last executing test programs: 6.606055343s ago: executing program 1 (id=5318): r0 = socket$unix(0x1, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a80480003"], 0x2c}}, 0x0) socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3aa0}}, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=' m=', 0x3}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000b5b9243184676ef46a4800008400000006000000d000000000000000"], 0x18, 0x20080084}], 0x1, 0x815) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) bind$ax25(r4, &(0x7f0000000540)={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x48) sendto$ax25(r4, 0x0, 0x20, 0x40, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x7a) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 6.155658879s ago: executing program 4 (id=5322): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) 5.966830073s ago: executing program 4 (id=5323): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000001340)=@x25, 0x80) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$inet6(0xa, 0x3, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd700000"], 0x20}}, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1fc}}, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="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", 0xf5e}], 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r1) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=' \x01\x00', @multicast1, 0x12, 0x15}}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000000)=0x7, 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0xffffffffffffff6a, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r3}]}, 0x3c}}, 0x0) 4.786273174s ago: executing program 4 (id=5330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0xa, 0x7, {{0x15, 0x4, 0x1, 0x1, 0x54, 0x64, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@lsrr={0x83, 0x17, 0x6b, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0x7, 0x9, [@multicast1]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @empty, @loopback]}, @rr={0x7, 0xb, 0x78, [@loopback, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) 3.354997657s ago: executing program 0 (id=5336): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x1c}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, 0x0, 0x8000) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2f0000001c0005fffffff7000d000000020000000b000000ec0091c913000180f0ffffeb46860f21244e36", 0x2b}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket(0x2c, 0x80002, 0x8) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYRES64=r3, @ANYRES16=r4], 0x48) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4000, r3}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r5, @ANYRESHEX=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f0000000400)={0xb103, 0x0, 0x0, 0x9, 0x0, 0x8, 0xffffffffffffffff}, 0x0, 0x0) socket(0x25, 0x1, 0x1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffc6c, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040010) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61}, {0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 2.85896295s ago: executing program 3 (id=5339): connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f00000017c0)=ANY=[], 0x178}}, {{&(0x7f00000000c0)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000340)="d3a16d8b85f9", 0x6}, {&(0x7f0000000480)="25b1fd659b2af482c4e6f5b59fbcac685ac9887f8f0526b236852710581b7574a271a9c86e93aeb9205a02f5ad49dc9eb26fe1f5f949a0520f8ca6f83a5eb1d34f0bc5ee2c33618326dba016b39913e6530e849d2837bf5d0688190d11248dd332615b3eae4ed140f4f2537e8c3575468c78648e5edd18330cb58620e9f60443cf4759e099ddc5da7166333affa8920d18721175ce0cac2a", 0x98}, {&(0x7f0000000540)="168026728fab9e0106a566807ebcb62f0befa409192fd688f88b06c03dd80462cdb5c8ce56961e6cd39878f7e664091b0c21da4a7d60dc79a5158fbc34cf42dd5c30e3d4a39c3b2d75a943f9fd2c3d4c34dc491e1a296bb310b53de30c645f064035efef7d3a4f41fa3387f1df30844bd2f6367e11a2c22b60ff89bec6b9e5ecd51ac06d8101da909b15f0cd1104c3d5a88382b3fdf374934c996838622acbe1915fdc136b983411095432a6", 0xac}, {&(0x7f0000000600)="ee722cb5d627399c5264cf36b89b76adec0956e43f2d436b4cdbb0b348c79684b69d65f612db86f1bdaeb8f552ff538b4a14ebac2116016ad1537c046280c1df7a68341f941c377cb7841f0f67121b5b541c44a34e91155abf2e43fbe890d3b2de0f87e7f6bfb1659663c0c658fece5fa16a443f73df7edf2b3a296523c17153aee0c4550dac5d89a300a42e051b3841318b6b2199c14cbbc206fcdd17d034c276d639a860b869a5419d7ee8c46862fc27dac162681e865237e7a6b1a0defa6669756684fb4ede363f3e986acad51255b4b5a2533e900ab33c8046d18b6df982", 0xe0}, {&(0x7f0000000700)="6b04e779b78da974648c187b55504c15660a9fb31a909107f5d669f5ceb2c9f60d540671a67c225e5b0647479d65e8eb984dfcd93601ee8ec4b97d816b638cc5024d99f7ccebdce0d6667f4cbd940fb8da6ab44d2fba2c4166af735a5681f85dc84ad486e25fca9d1c56710d67d7b5c6e5f2e427fc6be3b781928eeebc7107b65789a1a099f7e7650259ee18edbff03414bb28210da345b192064cf022de2ea0b9860057e36d891841982f77f77398d6c899dcf4b76a3cdd6a0976816c7c3133fe2fb1345e319012a8082b93e0d8f7fdac370b576bace703ff67801f920717", 0xdf}, {&(0x7f0000000380)="97f40e4ac3ee67ef79e35d341f3e34da926d4a0ad8b78f502ede2e61d68fecd09e6d8359510f03055aafd7dedffab30ea023a62c37ed6e61b856c8892c953381330b662b45ceeb023ac9fb0ee7b9e68b8f55b3a1b0a94f3a36cb92705b1e6aaaefbe049600784d8b72636e417d4c33844f74876800ccade86b4222", 0x7b}, {&(0x7f0000000800)="6bd85e29e17c539479c8da3e3be8e0d57133e30898ebb4fd43f66852fbda046a9d0d2b807a603b1a701c093bdac6c7ecf585cd0ded74a79badcaef73cf8a24e646f04119dfbb5b3a04925ad83b36cadac1cf876a2937e98e7ac1590ff25fa8b76ae5d058ac3b8a4b457d25d2d588c0d4828f450cf38c748cfa39dcdd71f060dff36be970edce6dad5bfe35e0c0fd4b56f1aa", 0x92}, {&(0x7f00000008c0)="497428122960cc913ef8754be0381b104bae07bcaa887010b9cdf728ae1d5a2f", 0x20}, {&(0x7f0000001700)="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", 0x1000}], 0x9, &(0x7f0000000f00)=[{0xa8, 0x112, 0x0, "e1ae69124a2c726b1269aa1ffb723ddc7d60d041879b92705dcb571f271f1f1763f603f2cc63ff18888e0da0eb05ab086aadf1ac4f3279b0c3f7d5c0310f1ef814c0cdcc8e780f87c638edcdf854f503f2d56c759aa761c08b323c17c22b65b91f7c36ed415a547d976e9e957bf8ef2e2ed0a6972cbbbb90c816d66dc93b5cc2b50f301ba528fd955f9387ed722fc7cc1e72780acb5a"}, {0xc0, 0x10c, 0x3ff, "783b7f3d2a9ee354f36b50a7288677ff4dc8522ede8b3b12ed86dd1c9b29572c79ea15ac691627f9cd0de9a15651fb4dc1820cb1ff21e0fc5d0ae4056ea2638b64a68a666cc235bac7bdc8c742797dae9483f6883a0c51e79825261f4932dba15c51dad32f411cfee00f68a1bb333b417a6706e08e142b71c9bc63fab97e8a87ff1573c23ad4d97321974d1c19611abe6813cc96d3e75cf8dd874a3cb566c4785a060c02399364c8b3f3029f97e867"}], 0x168}}, {{&(0x7f0000000b80)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="66c833d2527d4e199c7828afcf94dab789d7c948b65f3f04eca0712ce091bcfd7f762a5f3b6cdbc8322f7998508452a19b797886314b44cf6fabca0b7f708233813470dfc64e7de493aa32652510a74f3b8057635d92fe6f1e2a35ba6eac48087ca85182713e75c2f98f68a48e83562d20009579dbf21e70a59326602ad20f9c5c09ddc939a2", 0x86}, {&(0x7f0000000cc0)="b0d682963cac763e82db4f9c7a6d25eefb4110b22ed51e864ac239c9009cc581bed8f596794072f615a40769af551d7c5685cabbc95855f076f04e0b4b27e6998b9062ed3d4e0d1a337db3cf", 0x4c}, {&(0x7f0000000d40)="c87d4eaf2cec52b08a2ce46db4c3210bc19ec82a8fb3eab2ab049a860510d2a8400830c13437716b0728ce6f629e2d3d61666bc43f9ec72ca5613a70afd0de1e5a2414ba202c6032d7b1f6e960195642f6b9037044", 0x55}, {&(0x7f0000000dc0)="9d6a7cd567a51acd748161f348137b2761cc88967e450b129bfe24d99345a96f01798865e3b824ea5a2e519426b043e467feabbc1c7c0e345c5f848938061ae79ef8a040b0a00f1c59254b233456992d9bea3cf23b90014e8c4abb24f68a65978ace39a496571426e2170a2ef02c63db7eaa3f86eead1fe6616d386bae9583c88ad6f1eabf4000e98dd3ecb781d18c2df9d4323f31c1dccf079102eee0e2c32662da17469f0699e869493d9083cd3aac18ff38eb563399b7fc52e4ba7161a61a6d52f426e73172b68f", 0xc9}], 0x4, &(0x7f0000002700)=[{0xf0, 0x117, 0x2, "b22ff91bdc60035036517a1b5340381f0127f6e0f0f22655118a677a3aad92471dfa38bc3fd22233f9f605be0defc6e86392f85d7e7ccb4b74220231cf44895aa7b9645de990b4ae6a20dae499451652942651eed2b03814cc0f37344bdbe332d2c16382de21280067cdbb3046611c5c81fad4ce8b641bf403995dc857dbad8b68414bd3be9ba887f734a613706d3d805f71fa56563b9478bde6cbfaaefff3143ca8d1147d303e987b9e5bd60e9c18ec1d3d109627a717f79eff71db5863293502f979f5787b3bd8ffac2e8f4d0e314f3182622ef12cc1f07f1f2f40a451e84d"}, {0x90, 0x101, 0x5, "2ff401d566c35888b33d6396e947802c64307245b7415da0f38bbd2783f6f37468adbd7b775392987bd98e930efe2e857fe598295ca627c76b6a5f8b60059ab38742dd3075622cbee42e0abce59ce678876b6bbe75e48323e92bc2b3e8f32431c0880d30b6fd1f279d359064b7d5555c03e8c2951f1dc8261a7248a953fce4"}, {0x110, 0x10a, 0x7, "abc1512ce5773dfe4e88333e7eb11aa67b729e77b4d83ed0cc3abda104d99ebf81c758dcc3adc606af24ae59012faaefb34993fb6f1e30ea813de8bf60536092b817ff96d623a9a3e0827ce39c06922a1927217a9c942060ae32df3df8111c080339515c1fc419add1d4059b976b81899e339dbdcc1e52e7b626880aed69e53ba9fd74c0fda36ebc01300bc2236e7a3c8285aab9f6eca8122c6c100a03561a4bfe276d83c761202e8f07a44d66cabb0a4f6fdd06c0886ec67bec820801dfb1096625486fe3f117c6ab6a227a2bf7d0843d569c98395c41ddcd659051d6181013f3259e83dc57c3bfedcb38d5f14b8170b5078bfd049ff5226efe77"}], 0x290}}, {{&(0x7f00000011c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x1, 0x2, 0x4, 0x2}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001240)="3d7bb51a44893d9b75c041476fe4e942cf68fe4e4d1ff3ac2e43c58ad86218b444d1a4484f3713e368af879a21f54828f93b54b1cb3c0550edca946b7a9d30dd60c134c909abaf07d8be09fea498142359e660740d53049c68d84fe5a545d57ad4ad547cce6698310b93289fc3bb501e93c00acb6c81e65cb944800021e6793fdc5b068eb4d3dcb3d8ec5981f13f34b2b52fb7fb0cb148a5319a57440be1afb0c5e4f7efe3516e79cc364896", 0xac}], 0x1, &(0x7f0000001340)=[{0xe8, 0x10b, 0x1, "3796e91913ec89153e36405dd151cada157eb436117cea371f7e14253f00f7fc75ec20801e0d195be04fca8c498c1bb6dc1ddeb03410549109d616cba222284e54c9820336575e3f84c01960845e8aa973831d12435359ca05a1cf8c8d3291975904d23dfca19d541d693fc0be9298a7da0516b7beda56b3925ad787cde92d8ae3212512d5cd87f8c6751252cf16a3106e91ed483e4af7e40fe5e2220bda59f78b079dfa14b7440ddb2448346ea7642f21ef4f7b7c687e1eb52fd1606b6d2b5c24ba49196050707e41f2e90864920364bc7ed15d41aa"}, {0x50, 0x111, 0x4, "7720f73fbe5e869a6c563f05f91a2de0da97cb0408851d6cc71403b106c0e9b64fbcf350d53c7eb01f973459964a9cacd45e036de1750cb8a446db8dc3"}], 0x138}}], 0x4, 0x0) 2.844504988s ago: executing program 4 (id=5340): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r4], 0x21c}}, 0x0) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) write$cgroup_pid(r4, &(0x7f00000006c0)=r6, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.728303693s ago: executing program 3 (id=5341): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="1000000000000000010000000c000000", 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0xd50, 0xffffffffffffff60, &(0x7f0000000380)="b9ff0300600d698cff9e14f08edd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x124, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5f, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad7669c2155f69b15be1a3c2c548d7259b70c08e808f7af3a3406f731c9d6e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x41, 0x3, "5ae3420e80c07506bfd5002f75393ca25f1b4eaf61a166ad9b6b03caed34ec7ca2d030cc7a9c46dec5fa602fdf022276c1d032155f658f98a411e682d7"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x84}, 0x1, 0xba01}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4a}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r1, 0x7ca8e000) writev(r2, &(0x7f0000000080)=[{0x0}], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a000100000000000000000002202000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff0100000000000000000000000000010800"], 0x38}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r11, 0x0, 0x20010000) 2.51978895s ago: executing program 1 (id=5343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x4, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xb, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}}}, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)='X', 0x1}], 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 2.25149704s ago: executing program 1 (id=5344): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232f0485a2ca9f37fc9c3d2688efcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdcdeb2af1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f925f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308c"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@multicast1, @private, 0x0, "6069177019716e31e2e0f1fc00", 0x9, 0xfffffffe, 0x3, 0xff}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) socket$inet(0x2, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa032}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20009010}, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x803, 0x6) 2.170483031s ago: executing program 0 (id=5345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x5452, &(0x7f0000000100)) 2.119437691s ago: executing program 3 (id=5346): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0xb) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="030000000000000002004e23e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002004e20ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aefbe7613740c1b0416ecc819500a70b787ac6e7aed1855cd7e6d9b8b8343138cc5e6d4fc46e14a904d88ed882da381387f4fdf5279b7ed3001787e41f871dc440e97338f97e16ac3a010876db186db3e2c79de254945a3e462fb313001cacb4b515f52f11f693328f39b72f334f87d27e1a1108490edc7122653a3677e88376813a29db3bf952d1222a"], 0x190) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'dvmrp1\x00', 0x8000}) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000020c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09", @ANYRES64=r3], &(0x7f0000000140)='GPL\x00'}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000000c0), 0x2, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r8, &(0x7f0000000180), &(0x7f0000000340)=""/203}, 0x20) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f00000001c0)) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r9, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r9, 0xda90) setsockopt$inet_opts(r9, 0x0, 0x4, 0x0, 0x0) accept4(r9, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$kcm(0x2, 0x3, 0x2) 2.043167358s ago: executing program 0 (id=5347): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x202331, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1.990629589s ago: executing program 4 (id=5348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfffffe32, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xfffffffffffffc55, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc0c498}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, 0x2, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x9, 0x100, 0x7]}]}, 0x24}}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f0000000280)=0x1, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) syz_emit_ethernet(0x80, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00@\x00', 0x4a, 0x2f, 0xff, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x2, [0x5]}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, [0x800, 0x9]}, {}, {0x8, 0x88be, 0x86ddffff, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x1, {0x400000}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}, 0x2, {0x0, 0x8}}}}}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x94, r9, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x6a, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x94}}, 0x0) 1.964234468s ago: executing program 1 (id=5349): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x1a8, 0x1a8, 0xd0, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [0x0, 0x0, 0x0, 0xff000000], [0xff000000], 'pim6reg0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x0, 0x1}, {0x4, 0x5, 0x7}, 0x1, 0xf0f}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x58}}, @common=@eui64={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRES16=r0], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20a0, 0x3b104}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x0, 0xc}, {0x6, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40054) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x11, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x5, 0x6, 0x7ff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000100)={0x74, 0x101, 0x6, 0x7, 0x6, 0x81}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r14, 0x89b1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x89, 0x0, 0x0, 0x0, @empty, @private}}}}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB, @ANYRES32=r13, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x2c, r15, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x15}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x28, r8, 0x8, 0x870bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xfffff8fc, 0x3a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) 1.52110462s ago: executing program 1 (id=5354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x4, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xb, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 1.450915394s ago: executing program 2 (id=5355): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="07000000010001", 0x178) 1.420516702s ago: executing program 2 (id=5356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000640)={0x0, 0x25, 0x1}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="13", 0x1}], 0x1}, 0x4051) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x70, r4, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x41) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="ac", 0x1}], 0x1}, 0x20040800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r7, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}}, 0x40040) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f00000006c0)={0x388, r7, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd933}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x98, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80c3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe881}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa946}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x164, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xde0000, @mcast2, 0xfb}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x68d}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf6a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x547}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x51fd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x388}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000000) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'vlan0\x00', 0x1000}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x0, 0x1}, 0x20) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000b40)={0x0, 0x10, &(0x7f0000000b00)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000b80)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000bc0)={r10, 0x1}, &(0x7f0000000c00)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x10011, 0xffffffffffffffff, 0xfffff000) r12 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r12, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x1dc, 0x1, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TUPLE_MASTER={0x8c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x14, 0x4, @local}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xf4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7f}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}, @CTA_TUPLE_MASTER={0x88, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb3}}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x6, 0x8, 0x81000000]}, @CTA_TUPLE_REPLY={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x31}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0xf6d4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x14}, 0xc0) 1.342651005s ago: executing program 0 (id=5357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0xa, 0x7, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x64, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@lsrr={0x83, 0x1b, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0x7, 0x9, [@multicast1]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @empty, @loopback]}, @rr={0x7, 0xb, 0x78, [@loopback, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) 1.167953298s ago: executing program 1 (id=5358): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000001340)=@x25, 0x80) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$inet6(0xa, 0x3, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd700000"], 0x20}}, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1fc}}, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="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", 0xf5a}], 