last executing test programs: 4.454994466s ago: executing program 0 (id=2026): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000800)=""/240, 0x4000, 0x800, 0x7}, 0x20) sendmsg(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000540)="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", 0x2bd}], 0x1}, 0x40) 3.432790345s ago: executing program 0 (id=2048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000000)=0x59, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c00098008000140ff"], 0x90}}, 0x8000) 3.24434288s ago: executing program 0 (id=2051): unshare(0x22020400) (async) unshare(0x2c060000) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 3.172630278s ago: executing program 2 (id=2053): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="270e000000000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x0) (async) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="270e000000000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socket$inet6(0xa, 0x6, 0x20005) (async) r7 = socket$inet6(0xa, 0x6, 0x20005) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x4021}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ac1}]}, 0x28}}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4001}, 0x8008090) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, 0x0, 0x0) (async) setsockopt$packet_fanout(r11, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r12, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") (async) ioctl$sock_netdev_private(r12, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @local, 0x7}, {0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffc00}, 0xffffffffffffffff, {[0x401, 0xffffd7fb, 0xf, 0x1, 0x3, 0x200, 0x8001, 0x2]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @local, 0x7}, {0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffc00}, 0xffffffffffffffff, {[0x401, 0xffffd7fb, 0xf, 0x1, 0x3, 0x200, 0x8001, 0x2]}}, 0x5c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) 2.820367543s ago: executing program 4 (id=2055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@can_newroute={0x17c, 0x18, 0x821, 0x0, 0x0, {}, [@CGW_MOD_UID={0x8}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "80d6581204eb0b3af09834f15927818c4e0214d7"}}, @CGW_LIM_HOPS={0x5, 0xd, 0x4}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "396eb15df9efb18d"}}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "74fdd41c13a8310c"}}}, @CGW_MOD_UID={0x5c, 0xe, 0xffffffffffffffff}]}, 0x17c}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r6, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x5c, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) 2.497806276s ago: executing program 2 (id=2057): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(0x0, r0) recvmmsg(r0, &(0x7f000001b000)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/157, 0x9d}, {&(0x7f0000001c40)=""/4093, 0xffd}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x27}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/176, 0xb0}, {&(0x7f00000007c0)=""/258, 0x102}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f00000000c0)=""/73, 0x49}], 0x7}, 0x80000000}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000a40)=""/144, 0x90}, {&(0x7f0000006000)=""/4103, 0x1007}, {&(0x7f0000000600)=""/57, 0x39}, {&(0x7f0000004fc0)=""/4098, 0x1002}], 0x5}, 0x8004}], 0x6, 0x40000000, 0x0) 2.388640518s ago: executing program 4 (id=2059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x168}}, 0x4008041) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000006200)=[{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)="c253d0b5", 0x4}, {&(0x7f00000003c0)="80", 0x1}], 0x2, 0x0, 0x0, 0x40004}], 0x1, 0x0) ioctl$sock_ifreq(r2, 0xd8, &(0x7f0000000180)={'veth1_to_bridge\x00', @ifru_names='ip6gretap0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000f8dbdf250700000028aa8f118f016f26fa4a5f8e0a0004007770616e3400000008000100010000000800050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x806}, 0x300048c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r9, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) setsockopt$sock_int(r8, 0x1, 0x21, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000ba30da6163da19235223f9f08096e27a231c6fed5c9478b41ed5be7ee9416a9be0aa4a0a439cd7267fd617d6b8a4309501e870df9f964a50c6b4008c5eb848dceaa6814c84bfaac3f665", @ANYRES16=r10, @ANYBLOB="010027bd7000fcdbdf256200000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x800) 2.340706999s ago: executing program 2 (id=2060): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000000000000200000d000000000300000002000000020000000200000000000000000000050000000000006161007a039b38632a136289ad534caf3647c531521ee1ef6097247a85476401032d87084d5b2410880e2ffb00821b4ff5ca1bcac015a93b2351a0602b2b64835e6ae3fbff1d23e941b04db7a738654d1d337b732cd4752c480988625e11fde55bf0f3f2aa26a45c0ef3103ca05df78b9d59422cc93e45e7e45a6555"], &(0x7f0000001640)=""/182, 0x45, 0xb6, 0x1}, 0x1f) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000480)=@req3={0x1000, 0x9, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{r7}, r8, 0x0, @inherit={0x48, &(0x7f0000000180)={0x1, 0x0, 0x8, 0x7, {0x20, 0x8, 0x2, 0xff, 0x1263eb7}}}, @name="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"}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000bc0)={0x0, "1fd5ccf06b2607d2daedd52369ffc127"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000001bc0)={{r2}, r8, 0x4, @unused=[0x8, 0x9, 0x1, 0x7], @devid=r9}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xe64, 0x3f9c, 0x0, 0x10001}, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r1, 0x4, 0xffffffffffffff81, 0x162}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r11, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000680)={0x1, 0x3, 0x1000, 0x0, 0x0, 0xd0, 0x0, &(0x7f0000000580)="8bffdb5e972f4d66614ebce022ff07c89d150ebc6387352d3ce52d3b37e879e25ba0b97c29f48b40c38b972398237f6fb7342f0e28a3abb4b0ff2bbabd00b23cfd5c35becfa62ee54c690f7d237e7bac957bec98c949c154ec3fc2016417d4bc3602f94928febf83cf6fbca9735ae698cca5fce6634dc67c14173defab7acdc2a8d95dc33188fe910126e1aed8b8b5754c6bcd47054da67088b7f334b8f3b8cfe681404d5f726121f5e67c1fd2e6b62331486aeeb25b20457fc25083cc24e2bbe0378d36c719daa8b67435622697dbbf"}) getsockopt$inet_mptcp_buf(r10, 0x11c, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 2.228696647s ago: executing program 0 (id=2062): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16, 0xffffffffffffffff, 0xffffffff}, 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x9, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfe, 0x0, 0x87, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x80000045, [0x2, 0x7]}}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) 2.186315305s ago: executing program 3 (id=2064): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="10000000181401000000000000000000e442e57a7ccb51f11517c121f1bd3e1e1f44e88399a77784afe3cfb5f42cf6310229b825257191c5450b1f51aad901c558703f01d6dceae857ef96008da62e4d7a4b6578773a377b0473beb4c0669931c363e6084a96a316f4d40de8096e9bed8cea98185e10fa3265b8485ad7d367135d3d82dfb378000000000000000058186e9aad2049583afedf229891c2ca5e43c75fe17cda6c4565feb64c0ebac81464"], 0x10}, 0x1, 0x0, 0x0, 0x4008885}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000540), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5}, @IFLA_GRE_FLOWINFO={0x8}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x0, 0x0, 0x0, 0x6}, {0x1}, 0x0, 0x7f}}, @TCA_TBF_BURST={0x8, 0x6, 0xa815}]}}]}, 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x3d}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xe}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xc4, r10, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendto$inet6(r8, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x3}, 0x8) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000380)="3941f6", 0x3}], 0x1) sendto(r0, &(0x7f0000000040)="4f73fcb40d525f04b9df13deec1692ad2daf31e37501014accf487ff527064afee430efd87126f770ae6443544739e7d1863244a7ad94b888ea8c5d085c2fce59d0509c79feaf580ae3db7841bdd99edbc6ab22ed4efdad82a3172d8127adbae0c0c348d7fd6289e5d3b180eb32ce3d9a7d52366d3e02afb0f69eaa044b22529abe01337e60396684f8b4baf94f348ca105e59cb9fc3933a2874e74d912bdcf87644398555e56f", 0xa7, 0x3ac03a2b7f7db96a, &(0x7f0000000100)=@rc={0x1f, @any, 0x2}, 0x80) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265001400028008000700e000000208000600ac14142b08000400"], 0x78}}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000480)=0x52e9) 2.046829973s ago: executing program 0 (id=2065): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000010100800c000100f600000000000000140003"], 0x114}], 0x1, 0x0, 0x0, 0x41000}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000010100800c000100f600000000000000140003"], 0x114}], 0x1, 0x0, 0x0, 0x41000}, 0x0) (async) 1.784848573s ago: executing program 0 (id=2066): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, 0x0, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'veth1_virt_wifi\x00', @random="010000201000"}) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) getpeername$unix(r4, &(0x7f0000000240)=@abs, &(0x7f00000000c0)=0x6e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000a140000001000010000000000000000000100000a0000000000008e7301b9290af7deb6b4c49143be8ea0fe2f65b397d95cc36d859c857a2232c47167df510a86ad7d60554c83ab1926b1b71ba65c414df90e183725cb277b71388f396ae331a5e985db37a5053a"], 0x28}}, 0x0) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) 1.309916558s ago: executing program 1 (id=2067): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000240000000800000001143d00000008000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r1, 0xffffffffffffffff, 0x24}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f20000000000000005000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0a00000000000000b70500000800000000f2037a828900fc8b357f0185e3177ba647e62363c28ad0716843e4953ef21c17d88e5a2c1b61c6da3401d6579ad780893bb2821ea0ef9888271e66324fe4daceaba962916039d0c65ab07c95e8263572475acdb22ed9e8aca6827dace97f5d4aa3ecbda906097fff8e43a68ae0f6d84cda53a0694207ba014f34158c4b4a2536f478a22953bf834742e3a1"], &(0x7f0000000680)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) 1.167631332s ago: executing program 3 (id=2068): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d50a0000000000006111780000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/49, 0x2c000, 0x1000, 0x10, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x100000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 820.948556ms ago: executing program 3 (id=2069): syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @random="0e577ca5a84f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast2}, "0018630100000003"}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) listen(r0, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r0], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000fcdbdf250100000008000300", @ANYRES32=r4, @ANYBLOB="0c009d000200000042000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 800.579185ms ago: executing program 1 (id=2070): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(0x0, r0) recvmmsg(r0, &(0x7f000001b000)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/157, 0x9d}, {&(0x7f0000001c40)=""/4093, 0xffd}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x27}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/176, 0xb0}, {&(0x7f00000007c0)=""/258, 0x102}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f00000000c0)=""/73, 0x49}], 0x7}, 0x80000000}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000000a40)=""/144, 0x90}, {&(0x7f0000006000)=""/4103, 0x1007}, {&(0x7f0000000600)=""/57, 0x39}, {&(0x7f0000004fc0)=""/4098, 0x1002}], 0x5}, 0x8004}], 0x6, 0x40000000, 0x0) 751.581641ms ago: executing program 2 (id=2071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x10022, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008000200"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x27, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0x1cda, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x18, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{}]}) 676.411209ms ago: executing program 4 (id=2072): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet(0x2, 0x3, 0x13) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRESDEC=r0, @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x80, r4, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8161ca9c02f30d93daf7dac7b9e1967e4cada64e0c5f1672"}]]}, 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x44, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x5, 0x3, 0x0, 0x1, [@generic="9e"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0, 0x0, 0x0, 0x3e}, 0x3000c085) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r9, 0x0, 0x0, 0x80800) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f00000002c0)={0x10000018}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$fou(&(0x7f0000000340), r11) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000040)=r8, 0x4) 676.004708ms ago: executing program 3 (id=2073): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000900)=0x60) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 649.890375ms ago: executing program 1 (id=2074): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 633.392217ms ago: executing program 2 (id=2075): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000080)={0x44, r2, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x2a, "3d3d372ecb712a23f4d5cd3a262297a626173902ac1c4969086e6c761bdd6a7af0145ae59bfc96d69ee0"}, &(0x7f0000000040)=0x32) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000100)={r5, 0x8e, "4c6bbe2af1e26415a93dd5f7bea01b1ee5d01a1c1517bcc685bf136a1bbe5690f373cdbb09cc6865281d6267b6464724872fea3bc7b12a759147f9a9feecd60f56f1efebcd2a0cebdcdd0f29df5f137536c62b7e28f3d63421fce16f70482b6c64de7ca5d615c16963f7d4616ca6faa312ffa41be6cd4e1bf6c51f39500a56adf017254e8706f49b268ddbc6908a"}, &(0x7f0000000080)=0x96) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0xfffc, 0x2000, 'fo\x00', 0x19e172f08959ac6e, 0xf0000000, 0x32}, 0x2c) 524.765557ms ago: executing program 4 (id=2076): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x3fd, 0x1, 0x110}, 0x48) r1 = socket$inet6(0xa, 0x3, 0x39) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) sendmmsg$inet(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="d2", 0x1}], 0x1}}], 0x1, 0x0) (async) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xc30, @local, 0x6}, 0x1c) (async, rerun: 32) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000140)=0x8, 0x4) (async) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="4c0000002d00030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000812000002c00128009000100626f6e64000000001c000280080003000600000008000200", @ANYRES32=0x0, @ANYBLOB="0500010006000000"], 0x4c}}, 0x28000000) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async, rerun: 64) connect$inet(r6, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) (async, rerun: 64) socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000006e7a00000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c300f4004000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 511.317793ms ago: executing program 1 (id=2077): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x4, '\x00', r0, r3, 0x0, 0x5, 0x2}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000240), &(0x7f00000006c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r10, r7, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0xe2, &(0x7f0000000a80)={@remote, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x2f, 0x4, 0x2, 0x8, 0xd0, 0x67, 0x0, 0x4, 0x1, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x17, 0xc6, [@multicast2, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x39}]}, @rr={0x7, 0x1b, 0x29, [@dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010102, @loopback, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x34, 0x48, 0x1, 0x5, [{@private=0xa010102, 0xffffff7f}, {@empty, 0x400}, {@broadcast, 0x6}, {@rand_addr=0x84, 0x2}, {@remote, 0x400}, {@private=0xa010100, 0x5a75800}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0x77, 0x0, 0x0, [0xffff7fff, 0xf, 0x9, 0x932, 0x9]}, @timestamp_addr={0x44, 0x1c, 0x96, 0x1, 0x1, [{@multicast2, 0x70000}, {@broadcast}, {@broadcast, 0x1}]}, @noop, @ssrr={0x89, 0x7, 0x46, [@multicast2]}]}}, @timestamp={0xd, 0x0, 0x0, 0x1ff, 0x8, 0x6b, 0x55, 0x6}}}}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e00000003000000060000000501000002100100", @ANYRES32=r4, @ANYBLOB="ffffffff00"/20, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="0300000004180000020000000100000000080000000000009489998a6ee0ee3f0717eb", @ANYRES32=r3, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r11, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32=r12, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffff05, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r13}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x288}, 0x1, 0x0, 0x0, 0xd4}, 0x40091) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) r15 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r15, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r15, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r15, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r15, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r15, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 432.460653ms ago: executing program 2 (id=2078): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) (async) unshare(0x400) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x14, 0x4, 0x4, 0x448, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, &(0x7f00000000c0)=""/193}, 0x20) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x3}, 0x0, 0x0, 0x4e28, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x100}, {0x0, 0x0, 0x0, 0x200}, 0x1, 0x0, 0x1, 0x0, 0x4}, {{@in=@multicast2, 0x4d2, 0x33}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3503, 0x0, 0x2, 0xb7, 0x2, 0x0, 0x100}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 432.240039ms ago: executing program 