last executing test programs: 2.835004831s ago: executing program 2 (id=1956): r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000004380)=[{{&(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}], 0x20}}, {{&(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_ttl={{0xffffffffffffff82}}], 0x18}}], 0x2, 0x40000c4) r1 = socket$inet(0x2, 0x5, 0x100) getsockopt$MRT(r1, 0x0, 0xd0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.608145952s ago: executing program 2 (id=1960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000100)={0x64, @multicast2, 0x4e24, 0x3, 'sh\x00', 0x0, 0xfffffffa, 0x7d}, 0x2c) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfffb}, {0xfff1, 0x4}, {0xa06d1318dbb4eb2c}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) bind$alg(r8, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) (async) bind$alg(r8, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) accept4$ax25(r1, &(0x7f0000000340)={{0x3, @default}, [@rose, @null, @default, @rose, @default, @remote, @remote, @netrom]}, &(0x7f00000000c0)=0x48, 0x80800) (async) r9 = accept4$ax25(r1, &(0x7f0000000340)={{0x3, @default}, [@rose, @null, @default, @rose, @default, @remote, @remote, @netrom]}, &(0x7f00000000c0)=0x48, 0x80800) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x30, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7b8, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x0, 0x0, 0x9, 0xa, 0x30, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5d89abfa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x9, 0xfa, &(0x7f0000000840)=""/250, 0x40f00, 0x20, '\x00', r3, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x6}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000780)={r9, r10}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000780)={r9, r10}) r11 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r11, 0x6a, 0x2, 0x20000000, 0x3) recvfrom$rose(r1, &(0x7f0000000280)=""/170, 0xaa, 0x2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, [@bcast, @null, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x1c, r7, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x1c, r7, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x0) 2.44568117s ago: executing program 4 (id=1963): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x22}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.861238789s ago: executing program 4 (id=1969): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffd4a, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x34}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x2438b44978335792}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x24048000) 1.854609818s ago: executing program 3 (id=1970): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000)={r2}, &(0x7f00000002c0)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000080)={"176b5ae2dd1cc42078302bbf21eab849", r5, r6, {0x8000, 0x80}, {0x3, 0xf}, 0x5, [0xc0, 0x1, 0xfffffffffffffffc, 0xed8d, 0xffff, 0xffffffffffffffff, 0x5, 0xa52f, 0xfa, 0xce46, 0x8000000000000000, 0xfffffffffffffffe, 0x1, 0x6d, 0x100, 0x8]}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) sendto$unix(r3, &(0x7f0000000640)="00a8", 0x2, 0xd1, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x4000090) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r12, &(0x7f000000bb40), 0x0, 0x4000011) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r3}, 0x8) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r13, 0x800448d3, &(0x7f0000000300)={@none, 0x4925b625, 0xf7c, 0x800, 0x8, 0x4, "4dee349eaea95dba171b049ead03244847b32ab77d19ef2e08a77fe48e86f36ec2a3419a1e92666778988557b89f985e3b38a35c8f9ea5a78be984aecd9318f61ed5f27949ae247a5ab789c12d8dae09264b2889e21821c9b63f95197e31bfd1f6030802bef589eb017b0348386c8b0031cfb26b56a2264842192e4a79361e1c"}) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219, 0x20904}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x3c}}, 0x0) 1.854198722s ago: executing program 2 (id=1971): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r1, 0x0, 0x0, 0x800) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xc, [@enum64={0x2, 0x4, 0x0, 0x13, 0x0, 0x4, [{0xf, 0x52, 0xfffffffc}, {0x5, 0x6, 0x7ff}, {0x7, 0x101, 0x8}, {0x1, 0x10, 0xfffffffe}]}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x5}, @ptr={0xe}]}, {0x0, [0x2e, 0x61, 0x2e, 0x30, 0x2e, 0x0, 0x61, 0x61, 0x5f, 0x1e]}}, &(0x7f0000000240)=""/173, 0x78, 0xad, 0x1, 0x7ff}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast5-avx\x00'}, 0x58) 1.806457591s ago: executing program 0 (id=1973): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (fail_nth: 44) 1.721256483s ago: executing program 2 (id=1974): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x8902, &(0x7f0000000080)={@loopback={0x8000000000}, @loopback, @empty}) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x2, @empty}}]}, 0x50}}, 0x0) 1.720230868s ago: executing program 4 (id=1975): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r0], 0x44}}, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r1, 0x80089000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, r1, 0x0) 1.631908862s ago: executing program 4 (id=1976): r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x20000400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r3 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4) sendto$inet(r3, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) recvfrom$l2tp6(r3, 0x0, 0x0, 0x2022, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f00000000c0)="10008100", 0x4, 0x0, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x1, 0x6, @multicast}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) bind$xdp(r0, 0x0, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDFWD(r7, 0x8940, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000000)={0x0, 'pimreg\x00', {0x4}, 0x7a0c}) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r9, 0x29, 0x12, 0x0, 0x9f) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000000)=0x8000, 0x4) shutdown(r10, 0x1) recvmmsg(r10, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @multicast2}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x0, {0x2, 0x4e24, @remote}, 'macvlan0\x00'}) 1.206459522s ago: executing program 0 (id=1977): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1], 0x34}, 0x1, 0x0, 0x0, 0x40400c0}, 0x40084) 1.093112361s ago: executing program 0 (id=1978): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000709fefffffffcffffff017c0000040042801400018006000600bd0a000006000c00bd0a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) 708.710396ms ago: executing program 4 (id=1980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x80800) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) r6 = socket(0x10, 0x803, 0x0) sendfile(r6, r5, &(0x7f0000000000)=0x10, 0x1000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB="08001f00910000000a4b75c50fdeba02000000000000007504d713b28485c4e491c1fd9dc20e9497bd6dae9b64f774eec32397"], 0x44}}, 0x0) 653.180224ms ago: executing program 2 (id=1981): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 647.576682ms ago: executing program 0 (id=1982): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="08005a8004000280"], 0x24}}, 0x0) 636.778869ms ago: executing program 2 (id=1983): r0 = socket$nl_rdma(0x10, 0x3, 0x14) read(r0, &(0x7f0000000040)=""/59, 0x3b) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x10, 0x1409, 0x100, 0x70bd2b, 0x1000}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) 558.695093ms ago: executing program 0 (id=1985): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x11e, 0x40, 0x0, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000000780)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000140)="0facda1d0bee0fbc844838980a219be58749f1bd481223da940e0d8c5377b0dcb16e5cdfeca4c0d6c8796af14c604a0423983499d1da13f5ac487d00b726979331be519f90ce9c39ea2e9d34234f28ad1bb7a8d5d26037f14d4d1a7468883f271e8697218ec11dadca369ae7f0f3538c0d059a0964dad29fdbc50d653e51e0046dc22c51c84dcce3903ee9f3d149599a1b28f31071f25f1c7062397df4f9566e7781dcbadb998766ca5a02048538a7e4f6caddebf5f0b38c45a3e94b2c2a1b86c53b149ac3e30900de5432716880307eeb979a47eb24a08c7c66aa0234bf0b970f4d4926368080e85a8826541773bad8d5", 0xf1}, {&(0x7f00000004c0)="a46ee510e5ff23e9bd85f92691b3e6dc88f63ad408cd79e6674f94df8835ab6b689f01feddb950f4b76d082ae16fef8c1da55bcce86c6246caf78ec698bcbd5e1a200e4327dc2acefaf34635acb7ea84be775ee6b7208e4af29d5c5aeb94d9bc62a1581cc4d31f6896ca3faa4d06c2bd5bdb1025847092854b7147b7cbdc6f0f67970048f14eb7bf419811fe00736f0a7a731e2fe9f578aae691a18b2df2a6777872efcc425a3c75bd2efb27b2c714b213df33a4e01c0d04892eb6f7de2a7cdd8933c253a221a6570be05b60f221f1ecabaeb0f6817d7df918", 0xd9}, {&(0x7f00000005c0)="eb0a625b73764bce64c1a35375c697ca808592ac3b91b0627d575ae7f04ecf02c17d5544dcb6e34303a849b78ceee2e9dc6515416c2a6bf726e0887a5cebe10af6e341783190251ace1be9a7afbab290a5668bd485c7ac9aa618d0f3f85307ec873e8671c1246f6ce1f0a23ad39128528c7069e32d12b696095a8741728f425747b5adea3f054aea339db80aa9b68f6c06c5b2e4aa715ddd65fd6b298a31b0c6f33fc30ad07fb6a43391fde5fdfb4df925", 0xb1}, {&(0x7f00000002c0)="b3276ec8c25b4004208b9c3497340d40e58d68cb7767f52fd17e25d2497f92364615acdafadf8f5fc5e5dc16de5a9de6134ad081f1fb91768dc956d47d764c0b9fa6e08c8a3c08974b5f6c68658c2a55c77e4e8bbb8ee2bc4bf8c0", 0x5b}, {&(0x7f0000000380)="5b2ba8405adb0c4db5759dcf61b2f37396049e9aae20c4b6", 0x18}, {&(0x7f0000000680)="46bc46849d3831dd631dad9e06adcef033d2d9b4ba500a311fb6b09b0f2bb5a47771a7450a7d055c3b90046f018d5127df389d2740ad77f926542900511a05b304ea1739d164bdf1410ccaf40744baae8e6afe223b490e5113239c962d4345c76cb6d40b2e9235e079d953b8ac841f5a3e9517a2b2311b84ac6f3a97b5f22396935c9136e3cbe1af2b4b9e1196d8c7dd8cc2e6b5e287d67bc26b96a5ed2a3af866c149eb81b9cbb7447420eb06b1e8cd2ed81067233bf4d79e3270ad1948252a048f2a1da117f9c1236f55f28380dce7d48021b1ed85b3a3a0efd2da41fc492f", 0xe0}, {&(0x7f0000000400)="dcd497a4c8e6ad38813439c84dec83eed01a90d49e980d9c3649c272a398f6137a0826a9e4d23f8f3dd1bb5f7e973e9b71017bc1649fb7bfcf455db8af4b94c5faa5a6fcb9e115382e1909437114295db1a866f07ca809f4c612550218beaab922baece908aa88d1815b380b53", 0x6d}], 0x7, 0x0, 0x0, 0x4040881}, 0x20008800) bind$packet(r2, &(0x7f0000000080)={0x11, 0x4, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1b, &(0x7f0000000000)=0x3f, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xd}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000880), 0x180, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r7, @ANYBLOB="e4cfbc548c051f972d8fb4d0ac5906df4e561ec6b4e9325975f02d2e9cca3bbe08fe986cf8d0022ea7bda3115b9e5c9adfd61a08e666357c976e1942027ddacb8369e0abe77877c7a3e6ef697ed735cea64a6c4839db1169b12d1a461cd5cc90f4a2ea157c3231b1259f76640a4773bfcd6d6351d6ea4a73087bc5a8875880"], 0x38}}, 0x0) 541.685474ms ago: executing program 1 (id=1986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 433.094242ms ago: executing program 3 (id=1987): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000400)}, 0x10) r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044805) (async) sendmmsg$inet6(r0, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044805) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x114, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xff, 0xa8, @random="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"}]}, 0x114}, 0x1, 0x0, 0x0, 0x91}, 0x80) 431.813224ms ago: executing program 1 (id=1988): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) listen(r0, 0xa6e3) 394.374451ms ago: executing program 3 (id=1989): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, @mcast1, 0x20, 0xba08, 0xfffffc00, 0xd}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, @mcast1, 0x20, 0xba08, 0xfffffc00, 0xd}}) (async) 393.063422ms ago: executing program 1 (id=1990): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000003c0)='V', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000000040)=0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0xfc}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 277.106378ms ago: executing program 3 (id=1991): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x20000086) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000010000000000000005000100070000000900020073797a30000000000c00078008000b000000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x58}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) 276.786223ms ago: executing program 1 (id=1992): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0xffb, 0x4) (async) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0xffb, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r3, 0x11e, 0x0, 0x0, &(0x7f0000000040)=0xffffffffffffff16) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000200)={0x2, {{0xa, 0x4e24, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f}}}, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@typedef={0x0, 0x0, 0x0, 0x7}, @restrict, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}}, 0x0, 0x4a}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='bic\x00', 0x4) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='bic\x00', 0x4) shutdown(r2, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x2c, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$nl_route(0x10, 0x3, 0x0) 260.640327ms ago: executing program 3 (id=1993): syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c2"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='caif0\x00', 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) sendto$ax25(r2, 0x0, 0x0, 0xc891, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x439fb000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=ANY=[@ANYBLOB="80010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/312], 0x180}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffc, @remote}}]}]}, @IFLA_GROUP={0x8}]}, 0x58}}, 0x0) socket$netlink(0x10, 0x3, 0x14) 244.917088ms ago: executing program 0 (id=1994): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x2a, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x2a}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bdac9"}}}}}}}, 0x50) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000040)}, 0x8010) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'veth1_to_team\x00', 0x1}, 0x18) 132.885238ms ago: executing program 1 (id=1995): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005800000000005000400000000000c00078008000600000000010d000300686173683a6d616300"], 0x54}}, 0x0) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="6585203d3472e34381ad", 0xa}], 0x1}}], 0x1, 0x9200000000000000) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r3, 0x10e, 0x5, 0x0, 0x20000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000)=0x9, 0x4) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0, 0x3f, 0x0, 0x3f}}], 0x1, 0x9200000004008851) close(0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000280)) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005800000000005000400000000000c00078008000600000000010d000300686173683a6d616300"], 0x54}}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="6585203d3472e34381ad", 0xa}], 0x1}}], 0x1, 0x9200000000000000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$bt_BT_SECURITY(r3, 0x10e, 0x5, 0x0, 0x20000000) (async) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) (async) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000)=0x9, 0x4) (async) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0, 0x3f, 0x0, 0x3f}}], 0x1, 0x9200000004008851) (async) close(0x4) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) (async) socket$rds(0x15, 0x5, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000280)) (async) 122.008519ms ago: executing program 4 (id=1996): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x7fffffff, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007000010000000000fddbdf2507000000", @ANYRES32=r9, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r11) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) r12 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r12, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r12, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @private1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000080)=""/13, 0x2}, 0x20) syz_emit_ethernet(0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100100086dd6000a8bc006d0600fc000000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009088ea8d83d25ff34d780000fe04f989c6ad29fffa6369166d6cdfac9c10818150039937e482f87f4aebc3780622dfa976d798eea3727ce98e56a4d032561dfd4c2b1c15b2fbc6d6edfdb1"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0x1d161108a18bb434, 0x4}}}}]}, 0x40}}, 0x0) r14 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r14, &(0x7f0000000380)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x1, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@rthdr={{0x18, 0x29, 0x39, {0x88, 0x0, 0x1, 0x7}}}], 0x18}}], 0x2, 0x0) 22.920612ms ago: executing program 1 (id=1997): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x2}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x80b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x20000800) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x7600) syz_emit_ethernet(0x4e, &(0x7f0000000b00)={@random="79ee7ca42eea", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}}, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x16, &(0x7f0000000940)=ANY=[@ANYRES8=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bind$rose(r0, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x40) close(0x4) 0s ago: executing program 3 (id=1998): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)={@fallback=r1, r1, 0x2f}, 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000600)=r3, 0x4) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000900000000000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r6) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, r7, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x3, 0x11, 0x2}}]}, 0x4c}}, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r8, 0x5421, &(0x7f00000003c0)=0x3d49) (async) read$alg(r8, &(0x7f0000000140)=""/116, 0x74) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0401", @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="e80002803800010024000100d9476c625f66746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600000004"], 0x104}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB="00000000000000006400128009000100626f6e64000000005400028008001f"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_coalesce={0x3c}}) kernel console output (not intermixed with test programs): 221822][ T7235] netlink: 'syz.2.381': attribute type 20 has an invalid length. [ 89.236271][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.236368][ T7235] netlink: 'syz.2.381': attribute type 20 has an invalid length. [ 89.254653][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.309207][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.345562][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.377519][ T7253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.591629][ T7260] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 89.603731][ T7255] wg1: left promiscuous mode [ 89.704109][ T7255] veth3: left promiscuous mode [ 89.710163][ T7255] xfrm1: left promiscuous mode [ 89.716589][ T7271] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 89.733835][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.741386][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.781566][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.823308][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.850422][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.885122][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.911190][ T7275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.942978][ T7275] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 89.979665][ T7275] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 90.027984][ T7296] vlan2: entered allmulticast mode [ 90.036017][ T7296] bridge0: entered allmulticast mode [ 90.044998][ T7296] bridge2: port 1(vlan2) entered blocking state [ 90.045090][ T7284] syz.2.399: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 90.051491][ T7296] bridge2: port 1(vlan2) entered disabled state [ 90.057461][ T7284] ,cpuset= [ 90.071659][ T7296] vlan2: entered promiscuous mode [ 90.085922][ T7296] bridge0: entered promiscuous mode [ 90.086116][ T7284] /,mems_allowed=0-1 [ 90.098715][ T7284] CPU: 1 UID: 0 PID: 7284 Comm: syz.2.399 Not tainted syzkaller #0 PREEMPT(full) [ 90.098741][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.098753][ T7284] Call Trace: [ 90.098760][ T7284] [ 90.098767][ T7284] dump_stack_lvl+0x189/0x250 [ 90.098794][ T7284] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 90.098820][ T7284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.098841][ T7284] ? __pfx__printk+0x10/0x10 [ 90.098864][ T7284] ? lock_release+0x4b/0x3e0 [ 90.098891][ T7284] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 90.098915][ T7284] warn_alloc+0x214/0x310 [ 90.098945][ T7284] ? __pfx_warn_alloc+0x10/0x10 [ 90.098975][ T7284] ? __get_vm_area_node+0x28f/0x300 [ 90.099000][ T7284] ? nf_tables_newset+0x132b/0x2530 [ 90.099020][ T7284] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 90.099057][ T7284] ? alloc_pages_mpol+0x3cd/0x4a0 [ 90.099083][ T7284] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 90.099110][ T7284] ? rcu_is_watching+0x15/0xb0 [ 90.099129][ T7284] ? nf_tables_newset+0x132b/0x2530 [ 90.099147][ T7284] ? nf_tables_newset+0x132b/0x2530 [ 90.099165][ T7284] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 90.099190][ T7284] ? nf_tables_newset+0x132b/0x2530 [ 90.099209][ T7284] ? nft_table_lookup+0x211/0x230 [ 90.099228][ T7284] ? nft_set_lookup+0x128/0x150 [ 90.099249][ T7284] ? nft_hash_privsize+0xaf/0xf0 [ 90.099275][ T7284] nf_tables_newset+0x132b/0x2530 [ 90.099300][ T7284] ? __pfx_nf_tables_newset+0x10/0x10 [ 90.099329][ T7284] ? nfnl_pernet+0x23/0x240 [ 90.099358][ T7284] ? rcu_is_watching+0x15/0xb0 [ 90.099378][ T7284] ? lock_release+0x4b/0x3e0 [ 90.099405][ T7284] ? __nla_parse+0x40/0x60 [ 90.099434][ T7284] nfnetlink_rcv+0x1132/0x2520 [ 90.099470][ T7284] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 90.099500][ T7284] ? ref_tracker_free+0x63a/0x7d0 [ 90.099538][ T7284] ? __netlink_deliver_tap+0x807/0x850 [ 90.099565][ T7284] ? netlink_deliver_tap+0x2e/0x1b0 [ 90.099592][ T7284] ? lock_release+0x4b/0x3e0 [ 90.099622][ T7284] netlink_unicast+0x82c/0x9e0 [ 90.099649][ T7284] ? __pfx_netlink_unicast+0x10/0x10 [ 90.099673][ T7284] ? netlink_sendmsg+0x642/0xb30 [ 90.099698][ T7284] ? skb_put+0x11b/0x210 [ 90.099717][ T7284] netlink_sendmsg+0x805/0xb30 [ 90.099746][ T7284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.099774][ T7284] ? aa_sock_msg_perm+0xf1/0x1d0 [ 90.099793][ T7284] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 90.099812][ T7284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.099838][ T7284] __sock_sendmsg+0x21c/0x270 [ 90.099861][ T7284] ____sys_sendmsg+0x505/0x830 [ 90.099881][ T7284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.099904][ T7284] ? import_iovec+0x74/0xa0 [ 90.099925][ T7284] ___sys_sendmsg+0x21f/0x2a0 [ 90.099943][ T7284] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.099963][ T7284] ? futex_wake+0x4b2/0x560 [ 90.099998][ T7284] ? __fget_files+0x2a/0x420 [ 90.100024][ T7284] ? __fget_files+0x3a0/0x420 [ 90.100056][ T7284] __x64_sys_sendmsg+0x19b/0x260 [ 90.100077][ T7284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 90.100099][ T7284] ? rcu_is_watching+0x15/0xb0 [ 90.100119][ T7284] ? rcu_is_watching+0x15/0xb0 [ 90.100138][ T7284] do_syscall_64+0xfa/0x3b0 [ 90.100166][ T7284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.100185][ T7284] ? clear_bhb_loop+0x60/0xb0 [ 90.100205][ T7284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.100224][ T7284] RIP: 0033:0x7f526698ebe9 [ 90.100241][ T7284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.100258][ T7284] RSP: 002b:00007f52677c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.100279][ T7284] RAX: ffffffffffffffda RBX: 00007f5266bb5fa0 RCX: 00007f526698ebe9 [ 90.100293][ T7284] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 90.100305][ T7284] RBP: 00007f5266a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 90.100317][ T7284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.100328][ T7284] R13: 00007f5266bb6038 R14: 00007f5266bb5fa0 R15: 00007ffe6d305a28 [ 90.100356][ T7284] [ 90.100364][ T7284] Mem-Info: [ 90.510035][ T7284] active_anon:5391 inactive_anon:0 isolated_anon:0 [ 90.510035][ T7284] active_file:3335 inactive_file:39827 isolated_file:0 [ 90.510035][ T7284] unevictable:768 dirty:551 writeback:0 [ 90.510035][ T7284] slab_reclaimable:11165 slab_unreclaimable:96593 [ 90.510035][ T7284] mapped:30092 shmem:2368 pagetables:1112 [ 90.510035][ T7284] sec_pagetables:0 bounce:0 [ 90.510035][ T7284] kernel_misc_reclaimable:0 [ 90.510035][ T7284] free:1325454 free_pcp:17997 free_cma:0 [ 90.558486][ T7284] Node 0 active_anon:21620kB inactive_anon:0kB active_file:13340kB inactive_file:159100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120436kB dirty:2192kB writeback:0kB shmem:7996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11848kB pagetables:4144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 90.591080][ T7284] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 90.621767][ T7284] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.654173][ T7284] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 90.660166][ T7284] Node 0 DMA32 free:1406984kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21576kB inactive_anon:0kB active_file:13340kB inactive_file:157520kB unevictable:1536kB writepending:2184kB present:3129332kB managed:2557456kB mlocked:0kB bounce:0kB free_pcp:51012kB local_pcp:29056kB free_cma:0kB [ 90.696073][ T7284] lowmem_reserve[]: 0 0 1 1 1 [ 90.700905][ T7284] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:8kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 90.735558][ T7284] lowmem_reserve[]: 0 0 0 0 0 [ 90.740479][ T7284] Node 1 Normal free:3879364kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21100kB local_pcp:13472kB free_cma:0kB [ 90.773810][ T7284] lowmem_reserve[]: 0 0 0 0 0 [ 90.778575][ T7284] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 90.791698][ T7284] Node 0 DMA32: 356*4kB (M) 156*8kB (UME) 73*16kB (M) 32*32kB (ME) 23*64kB (UM) 7*128kB (M) 4*256kB (UME) 6*512kB (ME) 7*1024kB (UME) 4*2048kB (UME) 337*4096kB (M) = 1407040kB [ 90.811290][ T7284] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 90.823937][ T7284] Node 1 Normal: 155*4kB (UME) 65*8kB (UME) 51*16kB (UME) 59*32kB (UME) 15*64kB (UME) 8*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3879364kB [ 90.842862][ T7284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.852826][ T7284] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.862825][ T7284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.872754][ T7284] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.882273][ T7284] 45541 total pagecache pages [ 90.887073][ T7284] 0 pages in swap cache [ 90.891252][ T7284] Free swap = 124996kB [ 90.895558][ T7284] Total swap = 124996kB [ 90.899719][ T7284] 2097051 pages RAM [ 90.903727][ T7284] 0 pages HighMem/MovableOnly [ 90.907056][ T7323] tipc: Enabling of bearer rejected, already enabled [ 90.908836][ T7284] 425661 pages reserved [ 90.920935][ T7284] 0 pages cma reserved [ 91.220746][ T7343] netlink: 'syz.2.418': attribute type 5 has an invalid length. [ 91.247793][ T7346] gretap0: entered promiscuous mode [ 91.253663][ T7346] vlan3: entered promiscuous mode [ 91.461881][ T7362] netlink: 'syz.2.425': attribute type 7 has an invalid length. [ 91.596403][ T7365] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 91.630587][ T7367] sit0: entered promiscuous mode [ 91.635902][ T7367] netlink: 'syz.1.427': attribute type 1 has an invalid length. [ 91.828251][ T7388] netlink: 'syz.1.434': attribute type 11 has an invalid length. [ 91.958049][ T7391] smc: net device erspan0 applied user defined pnetid SYZ0 [ 92.354153][ T7418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.677763][ T7434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.690157][ T7434] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 92.788579][ T7440] __nla_validate_parse: 29 callbacks suppressed [ 92.788599][ T7440] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.452'. [ 92.866268][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.454'. [ 92.931103][ T7451] netlink: 64 bytes leftover after parsing attributes in process `syz.2.457'. [ 92.947558][ T7455] netlink: 76 bytes leftover after parsing attributes in process `syz.1.456'. [ 93.034010][ T7457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.063176][ T7457] bond0: (slave bond1): Enslaving as an active interface with an up link [ 93.081907][ T7469] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.461'. [ 93.135769][ T7474] netlink: 132 bytes leftover after parsing attributes in process `syz.2.463'. [ 93.220249][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 93.220676][ T7485] netlink: 256 bytes leftover after parsing attributes in process `syz.2.465'. [ 93.239783][ T7485] unsupported nlmsg_type 40 [ 93.354819][ T7498] pim6reg1: entered promiscuous mode [ 93.360163][ T7498] pim6reg1: entered allmulticast mode [ 93.500388][ T7503] syzkaller0: entered promiscuous mode [ 93.506029][ T7503] syzkaller0: entered allmulticast mode [ 93.515864][ T7503] validate_nla: 2 callbacks suppressed [ 93.515878][ T7503] netlink: 'syz.1.469': attribute type 28 has an invalid length. [ 93.530000][ T7503] netlink: 'syz.1.469': attribute type 3 has an invalid length. [ 93.537837][ T7503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.469'. [ 94.001171][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 94.214586][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 94.258076][ T7525] bridge_slave_0: left allmulticast mode [ 94.272373][ T7525] bridge_slave_0: left promiscuous mode [ 94.278596][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.304607][ T7525] bridge_slave_1: left allmulticast mode [ 94.310428][ T7525] bridge_slave_1: left promiscuous mode [ 94.322905][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.349290][ T7525] bond0: (slave bond_slave_0): Releasing backup interface [ 94.409262][ T7525] bond0: (slave bond_slave_1): Releasing backup interface [ 94.451269][ T7525] team0: Port device team_slave_0 removed [ 94.495543][ T7525] team0: Port device team_slave_1 removed [ 94.513777][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.533427][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.545234][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.552985][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.580378][ T7525] vlan2: left promiscuous mode [ 94.589702][ T7525] bridge0: left promiscuous mode [ 94.597851][ T7525] bridge2: port 1(vlan2) entered disabled state [ 94.625747][ T7546] tap0: tun_chr_ioctl cmd 1074025678 [ 94.636606][ T7546] tap0: group set to 0 [ 94.641511][ T7544] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 94.699587][ T7565] netlink: 'syz.0.488': attribute type 24 has an invalid length. [ 94.844063][ T7578] sctp: [Deprecated]: syz.2.491 (pid 7578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.844063][ T7578] Use struct sctp_sack_info instead [ 94.931444][ T7585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.051548][ T7595] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 95.078719][ T7595] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 95.171547][ T7609] netlink: 'syz.2.502': attribute type 7 has an invalid length. [ 95.187215][ T7609] : entered promiscuous mode [ 95.477234][ T7640] netlink: 'syz.4.511': attribute type 5 has an invalid length. [ 95.740414][ T7662] netlink: 'syz.1.517': attribute type 39 has an invalid length. [ 95.828303][ T7641] tipc: Enabling of bearer rejected, failed to enable media [ 95.877871][ T7672] netlink: 'syz.4.520': attribute type 1 has an invalid length. [ 95.893665][ T7665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.902769][ T7672] nbd: illegal input index 1048576 [ 96.435157][ T7719] tc_dump_action: action bad kind [ 96.465969][ T7723] netlink: 'syz.3.533': attribute type 7 has an invalid length. [ 96.517006][ T7723] : entered promiscuous mode [ 97.186023][ T7777] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 97.378730][ T7814] wg1 speed is unknown, defaulting to 1000 [ 97.468443][ T7814] wg1 speed is unknown, defaulting to 1000 [ 97.479638][ T7814] wg1 speed is unknown, defaulting to 1000 [ 97.514811][ T7814] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 97.563083][ T7814] wg1 speed is unknown, defaulting to 1000 [ 97.570055][ T7814] wg1 speed is unknown, defaulting to 1000 [ 97.624853][ T7814] wg1 speed is unknown, defaulting to 1000 [ 97.643107][ T7814] wg1 speed is unknown, defaulting to 1000 [ 97.676490][ T7814] wg1 speed is unknown, defaulting to 1000 [ 97.751027][ T7839] delete_channel: no stack [ 97.921002][ T7856] __nla_validate_parse: 20 callbacks suppressed [ 97.921023][ T7856] netlink: 116 bytes leftover after parsing attributes in process `syz.2.573'. [ 97.967086][ T7862] raw_sendmsg: syz.0.575 forgot to set AF_INET. Fix it! [ 98.228437][ T7892] netlink: 72 bytes leftover after parsing attributes in process `syz.3.581'. [ 98.242029][ T7892] netlink: 72 bytes leftover after parsing attributes in process `syz.3.581'. [ 98.373245][ T7904] IPv6: sit2: Disabled Multicast RS [ 98.379775][ T7904] sit2: entered allmulticast mode [ 98.693311][ T7937] validate_nla: 2 callbacks suppressed [ 98.693333][ T7937] netlink: 'syz.2.593': attribute type 1 has an invalid length. [ 98.731742][ T7937] netlink: 244 bytes leftover after parsing attributes in process `syz.2.593'. [ 98.752803][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'. [ 101.999821][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 102.009553][ T7960] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 102.017413][ T7960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.035284][ T7968] netlink: 'syz.0.603': attribute type 20 has an invalid length. [ 102.132325][ T7980] netlink: 48 bytes leftover after parsing attributes in process `syz.2.601'. [ 102.163506][ T7983] tipc: Started in network mode [ 102.208405][ T7983] tipc: Node identity , cluster identity 4711 [ 102.218306][ T7983] tipc: Failed to obtain node identity [ 102.226847][ T7983] tipc: Enabling of bearer rejected, failed to enable media [ 102.328884][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 102.364735][ T8004] netlink: 'syz.0.615': attribute type 10 has an invalid length. [ 102.397594][ T8004] batman_adv: batadv0: Adding interface: team0 [ 102.419444][ T8004] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.459772][ T8004] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 102.521590][ T8012] netlink: 244 bytes leftover after parsing attributes in process `syz.3.617'. [ 102.535481][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.617'. [ 102.544774][ T8012] bridge_slave_1: left allmulticast mode [ 102.550986][ T8012] bridge_slave_1: left promiscuous mode [ 102.560193][ T8012] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.571300][ T8012] bridge_slave_0: left allmulticast mode [ 102.588078][ T8012] bridge_slave_0: left promiscuous mode [ 102.595773][ T8012] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.749617][ T8034] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 102.814246][ T8043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.019186][ T8057] __nla_validate_parse: 4 callbacks suppressed [ 103.019207][ T8057] netlink: 216 bytes leftover after parsing attributes in process `syz.3.634'. [ 103.034406][ T8061] netlink: 'syz.2.635': attribute type 1 has an invalid length. [ 103.034429][ T8061] netlink: 224 bytes leftover after parsing attributes in process `syz.2.635'. [ 103.034444][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.635'. [ 103.036349][ T8062] team0: Device vti0 is of different type [ 103.062815][ T8066] netlink: 56 bytes leftover after parsing attributes in process `syz.0.636'. [ 103.342419][ T8094] netlink: 'syz.0.646': attribute type 10 has an invalid length. [ 103.389019][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 103.405156][ T8094] team0: Port device dummy0 added [ 103.417218][ T8103] netlink: 'syz.0.646': attribute type 10 has an invalid length. [ 103.459223][ T8103] team0: Port device dummy0 removed [ 103.645512][ T8124] vcan0: tx address claim with dlc 0 [ 103.780767][ T8141] batman_adv: batadv0: Removing interface: team0 [ 103.789978][ T8141] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 103.918391][ T8148] netlink: 32 bytes leftover after parsing attributes in process `syz.4.658'. [ 104.344693][ T8164] netlink: 'syz.1.662': attribute type 1 has an invalid length. [ 104.353048][ T8164] netlink: 224 bytes leftover after parsing attributes in process `syz.1.662'. [ 104.523277][ T8176] veth0: entered promiscuous mode [ 104.531072][ T8175] Illegal XDP return value 1293822755 on prog (id 224) dev N/A, expect packet loss! [ 104.770994][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 104.803250][ T8186] netlink: 'syz.0.669': attribute type 15 has an invalid length. [ 105.062470][ T5857] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.530118][ T8178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.540287][ T8178] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.556652][ T8178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.577018][ T8174] veth0: left promiscuous mode [ 107.644814][ T8202] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 107.651272][ T8202] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 107.673330][ T8202] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 107.679807][ T8202] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 107.688288][ T8202] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 107.694826][ T8202] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 107.707595][ T8207] netlink: 44 bytes leftover after parsing attributes in process `syz.1.672'. [ 107.725607][ T8207] netlink: 14 bytes leftover after parsing attributes in process `syz.1.672'. [ 107.743779][ T8202] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 107.750252][ T8202] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 107.772052][ T8207] hsr_slave_0: left promiscuous mode [ 107.780459][ T8207] hsr_slave_1: left promiscuous mode [ 107.810533][ T8220] veth0_to_bond: mtu less than device minimum [ 124.465972][ T8232] netlink: 20 bytes leftover after parsing attributes in process `syz.3.681'. [ 124.541181][ T8236] syzkaller0: entered promiscuous mode [ 124.563593][ T8236] syzkaller0: entered allmulticast mode [ 124.576798][ T8230] tipc: Started in network mode [ 124.581725][ T8230] tipc: Node identity 4e1fc42a99da, cluster identity 4711 [ 124.614100][ T8230] tipc: Enabled bearer , priority 0 [ 124.621851][ T8238] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (65485) ! [ 124.648183][ T8230] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 124.701689][ T8221] tipc: Resetting bearer [ 124.711694][ T8248] netlink: 'syz.0.687': attribute type 10 has an invalid length. [ 125.540736][ T8221] tipc: Disabling bearer [ 125.571834][ T8248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.600608][ T8259] netlink: 52 bytes leftover after parsing attributes in process `syz.3.690'. [ 125.757006][ T8270] netlink: 64 bytes leftover after parsing attributes in process `syz.2.695'. [ 125.787637][ T8270] tipc: MTU too low for tipc bearer [ 125.916676][ T8285] netlink: 'syz.1.700': attribute type 75 has an invalid length. [ 125.967639][ T8287] netlink: 'syz.2.702': attribute type 1 has an invalid length. [ 125.983966][ T8287] netlink: 224 bytes leftover after parsing attributes in process `syz.2.702'. [ 126.017716][ T8287] block nbd1: not configured, cannot reconfigure [ 126.050099][ T8298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.702'. [ 126.083974][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 126.176459][ T8309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.708'. [ 126.212856][ T8309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.708'. [ 126.250663][ T8319] bridge_slave_0: entered promiscuous mode [ 126.341888][ T8326] netlink: 32 bytes leftover after parsing attributes in process `syz.0.715'. [ 126.431844][ T8337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.716'. [ 126.529259][ T8344] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 126.598137][ T8344] netlink: 'syz.1.719': attribute type 10 has an invalid length. [ 126.622254][ T8344] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 126.664257][ T8344] bond0: (slave batadv0): Releasing backup interface [ 126.708314][ T8344] bridge_slave_0: left allmulticast mode [ 126.725416][ T8344] bridge_slave_0: left promiscuous mode [ 126.735389][ T8344] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.750975][ T8344] bridge_slave_1: left allmulticast mode [ 126.758392][ T8344] bridge_slave_1: left promiscuous mode [ 126.773491][ T8344] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.821234][ T8344] bond0: (slave bond_slave_0): Releasing backup interface [ 126.846304][ T8344] bond0: (slave bond_slave_1): Releasing backup interface [ 126.860895][ T8344] team0: Port device team_slave_0 removed [ 126.871456][ T8344] team0: Port device team_slave_1 removed [ 126.877990][ T8344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.887712][ T8344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.916102][ T8377] netlink: 'syz.4.726': attribute type 1 has an invalid length. [ 127.437950][ T8419] netlink: 'syz.3.740': attribute type 1 has an invalid length. [ 127.571885][ T8427] netlink: 'syz.0.743': attribute type 4 has an invalid length. [ 127.708433][ T8446] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 127.726514][ T8446] netlink: 'syz.2.750': attribute type 10 has an invalid length. [ 127.742218][ T8446] ipvlan1: entered promiscuous mode [ 127.747587][ T8446] ipvlan1: entered allmulticast mode [ 127.771467][ T8446] veth0_vlan: entered allmulticast mode [ 127.779336][ T8446] bridge0: port 3(ipvlan1) entered blocking state [ 127.787616][ T8446] bridge0: port 3(ipvlan1) entered disabled state [ 127.797686][ T8446] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 127.825976][ T8443] syzkaller1: entered promiscuous mode [ 127.834366][ T8443] syzkaller1: entered allmulticast mode [ 128.030256][ T8461] netlink: 'syz.3.754': attribute type 4 has an invalid length. [ 128.047241][ T8461] `: renamed from bond0 (while UP) [ 128.347992][ T8489] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 129.057910][ T8539] veth0_to_team: entered promiscuous mode [ 129.068526][ T8539] veth0_to_team: entered allmulticast mode [ 129.125832][ T8541] delete_channel: no stack [ 129.496724][ T8587] __nla_validate_parse: 19 callbacks suppressed [ 129.496744][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 129.527468][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 129.597927][ T8597] netlink: 48 bytes leftover after parsing attributes in process `syz.0.801'. [ 129.610020][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 129.621841][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 129.668401][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 129.700179][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 129.709564][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 129.735553][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 129.737648][ T8609] netlink: 'syz.2.806': attribute type 1 has an invalid length. [ 129.746856][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 130.128244][ T8637] team0: Device vti0 is up. Set it down before adding it as a team port [ 130.510810][ T1533] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 130.849636][ T8701] : renamed from hsr0 (while UP) [ 131.577289][ T8758] netlink: 'syz.3.852': attribute type 3 has an invalid length. [ 131.654857][ T8758] nbd0: detected capacity change from 0 to 127 [ 131.729468][ T5857] block nbd0: Receive control failed (result -32) [ 131.810634][ T8779] netlink: 'syz.0.859': attribute type 10 has an invalid length. [ 132.035635][ T8804] tipc: Enabled bearer , priority 0 [ 132.046672][ T8801] tipc: Resetting bearer [ 132.090466][ T8801] netlink: 'syz.3.866': attribute type 1 has an invalid length. [ 132.098251][ T8801] netlink: 'syz.3.866': attribute type 3 has an invalid length. [ 132.106126][ T8801] NCSI netlink: No device for ifindex 0 [ 132.137375][ T8800] tipc: Disabling bearer [ 132.389008][ T8823] netlink: 'syz.2.874': attribute type 1 has an invalid length. [ 132.412940][ T8826] netlink: 'syz.2.874': attribute type 1 has an invalid length. [ 132.479053][ T8821] sctp: [Deprecated]: syz.3.873 (pid 8821) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.479053][ T8821] Use struct sctp_sack_info instead [ 132.485729][ T8831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 132.503676][ T8831] bond3: (slave bond4): making interface the new active one [ 132.511396][ T8831] bond3: (slave bond4): Enslaving as an active interface with an up link [ 132.541354][ T8823] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 132.596948][ T8823] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.737758][ T8844] netlink: 'syz.2.880': attribute type 24 has an invalid length. [ 133.736651][ T8932] tipc: Started in network mode [ 133.741691][ T8932] tipc: Node identity b21f86df7dc5, cluster identity 4711 [ 133.749160][ T8932] tipc: Enabled bearer , priority 0 [ 133.761596][ T8937] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 133.765185][ T8940] netlink: 'syz.1.916': attribute type 12 has an invalid length. [ 133.785171][ T8932] syzkaller0: entered promiscuous mode [ 133.797494][ T8932] syzkaller0: entered allmulticast mode [ 133.862870][ T8933] tipc: Resetting bearer [ 133.870163][ T8931] tipc: Resetting bearer [ 133.902850][ T8931] tipc: Disabling bearer [ 134.159511][ T8970] netlink: 'syz.2.925': attribute type 8 has an invalid length. [ 134.605820][ T9011] wg1 speed is unknown, defaulting to 1000 [ 134.653229][ T9018] __nla_validate_parse: 91 callbacks suppressed [ 134.653249][ T9018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.941'. [ 134.683644][ T9018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.941'. [ 134.742614][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 134.753749][ T9018] gretap0: entered promiscuous mode [ 134.763476][ T9018] gretap0: left promiscuous mode [ 134.837495][ T9033] bridge1: entered promiscuous mode [ 134.852599][ T9033] bridge1: entered allmulticast mode [ 135.118844][ T9055] wg1 speed is unknown, defaulting to 1000 [ 135.158012][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 135.197824][ T9059] ip6gre2: entered allmulticast mode [ 135.229082][ T5857] Bluetooth: hci3: link tx timeout [ 135.234757][ T5857] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.246168][ T9056] wg1 speed is unknown, defaulting to 1000 [ 135.254686][ T5860] Bluetooth: hci3: link tx timeout [ 135.259840][ T5860] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.543792][ T9088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.961'. [ 135.614228][ T9095] netlink: 'syz.3.961': attribute type 1 has an invalid length. [ 135.630117][ T9095] netlink: 'syz.3.961': attribute type 1 has an invalid length. [ 135.642032][ T9095] netlink: 'syz.3.961': attribute type 1 has an invalid length. [ 135.651548][ T9095] netlink: 'syz.3.961': attribute type 2 has an invalid length. [ 135.678027][ T9095] netlink: 76 bytes leftover after parsing attributes in process `syz.3.961'. [ 135.688872][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.963'. [ 135.940236][ T9114] bond0: Device is already in use. [ 136.193547][ T9132] sit2: entered promiscuous mode [ 136.198673][ T9132] sit2: entered allmulticast mode [ 136.259229][ T9143] netlink: 'syz.3.977': attribute type 1 has an invalid length. [ 136.269198][ T9143] netlink: 224 bytes leftover after parsing attributes in process `syz.3.977'. [ 136.347638][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.980'. [ 136.509937][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 136.889973][ T9193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.995'. [ 136.925556][ T9193] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 137.083464][ T9216] IPVS: set_ctl: invalid protocol: 115 172.30.0.3:20003 [ 137.192030][ T9226] sctp: [Deprecated]: syz.3.1006 (pid 9226) Use of int in maxseg socket option. [ 137.192030][ T9226] Use struct sctp_assoc_value instead [ 137.303052][ T5860] Bluetooth: hci3: command 0x0405 tx timeout [ 137.323085][ T9237] netlink: 'syz.1.1010': attribute type 83 has an invalid length. [ 137.350579][ T9239] netlink: 'syz.2.1012': attribute type 83 has an invalid length. [ 137.379912][ T9241] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 137.644998][ T9276] netlink: 'syz.0.1022': attribute type 10 has an invalid length. [ 137.674135][ T9288] openvswitch: netlink: Unknown key attributes 2 [ 137.701749][ T9276] team0: Device hsr_slave_0 failed to register rx_handler [ 137.776631][ T9298] netlink: 'syz.1.1030': attribute type 13 has an invalid length. [ 137.785075][ T9298] macvtap0: entered allmulticast mode [ 137.791028][ T9298] macvtap0: refused to change device tx_queue_len [ 137.868814][ T9298] syzkaller0: entered promiscuous mode [ 137.875452][ T9298] syzkaller0: entered allmulticast mode [ 137.912760][ T9307] syzkaller0: entered promiscuous mode [ 137.918254][ T9307] syzkaller0: entered allmulticast mode [ 137.925407][ T9298] tipc: Enabled bearer , priority 0 [ 137.991514][ T9297] tipc: Resetting bearer [ 138.037517][ T9297] tipc: Disabling bearer [ 138.139688][ T9327] geneve2: entered promiscuous mode [ 138.147675][ T9327] geneve2: entered allmulticast mode [ 138.161270][ T1533] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 138.184573][ T1533] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 138.200919][ T1533] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 138.220418][ T1533] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 138.256732][ T9335] netlink: 'syz.1.1041': attribute type 33 has an invalid length. [ 138.417319][ T9349] Dead loop on virtual device ip6_vti0, fix it urgently! [ 138.472894][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.494071][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.562563][ T9362] openvswitch: netlink: Missing key (keys=40, expected=80) [ 138.898594][ T9394] macvlan0: entered promiscuous mode [ 138.904861][ T9394] macvlan0: entered allmulticast mode [ 138.957449][ T9400] gretap0: entered promiscuous mode [ 138.969881][ T9389] 0{X: renamed from gretap0 [ 138.977699][ T9389] 0{X: left promiscuous mode [ 138.985638][ T9389] 0{X: entered allmulticast mode [ 138.992662][ T9389] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 139.296270][ T9425] tipc: Started in network mode [ 139.301271][ T9425] tipc: Node identity da4953f005ed, cluster identity 4711 [ 139.308776][ T9425] tipc: Enabled bearer , priority 0 [ 139.320058][ T9425] syzkaller0: entered promiscuous mode [ 139.332163][ T9425] syzkaller0: entered allmulticast mode [ 139.415228][ T9425] tipc: Resetting bearer [ 139.442731][ T9424] tipc: Resetting bearer [ 139.487186][ T9424] tipc: Disabling bearer [ 139.693837][ T9459] __nla_validate_parse: 17 callbacks suppressed [ 139.693858][ T9459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1086'. [ 139.837763][ T9471] IPVS: length: 249 != 8 [ 139.947629][ T9485] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1094'. [ 140.016795][ T9491] tipc: Enabled bearer , priority 0 [ 140.030290][ T9495] syzkaller0: entered promiscuous mode [ 140.042020][ T9495] syzkaller0: entered allmulticast mode [ 140.067212][ T9491] tipc: Resetting bearer [ 140.120136][ T9491] tipc: Resetting bearer [ 140.128248][ T9507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.138345][ T9491] tipc: Disabling bearer [ 140.145125][ T9507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1101'. [ 140.161120][ T9504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1100'. [ 140.289569][ T9521] openvswitch: netlink: Missing key (keys=40, expected=80) [ 140.293193][ T9522] netlink: 'syz.4.1107': attribute type 11 has an invalid length. [ 140.304993][ T9522] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1107'. [ 140.550421][ T9534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1111'. [ 140.561886][ T9534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1111'. [ 140.581211][ T9537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1111'. [ 140.679602][ T9550] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.076338][ T9582] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1123'. [ 141.106847][ T9585] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 141.309989][ T9585] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 141.367716][ T9585] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 141.435440][ T9610] validate_nla: 1 callbacks suppressed [ 141.435461][ T9610] netlink: 'syz.3.1127': attribute type 1 has an invalid length. [ 141.436926][ T9585] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 141.465633][ T9610] netlink: 'syz.3.1127': attribute type 2 has an invalid length. [ 141.493444][ T9585] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 141.571881][ T2986] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 141.589251][ T2986] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 141.612556][ T2986] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 141.870848][ T9629] bridge: RTM_NEWNEIGH with invalid ether address [ 141.878141][ T9629] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1132'. [ 142.274277][ T9657] nbd: illegal input index -8454144 [ 142.289096][ T9657] netlink: 'syz.0.1141': attribute type 4 has an invalid length. [ 142.336233][ T9657] netlink: 'syz.0.1141': attribute type 4 has an invalid length. [ 142.398244][ T9667] gre2: entered promiscuous mode [ 142.409310][ T9667] gre2: entered allmulticast mode [ 142.415594][ T9669] netlink: 'syz.2.1147': attribute type 7 has an invalid length. [ 142.423520][ T9669] netlink: 'syz.2.1147': attribute type 8 has an invalid length. [ 142.439388][ T9669] netlink: 'syz.2.1147': attribute type 7 has an invalid length. [ 142.447406][ T9669] netlink: 'syz.2.1147': attribute type 8 has an invalid length. [ 142.638911][ T9687] wg1 speed is unknown, defaulting to 1000 [ 142.870144][ T9706] netlink: 'syz.2.1156': attribute type 27 has an invalid length. [ 143.196912][ T9589] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 143.302264][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 143.327908][ T9589] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 143.339938][ T9738] netlink: 'syz.0.1167': attribute type 1 has an invalid length. [ 143.355130][ T9738] NCSI netlink: No device for ifindex 131080 [ 143.409343][ T9742] geneve2: entered promiscuous mode [ 143.443363][ T9589] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 143.510871][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 143.532259][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 143.557249][ T1533] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 143.573310][ T1533] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 143.636437][ T9755] lo: entered allmulticast mode [ 143.876552][ T9775] tipc: Enabled bearer , priority 0 [ 143.889031][ T9775] syzkaller0: entered promiscuous mode [ 143.895754][ T9775] syzkaller0: entered allmulticast mode [ 143.914173][ T9775] tipc: Resetting bearer [ 143.921069][ T9774] tipc: Resetting bearer [ 143.930377][ T9774] tipc: Disabling bearer [ 144.474996][ T9824] veth0: entered promiscuous mode [ 144.565172][ T9832] hsr0 speed is unknown, defaulting to 1000 [ 144.571245][ T9832] hsr0 speed is unknown, defaulting to 1000 [ 144.580631][ T9832] hsr0 speed is unknown, defaulting to 1000 [ 144.596546][ T9832] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 144.615535][ T9602] IPVS: starting estimator thread 0... [ 144.618632][ T9832] hsr0 speed is unknown, defaulting to 1000 [ 144.628703][ T9832] hsr0 speed is unknown, defaulting to 1000 [ 144.635882][ T9832] hsr0 speed is unknown, defaulting to 1000 [ 144.644670][ T9832] hsr0 speed is unknown, defaulting to 1000 [ 144.653405][ T9832] hsr0 speed is unknown, defaulting to 1000 [ 144.698173][ T9840] xt_socket: unknown flags 0x50 [ 144.721409][ T9840] veth0: entered promiscuous mode [ 144.726646][ T9835] IPVS: using max 37 ests per chain, 88800 per kthread [ 144.727420][ T9840] __nla_validate_parse: 21 callbacks suppressed [ 144.727436][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1200'. [ 144.785311][ T9846] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 144.800835][ T9846] veth1: entered promiscuous mode [ 144.809649][ T9846] bond0: (slave veth1): Enslaving as a backup interface with a down link [ 144.854732][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1202'. [ 144.915006][ T9853] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1204'. [ 144.929671][ T9853] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1204'. [ 145.007849][ T9856] bond5: entered promiscuous mode [ 145.013436][ T9856] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.041441][ T9856] 8021q: adding VLAN 0 to HW filter on device bond6 [ 145.051632][ T9856] bond5: (slave bond6): making interface the new active one [ 145.059051][ T9856] bond6: entered promiscuous mode [ 145.065278][ T9856] bond5: (slave bond6): Enslaving as an active interface with an up link [ 145.125220][ T9811] veth0: left promiscuous mode [ 145.505983][ T9897] batadv_slave_0: entered promiscuous mode [ 145.512238][ T9897] batadv_slave_0: entered allmulticast mode [ 145.715003][ T9917] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1223'. [ 145.855344][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 145.856391][ T9930] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1229'. [ 145.876116][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1229'. [ 145.901134][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fddc400: rx timeout, send abort [ 145.909498][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880794c4000: rx timeout, send abort [ 145.917869][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802fddc400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 145.932326][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880794c4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 145.984719][ T9938] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1233'. [ 146.039174][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 146.511504][ T9601] IPVS: starting estimator thread 0... [ 146.576155][ T9996] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 146.622610][ T9989] IPVS: using max 38 ests per chain, 91200 per kthread [ 146.638269][T10002] Bluetooth: MGMT ver 1.23 [ 147.671578][T10071] syzkaller0: entered promiscuous mode [ 147.693351][T10071] syzkaller0: entered allmulticast mode [ 147.727115][T10087] validate_nla: 11 callbacks suppressed [ 147.727135][T10087] netlink: 'syz.2.1278': attribute type 1 has an invalid length. [ 147.917299][T10095] gtp0: entered promiscuous mode [ 147.925456][T10095] gtp0: entered allmulticast mode [ 147.945420][T10095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.962837][T10096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.634642][T10146] tipc: Enabled bearer , priority 0 [ 148.645873][T10146] syzkaller0: entered promiscuous mode [ 148.662226][T10146] syzkaller0: entered allmulticast mode [ 148.682283][T10146] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 148.708799][T10146] tipc: Resetting bearer [ 148.719574][T10153] netlink: 'syz.2.1303': attribute type 1 has an invalid length. [ 148.741585][T10153] bond7: entered promiscuous mode [ 148.747172][T10153] 8021q: adding VLAN 0 to HW filter on device bond7 [ 148.758136][T10145] tipc: Resetting bearer [ 148.766187][T10145] tipc: Disabling bearer [ 148.782917][T10153] 8021q: adding VLAN 0 to HW filter on device bond7 [ 148.789875][T10153] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 148.800932][T10153] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 148.814374][T10153] bond7: (slave wireguard0): making interface the new active one [ 148.824716][T10153] wireguard0: entered promiscuous mode [ 148.831830][T10153] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 149.015885][T10175] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 149.023548][T10175] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 149.059210][T10180] netlink: 'syz.0.1311': attribute type 1 has an invalid length. [ 149.091545][T10188] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 149.260025][T10205] netlink: 'syz.4.1317': attribute type 10 has an invalid length. [ 149.268266][T10205] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 149.285294][T10205] warn_alloc: 1 callbacks suppressed [ 149.285313][T10205] syz.4.1317: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 149.306170][T10205] CPU: 0 UID: 0 PID: 10205 Comm: syz.4.1317 Not tainted syzkaller #0 PREEMPT(full) [ 149.306200][T10205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.306212][T10205] Call Trace: [ 149.306220][T10205] [ 149.306228][T10205] dump_stack_lvl+0x189/0x250 [ 149.306259][T10205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.306282][T10205] ? __pfx__printk+0x10/0x10 [ 149.306308][T10205] ? lock_release+0x4b/0x3e0 [ 149.306337][T10205] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 149.306361][T10205] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 149.306385][T10205] warn_alloc+0x214/0x310 [ 149.306414][T10205] ? stack_depot_save_flags+0x40/0x860 [ 149.306441][T10205] ? __pfx_warn_alloc+0x10/0x10 [ 149.306470][T10205] ? kasan_save_track+0x4f/0x80 [ 149.306493][T10205] ? xskq_create+0x56/0x170 [ 149.306532][T10205] ? xsk_init_queue+0xb0/0x110 [ 149.306555][T10205] ? xsk_setsockopt+0x4dc/0x8d0 [ 149.306577][T10205] ? do_sock_setsockopt+0x17c/0x1b0 [ 149.306594][T10205] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 149.306611][T10205] ? do_syscall_64+0xfa/0x3b0 [ 149.306638][T10205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.306662][T10205] __vmalloc_node_range_noprof+0x125/0x12f0 [ 149.306704][T10205] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 149.306732][T10205] ? xsk_setsockopt+0x462/0x8d0 [ 149.306757][T10205] ? __kasan_kmalloc+0x93/0xb0 [ 149.306783][T10205] vmalloc_user_noprof+0xad/0xf0 [ 149.306811][T10205] ? xskq_create+0xbf/0x170 [ 149.306835][T10205] xskq_create+0xbf/0x170 [ 149.306862][T10205] xsk_init_queue+0xb0/0x110 [ 149.306887][T10205] xsk_setsockopt+0x4dc/0x8d0 [ 149.306912][T10205] ? __pfx_xsk_setsockopt+0x10/0x10 [ 149.306935][T10205] ? __pfx_aa_sk_perm+0x10/0x10 [ 149.306963][T10205] ? lock_release+0x4b/0x3e0 [ 149.306990][T10205] ? aa_sock_opt_perm+0xff/0x1b0 [ 149.307008][T10205] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 149.307029][T10205] ? __pfx_xsk_setsockopt+0x10/0x10 [ 149.307053][T10205] do_sock_setsockopt+0x17c/0x1b0 [ 149.307073][T10205] __x64_sys_setsockopt+0x13f/0x1b0 [ 149.307094][T10205] do_syscall_64+0xfa/0x3b0 [ 149.307122][T10205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.307140][T10205] ? clear_bhb_loop+0x60/0xb0 [ 149.307162][T10205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.307180][T10205] RIP: 0033:0x7fe08038ebe9 [ 149.307197][T10205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.307214][T10205] RSP: 002b:00007fe081118038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 149.307236][T10205] RAX: ffffffffffffffda RBX: 00007fe0805b5fa0 RCX: 00007fe08038ebe9 [ 149.307251][T10205] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 149.307262][T10205] RBP: 00007fe080411e19 R08: 0000000000000004 R09: 0000000000000000 [ 149.307274][T10205] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.307286][T10205] R13: 00007fe0805b6038 R14: 00007fe0805b5fa0 R15: 00007fff142c8248 [ 149.307308][T10205] [ 149.307388][T10205] Mem-Info: [ 149.615479][T10205] active_anon:3658 inactive_anon:0 isolated_anon:0 [ 149.615479][T10205] active_file:3464 inactive_file:39850 isolated_file:0 [ 149.615479][T10205] unevictable:768 dirty:132 writeback:0 [ 149.615479][T10205] slab_reclaimable:12180 slab_unreclaimable:98401 [ 149.615479][T10205] mapped:29047 shmem:1358 pagetables:1109 [ 149.615479][T10205] sec_pagetables:0 bounce:0 [ 149.615479][T10205] kernel_misc_reclaimable:0 [ 149.615479][T10205] free:1329205 free_pcp:14957 free_cma:0 [ 149.667813][T10205] Node 0 active_anon:14532kB inactive_anon:0kB active_file:13856kB inactive_file:159192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116188kB dirty:528kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12384kB pagetables:4380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 149.680426][T10232] 1{X: renamed from 30{X (while UP) [ 149.702377][T10205] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 149.740362][T10235] __nla_validate_parse: 21 callbacks suppressed [ 149.740381][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 149.758128][T10232] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 149.762179][T10205] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.836866][T10205] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 149.843251][T10205] Node 0 DMA32 free:1421100kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14388kB inactive_anon:0kB active_file:13856kB inactive_file:157612kB unevictable:1536kB writepending:528kB present:3129332kB managed:2557456kB mlocked:0kB bounce:0kB free_pcp:41292kB local_pcp:20804kB free_cma:0kB [ 149.854279][T10235] dummy0: entered promiscuous mode [ 149.882487][T10235] batadv_slave_1: entered promiscuous mode [ 149.916880][T10205] lowmem_reserve[]: 0 0 1 1 1 [ 149.921773][T10205] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 149.967773][T10205] lowmem_reserve[]: 0 0 0 0 0 [ 149.973538][T10205] Node 1 Normal free:3880148kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20384kB local_pcp:13536kB free_cma:0kB [ 149.979347][T10245] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1326'. [ 150.020615][T10205] lowmem_reserve[]: 0 0 0 0 0 [ 150.027650][T10205] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 150.042255][T10205] Node 0 DMA32: 1818*4kB (UME) 1032*8kB (UM) 288*16kB (UM) 584*32kB (UM) 59*64kB (UME) 23*128kB (UME) 16*256kB (ME) 9*512kB (UM) 5*1024kB (UME) 3*2048kB (UME) 331*4096kB (M) = 1421288kB [ 150.060994][T10205] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 150.120496][T10205] Node 1 Normal: 215*4kB (UME) 65*8kB (UME) 51*16kB (UME) 70*32kB (UME) 18*64kB (UME) 8*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3880148kB [ 150.160306][T10260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1331'. [ 150.203624][T10205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.234600][T10205] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.236654][T10260] netlink: 'syz.0.1331': attribute type 7 has an invalid length. [ 150.248114][T10205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.264363][T10205] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.274107][T10205] 44670 total pagecache pages [ 150.278943][T10205] 0 pages in swap cache [ 150.323776][T10260] netlink: 'syz.0.1331': attribute type 8 has an invalid length. [ 150.331649][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1331'. [ 150.337906][T10277] netlink: 'syz.1.1334': attribute type 10 has an invalid length. [ 150.355764][T10205] Free swap = 124996kB [ 150.360056][T10205] Total swap = 124996kB [ 150.365025][T10276] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 150.394218][T10205] 2097051 pages RAM [ 150.398080][T10205] 0 pages HighMem/MovableOnly [ 150.415570][T10205] 425661 pages reserved [ 150.419889][T10205] 0 pages cma reserved [ 150.498146][T10288] nbd: must specify an index to disconnect [ 150.630923][T10303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.749533][T10319] pim6reg: entered allmulticast mode [ 150.787298][T10322] netlink: 'syz.3.1352': attribute type 23 has an invalid length. [ 150.821852][T10319] pim6reg: left allmulticast mode [ 150.831134][T10325] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1350'. [ 150.986517][T10334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.048394][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1359'. [ 151.185894][T10355] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1363'. [ 