc/0x8d0 [ 579.763800][T27696] ? __pfx_xsk_setsockopt+0x10/0x10 [ 579.763835][T27696] ? __pfx_aa_sk_perm+0x10/0x10 [ 579.763864][T27696] ? aa_sock_opt_perm+0xff/0x1b0 [ 579.763896][T27696] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 579.763915][T27696] ? __pfx_xsk_setsockopt+0x10/0x10 [ 579.763941][T27696] do_sock_setsockopt+0x17c/0x1b0 [ 579.763967][T27696] __x64_sys_setsockopt+0x13f/0x1b0 [ 579.763994][T27696] do_syscall_64+0xfa/0xfa0 [ 579.764019][T27696] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.764045][T27696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.764064][T27696] ? clear_bhb_loop+0x60/0xb0 [ 579.764088][T27696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.764108][T27696] RIP: 0033:0x7f9e5a58f749 [ 579.764126][T27696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.764144][T27696] RSP: 002b:00007f9e5b496038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 579.764166][T27696] RAX: ffffffffffffffda RBX: 00007f9e5a7e5fa0 RCX: 00007f9e5a58f749 [ 579.764181][T27696] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 579.764195][T27696] RBP: 00007f9e5b496090 R08: 0000000000000004 R09: 0000000000000000 [ 579.764208][T27696] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.764222][T27696] R13: 00007f9e5a7e6038 R14: 00007f9e5a7e5fa0 R15: 00007ffc891cb8a8 [ 579.764255][T27696] [ 580.055668][T27696] Mem-Info: [ 580.058841][T27696] active_anon:3940 inactive_anon:0 isolated_anon:0 [ 580.058841][T27696] active_file:3608 inactive_file:40102 isolated_file:0 [ 580.058841][T27696] unevictable:768 dirty:137 writeback:0 [ 580.058841][T27696] slab_reclaimable:12464 slab_unreclaimable:122690 [ 580.058841][T27696] mapped:29466 shmem:1356 pagetables:1058 [ 580.058841][T27696] sec_pagetables:0 bounce:0 [ 580.058841][T27696] kernel_misc_reclaimable:0 [ 580.058841][T27696] free:1305097 free_pcp:12521 free_cma:0 [ 580.105604][T27696] Node 0 active_anon:15760kB inactive_anon:0kB active_file:14432kB inactive_file:160204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117864kB dirty:548kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12924kB pagetables:4080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 580.137819][T27696] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 580.147270][T27701] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7281'. [ 580.168476][T27696] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 580.168547][T27696] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 580.168590][T27696] Node 0 DMA32 free:1314668kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15660kB inactive_anon:0kB active_file:14432kB inactive_file:160204kB unevictable:1536kB writepending:548kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:32184kB local_pcp:15680kB free_cma:0kB [ 580.248769][T27696] lowmem_reserve[]: 0 0 0 0 0 [ 580.253529][T27696] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 580.284259][T27696] lowmem_reserve[]: 0 0 0 0 0 [ 580.289020][T27696] Node 1 Normal free:3890360kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18088kB local_pcp:9580kB free_cma:0kB [ 580.321447][T27696] lowmem_reserve[]: 0 0 0 0 0 [ 580.326976][T27696] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 580.340328][T27696] Node 0 DMA32: 707*4kB (M) 146*8kB (M) 5*16kB (ME) 180*32kB (UME) 116*64kB (ME) 48*128kB (UME) 166*256kB (UME) 95*512kB (UME) 42*1024kB (UM) 11*2048kB (UM) 277*4096kB (UM) = 1314668kB [ 580.359181][T27696] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 580.370797][T27696] Node 1 Normal: 196*4kB (U) 53*8kB (UME) 50*16kB (UME) 77*32kB (UME) 29*64kB (UME) 8*128kB (UME) 2*256kB (M) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3890360kB [ 580.389893][T27696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 580.394697][T27684] tipc: Resetting bearer [ 580.399645][T27696] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 580.420844][T27696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 580.431009][T27696] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 580.440398][T27696] 45063 total pagecache pages [ 580.445219][T27696] 0 pages in swap cache [ 580.449389][T27696] Free swap = 124996kB [ 580.453628][T27696] Total swap = 124996kB [ 580.457972][T27696] 2097051 pages RAM [ 580.461923][T27696] 0 pages HighMem/MovableOnly [ 580.466845][T27696] 424122 pages reserved [ 580.471112][T27696] 0 pages cma reserved [ 580.475610][T27696] FAULT_INJECTION: forcing a failure. [ 580.475610][T27696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.490415][T27684] tipc: Disabling bearer [ 580.496310][T27696] CPU: 0 UID: 0 PID: 27696 Comm: syz.4.7281 