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r1) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=' \x01\x00', @multicast1, 0x12, 0x15}}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000000)=0x7, 0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0xffffffffffffff6a, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r3}]}, 0x3c}}, 0x0) 988.916267ms ago: executing program 2 (id=5359): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232f0485a2ca9f37fc9c3d2688efcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdcdeb2af1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f925f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308c"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@multicast1, @private, 0x0, "6069177019716e31e2e0f1fc00", 0x9, 0xfffffffe, 0x3, 0xff}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) socket$inet(0x2, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa032}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20009010}, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x803, 0x6) 947.09959ms ago: executing program 3 (id=5360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x3001}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="7000fbdbdf251800000000000000857798e34bfe1f42d95af4d6"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0xa0}, 0x1, 0x0, 0x0, 0x2000c451}, 0x44084) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd70000a00000029e8687294a0050000337d031e282c0c78527b0f62c6f43deece341fdcd8914ec3ba71521463b1f23e7dbd830c93890f1447360bcc7ec744ad81cd00299a73729f6f27e9d846cf20e51e1952338efcc8939def60b4373b31d1f1f300"/117, @ANYRES32=r5, @ANYBLOB="0c00238005001f0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="68f6ffe16a6d677f00", @ANYRES32=r6, @ANYBLOB="0c0099007200000054000000080057000900000008009f00010000000800a1001000000008009f00050000000800570023000000080057000f000000"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x11) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0xfffffffffffffd46) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000414000227bd7000fcdbdf14000008000100003717f328c527e1cd960000080001000100"], 0x38}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x40000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) close(r12) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r9, @ANYBLOB="08001b0000000000fb1fc5e68d1d927e4ab0d63a71f191e5dc48d0860654bac9e25ed9770841ccdde41f724494e344f572c2a636e9547973f5abf2291a71c5609092b465aeab4c585e66dcd03ebb1c4ef545b67e2a01026e5033a0839920f0325acce8ecc665da5813d0f1d6e81cdf05a4ef4a12b61ae72676a7a4167a1e2b3115a81ec04689f7cdfcc763de19cd95f7095c7a1a144b5a38e1f4dcad7647801aa3774d8ea11b265200a8012528fc4faba0"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r13 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r13, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000240)={'gretap0\x00'}) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) 573.34153ms ago: executing program 4 (id=5361): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r4], 0x21c}}, 0x0) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891090000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) write$cgroup_pid(r4, &(0x7f00000006c0)=r6, 0x12) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a0f0016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 343.515835ms ago: executing program 2 (id=5362): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f00000017c0)=ANY=[], 0x178}}, {{&(0x7f00000000c0)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000340)="d3a16d8b85f9", 0x6}, {&(0x7f0000000480)="25b1fd659b2af482c4e6f5b59fbcac685ac9887f8f0526b236852710581b7574a271a9c86e93aeb9205a02f5ad49dc9eb26fe1f5f949a0520f8ca6f83a5eb1d34f0bc5ee2c33618326dba016b39913e6530e849d2837bf5d0688190d11248dd332615b3eae4ed140f4f2537e8c3575468c78648e5edd18330cb58620e9f60443cf4759e099ddc5da7166333affa8920d18721175ce0cac2a", 0x98}, {&(0x7f0000000540)="168026728fab9e0106a566807ebcb62f0befa409192fd688f88b06c03dd80462cdb5c8ce56961e6cd39878f7e664091b0c21da4a7d60dc79a5158fbc34cf42dd5c30e3d4a39c3b2d75a943f9fd2c3d4c34dc491e1a296bb310b53de30c645f064035efef7d3a4f41fa3387f1df30844bd2f6367e11a2c22b60ff89bec6b9e5ecd51ac06d8101da909b15f0cd1104c3d5a88382b3fdf374934c996838622acbe1915fdc136b983411095432a6", 0xac}, {&(0x7f0000000600)="ee722cb5d627399c5264cf36b89b76adec0956e43f2d436b4cdbb0b348c79684b69d65f612db86f1bdaeb8f552ff538b4a14ebac2116016ad1537c046280c1df7a68341f941c377cb7841f0f67121b5b541c44a34e91155abf2e43fbe890d3b2de0f87e7f6bfb1659663c0c658fece5fa16a443f73df7edf2b3a296523c17153aee0c4550dac5d89a300a42e051b3841318b6b2199c14cbbc206fcdd17d034c276d639a860b869a5419d7ee8c46862fc27dac162681e865237e7a6b1a0defa6669756684fb4ede363f3e986acad51255b4b5a2533e900ab33c8046d18b6df982", 0xe0}, {&(0x7f0000000700)="6b04e779b78da974648c187b55504c15660a9fb31a909107f5d669f5ceb2c9f60d540671a67c225e5b0647479d65e8eb984dfcd93601ee8ec4b97d816b638cc5024d99f7ccebdce0d6667f4cbd940fb8da6ab44d2fba2c4166af735a5681f85dc84ad486e25fca9d1c56710d67d7b5c6e5f2e427fc6be3b781928eeebc7107b65789a1a099f7e7650259ee18edbff03414bb28210da345b192064cf022de2ea0b9860057e36d891841982f77f77398d6c899dcf4b76a3cdd6a0976816c7c3133fe2fb1345e319012a8082b93e0d8f7fdac370b576bace703ff67801f920717", 0xdf}, {&(0x7f0000000380)="97f40e4ac3ee67ef79e35d341f3e34da926d4a0ad8b78f502ede2e61d68fecd09e6d8359510f03055aafd7dedffab30ea023a62c37ed6e61b856c8892c953381330b662b45ceeb023ac9fb0ee7b9e68b8f55b3a1b0a94f3a36cb92705b1e6aaaefbe049600784d8b72636e417d4c33844f74876800ccade86b4222", 0x7b}, {&(0x7f0000000800)="6bd85e29e17c539479c8da3e3be8e0d57133e30898ebb4fd43f66852fbda046a9d0d2b807a603b1a701c093bdac6c7ecf585cd0ded74a79badcaef73cf8a24e646f04119dfbb5b3a04925ad83b36cadac1cf876a2937e98e7ac1590ff25fa8b76ae5d058ac3b8a4b457d25d2d588c0d4828f450cf38c748cfa39dcdd71f060dff36be970edce6dad5bfe35e0c0fd4b56f1aa", 0x92}, {&(0x7f00000008c0)="497428122960cc913ef8754be0381b104bae07bcaa887010b9cdf728ae1d5a2f", 0x20}, {&(0x7f0000001700)="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", 0x1000}], 0x9, &(0x7f0000000f00)=[{0xa8, 0x112, 0x0, "e1ae69124a2c726b1269aa1ffb723ddc7d60d041879b92705dcb571f271f1f1763f603f2cc63ff18888e0da0eb05ab086aadf1ac4f3279b0c3f7d5c0310f1ef814c0cdcc8e780f87c638edcdf854f503f2d56c759aa761c08b323c17c22b65b91f7c36ed415a547d976e9e957bf8ef2e2ed0a6972cbbbb90c816d66dc93b5cc2b50f301ba528fd955f9387ed722fc7cc1e72780acb5a"}, {0xc0, 0x10c, 0x3ff, "783b7f3d2a9ee354f36b50a7288677ff4dc8522ede8b3b12ed86dd1c9b29572c79ea15ac691627f9cd0de9a15651fb4dc1820cb1ff21e0fc5d0ae4056ea2638b64a68a666cc235bac7bdc8c742797dae9483f6883a0c51e79825261f4932dba15c51dad32f411cfee00f68a1bb333b417a6706e08e142b71c9bc63fab97e8a87ff1573c23ad4d97321974d1c19611abe6813cc96d3e75cf8dd874a3cb566c4785a060c02399364c8b3f3029f97e867"}], 0x168}}, {{&(0x7f0000000b80)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="66c833d2527d4e199c7828afcf94dab789d7c948b65f3f04eca0712ce091bcfd7f762a5f3b6cdbc8322f7998508452a19b797886314b44cf6fabca0b7f708233813470dfc64e7de493aa32652510a74f3b8057635d92fe6f1e2a35ba6eac48087ca85182713e75c2f98f68a48e83562d20009579dbf21e70a59326602ad20f9c5c09ddc939a2", 0x86}, {&(0x7f0000000cc0)="b0d682963cac763e82db4f9c7a6d25eefb4110b22ed51e864ac239c9009cc581bed8f596794072f615a40769af551d7c5685cabbc95855f076f04e0b4b27e6998b9062ed3d4e0d1a337db3cf", 0x4c}, {&(0x7f0000000d40)="c87d4eaf2cec52b08a2ce46db4c3210bc19ec82a8fb3eab2ab049a860510d2a8400830c13437716b0728ce6f629e2d3d61666bc43f9ec72ca5613a70afd0de1e5a2414ba202c6032d7b1f6e960195642f6b9037044", 0x55}, {&(0x7f0000000dc0)="9d6a7cd567a51acd748161f348137b2761cc88967e450b129bfe24d99345a96f01798865e3b824ea5a2e519426b043e467feabbc1c7c0e345c5f848938061ae79ef8a040b0a00f1c59254b233456992d9bea3cf23b90014e8c4abb24f68a65978ace39a496571426e2170a2ef02c63db7eaa3f86eead1fe6616d386bae9583c88ad6f1eabf4000e98dd3ecb781d18c2df9d4323f31c1dccf079102eee0e2c32662da17469f0699e869493d9083cd3aac18ff38eb563399b7fc52e4ba7161a61a6d52f426e73172b68f", 0xc9}], 0x4, &(0x7f0000002700)=[{0xf0, 0x117, 0x2, "b22ff91bdc60035036517a1b5340381f0127f6e0f0f22655118a677a3aad92471dfa38bc3fd22233f9f605be0defc6e86392f85d7e7ccb4b74220231cf44895aa7b9645de990b4ae6a20dae499451652942651eed2b03814cc0f37344bdbe332d2c16382de21280067cdbb3046611c5c81fad4ce8b641bf403995dc857dbad8b68414bd3be9ba887f734a613706d3d805f71fa56563b9478bde6cbfaaefff3143ca8d1147d303e987b9e5bd60e9c18ec1d3d109627a717f79eff71db5863293502f979f5787b3bd8ffac2e8f4d0e314f3182622ef12cc1f07f1f2f40a451e84d"}, {0x90, 0x101, 0x5, "2ff401d566c35888b33d6396e947802c64307245b7415da0f38bbd2783f6f37468adbd7b775392987bd98e930efe2e857fe598295ca627c76b6a5f8b60059ab38742dd3075622cbee42e0abce59ce678876b6bbe75e48323e92bc2b3e8f32431c0880d30b6fd1f279d359064b7d5555c03e8c2951f1dc8261a7248a953fce4"}, {0x110, 0x10a, 0x7, "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"}], 0x290}}, {{&(0x7f00000011c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x1, 0x2, 0x4, 0x2}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001240)="3d7bb51a44893d9b75c041476fe4e942cf68fe4e4d1ff3ac2e43c58ad86218b444d1a4484f3713e368af879a21f54828f93b54b1cb3c0550edca946b7a9d30dd60c134c909abaf07d8be09fea498142359e660740d53049c68d84fe5a545d57ad4ad547cce6698310b93289fc3bb501e93c00acb6c81e65cb944800021e6793fdc5b068eb4d3dcb3d8ec5981f13f34b2b52fb7fb0cb148a5319a57440be1afb0c5e4f7efe3516e79cc364896", 0xac}], 0x1, &(0x7f0000001340)=[{0xe8, 0x10b, 0x1, "3796e91913ec89153e36405dd151cada157eb436117cea371f7e14253f00f7fc75ec20801e0d195be04fca8c498c1bb6dc1ddeb03410549109d616cba222284e54c9820336575e3f84c01960845e8aa973831d12435359ca05a1cf8c8d3291975904d23dfca19d541d693fc0be9298a7da0516b7beda56b3925ad787cde92d8ae3212512d5cd87f8c6751252cf16a3106e91ed483e4af7e40fe5e2220bda59f78b079dfa14b7440ddb2448346ea7642f21ef4f7b7c687e1eb52fd1606b6d2b5c24ba49196050707e41f2e90864920364bc7ed15d41aa"}, {0x50, 0x111, 0x4, "7720f73fbe5e869a6c563f05f91a2de0da97cb0408851d6cc71403b106c0e9b64fbcf350d53c7eb01f973459964a9cacd45e036de1750cb8a446db8dc3"}], 0x138}}], 0x4, 0x0) 307.378541ms ago: executing program 3 (id=5363): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) unshare(0x2a020400) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, 0x0, 0x0) 183.121099ms ago: executing program 2 (id=5364): unshare(0x22020400) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000100)) 154.264269ms ago: executing program 0 (id=5365): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 108.138768ms ago: executing program 2 (id=5366): r0 = socket(0x2b, 0x80801, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x3c, r3, 0x1, 0xffffffff, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) 50.756134ms ago: executing program 3 (id=5367): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0), 0x0, 0x8044000, 0xfffffffe) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'io'}]}, 0x4) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c0000001200050926bd7000fedbdf25210c0b004e224e260400000023090000000000000500000001040020040000000700000002000000", @ANYRES32=0x0, @ANYBLOB="0000010005200000560000009d0400002e000100060008"], 0x7c}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "1cb315f3c5e23d27d29a00dd397b5c11d4cf201c1a0619fc314514ab71788e4079fdbe4f2a0d60b83a7d04c1d709981110401e5e10685abbad9b6f18e303e902c77244658a099a36fa486760c4941ea7df64250af29a4935de5d244f0549d93679b3d4fb358c2076bc6b1c9735ff8243f088e67455ba14975d12e5903ceeb7a23d62ecb5253ad444ef726b58a00f13f22ccc84cc06c9912b621c3ddc5f3229dc84c0880b5c6faefe33413b34a146e592fc15ae234dac030f05bb99eab08dfd2cb5659c6fc21fb7da6c380165ddde4659e75538dc864a53f691e1d785d6e6f73a03abf2120bce67e2d50075fd811b3e03a1cc2d66335bdee19738a0c1fb79b77d"}]}}]}, 0x14c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=@delqdisc={0x1a0, 0x25, 0x800, 0x70bd27, 0x8001, {0x0, 0x0, 0x0, r8, {0x5, 0x2}, {0xc, 0x3}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x2e}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0xd, 0x3, 0x9, 0x7, 0x6, 0x3, 0x0, 0xd, 0xf, 0x10, 0x6, 0x0, 0x10, 0x2, 0x3, 0xc], 0x1, [0x9, 0x1, 0x0, 0x6, 0xa, 0x400, 0x6b94, 0x8000, 0x95, 0x5, 0x81, 0x2, 0xd071, 0x1, 0x2], [0x6, 0x5, 0xfffe, 0x0, 0xde2, 0x6, 0x93, 0x3, 0x3, 0x9, 0x6, 0x4, 0x5234, 0x81, 0x4, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x13}}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0xdc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x4, 0x3, 0x8, 0x1, 0x3, 0x10001, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x6, 0x3, 0xfff8, 0x3, 0x1, 0x4, 0x0, 0x9}}, {0x16, 0x2, [0xfff, 0x1000, 0x1, 0x4, 0x3, 0xdf, 0x6, 0x3, 0x3]}}, {{0x1c, 0x1, {0x8, 0x81, 0x6, 0xfff, 0x2, 0xffff0001, 0x2, 0x6}}, {0x10, 0x2, [0x3, 0x0, 0x5, 0x44, 0x3, 0x1d3]}}, {{0x1c, 0x1, {0x5, 0xc4, 0x7, 0xbb, 0x0, 0x7, 0x2, 0x6}}, {0x10, 0x2, [0x9, 0x4, 0x5, 0x47, 0x6, 0xe633]}}, {{0x1c, 0x1, {0x2b, 0x67, 0x10, 0x4, 0x0, 0x9, 0x2, 0x3}}, {0xa, 0x2, [0x0, 0x3ff, 0xfff]}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x80, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x20000004) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r5, @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) getsockopt$MRT6(r0, 0x29, 0xcf, &(0x7f0000000500), &(0x7f0000000540)=0x4) write$nci(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="710505cd22020201010603042cb60780040ffd700473642ecc"], 0x19) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) 0s ago: executing program 0 (id=5368): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r6, r6, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000002e00000008002300610033f70fb3681174f9f09f94ff012afa74f29577", @ANYRES32=r11, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x1f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) kernel console output (not intermixed with test programs): ng attributes in process `syz.3.4848'. [ 864.621764][T26924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.639133][T26909] syzkaller1: entered promiscuous mode [ 864.644569][T26921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4848'. [ 864.644881][T26909] syzkaller1: entered allmulticast mode [ 864.705005][T26921] tipc: Enabled bearer , priority 0 [ 864.713050][T26921] veth0_to_bridge: entered promiscuous mode [ 864.724790][T26898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.744839][T26921] veth0_to_bridge: entered allmulticast mode [ 864.750505][T26930] FAULT_INJECTION: forcing a failure. [ 864.750505][T26930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.755284][T26911] lo speed is unknown, defaulting to 1000 [ 864.776123][T26930] CPU: 1 UID: 0 PID: 26930 Comm: syz.2.4852 Not tainted syzkaller #0 PREEMPT(full) [ 864.776149][T26930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 864.776160][T26930] Call Trace: [ 864.776168][T26930] [ 864.776176][T26930] dump_stack_lvl+0x189/0x250 [ 864.776202][T26930] ? __pfx____ratelimit+0x10/0x10 [ 864.776227][T26930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 864.776246][T26930] ? __pfx__printk+0x10/0x10 [ 864.776267][T26930] ? __might_fault+0xb0/0x130 [ 864.776301][T26930] should_fail_ex+0x414/0x560 [ 864.776332][T26930] _copy_from_user+0x2d/0xb0 [ 864.776353][T26930] ___sys_sendmsg+0x158/0x2a0 [ 864.776377][T26930] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.776435][T26930] ? __fget_files+0x2a/0x420 [ 864.776451][T26930] ? __fget_files+0x3a0/0x420 [ 864.776477][T26930] __x64_sys_sendmsg+0x19b/0x260 [ 864.776500][T26930] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 864.776531][T26930] ? __pfx_ksys_write+0x10/0x10 [ 864.776550][T26930] ? rcu_is_watching+0x15/0xb0 [ 864.776574][T26930] ? do_syscall_64+0xbe/0x3b0 [ 864.776596][T26930] do_syscall_64+0xfa/0x3b0 [ 864.776612][T26930] ? lockdep_hardirqs_on+0x9c/0x150 [ 864.776629][T26930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.776646][T26930] ? clear_bhb_loop+0x60/0xb0 [ 864.776668][T26930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.776685][T26930] RIP: 0033:0x7f2b2498ebe9 [ 864.776702][T26930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.776717][T26930] RSP: 002b:00007f2b25896038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.776735][T26930] RAX: ffffffffffffffda RBX: 00007f2b24bc5fa0 RCX: 00007f2b2498ebe9 [ 864.776748][T26930] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 864.776759][T26930] RBP: 00007f2b25896090 R08: 0000000000000000 R09: 0000000000000000 [ 864.776768][T26930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.776779][T26930] R13: 00007f2b24bc6038 R14: 00007f2b24bc5fa0 R15: 00007ffee433c188 [ 864.776807][T26930] [ 864.791932][T26911] lo speed is unknown, defaulting to 1000 [ 865.023164][T26918] tipc: Disabling bearer [ 865.075772][T26940] netlink: 'syz.2.4855': attribute type 13 has an invalid length. [ 865.100558][T26940] netlink: 'syz.2.4855': attribute type 17 has an invalid length. [ 865.115485][T26941] openvswitch: netlink: Missing valid actions attribute. [ 865.149115][T26941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 865.159484][T26940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 865.243159][T26942] lo speed is unknown, defaulting to 1000 [ 865.261647][T26942] lo speed is unknown, defaulting to 1000 [ 865.436739][T26936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 865.819966][T26965] netlink: 'syz.3.4864': attribute type 13 has an invalid length. [ 865.825416][T26968] FAULT_INJECTION: forcing a failure. [ 865.825416][T26968] name failslab, interval 1, probability 0, space 0, times 0 [ 865.833980][T26965] netlink: 'syz.3.4864': attribute type 17 has an invalid length. [ 865.854042][T26968] CPU: 0 UID: 0 PID: 26968 Comm: syz.0.4860 Not tainted syzkaller #0 PREEMPT(full) [ 865.854066][T26968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 865.854077][T26968] Call Trace: [ 865.854085][T26968] [ 865.854094][T26968] dump_stack_lvl+0x189/0x250 [ 865.854119][T26968] ? __pfx____ratelimit+0x10/0x10 [ 865.854145][T26968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 865.854164][T26968] ? __pfx__printk+0x10/0x10 [ 865.854190][T26968] ? __pfx___might_resched+0x10/0x10 [ 865.854210][T26968] should_fail_ex+0x414/0x560 [ 865.854235][T26968] should_failslab+0xa8/0x100 [ 865.854258][T26968] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 865.854278][T26968] ? __alloc_skb+0x112/0x2d0 [ 865.854301][T26968] __alloc_skb+0x112/0x2d0 [ 865.854322][T26968] netlink_sendmsg+0x5c6/0xb30 [ 865.854351][T26968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.854372][T26968] ? aa_sock_msg_perm+0xf1/0x1d0 [ 865.854390][T26968] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 865.854406][T26968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.854424][T26968] __sock_sendmsg+0x219/0x270 [ 865.854451][T26968] ____sys_sendmsg+0x505/0x830 [ 865.854474][T26968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 865.854499][T26968] ? import_iovec+0x74/0xa0 [ 865.854520][T26968] ___sys_sendmsg+0x21f/0x2a0 [ 865.854540][T26968] ? __pfx____sys_sendmsg+0x10/0x10 [ 865.854592][T26968] ? __fget_files+0x2a/0x420 [ 865.854606][T26968] ? __fget_files+0x3a0/0x420 [ 865.854626][T26968] __x64_sys_sendmsg+0x19b/0x260 [ 865.854639][T26968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 865.854656][T26968] ? __pfx_ksys_write+0x10/0x10 [ 865.854668][T26968] ? rcu_is_watching+0x15/0xb0 [ 865.854681][T26968] ? do_syscall_64+0xbe/0x3b0 [ 865.854694][T26968] do_syscall_64+0xfa/0x3b0 [ 865.854703][T26968] ? lockdep_hardirqs_on+0x9c/0x150 [ 865.854713][T26968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.854722][T26968] ? clear_bhb_loop+0x60/0xb0 [ 865.854734][T26968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.854744][T26968] RIP: 0033:0x7fbbf5d8ebe9 [ 865.854754][T26968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.854763][T26968] RSP: 002b:00007fbbf6c7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.854774][T26968] RAX: ffffffffffffffda RBX: 00007fbbf5fc5fa0 RCX: 00007fbbf5d8ebe9 [ 865.854781][T26968] RDX: 00000000300048c0 RSI: 0000200000000700 RDI: 0000000000000004 [ 865.854788][T26968] RBP: 00007fbbf6c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 865.854794][T26968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.854800][T26968] R13: 00007fbbf5fc6038 R14: 00007fbbf5fc5fa0 R15: 00007ffd627aad18 [ 865.854816][T26968] [ 866.193124][T26965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 866.271368][ T10] lo speed is unknown, defaulting to 1000 [ 866.277344][ T10] syz2: Port: 1 Link ACTIVE [ 866.318009][T26970] lo speed is unknown, defaulting to 1000 [ 866.332758][T26965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.337125][T26970] lo speed is unknown, defaulting to 1000 [ 866.346757][T26980] IPv6: Can't replace route, no match found [ 866.389207][T26980] vlan4: entered allmulticast mode [ 866.403540][T26980] veth1: entered allmulticast mode [ 