last executing test programs: 1m19.212336917s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xb}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x34}}, 0x8000) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r2, &(0x7f0000000140)="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", 0xfd, 0x4040800, &(0x7f0000000240)={0xa, 0x4e22, 0x23, @dev={0xfe, 0x80, '\x00', 0x12}, 0x228}, 0x1c) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.stat\x00', 0x0, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x41}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8565e1d5282d4edf843987ee76"}]}, 0x60}}, 0x4000000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}]}, 0x24}}, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r5, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10, 0x65}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6005}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @device_a, @device_b, @initial, {0xd, 0xc}, @value=@ver_80211n={0x0, 0x3c9f, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x40, @void}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x1000}, 0x8000) (async) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000680)=0x80, 0x4) (async) ioctl(r3, 0x1549, &(0x7f00000006c0)) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000700)) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000740)={0x0, 0xc7, "d526689584fb1acda2210d42ff9521abe374468700fb9b563790ff7df547fbc44bb256ee9ba59167acd5ead278cc6cfd795c7b0bc6698442c56424fbaa91bf2bf18d79a89fcf1f0aaf9a4044f3237bdd4e2cb84c750b3c47de7bb6589180550ce3f3fd1d3fa0320e0d92fcc1b9cc4cea1274705346885a14265a7ca53abbf08170fa620b45998e2589dffacbdb44457a551b41ce647e484bd2300c0d803676967fb189fbb49ff1a32f2a4316b4fd772eb33942c63e2f474536c28aecacb440906fa83765d183c5"}, &(0x7f0000000840)=0xcf) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000880)={r6, 0x6, 0x3d, "a6cc3a9702f115c0af9009d2974c09464eed14a1ba37644f5348925c3015cc894111d92826b2d4f1839ccbd0097058527d095f02c25be40b82344eb712"}, 0x45) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x64}, 0x1, 0x0, 0x0, 0x44010}, 0x91) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a40)={0x0, r2}, 0x8) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000a80)=0x6, &(0x7f0000000ac0)=0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000b00)=r2, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000b40)=0x104, 0x4) (async) getpeername$qrtr(r3, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000c00)={r6, 0x1c}, 0x8) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000c40)=r3, 0x4) connect$qrtr(r3, &(0x7f0000000c80)={0x2a, 0x1, 0x4001}, 0xc) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000cc0)={0x100, {{0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, {{0xa, 0x4e20, 0xe, @empty, 0xb}}}, 0x108) (async) socket$qrtr(0x2a, 0x2, 0x0) 1m18.260281444s ago: executing program 4 (id=5): r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)="711f63", 0x3}, 0x1, 0x0, 0x0, 0x2000c196}, 0x4044004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x40, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xf}, @IFLA_LINK_NETNSID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80b0) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={@default, @bcast, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1m17.653044354s ago: executing program 32 (id=5): r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)="711f63", 0x3}, 0x1, 0x0, 0x0, 0x2000c196}, 0x4044004) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x40, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xf}, @IFLA_LINK_NETNSID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80b0) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={@default, @bcast, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1m17.606180687s ago: executing program 1 (id=2): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000008c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x22385}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}}, 0x4000010) 1m17.102039892s ago: executing program 33 (id=2): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000008c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x22385}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}}, 0x4000010) 1m17.088707844s ago: executing program 2 (id=13): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="b40000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0800040000e4000014"], 0xb4}}, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r4, 0x6d5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000007000000030000000000000700f50000050000000000000e03000a0000000000030000000000001105000000020000000000632e612e00"], 0x0, 0x4b, 0x0, 0x1, 0x1}, 0x28) unshare(0x6a040000) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200ff9079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000042000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x4e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1m17.063356587s ago: executing program 34 (id=13): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="b40000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0800040000e4000014"], 0xb4}}, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "10c4e3257eaa66a5725a38cd58d26115453baa910be0"}]}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r4, 0x6d5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000007000000030000000000000700f50000050000000000000e03000a0000000000030000000000001105000000020000000000632e612e00"], 0x0, 0x4b, 0x0, 0x1, 0x1}, 0x28) unshare(0x6a040000) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x4e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4.854836537s ago: executing program 7 (id=547): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0xff80, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) 4.583892379s ago: executing program 7 (id=551): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc004) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000010000000c0001000300000000000000140003"], 0x114}], 0x1, 0x0, 0x0, 0x10}, 0x40040) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbb0900bbaaaaaaaaaaaa08004510001c00660000070290780a010102ac1414aa13ff907800000000"], 0x0) socket$qrtr(0x2a, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x2c, 0x2c, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}}, 0x24000094) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6040, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0xa}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x8044) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) pread64(r6, &(0x7f0000000280)=""/229, 0xe5, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000080)=r7, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r10, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20002490}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/274], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}) write$tun(r9, &(0x7f0000000240)=ANY=[], 0xfdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 3.914938262s ago: executing program 7 (id=563): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r2, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8044) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback={0x9000000}, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r1, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x4, 0x10}, 0xc) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000ffff27bd", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYBLOB="0a000100aaaaaaaa"], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 2.975405923s ago: executing program 6 (id=571): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000006780)=""/4100, 0x1004}, {&(0x7f0000000540)=""/91, 0x5b}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9200}, 0x4}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)=""/4099, 0x1003}, {&(0x7f0000001800)=""/4063, 0xfdf}, {&(0x7f00000001c0)=""/105, 0x69}], 0x3}, 0x8}], 0x3, 0x2, 0x0) 2.674316296s ago: executing program 6 (id=575): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010000108000000000000030000000000", @ANYRES32=0x0, @ANYBLOB="000000000420040008002900787d040008001b000000000008002800c27f7a"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) 2.418282246s ago: executing program 6 (id=579): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x2022, 0x0, 0xffffffffffffffff, 0x10001}, 0x50) (fail_nth: 61) 2.277924874s ago: executing program 6 (id=581): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240000d0}, 0x8000) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x51) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b0000000000000000000800001008000300040001000c0001800600000088480000"], 0x28}}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1a, 0x0, &(0x7f0000000340)) recvmmsg$unix(r7, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f000000e280)=""/4096, 0x1000}, {&(0x7f0000000680)=""/141, 0x8d}], 0x3, &(0x7f0000000900)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, &(0x7f000000f480)=[{&(0x7f000000f280)=""/178, 0xb2}, {&(0x7f000000f340)=""/162, 0xa2}, {&(0x7f000000f400)=""/72, 0x48}], 0x3, &(0x7f000000f4c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f680)=""/238, 0xee}, {&(0x7f000000f780)=""/4096, 0x1000}, {&(0x7f0000010780)=""/121, 0x79}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000011840)=""/194, 0xc2}, {&(0x7f0000011940)=""/4096, 0x1000}, {&(0x7f0000012940)=""/176, 0xb0}], 0x9, &(0x7f0000012ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x60, &(0x7f0000012c40)={0x0, 0x3938700}) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r4, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 1.855865951s ago: executing program 7 (id=584): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000150000000200000004000000000000ce", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=0x0, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x100}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r12, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)=ANY=[@ANYBLOB="2c000000020b01020000590000000000000200000a080002400000000308000340000000000800029c619ad2"], 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4040010) close(r9) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f00000000c0)=r15, 0x4) (async) sendmsg$unix(r14, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000000)={'bond0\x00', @ifru_flags=0x2000}) (rerun: 64) 1.697134062s ago: executing program 5 (id=586): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0xf]}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 1.553450669s ago: executing program 0 (id=588): syz_emit_ethernet(0x7e, &(0x7f00000006c0)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x3c, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x2}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x2, 0x4, "91ec"}]}]}}}}}}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x160, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000140)={0x4, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8085}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x1bc, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0x1, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x4d5}, 0x2, @in6=@empty, 0x34ff, 0x0, 0x0, 0x8, 0x80, 0x7, 0x400}, {{@in=@empty, 0x4d2, 0xff}, 0xa, @in=@broadcast, 0x3500, 0x3, 0x0, 0x7, 0x8, 0x7, 0x4ae800}]}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYRESOCT=r4], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 1.504991834s ago: executing program 7 (id=589): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000071800110101000000000000000a00800000020008"], 0x20}, 0x1, 0x0, 0x0, 0x44845}, 0x4) 1.504787551s ago: executing program 5 (id=590): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000004c0), &(0x7f0000000500)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x7000000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x90) 1.258441513s ago: executing program 5 (id=592): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 1.251570746s ago: executing program 7 (id=593): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040884}, 0x0) socketpair(0x28, 0x2, 0x233f, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="32e9e2ea96a40c15d21508205a6760df4accede349e80480934cd518721af6b4396a53fee791c327f124133cbdcab939e100afa75a27d70e0ecb151074d25fd5be4684bb42a87055fa3a2afaddc0df9e62b738d48530ec97b52257a6b643aee689a0630dc10b547dcf9f469f", @ANYRES64=0x0], 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) r2 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x61d8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088a800000800", @ANYRES32=r6], 0x8c}, 0x1, 0xba01}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r4}, 0x38) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r5, &(0x7f0000000dc0)=[{&(0x7f00000002c0)="faac28e341e14ab999ed737540fed522e326b5c405dd355cbc77e7a466537ed695cd5b6a26c30206d089b9a15846b69696c7fbf7d0139ef08d1ae0ddbd848ffa2de5bae23346a1d0ecfe03b251e52e47824b2067fc3d2fcc7b405bd0c78e2fc37653e8f8eca8aebb6649f71929befadca2f43610f071c216c20e7eeee9cffd8f9fed4cd3bb36c8e0e4a17166825a2ce0ae04e6af14f972c130d4", 0x9a}, {&(0x7f0000000700)="8ab2ecbb0f47502b0cfaaa3218eb4058da1800022c2011fcca57b42976e6b4c05a77008fd7464657c14de39553f21df59ad09fd8cc0f6e195a6e2b34cde60fe0c73657c30ed5c6726360e541b7509ce4dd92e7510ad7409280676aa986121982621cd5d860602efdcc15ed03f042fddea70d72c439e74498266101eec0f6e7dd59f4a5a1dff52cdf1e29a0d7a04bd85434cfb533335f0462", 0x98}, {&(0x7f00000009c0)="87b9816be440d040fdcef40625d855bce6cc54f712801ead3944261fa6b3f7938ebcd5dea8f05968205bb6a457ec71195155134a5bcafc15a2082b1ea507b7e90e4b0b6dd1ebaa6734d5a02320a855c28f8acfb6fc047ea92638608abdbd0bd76ef417c18a81764d86c925c3f7a833c3e0c72b93a79cd093f173b00af63bbfd15ee541a53de25dc4229eda6c645e6fdf8a2461c47812171fe312880f9563f415", 0xa0}, {&(0x7f0000000e80)="7da2ef593984be7621724899fda921a1716bd7561f74c70816c256fc59bcfb2afe1a7dfcfc61b2d0036f0147283d1e267ff5f0c6d19188fa924ee4ae5b1003c88fb9d46d13c8781c1e1fbc95ba1677177705defc47a807bc7c1d2ca4c3292cb7e60f", 0x62}, {&(0x7f0000000240)="cced52c7066a39d9f0c0908a16bcc7fc869475c1", 0x14}, {&(0x7f0000000b00)="c40c5e12ba211b185a61276801f06c9080023216dd7d133d8fd620bc818c482d9039f97a9edaa191e3fd7351e2a80e8772c7ed63b48782412e30cd7136bf98e2dd6f688d3a8bfeab8fe11b93d05f8ef7d572a768a6b9c8f999a63122012674af033b97f222d66046e6da6b9db3a5f7251b56fe6b6338bfffb959afcbdd277531ed08134a9376a1b60c30e544455e44d9b6be31e5d7ced0083e6a6d8a1ae509cad1977539fc1ec4122fbb183322bc012e71a83b82d833", 0xb6}, {&(0x7f0000000540)="82c4cdcdc6b6709e23d2e7da6cf155a9d7cf52549cc744af0220be2a8a7445e0d7e636788ee8c987", 0x28}, {&(0x7f0000000bc0)="3f3b35bf557ece2ee08a026d5c14c6109479f6267beb0d7fd22f7114bfec0a43f3a7ec94275cb49141d7f2a3a606093dbac893df5241a6bf8e63f15b5177e90f70d223b51c840200daaa2d1fcedc124eaf6d8fd5c54202d5a0bb499540f333d2a484c87f0f2336f3498b7b7faf31667a0e593837efb500c147c8f21db4ab514f590021e9554f4a880e723fc5041786f3bd1eeb034e11f811a46a8e057126c3d0560e9ff4d5597ccf7332ea04bcbdbe0f4e1220c8ef6dbaa3015136b2cdce7fbc664e1c57d1632e64324ea9e991fc2b1cd6cdb1b585dfc60e6fe28d6013b24d796535f7a09d03ee292b3ca54094ffe84bf9f18bd46731e7", 0xf7}, {&(0x7f0000000cc0)="b1140f127fc3ad83c4f80356f8597e128b91eb296ef2cf965ba9865e949085dce3bf688612e08d917657d94cee7c801a57ae33e66cff34b9787d1d21ef0375f03202a66e95c31127", 0x48}, {&(0x7f0000000d40)="6e60c67c241d08d268eeefee6c19cbbcd8012c1d064ff149fb93f95d84dea4a1b295c9dc0af523850184bde8604bc505a498f8f7ea413f8b0d43219b29729299171e02b2b358731fe6c12ecd6d3db1bf760bcc1557a0d0", 0x57}], 0xa) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0xfe464000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) close(r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000000080)='syz0\x00', 0x1ff) 1.14842077s ago: executing program 6 (id=594): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@bridge_dellink={0x20, 0x11, 0x5}, 0x20}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r2, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x7f, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0xffff79c4, 0x80000000, 0xfffffffa, 0xffffffff, 0x800, 0xf20d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x401, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x8, 0x4, 0x9, 0x200, 0x3ff, 0x8000, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0x6c, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x0, 0xf9, 0x8, 0x401, 0xffffffff, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x1d58, 0x401, 0x3, 0x8002, 0x8, 0x36, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x9c06, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xd, 0x3, 0x9, 0x49, 0x80000000, 0x4d35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000041, 0xa, 0x8, 0x9, 0x1, 0xccf1793, 0x2c800000, 0x5d, 0x1, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0x8, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0x9, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xffffffff, 0x5, 0xe8, 0x6, 0x8, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x7fffffff, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0xb, 0x0, 0x7, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x2, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0xffffffd8, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x5, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x7, 0x3, 0x8, 0x8, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x4, 0x7f, 0x0, {0x6, 0x0, 0x6, 0x7ff, 0x6e6, 0xd74}, {0x8, 0x0, 0xffff, 0x8, 0x7f, 0x7fff}, 0x0, 0x8000, 0xbab2}}]}]}}]}, 0x87c}}, 0x4000) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x7c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) ioctl$FICLONE(r6, 0x40049409, r5) shutdown(r7, 0x1) recvmmsg(r7, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) 1.046421099s ago: executing program 0 (id=595): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2effc30010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x400c084) 998.172327ms ago: executing program 5 (id=596): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) pipe(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x9}, 0x50) 802.295176ms ago: executing program 0 (id=597): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000002000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 764.066766ms ago: executing program 5 (id=598): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000080)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/76, 0x4c}, {&(0x7f0000000200)=""/47, 0x2f}, {&(0x7f00000002c0)=""/167, 0xa7}], 0x4, &(0x7f0000000380)=""/255, 0xff}, 0x10001) (async) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="5b34307b5d5ab4d0da618c917d17d72617b51de3b058db3741c1ad288ab3d41b", 0x20}], 0x1}, 0x40000000) (async) recvmmsg$unix(r2, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)=""/31, 0x1f}], 0x1}}], 0x1, 0x200, 0x0) 761.057029ms ago: executing program 3 (id=599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0xf5, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 