151.225730][T10358] openvswitch: netlink: Missing key (keys=40, expected=100) [ 152.110892][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1378'. [ 152.186615][T10417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1380'. [ 152.209625][T10417] netlink: 'syz.4.1380': attribute type 7 has an invalid length. [ 152.214529][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1382'. [ 152.274077][T10420] netlink: 'syz.3.1382': attribute type 1 has an invalid length. [ 152.277024][T10430] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 152.290603][T10430] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 152.311032][T10430] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 152.846100][T10486] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 153.101336][T10506] pim6reg1: entered promiscuous mode [ 153.107694][T10506] pim6reg1: entered allmulticast mode [ 153.315991][T10528] validate_nla: 5 callbacks suppressed [ 153.316019][T10528] netlink: 'syz.3.1421': attribute type 33 has an invalid length. [ 153.472386][T10537] macvlan0: entered promiscuous mode [ 153.477764][T10537] macvlan0: entered allmulticast mode [ 153.485147][T10537] veth1_to_bond: entered promiscuous mode [ 153.490934][T10537] veth1_to_bond: entered allmulticast mode [ 153.523628][T10537] team0: Port device macvlan0 added [ 153.539075][T10543] macsec1: entered promiscuous mode [ 153.559325][T10543] bridge0: entered promiscuous mode [ 153.567305][T10543] bridge0: port 3(macsec1) entered blocking state [ 153.574440][T10543] bridge0: port 3(macsec1) entered disabled state [ 153.581161][T10543] macsec1: entered allmulticast mode [ 153.586637][T10543] bridge0: entered allmulticast mode [ 153.594017][T10543] macsec1: left allmulticast mode [ 153.599198][T10543] bridge0: left allmulticast mode [ 153.605278][T10543] bridge0: left promiscuous mode [ 153.618460][T10546] netlink: 'syz.4.1427': attribute type 10 has an invalid length. [ 153.627155][T10546] batman_adv: batadv0: Removing interface: wlan1 [ 153.636136][T10546] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 153.961470][T10570] netlink: 'syz.2.1436': attribute type 7 has an invalid length. [ 153.978436][T10570] bond0: entered promiscuous mode [ 153.985631][T10570] bond_slave_0: entered promiscuous mode [ 153.991868][T10570] bond_slave_1: entered promiscuous mode [ 154.001117][T10570] bond0: left promiscuous mode [ 154.006848][T10570] bond_slave_0: left promiscuous mode [ 154.013004][T10570] bond_slave_1: left promiscuous mode [ 154.240796][T10592] nbd: device at index 2 is going down [ 154.464990][T10611] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 154.509360][T10611] team0: Device ip6gre2 is of different type [ 154.720006][T10635] syz.2.1452 uses old SIOCAX25GETINFO [ 154.779423][T10635] __nla_validate_parse: 17 callbacks suppressed [ 154.779444][T10635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1452'. [ 154.798271][T10636] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1452'. [ 154.799970][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1454'. [ 154.810376][T10645] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 154.991141][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1458'. [ 155.084871][T10675] wg1 speed is unknown, defaulting to 1000 [ 155.091866][T10675] hsr0 speed is unknown, defaulting to 1000 [ 155.339088][T10701] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 155.426551][T10711] netlink: 'syz.1.1472': attribute type 10 has an invalid length. [ 155.438965][T10711] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 155.477499][T10713] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1473'. [ 155.516038][T10718] pim6reg1: entered promiscuous mode [ 155.521425][T10718] pim6reg1: entered allmulticast mode [ 155.730774][T10731] netlink: 'syz.1.1479': attribute type 4 has an invalid length. [ 155.787095][T10737] netlink: 'syz.3.1481': attribute type 10 has an invalid length. [ 155.860280][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1483'. [ 155.997846][T10754] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 156.060700][T10764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1491'. [ 156.309662][T10785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1497'. [ 156.561458][T10816] netlink: 'syz.1.1509': attribute type 1 has an invalid length. [ 156.601775][T10816] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1509'. [ 156.649810][T10823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1513'. [ 156.886374][T10844] netlink: 'syz.3.1520': attribute type 12 has an invalid length. [ 157.447549][ T62] syzkaller0: tun_net_xmit 76 [ 157.452753][ T62] syzkaller0: tun_net_xmit 48 [ 157.472405][ T9602] syzkaller0: tun_net_xmit 76 [ 157.500633][T10885] Bluetooth: MGMT ver 1.23 [ 157.661130][T10901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.724843][T10903] netdevsim netdevsim2: Direct firmware load for /. failed with error -2 [ 157.733956][T10903] netdevsim netdevsim2: Falling back to sysfs fallback for: /. [ 157.735169][T10905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.756535][T10905] netlink: 'syz.1.1542': attribute type 10 has an invalid length. [ 157.767523][T10905] team0: Port device geneve0 added [ 157.773471][ T2986] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.784299][ T2986] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.794189][ T2986] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.805352][ T2986] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 157.846853][T10909] netlink: 'syz.1.1544': attribute type 1 has an invalid length. [ 157.864985][T10909] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.996712][T10909] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 158.058739][T10909] bond1: (slave veth5): Enslaving as an active interface with a down link [ 159.117921][T11036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.196977][T11041] atomic_op ffff888079cc8998 conn xmit_atomic 0000000000000000 [ 159.302109][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 159.547758][T11077] netem: unknown loss type 0 [ 159.554551][T11077] netem: change failed [ 160.129514][T11120] veth1_to_bond: left allmulticast mode [ 160.142888][T11120] veth1_to_bond: left promiscuous mode [ 160.151844][T11120] team0 (unregistering): Port device macvlan0 removed [ 160.428771][T11148] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 160.995029][T11188] netlink: 'syz.4.1633': attribute type 16 has an invalid length. [ 161.007792][T11188] netlink: 'syz.4.1633': attribute type 17 has an invalid length. [ 161.029598][T11176] netlink: 'syz.2.1628': attribute type 1 has an invalid length. [ 161.074925][T11176] __nla_validate_parse: 26 callbacks suppressed [ 161.074946][T11176] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1628'. [ 161.087493][T11188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.183437][T11188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.334623][T11201] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.429293][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1640'. [ 161.439068][T11219] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 161.446889][T11219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.534041][T11201] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.626197][T11234] 8021q: VLANs not supported on syzkaller1 [ 161.708443][T11201] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.795860][T11201] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.881649][T11067] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.896942][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 161.907272][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.938787][ T6982] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.976339][ T2986] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.360711][T11292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.399172][T11300] team0: No ports can be present during mode change [ 183.425145][T11292] netlink: 'syz.2.1660': attribute type 10 has an invalid length. [ 183.434059][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'. [ 183.449200][T11300] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1662'. [ 183.460478][T11292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.481590][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'. [ 183.498917][T11305] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1660'. [ 183.530312][T11292] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 183.547616][T11305] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 183.566642][ T30] audit: type=1800 audit(1756316498.053:2): pid=11315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1664" name="memory.events" dev="tmpfs" ino=2010 res=0 errno=0 [ 183.675734][T11315] team0: Device vti0 is of different type [ 183.988283][T11352] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1673'. [ 184.000806][T11352] netlink: 'syz.1.1673': attribute type 18 has an invalid length. [ 184.390522][T11393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1683'. [ 184.457950][T11403] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1682'. [ 184.483320][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1684'. [ 184.539500][T11407] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1684'. [ 184.597773][T11414] wg1 speed is unknown, defaulting to 1000 [ 184.606207][T11414] hsr0 speed is unknown, defaulting to 1000 [ 184.832259][T11435] `: (slave bond1): Error -95 calling ndo_bpf [ 184.841532][T11435] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 184.862352][ T9570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.898891][T11441] `: (slave bond1): Error -95 calling ndo_bpf [ 184.911150][T11441] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 184.926983][ T9602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.254309][T11463] netlink: 'syz.4.1697': attribute type 1 has an invalid length. [ 185.317778][T11463] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.364956][T11472] FAULT_INJECTION: forcing a failure. [ 185.364956][T11472] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 185.380193][T11472] CPU: 1 UID: 0 PID: 11472 Comm: syz.1.1700 Not tainted syzkaller #0 PREEMPT(full) [ 185.380222][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.380233][T11472] Call Trace: [ 185.380241][T11472] [ 185.380248][T11472] dump_stack_lvl+0x189/0x250 [ 185.380277][T11472] ? __pfx____ratelimit+0x10/0x10 [ 185.380304][T11472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.380325][T11472] ? __pfx__printk+0x10/0x10 [ 185.380351][T11472] ? lock_acquire+0x5f/0x360 [ 185.380381][T11472] should_fail_ex+0x414/0x560 [ 185.380407][T11472] prepare_alloc_pages+0x213/0x610 [ 185.380429][T11472] __alloc_frozen_pages_noprof+0x123/0x370 [ 185.380450][T11472] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 185.380477][T11472] ? css_rstat_updated+0x23a/0x4f0 [ 185.380497][T11472] ? policy_nodemask+0x27c/0x720 [ 185.380521][T11472] ? __pfx_lru_add+0x10/0x10 [ 185.380540][T11472] alloc_pages_mpol+0x232/0x4a0 [ 185.380568][T11472] folio_alloc_mpol_noprof+0x39/0x70 [ 185.380595][T11472] shmem_alloc_and_add_folio+0x447/0xf60 [ 185.380623][T11472] ? filemap_get_entry+0xad/0x2f0 [ 185.380639][T11472] ? filemap_get_entry+0xad/0x2f0 [ 185.380657][T11472] ? shmem_huge_global_enabled+0x174/0x3a0 [ 185.380680][T11472] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 185.380709][T11472] ? shmem_allowable_huge_orders+0x414/0x420 [ 185.380736][T11472] shmem_get_folio_gfp+0x59d/0x1660 [ 185.380768][T11472] shmem_fault+0x179/0x390 [ 185.380799][T11472] __do_fault+0x138/0x390 [ 185.380827][T11472] __handle_mm_fault+0x1847/0x5440 [ 185.380859][T11472] ? __pfx___handle_mm_fault+0x10/0x10 [ 185.380884][T11472] ? rcu_is_watching+0x15/0xb0 [ 185.380908][T11472] ? follow_page_pte+0x7ef/0x13e0 [ 185.380937][T11472] handle_mm_fault+0x40a/0x8e0 [ 185.380966][T11472] __get_user_pages+0x1699/0x2ce0 [ 185.381006][T11472] __gup_longterm_locked+0x7fb/0x1660 [ 185.381042][T11472] gup_fast_fallback+0x1e6a/0x2010 [ 185.381082][T11472] ? __pfx_gup_fast_fallback+0x10/0x10 [ 185.381106][T11472] ? rcu_is_watching+0x15/0xb0 [ 185.381126][T11472] ? is_valid_gup_args+0x11f/0x200 [ 185.381150][T11472] ? pin_user_pages_fast+0x4d/0xb0 [ 185.381173][T11472] rds_cmsg_rdma_args+0x8f4/0x1240 [ 185.381207][T11472] ? rcu_is_watching+0x15/0xb0 [ 185.381225][T11472] rds_cmsg_send+0x33d/0x5c0 [ 185.381258][T11472] rds_sendmsg+0x1129/0x1f00 [ 185.381293][T11472] ? __pfx_rds_sendmsg+0x10/0x10 [ 185.381319][T11472] ? aa_sk_perm+0x81e/0x950 [ 185.381347][T11472] ? __might_fault+0xb0/0x130 [ 185.381372][T11472] ? __pfx_aa_sk_perm+0x10/0x10 [ 185.381397][T11472] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 185.381421][T11472] ? aa_sock_msg_perm+0xf1/0x1d0 [ 185.381439][T11472] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.381460][T11472] ? __pfx_rds_sendmsg+0x10/0x10 [ 185.381496][T11472] __sock_sendmsg+0x21c/0x270 [ 185.381523][T11472] ____sys_sendmsg+0x505/0x830 [ 185.381546][T11472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.381571][T11472] ? import_iovec+0x74/0xa0 [ 185.381594][T11472] ___sys_sendmsg+0x21f/0x2a0 [ 185.381613][T11472] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.381649][T11472] ? __fget_files+0x2a/0x420 [ 185.381676][T11472] ? __fget_files+0x3a0/0x420 [ 185.381708][T11472] __x64_sys_sendmsg+0x19b/0x260 [ 185.381730][T11472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.381755][T11472] ? __pfx_ksys_write+0x10/0x10 [ 185.381778][T11472] ? rcu_is_watching+0x15/0xb0 [ 185.381799][T11472] ? rcu_is_watching+0x15/0xb0 [ 185.381820][T11472] do_syscall_64+0xfa/0x3b0 [ 185.381847][T11472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.381867][T11472] ? clear_bhb_loop+0x60/0xb0 [ 185.381894][T11472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.381912][T11472] RIP: 0033:0x7f1d96b8ebe9 [ 185.381930][T11472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.381947][T11472] RSP: 002b:00007f1d97a3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.381971][T11472] RAX: ffffffffffffffda RBX: 00007f1d96db5fa0 RCX: 00007f1d96b8ebe9 [ 185.381985][T11472] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000004 [ 185.381998][T11472] RBP: 00007f1d97a3e090 R08: 0000000000000000 R09: 0000000000000000 [ 185.382011][T11472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.382023][T11472] R13: 00007f1d96db6038 R14: 00007f1d96db5fa0 R15: 00007ffdd599e278 [ 185.382045][T11472] [ 185.383121][T11470] bond4: (slave veth7): Enslaving as an active interface with a down link [ 185.492114][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.838809][T11474] netlink: 'syz.3.1701': attribute type 3 has an invalid length. [ 185.846789][T11474] netlink: 'syz.3.1701': attribute type 3 has an invalid length. [ 185.855199][T11474] netlink: 'syz.3.1701': attribute type 3 has an invalid length. [ 185.864178][T11474] netlink: 'syz.3.1701': attribute type 3 has an invalid length. [ 185.872215][T11474] netlink: 'syz.3.1701': attribute type 3 has an invalid length. [ 185.880471][T11474] netlink: 'syz.3.1701': attribute type 3 has an invalid length. [ 185.888544][T11474] netlink: 'syz.3.1701': attribute type 3 has an invalid length. [ 185.908892][T11463] veth9: entered promiscuous mode [ 185.917057][T11463] bond4: (slave veth9): Enslaving as an active interface with a down link [ 186.134588][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1711'. [ 186.183869][T11512] FAULT_INJECTION: forcing a failure. [ 186.183869][T11512] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 186.199937][T11512] CPU: 1 UID: 0 PID: 11512 Comm: syz.3.1712 Not tainted syzkaller #0 PREEMPT(full) [ 186.199970][T11512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.199983][T11512] Call Trace: [ 186.199991][T11512] [ 186.199999][T11512] dump_stack_lvl+0x189/0x250 [ 186.200027][T11512] ? __pfx____ratelimit+0x10/0x10 [ 186.200054][T11512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.200075][T11512] ? __pfx__printk+0x10/0x10 [ 186.200102][T11512] ? lock_acquire+0x5f/0x360 [ 186.200133][T11512] should_fail_ex+0x414/0x560 [ 186.200160][T11512] prepare_alloc_pages+0x213/0x610 [ 186.200183][T11512] __alloc_frozen_pages_noprof+0x123/0x370 [ 186.200205][T11512] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 186.200223][T11512] ? css_rstat_updated+0x23a/0x4f0 [ 186.200245][T11512] ? policy_nodemask+0x27c/0x720 [ 186.200269][T11512] ? __pfx_lru_add+0x10/0x10 [ 186.200288][T11512] alloc_pages_mpol+0x232/0x4a0 [ 186.200317][T11512] folio_alloc_mpol_noprof+0x39/0x70 [ 186.200344][T11512] shmem_alloc_and_add_folio+0x447/0xf60 [ 186.200373][T11512] ? filemap_get_entry+0xad/0x2f0 [ 186.200389][T11512] ? filemap_get_entry+0xad/0x2f0 [ 186.200409][T11512] ? shmem_huge_global_enabled+0x174/0x3a0 [ 186.200432][T11512] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 186.200460][T11512] ? shmem_allowable_huge_orders+0x414/0x420 [ 186.200486][T11512] shmem_get_folio_gfp+0x59d/0x1660 [ 186.200535][T11512] shmem_fault+0x179/0x390 [ 186.200566][T11512] __do_fault+0x138/0x390 [ 186.200595][T11512] __handle_mm_fault+0x1847/0x5440 [ 