866.418121][T26982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.074568][T27015] lo speed is unknown, defaulting to 1000 [ 867.082958][T27015] lo speed is unknown, defaulting to 1000 [ 867.111039][T27014] ip6erspan0: entered allmulticast mode [ 867.273609][T27024] __nla_validate_parse: 8 callbacks suppressed [ 867.273627][T27024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4876'. [ 867.288886][T27024] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4876'. [ 867.304261][T27024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4876'. [ 867.333758][T27019] lo speed is unknown, defaulting to 1000 [ 867.337881][T27024] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 867.418090][T27019] lo speed is unknown, defaulting to 1000 [ 867.690398][T27035] syzkaller1: entered promiscuous mode [ 867.696475][T27035] syzkaller1: entered allmulticast mode [ 867.952177][T27022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4874'. [ 868.071176][T27049] netlink: 'syz.3.4882': attribute type 12 has an invalid length. [ 868.299395][T27061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4886'. [ 868.359860][T27061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4886'. [ 868.396906][T27062] lo speed is unknown, defaulting to 1000 [ 868.414370][T27062] lo speed is unknown, defaulting to 1000 [ 868.472494][T27061] ip6tnl2: entered promiscuous mode [ 868.478242][T27061] ip6tnl2: entered allmulticast mode [ 868.519515][T27073] netlink: 'syz.3.4886': attribute type 9 has an invalid length. [ 868.633737][T27073] netlink: 'syz.3.4886': attribute type 11 has an invalid length. [ 868.634257][T27074] netlink: 'syz.4.4888': attribute type 13 has an invalid length. [ 868.643558][T27073] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4886'. [ 868.718567][T27074] netlink: 'syz.4.4888': attribute type 17 has an invalid length. [ 868.796809][T27074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 868.885508][T27079] netlink: 'syz.2.4889': attribute type 4 has an invalid length. [ 868.921631][T27080] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4888'. [ 868.995783][T27085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.066444][T27077] lo speed is unknown, defaulting to 1000 [ 869.136258][T27087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4892'. [ 869.158096][T27074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 869.216773][T27077] lo speed is unknown, defaulting to 1000 [ 869.240637][T27091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4893'. [ 869.489218][T27105] FAULT_INJECTION: forcing a failure. [ 869.489218][T27105] name failslab, interval 1, probability 0, space 0, times 0 [ 869.510026][T27105] CPU: 1 UID: 0 PID: 27105 Comm: syz.1.4896 Not tainted syzkaller #0 PREEMPT(full) [ 869.510054][T27105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 869.510065][T27105] Call Trace: [ 869.510073][T27105] [ 869.510082][T27105] dump_stack_lvl+0x189/0x250 [ 869.510111][T27105] ? __pfx____ratelimit+0x10/0x10 [ 869.510136][T27105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 869.510157][T27105] ? __pfx__printk+0x10/0x10 [ 869.510186][T27105] ? __pfx___might_resched+0x10/0x10 [ 869.510208][T27105] should_fail_ex+0x414/0x560 [ 869.510236][T27105] should_failslab+0xa8/0x100 [ 869.510261][T27105] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 869.510284][T27105] ? __alloc_skb+0x112/0x2d0 [ 869.510307][T27105] __alloc_skb+0x112/0x2d0 [ 869.510329][T27105] netlink_sendmsg+0x5c6/0xb30 [ 869.510358][T27105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.510380][T27105] ? aa_sock_msg_perm+0xf1/0x1d0 [ 869.510400][T27105] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 869.510419][T27105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.510438][T27105] __sock_sendmsg+0x219/0x270 [ 869.510464][T27105] ____sys_sendmsg+0x505/0x830 [ 869.510490][T27105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 869.510520][T27105] ? import_iovec+0x74/0xa0 [ 869.510544][T27105] ___sys_sendmsg+0x21f/0x2a0 [ 869.510566][T27105] ? __pfx____sys_sendmsg+0x10/0x10 [ 869.510624][T27105] ? __fget_files+0x2a/0x420 [ 869.510640][T27105] ? __fget_files+0x3a0/0x420 [ 869.510668][T27105] __x64_sys_sendmsg+0x19b/0x260 [ 869.510690][T27105] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 869.510720][T27105] ? __pfx_ksys_write+0x10/0x10 [ 869.510748][T27105] ? do_syscall_64+0xbe/0x3b0 [ 869.510770][T27105] do_syscall_64+0xfa/0x3b0 [ 869.510786][T27105] ? lockdep_hardirqs_on+0x9c/0x150 [ 869.510803][T27105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.510821][T27105] ? clear_bhb_loop+0x60/0xb0 [ 869.510848][T27105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.510865][T27105] RIP: 0033:0x7f47d638ebe9 [ 869.510882][T27105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.510897][T27105] RSP: 002b:00007f47d72c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 869.510916][T27105] RAX: ffffffffffffffda RBX: 00007f47d65c5fa0 RCX: 00007f47d638ebe9 [ 869.510930][T27105] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 869.510942][T27105] RBP: 00007f47d72c0090 R08: 0000000000000000 R09: 0000000000000000 [ 869.510954][T27105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.510965][T27105] R13: 00007f47d65c6038 R14: 00007f47d65c5fa0 R15: 00007fffe19f8618 [ 869.510997][T27105] [ 870.111122][ T1305] lec:lec_start_xmit: lec0:No lecd attached [ 870.211840][T27129] FAULT_INJECTION: forcing a failure. [ 870.211840][T27129] name failslab, interval 1, probability 0, space 0, times 0 [ 870.243676][T27129] CPU: 1 UID: 0 PID: 27129 Comm: syz.2.4903 Not tainted syzkaller #0 PREEMPT(full) [ 870.243702][T27129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 870.243713][T27129] Call Trace: [ 870.243721][T27129] [ 870.243729][T27129] dump_stack_lvl+0x189/0x250 [ 870.243754][T27129] ? __pfx____ratelimit+0x10/0x10 [ 870.243785][T27129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 870.243805][T27129] ? __pfx__printk+0x10/0x10 [ 870.243833][T27129] ? __pfx___might_resched+0x10/0x10 [ 870.243849][T27129] ? fs_reclaim_acquire+0x7d/0x100 [ 870.243878][T27129] should_fail_ex+0x414/0x560 [ 870.243905][T27129] should_failslab+0xa8/0x100 [ 870.243930][T27129] kmem_cache_alloc_noprof+0x73/0x3c0 [ 870.243951][T27129] ? ep_insert+0x51a/0x19e0 [ 870.243977][T27129] ep_insert+0x51a/0x19e0 [ 870.244015][T27129] ? __pfx_ep_insert+0x10/0x10 [ 870.244036][T27129] ? __pfx___mutex_lock+0x10/0x10 [ 870.244054][T27129] ? __fget_files+0x2a/0x420 [ 870.244073][T27129] ? __fget_files+0x2a/0x420 [ 870.244104][T27129] ? __fget_files+0x3a0/0x420 [ 870.244118][T27129] ? __fget_files+0x2a/0x420 [ 870.244144][T27129] do_epoll_ctl+0x7f4/0xe80 [ 870.244176][T27129] __x64_sys_epoll_ctl+0x163/0x1a0 [ 870.244202][T27129] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 870.244230][T27129] ? do_syscall_64+0xbe/0x3b0 [ 870.244253][T27129] do_syscall_64+0xfa/0x3b0 [ 870.244268][T27129] ? lockdep_hardirqs_on+0x9c/0x150 [ 870.244285][T27129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.244300][T27129] ? clear_bhb_loop+0x60/0xb0 [ 870.244321][T27129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.244336][T27129] RIP: 0033:0x7f2b2498ebe9 [ 870.244354][T27129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.244369][T27129] RSP: 002b:00007f2b25896038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 870.244386][T27129] RAX: ffffffffffffffda RBX: 00007f2b24bc5fa0 RCX: 00007f2b2498ebe9 [ 870.244400][T27129] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 870.244411][T27129] RBP: 00007f2b25896090 R08: 0000000000000000 R09: 0000000000000000 [ 870.244422][T27129] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 870.244434][T27129] R13: 00007f2b24bc6038 R14: 00007f2b24bc5fa0 R15: 00007ffee433c188 [ 870.244464][T27129] [ 870.657657][T27136] lo speed is unknown, defaulting to 1000 [ 870.691584][T27140] lo speed is unknown, defaulting to 1000 [ 870.700023][T27140] lo speed is unknown, defaulting to 1000 [ 870.743759][T27136] lo speed is unknown, defaulting to 1000 [ 871.309215][T26904] Bluetooth: hci1: command 0x0405 tx timeout [ 871.480469][T27165] FAULT_INJECTION: forcing a failure. [ 871.480469][T27165] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 871.529440][T27165] CPU: 0 UID: 0 PID: 27165 Comm: syz.3.4912 Not tainted syzkaller #0 PREEMPT(full) [ 871.529466][T27165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 871.529477][T27165] Call Trace: [ 871.529484][T27165] [ 871.529492][T27165] dump_stack_lvl+0x189/0x250 [ 871.529518][T27165] ? __pfx____ratelimit+0x10/0x10 [ 871.529542][T27165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 871.529561][T27165] ? __pfx__printk+0x10/0x10 [ 871.529592][T27165] ? fs_reclaim_acquire+0x7d/0x100 [ 871.529624][T27165] should_fail_ex+0x414/0x560 [ 871.529649][T27165] prepare_alloc_pages+0x213/0x610 [ 871.529673][T27165] __alloc_frozen_pages_noprof+0x123/0x370 [ 871.529695][T27165] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 871.529722][T27165] ? policy_nodemask+0x27c/0x720 [ 871.529741][T27165] ? __lock_acquire+0xab9/0xd20 [ 871.529768][T27165] alloc_pages_mpol+0x232/0x4a0 [ 871.529796][T27165] alloc_pages_noprof+0xa9/0x190 [ 871.529820][T27165] get_free_pages_noprof+0xf/0x80 [ 871.529837][T27165] kasan_populate_vmalloc+0x33/0x1a0 [ 871.529856][T27165] ? do_raw_spin_unlock+0x122/0x240 [ 871.529881][T27165] alloc_vmap_area+0xd51/0x1490 [ 871.529919][T27165] ? __pfx_alloc_vmap_area+0x10/0x10 [ 871.529939][T27165] ? __kasan_kmalloc+0x93/0xb0 [ 871.529960][T27165] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 871.529982][T27165] ? __get_vm_area_node+0x13f/0x300 [ 871.530005][T27165] ? array_map_alloc+0x28b/0x700 [ 871.530022][T27165] __get_vm_area_node+0x1f8/0x300 [ 871.530049][T27165] __vmalloc_node_range_noprof+0x301/0x12f0 [ 871.530073][T27165] ? array_map_alloc+0x28b/0x700 [ 871.530118][T27165] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 871.530141][T27165] ? apparmor_capable+0x137/0x1b0 [ 871.530163][T27165] ? bpf_lsm_capable+0x9/0x20 [ 871.530183][T27165] ? security_capable+0x7e/0x2e0 [ 871.530206][T27165] bpf_map_area_alloc+0x12d/0x180 [ 871.530228][T27165] ? array_map_alloc+0x28b/0x700 [ 871.530242][T27165] array_map_alloc+0x28b/0x700 [ 871.530259][T27165] map_create+0xaa0/0x14d0 [ 871.530284][T27165] ? security_bpf+0x7e/0x300 [ 871.530307][T27165] __sys_bpf+0x60f/0x870 [ 871.530329][T27165] ? __pfx___sys_bpf+0x10/0x10 [ 871.530357][T27165] ? ksys_write+0x22a/0x250 [ 871.530376][T27165] ? __pfx_ksys_write+0x10/0x10 [ 871.530403][T27165] __x64_sys_bpf+0x7c/0x90 [ 871.530422][T27165] do_syscall_64+0xfa/0x3b0 [ 871.530439][T27165] ? lockdep_hardirqs_on+0x9c/0x150 [ 871.530454][T27165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.530471][T27165] ? clear_bhb_loop+0x60/0xb0 [ 871.530492][T27165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.530509][T27165] RIP: 0033:0x7fe17218ebe9 [ 871.530527][T27165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 871.530542][T27165] RSP: 002b:00007fe172fb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 871.530559][T27165] RAX: ffffffffffffffda RBX: 00007fe1723c5fa0 RCX: 00007fe17218ebe9 [ 871.530572][T27165] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 871.530590][T27165] RBP: 00007fe172fb8090 R08: 0000000000000000 R09: 0000000000000000 [ 871.530600][T27165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.530609][T27165] R13: 00007fe1723c6038 R14: 00007fe1723c5fa0 R15: 00007ffcc88ed828 [ 871.530638][T27165] [ 871.923166][T27174] netlink: 'syz.0.4914': attribute type 10 has an invalid length. [ 871.936599][T27174] sctp: [Deprecated]: syz.0.4914 (pid 27174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 871.936599][T27174] Use struct sctp_sack_info instead [ 872.192140][T27186] veth0_to_bridge: left promiscuous mode [ 872.221430][T27186] ip6tnl2: left promiscuous mode [ 872.231920][T27186] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 872.325384][T27186] __nla_validate_parse: 10 callbacks suppressed [ 872.325404][T27186] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4919'. [ 872.370756][T27196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4922'. [ 872.707190][T27211] lo speed is unknown, defaulting to 1000 [ 872.716933][T27211] lo speed is unknown, defaulting to 1000 [ 873.238599][T27230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4929'. [ 873.347356][T27232] FAULT_INJECTION: forcing a failure. [ 873.347356][T27232] name failslab, interval 1, probability 0, space 0, times 0 [ 873.367863][T27232] CPU: 0 UID: 0 PID: 27232 Comm: syz.2.4931 Not tainted syzkaller #0 PREEMPT(full) [ 873.367888][T27232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 873.367900][T27232] Call Trace: [ 873.367912][T27232] [ 873.367921][T27232] dump_stack_lvl+0x189/0x250 [ 873.367946][T27232] ? __pfx____ratelimit+0x10/0x10 [ 873.367971][T27232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 873.367989][T27232] ? __pfx__printk+0x10/0x10 [ 873.368017][T27232] ? __pfx___might_resched+0x10/0x10 [ 873.368037][T27232] should_fail_ex+0x414/0x560 [ 873.368065][T27232] should_failslab+0xa8/0x100 [ 873.368090][T27232] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 873.368114][T27232] ? __get_vm_area_node+0x13f/0x300 [ 873.368141][T27232] __get_vm_area_node+0x13f/0x300 [ 873.368167][T27232] __vmalloc_node_range_noprof+0x301/0x12f0 [ 873.368190][T27232] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 873.368243][T27232] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 873.368265][T27232] ? __might_fault+0xb0/0x130 [ 873.368287][T27232] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 873.368308][T27232] __vmalloc_noprof+0xb1/0xf0 [ 873.368326][T27232] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 873.368345][T27232] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 873.368367][T27232] bpf_prog_alloc+0x3c/0x1a0 [ 873.368386][T27232] __get_filter+0xff/0x400 [ 873.368409][T27232] sk_attach_filter+0x24/0x140 [ 873.368428][T27232] sk_setsockopt+0x1f83/0x2dc0 [ 873.368450][T27232] ? __pfx_sk_setsockopt+0x10/0x10 [ 873.368473][T27232] ? vfs_write+0x956/0xb30 [ 873.368494][T27232] ? __pfx___might_resched+0x10/0x10 [ 873.368515][T27232] ? __lock_acquire+0xab9/0xd20 [ 873.368539][T27232] udp_lib_setsockopt+0xec/0x970 [ 873.368556][T27232] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 873.368573][T27232] ? __fget_files+0x2a/0x420 [ 873.368584][T27232] ? aa_sock_opt_perm+0xff/0x1b0 [ 873.368599][T27232] udp_setsockopt+0x77/0xc0 [ 873.368611][T27232] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 873.368628][T27232] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 873.368648][T27232] do_sock_setsockopt+0x179/0x1b0 [ 873.368667][T27232] __x64_sys_setsockopt+0x13f/0x1b0 [ 873.368686][T27232] do_syscall_64+0xfa/0x3b0 [ 873.368699][T27232] ? lockdep_hardirqs_on+0x9c/0x150 [ 873.368712][T27232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.368726][T27232] ? clear_bhb_loop+0x60/0xb0 [ 873.368742][T27232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.368754][T27232] RIP: 0033:0x7f2b2498ebe9 [ 873.368768][T27232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.368780][T27232] RSP: 002b:00007f2b25896038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 873.368796][T27232] RAX: ffffffffffffffda RBX: 00007f2b24bc5fa0 RCX: 00007f2b2498ebe9 [ 873.368806][T27232] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 873.368814][T27232] RBP: 00007f2b25896090 R08: 0000000000000010 R09: 0000000000000000 [ 873.368824][T27232] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 873.368832][T27232] R13: 00007f2b24bc6038 R14: 00007f2b24bc5fa0 R15: 00007ffee433c188 [ 873.368856][T27232] [ 873.369094][T27232] syz.2.4931: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 873.559461][T27236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4933'. [ 873.562217][T27232] ,cpuset=/,mems_allowed=0-1 [ 873.708570][T27232] CPU: 0 UID: 0 PID: 27232 Comm: syz.2.4931 Not tainted syzkaller #0 PREEMPT(full) [ 873.708592][T27232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 873.708603][T27232] Call Trace: [ 873.708611][T27232] [ 873.708620][T27232] dump_stack_lvl+0x189/0x250 [ 873.708645][T27232] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 873.708669][T27232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 873.708689][T27232] ? __pfx__printk+0x10/0x10 [ 873.708711][T27232] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 873.708731][T27232] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 873.708759][T27232] warn_alloc+0x214/0x310 [ 873.708789][T27232] ? __pfx_warn_alloc+0x10/0x10 [ 873.708814][T27232] ? __get_vm_area_node+0x13f/0x300 [ 873.708841][T27232] ? __get_vm_area_node+0x2b5/0x300 [ 873.708871][T27232] __vmalloc_node_range_noprof+0x326/0x12f0 [ 873.708926][T27232] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 873.708950][T27232] ? __might_fault+0xb0/0x130 [ 873.708979][T27232] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 873.708999][T27232] __vmalloc_noprof+0xb1/0xf0 [ 873.709021][T27232] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 873.709045][T27232] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 873.709073][T27232] bpf_prog_alloc+0x3c/0x1a0 [ 873.709097][T27232] __get_filter+0xff/0x400 [ 873.709124][T27232] sk_attach_filter+0x24/0x140 [ 873.709148][T27232] sk_setsockopt+0x1f83/0x2dc0 [ 873.709174][T27232] ? __pfx_sk_setsockopt+0x10/0x10 [ 873.709194][T27232] ? vfs_write+0x956/0xb30 [ 873.709217][T27232] ? __pfx___might_resched+0x10/0x10 [ 873.709242][T27232] ? __lock_acquire+0xab9/0xd20 [ 873.709271][T27232] udp_lib_setsockopt+0xec/0x970 [ 873.709293][T27232] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 873.709314][T27232] ? __fget_files+0x2a/0x420 [ 873.709329][T27232] ? aa_sock_opt_perm+0xff/0x1b0 [ 873.709349][T27232] udp_setsockopt+0x77/0xc0 [ 873.709364][T27232] ? __pfx_udp_push_pending_frames+0x10/0x10 [ 873.709385][T27232] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 873.709411][T27232] do_sock_setsockopt+0x179/0x1b0 [ 873.709443][T27232] __x64_sys_setsockopt+0x13f/0x1b0 [ 873.709468][T27232] do_syscall_64+0xfa/0x3b0 [ 873.709484][T27232] ? lockdep_hardirqs_on+0x9c/0x150 [ 873.709499][T27232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.709516][T27232] ? clear_bhb_loop+0x60/0xb0 [ 873.709538][T27232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.709555][T27232] RIP: 0033:0x7f2b2498ebe9 [ 873.709570][T27232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.709585][T27232] RSP: 002b:00007f2b25896038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 873.709603][T27232] RAX: ffffffffffffffda RBX: 00007f2b24bc5fa0 RCX: 00007f2b2498ebe9 [ 873.709617][T27232] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 873.709627][T27232] RBP: 00007f2b25896090 R08: 0000000000000010 R09: 0000000000000000 [ 873.709637][T27232] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 873.709648][T27232] R13: 00007f2b24bc6038 R14: 00007f2b24bc5fa0 R15: 00007ffee433c188 [ 873.709677][T27232] [ 873.709694][T27232] Mem-Info: [ 874.044590][T27232] active_anon:7775 inactive_anon:0 isolated_anon:0 [ 874.044590][T27232] active_file:3869 inactive_file:40159 isolated_file:0 [ 874.044590][T27232] unevictable:768 dirty:495 writeback:0 [ 874.044590][T27232] slab_reclaimable:12825 slab_unreclaimable:174572 [ 874.044590][T27232] mapped:34477 shmem:4231 pagetables:1170 [ 874.044590][T27232] sec_pagetables:0 bounce:0 [ 874.044590][T27232] kernel_misc_reclaimable:0 [ 874.044590][T27232] free:1245987 free_pcp:14006 free_cma:0 [ 874.104343][T27232] Node 0 active_anon:31100kB inactive_anon:0kB active_file:15476kB inactive_file:160436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129008kB dirty:1980kB writeback:0kB shmem:15388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12772kB pagetables:4528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 874.154950][T27232] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 874.215564][T27232] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 874.277409][T27232] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 874.283342][T27232] Node 0 DMA32 free:1080324kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31052kB inactive_anon:0kB active_file:15476kB inactive_file:158872kB unevictable:1536kB writepending:1980kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:38936kB local_pcp:20788kB free_cma:0kB [ 874.338035][T27228] lo speed is unknown, defaulting to 1000 [ 874.357225][T27240] tc_dump_action: action bad kind [ 874.359048][T27232] lowmem_reserve[]: 0 0 1 1 1 [ 874.369537][T27232] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 