Not tainted syzkaller #0 PREEMPT(full) [ 580.496336][T27696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.496349][T27696] Call Trace: [ 580.496357][T27696] [ 580.496367][T27696] dump_stack_lvl+0x189/0x250 [ 580.496399][T27696] ? __pfx____ratelimit+0x10/0x10 [ 580.496427][T27696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 580.496454][T27696] ? __pfx__printk+0x10/0x10 [ 580.496489][T27696] should_fail_ex+0x414/0x560 [ 580.496525][T27696] _copy_to_user+0x31/0xb0 [ 580.496553][T27696] simple_read_from_buffer+0xe1/0x170 [ 580.496588][T27696] proc_fail_nth_read+0x1b3/0x220 [ 580.496618][T27696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 580.496647][T27696] ? rw_verify_area+0x2a6/0x4d0 [ 580.496672][T27696] ? __lock_acquire+0xab9/0xd20 [ 580.496691][T27696] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 580.496717][T27696] vfs_read+0x200/0xa30 [ 580.496743][T27696] ? fdget_pos+0x247/0x320 [ 580.496767][T27696] ? __pfx___mutex_lock+0x10/0x10 [ 580.496797][T27696] ? __pfx_vfs_read+0x10/0x10 [ 580.496825][T27696] ? __fget_files+0x2a/0x420 [ 580.496848][T27696] ? __fget_files+0x3a0/0x420 [ 580.496866][T27696] ? __fget_files+0x2a/0x420 [ 580.496894][T27696] ksys_read+0x145/0x250 [ 580.496924][T27696] ? __pfx_ksys_read+0x10/0x10 [ 580.496956][T27696] ? do_syscall_64+0xbe/0xfa0 [ 580.496988][T27696] do_syscall_64+0xfa/0xfa0 [ 580.497014][T27696] ? lockdep_hardirqs_on+0x9c/0x150 [ 580.497042][T27696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.497068][T27696] ? clear_bhb_loop+0x60/0xb0 [ 580.497093][T27696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.497113][T27696] RIP: 0033:0x7f9e5a58e15c [ 580.497131][T27696] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 580.497151][T27696] RSP: 002b:00007f9e5b496030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 580.497172][T27696] RAX: ffffffffffffffda RBX: 00007f9e5a7e5fa0 RCX: 00007f9e5a58e15c [ 580.497188][T27696] RDX: 000000000000000f RSI: 00007f9e5b4960a0 RDI: 0000000000000006 [ 580.497202][T27696] RBP: 00007f9e5b496090 R08: 0000000000000000 R09: 0000000000000000 [ 580.497215][T27696] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.497229][T27696] R13: 00007f9e5a7e6038 R14: 00007f9e5a7e5fa0 R15: 00007ffc891cb8a8 [ 580.497264][T27696] [ 580.773673][ T7736] tipc: Node number set to 3673929985 [ 581.021205][T27724] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7291'. [ 581.243172][T27735] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7295'. [ 581.288962][T27739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7297'. [ 581.359469][T27748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7298'. [ 581.467712][T27753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7301'. [ 581.583266][T27762] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7305'. [ 581.837396][T27781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7310'. [ 581.882489][T27781] netlink: 'syz.1.7310': attribute type 1 has an invalid length. [ 581.903738][T27781] netlink: 'syz.1.7310': attribute type 2 has an invalid length. [ 581.945317][T27783] syzkaller1: entered promiscuous mode [ 581.950924][T27783] syzkaller1: entered allmulticast mode [ 582.031480][T27792] sock: sock_timestamping_bind_phc: sock not bind to device [ 582.044049][ T7741] IPVS: starting estimator thread 0... [ 582.093228][T27798] Cannot find add_set index 0 as target [ 582.133864][T27793] IPVS: using max 31 ests per chain, 74400 per kthread [ 582.766209][T27840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7335'. [ 583.176856][ T7736] IPVS: starting estimator thread 0... [ 583.185640][T27864] netlink: 'syz.1.7343': attribute type 17 has an invalid length. [ 583.203712][T27864] gretap0: entered promiscuous mode [ 583.231072][T27864] gretap0: left promiscuous mode [ 583.274282][T27868] IPVS: using max 28 ests per chain, 67200 per kthread [ 583.337153][T27872] syzkaller1: entered promiscuous mode [ 583.344372][T27872] syzkaller1: entered allmulticast mode [ 583.476584][T27886] netlink: 'syz.0.7351': attribute type 29 has an invalid length. [ 583.486134][T27886] netlink: 'syz.0.7351': attribute type 29 has an invalid length. [ 584.208478][T27939] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 584.299692][T27942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.405300][T27949] tipc: Enabling of bearer rejected, failed to enable media [ 584.500178][T27959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.604835][T27962] wlan0 speed is unknown, defaulting to 1000 [ 584.789024][T27977] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 