642.258951ms ago: executing program 0 (id=600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}, 0x1, 0x0, 0xf5ffffffffffffff, 0x4}, 0x80) 608.171591ms ago: executing program 3 (id=601): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x4}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a40)=""/181, 0xb5}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000001e00)=""/4130, 0x1022}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000001040)=""/243, 0xf3}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f00000000c0)=""/38, 0x26}], 0xa}, 0x80000002}, {{0x0, 0x0, 0x0}, 0x6130e429}], 0x4, 0x0, 0x0) 564.524546ms ago: executing program 0 (id=602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x174}}, 0x0) 422.296447ms ago: executing program 3 (id=603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value=0x18}, 0x50) 409.088358ms ago: executing program 0 (id=604): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240000d0}, 0x8000) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x51) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b0000000000000000000800001008000300040001000c0001800600000088480000"], 0x28}}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1a, 0x0, &(0x7f0000000340)) recvmmsg$unix(r7, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{0x0}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f000000e280)=""/4096, 0x1000}, {&(0x7f0000000680)=""/141, 0x8d}], 0x4, &(0x7f0000000900)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000800), 0x6e, &(0x7f000000f480)=[{&(0x7f000000f280)=""/178, 0xb2}, {&(0x7f000000f340)=""/162, 0xa2}, {&(0x7f000000f400)=""/72, 0x48}], 0x3, &(0x7f000000f4c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f680)=""/238, 0xee}, {&(0x7f000000f780)=""/4096, 0x1000}, {&(0x7f0000010780)=""/121, 0x79}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000011840)=""/194, 0xc2}, {&(0x7f0000011940)=""/4096, 0x1000}, {&(0x7f0000012940)=""/176, 0xb0}], 0x9, &(0x7f0000012ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x60, &(0x7f0000012c40)={0x0, 0x3938700}) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r4, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 329.453756ms ago: executing program 3 (id=605): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r0], 0x24}, 0x1, 0x0, 0xfffffff0}, 0x4000000) 114.945708ms ago: executing program 3 (id=606): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 113.972332ms ago: executing program 6 (id=607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10022, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x2400c144}, 0x2000) close(r0) (fail_nth: 1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x40c0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 53.992984ms ago: executing program 5 (id=608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/97], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@empty, 0x4e23, 0x4, 0x4e21, 0x7, 0xa, 0x60, 0x20, 0x87, 0x0, r5}, {0x80000000, 0x7, 0xfffffffffffffffb, 0x7, 0x9, 0x7, 0x8, 0xb}, {0x0, 0x100, 0x100, 0x6a}, 0x400, 0x6e6bb9, 0x1, 0x0, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3500, 0xbf0a59c5fd157c33, 0x1, 0x5, 0xff80, 0x8, 0x9}}, 0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000880)={0x0}, &(0x7f00000008c0)=0xc) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000012c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r11}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x30}], 0x1}, 0x0) sendmsg$netlink(r1, &(0x7f0000000980)={&(0x7f00000002c0)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x168}, {&(0x7f0000000480)={0x1a8, 0x34, 0x4, 0x70bd29, 0x25dfdbff, "", [@generic="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", @nested={0x8, 0xa9, 0x0, 0x1, [@generic, @nested={0x4, 0x13}]}, @generic="573ea70606a2201a5bcfd5c0144468a1c0459193c1602d28a70a8392ac204bac4743a8d7070d76f2f98da676bf4f9a5d95d10dd230db320bc2b756a5d9f41504014afca1dcbd02e7e75625b5803ddb3b6c644e0eabfb9d066ab81201fbdecc80e3c9f19468a801447d8e83284d558a83a7d59e9318d6d2a323307560191679a2afbddd5237195f41d80b33bc49065afcd5f1a9"]}, 0x1a8}], 0x2, &(0x7f0000000900)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r11}}}], 0x80, 0x20000010}, 0x810) r12 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$packet_int(r13, 0x107, 0xc, 0x0, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000009c0)="f31d5fac5eb28809a8a335872a2d5ad598b6b49f6078d1ab5e6e0504eb4b253097c6db0b99d1c4c74ba6b4e1ba74833fcac4ed54f0212977e3ebb9c038e7aebb918b90e25b5ff0db77edec3deb0b1042fccfafe5a476867d9e45547b2afa120ffc73e59a763fed71fadcc3433bdb2b969c9ec163278602a24f75aa51031965c3d0b32a5e70b407048b4a7f05ec086d41d36eebb1e5322765cc5e7386eea06b0e8613c3d3df2e8051b797310a9f84ff0fbfdf5233e306a1ad8adeca874d28a33d997020a9", 0xc4, 0x4088081, &(0x7f0000000ac0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) r17 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="59cf6d08929b00000000080000001400018006000100458986be080005"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r14, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r17, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x12}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x41) write$6lowpan_control(r12, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 0s ago: executing program 3 (id=609): r0 = socket(0x2b, 0x80801, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pimreg\x00', &(0x7f00000006c0)=@ethtool_perm_addr={0x20, 0xb3, "93a91e3b13d8f5abe5eacd2eec005b12bf34222ef8de59e54f0c90e7effa14c331009a6b20eed5574d68d32907e2745c6da0e8c20c93e40b2bdb969b8b1557f1dc9e3923b0bb4800f0bca35e4a172dd63eeb2f944e8976f19d9c1fb3377b8d08ffb49ae4667bd140cf85ea3ef733021ad944304d154f8c34852a039077c11ae4d8d26de9e2e142a84fe27c66400310201505d0d4701bf94174b081760351ed6a72b1371f9d98b439b8bd91243d70d16305075f"}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000b00)={0x388, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_KEY={0x0, 0x2, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_EXPRESSIONS={0xf8, 0x12, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}, {0x54, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x20}, @NFTA_NG_OFFSET={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @osf={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS, @NFTA_OSF_FLAGS, @NFTA_OSF_DREG={0x0, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_TTL={0x0, 0x2, 0xf9}, @NFTA_OSF_FLAGS, @NFTA_OSF_FLAGS, @NFTA_OSF_DREG={0x0, 0x1, 0x1, 0x0, 0xc}, @NFTA_OSF_TTL={0x0, 0x2, 0x8}, @NFTA_OSF_FLAGS, @NFTA_OSF_DREG={0x0, 0x1, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DESC={0x218}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x388}}, 0x24044800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.time\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x1, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_NAT={0x18, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) kernel console output (not intermixed with test programs): formance. Setting the MTU to 1560 would solve the problem. [ 87.736111][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.749075][ T5871] team0: Port device team_slave_1 added [ 87.774605][ T5877] team0: Port device team_slave_1 added [ 87.801979][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.808949][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.834940][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.895907][ T5863] hsr_slave_0: entered promiscuous mode [ 87.902403][ T5863] hsr_slave_1: entered promiscuous mode [ 87.918276][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.925349][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.951977][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.979569][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.986916][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.013176][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.025840][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.033086][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.059318][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.071822][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.078787][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.105517][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.243597][ T5872] hsr_slave_0: entered promiscuous mode [ 88.249997][ T5872] hsr_slave_1: entered promiscuous mode [ 88.256924][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 88.263429][ T5872] Cannot create hsr debugfs directory [ 88.275294][ T5867] hsr_slave_0: entered promiscuous mode [ 88.281902][ T5867] hsr_slave_1: entered promiscuous mode [ 88.288037][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 88.293961][ T5867] Cannot create hsr debugfs directory [ 88.387371][ T5871] hsr_slave_0: entered promiscuous mode [ 88.394430][ T5871] hsr_slave_1: entered promiscuous mode [ 88.400846][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 88.406600][ T5871] Cannot create hsr debugfs directory [ 88.439560][ T5877] hsr_slave_0: entered promiscuous mode [ 88.446098][ T5877] hsr_slave_1: entered promiscuous mode [ 88.452767][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 88.458520][ T5877] Cannot create hsr debugfs directory [ 89.023814][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.038750][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.068007][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.087597][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.149304][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.169138][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.182756][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.190768][ T5879] Bluetooth: hci0: command tx timeout [ 89.198456][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.271556][ T5879] Bluetooth: hci1: command tx timeout [ 89.293964][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.308224][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.321493][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.342365][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.451197][ T5879] Bluetooth: hci4: command tx timeout [ 89.503578][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.514558][ T5879] Bluetooth: hci3: command tx timeout [ 89.520011][ T5879] Bluetooth: hci2: command tx timeout [ 89.539530][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.594381][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.608636][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.635211][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.684668][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.726565][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.733829][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.752020][ T5877] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.766579][ T5877] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.778553][ T5877] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.807689][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.814875][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.829706][ T5877] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.874843][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.926047][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.963301][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.999036][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.006211][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.048871][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.056011][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.088449][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.144003][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.151218][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.213404][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.220607][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.333807][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.484020][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.563050][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.574309][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.581514][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.614693][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.621920][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.701459][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.721460][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.815245][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.822469][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.841878][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.849578][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.977962][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.006700][ T5863] veth0_vlan: entered promiscuous mode [ 91.047119][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.096056][ T5863] veth1_vlan: entered promiscuous mode [ 91.264410][ T5872] veth0_vlan: entered promiscuous mode [ 91.277513][ T5879] Bluetooth: hci0: command tx timeout [ 91.322328][ T5863] veth0_macvtap: entered promiscuous mode [ 91.335512][ T5872] veth1_vlan: entered promiscuous mode [ 91.348447][ T5867] veth0_vlan: entered promiscuous mode [ 91.360577][ T5879] Bluetooth: hci1: command tx timeout [ 91.383805][ T5863] veth1_macvtap: entered promiscuous mode [ 91.410662][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.425885][ T5867] veth1_vlan: entered promiscuous mode [ 91.453001][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.469282][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.512287][ T5879] Bluetooth: hci4: command tx timeout [ 91.562351][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.572815][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.583096][ T5872] veth0_macvtap: entered promiscuous mode [ 91.590112][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.600036][ T5879] Bluetooth: hci2: command tx timeout [ 91.605583][ T51] Bluetooth: hci3: command tx timeout [ 91.628661][ T5867] veth0_macvtap: entered promiscuous mode [ 91.636213][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.655642][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.669102][ T5867] veth1_macvtap: entered promiscuous mode [ 91.687676][ T5872] veth1_macvtap: entered promiscuous mode [ 91.785483][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.847289][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.858511][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.886501][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.899443][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.921765][ T5871] veth0_vlan: entered promiscuous mode [ 91.929572][ T24] cfg80211: failed to load regulatory.db [ 91.942751][ T3568] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.954244][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.973444][ T3568] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.029532][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.065357][ T3589] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.074706][ T3589] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.084815][ T5871] veth1_vlan: entered promiscuous mode [ 92.121390][ T3589] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.136496][ T3589] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.147315][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.170452][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.180724][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.337357][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.355670][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.381215][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.415119][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.432772][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.515903][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.528857][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.545171][ T5871] veth0_macvtap: entered promiscuous mode [ 92.582348][ T5871] veth1_macvtap: entered promiscuous mode [ 92.595264][ T5877] veth0_vlan: entered promiscuous mode [ 92.626597][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.644514][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.668709][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.693444][ T5877] veth1_vlan: entered promiscuous mode [ 92.732657][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.819180][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.872828][ T78] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.883652][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.913968][ T5877] veth0_macvtap: entered promiscuous mode [ 92.943500][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.966285][ T5987] FAULT_INJECTION: forcing a failure. [ 92.966285][ T5987] name failslab, interval 1, probability 0, space 0, times 1 [ 93.030952][ T5987] CPU: 1 UID: 0 PID: 5987 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 93.030980][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.030991][ T5987] Call Trace: [ 93.030999][ T5987] [ 93.031007][ T5987] dump_stack_lvl+0x189/0x250 [ 93.031037][ T5987] ? __pfx____ratelimit+0x10/0x10 [ 93.031058][ T5987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.031081][ T5987] ? __pfx__printk+0x10/0x10 [ 93.031115][ T5987] ? __pfx___might_resched+0x10/0x10 [ 93.031133][ T5987] ? fs_reclaim_acquire+0x7d/0x100 [ 93.031156][ T5987] should_fail_ex+0x414/0x560 [ 93.031188][ T5987] should_failslab+0xa8/0x100 [ 93.031217][ T5987] __kmalloc_cache_noprof+0x70/0x3d0 [ 93.031242][ T5987] ? nfnetlink_rcv+0xeff/0x2520 [ 93.031275][ T5987] nfnetlink_rcv+0xeff/0x2520 [ 93.031338][ T5987] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 93.031386][ T5987] ? ref_tracker_free+0x63a/0x7d0 [ 93.031449][ T5987] ? __netlink_deliver_tap+0x807/0x850 [ 93.031469][ T5987] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.031511][ T5987] netlink_unicast+0x82f/0x9e0 [ 93.031551][ T5987] ? __pfx_netlink_unicast+0x10/0x10 [ 93.031581][ T5987] ? netlink_sendmsg+0x642/0xb30 [ 93.031598][ T5987] ? skb_put+0x11b/0x210 [ 93.031633][ T5987] netlink_sendmsg+0x805/0xb30 [ 93.031665][ T5987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.031689][ T5987] ? aa_sock_msg_perm+0xf1/0x1d0 [ 93.031710][ T5987] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 93.031730][ T5987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.031751][ T5987] __sock_sendmsg+0x21c/0x270 [ 93.031783][ T5987] ____sys_sendmsg+0x505/0x830 [ 93.031813][ T5987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.031847][ T5987] ? import_iovec+0x74/0xa0 [ 93.031870][ T5987] ___sys_sendmsg+0x21f/0x2a0 [ 93.031896][ T5987] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.031965][ T5987] ? __fget_files+0x2a/0x420 [ 93.031981][ T5987] ? __fget_files+0x3a0/0x420 [ 93.032011][ T5987] __x64_sys_sendmsg+0x19b/0x260 [ 93.032038][ T5987] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 93.032073][ T5987] ? __pfx_ksys_write+0x10/0x10 [ 93.032095][ T5987] ? rcu_is_watching+0x15/0xb0 [ 93.032120][ T5987] ? do_syscall_64+0xbe/0x3b0 [ 93.032145][ T5987] do_syscall_64+0xfa/0x3b0 [ 93.032164][ T5987] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.032183][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.032202][ T5987] ? clear_bhb_loop+0x60/0xb0 [ 93.032226][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.032243][ T5987] RIP: 0033:0x7ff22438eba9 [ 93.032260][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.032275][ T5987] RSP: 002b:00007ff22520b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.032297][ T5987] RAX: ffffffffffffffda RBX: 00007ff2245d5fa0 RCX: 00007ff22438eba9 [ 93.032311][ T5987] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 93.032322][ T5987] RBP: 00007ff22520b090 R08: 0000000000000000 R09: 0000000000000000 [ 93.032333][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.032344][ T5987] R13: 00007ff2245d6038 R14: 00007ff2245d5fa0 R15: 00007ffdd79f8fb8 [ 93.032376][ T5987] [ 93.358774][ T51] Bluetooth: hci0: command tx timeout [ 93.360919][ T5992] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.430883][ T51] Bluetooth: hci1: command tx timeout [ 93.591950][ T51] Bluetooth: hci4: command tx timeout [ 93.671596][ T51] Bluetooth: hci3: command tx timeout [ 93.671605][ T5879] Bluetooth: hci2: command tx timeout [ 93.676492][ T5999] netlink: 'syz.3.9': attribute type 13 has an invalid length. [ 95.248754][ T12] bridge_slave_1: left allmulticast mode [ 95.274143][ T12] bridge_slave_1: left promiscuous mode [ 95.312906][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.473086][ T12] bridge_slave_0: left allmulticast mode [ 95.478781][ T12] bridge_slave_0: left promiscuous mode [ 95.500078][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.513496][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.524339][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.532318][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.543420][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.553279][ T6023] IPVS: length: 209 != 24 [ 95.559045][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.569494][ T6024] IPVS: length: 209 != 24 [ 95.614068][ T6024] netlink: 'syz.3.17': attribute type 1 has an invalid length. [ 95.647680][ T6023] netlink: 'syz.3.17': attribute type 1 has an invalid length. [ 95.720611][ T6026] netlink: 'syz.3.17': attribute type 1 has an invalid length. [ 95.728215][ T6026] netlink: 'syz.3.17': attribute type 2 has an invalid length. [ 95.774206][ T6024] netlink: 'syz.3.17': attribute type 2 has an invalid length. [ 95.810457][ T6023] netlink: 'syz.3.17': attribute type 2 has an invalid length. [ 95.936755][ T6032] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 95.946318][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.967042][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.984481][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.014360][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.028724][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.127326][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.137086][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.147992][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.161642][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.169928][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.263574][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.274356][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.284591][ T12] bond0 (unregistering): Released all slaves [ 96.318642][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.377428][ T6032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.421887][ T6032] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 96.573451][ T6041] netlink: 'syz.0.22': attribute type 1 has an invalid length. [ 96.583628][ T12] hsr_slave_0: left promiscuous mode [ 96.591533][ T12] hsr_slave_1: left promiscuous mode [ 96.597985][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.607501][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.656428][ T12] veth0_macvtap: left promiscuous mode [ 96.676410][ T12] veth1_vlan: left promiscuous mode [ 96.691132][ T12] veth0_vlan: left promiscuous mode [ 97.377548][ T12] team0 (unregistering): Port device team_slave_1 removed [ 97.414354][ T12] team0 (unregistering): Port device team_slave_0 removed [ 97.592434][ T5879] Bluetooth: hci2: command tx timeout [ 97.708229][ T6044] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 97.854795][ T6060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23'. [ 98.074726][ T5879] Bluetooth: hci3: command tx timeout [ 98.137568][ T6062] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.232194][ T5879] Bluetooth: hci4: command tx timeout [ 98.280693][ T6062] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.468254][ T6062] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.644917][ T6062] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.070707][ T6094] FAULT_INJECTION: forcing a failure. [ 99.070707][ T6094] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.083848][ T6094] CPU: 0 UID: 0 PID: 6094 Comm: syz.0.28 Not tainted syzkaller #0 PREEMPT(full) [ 99.083871][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.083881][ T6094] Call Trace: [ 99.083889][ T6094] [ 99.083897][ T6094] dump_stack_lvl+0x189/0x250 [ 99.083925][ T6094] ? __pfx____ratelimit+0x10/0x10 [ 99.083945][ T6094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.083967][ T6094] ? __pfx__printk+0x10/0x10 [ 99.083994][ T6094] ? exc_page_fault+0x9f/0xf0 [ 99.084024][ T6094] should_fail_ex+0x414/0x560 [ 99.084056][ T6094] strncpy_from_user+0x36/0x290 [ 99.084083][ T6094] strncpy_from_user_nofault+0x72/0x150 [ 99.084110][ T6094] bpf_probe_read_user_str+0x2a/0x70 [ 99.084129][ T6094] ? bpf_test_run+0x197/0x7b0 [ 99.084147][ T6094] bpf_prog_06f22831d6c68d16+0x46/0x4c [ 99.084166][ T6094] bpf_test_run+0x2d7/0x7b0 [ 99.084184][ T6094] ? 0xffffffffa0205480 [ 99.084224][ T6094] ? __pfx_bpf_test_run+0x10/0x10 [ 99.084268][ T6094] ? _copy_from_user+0x94/0xb0 [ 99.084290][ T6094] ? bpf_test_init+0x133/0x170 [ 99.084306][ T6094] ? xdp_convert_md_to_buff+0x5b/0x330 [ 99.084329][ T6094] bpf_prog_test_run_xdp+0x6e8/0x1000 [ 99.084367][ T6094] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.084393][ T6094] ? __fget_files+0x2a/0x420 [ 99.084416][ T6094] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.084438][ T6094] bpf_prog_test_run+0x2c7/0x340 [ 99.084469][ T6094] __sys_bpf+0x581/0x870 [ 99.084496][ T6094] ? __pfx___sys_bpf+0x10/0x10 [ 99.084535][ T6094] ? ksys_write+0x22a/0x250 [ 99.084563][ T6094] ? __pfx_ksys_write+0x10/0x10 [ 99.084584][ T6094] ? rcu_is_watching+0x15/0xb0 [ 99.084610][ T6094] __x64_sys_bpf+0x7c/0x90 [ 99.084634][ T6094] do_syscall_64+0xfa/0x3b0 [ 99.084653][ T6094] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.084672][ T6094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.084689][ T6094] ? clear_bhb_loop+0x60/0xb0 [ 99.084712][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.084729][ T6094] RIP: 0033:0x7f760ed8eba9 [ 99.084746][ T6094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.084760][ T6094] RSP: 002b:00007f760fc9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.084781][ T6094] RAX: ffffffffffffffda RBX: 00007f760efd5fa0 RCX: 00007f760ed8eba9 [ 99.084795][ T6094] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 99.084806][ T6094] RBP: 00007f760fc9a090 R08: 0000000000000000 R09: 0000000000000000 [ 99.084817][ T6094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.084828][ T6094] R13: 00007f760efd6038 R14: 00007f760efd5fa0 R15: 00007fffb945e188 [ 99.084868][ T6094] [ 99.525949][ T6099] netlink: 36 bytes leftover after parsing attributes in process `syz.0.29'. [ 99.540088][ T6031] chnl_net:caif_netlink_parms(): no params data found [ 99.583358][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.664946][ T6102] FAULT_INJECTION: forcing a failure. [ 99.664946][ T6102] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 99.672337][ T5879] Bluetooth: hci2: command tx timeout [ 99.689429][ T6102] CPU: 1 UID: 0 PID: 6102 Comm: syz.0.30 Not tainted syzkaller #0 PREEMPT(full) [ 99.689453][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.689461][ T6102] Call Trace: [ 99.689468][ T6102] [ 99.689474][ T6102] dump_stack_lvl+0x189/0x250 [ 99.689497][ T6102] ? __pfx____ratelimit+0x10/0x10 [ 99.689513][ T6102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.689530][ T6102] ? __pfx__printk+0x10/0x10 [ 99.689552][ T6102] ? fs_reclaim_acquire+0x7d/0x100 [ 99.689573][ T6102] should_fail_ex+0x414/0x560 [ 99.689598][ T6102] prepare_alloc_pages+0x213/0x610 [ 99.689619][ T6102] __alloc_frozen_pages_noprof+0x123/0x370 [ 99.689637][ T6102] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 99.689668][ T6102] alloc_pages_bulk_noprof+0x560/0x710 [ 99.689689][ T6102] ? alloc_pages_noprof+0xbe/0x190 [ 99.689713][ T6102] kasan_populate_vmalloc+0xba/0x1a0 [ 99.689736][ T6102] alloc_vmap_area+0xd51/0x1490 [ 99.689769][ T6102] ? __pfx_alloc_vmap_area+0x10/0x10 [ 99.689787][ T6102] ? __kasan_kmalloc+0x93/0xb0 [ 99.689807][ T6102] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 99.689834][ T6102] ? __sys_bpf+0x60f/0x870 [ 99.689851][ T6102] ? __get_vm_area_node+0x13f/0x300 [ 99.689869][ T6102] ? sock_hash_alloc+0x266/0x4e0 [ 99.689887][ T6102] __get_vm_area_node+0x1f8/0x300 [ 99.689912][ T6102] __vmalloc_node_range_noprof+0x301/0x12f0 [ 99.689933][ T6102] ? sock_hash_alloc+0x266/0x4e0 [ 99.689974][ T6102] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 99.689994][ T6102] ? rcu_is_watching+0x15/0xb0 [ 99.690009][ T6102] ? trace_kmalloc+0x1f/0xd0 [ 99.690025][ T6102] ? __kmalloc_node_noprof+0x293/0x4e0 [ 99.690042][ T6102] ? bpf_map_area_alloc+0x64/0x180 [ 99.690065][ T6102] bpf_map_area_alloc+0x12d/0x180 [ 99.690085][ T6102] ? sock_hash_alloc+0x266/0x4e0 [ 99.690104][ T6102] sock_hash_alloc+0x266/0x4e0 [ 99.690125][ T6102] map_create+0xaa0/0x14d0 [ 99.690148][ T6102] ? security_bpf+0x7e/0x300 [ 99.690170][ T6102] __sys_bpf+0x60f/0x870 [ 99.690190][ T6102] ? __pfx___sys_bpf+0x10/0x10 [ 99.690220][ T6102] ? ksys_write+0x22a/0x250 [ 99.690240][ T6102] ? __pfx_ksys_write+0x10/0x10 [ 99.690277][ T6102] __x64_sys_bpf+0x7c/0x90 [ 99.690300][ T6102] do_syscall_64+0xfa/0x3b0 [ 99.690319][ T6102] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.690338][ T6102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.690356][ T6102] ? clear_bhb_loop+0x60/0xb0 [ 99.690379][ T6102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.690397][ T6102] RIP: 0033:0x7f760ed8eba9 [ 99.690414][ T6102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.690429][ T6102] RSP: 002b:00007f760fc9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.690450][ T6102] RAX: ffffffffffffffda RBX: 00007f760efd5fa0 RCX: 00007f760ed8eba9 [ 99.690463][ T6102] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 99.690474][ T6102] RBP: 00007f760fc9a090 R08: 0000000000000000 R09: 0000000000000000 [ 99.690485][ T6102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.690496][ T6102] R13: 00007f760efd6038 R14: 00007f760efd5fa0 R15: 00007fffb945e188 [ 99.690529][ T6102] [ 100.021700][ T1137] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.029966][ T1137] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.059728][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.135514][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.150526][ T5879] Bluetooth: hci3: command tx timeout [ 100.166207][ T6034] chnl_net:caif_netlink_parms(): no params data found [ 100.182213][ T1035] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.206522][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.248807][ T6021] chnl_net:caif_netlink_parms(): no params data found [ 100.310405][ T5879] Bluetooth: hci4: command tx timeout [ 100.345279][ T1035] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.411313][ T6114] syz.0.32 uses obsolete (PF_INET,SOCK_PACKET) [ 100.617734][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.643958][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.666525][ T6031] bridge_slave_0: entered allmulticast mode [ 100.698525][ T6031] bridge_slave_0: entered promiscuous mode [ 100.711669][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.718926][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.726640][ T6031] bridge_slave_1: entered allmulticast mode [ 100.736360][ T6031] bridge_slave_1: entered promiscuous mode [ 100.924888][ T6031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.954415][ T6031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.383817][ T6140] netlink: 56 bytes leftover after parsing attributes in process `syz.0.36'. [ 101.423803][ T6034] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.424733][ T6148] netlink: 2 bytes leftover after parsing attributes in process `syz.3.37'. [ 101.443869][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.461306][ T6034] bridge_slave_0: entered allmulticast mode [ 101.473772][ T6034] bridge_slave_0: entered promiscuous mode [ 101.487361][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.494855][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.513038][ T6034] bridge_slave_1: entered allmulticast mode [ 101.522631][ T6034] bridge_slave_1: entered promiscuous mode [ 101.705230][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.713635][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.723426][ T6021] bridge_slave_0: entered allmulticast mode [ 101.734728][ T6021] bridge_slave_0: entered promiscuous mode [ 101.748435][ T6031] team0: Port device team_slave_0 added [ 101.756221][ T5879] Bluetooth: hci2: command tx timeout [ 101.768326][ T6031] team0: Port device team_slave_1 added [ 101.779956][ T6034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.797161][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.804699][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.813824][ T6021] bridge_slave_1: entered allmulticast mode [ 101.821488][ T6021] bridge_slave_1: entered promiscuous mode [ 101.943358][ T6157] netlink: 156 bytes leftover after parsing attributes in process `syz.3.38'. [ 101.985354][ T6034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.043972][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.053970][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.082323][ T6031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.097240][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.104624][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.130818][ T6031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.182636][ T6021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.195883][ T6021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.218815][ T6159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.230856][ T5879] Bluetooth: hci3: command tx timeout [ 102.257099][ T6034] team0: Port device team_slave_0 added [ 102.338654][ T6034] team0: Port device team_slave_1 added [ 102.380213][ T6034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.387359][ T6034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.413850][ T5879] Bluetooth: hci4: command tx timeout [ 102.413895][ T6034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.435453][ T6021] team0: Port device team_slave_0 added [ 102.486069][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.537197][ T6034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.544259][ T6034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.571923][ T6034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.586747][ T6021] team0: Port device team_slave_1 added [ 102.611934][ T6031] hsr_slave_0: entered promiscuous mode [ 102.618387][ T6031] hsr_slave_1: entered promiscuous mode [ 102.625309][ T6031] debugfs: 'hsr0' already exists in 'hsr' [ 102.631282][ T6031] Cannot create hsr debugfs directory [ 102.654747][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.767947][ T6021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.775236][ T6021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.806044][ T6021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.854060][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.918619][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.938312][ T6021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.946239][ T6021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.974096][ T6021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.067301][ T6034] hsr_slave_0: entered promiscuous mode [ 103.073797][ T6034] hsr_slave_1: entered promiscuous mode [ 103.079888][ T6034] debugfs: 'hsr0' already exists in 'hsr' [ 103.087371][ T6034] Cannot create hsr debugfs directory [ 103.119358][ T6021] hsr_slave_0: entered promiscuous mode [ 103.127672][ T6021] hsr_slave_1: entered promiscuous mode [ 103.134456][ T6021] debugfs: 'hsr0' already exists in 'hsr' [ 103.141619][ T6021] Cannot create hsr debugfs directory [ 103.613578][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 103.644584][ T6165] IPv6: Can't replace route, no match found [ 103.832121][ T5879] Bluetooth: hci2: command tx timeout [ 103.848479][ T12] bridge_slave_1: left allmulticast mode [ 103.856875][ T12] bridge_slave_1: left promiscuous mode [ 103.861731][ T6169] nbd0: detected capacity change from 0 to 63 [ 103.866987][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.895856][ T12] bridge_slave_0: left allmulticast mode [ 103.903076][ T12] bridge_slave_0: left promiscuous mode [ 103.912066][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.936704][ T12] bridge_slave_1: left allmulticast mode [ 103.961133][ T12] bridge_slave_1: left promiscuous mode [ 103.981214][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.011336][ T12] bridge_slave_0: left allmulticast mode [ 104.024087][ T12] bridge_slave_0: left promiscuous mode [ 104.031726][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.083732][ T6180] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.310936][ T5879] Bluetooth: hci3: command tx timeout [ 104.470753][ T5879] Bluetooth: hci4: command tx timeout [ 104.504966][ T51] block nbd0: Receive control failed (result -104) [ 104.764095][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.776889][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.795897][ T12] bond0 (unregistering): Released all slaves [ 105.056938][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.067793][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.078552][ T12] bond0 (unregistering): Released all slaves [ 105.126360][ T6180] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 105.266647][ T6031] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 105.309667][ T6191] netlink: 'syz.3.43': attribute type 4 has an invalid length. [ 105.317249][ T6031] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 