874.418587][T27232] lowmem_reserve[]: 0 0 0 0 0 [ 874.423431][T27232] Node 1 Normal free:3888016kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17416kB local_pcp:8576kB free_cma:0kB [ 874.456251][T27228] lo speed is unknown, defaulting to 1000 [ 874.478285][T27243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4935'. [ 874.494304][T27232] lowmem_reserve[]: 0 0 0 0 0 [ 874.499687][T27232] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 874.524604][T27232] Node 0 DMA32: 866*4kB (UME) 506*8kB (UM) 231*16kB (UME) 57*32kB (UME) 160*64kB (UME) 29*128kB (UME) 28*256kB (UME) 17*512kB (ME) 5*1024kB (UME) 7*2048kB (UME) 251*4096kB (M) = 1090408kB [ 874.568547][T27232] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 874.581471][T27232] Node 1 Normal: 190*4kB (UE) 57*8kB (UME) 51*16kB (UME) 175*32kB (UME) 41*64kB (UME) 11*128kB (UME) 4*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3888016kB [ 874.643985][T27232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.667476][T27232] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 874.676552][T27249] FAULT_INJECTION: forcing a failure. [ 874.676552][T27249] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 874.684818][T27232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.718419][T27249] CPU: 0 UID: 0 PID: 27249 Comm: syz.3.4937 Not tainted syzkaller #0 PREEMPT(full) [ 874.718444][T27249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 874.718455][T27249] Call Trace: [ 874.718462][T27249] [ 874.718470][T27249] dump_stack_lvl+0x189/0x250 [ 874.718494][T27249] ? __pfx____ratelimit+0x10/0x10 [ 874.718518][T27249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 874.718536][T27249] ? __pfx__printk+0x10/0x10 [ 874.718559][T27249] ? fs_reclaim_acquire+0x7d/0x100 [ 874.718590][T27249] should_fail_ex+0x414/0x560 [ 874.718616][T27249] prepare_alloc_pages+0x213/0x610 [ 874.718641][T27249] __alloc_frozen_pages_noprof+0x123/0x370 [ 874.718662][T27249] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 874.718682][T27249] ? __lock_acquire+0xab9/0xd20 [ 874.718715][T27249] alloc_pages_mpol+0x232/0x4a0 [ 874.718742][T27249] alloc_pages_noprof+0xa9/0x190 [ 874.718765][T27249] pte_alloc_one+0x21/0x170 [ 874.718786][T27249] __pte_alloc+0x25/0x1a0 [ 874.718806][T27249] __handle_mm_fault+0x49b3/0x5440 [ 874.718840][T27249] ? __pfx___handle_mm_fault+0x10/0x10 [ 874.718881][T27249] ? find_vma+0xe7/0x160 [ 874.718900][T27249] ? __pfx_find_vma+0x10/0x10 [ 874.718921][T27249] handle_mm_fault+0x40a/0x8e0 [ 874.718949][T27249] do_user_addr_fault+0x764/0x1390 [ 874.718989][T27249] exc_page_fault+0x76/0xf0 [ 874.719009][T27249] ? __might_fault+0xb0/0x130 [ 874.719030][T27249] asm_exc_page_fault+0x26/0x30 [ 874.719046][T27249] RIP: 0010:__put_user_4+0xd/0x20 [ 874.719063][T27249] Code: 66 89 01 31 c9 0f 01 ca e9 50 44 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 874.719077][T27249] RSP: 0018:ffffc9000bc2fe50 EFLAGS: 00050206 [ 874.719093][T27249] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 00002000000000c0 [ 874.719104][T27249] RDX: 0000000000000000 RSI: ffffffff8dba7fb3 RDI: ffffffff8be33800 [ 874.719115][T27249] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffff820b7f80 [ 874.719125][T27249] R10: dffffc0000000000 R11: ffffed1003bf8909 R12: 0000000000000000 [ 874.719137][T27249] R13: 00002000000000c0 R14: 000000000000002d R15: 0000000000000005 [ 874.719154][T27249] ? __might_fault+0xb0/0x130 [ 874.719182][T27249] __sys_socketpair+0xb7/0x560 [ 874.719213][T27249] __x64_sys_socketpair+0x9b/0xb0 [ 874.719237][T27249] do_syscall_64+0xfa/0x3b0 [ 874.719263][T27249] ? lockdep_hardirqs_on+0x9c/0x150 [ 874.719278][T27249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.719295][T27249] ? clear_bhb_loop+0x60/0xb0 [ 874.719316][T27249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.719332][T27249] RIP: 0033:0x7fe17218ebe9 [ 874.719347][T27249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.719359][T27249] RSP: 002b:00007fe172fb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 874.719376][T27249] RAX: ffffffffffffffda RBX: 00007fe1723c5fa0 RCX: 00007fe17218ebe9 [ 874.719387][T27249] RDX: 0000000000000001 RSI: 0000000000000005 RDI: 000000000000002d [ 874.719398][T27249] RBP: 00007fe172fb8090 R08: 0000000000000000 R09: 0000000000000000 [ 874.719409][T27249] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 874.719419][T27249] R13: 00007fe1723c6038 R14: 00007fe1723c5fa0 R15: 00007ffcc88ed828 [ 874.719448][T27249] [ 875.081622][T27232] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 875.123567][T27232] 45436 total pagecache pages [ 875.147297][T27232] 0 pages in swap cache [ 875.171067][T27232] Free swap = 124996kB [ 875.190531][T27232] Total swap = 124996kB [ 875.218449][T27232] 2097051 pages RAM [ 875.244383][T27232] 0 pages HighMem/MovableOnly [ 875.287677][T27232] 425669 pages reserved [ 875.311990][T27232] 0 pages cma reserved [ 875.530352][T27265] FAULT_INJECTION: forcing a failure. [ 875.530352][T27265] name failslab, interval 1, probability 0, space 0, times 0 [ 875.548210][T27265] CPU: 0 UID: 0 PID: 27265 Comm: syz.3.4943 Not tainted syzkaller #0 PREEMPT(full) [ 875.548236][T27265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 875.548247][T27265] Call Trace: [ 875.548255][T27265] [ 875.548270][T27265] dump_stack_lvl+0x189/0x250 [ 875.548296][T27265] ? __pfx____ratelimit+0x10/0x10 [ 875.548326][T27265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 875.548346][T27265] ? __pfx__printk+0x10/0x10 [ 875.548375][T27265] ? __pfx___might_resched+0x10/0x10 [ 875.548397][T27265] should_fail_ex+0x414/0x560 [ 875.548423][T27265] should_failslab+0xa8/0x100 [ 875.548449][T27265] kmem_cache_alloc_noprof+0x73/0x3c0 [ 875.548470][T27265] ? security_inode_alloc+0x39/0x330 [ 875.548493][T27265] security_inode_alloc+0x39/0x330 [ 875.548513][T27265] inode_init_always_gfp+0x9ed/0xdc0 [ 875.548543][T27265] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 875.548565][T27265] alloc_inode+0x82/0x1b0 [ 875.548588][T27265] new_inode+0x22/0x170 [ 875.548609][T27265] ? resv_map_alloc+0x1da/0x2c0 [ 875.548631][T27265] hugetlbfs_get_inode+0x80/0x660 [ 875.548660][T27265] hugetlb_file_setup+0x21d/0x630 [ 875.548686][T27265] ksys_mmap_pgoff+0x22f/0x760 [ 875.548716][T27265] do_syscall_64+0xfa/0x3b0 [ 875.548732][T27265] ? lockdep_hardirqs_on+0x9c/0x150 [ 875.548749][T27265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.548766][T27265] ? clear_bhb_loop+0x60/0xb0 [ 875.548787][T27265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.548804][T27265] RIP: 0033:0x7fe17218ebe9 [ 875.548820][T27265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.548835][T27265] RSP: 002b:00007fe172fb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 875.548854][T27265] RAX: ffffffffffffffda RBX: 00007fe1723c5fa0 RCX: 00007fe17218ebe9 [ 875.548867][T27265] RDX: 0000000000000005 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 875.548879][T27265] RBP: 00007fe172fb8090 R08: ffffffffffffffff R09: 0000000000000000 [ 875.548891][T27265] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001 [ 875.548903][T27265] R13: 00007fe1723c6038 R14: 00007fe1723c5fa0 R15: 00007ffcc88ed828 [ 875.548933][T27265] [ 875.864500][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 875.872575][ C0] lec:lec_tx_timeout: lec0 [ 875.887326][T27275] lo speed is unknown, defaulting to 1000 [ 875.895271][T27275] lo speed is unknown, defaulting to 1000 [ 875.997814][T27279] netlink: 'syz.4.4945': attribute type 13 has an invalid length. [ 876.006007][T27279] netlink: 'syz.4.4945': attribute type 17 has an invalid length. [ 876.192858][T27279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 876.194340][T27291] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4945'. [ 876.309882][T27282] lo speed is unknown, defaulting to 1000 [ 876.318043][T27279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 876.351771][T27296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4950'. [ 876.376962][T27298] FAULT_INJECTION: forcing a failure. [ 876.376962][T27298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.390465][T27282] lo speed is unknown, defaulting to 1000 [ 876.399696][T27296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4950'. [ 876.400109][T27298] CPU: 0 UID: 0 PID: 27298 Comm: syz.0.4949 Not tainted syzkaller #0 PREEMPT(full) [ 876.400129][T27298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 876.400140][T27298] Call Trace: [ 876.400148][T27298] [ 876.400156][T27298] dump_stack_lvl+0x189/0x250 [ 876.400189][T27298] ? __pfx____ratelimit+0x10/0x10 [ 876.400213][T27298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 876.400231][T27298] ? __pfx__printk+0x10/0x10 [ 876.400254][T27298] ? __might_fault+0xb0/0x130 [ 876.400287][T27298] should_fail_ex+0x414/0x560 [ 876.400313][T27298] _copy_from_iter+0x1de/0x1790 [ 876.400338][T27298] ? rcu_is_watching+0x15/0xb0 [ 876.400357][T27298] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 876.400380][T27298] ? __pfx__copy_from_iter+0x10/0x10 [ 876.400400][T27298] ? __build_skb_around+0x257/0x3e0 [ 876.400421][T27298] ? netlink_sendmsg+0x642/0xb30 [ 876.400436][T27298] ? skb_put+0x11b/0x210 [ 876.400457][T27298] netlink_sendmsg+0x6b2/0xb30 [ 876.400484][T27298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.400504][T27298] ? aa_sock_msg_perm+0xf1/0x1d0 [ 876.400522][T27298] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 876.400540][T27298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 876.400558][T27298] __sock_sendmsg+0x219/0x270 [ 876.400584][T27298] ____sys_sendmsg+0x505/0x830 [ 876.400608][T27298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 876.400635][T27298] ? import_iovec+0x74/0xa0 [ 876.400658][T27298] ___sys_sendmsg+0x21f/0x2a0 [ 876.400679][T27298] ? __pfx____sys_sendmsg+0x10/0x10 [ 876.400733][T27298] ? __fget_files+0x2a/0x420 [ 876.400747][T27298] ? __fget_files+0x3a0/0x420 [ 876.400773][T27298] __x64_sys_sendmsg+0x19b/0x260 [ 876.400800][T27298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 876.400828][T27298] ? __pfx_ksys_write+0x10/0x10 [ 876.400847][T27298] ? rcu_is_watching+0x15/0xb0 [ 876.400869][T27298] ? do_syscall_64+0xbe/0x3b0 [ 876.400891][T27298] do_syscall_64+0xfa/0x3b0 [ 876.400906][T27298] ? lockdep_hardirqs_on+0x9c/0x150 [ 876.400922][T27298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.400939][T27298] ? clear_bhb_loop+0x60/0xb0 [ 876.400960][T27298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.400976][T27298] RIP: 0033:0x7fbbf5d8ebe9 [ 876.400992][T27298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.401007][T27298] RSP: 002b:00007fbbf6c7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.401025][T27298] RAX: ffffffffffffffda RBX: 00007fbbf5fc5fa0 RCX: 00007fbbf5d8ebe9 [ 876.401039][T27298] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 876.401050][T27298] RBP: 00007fbbf6c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 876.401061][T27298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.401072][T27298] R13: 00007fbbf5fc6038 R14: 00007fbbf5fc5fa0 R15: 00007ffd627aad18 [ 876.401101][T27298] [ 876.698896][T27307] netlink: 'syz.3.4950': attribute type 9 has an invalid length. [ 876.725306][T27307] netlink: 'syz.3.4950': attribute type 11 has an invalid length. [ 876.733223][T27307] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4950'. [ 876.755455][T27303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4951'. [ 877.038054][T27311] lo speed is unknown, defaulting to 1000 [ 877.057972][T27311] lo speed is unknown, defaulting to 1000 [ 877.158778][T27325] FAULT_INJECTION: forcing a failure. [ 877.158778][T27325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.174825][T27325] CPU: 1 UID: 0 PID: 27325 Comm: syz.3.4955 Not tainted syzkaller #0 PREEMPT(full) [ 877.174850][T27325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 877.174861][T27325] Call Trace: [ 877.174869][T27325] [ 877.174878][T27325] dump_stack_lvl+0x189/0x250 [ 877.174904][T27325] ? __pfx____ratelimit+0x10/0x10 [ 877.174929][T27325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 877.174949][T27325] ? __pfx__printk+0x10/0x10 [ 877.174986][T27325] should_fail_ex+0x414/0x560 [ 877.175013][T27325] _copy_to_user+0x31/0xb0 [ 877.175036][T27325] simple_read_from_buffer+0xe1/0x170 [ 877.175064][T27325] proc_fail_nth_read+0x1b3/0x220 [ 877.175088][T27325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 877.175111][T27325] ? rw_verify_area+0x2a6/0x4d0 [ 877.175131][T27325] ? __lock_acquire+0xab9/0xd20 [ 877.175151][T27325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 877.175172][T27325] vfs_read+0x1fd/0xa30 [ 877.175192][T27325] ? fdget_pos+0x247/0x320 [ 877.175212][T27325] ? __pfx___mutex_lock+0x10/0x10 [ 877.175232][T27325] ? __pfx_vfs_read+0x10/0x10 [ 877.175254][T27325] ? __fget_files+0x2a/0x420 [ 877.175275][T27325] ? __fget_files+0x3a0/0x420 [ 877.175289][T27325] ? __fget_files+0x2a/0x420 [ 877.175315][T27325] ksys_read+0x145/0x250 [ 877.175338][T27325] ? __pfx_ksys_read+0x10/0x10 [ 877.175356][T27325] ? rcu_is_watching+0x15/0xb0 [ 877.175380][T27325] ? do_syscall_64+0xbe/0x3b0 [ 877.175402][T27325] do_syscall_64+0xfa/0x3b0 [ 877.175419][T27325] ? lockdep_hardirqs_on+0x9c/0x150 [ 877.175435][T27325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.175452][T27325] ? clear_bhb_loop+0x60/0xb0 [ 877.175474][T27325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.175491][T27325] RIP: 0033:0x7fe17218d5fc [ 877.175506][T27325] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 877.175521][T27325] RSP: 002b:00007fe172fb8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 877.175540][T27325] RAX: ffffffffffffffda RBX: 00007fe1723c5fa0 RCX: 00007fe17218d5fc [ 877.175554][T27325] RDX: 000000000000000f RSI: 00007fe172fb80a0 RDI: 0000000000000005 [ 877.175565][T27325] RBP: 00007fe172fb8090 R08: 0000000000000000 R09: 0000000000000000 [ 877.175576][T27325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.175587][T27325] R13: 00007fe1723c6038 R14: 00007fe1723c5fa0 R15: 00007ffcc88ed828 [ 877.175619][T27325] [ 877.729097][T27340] __nla_validate_parse: 2 callbacks suppressed [ 877.729118][T27340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4957'. [ 877.784845][T27345] lo speed is unknown, defaulting to 1000 [ 877.809143][T27345] lo speed is unknown, defaulting to 1000 [ 877.859786][T27352] netlink: 'syz.0.4960': attribute type 13 has an invalid length. [ 877.876024][T27352] netlink: 'syz.0.4960': attribute type 17 has an invalid length. [ 877.886744][T27349] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 877.993349][T27353] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4961'. [ 878.102674][T27361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4960'. [ 878.122894][T27352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.140987][T27352] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.160754][T27352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 878.188009][T27365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.281769][T27371] syz_tun: entered allmulticast mode [ 878.290605][T27362] netlink: 'syz.4.4964': attribute type 3 has an invalid length. [ 878.308062][T27347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.337791][T27357] lo speed is unknown, defaulting to 1000 [ 878.533790][T27374] netlink: 'syz.2.4965': attribute type 4 has an invalid length. [ 878.586131][T27357] lo speed is unknown, defaulting to 1000 [ 878.593831][T27354] lo speed is unknown, defaulting to 1000 [ 878.626449][T27360] syz_tun: left allmulticast mode [ 878.632281][T23021] lo speed is unknown, defaulting to 1000 [ 878.641738][T23021] syz1: Port: 1 Link DOWN [ 878.657195][T27354] lo speed is unknown, defaulting to 1000 [ 879.524863][T27408] lo speed is unknown, defaulting to 1000 [ 879.563027][T27408] lo speed is unknown, defaulting to 1000 [ 880.217972][T27432] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4978'. [ 880.250110][T27419] syzkaller0: entered promiscuous mode [ 880.262990][T27419] syzkaller0: entered allmulticast mode [ 880.271170][T27429] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 880.316515][T27433] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 880.540735][T27436] tipc: Enabled bearer , priority 0 [ 880.723734][T27449] netlink: 'syz.0.4982': attribute type 13 has an invalid length. [ 880.731117][T27435] tipc: Disabling bearer [ 880.775123][T27449] netlink: 'syz.0.4982': attribute type 17 has an invalid length. [ 880.840129][T27449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 880.926114][T27449] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4982'. [ 880.982457][T27450] lo speed is unknown, defaulting to 1000 [ 881.005614][T27449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.022808][T27450] lo speed is unknown, defaulting to 1000 [ 881.060928][T27462] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 881.076800][T27449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.149516][T27462] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4987'. [ 881.413369][T27460] lo speed is unknown, defaulting to 1000 [ 881.459228][T27470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4989'. [ 881.503386][T27460] lo speed is unknown, defaulting to 1000 [ 881.528038][T27463] lo speed is unknown, defaulting to 1000 [ 881.565411][T27472] tipc: Enabling of bearer rejected, failed to enable media [ 881.595417][T27470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4989'. [ 881.615725][T27463] lo speed is unknown, defaulting to 1000 [ 882.320733][T27491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4993'. [ 882.364738][T27491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4993'. [ 882.418020][T27491] ip6tnl2: entered promiscuous mode [ 882.468001][T27491] ip6tnl2: entered allmulticast mode [ 882.553589][T27500] netlink: 'syz.0.4993': attribute type 9 has an invalid length. [ 882.598059][T27500] netlink: 'syz.0.4993': attribute type 11 has an invalid length. [ 882.762132][T27518] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 882.779570][T27499] netlink: 'syz.2.4996': attribute type 3 has an invalid length. [ 882.836866][T27510] syzkaller1: entered promiscuous mode [ 882.862147][T27510] syzkaller1: entered allmulticast mode [ 882.919021][T27499] syz_tun: entered allmulticast mode [ 883.175989][T27505] vlan4: left allmulticast mode [ 883.184966][T27505] veth1: left allmulticast mode [ 883.244407][T27497] syz_tun: left allmulticast mode [ 883.306485][T27536] netlink: 'syz.3.5003': attribute type 13 has an invalid length. [ 883.324802][T27536] netlink: 'syz.3.5003': attribute type 17 has an invalid length. [ 883.402109][T27539] __nla_validate_parse: 1 callbacks suppressed [ 883.402128][T27539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5005'. [ 883.432453][T27536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 883.495110][T27536] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5003'. [ 883.536363][T27536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.546738][T27539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5005'. [ 883.562625][T27531] lo speed is unknown, defaulting to 1000 [ 883.588430][T27531] lo speed is unknown, defaulting to 1000 [ 883.639347][T27536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.782833][T27544] lo speed is unknown, defaulting to 1000 [ 883.790602][T27544] lo speed is unknown, defaulting to 1000 [ 884.029167][T27556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5009'. [ 884.044999][T27556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5009'. [ 884.363258][T27566] netlink: 'syz.0.5012': attribute type 13 has an invalid length. [ 884.371376][T27566] netlink: 'syz.0.5012': attribute type 17 has an invalid length. [ 884.431537][T27566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 884.554188][T27566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5012'. [ 884.560262][T27568] lo speed is unknown, defaulting to 1000 [ 884.574622][T27566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 884.589418][T27568] lo speed is unknown, defaulting to 1000 [ 884.644372][T27566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 884.703052][T27575] netlink: 'syz.3.5016': attribute type 3 has an invalid length. [ 884.786033][T27575] syz_tun: entered allmulticast mode [ 884.946514][T27583] veth0_to_bridge: left allmulticast mode [ 884.967922][T27583] ip6tnl2: left allmulticast mode [ 884.996927][ T10] lo speed is unknown, defaulting to 1000 [ 885.002256][T27574] syz_tun: left allmulticast mode [ 885.004474][ T10] syz2: Port: 1 Link DOWN [ 885.048751][ T9148] lec:lec_start_xmit: lec0:No lecd attached [ 885.326337][T27598] lo