584.814103][T27977] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 584.831538][T27977] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 584.879420][T27980] syzkaller1: entered promiscuous mode [ 584.885926][T27980] syzkaller1: entered allmulticast mode [ 585.065919][T27984] __nla_validate_parse: 14 callbacks suppressed [ 585.065937][T27984] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7384'. [ 586.058324][T28022] netlink: 'syz.4.7397': attribute type 1 has an invalid length. [ 586.084659][T28022] 8021q: adding VLAN 0 to HW filter on device bond4 [ 586.327750][T28032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7400'. [ 586.387808][T28037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7401'. [ 586.396998][T28036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7401'. [ 586.597474][T28051] netlink: 948 bytes leftover after parsing attributes in process `syz.1.7409'. [ 586.686094][T28057] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7411'. [ 586.825053][T28070] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7415'. [ 586.847039][T28070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7415'. [ 586.921251][T28072] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7417'. [ 586.989282][T28072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7417'. [ 587.263044][T28093] 8021q: VLANs not supported on sit0 [ 587.271806][T28093] netlink: 'syz.0.7420': attribute type 1 has an invalid length. [ 587.480488][T28104] FAULT_INJECTION: forcing a failure. [ 587.480488][T28104] name failslab, interval 1, probability 0, space 0, times 0 [ 587.507943][T28104] CPU: 0 UID: 0 PID: 28104 Comm: syz.3.7425 Not tainted syzkaller #0 PREEMPT(full) [ 587.507970][T28104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 587.507982][T28104] Call Trace: [ 587.507990][T28104] [ 587.507999][T28104] dump_stack_lvl+0x189/0x250 [ 587.508029][T28104] ? __pfx____ratelimit+0x10/0x10 [ 587.508055][T28104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.508081][T28104] ? __pfx__printk+0x10/0x10 [ 587.508107][T28104] ? __pfx___might_resched+0x10/0x10 [ 587.508134][T28104] should_fail_ex+0x414/0x560 [ 587.508167][T28104] should_failslab+0xa8/0x100 [ 587.508187][T28104] __kmalloc_noprof+0xcb/0x7f0 [ 587.508213][T28104] ? kfree+0x4d/0x6d0 [ 587.508235][T28104] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 587.508273][T28104] tomoyo_realpath_from_path+0xe3/0x5d0 [ 587.508306][T28104] ? tomoyo_domain+0xd9/0x130 [ 587.508339][T28104] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 587.508364][T28104] tomoyo_path_number_perm+0x1e8/0x5a0 [ 587.508392][T28104] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 587.508461][T28104] ? __fget_files+0x2a/0x420 [ 587.508486][T28104] ? __fget_files+0x3a0/0x420 [ 587.508504][T28104] ? __fget_files+0x2a/0x420 [ 587.508528][T28104] security_file_ioctl+0xcb/0x2d0 [ 587.508555][T28104] __se_sys_ioctl+0x47/0x170 [ 587.508582][T28104] do_syscall_64+0xfa/0xfa0 [ 587.508609][T28104] ? lockdep_hardirqs_on+0x9c/0x150 [ 587.508639][T28104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.508659][T28104] ? clear_bhb_loop+0x60/0xb0 [ 587.508683][T28104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.508703][T28104] RIP: 0033:0x7fc8f598f749 [ 587.508721][T28104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.508739][T28104] RSP: 002b:00007fc8f674d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.508761][T28104] RAX: ffffffffffffffda RBX: 00007fc8f5be5fa0 RCX: 00007fc8f598f749 [ 587.508777][T28104] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 587.508788][T28104] RBP: 00007fc8f674d090 R08: 0000000000000000 R09: 0000000000000000 [ 587.508802][T28104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.508815][T28104] R13: 00007fc8f5be6038 R14: 00007fc8f5be5fa0 R15: 00007ffc9c6b3c08 [ 587.508850][T28104] [ 587.508859][T28104] ERROR: Out of memory at tomoyo_realpath_from_path. [ 587.721904][T28115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.996147][T28127] C: renamed from team_slave_0 (while UP) [ 588.006204][T28127] netlink: 'syz.3.7436': attribute type 1 has an invalid length. [ 588.014934][T28127] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 588.128080][T28137] netlink: 'syz.3.7439': attribute type 4 has an invalid length. [ 588.422440][T28151] pim6reg: entered allmulticast mode [ 588.460026][T28147] netlink: 'syz.4.7443': attribute type 1 has an invalid length. [ 588.687967][T28173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.106862][T28207] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 589.151265][T28210] syzkaller0: entered promiscuous mode [ 589.178985][T28210] syzkaller0: entered allmulticast mode [ 589.436137][ T30] audit: type=1107 audit(1763737921.468:3): pid=28232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='k7w a\wan1viZJyDur,^}ז21!