105.333186][ T6031] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 105.419062][ T6031] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 105.840241][ T12] hsr_slave_0: left promiscuous mode [ 105.852085][ T12] hsr_slave_1: left promiscuous mode [ 105.865530][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.876248][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.897097][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.907170][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.969369][ T12] hsr_slave_0: left promiscuous mode [ 105.978080][ T12] hsr_slave_1: left promiscuous mode [ 105.995328][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.010926][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.026342][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.058594][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.119837][ T6217] FAULT_INJECTION: forcing a failure. [ 106.119837][ T6217] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.129082][ T12] veth1_macvtap: left promiscuous mode [ 106.144844][ T12] veth0_macvtap: left promiscuous mode [ 106.147159][ T6217] CPU: 0 UID: 0 PID: 6217 Comm: syz.3.46 Not tainted syzkaller #0 PREEMPT(full) [ 106.147180][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.147189][ T6217] Call Trace: [ 106.147196][ T6217] [ 106.147204][ T6217] dump_stack_lvl+0x189/0x250 [ 106.147228][ T6217] ? __pfx____ratelimit+0x10/0x10 [ 106.147247][ T6217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.147266][ T6217] ? __pfx__printk+0x10/0x10 [ 106.147290][ T6217] ? fs_reclaim_acquire+0x7d/0x100 [ 106.147314][ T6217] should_fail_ex+0x414/0x560 [ 106.147341][ T6217] prepare_alloc_pages+0x213/0x610 [ 106.147365][ T6217] __alloc_frozen_pages_noprof+0x123/0x370 [ 106.147386][ T6217] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 106.147421][ T6217] alloc_pages_bulk_noprof+0x560/0x710 [ 106.147453][ T6217] ? alloc_pages_noprof+0xbe/0x190 [ 106.147480][ T6217] kasan_populate_vmalloc+0xba/0x1a0 [ 106.147506][ T6217] alloc_vmap_area+0xd51/0x1490 [ 106.147545][ T6217] ? __pfx_alloc_vmap_area+0x10/0x10 [ 106.147565][ T6217] ? __kasan_kmalloc+0x93/0xb0 [ 106.147587][ T6217] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 106.147609][ T6217] ? __sys_bpf+0x60f/0x870 [ 106.147627][ T6217] ? __get_vm_area_node+0x13f/0x300 [ 106.147648][ T6217] ? sock_hash_alloc+0x266/0x4e0 [ 106.147669][ T6217] __get_vm_area_node+0x1f8/0x300 [ 106.147697][ T6217] __vmalloc_node_range_noprof+0x301/0x12f0 [ 106.147720][ T6217] ? sock_hash_alloc+0x266/0x4e0 [ 106.147767][ T6217] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.147789][ T6217] ? rcu_is_watching+0x15/0xb0 [ 106.147806][ T6217] ? trace_kmalloc+0x1f/0xd0 [ 106.147823][ T6217] ? __kmalloc_node_noprof+0x293/0x4e0 [ 106.147843][ T6217] ? bpf_map_area_alloc+0x64/0x180 [ 106.147869][ T6217] bpf_map_area_alloc+0x12d/0x180 [ 106.147891][ T6217] ? sock_hash_alloc+0x266/0x4e0 [ 106.147912][ T6217] sock_hash_alloc+0x266/0x4e0 [ 106.147937][ T6217] map_create+0xaa0/0x14d0 [ 106.147962][ T6217] ? security_bpf+0x7e/0x300 [ 106.147987][ T6217] __sys_bpf+0x60f/0x870 [ 106.148010][ T6217] ? __pfx___sys_bpf+0x10/0x10 [ 106.148044][ T6217] ? ksys_write+0x22a/0x250 [ 106.148068][ T6217] ? __pfx_ksys_write+0x10/0x10 [ 106.148086][ T6217] ? rcu_is_watching+0x15/0xb0 [ 106.148110][ T6217] __x64_sys_bpf+0x7c/0x90 [ 106.148130][ T6217] do_syscall_64+0xfa/0x3b0 [ 106.148148][ T6217] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.148165][ T6217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.148181][ T6217] ? clear_bhb_loop+0x60/0xb0 [ 106.148200][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.148216][ T6217] RIP: 0033:0x7ff22438eba9 [ 106.148231][ T6217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.148244][ T6217] RSP: 002b:00007ff22520b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.148263][ T6217] RAX: ffffffffffffffda RBX: 00007ff2245d5fa0 RCX: 00007ff22438eba9 [ 106.148275][ T6217] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 106.148285][ T6217] RBP: 00007ff22520b090 R08: 0000000000000000 R09: 0000000000000000 [ 106.148294][ T6217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.148304][ T6217] R13: 00007ff2245d6038 R14: 00007ff2245d5fa0 R15: 00007ffdd79f8fb8 [ 106.148332][ T6217] [ 106.274151][ T6222] netlink: 156 bytes leftover after parsing attributes in process `syz.3.47'. [ 106.320576][ T12] veth1_vlan: left promiscuous mode [ 106.510527][ T12] veth0_vlan: left promiscuous mode [ 106.518408][ T12] veth1_macvtap: left promiscuous mode [ 106.524052][ T12] veth0_macvtap: left promiscuous mode [ 106.530335][ T12] veth1_vlan: left promiscuous mode [ 106.535711][ T12] veth0_vlan: left promiscuous mode [ 107.055609][ T12] team0 (unregistering): Port device team_slave_1 removed [ 107.088470][ T12] team0 (unregistering): Port device team_slave_0 removed [ 107.637388][ T12] team0 (unregistering): Port device team_slave_1 removed [ 107.668410][ T12] team0 (unregistering): Port device team_slave_0 removed [ 107.983702][ T6222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.106258][ T6021] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.117215][ T6021] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.162744][ T6021] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.178854][ T6021] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.546648][ T6034] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 108.623073][ T6034] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 108.695685][ T6034] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 108.753092][ T6031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.816675][ T6034] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 108.876761][ T6244] FAULT_INJECTION: forcing a failure. [ 108.876761][ T6244] name failslab, interval 1, probability 0, space 0, times 0 [ 108.908378][ T6244] CPU: 1 UID: 0 PID: 6244 Comm: syz.0.49 Not tainted syzkaller #0 PREEMPT(full) [ 108.908406][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 108.908417][ T6244] Call Trace: [ 108.908425][ T6244] [ 108.908434][ T6244] dump_stack_lvl+0x189/0x250 [ 108.908462][ T6244] ? __pfx____ratelimit+0x10/0x10 [ 108.908484][ T6244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.908506][ T6244] ? __pfx__printk+0x10/0x10 [ 108.908546][ T6244] ? __pfx___might_resched+0x10/0x10 [ 108.908564][ T6244] ? fs_reclaim_acquire+0x7d/0x100 [ 108.908588][ T6244] should_fail_ex+0x414/0x560 [ 108.908620][ T6244] should_failslab+0xa8/0x100 [ 108.908650][ T6244] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 108.908676][ T6244] ? __request_module+0x2d1/0x5e0 [ 108.908711][ T6244] kstrdup+0x42/0x100 [ 108.908733][ T6244] __request_module+0x2d1/0x5e0 [ 108.908768][ T6244] ? __pfx___request_module+0x10/0x10 [ 108.908792][ T6244] ? __up_read+0x280/0x680 [ 108.908817][ T6244] ? __pfx___up_read+0x10/0x10 [ 108.908860][ T6244] crypto_alg_mod_lookup+0xeb/0x5f0 [ 108.908886][ T6244] ? crypto_find_alg+0x31/0xe0 [ 108.908913][ T6244] crypto_type_has_alg+0x28/0x60 [ 108.908939][ T6244] xfrm_aalg_get_byid+0x1ff/0x290 [ 108.908966][ T6244] pfkey_add+0xe72/0x2e00 [ 108.909012][ T6244] ? __pfx_pfkey_add+0x10/0x10 [ 108.909031][ T6244] ? kmem_cache_free+0x18f/0x400 [ 108.909072][ T6244] pfkey_sendmsg+0xbfb/0x1090 [ 108.909115][ T6244] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 108.909169][ T6244] ? aa_sock_msg_perm+0xf1/0x1d0 [ 108.909189][ T6244] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 108.909210][ T6244] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 108.909233][ T6244] __sock_sendmsg+0x21c/0x270 [ 108.909266][ T6244] ____sys_sendmsg+0x505/0x830 [ 108.909296][ T6244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.909331][ T6244] ? import_iovec+0x74/0xa0 [ 108.909359][ T6244] ___sys_sendmsg+0x21f/0x2a0 [ 108.909390][ T6244] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.909459][ T6244] ? __fget_files+0x2a/0x420 [ 108.909474][ T6244] ? __fget_files+0x3a0/0x420 [ 108.909505][ T6244] __x64_sys_sendmsg+0x19b/0x260 [ 108.909539][ T6244] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.909574][ T6244] ? __pfx_ksys_write+0x10/0x10 [ 108.909596][ T6244] ? rcu_is_watching+0x15/0xb0 [ 108.909622][ T6244] ? do_syscall_64+0xbe/0x3b0 [ 108.909649][ T6244] do_syscall_64+0xfa/0x3b0 [ 108.909667][ T6244] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.909687][ T6244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.909706][ T6244] ? clear_bhb_loop+0x60/0xb0 [ 108.909731][ T6244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.909748][ T6244] RIP: 0033:0x7f760ed8eba9 [ 108.909765][ T6244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.909780][ T6244] RSP: 002b:00007f760fc9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.909801][ T6244] RAX: ffffffffffffffda RBX: 00007f760efd5fa0 RCX: 00007f760ed8eba9 [ 108.909814][ T6244] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 108.909826][ T6244] RBP: 00007f760fc9a090 R08: 0000000000000000 R09: 0000000000000000 [ 108.909837][ T6244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.909847][ T6244] R13: 00007f760efd6038 R14: 00007f760efd5fa0 R15: 00007fffb945e188 [ 108.909881][ T6244] [ 109.305065][ T6021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.325627][ T6031] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.350446][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 109.539632][ T6021] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.669560][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.676838][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.694960][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 109.709275][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.716481][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.741177][ T6272] netlink: 128 bytes leftover after parsing attributes in process `syz.3.51'. [ 109.783749][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.790959][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.928277][ T6266] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 109.966606][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.973866][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.055885][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 110.065000][ T6274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.53'. [ 110.083867][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.53'. [ 110.258996][ T6034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.458841][ T6034] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.615103][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 110.696471][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 110.864736][ T6288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.918870][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.926125][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.050358][ T6274] infiniband syz0: set active [ 111.055271][ T6274] infiniband syz0: added veth0_vlan [ 111.074878][ T6274] syz0: rxe_create_cq: returned err = -12 [ 111.088740][ T6274] infiniband syz0: Couldn't create ib_mad CQ [ 111.095811][ T6274] infiniband syz0: Couldn't open port 1 [ 111.233379][ T6274] RDS/IB: syz0: added [ 111.237881][ T6274] smc: adding ib device syz0 with port count 1 [ 111.269038][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.276278][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.297233][ T6274] smc: ib device syz0 port 1 has no pnetid [ 111.514893][ T6305] netlink: 308 bytes leftover after parsing attributes in process `syz.3.55'. [ 111.549259][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 111.617441][ T6031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.706230][ T6034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.784550][ T6312] netlink: 'syz.3.56': attribute type 10 has an invalid length. [ 111.844408][ T6312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.871622][ T6312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.920092][ T6312] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 111.997033][ T6021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.512793][ T6323] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 112.597768][ T6034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.793965][ T6031] veth0_vlan: entered promiscuous mode [ 112.868942][ T6031] veth1_vlan: entered promiscuous mode [ 113.019661][ T6031] veth0_macvtap: entered promiscuous mode [ 113.053825][ T6031] veth1_macvtap: entered promiscuous mode [ 113.119137][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.173320][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.260899][ T1137] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.288295][ T1137] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.346701][ T1137] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.402342][ T1137] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.543123][ T6021] veth0_vlan: entered promiscuous mode [ 113.598535][ T6021] veth1_vlan: entered promiscuous mode [ 113.615970][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.647753][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.724030][ T6021] veth0_macvtap: entered promiscuous mode [ 113.769241][ T6021] veth1_macvtap: entered promiscuous mode [ 113.784456][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.793903][ T6034] veth0_vlan: entered promiscuous mode [ 113.803591][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.848511][ T6034] veth1_vlan: entered promiscuous mode [ 113.870511][ T6021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.895681][ T6021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.010559][ T78] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.025500][ T6034] veth0_macvtap: entered promiscuous mode [ 114.069881][ T78] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.090676][ T78] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.104420][ T6034] veth1_macvtap: entered promiscuous mode [ 114.123030][ T78] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.231973][ T6034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.295730][ T6034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.364963][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.408956][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.438725][ T3551] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.465884][ T3551] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.500416][ T3551] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.624375][ T3165] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.642420][ T3165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.665262][ T3165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.995085][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.021214][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.096998][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.126655][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.545200][ T6380] __nla_validate_parse: 4 callbacks suppressed [ 115.545218][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.60'. [ 115.575170][ T6380] FAULT_INJECTION: forcing a failure. [ 115.575170][ T6380] name failslab, interval 1, probability 0, space 0, times 0 [ 115.625846][ T6380] CPU: 0 UID: 0 PID: 6380 Comm: syz.5.60 Not tainted syzkaller #0 PREEMPT(full) [ 115.625873][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 115.625884][ T6380] Call Trace: [ 115.625891][ T6380] [ 115.625900][ T6380] dump_stack_lvl+0x189/0x250 [ 115.625928][ T6380] ? __pfx____ratelimit+0x10/0x10 [ 115.625948][ T6380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.625971][ T6380] ? __pfx__printk+0x10/0x10 [ 115.626000][ T6380] ? __pfx___might_resched+0x10/0x10 [ 115.626019][ T6380] ? fs_reclaim_acquire+0x7d/0x100 [ 115.626042][ T6380] should_fail_ex+0x414/0x560 [ 115.626074][ T6380] should_failslab+0xa8/0x100 [ 115.626103][ T6380] __kmalloc_noprof+0xcb/0x4f0 [ 115.626127][ T6380] ? fib6_info_alloc+0x30/0xf0 [ 115.626158][ T6380] fib6_info_alloc+0x30/0xf0 [ 115.626184][ T6380] ip6_route_info_create+0x142/0x860 [ 115.626219][ T6380] ip6_route_add+0x49/0x1b0 [ 115.626250][ T6380] inet6_rtm_newroute+0x1cf/0x18c0 [ 115.626281][ T6380] ? nlmon_xmit+0xb0/0x100 [ 115.626299][ T6380] ? kmem_cache_free+0x18f/0x400 [ 115.626328][ T6380] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 115.626352][ T6380] ? __local_bh_enable_ip+0x12d/0x1c0 [ 115.626372][ T6380] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.626393][ T6380] ? __local_bh_enable_ip+0x12d/0x1c0 [ 115.626412][ T6380] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 115.626436][ T6380] ? __dev_queue_xmit+0x27b/0x3b50 [ 115.626460][ T6380] ? __dev_queue_xmit+0x27b/0x3b50 [ 115.626482][ T6380] ? __dev_queue_xmit+0x27b/0x3b50 [ 115.626508][ T6380] ? __dev_queue_xmit+0x1d79/0x3b50 [ 115.626571][ T6380] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 115.626604][ T6380] rtnetlink_rcv_msg+0x7cc/0xb70 [ 115.626629][ T6380] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 115.626648][ T6380] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 115.626665][ T6380] ? ref_tracker_free+0x63a/0x7d0 [ 115.626691][ T6380] ? __asan_memcpy+0x40/0x70 [ 115.626712][ T6380] ? __pfx_ref_tracker_free+0x10/0x10 [ 115.626734][ T6380] ? __skb_clone+0x63/0x7a0 [ 115.626766][ T6380] netlink_rcv_skb+0x208/0x470 [ 115.626788][ T6380] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 115.626810][ T6380] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.626843][ T6380] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.626873][ T6380] netlink_unicast+0x82f/0x9e0 [ 115.626911][ T6380] ? __pfx_netlink_unicast+0x10/0x10 [ 115.626942][ T6380] ? netlink_sendmsg+0x642/0xb30 [ 115.626959][ T6380] ? skb_put+0x11b/0x210 [ 115.626984][ T6380] netlink_sendmsg+0x805/0xb30 [ 115.627015][ T6380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.627040][ T6380] ? aa_sock_msg_perm+0xf1/0x1d0 [ 115.627060][ T6380] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.627081][ T6380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.627103][ T6380] __sock_sendmsg+0x21c/0x270 [ 115.627134][ T6380] ____sys_sendmsg+0x505/0x830 [ 115.627164][ T6380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.627198][ T6380] ? import_iovec+0x74/0xa0 [ 115.627225][ T6380] ___sys_sendmsg+0x21f/0x2a0 [ 115.627251][ T6380] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.627317][ T6380] ? __fget_files+0x2a/0x420 [ 115.627333][ T6380] ? __fget_files+0x3a0/0x420 [ 115.627361][ T6380] __x64_sys_sendmsg+0x19b/0x260 [ 115.627387][ T6380] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.627422][ T6380] ? __pfx_ksys_write+0x10/0x10 [ 115.627444][ T6380] ? rcu_is_watching+0x15/0xb0 [ 115.627469][ T6380] ? do_syscall_64+0xbe/0x3b0 [ 115.627495][ T6380] do_syscall_64+0xfa/0x3b0 [ 115.627514][ T6380] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.627533][ T6380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.627552][ T6380] ? clear_bhb_loop+0x60/0xb0 [ 115.627575][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.627593][ T6380] RIP: 0033:0x7f70bb38eba9 [ 115.627617][ T6380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.627632][ T6380] RSP: 002b:00007f70bc203038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.627654][ T6380] RAX: ffffffffffffffda RBX: 00007f70bb5d5fa0 RCX: 00007f70bb38eba9 [ 115.627667][ T6380] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000003 [ 115.627679][ T6380] RBP: 00007f70bc203090 R08: 0000000000000000 R09: 0000000000000000 [ 115.627690][ T6380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.627701][ T6380] R13: 00007f70bb5d6038 R14: 00007f70bb5d5fa0 R15: 00007ffe77863098 [ 115.627733][ T6380] [ 116.195882][ T6382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.307229][ T6384] bond_slave_0: entered promiscuous mode [ 116.313171][ T6384] bond_slave_1: entered promiscuous mode [ 116.324817][ T6384] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 116.335625][ T6384] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 117.318515][ T6409] netlink: zone id is out of range [ 117.345067][ T6409] netlink: zone id is out of range [ 117.357845][ T6409] netlink: zone id is out of range [ 117.363479][ T6409] netlink: zone id is out of range [ 117.368747][ T6409] netlink: zone id is out of range [ 117.374762][ T6409] netlink: zone id is out of range [ 117.381651][ T6409] netlink: zone id is out of range [ 117.391551][ T6409] netlink: zone id is out of range [ 117.410136][ T6409] FAULT_INJECTION: forcing a failure. [ 117.410136][ T6409] name failslab, interval 1, probability 0, space 0, times 0 [ 117.434191][ T6409] CPU: 1 UID: 0 PID: 6409 Comm: syz.5.64 Not tainted syzkaller #0 PREEMPT(full) [ 117.434215][ T6409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.434226][ T6409] Call Trace: [ 117.434233][ T6409] [ 117.434241][ T6409] dump_stack_lvl+0x189/0x250 [ 117.434271][ T6409] ? __pfx____ratelimit+0x10/0x10 [ 117.434291][ T6409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.434314][ T6409] ? __pfx__printk+0x10/0x10 [ 117.434347][ T6409] ? __pfx___might_resched+0x10/0x10 [ 117.434370][ T6409] should_fail_ex+0x414/0x560 [ 117.434401][ T6409] should_failslab+0xa8/0x100 [ 117.434430][ T6409] __kmalloc_cache_noprof+0x70/0x3d0 [ 117.434455][ T6409] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 117.434485][ T6409] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 117.434529][ T6409] genl_family_rcv_msg_doit+0x212/0x300 [ 117.434564][ T6409] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 117.434614][ T6409] ? bpf_lsm_capable+0x9/0x20 [ 117.434639][ T6409] ? security_capable+0x7e/0x2e0 [ 117.434674][ T6409] genl_rcv_msg+0x60e/0x790 [ 117.434708][ T6409] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.434730][ T6409] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 117.434757][ T6409] ? __asan_memcpy+0x40/0x70 [ 117.434777][ T6409] ? __pfx_ref_tracker_free+0x10/0x10 [ 117.434810][ T6409] netlink_rcv_skb+0x208/0x470 [ 117.434827][ T6409] ? __lock_acquire+0xab9/0xd20 [ 117.434853][ T6409] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.434879][ T6409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.434920][ T6409] ? down_read+0x1ad/0x2e0 [ 117.434945][ T6409] genl_rcv+0x28/0x40 [ 117.434967][ T6409] netlink_unicast+0x82f/0x9e0 [ 117.435006][ T6409] ? __pfx_netlink_unicast+0x10/0x10 [ 117.435035][ T6409] ? netlink_sendmsg+0x642/0xb30 [ 117.435052][ T6409] ? skb_put+0x11b/0x210 [ 117.435077][ T6409] netlink_sendmsg+0x805/0xb30 [ 117.435120][ T6409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.435145][ T6409] ? aa_sock_msg_perm+0xf1/0x1d0 [ 117.435166][ T6409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 117.435185][ T6409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.435207][ T6409] __sock_sendmsg+0x21c/0x270 [ 117.435238][ T6409] ____sys_sendmsg+0x505/0x830 [ 117.435268][ T6409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.435303][ T6409] ? import_iovec+0x74/0xa0 [ 117.435330][ T6409] ___sys_sendmsg+0x21f/0x2a0 [ 117.435355][ T6409] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.435420][ T6409] ? __fget_files+0x2a/0x420 [ 117.435437][ T6409] ? __fget_files+0x3a0/0x420 [ 117.435466][ T6409] __x64_sys_sendmsg+0x19b/0x260 [ 117.435491][ T6409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.435524][ T6409] ? __pfx_ksys_write+0x10/0x10 [ 117.435546][ T6409] ? rcu_is_watching+0x15/0xb0 [ 117.435573][ T6409] ? do_syscall_64+0xbe/0x3b0 [ 117.435611][ T6409] do_syscall_64+0xfa/0x3b0 [ 117.435630][ T6409] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.435649][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.435669][ T6409] ? clear_bhb_loop+0x60/0xb0 [ 117.435692][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.435710][ T6409] RIP: 0033:0x7f70bb38eba9 [ 117.435727][ T6409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.435742][ T6409] RSP: 002b:00007f70bc203038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.435763][ T6409] RAX: ffffffffffffffda RBX: 00007f70bb5d5fa0 RCX: 00007f70bb38eba9 [ 117.435777][ T6409] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000005 [ 117.435788][ T6409] RBP: 00007f70bc203090 R08: 0000000000000000 R09: 0000000000000000 [ 117.435798][ T6409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.435808][ T6409] R13: 00007f70bb5d6038 R14: 00007f70bb5d5fa0 R15: 00007ffe77863098 [ 117.435840][ T6409] [ 120.341867][ T6465] bridge0: port 3(syz_tun) entered blocking state [ 120.369468][ T6465] bridge0: port 3(syz_tun) entered disabled state [ 120.388763][ T6465] syz_tun: entered allmulticast mode [ 120.442005][ T6465] syz_tun: entered promiscuous mode [ 120.464048][ T6469] Zero length message leads to an empty skb [ 120.481292][ T6465] bridge0: port 3(syz_tun) entered blocking state [ 120.488666][ T6465] bridge0: port 3(syz_tun) entered forwarding state [ 120.502486][ T6469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.78'. [ 121.095450][ T6488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.280022][ C1] Illegal XDP return value 16128 on prog (id 49) dev lo, expect packet loss! [ 121.901355][ T6505] netlink: 'syz.5.86': attribute type 10 has an invalid length. [ 121.925503][ T6505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.012929][ T6505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.094955][ T6505] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 122.567697][ T6521] bridge0: entered promiscuous mode [ 122.574272][ T6521] vlan2: entered promiscuous mode [ 122.585771][ T6521] bridge0: port 3(vlan2) entered blocking state [ 122.595203][ T6521] bridge0: port 3(vlan2) entered disabled state [ 122.615121][ T6521] vlan2: entered allmulticast mode [ 122.636766][ T6521] bridge0: entered allmulticast mode [ 122.659799][ T6521] vlan2: left allmulticast mode [ 122.667782][ T6521] bridge0: left allmulticast mode [ 123.574668][ T6553] syzkaller0: entered allmulticast mode [ 123.584589][ T6553] netlink: 4 bytes leftover after parsing attributes in process `syz.7.98'. [ 124.903014][ T6600] FAULT_INJECTION: forcing a failure. [ 124.903014][ T6600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.998649][ T6600] CPU: 1 UID: 0 PID: 6600 Comm: syz.3.110 Not tainted syzkaller #0 PREEMPT(full) [ 124.998675][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.998686][ T6600] Call Trace: [ 124.998694][ T6600] [ 124.998702][ T6600] dump_stack_lvl+0x189/0x250 [ 124.998730][ T6600] ? __pfx____ratelimit+0x10/0x10 [ 124.998751][ T6600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.998772][ T6600] ? __pfx__printk+0x10/0x10 [ 124.998810][ T6600] should_fail_ex+0x414/0x560 [ 124.998843][ T6600] _copy_to_user+0x31/0xb0 [ 124.998868][ T6600] simple_read_from_buffer+0xe1/0x170 [ 124.998901][ T6600] proc_fail_nth_read+0x1b3/0x220 [ 124.998927][ T6600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.998952][ T6600] ? rw_verify_area+0x2a6/0x4d0 [ 124.998974][ T6600] ? __lock_acquire+0xab9/0xd20 [ 124.999002][ T6600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.999024][ T6600] vfs_read+0x200/0xa30 [ 124.999047][ T6600] ? fdget_pos+0x247/0x320 [ 124.999069][ T6600] ? __pfx___mutex_lock+0x10/0x10 [ 124.999091][ T6600] ? __pfx_vfs_read+0x10/0x10 [ 124.999118][ T6600] ? __fget_files+0x2a/0x420 [ 124.999140][ T6600] ? __fget_files+0x3a0/0x420 [ 124.999155][ T6600] ? __fget_files+0x2a/0x420 [ 124.999183][ T6600] ksys_read+0x145/0x250 [ 124.999206][ T6600] ? __fget_files+0x3a0/0x420 [ 124.999243][ T6600] ? __pfx_ksys_read+0x10/0x10 [ 124.999285][ T6600] ? do_syscall_64+0xbe/0x3b0 [ 124.999310][ T6600] do_syscall_64+0xfa/0x3b0 [ 124.999329][ T6600] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.999349][ T6600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.999368][ T6600] ? clear_bhb_loop+0x60/0xb0 [ 124.999392][ T6600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.999409][ T6600] RIP: 0033:0x7ff22438d5bc [ 124.999427][ T6600] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 124.999442][ T6600] RSP: 002b:00007ff22520b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.999464][ T6600] RAX: ffffffffffffffda RBX: 00007ff2245d5fa0 RCX: 00007ff22438d5bc [ 124.999477][ T6600] RDX: 000000000000000f RSI: 00007ff22520b0a0 RDI: 0000000000000004 [ 124.999489][ T6600] RBP: 00007ff22520b090 R08: 0000000000000000 R09: 0000000000000000 [ 124.999499][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.999510][ T6600] R13: 00007ff2245d6038 R14: 00007ff2245d5fa0 R15: 00007ffdd79f8fb8 [ 124.999544][ T6600] [ 126.043131][ T6608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.244841][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 126.413336][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 126.785846][ T6661] netlink: 308 bytes leftover after parsing attributes in process `syz.0.132'. [ 126.801050][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 126.862518][ T6661] netlink: 68 bytes leftover after parsing attributes in process `syz.0.132'. [ 127.090002][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.7.137'. [ 127.230469][ T6672] warning: `syz.3.138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.492214][ T6685] netlink: 'syz.6.140': attribute type 1 has an invalid length. [ 127.500118][ T6685] netlink: 'syz.6.140': attribute type 1 has an invalid length. [ 127.749187][ T6691] netlink: 36 bytes leftover after parsing attributes in process `syz.0.143'. [ 127.769206][ T6691] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 127.864758][ T6695] netlink: 'syz.6.140': attribute type 1 has an invalid length. [ 128.347035][ T5951] IPVS: starting estimator thread 0... [ 128.450645][ T6720] IPVS: using max 25 ests per chain, 60000 per kthread [ 128.897563][ T6731] netlink: 14 bytes leftover after parsing attributes in process `syz.0.156'. [ 129.486642][ T6751] FAULT_INJECTION: forcing a failure. [ 129.486642][ T6751] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 129.535180][ T6751] CPU: 1 UID: 0 PID: 6751 Comm: syz.3.164 Not tainted syzkaller #0 PREEMPT(full) [ 129.535208][ T6751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 129.535219][ T6751] Call Trace: [ 129.535226][ T6751] [ 129.535235][ T6751] dump_stack_lvl+0x189/0x250 [ 129.535262][ T6751] ? __pfx____ratelimit+0x10/0x10 [ 129.535283][ T6751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.535306][ T6751] ? __pfx__printk+0x10/0x10 [ 129.535334][ T6751] ? fs_reclaim_acquire+0x7d/0x100 [ 129.535362][ T6751] should_fail_ex+0x414/0x560 [ 129.535391][ T6751] prepare_alloc_pages+0x213/0x610 [ 129.535420][ T6751] __alloc_frozen_pages_noprof+0x123/0x370 [ 129.535452][ T6751] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 129.535492][ T6751] alloc_pages_bulk_noprof+0x560/0x710 [ 129.535520][ T6751] ? alloc_pages_noprof+0xbe/0x190 [ 129.535551][ T6751] kasan_populate_vmalloc+0xba/0x1a0 [ 129.535580][ T6751] alloc_vmap_area+0xd51/0x1490 [ 129.535623][ T6751] ? __pfx_alloc_vmap_area+0x10/0x10 [ 129.535647][ T6751] ? __kasan_kmalloc+0x93/0xb0 [ 129.535673][ T6751] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 129.535698][ T6751] ? __sys_bpf+0x60f/0x870 [ 129.535718][ T6751] ? __get_vm_area_node+0x13f/0x300 [ 129.535741][ T6751] ? sock_hash_alloc+0x266/0x4e0 [ 129.535764][ T6751] __get_vm_area_node+0x1f8/0x300 [ 129.535797][ T6751] __vmalloc_node_range_noprof+0x301/0x12f0 [ 129.535823][ T6751] ? sock_hash_alloc+0x266/0x4e0 [ 129.535877][ T6751] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 129.535905][ T6751] ? rcu_is_watching+0x15/0xb0 [ 129.535925][ T6751] ? trace_kmalloc+0x1f/0xd0 [ 129.535946][ T6751] ? __kmalloc_node_noprof+0x293/0x4e0 [ 129.535968][ T6751] ? bpf_map_area_alloc+0x64/0x180 [ 129.535997][ T6751] bpf_map_area_alloc+0x12d/0x180 [ 129.536023][ T6751] ? sock_hash_alloc+0x266/0x4e0 [ 129.536048][ T6751] sock_hash_alloc+0x266/0x4e0 [ 129.536083][ T6751] map_create+0xaa0/0x14d0 [ 129.536111][ T6751] ? security_bpf+0x7e/0x300 [ 129.536139][ T6751] __sys_bpf+0x60f/0x870 [ 129.536166][ T6751] ? __pfx___sys_bpf+0x10/0x10 [ 129.536204][ T6751] ? ksys_write+0x22a/0x250 [ 129.536227][ T6751] ? __pfx_ksys_write+0x10/0x10 [ 129.536254][ T6751] __x64_sys_bpf+0x7c/0x90 [ 129.536276][ T6751] do_syscall_64+0xfa/0x3b0 [ 129.536295][ T6751] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.536314][ T6751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.536332][ T6751] ? clear_bhb_loop+0x60/0xb0 [ 129.536355][ T6751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.536372][ T6751] RIP: 0033:0x7ff22438eba9 [ 129.536389][ T6751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.536403][ T6751] RSP: 002b:00007ff22520b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.536425][ T6751] RAX: ffffffffffffffda RBX: 00007ff2245d5fa0 RCX: 00007ff22438eba9 [ 129.536477][ T6751] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 129.536489][ T6751] RBP: 00007ff22520b090 R08: 0000000000000000 R09: 0000000000000000 [ 129.536499][ T6751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.536510][ T6751] R13: 00007ff2245d6038 R14: 00007ff2245d5fa0 R15: 00007ffdd79f8fb8 [ 129.536542][ T6751] [ 130.806321][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.170'. [ 130.930070][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.171'. [ 130.936194][ T6769] delete_channel: no stack [ 130.984675][ T6780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.173'. [ 131.020565][ T6780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.173'. [ 131.053339][ T6780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.173'. [ 131.066707][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.173'. [ 131.153303][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 131.170815][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.176'. [ 131.190494][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 131.226089][ T6791] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 131.253516][ T6790] netlink: 'syz.0.177': attribute type 1 has an invalid length. [ 131.344364][ T6795] netlink: zone id is out of range [ 131.372053][ T6795] netlink: zone id is out of range [ 131.379766][ T6795] netlink: zone id is out of range [ 131.385169][ T6795] netlink: get zone limit has 8 unknown bytes [ 131.601604][ T6806] netlink: 'syz.5.184': attribute type 10 has an invalid length. [ 132.289209][ T6838] FAULT_INJECTION: forcing a failure. [ 132.289209][ T6838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.302370][ T6838] CPU: 1 UID: 0 PID: 6838 Comm: syz.6.194 Not tainted syzkaller #0 PREEMPT(full) [ 132.302395][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.302406][ T6838] Call Trace: [ 132.302413][ T6838] [ 132.302421][ T6838] dump_stack_lvl+0x189/0x250 [ 132.302447][ T6838] ? __pfx____ratelimit+0x10/0x10 [ 132.302467][ T6838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.302488][ T6838] ? __pfx__printk+0x10/0x10 [ 132.302513][ T6838] ? exc_page_fault+0x9f/0xf0 [ 132.302543][ T6838] should_fail_ex+0x414/0x560 [ 132.302572][ T6838] strncpy_from_user+0x36/0x290 [ 132.302599][ T6838] strncpy_from_user_nofault+0x72/0x150 [ 132.302625][ T6838] bpf_probe_read_user_str+0x2a/0x70 [ 132.302643][ T6838] ? bpf_test_run+0x197/0x7b0 [ 132.302661][ T6838] bpf_prog_06f22831d6c68d16+0x46/0x4c [ 132.302679][ T6838] bpf_test_run+0x2d7/0x7b0 [ 132.302695][ T6838] ? 0xffffffffa0205480 [ 132.302717][ T6838] ? 0xffffffffa02016d4 [ 132.302731][ T6838] ? 