speed is unknown, defaulting to 1000 [ 885.341133][T27598] lo speed is unknown, defaulting to 1000 [ 885.610137][T27608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5026'. [ 885.619406][T27608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5026'. [ 886.465790][T27614] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 886.562934][T27626] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 886.650542][T27632] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5029'. [ 886.897711][T27643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5034'. [ 886.924117][T27639] bridge0: entered allmulticast mode [ 886.929824][T27641] netlink: 'syz.0.5033': attribute type 3 has an invalid length. [ 886.979292][T27641] syz_tun: entered allmulticast mode [ 887.000314][T27641] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 887.024221][T27640] syz_tun: left allmulticast mode [ 887.057776][T27647] : entered promiscuous mode [ 887.315678][T27664] lo speed is unknown, defaulting to 1000 [ 887.324147][T27664] lo speed is unknown, defaulting to 1000 [ 887.473589][T27682] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 887.514932][T27680] syzkaller0: entered promiscuous mode [ 887.528803][T27680] syzkaller0: entered allmulticast mode [ 887.575529][T27670] tipc: Enabled bearer , priority 0 [ 887.590675][T27676] FAULT_INJECTION: forcing a failure. [ 887.590675][T27676] name failslab, interval 1, probability 0, space 0, times 0 [ 887.612157][T27676] CPU: 0 UID: 0 PID: 27676 Comm: syz.4.5043 Not tainted syzkaller #0 PREEMPT(full) [ 887.612182][T27676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 887.612194][T27676] Call Trace: [ 887.612202][T27676] [ 887.612210][T27676] dump_stack_lvl+0x189/0x250 [ 887.612235][T27676] ? __pfx____ratelimit+0x10/0x10 [ 887.612260][T27676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.612278][T27676] ? __pfx__printk+0x10/0x10 [ 887.612307][T27676] ? __pfx___might_resched+0x10/0x10 [ 887.612324][T27676] ? fs_reclaim_acquire+0x7d/0x100 [ 887.612354][T27676] should_fail_ex+0x414/0x560 [ 887.612381][T27676] should_failslab+0xa8/0x100 [ 887.612406][T27676] __kmalloc_cache_noprof+0x70/0x3d0 [ 887.612427][T27676] ? nf_tables_newtable+0x435/0x1890 [ 887.612446][T27676] ? nla_strcmp+0x106/0x140 [ 887.612467][T27676] nf_tables_newtable+0x435/0x1890 [ 887.612508][T27676] nfnetlink_rcv+0x1132/0x2520 [ 887.612566][T27676] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 887.612644][T27676] ? netlink_deliver_tap+0x2e/0x1b0 [ 887.612683][T27676] netlink_unicast+0x82c/0x9e0 [ 887.612717][T27676] ? __pfx_netlink_unicast+0x10/0x10 [ 887.612742][T27676] ? netlink_sendmsg+0x642/0xb30 [ 887.612757][T27676] ? skb_put+0x11b/0x210 [ 887.612779][T27676] netlink_sendmsg+0x805/0xb30 [ 887.612808][T27676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.612830][T27676] ? aa_sock_msg_perm+0xf1/0x1d0 [ 887.612849][T27676] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 887.612866][T27676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.612885][T27676] __sock_sendmsg+0x219/0x270 [ 887.612911][T27676] ____sys_sendmsg+0x505/0x830 [ 887.612935][T27676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 887.612966][T27676] ? import_iovec+0x74/0xa0 [ 887.612990][T27676] ___sys_sendmsg+0x21f/0x2a0 [ 887.613011][T27676] ? __pfx____sys_sendmsg+0x10/0x10 [ 887.613072][T27676] ? __fget_files+0x2a/0x420 [ 887.613087][T27676] ? __fget_files+0x3a0/0x420 [ 887.613120][T27676] __x64_sys_sendmsg+0x19b/0x260 [ 887.613145][T27676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 887.613174][T27676] ? __pfx_ksys_write+0x10/0x10 [ 887.613192][T27676] ? rcu_is_watching+0x15/0xb0 [ 887.613216][T27676] ? do_syscall_64+0xbe/0x3b0 [ 887.613239][T27676] do_syscall_64+0xfa/0x3b0 [ 887.613253][T27676] ? lockdep_hardirqs_on+0x9c/0x150 [ 887.613269][T27676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.613286][T27676] ? clear_bhb_loop+0x60/0xb0 [ 887.613307][T27676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.613324][T27676] RIP: 0033:0x7f7b0198ebe9 [ 887.613340][T27676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.613355][T27676] RSP: 002b:00007f7b0274a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.613374][T27676] RAX: ffffffffffffffda RBX: 00007f7b01bc5fa0 RCX: 00007f7b0198ebe9 [ 887.613387][T27676] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 887.613398][T27676] RBP: 00007f7b0274a090 R08: 0000000000000000 R09: 0000000000000000 [ 887.613409][T27676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.613419][T27676] R13: 00007f7b01bc6038 R14: 00007f7b01bc5fa0 R15: 00007fffb0351f48 [ 887.613450][T27676] [ 888.091881][T27697] sit0: entered promiscuous mode [ 888.097100][T27697] netlink: 'syz.4.5047': attribute type 1 has an invalid length. [ 888.139694][T27663] tipc: Resetting bearer [ 888.161435][T27699] netlink: 'syz.0.5046': attribute type 1 has an invalid length. [ 888.169504][T27699] netlink: 'syz.0.5046': attribute type 3 has an invalid length. [ 888.225702][T27663] tipc: Disabling bearer [ 888.243877][T27702] FAULT_INJECTION: forcing a failure. [ 888.243877][T27702] name failslab, interval 1, probability 0, space 0, times 0 [ 888.274661][T27702] CPU: 1 UID: 0 PID: 27702 Comm: syz.3.5049 Not tainted syzkaller #0 PREEMPT(full) [ 888.274685][T27702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 888.274696][T27702] Call Trace: [ 888.274704][T27702] [ 888.274712][T27702] dump_stack_lvl+0x189/0x250 [ 888.274737][T27702] ? __pfx____ratelimit+0x10/0x10 [ 888.274760][T27702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 888.274778][T27702] ? __pfx__printk+0x10/0x10 [ 888.274806][T27702] ? __pfx___might_resched+0x10/0x10 [ 888.274821][T27702] ? fs_reclaim_acquire+0x7d/0x100 [ 888.274850][T27702] should_fail_ex+0x414/0x560 [ 888.274878][T27702] should_failslab+0xa8/0x100 [ 888.274902][T27702] __kmalloc_cache_noprof+0x70/0x3d0 [ 888.274924][T27702] ? nf_tables_newtable+0x435/0x1890 [ 888.274958][T27702] nf_tables_newtable+0x435/0x1890 [ 888.274975][T27702] ? __pfx_nfnl_pernet+0x2/0x10 [ 888.275018][T27702] nfnetlink_rcv+0x1132/0x2520 [ 888.275075][T27702] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 888.275153][T27702] ? netlink_deliver_tap+0x2e/0x1b0 [ 888.275190][T27702] netlink_unicast+0x82c/0x9e0 [ 888.275224][T27702] ? __pfx_netlink_unicast+0x10/0x10 [ 888.275250][T27702] ? netlink_sendmsg+0x642/0xb30 [ 888.275265][T27702] ? skb_put+0x11b/0x210 [ 888.275288][T27702] netlink_sendmsg+0x805/0xb30 [ 888.275316][T27702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 888.275338][T27702] ? aa_sock_msg_perm+0xf1/0x1d0 [ 888.275358][T27702] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 888.275376][T27702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 888.275395][T27702] __sock_sendmsg+0x219/0x270 [ 888.275422][T27702] ____sys_sendmsg+0x505/0x830 [ 888.275449][T27702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 888.275479][T27702] ? import_iovec+0x74/0xa0 [ 888.275503][T27702] ___sys_sendmsg+0x21f/0x2a0 [ 888.275526][T27702] ? __pfx____sys_sendmsg+0x10/0x10 [ 888.275586][T27702] ? __fget_files+0x2a/0x420 [ 888.275601][T27702] ? __fget_files+0x3a0/0x420 [ 888.275627][T27702] __x64_sys_sendmsg+0x19b/0x260 [ 888.275650][T27702] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 888.275694][T27702] ? __pfx_ksys_write+0x10/0x10 [ 888.275709][T27702] ? rcu_is_watching+0x15/0xb0 [ 888.275732][T27702] ? do_syscall_64+0xbe/0x3b0 [ 888.275754][T27702] do_syscall_64+0xfa/0x3b0 [ 888.275771][T27702] ? lockdep_hardirqs_on+0x9c/0x150 [ 888.275788][T27702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.275805][T27702] ? clear_bhb_loop+0x60/0xb0 [ 888.275826][T27702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.275843][T27702] RIP: 0033:0x7fe17218ebe9 [ 888.275860][T27702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.275875][T27702] RSP: 002b:00007fe172fb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.275895][T27702] RAX: ffffffffffffffda RBX: 00007fe1723c5fa0 RCX: 00007fe17218ebe9 [ 888.275909][T27702] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 888.275921][T27702] RBP: 00007fe172fb8090 R08: 0000000000000000 R09: 0000000000000000 [ 888.275940][T27702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.275951][T27702] R13: 00007fe1723c6038 R14: 00007fe1723c5fa0 R15: 00007ffcc88ed828 [ 888.275983][T27702] [ 888.830137][T27717] FAULT_INJECTION: forcing a failure. [ 888.830137][T27717] name failslab, interval 1, probability 0, space 0, times 0 [ 888.848315][T27717] CPU: 0 UID: 0 PID: 27717 Comm: syz.2.5053 Not tainted syzkaller #0 PREEMPT(full) [ 888.848340][T27717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 888.848351][T27717] Call Trace: [ 888.848359][T27717] [ 888.848368][T27717] dump_stack_lvl+0x189/0x250 [ 888.848393][T27717] ? __pfx____ratelimit+0x10/0x10 [ 888.848418][T27717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 888.848438][T27717] ? __pfx__printk+0x10/0x10 [ 888.848462][T27717] ? __pfx___might_resched+0x10/0x10 [ 888.848479][T27717] ? fs_reclaim_acquire+0x7d/0x100 [ 888.848508][T27717] should_fail_ex+0x414/0x560 [ 888.848536][T27717] should_failslab+0xa8/0x100 [ 888.848563][T27717] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 888.848584][T27717] ? get_current_settings+0x81a/0xa10 [ 888.848603][T27717] ? __alloc_skb+0x112/0x2d0 [ 888.848633][T27717] __alloc_skb+0x112/0x2d0 [ 888.848656][T27717] mgmt_cmd_complete+0x49/0x590 [ 888.848683][T27717] set_connectable+0x392/0x790 [ 888.848709][T27717] ? __pfx_set_connectable+0x10/0x10 [ 888.848738][T27717] hci_mgmt_cmd+0x9c9/0xef0 [ 888.848769][T27717] hci_sock_sendmsg+0x6ca/0xef0 [ 888.848793][T27717] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 888.848810][T27717] ? aa_sock_msg_perm+0xf1/0x1d0 [ 888.848830][T27717] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 888.848848][T27717] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 888.848867][T27717] __sock_sendmsg+0x219/0x270 [ 888.848892][T27717] sock_write_iter+0x258/0x330 [ 888.848917][T27717] ? __pfx_sock_write_iter+0x10/0x10 [ 888.848949][T27717] ? bpf_lsm_file_permission+0x9/0x20 [ 888.848967][T27717] ? security_file_permission+0x75/0x290 [ 888.848999][T27717] vfs_write+0x5c6/0xb30 [ 888.849026][T27717] ? __pfx_sock_write_iter+0x10/0x10 [ 888.849048][T27717] ? __pfx_vfs_write+0x10/0x10 [ 888.849079][T27717] ? __fget_files+0x2a/0x420 [ 888.849105][T27717] ksys_write+0x145/0x250 [ 888.849125][T27717] ? __pfx_ksys_write+0x10/0x10 [ 888.849142][T27717] ? rcu_is_watching+0x15/0xb0 [ 888.849163][T27717] ? do_syscall_64+0xbe/0x3b0 [ 888.849184][T27717] do_syscall_64+0xfa/0x3b0 [ 888.849198][T27717] ? lockdep_hardirqs_on+0x9c/0x150 [ 888.849213][T27717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.849230][T27717] ? clear_bhb_loop+0x60/0xb0 [ 888.849252][T27717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.849269][T27717] RIP: 0033:0x7f2b2498ebe9 [ 888.849285][T27717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.849301][T27717] RSP: 002b:00007f2b25896038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 888.849320][T27717] RAX: ffffffffffffffda RBX: 00007f2b24bc5fa0 RCX: 00007f2b2498ebe9 [ 888.849334][T27717] RDX: 0000000000000007 RSI: 0000200000000340 RDI: 0000000000000004 [ 888.849345][T27717] RBP: 00007f2b25896090 R08: 0000000000000000 R09: 0000000000000000 [ 888.849356][T27717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.849368][T27717] R13: 00007f2b24bc6038 R14: 00007f2b24bc5fa0 R15: 00007ffee433c188 [ 888.849400][T27717] [ 889.153820][T27719] __nla_validate_parse: 3 callbacks suppressed [ 889.153838][T27719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5052'. [ 889.196533][T27708] netlink: 'syz.0.5050': attribute type 3 has an invalid length. [ 889.206903][T27716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5052'. [ 889.255037][T27708] syz_tun: entered allmulticast mode [ 889.263559][T27708] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 889.271005][T27708] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 889.289916][T27705] syz_tun: left allmulticast mode [ 889.508823][T27740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5060'. [ 889.518434][T27729] lo speed is unknown, defaulting to 1000 [ 889.539627][T27740] FAULT_INJECTION: forcing a failure. [ 889.539627][T27740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 889.554950][T27729] lo speed is unknown, defaulting to 1000 [ 889.620895][T27746] FAULT_INJECTION: forcing a failure. [ 889.620895][T27746] name failslab, interval 1, probability 0, space 0, times 0 [ 889.633610][T27740] CPU: 1 UID: 0 PID: 27740 Comm: syz.0.5060 Not tainted syzkaller #0 PREEMPT(full) [ 889.633635][T27740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 889.633646][T27740] Call Trace: [ 889.633653][T27740] [ 889.633661][T27740] dump_stack_lvl+0x189/0x250 [ 889.633684][T27740] ? __pfx____ratelimit+0x10/0x10 [ 889.633706][T27740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 889.633724][T27740] ? __pfx__printk+0x10/0x10 [ 889.633757][T27740] should_fail_ex+0x414/0x560 [ 889.633782][T27740] _copy_to_user+0x31/0xb0 [ 889.633804][T27740] simple_read_from_buffer+0xe1/0x170 [ 889.633832][T27740] proc_fail_nth_read+0x1b3/0x220 [ 889.633855][T27740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 889.633877][T27740] ? rw_verify_area+0x2a6/0x4d0 [ 889.633896][T27740] ? __lock_acquire+0xab9/0xd20 [ 889.633916][T27740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 889.633936][T27740] vfs_read+0x1fd/0xa30 [ 889.633956][T27740] ? fdget_pos+0x247/0x320 [ 889.633976][T27740] ? __pfx___mutex_lock+0x10/0x10 [ 889.633994][T27740] ? __pfx_vfs_read+0x10/0x10 [ 889.634014][T27740] ? __fget_files+0x2a/0x420 [ 889.634033][T27740] ? __fget_files+0x3a0/0x420 [ 889.634047][T27740] ? __fget_files+0x2a/0x420 [ 889.634073][T27740] ksys_read+0x145/0x250 [ 889.634096][T27740] ? __pfx_ksys_read+0x10/0x10 [ 889.634113][T27740] ? rcu_is_watching+0x15/0xb0 [ 889.634135][T27740] ? do_syscall_64+0xbe/0x3b0 [ 889.634157][T27740] do_syscall_64+0xfa/0x3b0 [ 889.634176][T27740] ? lockdep_hardirqs_on+0x9c/0x150 [ 889.634192][T27740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.634209][T27740] ? clear_bhb_loop+0x60/0xb0 [ 889.634230][T27740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.634246][T27740] RIP: 0033:0x7fbbf5d8d5fc [ 889.634262][T27740] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 889.634276][T27740] RSP: 002b:00007fbbf6c7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 889.634294][T27740] RAX: ffffffffffffffda RBX: 00007fbbf5fc5fa0 RCX: 00007fbbf5d8d5fc [ 889.634307][T27740] RDX: 000000000000000f RSI: 00007fbbf6c7e0a0 RDI: 0000000000000004 [ 889.634319][T27740] RBP: 00007fbbf6c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 889.634329][T27740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.634340][T27740] R13: 00007fbbf5fc6038 R14: 00007fbbf5fc5fa0 R15: 00007ffd627aad18 [ 889.634370][T27740] [ 889.881934][T27746] CPU: 0 UID: 0 PID: 27746 Comm: syz.4.5062 Not tainted syzkaller #0 PREEMPT(full) [ 889.881959][T27746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 889.881970][T27746] Call Trace: [ 889.881977][T27746] [ 889.881986][T27746] dump_stack_lvl+0x189/0x250 [ 889.882009][T27746] ? __pfx____ratelimit+0x10/0x10 [ 889.882033][T27746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 889.882052][T27746] ? __pfx__printk+0x10/0x10 [ 889.882076][T27746] ? __pfx___might_resched+0x10/0x10 [ 889.882094][T27746] ? fs_reclaim_acquire+0x7d/0x100 [ 889.882122][T27746] should_fail_ex+0x414/0x560 [ 889.882149][T27746] should_failslab+0xa8/0x100 [ 889.882174][T27746] kmem_cache_alloc_noprof+0x73/0x3c0 [ 889.882195][T27746] ? security_file_alloc+0x34/0x330 [ 889.882221][T27746] security_file_alloc+0x34/0x330 [ 889.882244][T27746] init_file+0x93/0x2f0 [ 889.882264][T27746] alloc_empty_file+0x6e/0x1d0 [ 889.882283][T27746] alloc_file_pseudo+0x13d/0x210 [ 889.882303][T27746] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 889.882319][T27746] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 889.882340][T27746] ? rcu_is_watching+0x15/0xb0 [ 889.882358][T27746] ? hugetlbfs_get_inode+0x448/0x660 [ 889.882387][T27746] hugetlb_file_setup+0x3ee/0x630 [ 889.882410][T27746] ksys_mmap_pgoff+0x22f/0x760 [ 889.882435][T27746] do_syscall_64+0xfa/0x3b0 [ 889.882450][T27746] ? lockdep_hardirqs_on+0x9c/0x150 [ 889.882465][T27746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.882482][T27746] ? clear_bhb_loop+0x60/0xb0 [ 889.882499][T27746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.882515][T27746] RIP: 0033:0x7f7b0198ebe9 [ 889.882530][T27746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.882544][T27746] RSP: 002b:00007f7b0274a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 889.882563][T27746] RAX: ffffffffffffffda RBX: 00007f7b01bc5fa0 RCX: 00007f7b0198ebe9 [ 889.882577][T27746] RDX: 0000000000000005 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 889.882596][T27746] RBP: 00007f7b0274a090 R08: ffffffffffffffff R09: 0000000000000000 [ 889.882608][T27746] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001 [ 889.882619][T27746] R13: 00007f7b01bc6038 R14: 00007f7b01bc5fa0 R15: 00007fffb0351f48 [ 889.882650][T27746] [ 890.110025][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms [ 890.118111][ C0] lec:lec_tx_timeout: lec0 [ 890.273866][T27758] netlink: 'syz.0.5064': attribute type 13 has an invalid length. [ 890.318436][T27758] netlink: 'syz.0.5064': attribute type 17 has an invalid length. [ 890.349997][T27754] lo speed is unknown, defaulting to 1000 [ 890.446018][T27758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.466375][T27758] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.538701][T27771] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 890.561509][T27758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 890.663535][T27771] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5066'. [ 890.739381][T27764] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5064'. [ 890.788026][T27754] lo speed is unknown, defaulting to 1000 [ 890.818357][T27781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.843055][T27780] netlink: 'syz.2.5067': attribute type 3 has an invalid length. [ 890.882479][T27758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.974835][T27780] syz_tun: entered allmulticast mode [ 890.990834][T27774] lo speed is unknown, defaulting to 1000 [ 892.511476][T27774] lo speed is unknown, defaulting to 1000 [ 892.521930][T27783] syz_tun: left allmulticast mode [ 892.553985][T27791] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 892.729945][T27798] sit0: left promiscuous mode [ 892.738379][T27798] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 892.797653][T27802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5073'. [ 892.815577][T27803] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5070'. [ 892.824908][T27804] FAULT_INJECTION: forcing a failure. [ 892.824908][T27804] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 892.856644][T27804] CPU: 1 UID: 0 PID: 27804 Comm: syz.3.5072 Not tainted syzkaller #0 PREEMPT(full) [ 892.856667][T27804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 892.856676][T27804] Call Trace: [ 892.856683][T27804] [ 892.856692][T27804] dump_stack_lvl+0x189/0x250 [ 892.856715][T27804] ? __pfx____ratelimit+0x10/0x10 [ 892.856739][T27804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 892.856756][T27804] ? __pfx__printk+0x10/0x10 [ 892.856778][T27804] ? fs_reclaim_acquire+0x7d/0x100 [ 892.856808][T27804] should_fail_ex+0x414/0x560 [ 892.856832][T27804] prepare_alloc_pages+0x213/0x610 [ 892.856855][T27804] __alloc_frozen_pages_noprof+0x123/0x370 [ 892.856875][T27804] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 892.856907][T27804] alloc_pages_bulk_noprof+0x560/0x710 [ 892.856930][T27804] ? alloc_pages_noprof+0xbe/0x190 [ 892.856955][T27804] kasan_populate_vmalloc+0xba/0x1a0 [ 892.856979][T27804] alloc_vmap_area+0xd51/0x1490 [ 892.857013][T27804] ? __pfx_alloc_vmap_area+0x10/0x10 [ 892.857033][T27804] ? __kasan_kmalloc+0x93/0xb0 [ 892.857055][T27804] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 892.857078][T27804] ? __get_vm_area_node+0x13f/0x300 [ 892.857097][T27804] ? array_map_alloc+0x28b/0x700 [ 892.857113][T27804] __get_vm_area_node+0x1f8/0x300 [ 892.857141][T27804] __vmalloc_node_range_noprof+0x301/0x12f0 [ 892.857164][T27804] ? array_map_alloc+0x28b/0x700 [ 892.857208][T27804] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 892.857230][T27804] ? apparmor_capable+0x137/0x1b0 [ 892.857251][T27804] ? bpf_lsm_capable+0x9/0x20 [ 