=Ĕ-S,if6L#>' [ 589.496218][T28237] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 589.536358][T28198] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 589.918254][T28241] netlink: 'syz.2.7473': attribute type 28 has an invalid length. [ 589.927690][T28241] netlink: 'syz.2.7473': attribute type 3 has an invalid length. [ 589.937526][T28241] netlink: 'syz.2.7473': attribute type 64 has an invalid length. [ 590.207272][T28261] FAULT_INJECTION: forcing a failure. [ 590.207272][T28261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.222493][T28261] CPU: 0 UID: 0 PID: 28261 Comm: syz.1.7478 Not tainted syzkaller #0 PREEMPT(full) [ 590.222523][T28261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 590.222537][T28261] Call Trace: [ 590.222546][T28261] [ 590.222556][T28261] dump_stack_lvl+0x189/0x250 [ 590.222589][T28261] ? __pfx____ratelimit+0x10/0x10 [ 590.222618][T28261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.222644][T28261] ? __pfx__printk+0x10/0x10 [ 590.222677][T28261] should_fail_ex+0x414/0x560 [ 590.222711][T28261] _copy_to_user+0x31/0xb0 [ 590.222740][T28261] simple_read_from_buffer+0xe1/0x170 [ 590.222774][T28261] proc_fail_nth_read+0x1b3/0x220 [ 590.222801][T28261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 590.222830][T28261] ? rw_verify_area+0x2a6/0x4d0 [ 590.222855][T28261] ? __lock_acquire+0xab9/0xd20 [ 590.222873][T28261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 590.222900][T28261] vfs_read+0x200/0xa30 [ 590.222925][T28261] ? fdget_pos+0x247/0x320 [ 590.222948][T28261] ? __pfx___mutex_lock+0x10/0x10 [ 590.222978][T28261] ? __pfx_vfs_read+0x10/0x10 [ 590.223005][T28261] ? __fget_files+0x2a/0x420 [ 590.223028][T28261] ? __fget_files+0x3a0/0x420 [ 590.223044][T28261] ? __fget_files+0x2a/0x420 [ 590.223073][T28261] ksys_read+0x145/0x250 [ 590.223097][T28261] ? __fget_files+0x2a/0x420 [ 590.223117][T28261] ? __pfx_ksys_read+0x10/0x10 [ 590.223152][T28261] ? do_syscall_64+0xbe/0xfa0 [ 590.223186][T28261] do_syscall_64+0xfa/0xfa0 [ 590.223213][T28261] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.223241][T28261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.223261][T28261] ? clear_bhb_loop+0x60/0xb0 [ 590.223285][T28261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.223305][T28261] RIP: 0033:0x7f22e878e15c [ 590.223324][T28261] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 590.223349][T28261] RSP: 002b:00007f22e95fa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 590.223372][T28261] RAX: ffffffffffffffda RBX: 00007f22e89e5fa0 RCX: 00007f22e878e15c [ 590.223387][T28261] RDX: 000000000000000f RSI: 00007f22e95fa0a0 RDI: 0000000000000003 [ 590.223400][T28261] RBP: 00007f22e95fa090 R08: 0000000000000000 R09: 0000000000000000 [ 590.223414][T28261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.223428][T28261] R13: 00007f22e89e6038 R14: 00007f22e89e5fa0 R15: 00007ffce51ea3f8 [ 590.223463][T28261] [ 590.586162][T28271] ip6t_srh: unknown srh match flags 5F28 [ 590.679625][T28280] warn_alloc: 1 callbacks suppressed [ 590.679643][T28280] syz.1.7483: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 590.703242][T28280] CPU: 0 UID: 0 PID: 28280 Comm: syz.1.7483 Not tainted syzkaller #0 PREEMPT(full) [ 590.703268][T28280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 590.703281][T28280] Call Trace: [ 590.703289][T28280] [ 590.703298][T28280] dump_stack_lvl+0x189/0x250 [ 590.703343][T28280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.703372][T28280] ? __pfx__printk+0x10/0x10 [ 590.703391][T28280] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 590.703416][T28280] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 590.703446][T28280] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 590.703478][T28280] warn_alloc+0x214/0x310 [ 590.703508][T28280] ? stack_depot_save_flags+0x40/0x860 [ 590.703542][T28280] ? __pfx_warn_alloc+0x10/0x10 [ 590.703575][T28280] ? kasan_save_track+0x3e/0x80 [ 590.703601][T28280] ? __kasan_kmalloc+0x93/0xb0 [ 590.703631][T28280] ? xsk_setsockopt+0x4dc/0x8d0 [ 590.703654][T28280] ? do_sock_setsockopt+0x17c/0x1b0 [ 590.703674][T28280] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 590.703694][T28280] ? do_syscall_64+0xfa/0xfa0 [ 590.703721][T28280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.703752][T28280] __vmalloc_node_range_noprof+0x125/0x12d0 [ 590.703814][T28280] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 