0xffffffffa020170c [ 132.302762][ T6838] ? __pfx_bpf_test_run+0x10/0x10 [ 132.302807][ T6838] ? _copy_from_user+0x94/0xb0 [ 132.302830][ T6838] ? bpf_test_init+0x133/0x170 [ 132.302846][ T6838] ? xdp_convert_md_to_buff+0x5b/0x330 [ 132.302870][ T6838] bpf_prog_test_run_xdp+0x6e8/0x1000 [ 132.302908][ T6838] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.302934][ T6838] ? __fget_files+0x2a/0x420 [ 132.302958][ T6838] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 132.302979][ T6838] bpf_prog_test_run+0x2c7/0x340 [ 132.303010][ T6838] __sys_bpf+0x581/0x870 [ 132.303037][ T6838] ? __pfx___sys_bpf+0x10/0x10 [ 132.303077][ T6838] ? ksys_write+0x22a/0x250 [ 132.303104][ T6838] ? __pfx_ksys_write+0x10/0x10 [ 132.303125][ T6838] ? rcu_is_watching+0x15/0xb0 [ 132.303153][ T6838] __x64_sys_bpf+0x7c/0x90 [ 132.303188][ T6838] do_syscall_64+0xfa/0x3b0 [ 132.303208][ T6838] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.303227][ T6838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.303246][ T6838] ? clear_bhb_loop+0x60/0xb0 [ 132.303269][ T6838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.303286][ T6838] RIP: 0033:0x7f17e378eba9 [ 132.303303][ T6838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.303317][ T6838] RSP: 002b:00007f17e456d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.303338][ T6838] RAX: ffffffffffffffda RBX: 00007f17e39d5fa0 RCX: 00007f17e378eba9 [ 132.303351][ T6838] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 132.303363][ T6838] RBP: 00007f17e456d090 R08: 0000000000000000 R09: 0000000000000000 [ 132.303374][ T6838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.303385][ T6838] R13: 00007f17e39d6038 R14: 00007f17e39d5fa0 R15: 00007ffe34503dc8 [ 132.303417][ T6838] [ 132.744242][ T6846] netlink: 'syz.0.198': attribute type 1 has an invalid length. [ 132.876906][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883573][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.916221][ T6846] bond1: entered promiscuous mode [ 132.927467][ T6846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.133427][ T6858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.161583][ T6869] IPv6: Can't replace route, no match found [ 133.377727][ T6863] FAULT_INJECTION: forcing a failure. [ 133.377727][ T6863] name failslab, interval 1, probability 0, space 0, times 0 [ 133.416271][ T6863] CPU: 1 UID: 0 PID: 6863 Comm: syz.5.204 Not tainted syzkaller #0 PREEMPT(full) [ 133.416300][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.416311][ T6863] Call Trace: [ 133.416319][ T6863] [ 133.416328][ T6863] dump_stack_lvl+0x189/0x250 [ 133.416358][ T6863] ? __pfx____ratelimit+0x10/0x10 [ 133.416379][ T6863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.416402][ T6863] ? __pfx__printk+0x10/0x10 [ 133.416436][ T6863] ? __pfx___might_resched+0x10/0x10 [ 133.416460][ T6863] should_fail_ex+0x414/0x560 [ 133.416493][ T6863] should_failslab+0xa8/0x100 [ 133.416523][ T6863] __kmalloc_cache_noprof+0x70/0x3d0 [ 133.416549][ T6863] ? cryptomgr_notify+0x85/0x970 [ 133.416575][ T6863] cryptomgr_notify+0x85/0x970 [ 133.416607][ T6863] notifier_call_chain+0x1b3/0x3e0 [ 133.416638][ T6863] blocking_notifier_call_chain+0x6a/0x90 [ 133.416661][ T6863] crypto_alg_mod_lookup+0x3b1/0x5f0 [ 133.416703][ T6863] crypto_type_has_alg+0x28/0x60 [ 133.416728][ T6863] xfrm_ealg_get_byid+0x228/0x2b0 [ 133.416755][ T6863] pfkey_add+0x12ac/0x2e00 [ 133.416801][ T6863] ? __pfx_pfkey_add+0x10/0x10 [ 133.416819][ T6863] ? kmem_cache_free+0x18f/0x400 [ 133.416861][ T6863] pfkey_sendmsg+0xbfb/0x1090 [ 133.416904][ T6863] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 133.416956][ T6863] ? aa_sock_msg_perm+0xf1/0x1d0 [ 133.416977][ T6863] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 133.416997][ T6863] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 133.417019][ T6863] __sock_sendmsg+0x21c/0x270 [ 133.417052][ T6863] ____sys_sendmsg+0x505/0x830 [ 133.417082][ T6863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.417118][ T6863] ? import_iovec+0x74/0xa0 [ 133.417155][ T6863] ___sys_sendmsg+0x21f/0x2a0 [ 133.417182][ T6863] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.417252][ T6863] ? __fget_files+0x2a/0x420 [ 133.417269][ T6863] ? __fget_files+0x3a0/0x420 [ 133.417300][ T6863] __x64_sys_sendmsg+0x19b/0x260 [ 133.417327][ T6863] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 133.417363][ T6863] ? __pfx_ksys_write+0x10/0x10 [ 133.417384][ T6863] ? rcu_is_watching+0x15/0xb0 [ 133.417411][ T6863] ? do_syscall_64+0xbe/0x3b0 [ 133.417438][ T6863] do_syscall_64+0xfa/0x3b0 [ 133.417458][ T6863] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.417477][ T6863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.417496][ T6863] ? clear_bhb_loop+0x60/0xb0 [ 133.417519][ T6863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.417537][ T6863] RIP: 0033:0x7f70bb38eba9 [ 133.417555][ T6863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.417571][ T6863] RSP: 002b:00007f70bc203038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.417592][ T6863] RAX: ffffffffffffffda RBX: 00007f70bb5d5fa0 RCX: 00007f70bb38eba9 [ 133.417605][ T6863] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 133.417617][ T6863] RBP: 00007f70bc203090 R08: 0000000000000000 R09: 0000000000000000 [ 133.417628][ T6863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.417639][ T6863] R13: 00007f70bb5d6038 R14: 00007f70bb5d5fa0 R15: 00007ffe77863098 [ 133.417673][ T6863] [ 133.495763][ T6882] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 134.153064][ T1075] block nbd0: Possible stuck request ffff888024e95080: control (read@0,1024B). Runtime 30 seconds [ 134.165037][ T1075] block nbd0: Possible stuck request ffff888024e95240: control (read@1024,1024B). Runtime 30 seconds [ 134.176062][ T1075] block nbd0: Possible stuck request ffff888024e95400: control (read@2048,1024B). Runtime 30 seconds [ 134.187095][ T1075] block nbd0: Possible stuck request ffff888024e955c0: control (read@3072,1024B). Runtime 30 seconds [ 134.296366][ T6904] netlink: 'syz.6.215': attribute type 1 has an invalid length. [ 134.446179][ T6904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.542227][ T6907] bond1: (slave veth3): Enslaving as an active interface with a down link [ 134.588755][ T6910] gretap1: entered promiscuous mode [ 134.610681][ T6910] bond1: (slave gretap1): making interface the new active one [ 134.628598][ T6910] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 134.709917][ T6904] macvlan2: entered promiscuous mode [ 134.719788][ T6904] macvlan2: entered allmulticast mode [ 134.729571][ T6904] bond1: entered promiscuous mode [ 134.738425][ T6904] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.751215][ T6904] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 134.783465][ T6904] bond1: left promiscuous mode [ 134.847048][ T6918] syzkaller0: entered promiscuous mode [ 134.855050][ T6918] syzkaller0: entered allmulticast mode [ 134.962577][ T6926] __nla_validate_parse: 22 callbacks suppressed [ 134.962596][ T6926] netlink: 40 bytes leftover after parsing attributes in process `syz.7.220'. [ 135.186206][ T6934] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.225'. [ 135.208767][ T6934] netlink: zone id is out of range [ 135.220397][ T6934] netlink: get zone limit has 8 unknown bytes [ 135.728840][ T6950] netlink: 40 bytes leftover after parsing attributes in process `syz.6.231'. [ 135.841958][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 135.871934][ T6958] netlink: zone id is out of range [ 135.887393][ T6958] netlink: zone id is out of range [ 135.923420][ T6958] netlink: zone id is out of range [ 136.608265][ T6958] net_ratelimit: 6 callbacks suppressed [ 136.608287][ T6958] netlink: zone id is out of range [ 136.684528][ T6958] netlink: zone id is out of range [ 136.689938][ T6958] netlink: zone id is out of range [ 136.732875][ T6958] netlink: zone id is out of range [ 136.755305][ T6958] netlink: zone id is out of range [ 136.797003][ T6958] netlink: zone id is out of range [ 136.812877][ T6958] netlink: zone id is out of range [ 136.862947][ T6958] netlink: zone id is out of range [ 136.870085][ T6958] netlink: zone id is out of range [ 136.914219][ T6958] netlink: zone id is out of range [ 137.117293][ T9] IPVS: starting estimator thread 0... [ 137.159901][ T6989] ip6tnl1: entered promiscuous mode [ 137.169240][ T6989] ip6tnl1: entered allmulticast mode [ 137.241874][ T6991] IPVS: using max 23 ests per chain, 55200 per kthread [ 137.306122][ T6996] netlink: 'syz.3.246': attribute type 10 has an invalid length. [ 137.412540][ T6999] vlan2: entered promiscuous mode [ 137.420665][ T6999] macvtap0: entered promiscuous mode [ 137.465678][ T7003] netlink: 104 bytes leftover after parsing attributes in process `syz.5.247'. [ 137.563885][ T7009] netlink: 36 bytes leftover after parsing attributes in process `syz.3.251'. [ 137.730217][ T7017] netlink: 308 bytes leftover after parsing attributes in process `syz.7.255'. [ 137.750137][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.7.255'. [ 137.786565][ T7017] netlink: 68 bytes leftover after parsing attributes in process `syz.7.255'. [ 137.886463][ T7022] netlink: 48 bytes leftover after parsing attributes in process `syz.0.257'. [ 137.927273][ T7025] netlink: 'syz.5.258': attribute type 4 has an invalid length. [ 137.954009][ T7023] netlink: 'syz.6.256': attribute type 10 has an invalid length. [ 137.980572][ T7023] dummy0: entered promiscuous mode [ 137.987525][ T7023] bridge0: port 3(dummy0) entered blocking state [ 138.027761][ T7023] bridge0: port 3(dummy0) entered disabled state [ 138.054779][ T7023] dummy0: entered allmulticast mode [ 138.066034][ T7023] bridge0: port 3(dummy0) entered blocking state [ 138.072800][ T7023] bridge0: port 3(dummy0) entered forwarding state [ 138.237362][ T7027] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 138.281176][ T7027] team0: Port device macvlan3 added [ 138.489970][ T7042] bond2: entered promiscuous mode [ 138.506010][ T7042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.709275][ T7050] FAULT_INJECTION: forcing a failure. [ 138.709275][ T7050] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.768509][ T7050] CPU: 1 UID: 0 PID: 7050 Comm: syz.6.265 Not tainted syzkaller #0 PREEMPT(full) [ 138.768537][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.768548][ T7050] Call Trace: [ 138.768556][ T7050] [ 138.768564][ T7050] dump_stack_lvl+0x189/0x250 [ 138.768592][ T7050] ? __pfx____ratelimit+0x10/0x10 [ 138.768613][ T7050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.768636][ T7050] ? __pfx__printk+0x10/0x10 [ 138.768665][ T7050] ? fs_reclaim_acquire+0x7d/0x100 [ 138.768694][ T7050] should_fail_ex+0x414/0x560 [ 138.768726][ T7050] prepare_alloc_pages+0x213/0x610 [ 138.768755][ T7050] __alloc_frozen_pages_noprof+0x123/0x370 [ 138.768780][ T7050] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 138.768821][ T7050] alloc_pages_bulk_noprof+0x560/0x710 [ 138.768848][ T7050] ? alloc_pages_noprof+0xbe/0x190 [ 138.768881][ T7050] kasan_populate_vmalloc+0xba/0x1a0 [ 138.768911][ T7050] alloc_vmap_area+0xd51/0x1490 [ 138.768956][ T7050] ? __pfx_alloc_vmap_area+0x10/0x10 [ 138.768980][ T7050] ? __kasan_kmalloc+0x93/0xb0 [ 138.769006][ T7050] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 138.769030][ T7050] ? __sys_bpf+0x60f/0x870 [ 138.769051][ T7050] ? __get_vm_area_node+0x13f/0x300 [ 138.769075][ T7050] ? sock_hash_alloc+0x266/0x4e0 [ 138.769099][ T7050] __get_vm_area_node+0x1f8/0x300 [ 138.769133][ T7050] __vmalloc_node_range_noprof+0x301/0x12f0 [ 138.769160][ T7050] ? sock_hash_alloc+0x266/0x4e0 [ 138.769215][ T7050] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 138.769242][ T7050] ? rcu_is_watching+0x15/0xb0 [ 138.769262][ T7050] ? trace_kmalloc+0x1f/0xd0 [ 138.769283][ T7050] ? __kmalloc_node_noprof+0x293/0x4e0 [ 138.769306][ T7050] ? bpf_map_area_alloc+0x64/0x180 [ 138.769336][ T7050] bpf_map_area_alloc+0x12d/0x180 [ 138.769363][ T7050] ? sock_hash_alloc+0x266/0x4e0 [ 138.769394][ T7050] sock_hash_alloc+0x266/0x4e0 [ 138.769431][ T7050] map_create+0xaa0/0x14d0 [ 138.769460][ T7050] ? security_bpf+0x7e/0x300 [ 138.769489][ T7050] __sys_bpf+0x60f/0x870 [ 138.769517][ T7050] ? __pfx___sys_bpf+0x10/0x10 [ 138.769558][ T7050] ? ksys_write+0x22a/0x250 [ 138.769586][ T7050] ? __pfx_ksys_write+0x10/0x10 [ 138.769607][ T7050] ? rcu_is_watching+0x15/0xb0 [ 138.769635][ T7050] __x64_sys_bpf+0x7c/0x90 [ 138.769659][ T7050] do_syscall_64+0xfa/0x3b0 [ 138.769679][ T7050] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.769698][ T7050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.769716][ T7050] ? clear_bhb_loop+0x60/0xb0 [ 138.769739][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.769757][ T7050] RIP: 0033:0x7f17e378eba9 [ 138.769774][ T7050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.769789][ T7050] RSP: 002b:00007f17e456d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.769809][ T7050] RAX: ffffffffffffffda RBX: 00007f17e39d5fa0 RCX: 00007f17e378eba9 [ 138.769822][ T7050] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 138.769834][ T7050] RBP: 00007f17e456d090 R08: 0000000000000000 R09: 0000000000000000 [ 138.769845][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.769856][ T7050] R13: 00007f17e39d6038 R14: 00007f17e39d5fa0 R15: 00007ffe34503dc8 [ 138.769889][ T7050] [ 140.069318][ T7085] nbd: socks must be embedded in a SOCK_ITEM attr [ 140.212550][ T7097] __nla_validate_parse: 8 callbacks suppressed [ 140.212570][ T7097] netlink: 64 bytes leftover after parsing attributes in process `syz.3.279'. [ 140.248045][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.279'. [ 140.262485][ T7103] netlink: 48 bytes leftover after parsing attributes in process `syz.6.281'. [ 140.345655][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 141.159767][ T7128] netlink: 'syz.6.290': attribute type 1 has an invalid length. [ 141.548130][ T7141] syz_tun: refused to change device tx_queue_len [ 141.590109][ T7143] syz_tun: refused to change device tx_queue_len [ 141.805584][ T7150] FAULT_INJECTION: forcing a failure. [ 141.805584][ T7150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.818864][ T7150] CPU: 1 UID: 0 PID: 7150 Comm: syz.6.298 Not tainted syzkaller #0 PREEMPT(full) [ 141.818890][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.818900][ T7150] Call Trace: [ 141.818908][ T7150] [ 141.818917][ T7150] dump_stack_lvl+0x189/0x250 [ 141.818945][ T7150] ? __pfx____ratelimit+0x10/0x10 [ 141.818966][ T7150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.818989][ T7150] ? __pfx__printk+0x10/0x10 [ 141.819015][ T7150] ? exc_page_fault+0x9f/0xf0 [ 141.819071][ T7150] should_fail_ex+0x414/0x560 [ 141.819105][ T7150] strncpy_from_user+0x36/0x290 [ 141.819134][ T7150] strncpy_from_user_nofault+0x72/0x150 [ 141.819161][ T7150] bpf_probe_read_user_str+0x2a/0x70 [ 141.819180][ T7150] ? bpf_test_run+0x197/0x7b0 [ 141.819199][ T7150] bpf_prog_06f22831d6c68d16+0x46/0x4c [ 141.819219][ T7150] bpf_test_run+0x2d7/0x7b0 [ 141.819237][ T7150] ? bpf_dispatcher_xdp+0x800/0x1000 [ 141.819261][ T7150] ? 0xffffffffa02016d4 [ 141.819276][ T7150] ? 0xffffffffa02017b0 [ 141.819291][ T7150] ? 0xffffffffa0201814 [ 141.819320][ T7150] ? __pfx_bpf_test_run+0x10/0x10 [ 141.819366][ T7150] ? _copy_from_user+0x94/0xb0 [ 141.819389][ T7150] ? bpf_test_init+0x133/0x170 [ 141.819405][ T7150] ? xdp_convert_md_to_buff+0x5b/0x330 [ 141.819428][ T7150] bpf_prog_test_run_xdp+0x6e8/0x1000 [ 141.819467][ T7150] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 141.819493][ T7150] ? __fget_files+0x2a/0x420 [ 141.819517][ T7150] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 141.819538][ T7150] bpf_prog_test_run+0x2c7/0x340 [ 141.819569][ T7150] __sys_bpf+0x581/0x870 [ 141.819596][ T7150] ? __pfx___sys_bpf+0x10/0x10 [ 141.819636][ T7150] ? ksys_write+0x22a/0x250 [ 141.819664][ T7150] ? __pfx_ksys_write+0x10/0x10 [ 141.819686][ T7150] ? rcu_is_watching+0x15/0xb0 [ 141.819714][ T7150] __x64_sys_bpf+0x7c/0x90 [ 141.819738][ T7150] do_syscall_64+0xfa/0x3b0 [ 141.819758][ T7150] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.819777][ T7150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.819795][ T7150] ? clear_bhb_loop+0x60/0xb0 [ 141.819818][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.819837][ T7150] RIP: 0033:0x7f17e378eba9 [ 141.819854][ T7150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.819869][ T7150] RSP: 002b:00007f17e456d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.819890][ T7150] RAX: ffffffffffffffda RBX: 00007f17e39d5fa0 RCX: 00007f17e378eba9 [ 141.819903][ T7150] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 141.819915][ T7150] RBP: 00007f17e456d090 R08: 0000000000000000 R09: 0000000000000000 [ 141.819926][ T7150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.819937][ T7150] R13: 00007f17e39d6038 R14: 00007f17e39d5fa0 R15: 00007ffe34503dc8 [ 141.819970][ T7150] [ 142.297560][ T7155] FAULT_INJECTION: forcing a failure. [ 142.297560][ T7155] name failslab, interval 1, probability 0, space 0, times 0 [ 142.350853][ T7155] CPU: 0 UID: 0 PID: 7155 Comm: syz.0.300 Not tainted syzkaller #0 PREEMPT(full) [ 142.350881][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.350892][ T7155] Call Trace: [ 142.350899][ T7155] [ 142.350908][ T7155] dump_stack_lvl+0x189/0x250 [ 142.350937][ T7155] ? __pfx____ratelimit+0x10/0x10 [ 142.350957][ T7155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.350980][ T7155] ? __pfx__printk+0x10/0x10 [ 142.351013][ T7155] ? __pfx___might_resched+0x10/0x10 [ 142.351045][ T7155] ? fs_reclaim_acquire+0x7d/0x100 [ 142.351068][ T7155] should_fail_ex+0x414/0x560 [ 142.351101][ T7155] should_failslab+0xa8/0x100 [ 142.351130][ T7155] kmem_cache_alloc_noprof+0x73/0x3c0 [ 142.351154][ T7155] ? dup_fd+0x55/0xb60 [ 142.351184][ T7155] dup_fd+0x55/0xb60 [ 142.351210][ T7155] ? do_raw_spin_unlock+0x122/0x240 [ 142.351237][ T7155] ? _raw_spin_unlock+0x28/0x50 [ 142.351253][ T7155] ? copy_fs_struct+0x1c3/0x270 [ 142.351281][ T7155] ksys_unshare+0x450/0x8c0 [ 142.351310][ T7155] ? __pfx_ksys_unshare+0x10/0x10 [ 142.351334][ T7155] ? __pfx_ksys_write+0x10/0x10 [ 142.351356][ T7155] ? rcu_is_watching+0x15/0xb0 [ 142.351387][ T7155] __x64_sys_unshare+0x38/0x50 [ 142.351409][ T7155] do_syscall_64+0xfa/0x3b0 [ 142.351429][ T7155] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.351449][ T7155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.351467][ T7155] ? clear_bhb_loop+0x60/0xb0 [ 142.351491][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.351508][ T7155] RIP: 0033:0x7f760ed8eba9 [ 142.351525][ T7155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.351540][ T7155] RSP: 002b:00007f760fc9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 142.351561][ T7155] RAX: ffffffffffffffda RBX: 00007f760efd5fa0 RCX: 00007f760ed8eba9 [ 142.351574][ T7155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 142.351586][ T7155] RBP: 00007f760fc9a090 R08: 0000000000000000 R09: 0000000000000000 [ 142.351597][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.351608][ T7155] R13: 00007f760efd6038 R14: 00007f760efd5fa0 R15: 00007fffb945e188 [ 142.351642][ T7155] [ 142.824188][ T7168] netlink: 48 bytes leftover after parsing attributes in process `syz.6.304'. [ 142.879698][ T7167] bridge_slave_0: left allmulticast mode [ 142.908708][ T7167] bridge_slave_0: left promiscuous mode [ 142.915680][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.972782][ T7167] bridge_slave_1: left allmulticast mode [ 142.997816][ T7167] bridge_slave_1: left promiscuous mode [ 143.006325][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.027683][ T7167] bond0: (slave bond_slave_0): Releasing backup interface [ 143.050017][ T7167] bond0: (slave bond_slave_1): Releasing backup interface [ 143.084291][ T7167] team0: Port device team_slave_0 removed [ 143.098937][ T7167] team0: Port device team_slave_1 removed [ 143.127347][ T7167] bond0: (slave batadv_slave_0): Releasing backup interface [ 143.147020][ T7167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.157633][ T7167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.169013][ T7167] net_ratelimit: 6 callbacks suppressed [ 143.169034][ T7167] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 143.334619][ T7187] netlink: 36 bytes leftover after parsing attributes in process `syz.6.310'. [ 143.349263][ T7187] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 143.726358][ T7207] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 143.751087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.874540][ T7202] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.887244][ T7202] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 144.068764][ T7215] netlink: 14 bytes leftover after parsing attributes in process `syz.5.318'. [ 145.022144][ T7242] FAULT_INJECTION: forcing a failure. [ 145.022144][ T7242] name failslab, interval 1, probability 0, space 0, times 0 [ 145.072068][ T7242] CPU: 1 UID: 0 PID: 7242 Comm: syz.5.324 Not tainted syzkaller #0 PREEMPT(full) [ 145.072096][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 145.072106][ T7242] Call Trace: [ 145.072113][ T7242] [ 145.072122][ T7242] dump_stack_lvl+0x189/0x250 [ 145.072148][ T7242] ? __pfx____ratelimit+0x10/0x10 [ 145.072168][ T7242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.072188][ T7242] ? __pfx__printk+0x10/0x10 [ 