892.857269][T27804] ? security_capable+0x7e/0x2e0 [ 892.857295][T27804] bpf_map_area_alloc+0x12d/0x180 [ 892.857317][T27804] ? array_map_alloc+0x28b/0x700 [ 892.857335][T27804] array_map_alloc+0x28b/0x700 [ 892.857358][T27804] map_create+0xaa0/0x14d0 [ 892.857383][T27804] ? security_bpf+0x7e/0x300 [ 892.857406][T27804] __sys_bpf+0x60f/0x870 [ 892.857430][T27804] ? __pfx___sys_bpf+0x10/0x10 [ 892.857464][T27804] ? ksys_write+0x22a/0x250 [ 892.857487][T27804] ? __pfx_ksys_write+0x10/0x10 [ 892.857523][T27804] __x64_sys_bpf+0x7c/0x90 [ 892.857543][T27804] do_syscall_64+0xfa/0x3b0 [ 892.857561][T27804] ? lockdep_hardirqs_on+0x9c/0x150 [ 892.857577][T27804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.857594][T27804] ? clear_bhb_loop+0x60/0xb0 [ 892.857615][T27804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.857631][T27804] RIP: 0033:0x7fe17218ebe9 [ 892.857646][T27804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.857660][T27804] RSP: 002b:00007fe172fb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 892.857677][T27804] RAX: ffffffffffffffda RBX: 00007fe1723c5fa0 RCX: 00007fe17218ebe9 [ 892.857691][T27804] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 892.857702][T27804] RBP: 00007fe172fb8090 R08: 0000000000000000 R09: 0000000000000000 [ 892.857713][T27804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.857723][T27804] R13: 00007fe1723c6038 R14: 00007fe1723c5fa0 R15: 00007ffcc88ed828 [ 892.857753][T27804] [ 893.348611][T27808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5075'. [ 893.378687][T27812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5077'. [ 893.397697][T27812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5077'. [ 893.413810][T27812] ip6tnl2: entered promiscuous mode [ 893.419271][T27812] ip6tnl2: entered allmulticast mode [ 893.547965][T27819] netlink: 'syz.1.5077': attribute type 9 has an invalid length. [ 893.574591][T27819] netlink: 'syz.1.5077': attribute type 11 has an invalid length. [ 893.601765][T27820] lo speed is unknown, defaulting to 1000 [ 893.609668][T27820] lo speed is unknown, defaulting to 1000 [ 894.178541][T27845] ip6tnl2: entered promiscuous mode [ 894.193983][T27845] ip6tnl2: entered allmulticast mode [ 894.273860][T27849] netlink: 'syz.4.5083': attribute type 9 has an invalid length. [ 894.282332][T27849] netlink: 'syz.4.5083': attribute type 11 has an invalid length. [ 894.299743][T27849] __nla_validate_parse: 3 callbacks suppressed [ 894.299761][T27849] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5083'. [ 894.682473][T27857] FAULT_INJECTION: forcing a failure. [ 894.682473][T27857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.714596][T27857] CPU: 0 UID: 0 PID: 27857 Comm: syz.3.5086 Not tainted syzkaller #0 PREEMPT(full) [ 894.714621][T27857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 894.714632][T27857] Call Trace: [ 894.714640][T27857] [ 894.714648][T27857] dump_stack_lvl+0x189/0x250 [ 894.714673][T27857] ? __pfx____ratelimit+0x10/0x10 [ 894.714696][T27857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 894.714715][T27857] ? __pfx__printk+0x10/0x10 [ 894.714737][T27857] ? __might_fault+0xb0/0x130 [ 894.714770][T27857] should_fail_ex+0x414/0x560 [ 894.714796][T27857] _copy_from_user+0x2d/0xb0 [ 894.714817][T27857] kstrtouint_from_user+0xc4/0x170 [ 894.714843][T27857] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 894.714886][T27857] proc_fail_nth_write+0x88/0x200 [ 894.714905][T27857] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 894.714930][T27857] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 894.714952][T27857] vfs_write+0x27e/0xb30 [ 894.714984][T27857] ? __pfx_vfs_write+0x10/0x10 [ 894.715007][T27857] ? __fget_files+0x2a/0x420 [ 894.715027][T27857] ? __fget_files+0x3a0/0x420 [ 894.715042][T27857] ? __fget_files+0x2a/0x420 [ 894.715090][T27857] ksys_write+0x145/0x250 [ 894.715115][T27857] ? __pfx_ksys_write+0x10/0x10 [ 894.715132][T27857] ? rcu_is_watching+0x15/0xb0 [ 894.715157][T27857] ? do_syscall_64+0xbe/0x3b0 [ 894.715179][T27857] do_syscall_64+0xfa/0x3b0 [ 894.715194][T27857] ? lockdep_hardirqs_on+0x9c/0x150 [ 894.715210][T27857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.715227][T27857] ? clear_bhb_loop+0x60/0xb0 [ 894.715247][T27857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.715262][T27857] RIP: 0033:0x7fe17218d69f [ 894.715278][T27857] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 894.715292][T27857] RSP: 002b:00007fe172fb8030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 894.715311][T27857] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe17218d69f [ 894.715322][T27857] RDX: 0000000000000001 RSI: 00007fe172fb80a0 RDI: 0000000000000006 [ 894.715333][T27857] RBP: 00007fe172fb8090 R08: 0000000000000000 R09: 0000000000000000 [ 894.715343][T27857] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 894.715354][T27857] R13: 00007fe1723c6038 R14: 00007fe1723c5fa0 R15: 00007ffcc88ed828 [ 894.715384][T27857] [ 895.143309][T27861] lo speed is unknown, defaulting to 1000 [ 895.259287][T27861] lo speed is unknown, defaulting to 1000 [ 895.405018][T27874] netlink: 'syz.2.5091': attribute type 12 has an invalid length. [ 895.417292][T27874] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.5091'. [ 895.629635][T27879] lo speed is unknown, defaulting to 1000 [ 895.678828][T27879] lo speed is unknown, defaulting to 1000 [ 895.791637][T27885] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 895.925595][T27888] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5090'. [ 896.390854][T27902] netlink: 'syz.2.5097': attribute type 13 has an invalid length. [ 896.437163][T27902] netlink: 'syz.2.5097': attribute type 17 has an invalid length. [ 896.445417][T27900] lo speed is unknown, defaulting to 1000 [ 896.453683][T27900] lo speed is unknown, defaulting to 1000 [ 896.664052][T27902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.697029][T27912] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5097'. [ 896.707356][T27902] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.720054][T27902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 896.737448][T13478] lo speed is unknown, defaulting to 1000 [ 896.752536][T13478] syz1: Port: 1 Link ACTIVE [ 896.805932][T27902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 896.830765][T27919] syz_tun: entered allmulticast mode [ 896.843465][T27906] lo speed is unknown, defaulting to 1000 [ 896.851130][T27906] lo speed is unknown, defaulting to 1000 [ 896.855824][T27921] syz_tun: entered allmulticast mode [ 896.880481][T27901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 896.890755][T27908] netlink: 'syz.4.5099': attribute type 3 has an invalid length. [ 896.905238][T27911] netlink: 'syz.1.5100': attribute type 3 has an invalid length. [ 896.946228][T27908] siw: device registration error -23 [ 896.992808][T27908] ip6tnl2: left promiscuous mode [ 897.004153][T27908] ip6tnl2: left allmulticast mode [ 897.022509][T27914] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 897.025757][T27907] syz_tun: left allmulticast mode [ 897.094122][T27914] ip6tnl2: left promiscuous mode [ 897.099813][T27914] ip6tnl2: left allmulticast mode [ 897.112140][T27929] netlink: 'syz.3.5105': attribute type 3 has an invalid length. [ 897.145349][T27931] netlink: 'syz.0.5104': attribute type 13 has an invalid length. [ 897.184817][T27931] netlink: 'syz.0.5104': attribute type 17 has an invalid length. [ 897.301877][T27910] syz_tun: left allmulticast mode [ 897.318269][T27931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 897.339651][T27929] syz_tun: entered allmulticast mode [ 897.367806][T27932] lo speed is unknown, defaulting to 1000 [ 897.377650][T27932] lo speed is unknown, defaulting to 1000 [ 897.456755][T27926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.633362][T27928] syz_tun: left allmulticast mode [ 897.786932][T27953] FAULT_INJECTION: forcing a failure. [ 897.786932][T27953] name failslab, interval 1, probability 0, space 0, times 0 [ 897.815173][T27953] CPU: 0 UID: 0 PID: 27953 Comm: syz.2.5110 Not tainted syzkaller #0 PREEMPT(full) [ 897.815199][T27953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 897.815210][T27953] Call Trace: [ 897.815218][T27953] [ 897.815227][T27953] dump_stack_lvl+0x189/0x250 [ 897.815253][T27953] ? __pfx____ratelimit+0x10/0x10 [ 897.815279][T27953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 897.815299][T27953] ? __pfx__printk+0x10/0x10 [ 897.815338][T27953] should_fail_ex+0x414/0x560 [ 897.815366][T27953] should_failslab+0xa8/0x100 [ 897.815392][T27953] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 897.815415][T27953] ? __alloc_skb+0x112/0x2d0 [ 897.815438][T27953] __alloc_skb+0x112/0x2d0 [ 897.815461][T27953] create_monitor_ctrl_event+0x38/0x480 [ 897.815489][T27953] mgmt_cmd_complete+0x20f/0x590 [ 897.815517][T27953] set_connectable+0x392/0x790 [ 897.815547][T27953] ? __pfx_set_connectable+0x10/0x10 [ 897.815582][T27953] hci_mgmt_cmd+0x9c9/0xef0 [ 897.815617][T27953] hci_sock_sendmsg+0x6ca/0xef0 [ 897.815645][T27953] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 897.815665][T27953] ? aa_sock_msg_perm+0xf1/0x1d0 [ 897.815685][T27953] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 897.815704][T27953] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 897.815724][T27953] __sock_sendmsg+0x219/0x270 [ 897.815752][T27953] sock_write_iter+0x258/0x330 [ 897.815776][T27953] ? __pfx_sock_write_iter+0x10/0x10 [ 897.815811][T27953] ? bpf_lsm_file_permission+0x9/0x20 [ 897.815829][T27953] ? security_file_permission+0x75/0x290 [ 897.815861][T27953] vfs_write+0x5c6/0xb30 [ 897.815889][T27953] ? __pfx_sock_write_iter+0x10/0x10 [ 897.815911][T27953] ? __pfx_vfs_write+0x10/0x10 [ 897.815945][T27953] ? __fget_files+0x2a/0x420 [ 897.815972][T27953] ksys_write+0x145/0x250 [ 897.815996][T27953] ? __pfx_ksys_write+0x10/0x10 [ 897.816022][T27953] ? rcu_is_watching+0x15/0xb0 [ 897.816047][T27953] ? do_syscall_64+0xbe/0x3b0 [ 897.816070][T27953] do_syscall_64+0xfa/0x3b0 [ 897.816091][T27953] ? lockdep_hardirqs_on+0x9c/0x150 [ 897.816108][T27953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.816126][T27953] ? clear_bhb_loop+0x60/0xb0 [ 897.816148][T27953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.816165][T27953] RIP: 0033:0x7f2b2498ebe9 [ 897.816182][T27953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.816197][T27953] RSP: 002b:00007f2b25896038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 897.816216][T27953] RAX: ffffffffffffffda RBX: 00007f2b24bc5fa0 RCX: 00007f2b2498ebe9 [ 897.816230][T27953] RDX: 0000000000000007 RSI: 0000200000000340 RDI: 0000000000000004 [ 897.816241][T27953] RBP: 00007f2b25896090 R08: 0000000000000000 R09: 0000000000000000 [ 897.816253][T27953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.816264][T27953] R13: 00007f2b24bc6038 R14: 00007f2b24bc5fa0 R15: 00007ffee433c188 [ 897.816298][T27953] [ 898.281373][T27955] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 898.378329][T27955] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5109'. [ 898.424685][T27962] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5113'. [ 898.453441][T27968] siw: device registration error -23 [ 898.478165][T27960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5112'. [ 898.538032][T27960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5112'. [ 898.550112][T27968] tipc: Enabled bearer , priority 0 [ 898.589950][T27968] veth0_to_bridge: entered promiscuous mode [ 898.612836][T27968] veth0_to_bridge: entered allmulticast mode [ 898.640067][T27974] siw: device registration error -23 [ 898.668073][T27974] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5115'. [ 898.688637][T27974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5115'. [ 898.699675][T27959] tipc: Disabling bearer [ 898.739297][T27974] tipc: Enabled bearer , priority 0 [ 898.813310][T27974] veth0_to_bridge: entered promiscuous mode [ 898.824202][T27974] veth0_to_bridge: entered allmulticast mode [ 898.863992][T27989] FAULT_INJECTION: forcing a failure. [ 898.863992][T27989] name failslab, interval 1, probability 0, space 0, times 0 [ 898.911768][T27989] CPU: 0 UID: 0 PID: 27989 Comm: syz.1.5118 Not tainted syzkaller #0 PREEMPT(full) [ 898.911792][T27989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 898.911803][T27989] Call Trace: [ 898.911810][T27989] [ 898.911818][T27989] dump_stack_lvl+0x189/0x250 [ 898.911842][T27989] ? __pfx____ratelimit+0x10/0x10 [ 898.911866][T27989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 898.911885][T27989] ? __pfx__printk+0x10/0x10 [ 898.911914][T27989] ? __pfx___might_resched+0x10/0x10 [ 898.911930][T27989] ? fs_reclaim_acquire+0x7d/0x100 [ 898.911959][T27989] should_fail_ex+0x414/0x560 [ 898.911986][T27989] should_failslab+0xa8/0x100 [ 898.912011][T27989] __kmalloc_cache_noprof+0x70/0x3d0 [ 898.912032][T27989] ? ima_calc_file_hash+0x820/0x16f0 [ 898.912056][T27989] ima_calc_file_hash+0x820/0x16f0 [ 898.912074][T27989] ? __lock_acquire+0xab9/0xd20 [ 898.912111][T27989] ? __lock_acquire+0xab9/0xd20 [ 898.912136][T27989] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 898.912196][T27989] ? arch_stack_walk+0xfc/0x150 [ 898.912232][T27989] ? stack_trace_save+0x9c/0xe0 [ 898.912252][T27989] ? __pfx_stack_trace_save+0x10/0x10 [ 898.912272][T27989] ? make_vfsgid+0x49/0xa0 [ 898.912291][T27989] ? generic_fillattr+0x63d/0x9a0 [ 898.912322][T27989] ima_collect_measurement+0x428/0x8e0 [ 898.912354][T27989] ? __pfx_ima_collect_measurement+0x10/0x10 [ 898.912382][T27989] ? trace_contention_end+0x39/0x120 [ 898.912401][T27989] ? __mutex_lock+0x335/0x1350 [ 898.912449][T27989] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 898.912479][T27989] process_measurement+0x1121/0x1a40 [ 898.912516][T27989] ? __pfx_process_measurement+0x10/0x10 [ 898.912576][T27989] ? __pfx___might_resched+0x10/0x10 [ 898.912609][T27989] ima_file_mmap+0x1a2/0x1f0 [ 898.912627][T27989] ? __pfx_ima_file_mmap+0x10/0x10 [ 898.912648][T27989] ? common_file_perm+0x1b5/0x230 [ 898.912668][T27989] security_mmap_file+0x7a4/0xa60 [ 898.912701][T27989] vm_mmap_pgoff+0x129/0x4d0 [ 898.912722][T27989] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 898.912742][T27989] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 898.912759][T27989] ? rcu_is_watching+0x15/0xb0 [ 898.912777][T27989] ? hugetlbfs_get_inode+0x448/0x660 [ 898.912807][T27989] ? hugetlb_file_setup+0x42c/0x630 [ 898.912831][T27989] ksys_mmap_pgoff+0x587/0x760 [ 898.912860][T27989] do_syscall_64+0xfa/0x3b0 [ 898.912876][T27989] ? lockdep_hardirqs_on+0x9c/0x150 [ 898.912893][T27989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.912910][T27989] ? clear_bhb_loop+0x60/0xb0 [ 898.912931][T27989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.912946][T27989] RIP: 0033:0x7f47d638ebe9 [ 898.912963][T27989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.912978][T27989] RSP: 002b:00007f47d72c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 898.912997][T27989] RAX: ffffffffffffffda RBX: 00007f47d65c5fa0 RCX: 00007f47d638ebe9 [ 898.913010][T27989] RDX: 0000000000000005 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 898.913022][T27989] RBP: 00007f47d72c0090 R08: ffffffffffffffff R09: 0000000000000000 [ 898.913034][T27989] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001 [ 898.913046][T27989] R13: 00007f47d65c6038 R14: 00007f47d65c5fa0 R15: 00007fffe19f8618 [ 898.913077][T27989] [ 898.920511][ T30] audit: type=1800 audit(1756525181.246:5): pid=27989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5118" name="anon_hugepage" dev="hugetlbfs" ino=131190 res=0 errno=0 [ 899.260071][T27998] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 899.371740][T27998] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5119'. [ 899.407004][T27996] veth0_to_bridge: left promiscuous mode [ 899.517873][T27973] tipc: Disabling bearer [ 899.552627][T27991] lo speed is unknown, defaulting to 1000 [ 899.574321][T27991] lo speed is unknown, defaulting to 1000 [ 899.688202][T28005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5120'. [ 899.759767][T28012] netlink: 'syz.1.5121': attribute type 13 has an invalid length. [ 899.779019][T28012] netlink: 'syz.1.5121': attribute type 17 has an invalid length. [ 899.789527][T28013] netlink: 'syz.2.5123': attribute type 13 has an invalid length. [ 899.797586][T28013] netlink: 'syz.2.5123': attribute type 17 has an invalid length. [ 899.828449][T28013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 899.908709][T28019] netlink: 'syz.0.5124': attribute type 13 has an invalid length. [ 899.921655][T28012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.932372][T28019] netlink: 'syz.0.5124': attribute type 17 has an invalid length. [ 899.942921][T28012] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.969325][T28012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 899.987243][T28021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5121'. [ 900.048749][T28007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.062061][T28019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 900.080877][T28011] lo speed is unknown, defaulting to 1000 [ 900.097068][T28011] lo speed is unknown, defaulting to 1000 [ 900.112872][T28015] lo speed is unknown, defaulting to 1000 [ 900.136084][T28012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.149309][T28015] lo speed is unknown, defaulting to 1000 [ 900.149401][T28020] lo speed is unknown, defaulting to 1000 [ 900.180254][T28020] lo speed is unknown, defaulting to 1000 [ 900.427101][T28009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.461534][T28016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.745680][T28039] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5129'. [ 900.754997][T28039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5129'. [ 900.770361][T28039] tipc: Enabled bearer , priority 0 [ 900.778410][T28039] veth0_to_bridge: entered promiscuous mode [ 900.784713][T28039] veth0_to_bridge: entered allmulticast mode [ 900.811203][T28038] tipc: Disabling bearer [ 900.920766][T28044] netlink: 'syz.1.5131': attribute type 3 has an invalid length. [ 900.949639][T28048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5132'. [ 900.959009][T28048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5132'. [ 900.965532][T28044] syz_tun: entered allmulticast mode [ 901.122752][T28055] netlink: 'syz.3.5132': attribute type 9 has an invalid length. [ 901.136032][T28055] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5132'. [ 901.165617][T28049] lo speed is unknown, defaulting to 1000 [ 901.204697][T28049] lo speed is unknown, defaulting to 1000 [ 901.322946][T28060] siw: device registration error -23 [ 901.501228][T28070] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 901.521267][T28071] netlink: 'syz.3.5137': attribute type 3 has an invalid length. [ 901.558000][T28071] syz_tun: entered allmulticast mode [ 901.867761][T28077] veth0_to_bridge: left promiscuous mode [ 901.873557][T28077] veth0_to_bridge: left allmulticast mode [ 901.911695][T28043] syz_tun: left allmulticast mode [ 901.916601][T28083] netlink: 'syz.0.5139': attribute type 6 has an invalid length. [ 901.928203][T28069] syz_tun: left allmulticast mode [ 901.993084][T28083] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5139'. [ 902.084394][T28088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5141'. [ 902.488582][T28100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.501683][T28100] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.515646][T28100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 902.667496][T28107] lo speed is unknown, defaulting to 1000 [ 902.680901][T28107] lo speed is unknown, defaulting to 1000 [ 902.834128][T28103] lo speed is unknown, defaulting to 1000 [ 902.861028][T28103] lo speed is unknown, defaulting to 1000 [ 903.228656][T28106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 903.369408][T28130] syz_tun: entered allmulticast mode [ 903.386232][ T1114] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 903.509989][T28132] team0: Device ipvlan1 failed to register rx_handler [ 903.529924][T28136] syz_tun: entered allmulticast mode [ 903.539230][T28129] syz_tun: left allmulticast mode [ 903.557377][T28140] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 903.630645][T28143] siw: device registration error -23 [ 903.713428][T28150] siw: device registration error -23 [ 903.729647][T28143] veth0_to_bridge: left allmulticast mode [ 903.771189][T28149] vlan2: entered allmulticast mode [ 903.776581][T28149] bridge_slave_0: entered allmulticast mode [ 