590.703847][T28280] ? __kasan_kmalloc+0x93/0xb0 [ 590.703880][T28280] vmalloc_user_noprof+0xad/0xf0 [ 590.703906][T28280] ? xskq_create+0xbf/0x170 [ 590.703960][T28280] xskq_create+0xbf/0x170 [ 590.703991][T28280] xsk_init_queue+0xb0/0x110 [ 590.704022][T28280] xsk_setsockopt+0x4dc/0x8d0 [ 590.704051][T28280] ? __pfx_xsk_setsockopt+0x10/0x10 [ 590.704081][T28280] ? __pfx_aa_sk_perm+0x10/0x10 [ 590.704112][T28280] ? aa_sock_opt_perm+0xff/0x1b0 [ 590.704147][T28280] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 590.704167][T28280] ? __pfx_xsk_setsockopt+0x10/0x10 [ 590.704195][T28280] do_sock_setsockopt+0x17c/0x1b0 [ 590.704223][T28280] __x64_sys_setsockopt+0x13f/0x1b0 [ 590.704252][T28280] do_syscall_64+0xfa/0xfa0 [ 590.704280][T28280] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.704315][T28280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.704337][T28280] ? clear_bhb_loop+0x60/0xb0 [ 590.704363][T28280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.704384][T28280] RIP: 0033:0x7f22e878f749 [ 590.704403][T28280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.704422][T28280] RSP: 002b:00007f22e95fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 590.704445][T28280] RAX: ffffffffffffffda RBX: 00007f22e89e5fa0 RCX: 00007f22e878f749 [ 590.704461][T28280] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 590.704475][T28280] RBP: 00007f22e8813f91 R08: 0000000000000004 R09: 0000000000000000 [ 590.704489][T28280] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.704504][T28280] R13: 00007f22e89e6038 R14: 00007f22e89e5fa0 R15: 00007ffce51ea3f8 [ 590.704541][T28280] [ 590.745855][T28277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.771161][T28280] Mem-Info: [ 590.886008][T28284] __nla_validate_parse: 8 callbacks suppressed [ 590.886027][T28284] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7483'. [ 590.925597][T28280] active_anon:3893 inactive_anon:0 isolated_anon:0 [ 590.925597][T28280] active_file:3608 inactive_file:40106 isolated_file:0 [ 590.925597][T28280] unevictable:768 dirty:182 writeback:0 [ 590.925597][T28280] slab_reclaimable:12548 slab_unreclaimable:121929 [ 590.925597][T28280] mapped:29432 shmem:1375 pagetables:1052 [ 590.925597][T28280] sec_pagetables:0 bounce:0 [ 590.925597][T28280] kernel_misc_reclaimable:0 [ 590.925597][T28280] free:1302945 free_pcp:15577 free_cma:0 [ 590.987786][T28286] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7483'. [ 591.030079][T28280] Node 0 active_anon:15476kB inactive_anon:0kB active_file:14432kB inactive_file:160220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117720kB dirty:728kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12880kB pagetables:4028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 591.184481][T28280] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 591.196467][T28294] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7486'. [ 591.222062][T28296] netlink: 'syz.0.7488': attribute type 29 has an invalid length. [ 591.240230][T28296] netlink: 'syz.0.7488': attribute type 29 has an invalid length. [ 591.259274][T28280] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 591.292721][T28296] netlink: 500 bytes leftover after parsing attributes in process `syz.0.7488'. [ 591.303599][T28296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7488'. [ 591.305575][T28280] lowmem_reserve[]: [ 591.313263][T28296] netlink: 'syz.0.7488': attribute type 7 has an invalid length. [ 591.325653][T28296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7488'. [ 591.344012][T28280] 0 2505 2505 2505 2505 [ 591.348639][T28280] Node 0 DMA32 free:1308984kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15504kB inactive_anon:0kB active_file:14432kB inactive_file:160220kB unevictable:1536kB writepending:728kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:40648kB local_pcp:18516kB free_cma:0kB [ 591.426678][T28280] lowmem_reserve[]: 0 0 0 0 0 [ 591.431637][T28280] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 591.444013][T28300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7490'. [ 591.479936][T28280] lowmem_reserve[]: 0 0 0 0 0 [ 591.488630][T28280] Node 1 Normal free:3890360kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18096kB local_pcp:9580kB free_cma:0kB [ 591.543344][T28306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7492'. [ 591.553920][T28280] lowmem_reserve[]: 0 0 0 0 0 [ 591.559054][T28280] Node 0 DMA: [ 591.559071][T28306] xfrm1: entered promiscuous mode [ 591.559092][T28306] xfrm1: entered allmulticast mode [ 591.566040][T28280] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 