145.072218][ T7242] ? __pfx___might_resched+0x10/0x10 [ 145.072234][ T7242] ? fs_reclaim_acquire+0x7d/0x100 [ 145.072256][ T7242] should_fail_ex+0x414/0x560 [ 145.072285][ T7242] should_failslab+0xa8/0x100 [ 145.072311][ T7242] __kmalloc_cache_noprof+0x70/0x3d0 [ 145.072333][ T7242] ? alloc_fdtable+0xc0/0x2c0 [ 145.072361][ T7242] alloc_fdtable+0xc0/0x2c0 [ 145.072382][ T7242] ? dup_fd+0x864/0xb60 [ 145.072407][ T7242] dup_fd+0x86c/0xb60 [ 145.072436][ T7242] ? _raw_spin_unlock+0x28/0x50 [ 145.072452][ T7242] ? copy_fs_struct+0x1c3/0x270 [ 145.072475][ T7242] ksys_unshare+0x450/0x8c0 [ 145.072504][ T7242] ? __pfx_ksys_unshare+0x10/0x10 [ 145.072525][ T7242] ? __pfx_ksys_write+0x10/0x10 [ 145.072544][ T7242] ? rcu_is_watching+0x15/0xb0 [ 145.072574][ T7242] __x64_sys_unshare+0x38/0x50 [ 145.072595][ T7242] do_syscall_64+0xfa/0x3b0 [ 145.072613][ T7242] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.072630][ T7242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.072648][ T7242] ? clear_bhb_loop+0x60/0xb0 [ 145.072670][ T7242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.072686][ T7242] RIP: 0033:0x7f70bb38eba9 [ 145.072702][ T7242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.072716][ T7242] RSP: 002b:00007f70bc203038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 145.072736][ T7242] RAX: ffffffffffffffda RBX: 00007f70bb5d5fa0 RCX: 00007f70bb38eba9 [ 145.072748][ T7242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 145.072759][ T7242] RBP: 00007f70bc203090 R08: 0000000000000000 R09: 0000000000000000 [ 145.072770][ T7242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.072781][ T7242] R13: 00007f70bb5d6038 R14: 00007f70bb5d5fa0 R15: 00007ffe77863098 [ 145.072813][ T7242] [ 145.339426][ T7239] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.734770][ T7239] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.799219][ T7252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.326'. [ 145.824131][ T7239] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.052796][ T7239] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.402159][ T78] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.424431][ T78] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.482934][ T3165] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.536660][ T3165] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.766325][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.341'. [ 146.846859][ T7302] netlink: 48 bytes leftover after parsing attributes in process `syz.7.344'. [ 146.960116][ T7306] netlink: 'syz.5.342': attribute type 1 has an invalid length. [ 146.984871][ T7306] netlink: 'syz.5.342': attribute type 1 has an invalid length. [ 147.285412][ T7319] netlink: 'syz.5.342': attribute type 1 has an invalid length. [ 147.374486][ T7321] netlink: 36 bytes leftover after parsing attributes in process `syz.7.349'. [ 147.415018][ T7324] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 147.506083][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.350'. [ 147.544681][ T7324] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 147.791386][ T7333] netlink: 308 bytes leftover after parsing attributes in process `syz.7.351'. [ 147.809460][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.351'. [ 147.817801][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.352'. [ 147.850035][ T7333] netlink: 68 bytes leftover after parsing attributes in process `syz.7.351'. [ 147.878404][ T7335] netlink: 28 bytes leftover after parsing attributes in process `syz.6.352'. [ 147.879557][ T7337] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 148.129013][ T7346] netlink: 'syz.5.356': attribute type 1 has an invalid length. [ 148.227844][ T7346] bond1: entered promiscuous mode [ 148.241875][ T7346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.407817][ T7338] FAULT_INJECTION: forcing a failure. [ 148.407817][ T7338] name failslab, interval 1, probability 0, space 0, times 0 [ 148.423086][ T7350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.465482][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.7.351 Not tainted syzkaller #0 PREEMPT(full) [ 148.465511][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.465522][ T7338] Call Trace: [ 148.465531][ T7338] [ 148.465540][ T7338] dump_stack_lvl+0x189/0x250 [ 148.465570][ T7338] ? __pfx____ratelimit+0x10/0x10 [ 148.465591][ T7338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.465614][ T7338] ? __pfx__printk+0x10/0x10 [ 148.465645][ T7338] ? __pfx___might_resched+0x10/0x10 [ 148.465664][ T7338] ? fs_reclaim_acquire+0x7d/0x100 [ 148.465687][ T7338] should_fail_ex+0x414/0x560 [ 148.465719][ T7338] should_failslab+0xa8/0x100 [ 148.465750][ T7338] __kmalloc_node_noprof+0xd1/0x4e0 [ 148.465774][ T7338] ? __pfx___up_read+0x10/0x10 [ 148.465793][ T7338] ? crypto_create_tfm_node+0x83/0x3f0 [ 148.465827][ T7338] crypto_create_tfm_node+0x83/0x3f0 [ 148.465861][ T7338] crypto_spawn_tfm2+0x5c/0x90 [ 148.465883][ T7338] aead_init_geniv+0x169/0x240 [ 148.465914][ T7338] crypto_create_tfm_node+0x189/0x3f0 [ 148.465948][ T7338] crypto_alloc_tfm_node+0x172/0x3f0 [ 148.465995][ T7338] esp_init_state+0x5b6/0x1140 [ 148.466018][ T7338] ? pfkey_sendmsg+0xbfb/0x1090 [ 148.466038][ T7338] ? __sock_sendmsg+0x21c/0x270 [ 148.466066][ T7338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.466096][ T7338] ? __pfx_esp_init_state+0x10/0x10 [ 148.466144][ T7338] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 148.466177][ T7338] ? __xfrm_init_state+0x7ef/0x13f0 [ 148.466209][ T7338] __xfrm_init_state+0xa76/0x13f0 [ 148.466233][ T7338] ? __xfrm_init_state+0x7ef/0x13f0 [ 148.466265][ T7338] xfrm_init_state+0x18/0xa0 [ 148.466288][ T7338] pfkey_add+0x1d38/0x2e00 [ 148.466336][ T7338] ? __pfx_pfkey_add+0x10/0x10 [ 148.466355][ T7338] ? kmem_cache_free+0x18f/0x400 [ 148.466397][ T7338] pfkey_sendmsg+0xbfb/0x1090 [ 148.466445][ T7338] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 148.466501][ T7338] ? aa_sock_msg_perm+0xf1/0x1d0 [ 148.466522][ T7338] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 148.466542][ T7338] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 148.466565][ T7338] __sock_sendmsg+0x21c/0x270 [ 148.466595][ T7338] ____sys_sendmsg+0x505/0x830 [ 148.466625][ T7338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.466660][ T7338] ? import_iovec+0x74/0xa0 [ 148.466688][ T7338] ___sys_sendmsg+0x21f/0x2a0 [ 148.466714][ T7338] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.466784][ T7338] ? __fget_files+0x2a/0x420 [ 148.466800][ T7338] ? __fget_files+0x3a0/0x420 [ 148.466831][ T7338] __x64_sys_sendmsg+0x19b/0x260 [ 148.466858][ T7338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.466895][ T7338] ? __pfx_ksys_write+0x10/0x10 [ 148.466917][ T7338] ? rcu_is_watching+0x15/0xb0 [ 148.466943][ T7338] ? do_syscall_64+0xbe/0x3b0 [ 148.466970][ T7338] do_syscall_64+0xfa/0x3b0 [ 148.467000][ T7338] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.467019][ T7338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.467038][ T7338] ? clear_bhb_loop+0x60/0xb0 [ 148.467062][ T7338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.467080][ T7338] RIP: 0033:0x7effcbd8eba9 [ 148.467098][ T7338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.467113][ T7338] RSP: 002b:00007effccc1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.467133][ T7338] RAX: ffffffffffffffda RBX: 00007effcbfd6090 RCX: 00007effcbd8eba9 [ 148.467147][ T7338] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 148.467158][ T7338] RBP: 00007effccc1a090 R08: 0000000000000000 R09: 0000000000000000 [ 148.467170][ T7338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 148.467189][ T7338] R13: 00007effcbfd6128 R14: 00007effcbfd6090 R15: 00007fffb54fbf28 [ 148.467224][ T7338] [ 148.842311][ T7350] bond1: (slave bond2): making interface the new active one [ 148.849739][ T7350] bond2: entered promiscuous mode [ 148.856588][ T7350] bond1: (slave bond2): Enslaving as an active interface with an up link [ 149.217950][ T7360] netlink: 'syz.7.358': attribute type 6 has an invalid length. [ 149.476082][ T7376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.745688][ T7389] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 150.250168][ T7417] vlan2: entered promiscuous mode [ 150.280057][ T7417] macvtap0: entered promiscuous mode [ 150.614307][ T7436] trusted_key: syz.7.379 sent an empty control message without MSG_MORE. [ 150.826044][ T7446] __nla_validate_parse: 9 callbacks suppressed [ 150.826062][ T7446] netlink: 308 bytes leftover after parsing attributes in process `syz.5.382'. [ 150.846745][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.382'. [ 150.914933][ T7446] netlink: 68 bytes leftover after parsing attributes in process `syz.5.382'. [ 151.120664][ T7453] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 151.639078][ T7464] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 152.465495][ T7465] nlmon0: entered promiscuous mode [ 152.474197][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.7.388'. [ 152.855380][ T7480] vlan0: entered promiscuous mode [ 153.675523][ T7512] netlink: 14 bytes leftover after parsing attributes in process `syz.7.402'. [ 154.638594][ T7543] vxcan2: entered allmulticast mode [ 154.640761][ T7542] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.747857][ T7547] netlink: 36 bytes leftover after parsing attributes in process `syz.6.411'. [ 154.760595][ T7547] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 155.404568][ T7569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.815924][ T7585] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 155.857282][ T7585] FAULT_INJECTION: forcing a failure. [ 155.857282][ T7585] name failslab, interval 1, probability 0, space 0, times 0 [ 155.889765][ T7585] CPU: 1 UID: 0 PID: 7585 Comm: syz.0.422 Not tainted syzkaller #0 PREEMPT(full) [ 155.889793][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 155.889804][ T7585] Call Trace: [ 155.889811][ T7585] [ 155.889820][ T7585] dump_stack_lvl+0x189/0x250 [ 155.889849][ T7585] ? __pfx____ratelimit+0x10/0x10 [ 155.889870][ T7585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.889893][ T7585] ? __pfx__printk+0x10/0x10 [ 155.889926][ T7585] ? __pfx___might_resched+0x10/0x10 [ 155.889944][ T7585] ? fs_reclaim_acquire+0x7d/0x100 [ 155.889967][ T7585] should_fail_ex+0x414/0x560 [ 155.889999][ T7585] should_failslab+0xa8/0x100 [ 155.890030][ T7585] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 155.890056][ T7585] ? __alloc_skb+0x112/0x2d0 [ 155.890081][ T7585] __alloc_skb+0x112/0x2d0 [ 155.890107][ T7585] netlink_ack+0x146/0xa50 [ 155.890124][ T7585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 155.890181][ T7585] ? __asan_memcpy+0x40/0x70 [ 155.890203][ T7585] ? __pfx_ref_tracker_free+0x10/0x10 [ 155.890242][ T7585] netlink_rcv_skb+0x28c/0x470 [ 155.890259][ T7585] ? __lock_acquire+0xab9/0xd20 [ 155.890283][ T7585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 155.890307][ T7585] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.890350][ T7585] ? down_read+0x1ad/0x2e0 [ 155.890374][ T7585] genl_rcv+0x28/0x40 [ 155.890395][ T7585] netlink_unicast+0x82f/0x9e0 [ 155.890430][ T7585] ? __pfx_netlink_unicast+0x10/0x10 [ 155.890458][ T7585] ? netlink_sendmsg+0x642/0xb30 [ 155.890475][ T7585] ? skb_put+0x11b/0x210 [ 155.890499][ T7585] netlink_sendmsg+0x805/0xb30 [ 155.890530][ T7585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.890552][ T7585] ? aa_sock_msg_perm+0xf1/0x1d0 [ 155.890572][ T7585] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.890590][ T7585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.890610][ T7585] __sock_sendmsg+0x21c/0x270 [ 155.890639][ T7585] ____sys_sendmsg+0x505/0x830 [ 155.890669][ T7585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.890703][ T7585] ? import_iovec+0x74/0xa0 [ 155.890729][ T7585] ___sys_sendmsg+0x21f/0x2a0 [ 155.890754][ T7585] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.890820][ T7585] ? __fget_files+0x2a/0x420 [ 155.890836][ T7585] ? __fget_files+0x3a0/0x420 [ 155.890865][ T7585] __x64_sys_sendmsg+0x19b/0x260 [ 155.890891][ T7585] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.890924][ T7585] ? __pfx_ksys_write+0x10/0x10 [ 155.890941][ T7585] ? rcu_is_watching+0x15/0xb0 [ 155.890963][ T7585] ? do_syscall_64+0xbe/0x3b0 [ 155.890986][ T7585] do_syscall_64+0xfa/0x3b0 [ 155.891003][ T7585] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.891022][ T7585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.891039][ T7585] ? clear_bhb_loop+0x60/0xb0 [ 155.891059][ T7585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.891075][ T7585] RIP: 0033:0x7f760ed8eba9 [ 155.891092][ T7585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.891107][ T7585] RSP: 002b:00007f760fc9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.891128][ T7585] RAX: ffffffffffffffda RBX: 00007f760efd5fa0 RCX: 00007f760ed8eba9 [ 155.891140][ T7585] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 155.891150][ T7585] RBP: 00007f760fc9a090 R08: 0000000000000000 R09: 0000000000000000 [ 155.891169][ T7585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.891179][ T7585] R13: 00007f760efd6038 R14: 00007f760efd5fa0 R15: 00007fffb945e188 [ 155.891210][ T7585] [ 156.534608][ T7597] netlink: 'syz.0.427': attribute type 1 has an invalid length. [ 156.582798][ T7597] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.742669][ T7603] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.760058][ T7603] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 156.773690][ T7603] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 156.949236][ T7610] netlink: 20 bytes leftover after parsing attributes in process `syz.7.432'. [ 157.085999][ T7617] netlink: 276 bytes leftover after parsing attributes in process `syz.0.434'. [ 157.125183][ T7617] openvswitch: netlink: Flow key attr not present in new flow. [ 157.670546][ T7617] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 158.105010][ T7647] netlink: 308 bytes leftover after parsing attributes in process `syz.7.441'. [ 158.115434][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.7.441'. [ 158.172860][ T7647] netlink: 68 bytes leftover after parsing attributes in process `syz.7.441'. [ 158.552603][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.6.449'. [ 158.566194][ T7664] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 158.882740][ T7670] vxcan2: entered promiscuous mode [ 159.012973][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 159.910612][ T7708] openvswitch: netlink: VXLAN extension 226 out of range max 1 [ 159.918703][ T7709] tipc: Started in network mode [ 159.918735][ T7709] tipc: Node identity 923b46737c66, cluster identity 4711 [ 159.920424][ T7709] tipc: Enabled bearer , priority 0 [ 159.987897][ T7709] syzkaller0: entered promiscuous mode [ 159.995546][ T7709] syzkaller0: entered allmulticast mode [ 160.032344][ T7709] tipc: Resetting bearer [ 160.079976][ T7707] tipc: Resetting bearer [ 160.137411][ T7707] tipc: Disabling bearer [ 160.182103][ T7718] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.657357][ T7732] netlink: 308 bytes leftover after parsing attributes in process `syz.7.473'. [ 160.686402][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.7.473'. [ 160.738862][ T7732] netlink: 68 bytes leftover after parsing attributes in process `syz.7.473'. [ 160.991752][ T7745] netlink: zone id is out of range [ 160.996965][ T7745] netlink: zone id is out of range [ 161.017454][ T7745] netlink: zone id is out of range [ 161.053457][ T7745] netlink: zone id is out of range [ 161.080589][ T7745] netlink: zone id is out of range [ 161.085812][ T7745] netlink: zone id is out of range [ 161.106898][ T7745] netlink: zone id is out of range [ 161.110090][ T7741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.135214][ T7745] netlink: zone id is out of range [ 161.163876][ T7745] FAULT_INJECTION: forcing a failure. [ 161.163876][ T7745] name failslab, interval 1, probability 0, space 0, times 0 [ 161.188868][ T7741] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 161.193107][ T7745] CPU: 0 UID: 0 PID: 7745 Comm: syz.5.479 Not tainted syzkaller #0 PREEMPT(full) [ 161.193132][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 161.193143][ T7745] Call Trace: [ 161.193151][ T7745] [ 161.193158][ T7745] dump_stack_lvl+0x189/0x250 [ 161.193183][ T7745] ? __pfx____ratelimit+0x10/0x10 [ 161.193203][ T7745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.193223][ T7745] ? __pfx__printk+0x10/0x10 [ 161.193253][ T7745] ? __pfx___might_resched+0x10/0x10 [ 161.193275][ T7745] should_fail_ex+0x414/0x560 [ 161.193303][ T7745] should_failslab+0xa8/0x100 [ 161.193330][ T7745] __kmalloc_cache_noprof+0x70/0x3d0 [ 161.193352][ T7745] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 161.193380][ T7745] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 161.193420][ T7745] genl_family_rcv_msg_doit+0x212/0x300 [ 161.193460][ T7745] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 161.193497][ T7745] ? bpf_lsm_capable+0x9/0x20 [ 161.193518][ T7745] ? security_capable+0x7e/0x2e0 [ 161.193550][ T7745] genl_rcv_msg+0x60e/0x790 [ 161.193580][ T7745] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.193601][ T7745] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 161.193625][ T7745] ? __asan_memcpy+0x40/0x70 [ 161.193644][ T7745] ? __pfx_ref_tracker_free+0x10/0x10 [ 161.193675][ T7745] netlink_rcv_skb+0x208/0x470 [ 161.193691][ T7745] ? __lock_acquire+0xab9/0xd20 [ 161.193714][ T7745] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.193738][ T7745] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.193777][ T7745] ? down_read+0x1ad/0x2e0 [ 161.193800][ T7745] genl_rcv+0x28/0x40 [ 161.193820][ T7745] netlink_unicast+0x82f/0x9e0 [ 161.193861][ T7745] ? __pfx_netlink_unicast+0x10/0x10 [ 161.193888][ T7745] ? netlink_sendmsg+0x642/0xb30 [ 161.193904][ T7745] ? skb_put+0x11b/0x210 [ 161.193926][ T7745] netlink_sendmsg+0x805/0xb30 [ 161.193955][ T7745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.193977][ T7745] ? aa_sock_msg_perm+0xf1/0x1d0 [ 161.193995][ T7745] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.194012][ T7745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.194031][ T7745] __sock_sendmsg+0x21c/0x270 [ 161.194058][ T7745] ____sys_sendmsg+0x505/0x830 [ 161.194085][ T7745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.194116][ T7745] ? import_iovec+0x74/0xa0 [ 161.194140][ T7745] ___sys_sendmsg+0x21f/0x2a0 [ 161.194163][ T7745] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.194225][ T7745] ? __fget_files+0x2a/0x420 [ 161.194239][ T7745] ? __fget_files+0x3a0/0x420 [ 161.194267][ T7745] __x64_sys_sendmsg+0x19b/0x260 [ 161.194290][ T7745] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.194321][ T7745] ? __pfx_ksys_write+0x10/0x10 [ 161.194341][ T7745] ? rcu_is_watching+0x15/0xb0 [ 