903.812368][T28135] syz_tun: left allmulticast mode [ 904.300436][T28173] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 904.314613][T28173] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 904.612565][T28185] __nla_validate_parse: 2 callbacks suppressed [ 904.612583][T28185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5161'. [ 906.108149][T28166] lo speed is unknown, defaulting to 1000 [ 906.115808][T28166] lo speed is unknown, defaulting to 1000 [ 906.140284][T28191] validate_nla: 6 callbacks suppressed [ 906.140302][T28191] netlink: 'syz.1.5162': attribute type 12 has an invalid length. [ 906.162534][T28191] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.5162'. [ 906.304749][T28198] netlink: 'syz.2.5164': attribute type 3 has an invalid length. [ 906.380471][T28198] syz_tun: entered allmulticast mode [ 906.400726][T28202] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5165'. [ 906.627885][T28196] syz_tun: left allmulticast mode [ 906.631843][T28215] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 906.737670][T28220] netlink: 440 bytes leftover after parsing attributes in process `syz.2.5171'. [ 906.757608][T28215] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5167'. [ 906.781128][T28217] netlink: 'syz.4.5170': attribute type 3 has an invalid length. [ 906.820358][T28220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5171'. [ 906.848330][T28217] syz_tun: entered allmulticast mode [ 906.928381][T28223] siw: device registration error -23 [ 907.157785][T28237] netlink: 'syz.2.5176': attribute type 6 has an invalid length. [ 907.324136][T28223] veth0_to_bridge: left promiscuous mode [ 907.330006][T28223] veth0_to_bridge: left allmulticast mode [ 907.349784][T28234] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.363257][T28244] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 907.392985][T28216] syz_tun: left allmulticast mode [ 907.439436][T28243] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5177'. [ 907.451743][T28234] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.507704][T28247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5178'. [ 907.526587][T28247] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5178'. [ 907.547557][T28249] siw: device registration error -23 [ 907.569890][T28234] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.573388][T28249] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5180'. [ 907.647192][T28249] tipc: Enabled bearer , priority 0 [ 907.654937][T28249] veth0_to_bridge: entered promiscuous mode [ 907.660987][T28249] veth0_to_bridge: entered allmulticast mode [ 907.725119][T28234] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.880044][T28248] tipc: Disabling bearer [ 907.946709][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.024928][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.087868][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.102852][T28266] FAULT_INJECTION: forcing a failure. [ 908.102852][T28266] name failslab, interval 1, probability 0, space 0, times 0 [ 908.123065][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.131697][T28266] CPU: 1 UID: 0 PID: 28266 Comm: syz.3.5184 Not tainted syzkaller #0 PREEMPT(full) [ 908.131720][T28266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 908.131730][T28266] Call Trace: [ 908.131738][T28266] [ 908.131746][T28266] dump_stack_lvl+0x189/0x250 [ 908.131787][T28266] ? __pfx____ratelimit+0x10/0x10 [ 908.131811][T28266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 908.131831][T28266] ? __pfx__printk+0x10/0x10 [ 908.131858][T28266] ? __pfx___might_resched+0x10/0x10 [ 908.131874][T28266] ? fs_reclaim_acquire+0x7d/0x100 [ 908.131903][T28266] should_fail_ex+0x414/0x560 [ 908.131931][T28266] should_failslab+0xa8/0x100 [ 908.131956][T28266] __kmalloc_cache_noprof+0x70/0x3d0 [ 908.131977][T28266] ? nfnetlink_rcv+0xeff/0x2520 [ 908.132005][T28266] nfnetlink_rcv+0xeff/0x2520 [ 908.132060][T28266] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 908.132136][T28266] ? netlink_deliver_tap+0x2e/0x1b0 [ 908.132173][T28266] netlink_unicast+0x82c/0x9e0 [ 908.132206][T28266] ? __pfx_netlink_unicast+0x10/0x10 [ 908.132232][T28266] ? netlink_sendmsg+0x642/0xb30 [ 908.132247][T28266] ? skb_put+0x11b/0x210 [ 908.132269][T28266] netlink_sendmsg+0x805/0xb30 [ 908.132297][T28266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.132318][T28266] ? aa_sock_msg_perm+0xf1/0x1d0 [ 908.132337][T28266] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 908.132355][T28266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 908.132374][T28266] __sock_sendmsg+0x219/0x270 [ 908.132399][T28266] ____sys_sendmsg+0x505/0x830 [ 908.132425][T28266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 908.132454][T28266] ? import_iovec+0x74/0xa0 [ 908.132478][T28266] ___sys_sendmsg+0x21f/0x2a0 [ 908.132500][T28266] ? __pfx____sys_sendmsg+0x10/0x10 [ 908.132558][T28266] ? __fget_files+0x2a/0x420 [ 908.132574][T28266] ? __fget_files+0x3a0/0x420 [ 908.132602][T28266] __x64_sys_sendmsg+0x19b/0x260 [ 908.132624][T28266] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 908.132654][T28266] ? __pfx_ksys_write+0x10/0x10 [ 908.132674][T28266] ? rcu_is_watching+0x15/0xb0 [ 908.132698][T28266] ? do_syscall_64+0xbe/0x3b0 [ 908.132719][T28266] do_syscall_64+0xfa/0x3b0 [ 908.132735][T28266] ? lockdep_hardirqs_on+0x9c/0x150 [ 908.132751][T28266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.132776][T28266] ? clear_bhb_loop+0x60/0xb0 [ 908.132797][T28266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.132813][T28266] RIP: 0033:0x7fe17218ebe9 [ 908.132830][T28266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.132845][T28266] RSP: 002b:00007fe172fb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 908.132865][T28266] RAX: ffffffffffffffda RBX: 00007fe1723c5fa0 RCX: 00007fe17218ebe9 [ 908.132879][T28266] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 908.132891][T28266] RBP: 00007fe172fb8090 R08: 0000000000000000 R09: 0000000000000000 [ 908.132902][T28266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 908.132913][T28266] R13: 00007fe1723c6038 R14: 00007fe1723c5fa0 R15: 00007ffcc88ed828 [ 908.132945][T28266] [ 908.805854][T28285] veth0_to_bridge: left promiscuous mode [ 908.811591][T28285] veth0_to_bridge: left allmulticast mode [ 908.842931][T28291] netlink: 'syz.1.5191': attribute type 9 has an invalid length. [ 908.863173][T28291] netlink: 'syz.1.5191': attribute type 11 has an invalid length. [ 909.079999][T28303] lo speed is unknown, defaulting to 1000 [ 909.122537][T28303] lo speed is unknown, defaulting to 1000 [ 909.424994][T28321] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 909.702389][T28329] __nla_validate_parse: 10 callbacks suppressed [ 909.702409][T28329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5201'. [ 909.774236][T28331] netlink: 'syz.2.5202': attribute type 2 has an invalid length. [ 909.802818][T28331] þ: entered promiscuous mode [ 909.899669][T28339] netlink: 45 bytes leftover after parsing attributes in process `syz.1.5205'. [ 910.135619][T28349] lo speed is unknown, defaulting to 1000 [ 910.143263][T28349] lo speed is unknown, defaulting to 1000 [ 910.344100][T28357] gretap1: entered allmulticast mode [ 910.472159][T28361] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5213'. [ 910.489101][T28359] siw: device registration error -23 [ 910.530818][T28361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5213'. [ 910.563278][T28359] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5212'. [ 910.580643][T28359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5212'. [ 910.583046][T28361] tipc: Enabled bearer , priority 0 [ 910.612338][T28361] veth0_to_bridge: entered promiscuous mode [ 910.626157][T28361] veth0_to_bridge: entered allmulticast mode [ 910.635213][T28368] tipc: Enabled bearer , priority 0 [ 910.642998][T28368] veth0_to_bridge: entered promiscuous mode [ 910.653708][T28368] veth0_to_bridge: entered allmulticast mode [ 910.701485][T28360] tipc: Disabling bearer [ 910.779848][T28358] tipc: Disabling bearer [ 911.095610][T28386] veth0_to_bridge: left promiscuous mode [ 911.101312][T28386] veth0_to_bridge: left allmulticast mode [ 911.308550][T28381] lo speed is unknown, defaulting to 1000 [ 911.317551][T28381] lo speed is unknown, defaulting to 1000 [ 911.445057][T28399] FAULT_INJECTION: forcing a failure. [ 911.445057][T28399] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 911.459922][T28399] CPU: 1 UID: 0 PID: 28399 Comm: syz.0.5224 Not tainted syzkaller #0 PREEMPT(full) [ 911.459947][T28399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 911.459959][T28399] Call Trace: [ 911.459966][T28399] [ 911.459974][T28399] dump_stack_lvl+0x189/0x250 [ 911.460000][T28399] ? __pfx____ratelimit+0x10/0x10 [ 911.460024][T28399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 911.460044][T28399] ? __pfx__printk+0x10/0x10 [ 911.460068][T28399] ? fs_reclaim_acquire+0x7d/0x100 [ 911.460100][T28399] should_fail_ex+0x414/0x560 [ 911.460128][T28399] prepare_alloc_pages+0x213/0x610 [ 911.460153][T28399] __alloc_frozen_pages_noprof+0x123/0x370 [ 911.460174][T28399] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 911.460211][T28399] alloc_pages_bulk_noprof+0x560/0x710 [ 911.460234][T28399] ? alloc_pages_noprof+0xbe/0x190 [ 911.460260][T28399] kasan_populate_vmalloc+0xba/0x1a0 [ 911.460287][T28399] alloc_vmap_area+0xd51/0x1490 [ 911.460324][T28399] ? __pfx_alloc_vmap_area+0x10/0x10 [ 911.460343][T28399] ? __kasan_kmalloc+0x93/0xb0 [ 911.460365][T28399] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 911.460387][T28399] ? __get_vm_area_node+0x13f/0x300 [ 911.460408][T28399] ? array_map_alloc+0x28b/0x700 [ 911.460425][T28399] __get_vm_area_node+0x1f8/0x300 [ 911.460453][T28399] __vmalloc_node_range_noprof+0x301/0x12f0 [ 911.460476][T28399] ? array_map_alloc+0x28b/0x700 [ 911.460520][T28399] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 911.460544][T28399] ? apparmor_capable+0x137/0x1b0 [ 911.460566][T28399] ? bpf_lsm_capable+0x9/0x20 [ 911.460586][T28399] ? security_capable+0x7e/0x2e0 [ 911.460612][T28399] bpf_map_area_alloc+0x12d/0x180 [ 911.460639][T28399] ? array_map_alloc+0x28b/0x700 [ 911.460657][T28399] array_map_alloc+0x28b/0x700 [ 911.460683][T28399] map_create+0xaa0/0x14d0 [ 911.460707][T28399] ? security_bpf+0x7e/0x300 [ 911.460732][T28399] __sys_bpf+0x60f/0x870 [ 911.460755][T28399] ? __pfx___sys_bpf+0x10/0x10 [ 911.460794][T28399] ? ksys_write+0x22a/0x250 [ 911.460818][T28399] ? __pfx_ksys_write+0x10/0x10 [ 911.460835][T28399] ? rcu_is_watching+0x15/0xb0 [ 911.460860][T28399] __x64_sys_bpf+0x7c/0x90 [ 911.460879][T28399] do_syscall_64+0xfa/0x3b0 [ 911.460895][T28399] ? lockdep_hardirqs_on+0x9c/0x150 [ 911.460910][T28399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.460927][T28399] ? clear_bhb_loop+0x60/0xb0 [ 911.460948][T28399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.460965][T28399] RIP: 0033:0x7fbbf5d8ebe9 [ 911.460981][T28399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.460995][T28399] RSP: 002b:00007fbbf6c7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 911.461014][T28399] RAX: ffffffffffffffda RBX: 00007fbbf5fc5fa0 RCX: 00007fbbf5d8ebe9 [ 911.461027][T28399] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 911.461038][T28399] RBP: 00007fbbf6c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 911.461050][T28399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 911.461060][T28399] R13: 00007fbbf5fc6038 R14: 00007fbbf5fc5fa0 R15: 00007ffd627aad18 [ 911.461091][T28399] [ 912.328531][T28418] netlink: 324 bytes leftover after parsing attributes in process `syz.1.5229'. [ 912.374738][T28418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5229'. [ 912.439752][T28409] lo speed is unknown, defaulting to 1000 [ 912.498478][T28414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5226'. [ 912.505332][T28409] lo speed is unknown, defaulting to 1000 [ 912.519573][T28422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5230'. [ 912.556012][T28422] tipc: Enabled bearer , priority 0 [ 912.563326][T28422] veth0_to_bridge: entered promiscuous mode [ 912.574899][T28422] veth0_to_bridge: entered allmulticast mode [ 912.640904][T28420] tipc: Disabling bearer [ 912.753595][T28430] ip6tnl2: left promiscuous mode [ 912.805323][T28430] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 912.931079][T28439] FAULT_INJECTION: forcing a failure. [ 912.931079][T28439] name failslab, interval 1, probability 0, space 0, times 0 [ 912.945062][T28439] CPU: 1 UID: 0 PID: 28439 Comm: syz.0.5233 Not tainted syzkaller #0 PREEMPT(full) [ 912.945086][T28439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 912.945098][T28439] Call Trace: [ 912.945105][T28439] [ 912.945114][T28439] dump_stack_lvl+0x189/0x250 [ 912.945139][T28439] ? __pfx____ratelimit+0x10/0x10 [ 912.945163][T28439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 912.945183][T28439] ? __pfx__printk+0x10/0x10 [ 912.945212][T28439] ? __pfx___might_resched+0x10/0x10 [ 912.945228][T28439] ? fs_reclaim_acquire+0x7d/0x100 [ 912.945256][T28439] should_fail_ex+0x414/0x560 [ 912.945284][T28439] should_failslab+0xa8/0x100 [ 912.945309][T28439] __kmalloc_cache_noprof+0x70/0x3d0 [ 912.945330][T28439] ? nfnetlink_rcv+0xeff/0x2520 [ 912.945358][T28439] nfnetlink_rcv+0xeff/0x2520 [ 912.945421][T28439] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 912.945463][T28439] ? ref_tracker_free+0x63a/0x7d0 [ 912.945517][T28439] ? __netlink_deliver_tap+0x807/0x850 [ 912.945535][T28439] ? netlink_deliver_tap+0x2e/0x1b0 [ 912.945572][T28439] netlink_unicast+0x82c/0x9e0 [ 912.945605][T28439] ? __pfx_netlink_unicast+0x10/0x10 [ 912.945630][T28439] ? netlink_sendmsg+0x642/0xb30 [ 912.945645][T28439] ? skb_put+0x11b/0x210 [ 912.945668][T28439] netlink_sendmsg+0x805/0xb30 [ 912.945697][T28439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.945719][T28439] ? aa_sock_msg_perm+0xf1/0x1d0 [ 912.945738][T28439] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 912.945756][T28439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.945775][T28439] __sock_sendmsg+0x219/0x270 [ 912.945802][T28439] ____sys_sendmsg+0x505/0x830 [ 912.945828][T28439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 912.945858][T28439] ? import_iovec+0x74/0xa0 [ 912.945882][T28439] ___sys_sendmsg+0x21f/0x2a0 [ 912.945904][T28439] ? __pfx____sys_sendmsg+0x10/0x10 [ 912.945965][T28439] ? __fget_files+0x2a/0x420 [ 912.945980][T28439] ? __fget_files+0x3a0/0x420 [ 912.946008][T28439] __x64_sys_sendmsg+0x19b/0x260 [ 912.946030][T28439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 912.946061][T28439] ? __pfx_ksys_write+0x10/0x10 [ 912.946079][T28439] ? rcu_is_watching+0x15/0xb0 [ 912.946107][T28439] ? do_syscall_64+0xbe/0x3b0 [ 912.946130][T28439] do_syscall_64+0xfa/0x3b0 [ 912.946146][T28439] ? lockdep_hardirqs_on+0x9c/0x150 [ 912.946162][T28439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.946180][T28439] ? clear_bhb_loop+0x60/0xb0 [ 912.946201][T28439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.946218][T28439] RIP: 0033:0x7fbbf5d8ebe9 [ 912.946235][T28439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.946250][T28439] RSP: 002b:00007fbbf6c5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.946269][T28439] RAX: ffffffffffffffda RBX: 00007fbbf5fc6090 RCX: 00007fbbf5d8ebe9 [ 912.946283][T28439] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 912.946295][T28439] RBP: 00007fbbf6c5d090 R08: 0000000000000000 R09: 0000000000000000 [ 912.946306][T28439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 912.946317][T28439] R13: 00007fbbf5fc6128 R14: 00007fbbf5fc6090 R15: 00007ffd627aad18 [ 912.946349][T28439] [ 913.401995][T28450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.552983][T28450] lo speed is unknown, defaulting to 1000 [ 913.561682][T28450] lo speed is unknown, defaulting to 1000 [ 913.973836][T28479] netlink: 'syz.1.5247': attribute type 9 has an invalid length. [ 913.990118][T28479] netlink: 'syz.1.5247': attribute type 11 has an invalid length. [ 914.136185][T28487] netlink: 'syz.4.5251': attribute type 3 has an invalid length. [ 914.173901][T28492] lo speed is unknown, defaulting to 1000 [ 914.182351][T28492] lo speed is unknown, defaulting to 1000 [ 914.205149][T28493] lo speed is unknown, defaulting to 1000 [ 914.213884][T28493] lo speed is unknown, defaulting to 1000 [ 914.734226][T28508] __nla_validate_parse: 12 callbacks suppressed [ 914.734246][T28508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5255'. [ 914.997970][T28505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5255'. [ 915.007808][T28505] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5255'. [ 915.482311][T28534] netlink: 'syz.4.5263': attribute type 15 has an invalid length. [ 915.690572][T28542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5266'. [ 915.700065][T28542] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5266'. [ 915.711303][T28542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5266'. [ 915.762496][T28544] tipc: Enabling of bearer rejected, failed to enable media [ 915.982197][T28552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5269'. [ 916.144209][T28563] netlink: 'syz.2.5271': attribute type 13 has an invalid length. [ 916.169918][T28563] netlink: 'syz.2.5271': attribute type 17 has an invalid length. [ 916.203546][T28563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 916.278457][T28558] lo speed is unknown, defaulting to 1000 [ 916.299688][T28558] lo speed is unknown, defaulting to 1000 [ 916.314794][T28563] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5271'. [ 916.911889][T28589] veth0_to_bridge: left promiscuous mode [ 916.922678][T28593] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 917.044029][T28593] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5279'. [ 917.114238][T28601] lo speed is unknown, defaulting to 1000 [ 917.122112][T28601] lo speed is unknown, defaulting to 1000 [ 919.563299][T28610] veth0_to_bridge: left allmulticast mode [ 919.657678][T28629] bond0: entered promiscuous mode [ 919.664266][T28629] batadv0: entered promiscuous mode [ 919.695758][T28629] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 919.706696][T28629] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 919.727606][T28629] hsr1: entered allmulticast mode [ 919.732679][T28629] bond0: entered allmulticast mode [ 919.748942][T28629] batadv0: entered allmulticast mode [ 919.757541][T28629] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 919.770456][T28629] bond0: left promiscuous mode [ 919.781579][T28629] batadv0: left promiscuous mode [ 919.819268][T28623] lo speed is unknown, defaulting to 1000 [ 919.826936][T28623] lo speed is unknown, defaulting to 1000 [ 919.883758][T28645] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 919.885870][T28645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5294'. [ 920.141237][T28656] netlink: 'syz.2.5297': attribute type 13 has an invalid length. [ 920.165264][T28656] netlink: 'syz.2.5297': attribute type 17 has an invalid length. [ 920.205903][T28656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 920.306536][T28655] lo speed is unknown, defaulting to 1000 [ 920.308359][T28658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5298'. [ 920.316572][T28655] lo speed is unknown, defaulting to 1000 [ 920.324029][T28658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5298'. [ 920.352159][T28656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5297'. [ 920.365495][T28658] netlink: 'syz.0.5298': attribute type 9 has an invalid length. [ 920.373597][T28658] netlink: 'syz.0.5298': attribute type 11 has an invalid length. [ 920.382275][T28658] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5298'. [ 920.463357][T28661] siw: device registration error -23 [ 920.497074][T28661] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5299'. [ 920.510587][T28661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5299'. [ 920.522489][T28661] tipc: Enabled bearer , priority 0 [ 920.531503][T28661] veth0_to_bridge: entered promiscuous mode [ 920.538370][T28661] veth0_to_bridge: entered allmulticast mode [ 920.573543][T28660] tipc: Disabling bearer [ 920.698224][T28669] veth0_to_bridge: left promiscuous mode [ 920.711089][T28669] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 920.759455][T28669] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5302'. [ 921.060976][T28681] lo speed is unknown, defaulting to 1000 [ 921.069248][T28681] lo speed is unknown, defaulting to 1000 [ 921.464634][T25237] lo speed is unknown, defaulting to 1000 [ 921.485190][T25237] syz1: Port: 1 Link DOWN [ 921.505871][T28691] netlink: 'syz.4.5310': attribute type 12 has an invalid length. [ 921.513721][T28691] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.5310'. [ 921.634386][T28702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5311'. [ 921.677496][T28702] tipc: Enabled bearer , priority 0 [ 921.700778][T28702] veth0_to_bridge: entered promiscuous mode [ 921.720391][T28702] veth0_to_bridge: entered allmulticast mode [ 921.772986][T28699] tipc: Disabling bearer [ 921.940612][T28713] lo speed is unknown, defaulting to 1000 [ 921.989711][T28713] lo speed is unknown, defaulting to 1000 [ 922.138111][T28716] veth0_to_bridge: left promiscuous mode [ 922.159069][T28716] openvswitch: netlink: Key type 12304 is out of range max 32 [ 922.202210][T28718] FAULT_INJECTION: forcing a failure. [ 922.202210][T28718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.237947][T28718] CPU: 0 UID: 0 PID: 28718 Comm: syz.4.5317 Not tainted syzkaller #0 PREEMPT(full) [ 922.237972][T28718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 922.237983][T28718] Call Trace: [ 922.237991][T28718] [ 922.238000][T28718] dump_stack_lvl+0x189/0x250 [ 922.238024][T28718] ? __pfx____ratelimit+0x10/0x10 [ 922.238050][T28718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 922.238069][T28718] ? __pfx__printk+0x10/0x10 [ 922.238092][T28718] ? __might_fault+0xb0/0x130 [ 922.238126][T28718] should_fail_ex+0x414/0x560 [ 922.238154][T28718] _copy_from_user+0x2d/0xb0 [ 922.238175][T28718] ___sys_sendmsg+0x158/0x2a0 [ 922.238198][T28718] ? __pfx____sys_sendmsg+0x10/0x10 [ 922.238263][T28718] ? __might_fault+0xb0/0x130 [ 922.238289][T28718] __sys_sendmmsg+0x227/0x430 [ 922.238314][T28718] ? __pfx___sys_sendmmsg+0x10/0x10 [ 922.238331][T28718] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 922.238376][T28718] ? ksys_write+0x22a/0x250 [ 922.238407][T28718] ? __pfx_ksys_write+0x10/0x10 [ 922.238422][T28718] ? rcu_is_watching+0x15/0xb0 [ 922.238443][T28718] __x64_sys_sendmmsg+0xa0/0xc0 [ 922.238464][T28718] do_syscall_64+0xfa/0x3b0 [ 922.238481][T28718] ? lockdep_hardirqs_on+0x9c/0x150 [ 922.238496][T28718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.238513][T28718] ? clear_bhb_loop+0x60/0xb0 [ 922.238534][T28718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.238550][T28718] RIP: 0033:0x7f7b0198ebe9 [ 922.238566][T28718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 922.238580][T28718] RSP: 002b:00007f7b0274a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 922.238599][T28718] RAX: ffffffffffffffda RBX: 00007f7b01bc5fa0 RCX: 00007f7b0198ebe9 [ 922.238613][T28718] RDX: 0000000004000070 RSI: 0000200000003b80 RDI: 0000000000000005 [ 922.238633][T28718] RBP: 00007f7b0274a090 R08: 0000000000000000 R09: 0000000000000000 [ 922.238645][T28718] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 922.238655][T28718] R13: 00007f7b01bc6038 R14: 00007f7b01bc5fa0 R15: 00007fffb0351f48 [ 922.238685][T28718] [ 922.624160][T28720] lo speed is unknown, defaulting to 1000 [ 922.642675][T28720] lo speed is unknown, defaulting to 1000 [ 923.094314][T28737] lo speed is unknown, defaulting to 1000 [ 923.097182][T28740] netlink: 'syz.3.5324': attribute type 12 has an invalid length. [ 923.182370][T28737] lo speed is unknown, defaulting to 1000 [ 923.608556][T28747] lo speed is unknown, defaulting to 1000 [ 923.623021][T28747] lo speed is unknown, defaulting to 1000 [ 923.818477][T28758] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 924.732602][T28769] lo speed is unknown, defaulting to 1000 [ 924.779497][T28769] lo speed is unknown, defaulting to 1000 [ 924.870079][T28782] netlink: 'syz.2.5334': attribute type 3 has an invalid length. [ 924.950324][T28780] syz_tun: entered allmulticast mode [ 924.974866][T28785] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 925.480752][T28779] syz_tun: left allmulticast mode [ 925.679312][T28798] netlink: 'syz.2.5338': attribute type 3 has an invalid length. [ 925.719270][T28798] syz_tun: entered allmulticast mode [ 925.994906][T28797] syz_tun: left allmulticast mode [ 926.589693][T28821] netlink: 'syz.1.5344': attribute type 3 has an invalid length. [ 926.675543][T28821] syz_tun: entered allmulticast mode [ 926.694027][T28821] siw: device registration error -23 [ 926.717657][T28821] veth0_to_bridge: left allmulticast mode [ 926.760683][T28820] syz_tun: left allmulticast mode [ 926.876473][T28830] __nla_validate_parse: 5 callbacks suppressed [ 926.876490][T28830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5348'. [ 926.960003][T28835] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 927.028152][T28839] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5349'. [ 927.092509][T28843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5348'. [ 927.637898][T28860] lo speed is unknown, defaulting to 1000 [ 927.645586][T28860] lo speed is unknown, defaulting to 1000 [ 927.813944][T28866] netlink: 'syz.2.5359': attribute type 3 has an invalid length. [ 927.848288][T28866] syz_tun: entered allmulticast mode [ 927.869955][T28862] lo speed is unknown, defaulting to 1000 [ 927.917201][T28862] lo speed is unknown, defaulting to 1000 [ 927.929455][T28869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5360'. [ 927.948224][T28869] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5360'. [ 928.104752][T28870] veth0_to_bridge: left allmulticast mode [ 928.153672][T28869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5360'. [ 928.244023][T28864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5358'. [ 928.301210][T28865] syz_tun: left allmulticast mode [ 928.864967][T28896] block nbd1: server does not support multiple connections per device. [ 928.889787][T28905] netlink: 'syz.0.5368': attribute type 13 has an invalid length. [ 928.891899][T28896] [ 928.899950][T28896] ====================================================== [ 928.905630][T28905] netlink: 'syz.0.5368': attribute type 17 has an invalid length. [ 928.906962][T28896] WARNING: possible circular locking dependency detected [ 928.906985][T28896] syzkaller #0 Not tainted [ 928.926194][T28896] ------------------------------------------------------ [ 928.933208][T28896] syz.2.5366/28896 is trying to acquire lock: [ 928.939264][T28896] ffff88806fc69ae0 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_shutdown+0x6e/0x9b0 [ 928.948056][T28896] [ 928.948056][T28896] but task is already holding lock: [ 928.955499][T28896] ffff888021b13a70 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260 [ 928.964542][T28896] [ 928.964542][T28896] which lock already depends on the new lock. [ 928.964542][T28896] [ 928.974928][T28896] [ 928.974928][T28896] the existing dependency chain (in reverse order) is: [ 928.983922][T28896] [ 928.983922][T28896] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 928.991549][T28896] lock_acquire+0x120/0x360 [ 928.996567][T28896] __mutex_lock+0x187/0x1350 [ 929.001665][T28896] nbd_queue_rq+0x257/0xf10 [ 929.006684][T28896] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 929.012759][T28896] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 929.019618][T28896] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 929.026125][T28896] blk_mq_run_hw_queue+0x348/0x4f0 [ 929.031760][T28896] blk_mq_dispatch_list+0xd0c/0xe00 [ 929.037471][T28896] blk_mq_flush_plug_list+0x469/0x550 [ 929.043353][T28896] __blk_flush_plug+0x3d3/0x4b0 [ 929.048715][T28896] __submit_bio+0x2d3/0x5a0 [ 929.053728][T28896] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 929.059872][T28896] block_read_full_folio+0x599/0x830 [ 929.065666][T28896] filemap_read_folio+0x114/0x380 [ 929.071206][T28896] do_read_cache_folio+0x350/0x590 [ 929.076835][T28896] read_part_sector+0xb6/0x2b0 [ 929.082113][T28896] adfspart_check_ICS+0xa4/0xa50 [ 929.087577][T28896] bdev_disk_changed+0x75c/0x14b0 [ 929.093109][T28896] blkdev_get_whole+0x380/0x510 [ 929.098467][T28896] bdev_open+0x31e/0xd30 [ 929.103218][T28896] blkdev_open+0x3a8/0x510 [ 929.108134][T28896] do_dentry_open+0x953/0x13f0 [ 929.113401][T28896] vfs_open+0x3b/0x340 [ 929.117972][T28896] path_openat+0x2ee5/0x3830 [ 929.123067][T28896] do_filp_open+0x1fa/0x410 [ 929.128073][T28896] do_sys_openat2+0x121/0x1c0 [ 929.133253][T28896] __x64_sys_openat+0x138/0x170 [ 929.138606][T28896] do_syscall_64+0xfa/0x3b0 [ 929.143614][T28896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.150011][T28896] [ 929.150011][T28896] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 929.157205][T28896] lock_acquire+0x120/0x360 [ 929.162218][T28896] __mutex_lock+0x187/0x1350 [ 929.167316][T28896] nbd_queue_rq+0xc8/0xf10 [ 929.172240][T28896] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 929.178293][T28896] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 929.185131][T28896] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 929.191618][T28896] blk_mq_run_hw_queue+0x348/0x4f0 [ 929.197235][T28896] blk_mq_dispatch_list+0xd0c/0xe00 [ 929.202942][T28896] blk_mq_flush_plug_list+0x469/0x550 [ 929.208821][T28896] __blk_flush_plug+0x3d3/0x4b0 [ 929.214179][T28896] __submit_bio+0x2d3/0x5a0 [ 929.219180][T28896] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 929.225319][T28896] block_read_full_folio+0x599/0x830 [ 929.231111][T28896] filemap_read_folio+0x114/0x380 [ 929.236637][T28896] do_read_cache_folio+0x350/0x590 [ 929.242252][T28896] read_part_sector+0xb6/0x2b0 [ 929.247522][T28896] adfspart_check_ICS+0xa4/0xa50 [ 929.252974][T28896] bdev_disk_changed+0x75c/0x14b0 [ 929.258504][T28896] blkdev_get_whole+0x380/0x510 [ 929.263866][T28896] bdev_open+0x31e/0xd30 [ 929.268615][T28896] blkdev_open+0x3a8/0x510 [ 929.273534][T28896] do_dentry_open+0x953/0x13f0 [ 929.278800][T28896] vfs_open+0x3b/0x340 [ 929.283372][T28896] path_openat+0x2ee5/0x3830 [ 929.288465][T28896] do_filp_open+0x1fa/0x410 [ 929.293472][T28896] do_sys_openat2+0x121/0x1c0 [ 929.298656][T28896] __x64_sys_openat+0x138/0x170 [ 929.304015][T28896] do_syscall_64+0xfa/0x3b0 [ 929.309025][T28896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.315423][T28896] [ 929.315423][T28896] -> #4 (set->srcu){.+.+}-{0:0}: [ 929.322534][T28896] lock_sync+0xba/0x160 [ 929.327198][T28896] __synchronize_srcu+0x96/0x3a0 [ 929.332643][T28896] elevator_switch+0x12b/0x640 [ 929.337912][T28896] elevator_change+0x2d4/0x450 [ 929.343182][T28896] elevator_set_default+0x186/0x260 [ 929.348887][T28896] blk_register_queue+0x34e/0x3f0 [ 929.354416][T28896] __add_disk+0x677/0xd50 [ 929.359254][T28896] add_disk_fwnode+0xfc/0x480 [ 929.364437][T28896] nbd_dev_add+0x717/0xae0 [ 929.369374][T28896] nbd_init+0x168/0x1f0 [ 929.374038][T28896] do_one_initcall+0x233/0x820 [ 929.379307][T28896] do_initcall_level+0x104/0x190 [ 929.384755][T28896] do_initcalls+0x59/0xa0 [ 929.389591][T28896] kernel_init_freeable+0x334/0x4b0 [ 929.395297][T28896] kernel_init+0x1d/0x1d0 [ 929.400134][T28896] ret_from_fork+0x3f9/0x770 [ 929.405237][T28896] ret_from_fork_asm+0x1a/0x30 [ 929.410511][T28896] [ 929.410511][T28896] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 929.418314][T28896] lock_acquire+0x120/0x360 [ 929.423346][T28896] __mutex_lock+0x187/0x1350 [ 929.428441][T28896] elevator_change+0x19b/0x450 [ 929.433714][T28896] elevator_set_none+0x42/0xb0 [ 929.438985][T28896] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 929.445296][T28896] nbd_start_device+0x17f/0xb10 [ 929.450658][T28896] nbd_genl_connect+0x135b/0x18f0 [ 929.456201][T28896] genl_family_rcv_msg_doit+0x215/0x300 [ 929.462258][T28896] genl_rcv_msg+0x60e/0x790 [ 929.467265][T28896] netlink_rcv_skb+0x205/0x470 [ 929.472530][T28896] genl_rcv+0x28/0x40 [ 929.477017][T28896] netlink_unicast+0x82c/0x9e0 [ 929.482299][T28896] netlink_sendmsg+0x805/0xb30 [ 929.487583][T28896] __sock_sendmsg+0x219/0x270 [ 929.492772][T28896] ____sys_sendmsg+0x505/0x830 [ 929.498049][T28896] ___sys_sendmsg+0x21f/0x2a0 [ 929.503234][T28896] __x64_sys_sendmsg+0x19b/0x260 [ 929.508678][T28896] do_syscall_64+0xfa/0x3b0 [ 929.513686][T28896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.520086][T28896] [ 929.520086][T28896] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 929.528680][T28896] lock_acquire+0x120/0x360 [ 929.533695][T28896] blk_alloc_queue+0x538/0x620 [ 929.538966][T28896] __blk_mq_alloc_disk+0x15c/0x340 [ 929.544588][T28896] nbd_dev_add+0x46c/0xae0 [ 929.549516][T28896] nbd_init+0x168/0x1f0 [ 929.554181][T28896] do_one_initcall+0x233/0x820 [ 929.559450][T28896] do_initcall_level+0x104/0x190 [ 929.564899][T28896] do_initcalls+0x59/0xa0 [ 929.569737][T28896] kernel_init_freeable+0x334/0x4b0 [ 929.575443][T28896] kernel_init+0x1d/0x1d0 [ 929.580284][T28896] ret_from_fork+0x3f9/0x770 [ 929.585376][T28896] ret_from_fork_asm+0x1a/0x30 [ 929.590647][T28896] [ 929.590647][T28896] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 929.597875][T28896] lock_acquire+0x120/0x360 [ 929.602888][T28896] fs_reclaim_acquire+0x72/0x100 [ 929.608421][T28896] __kmalloc_cache_noprof+0x41/0x3d0 [ 929.614217][T28896] __smc_connect+0x1b0/0x1890 [ 929.619403][T28896] smc_connect+0x877/0xd90 [ 929.624329][T28896] __sys_connect+0x313/0x440 [ 929.629420][T28896] __x64_sys_connect+0x7a/0x90 [ 929.634719][T28896] do_syscall_64+0xfa/0x3b0 [ 929.639734][T28896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.646130][T28896] [ 929.646130][T28896] -> #0 (sk_lock-AF_SMC){+.+.}-{0:0}: [ 929.653676][T28896] validate_chain+0xb9b/0x2140 [ 929.658948][T28896] __lock_acquire+0xab9/0xd20 [ 929.664146][T28896] lock_acquire+0x120/0x360 [ 929.669157][T28896] lock_sock_nested+0x48/0x100 [ 929.674433][T28896] smc_shutdown+0x6e/0x9b0 [ 929.679368][T28896] nbd_mark_nsock_dead+0x2e9/0x560 [ 929.684983][T28896] sock_shutdown+0x15e/0x260 [ 929.690077][T28896] nbd_config_put+0x342/0x790 [ 929.695262][T28896] nbd_genl_connect+0x167c/0x18f0 [ 929.700796][T28896] genl_family_rcv_msg_doit+0x215/0x300 [ 929.706864][T28896] genl_rcv_msg+0x60e/0x790 [ 929.711882][T28896] netlink_rcv_skb+0x205/0x470 [ 929.717148][T28896] genl_rcv+0x28/0x40 [ 929.721640][T28896] netlink_unicast+0x82c/0x9e0 [ 929.726914][T28896] netlink_sendmsg+0x805/0xb30 [ 929.732187][T28896] __sock_sendmsg+0x219/0x270 [ 929.737378][T28896] ____sys_sendmsg+0x505/0x830 [ 929.742646][T28896] ___sys_sendmsg+0x21f/0x2a0 [ 929.747826][T28896] __x64_sys_sendmsg+0x19b/0x260 [ 929.753270][T28896] do_syscall_64+0xfa/0x3b0 [ 929.758277][T28896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.764676][T28896] [ 929.764676][T28896] other info that might help us debug this: [ 929.764676][T28896] [ 929.774909][T28896] Chain exists of: [ 929.774909][T28896] sk_lock-AF_SMC --> &cmd->lock --> &nsock->tx_lock [ 929.774909][T28896] [ 929.787415][T28896] Possible unsafe locking scenario: [ 929.787415][T28896] [ 929.794847][T28896] CPU0 CPU1 [ 929.800190][T28896] ---- ---- [ 929.805534][T28896] lock(&nsock->tx_lock); [ 929.809934][T28896] lock(&cmd->lock); [ 929.816424][T28896] lock(&nsock->tx_lock); [ 929.823343][T28896] lock(sk_lock-AF_SMC); [ 929.827660][T28896] [ 929.827660][T28896] *** DEADLOCK *** [ 929.827660][T28896] [ 929.835786][T28896] 4 locks held by syz.2.5366/28896: [ 929.840969][T28896] #0: ffffffff8f59e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 929.849140][T28896] #1: ffffffff8f59e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 929.858100][T28896] #2: ffff888024f34230 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 929.868785][T28896] #3: ffff888021b13a70 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x14f/0x260 [ 929.878253][T28896] [ 929.878253][T28896] stack backtrace: [ 929.884125][T28896] CPU: 0 UID: 0 PID: 28896 Comm: syz.2.5366 Not tainted syzkaller #0 PREEMPT(full) [ 929.884143][T28896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 929.884153][T28896] Call Trace: [ 929.884161][T28896] [ 929.884169][T28896] dump_stack_lvl+0x189/0x250 [ 929.884189][T28896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 929.884204][T28896] ? __pfx__printk+0x10/0x10 [ 929.884223][T28896] ? print_lock_name+0xde/0x100 [ 929.884242][T28896] print_circular_bug+0x2ee/0x310 [ 929.884259][T28896] check_noncircular+0x134/0x160 [ 929.884276][T28896] validate_chain+0xb9b/0x2140 [ 929.884291][T28896] ? __lock_acquire+0xab9/0xd20 [ 929.884312][T28896] ? __mutex_trylock_common+0x153/0x260 [ 929.884329][T28896] __lock_acquire+0xab9/0xd20 [ 929.884349][T28896] ? smc_shutdown+0x6e/0x9b0 [ 929.884368][T28896] lock_acquire+0x120/0x360 [ 929.884385][T28896] ? smc_shutdown+0x6e/0x9b0 [ 929.884406][T28896] ? sock_shutdown+0x14f/0x260 [ 929.884420][T28896] lock_sock_nested+0x48/0x100 [ 929.884442][T28896] ? smc_shutdown+0x6e/0x9b0 [ 929.884464][T28896] smc_shutdown+0x6e/0x9b0 [ 929.884487][T28896] nbd_mark_nsock_dead+0x2e9/0x560 [ 929.884502][T28896] sock_shutdown+0x15e/0x260 [ 929.884517][T28896] nbd_config_put+0x342/0x790 [ 929.884536][T28896] ? device_create_file+0xf4/0x1c0 [ 929.884551][T28896] nbd_genl_connect+0x167c/0x18f0 [ 929.884572][T28896] ? __pfx_nbd_genl_connect+0x10/0x10 [ 929.884595][T28896] ? __nla_parse+0x40/0x60 [ 929.884616][T28896] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 929.884636][T28896] genl_family_rcv_msg_doit+0x215/0x300 [ 929.884656][T28896] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 929.884678][T28896] ? stack_trace_save+0x9c/0xe0 [ 929.884696][T28896] genl_rcv_msg+0x60e/0x790 [ 929.884714][T28896] ? __pfx_genl_rcv_msg+0x10/0x10 [ 929.884730][T28896] ? __pfx_nbd_genl_connect+0x10/0x10 [ 929.884753][T28896] netlink_rcv_skb+0x205/0x470 [ 929.884765][T28896] ? __lock_acquire+0xab9/0xd20 [ 929.884783][T28896] ? __pfx_genl_rcv_msg+0x10/0x10 [ 929.884799][T28896] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 929.884818][T28896] ? down_read+0x1ad/0x2e0 [ 929.884834][T28896] genl_rcv+0x28/0x40 [ 929.884849][T28896] netlink_unicast+0x82c/0x9e0 [ 929.884870][T28896] ? __pfx_netlink_unicast+0x10/0x10 [ 929.884889][T28896] ? netlink_sendmsg+0x642/0xb30 [ 929.884901][T28896] ? skb_put+0x11b/0x210 [ 929.884916][T28896] netlink_sendmsg+0x805/0xb30 [ 929.884933][T28896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 929.884953][T28896] ? aa_sock_msg_perm+0xf1/0x1d0 [ 929.884967][T28896] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 929.884982][T28896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 929.884995][T28896] __sock_sendmsg+0x219/0x270 [ 929.885014][T28896] ____sys_sendmsg+0x505/0x830 [ 929.885032][T28896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 929.885049][T28896] ? import_iovec+0x74/0xa0 [ 929.885066][T28896] ___sys_sendmsg+0x21f/0x2a0 [ 929.885082][T28896] ? __pfx____sys_sendmsg+0x10/0x10 [ 929.885109][T28896] ? __fget_files+0x2a/0x420 [ 929.885122][T28896] ? __fget_files+0x3a0/0x420 [ 929.885137][T28896] __x64_sys_sendmsg+0x19b/0x260 [ 929.885153][T28896] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 929.885172][T28896] ? rcu_is_watching+0x15/0xb0 [ 929.885188][T28896] ? do_syscall_64+0xbe/0x3b0 [ 929.885203][T28896] do_syscall_64+0xfa/0x3b0 [ 929.885216][T28896] ? lockdep_hardirqs_on+0x9c/0x150 [ 929.885229][T28896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.885243][T28896] ? clear_bhb_loop+0x60/0xb0 [ 929.885258][T28896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.885271][T28896] RIP: 0033:0x7f2b2498ebe9 [ 929.885286][T28896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.885299][T28896] RSP: 002b:00007f2b25896038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.885314][T28896] RAX: ffffffffffffffda RBX: 00007f2b24bc5fa0 RCX: 00007f2b2498ebe9 [ 929.885326][T28896] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 929.885335][T28896] RBP: 00007f2b24a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 929.885345][T28896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.885354][T28896] R13: 00007f2b24bc6038 R14: 00007f2b24bc5fa0 R15: 00007ffee433c188 [ 929.885371][T28896] [ 930.370410][T28896] block nbd1: shutting down sockets [ 930.559041][T28915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5368'. [ 930.649547][T28905] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 930.660418][T28905] caif:caif_disconnect_client(): nothing to disconnect [ 930.668182][T28905] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 930.677209][T28905] chnl_net:chnl_net_open(): state disconnected [ 930.683371][T28905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 930.712891][T28906] lo speed is unknown, defaulting to 1000 [ 930.719781][T28906] lo speed is unknown, defaulting to 1000 [ 931.546755][ T1305] lec:lec_start_xmit: lec0:No lecd attached [ 936.904455][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 936.912479][ C0] lec:lec_tx_timeout: lec0