591.582176][T28306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7492'. [ 591.588343][T28280] Node 0 DMA32: 930*4kB (UM) 282*8kB (UM) 42*16kB (UME) 154*32kB (UME) 123*64kB (UME) 54*128kB (UME) 147*256kB (UME) 94*512kB (UME) 43*1024kB (UM) 9*2048kB (UM) 277*4096kB (UM) = 1309176kB [ 591.661054][T28280] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 591.675352][T28280] Node 1 Normal: 196*4kB (U) 53*8kB (UME) 50*16kB (UME) 77*32kB (UME) 29*64kB (UME) 8*128kB (UME) 2*256kB (M) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3890360kB [ 591.696633][T28280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 591.698866][T28315] batadv_slave_1: entered promiscuous mode [ 591.707764][T28280] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 591.723236][T28280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 591.734085][T28280] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 591.743605][T28280] 45067 total pagecache pages [ 591.750414][T28280] 0 pages in swap cache [ 591.755634][T28280] Free swap = 124996kB [ 591.759816][T28280] Total swap = 124996kB [ 591.765611][T28280] 2097051 pages RAM [ 591.769443][T28280] 0 pages HighMem/MovableOnly [ 591.775047][T28280] 424122 pages reserved [ 591.794407][T28280] 0 pages cma reserved [ 591.990569][T28314] batadv_slave_1: left promiscuous mode [ 592.005291][T28326] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 592.170126][T28332] 8021q: adding VLAN 0 to HW filter on device bond4 [ 592.192907][T28337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7504'. [ 592.210151][T28332] ipvlan2: entered promiscuous mode [ 592.447388][T28351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.509308][T28357] FAULT_INJECTION: forcing a failure. [ 592.509308][T28357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.537479][T28357] CPU: 0 UID: 0 PID: 28357 Comm: syz.3.7512 Not tainted syzkaller #0 PREEMPT(full) [ 592.537507][T28357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.537519][T28357] Call Trace: [ 592.537527][T28357] [ 592.537536][T28357] dump_stack_lvl+0x189/0x250 [ 592.537568][T28357] ? __pfx____ratelimit+0x10/0x10 [ 592.537594][T28357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.537618][T28357] ? __pfx__printk+0x10/0x10 [ 592.537638][T28357] ? __might_fault+0xb0/0x130 [ 592.537672][T28357] should_fail_ex+0x414/0x560 [ 592.537706][T28357] _copy_from_user+0x2d/0xb0 [ 592.537731][T28357] ___sys_sendmsg+0x158/0x2a0 [ 592.537754][T28357] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.537812][T28357] ? __fget_files+0x2a/0x420 [ 592.537831][T28357] ? __fget_files+0x3a0/0x420 [ 592.537858][T28357] __x64_sys_sendmsg+0x19b/0x260 [ 592.537882][T28357] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 592.537912][T28357] ? __pfx_ksys_write+0x10/0x10 [ 592.537952][T28357] ? do_syscall_64+0xbe/0xfa0 [ 592.537985][T28357] do_syscall_64+0xfa/0xfa0 [ 592.538011][T28357] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.538039][T28357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.538059][T28357] ? clear_bhb_loop+0x60/0xb0 [ 592.538084][T28357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.538103][T28357] RIP: 0033:0x7fc8f598f749 [ 592.538122][T28357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.538139][T28357] RSP: 002b:00007fc8f674d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.538161][T28357] RAX: ffffffffffffffda RBX: 00007fc8f5be5fa0 RCX: 00007fc8f598f749 [ 592.538177][T28357] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 592.538189][T28357] RBP: 00007fc8f674d090 R08: 0000000000000000 R09: 0000000000000000 [ 592.538203][T28357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.538215][T28357] R13: 00007fc8f5be6038 R14: 00007fc8f5be5fa0 R15: 00007ffc9c6b3c08 [ 592.538249][T28357] [ 592.823597][T28366] validate_nla: 1 callbacks suppressed [ 592.823616][T28366] netlink: 'syz.1.7517': attribute type 12 has an invalid length. [ 592.862738][T28362] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 592.877489][T28362] netlink: 'syz.2.7514': attribute type 5 has an invalid length. [ 593.048767][T28378] netlink: 'syz.3.7519': attribute type 13 has an invalid length. [ 593.060919][T28378] netlink: 'syz.3.7519': attribute type 58 has an invalid length. [ 593.250886][T28385] nbd: must specify at least one socket [ 593.481234][T28406] geneve1: Caught tx_queue_len zero misconfig [ 593.731018][T28421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.859945][T28423] [ 593.862323][T28423] ====================================================== [ 593.869437][T28423] WARNING: possible