186.200627][T11512] ? __pfx___handle_mm_fault+0x10/0x10 [ 186.200652][T11512] ? rcu_is_watching+0x15/0xb0 [ 186.200676][T11512] ? follow_page_pte+0x7ef/0x13e0 [ 186.200704][T11512] handle_mm_fault+0x40a/0x8e0 [ 186.200732][T11512] __get_user_pages+0x1699/0x2ce0 [ 186.200771][T11512] __gup_longterm_locked+0x7fb/0x1660 [ 186.200806][T11512] gup_fast_fallback+0x1e6a/0x2010 [ 186.200844][T11512] ? __pfx_gup_fast_fallback+0x10/0x10 [ 186.200868][T11512] ? rcu_is_watching+0x15/0xb0 [ 186.200887][T11512] ? is_valid_gup_args+0x11f/0x200 [ 186.200912][T11512] ? pin_user_pages_fast+0x4d/0xb0 [ 186.200936][T11512] rds_cmsg_rdma_args+0x8f4/0x1240 [ 186.200977][T11512] ? rcu_is_watching+0x15/0xb0 [ 186.200997][T11512] rds_cmsg_send+0x33d/0x5c0 [ 186.201031][T11512] rds_sendmsg+0x1129/0x1f00 [ 186.201066][T11512] ? __pfx_rds_sendmsg+0x10/0x10 [ 186.201092][T11512] ? aa_sk_perm+0x81e/0x950 [ 186.201120][T11512] ? __might_fault+0xb0/0x130 [ 186.201145][T11512] ? __pfx_aa_sk_perm+0x10/0x10 [ 186.201169][T11512] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 186.201192][T11512] ? aa_sock_msg_perm+0xf1/0x1d0 [ 186.201210][T11512] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.201231][T11512] ? __pfx_rds_sendmsg+0x10/0x10 [ 186.201257][T11512] __sock_sendmsg+0x21c/0x270 [ 186.201282][T11512] ____sys_sendmsg+0x505/0x830 [ 186.201305][T11512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.201328][T11512] ? import_iovec+0x74/0xa0 [ 186.201351][T11512] ___sys_sendmsg+0x21f/0x2a0 [ 186.201371][T11512] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.201409][T11512] ? __fget_files+0x2a/0x420 [ 186.201437][T11512] ? __fget_files+0x3a0/0x420 [ 186.201469][T11512] __x64_sys_sendmsg+0x19b/0x260 [ 186.201491][T11512] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.201523][T11512] ? __pfx_ksys_write+0x10/0x10 [ 186.201546][T11512] ? rcu_is_watching+0x15/0xb0 [ 186.201567][T11512] ? rcu_is_watching+0x15/0xb0 [ 186.201587][T11512] do_syscall_64+0xfa/0x3b0 [ 186.201615][T11512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.201634][T11512] ? clear_bhb_loop+0x60/0xb0 [ 186.201656][T11512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.201675][T11512] RIP: 0033:0x7fd681f8ebe9 [ 186.201693][T11512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.201710][T11512] RSP: 002b:00007fd682d48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.201733][T11512] RAX: ffffffffffffffda RBX: 00007fd6821b5fa0 RCX: 00007fd681f8ebe9 [ 186.201748][T11512] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000004 [ 186.201760][T11512] RBP: 00007fd682d48090 R08: 0000000000000000 R09: 0000000000000000 [ 186.201772][T11512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.201784][T11512] R13: 00007fd6821b6038 R14: 00007fd6821b5fa0 R15: 00007fff01233d48 [ 186.201804][T11512] [ 186.699657][T11526] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 186.987925][T11556] FAULT_INJECTION: forcing a failure. [ 186.987925][T11556] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 187.004445][T11556] CPU: 0 UID: 0 PID: 11556 Comm: syz.0.1728 Not tainted syzkaller #0 PREEMPT(full) [ 187.004474][T11556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.004486][T11556] Call Trace: [ 187.004494][T11556] [ 187.004502][T11556] dump_stack_lvl+0x189/0x250 [ 187.004529][T11556] ? __pfx____ratelimit+0x10/0x10 [ 187.004557][T11556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.004579][T11556] ? __pfx__printk+0x10/0x10 [ 187.004605][T11556] ? lock_acquire+0x5f/0x360 [ 187.004636][T11556] should_fail_ex+0x414/0x560 [ 187.004663][T11556] prepare_alloc_pages+0x213/0x610 [ 187.004687][T11556] __alloc_frozen_pages_noprof+0x123/0x370 [ 187.004707][T11556] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 187.004725][T11556] ? css_rstat_updated+0x23a/0x4f0 [ 187.004747][T11556] ? policy_nodemask+0x27c/0x720 [ 187.004773][T11556] ? __pfx_lru_add+0x10/0x10 [ 187.004793][T11556] alloc_pages_mpol+0x232/0x4a0 [ 187.004821][T11556] folio_alloc_mpol_noprof+0x39/0x70 [ 187.004848][T11556] shmem_alloc_and_add_folio+0x447/0xf60 [ 187.004876][T11556] ? filemap_get_entry+0xad/0x2f0 [ 187.004893][T11556] ? filemap_get_entry+0xad/0x2f0 [ 187.004912][T11556] ? shmem_huge_global_enabled+0x174/0x3a0 [ 187.004934][T11556] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 187.004963][T11556] ? shmem_allowable_huge_orders+0x414/0x420 [ 187.004989][T11556] shmem_get_folio_gfp+0x59d/0x1660 [ 187.005021][T11556] shmem_fault+0x179/0x390 [ 187.005051][T11556] __do_fault+0x138/0x390 [ 187.005079][T11556] __handle_mm_fault+0x1847/0x5440 [ 187.005110][T11556] ? __pfx___handle_mm_fault+0x10/0x10 [ 187.005135][T11556] ? rcu_is_watching+0x15/0xb0 [ 187.005165][T11556] ? follow_page_pte+0x7ef/0x13e0 [ 187.005193][T11556] handle_mm_fault+0x40a/0x8e0 [ 187.005231][T11556] __get_user_pages+0x1699/0x2ce0 [ 187.005269][T11556] __gup_longterm_locked+0x7fb/0x1660 [ 187.005305][T11556] gup_fast_fallback+0x1e6a/0x2010 [ 187.005343][T11556] ? __pfx_gup_fast_fallback+0x10/0x10 [ 187.005366][T11556] ? rcu_is_watching+0x15/0xb0 [ 187.005385][T11556] ? is_valid_gup_args+0x11f/0x200 [ 187.005408][T11556] ? pin_user_pages_fast+0x4d/0xb0 [ 187.005432][T11556] rds_cmsg_rdma_args+0x8f4/0x1240 [ 187.005464][T11556] ? rcu_is_watching+0x15/0xb0 [ 187.005484][T11556] rds_cmsg_send+0x33d/0x5c0 [ 187.005515][T11556] rds_sendmsg+0x1129/0x1f00 [ 187.005549][T11556] ? __pfx_rds_sendmsg+0x10/0x10 [ 187.005573][T11556] ? aa_sk_perm+0x81e/0x950 [ 187.005601][T11556] ? __might_fault+0xb0/0x130 [ 187.005625][T11556] ? __pfx_aa_sk_perm+0x10/0x10 [ 187.005649][T11556] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 187.005672][T11556] ? aa_sock_msg_perm+0xf1/0x1d0 [ 187.005690][T11556] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.005710][T11556] ? __pfx_rds_sendmsg+0x10/0x10 [ 187.005737][T11556] __sock_sendmsg+0x21c/0x270 [ 187.005763][T11556] ____sys_sendmsg+0x505/0x830 [ 187.005785][T11556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.005808][T11556] ? import_iovec+0x74/0xa0 [ 187.005831][T11556] ___sys_sendmsg+0x21f/0x2a0 [ 187.005851][T11556] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.005887][T11556] ? __fget_files+0x2a/0x420 [ 187.005915][T11556] ? __fget_files+0x3a0/0x420 [ 187.005948][T11556] __x64_sys_sendmsg+0x19b/0x260 [ 187.005969][T11556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.005993][T11556] ? __pfx_ksys_write+0x10/0x10 [ 187.006016][T11556] ? rcu_is_watching+0x15/0xb0 [ 187.006037][T11556] ? rcu_is_watching+0x15/0xb0 [ 187.006057][T11556] do_syscall_64+0xfa/0x3b0 [ 187.006085][T11556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.006104][T11556] ? clear_bhb_loop+0x60/0xb0 [ 187.006125][T11556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.006144][T11556] RIP: 0033:0x7fe72118ebe9 [ 187.006162][T11556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.006180][T11556] RSP: 002b:00007fe721ffa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.006202][T11556] RAX: ffffffffffffffda RBX: 00007fe7213b5fa0 RCX: 00007fe72118ebe9 [ 187.006225][T11556] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000004 [ 187.006238][T11556] RBP: 00007fe721ffa090 R08: 0000000000000000 R09: 0000000000000000 [ 187.006251][T11556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.006262][T11556] R13: 00007fe7213b6038 R14: 00007fe7213b5fa0 R15: 00007ffdb1fe3e18 [ 187.006285][T11556] [ 187.500012][T11563] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 187.528078][T11561] syzkaller1: entered promiscuous mode [ 187.538654][T11561] syzkaller1: entered allmulticast mode [ 187.555535][ T2986] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.565129][ T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.587714][ T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.611253][T11567] batadv1: entered allmulticast mode [ 187.690043][ T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.834620][T11593] FAULT_INJECTION: forcing a failure. [ 187.834620][T11593] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 187.848592][T11593] CPU: 0 UID: 0 PID: 11593 Comm: syz.2.1740 Not tainted syzkaller #0 PREEMPT(full) [ 187.848623][T11593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.848635][T11593] Call Trace: [ 187.848642][T11593] [ 187.848651][T11593] dump_stack_lvl+0x189/0x250 [ 187.848681][T11593] ? __pfx____ratelimit+0x10/0x10 [ 187.848708][T11593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.848731][T11593] ? __pfx__printk+0x10/0x10 [ 187.848758][T11593] ? lock_acquire+0x5f/0x360 [ 187.848790][T11593] should_fail_ex+0x414/0x560 [ 187.848817][T11593] prepare_alloc_pages+0x213/0x610 [ 187.848840][T11593] __alloc_frozen_pages_noprof+0x123/0x370 [ 187.848862][T11593] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 187.848881][T11593] ? css_rstat_updated+0x23a/0x4f0 [ 187.848902][T11593] ? policy_nodemask+0x27c/0x720 [ 187.848928][T11593] ? __pfx_lru_add+0x10/0x10 [ 187.848949][T11593] alloc_pages_mpol+0x232/0x4a0 [ 187.848978][T11593] folio_alloc_mpol_noprof+0x39/0x70 [ 187.849006][T11593] shmem_alloc_and_add_folio+0x447/0xf60 [ 187.849036][T11593] ? filemap_get_entry+0xad/0x2f0 [ 187.849053][T11593] ? filemap_get_entry+0xad/0x2f0 [ 187.849073][T11593] ? shmem_huge_global_enabled+0x174/0x3a0 [ 187.849098][T11593] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 187.849126][T11593] ? shmem_allowable_huge_orders+0x414/0x420 [ 187.849154][T11593] shmem_get_folio_gfp+0x59d/0x1660 [ 187.849187][T11593] shmem_fault+0x179/0x390 [ 187.849227][T11593] __do_fault+0x138/0x390 [ 187.849256][T11593] __handle_mm_fault+0x1847/0x5440 [ 187.849289][T11593] ? __pfx___handle_mm_fault+0x10/0x10 [ 187.849313][T11593] ? rcu_is_watching+0x15/0xb0 [ 187.849337][T11593] ? follow_page_pte+0x7ef/0x13e0 [ 187.849367][T11593] handle_mm_fault+0x40a/0x8e0 [ 187.849396][T11593] __get_user_pages+0x1699/0x2ce0 [ 187.849437][T11593] __gup_longterm_locked+0x7fb/0x1660 [ 187.849472][T11593] gup_fast_fallback+0x1e6a/0x2010 [ 187.849513][T11593] ? __pfx_gup_fast_fallback+0x10/0x10 [ 187.849538][T11593] ? rcu_is_watching+0x15/0xb0 [ 187.849558][T11593] ? is_valid_gup_args+0x11f/0x200 [ 187.849583][T11593] ? pin_user_pages_fast+0x4d/0xb0 [ 187.849606][T11593] rds_cmsg_rdma_args+0x8f4/0x1240 [ 187.849640][T11593] ? rcu_is_watching+0x15/0xb0 [ 187.849660][T11593] rds_cmsg_send+0x33d/0x5c0 [ 187.849694][T11593] rds_sendmsg+0x1129/0x1f00 [ 187.849729][T11593] ? __pfx_rds_sendmsg+0x10/0x10 [ 187.849755][T11593] ? aa_sk_perm+0x81e/0x950 [ 187.849784][T11593] ? __might_fault+0xb0/0x130 [ 187.849808][T11593] ? __pfx_aa_sk_perm+0x10/0x10 [ 187.849834][T11593] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 187.849857][T11593] ? aa_sock_msg_perm+0xf1/0x1d0 [ 187.849876][T11593] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.849897][T11593] ? __pfx_rds_sendmsg+0x10/0x10 [ 187.849924][T11593] __sock_sendmsg+0x21c/0x270 [ 187.849951][T11593] ____sys_sendmsg+0x505/0x830 [ 187.849973][T11593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.849998][T11593] ? import_iovec+0x74/0xa0 [ 187.850022][T11593] ___sys_sendmsg+0x21f/0x2a0 [ 187.850043][T11593] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.850081][T11593] ? __fget_files+0x2a/0x420 [ 187.850108][T11593] ? __fget_files+0x3a0/0x420 [ 187.850141][T11593] __x64_sys_sendmsg+0x19b/0x260 [ 187.850162][T11593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.850187][T11593] ? __pfx_ksys_write+0x10/0x10 [ 187.850218][T11593] ? rcu_is_watching+0x15/0xb0 [ 187.850239][T11593] ? rcu_is_watching+0x15/0xb0 [ 187.850259][T11593] do_syscall_64+0xfa/0x3b0 [ 187.850287][T11593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.850307][T11593] ? clear_bhb_loop+0x60/0xb0 [ 187.850328][T11593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.850348][T11593] RIP: 0033:0x7f526698ebe9 [ 187.850366][T11593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.850384][T11593] RSP: 002b:00007f52677c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.850407][T11593] RAX: ffffffffffffffda RBX: 00007f5266bb5fa0 RCX: 00007f526698ebe9 [ 187.850423][T11593] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000004 [ 187.850436][T11593] RBP: 00007f52677c8090 R08: 0000000000000000 R09: 0000000000000000 [ 187.850448][T11593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.850460][T11593] R13: 00007f5266bb6038 R14: 00007f5266bb5fa0 R15: 00007ffe6d305a28 [ 187.850483][T11593] [ 188.416606][T11610] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 188.434076][T11611] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 188.497744][T11616] __nla_validate_parse: 10 callbacks suppressed [ 188.497772][T11616] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1751'. [ 188.514954][T11621] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1749'. [ 188.587942][T11630] validate_nla: 46 callbacks suppressed [ 188.587958][T11630] netlink: 'syz.2.1754': attribute type 1 has an invalid length. [ 188.626961][T11630] bond10: entered promiscuous mode [ 188.632951][T11630] 8021q: adding VLAN 0 to HW filter on device bond10 [ 188.699362][T11630] 8021q: adding VLAN 0 to HW filter on device bond11 [ 188.708131][T11630] bond10: (slave bond11): making interface the new active one [ 188.715960][T11630] bond11: entered promiscuous mode [ 188.721836][T11630] bond10: (slave bond11): Enslaving as an active interface with an up link [ 188.800216][T11638] syzkaller0: entered promiscuous mode [ 188.807575][T11638] syzkaller0: entered allmulticast mode [ 188.817883][T11637] tipc: Enabled bearer , priority 0 [ 188.922045][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'. [ 188.931784][T11637] tipc: Resetting bearer [ 188.955047][T11637] tipc: Disabling bearer [ 189.065563][T11677] netlink: 'syz.0.1768': attribute type 8 has an invalid length. [ 189.246486][T11689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1773'. [ 189.266160][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1775'. [ 189.305814][T11704] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1776'. [ 189.315154][T11704] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1776'. [ 189.327627][T11704] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1776'. [ 189.516270][T11708] team0: Device vti1 is of different type [ 189.625367][T11716] tipc: Enabled bearer , priority 0 [ 189.649297][T11717] syzkaller0: entered promiscuous mode [ 189.654961][T11717] syzkaller0: entered allmulticast mode [ 189.663041][T11713] tipc: Enabled bearer , priority 0 [ 189.704651][T11716] tipc: Resetting bearer [ 189.740357][T11716] tipc: Disabling bearer [ 189.767065][T11712] tipc: Resetting bearer [ 189.839065][T11736] netlink: 'syz.2.1790': attribute type 1 has an invalid length. [ 189.848973][T11736] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1790'. [ 189.861197][T11736] netlink: 'syz.2.1790': attribute type 1 has an invalid length. [ 189.881200][T11738] FAULT_INJECTION: forcing a failure. [ 189.881200][T11738] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 189.896542][T11738] CPU: 1 UID: 0 PID: 11738 Comm: syz.0.1791 Not tainted syzkaller #0 PREEMPT(full) [ 189.896572][T11738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.896585][T11738] Call Trace: [ 189.896592][T11738] [ 189.896599][T11738] dump_stack_lvl+0x189/0x250 [ 189.896627][T11738] ? __pfx____ratelimit+0x10/0x10 [ 189.896654][T11738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.896676][T11738] ? __pfx__printk+0x10/0x10 [ 189.896702][T11738] ? lock_acquire+0x5f/0x360 [ 189.896732][T11738] should_fail_ex+0x414/0x560 [ 189.896758][T11738] prepare_alloc_pages+0x213/0x610 [ 189.896780][T11738] __alloc_frozen_pages_noprof+0x123/0x370 [ 189.896801][T11738] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 189.896819][T11738] ? css_rstat_updated+0x23a/0x4f0 [ 189.896841][T11738] ? policy_nodemask+0x27c/0x720 [ 189.896866][T11738] ? __pfx_lru_add+0x10/0x10 [ 189.896886][T11738] alloc_pages_mpol+0x232/0x4a0 [ 189.896914][T11738] folio_alloc_mpol_noprof+0x39/0x70 [ 189.896938][T11738] shmem_alloc_and_add_folio+0x447/0xf60 [ 189.896968][T11738] ? filemap_get_entry+0xad/0x2f0 [ 189.896983][T11738] ? filemap_get_entry+0xad/0x2f0 [ 189.897004][T11738] ? shmem_huge_global_enabled+0x174/0x3a0 [ 189.897027][T11738] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 189.897054][T11738] ? shmem_allowable_huge_orders+0x414/0x420 [ 189.897080][T11738] shmem_get_folio_gfp+0x59d/0x1660 [ 189.897111][T11738] shmem_fault+0x179/0x390 [ 189.897141][T11738] __do_fault+0x138/0x390 [ 189.897169][T11738] __handle_mm_fault+0x1847/0x5440 [ 189.897202][T11738] ? __pfx___handle_mm_fault+0x10/0x10 [ 189.897225][T11738] ? rcu_is_watching+0x15/0xb0 [ 189.897249][T11738] ? follow_page_pte+0x7ef/0x13e0 [ 189.897278][T11738] handle_mm_fault+0x40a/0x8e0 [ 189.897306][T11738] __get_user_pages+0x1699/0x2ce0 [ 189.897345][T11738] __gup_longterm_locked+0x7fb/0x1660 [ 189.897381][T11738] gup_fast_fallback+0x1e6a/0x2010 [ 189.897419][T11738] ? __pfx_gup_fast_fallback+0x10/0x10 [ 189.897444][T11738] ? rcu_is_watching+0x15/0xb0 [ 189.897471][T11738] ? is_valid_gup_args+0x11f/0x200 [ 189.897495][T11738] ? pin_user_pages_fast+0x4d/0xb0 [ 189.897519][T11738] rds_cmsg_rdma_args+0x8f4/0x1240 [ 189.897553][T11738] ? rcu_is_watching+0x15/0xb0 [ 189.897572][T11738] rds_cmsg_send+0x33d/0x5c0 [ 189.897606][T11738] rds_sendmsg+0x1129/0x1f00 [ 189.897640][T11738] ? __pfx_rds_sendmsg+0x10/0x10 [ 189.897663][T11738] ? aa_sk_perm+0x81e/0x950 [ 189.897691][T11738] ? __might_fault+0xb0/0x130 [ 189.897714][T11738] ? __pfx_aa_sk_perm+0x10/0x10 [ 189.897738][T11738] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 189.897759][T11738] ? aa_sock_msg_perm+0xf1/0x1d0 [ 189.897775][T11738] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 189.897795][T11738] ? __pfx_rds_sendmsg+0x10/0x10 [ 189.897821][T11738] __sock_sendmsg+0x21c/0x270 [ 189.897851][T11738] ____sys_sendmsg+0x505/0x830 [ 189.897873][T11738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.897895][T11738] ? import_iovec+0x74/0xa0 [ 189.897917][T11738] ___sys_sendmsg+0x21f/0x2a0 [ 189.897938][T11738] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.897974][T11738] ? __fget_files+0x2a/0x420 [ 189.898002][T11738] ? __fget_files+0x3a0/0x420 [ 189.898033][T11738] __x64_sys_sendmsg+0x19b/0x260 [ 189.898054][T11738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.898078][T11738] ? __pfx_ksys_write+0x10/0x10 [ 189.898102][T11738] ? rcu_is_watching+0x15/0xb0 [ 189.898122][T11738] ? rcu_is_watching+0x15/0xb0 [ 189.898143][T11738] do_syscall_64+0xfa/0x3b0 [ 189.898171][T11738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.898191][T11738] ? clear_bhb_loop+0x60/0xb0 [ 189.898212][T11738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.898231][T11738] RIP: 0033:0x7fe72118ebe9 [ 189.898249][T11738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.898268][T11738] RSP: 002b:00007fe721ffa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.898290][T11738] RAX: ffffffffffffffda RBX: 00007fe7213b5fa0 RCX: 00007fe72118ebe9 [ 189.898306][T11738] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000004 [ 189.898319][T11738] RBP: 00007fe721ffa090 R08: 0000000000000000 R09: 0000000000000000 [ 189.898333][T11738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.898345][T11738] R13: 00007fe7213b6038 R14: 00007fe7213b5fa0 R15: 00007ffdb1fe3e18 [ 189.898368][T11738] [ 190.411778][T11712] tipc: Disabling bearer [ 190.463053][ T2986] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 190.500573][T11756] vlan4: entered allmulticast mode [ 190.508626][T11756] bond0: entered allmulticast mode [ 190.684968][T11776] netlink: 'syz.0.1803': attribute type 11 has an invalid length. [ 190.693409][T11776] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1803'. [ 190.813569][T11789] netlink: 'syz.1.1809': attribute type 10 has an invalid length. [ 190.841581][T11789] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 190.856115][T11790] tipc: Enabled bearer , priority 0 [ 190.864218][T11790] syzkaller0: entered promiscuous mode [ 190.879200][T11790] syzkaller0: entered allmulticast mode [ 190.890780][T11790] tipc: Resetting bearer [ 190.910706][T11790] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 190.955015][T11783] tipc: Resetting bearer [ 190.971110][T11783] tipc: Disabling bearer [ 191.027501][T11811] sock: sock_timestamping_bind_phc: sock not bind to device [ 191.163125][ T49] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.193336][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.201859][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.258689][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.462606][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.468735][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 191.474947][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 191.481029][ T5183] Bluetooth: hci1: command 0x0406 tx timeout [ 191.517405][T11858] netlink: 'syz.0.1831': attribute type 2 has an invalid length. [ 191.559056][ T9601] wg1 speed is unknown, defaulting to 1000 [ 191.566622][ T9601] infiniband syz2: ib_query_port failed (-19) [ 191.942258][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 192.454600][T11920] netlink: 'syz.0.1853': attribute type 1 has an invalid length. [ 192.924350][T11967] netlink: 'syz.0.1867': attribute type 33 has an invalid length. [ 192.953166][T11975] netlink: 'syz.0.1867': attribute type 11 has an invalid length. [ 193.119767][T11985] netlink: 'syz.2.1872': attribute type 23 has an invalid length. [ 193.409650][T12012] netlink: 'syz.2.1880': attribute type 8 has an invalid length. [ 193.446708][T12014] tipc: Enabled bearer , priority 0 [ 193.459722][T12014] tipc: Resetting bearer [ 193.470692][T12013] tipc: Disabling bearer [ 193.535054][T12020] __nla_validate_parse: 21 callbacks suppressed [ 193.535077][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1882'. [ 194.324973][T12081] validate_nla: 1 callbacks suppressed [ 194.324995][T12081] netlink: 'syz.1.1901': attribute type 1 has an invalid length. [ 194.349899][T12079] netlink: 'syz.3.1900': attribute type 12 has an invalid length. [ 194.360423][T12079] netlink: 'syz.3.1900': attribute type 1 has an invalid length. [ 194.398474][T12081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.455377][T12081] bond2: (slave ip6gretap2): making interface the new active one [ 194.464365][T12081] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 194.475241][T12090] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20000 [ 194.505499][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.568813][T12081] bridge0: Device is already in use. [ 194.696672][T12110] veth1_to_bond: entered allmulticast mode [ 194.719830][T12111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1911'. [ 194.736093][T12115] netlink: 'syz.3.1912': attribute type 10 has an invalid length. [ 194.749558][T12111] veth1_to_bond (unregistering): left allmulticast mode [ 194.804887][T12123] netlink: 'syz.3.1912': attribute type 10 has an invalid length. [ 194.835306][T12115] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.877918][T12115] `: (slave team0): Enslaving as an active interface with an up link [ 194.952621][T12123] `: (slave syz_tun): Enslaving as an active interface with an up link [ 194.993160][T12124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.000864][T12128] tipc: Enabled bearer , priority 0 [ 195.088707][T12128] tipc: Disabling bearer [ 195.105136][T12150] netlink: 'syz.3.1920': attribute type 1 has an invalid length. [ 195.250781][T12164] netlink: 'syz.0.1924': attribute type 4 has an invalid length. [ 195.260437][T12164] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1924'. [ 195.348530][T12168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1926'. [ 195.414356][T12170] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1927'. [ 195.427866][T12170] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1927'. [ 195.505814][T12174] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 195.533805][T12182] FAULT_INJECTION: forcing a failure. [ 195.533805][T12182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 195.557575][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1933'. [ 195.565975][T12182] CPU: 1 UID: 0 PID: 12182 Comm: syz.4.1931 Not tainted syzkaller #0 PREEMPT(full) [ 195.566004][T12182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.566015][T12182] Call Trace: [ 195.566022][T12182] [ 195.566029][T12182] dump_stack_lvl+0x189/0x250 [ 195.566055][T12182] ? __pfx____ratelimit+0x10/0x10 [ 195.566080][T12182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.566109][T12182] ? __pfx__printk+0x10/0x10 [ 195.566133][T12182] ? lock_acquire+0x5f/0x360 [ 195.566161][T12182] should_fail_ex+0x414/0x560 [ 195.566185][T12182] prepare_alloc_pages+0x213/0x610 [ 195.566206][T12182] __alloc_frozen_pages_noprof+0x123/0x370 [ 195.566225][T12182] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 195.566242][T12182] ? css_rstat_updated+0x23a/0x4f0 [ 195.566262][T12182] ? policy_nodemask+0x27c/0x720 [ 195.566285][T12182] ? __pfx_lru_add+0x10/0x10 [ 195.566304][T12182] alloc_pages_mpol+0x232/0x4a0 [ 195.566330][T12182] folio_alloc_mpol_noprof+0x39/0x70 [ 195.566355][T12182] shmem_alloc_and_add_folio+0x447/0xf60 [ 195.566382][T12182] ? filemap_get_entry+0xad/0x2f0 [ 195.566398][T12182] ? filemap_get_entry+0xad/0x2f0 [ 195.566416][T12182] ? shmem_huge_global_enabled+0x174/0x3a0 [ 195.566438][T12182] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 195.566463][T12182] ? shmem_allowable_huge_orders+0x414/0x420 [ 195.566487][T12182] shmem_get_folio_gfp+0x59d/0x1660 [ 195.566516][T12182] shmem_fault+0x179/0x390 [ 195.566543][T12182] __do_fault+0x138/0x390 [ 195.566570][T12182] __handle_mm_fault+0x1847/0x5440 [ 195.566600][T12182] ? __pfx___handle_mm_fault+0x10/0x10 [ 195.566622][T12182] ? rcu_is_watching+0x15/0xb0 [ 195.566643][T12182] ? follow_page_pte+0x7ef/0x13e0 [ 195.566671][T12182] handle_mm_fault+0x40a/0x8e0 [ 195.566700][T12182] __get_user_pages+0x1699/0x2ce0 [ 195.566736][T12182] __gup_longterm_locked+0x7fb/0x1660 [ 195.566771][T12182] gup_fast_fallback+0x1e6a/0x2010 [ 195.566810][T12182] ? __pfx_gup_fast_fallback+0x10/0x10 [ 195.566835][T12182] ? rcu_is_watching+0x15/0xb0 [ 195.566856][T12182] ? is_valid_gup_args+0x11f/0x200 [ 195.566879][T12182] ? pin_user_pages_fast+0x4d/0xb0 [ 195.566903][T12182] rds_cmsg_rdma_args+0x8f4/0x1240 [ 195.566937][T12182] ? rcu_is_watching+0x15/0xb0 [ 195.566956][T12182] rds_cmsg_send+0x33d/0x5c0 [ 195.567012][T12182] rds_sendmsg+0x1129/0x1f00 [ 195.567046][T12182] ? __pfx_rds_sendmsg+0x10/0x10 [ 195.567071][T12182] ? aa_sk_perm+0x81e/0x950 [ 195.567108][T12182] ? __might_fault+0xb0/0x130 [ 195.567131][T12182] ? __pfx_aa_sk_perm+0x10/0x10 [ 195.567156][T12182] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 195.567180][T12182] ? aa_sock_msg_perm+0xf1/0x1d0 [ 195.567198][T12182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.567218][T12182] ? __pfx_rds_sendmsg+0x10/0x10 [ 195.567245][T12182] __sock_sendmsg+0x21c/0x270 [ 195.567270][T12182] ____sys_sendmsg+0x505/0x830 [ 195.567291][T12182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.567315][T12182] ? import_iovec+0x74/0xa0 [ 195.567338][T12182] ___sys_sendmsg+0x21f/0x2a0 [ 195.567357][T12182] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.567394][T12182] ? __fget_files+0x2a/0x420 [ 195.567421][T12182] ? __fget_files+0x3a0/0x420 [ 195.567453][T12182] __x64_sys_sendmsg+0x19b/0x260 [ 195.567474][T12182] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.567498][T12182] ? __pfx_ksys_write+0x10/0x10 [ 195.567521][T12182] ? rcu_is_watching+0x15/0xb0 [ 195.567541][T12182] ? rcu_is_watching+0x15/0xb0 [ 195.567561][T12182] do_syscall_64+0xfa/0x3b0 [ 195.567589][T12182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.567608][T12182] ? clear_bhb_loop+0x60/0xb0 [ 195.567630][T12182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.567648][T12182] RIP: 0033:0x7fe08038ebe9 [ 195.567667][T12182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.567684][T12182] RSP: 002b:00007fe081118038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.567708][T12182] RAX: ffffffffffffffda RBX: 00007fe0805b5fa0 RCX: 00007fe08038ebe9 [ 195.567723][T12182] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000004 [ 195.567736][T12182] RBP: 00007fe081118090 R08: 0000000000000000 R09: 0000000000000000 [ 195.567749][T12182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.567761][T12182] R13: 00007fe0805b6038 R14: 00007fe0805b5fa0 R15: 00007fff142c8248 [ 195.567784][T12182] [ 195.617891][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1930'. [ 196.111385][T12194] tipc: Enabled bearer , priority 0 [ 196.197841][T12194] syzkaller0: entered promiscuous mode [ 196.214917][T12194] syzkaller0: entered allmulticast mode [ 196.227629][T12194] tipc: Resetting bearer [ 196.253076][ T6985] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.286847][ T6985] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.315102][T12193] tipc: Resetting bearer [ 196.327991][T12207] netlink: 'syz.0.1940': attribute type 83 has an invalid length. [ 196.458369][T12193] tipc: Disabling bearer [ 196.487971][ T6985] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.501204][T12216] bridge: RTM_NEWNEIGH with invalid ether address [ 196.517111][T12223] macvtap2: entered allmulticast mode [ 196.523990][T12223] veth0_macvtap: entered allmulticast mode [ 196.539397][ T6985] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.600607][T12227] FAULT_INJECTION: forcing a failure. [ 196.600607][T12227] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 196.630445][T12227] CPU: 0 UID: 0 PID: 12227 Comm: syz.2.1945 Not tainted syzkaller #0 PREEMPT(full) [ 196.630475][T12227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.630488][T12227] Call Trace: [ 196.630496][T12227] [ 196.630503][T12227] dump_stack_lvl+0x189/0x250 [ 196.630538][T12227] ? __pfx____ratelimit+0x10/0x10 [ 196.630565][T12227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.630587][T12227] ? __pfx__printk+0x10/0x10 [ 196.630613][T12227] ? lock_acquire+0x5f/0x360 [ 196.630644][T12227] should_fail_ex+0x414/0x560 [ 196.630671][T12227] prepare_alloc_pages+0x213/0x610 [ 196.630694][T12227] __alloc_frozen_pages_noprof+0x123/0x370 [ 196.630715][T12227] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 196.630734][T12227] ? css_rstat_updated+0x23a/0x4f0 [ 196.630756][T12227] ? policy_nodemask+0x27c/0x720 [ 196.630781][T12227] ? __pfx_lru_add+0x10/0x10 [ 196.630801][T12227] alloc_pages_mpol+0x232/0x4a0 [ 196.630829][T12227] folio_alloc_mpol_noprof+0x39/0x70 [ 196.630857][T12227] shmem_alloc_and_add_folio+0x447/0xf60 [ 196.630887][T12227] ? filemap_get_entry+0xad/0x2f0 [ 196.630904][T12227] ? filemap_get_entry+0xad/0x2f0 [ 196.630924][T12227] ? shmem_huge_global_enabled+0x174/0x3a0 [ 196.630947][T12227] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 196.630974][T12227] ? shmem_allowable_huge_orders+0x414/0x420 [ 196.631000][T12227] shmem_get_folio_gfp+0x59d/0x1660 [ 196.631031][T12227] shmem_fault+0x179/0x390 [ 196.631061][T12227] __do_fault+0x138/0x390 [ 196.631091][T12227] __handle_mm_fault+0x1847/0x5440 [ 196.631123][T12227] ? __pfx___handle_mm_fault+0x10/0x10 [ 196.631148][T12227] ? rcu_is_watching+0x15/0xb0 [ 196.631172][T12227] ? follow_page_pte+0x7ef/0x13e0 [ 196.631201][T12227] handle_mm_fault+0x40a/0x8e0 [ 196.631230][T12227] __get_user_pages+0x1699/0x2ce0 [ 196.631268][T12227] __gup_longterm_locked+0x7fb/0x1660 [ 196.631304][T12227] gup_fast_fallback+0x1e6a/0x2010 [ 196.631342][T12227] ? __pfx_gup_fast_fallback+0x10/0x10 [ 196.631375][T12227] ? rcu_is_watching+0x15/0xb0 [ 196.631395][T12227] ? is_valid_gup_args+0x11f/0x200 [ 196.631417][T12227] ? pin_user_pages_fast+0x4d/0xb0 [ 196.631441][T12227] rds_cmsg_rdma_args+0x8f4/0x1240 [ 196.631475][T12227] ? rcu_is_watching+0x15/0xb0 [ 196.631495][T12227] rds_cmsg_send+0x33d/0x5c0 [ 196.631529][T12227] rds_sendmsg+0x1129/0x1f00 [ 196.631563][T12227] ? __pfx_rds_sendmsg+0x10/0x10 [ 196.631588][T12227] ? aa_sk_perm+0x81e/0x950 [ 196.631616][T12227] ? __might_fault+0xb0/0x130 [ 196.631641][T12227] ? __pfx_aa_sk_perm+0x10/0x10 [ 196.631666][T12227] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 196.631690][T12227] ? aa_sock_msg_perm+0xf1/0x1d0 [ 196.631708][T12227] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.631728][T12227] ? __pfx_rds_sendmsg+0x10/0x10 [ 196.631756][T12227] __sock_sendmsg+0x21c/0x270 [ 196.631782][T12227] ____sys_sendmsg+0x505/0x830 [ 196.631805][T12227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.631829][T12227] ? import_iovec+0x74/0xa0 [ 196.631852][T12227] ___sys_sendmsg+0x21f/0x2a0 [ 196.631878][T12227] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.631909][T12227] ? __fget_files+0x2a/0x420 [ 196.631938][T12227] ? __fget_files+0x3a0/0x420 [ 196.631970][T12227] __x64_sys_sendmsg+0x19b/0x260 [ 196.631991][T12227] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.632014][T12227] ? __pfx_ksys_write+0x10/0x10 [ 196.632038][T12227] ? rcu_is_watching+0x15/0xb0 [ 196.632059][T12227] ? rcu_is_watching+0x15/0xb0 [ 196.632080][T12227] do_syscall_64+0xfa/0x3b0 [ 196.632108][T12227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.632126][T12227] ? clear_bhb_loop+0x60/0xb0 [ 196.632148][T12227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.632166][T12227] RIP: 0033:0x7f526698ebe9 [ 196.632184][T12227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.632202][T12227] RSP: 002b:00007f52677c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.632226][T12227] RAX: ffffffffffffffda RBX: 00007f5266bb5fa0 RCX: 00007f526698ebe9 [ 196.632241][T12227] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000004 [ 196.632253][T12227] RBP: 00007f52677c8090 R08: 0000000000000000 R09: 0000000000000000 [ 196.632265][T12227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.632277][T12227] R13: 00007f5266bb6038 R14: 00007f5266bb5fa0 R15: 00007ffe6d305a28 [ 196.632299][T12227] [ 196.641927][T12234] netlink: 'syz.0.1940': attribute type 3 has an invalid length. [ 196.757529][T12237] netlink: 'syz.4.1948': attribute type 1 has an invalid length. [ 197.085090][T12237] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1948'. [ 197.175346][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1953'. [ 