4 (id=2079): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000000820000004000000ab0b24d0bb09ce29a17e527b364a603150a4e0ff84ca6ec21f75b19d090386007f62d8b3d5ab1ab03550aee13ee60afa7ba79e76bb52ff1d83e1921ad779238e0426aa63b331a5e02f882c3b924724925ac1242675712c164cd4b604dc930190fbe485903d8dd233d2a1c019309cea8b4b08", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xffffffff, 0x0, 0xff000000], [0xff, 0xff000000, 0xffffffff, 0xffffffff], 'veth0_macvtap\x00', 'ip6gre0\x00', {}, {0xff}, 0x3c, 0xf, 0x0, 0x84}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@empty, @local, [0xffffff00, 0x0, 0xff000000, 0xff000000], [0xffffff00, 0xffffffff, 0xffffffff], 'ip6_vti0\x00', 'team_slave_0\x00', {}, {}, 0x33, 0x4, 0x3, 0x10}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x88, 0x42, 0x5, 0x10, 0x200, 0x2831, 0x2080}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 356.372946ms ago: executing program 3 (id=2080): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x5, 0x8000, 0x88, 0xe2, 0x0, 0xff, 0xb7}, &(0x7f0000000440)=0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) ioctl(r1, 0x7, &(0x7f0000000040)="2b847e2f9dcebd1fb8b57c225dcd12481cbbe480691b19f86f97bb76c6389cb27b5eee0b1e2eba87762af9881af20cb4f13ad5e2d4d9aa2506f7ca1c8170792fae55050c4adbeda107edbab714329650734a567124f5") 302.061064ms ago: executing program 3 (id=2081): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x498, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x800000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0x2}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x468, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x7, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "cd27dfe719e7ed9339c16a28128fd5d3f66c449226ee6785115c994b187b566cdb5fbd980d6dc88821c8e2b250cd40ff985d3ef42ebf189e8ec634d0efd425293f0aa153f6b22de91b53a7c5baec939105bac5c612e005adc1eb03a0a79a8dc8fc597006db1addfb52ec5bb5b2590c76e9d415b72bef8a193dac7572e455b6a061c728087a432b4f953d703b645f6eabe3571d38b7380b7a484f799aea8d4b5e9a6a2ddc9a1bd9c708cc695b361d6f413bc0d7b8b966212ea5d14e30a19ea80f87e326a76771eaa560d9db5a8b05a047bcce21d0fe8ed1df1d3449d60278e3ff91547fe400e352e41f7f10dc8c904fa47dfc80ac40d7e3e0b129fa6693d0c71b"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x498}}, 0x40040) 239.19768ms ago: executing program 4 (id=2082): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff65, 0x0, 0x0, 0x0}, 0x94) unshare(0x400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f00000014"], 0x20) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9d39, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000300)='GPL\x00', 0x9, 0xff7, &(0x7f0000001e00)=""/4087, 0x40f00, 0x66}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7]}]}]}, 0x28}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r7) sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="fba70000e80000867f0004"], 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r7) 140.024134ms ago: executing program 1 (id=2083): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) (async, rerun: 32) write(r1, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a2b0300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) (async, rerun: 32) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async, rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r5) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x118, r6, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x299e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdc93}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xca90}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x9, 0x3, "8fe31e9eea"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x26f6}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80004000}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40054}, 0x4008000) (async, rerun: 32) connect$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000011000371d3a76cfd0584268ffb8681fcefddbdf25c26c81814f51d73a1c0700000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000280012800b00010065727370616e0000180002800400120008001500000010000500160001000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) 0s ago: executing program 1 (id=2084): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007840)=[{{&(0x7f00000002c0)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x401}, 0x1c, 0x0}}], 0x1, 0x20004090) r0 = socket(0x840000000002, 0x6, 0xfa) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) kernel console output (not intermixed with test programs): ] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.883096][ T9079] Call Trace: [ 178.883104][ T9079] [ 178.883112][ T9079] dump_stack_lvl+0x189/0x250 [ 178.883138][ T9079] ? __pfx____ratelimit+0x10/0x10 [ 178.883162][ T9079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.883183][ T9079] ? __pfx__printk+0x10/0x10 [ 178.883214][ T9079] ? __pfx___might_resched+0x10/0x10 [ 178.883231][ T9079] ? fs_reclaim_acquire+0x7d/0x100 [ 178.883262][ T9079] should_fail_ex+0x414/0x560 [ 178.883289][ T9079] should_failslab+0xa8/0x100 [ 178.883320][ T9079] kmem_cache_alloc_noprof+0x73/0x3c0 [ 178.883343][ T9079] ? __kernfs_new_node+0xd7/0x7e0 [ 178.883370][ T9079] __kernfs_new_node+0xd7/0x7e0 [ 178.883389][ T9079] ? __lock_acquire+0xab9/0xd20 [ 178.883422][ T9079] ? __pfx___kernfs_new_node+0x10/0x10 [ 178.883444][ T9079] ? kernfs_root+0x1c/0x230 [ 178.883470][ T9079] ? kernfs_root+0x1c/0x230 [ 178.883488][ T9079] ? kernfs_root+0x1c/0x230 [ 178.883504][ T9079] ? kernfs_root+0x1c/0x230 [ 178.883527][ T9079] kernfs_new_node+0x102/0x210 [ 178.883553][ T9079] __kernfs_create_file+0x4b/0x2e0 [ 178.883582][ T9079] sysfs_add_file_mode_ns+0x238/0x300 [ 178.883617][ T9079] internal_create_group+0x66d/0x1110 [ 178.883662][ T9079] ? __pfx_internal_create_group+0x10/0x10 [ 178.883692][ T9079] ? kernfs_add_one+0xf0/0x520 [ 178.883721][ T9079] sysfs_create_groups+0x59/0x120 [ 178.883745][ T9079] device_add_attrs+0xe0/0x5a0 [ 178.883778][ T9079] ? __pfx_device_add_attrs+0x10/0x10 [ 178.883809][ T9079] ? device_add_class_symlinks+0x21f/0x240 [ 178.883837][ T9079] device_add+0x496/0xb50 [ 178.883860][ T9079] ? device_initialize+0x24b/0x440 [ 178.883887][ T9079] netdev_register_kobject+0x178/0x310 [ 178.883912][ T9079] register_netdevice+0x126c/0x1ae0 [ 178.883949][ T9079] ? __pfx_register_netdevice+0x10/0x10 [ 178.883994][ T9079] br_dev_newlink+0x6a/0x140 [ 178.884013][ T9079] ? rtnl_newlink_create+0x2fd/0xb00 [ 178.884036][ T9079] ? __pfx_br_dev_newlink+0x10/0x10 [ 178.884058][ T9079] rtnl_newlink_create+0x30d/0xb00 [ 178.884083][ T9079] ? __pfx___nla_validate_parse+0x10/0x10 [ 178.884110][ T9079] ? __lock_acquire+0xab9/0xd20 [ 178.884139][ T9079] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 178.884167][ T9079] ? __pfx___mutex_lock+0x10/0x10 [ 178.884201][ T9079] ? ns_capable+0x8a/0xf0 [ 178.884224][ T9079] rtnl_newlink+0x16d6/0x1c70 [ 178.884248][ T9079] ? netlink_sendmsg+0x805/0xb30 [ 178.884283][ T9079] ? __pfx_rtnl_newlink+0x10/0x10 [ 178.884330][ T9079] ? kasan_quarantine_put+0xdd/0x220 [ 178.884351][ T9079] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.884379][ T9079] ? nlmon_xmit+0xb0/0x100 [ 178.884401][ T9079] ? kmem_cache_free+0x18f/0x400 [ 178.884432][ T9079] ? __local_bh_enable_ip+0x12d/0x1c0 [ 178.884450][ T9079] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.884473][ T9079] ? __local_bh_enable_ip+0x12d/0x1c0 [ 178.884491][ T9079] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 178.884514][ T9079] ? __dev_queue_xmit+0x27b/0x3b50 [ 178.884533][ T9079] ? __dev_queue_xmit+0x27b/0x3b50 [ 178.884548][ T9079] ? __dev_queue_xmit+0x27b/0x3b50 [ 178.884568][ T9079] ? __dev_queue_xmit+0x1d79/0x3b50 [ 178.884591][ T9079] ? __lock_acquire+0xab9/0xd20 [ 178.884648][ T9079] ? __pfx_rtnl_newlink+0x10/0x10 [ 178.884670][ T9079] rtnetlink_rcv_msg+0x7cc/0xb70 [ 178.884696][ T9079] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 178.884718][ T9079] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 178.884738][ T9079] ? ref_tracker_free+0x63a/0x7d0 [ 178.884761][ T9079] ? __asan_memcpy+0x40/0x70 [ 178.884780][ T9079] ? __pfx_ref_tracker_free+0x10/0x10 [ 178.884813][ T9079] netlink_rcv_skb+0x208/0x470 [ 178.884838][ T9079] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 178.884862][ T9079] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.884896][ T9079] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.884928][ T9079] netlink_unicast+0x82c/0x9e0 [ 178.884958][ T9079] ? __pfx_netlink_unicast+0x10/0x10 [ 178.884981][ T9079] ? netlink_sendmsg+0x642/0xb30 [ 178.885001][ T9079] ? skb_put+0x11b/0x210 [ 178.885029][ T9079] netlink_sendmsg+0x805/0xb30 [ 178.885062][ T9079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.885088][ T9079] ? aa_sock_msg_perm+0xf1/0x1d0 [ 178.885115][ T9079] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.885135][ T9079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.885159][ T9079] __sock_sendmsg+0x21c/0x270 [ 178.885183][ T9079] ____sys_sendmsg+0x505/0x830 [ 178.885214][ T9079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.885250][ T9079] ? import_iovec+0x74/0xa0 [ 178.885270][ T9079] ___sys_sendmsg+0x21f/0x2a0 [ 178.885294][ T9079] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.885349][ T9079] ? __fget_files+0x2a/0x420 [ 178.885370][ T9079] ? __fget_files+0x3a0/0x420 [ 178.885404][ T9079] __x64_sys_sendmsg+0x19b/0x260 [ 178.885429][ T9079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.885463][ T9079] ? __pfx_ksys_write+0x10/0x10 [ 178.885483][ T9079] ? rcu_is_watching+0x15/0xb0 [ 178.885504][ T9079] ? do_syscall_64+0xbe/0x3b0 [ 178.885528][ T9079] do_syscall_64+0xfa/0x3b0 [ 178.885548][ T9079] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.885567][ T9079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.885586][ T9079] ? clear_bhb_loop+0x60/0xb0 [ 178.885605][ T9079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.885622][ T9079] RIP: 0033:0x7f67f598ebe9 [ 178.885646][ T9079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.885661][ T9079] RSP: 002b:00007f67f678e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.885680][ T9079] RAX: ffffffffffffffda RBX: 00007f67f5bb5fa0 RCX: 00007f67f598ebe9 [ 178.885694][ T9079] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 178.885704][ T9079] RBP: 00007f67f678e090 R08: 0000000000000000 R09: 0000000000000000 [ 178.885715][ T9079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.885725][ T9079] R13: 00007f67f5bb6038 R14: 00007f67f5bb5fa0 R15: 00007ffe46d1cb48 [ 178.885755][ T9079] [ 179.012755][ T9088] netlink: 'syz.1.826': attribute type 39 has an invalid length. [ 179.804437][ T9103] netlink: 'syz.2.832': attribute type 8 has an invalid length. [ 179.904708][ T9107] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 180.072331][ T9115] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 180.180487][ T9115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.229917][ T9121] bond1: (slave veth3): Enslaving as an active interface with a down link [ 180.264943][ T9121] netlink: 168 bytes leftover after parsing attributes in process `syz.3.837'. [ 180.317274][ T9115] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 180.325964][ T9115] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 180.449651][ T9113] geneve2: entered promiscuous mode [ 180.632025][ T9140] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 180.662036][ T9140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.676231][ T9140] ipvlan2: entered allmulticast mode [ 180.681569][ T9140] bond1: entered allmulticast mode [ 180.716406][ T9140] bond1: (slave gretap2): making interface the new active one [ 180.724021][ T9140] gretap2: entered allmulticast mode [ 180.756354][ T9140] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 180.877313][ T9148] block nbd2: server does not support multiple connections per device. [ 180.887209][ T9148] block nbd2: shutting down sockets [ 180.899283][ T9148] ieee802154 phy1 wpan1: encryption failed: -90 [ 181.004561][ T9156] netlink: 'syz.1.844': attribute type 21 has an invalid length. [ 181.040255][ T9156] netlink: 128 bytes leftover after parsing attributes in process `syz.1.844'. [ 181.117102][ T9156] netlink: 'syz.1.844': attribute type 4 has an invalid length. [ 181.163209][ T9156] netlink: 'syz.1.844': attribute type 3 has an invalid length. [ 181.208058][ T9156] netlink: 3 bytes leftover after parsing attributes in process `syz.1.844'. [ 181.776061][ T9161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.781456][ T9164] netlink: 'syz.2.846': attribute type 8 has an invalid length. [ 181.946536][ T9172] netlink: 112 bytes leftover after parsing attributes in process `syz.3.850'. [ 182.252552][ T9183] tipc: Enabled bearer , priority 0 [ 182.284598][ T9180] syzkaller0: entered promiscuous mode [ 182.291091][ T9180] syzkaller0: entered allmulticast mode [ 182.343749][ T9183] tipc: Resetting bearer [ 182.431665][ T9178] tipc: Resetting bearer [ 182.489446][ T9178] tipc: Disabling bearer [ 182.766455][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.095829][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.485437][ T9213] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 183.589396][ T9213] syzkaller0: entered promiscuous mode [ 183.595642][ T9213] syzkaller0: entered allmulticast mode [ 183.605189][ T9215] netlink: 'syz.2.862': attribute type 8 has an invalid length. [ 183.809557][ T9223] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 183.845395][ T9223] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 184.068902][ T9237] netlink: 'syz.4.866': attribute type 32 has an invalid length. [ 184.101312][ T9237] netlink: 60 bytes leftover after parsing attributes in process `syz.4.866'. [ 184.145932][ T9233] netlink: 2 bytes leftover after parsing attributes in process `syz.4.866'. [ 184.270992][ T9243] tipc: Failed to remove unknown binding: 66,1,1/1187530782:4289311237/4289311239 [ 184.342706][ T9249] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 184.554979][ T9264] tipc: Enabled bearer , priority 10 [ 184.563087][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.875'. [ 184.621057][ T9267] netlink: 36 bytes leftover after parsing attributes in process `syz.3.875'. [ 185.235048][ T9295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.884'. [ 185.403684][ T9304] netlink: 'syz.3.886': attribute type 8 has an invalid length. [ 185.502983][ T9307] netlink: 'syz.1.887': attribute type 9 has an invalid length. [ 185.517735][ T9307] netlink: 'syz.1.887': attribute type 6 has an invalid length. [ 185.541573][ T9304] FAULT_INJECTION: forcing a failure. [ 185.541573][ T9304] name failslab, interval 1, probability 0, space 0, times 0 [ 185.554895][ T9304] CPU: 1 UID: 0 PID: 9304 Comm: syz.3.886 Not tainted 6.16.0-syzkaller-12065-gbc4c0a48bdad #0 PREEMPT(full) [ 185.554912][ T9304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.554919][ T9304] Call Trace: [ 185.554923][ T9304] [ 185.554927][ T9304] dump_stack_lvl+0x189/0x250 [ 185.554951][ T9304] ? __pfx____ratelimit+0x10/0x10 [ 185.554972][ T9304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.554992][ T9304] ? __pfx__printk+0x10/0x10 [ 185.555021][ T9304] ? __pfx___might_resched+0x10/0x10 [ 185.555038][ T9304] ? fs_reclaim_acquire+0x7d/0x100 [ 185.555068][ T9304] should_fail_ex+0x414/0x560 [ 185.555094][ T9304] should_failslab+0xa8/0x100 [ 185.555119][ T9304] kmem_cache_alloc_noprof+0x73/0x3c0 [ 185.555133][ T9304] ? __kernfs_new_node+0xd7/0x7e0 [ 185.555148][ T9304] __kernfs_new_node+0xd7/0x7e0 [ 185.555159][ T9304] ? __lock_acquire+0xab9/0xd20 [ 185.555179][ T9304] ? __pfx___kernfs_new_node+0x10/0x10 [ 185.555191][ T9304] ? kernfs_root+0x1c/0x230 [ 185.555206][ T9304] ? kernfs_root+0x1c/0x230 [ 185.555216][ T9304] ? kernfs_root+0x1c/0x230 [ 185.555226][ T9304] ? kernfs_root+0x1c/0x230 [ 185.555239][ T9304] kernfs_new_node+0x102/0x210 [ 185.555253][ T9304] __kernfs_create_file+0x4b/0x2e0 [ 185.555282][ T9304] sysfs_add_file_mode_ns+0x238/0x300 [ 185.555313][ T9304] internal_create_group+0x66d/0x1110 [ 185.555355][ T9304] ? __pfx_internal_create_group+0x10/0x10 [ 185.555377][ T9304] ? kernfs_add_one+0xf0/0x520 [ 185.555402][ T9304] sysfs_create_groups+0x59/0x120 [ 185.555424][ T9304] device_add_attrs+0xe0/0x5a0 [ 185.555454][ T9304] ? __pfx_device_add_attrs+0x10/0x10 [ 185.555473][ T9304] ? device_add_class_symlinks+0x21f/0x240 [ 185.555490][ T9304] device_add+0x496/0xb50 [ 185.555503][ T9304] ? device_initialize+0x24b/0x440 [ 185.555519][ T9304] netdev_register_kobject+0x178/0x310 [ 185.555533][ T9304] register_netdevice+0x126c/0x1ae0 [ 185.555553][ T9304] ? __pfx_register_netdevice+0x10/0x10 [ 185.555578][ T9304] br_dev_newlink+0x6a/0x140 [ 185.555590][ T9304] ? rtnl_newlink_create+0x2fd/0xb00 [ 185.555604][ T9304] ? __pfx_br_dev_newlink+0x10/0x10 [ 185.555616][ T9304] rtnl_newlink_create+0x30d/0xb00 [ 185.555633][ T9304] ? __mutex_lock+0x5b6/0x1360 [ 185.555650][ T9304] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 185.555667][ T9304] ? __pfx___mutex_lock+0x10/0x10 [ 185.555685][ T9304] ? ns_capable+0x8a/0xf0 [ 185.555698][ T9304] rtnl_newlink+0x16d6/0x1c70 [ 185.555712][ T9304] ? netlink_sendmsg+0x805/0xb30 [ 185.555732][ T9304] ? __pfx_rtnl_newlink+0x10/0x10 [ 185.555759][ T9304] ? kasan_quarantine_put+0xdd/0x220 [ 185.555771][ T9304] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.555787][ T9304] ? nlmon_xmit+0xb0/0x100 [ 185.555801][ T9304] ? kmem_cache_free+0x18f/0x400 [ 185.555818][ T9304] ? __local_bh_enable_ip+0x12d/0x1c0 [ 185.555829][ T9304] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.555842][ T9304] ? __local_bh_enable_ip+0x12d/0x1c0 [ 185.555852][ T9304] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 185.555865][ T9304] ? __dev_queue_xmit+0x27b/0x3b50 [ 185.555876][ T9304] ? __dev_queue_xmit+0x27b/0x3b50 [ 185.555884][ T9304] ? __dev_queue_xmit+0x27b/0x3b50 [ 185.555895][ T9304] ? __dev_queue_xmit+0x1d79/0x3b50 [ 185.555908][ T9304] ? __lock_acquire+0xab9/0xd20 [ 185.555936][ T9304] ? __pfx_rtnl_newlink+0x10/0x10 [ 185.555949][ T9304] rtnetlink_rcv_msg+0x7cc/0xb70 [ 185.555964][ T9304] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 185.555976][ T9304] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.555988][ T9304] ? ref_tracker_free+0x63a/0x7d0 [ 185.556001][ T9304] ? __asan_memcpy+0x40/0x70 [ 185.556012][ T9304] ? __pfx_ref_tracker_free+0x10/0x10 [ 185.556030][ T9304] netlink_rcv_skb+0x208/0x470 [ 185.556043][ T9304] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.556060][ T9304] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.556081][ T9304] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.556109][ T9304] netlink_unicast+0x82c/0x9e0 [ 185.556138][ T9304] ? __pfx_netlink_unicast+0x10/0x10 [ 185.556161][ T9304] ? netlink_sendmsg+0x642/0xb30 [ 185.556181][ T9304] ? skb_put+0x11b/0x210 [ 185.556208][ T9304] netlink_sendmsg+0x805/0xb30 [ 185.556233][ T9304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.556248][ T9304] ? aa_sock_msg_perm+0xf1/0x1d0 [ 185.556263][ T9304] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.556275][ T9304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.556288][ T9304] __sock_sendmsg+0x21c/0x270 [ 185.556303][ T9304] ____sys_sendmsg+0x505/0x830 [ 185.556326][ T9304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.556346][ T9304] ? import_iovec+0x74/0xa0 [ 185.556359][ T9304] ___sys_sendmsg+0x21f/0x2a0 [ 185.556375][ T9304] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.556410][ T9304] ? __fget_files+0x2a/0x420 [ 185.556424][ T9304] ? __fget_files+0x3a0/0x420 [ 185.556445][ T9304] __x64_sys_sendmsg+0x19b/0x260 [ 185.556461][ T9304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.556481][ T9304] ? __pfx_ksys_write+0x10/0x10 [ 185.556493][ T9304] ? rcu_is_watching+0x15/0xb0 [ 185.556507][ T9304] ? do_syscall_64+0xbe/0x3b0 [ 185.556523][ T9304] do_syscall_64+0xfa/0x3b0 [ 185.556535][ T9304] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.556547][ T9304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.556557][ T9304] ? clear_bhb_loop+0x60/0xb0 [ 185.556570][ T9304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.556581][ T9304] RIP: 0033:0x7fe60d58ebe9 [ 185.556598][ T9304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.556608][ T9304] RSP: 002b:00007fe60e393038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.556623][ T9304] RAX: ffffffffffffffda RBX: 00007fe60d7b5fa0 RCX: 00007fe60d58ebe9 [ 185.556631][ T9304] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 185.556637][ T9304] RBP: 00007fe60e393090 R08: 0000000000000000 R09: 0000000000000000 [ 185.556643][ T9304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.556648][ T9304] R13: 00007fe60d7b6038 R14: 00007fe60d7b5fa0 R15: 00007ffc5bdec678 [ 185.556665][ T9304] [ 186.362855][ T9314] netlink: 'syz.2.889': attribute type 2 has an invalid length. [ 186.510052][ T9323] netlink: 'syz.4.894': attribute type 1 has an invalid length. [ 186.540351][ T9323] netlink: 'syz.4.894': attribute type 2 has an invalid length. [ 186.589619][ T9331] netlink: 'syz.4.894': attribute type 1 has an invalid length. [ 186.604653][ T9331] netlink: 'syz.4.894': attribute type 2 has an invalid length. [ 186.758366][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 186.765051][ T9334] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 186.777186][ T9323] netlink: 'syz.4.894': attribute type 1 has an invalid length. [ 186.892180][ T9336] syzkaller1: entered promiscuous mode [ 186.905823][ T9336] syzkaller1: entered allmulticast mode [ 187.029690][ T9346] FAULT_INJECTION: forcing a failure. [ 187.029690][ T9346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.055588][ T9346] CPU: 1 UID: 0 PID: 9346 Comm: syz.1.900 Not tainted 6.16.0-syzkaller-12065-gbc4c0a48bdad #0 PREEMPT(full) [ 187.055615][ T9346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.055625][ T9346] Call Trace: [ 187.055631][ T9346] [ 187.055639][ T9346] dump_stack_lvl+0x189/0x250 [ 187.055666][ T9346] ? __pfx____ratelimit+0x10/0x10 [ 187.055690][ T9346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.055711][ T9346] ? __pfx__printk+0x10/0x10 [ 187.055747][ T9346] should_fail_ex+0x414/0x560 [ 187.055773][ T9346] _copy_to_user+0x31/0xb0 [ 187.055794][ T9346] simple_read_from_buffer+0xe1/0x170 [ 187.055825][ T9346] proc_fail_nth_read+0x1b3/0x220 [ 187.055849][ T9346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.055872][ T9346] ? rw_verify_area+0x2a6/0x4d0 [ 187.055894][ T9346] ? __lock_acquire+0xab9/0xd20 [ 187.055928][ T9346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.055951][ T9346] vfs_read+0x200/0x980 [ 187.055972][ T9346] ? fdget_pos+0x247/0x320 [ 187.055992][ T9346] ? __pfx___mutex_lock+0x10/0x10 [ 187.056015][ T9346] ? __pfx_vfs_read+0x10/0x10 [ 187.056039][ T9346] ? __fget_files+0x2a/0x420 [ 187.056082][ T9346] ? __fget_files+0x3a0/0x420 [ 187.056105][ T9346] ? __fget_files+0x2a/0x420 [ 187.056139][ T9346] ksys_read+0x145/0x250 [ 187.056164][ T9346] ? __pfx_ksys_read+0x10/0x10 [ 187.056182][ T9346] ? rcu_is_watching+0x15/0xb0 [ 187.056206][ T9346] ? do_syscall_64+0xbe/0x3b0 [ 187.056232][ T9346] do_syscall_64+0xfa/0x3b0 [ 187.056253][ T9346] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.056274][ T9346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.056293][ T9346] ? clear_bhb_loop+0x60/0xb0 [ 187.056315][ T9346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.056333][ T9346] RIP: 0033:0x7f0c5cf8d5fc [ 187.056351][ T9346] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 187.056366][ T9346] RSP: 002b:00007f0c5dec9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.056386][ T9346] RAX: ffffffffffffffda RBX: 00007f0c5d1b5fa0 RCX: 00007f0c5cf8d5fc [ 187.056399][ T9346] RDX: 000000000000000f RSI: 00007f0c5dec90a0 RDI: 0000000000000005 [ 187.056410][ T9346] RBP: 00007f0c5dec9090 R08: 0000000000000000 R09: 0000000000000000 [ 187.056421][ T9346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.056432][ T9346] R13: 00007f0c5d1b6038 R14: 00007f0c5d1b5fa0 R15: 00007ffce99f6268 [ 187.056462][ T9346] [ 187.392174][ T9352] netlink: 'syz.0.901': attribute type 8 has an invalid length. [ 187.406861][ T9352] FAULT_INJECTION: forcing a failure. [ 187.406861][ T9352] name failslab, interval 1, probability 0, space 0, times 0 [ 187.420834][ T9352] CPU: 1 UID: 0 PID: 9352 Comm: syz.0.901 Not tainted 6.16.0-syzkaller-12065-gbc4c0a48bdad #0 PREEMPT(full) [ 187.420860][ T9352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.420871][ T9352] Call Trace: [ 187.420878][ T9352] [ 187.420886][ T9352] dump_stack_lvl+0x189/0x250 [ 187.420913][ T9352] ? __pfx____ratelimit+0x10/0x10 [ 187.420936][ T9352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.420958][ T9352] ? __pfx__printk+0x10/0x10 [ 187.420998][ T9352] ? __pfx___might_resched+0x10/0x10 [ 187.421015][ T9352] ? fs_reclaim_acquire+0x7d/0x100 [ 187.421047][ T9352] should_fail_ex+0x414/0x560 [ 187.421074][ T9352] should_failslab+0xa8/0x100 [ 187.421101][ T9352] kmem_cache_alloc_noprof+0x73/0x3c0 [ 187.421135][ T9352] ? __kernfs_new_node+0xd7/0x7e0 [ 187.421160][ T9352] __kernfs_new_node+0xd7/0x7e0 [ 187.421185][ T9352] ? __lock_acquire+0xab9/0xd20 [ 187.421215][ T9352] ? __pfx___kernfs_new_node+0x10/0x10 [ 187.421236][ T9352] ? kernfs_root+0x1c/0x230 [ 187.421268][ T9352] ? kernfs_root+0x1c/0x230 [ 187.421286][ T9352] ? kernfs_root+0x1c/0x230 [ 187.421303][ T9352] ? kernfs_root+0x1c/0x230 [ 187.421327][ T9352] kernfs_new_node+0x102/0x210 [ 187.421354][ T9352] __kernfs_create_file+0x4b/0x2e0 [ 187.421382][ T9352] sysfs_add_file_mode_ns+0x238/0x300 [ 187.421422][ T9352] internal_create_group+0x66d/0x1110 [ 187.421461][ T9352] ? __pfx_internal_create_group+0x10/0x10 [ 187.421483][ T9352] ? kernfs_add_one+0xf0/0x520 [ 187.421512][ T9352] sysfs_create_groups+0x59/0x120 [ 187.421536][ T9352] device_add_attrs+0xe0/0x5a0 [ 187.421568][ T9352] ? __pfx_device_add_attrs+0x10/0x10 [ 187.421596][ T9352] ? device_add_class_symlinks+0x21f/0x240 [ 187.421624][ T9352] device_add+0x496/0xb50 [ 187.421647][ T9352] ? device_initialize+0x24b/0x440 [ 187.421674][ T9352] netdev_register_kobject+0x178/0x310 [ 187.421698][ T9352] register_netdevice+0x126c/0x1ae0 [ 187.421735][ T9352] ? __pfx_register_netdevice+0x10/0x10 [ 187.421780][ T9352] br_dev_newlink+0x6a/0x140 [ 187.421799][ T9352] ? rtnl_newlink_create+0x2fd/0xb00 [ 187.421822][ T9352] ? __pfx_br_dev_newlink+0x10/0x10 [ 187.421845][ T9352] rtnl_newlink_create+0x30d/0xb00 [ 187.421869][ T9352] ? __pfx___nla_validate_parse+0x10/0x10 [ 187.421895][ T9352] ? __lock_acquire+0xab9/0xd20 [ 187.421925][ T9352] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 187.421953][ T9352] ? __pfx___mutex_lock+0x10/0x10 [ 187.421988][ T9352] ? ns_capable+0x8a/0xf0 [ 187.422009][ T9352] rtnl_newlink+0x16d6/0x1c70 [ 187.422034][ T9352] ? netlink_sendmsg+0x805/0xb30 [ 187.422069][ T9352] ? __pfx_rtnl_newlink+0x10/0x10 [ 187.422122][ T9352] ? kasan_quarantine_put+0xdd/0x220 [ 187.422144][ T9352] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.422172][ T9352] ? nlmon_xmit+0xb0/0x100 [ 187.422194][ T9352] ? kmem_cache_free+0x18f/0x400 [ 187.422226][ T9352] ? __local_bh_enable_ip+0x12d/0x1c0 [ 187.422244][ T9352] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.422273][ T9352] ? __local_bh_enable_ip+0x12d/0x1c0 [ 187.422291][ T9352] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 187.422314][ T9352] ? __dev_queue_xmit+0x27b/0x3b50 [ 187.422333][ T9352] ? __dev_queue_xmit+0x27b/0x3b50 [ 187.422348][ T9352] ? __dev_queue_xmit+0x27b/0x3b50 [ 187.422374][ T9352] ? __dev_queue_xmit+0x1d79/0x3b50 [ 187.422399][ T9352] ? __lock_acquire+0xab9/0xd20 [ 187.422450][ T9352] ? __pfx_rtnl_newlink+0x10/0x10 [ 187.422476][ T9352] rtnetlink_rcv_msg+0x7cc/0xb70 [ 187.422503][ T9352] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 187.422539][ T9352] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.422563][ T9352] ? ref_tracker_free+0x63a/0x7d0 [ 187.422591][ T9352] ? __asan_memcpy+0x40/0x70 [ 187.422610][ T9352] ? __pfx_ref_tracker_free+0x10/0x10 [ 187.422643][ T9352] netlink_rcv_skb+0x208/0x470 [ 187.422671][ T9352] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.422696][ T9352] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.422731][ T9352] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.422763][ T9352] netlink_unicast+0x82c/0x9e0 [ 187.422793][ T9352] ? __pfx_netlink_unicast+0x10/0x10 [ 187.422816][ T9352] ? netlink_sendmsg+0x642/0xb30 [ 187.422836][ T9352] ? skb_put+0x11b/0x210 [ 187.422864][ T9352] netlink_sendmsg+0x805/0xb30 [ 187.422897][ T9352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.422923][ T9352] ? aa_sock_msg_perm+0xf1/0x1d0 [ 187.422949][ T9352] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.422969][ T9352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.422993][ T9352] __sock_sendmsg+0x21c/0x270 [ 187.423017][ T9352] ____sys_sendmsg+0x505/0x830 [ 187.423048][ T9352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.423084][ T9352] ? import_iovec+0x74/0xa0 [ 187.423119][ T9352] ___sys_sendmsg+0x21f/0x2a0 [ 187.423146][ T9352] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.423211][ T9352] ? __fget_files+0x2a/0x420 [ 187.423235][ T9352] ? __fget_files+0x3a0/0x420 [ 187.423277][ T9352] __x64_sys_sendmsg+0x19b/0x260 [ 187.423305][ T9352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.423341][ T9352] ? __pfx_ksys_write+0x10/0x10 [ 187.423361][ T9352] ? rcu_is_watching+0x15/0xb0 [ 187.423386][ T9352] ? do_syscall_64+0xbe/0x3b0 [ 187.423412][ T9352] do_syscall_64+0xfa/0x3b0 [ 187.423433][ T9352] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.423454][ T9352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.423473][ T9352] ? clear_bhb_loop+0x60/0xb0 [ 187.423496][ T9352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.423515][ T9352] RIP: 0033:0x7fe21e18ebe9 [ 187.423533][ T9352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.423550][ T9352] RSP: 002b:00007fe21efec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.423570][ T9352] RAX: ffffffffffffffda RBX: 00007fe21e3b5fa0 RCX: 00007fe21e18ebe9 [ 187.423583][ T9352] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 187.423594][ T9352] RBP: 00007fe21efec090 R08: 0000000000000000 R09: 0000000000000000 [ 187.423606][ T9352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.423617][ T9352] R13: 00007fe21e3b6038 R14: 00007fe21e3b5fa0 R15: 00007ffc406a4998 [ 187.423648][ T9352] [ 188.074761][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.904'. [ 188.260185][ T9358] bridge18: port 1(veth7) entered blocking state [ 188.267134][ T9358] bridge18: port 1(veth7) entered disabled state [ 188.273704][ T9358] veth7: entered allmulticast mode [ 188.282005][ T9358] veth7: entered promiscuous mode [ 188.291453][ T9365] bridge18: port 2(veth0_to_bond) entered blocking state [ 188.302642][ T9365] bridge18: port 2(veth0_to_bond) entered disabled state [ 188.310710][ T9365] veth0_to_bond: entered allmulticast mode [ 188.320603][ T9365] veth0_to_bond: entered promiscuous mode [ 188.339739][ T9371] bridge_slave_0: left allmulticast mode [ 188.346971][ T9371] bridge_slave_0: left promiscuous mode [ 188.353378][ T9371] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.370704][ T9371] bridge_slave_1: left allmulticast mode [ 188.379417][ T9371] bridge_slave_1: left promiscuous mode [ 188.388050][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.406823][ T9380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.910'. [ 188.449898][ T9371] bond0: (slave bond_slave_0): Releasing backup interface [ 188.482251][ T9371] bond0: (slave bond_slave_1): Releasing backup interface [ 188.521277][ T9371] team0: Port device team_slave_1 removed [ 188.530004][ T9371] bond0: (slave wlan1): Releasing backup interface [ 188.558188][ T9371] bond1: (slave bridge5): Releasing backup interface [ 188.564974][ T9371] bridge5: left promiscuous mode [ 188.566583][ T9386] netlink: 96 bytes leftover after parsing attributes in process `syz.0.911'. [ 188.592510][ T9372] vlan2: entered allmulticast mode [ 188.600663][ T9372] veth1: entered allmulticast mode [ 188.606904][ T9372] bridge18: port 3(vlan2) entered blocking state [ 188.613534][ T9372] bridge18: port 3(vlan2) entered disabled state [ 188.624009][ T9372] vlan2: entered promiscuous mode [ 188.629209][ T9372] veth1: entered promiscuous mode [ 188.723562][ T9391] netlink: 'syz.3.912': attribute type 8 has an invalid length. [ 188.752233][ T9386] vlan2: entered allmulticast mode [ 188.772218][ T9386] erspan0: entered allmulticast mode [ 189.045478][ T9411] netlink: 'syz.0.917': attribute type 8 has an invalid length. [ 189.162187][ T9411] FAULT_INJECTION: forcing a failure. [ 189.162187][ T9411] name failslab, interval 1, probability 0, space 0, times 0 [ 189.175214][ T9411] CPU: 0 UID: 0 PID: 9411 Comm: syz.0.917 Not tainted 6.16.0-syzkaller-12065-gbc4c0a48bdad #0 PREEMPT(full) [ 189.175240][ T9411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.175251][ T9411] Call Trace: [ 189.175263][ T9411] [ 189.175271][ T9411] dump_stack_lvl+0x189/0x250 [ 189.175296][ T9411] ? __pfx____ratelimit+0x10/0x10 [ 189.175318][ T9411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.175339][ T9411] ? __pfx__printk+0x10/0x10 [ 189.175368][ T9411] ? __pfx___might_resched+0x10/0x10 [ 189.175384][ T9411] ? fs_reclaim_acquire+0x7d/0x100 [ 189.175416][ T9411] should_fail_ex+0x414/0x560 [ 189.175450][ T9411] should_failslab+0xa8/0x100 [ 189.175481][ T9411] kmem_cache_alloc_noprof+0x73/0x3c0 [ 189.175503][ T9411] ? __kernfs_new_node+0xd7/0x7e0 [ 189.175530][ T9411] __kernfs_new_node+0xd7/0x7e0 [ 189.175549][ T9411] ? __lock_acquire+0xab9/0xd20 [ 189.175582][ T9411] ? __pfx___kernfs_new_node+0x10/0x10 [ 189.175602][ T9411] ? kernfs_root+0x1c/0x230 [ 189.175626][ T9411] ? kernfs_root+0x1c/0x230 [ 189.175644][ T9411] ? kernfs_root+0x1c/0x230 [ 189.175660][ T9411] ? kernfs_root+0x1c/0x230 [ 189.175684][ T9411] kernfs_new_node+0x102/0x210 [ 189.175710][ T9411] __kernfs_create_file+0x4b/0x2e0 [ 189.175738][ T9411] sysfs_add_file_mode_ns+0x238/0x300 [ 189.175771][ T9411] internal_create_group+0x66d/0x1110 [ 189.175811][ T9411] ? __pfx_internal_create_group+0x10/0x10 [ 189.175833][ T9411] ? kernfs_add_one+0xf0/0x520 [ 189.175856][ T9411] sysfs_create_groups+0x59/0x120 [ 189.175874][ T9411] device_add_attrs+0xe0/0x5a0 [ 189.175904][ T9411] ? __pfx_device_add_attrs+0x10/0x10 [ 189.175935][ T9411] ? device_add_class_symlinks+0x21f/0x240 [ 189.175962][ T9411] device_add+0x496/0xb50 [ 189.175982][ T9411] ? device_initialize+0x24b/0x440 [ 189.176009][ T9411] netdev_register_kobject+0x178/0x310 [ 189.176034][ T9411] register_netdevice+0x126c/0x1ae0 [ 189.176077][ T9411] ? __pfx_register_netdevice+0x10/0x10 [ 189.176130][ T9411] br_dev_newlink+0x6a/0x140 [ 189.176150][ T9411] ? rtnl_newlink_create+0x2fd/0xb00 [ 189.176172][ T9411] ? __pfx_br_dev_newlink+0x10/0x10 [ 189.176195][ T9411] rtnl_newlink_create+0x30d/0xb00 [ 189.176222][ T9411] ? __mutex_lock+0x5b6/0x1360 [ 189.176250][ T9411] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 189.176279][ T9411] ? __pfx___mutex_lock+0x10/0x10 [ 189.176313][ T9411] ? ns_capable+0x8a/0xf0 [ 189.176337][ T9411] rtnl_newlink+0x16d6/0x1c70 [ 189.176362][ T9411] ? netlink_sendmsg+0x805/0xb30 [ 189.176398][ T9411] ? __pfx_rtnl_newlink+0x10/0x10 [ 189.176446][ T9411] ? kasan_quarantine_put+0xdd/0x220 [ 189.176468][ T9411] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.176497][ T9411] ? nlmon_xmit+0xb0/0x100 [ 189.176519][ T9411] ? kmem_cache_free+0x18f/0x400 [ 189.176550][ T9411] ? __local_bh_enable_ip+0x12d/0x1c0 [ 189.176569][ T9411] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.176591][ T9411] ? __local_bh_enable_ip+0x12d/0x1c0 [ 189.176610][ T9411] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 189.176633][ T9411] ? __dev_queue_xmit+0x27b/0x3b50 [ 189.176651][ T9411] ? __dev_queue_xmit+0x27b/0x3b50 [ 189.176667][ T9411] ? __dev_queue_xmit+0x27b/0x3b50 [ 189.176686][ T9411] ? __dev_queue_xmit+0x1d79/0x3b50 [ 189.176708][ T9411] ? __lock_acquire+0xab9/0xd20 [ 189.176753][ T9411] ? __pfx_rtnl_newlink+0x10/0x10 [ 189.176774][ T9411] rtnetlink_rcv_msg+0x7cc/0xb70 [ 189.176798][ T9411] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 189.176817][ T9411] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 189.176836][ T9411] ? ref_tracker_free+0x63a/0x7d0 [ 189.176855][ T9411] ? __asan_memcpy+0x40/0x70 [ 189.176879][ T9411] ? __pfx_ref_tracker_free+0x10/0x10 [ 189.176912][ T9411] netlink_rcv_skb+0x208/0x470 [ 189.176933][ T9411] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 189.176958][ T9411] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.176992][ T9411] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.177019][ T9411] netlink_unicast+0x82c/0x9e0 [ 189.177048][ T9411] ? __pfx_netlink_unicast+0x10/0x10 [ 189.177071][ T9411] ? netlink_sendmsg+0x642/0xb30 [ 189.177097][ T9411] ? skb_put+0x11b/0x210 [ 189.177126][ T9411] netlink_sendmsg+0x805/0xb30 [ 189.177160][ T9411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.177186][ T9411] ? aa_sock_msg_perm+0xf1/0x1d0 [ 189.177214][ T9411] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 189.177233][ T9411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.177256][ T9411] __sock_sendmsg+0x21c/0x270 [ 189.177277][ T9411] ____sys_sendmsg+0x505/0x830 [ 189.177307][ T9411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.177339][ T9411] ? import_iovec+0x74/0xa0 [ 189.177359][ T9411] ___sys_sendmsg+0x21f/0x2a0 [ 189.177384][ T9411] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.177444][ T9411] ? __fget_files+0x2a/0x420 [ 189.177468][ T9411] ? __fget_files+0x3a0/0x420 [ 189.177504][ T9411] __x64_sys_sendmsg+0x19b/0x260 [ 189.177532][ T9411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.177568][ T9411] ? __pfx_ksys_write+0x10/0x10 [ 189.177588][ T9411] ? rcu_is_watching+0x15/0xb0 [ 189.177612][ T9411] ? do_syscall_64+0xbe/0x3b0 [ 189.177639][ T9411] do_syscall_64+0xfa/0x3b0 [ 189.177659][ T9411] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.177679][ T9411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.177699][ T9411] ? clear_bhb_loop+0x60/0xb0 [ 189.177719][ T9411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.177736][ T9411] RIP: 0033:0x7fe21e18ebe9 [ 189.177753][ T9411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.177768][ T9411] RSP: 002b:00007fe21efec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.177785][ T9411] RAX: ffffffffffffffda RBX: 00007fe21e3b5fa0 RCX: 00007fe21e18ebe9 [ 189.177796][ T9411] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 189.177806][ T9411] RBP: 00007fe21efec090 R08: 0000000000000000 R09: 0000000000000000 [ 189.177816][ T9411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.177825][ T9411] R13: 00007fe21e3b6038 R14: 00007fe21e3b5fa0 R15: 00007ffc406a4998 [ 189.177853][ T9411] [ 189.884744][ T9418] netlink: 'syz.4.919': attribute type 1 has an invalid length. [ 189.906450][ T9] IPVS: starting estimator thread 0... [ 189.932464][ T9409] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.985971][ T55] block nbd0: Possible stuck request ffff888025305080: control (read@0,4096B). Runtime 90 seconds [ 190.020375][ T9422] IPVS: using max 27 ests per chain, 64800 per kthread [ 190.048439][ T9427] Bluetooth: MGMT ver 1.23 [ 190.119032][ T9419] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.144078][ T9424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.153744][ T9424] bond2: (slave batadv0): making interface the new active one [ 190.163589][ T9424] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 190.229859][ T9428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.281736][ T9438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.307300][ T9409] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.355756][ T9428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.444342][ T9426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.473901][ T9409] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.539393][ T9409] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.703783][ T3468] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.740414][ T1006] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.769277][ T3468] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.805613][ T4993] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.922381][ T9463] FAULT_INJECTION: forcing a failure. [ 190.922381][ T9463] name failslab, interval 1, probability 0, space 0, times 0 [ 190.936031][ T9463] CPU: 0 UID: 0 PID: 9463 Comm: syz.2.931 Not tainted 6.16.0-syzkaller-12065-gbc4c0a48bdad #0 PREEMPT(full) [ 190.936063][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.936073][ T9463] Call Trace: [ 190.936081][ T9463] [ 190.936088][ T9463] dump_stack_lvl+0x189/0x250 [ 190.936115][ T9463] ? __pfx____ratelimit+0x10/0x10 [ 190.936137][ T9463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.936165][ T9463] ? __pfx__printk+0x10/0x10 [ 190.936204][ T9463] ? __pfx___might_resched+0x10/0x10 [ 190.936221][ T9463] ? fs_reclaim_acquire+0x7d/0x100 [ 190.936252][ T9463] should_fail_ex+0x414/0x560 [ 190.936278][ T9463] should_failslab+0xa8/0x100 [ 190.936304][ T9463] kmem_cache_alloc_noprof+0x73/0x3c0 [ 190.936328][ T9463] ? __kernfs_new_node+0xd7/0x7e0 [ 190.936354][ T9463] __kernfs_new_node+0xd7/0x7e0 [ 190.936373][ T9463] ? __lock_acquire+0xab9/0xd20 [ 190.936407][ T9463] ? __pfx___kernfs_new_node+0x10/0x10 [ 190.936428][ T9463] ? kernfs_root+0x1c/0x230 [ 190.936454][ T9463] ? kernfs_root+0x1c/0x230 [ 190.936473][ T9463] ? kernfs_root+0x1c/0x230 [ 190.936489][ T9463] ? kernfs_root+0x1c/0x230 [ 190.936514][ T9463] kernfs_new_node+0x102/0x210 [ 190.936541][ T9463] __kernfs_create_file+0x4b/0x2e0 [ 190.936569][ T9463] sysfs_add_file_mode_ns+0x238/0x300 [ 190.936610][ T9463] internal_create_group+0x66d/0x1110 [ 190.936645][ T9463] ? __pfx_internal_create_group+0x10/0x10 [ 190.936668][ T9463] ? kernfs_add_one+0xf0/0x520 [ 190.936696][ T9463] sysfs_create_groups+0x59/0x120 [ 190.936720][ T9463] device_add_attrs+0xe0/0x5a0 [ 190.936752][ T9463] ? __pfx_device_add_attrs+0x10/0x10 [ 190.936783][ T9463] ? device_add_class_symlinks+0x21f/0x240 [ 190.936811][ T9463] device_add+0x496/0xb50 [ 190.936834][ T9463] ? device_initialize+0x24b/0x440 [ 190.936860][ T9463] netdev_register_kobject+0x178/0x310 [ 190.936885][ T9463] register_netdevice+0x126c/0x1ae0 [ 190.936921][ T9463] ? __pfx_register_netdevice+0x10/0x10 [ 190.936966][ T9463] br_dev_newlink+0x6a/0x140 [ 190.936986][ T9463] ? rtnl_newlink_create+0x2fd/0xb00 [ 190.937013][ T9463] ? __pfx_br_dev_newlink+0x10/0x10 [ 190.937035][ T9463] rtnl_newlink_create+0x30d/0xb00 [ 190.937059][ T9463] ? __pfx___nla_validate_parse+0x10/0x10 [ 190.937085][ T9463] ? __lock_acquire+0xab9/0xd20 [ 190.937115][ T9463] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 190.937149][ T9463] ? __pfx___mutex_lock+0x10/0x10 [ 190.937183][ T9463] ? ns_capable+0x8a/0xf0 [ 190.937207][ T9463] rtnl_newlink+0x16d6/0x1c70 [ 190.937230][ T9463] ? netlink_sendmsg+0x805/0xb30 [ 190.937267][ T9463] ? __pfx_rtnl_newlink+0x10/0x10 [ 190.937315][ T9463] ? kasan_quarantine_put+0xdd/0x220 [ 190.937336][ T9463] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.937365][ T9463] ? nlmon_xmit+0xb0/0x100 [ 190.937387][ T9463] ? kmem_cache_free+0x18f/0x400 [ 190.937418][ T9463] ? __local_bh_enable_ip+0x12d/0x1c0 [ 190.937444][ T9463] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.937467][ T9463] ? __local_bh_enable_ip+0x12d/0x1c0 [ 190.937484][ T9463] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 190.937507][ T9463] ? __dev_queue_xmit+0x27b/0x3b50 [ 190.937526][ T9463] ? __dev_queue_xmit+0x27b/0x3b50 [ 190.937541][ T9463] ? __dev_queue_xmit+0x27b/0x3b50 [ 190.937560][ T9463] ? __dev_queue_xmit+0x1d79/0x3b50 [ 190.937584][ T9463] ? __lock_acquire+0xab9/0xd20 [ 190.937642][ T9463] ? __pfx_rtnl_newlink+0x10/0x10 [ 190.937664][ T9463] rtnetlink_rcv_msg+0x7cc/0xb70 [ 190.937691][ T9463] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 190.937711][ T9463] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 190.937731][ T9463] ? ref_tracker_free+0x63a/0x7d0 [ 190.937752][ T9463] ? __asan_memcpy+0x40/0x70 [ 190.937771][ T9463] ? __pfx_ref_tracker_free+0x10/0x10 [ 190.937803][ T9463] netlink_rcv_skb+0x208/0x470 [ 190.937824][ T9463] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 190.937846][ T9463] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.937878][ T9463] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.937909][ T9463] netlink_unicast+0x82c/0x9e0 [ 190.937940][ T9463] ? __pfx_netlink_unicast+0x10/0x10 [ 190.937962][ T9463] ? netlink_sendmsg+0x642/0xb30 [ 190.937979][ T9463] ? skb_put+0x11b/0x210 [ 190.938005][ T9463] netlink_sendmsg+0x805/0xb30 [ 190.938038][ T9463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.938065][ T9463] ? aa_sock_msg_perm+0xf1/0x1d0 [ 190.938091][ T9463] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.938112][ T9463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.938135][ T9463] __sock_sendmsg+0x21c/0x270 [ 190.938158][ T9463] ____sys_sendmsg+0x505/0x830 [ 190.938187][ T9463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.938219][ T9463] ? import_iovec+0x74/0xa0 [ 190.938238][ T9463] ___sys_sendmsg+0x21f/0x2a0 [ 190.938265][ T9463] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.938327][ T9463] ? __fget_files+0x2a/0x420 [ 190.938350][ T9463] ? __fget_files+0x3a0/0x420 [ 190.938383][ T9463] __x64_sys_sendmsg+0x19b/0x260 [ 190.938408][ T9463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.938441][ T9463] ? __pfx_ksys_write+0x10/0x10 [ 190.938461][ T9463] ? rcu_is_watching+0x15/0xb0 [ 190.938484][ T9463] ? do_syscall_64+0xbe/0x3b0 [ 190.938508][ T9463] do_syscall_64+0xfa/0x3b0 [ 190.938528][ T9463] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.938547][ T9463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.938565][ T9463] ? clear_bhb_loop+0x60/0xb0 [ 190.938587][ T9463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.938629][ T9463] RIP: 0033:0x7f67f598ebe9 [ 190.938646][ T9463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.938661][ T9463] RSP: 002b:00007f67f678e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.938681][ T9463] RAX: ffffffffffffffda RBX: 00007f67f5bb5fa0 RCX: 00007f67f598ebe9 [ 190.938694][ T9463] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 190.938706][ T9463] RBP: 00007f67f678e090 R08: 0000000000000000 R09: 0000000000000000 [ 190.938717][ T9463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.938727][ T9463] R13: 00007f67f5bb6038 R14: 00007f67f5bb5fa0 R15: 00007ffe46d1cb48 [ 190.938758][ T9463] [ 191.954986][ T9480] veth0: entered promiscuous mode [ 191.994985][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 192.089580][ T9489] validate_nla: 5 callbacks suppressed [ 192.089610][ T9489] netlink: 'syz.3.938': attribute type 8 has an invalid length. [ 192.665511][ T9480] veth0 (unregistering): left promiscuous mode [ 192.739837][ T9480] vlan2 (unregistering): left promiscuous mode [ 192.746736][ T9480] veth1 (unregistering): left promiscuous mode [ 192.753030][ T9480] bridge18: port 3(vlan2) entered disabled state [ 192.976495][ T9496] syzkaller1: entered promiscuous mode [ 192.991780][ T9496] syzkaller1: entered allmulticast mode [ 193.086819][ T9501] block nbd2: server does not support multiple connections per device. [ 193.121036][ T9501] block nbd2: shutting down sockets [ 193.136731][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 193.186812][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.946'. [ 193.280925][ T9519] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 193.592838][ T9528] !: renamed from dummy0 (while UP) [ 193.664659][ T9532] sctp: [Deprecated]: syz.1.949 (pid 9532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.664659][ T9532] Use struct sctp_sack_info instead [ 193.711133][ T9532] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20004 [ 194.074284][ T9564] netlink: 'syz.1.952': attribute type 8 has an invalid length. [ 194.232616][ T9565] vlan3: entered promiscuous mode [ 194.294335][ T9565] gretap0: entered promiscuous mode [ 194.471218][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.499783][ T9580] netlink: 'syz.2.958': attribute type 8 has an invalid length. [ 194.512793][ T9580] FAULT_INJECTION: forcing a failure. [ 194.512793][ T9580] name failslab, interval 1, probability 0, space 0, times 0 [ 194.531005][ T9580] CPU: 0 UID: 0 PID: 9580 Comm: syz.2.958 Not tainted 6.16.0-syzkaller-12065-gbc4c0a48bdad #0 PREEMPT(full) [ 194.531026][ T9580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.531035][ T9580] Call Trace: [ 194.531041][ T9580] [ 194.531048][ T9580] dump_stack_lvl+0x189/0x250 [ 194.531069][ T9580] ? __pfx____ratelimit+0x10/0x10 [ 194.531088][ T9580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.531104][ T9580] ? __pfx__printk+0x10/0x10 [ 194.531127][ T9580] ? __pfx___might_resched+0x10/0x10 [ 194.531140][ T9580] ? fs_reclaim_acquire+0x7d/0x100 [ 194.531164][ T9580] should_fail_ex+0x414/0x560 [ 194.531184][ T9580] should_failslab+0xa8/0x100 [ 194.531206][ T9580] kmem_cache_alloc_noprof+0x73/0x3c0 [ 194.531224][ T9580] ? __kernfs_new_node+0xd7/0x7e0 [ 194.531245][ T9580] __kernfs_new_node+0xd7/0x7e0 [ 194.531260][ T9580] ? __lock_acquire+0xab9/0xd20 [ 194.531287][ T9580] ? __pfx___kernfs_new_node+0x10/0x10 [ 194.531303][ T9580] ? kernfs_root+0x1c/0x230 [ 194.531323][ T9580] ? kernfs_root+0x1c/0x230 [ 194.531337][ T9580] ? kernfs_root+0x1c/0x230 [ 194.531360][ T9580] ? kernfs_root+0x1c/0x230 [ 194.531379][ T9580] kernfs_new_node+0x102/0x210 [ 194.531399][ T9580] __kernfs_create_file+0x4b/0x2e0 [ 194.531421][ T9580] sysfs_add_file_mode_ns+0x238/0x300 [ 194.531450][ T9580] internal_create_group+0x66d/0x1110 [ 194.531482][ T9580] ? __pfx_internal_create_group+0x10/0x10 [ 194.531500][ T9580] ? kernfs_add_one+0xf0/0x520 [ 194.531524][ T9580] sysfs_create_groups+0x59/0x120 [ 194.531544][ T9580] device_add_attrs+0xe0/0x5a0 [ 194.531570][ T9580] ? __pfx_device_add_attrs+0x10/0x10 [ 194.531595][ T9580] ? device_add_class_symlinks+0x21f/0x240 [ 194.531619][ T9580] device_add+0x496/0xb50 [ 194.531637][ T9580] ? device_initialize+0x24b/0x440 [ 194.531658][ T9580] netdev_register_kobject+0x178/0x310 [ 194.531680][ T9580] register_netdevice+0x126c/0x1ae0 [ 194.531710][ T9580] ? __pfx_register_netdevice+0x10/0x10 [ 194.531747][ T9580] br_dev_newlink+0x6a/0x140 [ 194.531765][ T9580] ? rtnl_newlink_create+0x2fd/0xb00 [ 194.531786][ T9580] ? __pfx_br_dev_newlink+0x10/0x10 [ 194.531805][ T9580] rtnl_newlink_create+0x30d/0xb00 [ 194.531828][ T9580] ? __pfx___nla_validate_parse+0x10/0x10 [ 194.531852][ T9580] ? __lock_acquire+0xab9/0xd20 [ 194.531880][ T9580] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 194.531905][ T9580] ? __pfx___mutex_lock+0x10/0x10 [ 194.531938][ T9580] ? ns_capable+0x8a/0xf0 [ 194.531958][ T9580] rtnl_newlink+0x16d6/0x1c70 [ 194.531979][ T9580] ? netlink_sendmsg+0x805/0xb30 [ 194.532010][ T9580] ? __pfx_rtnl_newlink+0x10/0x10 [ 194.532054][ T9580] ? kasan_quarantine_put+0xdd/0x220 [ 194.532076][ T9580] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.532103][ T9580] ? nlmon_xmit+0xb0/0x100 [ 194.532123][ T9580] ? kmem_cache_free+0x18f/0x400 [ 194.532149][ T9580] ? __local_bh_enable_ip+0x12d/0x1c0 [ 194.532166][ T9580] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.532187][ T9580] ? __local_bh_enable_ip+0x12d/0x1c0 [ 194.532204][ T9580] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 194.532226][ T9580] ? __dev_queue_xmit+0x27b/0x3b50 [ 194.532244][ T9580] ? __dev_queue_xmit+0x27b/0x3b50 [ 194.532259][ T9580] ? __dev_queue_xmit+0x27b/0x3b50 [ 194.532278][ T9580] ? __dev_queue_xmit+0x1d79/0x3b50 [ 194.532302][ T9580] ? __lock_acquire+0xab9/0xd20 [ 194.532360][ T9580] ? __pfx_rtnl_newlink+0x10/0x10 [ 194.532379][ T9580] rtnetlink_rcv_msg+0x7cc/0xb70 [ 194.532400][ T9580] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 194.532417][ T9580] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 194.532433][ T9580] ? ref_tracker_free+0x63a/0x7d0 [ 194.532450][ T9580] ? __asan_memcpy+0x40/0x70 [ 194.532465][ T9580] ? __pfx_ref_tracker_free+0x10/0x10 [ 194.532491][ T9580] netlink_rcv_skb+0x208/0x470 [ 194.532510][ T9580] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 194.532529][ T9580] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.532556][ T9580] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.532580][ T9580] netlink_unicast+0x82c/0x9e0 [ 194.532604][ T9580] ? __pfx_netlink_unicast+0x10/0x10 [ 194.532622][ T9580] ? netlink_sendmsg+0x642/0xb30 [ 194.532638][ T9580] ? skb_put+0x11b/0x210 [ 194.532659][ T9580] netlink_sendmsg+0x805/0xb30 [ 194.532685][ T9580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.532705][ T9580] ? aa_sock_msg_perm+0xf1/0x1d0 [ 194.532726][ T9580] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.532741][ T9580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.532760][ T9580] __sock_sendmsg+0x21c/0x270 [ 194.532779][ T9580] ____sys_sendmsg+0x505/0x830 [ 194.532804][ T9580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.532832][ T9580] ? import_iovec+0x74/0xa0 [ 194.532850][ T9580] ___sys_sendmsg+0x21f/0x2a0 [ 194.532872][ T9580] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.532934][ T9580] ? __fget_files+0x2a/0x420 [ 194.532954][ T9580] ? __fget_files+0x3a0/0x420 [ 194.532983][ T9580] __x64_sys_sendmsg+0x19b/0x260 [ 194.533005][ T9580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.533033][ T9580] ? __pfx_ksys_write+0x10/0x10 [ 194.533050][ T9580] ? rcu_is_watching+0x15/0xb0 [ 194.533069][ T9580] ? do_syscall_64+0xbe/0x3b0 [ 194.533089][ T9580] do_syscall_64+0xfa/0x3b0 [ 194.533106][ T9580] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.533121][ T9580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.533136][ T9580] ? clear_bhb_loop+0x60/0xb0 [ 194.533154][ T9580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.533168][ T9580] RIP: 0033:0x7f67f598ebe9 [ 194.533183][ T9580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.533196][ T9580] RSP: 002b:00007f67f678e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.533212][ T9580] RAX: ffffffffffffffda RBX: 00007f67f5bb5fa0 RCX: 00007f67f598ebe9 [ 194.533222][ T9580] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 194.533230][ T9580] RBP: 00007f67f678e090 R08: 0000000000000000 R09: 0000000000000000 [ 194.533239][ T9580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.533247][ T9580] R13: 00007f67f5bb6038 R14: 00007f67f5bb5fa0 R15: 00007ffe46d1cb48 [ 194.533271][ T9580] [ 195.343670][ T9585] : entered promiscuous mode [ 195.415323][ T9604] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.557892][ T9613] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 195.604176][ T9615] bridge_slave_0: entered allmulticast mode [ 195.642047][ T9613] syzkaller0: entered promiscuous mode [ 195.654473][ T9613] syzkaller0: entered allmulticast mode [ 195.686055][ T9617] tipc: Enabled bearer , priority 0 [ 196.259538][ T9619] veth0_to_bond: left allmulticast mode [ 196.424620][ T9619] vlan1: left promiscuous mode [ 196.440493][ T9619] vlan1: left allmulticast mode [ 196.450012][ T9619] veth0_vlan: left allmulticast mode [ 196.506516][ T9619] gtp0: left promiscuous mode [ 196.531872][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'. [ 196.551504][ T9650] openvswitch: netlink: Missing key (keys=40, expected=80) [ 196.561226][ T9650] netlink: 'syz.4.972': attribute type 10 has an invalid length. [ 196.570195][ T9650] netlink: 40 bytes leftover after parsing attributes in process `syz.4.972'. [ 196.618414][ T9617] syzkaller0: entered promiscuous mode [ 196.624147][ T9617] syzkaller0: entered allmulticast mode [ 196.669461][ T9636] tipc: Resetting bearer [ 196.761135][ T9616] tipc: Resetting bearer [ 196.820213][ T9616] tipc: Disabling bearer [ 196.861974][ T9556] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.882620][ T9650] !: entered promiscuous mode [ 196.912097][ T9650] bridge0: port 1(0!) entered blocking state [ 196.925232][ T9650] bridge0: port 1(0!) entered disabled state [ 196.932023][ T9650] !: entered allmulticast mode [ 196.989849][ T9652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.973'. [ 197.047760][ T9556] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.057864][ T9556] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.072810][ T9556] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.124552][ T9671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.975'. [ 197.187563][ T9676] netlink: 40 bytes leftover after parsing attributes in process `syz.2.976'. [ 197.238054][ T9670] @ÿ000000000: renamed from veth0_vlan [ 197.310720][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 197.460903][ T9686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 197.697027][ T9691] : entered promiscuous mode [ 198.098646][ T9715] netlink: 44 bytes leftover after parsing attributes in process `syz.2.989'. [ 198.109378][ T9715] netlink: 44 bytes leftover after parsing attributes in process `syz.2.989'. [ 198.168523][ T9712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.186060][ T9717] netlink: 'syz.3.990': attribute type 4 has an invalid length. [ 198.198759][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 198.213524][ T9712] netlink: 28 bytes leftover after parsing attributes in process `syz.4.987'. [ 198.578426][ T9739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.996'. [ 198.589457][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 198.717812][ T9740] netlink: 'syz.1.995': attribute type 26 has an invalid length. [ 199.020465][ T9758] netlink: 'syz.3.999': attribute type 1 has an invalid length. [ 199.100960][ T9765] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 199.249331][ T9770] tipc: Bearer : already 2 bearers with priority 10 [ 199.271355][ T9772] netlink: 'syz.3.1005': attribute type 1 has an invalid length. [ 199.288329][ T9770] tipc: Bearer : trying with adjusted priority [ 199.308552][ T9770] tipc: Enabled bearer , priority 9 [ 199.371445][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 199.443163][ T9774] tipc: Resetting bearer [ 199.542824][ T9777] bond0 (unregistering): Released all slaves [ 199.584396][ T9768] tipc: Resetting bearer [ 199.607683][ T9789] netlink: 'syz.0.1008': attribute type 4 has an invalid length. [ 201.290526][ T9768] tipc: Disabling bearer [ 201.395966][ T9794] netlink: 'syz.4.1009': attribute type 32 has an invalid length. [ 201.404449][ T9794] netlink: 'syz.4.1009': attribute type 32 has an invalid length. [ 201.665644][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 201.673475][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 201.680154][ T5870] Bluetooth: hci3: command 0x0406 tx timeout [ 201.746957][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.771078][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.884297][ T9825] netlink: 'syz.1.1019': attribute type 8 has an invalid length. [ 202.195776][ T9842] __nla_validate_parse: 7 callbacks suppressed [ 202.195798][ T9842] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1022'. [ 202.242420][ T9844] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1023'. [ 202.263165][ T9844] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 202.292878][ T9844] openvswitch: netlink: Message has 8454 unknown bytes. [ 203.206075][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 203.297520][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 203.471678][ T9881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 203.497225][ T9872] hsr0 speed is unknown, defaulting to 1000 [ 203.518394][ T9872] hsr0 speed is unknown, defaulting to 1000 [ 203.558246][ T9883] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1036'. [ 203.575876][ T9872] hsr0 speed is unknown, defaulting to 1000 [ 203.616487][ T9889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1034'. [ 203.661801][ T9872] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 203.701488][ T9872] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 203.812884][ T9872] hsr0 speed is unknown, defaulting to 1000 [ 203.843766][ T9872] hsr0 speed is unknown, defaulting to 1000 [ 203.876079][ T9872] hsr0 speed is unknown, defaulting to 1000 [ 203.878060][ T9895] syzkaller0: entered promiscuous mode [ 203.887744][ T9895] syzkaller0: entered allmulticast mode [ 203.912839][ T9872] hsr0 speed is unknown, defaulting to 1000 [ 203.993206][ T9872] hsr0 speed is unknown, defaulting to 1000 [ 204.046616][ T9902] hsr0 speed is unknown, defaulting to 1000 [ 204.127062][ T9909] netlink: 'syz.3.1041': attribute type 9 has an invalid length. [ 204.140840][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 204.201921][ T9904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1041'. [ 204.224661][ T9552] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.239761][ T9552] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.285928][ T9552] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.316524][ T9552] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.421881][ T9917] netlink: 'syz.2.1046': attribute type 3 has an invalid length. [ 204.426992][ T9920] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1044'. [ 204.465565][ T9919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1044'. [ 204.793158][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055e8ac00: rx timeout, send abort [ 205.288975][ T9942] netlink: 'syz.2.1052': attribute type 7 has an invalid length. [ 205.301618][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055e8ac00: abort rx timeout. Force session deactivation [ 205.320926][ T9942] netlink: 'syz.2.1052': attribute type 8 has an invalid length. [ 205.402461][ T9942] erspan0: entered promiscuous mode [ 205.419457][ T9942] batadv_slave_1: entered promiscuous mode [ 205.440138][ T9942] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.670842][ T9960] netlink: 'syz.3.1056': attribute type 13 has an invalid length. [ 205.681974][ T9960] netlink: 'syz.3.1056': attribute type 17 has an invalid length. [ 205.708784][ T9961] hsr0 speed is unknown, defaulting to 1000 [ 205.847525][ T9960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.856384][ T9960] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.868864][ T9960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.946232][ T9965] hsr0 speed is unknown, defaulting to 1000 [ 206.304627][ T9990] netlink: 'syz.4.1064': attribute type 4 has an invalid length. [ 206.692156][T10001] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 206.738910][T10002] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 206.750876][T10005] netlink: 'syz.0.1068': attribute type 19 has an invalid length. [ 206.782260][T10001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.855503][T10002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.076105][T10012] netlink: 'syz.2.1069': attribute type 8 has an invalid length. [ 207.159537][T10012] FAULT_INJECTION: forcing a failure. [ 207.159537][T10012] name failslab, interval 1, probability 0, space 0, times 0 [ 207.182879][T10012] CPU: 1 UID: 0 PID: 10012 Comm: syz.2.1069 Not tainted 6.16.0-syzkaller-12065-gbc4c0a48bdad #0 PREEMPT(full) [ 207.182907][T10012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.182917][T10012] Call Trace: [ 207.182925][T10012] [ 207.182934][T10012] dump_stack_lvl+0x189/0x250 [ 207.182963][T10012] ? __pfx____ratelimit+0x10/0x10 [ 207.182987][T10012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.183009][T10012] ? __pfx__printk+0x10/0x10 [ 207.183038][T10012] ? __pfx___might_resched+0x10/0x10 [ 207.183056][T10012] ? fs_reclaim_acquire+0x7d/0x100 [ 207.183087][T10012] should_fail_ex+0x414/0x560 [ 207.183115][T10012] should_failslab+0xa8/0x100 [ 207.183143][T10012] kmem_cache_alloc_noprof+0x73/0x3c0 [ 207.183167][T10012] ? __kernfs_new_node+0xd7/0x7e0 [ 207.183194][T10012] __kernfs_new_node+0xd7/0x7e0 [ 207.183214][T10012] ? __lock_acquire+0xab9/0xd20 [ 207.183248][T10012] ? __pfx___kernfs_new_node+0x10/0x10 [ 207.183270][T10012] ? kernfs_root+0x1c/0x230 [ 207.183297][T10012] ? kernfs_root+0x1c/0x230 [ 207.183316][T10012] ? kernfs_root+0x1c/0x230 [ 207.183332][T10012] ? kernfs_root+0x1c/0x230 [ 207.183356][T10012] kernfs_new_node+0x102/0x210 [ 207.183379][T10012] __kernfs_create_file+0x4b/0x2e0 [ 207.183401][T10012] sysfs_add_file_mode_ns+0x238/0x300 [ 207.183430][T10012] internal_create_group+0x66d/0x1110 [ 207.183461][T10012] ? __pfx_internal_create_group+0x10/0x10 [ 207.183775][T10012] ? kernfs_add_one+0xf0/0x520 [ 207.183810][T10012] sysfs_create_groups+0x59/0x120 [ 207.183836][T10012] device_add_attrs+0xe0/0x5a0 [ 207.183869][T10012] ? __pfx_device_add_attrs+0x10/0x10 [ 207.183905][T10012] ? device_add_class_symlinks+0x21f/0x240 [ 207.183934][T10012] device_add+0x496/0xb50 [ 207.183957][T10012] ? device_initialize+0x24b/0x440 [ 207.183985][T10012] netdev_register_kobject+0x178/0x310 [ 207.184010][T10012] register_netdevice+0x126c/0x1ae0 [ 207.184048][T10012] ? __pfx_register_netdevice+0x10/0x10 [ 207.184114][T10012] br_dev_newlink+0x6a/0x140 [ 207.184134][T10012] ? rtnl_newlink_create+0x2fd/0xb00 [ 207.184156][T10012] ? __pfx_br_dev_newlink+0x10/0x10 [ 207.184179][T10012] rtnl_newlink_create+0x30d/0xb00 [ 207.184209][T10012] ? __mutex_lock+0x5b6/0x1360 [ 207.184239][T10012] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 207.184268][T10012] ? __pfx___mutex_lock+0x10/0x10 [ 207.184299][T10012] ? ns_capable+0x8a/0xf0 [ 207.184317][T10012] rtnl_newlink+0x16d6/0x1c70 [ 207.184335][T10012] ? netlink_sendmsg+0x805/0xb30 [ 207.184363][T10012] ? __pfx_rtnl_newlink+0x10/0x10 [ 207.184405][T10012] ? kasan_quarantine_put+0xdd/0x220 [ 207.184431][T10012] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.184460][T10012] ? nlmon_xmit+0xb0/0x100 [ 207.184482][T10012] ? kmem_cache_free+0x18f/0x400 [ 207.184518][T10012] ? __local_bh_enable_ip+0x12d/0x1c0 [ 207.184537][T10012] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.184567][T10012] ? __local_bh_enable_ip+0x12d/0x1c0 [ 207.184586][T10012] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 207.184609][T10012] ? __dev_queue_xmit+0x27b/0x3b50 [ 207.184628][T10012] ? __dev_queue_xmit+0x27b/0x3b50 [ 207.184644][T10012] ? __dev_queue_xmit+0x27b/0x3b50 [ 207.184664][T10012] ? __dev_queue_xmit+0x1d79/0x3b50 [ 207.184690][T10012] ? __lock_acquire+0xab9/0xd20 [ 207.184751][T10012] ? __pfx_rtnl_newlink+0x10/0x10 [ 207.184774][T10012] rtnetlink_rcv_msg+0x7cc/0xb70 [ 207.184802][T10012] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 207.184825][T10012] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.184846][T10012] ? ref_tracker_free+0x63a/0x7d0 [ 207.184870][T10012] ? __asan_memcpy+0x40/0x70 [ 207.184890][T10012] ? __pfx_ref_tracker_free+0x10/0x10 [ 207.184924][T10012] netlink_rcv_skb+0x208/0x470 [ 207.184949][T10012] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.184973][T10012] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.185010][T10012] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.185043][T10012] netlink_unicast+0x82c/0x9e0 [ 207.185076][T10012] ? __pfx_netlink_unicast+0x10/0x10 [ 207.185099][T10012] ? netlink_sendmsg+0x642/0xb30 [ 207.185119][T10012] ? skb_put+0x11b/0x210 [ 207.185148][T10012] netlink_sendmsg+0x805/0xb30 [ 207.185183][T10012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.185210][T10012] ? aa_sock_msg_perm+0xf1/0x1d0 [ 207.185238][T10012] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.185257][T10012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.185278][T10012] __sock_sendmsg+0x21c/0x270 [ 207.185300][T10012] ____sys_sendmsg+0x505/0x830 [ 207.185329][T10012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.185362][T10012] ? import_iovec+0x74/0xa0 [ 207.185384][T10012] ___sys_sendmsg+0x21f/0x2a0 [ 207.185410][T10012] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.185476][T10012] ? __fget_files+0x2a/0x420 [ 207.185502][T10012] ? __fget_files+0x3a0/0x420 [ 207.185538][T10012] __x64_sys_sendmsg+0x19b/0x260 [ 207.185626][T10012] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.185659][T10012] ? __pfx_ksys_write+0x10/0x10 [ 207.185681][T10012] ? rcu_is_watching+0x15/0xb0 [ 207.185708][T10012] ? do_syscall_64+0xbe/0x3b0 [ 207.185737][T10012] do_syscall_64+0xfa/0x3b0 [ 207.185759][T10012] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.185780][T10012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.185801][T10012] ? clear_bhb_loop+0x60/0xb0 [ 207.185826][T10012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.185846][T10012] RIP: 0033:0x7f67f598ebe9 [ 207.185865][T10012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.185882][T10012] RSP: 002b:00007f67f678e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.185902][T10012] RAX: ffffffffffffffda RBX: 00007f67f5bb5fa0 RCX: 00007f67f598ebe9 [ 207.185915][T10012] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 207.185926][T10012] RBP: 00007f67f678e090 R08: 0000000000000000 R09: 0000000000000000 [ 207.185938][T10012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.185949][T10012] R13: 00007f67f5bb6038 R14: 00007f67f5bb5fa0 R15: 00007ffe46d1cb48 [ 207.185982][T10012] [ 207.987836][ T5871] Bluetooth: hci4: link tx timeout [ 207.993475][ T5871] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.004567][ T5871] Bluetooth: hci4: link tx timeout [ 208.018317][ T5871] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 208.111038][T10034] netlink: 'syz.0.1077': attribute type 10 has an invalid length. [ 208.162708][T10034] team0: Port device dummy0 added [ 208.374422][T10054] syzkaller0: entered promiscuous mode [ 208.380092][T10054] syzkaller0: entered allmulticast mode [ 208.484951][T10061] __nla_validate_parse: 8 callbacks suppressed [ 208.484971][T10061] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1081'. [ 208.600337][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 208.658721][T10073] bridge0: port 1(erspan0) entered blocking state [ 208.668482][T10073] bridge0: port 1(erspan0) entered disabled state [ 208.690796][T10073] erspan0: entered promiscuous mode [ 208.717196][T10074] erspan0: left promiscuous mode [ 208.733227][T10074] bridge0: port 1(erspan0) entered disabled state [ 208.772480][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'. [ 208.782627][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 208.853594][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 209.545877][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 209.632403][T10091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1094'. [ 209.663901][T10091] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1094'. [ 209.667032][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1096'. [ 209.878815][T10110] netlink: 844 bytes leftover after parsing attributes in process `syz.3.1100'. [ 210.038651][T10117] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 210.067563][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 210.187144][T10122] Bluetooth: MGMT ver 1.23 [ 210.423244][T10131] syzkaller0: entered promiscuous mode [ 210.428915][T10131] syzkaller0: entered allmulticast mode [ 210.448853][T10140] macsec0: entered promiscuous mode [ 210.474238][T10140] macsec0: entered allmulticast mode [ 212.235566][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 214.113737][T10226] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.143151][T10226] validate_nla: 5 callbacks suppressed [ 214.143166][T10226] netlink: 'syz.1.1137': attribute type 1 has an invalid length. [ 214.180096][T10226] __nla_validate_parse: 10 callbacks suppressed [ 214.180115][T10226] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1137'. [ 214.223162][T10228] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1138'. [ 214.235772][T10230] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1138'. [ 214.676198][T10243] netlink: 16167 bytes leftover after parsing attributes in process `syz.4.1142'. [ 215.061490][T10254] netlink: 'syz.2.1144': attribute type 1 has an invalid length. [ 215.099135][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'. [ 215.259726][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1144'. [ 215.397797][T10260] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 215.470813][T10260] bond1: (slave gretap1): making interface the new active one [ 215.496912][T10260] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 