circular locking dependency detected [ 593.876465][T28423] syzkaller #0 Not tainted [ 593.880873][T28423] ------------------------------------------------------ [ 593.887879][T28423] syz.1.7532/28423 is trying to acquire lock: [ 593.893943][T28423] ffffffff8f426a78 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 593.903429][T28423] [ 593.903429][T28423] but task is already holding lock: [ 593.910791][T28423] ffffffff8f426a18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 593.920371][T28423] [ 593.920371][T28423] which lock already depends on the new lock. [ 593.920371][T28423] [ 593.930763][T28423] [ 593.930763][T28423] the existing dependency chain (in reverse order) is: [ 593.939772][T28423] [ 593.939772][T28423] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 593.947679][T28423] lock_acquire+0x120/0x360 [ 593.952696][T28423] _raw_spin_lock_bh+0x36/0x50 [ 593.958067][T28423] nr_rt_ioctl+0x390/0xd50 [ 593.963007][T28423] sock_do_ioctl+0xdc/0x300 [ 593.968026][T28423] sock_ioctl+0x576/0x790 [ 593.972874][T28423] __se_sys_ioctl+0xfc/0x170 [ 593.977996][T28423] do_syscall_64+0xfa/0xfa0 [ 593.983020][T28423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.989426][T28423] [ 593.989426][T28423] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 593.997412][T28423] lock_acquire+0x120/0x360 [ 594.002428][T28423] _raw_spin_lock_bh+0x36/0x50 [ 594.007759][T28423] nr_rt_ioctl+0x193/0xd50 [ 594.012701][T28423] sock_do_ioctl+0xdc/0x300 [ 594.017719][T28423] sock_ioctl+0x576/0x790 [ 594.022562][T28423] __se_sys_ioctl+0xfc/0x170 [ 594.027669][T28423] do_syscall_64+0xfa/0xfa0 [ 594.032692][T28423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.039099][T28423] [ 594.039099][T28423] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 594.046921][T28423] validate_chain+0xb9b/0x2140 [ 594.052199][T28423] __lock_acquire+0xab9/0xd20 [ 594.057388][T28423] lock_acquire+0x120/0x360 [ 594.062408][T28423] _raw_spin_lock_bh+0x36/0x50 [ 594.067690][T28423] nr_rt_device_down+0xa9/0x720 [ 594.073058][T28423] nr_device_event+0x137/0x150 [ 594.078334][T28423] notifier_call_chain+0x1b6/0x3e0 [ 594.083959][T28423] __dev_notify_flags+0x18d/0x2e0 [ 594.089502][T28423] netif_change_flags+0xe8/0x1a0 [ 594.094949][T28423] dev_change_flags+0x130/0x260 [ 594.100310][T28423] dev_ioctl+0x7b4/0x1150 [ 594.105165][T28423] sock_do_ioctl+0x22c/0x300 [ 594.110281][T28423] sock_ioctl+0x576/0x790 [ 594.115128][T28423] __se_sys_ioctl+0xfc/0x170 [ 594.120232][T28423] do_syscall_64+0xfa/0xfa0 [ 594.125257][T28423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.131662][T28423] [ 594.131662][T28423] other info that might help us debug this: [ 594.131662][T28423] [ 594.141924][T28423] Chain exists of: [ 594.141924][T28423] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 594.141924][T28423] [ 594.155766][T28423] Possible unsafe locking scenario: [ 594.155766][T28423] [ 594.163224][T28423] CPU0 CPU1 [ 594.168612][T28423] ---- ---- [ 594.173978][T28423] lock(nr_neigh_list_lock); [ 594.178670][T28423] lock(&nr_node->node_lock); [ 594.185962][T28423] lock(nr_neigh_list_lock); [ 594.193167][T28423] lock(nr_node_list_lock); [ 594.197770][T28423] [ 594.197770][T28423] *** DEADLOCK *** [ 594.197770][T28423] [ 594.205924][T28423] 2 locks held by syz.1.7532/28423: [ 594.211117][T28423] #0: ffffffff8f2cbd48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 594.219914][T28423] #1: ffffffff8f426a18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 594.229931][T28423] [ 594.229931][T28423] stack backtrace: [ 594.235820][T28423] CPU: 0 UID: 0 PID: 28423 Comm: syz.1.7532 Not tainted syzkaller #0 PREEMPT(full) [ 594.235841][T28423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 594.235853][T28423] Call Trace: [ 594.235863][T28423] [ 594.235872][T28423] dump_stack_lvl+0x189/0x250 [ 594.235901][T28423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 594.235923][T28423] ? __pfx__printk+0x10/0x10 [ 594.235955][T28423] ? print_lock_name+0xde/0x100 [ 594.235974][T28423] print_circular_bug+0x2ee/0x310 [ 594.235996][T28423] check_noncircular+0x134/0x160 [ 594.236020][T28423] validate_chain+0xb9b/0x2140 [ 594.236042][T28423] ? rt6_disable_ip+0x6b3/0x720 [ 594.236067][T28423] ? __queue_work+0xc56/0xfb0 [ 594.236089][T28423] ? __lock_acquire+0xab9/0xd20 [ 594.236106][T28423] __lock_acquire+0xab9/0xd20 [ 594.236125][T28423] ? nr_rt_device_down+0xa9/0x720 [ 594.236144][T28423] lock_acquire+0x120/0x360 [ 594.236159][T28423] ? nr_rt_device_down+0xa9/0x720 [ 594.236184][T28423] ? nr_rt_device_down+0xa9/0x720 [ 594.236202][T28423] _raw_spin_lock_bh+0x36/0x50 [ 