161.194364][ T7745] ? do_syscall_64+0xbe/0x3b0 [ 161.194388][ T7745] do_syscall_64+0xfa/0x3b0 [ 161.194404][ T7745] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.194421][ T7745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.194437][ T7745] ? clear_bhb_loop+0x60/0xb0 [ 161.194459][ T7745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.194474][ T7745] RIP: 0033:0x7f70bb38eba9 [ 161.194490][ T7745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.194504][ T7745] RSP: 002b:00007f70bc203038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.194524][ T7745] RAX: ffffffffffffffda RBX: 00007f70bb5d5fa0 RCX: 00007f70bb38eba9 [ 161.194536][ T7745] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000005 [ 161.194547][ T7745] RBP: 00007f70bc203090 R08: 0000000000000000 R09: 0000000000000000 [ 161.194557][ T7745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.194567][ T7745] R13: 00007f70bb5d6038 R14: 00007f70bb5d5fa0 R15: 00007ffe77863098 [ 161.194598][ T7745] [ 162.339817][ T7787] netlink: 'syz.7.492': attribute type 1 has an invalid length. [ 162.546819][ T7787] bond3: entered promiscuous mode [ 162.552966][ T7787] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.659212][ T7793] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.672411][ T7793] bond3: (slave bond4): making interface the new active one [ 162.728806][ T7793] bond4: entered promiscuous mode [ 162.753319][ T7793] bond3: (slave bond4): Enslaving as an active interface with an up link [ 162.889501][ T7800] __nla_validate_parse: 4 callbacks suppressed [ 162.889522][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'. [ 163.052179][ T7810] vlan2: entered promiscuous mode [ 163.097404][ T7813] netlink: 104 bytes leftover after parsing attributes in process `syz.7.499'. [ 163.192264][ T7803] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 163.957001][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 164.204599][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 164.213532][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'. [ 164.227888][ T7846] netlink: 'syz.0.510': attribute type 5 has an invalid length. [ 164.236353][ T7847] netlink: 40 bytes leftover after parsing attributes in process `syz.3.506'. [ 164.246241][ T1075] block nbd0: Possible stuck request ffff888024e95080: control (read@0,1024B). Runtime 60 seconds [ 164.254148][ T7846] netlink: 'syz.0.510': attribute type 6 has an invalid length. [ 164.259447][ T1075] block nbd0: Possible stuck request ffff888024e95240: control (read@1024,1024B). Runtime 60 seconds [ 164.275906][ T1075] block nbd0: Possible stuck request ffff888024e95400: control (read@2048,1024B). Runtime 60 seconds [ 164.297473][ T1075] block nbd0: Possible stuck request ffff888024e955c0: control (read@3072,1024B). Runtime 60 seconds [ 164.882835][ T7863] vlan0: entered promiscuous mode [ 164.898193][ T7863] macvtap0: entered promiscuous mode [ 164.922854][ T7865] netlink: 48 bytes leftover after parsing attributes in process `syz.0.517'. [ 164.991246][ T7868] netlink: 104 bytes leftover after parsing attributes in process `syz.3.516'. [ 165.089220][ T7870] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.519'. [ 165.112689][ T7875] netlink: 14 bytes leftover after parsing attributes in process `syz.5.520'. [ 165.533193][ T7888] netlink: 'syz.0.525': attribute type 1 has an invalid length. [ 165.560666][ T7888] netlink: 'syz.0.525': attribute type 3 has an invalid length. [ 165.568362][ T7888] NCSI netlink: No device for ifindex 246 [ 166.598698][ T7921] netlink: 'syz.5.537': attribute type 4 has an invalid length. [ 166.920842][ T7928] net_ratelimit: 2 callbacks suppressed [ 166.920863][ T7928] openvswitch: netlink: Message has 16 unknown bytes. [ 167.680077][ T7955] netlink: 'syz.7.551': attribute type 1 has an invalid length. [ 167.703825][ T7955] netlink: 'syz.7.551': attribute type 3 has an invalid length. [ 167.957588][ T7955] ip6_vti0: entered allmulticast mode [ 168.076024][ T7972] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 168.282253][ T7979] __nla_validate_parse: 9 callbacks suppressed [ 168.282272][ T7979] netlink: 20 bytes leftover after parsing attributes in process `syz.5.561'. [ 168.421931][ T7985] veth1_macvtap: left promiscuous mode [ 168.427566][ T7985] macsec0: entered promiscuous mode [ 168.433722][ T7985] macsec0: entered allmulticast mode [ 168.439257][ T7992] netlink: 'syz.6.559': attribute type 1 has an invalid length. [ 168.475963][ T7986] netlink: 56 bytes leftover after parsing attributes in process `syz.7.563'. [ 168.487535][ T7992] netlink: 'syz.6.559': attribute type 1 has an invalid length. [ 168.520646][ T7995] veth1_macvtap: entered promiscuous mode [ 168.557698][ T7995] veth1_macvtap: entered allmulticast mode [ 168.624750][ T7995] macsec0: left promiscuous mode [ 168.652585][ T7995] macsec0: left allmulticast mode [ 168.670801][ T7995] veth1_macvtap: left allmulticast mode [ 168.721365][ T8001] netlink: 'syz.5.566': attribute type 1 has an invalid length. [ 168.759276][ T8003] netlink: 'syz.6.559': attribute type 1 has an invalid length. [ 168.824394][ T8001] bond3: entered promiscuous mode [ 168.849731][ T8001] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.950072][ T8006] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.964736][ T8006] bond3: (slave bond4): making interface the new active one [ 168.972627][ T8006] bond4: entered promiscuous mode [ 168.978604][ T8006] bond3: (slave bond4): Enslaving as an active interface with an up link [ 169.633682][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.577'. [ 169.651040][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.5.577'. [ 169.672602][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.5.577'. [ 169.778402][ T8036] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 170.190162][ T8045] netlink: 'syz.6.581': attribute type 1 has an invalid length. [ 170.215458][ T8045] netlink: 'syz.6.581': attribute type 1 has an invalid length. [ 170.291577][ T8050] netlink: 'syz.3.583': attribute type 1 has an invalid length. [ 170.398805][ T8050] bond2: entered promiscuous mode [ 170.418041][ T8050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.585527][ T8058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.622029][ T8058] bond2: (slave bond3): making interface the new active one [ 170.631179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.651406][ T8058] bond3: entered promiscuous mode [ 170.659919][ T8072] netlink: 'syz.6.581': attribute type 1 has an invalid length. [ 170.662107][ T8058] bond2: (slave bond3): Enslaving as an active interface with an up link [ 171.189128][ T8094] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 171.275121][ T5928] TC_ACT_REPEAT abuse ? [ 171.279650][ T8094] TC_ACT_REPEAT abuse ? [ 171.284330][ T2152] TC_ACT_REPEAT abuse ? [ 172.129935][ T8130] ------------[ cut here ]------------ [ 172.135803][ T8130] hook not found, pf 2 num 3 [ 172.144648][ T8130] WARNING: CPU: 1 PID: 8130 at net/netfilter/core.c:514 __nf_unregister_net_hook+0x30a/0x700 [ 172.160259][ T8130] Modules linked in: [ 172.164442][ T8130] CPU: 1 UID: 0 PID: 8130 Comm: syz.6.607 Not tainted syzkaller #0 PREEMPT(full) [ 172.174030][ T8130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 172.184271][ T8130] RIP: 0010:__nf_unregister_net_hook+0x30a/0x700 [ 172.190935][ T8130] Code: e2 d5 e3 05 01 90 48 8b 44 24 10 0f b6 04 28 84 c0 0f 85 e3 03 00 00 41 8b 17 48 c7 c7 c0 c1 99 8c 44 89 ee e8 d7 95 d9 f7 90 <0f> 0b 90 90 e9 d8 01 00 00 e8 48 ea d0 01 89 c3 31 ff 89 c6 e8 ed [ 172.212349][ T8130] RSP: 0018:ffffc9000417ef10 EFLAGS: 00010246 [ 172.215208][ T8134] netlink: 40 bytes leftover after parsing attributes in process `syz.3.609'. [ 172.218456][ T8130] RAX: 82ab5ddd9cbe4200 RBX: ffff8880572d9980 RCX: ffff888033970000 [ 172.236595][ T8130] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 172.238445][ T8135] FAULT_INJECTION: forcing a failure. [ 172.238445][ T8135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.244647][ T8130] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 172.244666][ T8130] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff88807715a440 [ 172.244682][ T8130] R13: 0000000000000002 R14: ffff88807715b6a0 R15: ffff8880763ec63c [ 172.244697][ T8130] FS: 00007f17e456d6c0(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 172.244716][ T8130] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.244731][ T8130] CR2: 000055558118e808 CR3: 00000000752a4000 CR4: 00000000003526f0 [ 172.244752][ T8130] Call Trace: [ 172.268480][ T8134] netlink: 560 bytes leftover after parsing attributes in process `syz.3.609'. [ 172.274434][ T8130] [ 172.323743][ T8130] nft_table_disable+0x37e/0x440 [ 172.328744][ T8130] nf_tables_commit+0x5458/0x8700 [ 172.334198][ T8130] ? ___sys_sendmsg+0x21f/0x2a0 [ 172.339118][ T8130] ? __pfx_nf_tables_commit+0x10/0x10 [ 172.339391][ T8135] CPU: 0 UID: 0 PID: 8135 Comm: syz.6.607 Not tainted syzkaller #0 PREEMPT(full) [ 172.339413][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 172.339424][ T8135] Call Trace: [ 172.339431][ T8135] [ 172.339437][ T8135] dump_stack_lvl+0x189/0x250 [ 172.339459][ T8135] ? __pfx____ratelimit+0x10/0x10 [ 172.339478][ T8135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.339498][ T8135] ? __pfx__printk+0x10/0x10 [ 172.339535][ T8135] should_fail_ex+0x414/0x560 [ 172.339563][ T8135] _copy_to_user+0x31/0xb0 [ 172.339585][ T8135] simple_read_from_buffer+0xe1/0x170 [ 172.339614][ T8135] proc_fail_nth_read+0x1b3/0x220 [ 172.339637][ T8135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.339660][ T8135] ? rw_verify_area+0x2a6/0x4d0 [ 172.339680][ T8135] ? __lock_acquire+0xab9/0xd20 [ 172.339701][ T8135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.339721][ T8135] vfs_read+0x200/0xa30 [ 172.339741][ T8135] ? fdget_pos+0x247/0x320 [ 172.339761][ T8135] ? __pfx___mutex_lock+0x10/0x10 [ 172.339781][ T8135] ? __pfx_vfs_read+0x10/0x10 [ 172.339804][ T8135] ? __fget_files+0x2a/0x420 [ 172.339824][ T8135] ? __fget_files+0x3a0/0x420 [ 172.339838][ T8135] ? __fget_files+0x2a/0x420 [ 172.339864][ T8135] ksys_read+0x145/0x250 [ 172.339888][ T8135] ? __pfx_ksys_read+0x10/0x10 [ 172.339915][ T8135] ? do_syscall_64+0xbe/0x3b0 [ 172.339939][ T8135] do_syscall_64+0xfa/0x3b0 [ 172.339955][ T8135] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.339972][ T8135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.339989][ T8135] ? clear_bhb_loop+0x60/0xb0 [ 172.340011][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.340035][ T8135] RIP: 0033:0x7f17e378d5bc [ 172.340051][ T8135] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 172.340065][ T8135] RSP: 002b:00007f17e454c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.340083][ T8135] RAX: ffffffffffffffda RBX: 00007f17e39d6090 RCX: 00007f17e378d5bc [ 172.340095][ T8135] RDX: 000000000000000f RSI: 00007f17e454c0a0 RDI: 0000000000000005 [ 172.340106][ T8135] RBP: 00007f17e454c090 R08: 0000000000000000 R09: 0000000000000000 [ 172.340116][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.340126][ T8135] R13: 00007f17e39d6128 R14: 00007f17e39d6090 R15: 00007ffe34503dc8 [ 172.340156][ T8135] [ 172.588889][ T8130] ? nft_pernet+0x23/0x240 [ 172.593653][ T8130] ? nft_pernet+0x23/0x240 [ 172.598119][ T8130] ? nft_pernet+0x23/0x240 [ 172.602659][ T8130] ? nft_pernet+0x23/0x240 [ 172.607131][ T8130] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 172.613729][ T8130] ? nf_tables_newtable+0x142d/0x1890 [ 172.620325][ T8130] nfnetlink_rcv+0x1a4b/0x2520 [ 172.625185][ T8130] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 172.631625][ T8130] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 172.637654][ T8130] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.642956][ T8130] netlink_unicast+0x82f/0x9e0 [ 172.647772][ T8130] ? __pfx_netlink_unicast+0x10/0x10 [ 172.653404][ T8130] ? netlink_sendmsg+0x642/0xb30 [ 172.658378][ T8130] ? skb_put+0x11b/0x210 [ 172.662736][ T8130] netlink_sendmsg+0x805/0xb30 [ 172.667548][ T8130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.673164][ T8130] ? aa_sock_msg_perm+0xf1/0x1d0 [ 172.678146][ T8130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.683515][ T8130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.688842][ T8130] __sock_sendmsg+0x21c/0x270 [ 172.693903][ T8130] ____sys_sendmsg+0x505/0x830 [ 172.698748][ T8130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.704135][ T8130] ? import_iovec+0x74/0xa0 [ 172.708696][ T8130] ___sys_sendmsg+0x21f/0x2a0 [ 172.713736][ T8130] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.720108][ T8130] ? __fget_files+0x2a/0x420 [ 172.725483][ T8130] ? __fget_files+0x3a0/0x420 [ 172.730495][ T8130] __x64_sys_sendmsg+0x19b/0x260 [ 172.735478][ T8130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.741226][ T8130] ? rcu_is_watching+0x15/0xb0 [ 172.746614][ T8130] ? do_syscall_64+0xbe/0x3b0 [ 172.751642][ T8130] do_syscall_64+0xfa/0x3b0 [ 172.756351][ T8130] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.761619][ T8130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.767898][ T8130] ? clear_bhb_loop+0x60/0xb0 [ 172.772922][ T8130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.778839][ T8130] RIP: 0033:0x7f17e378eba9 [ 172.783346][ T8130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.803543][ T8130] RSP: 002b:00007f17e456d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.812066][ T8130] RAX: ffffffffffffffda RBX: 00007f17e39d5fa0 RCX: 00007f17e378eba9 [ 172.822394][ T8130] RDX: 0000000000002000 RSI: 0000200000000100 RDI: 0000000000000003 [ 172.831241][ T8130] RBP: 00007f17e3811e19 R08: 0000000000000000 R09: 0000000000000000 [ 172.839247][ T8130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.848566][ T8130] R13: 00007f17e39d6038 R14: 00007f17e39d5fa0 R15: 00007ffe34503dc8 [ 172.856883][ T8130] [ 172.859915][ T8130] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 172.867209][ T8130] CPU: 1 UID: 0 PID: 8130 Comm: syz.6.607 Not tainted syzkaller #0 PREEMPT(full) [ 172.876417][ T8130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 172.886483][ T8130] Call Trace: [ 172.889773][ T8130] [ 172.892712][ T8130] dump_stack_lvl+0x99/0x250 [ 172.897314][ T8130] ? __asan_memcpy+0x40/0x70 [ 172.901908][ T8130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.907122][ T8130] ? __pfx__printk+0x10/0x10 [ 172.911746][ T8130] vpanic+0x281/0x750 [ 172.915745][ T8130] ? __pfx__printk+0x10/0x10 [ 172.920343][ T8130] ? __pfx_vpanic+0x10/0x10 [ 172.924856][ T8130] ? is_bpf_text_address+0x292/0x2b0 [ 172.930168][ T8130] panic+0xb9/0xc0 [ 172.933890][ T8130] ? __pfx_panic+0x10/0x10 [ 172.938323][ T8130] __warn+0x31b/0x4b0 [ 172.942304][ T8130] ? __nf_unregister_net_hook+0x30a/0x700 [ 172.948031][ T8130] ? __nf_unregister_net_hook+0x30a/0x700 [ 172.953751][ T8130] report_bug+0x2be/0x4f0 [ 172.958084][ T8130] ? __nf_unregister_net_hook+0x30a/0x700 [ 172.963803][ T8130] ? __nf_unregister_net_hook+0x30a/0x700 [ 172.969535][ T8130] ? __nf_unregister_net_hook+0x30c/0x700 [ 172.975273][ T8130] handle_bug+0x84/0x160 [ 172.979527][ T8130] exc_invalid_op+0x1a/0x50 [ 172.984038][ T8130] asm_exc_invalid_op+0x1a/0x20 [ 172.988908][ T8130] RIP: 0010:__nf_unregister_net_hook+0x30a/0x700 [ 172.995246][ T8130] Code: e2 d5 e3 05 01 90 48 8b 44 24 10 0f b6 04 28 84 c0 0f 85 e3 03 00 00 41 8b 17 48 c7 c7 c0 c1 99 8c 44 89 ee e8 d7 95 d9 f7 90 <0f> 0b 90 90 e9 d8 01 00 00 e8 48 ea d0 01 89 c3 31 ff 89 c6 e8 ed [ 173.014867][ T8130] RSP: 0018:ffffc9000417ef10 EFLAGS: 00010246 [ 173.020953][ T8130] RAX: 82ab5ddd9cbe4200 RBX: ffff8880572d9980 RCX: ffff888033970000 [ 173.028928][ T8130] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 173.037004][ T8130] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 173.044980][ T8130] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff88807715a440 [ 173.052955][ T8130] R13: 0000000000000002 R14: ffff88807715b6a0 R15: ffff8880763ec63c [ 173.060960][ T8130] nft_table_disable+0x37e/0x440 [ 173.065918][ T8130] nf_tables_commit+0x5458/0x8700 [ 173.070949][ T8130] ? ___sys_sendmsg+0x21f/0x2a0 [ 173.075822][ T8130] ? __pfx_nf_tables_commit+0x10/0x10 [ 173.081203][ T8130] ? nft_pernet+0x23/0x240 [ 173.085632][ T8130] ? nft_pernet+0x23/0x240 [ 173.090053][ T8130] ? nft_pernet+0x23/0x240 [ 173.094470][ T8130] ? nft_pernet+0x23/0x240 [ 173.098893][ T8130] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 173.105148][ T8130] ? nf_tables_newtable+0x142d/0x1890 [ 173.110539][ T8130] nfnetlink_rcv+0x1a4b/0x2520 [ 173.115341][ T8130] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 173.120503][ T8130] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 173.126579][ T8130] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.131793][ T8130] netlink_unicast+0x82f/0x9e0 [ 173.136573][ T8130] ? __pfx_netlink_unicast+0x10/0x10 [ 173.141874][ T8130] ? netlink_sendmsg+0x642/0xb30 [ 173.146810][ T8130] ? skb_put+0x11b/0x210 [ 173.151057][ T8130] netlink_sendmsg+0x805/0xb30 [ 173.155828][ T8130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.161117][ T8130] ? aa_sock_msg_perm+0xf1/0x1d0 [ 173.166054][ T8130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.171336][ T8130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.176622][ T8130] __sock_sendmsg+0x21c/0x270 [ 173.181305][ T8130] ____sys_sendmsg+0x505/0x830 [ 173.186164][ T8130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.191458][ T8130] ? import_iovec+0x74/0xa0 [ 173.196060][ T8130] ___sys_sendmsg+0x21f/0x2a0 [ 173.200743][ T8130] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.206154][ T8130] ? __fget_files+0x2a/0x420 [ 173.210745][ T8130] ? __fget_files+0x3a0/0x420 [ 173.215443][ T8130] __x64_sys_sendmsg+0x19b/0x260 [ 173.220392][ T8130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.225862][ T8130] ? rcu_is_watching+0x15/0xb0 [ 173.230633][ T8130] ? do_syscall_64+0xbe/0x3b0 [ 173.235320][ T8130] do_syscall_64+0xfa/0x3b0 [ 173.239826][ T8130] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.245027][ T8130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.251105][ T8130] ? clear_bhb_loop+0x60/0xb0 [ 173.255803][ T8130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.261703][ T8130] RIP: 0033:0x7f17e378eba9 [ 173.266135][ T8130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.285747][ T8130] RSP: 002b:00007f17e456d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.294188][ T8130] RAX: ffffffffffffffda RBX: 00007f17e39d5fa0 RCX: 00007f17e378eba9 [ 173.302245][ T8130] RDX: 0000000000002000 RSI: 0000200000000100 RDI: 0000000000000003 [ 173.310215][ T8130] RBP: 00007f17e3811e19 R08: 0000000000000000 R09: 0000000000000000 [ 173.318194][ T8130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.326162][ T8130] R13: 00007f17e39d6038 R14: 00007f17e39d5fa0 R15: 00007ffe34503dc8 [ 173.334155][ T8130] [ 173.337442][ T8130] Kernel Offset: disabled [ 173.341760][ T8130] Rebooting in 86400 seconds..