215.939111][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'. [ 215.958541][T10282] batadv0: entered promiscuous mode [ 215.989104][T10282] batadv0: left promiscuous mode [ 216.230518][T10302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'. [ 216.284526][T10299] netlink: 'syz.0.1161': attribute type 10 has an invalid length. [ 216.306538][T10299] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1161'. [ 216.362326][T10299] team0: Port device dummy0 removed [ 216.380461][T10299] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 216.835854][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'. [ 216.948682][T10324] tipc: Enabled bearer , priority 0 [ 216.979644][T10324] syzkaller0: entered promiscuous mode [ 216.995757][T10324] syzkaller0: entered allmulticast mode [ 217.324228][T10336] netlink: 'syz.3.1171': attribute type 1 has an invalid length. [ 217.460130][T10336] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.569905][T10323] tipc: Resetting bearer [ 217.662706][T10323] tipc: Disabling bearer [ 217.726290][T10336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.956963][T10356] netlink: 'syz.3.1177': attribute type 83 has an invalid length. [ 218.279292][T10377] hsr0 speed is unknown, defaulting to 1000 [ 218.426052][T10384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.577776][T10398] vlan4: entered promiscuous mode [ 218.599514][T10398] bridge0: entered promiscuous mode [ 218.846446][T10381] netlink: 'syz.1.1184': attribute type 3 has an invalid length. [ 219.133537][T10420] syzkaller1: entered promiscuous mode [ 219.143619][T10420] syzkaller1: entered allmulticast mode [ 219.342870][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.391351][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.415689][T10433] tipc: Enabled bearer , priority 0 [ 219.437853][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.822743][T10457] netlink: 'syz.4.1204': attribute type 9 has an invalid length. [ 219.832331][T10457] __nla_validate_parse: 8 callbacks suppressed [ 219.832350][T10457] netlink: 212260 bytes leftover after parsing attributes in process `syz.4.1204'. [ 219.864876][T10457] netlink: 'syz.4.1204': attribute type 3 has an invalid length. [ 219.885166][T10457] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1204'. [ 220.073314][ T55] block nbd0: Possible stuck request ffff888025305080: control (read@0,4096B). Runtime 120 seconds [ 220.093181][T10464] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.1207'. [ 220.124237][T10466] openvswitch: netlink: IP tunnel dst address not specified [ 220.331827][T10482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1215'. [ 220.350807][T10483] netlink: 'syz.0.1216': attribute type 8 has an invalid length. [ 220.362847][T10482] IPv6: sit1: Disabled Multicast RS [ 220.384127][T10482] sit1: entered allmulticast mode [ 220.401365][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 220.422547][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 220.433712][T10490] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1218'. [ 220.488379][T10490] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1218'. [ 220.496502][T10494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.574219][T10501] hsr0 speed is unknown, defaulting to 1000 [ 220.739727][T10512] netlink: 'syz.3.1222': attribute type 21 has an invalid length. [ 220.774847][T10506] hsr0 speed is unknown, defaulting to 1000 [ 220.811099][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 220.822712][T10512] netlink: 'syz.3.1222': attribute type 6 has an invalid length. [ 220.847424][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 220.974260][T10521] trusted_key: syz.0.1227 sent an empty control message without MSG_MORE. [ 221.008015][T10521] netlink: 'syz.0.1227': attribute type 2 has an invalid length. [ 221.016143][T10521] nbd: must specify an index to disconnect [ 221.770306][T10548] gretap0: entered promiscuous mode [ 222.325073][T10570] hsr0 speed is unknown, defaulting to 1000 [ 223.051557][T10623] netlink: 'syz.3.1251': attribute type 8 has an invalid length. [ 223.859084][T10661] netlink: 'syz.1.1259': attribute type 10 has an invalid length. [ 223.963053][T10661] !: entered promiscuous mode [ 223.979739][T10661] !: entered allmulticast mode [ 224.001861][T10661] team0: Port device 0! added [ 224.118595][T10669] netlink: 'syz.1.1262': attribute type 18 has an invalid length. [ 224.135934][T10668] netlink: 'syz.1.1262': attribute type 18 has an invalid length. [ 224.375403][T10684] hsr0 speed is unknown, defaulting to 1000 [ 225.143207][T10724] __nla_validate_parse: 15 callbacks suppressed [ 225.143226][T10724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1276'. [ 225.291636][T10728] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1278'. [ 225.305563][T10732] validate_nla: 3 callbacks suppressed [ 225.305583][T10732] netlink: 'syz.0.1279': attribute type 8 has an invalid length. [ 225.331499][T10728] netlink: 'syz.4.1278': attribute type 1 has an invalid length. [ 225.507529][T10728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.733438][T10752] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.755467][T10752] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.836813][T10752] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.849199][T10752] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.922109][T10752] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.934231][T10752] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.049397][T10752] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.082019][T10752] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.276450][T10773] hsr0 speed is unknown, defaulting to 1000 [ 226.282760][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.312364][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.373601][ T4993] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.391619][ T4993] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.430935][ T4993] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.449959][ T4993] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.552990][T10793] netlink: 'syz.3.1292': attribute type 9 has an invalid length. [ 226.589754][ T4993] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.599407][ T4993] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.624986][T10799] netlink: 'syz.1.1293': attribute type 12 has an invalid length. [ 226.654162][T10799] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1293'. [ 226.708674][T10772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.969645][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 226.998751][T10819] syzkaller0: entered promiscuous mode [ 227.009471][T10819] syzkaller0: entered allmulticast mode [ 227.085415][T10831] netlink: 'syz.4.1303': attribute type 8 has an invalid length. [ 227.665598][T10847] nbd1: detected capacity change from 0 to 63 [ 227.677328][T10861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1310'. [ 227.747290][T10853] block nbd1: NBD_DISCONNECT [ 227.758932][T10853] block nbd1: Disconnected due to user request. [ 227.777470][T10853] block nbd1: shutting down sockets [ 228.160902][T10879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1314'. [ 228.274179][T10884] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1314'. [ 228.327843][T10887] !: left allmulticast mode [ 228.332876][T10887] bridge0: port 1(0!) entered disabled state [ 228.364415][T10887] bond2: (slave batadv0): Releasing active interface [ 228.508431][T10899] hsr0 speed is unknown, defaulting to 1000 [ 228.564823][T10904] netlink: 'syz.4.1320': attribute type 9 has an invalid length. [ 228.663463][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 228.691259][T10908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1322'. [ 229.033567][T10931] hsr0 speed is unknown, defaulting to 1000 [ 229.204082][T10923] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 229.229716][T10932] hsr0 speed is unknown, defaulting to 1000 [ 229.277519][T10936] hsr0 speed is unknown, defaulting to 1000 [ 229.711592][T10966] netlink: 'syz.1.1336': attribute type 9 has an invalid length. [ 229.776644][T10963] openvswitch: netlink: Multiple metadata blocks provided [ 229.787291][T10963] openvswitch: netlink: Multiple metadata blocks provided [ 230.300046][T10999] hsr0 speed is unknown, defaulting to 1000 [ 230.410677][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1348'. [ 230.965808][T11025] netlink: 'syz.0.1350': attribute type 16 has an invalid length. [ 231.012487][T11025] netlink: 'syz.0.1350': attribute type 17 has an invalid length. [ 231.060470][T11028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1352'. [ 231.080337][T11025] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.100952][T11025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.170893][T11004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1346'. [ 231.238709][T11034] veth1_to_team: entered promiscuous mode [ 231.250879][T11034] veth1_to_team: entered allmulticast mode [ 231.291758][T11035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'. [ 231.314748][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1355'. [ 231.338681][T11037] : entered promiscuous mode [ 231.512041][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.520868][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.541545][T11044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.563991][T11044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.278235][T11055] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1359'. [ 232.917534][T11078] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 232.972791][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 232.989381][T11078] netlink: 'syz.1.1367': attribute type 4 has an invalid length. [ 232.992848][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 233.011229][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 233.060185][T11082] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1368'. [ 233.258532][T11093] netlink: 'syz.4.1371': attribute type 8 has an invalid length. [ 233.401245][T11078] bridge0: port 3(team0) entered disabled state [ 233.408867][T11078] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.416680][T11078] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.617945][T11078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.294794][T11124] netlink: 'syz.3.1379': attribute type 1 has an invalid length. [ 234.337458][T11124] openvswitch: netlink: Duplicate or invalid key (type 0). [ 234.344852][T11124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.721708][T11150] netlink: 'syz.2.1387': attribute type 8 has an invalid length. [ 234.744623][T11151] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 234.777532][T11151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.073025][T11168] 8021q: VLANs not supported on caif0 [ 235.459406][T11189] netlink: 'syz.2.1402': attribute type 13 has an invalid length. [ 235.532908][T11189] netlink: 'syz.2.1402': attribute type 17 has an invalid length. [ 235.583067][T11191] hsr0 speed is unknown, defaulting to 1000 [ 235.604787][T11189] gretap0: left promiscuous mode [ 235.665896][T11189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.718057][T11205] __nla_validate_parse: 5 callbacks suppressed [ 235.718076][T11205] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1408'. [ 235.770403][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 235.788824][T11210] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1407'. [ 235.811928][T11209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1408'. [ 235.879818][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1408'. [ 236.555808][T11235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1419'. [ 236.575165][T11235] netlink: 560 bytes leftover after parsing attributes in process `syz.0.1419'. [ 236.748726][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079085c00: rx timeout, send abort [ 236.841407][T11251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1425'. [ 236.872125][T11251] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1425'. [ 236.901958][T11251] netlink: 'syz.3.1425': attribute type 1 has an invalid length. [ 236.981775][T11255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1426'. [ 236.993884][T11255] netlink: 'syz.1.1426': attribute type 7 has an invalid length. [ 237.034663][T11255] netlink: 'syz.1.1426': attribute type 8 has an invalid length. [ 237.257065][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079085c00: abort rx timeout. Force session deactivation [ 237.602417][T11281] netlink: 'syz.4.1433': attribute type 9 has an invalid length. [ 237.619162][T11282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.634508][T11281] netlink: 'syz.4.1433': attribute type 9 has an invalid length. [ 237.648331][T11282] netlink: 'syz.1.1434': attribute type 10 has an invalid length. [ 237.666815][T11282] macvlan0: entered promiscuous mode [ 237.860702][T11259] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 238.039131][T11301] netlink: 'syz.4.1440': attribute type 1 has an invalid length. [ 238.050172][T11301] netlink: 'syz.4.1440': attribute type 4 has an invalid length. [ 238.130752][T11307] syzkaller1: entered promiscuous mode [ 238.140145][T11307] syzkaller1: entered allmulticast mode [ 238.224549][T11311] tipc: Enabled bearer , priority 0 [ 238.235099][T11311] syzkaller0: entered promiscuous mode [ 238.241617][T11311] syzkaller0: entered allmulticast mode [ 238.264433][T11311] tipc: Resetting bearer [ 238.277075][T11310] tipc: Resetting bearer [ 238.301631][T11310] tipc: Disabling bearer [ 238.489875][T11326] batadv_slave_0: entered promiscuous mode [ 238.540262][T11327] batadv_slave_0 (unregistering): left promiscuous mode [ 238.652887][T11333] netlink: 'syz.4.1450': attribute type 14 has an invalid length. [ 238.686447][T11333] netlink: 'syz.4.1450': attribute type 14 has an invalid length. [ 239.180749][T11337] hsr0 speed is unknown, defaulting to 1000 [ 240.158586][T11408] bridge0: entered promiscuous mode [ 240.164477][T11408] vlan2: entered promiscuous mode [ 240.999320][T11432] __nla_validate_parse: 16 callbacks suppressed [ 240.999343][T11432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1476'. [ 241.366631][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 241.393194][T11446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1472'. [ 241.417308][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 241.427250][T11446] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 241.434915][T11446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.533651][T11459] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1485'. [ 241.910070][T11478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.963089][T11477] hsr0 speed is unknown, defaulting to 1000 [ 241.989657][T11481] IPv6: Can't replace route, no match found [ 242.101714][T11488] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1496'. [ 242.113839][T11488] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.298070][T11501] netlink: 516 bytes leftover after parsing attributes in process `syz.4.1500'. [ 242.419911][T11508] validate_nla: 3 callbacks suppressed [ 242.419931][T11508] netlink: 'syz.2.1504': attribute type 8 has an invalid length. [ 242.589382][T11513] hsr0 speed is unknown, defaulting to 1000 [ 243.121107][T11546] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.131300][T11546] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.180014][T11546] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.190251][T11546] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.240430][T11546] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.252122][T11546] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.301751][T11546] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.304026][T11549] netlink: 'syz.1.1515': attribute type 8 has an invalid length. [ 243.316023][T11546] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.411690][ T9556] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.420573][ T9556] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.436222][ T9556] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.444684][ T9556] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.470130][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.482189][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.503012][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.512287][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.586107][T11557] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1518'. [ 243.822776][T11566] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1521'. [ 243.951472][T11570] siw: device registration error -23 [ 244.013692][T11579] netlink: 844 bytes leftover after parsing attributes in process `syz.2.1525'. [ 244.072979][T11584] netlink: 'syz.3.1528': attribute type 8 has an invalid length. [ 244.334710][T11594] bridge_slave_0: entered allmulticast mode [ 244.569956][T11608] netlink: 'syz.2.1536': attribute type 9 has an invalid length. [ 246.082246][T11658] pim6reg1: entered promiscuous mode [ 246.099105][T11658] pim6reg1: entered allmulticast mode [ 246.121982][T11654] netlink: 'syz.2.1547': attribute type 4 has an invalid length. [ 246.139669][T11659] hsr0 speed is unknown, defaulting to 1000 [ 246.146548][T11662] __nla_validate_parse: 3 callbacks suppressed [ 246.146565][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'. [ 246.179321][T11654] netlink: 'syz.2.1547': attribute type 4 has an invalid length. [ 246.362038][T11678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1555'. [ 246.399381][T11679] bridge0: entered allmulticast mode [ 246.523414][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'. [ 246.537683][T11680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 246.668506][T11684] bridge0 (unregistering): left allmulticast mode [ 246.848442][T11696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1562'. [ 247.412478][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1572'. [ 247.433529][T11733] bridge_slave_1: default FDB implementation only supports local addresses [ 247.484662][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1574'. [ 247.535094][T11739] TCP: TCP_TX_DELAY enabled [ 247.570130][T11742] netlink: 'syz.4.1576': attribute type 8 has an invalid length. [ 247.701533][T11736] hsr0 speed is unknown, defaulting to 1000 [ 247.821763][T11757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1581'. [ 247.852126][T11757] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1581'. [ 248.300412][T11782] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1587'. [ 249.174477][T11833] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 249.284632][T11840] netlink: 'syz.1.1600': attribute type 8 has an invalid length. [ 249.791335][T11883] netlink: 'syz.3.1613': attribute type 8 has an invalid length. [ 250.148621][ T55] block nbd0: Possible stuck request ffff888025305080: control (read@0,4096B). Runtime 150 seconds [ 250.711801][T11926] hsr0 speed is unknown, defaulting to 1000 [ 250.804770][ T5956] IPVS: starting estimator thread 0... [ 250.896154][T11928] IPVS: using max 28 ests per chain, 67200 per kthread [ 250.923702][T11930] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 251.170630][T11943] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 251.221374][T11943] veth0_to_bond: left allmulticast mode [ 251.243942][T11943] veth0_to_bond: left promiscuous mode [ 251.251137][T11943] bridge18: port 2(veth0_to_bond) entered disabled state [ 251.273382][T11950] netlink: 'syz.2.1629': attribute type 10 has an invalid length. [ 251.298429][T11943] veth7: left allmulticast mode [ 251.303692][T11943] veth7: left promiscuous mode [ 251.309879][T11943] bridge18: port 1(veth7) entered disabled state [ 251.361322][T11950] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 251.383888][T11950] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 251.440090][T11944] __nla_validate_parse: 7 callbacks suppressed [ 251.440109][T11944] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1628'. [ 251.507330][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.518480][ T9556] IPVS: stop unused estimator thread 0... [ 251.552168][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 251.555592][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.792744][T11985] netlink: 'syz.3.1640': attribute type 1 has an invalid length. [ 251.824451][T11985] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1640'. [ 251.854393][T11987] hsr0 speed is unknown, defaulting to 1000 [ 252.047649][T11998] pim6reg1: entered promiscuous mode [ 252.053431][T11998] pim6reg1: entered allmulticast mode [ 252.124149][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1645'. [ 252.438510][T12011] netlink: 'syz.3.1649': attribute type 16 has an invalid length. [ 252.447446][T12011] netlink: 'syz.3.1649': attribute type 17 has an invalid length. [ 252.531865][ T9552] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.532873][T12012] netlink: 'syz.3.1649': attribute type 16 has an invalid length. [ 252.551442][T12012] netlink: 'syz.3.1649': attribute type 17 has an invalid length. [ 252.559607][ T9552] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.573611][ T9552] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.605612][ T9552] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.654939][T12020] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1651'. [ 253.212302][T12057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1659'. [ 253.212820][T12049] hsr0 speed is unknown, defaulting to 1000 [ 253.307469][T12057] syzkaller0: entered promiscuous mode [ 253.313913][T12057] syzkaller0: entered allmulticast mode [ 253.328996][T12057] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1659'. [ 253.362365][T12057] syzkaller0: left promiscuous mode [ 253.369102][T12057] syzkaller0: left allmulticast mode [ 253.871371][T12089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1671'. [ 254.058242][T12091] hsr0 speed is unknown, defaulting to 1000 [ 254.651592][T12110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1676'. [ 254.664286][T12110] nbd: couldn't find a device at index 65546 [ 254.861403][T12119] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1678'. [ 254.882634][T12123] tipc: Enabled bearer , priority 0 [ 254.969484][T12126] veth9: entered promiscuous mode [ 255.006453][T12123] syzkaller0: entered promiscuous mode [ 255.022829][T12123] syzkaller0: entered allmulticast mode [ 255.126886][T12141] netlink: 'syz.0.1682': attribute type 1 has an invalid length. [ 255.603404][T12116] tipc: Resetting bearer [ 255.656869][T12116] tipc: Disabling bearer [ 255.910084][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.301255][T12205] macvlan0: left promiscuous mode [ 256.318252][T12205] macvlan0: entered allmulticast mode [ 256.330603][T12205] veth1_vlan: entered allmulticast mode [ 257.894730][T12247] netlink: 'syz.4.1719': attribute type 10 has an invalid length. [ 257.970689][T12260] __nla_validate_parse: 8 callbacks suppressed [ 257.970710][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 258.267256][T12265] hsr0 speed is unknown, defaulting to 1000 [ 258.889527][T12290] hsr0 speed is unknown, defaulting to 1000 [ 258.898296][T12296] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 259.014297][T12301] Bluetooth: MGMT ver 1.23 [ 259.867060][T12323] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1741'. [ 259.991029][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1743'. [ 260.027230][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1744'. [ 260.051862][T12335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1743'. [ 260.125734][T12338] netlink: 'syz.4.1745': attribute type 7 has an invalid length. [ 260.150599][T12331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 260.164741][T12338] : entered promiscuous mode [ 260.174391][T12338] netlink: 2144 bytes leftover after parsing attributes in process `syz.4.1745'. [ 260.352860][T12353] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1750'. [ 260.401663][T12356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1745'. [ 260.434653][T12359] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1751'. [ 260.917576][T12378] netlink: 'syz.2.1759': attribute type 1 has an invalid length. [ 261.105905][ T5861] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 261.114541][ T5861] Bluetooth: hci2: command 0x0406 tx timeout [ 261.514610][T12422] hsr0 speed is unknown, defaulting to 1000 [ 261.928832][T12441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.936452][T12441] IPv6: NLM_F_CREATE should be set when creating new route [ 261.943859][T12441] IPv6: NLM_F_CREATE should be set when creating new route [ 262.475548][T12477] geneve3: entered promiscuous mode [ 262.492582][ T9556] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 262.509177][ T9556] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 262.529020][ T9556] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 262.549069][ T9556] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 263.230510][T12488] __nla_validate_parse: 3 callbacks suppressed [ 263.230529][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'. [ 263.263717][T12488] veth1: entered promiscuous mode [ 263.301627][T12488] netlink: 'syz.2.1793': attribute type 1 has an invalid length. [ 263.335652][T12488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1793'. [ 263.359182][T12488] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 263.387085][T12497] netlink: 'syz.4.1794': attribute type 9 has an invalid length. [ 263.394954][T12497] netlink: 'syz.4.1794': attribute type 6 has an invalid length. [ 263.535349][T12503] FAULT_INJECTION: forcing a failure. [ 263.535349][T12503] name failslab, interval 1, probability 0, space 0, times 0 [ 263.550103][T12503] CPU: 0 UID: 0 PID: 12503 Comm: syz.2.1798 Not tainted 6.16.0-syzkaller-12065-gbc4c0a48bdad #0 PREEMPT(full) [ 263.550137][T12503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.550158][T12503] Call Trace: [ 263.550166][T12503] [ 263.550174][T12503] dump_stack_lvl+0x189/0x250 [ 263.550201][T12503] ? __pfx____ratelimit+0x10/0x10 [ 263.550223][T12503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.550245][T12503] ? __pfx__printk+0x10/0x10 [ 263.550276][T12503] ? __pfx___might_resched+0x10/0x10 [ 263.550294][T12503] ? fs_reclaim_acquire+0x7d/0x100 [ 263.550326][T12503] should_fail_ex+0x414/0x560 [ 263.550354][T12503] should_failslab+0xa8/0x100 [ 263.550381][T12503] __kmalloc_noprof+0xcb/0x4f0 [ 263.550403][T12503] ? kfree+0x4d/0x440 [ 263.550420][T12503] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 263.550452][T12503] tomoyo_realpath_from_path+0xe3/0x5d0 [ 263.550479][T12503] ? tomoyo_domain+0xd9/0x130 [ 263.550509][T12503] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 263.550532][T12503] tomoyo_path_number_perm+0x1e8/0x5a0 [ 263.550557][T12503] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 263.550598][T12503] ? __lock_acquire+0xab9/0xd20 [ 263.550645][T12503] ? __fget_files+0x2a/0x420 [ 263.550673][T12503] ? __fget_files+0x2a/0x420 [ 263.550696][T12503] ? __fget_files+0x3a0/0x420 [ 263.550719][T12503] ? __fget_files+0x2a/0x420 [ 263.550748][T12503] security_file_ioctl+0xcb/0x2d0 [ 263.550772][T12503] __se_sys_ioctl+0x47/0x170 [ 263.550797][T12503] do_syscall_64+0xfa/0x3b0 [ 263.550818][T12503] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.550839][T12503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.550857][T12503] ? clear_bhb_loop+0x60/0xb0 [ 263.550880][T12503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.550899][T12503] RIP: 0033:0x7f67f598ebe9 [ 263.550915][T12503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.550931][T12503] RSP: 002b:00007f67f678e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.550951][T12503] RAX: ffffffffffffffda RBX: 00007f67f5bb5fa0 RCX: 00007f67f598ebe9 [ 263.550964][T12503] RDX: 0000200000000000 RSI: 0000000000008b05 RDI: 0000000000000003 [ 263.550976][T12503] RBP: 00007f67f678e090 R08: 0000000000000000 R09: 0000000000000000 [ 263.550987][T12503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.550998][T12503] R13: 00007f67f5bb6038 R14: 00007f67f5bb5fa0 R15: 00007ffe46d1cb48 [ 263.551033][T12503] [ 263.551101][T12503] ERROR: Out of memory at tomoyo_realpath_from_path. [ 263.676668][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'. [ 263.964572][T12515] netlink: 'syz.3.1800': attribute type 1 has an invalid length. [ 264.063074][T12501] bridge0: entered allmulticast mode [ 264.274514][T12523] hsr0 speed is unknown, defaulting to 1000 [ 264.289341][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 264.386976][ T5861] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 264.393676][ T5861] Bluetooth: hci2: command 0x0406 tx timeout [ 264.489426][T12538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1809'. [ 264.812302][T12546] FAULT_INJECTION: forcing a failure. [ 264.812302][T12546] name failslab, interval 1, probability 0, space 0, times 0 [ 264.855481][T12546] CPU: 1 UID: 0 PID: 12546 Comm: syz.3.1812 Not tainted 6.16.0-syzkaller-12065-gbc4c0a48bdad #0 PREEMPT(full) [ 264.855508][T12546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.855518][T12546] Call Trace: [ 264.855524][T12546] [ 264.855533][T12546] dump_stack_lvl+0x189/0x250 [ 264.855558][T12546] ? __pfx____ratelimit+0x10/0x10 [ 264.855581][T12546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.855603][T12546] ? __pfx__printk+0x10/0x10 [ 264.855630][T12546] ? __pfx___might_resched+0x10/0x10 [ 264.855649][T12546] ? fs_reclaim_acquire+0x7d/0x100 [ 264.855678][T12546] should_fail_ex+0x414/0x560 [ 264.855703][T12546] should_failslab+0xa8/0x100 [ 264.855730][T12546] __kmalloc_noprof+0xcb/0x4f0 [ 264.855753][T12546] ? tomoyo_encode+0x28b/0x550 [ 264.855781][T12546] tomoyo_encode+0x28b/0x550 [ 264.855813][T12546] tomoyo_realpath_from_path+0x58d/0x5d0 [ 264.855840][T12546] ? tomoyo_domain+0xd9/0x130 [ 264.855877][T12546] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 264.855897][T12546] tomoyo_path_number_perm+0x1e8/0x5a0 [ 264.855927][T12546] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 264.855965][T12546] ? __lock_acquire+0xab9/0xd20 [ 264.856010][T12546] ? __fget_files+0x2a/0x420 [ 264.856037][T12546] ? __fget_files+0x2a/0x420 [ 264.856060][T12546] ? __fget_files+0x3a0/0x420 [ 264.856083][T12546] ? __fget_files+0x2a/0x420 [ 264.856112][T12546] security_file_ioctl+0xcb/0x2d0 [ 264.856135][T12546] __se_sys_ioctl+0x47/0x170 [ 264.856159][T12546] do_syscall_64+0xfa/0x3b0 [ 264.856181][T12546] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.856202][T12546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.856220][T12546] ? clear_bhb_loop+0x60/0xb0 [ 264.856241][T12546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.856259][T12546] RIP: 0033:0x7fe60d58ebe9 [ 264.856277][T12546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.856291][T12546] RSP: 002b:00007fe60e393038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.856310][T12546] RAX: ffffffffffffffda RBX: 00007fe60d7b5fa0 RCX: 00007fe60d58ebe9 [ 264.856321][T12546] RDX: 0000200000000000 RSI: 0000000000008b05 RDI: 0000000000000003 [ 264.856331][T12546] RBP: 00007fe60e393090 R08: 0000000000000000 R09: 0000000000000000 [ 264.856341][T12546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.856351][T12546] R13: 00007fe60d7b6038 R14: 00007fe60d7b5fa0 R15: 00007ffc5bdec678 [ 264.856379][T12546] [ 264.856400][T12546] ERROR: Out of memory at tomoyo_realpath_from_path. [ 265.241697][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1815'. [ 265.393611][T12563] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 265.447401][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1820'. [ 265.508665][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1820'. [ 266.123015][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1832'. [ 266.308975][T12616] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1832'. [ 266.442148][T12620] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.472642][ T9552] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.487397][ T9552] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.505734][ T9556] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.517332][ T9556] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.306139][T12658] netlink: 'syz.3.1845': attribute type 83 has an invalid length. [ 268.335030][T12709] netlink: 'syz.3.1859': attribute type 4 has an invalid length. [ 268.348763][T12708] netlink: 'syz.3.1859': attribute type 4 has an invalid length. [ 269.176917][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 269.192177][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 269.377301][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'. [ 269.532663][T12781] tipc: Enabling of bearer rejected, already enabled [ 269.549052][T12781] tipc: Resetting bearer [ 269.668191][T12786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1882'. [ 270.173966][T12815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1894'. [ 270.298402][T12823] netlink: 'syz.2.1895': attribute type 2 has an invalid length. [ 270.327871][T12816] team0: Port device sit1 added [ 270.343168][T12823] k›*·]‘: entered promiscuous mode [ 270.397077][T12822] delete_channel: no stack [ 270.487690][T12818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.512431][T12818] veth0_to_team: entered promiscuous mode [ 270.518459][T12818] veth0_to_team: entered allmulticast mode [ 270.570111][T12827] veth0: entered promiscuous mode [ 270.576526][T12827] vlan4: entered promiscuous mode [ 270.682117][T12829] syz_tun: entered promiscuous mode [ 270.703434][T12829] macvtap1: entered promiscuous mode [ 270.722557][T12829] syz_tun: left promiscuous mode [ 271.010155][T12836] hsr0 speed is unknown, defaulting to 1000 [ 271.389315][T12847] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1905'. [ 271.604308][T12865] netlink: zone id is out of range [ 271.616411][T12865] netlink: zone id is out of range [ 271.621643][T12865] netlink: zone id is out of range [ 271.656085][T12865] netlink: zone id is out of range [ 271.661780][T12865] netlink: zone id is out of range [ 271.697099][T12865] netlink: zone id is out of range [ 271.714088][T12865] netlink: zone id is out of range [ 271.724623][T12865] netlink: zone id is out of range [ 271.740278][T12865] netlink: zone id is out of range [ 271.810005][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'. [ 271.890263][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1912'. [ 272.180409][T12882] tipc: Enabling of bearer rejected, already enabled [ 272.309957][T12891] netlink: 'syz.0.1917': attribute type 10 has an invalid length. [ 272.327888][T12891] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1917'. [ 272.350718][T12891] team0: Device geneve0 is of different type [ 272.357601][T12889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1916'. [ 272.787048][T12920] ip6tnl3: entered promiscuous mode [ 272.800486][T12920] ip6tnl3: entered allmulticast mode [ 272.982039][T12925] hsr0 speed is unknown, defaulting to 1000 [ 273.289481][ T5985] IPVS: starting estimator thread 0... [ 273.386036][T12947] IPVS: using max 31 ests per chain, 74400 per kthread [ 273.928910][T12975] netlink: 'syz.2.1942': attribute type 1 has an invalid length. [ 273.941320][T12975] netlink: 'syz.2.1942': attribute type 1 has an invalid length. [ 274.491867][T13008] tipc: Enabled bearer , priority 0 [ 274.500287][T13008] syzkaller0: entered promiscuous mode [ 274.516314][T13008] syzkaller0: entered allmulticast mode [ 274.550540][T13008] tipc: Resetting bearer [ 274.670305][T13006] tipc: Resetting bearer [ 274.724867][T13006] tipc: Disabling bearer [ 274.760703][T13026] IPVS: Error connecting to the multicast addr [ 274.773265][T13026] netlink: 'syz.3.1959': attribute type 16 has an invalid length. [ 274.798036][T13026] netlink: 'syz.3.1959': attribute type 17 has an invalid length. [ 274.848577][ T49] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.860966][ T49] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.886042][ T9554] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.915461][ T9554] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.938788][T13036] tipc: Enabled bearer , priority 0 [ 274.957016][T13036] syzkaller0: entered promiscuous mode [ 274.967783][T13036] syzkaller0: entered allmulticast mode [ 275.000841][T13037] macsec1: entered promiscuous mode [ 275.006935][T13040] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1963'. [ 275.008300][T13037] bridge0: entered promiscuous mode [ 275.023481][T13037] bridge0: port 4(macsec1) entered blocking state [ 275.031249][T13037] bridge0: port 4(macsec1) entered disabled state [ 275.038661][T13037] macsec1: entered allmulticast mode [ 275.044284][T13037] bridge0: entered allmulticast mode [ 275.052620][T13037] macsec1: left allmulticast mode [ 275.058429][T13037] bridge0: left allmulticast mode [ 275.064885][T13037] bridge0: left promiscuous mode [ 275.110999][T13033] tipc: Resetting bearer [ 275.133311][T13041] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1963'. [ 275.582548][T13064] netlink: 'syz.2.1970': attribute type 2 has an invalid length. [ 275.665454][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1974'. [ 275.674613][T13069] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1974'. [ 275.708272][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1975'. [ 275.973249][T13083] hsr0 speed is unknown, defaulting to 1000 [ 275.980191][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1978'. [ 276.124597][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1978'. [ 276.248570][T13097] FAULT_INJECTION: forcing a failure. [ 276.248570][T13097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.339011][T13097] CPU: 1 UID: 0 PID: 13097 Comm: syz.3.1983 Not tainted 6.16.0-syzkaller-12065-gbc4c0a48bdad #0 PREEMPT(full) [ 276.339040][T13097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.339051][T13097] Call Trace: [ 276.339057][T13097] [ 276.339066][T13097] dump_stack_lvl+0x189/0x250 [ 276.339092][T13097] ? __pfx____ratelimit+0x10/0x10 [ 276.339113][T13097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.339133][T13097] ? __pfx__printk+0x10/0x10 [ 276.339155][T13097] ? __might_fault+0xb0/0x130 [ 276.339189][T13097] should_fail_ex+0x414/0x560 [ 276.339212][T13097] _copy_from_user+0x2d/0xb0 [ 276.339228][T13097] ___sys_sendmsg+0x158/0x2a0 [ 276.339255][T13097] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.339334][T13097] ? __fget_files+0x2a/0x420 [ 276.339357][T13097] ? __fget_files+0x3a0/0x420 [ 276.339389][T13097] __x64_sys_sendmsg+0x19b/0x260 [ 276.339416][T13097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.339451][T13097] ? __pfx_ksys_write+0x10/0x10 [ 276.339469][T13097] ? rcu_is_watching+0x15/0xb0 [ 276.339490][T13097] ? do_syscall_64+0xbe/0x3b0 [ 276.339514][T13097] do_syscall_64+0xfa/0x3b0 [ 276.339540][T13097] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.339560][T13097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.339577][T13097] ? clear_bhb_loop+0x60/0xb0 [ 276.339598][T13097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.339615][T13097] RIP: 0033:0x7fe60d58ebe9 [ 276.339631][T13097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.339646][T13097] RSP: 002b:00007fe60e393038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.339665][T13097] RAX: ffffffffffffffda RBX: 00007fe60d7b5fa0 RCX: 00007fe60d58ebe9 [ 276.339677][T13097] RDX: 0000000000000040 RSI: 0000200000001780 RDI: 0000000000000003 [ 276.339688][T13097] RBP: 00007fe60e393090 R08: 0000000000000000 R09: 0000000000000000 [ 276.339698][T13097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.339708][T13097] R13: 00007fe60d7b6038 R14: 00007fe60d7b5fa0 R15: 00007ffc5bdec678 [ 276.339735][T13097] [ 276.640767][T13107] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1984'. [ 276.793130][T13113] tipc: Enabled bearer , priority 0 [ 276.813290][T13112] tipc: Disabling bearer [ 276.838794][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1986'. [ 277.153821][T13121] hsr0 speed is unknown, defaulting to 1000 [ 277.320277][T13135] net_ratelimit: 17 callbacks suppressed [ 277.320298][T13135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.418226][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1993'. [ 277.469065][T13149] FAULT_INJECTION: forcing a failure. [ 277.469065][T13149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.483419][T13149] CPU: 0 UID: 0 PID: 13149 Comm: syz.0.1996 Not tainted 6.16.0-syzkaller-12065-gbc4c0a48bdad #0 PREEMPT(full) [ 277.483443][T13149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.483453][T13149] Call Trace: [ 277.483460][T13149] [ 277.483468][T13149] dump_stack_lvl+0x189/0x250 [ 277.483495][T13149] ? __pfx____ratelimit+0x10/0x10 [ 277.483518][T13149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.483543][T13149] ? __pfx__printk+0x10/0x10 [ 277.483578][T13149] should_fail_ex+0x414/0x560 [ 277.483604][T13149] _copy_to_user+0x31/0xb0 [ 277.483624][T13149] simple_read_from_buffer+0xe1/0x170 [ 277.483654][T13149] proc_fail_nth_read+0x1b3/0x220 [ 277.483677][T13149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 277.483718][T13149] ? rw_verify_area+0x2a6/0x4d0 [ 277.483740][T13149] ? __lock_acquire+0xab9/0xd20 [ 277.483762][T13149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 277.483785][T13149] vfs_read+0x200/0x980 [ 277.483805][T13149] ? fdget_pos+0x247/0x320 [ 277.483827][T13149] ? __pfx___mutex_lock+0x10/0x10 [ 277.483852][T13149] ? __pfx_vfs_read+0x10/0x10 [ 277.483875][T13149] ? __fget_files+0x2a/0x420 [ 277.483902][T13149] ? __fget_files+0x3a0/0x420 [ 277.483924][T13149] ? __fget_files+0x2a/0x420 [ 277.483956][T13149] ksys_read+0x145/0x250 [ 277.483980][T13149] ? __pfx_ksys_read+0x10/0x10 [ 277.484000][T13149] ? rcu_is_watching+0x15/0xb0 [ 277.484025][T13149] ? do_syscall_64+0xbe/0x3b0 [ 277.484050][T13149] do_syscall_64+0xfa/0x3b0 [ 277.484069][T13149] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.484091][T13149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.484110][T13149] ? clear_bhb_loop+0x60/0xb0 [ 277.484131][T13149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.484148][T13149] RIP: 0033:0x7fe21e18d5fc [ 277.484165][T13149] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 277.484180][T13149] RSP: 002b:00007fe21efcb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 277.484199][T13149] RAX: ffffffffffffffda RBX: 00007fe21e3b6090 RCX: 00007fe21e18d5fc [ 277.484211][T13149] RDX: 000000000000000f RSI: 00007fe21efcb0a0 RDI: 0000000000000005 [ 277.484222][T13149] RBP: 00007fe21efcb090 R08: 0000000000000000 R09: 0000000000000000 [ 277.484233][T13149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.484243][T13149] R13: 00007fe21e3b6128 R14: 00007fe21e3b6090 R15: 00007ffc406a4998 [ 277.484271][T13149] [ 277.502441][T13148] macsec0: left promiscuous mode [ 277.743733][T13148] macsec0: left allmulticast mode [ 277.801158][T13148] sit1: left allmulticast mode [ 277.853494][T13153] netlink: 'syz.0.1998': attribute type 13 has an invalid length. [ 277.874237][T13153] netlink: 'syz.0.1998': attribute type 17 has an invalid length. [ 278.019599][T13153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.201936][T13163] hsr0 speed is unknown, defaulting to 1000 [ 278.479841][T13175] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 278.593408][T13172] hsr0 speed is unknown, defaulting to 1000 [ 279.001237][T13172] netlink: 'syz.1.2002': attribute type 13 has an invalid length. [ 279.034332][T13172] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 279.570859][ T30] audit: type=1800 audit(1755028175.599:3): pid=13218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2015" name="x000000000000000900000000000000000000011" dev="tmpfs" ino=2210 res=0 errno=0 [ 279.886882][T13239] netlink: 'syz.3.2021': attribute type 1 has an invalid length. [ 279.912408][T13239] netlink: 'syz.3.2021': attribute type 10 has an invalid length. [ 279.922649][T13239] batman_adv: batadv0: Adding interface: team0 [ 279.930441][T13239] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.962852][T13239] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 279.991173][T13239] netlink: 'syz.3.2021': attribute type 10 has an invalid length. [ 280.025455][T13239] __nla_validate_parse: 6 callbacks suppressed [ 280.025473][T13239] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2021'. [ 280.083624][T13239] team0: entered promiscuous mode [ 280.098144][T13239] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.109178][T13239] batman_adv: batadv0: Interface activated: team0 [ 280.116359][T13239] batman_adv: batadv0: Interface deactivated: team0 [ 280.123261][T13239] batman_adv: batadv0: Removing interface: team0 [ 280.241045][ T55] block nbd0: Possible stuck request ffff888025305080: control (read@0,4096B). Runtime 180 seconds [ 280.403417][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2026'. [ 280.433306][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2029'. [ 280.476131][T13267] netlink: 'syz.1.2031': attribute type 1 has an invalid length. [ 280.588467][T13274] mac80211_hwsim hwsim6 ªªªªª": renamed from wlan0 [ 280.621551][T13274] sctp: [Deprecated]: syz.3.2033 (pid 13274) Use of int in maxseg socket option. [ 280.621551][T13274] Use struct sctp_assoc_value instead [ 280.692054][T13281] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2035'. [ 281.990189][T13332] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 282.038329][T13332] bond0 (unregistering): Released all slaves [ 282.234890][T13364] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2056'. [ 282.248035][T13364] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2056'. [ 282.280210][T13364] netlink: 'syz.1.2056': attribute type 6 has an invalid length. [ 282.300081][T13364] netlink: 'syz.1.2056': attribute type 5 has an invalid length. [ 282.328467][T13364] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2056'. [ 282.337513][T13368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2059'. [ 282.682669][T13384] netlink: 'syz.0.2065': attribute type 1 has an invalid length. [ 282.705506][T13384] netlink: 'syz.0.2065': attribute type 3 has an invalid length. [ 282.723679][T13384] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2065'. [ 282.743946][T13384] NCSI netlink: No device for ifindex 246 [ 282.758268][T13386] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2064'. [ 282.762558][T13388] netlink: 'syz.0.2065': attribute type 1 has an invalid length. [ 282.786545][T13388] NCSI netlink: No device for ifindex 246 [ 284.063913][T13414] validate_nla: 1 callbacks suppressed [ 284.063934][T13414] netlink: 'syz.3.2073': attribute type 10 has an invalid length. [ 284.123935][T13414] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 284.180285][ T9552] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.195407][ T9640] IPVS: starting estimator thread 0... [ 284.201447][ T9552] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.240532][ T9552] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.272073][ T9552] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.286741][T13424] IPVS: using max 28 ests per chain, 67200 per kthread [ 284.314649][T13426] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration Connection to 10.128.0.241 closed by remote host. [ 285.793808][ T9558] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.863740][ T9558] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.911259][ T9558] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.968919][ T9558] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.262047][ T9558] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 286.729735][ T9558] bond0 (unregistering): Released all slaves [ 286.877965][ T9558] bond1 (unregistering): (slave veth3): Releasing active interface [ 286.887428][ T9558] bond1 (unregistering): Released all slaves [ 287.034688][ T9558] bond2 (unregistering): Released all slaves [ 287.131424][ T9558] : left promiscuous mode [ 287.209259][ T9558] tipc: Left network mode [ 287.234359][ T9558] IPVS: stopping backup sync thread 8562 ... [ 287.393921][ T9558] hsr_slave_0: left promiscuous mode [ 287.400397][ T9558] hsr_slave_1: left promiscuous mode [ 288.484137][ T9558] IPVS: stop unused estimator thread 0... [ 288.537807][ T9558] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 288.594551][ T9558] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 288.660731][ T9558] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 288.711698][ T9558] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 288.838541][ T9558] tipc: Resetting bearer [ 288.894604][ T9558] ip6gretap0 (unregistering): left allmulticast mode [ 288.901463][ T9558] ip6gretap0 (unregistering): left promiscuous mode [ 290.006182][ T9558] tipc: Disabling bearer [ 290.168037][ T9558] bond1 (unregistering): Released all slaves [ 290.286450][ T9558] bond2 (unregistering): Released all slaves [ 290.310621][ T9558] bond0 (unregistering): Released all slaves [ 290.398796][ T9558] : left promiscuous mode [ 290.433970][ T9558] tipc: Left network mode [ 290.616260][ C0] ------------[ cut here ]------------ [ 290.622142][ C0] kernel BUG at arch/x86/mm/physaddr.c:28! [ 290.628358][ C0] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 290.635023][ C0] CPU: 0 UID: 0 PID: 9552 Comm: kworker/u8:10 Not tainted 6.16.0-syzkaller-12065-gbc4c0a48bdad #0 PREEMPT(full) [ 290.647104][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.657153][ C0] Workqueue: bat_events batadv_nc_worker [ 290.662868][ C0] RIP: 0010:__phys_addr+0x16b/0x180 [ 290.668157][ C0] Code: 8e ae 00 e9 45 ff ff ff e8 e2 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 90 0e 8a 03 e9 4d ff ff ff e8 c6 24 4b 00 90 <0f> 0b e8 be 24 4b 00 90 0f 0b e8 b6 24 4b 00 90 0f 0b 0f 1f 00 90 [ 290.688102][ C0] RSP: 0018:ffffc90000007bf8 EFLAGS: 00010246 [ 290.694336][ C0] RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff888062f19e00 [ 290.702377][ C0] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 290.710371][ C0] RBP: ffffc90000007ed0 R08: 0000000000000000 R09: ffffffff81a7f847 [ 290.718628][ C0] R10: dffffc0000000000 R11: ffffffff8a014350 R12: ffffffff8a014350 [ 290.726930][ C0] R13: ffffffff81a7f847 R14: 000000017fff0000 R15: dffffc0000000000 [ 290.735188][ C0] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 290.744291][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.751105][ C0] CR2: 00007fb30abf84c0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 290.759186][ C0] Call Trace: [ 290.762454][ C0] [ 290.765297][ C0] ? in_dev_free_rcu+0x49/0x60 [ 290.770078][ C0] kfree+0x77/0x440 [ 290.773966][ C0] ? __pfx_in_dev_free_rcu+0x10/0x10 [ 290.779418][ C0] ? rcu_core+0xc37/0x1770 [ 290.783825][ C0] in_dev_free_rcu+0x49/0x60 [ 290.788591][ C0] rcu_core+0xca8/0x1770 [ 290.792849][ C0] ? __pfx_rcu_core+0x10/0x10 [ 290.797522][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 290.802885][ C0] ? sched_clock_cpu+0x74/0x430 [ 290.807774][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 290.813099][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 290.819072][ C0] ? handle_softirqs+0x717/0x870 [ 290.824229][ C0] handle_softirqs+0x283/0x870 [ 290.829107][ C0] ? do_softirq+0xec/0x180 [ 290.833528][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 290.838821][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 290.844530][ C0] do_softirq+0xec/0x180 [ 290.848846][ C0] [ 290.851763][ C0] [ 290.854686][ C0] ? __pfx_do_softirq+0x10/0x10 [ 290.859632][ C0] ? __lock_acquire+0xab9/0xd20 [ 290.864627][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 290.870014][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 290.875250][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 290.881090][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 290.886829][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 290.892395][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 290.899479][ C0] batadv_nc_purge_paths+0x318/0x3b0 [ 290.904773][ C0] batadv_nc_worker+0x328/0x610 [ 290.909658][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 290.915580][ C0] process_scheduled_works+0xade/0x17b0 [ 290.921313][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.927538][ C0] worker_thread+0x8a0/0xda0 [ 290.932231][ C0] kthread+0x70e/0x8a0 [ 290.936316][ C0] ? __pfx_worker_thread+0x10/0x10 [ 290.941510][ C0] ? __pfx_kthread+0x10/0x10 [ 290.946099][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.951281][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.956497][ C0] ? __pfx_kthread+0x10/0x10 [ 290.961182][ C0] ret_from_fork+0x3fc/0x770 [ 290.965769][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 290.970896][ C0] ? __switch_to_asm+0x39/0x70 [ 290.975712][ C0] ? __switch_to_asm+0x33/0x70 [ 290.980557][ C0] ? __pfx_kthread+0x10/0x10 [ 290.985192][ C0] ret_from_fork_asm+0x1a/0x30 [ 290.990424][ C0] [ 290.993449][ C0] Modules linked in: [ 290.997539][ C0] ---[ end trace 0000000000000000 ]--- [ 291.003042][ C0] RIP: 0010:__phys_addr+0x16b/0x180 [ 291.008252][ C0] Code: 8e ae 00 e9 45 ff ff ff e8 e2 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 90 0e 8a 03 e9 4d ff ff ff e8 c6 24 4b 00 90 <0f> 0b e8 be 24 4b 00 90 0f 0b e8 b6 24 4b 00 90 0f 0b 0f 1f 00 90 [ 291.027960][ C0] RSP: 0018:ffffc90000007bf8 EFLAGS: 00010246 [ 291.034016][ C0] RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff888062f19e00 [ 291.042175][ C0] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 291.050174][ C0] RBP: ffffc90000007ed0 R08: 0000000000000000 R09: ffffffff81a7f847 [ 291.058433][ C0] R10: dffffc0000000000 R11: ffffffff8a014350 R12: ffffffff8a014350 [ 291.066671][ C0] R13: ffffffff81a7f847 R14: 000000017fff0000 R15: dffffc0000000000 [ 291.074676][ C0] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 291.083718][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.090337][ C0] CR2: 00007fb30abf84c0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 291.098590][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 291.106155][ C0] Kernel Offset: disabled [ 291.110563][ C0] Rebooting in 86400 seconds..