594.236224][T28423] ? nr_rt_device_down+0xa9/0x720 [ 594.236243][T28423] nr_rt_device_down+0xa9/0x720 [ 594.236263][T28423] ? do_raw_spin_unlock+0x122/0x240 [ 594.236288][T28423] nr_device_event+0x137/0x150 [ 594.236307][T28423] notifier_call_chain+0x1b6/0x3e0 [ 594.236330][T28423] __dev_notify_flags+0x18d/0x2e0 [ 594.236349][T28423] ? __pfx___dev_notify_flags+0x10/0x10 [ 594.236366][T28423] ? __dev_change_flags+0x4cc/0x6d0 [ 594.236385][T28423] ? __pfx___dev_change_flags+0x10/0x10 [ 594.236402][T28423] ? full_name_hash+0x92/0xe0 [ 594.236423][T28423] netif_change_flags+0xe8/0x1a0 [ 594.236442][T28423] dev_change_flags+0x130/0x260 [ 594.236460][T28423] dev_ioctl+0x7b4/0x1150 [ 594.236486][T28423] sock_do_ioctl+0x22c/0x300 [ 594.236509][T28423] ? __pfx_sock_do_ioctl+0x10/0x10 [ 594.236538][T28423] sock_ioctl+0x576/0x790 [ 594.236559][T28423] ? __pfx_sock_ioctl+0x10/0x10 [ 594.236581][T28423] ? __fget_files+0x3a0/0x420 [ 594.236596][T28423] ? __fget_files+0x2a/0x420 [ 594.236613][T28423] ? bpf_lsm_file_ioctl+0x9/0x20 [ 594.236633][T28423] ? __pfx_sock_ioctl+0x10/0x10 [ 594.236652][T28423] __se_sys_ioctl+0xfc/0x170 [ 594.236674][T28423] do_syscall_64+0xfa/0xfa0 [ 594.236698][T28423] ? lockdep_hardirqs_on+0x9c/0x150 [ 594.236721][T28423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.236738][T28423] ? clear_bhb_loop+0x60/0xb0 [ 594.236756][T28423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.236772][T28423] RIP: 0033:0x7f22e878f749 [ 594.236788][T28423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.236808][T28423] RSP: 002b:00007f22e95fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 594.236828][T28423] RAX: ffffffffffffffda RBX: 00007f22e89e5fa0 RCX: 00007f22e878f749 [ 594.236841][T28423] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000009 [ 594.236853][T28423] RBP: 00007f22e8813f91 R08: 0000000000000000 R09: 0000000000000000 [ 594.236864][T28423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.236875][T28423] R13: 00007f22e89e6038 R14: 00007f22e89e5fa0 R15: 00007ffce51ea3f8 [ 594.236895][T28423] [ 594.560808][T28429] FAULT_INJECTION: forcing a failure. [ 594.560808][T28429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.574135][T28429] CPU: 0 UID: 0 PID: 28429 Comm: syz.2.7537 Not tainted syzkaller #0 PREEMPT(full) [ 594.574162][T28429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 594.574175][T28429] Call Trace: [ 594.574182][T28429] [ 594.574190][T28429] dump_stack_lvl+0x189/0x250 [ 594.574215][T28429] ? __pfx____ratelimit+0x10/0x10 [ 594.574238][T28429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 594.574260][T28429] ? __pfx__printk+0x10/0x10 [ 594.574277][T28429] ? rcu_is_watching+0x15/0xb0 [ 594.574298][T28429] ? lock_acquire+0x5f/0x360 [ 594.574317][T28429] ? __might_fault+0xb0/0x130 [ 594.574345][T28429] ? rcu_is_watching+0x15/0xb0 [ 594.574367][T28429] should_fail_ex+0x414/0x560 [ 594.574398][T28429] _copy_from_user+0x2d/0xb0 [ 594.574422][T28429] __copy_msghdr+0x3c5/0x5b0 [ 594.574445][T28429] ___sys_sendmsg+0x1a5/0x2a0 [ 594.574467][T28429] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.574501][T28429] ? __fget_files+0x2a/0x420 [ 594.574519][T28429] ? __fget_files+0x3a0/0x420 [ 594.574541][T28429] __sys_sendmmsg+0x227/0x430 [ 594.574563][T28429] ? __pfx___sys_sendmmsg+0x10/0x10 [ 594.574588][T28429] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 594.574623][T28429] ? ksys_write+0x22a/0x250 [ 594.574649][T28429] ? __pfx_ksys_write+0x10/0x10 [ 594.574673][T28429] __x64_sys_sendmmsg+0xa0/0xc0 [ 594.574694][T28429] do_syscall_64+0xfa/0xfa0 [ 594.574720][T28429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.574738][T28429] ? clear_bhb_loop+0x60/0xb0 [ 594.574757][T28429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.574775][T28429] RIP: 0033:0x7fadcb18f749 [ 594.574791][T28429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.574809][T28429] RSP: 002b:00007fadc93f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 594.574829][T28429] RAX: ffffffffffffffda RBX: 00007fadcb3e5fa0 RCX: 00007fadcb18f749 [ 594.574843][T28429] RDX: 0000000000000002 RSI: 0000200000000740 RDI: 0000000000000003 [ 594.574854][T28429] RBP: 00007fadc93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 594.574867][T28429] R10: 0000000024000005 R11: 0000000000000246 R12: 0000000000000001 [ 594.574888][T28429] R13: 00007fadcb3e6038 R14: 00007fadcb3e5fa0 R15: 00007ffd390d55e8 [ 594.574911][T28429] [ 594.831706][T28423] syzkaller0: entered promiscuous mode [ 594.837378][T28423] syzkaller0: entered allmulticast mode [ 600.963891][ T5847] Bluetooth: hci3: command 0x0406 tx timeout