197.489327][T12273] FAULT_INJECTION: forcing a failure. [ 197.489327][T12273] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.505780][T12273] CPU: 1 UID: 0 PID: 12273 Comm: syz.1.1959 Not tainted syzkaller #0 PREEMPT(full) [ 197.505810][T12273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.505823][T12273] Call Trace: [ 197.505831][T12273] [ 197.505839][T12273] dump_stack_lvl+0x189/0x250 [ 197.505868][T12273] ? __pfx____ratelimit+0x10/0x10 [ 197.505895][T12273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.505918][T12273] ? __pfx__printk+0x10/0x10 [ 197.505944][T12273] ? lock_acquire+0x5f/0x360 [ 197.505974][T12273] should_fail_ex+0x414/0x560 [ 197.506001][T12273] prepare_alloc_pages+0x213/0x610 [ 197.506023][T12273] __alloc_frozen_pages_noprof+0x123/0x370 [ 197.506045][T12273] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 197.506063][T12273] ? css_rstat_updated+0x23a/0x4f0 [ 197.506085][T12273] ? policy_nodemask+0x27c/0x720 [ 197.506110][T12273] ? __pfx_lru_add+0x10/0x10 [ 197.506131][T12273] alloc_pages_mpol+0x232/0x4a0 [ 197.506158][T12273] folio_alloc_mpol_noprof+0x39/0x70 [ 197.506184][T12273] shmem_alloc_and_add_folio+0x447/0xf60 [ 197.506212][T12273] ? filemap_get_entry+0xad/0x2f0 [ 197.506229][T12273] ? filemap_get_entry+0xad/0x2f0 [ 197.506248][T12273] ? shmem_huge_global_enabled+0x174/0x3a0 [ 197.506270][T12273] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 197.506298][T12273] ? shmem_allowable_huge_orders+0x414/0x420 [ 197.506324][T12273] shmem_get_folio_gfp+0x59d/0x1660 [ 197.506353][T12273] shmem_fault+0x179/0x390 [ 197.506383][T12273] __do_fault+0x138/0x390 [ 197.506420][T12273] __handle_mm_fault+0x1847/0x5440 [ 197.506452][T12273] ? __pfx___handle_mm_fault+0x10/0x10 [ 197.506476][T12273] ? rcu_is_watching+0x15/0xb0 [ 197.506500][T12273] ? follow_page_pte+0x7ef/0x13e0 [ 197.506528][T12273] handle_mm_fault+0x40a/0x8e0 [ 197.506557][T12273] __get_user_pages+0x1699/0x2ce0 [ 197.506596][T12273] __gup_longterm_locked+0x7fb/0x1660 [ 197.506632][T12273] gup_fast_fallback+0x1e6a/0x2010 [ 197.506672][T12273] ? __pfx_gup_fast_fallback+0x10/0x10 [ 197.506697][T12273] ? rcu_is_watching+0x15/0xb0 [ 197.506718][T12273] ? is_valid_gup_args+0x11f/0x200 [ 197.506742][T12273] ? pin_user_pages_fast+0x4d/0xb0 [ 197.506767][T12273] rds_cmsg_rdma_args+0x8f4/0x1240 [ 197.506801][T12273] ? rcu_is_watching+0x15/0xb0 [ 197.506821][T12273] rds_cmsg_send+0x33d/0x5c0 [ 197.506856][T12273] rds_sendmsg+0x1129/0x1f00 [ 197.506890][T12273] ? __pfx_rds_sendmsg+0x10/0x10 [ 197.506916][T12273] ? aa_sk_perm+0x81e/0x950 [ 197.506945][T12273] ? __might_fault+0xb0/0x130 [ 197.506995][T12273] ? __pfx_aa_sk_perm+0x10/0x10 [ 197.507020][T12273] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 197.507044][T12273] ? aa_sock_msg_perm+0xf1/0x1d0 [ 197.507063][T12273] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.507084][T12273] ? __pfx_rds_sendmsg+0x10/0x10 [ 197.507112][T12273] __sock_sendmsg+0x21c/0x270 [ 197.507138][T12273] ____sys_sendmsg+0x505/0x830 [ 197.507159][T12273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.507183][T12273] ? import_iovec+0x74/0xa0 [ 197.507207][T12273] ___sys_sendmsg+0x21f/0x2a0 [ 197.507227][T12273] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.507263][T12273] ? __fget_files+0x2a/0x420 [ 197.507290][T12273] ? __fget_files+0x3a0/0x420 [ 197.507323][T12273] __x64_sys_sendmsg+0x19b/0x260 [ 197.507345][T12273] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.507369][T12273] ? __pfx_ksys_write+0x10/0x10 [ 197.507393][T12273] ? rcu_is_watching+0x15/0xb0 [ 197.507421][T12273] ? rcu_is_watching+0x15/0xb0 [ 197.507439][T12273] do_syscall_64+0xfa/0x3b0 [ 197.507467][T12273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.507487][T12273] ? clear_bhb_loop+0x60/0xb0 [ 197.507508][T12273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.507527][T12273] RIP: 0033:0x7f1d96b8ebe9 [ 197.507546][T12273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.507564][T12273] RSP: 002b:00007f1d97a3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.507587][T12273] RAX: ffffffffffffffda RBX: 00007f1d96db5fa0 RCX: 00007f1d96b8ebe9 [ 197.507602][T12273] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000004 [ 197.507615][T12273] RBP: 00007f1d97a3e090 R08: 0000000000000000 R09: 0000000000000000 [ 197.507628][T12273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.507640][T12273] R13: 00007f1d96db6038 R14: 00007f1d96db5fa0 R15: 00007ffdd599e278 [ 197.507662][T12273] [ 197.541294][T12277] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 197.835826][T12278] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 198.003217][T12277] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 198.013400][T12286] ipvlan2: entered promiscuous mode [ 198.033253][T12290] ipvlan1: entered promiscuous mode [ 198.051954][T12290] ipvlan1: entered allmulticast mode [ 198.077630][T12290] veth0_vlan: entered allmulticast mode [ 198.090878][T12290] bridge0: port 1(ipvlan1) entered blocking state [ 198.103387][T12290] bridge0: port 1(ipvlan1) entered disabled state [ 198.111759][T12290] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 198.139994][ T2986] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.151301][ T2986] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.162176][ T5984] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.252594][ T9601] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.421383][T12331] FAULT_INJECTION: forcing a failure. [ 198.421383][T12331] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 198.441507][T12331] CPU: 1 UID: 0 PID: 12331 Comm: syz.0.1973 Not tainted syzkaller #0 PREEMPT(full) [ 198.441556][T12331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.441569][T12331] Call Trace: [ 198.441576][T12331] [ 198.441585][T12331] dump_stack_lvl+0x189/0x250 [ 198.441614][T12331] ? __pfx____ratelimit+0x10/0x10 [ 198.441641][T12331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.441663][T12331] ? __pfx__printk+0x10/0x10 [ 198.441688][T12331] ? lock_acquire+0x5f/0x360 [ 198.441718][T12331] should_fail_ex+0x414/0x560 [ 198.441745][T12331] prepare_alloc_pages+0x213/0x610 [ 198.441767][T12331] __alloc_frozen_pages_noprof+0x123/0x370 [ 198.441788][T12331] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 198.441806][T12331] ? css_rstat_updated+0x23a/0x4f0 [ 198.441828][T12331] ? policy_nodemask+0x27c/0x720 [ 198.441853][T12331] ? __pfx_lru_add+0x10/0x10 [ 198.441885][T12331] alloc_pages_mpol+0x232/0x4a0 [ 198.441912][T12331] folio_alloc_mpol_noprof+0x39/0x70 [ 198.441939][T12331] shmem_alloc_and_add_folio+0x447/0xf60 [ 198.441968][T12331] ? filemap_get_entry+0xad/0x2f0 [ 198.441986][T12331] ? filemap_get_entry+0xad/0x2f0 [ 198.442004][T12331] ? shmem_huge_global_enabled+0x174/0x3a0 [ 198.442027][T12331] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 198.442054][T12331] ? shmem_allowable_huge_orders+0x414/0x420 [ 198.442080][T12331] shmem_get_folio_gfp+0x59d/0x1660 [ 198.442110][T12331] shmem_fault+0x179/0x390 [ 198.442140][T12331] __do_fault+0x138/0x390 [ 198.442168][T12331] __handle_mm_fault+0x1847/0x5440 [ 198.442200][T12331] ? __pfx___handle_mm_fault+0x10/0x10 [ 198.442222][T12331] ? rcu_is_watching+0x15/0xb0 [ 198.442247][T12331] ? follow_page_pte+0x7ef/0x13e0 [ 198.442273][T12331] handle_mm_fault+0x40a/0x8e0 [ 198.442301][T12331] __get_user_pages+0x1699/0x2ce0 [ 198.442338][T12331] __gup_longterm_locked+0x7fb/0x1660 [ 198.442384][T12331] gup_fast_fallback+0x1e6a/0x2010 [ 198.442422][T12331] ? __pfx_gup_fast_fallback+0x10/0x10 [ 198.442445][T12331] ? rcu_is_watching+0x15/0xb0 [ 198.442465][T12331] ? is_valid_gup_args+0x11f/0x200 [ 198.442487][T12331] ? pin_user_pages_fast+0x4d/0xb0 [ 198.442508][T12331] rds_cmsg_rdma_args+0x8f4/0x1240 [ 198.442540][T12331] ? rcu_is_watching+0x15/0xb0 [ 198.442560][T12331] rds_cmsg_send+0x33d/0x5c0 [ 198.442593][T12331] rds_sendmsg+0x1129/0x1f00 [ 198.442627][T12331] ? __pfx_rds_sendmsg+0x10/0x10 [ 198.442651][T12331] ? aa_sk_perm+0x81e/0x950 [ 198.442678][T12331] ? __might_fault+0xb0/0x130 [ 198.442702][T12331] ? __pfx_aa_sk_perm+0x10/0x10 [ 198.442727][T12331] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 198.442750][T12331] ? aa_sock_msg_perm+0xf1/0x1d0 [ 198.442767][T12331] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.442788][T12331] ? __pfx_rds_sendmsg+0x10/0x10 [ 198.442815][T12331] __sock_sendmsg+0x21c/0x270 [ 198.442840][T12331] ____sys_sendmsg+0x505/0x830 [ 198.442859][T12331] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.442881][T12331] ? import_iovec+0x74/0xa0 [ 198.442903][T12331] ___sys_sendmsg+0x21f/0x2a0 [ 198.442923][T12331] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.442956][T12331] ? __fget_files+0x2a/0x420 [ 198.442982][T12331] ? __fget_files+0x3a0/0x420 [ 198.443013][T12331] __x64_sys_sendmsg+0x19b/0x260 [ 198.443032][T12331] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.443055][T12331] ? __pfx_ksys_write+0x10/0x10 [ 198.443078][T12331] ? rcu_is_watching+0x15/0xb0 [ 198.443097][T12331] ? rcu_is_watching+0x15/0xb0 [ 198.443116][T12331] do_syscall_64+0xfa/0x3b0 [ 198.443144][T12331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.443162][T12331] ? clear_bhb_loop+0x60/0xb0 [ 198.443182][T12331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.443198][T12331] RIP: 0033:0x7fe72118ebe9 [ 198.443216][T12331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.443232][T12331] RSP: 002b:00007fe721ffa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.443254][T12331] RAX: ffffffffffffffda RBX: 00007fe7213b5fa0 RCX: 00007fe72118ebe9 [ 198.443266][T12331] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000004 [ 198.443277][T12331] RBP: 00007fe721ffa090 R08: 0000000000000000 R09: 0000000000000000 [ 198.443289][T12331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.443301][T12331] R13: 00007fe7213b6038 R14: 00007fe7213b5fa0 R15: 00007ffdb1fe3e18 [ 198.443322][T12331] [ 198.444967][T12329] bond0: (slave batadv0): Releasing backup interface [ 198.935146][T12329] bridge_slave_0: left allmulticast mode [ 198.946803][T12329] bridge_slave_0: left promiscuous mode [ 198.954522][T12329] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.990566][T12329] bridge_slave_1: left allmulticast mode [ 198.998883][T12329] bridge_slave_1: left promiscuous mode [ 199.005419][T12329] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.025418][T12329] bond0: (slave bond_slave_0): Releasing backup interface [ 199.045458][T12329] bond0: (slave bond_slave_1): Releasing backup interface [ 199.075362][T12329] team0: Port device team_slave_0 removed [ 199.100127][T12329] team0: Port device team_slave_1 removed [ 199.121421][T12329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.129559][T12329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.131361][T12350] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 199.145928][ T9601] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.147005][T12329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.161265][T12329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.203360][T12329] team0: Port device batadv1 removed [ 199.211716][T12329] bond3: (slave bond4): Releasing backup interface [ 199.220599][T12329] bond3: (slave bond4): the permanent HWaddr of slave - 3e:61:d1:8f:c9:9b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 199.242682][T12329] bond3: (slave gretap2): making interface the new active one [ 199.263273][T12329] bond3: (slave gretap2): Releasing backup interface [ 199.285077][T12329] bond5: (slave bond6): Releasing backup interface [ 199.291697][T12329] bond6: left promiscuous mode [ 199.310919][T12329] bond7: (slave wireguard0): Releasing backup interface [ 199.320773][T12329] wireguard0: left promiscuous mode [ 199.338019][T12329] bond10: (slave bond11): Releasing backup interface [ 199.344958][T12329] bond11: left promiscuous mode [ 199.384336][ T9570] hsr0 speed is unknown, defaulting to 1000 [ 199.428904][T12329] syz.2.1974 (12329) used greatest stack depth: 17576 bytes left [ 199.591447][T12367] __nla_validate_parse: 3 callbacks suppressed [ 199.591468][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1985'. [ 199.723778][T12367] hsr_slave_0 (unregistering): left promiscuous mode [ 199.857697][T12386] openvswitch: netlink: IP tunnel dst address not specified [ 199.934721][T12391] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 1, id = 0 [ 200.073430][T12400] validate_nla: 3 callbacks suppressed [ 200.073452][T12400] netlink: 'syz.4.1996': attribute type 83 has an invalid length. [ 200.111627][T12400] netlink: 'syz.4.1996': attribute type 24 has an invalid length. [ 200.144385][T12402] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 200.156509][T12402] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 200.164929][T12402] CPU: 0 UID: 0 PID: 12402 Comm: syz.1.1997 Not tainted syzkaller #0 PREEMPT(full) [ 200.174300][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.184364][T12402] RIP: 0010:rose_rt_ioctl+0x162/0x1250 [ 200.189845][T12402] Code: 3f 31 ff 44 89 fe e8 3d de 52 f7 45 85 ff 74 0a e8 33 db 52 f7 e9 76 02 00 00 48 8b 44 24 28 48 8d 50 10 49 89 d7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 48 89 54 24 20 0f 85 87 02 00 00 44 0f b6 22 [ 200.209464][T12402] RSP: 0018:ffffc9001a6cfae0 EFLAGS: 00010202 [ 200.215632][T12402] RAX: 0000000000000000 RBX: ffff888059b42000 RCX: 0000000000000002 [ 200.223614][T12402] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.231588][T12402] RBP: ffffc9001a6cfc10 R08: 0000000000000003 R09: 0000000000000004 [ 200.239569][T12402] R10: dffffc0000000000 R11: fffff520034d9f4c R12: dffffc0000000000 [ 200.247537][T12402] R13: dffffc0000000000 R14: ffff888031482380 R15: 0000000000000002 [ 200.255595][T12402] FS: 00007f1d97a3e6c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 200.264808][T12402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.271389][T12402] CR2: 0000200000000500 CR3: 0000000079622000 CR4: 00000000003526f0 [ 200.279365][T12402] Call Trace: [ 200.282659][T12402] [ 200.285594][T12402] ? __pfx_rose_rt_ioctl+0x10/0x10 [ 200.290716][T12402] ? bpf_lsm_capable+0x9/0x20 [ 200.295403][T12402] ? security_capable+0x7e/0x2e0 [ 200.300361][T12402] rose_ioctl+0x3ce/0x8b0 [ 200.304696][T12402] ? __pfx_rose_ioctl+0x10/0x10 [ 200.309551][T12402] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 200.314612][T12402] sock_do_ioctl+0xd9/0x300 [ 200.319127][T12402] ? __pfx_sock_do_ioctl+0x10/0x10 [ 200.324328][T12402] ? do_futex+0x333/0x420 [ 200.328696][T12402] ? file_init_path+0x434/0x590 [ 200.333552][T12402] sock_ioctl+0x576/0x790 [ 200.337884][T12402] ? lock_release+0x4b/0x3e0 [ 200.342481][T12402] ? __pfx_sock_ioctl+0x10/0x10 [ 200.347358][T12402] ? __fget_files+0x2a/0x420 [ 200.351963][T12402] ? __fget_files+0x3a0/0x420 [ 200.356657][T12402] ? __fget_files+0x2a/0x420 [ 200.361259][T12402] ? bpf_lsm_file_ioctl+0x9/0x20 [ 200.366199][T12402] ? __pfx_sock_ioctl+0x10/0x10 [ 200.371052][T12402] __se_sys_ioctl+0xfc/0x170 [ 200.375649][T12402] do_syscall_64+0xfa/0x3b0 [ 200.380164][T12402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.386247][T12402] ? clear_bhb_loop+0x60/0xb0 [ 200.390923][T12402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.396815][T12402] RIP: 0033:0x7f1d96b8ebe9 [ 200.401238][T12402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.420860][T12402] RSP: 002b:00007f1d97a3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.429276][T12402] RAX: ffffffffffffffda RBX: 00007f1d96db5fa0 RCX: 00007f1d96b8ebe9 [ 200.437248][T12402] RDX: 0000000000000000 RSI: 00000000000089e4 RDI: 0000000000000004 [ 200.445218][T12402] RBP: 00007f1d96c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 200.453191][T12402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.461287][T12402] R13: 00007f1d96db6038 R14: 00007f1d96db5fa0 R15: 00007ffdd599e278 [ 200.469266][T12402] [ 200.472284][T12402] Modules linked in: [ 200.476312][T12402] ---[ end trace 0000000000000000 ]--- [ 200.481797][T12402] RIP: 0010:rose_rt_ioctl+0x162/0x1250 [ 200.487330][T12402] Code: 3f 31 ff 44 89 fe e8 3d de 52 f7 45 85 ff 74 0a e8 33 db 52 f7 e9 76 02 00 00 48 8b 44 24 28 48 8d 50 10 49 89 d7 49 c1 ef 03 <43> 0f b6 04 2f 84 c0 48 89 54 24 20 0f 85 87 02 00 00 44 0f b6 22 [ 200.507385][T12402] RSP: 0018:ffffc9001a6cfae0 EFLAGS: 00010202 [ 200.513594][T12402] RAX: 0000000000000000 RBX: ffff888059b42000 RCX: 0000000000000002 [ 200.521964][T12402] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.529962][T12402] RBP: ffffc9001a6cfc10 R08: 0000000000000003 R09: 0000000000000004 [ 200.537986][T12402] R10: dffffc0000000000 R11: fffff520034d9f4c R12: dffffc0000000000 [ 200.546008][T12402] R13: dffffc0000000000 R14: ffff888031482380 R15: 0000000000000002 [ 200.554044][T12402] FS: 00007f1d97a3e6c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 200.563111][T12402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 200.569713][T12402] CR2: 0000200000000500 CR3: 0000000079622000 CR4: 00000000003526f0 [ 200.578043][T12402] Kernel panic - not syncing: Fatal exception in interrupt [ 200.585526][T12402] Kernel Offset: disabled [ 200.589869][T12402] Rebooting in 86400 seconds..